• Cannot get nic to show up in interfaces

    7
    0 Votes
    7 Posts
    6k Views
    RonpfSR
    You should put your logs inside # [ code][ /code] (no space " " inside the []) From this boot it doesn't seems it recognize your NIC, maybe try another PCIe slot, or try just booting the psense LIVECD on you other computer to see if it recognize the NIC on another motherboard. Also seach the forum with you NIC Model to see if someone else use it on pfsense. On the Wiki there is a list of supported hardware.
  • New build for dedicated PFSense unit

    13
    0 Votes
    13 Posts
    17k Views
    J
    @jjduru: @JBNixx: @jjduru: @JBNixx: Appreciate the input, but I don't agree for a machine at home. You should agree with bluepr0. Even if it's a home lab/network router, the requirements for a stable environment are as high as the ones for small business production environment, hence a server class mainboard should be your aim/makes sense. ECC memory won't break your wallet, even if it's more expensive. Once you figure out what server class mainboard is able to handle ESXi correctly (VT-d capable), 72 heavenly virgins are going to open up in front of you when it comes to the possibilities of what you can do with your new toy. And really the dedicated vs virtualized debate should not exist in 2016. And that 500W PSU, for a 24/7 server that does only pfsense, it's really the eye opener (read total overkill). With proper hardware you could get by with no issues with just 12V/5A/60W charger adapter. The problem here is you're all missing the point. This was built with cheap and parts I already had. Buying ECC memory, Buying a server grade motherboard, buying a Xeon CPU, buying a SFX PSU ect. would push the price up. It also wouldn't give me any more measureable stability or reliability. As for the 500W PSU, sure it's overkill, but why buy a new smaller unit when i already a PSU on hand? Additionally I’d like to qualify exactly how much the whole unit pulls from the wall: 30W “Idle” 47W under load. Pump that up to 50W an hour (Full load 24/7). That comes out to $20USD a year, but lets double it to be unfair. $40 bucks a year if the price of electivity doubles - My little PFSense box will be the last of my worries. Regarding virtualization - I already use KVM on an Intel NUC that runs: Gitlab, Owncloud and Confluence. 2 Boxes that pull minimal electricity and they run the lot. @BlueKobold: pfSense is a software firewall and could or should not be compared to any kind of home router equipment that is doing only SPI & NAT and mostly pushed by an FPGA/ASIC, so that the real work is done in Silicon! And calling it for a home build is in the most countries something with 50 MBit/s down and 10 MBit/s upl and NAT together with some firewall rules. This is for me a home set up able to realize with ~$200. If you have other or more needs and need to install more packets or activating more services, you should not start then call it home set up, because you are at home using this construct!!! So if this will be ending then as a half or fully featured UTM device with 500 MBit/s to 1 GBit/s that must be fully routet at the WAN interface and half of this throughput must be the VPN throughput on top, I think this might be answered by others then me. Where i live "Homes" have fiber up to 1Gbps. So no, a "Normal" home in my area doesn’t have a 50/10 connection. They have maybe a 100/100 connection. Also i don't live in "Most countries" I live in MY country, so i have to make sure that the Firewall can support a 1Gbps connection. Additionally I run some services behind this PFSense firewall such as Confluence, Owncloud, GitLab and VPN among other things. Maybe It’s not a "Typical" home firewall, but it's MY home firewall. I'm still a home user even though I have chosen to host my own services at home. A power user if you will. **With all that being said. And taking given limitations and constraints of the project into account I now have a 5 port PFSense firewall. It's quiet, it's cool, it pulls little electricity and it does exactly what I want it to do for very minimal cost. And I never ever said it was the best most awesome PFSense box in the entire solar system :)** Sunshine, if you're dead set on this config, why are you still asking questions here? If you need a debate to clarify your thoughts on the hardware build, this is the place to do it, but this is increasingly not looking like a debate, but more like an one-sided axiom. YOUR home firewall is wonderful and perfect. Have at it. I asked if it would do the job. No more. I already had everything except for motherboard and CPU. I picked up the cheapest board and CPU that would do the job. That's why it's strange when the "feedback" I get is "omg 500w PSU". " buy server board" ect.. But its fine. I get the point. There are higher quality/better suited components out there. But I already knew that.
  • Importing config.xml from ALIX 2D13 to RCC VE-2440

