Yea i read that but i don't see any connection with my issue not being able to copy one slice to other ?

Your are connecting from where : LAN ? Somewhere on the Internet ? Using your WAN IP ? You have a pfSense firewall rule that open port 1194 (TCP and/or UDP - see image) ? The special one for you (and me btw) : do you have another router in front of pfSense ? And if so, did you open and NAT port 1194 to pfSense on that router ? [image: vpnwan.PNG] [image: vpnwan.PNG_thumb]

on your usb memstick what is the contents of /boot/loader.conf You may need to explicitily set a value there to: vfs.root.mountfrom="ufs:/dev/da0a"

There isn't an easy or automatic way to do that. You'll have to make a backup of the new configuration and then use a text editor to replace the user and group sections with those from the old configuration.

thank you

Got it  :P In the config.xml there is a switch for the repo and it had the value <pkg_repo_conf_path>/usr/local/share/pfSense/pkg/repos/pfSense-repo.conf</pkg_repo_conf_path> … but in the UI it is configured as "Legacy stable version (Security/Errata only 2.3.x)" When I change it to the legacy repo manually <pkg_repo_conf_path>/usr/local/share/pfSense/pkg/repos/pfSense-repo-legacy-23.conf</pkg_repo_conf_path> The restore of all areas then selects the right repo… So in my opinion there is a bug in the backup of the repo configuration to config.xml.

UEFI GPT vs old style bios partition?

Edited first post for PFSENSE 2.4.2 @johnpoz: Neorouter is exactly that a P2P solution.. Why would you want/need to install this on pfsense?  You install neorouter on the actual client devices..  Not the router/firewall of your whole network..  Why would you not just install the neorouter "server" on one of your clients that is going to be in your network.  This is the way its designed to be done.. What if all clients are road warriors?  :P

@archenroot: df -h Filesystem          Size    Used  Avail Capacity  Mounted on … /dev/md0              38M    164K    35M    0%    /tmp /dev/md1              58M    19M    34M    35%    /var .. you need more space in /var. Just go to System/Advanced/Miscellaneous: RAM Disk Settings (Reboot to Apply Changes), increase size of /var (I have set 800 MB), reboot the system and try to upgrade again. I have also increased size of /tmp to 60 MB. P.S. I have two firewalls. One of them could finally upgrade, the second could not upgrade the kernel and I had to reinstall the system.

ANYTHING is possible in the software world. You just need the knowledge, the tools and the time. You can partition the hard drive, either in UFS or ZFS so you can install pfSense in the first partition and leave the other partition for data/space (I use it for Squid cache in my case). Now, windows won't be able to read ZFS and you may be able to read UFS with some hacks, but it is not worth it due to the risk of corruption. You can format the 2nd partition with exFat and FreeBSD can mount it, but again, looking for trouble. If you need space, just get another hard drive… @Ulysses_: Already doing that with 2 physical drives, as it says in the title. Can't pfsense be installed to just the first 8 GB of its physical drive? So the remaining 500 GB are available for a user data partition storing movies and photographs? Which pfsense does not ever read? Perhaps in linux's ext3 format that windows can read (there is a driver for this) if fat32 is not allowed?

soo, I'm sorry for not giving any further information. Now I have time to add some: After failures while trying to update from 2.4.2 to 2.4.2_1 I decided to do a new installation and restore the backup config from yesterday. Therefore I did the "config on a seperate usb stick" trick. Installation looked fine, but after the normal reboot the machine suddenly reboots while configuring WAN interfaces (we have got three of them: WAN1, WAN2 an LTE). Second boot worked. At the moment internet connection works. But there are strange things: 1. I can see outgoing traffic on LTE that should not go via this interface (but WAN1) [edit] This seems to be fixed after a reset of all states. [/edit] 2. Very spooky: When I sit at my Windows 7 machine and download something via Firefox, I get the expected download rate (about 23 MBit/s). But as soon as I log in into the pfSense WebGUI, download rate decreases to about 6 MBit/s.  :-\ Maybe there's something mixed up with the WAN interfaces, traffic shaper and firewall rules? Or broken hardware? I tried it with two different disks, same result. Or special german characters in the config? I have no clue what's going on, so I hope that the crash dump gives answers. Thanks a lot for your support and many greets Stephan

Thanks Grimson Your suggestion worked fine. System is up and running now with an Actiontec C1000A as modem, Dell T110 ii server as pfsense and an Asus RT-AC66U as wifi extender. Brian

Sorry for the late reply. This is more of a gee-wiz thing I wanted to try. I'm currently running a Cisco ASA although it's an older device that's showing it's age compared to appliance potentials like pfSense and Sophos. My Cisco devices maybe see 1-2 restarts a year and always because of configuration changes on my behalf. Granted it's an overkill for a home network, but I do this for a living as-well not to mention the equipment was free. I did bypass the 3825 and ran pfSense as a standalone router for the time being. It's nice to see an actual graphical interface for a change. Setup couldn't get any easier.  I am noticing a slight delay in loading webpages although that could be anything and I haven't really tried to troubleshoot it at all. Anyways, I'll definitely be going back to a Cisco router behind some type of IDS/IPS. Just personal preference over anything else I guess.

When I use the backup/recovery option, is there everything included? Also the package config? What is missing? thanks

For work like this I like these cables (look for original FTDI chipset!) https://www.amazon.com/dp/B01N0LMWGQ together with two of those adapters https://www.amazon.com/dp/B0002J1JUE one configured straight, one as Null Modem crossed. Add a male/male gender changer to your toolbox and you should be able to connect to about any serial on db9 that comes along … as well as any Cisco style console port.

Trying to maintain multiple slices/partitions like that is going to be a giant PITA and not worth the effort. Use the whole disk. Use swap. If you want to play with other configurations just keep a config.xml backup and then factory reset and do whatever you want, you can always restore the other config and/or reinstall within a few minutes. You'd waste more time tinkering with partitions compared to a reinstall+restore which only takes a few moments.

Thanks for the help guys. Went out and yesturday: Backed up config. Wiped the appliance with a 2.4 installer disk. Restored config. From web ui I was able to update to 2.4.2_p1.

Never mind, it was easier to just do a fresh install of 2.4.2 than trying to recover from this mess. I will now have to reinstall OpenVPN on a few laptops, and hope that I configured the VPN properly. If only…need to remember to do a snapshot next time I contemplate an upgrade. But they usually go so smoothly there hasn't been a need.