Don't be worried about being "rude" -- not to me at least... You can call me an idiot if you want, etc. Unlike many people on the internet who identify as 13 year old girls on their first period ;) My skin is a bit thicker than that.. I would be more than happy to exchange F bombs if you so wished, etc.. I spent 16 years in the Navy (6 active, 10 reserve)... I don't think it would be possible for me to take something as "rude" now you might piss me off... But take offense - prob not, think your a "____" sure ok... But still be happy to help you understand/fix a technical issue.. So please also understand if I might sound blunt, or even rude - I am not meaning to be.. I am blunt/direct sort, I don't really like to play nicey nicey worried about if calling you an idiot will hurt your feelings ;) What I am trying to get you to do is understand what your doing is not correct - if you know what I mean. Now I do try and play nice, mostly because of the whole mod thing - might not look right going around calling users dip shits, etc. But if I did - it wouldn't be personal, the world is full of dip shits ;) But thanks - and rest assured I was in no way offended or think what you stated was rude.. Play around with doing rules.. And you find unless you have a really good reason, its just simpler to keep them on the interface where they are being applied so you can see them when your creating other new rules for that interface, etc.

Open a ticket with us. https://go.netgate.com You may need pfSense though (or maybe FreeBSD) to get the correct flashrom version. Steve

When you change the RAM in the XG-7100 it will retrain at the next boot and it can take a while to do that. Much longer than you might expect. During that time it appears to be not booting. Just wait at least 10mins to be sure. Steve

A Machine Check Exception (MCE) can only be a hardware issue. Open an issue at https://go.netgate.com and the support team can help you out.

Thank you Kiokoman!

Great that you got yours to working. I had my laptop direct connected to both the LAN and to the console with Putty. I could always get access via the console but no matter what I did, the web interface would freeze about about 50% of the time even though no changes were made. Also tried using a different (Win7) laptop and got the same results. Then what I suspect were some anomalies created by heat. This box is measuring 117°F which spec states 113°F is max for this CPU so something is not right and really flaky. I have the SG-1100 but I got a bad unit. Never got any responses to the symptom's I reported to tech support except for a link to download the firmware which did not solve the problems. So yeah, I'm sorta sour grapes on Netgate right now for the way they handled this.

I run vlans on all of my sg3100, ie 802.1q mode is enabled.. Have seen no issues. When you sniff and pfsense does not see a packet - that is not on pfsense.. Seems your switch is not tagging stuff correctly maybe?

@Rico Sounds like no order from normal customers. I just ordered a mini pc: Half price, 3 times faster and no need to have a business. I'm still a bit sorry because I really wanted the sg1100. But thanks to you guys anyway.

Well then comes down to what vpn performance you need and what your internet speed is.. The sg1100 is not going to be able to handle as much openvpn traffic as say the 3100 or 5100... If I recall what I have seen about 80-100mbps is about the best you can expect over openvpn... You could do ipsec vs openvpn, but not sure what the performance on that is.

Hi Rico, Thanks for your reply. I contacted Netgate Sales regarding it. I also edited this post as I posted incorrect model number. Kind regards, Michał

@chrismacmahon done !

@stephenw10 Thank you for taking a look! After further investigation, this was due to a misconfigured WAN interface on the XG-7100 that prevented internet access (see Unable to ping to/from netgate XG-7100 WAN interface for details). The AWS VPC Wizard worked after fixing that.

@MMTadmin Yes, but read here and watch the video: https://forum.netgate.com/topic/132433/sg-3100-ha-or-not https://www.youtube.com/watch?v=1JVhX3fqeoM Jeff

Yes, if you want an additional lagg group of switch ports from the internal switch to some external device (that also support load-balance lagg). Steve

Indeed, I've never tried it and only recently became aware you could connect directly like that. I could see how it might be possible though. Steve

You probably don't need it, but maybe for anybody finding this post in the future, here's the M.2 SATA installation instructions. https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/m-2-sata-installation.html Jeff

Meaning like the serial console or possibly an interface without the captive portal on it. It is unknown whether your issue has anything to do with the captive portal at this point.

Replaced the Chelsio T520 card and it's now stable. Was too busy to and time constrained during the shutdown window to try the old card, measure the temperature etc, but, the old card is certainly faulty. The heatsink seems well attached, etc. Anyway, the replacement card solved the problem, the C2758 is now stable. Thanks everyone for your helpful posts.

See also / keep in mind Home > Netgate Announcements > SG-1100 Intermittent Reboots.