Okay, thanks for the recommendations. I will go scavenge at a few of the local shops and if I can't find anything I'll check out ebay or something. Again, thanks for the pointers! -Noah

At the least you would need a version of pfSense compiled for the PowerPC instruction set (plus appropriate device drivers, the referenced page  doesn't say what NICs are used so I can't say if there already a FreeBSD device drver for them). I don't know of any version of pfSense for the PowerPC.

I can confirm that my 4GB Sandisk Ultra is smaller than the 4GB NanoBSD image requires.  Ended up using the 1GB image and allowing for the remaining cells to be used for failed cells instead.

@jasonlitka: I'm not sure those boxes will be able to do L7 filtering and squid with 20Mbit/s.  You're probably going to need a box with a C7 or Atom processor. I concur.  An ALIX is too much for what you are asking.

I would like to Thank All who replied/helped in this thread. Especially clarknova with the detailed example on setting up the VLANs on a Netgear switch. I setup the switch as clarknova explained and then pfsense on initial install[took me a few tries, but figured it out]. Also the last post by OP helped me finally getting working. I'm on comcast, needed the WAN[vlan0 in my case] to spoof the Real NIC's MAC address. After that all was working great, much better than my old WRT54GL running tomato. Now all I need is to setup the wireless part. Hopefully I can find a detailed thread like this one for the wireless part. EDIT: For the record I'm running pfSense on a Thinkpad T23 with 1GB of ram and the Netgear GS108T switch. THANKS AGAIN ALL! :)

@vladk: If I do ifconfig re1 media 1000baseTX I still get 100megabit media: Ethernet 1000baseT (100baseTX <full-duplex>)</full-duplex> That indicates that it is only negotiating at 100baseTX on the wire with the other device. The first parameter is what it wants to use, the value in () is what is actually in use on the wire. I suppose there could be a driver bug with the re card you have, but I've used other re devices (including one in my desktop) on gigabit just fine.

IPsec should use any built in crypto accelerator automatically, so long as it hooks into the BSD crypto system as others have mentioned. It's only OpenVPN that requires a nudge in the config to use it.

One last bump before they go on ebay…

I don't quite see the point in getting the Soekris dual port cards.  The Intel Dual ports are dirt cheap BNIB off ebay.  I got my Dual-port MT at US$27 with free international shipping. For the price of the Soekris dual 10/100, you can get 3 of the Intels which are Gbe capable.  That's a 200% immediate replacement buffer in lieu of a warranty period. The Quad port MT runs for about US$130 typically but I've spotted units going for US$70 on and off.

The IP addresses all look good to me but I should say that I've never run pfsense virtualised so you're on your own there! It would be nice to get a third opinion. Still there nothing like trying it and see. I'm sure it will help some other forum user at some point to get your experiences.

here i'm working with 3 alix 2d3 1 server and 2 clients all running openvpn and no performance problems 1 of the clients connection was a wimax 54km long and runs prety good :D

@TooMeeK: Now I'm looking for my personal purposes mini-ITX board supporting virtualization to use it for pfSense. I see Atom's everywhere ;/ that has no VT-x support. Here are Atoms with VT-x support: http://ark.intel.com/MySearch.aspx?VTX=true But I cannot find them on the market. Maybe you haven't told us all your constraints. In about 5 minutes and google search for "mini-ITX z530" (z530 is one of the CPUs on your list) I had over 4000 hits and the second one lead me to http://emea.kontron.com/products/boards+and+mezzanines/embedded+motherboards/miniitx+motherboards/. I suspect a bit of poking around with the links (exchange location or contact us) will get you to details of a sales office prepared to answer questions about a particular product. I have no experience with kontron equipment. I'm just pointing you to a possible source for what you seem to be looking for. Another option would be to get a mini-ITX motherboard without CPU, then add your own CPU (Intel or AMD) which you have selected to have the virtualization technology you desire.

@dreamslacker: It's not supported natively in 8.1R either so you either compile it and add the module for loading to the the loader.conf file or wait for pfSense 2.1 where it might be based on a FreeBsd build that natively supports it. If you don't mind manually compiling the module and loading it, here's a thread where someone's gotten the same NIC working working: http://forum.pfsense.org/index.php?topic=26592.0 Thanks for post dreamslacker, I'll try 2.0 BETA if that doesn't work, I'll follow instructions from that post. Appreciate your help.

I've had good results for casual usage from a TP-Link TL-WN321G and a Tenda W311U around my steel frame two floor 200sq mtr house supporting up to 4 wireless clients. These are supported from pfSense 1.2.3 and pfSense 2.0 (respectively). I have not stressed either by trying sustained bulk transfers. Neither of these will be suitable if you need an external antenna for any reason.

@mikinho: …the issue with not being able to get a DHCP lease was that the IPMI was acquiring my single IP address before pfSense could. Anyways, all is working very well now.  pfSense rocks and Supermicro SYS-5015A-PHF is one of my favorite little servers.  Hopefully my stupidity helps someone else. I have the supermicro X7SPA-HF and love it. I have been trying to figure out why the gateway had two IP address entries for the pfSense box. I read your post and then it hit me, one of the IPs is for the IPMI. Thanks very much for the post!  ;D By the way, how did you secure IPMI?  The IP address for IPMI is located on the same interface as the external (WAN) address.  This worries me a little bit.  Of course the WAN address is a internet routable address and the IPMI is a internal 172.x.x.x address but still, they are on the same interface.

Hi, are there some parameters to prevent the UMTS Modem to use other mobile networks? I dont want my UMTS modem with vodafone sim dial to other networks than vodafone. cya spiritbreaker

http://www.pfsense.org/index.php?option=com_content&task=view&id=52&Itemid=49

http://www.ironsystems.com/Customkititems.asp?kc=SYS-S-AR200&eq=&Cc=ACLASS