@DomiX : to minimize troubles in many way, protect the livebox (VDSL router) with the same UPS as you use with your SG.

NMI ISA 60, EISA 0 I/O channel check, likely hardware failure. panic: NMI indicates hardware failure cpuid = 4 KDB: enter: panic The errors indicate a hardware failure, but there isn't enough detail to say for sure what component since it's not a full MCE log, just an NMI. You might be able to go into the BIOS and get more detail from there.

Open a ticket with us at https://go.netgate.com. We'll get that taken care of for you. Steve

The files on that old ADI github are for RCC-VE (SG-2440/4860/8860). The XG-7100 uses ADI_PLCC. ADI_PLCC-01.00.00.11 is the current version, from April 2019. Steve

Thanks for the help folks! I'm up and running on the m.2 now, it didn't like my Kingston USB3 stick so I switched it out and it's good now.

@stephenw10 SG-3100 arrived today. Same LAN-WAN testing results below. LAN box on 192.168.1.100, WAN box on 10.10.10.10. 100% vanilla install fresh out of box. Thanks for all your help. [image: 1572627885318-sg-3100-wan-lan-share.png]

@NogBadTheBad Thanks for the link. I have already done that. The power is still too bright. The problem might be the cheap plastic case, as the light just leaks and flows out in all directions. If the case was make of good solid material at least the light would not leak and then a simple masking tape on the top would have done the trick.

Hmm, I doubt booting from a USB card reader has ever been tested. While I might expect that to work it doesn't entirely surprise me to find it doesn't. Coreboot is not as flexible as some BIOSes. As far as I know booting from a USB memory stick in the USB3 slot works fine. Steve

It's impossible for us to recommend you open the power supply. I could only suggest you get a replacement identical PSU if you need to replace a worn fan there and it's out of warranty. That appears to be this: https://store.supermicro.com/200w-1u-pws-203-1h.html Confirm that physically before ordering though since I don't have access to check directly. Steve

It would eventually though I've never seen it get hot enough to happen. I think there's a setting in the BIOS for that. No reason the change it though.

Separating LAN from wifi clients is generally good practice but it can cause problems for some services that reply on a single layer 2 to 'see' each other. As with most things security is convenience is a trade off. Steve

Generally; AES-NI only for Crypto and Intel Core for thermal. Steve

After step 1, did you saw the serial port "COM" as mentioned in the doc ? Did it mention a port number like port COM3 inn the example ? And the Open PuTTY and locate the Session display as shown below. F .... part isn't worth to mention ? What did you do ? Any images / screenshots to share ? Where is what you're experimenting different as what has been written down ?

Don't be worried about being "rude" -- not to me at least... You can call me an idiot if you want, etc. Unlike many people on the internet who identify as 13 year old girls on their first period ;) My skin is a bit thicker than that.. I would be more than happy to exchange F bombs if you so wished, etc.. I spent 16 years in the Navy (6 active, 10 reserve)... I don't think it would be possible for me to take something as "rude" now you might piss me off... But take offense - prob not, think your a "____" sure ok... But still be happy to help you understand/fix a technical issue.. So please also understand if I might sound blunt, or even rude - I am not meaning to be.. I am blunt/direct sort, I don't really like to play nicey nicey worried about if calling you an idiot will hurt your feelings ;) What I am trying to get you to do is understand what your doing is not correct - if you know what I mean. Now I do try and play nice, mostly because of the whole mod thing - might not look right going around calling users dip shits, etc. But if I did - it wouldn't be personal, the world is full of dip shits ;) But thanks - and rest assured I was in no way offended or think what you stated was rude.. Play around with doing rules.. And you find unless you have a really good reason, its just simpler to keep them on the interface where they are being applied so you can see them when your creating other new rules for that interface, etc.

Open a ticket with us. https://go.netgate.com You may need pfSense though (or maybe FreeBSD) to get the correct flashrom version. Steve

When you change the RAM in the XG-7100 it will retrain at the next boot and it can take a while to do that. Much longer than you might expect. During that time it appears to be not booting. Just wait at least 10mins to be sure. Steve

A Machine Check Exception (MCE) can only be a hardware issue. Open an issue at https://go.netgate.com and the support team can help you out.

Thank you Kiokoman!

Great that you got yours to working. I had my laptop direct connected to both the LAN and to the console with Putty. I could always get access via the console but no matter what I did, the web interface would freeze about about 50% of the time even though no changes were made. Also tried using a different (Win7) laptop and got the same results. Then what I suspect were some anomalies created by heat. This box is measuring 117°F which spec states 113°F is max for this CPU so something is not right and really flaky. I have the SG-1100 but I got a bad unit. Never got any responses to the symptom's I reported to tech support except for a link to download the firmware which did not solve the problems. So yeah, I'm sorta sour grapes on Netgate right now for the way they handled this.

I run vlans on all of my sg3100, ie 802.1q mode is enabled.. Have seen no issues. When you sniff and pfsense does not see a packet - that is not on pfsense.. Seems your switch is not tagging stuff correctly maybe?