That's where I copied pasted it from ;)

Hello DaddyGo, I usually use a 4 ports (with RJ-45 eth.) NIC and use a 4-ports SFP NIC, this is already 8 interfaces, but this is network and segmentation dependent... I'd like to have four rj45 ports reserved for my pc, usb mfc scanner, vivint dvr, and printer. More rj45 ports the better..; -) So here is a question - I use the two available ports on the pci-e nic, the other two can be reserved for a switch etc or two ip devices if I decide. Is this correct logic? With this PC that was donated to me, it only has one pci-e bus. So I am at the mercy...;-( One of the reasons started to think about using m.2 wifi 6 to broadcast the SSID. But as I reviewed m.2 it appears that speed suffers. So I started to look at AP or Mesh. Another option I have, I still have my tp-link router which I could use as an extender. But I want Wifi 6 and best I can do is Wifi 5 on the router. Now, how does my motherboard onboard nic come into play? Can I use this connection into from my cable modem and then the pci-e nic for lan connections? And yes, the onboard NIC is realtek..;-) @tvos " I purchased: Ziyituod Gigabit Ethernet Card" this was a bad idea as this NIC contains a Realtek ethernet controller and the latter quality of Realtek is poor and not recommended in a firewall... the forum is full of why not use Realtek based NICs, I wrote above which does not cause headaches and that is Intel based NICs (I'm not even talking about Realtek driver problems anymore) I ditched this and returning - wouldn't even line it up correctly to the expansion slot...;-( I will definitely go Intel as recommended. Again, appreciate the insight. Thank You for the links, I will definitely be spending time watching the vids and documentation. All the best, tvos

@sanketgroup did you find your answer ? I had version 2.3.4 and need to increase disk space.

Agree with @sheen73 on simplifying the setup especially for home use. Expand later with VMs once the basics are working. Another reason being power use, I would imagine a box capable of running multiple VMs would require significantly more power to run than a little box (e.g., SG-1100) running pfSense alone. I understand the urge to play around with a setup like the one you have above. Most of us on here like playing around with stuff like that, but doing so behind the scenes as suggested might be better. The unifi is reporting DNS and DHCP problems? I'm assuming you tried the unifi forums as well since the unifi logs might not be very helpful here. What makes you think it is a setting in pfSense which could be the issue if the problem is only on the wifi? Are there wired VLAN devices that are working perfectly fine? If so, which specific application(s) or site is running on wired clients which is not running on the wireless clients?

ruled out. this issue is duplicated now even in the manufacturer

@tleadley Holy crap, somehow pkg, pkg-static and pkg2ng in /usr/local/sbin all got overwritten and showed zero bytes. I was just lucky enough to have access to one of my other SG3100's and copied the files over. I ran the repair process once again and we are good to go, no factory reset required.

@viragomann thanks dude! :)

Ok so everything appears normal again. The issue I believe is related to the igb driver. I had it set to use 2 queues, configured in loader.conf.local, after I reverted it to single queue mode the issues went as fast as they came. I dont know what the default is now days. Some may remember setting the driver to two queues on some igb hardware used to cause kernel panics, but then that got fixed in FreeBSD, so the dual queue mode does have a history of problems. If anyone else has these symptoms and they using igb, then this might be a place to look. The variable is 'hw.igb.num_queues'.

<Lightbulb goes off!> Thank you!

@jimp /root/.profile appeared to be a generic FreeBSD file. I replaced it with one from a working pfsense install and things appear to be back to normal. Thanks!

I'm a bit embarrassed. Tried to delete this, but seems I don't have permission to do so. Incase anyone is having similar issues..... REBOOT. All I needed to do was reboot the workstations and they were working perfectly with the pfsense as the gateway.

The Q6600 will not pass 10Gbps in any test. I have tested one at 2.6Gbps in a simple iperf test. I would expect it to be OK at 1.3Gbps of regular traffic. Though the PPPoE means it restricted to a single receive queue for each of those connections. If you have em NICs those are single queue anyway. Steve

@cenriq Sure why not?

What hardware are you installing on? What pfSense version are you installing? What exact installer image? Steve

@viragomann said in My backup ALIX box not working, Netate box is fine: vlans Thanks, but no luck. After altering the XML file from the Netgate box I got this error: XML error: VLANGROUP at line 332 cannot occur more than once I had already tried this last week and got the same error. I edited the conf file to remove the VLANGROUP and regained access to the system. Using the Ping tool in the PFSense GUI if I ping Google it works from the WAN side but when LAN is chosen it comes up with No route to host. What brick wall are the packets hitting? This makes no sense.

Some final updates before I leave this thread alone... The thread linked to by Rico has been undergoing lots of activity and is very useful (readers of this thread should check it out). I have had further problems with the qlogic driver, but they are now gone. Basically, once you configure the MTU manually on the interface, the issue goes away. The first time you do it, you have to wait for multi-user mode to happen, then open up the second virtual console (Ctrl+alt+f2), login, and go to a shell (option 8). In the shell, bring the interface down: ifconfig ql0 down Then set the MTU. You can set it to 1500 or 9000, depending on your preferences. Most likely you'll want it at 9000 eventually. ifconfig ql0 mtu 9000 ifconfig ql0 up This should get rid of the console going crazy and allow the interface to work. Then you can get into the web interface and configure the MTU for that interface via the web gui. Don't forget to do this step. Unfortunately, I can't get anywhere near 10gbps performance on this card. The best I've been able to do after lots of tuning (sysctl, tunables, loader.conf.local) is 4gbps, which only worked for a bit and then it went back. It's difficult to figure out why; it's not a card issue probably. It's most likely the hardware and the config (as well as the other end of the connection). I've got it connected to a 10G module in a Brocade FLS624. There is a known freeBSD bug that causes the MTU issue - I expect it will get patched in pfsense before long. For now, the above fix should work.

Next I would do a packet capture on your LAN for anything going on for address 192.168.1.2 Then do some attempted surfing and see if the traffic is actually making it to the LAN port. If it is do the same for the PPPoE/WAN interface. Diagnostics / Packet Capture