Once you enter 'boot' and press return it should continue booting. Steve

Thanks. Mine just came in the mail today. They look nice. If these make too much noise I'll try those.  Just waiting on super micro fan holders and then I have everything for my build. Let the frustration of install begin :)

I see that Netgear sells a MiniPCI solution. It is Netgate not Netgear please!  ;) http://store.netgate.com/Soekris-VPN1411-Crypto-accelerator-P319.aspx If someone is owning a miniPCI or PCI slot he could get better VPN performance with his pfSense. under pfSense 2.1.5 here we got: IPSec AES-128 ~42 MBit/s instead of ~13 MBit/s (nearly 3 times) IPSec AES-256 ~30 MBit/s instead of ~12 MBit/s (nearly double) So if your pfSense firewall is up and running and for the rest of your tasks are liquid enough but not the VPN, it could be a really gain for those peoples! And not only the pfSense users have a closer look at this cards! the Soekris vpn1411 & vpn1401 are also supported under; ClearOS OpenWRT ZeroShell OPNSense (mOnOwall) What happened to this market? Still alive, but in the most cases crypto cards are prohibited to export from the USA and also to import in many countries!!! And so this small card are really able to get for the end users and home users. They are on sell and this for also a longer time as I see it right! Both Soekris VPN adapters (different throughput!) Exar Comtech AHA Cavium If the amount of the VPN users, connections, throughput or anything else related to the VPn stuff is going to big, mostly VPN servers would be bring the best effort to offload the entire Firewall from this tasks and gain more throughput on all "machines". I would think someone would make a solution without the binary blob aspect of the cavium stuff… Cavium crypto accelerators are often more to find inside of Routers and Firewall soldered on the boards. Did Intels adoption of the AES-NI instructions kill this market? I think an external processor is an excellent approach. If you can get your hands on a C27xx SoC based machine it would be better to go with Intels AES-NI and yes I think we will see in the future time also perhaps a better support of AES-NI with counting higher numbers. The AES-NI is only integrated in smaller or lightweight CPUs or SoCs to push them up really. In greater installments Intels QuickAssist adapters will be needed! AES-NI/QuickAssist and performance increase in low power CPUs is definitively killing the market for such device. Where crypto accelerators are prohibited it would be a really win for all users for sure, because "they" can´t cut of the main CPU! With QuickAssist there's no need for additional hardware and less compatibility issues. Absolutely not in my eyes. It would be more the the need for Intel Quick Assist Server Adapters For sure you will not need to install one crypto accelerator card and one de/compression card you only need to install one card. But this cards should be not able to buy for all home & SOHO users and not able to pay for those clients also! the other both cards are able to pay for, but then they must be also supported by the entire OS likes FreeBSD or pfSense! We where placing in each branch office a smaller VPN Server and at the central office a bigger VPN server to gain the throughput and now we are waiting for the Comtech VPN and Compression cards to do some testing together with CentOS and ClearOS. And the compression cards we where installing on several Linux and Windows based servers to get more throughput and speed in the entire corporate LAN with great success.

support use of both 2.4 and 5GHz radios simultaneously?  Or is it a case of either 2.4GHz or 5GHz but not both? 2,4GHz or 5GHz only likes @Phishfry was explaining first. Are there any "gotchas" with this adapter that I should prepare for? Buy an external WLAN AP and connect him to the pfSense! It would bring you up to the latest standards and the best connectivity.

Yes, that card would have surely made things easier! The cooling should be ok. I followed the instructions you posted and the case had a marking inside to place the alu heat spreader. You never know, but I think this aspect should be ok. Thanks for your comment! 'Norbert

Don't cross the streams.

Okay, to close out this thread (yes Fahrenheit…).  The box was RMAed and promptly swapped out for a new one.  All is well so far. Great hardware support! Thanks, Mike

Hi, now i understand, had the same trouble with reboot. This is why i said to try powerd from console  first :-) So once again if you want to try : In the webinterface open Diagnostic->Edit File In Diagnostics: Edit file press Browse, go with mouse(button)  to  boot then loader.conf.local now a white window is open, just copy and past there hint.acpi_throttle.0.disabled=1 Now press button save and reboot. After reboot try dpowerd -v from shell if it works you can set this option via web

Just try a new PSU with something like 12-20V DC and 1A current. Use a big capacitor 1000µF/32V and a small one (1nF or so) in parallel on the supply lines to bolster current and cut noise. Depending on your setup it could prove beneficial to use UTP cables. This cuts hum-loops which can do all sorts of nasty things.

