Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - JanW

#1
OK, I resolved the issue (though I wouldn't say I figured it out). There seems to have been an issue with my cable modem (either just the modem or some interaction between it and the firewall). No filter there, the modem is just in router mode, but changing a schedule setting in the modem and rebooting fixed the issue...
#2
22.1 Legacy Series / Some http traffic blocked on 22.4
October 09, 2022, 02:40:53 PM
Relative newbie here. I am running on 22.4 with an extremely simple config, just firewall with mostly default rules. I can access the internet just fine, but have trouble with http sites. Whenever I try to access a http address, I get "Web Site Blocked by Filter". On Linux machines behind my firewall, running an "apt update" fails for http repositories. Also, some websites redirecting domains (like from one TLD to another) don't redirect. I must have activated some option somewhere that blocks this traffic, but I don't know where. How do I go about debugging this? I don't think the packets that get blocked are logged.

When I connect my Linux machine to a vpn, I can connect to http sites just fine (the firewall doesn't get to see what type of traffic is coming in).

Thanks for any help!
JanW


#3
This answer puzzled me, too. In fact, the answer confirms that the device will auto-negotiate down to 1G. The rest of the answer may indicate that the module but must must still be plugged into a 10G (SFP+) port, meaning the device is not made to be plugged into an SFP port. The answer to the question right before the one you cite talks about connection to 2.5G and 5G devices, and confirms that these connections should work "in theory": https://www.fs.com/de/answer-question/70100

I have since installed the SFP-10G-T module into my DEC750. It is recognized right away. The OPNSense interface allows me to choose data rates based on auto-detection, or 10G, 1000 and 100 speeds (to be exhaustive: 100M-SGMII, 100baseTX, 1000Base-SGMII, 1000baseT, 1000baseSX, 1000baseLX, 1000baseCX, 1000Base-KX, 10GBase-SFI, 10Gbase-T, 10GBase-KR).

Even though 5G and 2.5G data rates are not listed, the interface allows to connect just fine to the 2.5GbaseT port of my wifi router in the "auto-detect" setting. So this actually does what I intended it to do.
#4
Sorry, didn't see your response while I was editing my earlier post. I'll go with the FS module and will report back once I have the module and my fiber installed (a few more weeks).
#5
Thanks, @franco, for your reply! Good to hear that there is at least a possibility this may work. I guess I'll have to try :)

EDIT:
Did some more research, and according to a review by servethehome.com (https://www.servethehome.com/sfp-to-10gbase-t-adapter-module-buyers-guide/ ), the Mikrotik module consumes considerably more power than comparable ones. And the generic FS SFP-10G-T module listed as compatible on the DEC750 product page (I think they mean this one: https://www.fs.com/fr/products/74680.html?attribute=113&id=219394 ) seems to also support NBASE-T (so 2.5GBASE-T and 5GBASE-T speeds), according to the Q/A and reviews on that page. So I'll go with that.
#6
Hi all, I recently acquired a DEC750 appliance and would like to connect it to a home fiber box which has a 2.5GBASE-T port (no 10G, sadly). Does anyone know if there is a way to connect the DEC750 to that box at 2.5G speeds, for example using the SFP 2.5GBASE-T module from FS (https://www.fs.com/fr/products/139650.html) or a mutli-speed RJ45 SFP+ module such as the Mikrotik S+RJ10 (rev.2) (https://mikrotik.com/product/s_rj10 )?

I understand that the DEC750 must be able to support 2.5G speeds internally, and I don't know if that's the case? And then it would be a question of SFP/SFP+ module compatibility and drivers.

Any insights or pointers where to look for the relevant info would be greatly appreciated! A quick search in the forums didn't seem to turn up any results.

Thanks!

(edit: fixed botched URL)