@stephenw10 I show the IP he connects to forum with from googlefiber on these 2 lists. [image: 1697574496171-blocked.jpg]

I'm not sure how much help a cloud based concentrator would provide here unless you also moved other resources to the cloud and the HQ becomes just another site. That way if the HQ connection goes down the other sites remain up. Sure you can authenticate APs across one route whilst routing traffic from wifi clients over a different route. Currently there is no official central management for pfSense so much of this would be manual setup. Though you can have each site pull alias lists from something central and use those is rules for common requirements. Steve

@stephenw10 actually I'm an idiot, and am embarrassed to admit that I had forgotten to turn Outbound nat back to automatic! Im now going to finish by following https://joshspicer.com/lte-failover-pfsense Apologies for wasting your time, and many thanks for your response

@Gertjan okay, I will try to re run the test with multicore. Otherwise I am considering switching to a official netgate device and keep the protectli as a backup if the netgate device fails someday.

@stephenw10 Thank you...I have opened a ticket.

Depends on what you are trying to do. Mudwap supports pfSense CE only.

If it's something in pfSense it will almost certainly be logging something when the problem starts. It could be a link state change. But it could be a route or IP address change. Or if you're running something dynamic like Snort or pfBlocker it might be related to a list update for example.

@stephenw10 ok, thanks. I will try to set it up that way.

@stephenw10 I bought a pack with cameras and the NVR and as the NVRcould also provide PoE as well as the switches I set it up that way, so you’re right there is little to no benefit to adding the extra switch. In fact, it would be more beneficial to replace the oddball camera and add its replacement to the NVR!

@stephenw10 Awesome thanks!

@johnpoz said in speedtest-cli 403 forbidden error: Not exactly sure what --secure option does. speedtest-cli --help and you'll find out what it does :-) --secure Use HTTPS instead of HTTP when communicating with speedtest.net operated servers Nice weekend, fireodo

@pwood999 said in 10GB Fiber network, yes/no?: @chudak Out of curiosity what speed are you actually seeing on the 10G connection. If it's standard XGS-PON, that usually maxes out around 8.5Gbps data payload due to overheads in the PON system. If the ISP is using 25Gb PON, then they could theoretically deliver 10Gb data rates. I don't have 10GB fibber yet :) On 1GB I see ~700MBps on iPhone 13 Pro and full 1GB on wired connections

@mark77ap Wow, the cable? Well, I tried two different 6 foot CAT6 cables (one unknown brand and another Amazon basics). Both were UTP (unshielded). Maybe I'll have to try some other cable brands, or different types of cables like CAT6e or CAT7 or even some STP (shielded) cables. I'll have to swing by my work and "borrow" a few to test with I'm glad you were able to solve your dropouts with just a cable, that's great news! I hope I have the same luck!

Indeed we have seen a few reports of that but have never seen it here. If it happens again and anything is logged at that point or, even better, if you can find a way to replicate it please let us know. There have been similar issues in the past but not for quite a while.

The key line there is that the boot drive, ada0, detaches from the drive controller. That obviously stops it booting. That looks like a drive or controller failure. It could be something as simple as a bad SATA cable though.

First of all thank you for your reply @stephenw10 ! Ok - this was an odd one. We had a firewall alias for testing purposes to block updates to the ACB service. And yes - there way a typo ;-)

@stephenw10 [image: 1697051073163-3d8c8716-912f-47d5-b8da-df2548987dde-image.png]

It's this: https://redmine.pfsense.org/issues/14648 Try checking those sysctls directly. Steve

@stephenw10 Thanks got it!