<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[PfSense + HP Proliant + Cisco gateway = interferences?]]></title><description><![CDATA[<p dir="auto">I don't know is this hardware related problem, but will describe it anyway.</p>
<p dir="auto">I have HP Proliant ML 110 G6 server running on <strong>Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 4GB DDR3 1333MHz, 2 x 500GB SATA in mdadm RAID1</strong>, and following NICs:<br />
<strong>10:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 01)<br />
1e:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5723 Gigabit Ethernet PCIe (rev 10)<br />
30:00.0 Ethernet controller: Intel Corporation 82557/8/9/0/1 Ethernet Pro 100 (rev 08)</strong></p>
<p dir="auto">On this server pfSense i386 is running as Virtual Machine under KVM.<br />
I see some ping loss on very fast link (80Mbit down, 8Mbit up), average 10-15ms. pfSense is shaping this for ~30 stations.<br />
<em>–- www.onet.pl ping statistics ---<br />
372 packets transmitted, 355 received, 4% packet loss, time 371519ms<br />
rtt min/avg/max/mdev = 10.766/12.957/44.302/2.583 ms</em></p>
<p dir="auto">On some stations there are "<strong>disconnections</strong>" or "<strong>page unavailable</strong>" errors, on some other WWW loads really fast, even on pfSense VM I see sometimes "<strong>Unable to check updates</strong>" on Dashboard. I was thinking DNS-resolver related problem, but changing DNS order / addressess didn't change anything. I see no ping loss to the server itself or VM.<br />
But main fast link is distributed by <strong>Cisco EPC3925</strong> VoIP Wireless Gateway at front.<br />
We just discovered that disabling SPI Firewall Protection (options: Block Anonymous Internet Requests, Block IP Flood Detection) on Cisco device solved this issue, but still check to see if it was a problem.</p>
<p dir="auto"><em>703 packets transmitted, 703 received, 0% packet loss, time 702932ms<br />
rtt min/avg/max/mdev = 36.791/39.765/106.076/5.097 ms</em></p>
<p dir="auto">Interesting?</p>
<p dir="auto">UPDATE: ahh, I forgot.. all NICs are bridged (br0, br1, br2) to add support networking. All are Intel "e1000" emulated hardware.<br />
<img src="/public/_imported_attachments_/1/pfsense-host.png" alt="pfsense-host.png" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/pfsense-host.png_thumb" alt="pfsense-host.png_thumb" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/pfsense-Cisco-device-firewall.png" alt="pfsense-Cisco-device-firewall.png" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/pfsense-Cisco-device-firewall.png_thumb" alt="pfsense-Cisco-device-firewall.png_thumb" class=" img-fluid img-markdown" /></p>
]]></description><link>https://forum.netgate.com/topic/43106/pfsense-hp-proliant-cisco-gateway-interferences</link><generator>RSS for Node</generator><lastBuildDate>Thu, 13 Aug 2026 08:30:12 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/43106.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 20 Mar 2012 14:53:41 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to PfSense + HP Proliant + Cisco gateway = interferences? on Tue, 03 Apr 2012 21:02:21 GMT]]></title><description><![CDATA[<p dir="auto">Just for update, because it's RESOLVED!!!<br />
This is very strange, however..</p>
<p dir="auto">For ANY Cisco router/device at first line please disable "<strong>SPI Firewall protection</strong>", especially "Block IP Flood Detection".<br />
on WAN of this device, since <strong>it's interferencing with pfSense</strong> somehow and causing delays/disconnections.</p>
<p dir="auto">For me, it happends 2 times on 2 different Cisco routers (not only with HP server).</p>
<p dir="auto"><img src="/public/_imported_attachments_/1/pfsense-Cisco-device-firewall.png" alt="pfsense-Cisco-device-firewall.png" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/pfsense-Cisco-device-firewall.png_thumb" alt="pfsense-Cisco-device-firewall.png_thumb" class=" img-fluid img-markdown" /></p>
]]></description><link>https://forum.netgate.com/post/328685</link><guid isPermaLink="true">https://forum.netgate.com/post/328685</guid><dc:creator><![CDATA[toomeek]]></dc:creator><pubDate>Tue, 03 Apr 2012 21:02:21 GMT</pubDate></item></channel></rss>