Well then comes down to what vpn performance you need and what your internet speed is.. The sg1100 is not going to be able to handle as much openvpn traffic as say the 3100 or 5100... If I recall what I have seen about 80-100mbps is about the best you can expect over openvpn... You could do ipsec vs openvpn, but not sure what the performance on that is.

Hi Rico, Thanks for your reply. I contacted Netgate Sales regarding it. I also edited this post as I posted incorrect model number. Kind regards, Michał

@chrismacmahon done !

@stephenw10 Thank you for taking a look! After further investigation, this was due to a misconfigured WAN interface on the XG-7100 that prevented internet access (see Unable to ping to/from netgate XG-7100 WAN interface for details). The AWS VPC Wizard worked after fixing that.

@MMTadmin Yes, but read here and watch the video: https://forum.netgate.com/topic/132433/sg-3100-ha-or-not https://www.youtube.com/watch?v=1JVhX3fqeoM Jeff

Yes, if you want an additional lagg group of switch ports from the internal switch to some external device (that also support load-balance lagg). Steve

Indeed, I've never tried it and only recently became aware you could connect directly like that. I could see how it might be possible though. Steve

You probably don't need it, but maybe for anybody finding this post in the future, here's the M.2 SATA installation instructions. https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/m-2-sata-installation.html Jeff

Meaning like the serial console or possibly an interface without the captive portal on it. It is unknown whether your issue has anything to do with the captive portal at this point.

Replaced the Chelsio T520 card and it's now stable. Was too busy to and time constrained during the shutdown window to try the old card, measure the temperature etc, but, the old card is certainly faulty. The heatsink seems well attached, etc. Anyway, the replacement card solved the problem, the C2758 is now stable. Thanks everyone for your helpful posts.

See also / keep in mind Home > Netgate Announcements > SG-1100 Intermittent Reboots.

The actual panic error you're seeing there shows it's a filesystem error. You can probably recover form that using fsck from single user mode if you have not flashed it yet: At the SG-1100 console press any key to interrupt the boot loader when you see: Hit [Enter] to boot immediately, or any other key for command prompt. At the 'loader>' prompt enter: boot -s That will boot in single user mode to a question asking for a path to the shell, just press return to reach the # prompt. At the # prompt run the following command: fsck -y / Run the fsck command at least 3 times; Repeat the command until no errors are reported, even if fsck claims the filesystem has been marked "clean". Reboot by running: reboot Steve

If you are seeing that exact error where it shows it can see the attached USB stick: scanning usb for storage devices... 1 Storage Device(s) found But cannot boot from it's either the wrong image or the image is not correctly on the USB stick. Check the file checksum of the image to make sure it dowloaded correctly (and is the correct image). I recommend using Etcher to write the image to USB. It can write out the image from the compressed file directly which eliminates any issues extracting it. Steve

@stephenw10 OK many thanks.

Thank you for the helpful insight. I will look into replacing the hardware with a more current model. Thanks again.

@Derelict Problem Solved! Thanks. Your suggestion of reviewing the logs put me right on it. I was typing FQDNs (rather than hard-coded IP addresses) in the IPSEC P1 RemoteGateway option, which works great when you don't fat-finger the name--couldn't resolve my typo. BTW--This product (pfSense) is incredible... the log pages are awesome... and I am back on track. Thank you. There's a lesson here... I jumped on the default WAN LAN interfaces because that is what I changed... but it was basic troubleshooting that prevailed (we geeks make problems as complicated as we can).

The SG-3100 is available with or without an m.2 SSD from the factory, or you may have fitted one afterwards. The / slice will be ~8GB if it's running from eMMC. Steve

Hmm, not exactly sure what you're asking here. You need to trunk all of those VLANs between WAN and OPT1? And you need to filter between them or just pass them between the ports? By VLAN1 do you mean untagged leaving the switches? Steve

Open a ticket with the Netgate support: https://go.netgate.com/support/login -Rico