Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Building my first PFSense machine ( Yeah Baby ! )

    Scheduled Pinned Locked Moved Hardware
    13 Posts 6 Posters 5.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Several things:
      Welcome to pfSense!  :)
      You haven't told us what you are going to be doing with this box so it's impossible to judge the hardware. What throughput do you need, are you using VPNs or additional packages (squid snort etc)?
      That list will produce a powerful machine though so it'll probably handle anything you need.
      That motherboard appears to have on-board graphics so there is no need for a discrete card.
      That network card is 32 bit PCI which may restrict your throughput if you are looking for close to 1Gbps. Also it's Realtek based which is not necessarily a problem but generally Intel NICs are preferred.

      pfSense 2.0 is built on FreeBSD 8.1 so check the hardware list for that.

      Steve

      Edit: I've just seen that the onboard NIC is a Realtek RTL8111E. If you search the forums for that NIC you'll see that there are a number of hardware revisions for it and only some of them are supported by the driver that ships with pfSense 2.0.

      1 Reply Last reply Reply Quote 0
      • F
        FlyingPig
        last edited by

        @stephenw10:

        Several things:
        Welcome to pfSense!  :)

        Thank for your warm welcome and fast response :) Actually just discovered about this system, can't wait to get my fingers on it. I am originally a Microsoft guy ( Yes.. I Know ;) )
        About time for me to look at other options I guess :P

        @stephenw10:

        You haven't told us what you are going to be doing with this box so it's impossible to judge the hardware. What throughput do you need, are you using VPNs or additional packages (squid snort etc)?

        Basically the machine will need to connect to different media ( 3G Router, DSL, and satellite) and will need to provide automated link switching, fire-walling, link aggregation between ADSL's and client bandwidth management and monitoring.) This is part of a project I am putting together for my new business. I would love to use it as a central node for our WiFi client network also over a public domain. So plenty of different applications. But for the moment this is a test machine.

        @stephenw10:

        That list will produce a powerful machine though so it'll probably handle anything you need.

        lol, I tried to find the lowest spec machine actually :)

        @stephenw10:

        That motherboard appears to have on-board graphics so there is no need for a discrete card.

        Possible, I am not sure, but if she has one, I will go for it yes.

        @stephenw10:

        That network card is 32 bit PCI which may restrict your throughput if you are looking for close to 1Gbps. Also it's Realtek based which is not necessarily a problem but generally Intel NICs are preferred.

        OK. This machine will mainly be a gateway for internet access, so I think that the odds of reaching Gbps are low ;)

        @stephenw10:

        pfSense 2.0 is built on FreeBSD 8.1 so check the hardware list for that.

        Steve

        Ok, I thought it was on a 7.2, my bad, I will look in to that.

        @stephenw10:

        Edit: I've just seen that the onboard NIC is a Realtek RTL8111E. If you search the forums for that NIC you'll see that there are a number of hardware revisions for it and only some of them are supported by the driver that ships with pfSense 2.0.

        OK, So basically I can go for virtually any Intel based NIC ?

        FlyPig

        Edit:  I will actually run into a problem very fast : I will probably need at term to have something like 5 or 7 or 10 ADSL's  attached to the Pf Sense box. The problem is that there is no way I can have that many physical NIC's on the machine. Is there a way to create virtual Nic ?s ? and connect them all to a switch that will access the routers ?

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Ha, I'm used to dealing with dusty old P3s and passively cooled Atoms so this looks quite fast to me.  ::)

          Almost everyone started as a Microsoft guy! (though I guess there are increasing numbers of Mac guys)

          I've never used link aggregation but I know pfSense can do it: http://doc.pfsense.org/index.php/LAGG_Interfaces

          If you need a lot of interfaces just use a VLAN capable switch and virtual interfaces as you suggest:
          http://doc.pfsense.org/index.php/Multi-WAN_using_VLANs_with_pfSense
          That page is a bit old now but it mostly still applies.

          Intel NICs are, generally speaking, better supported by FreeBSD than others. Though there are exceptions. Because the pfSense 2.0 is built on FreeBSD 8.1 it has drivers from around May 2010, when the code was branched. Newer cards may, therefore, not be supported. It's best to search the forums and check. pfSense 2.1 will be built on FreeBSD 9, the first pre-alpha builds may be available soon.

          1 Reply Last reply Reply Quote 0
          • F
            FlyingPig
            last edited by

            Ok, I will try to get this machine working and have a look for the Intel NIC 's then. That is a soon I have figured a way to get it running. ( I have just won the award of the supidest question on this forum I think there : http://forum.pfsense.org/index.php/topic,43540.0.html ) ;)
            thanks for you help, I will keep you posted as soon I get working on the Link aggregation. ( VLan's seem to be the answer yes :) )

            Thank you for your Help,

            FlyPig.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Actually I believe (though I've not tried this either) you need to use ML-PPP to aggregate several DSL lines and this seems to be a bit dependent on your ISP.
              http://doc.pfsense.org/index.php/Multi-Link_PPP_%28MP/MLPPP%29

              Oh and it's web based in case you haven't realised yet!  ;)

              Steve

              1 Reply Last reply Reply Quote 0
              • D
                dreamslacker
                last edited by

                @FlyingPig:

                Hello,
                We are currently having a look at a PFSense solution for a few customers, and I would like to have some advice in building cheap Box.

