Working Specialist Platforms
-
You might want to re-title this thread 'Working Specialist Platforms' or something similar. Technically 'working hardware' is anything that's on the FreeBSD hardware list. You don't want anyone coming to this thread and thinking they have to use one of these platforms.
Steve
-
Good point - done.
GE
-
I was wondering in the sub categories add the LCD and LED fix? Or is that too much?
Since Steve did so much work on these I think it is worth mentioning and besides - They Work!! (thx) -
Stickied, good thread!
-
-
Updated first post.
-
I would suggest using Image Writer For Windows (win32diskimager) instead of physdiskwrite for those who like a GUI (in English):
https://launchpad.net/win32-image-writer/+download
It's easier to use, and hasn't failed me yet.
-
Thanks for that Jim.
I'll give that a try. I have to admit my German is a bit meh. ::)Steve
-
First post updated.
-
I've run 1.2.3 nano on the Acrosser AR-B1554. Basically write the card and go.
-
Hmm,
I just tried to use Win32 Disk Imager but used Physdiskwrite instead.
Two reasons:
Disk Imager doesn't give any information on the drive I'm selecting so I have to check manually to make sure I don't write over something.
Disk Imager won't open Gzipped image files directly so that's an extra step for me.
Am I missing something?Steve
-
Guess that's not a big deal for me since I know the drive letter of my removable media, and I never trust writing the images from physdiskwrite gzipped anyhow… :-)
-
Nortel Networks
Contivity 1010 - Need to set Use device polling and manually set the MAC addresss on the 2nd interface
-
Woah, rad to see socalfreenet still kickin'! Haven't checked out the project in…. Probably 5-6 years, if not longer.
Great tutorials. I'm starting to think that it's time to be doing some major work in the pfSense wiki department.
garethevans1986 - Check out using MultiMarkdown (http://fletcherpenney.net/multimarkdown/features/) to put some of your articles in. It'll render out to both HTML and LaTeX quite nicely, and then you'll be able to have some nice looking handouts while searching for more nodes for the net, and maintain le bloggery.
-
Is there any plan to port pfsense 2.0 to PowerPC, mainly to take advantage of the new Mikrotik Roterboard 1000 series routers.
D.
-
Nope.
-
I installed it successfully on a Checkpoint UTM 130 via USB stick, I used the memstick-serial 2.2 release. No special instructions needed - worked as expected.
-
They're literally hundreds of them around and at $30 a pop make great 5 port firewalls, if only they ran pfSense. MShould run as they are 800MHz x86 IIRC, but maybe better for m0nowall due to storage capacity.
-
Checkpoint UTM 270 U10 - pfSense Ver 2.2 Full & Standard Kernel - Sata HD - install to HD on another system using (I used Dell GX-620 with HP nc360t) 'press I to launch the installer'. Boot HD in the unit. WAN (Int) and LAN (Ext) are reversed.
Checkpoint UTM 570 U20 - pfSense Ver 2.2 Full & Standard Kernel - IDE HD - Unable to get Sata to boot without errors. Install to HD on another system using 'press I to launch the installer'. Boot HD in the unit. WAN (Int) and LAN (Ext) are reversed.
On both units you can remove the motherboard from the case ( Metal case blocks PCI card slot ), install a VGA card in the PCI slot, USB kbyd and USB CDROM to install pfSence.
-
Hi guys,
pfSense seems to like my McAfee Enterprise Firewall S1104 (Full 2.2.2 x64 serial).No specific instructions are necessary, since it is basically a custom miniITX motherboard with Atom D410, 2 gigs of RAM and 4 Intel NICs, so just whack the USB stick in, select it in the BIOS boot menu and that's all.
The device has both VGA and serial port (RJ-45 Cisco-style) on the front panel so you can use either image variant. I've installed pfSense using the serial console and it worked just fine. The BIOS has a console redirection capability, which defaults to 9600 bps, so I'd recommend to change it to 115200 bps to match the BSD kernel setting.
Overall, the device works very well. NICs are labeled only by numbers 0 - 3 and use identical chips, so they can be assigned freely.
My device runs router/firewall, pfblockng, suricata, dhcp, ntp and a an IKEv2 VPN (rarely used, it's a backup in case our main VPN server goes down) and it can do around 100 Mbit/s throughput. More performance testing is yet to be done, but the CPU was definitely sweating.
It has a 500 gig SATA HDD so it can do proxy/caching, but I wouldn't have too high expectations here, since the Atom D410 isn't exactly a power house and without HW AES, it's almost useless for heavy SSL work like HTTPS decryption and filtering.But apart from that, it's pretty decent router/firewall with IPS, especially when you can get one cheap. I paid 2000 CZK (about $83) for an unused unit.
Regads,
Tomas//Update: The BSD driver for the Intel 82574L NICs supports the TCP Segmentation Offloading. After enabling the feature in pfSense and rebooting, there was an obvious drop in CPU load when heavy traffic was passing through. I'll get some numbers soon, but just from my current observations, enabling TSO on this hardware may be useful.