Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    1. Home
    2. Tags
    3. sg-1100
    Log in to post
    • All categories
    • P

      Novice trying to diagnose internet problems when using Wireguard with ProtonVPN

      Watching Ignoring Scheduled Pinned Locked Moved WireGuard wireguard vpn protonvpn pfsense 23.09 sg-1100
      1
      0 Votes
      1 Posts
      218 Views
      No one has replied
    • focaccioF

      SG1100 to 24.11 failed / Error Code 137

      Watching Ignoring Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software sg-1100 updates failed
      4
      0 Votes
      4 Posts
      442 Views
      stephenw10S

      Either ssh into the 1100 or use the USB serial console directly.

      Use option 13 at the console menu to run the upgrade. If it still fails you should see more error output from there.

    • R

      SG-1100 reset button does nothing, console port not recognized

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware sg-1100 reset console
      11
      0 Votes
      11 Posts
      1k Views
      stephenw10S

      Hmm, not much we can do if the serial/usb device isn't even detected. šŸ˜ž

    • R

      SG-1100 won’t lease addresses

      Watching Ignoring Scheduled Pinned Locked Moved General pfSense Questions sg-1100
      5
      0 Votes
      5 Posts
      622 Views
      R

      Thanks Steve. I opened a TAC case & they were able to help. As it turns out somehow under the DHCP server settings, under restrictions "all clients" got disabled.

      -Rick

    • N

      Procedure to offline update hot spare to latest revision?

      Watching Ignoring Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software sg-1100
      10
      0 Votes
      10 Posts
      1k Views
      keyserK

      @nguser6947 said in Procedure to offline update hot spare to latest revision?:

      @keyser The only package I'm using is pgblockerng.

      That is the best package for pSense - period.
      But it is also the worst for what you are looking ti do. Because depending on your setup that will either autocreate and sort your firewall rules or create aliasset that cannot resolve when it’s not installed

    • M

      Unable to upgrade SG-1100 appliance to 23.01 - Kernel panic

      Watching Ignoring Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software update 23.01 sg-1100
      11
      0 Votes
      11 Posts
      3k Views
      jimpJ

      @william-mandell said in Unable to upgrade SG-1100 appliance to 23.01 - Kernel panic:

      @jimp

      No Jim , sorry, but no. Not an older version of pfsense plus at all.

      I was on the Newest version of pfSense Plus+ that was the release #, 'freshly' and (*natively) installed before > and updated to 23.01 obviously after 23.01 came out, but before I saw that it was being 'blocked' because of some problems going on.

      Those statements are contradictory. Either you installed 23.01 directly or you were on 22.05 and upgraded to 23.01.

      That said, I checked around and apparently it's a known issue that the 1100 and 2100 recovery installers are using an older ZFS version in the disk images.

      While you could run zpool upgrade -a and let it upgrade that, if it didn't properly update the loader when you updated to 23.01 then it may not boot properly after. If you did reimage it with 23.01 and not an upgrade, then it's safe to run.

      How and why would I want to boot it to the older version(s) ZFS boot environment , its has ZFS now. The 'old' environment always said it has an 'error' and shouldnt even running, but TAC said y'all had a special version, so it's fine.

      If you upgraded from 22.05 to 23.01 and had a problem on 23.01, you could use the boot environment to boot back into 22.05 without reinstalling.

      Can I ask again, how EXACTLY do I run a program that uses your special Chip' on board to verify and authenticate that my system is running authentic pfSense+ software. Does it need to be 'on'?Ā Not sure if it's the same chip but whichever one displays whether it is on or not has always been off. Thought that chip was for VPN? Anyway, the trademarked pc sense chip to verify and authenticate - the software running.

      The device that handles the authenticity part is used by the device when accessing the package repositories for packages and updates (all automatic). That is the "thoth" security chip.

      VPN acceleration on 1100/2100 is handled by a different function, the SafeXcel cryptographic accelerator, which is unrelated.

