Open a support ticket at customercare.netgate.com?

@p2ranger:

Thanks for the replies

I apologize for not citing needs for future LAN ports. For now we don't need it, but I'm not quite sure what future need that might arise that would require us to need an additional port. As far as I can tell, the switch is where we have the need for ports at this time. I'm still learning my way around networking. Could you give me some examples of what an additional LAN port at the router level would be used for?

Thanks

Jason

Sure! With more networking ports you can have two internet connections in multi-wan scenario. So when ISP1 breaks, pfSense automatically switches to ISP2. You can also use a free port to create a separate network for your wifi users. Just an example.

Please let me know if you have more questions!

Thank you for that.

The wiki page had some holes in terms of explaining the steps but a google search on the correct terms filled in all the blanks.  Shame you need to have a login to update the wiki, prevents people from making quick suggested edits.

Using screen as a serial terminal is amazing on OSX.

I am still working on this.  At this time I am not completely sure what is going on.  I am going to be setting this firewall up in my lab and run some tests.

I have a run(4) device that works just fine as an access point but I've never been able to make it work usefully as a client.

Try configuring them both as APs and see if they work fine like that. If not there might be a power issue though I wouldn't expect it.

Steve

Thanks much, jimp!

@magrw2066:

Hello,

I have a sg4860 and I have not been able to bring up webconfigurator.
I get to the sg4860 console via 'screen' command from intel nuc/linux.
(Does ANY UBUNTU/FEDORA carry minicom/cu/screen WITHOUT apt?)
My ISP is ATT but their box mostly supplies WIFI. I have a direct line from att
opt port to  the SG4860's wan. BUT
the shell shell from sg4860 console says:
netstat -rn -4
dest                    gateway
127.0.0.1            link#10          UH    lo0
192.168.1.0/24    link #2          U      igb1
192.168.1.1        link#1            UHS  lo0
192.168.1.240      link#2            UHS  lo0
192.168.1.254      0:8:a2❌y:z  UHS  igb1

I cannot bring up webconfigurator or ping 192.168.1.254.
Note : wan is reported at console as igb1 and lan is reported as igb0
Security: an old zyxel based wifi usb dongle seems to cause crashes of pfsense.

you have 192.168.1.0/24 network on WAN so you can not use 192.168.1.0/24 on lan.

go command line, change lan network to 192.168.0.0/24 (192.168.0.1 addres on lan interface)
apply config.
now you will able reach from lan via https://192.168.0.1

I don't know your router model but I'm guessing our SG-4860 won't be bottleneck in your setup :) If your Asus router is too slow you can always install IPsec or OpenVPN clients directly on remote user's devices.

I too was having that problem until I finally figured out to make damn sure that I reboot the unit first and apply the upgrades immediately after completing the reboot.

http://lmgtfy.com/?q=pfsense+cellular+package

Thanks for the replies guys… I think I'll go for the sg-2220 and a managed switch.

Do you recommend getting additional storage?... It's 50$ for 60GB.

Hi,

Please contact our support at https://customercare.netgate.com/

Thanks!

I did a factory reset and used the wizard.  I generally do not like to use the wizard because of how the default gateway is named since I used multi-wan on many setups but since this setup only has 1 wan SG-2220 I just used the wizard.

Oh and a suggestion do not delete the LAN interface or you will lock yourself out of the router and have to go in via console!  I felt like an idiot right after doing that!  Should be some kind of warning when doing that as it was very easy to do.  Also the default password would not work after addign the interface back via console.  Again just factory reset and used wizard.

That is also potentially a sign that something has consumed all RAM on the device and is not freeing it up, so be sure to tell the support crew which services you have enabled and which packages you have installed.

@TomT:

Thanks.  Can you advise which box will be better for our needs ?

The SG-2220 would be better or another option is the i3 version of the Qotom mini pc.  Check out the hardware section on the forum.

You won't be able to use the crypto accelerator until pfSense 2.5 comes out.  Right now, The SG-1000 can do about 10Mbps over VPN, give or take depending on cipher and what other services you have running on the box.

Any good ideas ?  Small PC boxes I could buy? and combine 3 network cards ?

It all depends on the Internet connection speed and what and how many packets you have installed on that box!

It could be that a smaller variant likes the SG-2440 would do the job also fine, and with more luck a smaller one
will do the job too but without installing any packets then on that device. (pure firewall, DHCP, 3 VLANs,….)

SG-1000 - up to ~100 MBit/s Internet speed and low VPN & firewall only
SG-2220 - up to ~500 MBit/s, Internet speed IPsec & OpenVPNVPN, IDS/IPS
SG-2440 - up to ~900 MBit/s Internet speed, VPN, Squid & SquidGuard, pfBlockerNG, IDS/IPS

Or a total different way with the R1 from netgate.com

pfSense supports two IDS / IPS packages, Snort and Suricata. These filter network traffic for any malicious activities and available from the pfSense package repository. You can enable also ClamAV with Squid package, however Snort is much more effective.

It is to prevent scratches to that surface during assembly, packing, and shipping.