For that high VPN throughput, the 4860 would be good, though I wouldn't use the ports as a switch as others have mentioned. A good case can be made for keeping that RT-N16 around as your AP. I had an RT-N16 running Tomato but it recently died. It was only acting as an access point though. Replaced it by a Ubiquity UAP-LR and a Netgear GS108T, which was still cheaper than an equivalent current model Asus wireless box.

Follow Stephen's advice and test it under stable. If the nic works fine under FreeBSD-stable, report this on the open redmine ticket.

@Jason: @bhawk6901: @Jason: It's not the number of tunnels that's the problem, it's the throughput.  Those boxes aren't very fast and will top out pretty low.  I've long since stopped using my 6501 so I can't speak to improvements made in 2.2.x, but I doubt you'd see more than 70-80Mbit/s. yes throughput would be affected i know we have 8 branches so as per your estimate, throughtput will be hardly 10-20 mbit/s :/ 8 IPSec tunnels is nothing so you're fine there. As to throughput, yes, if they're all running full out, expect no more than 10-20Mbit/s per location.  If you expect them to be running in that range you may want to consider limiters or traffic shaping as well, just to make sure that one location doesn't monopolize your entire capacity. Thanks for your insight :)

STARRED THIS - It wasn't directly the solution, but it got me on the right track. BIOS had the Gen1/2 option (default was AUTO), but forcing a specific setting had no effect. What DID have an effect was the BIOS option to enable PCIe - Default was AUTO, and I had expected it would default to active - but apparently…. not so much.  When I forced it to enabled, it showed right up. So, THANK YOU!!!!!!

Well I installed the OS today, and came up with this realtek chip 8168/8111 B/C/CP/D/DP/E/F/G See my post https://forum.pfsense.org/index.php?topic=93797.0 At first i thought something was maybe bad drivers. Anywho after installing i noticed i had 3% cpu idle with NO traffic at all… makes me wonder if it will handle a full gig

Sorry for sounding stupid i have never seen a network card look like B/C/CP/D/DP/E/F/G before

even epia cl 6000 is not too old, although it's older than the cl 10000. pulled mine out of the "junk box" a few days ago to build a replacement for my current router. :)

Those Xeon D's look ideal but as mentioned, very hard to find and they look pretty costly as well, although the integrated 10GB Nic offsets that slightly. I think I can probably spec up a Xeon E3 for a similar price to one of the C2758's so I guess that's the best option for now. Thanks for the replies

I put in one of these at my house. http://www.microcenter.com/product/428946/EAP900H_High-powered_N900_Indoor_Dual-Band_Access_Point-Wireless_Distribution_System_(WDS) For businesses I recommend open mesh access points. Both are solid business grade hardware.  I have so much 2.4Ghz interference at my house, that band is almost unusable.  5Ghz works great for all my phones, and laptops that support AC.

+CFUN=1 doesn't help. Code: [Select] CHAT: The modem is not responding to "AT+CFUN=1" at ModemCmd: label. This is a problem. The only command we sent to modem was -Modem On- If its not responding to that then there is a hardware issue. Did you try going to console and use #8 Command Shell and type ppp just to see the output? It will give you some clues without diving into "Term" mode under ppp console… Probably need to address your hardware issue first though.

Look what I have :) $ df -hi Filesystem          Size    Used  Avail Capacity iused ifree %iused  Mounted on /dev/ufs/pfsense0    1.8G    190M    1.5G    11%    5.8k  237k    2%  / devfs                1.0K    1.0K      0B  100%      0    0  100%  /dev /dev/ufs/cf          49M    89K    45M    0%      23  6.5k    0%  /cf /dev/md0              38M    584K    35M    2%    100  5.5k    2%  /tmp /dev/md1              58M    19M    34M    36%    148  8.0k    2%  /var devfs                1.0K    1.0K      0B  100%      0    0  100%  /var/dhcpd/dev

Generally speaking you can do that however there are various customisations that go into pfSense. It seems maybe some required library has been removed. Do you have any further error messages we could look at? Maybe try booting in verbose mode. Steve

I am almost certain that it isn't stored on the BIOS ROM. However, yes, make a backup first. I have never attempted to go back to the Watchguard OS personally. Steve

Yes, you may have the 1MB rom chip. If you backup the existing BIOS ROM what size is the resulting file? Steve

@Jason: @messerchmidt: a new xeon-d with ddr4 ecc build may be what best suits you http://www.servethehome.com/supermicro-x10sdv-tln4f-review-platform/ atom power consumption and it is faster than the 1230v3 … which would be awesome if you could actually buy these.  I want to buy 3 of them for a new vSphere test lab.  Everyone that claims to have them really doesn't if you take the time to call and check. relatively new and hot item, for data centres,etc. So if you are not in a rush, might be worth the wait.

He signs his posts "Frank from Germany".  He's probably your best bet for hardware advice, in my opinion.  And probably a lot easier to follow in German. Edit: Actually he signs 'em "Cheers from Germany \n Frank"

Don't forget a UPS for these customer firewalls.  A few power failures and UFS gets hosed.  Then you get to reload pfSense and restore the config.

Thanks for all the help folks… I figured it out myself and now have the wifi card on the SG-4860 up if not yet fully configured to my satisfaction.

One quick update on my previous results; after a full halt, cut off and restart, text started to show as expected. Thank you all for posts. Happy with the results. Regards,