Guessing you cleared out the <installedpackages>section of the config backup before restoring. Though uPNP is in base now, its config is still under <installedpackages>. It restores fine where the settings are correctly in the restored config.</installedpackages></installedpackages>

@virgiliomi: The Monitor graphs don't provide that data anymore. RRD is not the most accurate way to be tracking total traffic anyway, as it loses accuracy as soon as 8 hours because it averages data to reduce the amount of data needed to be stored long-term. If you want to track this using RRD's data, you can add the "RRD Summary" package, which will add an item to the Status menu allowing you to see the RRD total traffic numbers with some basic settings. jdillard has been working on bringing vnstat over to the 2.3.x world as a more accurate way to track total traffic, providing graphs for a variety of time periods (I believe vnstat can show daily, weekly, and monthly graphs, though what he will have available, I don't know). A couple of his posts over in this thread include links to screenshots of the graphs. Ok sounds good, thanks for the info!

Am eagerly awaiting ntopng! Really would like to have the ability to track AND document activity of specific users

kpa - Thanks so much!

https://doc.pfsense.org/index.php/Remove_F1_Boot_Prompt

Thank You Guys, it worked !

Under 'System Logs/Firewall' you ought to be able to filter the log to help pinpoint the culprit. Otherwise, install Ntop and have a look at the traffic logs there. It should certainly show you which machine is behind the traffic you're seeing.

so after removing the pfsense virtual machine, I ended up having problems again with my pfsense router. my user logins kept changing back to defaults. I wasn't able to remote into my servers through the pfsense box, then I couldn't access the router via its external ip address. I decided to go back to my Cisco router. pfsense just wasn't stable for more than 3 weeks. I even did the update for 2.3.lastest. this product wasn't stable enough for my production environment. sorry for the bad review. Do you also install Ciscos iOS on oyur own hardware? And if this will be then not really fine working is Cisco then the guilty one or you!? Feel free to get a SG-unit from the pfSense shop to get rid of that pain and get a flawless working network back. Over a really long time customers, users and clients were were begging for own hardware from pfSense it selfs and then it would be there and all the folks where fiddling together their own units like before. Why?

Much appreciated guys, thanks for your feedback.

Thank you (pan_2) i solve it by put the DVR ip address in (allowed ip address) in (Captive Portal) …

Or simple solution on windows is just add this reg key and it should all be gone. elevated prompt reg add hklm\system\currentcontrolset\services\tcpip6\parameters /v DisabledComponents /t REG_DWORD /d 255 reboot Top put it back how you found it reg delete hklm\system\currentcontrolset\services\tcpip6\parameters\ /v DisabledComponents /f reboot When you get ready to use ipv6, the netsh commands jorgeO posted allow you to turn off the 3 different transition methods ms thought in their infinite wisdom it was a good idea to turn all 3 at the same time… JFC they think their user base is just complete morons.. the reg key above will turn it all off and even the teredo and isatap and 6to4 interfaces will be gone.

Have they explicitly stated "All Ports"? Perhaps they're blocking the common players (25,80,443,1194,8080,8081)? Might be worth a try setting up an OpenVPN server on something off the beaten track like 8894 for eg. If they're really blocking everything then I agree w/johnpoz. That's not a real internet conx, time to find one….

@jahonix: In the past there was something with LAGG and VLANs, right? Or did I mix that up as well? Not with bridging that I can think of offhand. Some of the more esoteric combinations like that have no doubt had an issue at some point in the past 12 years. I'm not aware of any in 2.2.x or 2.3.x though.

This is becoming a critical issue for us, can anyone tell what I've got wrong?

