@enwod said in PPPOE - Fibre issues:

MAC address for my PfSense router their end.

Hi,

What HW are you using?
I need the first 3 segments of MAC,

BTW:

I encountered this problem, which is due to the strict MAC filtering of the service provider (ISPs)

so, use "spoofed", well known manufactures MAC address block, Intel, Cisco, Supermicro, etc....

I dig some more on the problem. It seems to be a dns problem with pfsense-pppoe and Windows.
I will update when i discover some more info

@chpalmer I tried. Unfortunately not.

Next I would do a packet capture on your LAN for anything going on for address 192.168.1.2

Then do some attempted surfing and see if the traffic is actually making it to the LAN port. If it is do the same for the PPPoE/WAN interface.

Diagnostics / Packet Capture

I would reboot the pfSense and when it completed, then reboot/repowered your CenturyLink modem. You'll then obtain an IP address for WAN.

@muppet said in SG-1100 PPPoE Performance:

@akuma1x Yes it's easy enough to buy some secondhand/commodity hardware.

Anything you can find with enough network ports and an Atom C3XXX, or Intel i3/i5/i7 processors, or even some of the more recent fast Celeron and Xeon processors. Those are all good for a pfsense box. Try to stay away from the laptop-grade mobile processors, and the older Celeron J1900 stuff. Those are going to show their age and weaknesses quicker than the other ones.

HP and Dell made/make some good small form factor stuff. Just make sure you can add at least 1 multi-port INTEL network card in there and you'll be all set with a nice pfsense firewall box.

Jeff

@alpineaudio said in pfSense hardware selection help:

@akuma1x said in pfSense hardware selection help:

firewall black-boxes

and more specific, this one's an i5 https://www.amazon.com/QOTOM-Q355G4-Factory-Firewall-Multi-Function-Appliance/dp/B06XNWLR3J/ref=sr_1_fkmr2_2?keywords=pfsense+firewall+black-boxes+i5&qid=1553882807&s=gateway&sr=8-2-fkmr2

This one is a much better choice!

I'm going to get up on my soap box here... keep in mind, you should try to support the pfsense open source project as much as you can. With the Qotom box you found, you're only about $60 away from the "official" Netgate SG-3100 box. I'm not trying to guilt you into a purchase, and I'm not saying you're going to get a better experience with name-brand or not, but being that close in price, I would send my money to Netgate and the firewall project itself.

Jeff

I haven't tried across subnets yet, I'll have a look at that next time it dies. Thanks again for everyones help so far.

te VM sofware locking VLAN packet!

Solved by enabling " Enable Forwarding Mode"

Fiz um novo teste com outro cabo e funcionou, problema resolvido.

At first his ISP thought he was going over his rated speed, but we traffic shaped and determined that was not the problem. His ISP now thinks it is the PPPoE Keep Alives not being recieved thus terminating his line. How would he got about mitigating this on the SG-1000?

Here is what the ISP said,
alt text

I'm also wondering about this behavior.

I've three DynDNS host names which are to be updated on WAN IP change and I get two notification mails on every IP change.

Is it possible to prevent the double notification or is there an explanation for that?