I5 5250U 4 LAN Home computer Q355G4 install question



  • Bought a I5 5250U 4 LAN Home computer Q355G4, fitted a 120 GB Kingston hyperx SSD.
    I am on Virgin media 70/5 cable Internet in the UK. I have made a USB Sandisk  4GB flash drive to boot from - tested it boots fine.
    Question is:
    I know during installation for the wan to be recognised as far as I remember I have to switch off the cable modem & then switch on again after connecting the Ethernet cable.

    Since it is a four Ethernet mini computer, I want to use all three ports as my lan (1 for my power line, 1 for my Asus wireless router and 1 for my desktop), so do I have to individually plug in the out going connections such as 1 for my Asus router, then say OK or can I use the same 1 for my Asus router Ethernet every time to activate the lan that then I can connect say another computer to my recognised lan port whenever I need to?



  • If you want all your devices to be in the same subnet (so they can all see each other “directly” for “easy file/printer sharing…”) then it is easiest to connect a switch to one of the pfSense ethernet ports, and connect all your devices to the switch. If your “Asus wireless router” has multiple ethernet ports (often they have 4 “LAN” ports and WiFi antenna) then you can use that as a 4-port switch.

    You can bridge 3 ethernet ports on the pfSense box to put them in 1 LAN. But just because you “can” does not mean you “should”. An ordinary switch will have much better local performance than pfSense trying to “emulate bridging”.

    If you want to have different filtering/security between your WiFi devices and cabled-LAN devices, then plug the “Asus wireless router” into one pfSense ethernet port, and put that in a pfSense interface. Plug a switch (or single device if you only have 1) into another pfSense ethernet port, and put that in a different pfSense interface. Then put rules on each interface to allow just the traffic you want going where.



  • Thanks.

    I thought I would no longer need my 8 port tp-link switch as currently I have on lan port on my mini tower i5 being used which is one of two ethernet ports of a pci x2 HP gigabit (Intel based) card. This lan goes to my  8 port tp-link which then via ethernet connects to my desktop, power line network and finally to my Asus wireless router. I thought I could set up my new pfsense with a seperate ethernet port for each device mentioned above.



  • @Waqar.UK:

    I thought I could set up my new pfsense with a seperate ethernet port for each device mentioned above.

    Yes, you can do that, and you can choose to either
    a) bridge the 3 pfSense ethernet ports to make a single LAN, or
    b) create 3 separate interfaces, each with a different subnet, and each will happen to have just a single device in it.

    If you choose (a), you are saying that you are happy with all the devices in a single broadcast domain/subnet. In that case, I would keep the switch, plug the switch into a single pfSense ethernet port, and plug the devices into the switch - I would not do bridging.

    If you choose (b) then each device is firewalled-off from the other devices. You need to add rules to allow the devices to talk to each other as desired. Software that does “automated discovery” of devices in a broadcast domain/subnet is not going to work (and so it depends if you care about that or not)

    These things are design choices that depend on connectivity requirements, performance requirements, and the level of technical detail of setup that you want to manage.

    Most home people will do something like:

    1. attach all home devices to a switch
    2. attach the switch to pfSense LAN
    3. (maybe) add another access point for guests and attach that to a different pfSense interface/subnet, and give it different firewall rules so that their guests cannot hack into the home devices, or so the guests get limited bandwidth or…


  • I will do (a). So much simpler and all my devices will be protected.



  • Bought the same unit! 😎 If you have the opportunity I was wondering if you could check what your idle tempature is and let me know? I believe I’m running a bit hot.



  • @PingTheNet:

    Bought the same unit! 😎 If you have the opportunity I was wondering if you could check what your idle tempature is and let me know? I believe I’m running a bit hot.

    According to pfsense, core temp is 27.8 Celcius.

    My one runs warm but not hot.



  • @PingTheNet:

    Bought the same unit! 😎 If you have the opportunity I was wondering if you could check what your idle tempature is and let me know? I believe I’m running a bit hot.

    Here are my pfsense temps.

