Messages

Honestly I find the texts harder to read now, I don't know if it's the font itself or the small size of it.

Nur um ein paar Informationen hinzuzufügen: Es handelt sich wohl um einen Intel Ethernet Server Adapter I340-T4 bzw. PRO/1000 PT, entsprechend dann ein Intel 82580 oder 82571 Controller-Chipsatz. Werden beide offiziell vom em(4) Treiber unterstützt.

https://man.freebsd.org/cgi/man.cgi?em(4)
https://www.reddit.com/r/PFSENSE/comments/juvvu4/conflicting_chip_info_on_intel_hp_nc365t_vs/

Letzterer ist aber deutlich älter und könnte für ein Hardware-Problem sprechen.

https://www.intel.de/content/www/de/de/products/sku/41280/intel-82580eb-gigabit-ethernet-controller/specifications.html
https://www.intel.de/content/www/de/de/products/sku/20720/intel-82571eb-gigabit-ethernet-controller/specifications.html

Hello everyone,

I just noticed high inblock packet counts on LAN interfaces which just act as parent interfaces for VLAN interfaces.

How can these high packet numbers be explained, are they originating from the attached switch?

130-200m seem to be a lot of packets per second.

I know the underlying real physical interface of a VLAN does not have to be enabled for a VLAN to be working but I had problems with a WiFi controller and enabling the interface solved it.

The LAN interfaces have the configuration type "none". What would fix these high packet counts without disabling the underlying LAN interfaces?

For comparison I'll show the packet counts of a normal active "Static IPv4" LAN interface vs. a passive LAN interface.

There is a new BIOS/BMC bundle containing:

BIOS: 2.1 (09/11/2024)
BMC: 04.02 (06/27/2024) - unchanged
Supermicro Update Manager (SUM): V2.14.0-p8 (09/04/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

The RTL8111 is supported by both the standard and vendor driver:

https://man.freebsd.org/cgi/man.cgi?query=re
https://www.freshports.org/net/realtek-re-kmod/

The RTL8125 seeems only to be supported by the latter.

You can install the vendor driver as a plugin (os-realtek-re) in OPNsense:

https://docs.opnsense.org/support.html#list-of-available-community-plugins

There is a new BIOS/BMC bundle containing:

BIOS: 2.0 (03/08/2024) - unchanged
BMC: 04.02 (06/27/2024)
Supermicro Update Manager (SUM): V2.14.0-p4 (05/22/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

Wieso machst du nicht erstmal ein Update auf die neueste Version 24.1.9_4 und schaust ob die Probleme dann noch da sind?

Try adding the tunable

Code Select Expand

if_ixgbe_load="YES"

to "System: Settings: Tunables" in the GUI or in the shell via "/boot/loader.conf.local".

You might also need to add

Code Select Expand

hw.ix.unsupported_sfp=1

Sources:
https://forums.freebsd.org/threads/intel-sfp-card-not-compatible.85348/
https://www.reddit.com/r/opnsense/comments/1biw7ht/pulling_my_hair_out_trying_to_figure_out_how_to/

Just look at this table from the I210 datasheet and the ranks are:

• I350
• I210
• I211
• 82574

There is a new BIOS/BMC bundle containing:

BIOS: 2.0 (03/08/2024)
BMC: 04.01 (12/15/2023)
Supermicro Update Manager (SUM): V2.14.0 (02/15/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

Is it possible that OPNsense uses the WireGuard Go implementation while pfSense is using the WireGuard Kernel implementation?

https://github.com/opnsense/ports/tree/master/net/wireguard-go

See also: https://www.netgate.com/blog/wireguard-in-pfsense-2-5-performance

The TP-Link TX201 has a Realtek RTL8125 controller. It was worth a try but obviously it wasn't the cause.

There is no communication between OPNsense and this LED, red is probably the default state.

Somebody would need to write a plugin for the status LED to work.

See also this thread: https://www.reddit.com/r/opnsense/comments/193imr6/opnsense_on_a_sophos_xg115v3_status_led_questions/

I'm curious if it can handle full-duplex Gigabit connections. Based on the technical details it should be very close.

hEX (S): 1,972.2 Mbps for large packets / 1,817.4 Mbps for medium packets / 532.0 Mbps for small packets

To be safe you could also use the bigger model hAP ax² and turn off the WiFi.

hAP ax²: 2630.4 Mbps for large packets / 2422.8 Mbps for medium packets / 743.2 Mbps for small packets

We would need more information to make a guess.

What is your location?

What is the VPN server location?

Which VPN software are you using?