SG-1100 DEAD AFTER 2.4.5-RELEASE Upgrade!

rpsmith

After upgrading my REMOTE SG-1100 from 2.4.4-RELEASE-p3 to 2.4.5-RELEASE my firewall is DEAD!

I'm in the process of reloading it now.

So much for "We test are Netgate Hardware so you won't have to worry about upgrades"

My generic Protectli firewall had no problems doing the same upgrade!

Roy...

costanzo

Upgraded Failed - I too have a SG-1100

Here's the error:

costanzo

@costanzo
I retried and was successful. The reboot took a long time - just chill. My reboot was like 5-10 minutes.

rpsmith

Turn out I cant even download an SG-1100 image to repair my DEAD netgate hardware without opening a Support Ticket!

https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

No more netgate hardware for me! Fool me once, shame on you!

Roy...

costanzo

@rpsmith Did you get any errors? I got an error the first time (as shown)

Then when I re-tried, it worked. The reboot took a long time...12 minutes.

rpsmith

Upgrade is complete. Rebooting in 10 seconds.
Success

I waited at least 15 to 20 minutes.

Roy...

costanzo

@rpsmith Man that sucks! I wouldn't give up on pfsense.

I have had firewall upgrades go bad on other brands. Even expensive ones (15K). Hopefully you will get your system back up.

dotdash

All you need to open a support ticket is your serial number. You don't need a support contract. Create an account, and open a ticket. I'm sure they will get you a copy of the recovery image.

rpsmith

I specifically bought this hardware from netgate because I was deploying it in a remote location. I bought their marketing hype about testing new updates on their hardware. Now I have a DEAD netgate firewall in a remote location and I can't even download an image to reload it without opening a support ticket and provide them with a serial number of my SG-1100 which I don't have a record of and the firewall is 750 miles away!

Can you tell I'm not a happy camper?

Roy...

serbus

Hello!

This is apparently a known issue that was not fixed :

https://forum.netgate.com/topic/150869/error-updating-sg-1100-2-4-4_p3-to-2-4-5-r-20200226-2100

I had to always run the upgrade twice when testing versions of 2.4.5-RC. The same was true for 2.4.5-RELEASE.

John

ahking19

My SG-1100 upgrade went smooth. Completed in approx. 10 minutes. This my home router so pretty light on packages (4)

Avahi
openvpn-client-export
pfBlockerNG
Status_Traffic_Totals

mikekoke

@ahking19 said in SG-1100 DEAD AFTER 2.4.5-RELEASE Upgrade!:

My SG-1100 upgrade went smooth. Completed in approx. 10 minutes. This my home router so pretty light on packages (4)

Avahi

openvpn-client-export

pfBlockerNG

Status_Traffic_Totals

Have you kept or removed the packages?

slu

Oh no, it look like I have the same issue?
https://forum.netgate.com/topic/151684/sg-1100-pkg-static-https-repo-netgate-com-pkg-pfsense_factory-v2_4_5_aarch64-core-meta-txz-authentication-error

And now?
Only OpenVPN Client Export package is installed.

costanzo

@slu Have you tried re-running the upgrade?

slu

Yes, WebGUI do not show the update anymore and on the terminal still the same error.

rpsmith

@costanzo

I'm not giving up on pfsense. I'm giving up on their over-priced hardware that I can't count on to survive a software upgrade!

Roy...

scurrier

I thought my "remote" (on a second public IP in the same building) SG-1100 was dead after successfully reaching the upgrade reboot, but really just the IPsec went down and would not come back up, despite having run successfully for two weeks prior. I fiddled with the settings according to what the logs were telling me, keeping both sides matching, to no avail. I restarted the service on both sides multiple times. Again, this was all working before so the settings were correct and it was already set up for dynamic IP's on both sides so it's not like the IP changed upon the remote rebooting.

Then, on a hunch, I decided to upgrade the other side's pfSense version to a matching 2.4.5. (That one's running on commodity hardware.) Bam, IPsec comes right up after the upgrade.

Dang, another hour lost to VPN troubleshooting.

Lesson learned. I'll make a bigger blood sacrifice next time.

slu

My SG-1100 works again, need to open a ticket and download the firmware to reflash.

costanzo

Has anyone seen their SH-1100 reboot without any reason? Woke up this morning to see an email that my router rebooted at 10:20PM.

stephenw10

You can just email support@netgate.com with any identifying piece of information you might have such as the order number or even the email address it was ordered from (unless you have numerous orders).
I have no idea why your particular upgrade failed. If you can get us update logs we would be happy to review them.
I can only say I have personally up SG-1100s here many times during testing and not seen an issue and general update testing on that hardware did not reveal any issues.

Steve