    ![new pfsense temps.png](/public/imported_attachments/1/new pfsense temps.png)
    ![new pfsense temps.png_thumb](/public/imported_attachments/1/new pfsense temps.png_thumb)



  • @Waqar.UK:

    @PingTheNet:

    Bought the same unit! 😎 If you have the opportunity I was wondering if you could check what your idle temperature is and let me know? I believe I’m running a bit hot.

    According to pfsense, core temp is 27.8 Celcius.

    My one runs warm but not hot.

    Ok, that what I have now. When I ran it for the first hour. My Bios said it was 91 C but then it cooled down a lot after that. My guess the thermal paste needed to warm up to create a good seal.



  • Your passive heat sink, is it warm or hot to your fingertips?



  • I also bought the same box from Qotom. It arrived today, pre-configured with 8 GB (Kingston branded) and 120 GB m.2 SSD (Phison branded).
    Tried to install pfSense 2.3.3. I only have a TV that supports HDMI, so I could not see the whole text, especially at the bottom where is asks you to configure the various steps. So obviously I could not configure to my liking.
    Just wanted to ask: is there a specific order for the 4 LAN ports to attach the WAN cable and the LAN? I used LAN1 for WAN and LAN2 for LAN (I attached a Netgear R7000 with stock firmware acting as Access Point and had IP 192.168.1.2). I could not get to the GUI of pfSense at 192.168.1.1 (neither with http or https).
    So I guess I will need to buy a monitor with HDMI port to be able to configure pfSense.
    Any help, or ideas, is appreciated.
    Thanks



  • I used a VGA to HDMI adapter that can be picked up for a few £/$ which was connected to my really old 15" LG flat panel monitor. See if you can find these and it will work out cheaper than buying a new HDMI monitor.

    https://www.amazon.co.uk/TechRise-High-Speed-adapter-Converter-Charging/dp/B01E8DD6J6/ref=sr_1_3?ie=UTF8&qid=1491644265&sr=8-3&keywords=vga+to+hdmi+converter

    There is a specific order to assign a LAN or WAN port on this mini PC. Setup asks for the WAN, then LAN.



  • Thanks, didn’t know about these converters, will save me some money. With regards to LAN ports, can you please tell me which number did you assign to Windows? I assume it should be 1, or maybe it doesn’t matter. I’m on Virgin Media 200/10 and would use only 2 of the LAN ports, 1 for Windows and 2 for LAN, which will go to my R7000 LAN 1.



  • @phochiom:

    I also bought the same box from Qotom. It arrived today, pre-configured with 8 GB (Kingston branded) and 120 GB m.2 SSD (Phison branded).
    Tried to install pfSense 2.3.3. I only have a TV that supports HDMI, so I could not see the whole text, especially at the bottom where is asks you to configure the various steps. So obviously I could not configure to my liking.
    Just wanted to ask: is there a specific order for the 4 LAN ports to attach the WAN cable and the LAN? I used LAN1 for WAN and LAN2 for LAN (I attached a Netgear R7000 with stock firmware acting as Access Point and had IP 192.168.1.2). I could not get to the GUI of pfSense at 192.168.1.1 (neither with http or https).
    So I guess I will need to buy a monitor with HDMI port to be able to configure pfSense.
    Any help, or ideas, is appreciated.
    Thanks

    Mine were out of order too and I had to swich them using Option 2 on th PfSence unit. Used the MAC to figure out the order. Mine was ordered 1, 4, 2, 3.



  • Hi,

    Just curious what kind of installation you are doing… on USB keys or on the SSD?
    I was reading this and like the idea of using ZFS:
    https://forum.pfsense.org/index.php?topic=126597.0
    …but on the other hand using the SSD seems like it would be fastest.

    Thanks.



  • I used this as a guide to install  https://doc.pfsense.org/index.php/Installing_pfSense

    To write images: https://doc.pfsense.org/index.php/Writing_Disk_Images  - Image Writer for Windows / Win32 Disk Imager is much easier to SSD.
    I just plugged in my wan when setup asked to plug in my wan cable and same for lan.



