Qotom hardware

[tl5k5]

Anyone used Qotom Q310G4 hardware?  https://amzn.to/2JOmGP0
AliExpress:  https://bit.ly/2KtOSrz

Does the WIFI work well?

Thanks!

[tl5k5]

I've reached out to Qotom, and they say the Q310G4 will work with pfsense/FreeBSD.
It's been ordered and I'll reply with what I find after it's configured.

[marjohn56]

It will, several of us use them - however you will probably struggle to get the wifi card to work.

[tl5k5]

Got it working.
I'm not a router expert, so I'm not saying it's right...just working.

Here's what I did.
Port1 (eth0) = WAN
Port2 (eth2) = LAN1
Port3 (eth3) = LAN2
Port4 (eth1) = LAN3
ath0 = WIFI
bridge0 = bridge

LAN1:  official "LAN" connection with static IP. x.x.x.1
LAN2,3, and WIFI are individual interfaces with no IPs.
bridge:  contains LAN1-3 and WIFI.  It has a static IP.  x.x.x.2

DHCP is attached to the bridge since I could not get LAN1 to give addresses across interfaces when it was running DHCP.  Any suggestions?

I think it would be nice to enable a bridge to be the official "LAN" connection and not a physical port.  This way a single interface could handle the anti-lockout rule and DHCP across a bridged network.

I'm willing to take criticism and suggestions.

Thanks!

[marjohn56]

You can, that's how mine is done. I have three physical LAN ports all into the LAN bridge. The LAN bridge contains the IP, not the physical port.

[tl5k5]

I had the exact setup you have above, but the auto generated Anti-Lockout Rule only applies to the original physical LAN that's used for the initial setup.  That was causing me some issues, so I set it up the way I have it now.
Is there a way to set up the Anti-Lockout Rule to apply to the Bridge interface?

Thanks!

[marjohn56]

When you create the bridge, first assign the two unused NICs to the bridge, do not change the the physical NIC port your pc is connected to at that point. Next re-assign the LAN to the bridge interface, you'll appear to lose the connection, at this point you need to connect your physical  LAN cable to one of the two NICs assigned to the bridge, wait about 30 seconds, refresh your browser and you should be back in business, now add the third NIC to your bridge and you are done.

[tl5k5]

Sounds similar to what I've already done.
I'll give it a shot and see how it goes.

Thanks!

[tl5k5]

Some questions:
Is your DHCP on the bridge/LAN or on a igbx port??
If it's on the bridge, what did you do with the original static IP assigned to the igbx port?  Change to none?  What does the firewall rule for that original igbx port look like?

Thanks!

[marjohn56]

It's on the Bridge, all three of my ports go in difference directions and dhcp is available on all of them.

All the OPTx Interfaces should look like this -




There is no IP address, only the Bridge gets that:

[tl5k5]

Ok...I guess I had it 92% there.  I set LAN1 to no IP and all seems to work this time.
Don't really remember what the issues were the first time I tried this.  Do I need to worry about the Anti-Lockout Rule on LAN1?
Everything seems to work as-is, so I guess not.

BTW...how do you apply the dark theme?

Thanks for all the help!!!

[marjohn56]

No need to worry about the lockout, that's on the LAN. The three NICs are bridged, in fact they all now have the same address. If you wish, just swap your main LAN cable between them, you'll find they all work.

There are now two dark themes, Rebellion and Cicada, Rebellion is a fairly simple theme colour change I did, Cicada is more complex and uses the abilities of the themes to a much greater degree - I did NOT do that one.

Go to System->Settings->General. Theme is the fifth item down, select the theme you want and apply it. Depending on the version of Opnsense you are running you may have Cicada available too. In the next release there will be another theme, Tukan - Like Cicada it's also done by René and is very cool.

[tl5k5]

I only have opnsense as a theme. Nothing else is listed.
I'm also running the most current stable release.

[marjohn56]

Have a look under System->Firmware: Plugins.


Look for OS-Theme*


Install the themes then you can select them as I previously said.


Sorry, I forgot you need to install them first. 

[tl5k5]

That was it.  So much easier on my eyes!

Thanks for all the help!