                I am currently looking at some HW components, but would love to have the community opinion on this hardware setup before purchasing it.
                Since I am kind of a noob on PFSense please feel free to give my any advice that you would think relevant ;)

                HW List :
                CPU: AMD Athlon II X2 3Ghz
                MB: Gigabyte a75-UD4H FM1 DD
                Video: ATI Sapphire HD5450
                RAM: 8GB DD3 1333 Kingston
                Hd: 160GB IDE Caviar
                Ethernet: Conceptronic  C1G32I (ver 6.0)

                Since I am in Europe, I have found it hard to find matching equipment’s on the FreeBSD 7.2 comp list. Maybe some users could also give me some tips on this issue 

                Thank you all in advance for your Help  ;D

                FlyPig.

                Some things to take note of:

                Your choice of motherboard is NOT compatible with the CPU you chose.  That is a FM1 board which needs an AMD Fusion chip (CPU contains a Radeon HD GPU).

                You should look for an Nvidia 7025/ 7050/ 6150SE board if you want something cheap.  Other good choices are boards with AMD's 740/780/785/880 chipsets.  These will accept the Athlon II/ Phenom II processors like the one you opt for.  Also, they have integrated graphics so you do not need an additional graphics card.

                The add-on NIC you chose uses a Realtek 8169 chip.  If you want something stable, which you should since you're going to be maintaining these for your clients, get an Intel based network card instead.

                As for the HDD, SATA is probably a much better option than IDE these days.  Particularly on modern platforms.  More and more motherboard makers are ditching the IDE interface on motherboards.

                1 Reply Last reply Reply Quote 0
                • W
                  wallabybob
                  last edited by

                  @dreamslacker:

                  As for the HDD, SATA is probably a much better option than IDE these days.  Particularly on modern platforms.  More and more motherboard makers are ditching the IDE interface on motherboards.

                  Where I live it is increasingly more difficult to find IDE drives in local retail shops. Before the recent floods in Thailand SATA drives were considerably cheaper than IDE drives. I haven't looked at prices lately.

                  Motherboards that were available at least six months before the base version of FreeBSD was released (8.1 in Feb 2010?) are much less likely to give you trouble than newly released motherboards.

                  Some people have reported problems with newer PCIExpress Intel NICs.

                  @stephenw10:

                  Almost everyone started as a Microsoft guy! (though I guess there are increasing numbers of Mac guys)

                  Guess I must be an old fella now. I started on DECsystem10s, then PDP-11s (RT-11 and RSX-11M) then VAXes (VAX/VMS then OpenVMS), Alphas (OpenVMS and Ultrix/FreeBSD) and x86 (FreeBSD and Linux).

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    @wallabybob:

                    Guess I must be an old fella now. I started on DECsystem10s, then PDP-11s (RT-11 and RSX-11M) then VAXes (VAX/VMS then OpenVMS), Alphas (OpenVMS and Ultrix/FreeBSD) and x86 (FreeBSD and Linux).

                    OT: I thought that i know something concerning IT and when i readed your list i familiarized last four words :(

                    1 Reply Last reply Reply Quote 0
                    • F
                      FlyingPig
                      last edited by

                      WoW,

                      Thank you guys for overwhelming responses. Will need to digest this one and get back to you.
                      Digging in the old stock of crap we have in the backyard, I unearthed an old 1U server ( HP Prolient DL360)  So I am going to try wipe it ( Win SBS2003 on it.. Lol) And no doubts the Pf sense will run on this one.. Well I hope.

                      I will let you know as some I get the noise out of my head..
                      ( Hate it when my imaginary friends argues with the little voices…)

                      1 Reply Last reply Reply Quote 0
                      • F
                        FlyingPig
                        last edited by

                        YESSS !!!

                        Up and running really cool with the old Proliant340. Actually using it on the company network, and looks pretty cool. Now have to figure out a few extra things.

                        Thank you all for your very ( I mean VERY ) valuable help :)

                        FlyPig.

                        1 Reply Last reply Reply Quote 0
                        • J
                          joako
                          last edited by

                          That's a good selection I think. In my company we still have DL360 G3 running in production. Only issue noted thus far is the hard drives seem more likely to fail after 60,000 hours or so.

                          1 Reply Last reply Reply Quote 0
                          • F
                            FlyingPig
                            last edited by

                            Yup, Typical HP ^^
                            For my part, In IBM we trust. SO production will probably go on an IBM ( If I have my way that is ^^ )

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.