@stephenw10 I did this right now. Thanks for your help.

@stephenw10

The problem from my understanding is this is not a proper transceiver. It’s more a interface from the Fiber to the xgspon onu. Need something with a MAC address capability and this does not offer it.

@stephenw10 Thanks you. I will look into that when trying it out for real.

@cdturri said in 10G RJ45 to SFP+ transceiver module to use with a Netgate 6100max:

@cylosoft Did you check how hot the transceivers run? Usually the RJ45 to SPF+ ran very hot as they need to convert the signal. You mentioning that one of them would lock up after a month could indicate a heat issue.

Yeah we had discussions around exactly that. They run hotter than I'd like. Could be the cause. We weren't able to line up lock ups with temp, traffic, or anything.

@stephenw10 ok cool thanks for that, they all go into the same switch anyway so single port loosing connection isnt too major at the moment, its more just in case one device goes down which it sounds like it will work with

will keep that in mind for future upgrades though

@milesteg The Netgate 4100 will have you covered - it handles 1Gbe symmetric with ease as long as you are not doing deep packet inspection (Suricata/Snort).
It’s the easy choise for your needs.

Reasons to go higher:

4100 MAX: If you really want to log a lot on rules, and in packages NtopNG and pfBlocker. Heavy logging can shorten the lifespan of the regular 4100 because of the small eMMC (a lot less endurance than the 128Gb SSD in the MAX)

Netgate 6100: Twice the CPU power and RAM of the 4100 + 10Gbe interfaces. A good idea if you want to do “normal” Suricata/Snort at 1Gbe speeds, or might think a 10Gbe Fiber is in your future. The extra memory is most likely not needed unless you are doing it for suricata/snort or VERY heavy pfBlocker setups.

Netgate 8200: 4 times the CPU power and memory for HEAVY packet inspection at 1Gbe, or closer to actual 10Gbe throughput in real world multiusage scenarios without deep inspection.

After a few hours of troubleshooting on my own network. I took my 5100 to a friends house and was able to get the expected speeds there. So I returned home and called my ISP. They made some changes on their end (changed vlans and ports) and now it is working properly!

The ISP is new to the area, and still has some bumps.

Sorry for the question to the group, but I am good now.

@michmoor - I do use pfBlockerNG - but I had disabled that during troubleshooting. With all re-enabled, I am now getting expected speeds.

I don't have an answer to the obvious question of why did it work with the PC connected directly to the ONT. The only thing I can come up with is that I did reboot the ONT between tests, so that may have had an impact.

Thanks again to the group.

For ease of reading the config and understanding what's happening I would create a VLAN 4091 interface on ix1 and then bridge that with the existing VLAN 4091 on lagg0.
That does mea you need to handle the vlan in the external switch but I would take that just to keep LAN the same throughout.

Then I would re-assign LAN as the bridge and move the filtering onto it so you only have to filter in one place.

However if there's any way you can avoid bridging VLANs I would do that.

Steve

@stephenw10 said in 6100 ix0 and ix1 unable to negotiate with SFP 1G ports?:

I would consider it best practice to not combine tagged and untagged traffic on the same interface if possible. That's for a number of reasons including that applying a setting to the parent can break tagged traffic on it in some cases, though it should not. More often it opens a possibility for traffic to escape a VLAN if something connected to it incorrectly untagging traffic. If that interface will accept and route untagged traffic it can end up being passed incorrectly.
However that isn't the case here because you don't need to add an IP address to the parent NIC or put any firewall rules on it.

Steve

Thank you again! :)

@rvd said in Does SG-1100 limit my internet speed?:

BTW - Is there a reason there's no longer a 3100? Will be there a replacement for it in the future?

Supply chain issues -- our supplier had trouble getting components in the device.

It's replacement is the Netgate 4100.

I installed the horizontal fan. With a closed door, the core temperature dropped to 51 and 47 degrees, but I have seem lower temperatures as well. When I open the door, the temperature is around 42, so maybe there is a bit more improvement possible with increasing the power of the rack top ventilator.

@stephenw10 said in Netgate RCC-VE 8860 and 23.01 Hardware Errata:

The initial bug report that was on our internal redmine (NG 8916) which is why it was repliacted in that todo. I agree though the LED statement needs to be updated.

The Todo I pointed to, which is now closed, was created by Offstage Roller on 2/23/2023 merely as a request to clarify/clean up the already published errata text, not as a replication of a full bug entry for ongoing status, details, etc.

@jch said in SG-3100 23.01 update causes PHP error in system logs settings:

@mcury Thanks ! removing syslog tags resolved this issue.

Good to hear that

Yeah it's untested AFAIK. It's certainly not rated for a wide input voltage like that.

That will work. Or just swap the link out for a cross-over cable.

Yes, you can do that. Though I would first try a clean 23.01 install. The fact it won't factory default sounds more like it didn't complete the upgrade successfully.

Steve

@stephenw10 Thanks. That is exactly the behavior I'm seeing, just wanted to verify.

@rcoleman-netgate

I'd be exhausted, too. PHP 7.x -> PHP 8.x for an ancient PHP app is not a small job. And then FreeBSD 12.x -> FreeBSD 14 in the same swoop, with in-place upgrades where the install base is made up of eclectic hardware.

It's a miracle most of my 2.7.0-dev and 23.01 Rel upgrades worked. For those that did not.... Enjoy Q2 2023 #nosleep