Messages

I have done some tests connecting an interface to an unused network switch.
When the switch and firewall are set to auto negotiation everything is fine.
As soon as you set the interface to fixed to 100 Mbit for the switch and firewall the interface stays down.
When you leave the equipment set to auto, and only advertise 10Mbit on the network switch the firewall works.
However changing the network switch to allow voor 100Mbit the interface on the firewall stays on 10Mbit.

It looks like something is not working correctly in the driver, which was not a problem in the 22.1 version.

Can somebody from the OPNsense project give more insight on the changes regarding the Intel network interfaces? Or is it something that is a problem in FreeBSD itself?

Hello Wuwzy and other OPNsense forum members,

In our office we have been running 22.1 for over a year connected to our ISP.
The ISP has fixed the internet connection to 100Mbit Full Duplex and auto negotiation is disabled.
So we had the WAN Intel NIC set to 100Mbit Full Duplex.

After upgrading to 22.7.4 the WAN connection is lost.

I changed the configuration of the WAN interface to default, the internet connection is up again, but with packet loss. As the OPNsense box will try to auto negotiate but fails and will fall back to 100Mbit Half Duplex, while the ISP is configured to 100Mbit Full Duplex.

Clearly this is something that is broken in the upgrade between 22.1 and 22.7.1. And upgrading to 22.7.4 did not solve the issue.

The devices used in this firewall are:

igb0@pci0:1:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet
igb1@pci0:2:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet
igb2@pci0:3:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet
igb3@pci0:4:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet
igb4@pci0:5:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet
igb5@pci0:6:0:0:        class=0x020000 rev=0x03 hdr=0x00 vendor=0x8086 device=0x1539 subvendor=0x8086 subdevice=0x0000
    vendor     = 'Intel Corporation'
    device     = 'I211 Gigabit Network Connection'
    class      = network
    subclass   = ethernet

These devices are onboard and cannot be swapped.

Please let me know if you need more information. Currently i do not know what more useful information to share, but please let me know.

To wuwzy, you can check the network interface type via the commandline when you ssh into the device.
pciconf -lv