@dibun Sometimes I really question myself why I write all this (and even post pictures). Didn't you read it, did not understand what I wrote or is it just the greed to get something for free?

@Derelict, I confirmed that after installing and configuring the M.2 drive I can actually switch back and forth between the two configurations simply by setting the "Hard Disk Drive BBS Priority" order in the BIOS setup under the "Boot" tab. Thanks again.

@grimson nice

I'm not aware of a BIOS update for that firewall. If there were anything it might be a cpu microcode update for meltdown/spectre but we update that at boot anyway. Steve

SIP is just UDP (usually). Your question is better-aimed at your SIP equipment/services and whether they are tolerant of NAT. There is no SIP ALG in pfSense other than one small proxy daemon that is used for one use case that is pretty rare these days.

@stephenw10 said in SG-3100 recovery issue: If you have never used the ticket system before just create a new account, use the 'sign up' button at the bottom of the right column there. Steve Thanks, I was using my Netgate account as ID Ticket submitted

Yes, please start a new thread there.

My temp is around 63°C SG-3100 49°C XG-7100 -Rico

Not exactly, the 'switch'ing device in the middle in our case is SVL and they (and all vlans) are controlled by another entity. I'd have to get some FID entries in there, but it'll just be easier to stick with devices with separate NICs (or the ability to mac spoof).

@jegr said in SG-5100 open vpn speeds: Nope, I was referring to the measurements from the Netgate Blog: https://www.netgate.com/blog/sg-5100-desktop-available-for-pre-order.html it was measured with pf (Package Filter - filtering) enabled and disabled. We only took measures with pf enabled as we run the device as full firewall and not routing only. So just as a side note should if the question comes up if something was disabled that could have lessen the performance impact. OK got it. Quite a powerful box then. Just a shame its AUD$1400 in my country and makes it unviable to purchase :(

I did not. I failed to see that part of the process. It is installed, laptop rebooted, and I have a serial console. Thank you. Sorry for the noise. :/

That did the trick. Thanks!

You can see odd behaviour like that if it exhausts the state table. You should see that logged in the monitoring graphs though and messages reflecting it in the system log. You can also see odd things if the system is unable to write to root. That can see services slowly drop out as they attempt to restart. And since logs cannot be written it can be easy to miss. You would see error messages i the console though if you are logging that output. So maybe the drive is completely full or it stops repsonding for some reason but recovers after a power cycle. That usually only ever happens on an SSD. The eMMC, if it fails, usually just disappears forever. Steve

Thank you for your help Steve! I'm going to work on the whole setup this weekend.

Did you have VLANs in your old config? If not they will have been removed. The switch config should still be there though so you can recover from the interface assign prompt by answering 'yes' to 'do you want to add VLANs now' and adding back the three expected VLANs: WAN -> mvneta0.4090 LAN -> mventa0.4091 OPT -> mventa0.4092 Then assign those interfaces. That will allow you to boot fully and you have connectivity again. Steve

The most common cause of that is a subnet conflict between WAN and LAN, the same subnet on both is invalid. If that is the case change the LAN to something else such as 192.168.100.1/24. Steve

So again unifi management vlan can be tagged or untagged.. They added it to the AP something like 6 months or more ago.. The switches could use a tagged management vlan before the AP could. So your management vlan can be either tagged or untagged.. Before they made the change you could not set a tagged vlan and it had to be untagged. As long as your running somewhat current controller and switch firmware you can do it either way. [image: 1550582194943-manvlan.png]

@chrismacmahon Brand new SG-3100 -- I'm also seeing a solid orange LED under the square and a slow blinking blue LED under the diamond. I just installed 2.4.4p2.

The SG-3100 has 2GB RAM on board, it's not expandable. Steve

That's a filesystem issue you can almost always recover from that by manually running fsck several times: Running a file system consistency check on the SG1100: At the SG1100 console press any key to interrupt the boot loader when you see: Hit [Enter] to boot immediately, or any other key for command prompt. At the prompt enter: boot -s That will boot in single user mode to a question asking for a path to the shell, just press return to reach the # prompt. At the # prompt run the following command: fsck -y / Run the fsck command at least 3 times; Repeat the command until no errors are reported, even if fsck claims the filesystem has been marked "clean". Reboot by running: reboot It should boot normally and with no residual long-term issues. But if you do need the recovery image please open a ticket with us at https://go.netgate.com and we'll come straight back to you with that. Steve