I didn't look into eMMC inside my SG-3100. I'm not sure if it has level wearing or not. But in general, if I only use less than 20% space and streams the log file to other place, I bet it can last for very long. Let's do an experiment. We will see who will last longer 5 years from now.

Yes, you can assign only one not-tagged vlan on switch port. I suggest you need one non-tagged - default vlan, and all other vlans can be only tagged on same interface.

You were not able to recover the config during the install? It must have been a significantly damaged file system if so. Steve

I concur it's a Safari thing, if you click on the tile you don't "Read Now" message. It works fine in Firefox. [image: 1565771280517-screenshot-2019-08-14-at-09.27.43.png]

@RobC said in SG-3100 - normal running temperatures?: Another vendor put in a store music system and slid their amplifier in under our SG-3100. Effectively putting us on a hot plate. That's just wonderful.

No harm since you repaired the file system. These little Netgate appliances are still PCs at heart, so you have to shutdown them down gracefully even though they do sort of resemble a network switch. They are actively writing to the disk even if it is solid-state, unlike say a typical firmware-based switch which just reads from a ROM of some type.

Backup the config file from Diagnostics > Backup/Restore. Restore it back into the firewall once it's booting from m.2. It is also possible to install the config automatically from the USB installer: https://docs.netgate.com/pfsense/en/latest/backup/automatically-restore-during-install.html Which of those you'd use depends on what you're installing into. Steve

many thanks for the information

random != urandom random device will only return random bytes within the estimated number of bits of noise in the entropy pool. when the entropy pool is empty, reads from /dev/random will block until additional environmental noise is gathered urandom device will not block waiting for more entropy. When you need random data fast, you should use /dev/urandom For cryptographic purposes you should use /dev/random kiokoman@nanto:~$ dd if=/dev/random of=/tmp/speedtest bs=1024 count=100000 dd: warning: partial read (115 bytes); suggest iflag=fullblock 0+100000 record in 0+100000 record out 8194031 bytes (8,2 MB, 7,8 MiB) copied, 8,15628 s, 1,0 MB/s kiokoman@nanto:~$ dd if=/dev/urandom of=/tmp/speedtest bs=1024 count=100000 100000+0 record in 100000+0 record out 102400000 bytes (102 MB, 98 MiB) copied, 1,88982 s, 54,2 MB/s

Ah, good to hear.

Connect LAN-to-LAN on the 7100s (Like ETH3 - ETH3) Connect a workstation to another LAN port on either of the firewalls (ETH4 to ETH8). Does your problem go away? If so, it's the Dell switch.

Yes that's expected unfortunately. The interface to query the switch port status is relatively slow, if you have that widget on the dashboard it will introduce a delay. Steve

Were you able to resolve this? What exact install image are you using? Steve

Thank you!

@Derelict said in XG-7100 efficiency low?: That is why one should not rely on external test sites when testing device performance. You don't say ;) heheheeh

I've posted fragments of it before, though my previous example didn't have the devices mapped statically. There are some other tricky bits to the setup, mostly finding ways in the available USB device info dump to uniquely identify each device. Depending on the chips involved it might not be possible, too, since sometimes the USB/Serial chips don't get a unique serial number/ID, so if you have multiple overlapping devices it may be a crap shoot.

Ah OK. That is not easily achievable. You want to add the SFP ports for redundancy? To get a 10G connection? You can create a lagg of both SFP ports and connect them to the external switch, that would be a preferable setup. Steve

@Grunt0307 said in Poor SG-5100 Performance?: No, I don't see any crash reports when it comes back online in the GUI, is there some place I can look to see them? If crash reports are present you will see an alert on the dashboard reporting that. They are stored in /var/crash though. Steve

No. You do not need paid support for hardware issues. But the first thing you need to do is get a serial console connected and see what is being displayed there. https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/connect-to-console.html That will be the first thing we'll ask you to do there. Paste the output here or in the ticket you create at https://go.netgate.com/