Recent posts

#1

German - Deutsch / Re: Hardware für 10gbit

Last post by Patrick M. Hausen - Today at 10:15:39 PM

Die Specs von Deciso sprechen von 8.5G Port zu Port.

Ich erwarte von einem Teil mit 2x 10G Interfaces nicht unbedingt volle 10G Durchsatz von einem Client von/zum Internet. Bei mir hängt die DEC750 mit 2x 10G LACP am zentralen Switch. Da der ganze Rest vom Netz 1G ist, reicht das locker, um niemals zum Engpass zu werden, über alle VLANs hin und her.

#2

26.7 Series / Re: Upgrade to 26.7 from 26.1....

Last post by HarveyEllis1 - Today at 10:13:22 PM

OK, but could you post the exact RealTek NIC models then and which driver you are using for them ?

For others who might find this topic via the Forum Search or a random Search Engine and stuff... ;)

The NIC are built into motherboard of a mini PC.

re0: <Realtek PCIe 2.5GbE Family Controller> port 0x4000-0x40ff
(same for re1)

Driver working with Opnsense 26.7.1 is: realtek-re-kmod-1102.01.1500068

I suspect the issue with upgrade from 26.1.11 to 26.7 was related to FreeBsd version 14 (rather than version 15) of the Realtek driver being in place during update process.

I did not have a problem with ISO 26.7 fresh install and had working NICs.

I did notice that RealTek driver was updated when upgrading from OpnSense 26.7 to 26.7.1

As a side note, I use a USB based Ethernet adapter (ASIX AX88179B) to provide access to a management network.
Prior to Opnsense version 26.7 this interface would flap on a rare occasion.
After update to Opnsense 26.7 it flaps constantly, runs out of buffers, and interface becomes inaccessible.
This is a known FreeBSD 15 issue for ASIX AX88179B chip set.

There is a fix for this (force use of CDCE driver) - https://forums.freebsd.org/threads/ugreen-usb-hub-with-ethernet-adapter-asix-ax88179b-quirk.101459/

It works!

#3

26.7 Series / Re: VLAN devices are on LAN IP...

Last post by nero355 - Today at 10:05:39 PM

So... damned if you do, damned if you don't 🤣🤣

Well... you shouldn't... so... you have got a choice... sort of... LOL! ^_^

#4

German - Deutsch / Re: Hardware für 10gbit

Last post by meyergru - Today at 10:03:55 PM

Es stimmt, die 750er hat bei mir auch nur ca. 7 Gbit/s maximal gebracht und dazu musste man schon tunen - ich habe die aber auch nicht empfohlen. Der wesentliche Vorteil ist der niedrige Verbrauch und die passive Kühlung. Spätestens mit IDS ist bei 10 Gbps.

#5

26.7 Series / [SOLVED] Re: mDNS forwarding b...

Last post by sjjh - Today at 09:24:53 PM

Just to report back after user test: today the printer was not visible on the Mac via Airpint and also via avahi-browse I could not see it anymore. But if the printer is rebooted, both works. Not sure if/why the printer sends the mDNS multicast packages only once (or how often it is resend). But I'm willing to assume that this is a quirk of the printer and not of OPNsense.
Thanks again everybody for your support!

A better approach would seem to be using mDNS reflectors.

I'm using a mDNS reflector, as pointed out in my first post. It's the OPNsense os-mdns-repeater plugin. But without the additional firewall rules to allow multicast traffic between the two VLANs it (obviously) does not work.

#6

26.7 Series / Re: No Web_GUI if LAN is DHCP ...

Last post by Patrick M. Hausen - Today at 08:07:26 PM

Did you explicitly bind the UI to the LAN interface only (Listen address) or did you leave that setting at "All (recommended)"?

#7

German - Deutsch / Re: Hardware für 10gbit

Last post by Ferly - Today at 07:52:17 PM

Der Standard bei init7 (Fiber7 10G) ist ne dynamische ipv4 und ne statische ipv6. Dienste liefen einfach, die Standardmaessig aktiviert sind wenn man opnsense frisch installiert.

Will heissen ich habe den Wanport ans init7 Netz gehangen, dann meinen PC an den anderen Fiberport gehangen und los gings. Die Kiste schafft keine 10Gbit.

Das gleiche Spiel habe ich dann mit einem Minisforum MS01 gemacht, da kommst auf Anhieb auf die 10Gbit.

Ich hab das Teil noch hier liegen. Kannst gern haben und selbst testen.

#8

26.7 Series / Re: No Web_GUI if LAN is DHCP ...

Last post by lmoore - Today at 07:13:06 PM

But still, it should also work with a DHCP address on that interface

I've set up a test system to trial the upgrade from 26.1 to 26.7.

For the purpose of testing, I set the LAN interface to use DHCPv4 - I have an IPv4 environment but no BGP.

The Web GUI is available every time OPNsense boots.

If your DHCP server is slow to respond, it may be the interface doesn't have an address when the Web GUI service starts, or, FRR/BGP is in some way affecting it as you wouldn't normally have DHCP assigned addresses on the internal interfaces of a router.

#9

Virtual private networks / Re: Self signed Certificate re...

Last post by zuma48 - Today at 06:29:07 PM

Thank you, Patrick.

#10

26.7 Series / Re: Asking for Sanity Check be...

Last post by lmoore - Today at 06:04:55 PM

and then run
Code Select Expand
Code Select Expand

Code Select Expand

gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 2 ada0to update the BIOS bootloader (with "nda0" in the original post changed to "ada0" for my setup).

I tried this on my test system and updated the boot loader and bootcode.

I then moved the HDD & NIC's over to a much older computer and it booted successfully.

I changed the BIOS to Legacy mode and it booted just fine.

It's good to known in the event of a failed system, I can move the HDD to an older machine and be up and running again :)