Installing pfSense on brand new hardware – no drivers?
-
Please describe your current pfsense box. It may still be suitable with VLANs if its memory, processor, speed are up to your requirements.
It's an Intel Atom D525 based system, with one built-in ethernet port that uses the ue driver. I think it has 2GB RAM and is running the nanoBSD 4G image.
Wi-Fi 802.11 b/g/n, supporting 2.4 GHz Single-Band
Bluetooth 4.0, 3.0+HS, 2.1+EDR
Don't expect those to work as advertised.Don't waste your money on USB3 too much either - Its a pain.
I'm also not sure about that Atheros LAN port.
I don't care about the BT at all, and as long as I can get 802.11g on the wireless (which is Intel-based) I'm happy. Worst case scenario, I can rip the wireless card out of my current pfSense box and slap it in this one (assuming I get everything else running), as the wireless in this mobo is via mini PCIe.
Most of the specs of the mobo I don't really care about; I just needed SFF (mini-ITX) and dual NIC – this was the only one my local store carried that fit the bill.
-
The best way to get painless out-of-the-box function is to buy a board with with all usb2 and no usb3. Simple SATAII drive interfaces, one or two built-in INTEL NIC ports and then add a 2 port Intel PCIe GB network card to that for cheap.
Then get yourself a nice Wireless AP and plug into the switch on your LAN.
Thats a nice piece of hardware you found, but not for your purposes.
I do like the Ultra Durable line of boards though. Maybe buy an older one (for cheap) on ebay that won't push the limits of pfsense drivers.
-
I just re-read the original post… You have this already?
So, we are in salvage the board mode then?You are doing a full install on HDD or SSD with live CD?
(Since you have this already I think it might be able to be made to work fine with a few settings changes - maybe)
-
Correct – I need to either find a way to make this work, or find a way to make the old box work... or pack everything back up, take it back to the store, and get a vanilla router.
-
OK - You said you had it up to the part where you needed to assign interfaces. Can you get it to that point again? Then get yourself a piece of paper and a pen.
While its sitting there asking you which interfaces you need to set up, you need to plug a cat5 port into your existing router or switch. Then plug the cable into each port on the new machine also, one at a time. Watch the screen on pfsense. It will tell you which interface name went up and then down. Those are the two ports interface names to use. Keep track of which one you want to be LAN and WAN also.
Let me know when you are done there.
-
I tried that – I plugged and unplugged back and forth between both ports, and it just sits at the "Enter the WAN interface name or 'a' for auto-detection" prompt. Similarly, when I try auto-detection (leaving cables unplugged until prompted), it doesn't detect any link up event.
-
I'd box it up send it back if possible. If not, there is further checking that can be done in the BIOS.
I'd go into the bios and check the advanced setting and the onboard devices (Every bios is slightly different)
I'd deactivate USB3 if possible. Default to SATAII if possible. Also make sure the network cards are turned on.
I've had several instances where boards ship with most features turned off.
Let me know how that goes. Also, you are using version 2.1 right?
-
Looks like I might be boxing it up…
I can't disable USB3 or change the SATA mode (only enable/disable each port; I have all the unused ports disabled). I've tried turning on EVERYTHING remotely network-related in the peripherals section, which is resulting in a ludicrously slow boot time because now it's trying to boot on PXE (and timing out of course). We'll see what road this leads down...
-
Can you open your current D525 box and post a pic here of the board in the case its sitting in. I want to know if there is space for add-on NIC in either a PCI or PCIe slot and if the case will accommodate it. A D525 is a nice bit of kit and is very capable as a pfsense router/firewall.
-
No dice on the boot with options, still doesn't detect any link state change. The NIC status LEDs blink periodically, so there's at least a physical connection… but can't get much beyond that.
http://imgur.com/bbjmjH6.jpg for my Atom box -- don't see any room for a second NIC in there :(
-
Thats completely OK - I already know the best way to deal with this, but question… What kind of throughput do you need? How fast is your internet?
Also, what kind of packages do you need to run?
(I like that box - Its really nice - How is that kingspec SSD working out for you?)
-
I think our internet connection is 50mbit down/15mbit up, though we're considering upgrading in the (nearish) future.
