Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgrade to 21.02-RELEASE borked on SG-3100

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    81 Posts 28 Posters 27.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JGdgZPQatDDjpA @JGdgZPQatDDjpA
      last edited by

      @jgdgzpqatddjpa

      Just upgraded my 3100. No issues so far.

      S 1 Reply Last reply Reply Quote 0
      • S
        shadtheman @JGdgZPQatDDjpA
        last edited by

        Upgraded to 21.02.1 yesterday, ran 14 hours then hard lockup. Anyone else seen this?

        L 1 Reply Last reply Reply Quote 0
        • L
          lnguyen @shadtheman
          last edited by lnguyen

          @shadtheman Yes. One of my remote locations had a lockup after 12+ hours today around 1:15PM PST. Unfortunately no smart hands to get any useful information from console.

          1 Reply Last reply Reply Quote 0
          • S
            sabennett @DeltaOne
            last edited by

            @deltaone Same here. No issues, running smooth. I’ve also added a 2 WG clients.
            I plan on adding pfBlocker-ng tomorrow.
            And let that settle in for a couple days.

            The Netgate support staff have been nothing less then awesome to me, and for that I Thank-you.

            M 1 Reply Last reply Reply Quote 0
            • M
              mcury @sabennett
              last edited by

              @sabennett said in Upgrade to 21.02-RELEASE borked on SG-3100:

              I plan on adding pfBlocker-ng tomorrow.

              Don't install pfBlockerNG just yet.

              https://redmine.pfsense.org/issues/5413
              https://redmine.pfsense.org/issues/11444

              dead on arrival, nowhere to be found.

              N lohphatL S 3 Replies Last reply Reply Quote 1
              • N
                nonvtec @mcury
                last edited by

                @mcury Thanks for all the intel, I'm holding out for a while longer.

                1 Reply Last reply Reply Quote 0
                • lohphatL
                  lohphat @mcury
                  last edited by lohphat

                  @mcury said in Upgrade to 21.02-RELEASE borked on SG-3100:

                  @sabennett said in Upgrade to 21.02-RELEASE borked on SG-3100:

                  I plan on adding pfBlocker-ng tomorrow.

                  Don't install pfBlockerNG just yet.

                  https://redmine.pfsense.org/issues/5413
                  https://redmine.pfsense.org/issues/11444

                  11444 is fixed.
                  5413 has to do with the unbound DNS resolver having issues and has been an open bug for 5+ years.

                  The new problem is php seems to be crashing -- that fix still hasn't been documented in a bug here or over at FreeBSD AFAIK. This new php bug is causing problems with snort, suricata, and pfBlockerNG and is not related to 5413 I believe.

                  SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_5)

                  M 2 Replies Last reply Reply Quote 0
                  • M
                    mcury @lohphat
                    last edited by

                    @lohphat

                    1121179c-3a62-4adf-8ee7-3c7e081cb95b-image.png

                    They will fix 5413 first...

                    dead on arrival, nowhere to be found.

                    1 Reply Last reply Reply Quote 0
                    • S
                      sabennett @mcury
                      last edited by

                      @mcury Ok thanks for the heads up and the links.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mcury @lohphat
                        last edited by mcury

                        @lohphat said in Upgrade to 21.02-RELEASE borked on SG-3100:

                        The new problem is php seems to be crashing -- that fix still hasn't been documented in a bug here or over at FreeBSD AFAIK. This new php bug is causing problems with snort, suricata, and pfBlockerNG and is not related to 5413 I believe.

                        I opened a TAC for the pfblockerNG problem and that was their answer..

                        "The package dev knows about this already, and there's some work to be done beforehand as well. Mainly, the following is somewhat of a per-requisite:
                        https://redmine.pfsense.org/issues/5413"

                        Ticket was marked as resolved yesterday..

                        dead on arrival, nowhere to be found.