  • Thanks, that guide is useful although I plan to install 2.4 straight away. From what I read 2.4 uses a different install type:

    https://doc.pfsense.org/index.php/2.4_New_Features_and_Changes#Operating_System_.2F_Architecture_changes

    I’m just planning ahead to see what will be the best combination of media on which to install on in terms of SSD (and if size?) or USB keys (if so 1 or 2 keys and what size?). I’ll ask a question on the 2.4.0 ZFS How To thread.



  • @occamsrazor:

    Thanks, that guide is useful although I plan to install 2.4 straight away. From what I read 2.4 uses a different install type:

    https://doc.pfsense.org/index.php/2.4_New_Features_and_Changes#Operating_System_.2F_Architecture_changes

    I’m just planning ahead to see what will be the best combination of media on which to install on in terms of SSD (and if size?) or USB keys (if so 1 or 2 keys and what size?). I’ll ask a question on the 2.4.0 ZFS How To thread.

    Use a SSD, I had a spare 120GB Kingston hyperx that I was planning to use for a different project.
    To install, any drive, I used a 4GB sandisk usb 2.0 that I bought many years ago.



  • @PingTheNet:

    Mine were out of order too and I had to swich them using Option 2 on th PfSence unit. Used the MAC to figure out the order. Mine was ordered 1, 4, 2, 3.

    Mine were also out of order. igb0 is 1 and igb1 is 4.

    What is this “Option 2” method you speak of for changing them?



  • @occamsrazor:

    @PingTheNet:

    Mine were out of order too and I had to swich them using Option 2 on th PfSence unit. Used the MAC to figure out the order. Mine was ordered 1, 4, 2, 3.

    Mine were also out of order. igb0 is 1 and igb1 is 4.

    What is this “Option 2” method you speak of for changing them?

    Same here for NICs, exactly same order.



  • Ordered: QOTOM Q355G4 I5 5250U 8GB RAM 120GB SSD
    Delivery: 15-28 days

    I will report after I receive it and install pfSense on the box.  I plan to install OpenVPN client and compare the bandwidth against my laptop.

    reference:

    https://www.aliexpress.com/store/product/QOTOM-Q355G4-2017-New-fanless-X86-4-LAN-Micro-Computer-I5-5250U-Dual-core-onboard-1080P/108231_32800711474.html



  • Update: Received hardware Q355G4, exactly as described by other users

    Please keep in mind to install AMD64 pfsense packages.

    If you install i386 package,  the package installation will work but you will encounter CAS Latency timeouts when formatting SSD and reboot loops.



  • I am back, as promised, I am sharing my results & experience with qotom G355Q4 !

    Long story short, box is great, fanless and perhaps a bit too powerful for home usage!  😎

    Hardware: qotom Q355G4 with SSD
    BIOS: hyper-threading disabled/
    pfsense advanced: powerd enabled, AES-NI Enabled, Thermal = Intel Core
    pfsense system tunable: sysctl dev.cpu.[0|1].cx_lowest=C3
    Client: Gigabit connectivity
    Packages: avahi installed
    ISP Speed: 100 Mbs
    VPN Provider:  StrongVPN (AES 256 bit, MDS 128bit Auth, Adaptive compression)
    Room Temperature: 24 Celsius

    idle power consumption
    powerd enabled, minimum, 10-11 watts, 52-53 Celsius, casing 44 Celsius
    powerd enabled, adaptive, 10-11 watts, 52-53 Celsius, casing 44 Celsius
    powerd enabled, maximum, 11-12 watts,54-57 Celsius, casing 45 Celsius
    powerd disabled, 11-12 watts, 55-57 Celsius, casing 45 Celsius

    Conclusion: When idle the box seems to always need 10-12 watts regardless of the power mode. Is there better hardware out there that requires less wattage, support AES-NI, descent clock speed (Since OpenVPN is Single Core) and can provide 100Mbs output ?  If you find one, share it with everyone in the forum !

