@stephenw10 I was trying to do a fresh install via the USB drive on the new drives and kept getting an error "Failed to fetch the pfSense repository data" during the setup. I'm guessing the repo was down?

So I decided to clone the old drives, and that seemed to work, but now I have degraded mirror:

pool: pfSense state: DEGRADED status: One or more devices could not be used because the label is missing or invalid. Sufficient replicas exist for the pool to continue functioning in a degraded state. action: Replace the device using 'zpool replace'. see: https://openzfs.github.io/openzfs-docs/msg/ZFS-8000-4J config: NAME STATE READ WRITE CKSUM pfSense DEGRADED 0 0 0 mirror-0 DEGRADED 0 0 0 nda0p4 FAULTED 0 0 0 corrupted data nda1p4 ONLINE 0 0 0 errors: No known data errors

Any idea how I can fix this, the "faulted" drive is brand new, I think I just cloned it wrong, so if I could somehow format that faulted drive and recreate the mirror I should be good. I'm hoping to do this without opening up the 6100 again?

Thanks for any help.

The problem is solved; it was indeed the network cable that had a loose connection.
It's in the trash!
Thank you all for your help.

@raspier The 2100-MAX runs Snort really well but it wont do SO objects. It does everything else. See Snort SO rules I have a paid subscription with a code and everything but the SO rules never populate do they show up on your 1100?

Screenshot 2025-07-11 at 16.34.49.png

"Your Netgate 2100-MAX uses an ARM64 CPU (Marvell ARMADA).

❗ Important Limitation:

Snort SO rules are precompiled binary modules. Cisco/Sourcefire only provides precompiled SO rules for x86_64, not ARM.

That means SO rules are not available on the Netgate 2100, 3100, 1100, or any ARM-based device." So how does your show up???

@michmoor

fwiw, It appears that Netgate only offers the 4200 with the 128Gb SSD, probably due to the eMMC issues.

Does it boot from USB if you insert a drive with the installer on it?

That looks like it's unable to from eMMC and eventually fails through to the EFI shell as the only bootable option.

The blue one is USB3 so should be significantly quicker at boot. But it doesn't make much difference after boot.

@w0w $65 plus tax and shipping.

ty! @stephenw10

@stephenw10 this has been a learning curve for me.
I thought I was going to couch up some $$$ for support, but Support came to the rescue. They did a great job and were quick to respond.
thanks for those who responded... now my journey continues

@stephenw10

Thank you. I'll try to absorb what you just said.

@patient0,stephenw10,

I do want to express my gratidude for kindly pointing out my failures of execution in utilizing the GUI properly. I fully appreciate the difficulties of writing words that describe the intent of a GUI.
Again, Thanks.

@deceptivehorse said in Netgate hardware selection:

Could you provide the website you got this from? Tried PassMark Software as Lawrence Systems uses it in the 5100 review but can't find information on the C3338R there.

You are right, I did use two sources: For one Passmark for C3338 vs C3558 (Factor 1:2.4) and a ServeTheHome comparison for the Intel Atom C3338R V C3338 Performance (Factor 1:1.2).

Well I won't go much higher. You don't have much RAM to play with. Maybe 160MB.

@scottlindner Wrong subject? :) Agreed but they document it. It’s a bit worse changing models or reinstall/restore because I always have to look up which to use.

Mmm, you wouldn't expect to find all the backup config files to have to same date. It does sound like maybe it was overwriting the backups with changes as it tried to boot repeatedly.

@b3rt Re-reading your responses and saw the ports being used in the photo... just wanted to confirm what I am seeing..............
VLAN 20 = ports used are 1 and 5, both tagged,, maybe port 1 is AP and port 5 is uplink?

VLAN 10 = ports 1;2;3;5 all tagged using static IP? maybe printer, NAS etc? port 5 is uplink?

VLAN 1 = ports 4, 5 port 4 for maintenance laptop and 5 uplink?

If I am correct, then this shows I can remove all ports on Native VLAN except for uplink / Trunk (port 5)?

Yup that^

But that is the correct MD5 hash for that file so it looks like an issue with your Etcher install somehow.