@Gertjan hi!
I don't have any these packages installed.
I have many open-vpn site-to-site and ipsec site-to-site connections (50) .

Outputs:
systat -iostat

systat -iostat /0 /1 /2 /3 /4 /5 /6 /7 /8 /9 /10 Load Average || /0% /10 /20 /30 /40 /50 /60 /70 /80 /90 /100 cpu user| nice| system| interrupt|X idle|XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX /0% /10 /20 /30 /40 /50 /60 /70 /80 /90 /100 ada0 MB/s tps|XXXXXXX da0 MB/s tps| da1 MB/s tps| da2 MB/s tps| da3 MB/s tps| pass0 MB/s tps| pass1 MB/s tps| pass2 MB/s tps| pass3 MB/s tps| pass4 MB/s tps| pass5 MB/s tps|

iostat -c 10

tty ada0 da0 da1 cpu tin tout KB/t tps MB/s KB/t tps MB/s KB/t tps MB/s us ni sy in id 0 0 11.0 12 0.1 0.0 0 0.0 0.0 0 0.0 2 0 2 3 93 0 234 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 0 3 96 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 2 0 1 3 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 2 96 0 78 15.2 66 1.0 0.0 0 0.0 0.0 0 0.0 2 0 0 2 95 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 2 0 0 3 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 2 96 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 4 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 4 94 0 78 10.8 55 0.6 0.0 0 0.0 0.0 0 0.0 2 0 2 5 92

@DaddyGo, actually instead of using a custom made cable for 12V supply out of PWS-203-1H psu, one can use the connected 8 pin 12v line into the 4 pin onboard connector, keeping the yellow lines at the left. One just need to use the bottom four pins of the connector. To insert the cable align the pins of the connector to pin 1 and 3 side of onboard header and just push till the point it goes in. It will not go till the bottom due to obstruction from adjacent USB header but a stable connection can be achived.

Now just the PS_On of the ATX connector to be grounded using a jumper for continous 12v supply. This is also done on the custom connector as shown by you.

Yes it's a harmless notice. It's not something we would address directly. If it gets fixed upstream in FreeBSD we will pull that in.

The 4200 shows the same thing:

uart2: <16750 or compatible> iomem 0xfe03e000-0xfe03e007 irq 16 on acpi0 ns8250: UART FCR is broken uart2: console (115200,n,8,1)

It doesn't affect the console.

Steve

@Dobby_

Yeah I just have 200mbit WAN, but pfsense runs behind another router, so that won't even be a problem, it's more the lan side where 2.5 gb will become handy later.

@sarrasine
Pretty sure they offer a free trial so you can try it out. App also does SSH, Telnet and probably a few other protocols.

@stephenw10 sent thanks!

Most of the Checkpoint hardware I've seen are Portwell/Caswell appliances so should run any x86 OS OK. I would expect that work fine as long as it's not locked down in some way.

Steve

@beerguzzle said in SG-2100 factory reset does not remove packages:

I don't find bugs, they find me.

Ha, yup I know that feeling!

@stephenw10
I'm not 'concerned' ... I just aiming for as low power waste as possible. Just min/maxing it. :)

At the downloads page: https://atxfiles.netgate.com/mirror/downloads/

@SteveITS Restoring the backed up config via the GUI did the trick, all the packages are there now 👍

Instead of uninstalling the ntopng package, I disabled it in the settings. So with that, I'm crossing my fingers that my SSDs will last longer this time :-o

@viragomann Thanks a lot!

I had to reconfigure the LAN and WAN assignements upon reboot, which was not that hard. Then the vlans had to be redirected to the new LAN. And it is working.

I do have some questions on the outcome.

My LAN interface still does not have an option for 10Gbase-T. It only has autoselect.
bba2ff40-0303-4c87-ac11-ef8923904e2e-image.png

Speeds are definetely better, but far away from 10Gbit/s.
Is this normal? Is there any other configuration I have to do to get the right intel driver for the interface in pfsense?
I was looking at CPU usage and it goes to about 9%. Once it hit 30% when running iperf3 -P 10. Which resulted in lower speeds in sum :/

I do have a high MTU set on the network adapter of the windows PC I am running as the iperf3 client. And I haven't changed anything regarding that on pfsense. I imagine that could be the reason for not reaching higher speeds. Different MTU settings?!

6e49445c-1414-4657-9c5f-cdde012df3ec-image.png

c7737fbb-bf5b-4d6b-a4ce-6bb1ec74a570-image.png

@Cool_Corona just changed those settings, it didnt seem to have any effect

@mikey_s said in Install PFSense on a Sophos SG appliance:

Like others on the XG230 Rev2 the LCD works fine, but the buttons are the wrong way round if I recall.

The SDEC driver was developed or the firebox hardware so the button order could well be different. It's possible to set the button mapping if you use a custom conf file with LCDproc. You'd probably have to start it outside of the GUI though.

