I had an Alix 2D13 running 2 WANs on the physical WAN port, by VLANs, 3 VLANs on the OPT1 port for various local subnets and the real LAN port being an ordinary LAN (I did that just so that I can always easily get to the webGUI by connecting physically to LAN, even if all the VLAN switch configs are gone). No trouble running VLANs on that. With multiple WANs I have trouble during failover - with 2.1.* at lot of stuff fires up at once failing over OpenVPN server/clients, doing DynDNS updates… and it sometimes runs out of the 256MB in real time. That means some process/es implementing the failover changes get killed, and so some things in the failover do not always implement. I believe this should be better in 2.2. Anyway, just saying that in a multi-WAN scenario on 2.1.* 256MB is not quite enough memory.

Well a pci-e NIC is always going to be marginally faster than a PCI NIC but at 50Mbps it shouldn't make a measurable difference. Some low quality NICs report having various hardware offload capabilities when in fact they don't or it's broken. You could try going to System: Advanced: Networking: and disabling the various offload options. Or just leave well alone since it's now working.  ;) Look to get more Intel NICs if you can for reasonable outlay. Many people are running Realtek with no problems though. Steve

Well disregard. It is the Netgear switch. When i plugged everything back in, it was fine. Within 15 minutes i was back to 400 plus latency. I hardbooted the netgear 748t again and it was fine. Its is been an hour and up it goes again. Ordering a switch now. In hindsight it was dumb to think it could be pfSense since no packages were installed or configured for QoS .. Live and learn

To reply to myself, I was able to get another VIA EPIA CN10000EG motherboard and test it with Pfsense 2.1. No problems. So it is not motherboard. I did test it with Netgear FA111 NIC which uses single DP83815 chip and it works fine. So it must be something with drivers and/or Soekris NIC. Does anybody have problems with Pfsense 2.1 and that particular NIC?

Yep the driver is not new enough in 2.1. It was supported in 2.1.1 but the driver had to be backed out due to stability issues with some hardware. It happened very recently though, there are still snapshots on the server that have support for the i210. Try one of those, if it works for you your'e all good. Anything from the 17th of Feb or earlier should be good: https://forum.pfsense.org/index.php/topic,72763.0.html Steve

Awesome! thats good to hear that OpenVPN supports AES-NI. Now to build a pfsense firewall that can utilize its capabilities.

Steve, Thanks for the info. I will test it out and post my results out once I have time to work on it.

@midacts: acoustiq originally posted about this CPU and motherboard AsRock H87M i3 4330T [keep it low power] I did post that, but my requirements have changed and my budget has gone down [other priorities], so my previous post will show my new dilemma. Any opinions on that? LE - did a quick test with my 4 year old pfbox - Sempron 140, nForce430, 1GB DDR2, 2 x HP NC7770 and it's able to sustain about 250Mbps on both links. So the Xeon should be plenty for the new links… Or so I hope :)

@Jason: I thought I replied to this yesterday but I guess I didn't.  Nothing jumped out at me in there (like I was seeing on 2.1.1 with the new igb driver).  If these just started recently and you didn't change anything then I'd suspect failing RAM or something similar. It hasn't crashed today now that I'm home and checked it.  I removed the pfBlocker package last night because I found a better method to block some brute-force connections from external IP's.  So maybe it was caused by it.  I had only been running it for a couple of weeks.  Only changes were manual IP entries. Will keep a close eye on it and see.  Thanks!

They go fairly quiet once you've turned them down. I don't run them lower than 32 but others have gone lower. Steve

Interested in the Watchguard X5500e - is it still available?

Thanks for your reply, I was kind of expecting that.. Guess it'll a low-power mini-ITX atom motherboard. The quest continues..

Maybe you got "lucky".  Some cores are from good yields where the VID would already qualify them for LV or ULV chips but the demand might not be there to package them as such.  Really depends on the actual VID of your chip though.  Alternatively, the board uses a fairly inefficient VRM so you don't see much difference.  I do know the 65nm chips tend to guzzle a fair bit of power (by today's standards), at least my E2160 did until so.

Just to answer your question: if I receive 500 Internal server error, how I can get log file from console ? Use menu option (8) to get a shell prompt, then the various logs are in /var/log, example commands: cd /var/log ls -l clog system.log clog system.log | grep killed You have already realized that 128MB memory is not enough to run packages. And actually I think 128MB will have trouble doing some built-in things also, so test first and "grep killed" in the log files to see if processes are running out of real memory.

If you look at a boot log from a similar box, for example this one from 2.1 on an X1250e: https://forum.pfsense.org/index.php/topic,71177.msg388754.html#msg388754 You can see that the next item to be initialised is the cryptosoft device. Something that may well cause an arithmetic error perhaps? Though because it's virtual it can't hang over from a previous config. Do you have any crypto hardware? Then it's ACPI stuff and that could cause this. Do you have ACPI enabled in the BIOS? Steve

Ok. Why are you using the USB connections? Do you have a USB keyboard? Those Dell servers usually have at least 2 NICs on board you can use, probably Broadcom or Intel. Steve

Thank You to everyone who gave replies here. Now have some manufactuer, part numbers to look for. Not sure which brand we will go for ? Fibre stuff is new stuff to me. Needless to say, we are in the sticks.  :) Thanks, Barry

Those supermicros are better than my esxi hypervisor haha (asus p6t motherboard with 17 920 CPU, 24GBs of RAM). I looked at that 8 core machine (C27xx) and it uses 20watts…thats awesome http://www.webhostingtalk.com/showthread.php?t=1340107. I am a tight wad. i try to keep an eye on watt consumption since this rig will be running 24/7. I'd like to see how much a comparable jetway would cost. I do like that they have the NICs onboard, i just hope they work as well as a PCI NIC would. In comparison to that GIGABYTE board mentioned in my last post, it would cost $60+ dollars for the gigabyte board $45 for 4GBs of RAM to start with $60~ for a Pico psu (and a power brick) $100-$150 for a 4 port Intel NIC case SSD/HDD I think if i specced out the cost for the supermicro $350 motherboard $60 pico PSU Ram SSD/HDD I think the gigabyte's celeron cpu and the supermicros atom cpu are clocked high enough to handle openvpn decently. Does more cores help out, or is it more like one core is used specifically for openvpn. Therefore having a higher clocked CPU would be better? The main downside to this ive seen is that the CPUs usually call for higher watt usage. like this guy has a dual core AMD, but its 65watts https://forum.pfsense.org/index.php/topic,68741.msg376081.html#msg376081 I always weigh the odds and think about things for a while before i purchase them. Then i still get buyers remorse afterwards  :D

The cardbus works on intel cardbus nics but not the dlink for the dlink it also said reset failed.