Hi! At the moment, the average traffic is around 4 Gbps

That's a fun thread.

Normally not but if you're relying on NAT reflection that would be via the firewall in both directions. Both devices on the LAN would see the traffic as via the LAN interface.

I was going to go with EIG44ET but then I discovered the i350-T4 V2 which is newer than the i340. https://www.amazon.com/dp/B01DIT7GH4?ref=fed_asin_title

@sleleeeee Welcome! I use an external LTE modem for failover WAN. Makes it transparent to pfSense. Depending which country and provider. US: https://www.netgear.com/home/mobile-wifi/lte-modems/lm1200/ EU: https://www.netgear.com/uk/home/mobile-wifi/lte-modems/lm1200/

Resolved - Thanks to Netgate support - was able to use console to do a factory reset & then able to login with default credentials.

@stephenw10 thanks for the catch. fixed the post. i did manage to find another url hosting the rom but it seems ive misplaced it. if i ever come across it in my notes ill add it to the thread.

I know this is an old thread but for anyone attempting this in 2025 this might help. See the last post I made in this thread. https://forum.netgate.com/topic/197131/can-someone-help-me-with-the-bios-mod-on-really-old-hardware-watchguard-xtm-5

@rrocha said in Stuck In Marvel U-Boot: setenv bootcmd 'setLED; run emmcboot;' You need another 'run' in there like: setenv bootcmd 'run setLED; run emmcboot;'

@Gertjan I am attempting to offload the encryption to the SafeXcel chip, I have had it running in the past with OpenVPN again I am also testing use of it with squid and my swap partition, but of those cause the interrupts to be incremented, but all the sudden OpenVPN will not use the SafeXcel chip anymore and it did with this version a couple months ago. Something is different as it should utilize it like it did in the past. I originally thought it could only be used by one component, that could be fstab file and use of .eli to encrypt the swap and or using it with squid for acceleration of ssl certificates, but they both work, all the sudden OpenVPN won’t increment the counters anymore. It’s weird because from what I am told OpenVPN should do this automatically, the new versions of software remove use of hardware crypto and OpenVPN but I can’t even run tests it acts like the chip does not load. That’s where it has confusion it should still see the counters increment in the system but it does not. It does drastically improve performance with the “ssl engine” directive in squid. Again not many people use .eli at the end of the swap config in fstab. So it’s kind of a trial and error thing. Goal faster vpn access to my private NAS.

@lnguyen That is very interesting, thanks for the update. So we are officially blaming comcast for these issues then, that makes me feel better.

@jfaubin I've been so busy with other responsibilities and will plan on working on this project in April. There is a CF170 4gig inside and I think that it is used for firmware? I really don't know. I'll ask a cisco friend to give me some info on that chip and what it is used for. Cisco removed all ports for this device however I doubt they removed the functionality inside on the MB. I'll pick up a video cable and use that to see if I can get any video. I'll report back. This was originally a project for my kid and his friends but they blew it off and went back to playing roblox. I'm an old man i guess but i'm raising a 10 year old and man is it a major trip. Thanks for the inquiry. Interrupt

Hi guys, I my case the suggestions in this topic didn't help. However I managed to trace to issue to FreeBSD 14.0 and my PSU configuration. My hardware configuration consists of PicoPSU and 12V power brick, so it's not conventional ACPI PSU configuration. Previous versions of FreeBSD didn't have problems with system Halt, but FreeBSD 14.0 has an issue. When I initiate Halt command the system reboots. The way I fixed the issue is by chnaging the value of hw.efi.poweroff parameter from 1 to 0. So in summary: Go to System/Advanced/System Tunables and create new tunable with the following values: Tunable: hw.efi.poweroff Value: 0 Description: Use EFI runtime services to power off in preference to ACPI I hope that will be of use to someone reading this topic. Best Regards, Nick

What type of NIC is it? Does it appear in the output of: pciconf -lv

@susamlicubuk i know that thread is a year old, but have you got the rest of the ethernet ports working? While researching for a similar issue with another appliances I looked at the download you linked in the third post. In that download there is a watchdog driver for linux and FreeBSD for resetting and bypass-ing the system. Compiling it for pfSense will be complicated and I'm of no help with that. It's easier on plain Linux or FreeBSD, the driver itself looks quite simple but it's references FreeBSD 8. Not sure how easy it can be compiled for a current FreeBSD. Have you tried compiling and using the driver and userland tools?

Check the states. You will see the outgoing ntp queries are sourced from an internal IP and NAT'd.

@stephenw10 Correct same type, matches up.

@stephenw10 I'd like to see an ASIC offering to compete with the performance of say a Fortigate. Any Change we ever see that.

Hmm, not seen that. It's the original SSD?