Yes, please start a new thread there.

My temp is around 63°C SG-3100
49°C XG-7100

-Rico

Not exactly, the 'switch'ing device in the middle in our case is SVL and they (and all vlans) are controlled by another entity. I'd have to get some FID entries in there, but it'll just be easier to stick with devices with separate NICs (or the ability to mac spoof).

@jegr said in SG-5100 open vpn speeds:

Nope, I was referring to the measurements from the Netgate Blog:
https://www.netgate.com/blog/sg-5100-desktop-available-for-pre-order.html
it was measured with pf (Package Filter - filtering) enabled and disabled.

We only took measures with pf enabled as we run the device as full firewall and not routing only. So just as a side note should if the question comes up if something was disabled that could have lessen the performance impact.

OK got it. Quite a powerful box then. Just a shame its AUD$1400 in my country and makes it unviable to purchase :(

I did not. I failed to see that part of the process.

It is installed, laptop rebooted, and I have a serial console. Thank you.

Sorry for the noise. :/

That did the trick. Thanks!

You can see odd behaviour like that if it exhausts the state table. You should see that logged in the monitoring graphs though and messages reflecting it in the system log.

You can also see odd things if the system is unable to write to root. That can see services slowly drop out as they attempt to restart. And since logs cannot be written it can be easy to miss. You would see error messages i the console though if you are logging that output. So maybe the drive is completely full or it stops repsonding for some reason but recovers after a power cycle. That usually only ever happens on an SSD. The eMMC, if it fails, usually just disappears forever.

Steve

Thank you for your help Steve! I'm going to work on the whole setup this weekend.

Did you have VLANs in your old config? If not they will have been removed. The switch config should still be there though so you can recover from the interface assign prompt by answering 'yes' to 'do you want to add VLANs now' and adding back the three expected VLANs:

WAN -> mvneta0.4090 LAN -> mventa0.4091 OPT -> mventa0.4092

Then assign those interfaces. That will allow you to boot fully and you have connectivity again.

Steve

The most common cause of that is a subnet conflict between WAN and LAN, the same subnet on both is invalid.

If that is the case change the LAN to something else such as 192.168.100.1/24.

Steve

So again unifi management vlan can be tagged or untagged.. They added it to the AP something like 6 months or more ago.. The switches could use a tagged management vlan before the AP could.

So your management vlan can be either tagged or untagged.. Before they made the change you could not set a tagged vlan and it had to be untagged. As long as your running somewhat current controller and switch firmware you can do it either way.

0_1550582194785_manvlan.png

@chrismacmahon Brand new SG-3100 -- I'm also seeing a solid orange LED under the square and a slow blinking blue LED under the diamond. I just installed 2.4.4p2.

The SG-3100 has 2GB RAM on board, it's not expandable.

Steve

That's a filesystem issue you can almost always recover from that by manually running fsck several times:

Running a file system consistency check on the SG1100:

At the SG1100 console press any key to interrupt the boot loader when you see:
Hit [Enter] to boot immediately, or any other key for command prompt.

At the prompt enter: boot -s

That will boot in single user mode to a question asking for a path to the shell, just press return to reach the # prompt.

At the # prompt run the following command: fsck -y /

Run the fsck command at least 3 times; Repeat the command until no errors are reported, even if fsck claims the filesystem has been marked "clean".

Reboot by running: reboot

It should boot normally and with no residual long-term issues.

But if you do need the recovery image please open a ticket with us at https://go.netgate.com and we'll come straight back to you with that.

Steve

Some switches do that and some don't.

This requires them both to be set to create an untagged port.

There are certain circumstances where having them be different can be beneficial. For instance you can use "asymmetric VLANs" to create isolated switch ports so there needs to be a way to set them differently.

Thank you.
Is nothing what it seems any more? ;)

Being USB it supplies 5 volts. Perhaps look up the Marvel espressobin specs if you need further details regarding current capacity etc..

Seems there needs to be some sort of handle there on what is actually expected throughput.