                        lohphatL 1 Reply Last reply Reply Quote 0
                        • lohphatL
                          lohphat @mcury
                          last edited by lohphat

                          @mcury Your ticket may be resolved as is usual because the cause of your support ticket is known, but the defect itself -- tracked separately -- is still open. There's no indication they're close to fixing 5413 yet and I haven't seen the new bug tracking for the php crashes yet over on the FreeBSD tracking site.

                          Each "scope" have their own tracking systems. 1) NetGate Support 2) pfSense bug tracking and 3) FreeBSD bug tracking.

                          They are handled by different independent orgs -- it was pretty impressive for the FreeBSD 11444 bug to be addressed so quickly but it was due to its criticality.

                          pfSense 5413 has been open 5 years and the status only shows a "target" for fixing but that's not a commitment of timing.

                          So my expectation is there will be a short term work around instead of a permanent fix in the near-term.

                          SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_5)

                          M 1 Reply Last reply Reply Quote 2
                          • M
                            mcury @lohphat
                            last edited by

                            @lohphat Yes, ticket marked as resolved yesterday was to indicate that it's a recent feedback from Netgate and they are working on it.
                            But thanks, personally I didn't know the bug tracking flow and how it works

                            They are working on it, I'll be checking the redmine for news during this period

                            dead on arrival, nowhere to be found.

                            1 Reply Last reply Reply Quote 1
                            • lohphatL
                              lohphat
                              last edited by

                              [cross-posting is usually frowned upon, but I wasn't sure if I could link the idential posts so I'm manually copying it here]

                              FYI there are two new redmine bugs to track the behavior being seen. Both are related to the FreeBSD php bug.

                              https://redmine.pfsense.org/issues/11466 "Snort exit with sig 11 on SG-3100"

                              https://redmine.pfsense.org/issues/11551 "SG-3100 with pfBlockerNG doesn't pass traffic"

                              This MAY be the tracking bug for the php crash at it was a recent report with FreeBSD 12.1 but the new pfSense 21.02 is using FreeBSD 12.2. The last comment asks if it indeed is a continuing issue on 12.2:

                              https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244049

                              SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_5)

                              1 Reply Last reply Reply Quote 1
                              • B
                                bldnightowl
                                last edited by bldnightowl

                                This post is deleted!
                                1 Reply Last reply Reply Quote 0
                                • morgensternM
                                  morgenstern
                                  last edited by

                                  Hey guys, I did an upgrade from 2.4.5 build to 22.01 on my spare SG-3100 unit and now I am experiencing a mixture of the above mentioned issues. But mainly I cannot access it via LAN and the unit itself doesn't have internet although it can ping the upstream gateway. I tried downloading the 2.6 community pfsense software and do a memstick reinstall but it failed saying it cannot read some binary file. Is there an official way to get a copy of the pfsense+ software without the support subscription in place?

                                  S 1 Reply Last reply Reply Quote 0
                                  • S
                                    SteveITS Galactic Empire @morgenstern
                                    last edited by stephenw10

                                    @morgenstern said in Upgrade to 21.02-RELEASE borked on SG-3100:

                                    official way to get a copy of the pfsense+ software

                                    Open a free ticket at www.netgate.com/tac-support-request and they will give you a link to the 3100 firmware and instructions.

                                    pfSense CE can't install on the ARM CPU.

                                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                    Upvote 👍 helpful posts!

                                    morgensternM 2 Replies Last reply Reply Quote 1
                                    • morgensternM
                                      morgenstern @SteveITS
                                      last edited by

                                      This post is deleted!
                                      1 Reply Last reply Reply Quote 0
                                      • morgensternM
                                        morgenstern @SteveITS
                                        last edited by

                                        @steveits Thanks!

                                        1 Reply Last reply Reply Quote 0
                                        • morgensternM
                                          morgenstern
                                          last edited by

                                          Yep, got a TAC lite free software subscription, asked for the 22.01 pfsense+ firmware on a ticket and had it in less than 30 minutes! The memstick reinstall fixed the issue. Brilliant! Thanks NETGATE!!!

                                          1 Reply Last reply Reply Quote 1
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.