It doesn't abort, it just hangs, even if you exit the download client and reload, It just sits there at 92-99 %.

It will complete if you switch your internet source away from the SG-2100, even a cell phone's hot spot completes the download in just a few seconds.

PaulDG

@jonathanlee said in SG2100 wan speed:

It should handle this

Mmmm... it's not going to do 964 Mbps from the Internet. Some of the tests are run without NAT, without firewall, etc. At some point Netgate used to have the test info, and it may still be somewhere but I don't know it offhand.

Usually I estimate about halfway between the "firewall" speeds on the product page:

IPERF3 Traffic: 964 Mbps IMIX Traffic: 249 Mbps

I haven't maxed out a 2100 yet. I just did a rather unscientific test using a speed test from my eero (bridged through pfSense; my PC isn't wired) that got around 65-70% CPU usage at 430 Mbps down mid-day. That's without Suricata/Snort.

We had a client with an older 2440 model I think it was that hit 95-100% CPU usage, with Suricata enabled, around 350 Mbps as I recall.

@csardoss I have a 2100 I moved to ZFS I had to open a ticket with TAC to get the firmware emailed to me. As long as your serial number and stuff matches up they will let you have the software for the firewall.

https://www.netgate.com/tac-support-request

@morib I did get to review your ENVVAR output and there was a bunch of missing data. I recommend running the commands in my email so that you can verify that it will work on the next release as well.

@steveits said in Product idea:

the Max version comes with an m.2. Other models have a guide, the 4100 does not.

Indeed.. That would be my go-to option..

New thread? This is pretty far off OP’s question :)

I'll open a new one, you are correct, but thanks for remembering me about the MAX option.. :)

Solved! It was operator error. I found my configuration mistake in Putty. Once I got that it was a piece of cake. Thanks for looking

@orangehand Can you access the console and see if there are any errors being shown, or logged?

https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/connect-to-console.html

If any disk/eMMC errors:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/index.html#hardware
https://docs.netgate.com/pfsense/en/latest/troubleshooting/disk-lifetime.html

@robbiett said in Netgate 6100 - Significant Interface Interrupt Rates:

Are you trying to help me, as it has become a little unclear?

less and less when i read things like above.

anyhow, what i tried to convey is that the # of interrupts seems to be in line with what i find "normal" on my sites with a NG6100 device:

300mbit wan bandwidth + unknown amount of inter-vlan traffic:
1e2b7781-b3c2-4d2c-b226-2400cc3a267c-image.png

1.2gbit wan bandwidth + unknown amount of inter-vlan traffic:
1baee5c6-fa34-49f0-aa63-bb93a43a0cca-image.png

so, for me 70k interrupts does not cause any issues. it could be different for you, but it could also be that you have different issues that are not related to interrupts at all.

@furom said in [Solved] Please help with switch/vlan (802.1q) setup on Netgate 2100:

it is blazing fast

Nice. 😁

@stephenw10 Thanks, I've updated my support ticket. I don't think I'm still under warranty, but maybe tac can give me advice on whether anything can be done.

@stephenw10 Thank you very much.. This will help me get things going.
Have a great day!

learning more: I see node_exporter for armv7:
https://www.freshports.org/sysutils/node_exporter/

Does anyone have experience with this? How to get it installed, would it work on the SG3100?

VLAN1 untagged on every port would be fine. What's definietly not fine is having more than one VLAN untagged on any port such as VLAN20 is there.

@stephenw10 I was just in the process of filling out the form on the website when I got the email you had replied to my post. I'll have the ticket submitted shortly.

Yeah I think trying to diagnose this with the other other issue still present is going to be very difficult. There's s good chance they are related and it might already be fixed in 23.05.

The service watchdog is a trouble shooting tool and should be seen as such.

There are some situations where you might want to enable it on a service in a more permanent way but even then it's usually to address some underlying bug.
For example if you have an OpenVPN client and want it to be always up you might use the watchdog. But only because if the server side rejects the connection as unauthorized the client will exit and not retry. Most clients would never see that or if they did retrying would not help.

Steve

@nevolex The 1100 has not even be slated as "end of sale" so it's successor is still the 2100, whose successor is the 4100, whose successor is the 6100, whose successor is the 8200, whose successor is the 1537, whose successor is the 1541.

Also when there's an announcement to be made look for it to appear in Netgate Announcements

Yeah, you should be fine. Just reinstall 23.01 clean when you can.

Thanks @stephenw10 !

@captainron My previous offer still stands.