I keep getting conflicting info on whether or not pfSense 2.2.6 can handle DSL. There are many different options or point of views and pending on this also the informations about will differ even and even and for sure you could be really misunderstanding some things. Normally or usually pfSense is a x86 based firewall not more but also not less and it comes without a modem to connect to the Internet. So an internal or external modem will be needed to do so. But then, if an internal modem will be inserted, many peoples will be lead to say that pfSense is DSL capable! Draytek Vigor 130 / Zyxel 1312 / or some AllNet modems are at this time the state of the art if we are talking about ADSL/VDSL & Vectoring, so you should be looking over to find the right one that is matching the needs given to you by your ISP. And another one is coming pretty new on the market from DrayTek it is an internal PCIe modem/router card and it is capable to handle DSL too! It is called or named Draytek VigorNIC 132 and it is sold for ~135 € here in Germany in the near future. One site says no, another says yes. In normal you take x86 hardware and build a pfSense firewall with it, point! And then you will need a modem in front of that device called firewall to connect it to the Internet or a device similar to a modem; FTTH/FTTC a fiber coper converter or ONT/ONTU box A pure modem according to the standard your ISP if offering and need A router with an integrated modem that can be set into the so called "bridge mode" and act likes a pure modem A WLAN AP as a WISP CPE device that acts then as the "modem" or Internet connection Can anyone verify one way or the other? I'm doing a DIY router and must choose a OS soon. Try to start from the scratch, likes; What is your ISP offering you exactly? ADSL, ADSL2+, VDSL, VDSL2, VDSL & Vectoring, FTTH/FTTC/FTTN,….. What you need to connect to the Internet? What is the ISP in normal telling his customers or give them as a ISP router or modem? Will likely be using Sonic.net DSL. Thanks! They are offering so much Internet services, that you should perhaps be more clear about what service they are offering especially you! Please don´t get me wrong, I am not from Santa Rosa, CA and know only that they are offering a wide area of services to their clients, from FTTH/FTTC fiber Internet line, 2 wire over bonded DSL lines and other (A/V)DSL services across the whole Internet connection field and not all modems are matching all offered services! Sonic Wiki with a compatible modems Sonic Wiki modem reference Sonic Wiki device returning policy (30 days)

I finally got my system working again …. https://forum.pfsense.org/index.php?topic=114128.msg634619#msg634619 And it had nothing to do with memory so I'll never really know what caused this error.

I hope you guys are happy. I spent my entire $200 steam sale budget on used books.

@gaido: every time i restart my router my WAN IP Address will banish and i reinstall again my pfsense to return my WAN IP Address. can someone help me in my Problem? What hardware you are using? Is this a USB to LAN adapter you are talking about? Or is this a Supermicro board with a dedicated IPMI Port?

I need 3 separate VLAN's running, each with their own DHCP Scope 1 x Office Network (Wifi AP - Unifi AP LR) 1 x Guest Network (Wifi AP - Unifi AP LR) 1 x Labs Network (Switch L2) If this APs are offering multi-SSID support I would set up them as the following; VLAN1 - default VLAN for the admin all devices are inside VLAN10 - SSID "office" (internal) - 192.168.2.0/24 (255.255.255.0) Radius Server and client isolation is on VLAN20 - SSID "guests" (external) - 192.168.3.0/24 Captive portal with vouchers client isolation is on VLAN30 - SSID "testlab" (internal for doing tests only) - 192.168.4.0/24 Radius Server but another user group or free and open or what ever you wish to do And this might be set up on all three WiFi APs, if they are offering multi-SSID support. 1 x Labs Network (Switch L2) If this might be not being also WiFi based you could also set up. VLAN1 - default VLAN for the admin all devices are inside VLAN10 - SSID "office" (internal) - 192.168.2.0/24 (255.255.255.0) Radius Server and client isolation is on VLAN20 - SSID "guests" (external) - 192.168.3.0/24 Captive portal with vouchers client isolation is on VLAN30 - "testlab" (internal for doing tests only) - 192.168.4.0/24 LDAP or OpenLDAP Server or free and open or what ever you wish to do And this might be set up on all three WiFi APs, if they are offering multi-SSID support and the test lab is cable or wire based on. All this traffic runs through a Dell X1026 Managed switch. This is a managed Layer2+ switch and there fore I would let handle and route the pfSense box then the VLANs and manage the security options.