If it's configured but not assigned as an interface in pfSense then no traffic will use it. It can be removed from the switch config if you wanted to add Eth1 to vlan 4091 so all 8 ports are LAN for example. Steve

Ha, nice catch though!

Good to hear. Keep an eye on it, it's not clear what caused that. Steve

So the fix for anyone looking for this issue is to halt the system, remove power for 10+ seconds and power on. Not exactly ideal if the system is your main internet gateway. It does however fix the issue.

Yes, only the LAN has any firewall rules by default. Any additional interfaces you assign must have rules added to pass the traffic you need. Steve

subnet mask?

What connection type is that? It looks like it's probably a static IP with statically configured gateway. By default that will use the gateway as the monitor IP but you may have set something else. If the monitor IP doesn't respond to ping it will show as down. It looks to be linking up OK though. Steve

NVMe is not supported in the SG-3100. https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/m-2-sata-installation.html

I’m suggesting use the standard servers instead of secure core. Nord? Yuck stick with proton I’ve used alternate dns servers for over a decade

The Eth ports on the XG-7100 are connected via the internal switch. You can configure them however you wish but by default Eth1 is WAN (lagg0.4090) and Eth2-Eth8 are LAN (lagg0.4091). See: https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100-1u/switch-overview.html You can also use the etherswitchcfg command to see the current switch config from the command line. Steve

You should see some output from Coreboot when you first power it up on the serial console even if you have no OS installed. Open a ticket with us if you are unable to connect to it: https://go.netgate.com Steve

Did you get this working? You should configure the switch to pass those VLANs if you need to use one of the LAN ports. Or you could use the OPT port to link to your switch. By default the internal switch is in port based vlan mode which will pass the tagged traffic to the internal port but it's better to set it to 802.1q mode and specify which LAN port to use. Steve

I think this was an SG-1100. The SG-1100 does not support AES-NI directly because they are x86 instructions and the SG-1100 is ARM based. It does have equivalent hardware instructions though. We are currently working to enable that. Steve

Theoretically that might be possible. However no-one has tested that card in a 7100, and certainly not one with modified firmware. It's impossible to say if it would work there. Steve

Thank you very much for the help, Gertjan. That worked. Now, I can get into the pfSense web interface and I also learned something. Thanks again.

I contacted support and re-imaged the device. That fixed the issue.

@jimp Thank you!

@lavila said in XG-1541 - SSD Boot Errors: What would be the best way to test if this is an issue with the drive? (All the SMART tests show as passed or no SMART errors detected) SMART is a decent indicator, especially if you've manually run a long test and checked the results and logs after. It's not perfect, but if it does find a problem then it's almost certainly a legitimate problem. You could boot from a drive diagnostic test disk and run it, but it may not be any more accurate. Not sure which disks you have in there, but disk manufacturers used to all have their own tests you could get from them. Any commands to determine if this is a filesystem issue vs a hardware issue? You could run a filesystem check on the disk, though if it failed to find the loader that's a bit more extreme and outside the scope of the filesystem itself. If the disk is not currently a part of the mirror, you may have to run fsck manually on the disk slice(s) (e.g. fsck -y -t ufs /dev/ada0p2) If it is an issue with the SSD and we just need to replaced. Will the mirror will be automatically started from drive2 back to drive1? Or will I need to re-install pfSense and restore configs The mirror wouldn't automatically be added to a fresh disk, you'd have to add the disk in using the controls on Diag > GEOM Mirrors. You should send a message in to support. Since this is potentially a hardware problem on a Netgate device, it wouldn't be an issue that requires a subscription for assistance. https://go.netgate.com