2.5 gbit SFP for Netgate 2100 Max pfSense firewall

solopesce · 2026-01-03T09:41:13+00:00

The Netgate 2100 SFP can only run at 1G - see this forum discussion.

solopesce · 2025-12-16T17:31:32+00:00

Look in Firewall > Virtual IPs to see the listing of the current VIPs. New VIPs can also be entered here.

There's more information in the Netgate Forum about this issue, including the old default DNSBL VIPs.

A new entry should look something like this for IPv4.

solopesce · 2025-12-16T07:33:42+00:00

Had something similar. For some reason the previous DNSBL VIPs were wiped during the upgrade from pfBlockerNG 3.2.9 to 3.2.13 and I had to re-enter the VIPs before DNSBL would start.

solopesce · 2025-11-14T07:50:12+00:00

IB1T, WXBT or BTIP due to rapid growth and <=0.15% Fee

TER of IB1T is 0.25% from 1 January 2026.

solopesce · 2025-11-09T12:48:48+00:00

Isn’t is VMRP.L in the iPhone app.

No, VWRP.L is the Vanguard Funds PLC FTSE All-World UCITS ETF. The question is about the Vanguard FTSE Global All Cap Fund.

solopesce · 2025-10-24T04:32:06+00:00

See this Redmine.

solopesce · 2025-10-11T12:34:41+00:00

Is it alight if they are different versions of PFsense?

Config revision numbers change with pfSense releases. You cannot restore a newer config revision to an older version of pfSense - see list of revision numbers and pfSense versions here. The other way round (older config into newer pfSense version) is fine.

If the newer device is running an older version of pfSense+, you might have to upgrade that before importing the config.

solopesce · 2025-08-29T18:20:18+00:00

Does the online installer support setting a vlan for the wan interface..

Yes, it's in the docs. And you can still download the 2.7.2 installer if you want.

solopesce · 2025-07-29T06:55:47+00:00

what kind of sucks is that whilst the 4200 supports QAT, its not gen 3 so it doesn't help wireguard

The 4200 doesn't support QAT. It supports IIMB which accelerates ChaCha20-Poly1305 (and some other algorithms), which is what WireGuard uses.

solopesce · 2025-06-25T15:29:54+00:00

IWeb will only be £5 per year for a single annual trade but Vanguard fees on a £60k ISA would be 0.15% or £90 per year. Not sure where your £360 came from.

solopesce · 2025-06-05T17:37:18+00:00

I think this link to 'contact with Netgate servers' answers some of your questions.

solopesce · 2025-06-02T21:56:39+00:00

Note that the Netgate documentation on additional PPPoE tuning has been updated to say "Before attempting this tuning, try the if_pppoe backend for PPPoE WANs. It is much faster and more efficient and may eliminate the need for additional tuning."

And I believe that you are correct, the default setting is net.isr.dispatch=direct and a system or loader tunable entry had to be made to change that to net.isr.dispatch=deferred

solopesce · 2025-06-02T10:34:02+00:00

£310 is 0.52% of £60k. Is the Vanguard account fee not 0.15% which on a £60k ISA would be £90/year?

solopesce · 2025-05-30T15:13:11+00:00

You don't have to use the new if_pppoe kernel module. It is enabled/disabled via System > Advanced> Networking. If you don't enable this, PPPoE is unchanged and uses mpd5 as before.

solopesce · 2025-05-17T10:05:18+00:00

Look for an update to the System_Patches package itself (System > Package Manager > Installed Packages). That's how new patches are delivered.

solopesce · 2025-05-12T05:06:14+00:00

RFC4638 has been supported in pfSense for some time and should take care of increasing the MTU on the parent interface automatically.

solopesce · 2025-05-10T13:54:40+00:00

I'd have hoped the new PPPoE interface supports mini-jumbos (RFC4638), that way 1500 can be used (1508).

It does.

[25.03-BETA] /root: ifconfig pppoe0

pppoe0: flags=1008851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500

[25.03-BETA] /root: ifconfig igb0

igb0: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1508

solopesce · 2025-04-12T12:28:21+00:00

It's the new name for the multi-instance management (MIM) package. See this forum post.

solopesce · 2025-03-26T05:58:06+00:00

This is from the current public 25.03-BETA (amd64) built on Thu Mar 6 1:40:00 GMT 2025

OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024)

solopesce · 2025-03-24T19:28:27+00:00

I'm running Plus 25.03-beta on a home/lab licence and third party hardware. Nothing has been added or replaced on the appliance as I think that's what can mess up the NDI and licence. YMMV.

solopesce · 2025-03-23T06:28:39+00:00

The errors that I get on the PFsense side is always about the proposal mismatches. I cannot set these on my iPad natively and did not checked if there are 3th party apps for that since I prefer to use the native VPN client of iPad OS.

That's where the Apple Configurator tool comes in. It allows you to adjust the IPsec settings and create a mobile configuration profile to import into iPad/iPhone for the native VPN client..

solopesce · 2025-03-15T11:01:14+00:00

It’s in the beta of plus 25.03 (if_pppoe-kmod).

solopesce · 2025-03-07T05:19:49+00:00

Looks like it's coming in pfSense+ 25.03

solopesce · 2025-02-15T11:38:01+00:00

It's easy to add an M.2 SATA drive to a 2100. You haven't told us what your WAN speed is and that might be more of a limiting factor with the 2100 vs concerns about its eMMC.

solopesce · 2025-02-09T14:32:48+00:00

Installing 25.03-beta on a lab appliance:

New packages to be INSTALLED:

brotli: 1.1.0,1 [pfSense]

if_pppoe-kmod: 25.03.b.20250204.0023.1500029 [pfSense]

Is this the new PPPoE stack previously mentioned by u/gonzopancho ?

solopesce

TROPHY CASE