Netgate SG-1000 microFirewall

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - stephenw10

Pages: [1] 2 3 4 5 ... 829
1
General Questions / Re: Pfsense <-> solaredge
« on: January 15, 2018, 06:29:39 am »
If you're still having this issue I would go back to a very basic setup. No pfBlocker, no other packages. Check again. One of those things must be causing this problem.

Steve

2
Hardware / Re: Watchguard XTM 5 Series
« on: January 14, 2018, 06:04:10 pm »
If it shows anything then the display is probably fine. If you kill the lcdproc service in Status > Services do you see the goodbye message from the daemon?

If so it's the client not passing the various displays to the daemon correctly. Check the client settings in the package.

Steve

3
Hardware / Re: Is it possible to control fans in pfense ?
« on: January 11, 2018, 10:54:17 am »
Does the BIOS temperature reading agree with that coretemp is showing? It can report incorrectly if it doesn't have the correct TJmax value for that CPU.

Steve

4
The imported kernel module will be specific to that version. It probably won't work in 11.2 for example. We won't have tested anything against it so there's no guarantees that any pfSense update won't break it.

Really you should wait for support to be included in the release. Certainly before deploying it in any critical application in my opinion.

Steve

5
PPPoE will be limiting, you only get one thread doing anything. But on a Core2Duo you only have two cores anyway.

Try running:
Code: [Select]
ifconfig -ato see what the parent NIC is doing.

You might try swapping the WAN and LAN assignments also. One of those NICs/drivers might perform better for PPPoE.

Steve

6
Hardware / Re: Best Low Power Mini-ITX Motherboard for Gigabit Internet
« on: January 10, 2018, 06:16:04 pm »
It depends on packets size, path length, number of steams, encryption type.... many variables but I see around 90Mbps OpenVPN through the SG-3100.

IPSec is a LOT faster due to the hardware crypto being leveraged far better. 300Mbps+ in local testing.

Steve

7
Hardware / Re: Upgrading CPU, what to expect.
« on: January 10, 2018, 04:51:24 pm »
Yes you should be able to do that without re-installing. Though if you did you could just import your config again and be up and running in no time.

The NIC restriction is to keep the same type of NICs. So that if you have em0 assigned as WAN there will still be an em0 interface in the new hardware. If you changed the NICs to hardware that uses a different driver, igb0 for example, you would need to re-assign them at the command line at first boot.

Steve

8
Official pfSense Hardware / Re: Upgrade storage on sg3100
« on: January 10, 2018, 11:19:47 am »
Nice right up.  :)

However I would definitely recommend installing directly to the SSD rather than trying to run across two disks.

The fstab may be overwritten at update and you can't be sure how things might behave if/when that happens.

Steve

9
Hardware / Re: Is it possible to control fans in pfense ?
« on: January 10, 2018, 09:02:59 am »
Hmm, it does seem hotter than I might have expected for that CPU but not to a dangerous level.

The only temp limits I can find for that cpu is Tcase which is at the heat spreader which is always going to be cooler than the core. Seems to be 73C. So 54C at the core is well below that.

It might be possible to set the fan control values if it's a 3 or 4 wire controlled fan but it would probably require some coding and poking about.

Steve

10
Hardware / Re: Is it possible to control fans in pfense ?
« on: January 10, 2018, 07:37:16 am »
What CPU is it? How are you measuring that temperature?

54C does not seem particularly high for many CPUs.

Steve

11
Official pfSense Hardware / Re: SG-3100 - which cellular module
« on: January 10, 2018, 07:33:43 am »
Pretty sure you're limited to 3.5G over PPP. What speeds are you seeing?

I was looking at that OpenBSD driver too, looks ideal! BUt as you say it's not ported to FreeBSD not could I find any evidence of anyone currently porting it. Unfortunately it's beyond my coding skills  :(

Looking at the EM7455 it really looks like it might support other USB compositions. Some of Sierras other embedded devices built on the same or similar hardware do support two AT ports as well as other usb Ethernet type connections. It looks like the AT command is limiting what is allowed there. It also looks like you should be able to set muliple USB compositions by setting a different config index but only index 1 is allowed. And there are config types 2 and 3 defined (3 being rndis) but they are also not possible to set and I could find nothing documented.

Steve

12
Official pfSense Hardware / Re: SG 3100 Interface MAC Address
« on: January 09, 2018, 04:45:32 pm »
Bit late but...

The MAC of traffic from the LAN ports will by the LAN interface MAC, mvneta1.

Whilst I think you could technically configure on of the switch ports as a mirror port we don't currently have any way to set the in the GUI.
It is possible to configure a bridge and set a span port to mirror the bridge traffic. That does incur a performance penalty though.

Steve

13
Hardware / Re: Best Low Power Mini-ITX Motherboard for Gigabit Internet
« on: January 09, 2018, 04:23:26 pm »
What VPN performance do you need?

Steve

14
The drivers were not in 11.1 release which is what we build on so until they are included in our base we may not get them.

You can build the kernel module yourself as explained by EditioN above. To load it at boot time just create the file /boot/loader.conf.local and then put in that file:
Code: [Select]
if_ix_load="YES"
Steve

15
Hardware / Re: I2C controller on PC engines APU2C4
« on: January 09, 2018, 11:06:04 am »
It seems like you might need to load a driver if you want to use the existing tools, rather than talking to the device directly.

Code: [Select]
[2.3.5-RELEASE][admin@apu.stevew.lan]/dev: kldstat
Id Refs Address    Size     Name
 1   15 0xc0400000 1e6efd4  kernel
 2    1 0xca501000 3000     amdsmb.ko
 3    2 0xc9805000 2000     smbus.ko
 4    1 0xc9e92000 3000     iic.ko
 5    3 0xc9f7e000 4000     iicbus.ko
 6    1 0xca637000 3000     iicsmb.ko
 7    1 0xca63b000 4000     iicbb.ko
[2.3.5-RELEASE][admin@apu.stevew.lan]/dev: i2c -s -v
dev: /dev/iic0, addr: 0x140e7580, r/w: r, offset: 0x00, width: 8, count: 1
Error opening I2C controller (/dev/iic0) for scanning: No such file or directory

Steve

Pages: [1] 2 3 4 5 ... 829