what do u mean its stops responding, you cant access the webgui and/or console, no traffic is able to pass through pfsense, etc.? w/out further info im guessing you didnt configure the interfaces correctly most likely the lan interface

I just re-read this thread and I'm not sure how you plan to use the usd wifi card if you get one tyhat works. The thread title is 'USB WAN2' which might imply you want to connect to an access point and use it as a second WAN. However in the first post you say you want to make an access point, use the card in hostap mode. I must repeat that my Ralink 3070 card works well as an access point but doesn't work at all as a client to connect to another AP. It would not be suitable as a second WAN.  ;) Steve

@stephenw10: It can. At present the central pf process is limited to a single thread though. Other processes will make use of further cores to a point. Steve Well, almost :) Pfsense is driven by PHP, which works on single core and if you have configuration big enough expect waiting periods of ~3-4minutes to load the Dashboard…

Figured it out… For some odd reason Firefox does NOT like XML... Switched to Internet Explorer and it worked like nothing was ever wrong. Installed a few packages and added my HE IPV6 tunnel and now everything is back to normal and i can even open it through firefox... WEIRD... Anyway... Heres the end result : http://www.speedtest.net/my-result/3220921106 Ping had dropped considerably as well as download and upload speed are now more stable

Works fine with Virgin broadband  and also normal ADSL also :)

Looks like an AR9002 based device which will not work. http://wikidevi.com/wiki/TP-LINK_TL-WN722N The FreeBSD USB Atheros driver, uath(4), supports only AR5005 devices. 802.11G only. Try one of these: http://www.dabs.com/products/tp-link-150mbps-high-power-wireless-usb-adapter-8S25.html?refs=4294946755-4294946753-50010000-50043&src=3 I have one here, I know it works. Assuming they only made 1 version that is.  ;) I can only find reference to one though. Some caveats: It doesn't work at N speeds. It can't do channels 12+13. It doesn't work well as a client (fine as an AP). Steve

I think he is a newby in pfsense. @niftywiz - you may use actually pfs as your server. The general networkmap woud be: InternetSource > pfsense > switch > (option: wireless via antenna or wired services using)

@johnpoz: Other than the CA private key (and other private keys and shared keys) which does not have a password - but does not need to be stored on pfsense if that is really a concern. Is there a way to encrypt and password protect the CA private key if using the native pfSense CA?  Ideally I would have a separate physical keyserver that's 100% offline, but that's a project for another day. And also, ideally, I would offload a lot of the logs to another log server or repository, but that's also a project for another day. I'm still very interested in implementing GELI full-disk encryption (with manual passphrase entry every reboot) to help mitigate physical theft from some meth-head burglar breaking into my house.  I think most people are fully aware that any mounted encrypted disk, container, or partition – while running -- is transparently and fully in the clear.  I think those of us interested in full-disk encryption are merely trying to mitigate physical theft from common thieves.

The config backup is compatible. If you're going from 2.1 to 2.1 a config backup which includes RRD files should migrate OK since the RRD contents in the config.xml backup are stored in an architecture-independent format. Worst case though, delete the RRD files if they don't work and you'll be back to normal.

@cessnas: My setup is Modem -> Router -> pfSense computer -> main computer Is this wrong? Switch it to: (Modem) -> (pfSense) -> (WiFi Router) -> (rest of LAN) The way you have it all your WiFi devices are skipping pfSense and going straight to the WiFi router and then out to the Internet.  Put pfSense as the most "upstream" or perimeter device.  So immediately downstream from the modem.

I am unsure of this but no other replies in 5 days… It depends on how your ISP is delivering the IP range to you. You can't bridge to a PPPoE interface but you may be able to use IP aliases and then 1:1 NAT to your DMZ. There have been similar questions to this before that I beleive were solved. In particular I remember another user had an almost identical situation here in the UK where BT business DSL provide an IP range across PPPoE. However they may have been routing those IPs differently. Steve Edit: For example: http://forum.pfsense.org/index.php/topic,59573.0.html

@Jason: @jjandrob: Do you think the ALIX 2d2 with the 500mhz processor can handle this or should i grab the new 800mhz version? What 800MHz version? i suppose i miss took a model number in a quick reading as the CPU speed. Thanks!

Okay that is what I was going to do but I just wanted to verify before I proceeded, thanks for the fast responses!

If you have a serial port on your computer and a null modem cable, you should be able to access the console menu and re-setup the LAN IP.  Other configuration changes you've made will not be lost. Alternatively, you will need to depress the reset switch while booting the unit.  This will wipe the box to factory defaults.

vincom -  Yes; I was using this browser to talk to the previous firewall at this IP.  Deleting the certificate for this IP did the trick.  Good catch!  Thank you.

It might be, but it would be very awkward and may not work 100% – I have never tried it, but I know links can often have JS issues and the GUI package install process uses a fair amount of it.