We still need to know what sort of bandwidth you are hoping to see through it and what packages or VPNs you're going to run to have any idea what hardware you might need.

Steve

Sorry guys, found the problem: fanctrld.sh should be in "/usr/local/etc/rc.d/" not in /etc/rc.d. Working fine now.

Hi,
I have just purchased a pfSense appliance with Novatel 3G modem.
the problem is the PIN on the SIM card.
if you disable the PIN code, the 3G modem work fine.
I have been followed the guide below:
http://pfsense.firewallhardware.it/configure_pfsense_gsm_umts_modules.html

pfSense tested: 2.2.2

hardware tested:
http://www.firewallhardware.it/en/appliance_small_utm_wifi_gsm.html

I hate to harp on it, but I still highly recommend you use an external wifi AP. 
The biggest reason is you can place the AP where you can get the best coverage.  You don't have to hide it in a telecom closet with your firewall.

The doctors and lawyers I have done IT work for just want their stuff to work and work well…all the time.  Wifi from a closet is not going to work well.

Are you able to see your MB from IPMIView application? You can also reach the Webgui from any browser, you must know the assigned IP to IPMI interface. I have a A1SRi-2558, IPMI works pretty fine.
Try to get the most updated firmware and bios.

http://www.supermicro.com/solutions/IPMI.cfm

http://www.supermicro.com/support/bios/firmware0.aspx

Today i would use the Intel x540 or Intel x710.

With the SFP cards you can use CR cables for short range or real fibre cables.
2 Ports with LAGG and then some vlans in the LAGG.

Today i work with 2x 4 port intel GB nics but they will be replaced soon.

But i don't know if the x710 is supported by pfSense. Maybe i can test this card soon.

Hi, i have 250/100 Mbps from ISP, but i use for connecting to internet VPN service, that limit speed.

hi all
Just compiled the latest Intel driver version 2.4.2
Just tested on 2.2.2 x64 and works fine till now
Enjoy :)

if_igb.ko.txt

didn't have time to check that

I really suggest looking for the PowerD, if not enabled the CPU will not be able to
use the option "TurboBoost" and also the CPU is not really able to saturate the entire
GHz peak and then also unleash not the entire power of this CPU, so you will never
be able to reach the maximum throughput and this perhaps causes the port flapping.

there are 3 ipsec tunnels and 6 fw rules on this box

Nothing in my eyes.

In order to monitor more than one thing I imagine.

Are those ping times giving you problems? You can improve that easily enough using your own traffic shaping if it's the upload saturation causing it.

Steve

Thanks for that, didn't know about it!  Listings I see on eBay.ca roughly come up to half the price of the Intel quad card, so probably better to stick to that, I think - but appreciate the suggestion!

Buy and intel or broadcom server nic, or four.
Depending on your budget and location I can turn you on to some guys I have dealt with for over 20 years that sell VMware capable hardware.

PM me and I'll give you my phone number

Im leaning towards a Supermicro X10SLV-Q w/ an Intel i3-4130.

I do like the Quad Core of the embedded AMD of the Supermicro H9SKV-420 .

What do you guys think?

Yes, i was looking at the msata SSD also, but as the AUD is weak to the USD at the moment, it equals to $732 AUD, way too expensive for its use.

Alix APU systems are also there in the portfolio and also much cheaper.

Is there an easy way to install nanoBSD image on the new 2440 machine's onboard storage?

It tends from where you bought the box! But either from pfSense or netgate, you register your box,
create an account and then you will be able to get an image to install from there as I am informed.

Run a live usb stick OS and download/flash the eMMC with the BSD?

I really don´t know, but where you bought the box the support peoples would be able to tell
you this in a really short time and way.

I guess I could always install using PXE the non-nano version

This sounds like an mix of both install methods!

PXE installation with the ADI or pfSense image NanoBSD image on USB Stick or CFCard

I don´t think it will be running but otherwise you will be able to ask netgate and/or Shop-pfSense
how to use their images to install on the eMMC storage, or?

@azherr:

I've got an Firebox 500, f2064n along with a CF reader and a 4gb  card with the nano image on it.

I have tried to boot the box off this card, however the boot process never gets past the LILO boot stage.

I run a box like that, too. From memory, I had to fit an old VGA card and keyboard to get into the BIOS and change the disk settings (a one-time thing). This allowed the boot process to take place on the CF card, instead of the internal flash. I went with a 2GB card, instead.

Good luck.

The button is connected to a GPIO pin that is tested at power on.  Steve in Customer Service told me that there was a problem with the button not working with pfSense 2.2.1 but that it should be fixed in 2.2.2.

