@stephenw10 you described that limitation much better than I did. Thanks for clarifying for other viewers of the post.

Sorry for the delay...I'm trying to rethink how I've approached the network config. In the past, I know I knew how to do these things (hopefully the right way) but I've lost my mental notes. I think I'm going to greenfield this bad boy and cut over to ix1 for LAN, leaving eth1 as WAN, then drop the vLANs on ix1 as needed.

Time to hit the books and make sure I'm not missing details. As always, I really appreciate everything y'all do, both from a device standpoint and your support of the community.

I'm curious, did you create one or more VLAN on the LAN interface you did the speed test, because I get about the same speed ( 840 Mbits ) with 2 ou 3 VLAN, without VLAN it get full speed ? I've about the same packages installed (Avahi, pfBlocker) but on 6100

@stephenw10 Ok great. I can forget about this one then!

Yup, I would certainly do a full reinstall.

@mclaborn you can since it is a switch underneath. See
https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/configuring-the-switch-ports.html

Thanks for the comments guys, it turns out we had a bad image and some carp issues.
After a rebuild with a fresh image, things are working ok now

Mmm, almost all the reports seem to be from Windows users.

I've run TBs through test devices here and seen nothing. But I'd be happy to test something specific still if we find a report.

Steve

Hmm, well it would be good to see example of those errors.

Could be any number of things but the fact it seems to vary randomly makes me think it's some resource being assigned with some variation at boot.
Not sure what you could do about that. Usually the sort of thing that a BIOS update might fix.

Steve

If you need 2Gbps symmetric, 4Gbps total, I would consider the 8200.

@froek said in XG 7100 vlan dhcp configuration problem:

Thank you Ryan - you got me pointed in the right direction!

You're welcome :)

@michmoor all the tests were using a hard wired connection. All good now though, I am not seeing significant difference when I hard wire the computer to the modem vs when connecting (wired) through the netgate box. The problem was that I was using two different measurements (ATTs on the modem vs headless speedtest from pfsense)

The 10G NICs, ix0 and ix1, on the 7100 are not part of the on-board switch so you would not configure them there at all.

You would add the VLANs under Interfaces > VLANs on ix0 directly and assign them as new interfaces.

Steve

@stephenw10

I have 3 x Netgate 3100 appliances. 2 live and one spare. One of the live ones is located in a distant datacenter so upgrading it remotely is too risky.

Typically I upgrade all 3 firewalls only about once per year when I have other reasons to travel to the dc. I import config to the spare one and just physically swap them around followed by some testing. If anything goes wrong then I just swap them back.

Unless the issue comes back I'll wait for the next major release with the first follow up update.

@Tenorbro Let me give you the advice to go for the 6100 if you have PPPoE connection and/or want to use suricata/snort.

@afcarvalho Many thanks to @jarhead and @stephenw10 for their infinite patience with me.

A

@jrey said in Missing something:

looking into installing a "speedtest" on the netgate.

At the command line:

[22.05-RELEASE][admin@cedev-3.stevew.lan]/root: pkg search speedtest py38-speedtest-cli-2.1.3 Command line interface for testing internet bandwidth [22.05-RELEASE][admin@cedev-3.stevew.lan]/root: pkg install py38-speedtest-cli Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pfSense repository is up to date. All repositories are up to date. The following 1 package(s) will be affected (of 0 checked): New packages to be INSTALLED: py38-speedtest-cli: 2.1.3 [pfSense] Number of packages to be installed: 1 38 KiB to be downloaded. Proceed with this action? [y/N]: y [1/1] Fetching py38-speedtest-cli-2.1.3.pkg: 100% 38 KiB 39.0kB/s 00:01 Checking integrity... done (0 conflicting) [1/1] Installing py38-speedtest-cli-2.1.3... [1/1] Extracting py38-speedtest-cli-2.1.3: 100% [22.05-RELEASE][admin@cedev-3.stevew.lan]/root: rehash [22.05-RELEASE][admin@cedev-3.stevew.lan]/root: speedtest-cli --secure Retrieving speedtest.net configuration... Testing from Plusnet (x.x.x.x)... Retrieving speedtest.net server list... Selecting best server based on ping... Hosted by 1Ago (Sint-Niklaas) [303.34 km]: 17.173 ms Testing download speed................................................................................ Download: 61.46 Mbit/s Testing upload speed...................................................................................................... Upload: 18.56 Mbit/s

Questions about apcupds should be in the Packages sub-forum.

Steve

That's commonly required for PPPoE. Especially at high bandwidths like that.

I would guess that when you first tested it the one CPU core that can receive traffic on PPPoE happened to not be in use by any other process.

Steve

@rcoleman-netgate said in 7100 1u vlan addition question:

@hescominsoon You're welcome. That one took me a bit to grasp when I first bought a device with a Marvell switch.

yeah..i won't be doing that again..i know its a cost point thing and it's valid..i just do not like the gymnastics you ahve to do..<G>

@stephenw10
if there were major issues i would have been informed / yelled at ;)
have only briefly tested it myself

around 200-400 "simultaneous" portal logins - but idle timeout is set at 8 hours or something.
only student phones or other personal devices use the portal.
around 80-160GB of data per day go through the CP-vlan

staff/school-owned devices are on different vlans/ssid's

So this started happening after upgrading to 23.01? And is repeatable every time?

For the last few months it worked as expected was that all in 22.05?

Steve