    Bandwidth test with ISP (no encryption) using Bandwidth Website
    110 Mbs with powerd minimum, cpu <10%, 10-11 watts
    110 Mbs with powerd adaptive, cpu  <10 %, 11 watts,
    110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
    110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

    Conclusion: My ISP seems to provide me with 100 Mbs download speed

    Bandwidth test using ISP downloading 5-6 HUGE FILES simultaneously for a good period of time 🙂
    110 Mbs with powerd minimum, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd adaptive, cpu  20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd maximum, cpu 20%, 14 watts (weird),  CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd disabled, cpu 20%,  11 watts, CPU 52 Celsius, Router casing 44 Celsius

    Conclusion:  I can download 5-6 Huge files @ 110 Mbs regardless of the power saving mode because there is no encryption.

    Bandwidth test using Internet through OpenVPN (encryption) using Bandwidth Website (tested a few times)
    60 Mbs with powerd minimum, cpu <10 %, 10-11 watts,
    110 Mbs with powerd adaptive, cpu  <10 %, 11 watts,
    110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
    110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

    Conclusion: powerd minimum doesn’t seem to work well with OpenVPN….

    Bandwidth test using Internet through OpenVPN (encryption) downloading 5-6 HUGE FILES simultaneously for a good period of time 🙂
    50 Mbs with powerd minimum, cpu 25 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    100 Mbs with powerd adaptive, cpu  35 %, 11-12 watts, CPU 54 Celsius, Router casing 45 Celsius
    100 Mbs with powerd maximum, cpu 12%, 15 watts,  CPU 63 Celsius, Router casing 46 Celsius
    100 Mbs with powerd disabled, cpu 15%, 15.4 watts, CPU 64 Celsius, Router casing 47 Celsius

    Overall Conclusion:Bandwidth is slightly affected by encryption (assuming good hardware & vpn provider).  If you want to save energy & generate a bit less heat, you can perhaps consider using powerd adaptive mode.  Perhaps the next generation of energy efficient Celeron might be a better choice for home if you don’t plan to use pfsense packages that are CPU intensive.

    Geek Test (powerd -a min -m 600 -M 600 forced it via  Shell command)
    60 Mbs with powerd enable, min freq 600, max freq 600, cpu 30-40%, 11-12 watts, CPU 52 Celsius, Router casing 44 Celsius



  • Thanks for that info.

    seriously considering purchasing one of these Qotom Q355G4 units.

    350 seems like a lot of money for a home router/firewall

    Sounds like performance is about as good as you get for a low powered device tho.

    I am wondering if this would work for me?

    I run 60/5  but will be using multiple encrypted vpns, and many vlans. Fiber is currently being put in and expect to be on 100/100 in the next year or two…(cant wait)

    I have about 30+ devices on my network (vms, tablets, laptops, desktops, phones, servers, tv boxes, and surveillance.) (all part of my homelab)

    Will this little booger keep up? I also would like to mess with snort, squid and other packages.

    Intrested in bridging the interfaces. 2 or 3 to ports to feed my 10gbe switch



  • Perhaps try to run pfsense on a virtual box to get a good feel and decide if pfsense is a good for you.
    100 Mbs seems to be  achievable and sustainable for OpenVPN.
    10 Gbe switch, why do you need 10 Gbe internally ? (you can  msg me !)



  • I have 4 sfp+10gbe ports available from my two stacked switches. They connect to my proxmox server, freenas server, and two workstations in my office. I really dont need that kind of speed but it sure makes transfers super fast. I wanted to play around with enterprise level technology and it was cheap enough to do as part of my home lab.

    I should have also stated that I currently run pfsense on a dell optiflex 780 sff but this thing throws out heat it has a Quad core Q8400. I have not had any issues with it other then power consumption and heat…

    I am wanting to see if a small <15watt device would fulfill my needs.



  • In the <15 TDP, the qotom Q355G4 is a good contender 🙂

    Retrospectively, I would have preferred <10 TDP but I wasn’t able to find one that had AES-NI, enough power for additional packages, 4x Intel NICS and fan-less chassis.

    Life is too short 🙂



  • I have one of these that I just set up, and I am getting miserable performance on the wan connection. I just pulled out my fios router which I was consistently getting 25/25 with, and now I am typically getting 2~4 down and 25 up.

    Does anyone have suggestions on what I should look towards to try to diagnose?



  • @ChefRayB:

    I am back, as promised, I am sharing my results & experience with qotom G355Q4 !