    2
    0 Votes
    2 Posts
    906 Views
    jimpJ
    The interfaces and the console are the primary concerns, if you fixed those up you're fine. Technically the serial console can work at any speed on either device, so long as you know what the speed is and the client is set to match. No reason not to use 115200 in this day and age though, even on the ALIX. We have code to detect the RCC-VE devices and force the console on so it doesn't need to be marked as "enabled" in the config.xml
  • Running pfSense on an Intel NUC and its built in eMMC storage

    2
    0 Votes
    2 Posts
    3k Views
    S
    eMMC is not the problem.  Netgate boxes use eMMC as well. But I wouldn't install it on a single nic. It's simply against the nature of a firewall.  I recommend watching this video, it is very helpful.  https://youtu.be/0spAIaWb7x0
  • HIGH AVAILABILITY SG-4860 as core routers

    10
    0 Votes
    10 Posts
    3k Views
    ?
    I haven't noticed 2 pcie Slots in the box. That could be a way to expand. SG-2220, SG-2440, Sg-4860, SG-8860, C2758 1U and XG-1540 are able to buy from the pfSense shop. And only the C2758 1U and the XG-1540 is sorted with an PCIe expansion slot. SDSL is 5Mbs = 15Mbs : 8 = ~ 2 MB/s max Ok. So 10Gbe is defentively oversized. At the WAN port for sure and of course, this was for the uplink to the DMZ and LAN Switch. With you're advices I'll then go to a pair of 4860s which will be enough and cost effective. But it comes without any expansion slots! But ok it will within shipped 6 Intel based GB LAN Ports if this is enough go for it. Perhaps it might be also a good idea to go with a pair of SG-8860 units that is stronger.
  • Best media to run pfSense? CF vs CF-Microdrive vs SSD?

    6
    0 Votes
    6 Posts
    3k Views
    ?
    $20 more than the 120gb, and can be used in the future for something else if need be Others were reporting here in the forum that the Samsung 850 EVO seems to be not working together with the TRIM command or support from pfSense. So I personally would be aware of this SSD. In earlier times that SSD have had also Firmware problems and I really don´t know if this would be solved 100% out. So an older Samsung840 Pro without this problems is also fast and cheaper to get as it is older, but without known failures and firmware problems.
  • SG-2440 won't boot

    2
    0 Votes
    2 Posts
    1k Views
    ?
    Please create an account under pfSense Store to register and activate (product activation) your account SG-2440 device, then you will be able to open a ticket there or write to support@pfSense.org
  • UP - Intel x5-Z8300 board

    2
    0 Votes
    2 Posts
    2k Views
    M
    you would have to use a usb3 lan for the second lan port, but looks good for an pico itx type setup
  • Infiniband cards with pfSense 2.2

    23
    0 Votes
    23 Posts
    6k Views
    R
    @BlueKobold: Hello, in normal Infiniband is used to build separate SAN networks that are connected over Infiniband NICs that are attached to Infiniband switches to deliver around ~10 GBit/s or 40 GBit/s or 56 GBit/s or attached directly from card to card. And this extra or separate network will be then connected to the rest entire network over 10 or 40 GBit/s in usual. So why pfSense as a firewall should be invited in this game? And why for so much money? A normal Mellanox SRx3 VPI card is able to get for the cost of ~1300 € (dual Port NIC) and a switch for around ~6500 € and then this construct will be able to delivers 56 GBit/s at each port! But there is no need of the firewall or a separate router that is doing anything in this "game". I am building a small compute network (single rack)  Kvm/Centos / dual  xeon  / 4 xeon phi -    compute nodes Kvm/Solaris / zfs  mirrored / striped ssds -  data server (San -  napp-it) Remote VPN Development VMs LAMP,  misc servers smtp, ftp, etc… Qdr infiniband -  cheap,  high bandwidth,  low latency Ib/nfs/rdma If pfsense can support ipoib and bridge wan to lan then I don't have to buy a bridging switch in the short term.  I  will likely vm pfsense as well. A Voltaire 4036 is relatively  inexpensive. This is being done as a home basement  project,  low budget,  incremental build out....  Data mining,  machine learning,  parallel programming,  networking lab/sandbox, kaggle contests Matlab,  pysci,  R, OpenMP,  openacc,  c++,  Fortran,  etc. a few remote developers,  analysts,  VPN / ssh.
  • Intel i350T2v2

