No there is only one physical space to hold a card. So even thought the CPIC card doesn't require external port access it still needs the physical support to hold it. Steve

Mmm, Ok probably can't see link rate to negotiate it. It might be possible to force it to 1G. Anyway good to know either way.

Yes, you can enable it. Also enable powerd in pfSense to take advantage of it. I run that here and haven't seen any significant performance issues: [24.08-DEVELOPMENT][admin@5100.stevew.lan]/root: sysctl dev.cpu | grep freq dev.cpu.3.freq_levels: 2200/0 2100/0 2000/0 1900/0 1800/0 1700/0 1600/0 1500/0 1400/0 1300/0 1200/0 1100/0 1000/0 900/0 800/0 dev.cpu.3.freq: 1400 dev.cpu.2.freq_levels: 2200/0 2100/0 2000/0 1900/0 1800/0 1700/0 1600/0 1500/0 1400/0 1300/0 1200/0 1100/0 1000/0 900/0 800/0 dev.cpu.2.freq: 1400 dev.cpu.1.freq_levels: 2200/0 2100/0 2000/0 1900/0 1800/0 1700/0 1600/0 1500/0 1400/0 1300/0 1200/0 1100/0 1000/0 900/0 800/0 dev.cpu.1.freq: 1400 dev.cpu.0.freq_levels: 2200/0 2100/0 2000/0 1900/0 1800/0 1700/0 1600/0 1500/0 1400/0 1300/0 1200/0 1100/0 1000/0 900/0 800/0 dev.cpu.0.freq: 1400 Steve

Hmm, yes, ix2 is almost always one of the two internal links to the switch. It should not ever lose link. The only time that wouldn't be an internal link is if you have an expansion card fitted that also uses the ix driver. One thing you could do is reconfigure it to use only ix3 instead of a lagg of ix2 and ix3. Assuming you are not also seeing ix3 lose link. Steve

Hmm, I would open a support ticket and request the legacy installer: https://www.netgate.com/tac-support-request That image should work but you may have some edge case.

Right it's just seeing no DHCP replies at all. I assume the port does show as linked though since it is trying? As @johnpoz said the upstream device could be locked to the MAC of your other router. You could try spoofing that in pfSense. Or rebooting the modem.

Did you have a specific question? If you're unsure I would first try installing CE on whatever hardware you have to test it. Steve

@stephenw10 , many thanks Stephen. Best regards.

@stephenw10 Found the problem with OpenVPN after a lot of digging. Looks like dyndns wasn’t updating cloudflare even though the dyndns client tab showed that cloudflare was up to date. I could see from the dns records on the cloudflare site that they were out of date. Forced an update and now OpenVPN is reachable. The dyndns package had the proper IP and the update script is working so perhaps this was just a temporary issue with cloudflare and only a coincidence with the timing. Not really sure. 🥺

@claferriere Concur with @stephenw10 - don’t go there unless you really know what you are doing. However - I do exactly what you are asking about with a GPON Bridge SFP in my SG-2100 in France. I have tried the very same SFP in my SG-6100 and it works there as well. So module compatibility is there - but that is the least of the problems in getting GPON termination directly in pfSense :-) You are not the first asking about this: Read this thread: https://forum.netgate.com/topic/189708/fiber-optic-to-pfsense-box?page=2

That's when it stopped responding? Check the Status > Monitoring graphs at the point it appears to hang. Do you see the CPU spiking or traffic or memory use? Is there any reason you're still running 23.09?

Since I'm here I'm happy to report that the following modules are compatible with the netgate 6100 : Mikrotik S+RJ10 FS SFP-10G-T100

@Gertjan I agree with you here completely. Although I would just add….Can pfsense do any of the things outlined? Yes. Can it do it well(compared to other security appliances)? No. Pfsense isn’t a UTM device. So that said, being ISO compliant is one thing but the other part of the assessment should be “do I want a security appliance that has a laser focus on cyber security)?

@mikek complete rebuild did not lead to a better result. have a support case with my provider that is not really progressing either. looks like for the immediate future DCO is not available.

You can run the SG-1000 from a uSD card directly. If you ask the TAC guys they can get you a specific image that runs directly without requiring the installer. However it cannot run any pfSense version after 22.05 so coming up to 2 years without updates.

Thank you.

For the record, I set speed shift back to 80 last week, and this week has been fine. I think the issue was just a coincidence of my timing with regards to upgrading to the 4200 and the croudstrike issues.

Hmm, there isn't a user interface to the serial number / date cut-off. Feel free to ping me though, there won't be that many requests.