@coxhaus I would love to given the positive experience I have had with the CISCO SG200 switches. I would like to upgrade to at least 2.5G and everything I can find in CISCO products are overkill for my needs, even staying at L2.

@Nellies yeah tac is normally johhny on the spot.. I have gotten link for download in the past in couple of minutes, think longest was like 20 minutes and that was right when a version dropped and you know they had to have been swamped with tickets. So your 3100 is back in business?

@CatSpecial202 I never got it to boot but basically Netgate support just said to send it back after I reported the blank console and the power button behaviour. Did you have a 4200 or a 4200 MAX?

There isn't at the moment The 4100/6100 kit will not fit. The 4200 doesn't have the same mounting holes.

Thanks for pulling this together again, @SteveITS. Other than the use of a RAM disk, all of this has been implemented here from the start.

Aha, nice result!

@stephenw10 thanks sent in a email to sales. Might be able to do without the actually bracket. Might be able to fabricate my own bracket.

@michael2z said in Upgrading a Netgate 5100: Has anyone succeeded in upgrading a Netgate 5100 to the latest pfsense version. Any do's and don't's appreciated. I have a Netgate SG-5100 device. I maintain it on the most recent pfSense Plus versions as they are released, so I'm never more than 1 version behind. I just click the Upgrade button and let it go. I have no optional packages installed. Generally takes about 5 - 7 minutes if I recall for an upgrade.

You would need something in between to act as a USB host and bridge the two USB-serial connections. Like a RasPi perhaps. But if you're doing that you might as well just use the RasPi as a terminal server.

@stephenw10 My only thinking is you don't want to bridge any pfsense interfaces, use layer 3 routing in a larger network between interfaces. Layer 2 has a lot of baggage. The same if you are using slow communication lines. Route over them, layer 3 instead of bridging them, layer 2. At least it was that way 20 years ago with a network of 4000 Windows clients. I would think the principles would still apply for the fastest speeds on large networks.

Hello, I was able to configure the WAN correctly by defining a VLAN with the tag required by the ISP and define the WAN on this interface. A step-by-step guide with screenshot is available here: https://ic.rcasys.com/s/RantzDKFxHjX3Ba Thanks @stephenw10 and @keyser for your support!

We still test on older hardware because we need to know if there's a specific issue that might apply before release. I tested 24.11 on APU and FW-7551 for example. However after EoL if there is some hardware specific regression we can't guarantee to fix it. Most of the time it's trivial to fix so we do. For example at some point the 3100 will no longer be supported because the effort required to get it to build as the only armv7 platform we have will be too great. It's no longer a tier1 architecture in FreeBSD so there are often things that break there.

Thank you. It turned out that I had a faulty interface setting that kicked in when the unit was rebooted. I had to revert to reset the device, restore previous settings and delete the faulty setting to get all working again. A learning process indeed. Thank you for the suggestion!

Yup if you have WoL enabled for example the NIC will remain linked when the PC is in standby.

@KOOL43 Well thats hard to say. I have a 2100 with a running GPON 1.25/2.5 BiDi SFP trancievers from fs.com. Before that I tested it with a Nokia tranciever with similar specs, and that also worked without issues (but was a loaner). So I would expect it to work, but it’s impossible to guarantee it up front.

@mon007 said in Newly purchased Netgate 8300 Appliance.: Hi @elvisimprsntr, Thank you for your reply. We are using a brand-new UPS with all-new batteries. Unfortunately, both of our current units are not pure sine wave models. I’m a bit of a newbie when it comes to UPS systems, so I really appreciate your advice. I’ll make sure to purchase the required type. Thank you again! A pure sine wave model is likely to cost more than one doing "stepped aproximation". That's one way to know it's likely a pure sine wave box (along with the manufacturer explicitly stating that in their specifications).

The maximum throughput without any packages or VPNs on the 2100 is 600-700Mbps. No problem for 400Mbps. But if you want to pass 400Mbps over wireguard you are going to be CPU limited. If you want to do that with Snort or Suricata running, even more so. Memory shouldn't be an issue unless you load up ever list and definition in pfBlocker and Snort (which you shouldn't!).

@johndoe102 said in Kea DHCP and MAC Address Control (MAC allow) - no access after restart.: if I set the IP manually to the different one , but from the same subnet ... I cannot connect to the pfsense That implies it's not on or not functioning. Can you ping the pfSense LAN IP? Replace the patch cable between pfSense and your switch?

The logging is a known issue: https://redmine.pfsense.org/issues/15411 It will correct itself or you can restart syslogd to correct it immediately. Increased CPU usage should only be when using he GUI. Try checking top -aSH at the CLI without the webgui open.