    Long story short, box is great, fanless and perhaps a bit too powerful for home usage!  😎

    Hardware: qotom Q355G4 with SSD
    BIOS: hyper-threading disabled/
    pfsense advanced: powerd enabled, AES-NI Enabled, Thermal = Intel Core
    pfsense system tunable: sysctl dev.cpu.[0|1].cx_lowest=C3
    Client: Gigabit connectivity
    Packages: avahi installed
    ISP Speed: 100 Mbs
    VPN Provider:  StrongVPN (AES 256 bit, MDS 128bit Auth, Adaptive compression)
    Room Temperature: 24 Celsius

    idle power consumption
    powerd enabled, minimum, 10-11 watts, 52-53 Celsius, casing 44 Celsius
    powerd enabled, adaptive, 10-11 watts, 52-53 Celsius, casing 44 Celsius
    powerd enabled, maximum, 11-12 watts,54-57 Celsius, casing 45 Celsius
    powerd disabled, 11-12 watts, 55-57 Celsius, casing 45 Celsius

    Conclusion: When idle the box seems to always need 10-12 watts regardless of the power mode. Is there better hardware out there that requires less wattage, support AES-NI, descent clock speed (Since OpenVPN is Single Core) and can provide 100Mbs output ?  If you find one, share it with everyone in the forum !

    Bandwidth test with ISP (no encryption) using Bandwidth Website
    110 Mbs with powerd minimum, cpu <10%, 10-11 watts
    110 Mbs with powerd adaptive, cpu  <10 %, 11 watts,
    110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
    110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

    Conclusion: My ISP seems to provide me with 100 Mbs download speed

    Bandwidth test using ISP downloading 5-6 HUGE FILES simultaneously for a good period of time 🙂
    110 Mbs with powerd minimum, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd adaptive, cpu  20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd maximum, cpu 20%, 14 watts (weird),  CPU 52 Celsius, Router casing 44 Celsius
    110 Mbs with powerd disabled, cpu 20%,  11 watts, CPU 52 Celsius, Router casing 44 Celsius

    Conclusion:  I can download 5-6 Huge files @ 110 Mbs regardless of the power saving mode because there is no encryption.

    Bandwidth test using Internet through OpenVPN (encryption) using Bandwidth Website (tested a few times)
    60 Mbs with powerd minimum, cpu <10 %, 10-11 watts,
    110 Mbs with powerd adaptive, cpu  <10 %, 11 watts,
    110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
    110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

    Conclusion: powerd minimum doesn’t seem to work well with OpenVPN….

    Bandwidth test using Internet through OpenVPN (encryption) downloading 5-6 HUGE FILES simultaneously for a good period of time 🙂
    50 Mbs with powerd minimum, cpu 25 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
    100 Mbs with powerd adaptive, cpu  35 %, 11-12 watts, CPU 54 Celsius, Router casing 45 Celsius
    100 Mbs with powerd maximum, cpu 12%, 15 watts,  CPU 63 Celsius, Router casing 46 Celsius
    100 Mbs with powerd disabled, cpu 15%, 15.4 watts, CPU 64 Celsius, Router casing 47 Celsius

    Overall Conclusion:Bandwidth is slightly affected by encryption (assuming good hardware & vpn provider).  If you want to save energy & generate a bit less heat, you can perhaps consider using powerd adaptive mode.  Perhaps the next generation of energy efficient Celeron might be a better choice for home if you don’t plan to use pfsense packages that are CPU intensive.

    Geek Test (powerd -a min -m 600 -M 600 forced it via  Shell command)
    60 Mbs with powerd enable, min freq 600, max freq 600, cpu 30-40%, 11-12 watts, CPU 52 Celsius, Router casing 44 Celsius

    Hey ChefRayB!

    Did you do any benchmark to see what kind of VPN speeds that HW maxes out at? I wish to get one that is future-proof (pref can handle 500/100) with vpn, what do you think?


  • Galactic Empire Netgate Administrator

    There’s already a qotom topic, please ask questions there. Thanks.


Locked
 

© Copyright 2002 - 2018 Rubicon Communications, LLC | Privacy Policy