    • S

      SG-1100 users should use the update selection "SG-1100 update" in the selector above

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware 22.01 21.05.2 sg-1100
      3
      0 Votes
      3 Posts
      913 Views
      S

      @stephenw10 Awesome. Thanks.

    • L

      Unbound was killed: out of swap space

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware unbound swap sg-1100
      12
      0 Votes
      12 Posts
      5k Views
      GertjanG

      Log lines indicate the exact moment of the events :

      @leonroy said in Unbound was killed: out of swap space:

      Jan 11 13:01:33 unbound 63374 [63374:0] notice: Restart of unbound 1.12.0.

      and while it's starting - 15 seconds later :

      @leonroy said in Unbound was killed: out of swap space:

      Jan 11 13:01:48 unbound 63374 [63374:0] info: service stopped (unbound 1.12.0).

      and a small instance (< 1 second) :

      Jan 11 13:01:48 unbound 63374 [63374:0] notice: Restart of unbound 1.12.0.

      To make a long story, go to the Unbound / Resolver settings page and uncheck this :

      ffec4b58-bccf-4e36-8b6e-dc41c1cea202-image.png

      Stick a post-it on the pfSense box that says :
      "Check the resolver logs again after 48 hours and see how many stops/restarts happened the last 48 hours".
      If you find "a couple" or even less : issue solved.

    • T

      WAN configuration - DHCP on VLAN with additional options

      Watching Ignoring Scheduled Pinned Locked Moved DHCP and DNS sg-1100 wan on vlan configuration dhcp
      3
      0 Votes
      3 Posts
      946 Views
      T

      @kiokoman

      Thank you for your quick and clear reply!
      This helped me out a lot, I didn't realize we could add "Send options" in such a way!

      I haven't managed to get a public IP yet but am getting closer and closer :)

      Have a great day

    • C

      SG-1100 Failes to Boot; No Console Access

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware sg-1100
      6
      0 Votes
      6 Posts
      2k Views
      P

      @curtisj - does this help you at all - it worked for me (twice recently) https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

      I have around a dozen SG-1100 in production, they tend to arrive to me in two's or three's so I configure, and software upgrade them one after another, and ship them out. This gives me a some sort of impression of how consistently they behave. Anyway, the last three arrived with me just over a month ago, and I performed a vanilla out-of-the-box config on them, and then the upgrade to pFsense Plus. One decided to brick itself rather than take the upgrade (so I used the procedure above to recover it) and the other two took the upgrade just fine via the web ui. And now I'm thinking about it, there was one that I stuck a label-printed note onto the top that I was unable to serial console onto it.... Maybe I'll revisit that unit and use the warranty. As I'm supplying them to technically-capable users, but not neccessarily firewall technically familiar, I perform multiple reboots before shipping them out and always keep a copy of the final config. But again in this most recent batch one decided that it would be a brick after being DHL'd to the user. Used the procedure above, and blasted the config back onto it, and it's been fine since.

    • Z

      Sony Bravia Smart TV on pfSense SG1100

      Watching Ignoring Scheduled Pinned Locked Moved General pfSense Questions sg-1100 sony smart tv android
      2
      0 Votes
      2 Posts
      778 Views
      B

      @zacaustin

      I have a Sony Bravia and a sg3100, it’s on my guest vlan
      It works perfectly hardwired.. I have a Ubnt nano mounted directly above it which also works fine..

      It works on just the out of box dns resolver for me and also by setting it up with next dns google blocking... where it’s pushed dns servers by pfsense and it blocks google services

    • C

      SG-1100 Can’t access Web UI but can access serial inteface

      Watching Ignoring Scheduled Pinned Locked Moved webGUI sg-1100
      6
      0 Votes
      6 Posts
      1k Views
      C

      @johnpoz I tried accessing web UI from the LAN device to IP 192.168.1.1
      I also had tried from a device on the WAN accessing the router assigned IP of 192.168.1.30.

      Neither worked.

