@xqtSarah As mentioned, if you virtualize pfSense and don't pass-though the NICs, the device drivers of the underlying operating system are used. So it's not on pfSense to support the hardware. If you give pfSense direct hardware access by passing through the NIC you can checkout the FreeBSD 12.3-RELEASE Hardware Notes for compatibility.

No idea. Ask Nexcom? They probably don't have a FreeBSD driver though. I would not expect those cards/drivers to be exchangeable. There's no standard for this so companies use different IO interfaces to control the relays. If you're very lucky someone else might have already documented it. Steve

You can still see the boot before the config mismatch though? If you break out of that you can copy the dmesg output to a file to review after rebooting.

@Dobby_ Epyc can be upgraded and they do offer frequency orientated SKUs that have higher boost clocks. Thanks Dan

No worries. We've all done that. Glad you got it sorted.

Yes, that or some low level incompatibility. Wrong PCIe version perhaps, though it should be backwards compatible.

@stephenw10 said in Installing pfSense on Sophos XG 550 rev. 2: Looks like it's x86. Unless it's got some boot restriction I'd expect to be able to run pfSense on there. It looks like a hungry beast though if you plan to run it 24/7! Steve Agreed, that will be juicy on power to run. What are the requirements?

As far as I can see it's the same CPU as the MBT-2220 (Atom E3826). So I would not expect it to pass 750Mbps OpnVPN. Though we do now have DCO in Plus which would increase it significantly. https://docs.netgate.com/platforms/minnowboard/faq.html#what-kind-of-performance-can-i-expect-from-the-dual-ethernet-minnowboard-turbots Note those figures are for small packets. That CPU should pass 1Gbps (unencrypted) for full sized packets. Steve

Thanks a lot for the help gentlemen!

Sounds like a possible flow-control issue. If it's actually an issue for you.

To test the PSU, you could add a HDD. If the PSU is marginal a HDD should push it over the edge quicker giving a clear indicator test. You do not need to mount the disk, just make sure it is spinning.

@GeorgeCZ58 said in PC ENGINES EOL, trusted HW option?: @Dobby_ I am buying Netgate HW for business. But for home it is too expensive solution :( APU was just acceptable. We usualy have WAN speed <100Mb, so no problem that it isnt so powerfull. Too expensive and Not China ... Those doesn't go well ... Especially if you want new & low power /Bingo

Finally got everything hooked up and running. Works like a champ along with the new wireless access point I picked up to round out the system. Very pleased with how configurable everything is, leaps and bounds better than the router from my ISP. I would say the system is slightly more responsive compared to how it was before as well.

@tgdsilva Very sorry, I haven't been on the forum in quite some time and just saw your DM. In case this comes up in someone's search looking for an answer to this problem, there's only one thing that I can think of that could be the culprit; with the I340-T4 card installed, the computer can only see/address one of the two RAM slots on the Dell Optiplex 3020. Just to be clear, I was running the SFF (Small Form Factor) variant. When I had 2x4GB sticks installed, it would only see 4GB in the BIOS. If I only had one 4GB stick installed it would boot fine, so long as it was in the slot closest to the CPU. If I only had one stick installed and it was in the other slot, it wouldn't boot at all. Full disclosure, I'm not certain which slot it was that worked, but the 3020 SFF only has two slots so it's one or the other. The 7020 and 9020 models both have 4 slots, but I never bothered to try to replicate the problem with one. Hopefully this will help someone, if not the OP. Oh, and here's an unrelated present; wanna boot & run this machine off an NVME? Here you go: https://www.tachytelic.net/2021/12/dell-optiplex-7020-nvme-ssd/

Ha, that would do it. Nice.

@SebM said in (Solved) Intel QAT driver with WireGuard support: Just here to report that enabling IPsec-MB on 23.05 has reduced the CPU usage quite a bit on my 5100 when using Wireguard. Same throughput or higher?

Yeah, there are no by-pass relays on that box. You can see where they would have been on the PCB just behind the Ethernet ports on a model that had them. Steve

TNSR might be perhaps nice to play on that machine!? SoftEtherVPN Server may be also nices playing on it. OpenWRT is also able to install on that device

@stephenw10 you posted just as I responded to @sheen73. Thanks for clearing up what that setting does.

Use a script in the shellcmd that runs on whatever interfaces you need.