@hefferbub said in Supermicro 5018D-FN8T - force 10Gb SFP to 1Gb speed on PFSense?: Does anyone know how I can make this work, with either an SFP transceiver or by forcing a 10Gb transciever to 1Gb? Hi, We use this Supermicro MOBO. We are affiliated with FS.com in Germany. Said dual rate SFP (+) module with Intel code modified by FS com eng. (for X557), we can use it well. We asked for this through our designated contact person, but I think it is also possible at the technical customer service. It’s important, because you say you get a bare fiber, you need to know how far the other end of the connection is from you, the module you are using is 10 Km. Try to install the module in a switch and read the DDM / DOM info from the link. You can then experiment further in the Supermicro unit. btw: @Cool_Corona if we are already talking about a media converter, we prefer CTC Union or Allied Telesis https://www.ctcu.com/en/fiber-series/simple-media-converter.html https://www.alliedtelesis.com/en/products/media-converters +++edit: Avago - Agilent Semic. - HP Hewlett-Packard is known for providing good protection for its products and configurations, therefore one should always do tricks with these. Avago manufactures super LED and Laser diode stuff and adds LVDS drives, this is how they enter the optical transmission market. Intel also works together them, but Intel PHYs work properly with Intel codes.

Yeah, that shows it doing nothing at all so you can;t be moving any traffic over the OpenVPN at that point. OpenVPN is single threaded so what you're looking for is if one of the idle processes goes to 0 (or very close to it). In that case it is CPU limited and something else may get you better VPN performance. Also if you let top run a few seconds it will show you the CPU usage by type line at the top. Steve

Is that on a current snapshot? It's a known issue: https://redmine.pfsense.org/issues/10861 That should be fixed in the next snap if it's not already. Steve

@stephenw10 Thanks stephenw10 your method did work Keep it up

This probably: https://forum.netgate.com/post/867995 Just fetch it and set the file permissions, it's not a particularly fancy program.

I assume some relatively high powered Xeon? Almost anything is high powered compared to a D525. If that also only passed 300Mbps then something else is throttling it. Steve

I’m happily using Netgear Insight switches (GC728X and 2 GC110) at home and if you ignore the insight app the web interface is great and far more fully featured. Even the GC110 with 8 RJ45 and 2 SFP ports do LAG, VLANs, IGMP snooping, etc. They often seem to be on sale at Amazon at stupid prices - which is when I’ve bought them.

@Cool_Corona said in newer fanless PC (coffee lake?): https://silentpc.com/fanless-pcs That is pretty cool stuff. Expensive, but they look like good options for many applications.

@stephenw10 said in Huawei E3372s-153 no Link Interface(s): However you will hit problems if/when you reboot as ue0 won;t exist until the device is mode-switched Yup. No easy way past that. That's why you don't want something in HiLink mode if possible. Steve

@rafastari said in Mac Mini Core i5 2.3 Mid 2011 Network adapter issue debug: @NollipfSense I was confused! I was looking for a dual PCIe card box, did not understand it was a box for one card, and the card has two or more ethernet ports... Thanks for the info and links... ! From hanging out at ebay it seems Mac minis mid 2011 are around $150 at the low end ( 4gb RAM and 500 Gb Hard drive) and around $200 at the high end (8gb RAM and 1Tb Hard Drive) ... pretty popular since they are user upgradeable... I went for the 2011 server with the quad core core i7 processor for $200 then upgrade it with dual 128GB SSD and 16GB RAM. I really wanted the 2012 Mac Mini server with the quad core i7 processor ... just didn't want to spend over $200 at the time, since those with 16GB RAM, and SSD was pricey for the seller upgrade.

Hi All Thanks for your feedback. I have decided to purchase a SG5100. Best regards Clive

Sorry to hear that and as already mentioned there isn't anything you can do about the faulty port other than fixing the hardware, though 3 ports are normally enough for pfSense, you could get a bigger/extra managed switch if you need more ports. After how long did the port fail? I'm also planning to get a Qotom box soon but reports like yours are concerning. I wouldn't worry about losing one port but losing it when I'm not around to swap the cable and reconfigure the box. I'll probably have to think about using two ports to connect to my LAN switch for failover, though according to Sod's law those aren't the ones that will fail but the WAN one which I can't use two ports for. Has anyone else had any early failures with Qotoms?

Anything using the ath(4) driver will be PCIe. So, yes. It's different to pfSense in many ways. I don't use it frequently enough to know everything I need to so the when I do need to configure an access point etc I usually Google a lot. Steve

As @Gertjan says do not use USB. I can personally tell you that is not the best idea. It might work, but you can also get unexpected issues. When I was first starting out with pfSense I tried that on a tiny mini PC and well if you want to know how that went, I stopped doing that pretty quickly. Details here in case you really want to know, https://forum.netgate.com/topic/122317/solved-pfsense-is-not-making-sense. When you are new to pfSense, there is already a learning curve, so you don't want to shoot yourself in the foot like I did by using unsupported (not officially supported) hardware like a USB nic. Hardware requirements are minimal. Even a 10 year old PC will be overkill for most common applications. I can also vouch for that because that was what I did after the mini PC issue. The only issue with that will be power usage. If you're not concerned about power usage, go with the old PC and cheap PICe add on intel nics (preferably intel). Watch out for fake intel nics being sold online. If power usage is an issue, the laptop with the VLANs on a single interface as suggested above could be a good choice too. Edit, I forgot about the AES-NI requirement. A really old PC may not support AES-NI so that could be an issue later on down the road when it does become a requirement. Make sure whatever you end up making your permanent hardware has a CPU that supports AES-NI. In the meantime if you want to get something up and running and play around with, it won't matter.

@billl said in DC-DC UPS for Generator Systems: a two-pronged approach! haha :)

There shouldn't be any problems specific to the 7100 for that scenario that I can think of. If two devices are in the same WAN subnet you could be hitting issues with reply-to for traffic in that subnet. Add your own rule(s) on WAN which pass traffic from the other unit(s) in the subnet and in the advanced options of the rule, check the box to disable reply-to.

Yes that seems reasonable. You would only see >600Mbps using all full size packets. Steve

@captain_finnegan Finally, I've been looking for someone that has UK FTTP and runs a PFSense box that can keep up with the 900/100 service. I have Zen and Fritzbox and whilst that keeps up I seem to have to reboot it now and again and I ideally want something a bit more secure and lets me monitor how my connection performs. Now I need to track down how I can re-create that setup.