Ok, great, that's what I would expect to need there.

@network-stack-445 said in Is pfsense supported on AMD Ryzen Embedded R1505G: The goal here is to stay max at 24W and have atleast a 4 port pfsense and get atleast a 1Gig The simplest, what I can suggest, if the cost is not a big question... (and you want to assemble a high-quality tool quickly) https://www.supermicro.com/en/products/motherboard/M11SDV-4C-LN4F (since we use it I guarantee that it is free of problems) or look here in the mITX category 1 - 10Gig, for networking MOBOs https://www.supermicro.com/en/products/motherboards/embedded-iot-boards for SOHO (cheap - but industrial quality - and here you can choose RAM, CPU, etc.) https://www.asrockind.com/en-gb/mini-itx these are usually 2 port Eth., so I recommend a RISER card and an Intel based NIC add-on f.e. (new or eBay): https://www.silicom-usa.com/cats/server-adapters/networking-adapters/gigabit-ethernet-networking-server-adapters/ or eBay f.e.: Cisco Intel I350: https://www.ebay.com/itm/332514926494?epid=1863966819&hash=item4d6b6f1f9e:g:vgEAAOSweBhaVJpR BTW: The 24W power consumption is pretty exact value, what I'm proposing is MOBO Epyc 3151 if I remember correctly 35W, but I've never seen 10-15W more power consumption with 8GB RAM + 4 port 10Gig I710 + 4 port I350 + 128GB Nvme SSD +SATA DOM So it depends on many things...

What exactly is the issue you;re seeing here? Some graphics output issue? Generally you do not need a monitor attached to pfSense so an AIO style box isn't a good target. Steve

@hugovsky said in Tethering Internet access: https://forum.netgate.com/topic/117929/how-to-usb-tether-on-pfsense-2-4-as-router That's one of the problems, having guides from years ago, which make the process sound so complicated. I had occasion to try tethering my pfSense box today because my 'dedicated' TP-Link Archer MR200 would not connect to my ISP - I even tried a few different SIMs. But the tethering was extremely easy. I just plugged in a cable from my phone, switched on 'USB tether' on my phone and 'ue1' popped up so it was just a matter of assigning ue1 as the WAN interface. This is on 2.4.5-RELEASE-p1 which I see celebrates its first birthday today. The date confused me at first since I thought a new release had installed itself, but then saw the year - 2020.

Hmm, well to rule out the obvious is it possible the fibers are swapped and they are both transmitting on the same one? Surprising that module does not offer 1G. I guess it's just not dual speed. Steve

I don't use Suricata but pfBlockerNG-Dev Version with some List, TLD Blocking activ. But Suricata will use, up to 1GB, perhaps additonaly. The SG-1100 with eMMC Flash, same Settings: [image: 1622486651089-1bd2b708-ca9c-4617-af4e-8b19aa924183-image.png]

You don't need a cross-over cable for Gigabit. No special driver should be required. If you are trying to ping between them then I assume they are detected as interfaces and allow you to assign them and set IP addresses? Did you add firewall rules to allow pinging on the new interface? Steve

Hmm, those are supported by the driver in 2.5.X: https://github.com/pfsense/FreeBSD-src/blob/RELENG_2_5_0/sys/dev/e1000/e1000_hw.h#L193 Check the boot log. The driver may be failing to attach for some reason. Do you have SFP modules in there? Incompatible modules can present like that. Steve

@stephenw10 Thank you Sir. This was very helpful.

Thanks... I think I'll avoid the RAM disk for now and just keep an eye on memory.

Hmm, hard to think what that might be if it's only IPSec that stops responding. Do you mean there are no IPSec logs or no logs at all? If are no IPSec logs (until you reboot?) that implies the ipsec daemon stopped responding perhaps. I would look at the output od ps -auxwwd for ipsec, charon and strongswan lines. I haven't seen that on the one I have here though it doesn't get the use it once did. Steve

Ha, that'll do it.

Was it still running the default config? Pretty much has to be hardware if so.

Mmm, disabling MSIX globally for all PCI devices should really be a last resort option anyway.

@EveningStarNM After my upgrade to 2.5.1 I also was faceing some "strange" issues with my broadcom nics, too (I can remember, i several problems some years ago...) However: Given a special situation my broadcom nics started to change states from up to down and vice-versa. Was well documented in my logs. I started searching and stumbled about several threads and blogposts pointing me to the drivers for broadcom nics. https://www.it-react.com/index.php/2021/03/08/pfsense-re0-watchdog-timeout-error/ https://forums.serverbuilds.net/t/guide-resolve-realtek-nic-stability-issues-on-freebsd-pfsense-2-4-4-2-4-5-2-5-0-opnsense-use-2-5gb-realtek/3555 The blog-post gives a brief introduktion to the problem and solution. I went with the now already availeable package through pkg. Solved my problem and as it seems the day to day performance seems to be better as well. Might be worth to take a look into.

@stephenw10 Thanks. Seeing the traces were so identical, I checked twice: no confusion, those were two true distinct crashes/reboots. I had fully removed the good-old trafic shaper right after my last post. Seeing no new issues for more than 12 hours, I started rebuilding a new shaper configuration. Looks stable for now Thanks.

@stephenw10 ok, a bit more complicated than I thought then... If anyone have any idea what might help I`m open earl! Or else there seams to be more work to getting this to function than it is worth it..

They are still driven with an AC signal, you can change the tone of the beep. I'd be amased it didn't work when connected the other way. But anyway I don't believe that is the issue here, more that the device is not presented to the OS in a way that FreeBSD/pfSense can use as /dev/speaker. Steve

I assume you want to run the card as an access point? Most of the Intel driver do not support hostap mode so cannot be an access point. No, there is nothing significantly newer than the Atheros AR9380 that is supported. Yet. Steve

Hmm, interesting. We don't build that module though it is in our ports tree. You might be able to load the package from FreeBSD 12.2 stable directly. Steve