@stephenw10 Thanks, saw the loader.conf.local stuff after I wrote that post, thanks for the reminder! I also didn't know you could pkg add - when pkg install realtek-re-kmod didn't work, I just hacked my way forward. Thanks for all the info!

Well try it and see if you have the hardware. The most difficult part of that is probably going to be setting up dual booting with OpenWRT and pfSense. I'm not sure I've ever seen anyone do that.

That's the renamed Netasq U30S right? So the same applies here with the unsupported switch?

Steve

@daemonix

Compex WLE200NX is able to get new for ~30 € and clone from other countries (same chip) will be able to get for ~10 €
so if you will be able to get hands on, it will be the best choice for you to insert WiFi in the SG-1100.

The Squid/Squiduard hangout was @jimp

@cool_corona said in Hardware for Firewalling and routing 200 Vlan at 2x100Gbps ?:

Sorry but at that speed you need consultants. Not a forum...

This was the best answer given here as I see it right.

Network part and devices

DPI part and devices

Firewall, routing and inspecting part

So you may see, products are all available on the market
and for sure only for brainstorming it might be also good to ask here and there in a forum.

Dobby

MikroTik LtAP
might be one more option, you may be able to sort it with any kind of modem matching your choice and will and you
can insert up to three SIM cards!

@nljorgenj
See
https://docs.netgate.com/pfsense/en/latest/hardware/index.html
amd64, x86-64 Processor and supported NICs is what matters most. The other specifications are not demanding.
Performance requirements depends on your usage requirements, mostly bandwidth loads, power consumption and cost.

Yes, you have to run it on a dedicated machine b ut it can be both the source and sink in testing throughput.

Steve

@phill-0 said in RT-AX89X and repurposing an old computer:

I haven't checked, but I don't think my computer runs on plutonium. lol

You'd also be amazed how long things last when surrounded by 0K space...

The difference probably won't be as large as you think. No where near the difference between having pf enabled with minimal rules and pf disabled.

Steve

Install the lcdproc package.

Steve

Thank you for your replies and suggestions @stephenw10

We did some more testing - I installed one FreeBSD 12.3 and one pfsense dev on few of the spare HP boxes we had lying around. I wanted to be sure what is the problem exactly, the netgate hardware or the OS.

As far as I can tell this is definitely something related to how FreeBSD handles these smart USB devices that have both storage and modem modules.

20220614_082622.jpg 20220614_082146.jpg 20220614_075649.jpg

For virtualized pfsense appliance this works because you can separately mount both modules (storage & modem)

2022-06-14 10_51_12-New USB Device Detected.png

Perhaps netgate hardware team could investigate this as well and and see if this could be patched somehow?

Yup, run pciconf -lv at the command line to see what those cards actually are.

Edit: Yeah they are Realtek RTL8125 so you''ll need the alt driver to use them.

Steve

The fact it shows interrupt load is not a bad thing in itself, that's where the load from pf is shown.

If your required throughput is <500Mbps then you'll probably have no problem.

Steve

@steveits Tank you..:)

You might be able to get that from dmidecode.

Steve

It's failing to negotiate the link speed with the converter for some reason.

Try a different NIC as WAN in pfSense.

Try a different media converter if you can.

You could try setting the interface to 1000baseT full duplex but that should never be required for Gigabit.

Steve

Hmm, well that looks pretty good. It at least proves the NIC is good.

I believe speedtest uses 4 connections though it could vary by server. You might test at 2 and 4 parallel streams in iperf to get a comparable result.

If you are able to test against your own server locally that will also be good test.

Steve