@stephenw10 SG-3100 arrived today. Same LAN-WAN testing results below. LAN box on 192.168.1.100, WAN box on 10.10.10.10. 100% vanilla install fresh out of box. Thanks for all your help.

SG-3100 WAN-LAN share.png

@NogBadTheBad Thanks for the link. I have already done that. The power is still too bright. The problem might be the cheap plastic case, as the light just leaks and flows out in all directions. If the case was make of good solid material at least the light would not leak and then a simple masking tape on the top would have done the trick.

Hmm, I doubt booting from a USB card reader has ever been tested. While I might expect that to work it doesn't entirely surprise me to find it doesn't. Coreboot is not as flexible as some BIOSes.
As far as I know booting from a USB memory stick in the USB3 slot works fine.

Steve

It's impossible for us to recommend you open the power supply. I could only suggest you get a replacement identical PSU if you need to replace a worn fan there and it's out of warranty.

That appears to be this: https://store.supermicro.com/200w-1u-pws-203-1h.html
Confirm that physically before ordering though since I don't have access to check directly.

Steve

It would eventually though I've never seen it get hot enough to happen. I think there's a setting in the BIOS for that. No reason the change it though.

Separating LAN from wifi clients is generally good practice but it can cause problems for some services that reply on a single layer 2 to 'see' each other.
As with most things security is convenience is a trade off.

Steve

Generally; AES-NI only for Crypto and Intel Core for thermal.

Steve

After step 1, did you saw the serial port "COM" as mentioned in the doc ? Did it mention a port number like port COM3 inn the example ?
And the

Open PuTTY and locate the Session display as shown below. F ....

part isn't worth to mention ? What did you do ?

Any images / screenshots to share ?

Where is what you're experimenting different as what has been written down ?

Don't be worried about being "rude" -- not to me at least... You can call me an idiot if you want, etc. Unlike many people on the internet who identify as 13 year old girls on their first period ;) My skin is a bit thicker than that..

I would be more than happy to exchange F bombs if you so wished, etc.. I spent 16 years in the Navy (6 active, 10 reserve)... I don't think it would be possible for me to take something as "rude" now you might piss me off... But take offense - prob not, think your a "____" sure ok... But still be happy to help you understand/fix a technical issue..

So please also understand if I might sound blunt, or even rude - I am not meaning to be.. I am blunt/direct sort, I don't really like to play nicey nicey worried about if calling you an idiot will hurt your feelings ;) What I am trying to get you to do is understand what your doing is not correct - if you know what I mean.

Now I do try and play nice, mostly because of the whole mod thing - might not look right going around calling users dip shits, etc. But if I did - it wouldn't be personal, the world is full of dip shits ;)

But thanks - and rest assured I was in no way offended or think what you stated was rude.. Play around with doing rules.. And you find unless you have a really good reason, its just simpler to keep them on the interface where they are being applied so you can see them when your creating other new rules for that interface, etc.

Open a ticket with us. https://go.netgate.com
You may need pfSense though (or maybe FreeBSD) to get the correct flashrom version.

Steve

When you change the RAM in the XG-7100 it will retrain at the next boot and it can take a while to do that. Much longer than you might expect. During that time it appears to be not booting. Just wait at least 10mins to be sure.

Steve

A Machine Check Exception (MCE) can only be a hardware issue. Open an issue at https://go.netgate.com and the support team can help you out.

Thank you Kiokoman!

Great that you got yours to working. I had my laptop direct connected to both the LAN and to the console with Putty. I could always get access via the console but no matter what I did, the web interface would freeze about about 50% of the time even though no changes were made. Also tried using a different (Win7) laptop and got the same results. Then what I suspect were some anomalies created by heat. This box is measuring 117°F which spec states 113°F is max for this CPU so something is not right and really flaky.

I have the SG-1100 but I got a bad unit. Never got any responses to the symptom's I reported to tech support except for a link to download the firmware which did not solve the problems. So yeah, I'm sorta sour grapes on Netgate right now for the way they handled this.

I run vlans on all of my sg3100, ie 802.1q mode is enabled.. Have seen no issues.

When you sniff and pfsense does not see a packet - that is not on pfsense.. Seems your switch is not tagging stuff correctly maybe?

@Rico Sounds like no order from normal customers. I just ordered a mini pc: Half price, 3 times faster and no need to have a business.

I'm still a bit sorry because I really wanted the sg1100. But thanks to you guys anyway.

Well then comes down to what vpn performance you need and what your internet speed is.. The sg1100 is not going to be able to handle as much openvpn traffic as say the 3100 or 5100... If I recall what I have seen about 80-100mbps is about the best you can expect over openvpn... You could do ipsec vs openvpn, but not sure what the performance on that is.

Hi Rico,

Thanks for your reply. I contacted Netgate Sales regarding it. I also edited this post as I posted incorrect model number.

Kind regards,
Michał

@chrismacmahon done !

@stephenw10 Thank you for taking a look!

After further investigation, this was due to a misconfigured WAN interface on the XG-7100 that prevented internet access (see Unable to ping to/from netgate XG-7100 WAN interface for details). The AWS VPC Wizard worked after fixing that.