Messages

1

German - Deutsch / Re: OPNsense verbindungs Issues

« on: November 21, 2024, 11:40:52 am »

Nur um ein paar Informationen hinzuzufügen: Es handelt sich wohl um einen Intel Ethernet Server Adapter I340-T4 bzw. PRO/1000 PT, entsprechend dann ein Intel 82580 oder 82571 Controller-Chipsatz. Werden beide offiziell vom em(4) Treiber unterstützt.

https://man.freebsd.org/cgi/man.cgi?em(4)
https://www.reddit.com/r/PFSENSE/comments/juvvu4/conflicting_chip_info_on_intel_hp_nc365t_vs/

Letzterer ist aber deutlich älter und könnte für ein Hardware-Problem sprechen.

https://www.intel.de/content/www/de/de/products/sku/41280/intel-82580eb-gigabit-ethernet-controller/specifications.html
https://www.intel.de/content/www/de/de/products/sku/20720/intel-82571eb-gigabit-ethernet-controller/specifications.html

2

General Discussion / High inblock packet count on passive LAN interfaces

« on: November 20, 2024, 04:02:17 pm »

Hello everyone,

I just noticed high inblock packet counts on LAN interfaces which just act as parent interfaces for VLAN interfaces.

How can these high packet numbers be explained, are they originating from the attached switch?

130-200m seem to be a lot of packets per second.

I know the underlying real physical interface of a VLAN does not have to be enabled for a VLAN to be working but I had problems with a WiFi controller and enabling the interface solved it.

The LAN interfaces have the configuration type "none". What would fix these high packet counts without disabling the underlying LAN interfaces?

For comparison I'll show the packet counts of a normal active "Static IPv4" LAN interface vs. a passive LAN interface.

3

24.1 Legacy Series / Re: GeoIP database not updating in opnsense-business

« on: November 18, 2024, 11:20:12 am »

To answer my own question, yes it is only updated once an alias was created. 

4

Hardware and Performance / Re: BIOS and BMC firmware for Supermicro A2SDi-4C-HLN4F

« on: November 18, 2024, 07:54:04 am »

There is a new BIOS/BMC bundle containing:

BIOS: 2.1 (09/11/2024)
BMC: 04.02 (06/27/2024) - unchanged
Supermicro Update Manager (SUM): V2.14.0-p8 (09/04/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

5

24.1 Legacy Series / GeoIP database not updating in opnsense-business

« on: November 05, 2024, 01:42:32 pm »

I just noticed our GeoIP database never updated since the beginning. Version is OPNsense 24.4.3-amd64.

Is it only updated if there is actually a rule using a GeoIP alias?

I've not used this feature before but I'm planning to.

Documentation says if the "Url" field in "Firewall: Aliases: GeoIP settings" is empty in the Business Edition it will download the database from the OPNsense servers.

6

Hardware and Performance / Re: [SOLVED] What NICs are good for 1Gbps symetric PPPoE on a virtualized OPNSense

« on: November 01, 2024, 02:02:10 pm »

The RTL8111 is supported by both the standard and vendor driver:

https://man.freebsd.org/cgi/man.cgi?query=re
https://www.freshports.org/net/realtek-re-kmod/

The RTL8125 seeems only to be supported by the latter.

You can install the vendor driver as a plugin (os-realtek-re) in OPNsense:

https://docs.opnsense.org/support.html#list-of-available-community-plugins

7

Hardware and Performance / Re: BIOS and BMC firmware for Supermicro A2SDi-4C-HLN4F

« on: August 22, 2024, 08:21:57 am »

There is a new BIOS/BMC bundle containing:

BIOS: 2.0 (03/08/2024) - unchanged
BMC: 04.02 (06/27/2024)
Supermicro Update Manager (SUM): V2.14.0-p4 (05/22/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

8

German - Deutsch / Re: Kein Internet mehr auf der opnsense selbst nach Update auf 24.1.5

« on: July 29, 2024, 11:36:01 am »

Wieso machst du nicht erstmal ein Update auf die neueste Version 24.1.9_4 und schaust ob die Probleme dann noch da sind?

9

Hardware and Performance / Re: Driver Install for Intel 82599eS NIC (R740(

« on: July 26, 2024, 08:45:47 am »

Try adding the tunable

Code: [Select]

if_ixgbe_load="YES"
to "System: Settings: Tunables" in the GUI or in the shell via "/boot/loader.conf.local".

You might also need to add

Code: [Select]

hw.ix.unsupported_sfp=1
Sources:
https://forums.freebsd.org/threads/intel-sfp-card-not-compatible.85348/
https://www.reddit.com/r/opnsense/comments/1biw7ht/pulling_my_hair_out_trying_to_figure_out_how_to/

10

Hardware and Performance / Re: What NICs are recommended for 1Gbps symetric PPPoE on a virtualized OPNSense

« on: July 09, 2024, 03:58:14 pm »

Just look at this table from the I210 datasheet and the ranks are:

• I350
• I210
• I211
• 82574

11

Hardware and Performance / Re: BIOS and BMC firmware for Supermicro A2SDi-4C-HLN4F

« on: May 07, 2024, 08:22:22 am »

There is a new BIOS/BMC bundle containing:

BIOS: 2.0 (03/08/2024)
BMC: 04.01 (12/15/2023)
Supermicro Update Manager (SUM): V2.14.0 (02/15/2024)

https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-A2SDi-4C-HLN4F/BIOS

12

Hardware and Performance / Re: Wireguard performance 100% faster on pfSense than OPNsense

« on: February 20, 2024, 04:26:02 pm »

Is it possible that OPNsense uses the WireGuard Go implementation while pfSense is using the WireGuard Kernel implementation?

https://github.com/opnsense/ports/tree/master/net/wireguard-go

See also: https://www.netgate.com/blog/wireguard-in-pfsense-2-5-performance

13

Hardware and Performance / Re: Why is download speed 10X faster with VPN?

« on: February 09, 2024, 01:32:10 pm »

The TP-Link TX201 has a Realtek RTL8125 controller. It was worth a try but obviously it wasn't the cause.

14

Hardware and Performance / Re: Sophos SG115 Rev 3 - Status LED

« on: February 06, 2024, 04:10:09 pm »

There is no communication between OPNsense and this LED, red is probably the default state.

Somebody would need to write a plugin for the status LED to work.

See also this thread: https://www.reddit.com/r/opnsense/comments/193imr6/opnsense_on_a_sophos_xg115v3_status_led_questions/

15

Hardware and Performance / Re: PPPoE router

« on: February 06, 2024, 03:55:54 pm »

I'm curious if it can handle full-duplex Gigabit connections. Based on the technical details it should be very close.

hEX (S): 1,972.2 Mbps for large packets / 1,817.4 Mbps for medium packets / 532.0 Mbps for small packets

To be safe you could also use the bigger model hAP ax² and turn off the WiFi.

hAP ax²: 2630.4 Mbps for large packets / 2422.8 Mbps for medium packets / 743.2 Mbps for small packets