Hi,

Max power consumption for XG-7100-1U is 120W while idle should be at 20W. Thanks!

Thanks @TheNarc , I had a hunch that the modem was doing something nasty - I just never think about leased hardware being bad from design. Glad to know I wasn't barking up the wrong tree on this side. Advised to get a replacement from his provider or consider buying his own.

And yes, he has always had mild connection issues - he noticed occasional poor call quality on the phone even when it was SW->IPSEC->SW (behind the same modem) before I touched anything, but the sg-1000 seems to have much more trouble with it.

And @moikerz - no worries; you'd probably yell at me worse if I told you how many VLANS I am successfully running off of how small a LAGG on the main office LAN (and that's probably not even my worst sin on this setup). Turns out that the IT culture at a construction company doesn't ask for much and is willing to put up with a lot. Of course what they do ask for tends to be either trivially easy or impossible shy of some hacks. Try telling some of the hard-hat side of the company that they are behind too many layers of NAT and let me know how that goes :P

And the only reason I mentioned the pings is because I saw SEVERAL over 10ms pings over a single cable, I do recognize that ping is a very poor indicator of connection quality.

I would prob chime in on the linked to arp-watch broken thread as well. And maybe even the redmine listed in that thread.

Mine has been rock solid since removing arpwatch..

Hello, i'm new to the SG-3100, but from what I've learned in a few months, the issue is related to FreeBSD on ARM architecture. It's unlikely there will be a fix, as that issue you linked is more than 2 years old.

Others have reported that VLAN port assignments do not affect throughput, so I think the limiting factor in this situation is definitely PPPoE.

WAN will certainly function as a DHCP client. That would be the default behavior.

I would disconnect the existing wan, power cycle the modem, let it come up and get synced, then connect the 7100 WAN interface.

There are ZERO current wifi tech cards that are supported... Do yourself a favor - get a real AP and place where it will have good coverage. Which 99.99% of the time is nowhere near or in you router..

Or if you can not properly place say a POE AP in the Ceiling - then get some of the mesh AP you plug in around the house/location, etc.

if you want your router/firewall/wifi in 1 device then sorry pfsense which runs on freebsd is just not the correct solution..

The SG-3100 hardware uses an ARM 32-bit CPU instead of an Intel CPU, thus it has an ARM-based FreeBSD kernel. Could be that Netmap support is not enabled in the ARM version of FreeBSD. You should be able to call Netgate tech support for more information. Enabling Netmap in the AMD64 builds of FreeBSD is done by switching on a kernel compile option.

It's not from Netgate, and we don't officially endorse it in any way, but if you have (or have access to) a 3D printer, this is also an option: https://www.thingiverse.com/thing:2864343

If you enabled /tmp and /var in RAM then you need to specify their size. If your rule updates ran the RAM disks out of space, you need to increase the size of those. They can't be sized dynamically, and there isn't a way for pfSense to know how much space you need there, so the burden is on the admin to set the proper sizes.

@johnpoz
Thanks, they were able to help me out. Useful to know how to get these images outside of initial warranty period.

Pablo

Configuring a switch from a port on that switch (any switch) always has the possibility to lock you out, etc, if you are not very careful.

I would at least temporarily enable, number, and add a firewall rule for the OPT port, connect a laptop there, and configure the switch. That way you won't lock yourself out.

This does seem like a layer 2 (switching, vlan) problem. I don't think anything is necessarily wrong with routing, per se. Based on your diagram, the NAS should be able to ping the IP Camera.

Also, I assume you have the entire LAN on /24? I recommend assigning a different IP range to different VLANs. You could go with a /25 or /26 to divide it up.

A real test would be to wire the two TP-Link SG108E together (shown with the Netgate between them). Could the PC ping everything then? If so, add the NetGate back and look closer at the LAN/vLAN config. You'll definitely need 802.1q enabled. If not, then the answer lies with one of the switches.

Worse case, don't use VLANs, and instead use the OPT1 interface (and a different subnet) for the IP Camera network segment.

@akong77

Why you have doubt, that it won't support. First the processor is supported by the FreeBSD, second is the issue of the NIC and you didn't mentioned it. Say its the X553 from intel, and you happens to jump on the forums, that it is not been supported, than you should check whether that is supported or not.

Infact better check, whether the drivers are available for the FreeBSD by that specific vendor and supported.

SUCCESS for the factory image installation!!

I took the micro sd card and used a different adapter and re-imaged the card on my ubuntu. I removed and reinserted the sd card. Now I get one of the 2 file system to mount!!!

Next I reinserted it into the SG-1000 with the SD BOOT jumper in place. Then powered it up with the console cable active.

This worked! After a long stream of messages it finally stopped where it reported:
This will install the standard firmware and will erase all the existing contents of eMMC permanently.
eMMC device: mmcsd1
Are you sure you want to continue ? (y/N)

answering y then proceeded to performing the firmware installation and then it shutdown.

I removed the SD BOOT jumper and the sd card. Then I powered it back up.

It then came up to the proper version used for the re-imaging and I was able to begin to configure the device.

The web gui now reports:
Version 2.4.3_1 is available.
Version information updated at Wed Jul 18 17:10:30 MDT 2018

SUCCESS
thanks
oldunixguy

Please contact our support so they can have a look. Simply submit a ticket here.

Thanks!

If it does cost to repair/replace, your insurance should cover it. Either homeowners or renter's insurance.

This won't answer all your questions but, I did find this on reddit:
https://www.reddit.com/r/PFSENSE/comments/8hbsze/xg7100_performance_with_suricata_at_1_gbps/

I'm running a Motorola MB8600 (32 channels down and 8 channels up). Total speed demon and very reliable. Only thing I wish it had was more than one port. (It actually has 4 ports, but three are masked off- for use with bonded connections only).

@behemyth said in New SG-3100 with gigabit comcast line... can't get over 540Mbps:

My 3100 has been rock solid running Comcast Gig. Make sure you test with [speedtest.xfinity.com], it will use a dedicated server that is always able to do gig, when you just use speedtest you use other peoples servers, and most of the time they dont have gig bandwidth.

I did have weird issues with my modem firmware causing slower speeds, but they appear to have fixed that. What modem model are you running btw?