    6
    0 Votes
    6 Posts
    3k Views
    G
    Problem solved. I made changes to the loader file and mbuf is below 1 percent down from 36 percent! Thanks for the assistance.
  • Netgate 4860 vs asrock h170m

    7
    0 Votes
    7 Posts
    2k Views
    ?
    Sorry if I seem kinda all over the place but i recently came across some free money :) (500$) and have been wanting to play with one of these systems for a while (pfsense / mini-itx) You could go with other hardware also if you want to assemble it by your own for sure and also really powerful if you want to run many packets, a full UTM device. $500 seems to be right as I see it right. i will just throw a hypervisor on it ok this might be a solution for sure, but please I don´t know why this must be done with a 64 Watt CPU!? I don´t know from where you are (country) but over 5 years you will spend much more money for the entire power consuming and for this money you could be getting now a more powerful self made appliance that is saving then on top this money, but with also much power. I am actually setting this stuff up to get away from black box solutions Perhaps owed to my small english language skills, what you mean with black boxes? at this point after seeing some of the performance some are getting with even less hardware than i am planning. Did you really see this or was it only based on forum or Internet talks? So if you think that the pfSense team is only tune or pimp up their own sold hardware this might be, but they have also no other chance to do other things! Please don´t forget this. From where they should know our hardware before? But the hardware they are selling is also to push the entire pfSense project and it is also very risky for them. Because all peoples could now thinking that they (the pfSense team) is now making a lot of money and all spendings and donations will be went back or break in. And as you was stated you will try to start in time the Netgate 4860 might be a really win for you without any pain and 100% supported by pfSense. And this boards or units will be combine the best from both worlds as I see it right, the three miniPCIe & SIM slots from the PC Engines APU series and the powerful Intel Atom C2000 SoC form Intel. No other one sells boards with this combination! Supermicro A1SRi-2558F ~280 € Kingston Value ECC RAM 2 x 4 GB ~50 € M350 case ~50 € SSD 120 GB ~110 € picoPSU-160-XT + 192W Adapter Power Kit ~90 € perhaps free shipping in total 580 € Is nearly the same as the Netgate 4860, but without the miniPCIe & SIM slot and also without the eMMC storage, drawing more power and not an ADI image that is ready to take for. No mSATA or wireless option nor modem with SIM slot. So $553 for an Netgate 4860 is not so high in price as I see it real. Ok perhaps you are from the USA and can get your hands on the one or other part cheaper then me here in Germany for sure, but compared to the SG or Netgate units a self made box is not cheaper to get.
  • TL-SG3216 Bandwidth Control

    2
    0 Votes
    2 Posts
    868 Views
    jahonixJ
    I don't see how this post or your problem is related to pfSense so I wouldn't expect answers in this forum. Ask TP-Link support or maybe they have a forum as well. Edit: TP-Link has a forum as well, ask there  http://forum.tp-link.com
  • Interfaces do not restore to new hardware

    16
    0 Votes
    16 Posts
    4k Views
    ?
    Modify XML, replacing originating firewall interface names with interface names on the new firewall To be on the save side I would suggest to do this first with a copy of the .XML file so you will be able to start even new if it fails until it is not failing anymore.
  • Netgear R6300

    6
    0 Votes
    6 Posts
    2k Views
    S
    If possible install DD-WRT or OpenWRT on your R6300 router and set it up in WLAN AP mode, so you will be are able to use pfSense and ac WiFi in your network without any problems. Ditto. This is smarter setup than using pfSense as an AC wireless router.
  • Should I go with a Jetway NUC?

