Netgate SG-4860 Performance

Rico

Factory:

CE:

-Rico

johnpoz

Well that would be easier ;) heehehe

asan

It looks like I have CE:

johnpoz

Well in the big picture shouldn't be any sort of real issue - but pretty sure if you want you could put in a ticket with netgate to get a copy of the factory image.

I do not think you need to be the original purchaser of the hardware to be able to get the factory image.

asan

Aren't those images online?
What are the Netgate ADI Images for?

Please have a look at the video which shows my issue.
pfsense2.zip

Do you think that there is a change to solve the issue with installing the factory image?

johnpoz

I do not believe so - those ADI images are still just the CE versions from my understanding.. They are just serial vs vga

https://www.pfsense.org/download/
The Netgate ADI image only supports a serial installation from memstick and does not come with VGA option. If you purchased a Netgate product, refer to the product manual for your appliance to see which reinstall image you need.

From the product page for the 4860
https://docs.netgate.com/pfsense/en/latest/solutions/sg-4860/reinstall-pfsense.html

Reinstalling pfSense Software

Please open a support ticket to request access to the factory firmware by selecting Firmware Access as the General Problem and then select Netgate SG-4860 Desktop for the platform. Make sure to include the serial number in the ticket to expedite access.

Once the ticket is processed, the latest stable version of the firmware will be attached to the ticket, with a name such as:

pfSense-netgate-memstick-ADI-2.4.5-RELEASE-amd64.img.gz

If you go to download the ADI versions on the download site you get
pfSense-CE-memstick-ADI-2.4.5-RELEASE-amd64.img.gz

You do not need a support contract for such questions, from my experience.. The support from netgate has always been just over the top great.. You are free to open a ticket, worse case I would think is they would tell you to help you with X you would need a support contract - but even with that they prob point you in the right direction either way..

You prob get an answer to your ticket in a couple of minutes to be honest ;) I had opened a ticket to get a reinstall image for my 4860 on the off chance that something went horrible wrong, and I had a link to download the file in less than 2 minutes from the time I submitted to the time email with link showed up in my inbox.

asan

@johnpoz I see. Thank you very much for your help and support! I'll try a reimage with the factory image following by manual reconfiguration. I don't want to make a config restore. In my point of view there is a change that I would restore wrong settings if I do so.
It will take a few days to do that, but I'll give you feedback as soon as possible.

BTW: Did you see the video? What do you think about that?

johnpoz

From my understanding you can just reload your config.. But you might want to do a native configuration - just to see what is default and what is not..

But I would for sure have a backup of your config, just for reference if need be.. Depending on how complex your config is - you could prob just take some screenshots so you don't forget any rules ;)

Haven't take a look at the video as of yet - I will. Not normally a fan of videos, other than movies and such.. I prefer documents and screenshots vs having to wade through some video looking for the important pieces of the puzzle.

edit:
Yeah that is odd.. And your saying that goes away when you set powerd to max.

Let me see if I can get a copy going to my laptop... I would do it on my nas, But its the same vlan as my PC... That test will prob have to wait til later, currently laptop is connected to my work network via vpn you know for "work" hehehe

asan

No this issue doesn't go away. With the change to max or hiadaptive I have 90MByte througput, otherwise only 45MByte.

johnpoz

But you still have loss of pings even when your seeing 90.. I have never noticed such a thing.. But happy to do some testing once I can disconnect my laptop from work (after working hours).. I could fire up one of my play laptops - but lazy ;) hehehe

Maybe its an issue with your PC... do you see the same sort of issue when doing copies of files to something local on the same network, so your not routing through pfsense?

asan

Yes I still have loss of pings and very slow - no connection.

BTW: I already got the factory image from the support. What a service!!!
Because of a complex configuration, setup will take a few hours. I don't want to risk another "misconfiguration" with a restore.

johnpoz

Told you - they are fast and just over the top great!!

edit: I have been around here for long time, and talk to some of the guys on back channels.. And what I can tell you is they "care" about the product, and what they do.. And they know their suff as well! Top notch group of guys for sure.

asan

Yeah I guess so too. They are doing a great job and I really like pfSense as a firewall solution.