As far as packages, I'm running pretty near stock. The main features of pfSense I'm concerned with are OpenVPN, and I also run a guest AP (which I throttle, to discourage freeloading neighbors from torrenting etc while allowing legit houseguests to check their e-mail or surf the web). The only package I've actually installed is the File Manager, more out of personal curiosity than anything else.
The Kingspec SSD has been running quite well – on this box I'm running the nanobsd 1g image, so theoretically there's ~15GB of space for the SSD to use for wear-leveling :D
-
OK - Your current box is very nice and more than you need for your application. I notice you have wireless on that box. Does that work well for you?
As far as getting you a wired LAN and WAN, all you need is a small managed VLAN capable switch and you will be all set. Then you will have LAN and WAN ports to spare (-; How fast is your port on the box? Is is GB or 10/100?
-
Gigabyte GA-Z87N-WIFI :
Uh, that's an Intel i217v which isn't supported.
I don't believe that Atheros chip is supported either. They're both really new relatively speaking.afaik nobody has the i2xx series working yet. If you're deadset on using that GB board, just stick a ~20$ nc360t in it until the appropriate drivers are ready.
-
Yeah - But returning the mobo and just buying a vlan switch is so cost effective and flexible… Will work sooooooo well also.
-
It's GigE… would this switch do? http://www.microcenter.com/product/393070/JetStream_8-Port_10-100-1000_Gigabit_Managed_Ethernet_Switch_with_2_SFP_Slots
The wireless has worked fine for me... we don't do a whole lot on wireless (mostly web surfing and e-mail... our most demanding application is probably YouTube), and the guest AP thing is nice to have.
afaik nobody has the i2xx series working yet. If you're deadset on using that GB board, just stick a ~20$ nc360t in it until the appropriate drivers are ready.
Unfortunately said NIC is not available locally, and I need a solution ASAP (see OP). The cheapest equivalent @ Microcenter is $156, and that's on top of the ~$250 I've already spent on this new hardware.
-
TL-SG3210 - Ohhhhhh yeah. That will do it. Looks like a nice small switch.
I'm sure you can conquer VLANs in a a hour or two then you will be all set.
-
if you need a new system right away: go old.
8111E's should work fine and were/are on a ton of consumer matx to full atx boards. not pretty, but you could just lay the hardware out on boxes and whatnot just to have it function
Or, find older generation Supermicro/Tyan server boards (Ivy Bridge or older), for which the newest Intel NIC should be the 82574.w.r.t. your current board: you may or may not be able to find an mPCIE ethernet card. it'd be a horribly ugly hack but it could work. they're also painfully rare.
w.r.t. an nc360t: have you tried looking through whatever classifieds are popular locally? the nc360t just seems to be the most popular card I've noticed with the 82571.
-
So, you now have a working more than sufficiently powerful, low wattage pfsense box and will soon have all the WAN and LAN you need via VLAN… Problems solved.
Maybe you can keep and eye on that SSD of yours and post back letting people know how well and reliable it works over the life of your box. Those are very inexpensive SSDs and finding any rating on them is difficult. If it keeps working well for you it might make for a nice cheap option for people in the future.
-
So, you now have a working more than sufficiently powerful, low wattage pfsense box and will soon have all the WAN and LAN you need via VLAN… Problems solved.
Maybe you can keep and eye on that SSD of yours and post back letting people know how well and reliable it works over the life of your box. Those are very inexpensive SSDs and finding any rating on them is difficult. If it keeps working well for you it might make for a nice cheap option for people in the future.
Well the SSD has been running in that box 24/7 since May 2012 (actually, the end of April), and still seems to be doing fine. Here's the SMART status from it:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 13 9 Power_On_Hours 0x0032 100 100 000 Old_age Always - 0 194 Temperature_Celsius 0x0007 032 100 000 Pre-fail Always - 0 229 Unknown_Attribute 0x0002 100 000 000 Old_age Always - 589585213484 232 Available_Reservd_Space 0x0002 100 049 000 Old_age Always - 4626505281584 233 Media_Wearout_Indicator 0x0002 100 000 000 Old_age Always - 0 234 Unknown_Attribute 0x0002 100 000 000 Old_age Always - 94489281280 235 Unknown_Attribute 0x0002 100 000 000 Old_age Always - 4127259151
(I'm amused that 32C is considered "pre-fail")