Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What Software for SG-3100

    Scheduled Pinned Locked Moved
    General pfSense Questions
    5
    10
    216
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      toto850
      last edited by

      Could someone advise if I am allowed to run pfSense CE software
      (Ver 2.7.2 )on Netgate SG-3100, this is due to the fact I need to test a few configuration before implementing the same config file to Production.

      If the answer is yes is it a simple case of installing 2.7.2 using the USB Interface?

      At the same time I would like to know could I be able to revert back to pfSense Plus software (Ver 24.03) by downloading and loading it by way of USB Interface again.

      Regards
      T

      M 1 Reply Last reply Reply Quote 0
      • M
        mcury @toto850
        last edited by mcury

        @toto850 Unfortunately you can't, SG-3100 is ARM and there isn't a CE edition for ARM devices, at least yet.
        I would do it in a lab environment, have you tried GNS3 ?

        T 1 Reply Last reply Reply Quote 1
        • T
          toto850 @mcury
          last edited by

          @mcury many thanks for quick response, it is more than network topology I need to test or check where the production firewall is based on CE software so I need to simulate that system in sg-3100 then once it is proven it works I was planning to apply it in the Production system.

          M 1 Reply Last reply Reply Quote 0
          • M
            mcury @toto850
            last edited by

            @toto850 It's currently not possible to run CE on ARM devices such as the SG-3100.
            I have a GNS3 lab environment here that I'm using to test things before deploying , you can do almost anything with it, didn't find yet an use case that GNS3 can't emulate for pfSense.

            Also, SG-3100 has a builtin switch that as far as I know, the CE version of pfSense doesn't support, so there is that also.

            At the same time I would like to know could I be able to revert back to pfSense Plus software (Ver 24.03) by downloading and loading it by way of USB Interface again.

            If you need to reinstall, just open a ticket with Netgate and request the firmware, its free.
            https://www.netgate.com/tac-support-request

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              If the prod firewall is running CE it's not a 3100, or any other device with a switch, so it would be better to test on some other x86 machine. Even if that's a VM.

              T 1 Reply Last reply Reply Quote 0
              • T
                toto850 @stephenw10
                last edited by

                @stephenw10 it looks like I take your proposal, as the Production system is seating within VmWare at present I would do just that.

                My only query at start was as I have sg-3100 round seating on my desk not been used, I thought I can do that.

                Once again, everyone thank you so much for your advise and guide.

                Regards

                T

                S 1 Reply Last reply Reply Quote 2
                • S
                  SteveITS Rebel Alliance @toto850
                  last edited by

                  @toto850 You can restore from the same or older config file version to newer:
                  https://docs.netgate.com/pfsense/en/latest/backup/restore-different-version.html

                  So in theory you could restore from 24.03 to CE 2.7.2 or later.

                  The 3100 can run 24.03 but is missing a few packages. Or you can run 23.09.

                  I don't think Netgate has said whether 24.08 will run on a 3100 but I would not expect it to.

                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                  Upvote 👍 helpful posts!

                  1 Reply Last reply Reply Quote 1
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    It does currently but there are some additional limitations. It won't support the MIM stuff for example.

                    [24.08-DEVELOPMENT][admin@fw1.stevew.lan]/root: uname -a
FreeBSD fw1.stevew.lan 15.0-CURRENT FreeBSD 15.0-CURRENT #0 plus-devel-main-n256392-adc64f2776e: Thu Sep 26 20:04:12 UTC 2024     root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/obj/armv7/RY73AP1f/var/jenkins/workspace/pfSense-Plus-snapshots-master-main/sources/FreeBSD-src-plus-devel-main/arm.armv7/sys/pfSense-3100 arm

                    At some point it will become very difficult or impossible to maintain the 32bit arm tree for just that device.

                    M 1 Reply Last reply Reply Quote 1
                    • M
                      michmoor LAYER 8 Rebel Alliance @stephenw10
                      last edited by

                      @stephenw10 Will the SG1100 support MIM ?

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      stephenw10S 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator @michmoor
                        last edited by

                        @michmoor said in What Software for SG-3100:

                        Will the SG1100 support MIM ?

                        Yes. And the 2100. It builds for aarch64 just not armv7.

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post