@Bly said in Syntax error upgrading from 24.03 to 24.11: Warning: syntax error on file /boot/loader.conf.lua if _ENV["smbios.system.maker"] == "Netgate" then ^ Yes that's normal on a 3100. The 32bit loader doesn't support that lua code which is shared by all platforms. It shouldn't cause any issue beyond that cosmetic warning though. Steve

@roadrunner662 Open WRT is different from pfSense. Open WRT is dedicated access point software with limited firewall capabilities, and pfSense that is dedicated firewall software with limited AP capabilities. The Open WRT is very streamlined for AP use and software is smaller. Pfsense is a hypothetical tank and takes up more room. I run Open WRT on my AP and pfsense is on its own box. I don’t think you should run it on a layer 3 switch.

Yup I would reinstall clean to be sure at this point.

@SteveITS I contacted support and they said I could only downgrade to 24.03 via the installer. I went back to 24.03 and it fixed my DHCP and SQUID problems. Turns out my VLAN issue was due to a new feature added in 24.03 and I've attached the excerpt for anyone else experiencing the same issues with VLAN giving firewall problems I couldn't connect to my VLANs with the following appearing in my logs VLAN123 Default deny rule IPv4 (1000000103) I could ping devices but that's all. "Beginning with pfSense Plus software version 24.03 and pfSense CE software version 2.8.0, the default configuration is explicitly set to an Interface-bound policy to enhance security. It appears that in your previous version, the default was configured as a Floating state type. You can read more details about this change here: https://www.netgate.com/blog/state-policy-default-change" Changing the Firewall State Policy to Floating States (System>Advanced>Firewall & NAT - Advanced Options) solved the VLAN problems for me.

@stephenw10 Thank you for the reply and the pointer to the images. That is the area where I downloaded the images that worked. I don't have any logs as it didn't fail in the normal way. What happened is that it was almost like reflection was turned off with just no responses and the Package section just said unable to retrieve package. I'm leaning towards 'It must be me' Nobody else seems to have hit this issue and yet there is little that I could have done wrong. Originally a perfectly working system. I made a mistake and screwed it up because I was stupid and didn't follow my own rules. Lost the backups but as I document everything I had every setting that was needed as well as some config backups. Just a lot of typing. Copied Installer from site, wrote to USB drive. Booted. Following instructions as per normal. Connects to your site, as I'm using my CE version it sees I don't have a plus account and offers CE. Finishes and I reboot and configure the system again. Works OK but no incoming connections allowed which is the default which I change to PureNAT for my system. I then set up my DNS and DHCP entries, my firewall links etc. and at some stage during the config changes the external access fails and the Package Manager fails to update. Sometime it is quick and other times after I have restored it all. I originally used the backups, then selecting DNS etc. from the backups. At some stage it just stops. Installing from the base images it works fine. I installed 2.7.2 from that link you provided and have rebuilt it completely and it is fine. It makes no sense. However, I don't want to waste your time so I'm going to leave it as it is as I am now behind on some work I need to do. Let's put it down to user error and let's see what happens at the next upgrade. Thanks for your help.

Thanks! @stephenw10 I was finally able to install pfSense using a USB-to-Ethernet adapter. The issue was that I had to install the missing realtek-re-kmod driver.

Can you select an x86 CPU type there? It appears to offer other x86 parts for emulation. If you can then the amd64 image should work. Probably.

@stephenw10 Thanks! I didn't realize that.

No I don't think so. You were getting past the boot loader which is where that issue was.

@chudak SG-4100. Working fine. Came with 24.03 and upgraded to 24.11.

Reconecting the WAN Port solves the problem. I verified this on a Netgate 6100 and a Netgate 2100.

Yes, the 7100 can run the current release, 24.11. And it should always see Plus available. From such an old version I would recommend re-installing 24.11 clean if you can. Steve

Aha, that would do it. Nice.

@ppal I did the same thing on QTS to kick the tires on pfSense and TrueNAS. I am trying to recall if I used the ISO or USB passthrough to install from a USB flash drive. Regardless, I installed from scratch vs using a pre-built VM, which may not have even been available at the time. I ultimately bare metal installed TrueNAS on my QNAP appliances.

Hmm, that's a good question. Let me run some tests.... You can install using the legacy installer and upgrade if needed: https://atxfiles.netgate.com/mirror/downloads/ Steve

Problem solved. Thank you!

@stephenw10 the net installer boots from USB, but installations don’t boot. If I use pure MBR it gets to the old F1/F2/F6 prompt but won’t go further.

@stephenw10 Both 24.03 and 24.11 are the same it after the rollback: 2.5 Gb physical interfaces on pfsense: only auto negotiates to 10/100Mb full duplex with TAP 1 Gb physical interfaces pfsense: auto negotiates to 1000Mb full duplex with TAP At this point, I am just a bit puzzled what changed I might have done. The TAP has been in use since like late 2021 and until like a month ago everything was working at gigabit on the same 2.5Gb physical ports on the pfsense.

@patient0 I do nightly incremental backups, and full backups every 2 weeks. I keep several full generations. The desktop data stripe is 8 x 1TB Samsung 860 SATA-3 SSDs. Boot drive is 2TB NVMe. The NAS uses 8 x WD 14TB HDDs, again, in RAID-Z2, so there is 84TB usable capacity.. The backups tasks use Acronis True Image with a WOL script to wake up the NAS, since I don't keep on 24/7 - 8 platters are loud and use a fair amount of power. The LAN is 10 gig so even a full desktop backup isn't too long.

Hmm, yeah so far I failed to replicate that but we are digging. I've no idea how it could ever show a cost like that....