X750e pfsense 2.1?



  • Hi, just read that pfsense 2.1 is out and I was searching the forum for my question but havent seen any..
    Is it safe to upgrade it to 2.1? Will it affect my config on my machine? (FYI: i have never upgraded before, i have allways done a clean install).


  • Netgate Administrator

    I have upgraded few without any problems.
    A few people have had space issues upgrading Nano if you're using the 512MB image. It deppends on what packages you have installed etc.
    Upgrading Nano is pretty much the same as a clean install anyway. The safest possible way is to use a different CF card, then you can always boot the old card.

    Steve



  • I have no packages installed, I think it is the 512 nano image.
    Thats sounds like a great idea to use a other cf card.

    Thx!


  • Netgate Administrator

    I suggest you use the 1GB image then to be sure future updates have no issues. I'm using that on all my boxes on various actual card sizes.

    Steve



  • Hmm, i'm not actually sure what image i'm using. Is there a way to find out?


  • Netgate Administrator

    It's listed on the pfSense dashboard in the System Information widget. E.g.

    Platform 	nanobsd (1g) 
    

    Steve



  • Okey, but mine just says "nanobsd (4g) "

    ah, so its 4GB ?


  • Netgate Administrator

    So you're using the 4GB image. There's no need to do that really, you'll never use the extra space it provides. Like I said I use the 1GB image on all my CF cards which are mostly 2GB, some 4GB. Mostly it's because it writes to the card much quicker in my ancient USB1 CF card reader.  ::)

    Steve



  • HA! :) well ive got a brand new usb 3.0 cf card reader ;)

    So anyway, i'wont having any problem using the gui updater? My VPN-settings and vpn-connections will be the same?


  • Netgate Administrator

    It should update fine. As I said if you're at all worried use a new card and restore the config.

    Steve



  • Hi,
    what about the four ethernet ports on the right side of a X750e. I read about some errors in the driver under 2.0.
    Will they work without any problems under 2.1?

    Are they a better choice because of speed? Or should I go with the four ports on the left? I think they use another driver.

    Matthias


  • Netgate Administrator

    There is a problem with the msk driver for the four right hand ports and unfortunately it hasn't been fixed in 2.1. However there is a simple fix:
    https://doc.pfsense.org/index.php/PfSense_on_Watchguard_Firebox#Known_Issues_2
    I haven't seen any reports of problems after applying that.

    The four ports on the left are using the sk driver and do not have any known issues. You are correct in saying that they are slower than the msk ports though. This is because they are connected via a single pci bus where as the msk ports are pci-express.

    Steve



  • Hello guys,

    yesterday I finally be able to boot pfsense 2.1 on a HDD on my x750e.

    Following some configuration issue under pfsense, I decide to restart from the beginning and I select the option that permit to restore the firewall to the original configuration.

    But since this, I could not connect to the console using the following settings : 9600 8N1 while it's working before the reset. I got weird caracters

    The 9600 settings works well when I boot to the CF card but not to the HDD.

    I could access the bios using the 115200 8N1 settings.

    Thanks for your help?


  • Netgate Administrator

    Did you select the embedded kernel when you installed or did you enable a serial console in the standard kernel?

    The factory default setting in the standard kernel would have disabled the serial console. It looks like what you're seeing there is the result of the wrong serial baud rate. That might be the result of the BIOS redirect code attempting to redirect the VGA console in which case it would be at 115200. I've only ever seen that happen successfully once.

    Steve



  • I select the embedded kernel during the first installation.

    Following your reply I deceided to reinstall pfsense on the HDD .
    Once again I've selected Embedded Kernel and now console connection using 9600 .. settings works again.

    I thinks that the reset option propose through pfsense modify the serial baud rate???

    Another question, each time I boot the x750e, I need to select option 7, enter command "set hw.ata.ata_dma=0" + command "boot" after that, I have to enter command "ufs:/dev/ad1s1a" in order to boot correctly in pfsense.

    Is it possible to automated these step so each time I reboot the appliance I get directly pfsense?

    thanks


  • Netgate Administrator

    What size disk are you using? You shouldn't have to disable dma, that will slow down the box quite a bit. Have you read this: https://doc.pfsense.org/index.php/PfSense_on_Watchguard_Firebox#Booting_from_HD_3

    You can automate both those things if you have to. Add the dma command to /boot/loader.conf.local. Create that file. Edit /etc/fstab to change the location of root and swap.

