@Gertjan I am attempting to offload the encryption to the SafeXcel chip, I have had it running in the past with OpenVPN again I am also testing use of it with squid and my swap partition, but of those cause the interrupts to be incremented, but all the sudden OpenVPN will not use the SafeXcel chip anymore and it did with this version a couple months ago. Something is different as it should utilize it like it did in the past. I originally thought it could only be used by one component, that could be fstab file and use of .eli to encrypt the swap and or using it with squid for acceleration of ssl certificates, but they both work, all the sudden OpenVPN won’t increment the counters anymore. It’s weird because from what I am told OpenVPN should do this automatically, the new versions of software remove use of hardware crypto and OpenVPN but I can’t even run tests it acts like the chip does not load. That’s where it has confusion it should still see the counters increment in the system but it does not. It does drastically improve performance with the “ssl engine” directive in squid. Again not many people use .eli at the end of the swap config in fstab. So it’s kind of a trial and error thing. Goal faster vpn access to my private NAS.

@lnguyen

That is very interesting, thanks for the update. So we are officially blaming comcast for these issues then, that makes me feel better.

@jfaubin I've been so busy with other responsibilities and will plan on working on this project in April.

There is a CF170 4gig inside and I think that it is used for firmware? I really don't know. I'll ask a cisco friend to give me some info on that chip and what it is used for.

Cisco removed all ports for this device however I doubt they removed the functionality inside on the MB. I'll pick up a video cable and use that to see if I can get any video.

I'll report back.

This was originally a project for my kid and his friends but they blew it off and went back to playing roblox.

I'm an old man i guess but i'm raising a 10 year old and man is it a major trip.

Thanks for the inquiry.

Interrupt

Hi guys,

I my case the suggestions in this topic didn't help. However I managed to trace to issue to FreeBSD 14.0 and my PSU configuration. My hardware configuration consists of PicoPSU and 12V power brick, so it's not conventional ACPI PSU configuration. Previous versions of FreeBSD didn't have problems with system Halt, but FreeBSD 14.0 has an issue. When I initiate Halt command the system reboots.
The way I fixed the issue is by chnaging the value of hw.efi.poweroff parameter from 1 to 0.

So in summary:

Go to System/Advanced/System Tunables and create new tunable with the following values:

Tunable: hw.efi.poweroff
Value: 0
Description: Use EFI runtime services to power off in preference to ACPI

I hope that will be of use to someone reading this topic.

Best Regards,
Nick

What type of NIC is it?

Does it appear in the output of: pciconf -lv

@susamlicubuk i know that thread is a year old, but have you got the rest of the ethernet ports working?

While researching for a similar issue with another appliances I looked at the download you linked in the third post.

In that download there is a watchdog driver for linux and FreeBSD for resetting and bypass-ing the system.

Compiling it for pfSense will be complicated and I'm of no help with that. It's easier on plain Linux or FreeBSD, the driver itself looks quite simple but it's references FreeBSD 8. Not sure how easy it can be compiled for a current FreeBSD.

Have you tried compiling and using the driver and userland tools?

@Nerd2600 said in pfSense on Watchguard M370:

@Squuiid what bios did you use for the i7 7700T

Vendor: American Megatrends Inc.
Version: 5.12
Release Date: Fri Jul 14 2017

Check the states. You will see the outgoing ntp queries are sourced from an internal IP and NAT'd.

@stephenw10

Correct same type, matches up.

@stephenw10

I'd like to see an ASIC offering to compete with the performance of say a Fortigate. Any Change we ever see that.

Hmm, not seen that. It's the original SSD?

@w0w said in pfSense 5Gb/s Ethernet NIC:

@Craash
X710-T2L or T4L should support directly with latest firmware, but really don't know about FreeBSD and some OEM versions like Dell, have seen some 10/1 Gbe versions only.

Late to the party with this reply but you can flash the Dell versions of the X710-T2L and T4L to Intel firmware without too much hassle. This will enable the missing 2.5Gbps and 5Gbps speeds.

https://forum.level1techs.com/t/crossflashing-intel-official-firmware-on-dell-lenovo-pcie-x710-da2-nics-solved/196357/7

Little bit of reading but it works great. I used Linux but the tools are available for FreeBSD too. I've done a T4L and a T2L and both worked as expected.

@stephenw10 You are right Stephen, I forgot about the issues with N100.

Not really. Only QAT based devices would really make much sense these days and I don't think I've ever seen one on an mPCIe card.

Back in the day people used to use Hifn cards. But those are pretty much ancient at this point! I believe we removed the drivers since it eventually started causing problems. https://redmine.pfsense.org/issues/11426
Though we still build the modules for those if you really wanted to try it.

@stephenw10 Hmm i'm pretty sure it was the serial image. To be sure, i'm going to rufus the thumbdrive again and make certain its the serial image. Then i'll boot the laptop again with the setup and install to the mSATA. Going to take screenshots of securecrt when the m270 boots this time too.

Thought I would follow up on this topic: I ended up deciding to add a 10Gbit RJ45 card to the firewall so that the connection between ONT and firewall is copper to copper. Unfortunately, I still saw the disconnection issue described in the original post, which essentially rules out that it was a problem with SFP28 cages and/or transceiver. My next thought was that maybe it's issue with auto-negotiation of the link speed between firewall and ONT. I decided to force the speed on the firewall side to 10Gbit vs. Default and so far so good (no further connection drops since making the change).

Hmm, so the most recently created BE is still enabled?

In that case it must have reverted the config if it couldn't load it. There should still be logs showing that.

@stephenw10 Thanks! I actually emailed him but haven't got an answer yet...

The i5-4670 has just been installed into the home network's M400 and the reboot test was successful. Certainly runs cooler than the i5-4670K.