Exactly. 500Mbps of routing with firewall/NAT would be no problem for either CPU. Steve

I have modem Alcatel OneTouch l850v idVendor=0x1bbb idProduct=0x0195 PFSense version 2.4.4-RELEASE-p1 This modem work if load module if_urndis.ko. I copy this module from another FreeBsd installed system 11.2. This file is in /etc/boot/kernel/if_urndis.ko After load module modem is ue0: network interface, and autoconnect to Internet. You must disable PIN to sim card.

Thanks.

FYI we just asked today to our SFR commercial if she could help us with this issue, she looked for an option on our contract / data plan and she activated the sl2sfr APN. We now can successfully use it (Data only sim card). We'll just keep an eye on the invoice...

If you don't have ue0 then try using camcontrol to eject cd0 and da0, this might allow the stick to change mode. Alternatively you can flash a different firmware on to the stick. check this thread here, I've written a small how-to guide for NDIS mode https://forum.netgate.com/topic/130040/how-to-configure-rndis-on-e3372/17 -D

@stephenw10 Ok, Ill add a different NIC then in the PCIe port, thanks for getting back to me.

Looks like the port is bad. Thanks for your help. I can't wait to find out what is involved to return it to china <G>.

Just buy a power consumption meter. You need measurement on a daily/weekly basis, not spot measurements As for the ups... Its nice, however consumes electricity and it won't show total consumption As for using a clamp meter or a multimeter for power measurements, well, leave that to profesional electricians. Definitely not worth the hassle/danger.

@grimson It's been my experience that when you try to buy a unit from a solution-provider that isn't really interested in selling them standalone, they will charge you a fortune.

You can use suricata other than snort for 1gbps throughput IDS. There are no GUI setting method in current pfSense for snort to fork multi processes to monitor an interface. (200mbps per snort process from Security Onion and other snort documents.) From the information of a reddit post, XG-7100 is sure can make 1gbps IDS with suricata. I have used suricata as IDS in a C3758 barebone and used iperf2 to test the throughput of an suricata monitored gigabit interface then got 946mbps on download.

Id be interested to see a more comprehensive breakdown of the tweaks you made and before/after results. I tweaked by old c2758 setup and am about to embark on the same on my new system. Specifically interested in the difference between hyper threading on/off.

@canadianllama Looks like we may have fixed it, we did a BIOS update, turned off legacy for the HDD in BIOS (switched it to the other option UHDI or whatever its called) . Fresh install, loaded in our backup and BAM bobs your uncle, software reboot is working.

What card is it? What does pciconf -lv show? Steve

$ mcelog --no-dmi --ascii --file mce.log Hardware event. This is not a software error. CPU 0 BANK 3 MISC 0 ADDR 0 MCG status: STATUS fe00000000800400 MCGSTATUS 0 APICID 0 SOCKETID 0 You have a hardware problem.

Thanks for the follow up. Easily done. Steve

Thank you very much for the help and advice

@picasso566 said in NIC not recognized pfSense 2.4.4/Intel PRO/1000 Pt Dual: I live in Tokyo and my Japanese is terrible. I bet it's better than mine!

I successfully installed pfSense on 2 DELL R320 servers this weekend to replace my WatchGuard XTM 525 (primary) and XTM 810 (backup) pfSense appliances. Now I'm ready for the next version of pfSense (2.5) that supports AES-NI.

You can do the ping if you ssh to your router, its not really much use unless your using ping to see if a device is back up after a reboot. −A Audible. Output a bell (ASCII 0x07) character when no packet is received before the next packet is transmitted. To cater for round-trip times that are longer than the interval between transmissions, further missing packets cause a bell only if the maximum number of unreceived packets has increased. −a Audible. Include a bell (ASCII 0x07) character in the output when any packet is received. This option is ignored if other format options are present.

Yes, the supplied injector would be easiest. Then using a PoE switch. Using a NIC that can supply PoE is not something I've ever actually seen myself. It would be interesting but almost certainly far more expensive. Steve