    Steve



  • The HDD is a Toshiba 40 Go . If I don't enter the dma command, pfsense won't boot up. I only got a lot of DMA error like ad0 : DMA_ERROR…..same for ad1.

    I found the edit file section under pfsense and added the command. I will reboot it to test if it's working.

    I also installed WGXEPC to reduce FAN noise. works great.

    I also enabling speedstep command, is there a way to measure idle power consumption?

    thanks


  • Netgate Administrator

    Hmm, odd. Do you still have the cf card in? Did you try booting in verbose mode?

    There's no way of measuring the consumption from the box. I used a plugtop style power meter as has eveyone else as far as I know. You should be aware that the standard Celeron CPU doesn't support speed-step so the power savings are minimal.

    Steve



  • CF card still in ( without the HDD won't boot up).

    I've rebooted the box with all the command entered in the loader file and pfsense boot's like a charm.

    I will try to delete dma commande and boot in verbose mode to see what append.

    I also want to reduce the consumption of the box.the pfsense doc talk about PicoPSU.

    Do you know a good model to use?

    thanks



  • Hi Steve,

    thank you for your reply regarding the ethernet ports.

    I encounter one strange problem. I used IGMP proxy under 2.01 without any problems on  the right-hand ports.
    When I use one them with 2.1 it isn't working anymore.

    Was there a change in the driver?

    Matthias


  • Netgate Administrator

    @yahway69:

    I also want to reduce the consumption of the box.the pfsense doc talk about PicoPSU.

    Do you know a good model to use?

    The box doesn't use more than 50W so any model PicoPSU should work. I think my own dc-dc board is rated at 90W, it's also a wide input model that allows me to power it from both any old laptop power brick or a battery.

    You will need to swap out the psu to take full advantage though. Choose a low speed 400MHz fsb model.

    Steve


  • Netgate Administrator

    @power_matz:

    Was there a change in the driver?

    Which driver? There probably was whichever driver you mean, there were a lot if changes between 2.0.X and 2.1.

    What are you using the igmp proxy for? What's not working? I may not be able to help much as don't use it myself.

    Steve



  • I mean the driver for the right hand ethernet ports, of course.
    I am using IGMP for IPTV multicasting. Under 2.0 these port worked (in conjunction with bridging) perfect. Under 2.1 the picture is freezing some sec then staring again. Also the media receiver is getting an new IP via DHCP every 2 secs.



  • @power_matz:

    I mean the driver for the right hand ethernet ports, of course.
    I am using IGMP for IPTV multicasting. Under 2.0 these port worked (in conjunction with bridging) perfect. Under 2.1 the picture is freezing some sec then staring again. Also the media receiver is getting an new IP via DHCP every 2 secs.

    edit= See below-  better explanation than I left.  :)


  • Netgate Administrator

    Ah, sorry I thought you might be refering to the IGMP code.
    Sounds like the interface is flapping which is a known issue when bridging is involved with some drivers. Try this fix:
    http://forum.pfsense.org/index.php/topic,66908.msg367991.html#msg367991

    Steve

    Edit: Dammit typed too slow.  ::)



  • Hi chpalmer and steve,

    thank you. That solved the problem.  :D
    I was thinking in the wrong direction so.

    Matthias



  • Hi,

    I am trying to flash a x550e with the firmware x750eb7 and then FreeDOS2.img. The Firebox isn't booting with the CF Card (256 MB).

    This should work or I am wrong? The hardware is the same (only the ethernet ports on the right side are missing)!?

    Matthias


  • Netgate Administrator

    Yes this should work as you say. The board is identical. Some 256MB cards seem to give trouble, the card geometry might be on the edge of what works, I'm not sure. Is this the same card you used for flashing the X750e?
    Try reseting the cmos with the new card in place.

    Steve



  • Hey guys!  Long time no talk to!  My Pfsense Firebox has been rock solid.    Now that 2.1  is out and I almost have some free time I am planning on installing the new version.      You guys think an upgrade will take care of it or do you think I need to reinstall everything from scratch again?

    I'd like to retain all my logs if at all possible with the new version.  Where are those located in the path?


  • Netgate Administrator

    I upgraded my boxes. The only one I had any trouble with was one that had low RAM, 256MB.
    If you're running Nano then the upgrade is pretty much a new install anyway.
    The logs are in /var/log. Not sure you can just copy them across though, I've never tried. Really you should use a syslog server if you want to keep logs long term.

    Steve