Can't upgrade via memory stick

vpnguy

I have an older pfsense that has never been opened (SG-4860-1U) that I am replacing the same model that recently died. The pre-installed pfsense software is so old (v2.4 I believe) that I can't do an automatic update through the pfsense webconfigurator, I need to manually install through a USB stick and the console.

However, when using the pfsense instructions to flash a usb stick and install the latest 2.6 version, it doesn't appear to be working well. I tried two memory sticks and using the Belena Etcher tool, and for both it says that the flash was successful, but when inserting it into the pfsense and connecting to the console, I can view the boot menu and press F12 for boot options. #1 is my USB stick (Kingston Data Traveler) so I press 1, but then the boot screen freezes.

I have installed using this method before, so I know that the install screen should come up at this point.

When I put the USB stick into my computer, it says that the capacity is only 68MB and there is only 300Kb or so of space used (I assume this is due to the way it was flashed and there are hidden partitions that only pfsense can see)

Anyway, has anyone else experienced this issue? How can I update my pfsense hardware to the latest stable release?

Gertjan

@vpnguy

You have a Netgate appliance.
You got the firmware from Netgate by 'mail' after a request made here ?

SteveITS

@vpnguy As Gertjan says Netgate will give you the Plus firmware and instructions but just to link them here they are: https://docs.netgate.com/pfsense/en/latest/solutions/sg-4860-1u/reinstall-pfsense.html

You could also try setting pfSense's update setting to "previous stable version" and see if that will update, then update again to current.
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html

Gertjan

@steveits said in Can't upgrade via memory stick:

You could also try setting pfSense's update setting to "previous stable version" and see

Hummm. This concerns a very ancient 2.4.1 .... way to old for that to work.

SteveITS

@gertjan Well worst case it doesn't work. :) I have seen Netgate recommend installing new if the version is "that old" but without specifics such as "3 versions old."

For @vpnguy I'm actually a bit curious whether 2.6 CE can install on a 4860, but realistically it's not designed for that since Netgate has always used FE (factory edition) on their hardware. So, better to go that way. CE definitely won't work on ARM hardware but the 4860 has an Atom.

vpnguy

@gertjan Thanks, I remember doing this process a while back but it was so long ago I forgot that I needed to request the firmware specifically from Netgate.

jimp

Which image did you download and put on the USB drive?

It should be one that has memstick-ADI in the filename. The 4860 has its console on a different serial port than the one used by the regular serial memstick.

Also, some of those older units were picky about USB3 drives so if you still have a USB2 drive around, try that.

Using Plus would be best, but those can still run CE if you want, so long as you use the correct memstick.

vpnguy

@jimp
I downloaded the pfSense-CE-memstick-serial-2.6.0-RELEASE-amd64.img.gz

I was sent the pfSense+ firmware from netgate, which worked. Hopefully this new old hardware can stay alive for a few more years. But I learned to create a backup of my configs this time

rcoleman-netgate

@vpnguy Look into ACB: https://www.netgate.com/blog/automatic-configuration-backup and https://docs.netgate.com/pfsense/en/latest/backup/autoconfigbackup.html for more information on the service. It will probably save your tuchus once or twice.