    6
    0 Votes
    6 Posts
    4k Views
    ?
    mwc, My ISP will upgrade my FTTH connection to 1Gbit in March so I am very interested in the choice you are going to make. I was looking at a Jetway JBC311U93-2930-B system to replace my current VIA Eden based pfSense box (which has only 100Mbit NICs). Once more again I love the Jetway boards and bare bone PCs, they are not so cheap as from the most chinese or Taiwan vendors and some of them have a really good reputation related to built routers or firewalls. Bit this small device (Jetway JBC311U93-2930-B) is in my eyes not well formed and assembled to realize it without any problems. The most benefit what I was seeing is based on this board here in any sort and art of case. To assemble it self: Jetway NF9HG-2930 Thin mini-ITX Network Motherboard M350 mini ITX case Ready to go boxes: Jetway 4 GB Intel LAN Ports Jetway 5 GB Intel LAN Ports Jetway 10 GB Intel LAN Ports For me the presents of AES-NI is optional but the most important thing is the pure routing/NAT speed. NAT is a part of the packet filter (pf) of pfSense and pending on other reports you will see something around 900/920 MBit/s - 960/970 MBit/s pending on the configuration I thing it is not at all places the same WAN speed or entire throughput. So with the overhead on top it might be coming nearly wire speed and this is actual based only on one CPU core together with PPPoE. AES-NI is a super deal if you are using IPSec and not OpenVPN for sure. First I was looking at a Zotac ZBOX nano CI323 which is cheaper, has a faster CPU with AES-NI, but this system has Realtek NICs (which seem to max out at about 700-800Mbit on FreeBSD). Save your money over a longer time and spend something around ~100 € till ~120 € more, but then you will get a device that is capable to let you built a real UTM device with IDS (Snort) Proxy (Squid), HACP (ClamAV) and for sure a pf using firewall. I think for pure routing/NAT speed the Jetway would be better than the PC Engines apu2b4 simple because it has a faster CPU (QC 1,83Ghz > QC 1,00Ghz). It looks like or might be looking like that, but CPU core is not CPU core, or in shorter words not all CPU and their cores can be compared against! They mostly delivering more power and speed how newer they are! The 4 Core AMD Jaguar CPU can be more powerful as the N2930 On the PC Engines website the release notes state that there are still a few problems: But if this will be eliminated and the board is running well it could be a really challenge for peoples that needs a device only for firewall and not other services likes IDS, Proxy and AVScan on normal Internet speed till 200 - 500 MBit/s. If you will buy a N2930 board only likes named above you will pay ~200 €, the M350 mini ITX case is able to buy here in Germany for araound ~45 € together with RAM, ,mSATA and an external PSU you would be ending in the 300 € - 350  € area, but then it is running smooth and liquid for you.
  • Write Protect Features for DOM

    7
    0 Votes
    7 Posts
    2k Views
    ?
    Alot of the Innodisk DOM's have a 2million MTBF rate. Also note that the MV line is the value line. Still good but slower. It really only affects your bootup time. Speeds are like 25MB/s for the value line. I disagree with much of the above post but will digress.
  • Silicom PXG6BPi apparently not working.

    1
    0 Votes
    1 Posts
    878 Views
    No one has replied
  • Silcom PEG4I (82571EB Based)

    20
    0 Votes
    20 Posts
    8k Views
    S
    @stephenw10: The NIC chips on your card always appear to the OS as straight Intel adapters so the drivers given at the Silicom support site are for the bypass part of the card only. Try installing those. There is also code for FreeBSD but you'd need to compile it on a FreeBSD 8.3 machine and then transfer it to pfSense. I am trying a PXG6BPi (Intel chipset) on pfSense 2.3-Alpha, and it is not detected. Downloading drivers and trying to compile them on a FreeBSD 10.2-Stable failed. I contacted the reseller and they say "it is an old device, so buy us a new one". If I install a FreeBSD 8.3 machine and compile the driver, would this compilation be portable to pfSense 2.3 (10.2-STABLE based)?
  • Getting Started With ConnectX-3

    5
    0 Votes
    5 Posts
    2k Views
    epyon_avengerE
    Upon additional investigation, it looks like the services/firewall have some kind of problem binding to the interface? If I tell DNS to use the backup WAN, suddenly I can surf over the ConnectX-3 connection (because DNS lookups are going over the Comcast line), but things like IPSec just won't work with it. No idea what's going on, might have to engage support on this one…
  • Effects of varying NIC speeds

    7
    0 Votes
    7 Posts
    2k Views
    T
    @bechardj: I'm looking to upgrade my pfSense box for faster local file transfer speeds. pfsense is not involved in local traffic, unless you have multiple LAN
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.