Both could be DHCP. The 4G router would be handing a DHCP lease to the pfSense WAN. pfSense would be handing DHCP leases to the clients on it's LAN.

The link between the pfSense WAN and 4G router could use static addressing instead but I would use DHCP initially.

Steve

@tman222 said in PPPoE - Single Core - SMT / Hyper Threading On or Off:

Xeon D-1718T

I went with the D-1736NT (8-core QAT) wrapped in the very familiar Supermicro short-depth design (SYS-510D-8C-FN6P).

I did look at the 4-core QAT version for the lower TDP but they were exceptionally hard / impossible to find in the UK and not much cheaper than the 8C. No doubt I will end up running a few things on it so the extra cores will probably get to stretch their legs at some point.

The rest of it will come from stuff existing I have kicking around - a couple of 16GB RDIMMs, Optane (M.2 and/or U.2), slimSAS to 4x or 8x SATA SSDs are all candidates. These things always tend to get 'played' with. Tempted to try Proxmox too.

Ah nice result! Yeah that can be hard to get past if you think you've already disproved something.

@stephenw10 This was the golden suggestion. All works now. In the advanced settings I changed to using VGA console as default console, so using VGA works again, which was the behavior I initially expected.
Thanks for responding!

Sure I can check that. Send it in chat

@dennypage said in Avahi not restarting at boot:

I expect that you are using DHCP to acquire an IPv6 delegation from the WAN, and then using it to configure internal interfaces via Track Interface.

Unless you are using fully static IPv6, I would recommend that you do not use IPv6 in Avahi. You don't loose anything by having IPv6 disabled in Avahi, and many devices that depend upon mDNS won't use IPv6 even if it is offered. IPv4 works just fine.

On pfSense 23.09d-20230921-1219 Avahi does now restart at boot with IPv6 selected.

Hurrah!

☕️

Powerd (with Speedstep) works fine but only if you disable SpeedShift since it takes priority. But you should use Speedshift on any CPU that supports it, it's much better in almost every way.

Hmm, what's shown in the logs when you connect/disconnect the ports?

@stephenw10 Sounds good. I have 16gb RAM and only typically use a tiny percentage of it, and I don't use those packages, so I'll take advantage.

@johnpoz said in pfsense down after a power outage:

@heathman56 Not meaning to kick you when your down, but ups is sort of a requirement with any sort of electronic gear. If you do it right since most networking gear is so low power your ups can prob run your network for 30-60 minutes, if not longer and survive 1st world sort of power outages without ever going down.

Yep. I have 2 UPS here, one for my main computer and one for pfSense, cable modem, WiFi and switch. In fact I had a power failure last week, where my computer shut down after 15 minutes of failure and then the power came back a minute later. After I turned my computer back on, I was right where I left off. My Internet connection never failed, as that UPS lasts longer than the computer one. I use APCUPSD to shut down the computers when needed.

Hmm, strange indeed!

Do you have an OpenVPN server running on the firewall? Does it show the clients connecting to it? What are they supposed to be connecting to?

What do you see logged when the webgui cert changes?

Steve

@johnpoz I didn't expect to be able to connect to the console with the MicroUSB cable, but I was able to make the connection successfully and reset the admin password. It was a great help! Thank you very much.

did you resolve this? I'm having the same issue

@bingo600 said in NTP widget time wrong?:

Hmmm .... Maybe the HW dependent part should be moved to the "Off Topic thread" you made.
https://forum.netgate.com/topic/182811/raspberry-gps-based-time-server

Sure, now that I know I'm not crazy and the NTP clock is really grunged... I'm good here. I doubt that I'd ever build what you have, but you've got me interested and I'd sure like to follow the build. Use my thread or start your own, I'm cool either way.

Rick

@fabriciogcbh said in LDAP group membership:

correcting a flaw in the post. it looks like the site removed characters. I couldn't edit, editing timed out.

Jim Pingle Solution
doesn't work for me

&(objectClass=posixGroup)(cn=VPNUsers)(memberUid=*)

works for me

&(objectClass=posixGroup)(cn=VPNUsers)(member=*)

@JonathanLee ahhh
Im on 500/500 Fiber.

@dalvi Hi! Did you find any solution? I'm in the same boat

It would be better to use VLANs on the re(4) NIC for the interfaces than using a USB NIC if you can.