    • L

      Good experience with SG-1100 and Netgate support

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware sg-1100 netgate support
      1
      6 Votes
      1 Posts
      568 Views
      No one has replied
    • T

      Trouble accessing SG-1100 web UI via IPsec

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware hangs ipsec sg-1100 slow speed web gui
      16
      0 Votes
      16 Posts
      2k Views
      stephenw10S

      Hard to see how that could be. The packet is arriving over the IPSec. TCP Syn packets are tiny anyway. But if you've seen something similar before I guess....

      But that pass rule should match and clearly isn't. IP Options on it or something odd?

      Steve

    • Z

      Setting up a pfsense to be a forwarder/proxy

      Watching Ignoring Scheduled Pinned Locked Moved General pfSense Questions pfsense networking sg-1100 setup
      1
      0 Votes
      1 Posts
      452 Views
      No one has replied
    • F

      Unplug WAN cable on primary and lose internet access

      Watching Ignoring Scheduled Pinned Locked Moved HA/CARP/VIPs lan failover routing wan sg-1100
      1
      0 Votes
      1 Posts
      599 Views
      No one has replied
    • R

      Netgate SG-1100 (wired router) setup with phone hotspot

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware netgate iphone sg-1100 hotspot
      5
      0 Votes
      5 Posts
      1k Views
      stephenw10S

      Indeed, I've never tried it and only recently became aware you could connect directly like that. I could see how it might be possible though.

      Steve

    • S

      SG-1100 64 bit counters

      Watching Ignoring Scheduled Pinned Locked Moved SNMP sg-1100 montoring
      6
      0 Votes
      6 Posts
      1k Views
      S

      Hey @jimp,
      For the SG-1100, I know its an Arm box, it one of the reasons I bought it. I said arm64, as that's what bsnmpd reported, instead of Aarch64.

      I had a chance to install Net-SNMP on the SG-1100 and it returns ifHCInOctets and ifHCOutOctets:
      $ snmpwalk -v2c -c <redacted> 192.168.1.254 | grep -i -e inoctets
      IF-MIB::ifInOctets.1 = Counter32: 1066212313
      IF-MIB::ifInOctets.6 = Counter32: 0
      IF-MIB::ifInOctets.7 = Counter32: 147998
      IF-MIB::ifInOctets.8 = Counter32: 0
      IF-MIB::ifInOctets.9 = Counter32: 0
      IF-MIB::ifInOctets.10 = Counter32: 339689700
      IF-MIB::ifInOctets.11 = Counter32: 549481782
      IF-MIB::ifInOctets.12 = Counter32: 121263171
      IF-MIB::ifHCInOctets.1 = Counter64: 1066384951
      IF-MIB::ifHCInOctets.6 = Counter64: 0
      IF-MIB::ifHCInOctets.7 = Counter64: 147998
      IF-MIB::ifHCInOctets.8 = Counter64: 0
      IF-MIB::ifHCInOctets.9 = Counter64: 0
      IF-MIB::ifHCInOctets.10 = Counter64: 339693366
      IF-MIB::ifHCInOctets.11 = Counter64: 549639578
      IF-MIB::ifHCInOctets.12 = Counter64: 121267407

      I'll have to keep playing to make sure there is no functionality loss (OIDs returned, etc), but right now I'm happy!

      Thanks!
      David

    • S

      Trouble setting up SG-1100 for Google Fiber

      Watching Ignoring Scheduled Pinned Locked Moved General pfSense Questions sg-1100 google fiber vlan
      4
      0 Votes
      4 Posts
      844 Views
      stephenw10S

      No, no reboot required.

    • Z

      SG-1100 Restart Loop - No Access

      Watching Ignoring Scheduled Pinned Locked Moved Official NetgateĀ® Hardware sg-1100 issue
      2
      0 Votes
      2 Posts
      961 Views
      GrimsonG

      https://forum.netgate.com/topic/144636/sg-1100-intermittent-reboots