@s_mason16:

and what about the 4-pin ATX 12V Power connector on the motherboard?

I know about pico power adapters but not much and always just figured they were for very small atom soc units.

you should be able to ignore it and just use the 20 pin connector–the system shouldn't draw enough that the extra power connections are necessary. if you actually need the extra pins, you also need a bigger power supply. :)

Thank you - that was a piece i was missing.

Maybe a stupid suggestion,
but also check if there are no copper taps at the wrong place in your case.
Then you get a shorting on the back of the motherboard.
I have seen this before when swapping a motherboard to another type,
and they didn't look for unused taps they left behind from the previous board.

Grtz
DeLorean

@Fisavelon:

will you recommend me this one?

In short: no.

@Fisavelon:

…put a laptop wireless adapter dual brand and it will do the work as an access point ...

That's the culprit. FreeBSD is not good at wireless.
You are way better off with a dedicated AP placed where it makes sense (radiation wise). The router closet usually is not such a place.

Don't you already have a thread for this :

https://forum.pfsense.org/index.php?topic=135565.msg742232#msg742232

@copcopcopcop:

@Inxsible:

@copcopcopcop:

I am finalizing my new router build and I am stuck on which NIC to buy. I'm trying to avoid buying an intel NIC on ebay since the secondhand marketplace is just flooded with counterfeits.

I know this doesn't answer your question, but read the many posts on this forum which confirm that even the $15-$20 used intel NIC cards work just fine. They might be made by certain Chinese companies but most do use the Intel chipset. If you still want to buy a brand new server NIC card, then more power to ya !

Yes, the cheap $20 Chinese counterfeit NIC's do work, but i think we can all agree that knowingly buying those comes with some very significant durability concerns. I'd rather pay the additional upfront cost to not worry about when my routers cheap NIC's are finally going to crap out.

then buy 2 or 3 cheap ones so you can replace them in case of something going wrong with the years.. still much cheaper then the 200$+

The SD card slot is (currebtly) only for recovering the firmware in the event that the USB recovery fails.

It would probably be possible to use it for caching but would require some hackery and the speed of SD cards is such that it might prove…. disappointing!

However, if you want to use Squid to cache content to reduce load on your narrow WAN I would probably not choose the SG-1000. It will run Squid but with the limited RAM and storage available it won't provide the greatest experience.

Steve

Xeon E3's are great processors to have. A bit of overkill for a home network but might serve you well for IDS/IPS.

I agree it reads like you're looking for an answer that doesn't exist here.

If you want the highest OpenVPN speeds you can have, get the fastest single thread performance CPU you can afford. Though as said above spending twice as much will probably not result in twice the throughput.

Steve

No.

The Realtek NIC on the 'modem' card is connected to the host via PCIe just as a separate NIC would be.

Steve

I don't anticipate any of those components failing anytime soon. Nothing moves or gets particularly hot. If you have to replace anything it will probably be from a bad component that will fail in the first few months and that's a crapshoot.

Just keep a thumbdrive loaded with the installer of the same basic version (i.e., 2.4.x, 2.3.x) of pfSense that you use and keep your config.xml's saved somewhere and you should be fine for many many years to come.

Old desktop workstations often work for well over a decade and they have moving parts, deal with on/off cycles, etc. Your box will likely last at least that long and probably longer.
The first thing to go will probably be capacitors, and you could even replace those for a few bucks and keep marching on if you wanted.

J3355B

@tdale:

Thanks! I'm out getting lunch right now when I get back I'll try that. I'm taking it down to the datacenter tonight I'm trying to figure this out before then haha.

If you can't figure it out in time, just take a ton of pictures. If needed, take the whole display unit out and disassemble it and take pictures of everything.

USB Ethernet adapters are bad, don't use them. If you must: get a supported one but don't expect high reliability or speed. Desktop users often don't notice problems because the way they use it often doesn't show much problems. Firewalls/gateways have a different usage pattern and different needs, so the same hardware might not work as well as you think. On top of that, the drivers are often lacking and have firmwares missing (which is what you currently might be experiencing – the chip [ not made by microsoft ] probable is functioning in a basic 100Mbit mode because the driver in FreeBSD can't or won't load the chip firmware via USB into the adapter to enable the extra functions).

@cyberlocc:

there is a pretty big diffrence from a core 2 quad at 3.5ghz and a kaby lake Xeon at 3.5ghz.

No kidding.  That guide is ancient.  ~150 users/nodes shouldn't be a problem even with the most basic of hardware (that otherwise meets your 1Gbps requirements).  I'm serving that many nodes with virtual machines that have 1GB of RAM.

@Waqar.UK:

@iormangund:

True, it is a lot, but I have yet to find a decent small fanless equivalent other than a shuttle ds77u. At least that has intel nic and aes passmark score over 1k.

Thanks to advice from this forum you can build an i5 for cheaper.

The part that's causing me the issue though with building one is the motherboard, all ones I have found that would be perfect for the job would need a bios update for kabylake, and I don't have a skylake chip to do a bios update with.

Emailed some manufacturers asking if the boards in question will post with a kabylake for an update but no response yet. (I know I could just get a standard board, but if i'm building my own I want ipmi and at least 2 intel nics, ie Jetway NF592-Q170. No kabylake compatible boards that don't need a bios update that fit that afaik)

I have a XTM 535 and interested in it as well.

Now that XTM 53X are dropping in price as network engineers are upgrading to newer hardware, a good opportunity to revisit the new generation of XTM 5 series of routers. XTM 515, 525, 535, 545.

Thanks for suggestions guys.

I will contact netgate also for models and support.

Thank you.

^That.

When 2.4 is released the Core-e will essentially be obsolete though there will be security updates for 2.3.X for some time should it be required.

Even if that were not the case all of those boxes are now very old with likely many many thousands of hours on them and the component failure rates to match.

As much fun as I had with those boxes I could not recommend anyone does so now if they have another choice.  ;)

Steve

Jus got new record

IPSec AES-256-CGM - 326 Mbit/s