This unit has no cooling fans inside, it just cools thru the metal case. So, don’t rack it next to any really hot gear. If it were me, I’d stick it bottom-of-rack, on a shelf and give it some breathing room. Maybe even a small fan, like you mentioned.

You should be able to use any of those subnet sizes and it should pass that to clients.

Check the DHCP setting in Services > DHCP Server > LAN. It will show you there what the subnet and available range is. You can't set a different subnet size.

Do you actually see those Windows and Mac clients listed in Status > DHCP leases?
I'd say it's more likely you have a rogue dhcp server somewhere. At least 1 given you have clients showing /8 /12 /16/and /24!

Steve

If it's configured but not assigned as an interface in pfSense then no traffic will use it.

It can be removed from the switch config if you wanted to add Eth1 to vlan 4091 so all 8 ports are LAN for example.

Steve

Ha, nice catch though!

Good to hear.

Keep an eye on it, it's not clear what caused that.

Steve

So the fix for anyone looking for this issue is to halt the system, remove power for 10+ seconds and power on. Not exactly ideal if the system is your main internet gateway. It does however fix the issue.

Yes, only the LAN has any firewall rules by default. Any additional interfaces you assign must have rules added to pass the traffic you need.

Steve

subnet mask?

What connection type is that? It looks like it's probably a static IP with statically configured gateway. By default that will use the gateway as the monitor IP but you may have set something else.
If the monitor IP doesn't respond to ping it will show as down.

It looks to be linking up OK though.

Steve

NVMe is not supported in the SG-3100.

https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/m-2-sata-installation.html

I’m suggesting use the standard servers instead of secure core. Nord? Yuck stick with proton

I’ve used alternate dns servers for over a decade

The Eth ports on the XG-7100 are connected via the internal switch. You can configure them however you wish but by default Eth1 is WAN (lagg0.4090) and Eth2-Eth8 are LAN (lagg0.4091).
See: https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100-1u/switch-overview.html

You can also use the etherswitchcfg command to see the current switch config from the command line.

Steve

You should see some output from Coreboot when you first power it up on the serial console even if you have no OS installed.
Open a ticket with us if you are unable to connect to it: https://go.netgate.com

Steve

Did you get this working?

You should configure the switch to pass those VLANs if you need to use one of the LAN ports. Or you could use the OPT port to link to your switch.
By default the internal switch is in port based vlan mode which will pass the tagged traffic to the internal port but it's better to set it to 802.1q mode and specify which LAN port to use.

Steve

I think this was an SG-1100.
The SG-1100 does not support AES-NI directly because they are x86 instructions and the SG-1100 is ARM based. It does have equivalent hardware instructions though. We are currently working to enable that.

Steve

Theoretically that might be possible. However no-one has tested that card in a 7100, and certainly not one with modified firmware. It's impossible to say if it would work there.

Steve

Thank you very much for the help, Gertjan. That worked. Now, I can get into the pfSense web interface and I also learned something.

Thanks again.

I contacted support and re-imaged the device. That fixed the issue.