The alternate driver still prevents some issues for some NICs and supports some additional models. The kmod pkg is in our repo now though so you can just install it from the command line directly.

@stephenw10 Yeah agreed and this is a good fix for now.
At least I fully know what is going on now as well.
It's a bit sloppy for me to go and leave an audio interface enabled.
But I figured it didn't matter as PFsense shouldn't load any drivers for the audio interface as far as I know.
This problem could come back if the BIOS is ever reset or defaulted for any reason, but I at least will know what to do in that rare event.

ASUS consumer motherboards like to mildly overclock some settings by default.
This occasionally results in a failed boot and a "hit F1" to load defaults message which would re-enable the audio.
I'm not worried about it and it will get fixed in a future update obviously.

I already knew what I was getting into building a box on a consumer AMD light gaming motherboard LOL.

Incidentally the Realtek NIC is doing great!
A little slower than the dual Intel server NIC (as expected) that is also installed.
And the Realtek is only going to be used for very rare management of the web interface and SSH.
I did put it through a series of long multi-hour high bandwidth testing to see if I could make it fail
and it did just fine before taking it out of the routing mix.
The install was planned to disable it and install another NIC if it gave any problems.

The hit was minimal and could have been far worse!

Thanks!!

@Jakub_ Sweet, this is at least a good start, appreciate the follow ups!

@lazyt

There are some of them available, but in that price range you will be better
of some of the Netgate devices but they will then 100% supported, also
1U is not even given and last but not least you don´t know how fast
they are in real.

Intel N100, RJ50k, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, Type-C, SIM Slot, TF, 8G RAM, 128G SSD
Intel N100 - 370 € on amazon.de
miniPC

12th Gen U300E, DDR5 8GB RAM M.2 NVMe 128GB SSD, 2 x 10 Gigabit Ethernet SFP, 4 x i226V 2.5GbE
640 € on Amazon.de
miniPC

Pentium Gold 7505, RJ50, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, HDMI, DP, 8G RAM, 128G SSD
Intel Pentium Gold 7505 - 370 € on Amazon.de
miniPC

VPN, Router PC, Pentium Gold 8505, RJ50f, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, 8G RAM, 128G SSD
Intel Pentium Gold 8505 - 440 € on amazon.de
miniPC

13th Gen Firewall Micro Appliance, 2x10G SFP, 6X i226 2.5G LAN Fanless Mini PC Intel i5 1240P, No DDR5 No SSD, 4* USB, HDMI, DP, BIOS, AES-NI VPN Router, WiFi Slot
Intel Core i5 - 640 € on Amazon.de
miniPC

VPN, Router PC, Intel Core I7 1355U, RJ50f, AES-NI, 4 x 2.5GbE I226-V, 2 x SFP+ Optical 10Gbe 82599ES, 8G RAM, 128G SSD
Intel Core i7 - 810 € on Amazon.de
miniPC

Protectli Vault Pro VP6650-6 Port, Micro Appliance/Mini PC - i5, 2X 10G SFP+ & 4X 2.5G Ports, DDR5 RAM, M.2 NVMe or SATA SSD Storage, AES-NI, 16GB RAM, 250GB SSD
Intel Core i7 - 1250 € - 16GB RAM - 250GB SSD
miniPC

Protectli Vault Pro VP6670-6 Port, Micro Appliance/Mini PC - Intel i7, 2X 10G SFP+ & 4X 2.5G Ports, DDR5 RAM, M.2 NVMe or SATA SSD Storage, AES-NI, 16GB RAM, 250GB SSD
Intel Core i7 - 1500 € - 16 GB RAM - 250 GB SSD
miniPC

Supermicro SuperServer E300-9D-8CN8TP IoT Box 8-Core D-2146NT
Intel Xeon-D 2146NT - Supermicro 4 x 1 GB, 2 x GbE, 2 x SFP+ - 2300 €
1,5 U

Correct the 2100 SoC has no thermal sensors pfSense can read. There is no driver that recognises multiple devices like there is in x86. For arm each device has to be specified. The 3100 does have a readable sensor. The SG-1000 did have a sensor we could read but the values from it proved so inconsistent that we did not display it.

One more bit of odd behavior from this card in case anyone has any ideas: When installed in my system, which is a HP slimline desktop S01-PF1013W with a Pentium Gold G6400T, one of the RAM slots is effectively disabled. The system acts as if it has no RAM installed if only that slot is populated and has half the RAM expected available if both are populated.

I've seen this once before, with another Dell NIC, that one a Broadcom 5720 dual port 1Gbps NIC with PCIe x1. That time I never figured out that it was the RAM slot that was the culprit so I just moved ahead with a different NIC.

It's not a deal breaker as I can live with just 4GB RAM until I scrounge up an 8GB stick. Just wondering if anyone else has seen anything like this before. I never have, except with this system.