If your Realtek chipset is among those listed here, I have had very good luck with the official driver. The compiled binary for 2.4.4 is here:
https://forum.netgate.com/topic/135850/official-realtek-driver-binary-1-95-for-2-4-4-release

I run two pfSense boxes with Realtek NICs and have had no problems at all with them using that driver. However, I'm dealing with 100/10 cable connections. I wouldn't expect them to achieve full gigabit speeds and I wouldn't trust them for enterprise applications, but for home use with sub-gigabit Internet connections they should be perfectly adequate.

Thanks for this information :)

Ouch! Better than some software/firmware bug I guess though.

Steve

I have no idea what consoles are on that device but from your description it sounds like there is an RJ-45 serial console port. Note that is not Ethernet.
It might have a VGA console too. Possible via an internal header. You would still need an adapter of some type for that.
Do you have anything with a serial port? You could conceivably make a console cable using an old Ethernet patch directly.

Buying a USB to serial adapter and an RJ-45 console cable is the correct way to do this though.

You might be able to remove the boot drive and re-install it in something else depending on what it is and what you have available.

Steve

Thanks everyone for your input. It sounds like I should stick to the cradle points and similar in bridged mode. I was hoping to find something a little cheaper for my customers but sounds like it's more trouble than it's worth.

Thanks @stephenw10. As an update to this, I replaced the Intel Pro/1000 VT to an HP NC365T and all issues have been resolved.

Thanks!

I did not try putting the MikroTik on another port, however I did try only having two of the Intel interfaces up as WAN and LAN, and I still want up having problems.

For fun, I tried installing the ESXi on the machine to put pfsense inside that. ESXi wouldn’t recognize the Intel at all.

@inxsible Got it and point taken. Just to clarify my comment where bigger is better let's say you have a choice between a 12V/5 AH or a 12V /7 AH battery for use in a USP unit or alarm panel or emergency lighting station. For that I’m going to take the higher rated Amp Hour all day long. Same for car battery with a higher CCA rating or electrical panel for your home. Having the extra in reserve for those instances will do no harm. Of course sticking a 200amp electrical service in a 70 year old 800 sq. foot home is probably overkill so there’s that too. I think we could agree in some cases bigger is better but not in all cases as you pointed out.

In any case glad to hear you confirmed my new found 80W PS is a better choice. What I’ve just noticed after switching from the case’s original 220watt PS to the Pico setup is the board is system is running a bit warmer. With the original PS that came with the ITX case the temp was always between 36 to 38.0°C and now with the Pico setup its hovering between 42 to 43.0°C which is still good according to pfsense’s default "Zone Warning" presets so not going to panic yet.. The only answer I have for that is fan from the original PS was keeping a nice flow of air going across the board to assist with the lower temp.

Thanks again for the part list and feedback, all is good. My next objective is to see if I how much uptime I could rack-up without a reboot. We all need goals right..

Thats fixed it, thanks Jim.

0_1539637853298_nvme2.jpg

0_1539637862424_nvme1.jpg

Yes this post is WAY old. But in case anyone else runs into this issue with a SG-1000 device,
I reduced CPU utilization from near constant 1.0+% to .7 - .8% tops via webui changes:

go to Status > Logs > Settings, deselect 'Log packets blocked by Block Bogon Networks rules' and 'Log packets blocked by Block Private Networks rules' System > Advanced > Firewall & NAT, change the dropdown list selection for 'Firewall Optimization Options' from 'Normal' to 'Aggressive'

@syserr_01 said in DIY-Solution or SG-1000 or SG-3100? Home-Office Tunnel for small networks:

... the T620 Plus is a reliable solution? Something that lets me sleep at night?

@bfeitell said in DIY-Solution or SG-1000 or SG-3100? Home-Office Tunnel for small networks:

The HP thin clients are pretty darn robust.

Sorry, have to disagree here.
We put a couple of those devices behind touchscreens to work as their brains and connect to the control system. Four out of 5 failed within the first year of use. So reliability score is nowhere as good as expected.

This also means that I wouldn't sleep well knowing I rely on these devices.

When it's important to you to have the service up and running when you're away then nothing beats new, reliable hardware custom made for this task.
Granted, these can fail as well but it's not as likely.

@johnpoz it can push gigabit all day long under linux+iptables. last I looked it was a little slower with pf (800 something Mbps) but as I said above it may be better with the isr deferred config. it cannot do gigabit pppoe, and openvpn speeds are somewhere around 50-100Mbps.

OK, thanks for reply.

It may be worth trying with UDP mode too. I just did that and got a little above 700Mbps. I wouldn't be shocked if it's just not possible to do much better than that with these Realtek NICs.

I assume you want to setup a VPN from pfSense to the RV50?

Have you tried this and it didn't work? How did it fail?

There is almost certainly no way to run pfSense on the RV50.

Steve

The driver itself has been upstreamed and is now in the FreeBSD package so is included. But the GUI components have not been updated to include it (yet) so it must still be started manually at this time.

Steve

Thanks!

I was looking at the Qotom systems as well. Decided to work with what I had on hand.
ESXi gives you a browser based interface, and you can click on VM and they open in window. Edit VMs, meaning assign more RAM, Disk, or even a virtual CD-ROM that you mount as an ios. Really cool stuff. I attached some screen grabs.

I thinking of building a HTPC, when I'm done with pfSense. Likely to put the Mini back into commission for that.

BTW I've got an Iron Man theme going... Pepper Pots, Happy, and Heimdall :-)

1_1538437534103_ESXi.png 0_1538437534103_OSX.png 0_1538437516842_Ubuntu.png

The Hades Canyon has 2 intel Nic's 1 is a i219-lm the other i210-at. I can tell you at the time of writing this my system under full download speeds running suricata never goes above 10% CPU. This is a beast

@occamsrazor said in USB 3.0 to Gigabit Ethernet:

Does the Hades Canyon have Intel NICs or something else? Not planning to get one, but just curious.....