However, it doesn't work for me even with 2.2.2.  I tried several times.

It isn't helped by the button being recessed and the power socket is about 1cm away from the button.  The power plug has to be connected while depressing the button with a screwdriver which requires some manual dexterity because they are so close.  It would be much easier if there was a power switch.

The button not resetting was awkward because the console was not working after reloading the configuration, and SSH was turned off.  Reloading the configuration appears to remove the line in loader.conf that sets the serial port to 0x2f8.

I had to resort to reinstalling from a USB key, modifying the configuration file to enable SSH, and reloading the configuration.  Then I could use SSH to add the correct serial port address to loader.conf.

I believe that even if you do get pfSense running on the RCC-VE 2440 from Netgate, you do not gain the Intel QuickAssist technology - I could be mistaken as this seems to be a bit of a vague/grey area but I think that driver does not exist in the community version of the firmware (?) and you only get it if you buy your appliance from the pfSense Store. Hope I am wrong but … ?  ???

FreeBSD is not Linux, but if there is a new Linux kernel set, to support and use the Intel QuickAssist
technology, it could really be that someone must before that we all can use this writing code using the from
Intel offered API for this new technology. So why now the question FreeBSD and also on top pfSense should
not be profiting from that? Either by going with a brand new netgate, pfSense or a Supermicro board?

Intel has published a new Linux kernel patch-set that adds Quick Assist Technology support to Linux along with a driver to handle their …

i see. not sure if netgate installs pfsense on the rcc-ve-2440. their webpage states if one wants that then to goto pfsense and buy their appliance and support. i certainly could have read that incorrectly though. i know for the APUr unit it will come with pfsense installed.

As shown on their website it will be shipped with CentOS 7.1 on the nand storage, eMMC, but if you want
to get your box pre installed with pfSense it will be also installed on the eMMC storage! Only if you will be
getting a mSATA extra they install it on this medium!

there is a cost diff for my personal funds but supporting pfsense is a good thing to do too. it is a top notch firewall.  i'll check with netgate this week and get low down on if they actually install pfsense on these
new rcc-ve-2440.

Ok this is something each of us must decide by it selfs.

interesting point about the Intel QA tech. not even sure i would even need that as this is for home use, more insurance is probably a good thing.

AES-NI and intel QuickAssist would be speeding up some things like snort, suricata,
compression and encryption. For those small Atom CPUs it would be a real benefit related to the
faster and bigger Internet lines.

i see the concerns & issues that you brought up at this link:
https://forum.pfsense.org/index.php?topic=91870.0

The same thinking fals as I see it, if someone get those appliances pre installed with CentOS or pfSense
the entire OS will be installed on the eMMC storage, really ready to go! Only if he wants to install on another
medium it would be installed there, so in my eyes it is not a wasted part of the unit.

But getting the CentOS on the eMMC and then installing pfSense on the mSATA but no want to wipe
out the CentOS and if this is causing trouble pfSense team or netgate should be wrong is in my eyes
not a real problem of them but more of the user it selfs.

i too find it a bit odd that the eMMC isn't used for the OS and a SSD for say snort, squid, backups, etc?  but this is CentOS and not nanoBSD, ?, and maybe that makes a difference.

It is like the older days, but there nobody was complaining!!!! if you install pfSense on a CFCard that is
mounted read only, you cant use squid + squidguard + av scann and snort together! You will need a
HDD/SSD or mSATA for the caching procedure at all. And this would be also not really matching on the
eMMC because on the read/write cycles and it is better in performance like the old CFCards, but the mSATA
is able to be changed if failing.

but for home use, i don't want to have to be reconfiguring after every upgrade either. not sure i even have the skills for that these days.

Then perhaps the Alix APU platform is the right thing for you! Could this be? There you get no nand storage
soldered on board and a SATA or mSATA is a must be.

it won't stop me from buying the unit, just seems kinda odd about the eMMC not being used at all while i'm contemplating the extra storage option of 30GB or 128GB.

And what would be the alternative? Without eMMC you must buy a mSATA or industrial CFCard as
in the older days and if one is failing or burned you need also another one.

When you get your Unifi controller set up, dont forget to add DHCP option 43 (string) with a ascii-to-hex converted value of your controller's IP if you want "zero touch" adoption of your WAPs.  pfSense makes this easy (put it in additional bootp/dhcp options area). Here's a neat website that does the IP-to-HEX conversion for you:
http://www.miniwebtool.com/ip-address-to-hex-converter/?ip=8.8.8.8

:)

Thanks for posting this been looking at those little boxes for a while thinking about them. OpenVPN with AES should be fast as there is hardware side silicon.