We now ordered the SC523L-520B which is a 2U chassi with front I/O which supports full ATX format: http://www.supermicro.nl/products/chassis/2U/523/SC523L-520.cfm

It turns out the interface was just not assigned to a port…I'm a newbie to pfsense.

PC Engines wrote back and said I could try booting voyage linux and run the burnK6 program from the cpuburn package to stress test the cpu (since their thought is that it's memory or cpu and the memory test completed a 2nd round of tests that ran without error for ~9.5 hours). Also, doktornotor suggested generating DH 4096 as described here:https://doc.pfsense.org/index.php/Importing_OpenVPN_DH_Parameters I've run into this situation years ago and I'm always surprised that there doesn't seem to be any software to test/verify specific components.

You could try out Soekris LAN cards with dual or quad port or their VPN cards also based on the PCI bus.

Thanks. I checked out a guys build on the unraid forum and he has successfully run Kingston. I am gonna go with the ecc Kingston. Thx for the suggestions. Case ordered and will order the mb and memory next week. Ok With the new pfsense will I need to do the trim on ssd? If the SSD is supporting TRIM, I woudl activate it in pfSense! And also will I have to adjust clusters on the Intel nics? Don't know if all this has been resolved in 2.2.4 If you come on trouble you must tune the mbuf size perhaps but this should be test by you before you tune them up. Is there any chance that openvpn will become multithreaded or unlikely? Once again thanks for all the help This would be more tends to the WAN interface that is only using one CPU Core, as I see it right it is not pointed to the pfSense team that OpenVPN is using the more cpu cores.

Did you note this line from the 2011 post I needed to add the line "set bundle enable ipv6cp" somewhere in the mpd5 config in order to allow it to accept ipv6cp config from my ISP. Might want to try enable/disable there.

@ytn: @thermo: @ytn: http://www.asrock.com/mb/AMD/QC5000-ITXPH/ That's exactly the board I recently bought, now I would be interested to know if you can get the serial port working on this thing if you have the opportunity to try it out. Only difference is that I am runnning Linux with pfsense virtualized. I am guessing you're not using VGA? I haven't tried using the serial port as a console before… I'll give it a try when I get the new system setup. I got my new machine up and running and really like the board. It's dead quiet, and total power draw (at the wall socket) is a hair under 20 watts. I am using a pico PSU which I had lying around. I have a 120mm fan drawing air in and an 80mm fan taking air out. Both are set to "quiet mode". Can't hear anything from the machine and haven't run into any problems so far. Will load up a couple more packages next and see how it goes. I didn't get a chance to mess around with the serial console yet… will let you know when I do.

EDIT:  FYI, the C2758 can't route 10Gbe of traffic yet.  It may be able to do close to that in a later version of pfSense once DPDK is done. I consider to this statement or until the Intel QuickAssist will fully be integrated in pfSense. Why not run 10.000base-T and get rid of the fiber unless you need the distance? 10 GBit/s are 10 GBit/s, eother over copper or fiber cable. And a new Netgear XS708e is starting at around ~1.000 € its a bit high price only for changing the medium, or? http://www.supermicro.nl/products/system/1U/5018/SYS-5018D-FN4T.cfm If you buy from pfsense store, then its called the XG-1540. This is starting at $1.250 in the USA or 1.500 € in Europe. The C2758 wont route 10gbit/s in a mixed packet scenario. I would also consider here but on the other hand nothing is more real then a real done test! And an Intel 10 SFP+ Adapter is cheap to get over ebay for ~90 € bucks or so. If the hardware must be bought it should be the XG-1540 as I see it also right or a Intel Xeon E3-1286v3 and 16 GB ECC RAM, this would be also a really powerful pfSense appliance that is able to handle this speed.

I'll be more inclined to look for less expensive wifi upgrades down the road since I don't really care about routing performance. Likes me, too.  ;)

GIGABYTE GA-F2A68HM-H If you own it now its ok, but if you want to buy it, please take a mini ITX board fitting an Intel CPU likes Core i3 with AES-NI on it! AMD A8-7600 Intel Core i3 or i5 would be better in my eyes G.SKILL NS 4GB ok Intel E1G44HTBLK wan link aggregation (lacp) ok, but the other end of the LAG must also support the LACP then! WD5003AZEX hardware raid 1 Beware of RAID levels if you not really know why and when you need it. Better to go with a larger or huge SSD or mSATA or SATA-DOM at this days.