Using pfSense with a L3 core switch

[ddaenen1]

Well, i went back to Cloudflare and am sticking to it now. I don't want to sacrifice access to the web for more security than i already have.

 

[coxhaus]

I bought a new Dell PC 14th gen 7020 so I think I am going to use my Dell PC gen 8 now for Pfsense. I also ordered an Intel X540-T2 10gig NIC to start using my 10gig Cisco layer3 switch.

I am going to load Pfsense 2.7.2 CE and see how it runs.

I will keep my current Pfsense Dell gen 6 as my back up. It has a 35-watt CPU, i3-6100T. Nice and low power draw.

I think now that I have 10gig I will build some high speed VLANs or 1 high speed core VLAN for the network without wireless on them which slows the VLAN down. I need some core restructuring. I will push wireless off the core into outer VLANs. I will see what I can come up with.

 

[Christos]

I am going to load Pfsense 2.7.2 CE and see how it runs.

Opnsense just released this week a major update with BSD 14 (moving from BSD 13), maybe it is a good chance to give it a try.

 

[coxhaus]

Opnsense just released this week a major update with BSD 14 (moving from BSD 13), maybe it is a good chance to give it a try.

I think that is a good thing for Opnsense. I would rather use the 10gig NIC drivers out of FreeBSD 15 so I will be staying with Pfsense.

 

[sfx2000]

Opnsense just released this week a major update with BSD 14 (moving from BSD 13), maybe it is a good chance to give it a try.

I've been thinking about opnSense recently as I recently acquired a box that would be well suited for it...

Lanner NCA-1515A - it's an 8-core Intel Denverton chipset (C3758) with 16GB DDR-3200 and a 64GB nvme SSD... as a plus it has 4G-LTE support and a 802.11ac add-in card - yes, and it has a BMC/ILOM card and interface.

More info here...

There was a VAR that had a number of configured boxes for sale on eBay, but sold out fairly quickly...

 

[coxhaus]

I looked at one of these the other day to run Pfsense on. It does not run hot and it is completely quiet. I decided to go 10gig instead.

 

[sfx2000]

I looked at one of these the other day to run Pfsense on

Because Red China?

Lanner is over in Taiwan...

 

[coxhaus]

Yea, AT&T has drilled my yard for fiber. So, I am waiting for specs. I hope I can run a fiber card and tie in my pfsense into it. Any idea on what type of fiber card I will need? I assume single mode but what speed?

I am not sure how long it will take for the fiber to be operational.

 

[sfx2000]

Yea, AT&T has drilled my yard for fiber

Well, it could be worse, our local Gas/Electric company has to replace the local distribution lines for Natural Gas - apparently there is an issue with the old pipes, so they have to replace them... Since July (2024) they have been digging up our streets, jack hammering sidewalks and driveways up to the demarc at each how on that link - crazy stuff, and the total cost is about $1M USD a mile for the work, start to finish...

Concern here is that once all that work is finished, and they redo the roads, ATT will want to extend their Fiber network into our sub-division - doing more trenching and digging up crap, as this is always how it works here somehow...

Funny thing is I'm one block away for 5 gigabit fiber as we are underground, and they are overhead on the telephone poles...

 

[degrub]

Yea, AT&T has drilled my yard for fiber. So, I am waiting for specs. I hope I can run a fiber card and tie in my pfsense into it. Any idea on what type of fiber card I will need? I assume single mode but what speed?

I am not sure how long it will take for the fiber to be operational.

i believe ATT Business will sell you up to 5Gbit. Residential is also up to 5 Gbit last i saw, depending on where you are.

They terminate fiber either directly in the modem/router or to an ONT. You have to use their ONT/Modem/Router.

Get the Fastest Fiber Optic Internet Service | AT&T Fiber

AT&T Fiber is rated #1 in perceived value. Get the fastest internet plans, including speeds up to 2 GIG & 5 GIG, with no annual contract and no data caps.

www.att.com

i ran a PVC conduit to the utility pole and the tech and i pulled their fiber. 1.5 inch pvc makes it easy.

 

[tiddlywink]

..

 

[ddaenen1]

Yea, AT&T has drilled my yard for fiber. So, I am waiting for specs. I hope I can run a fiber card and tie in my pfsense into it. Any idea on what type of fiber card I will need? I assume single mode but what speed?

I am not sure how long it will take for the fiber to be operational.

Hah, funny. They are cutting open the street here for fiber too as we speak.

 

[coxhaus]

I moved over to pfsense 24.11RC. It was fast with no errors.

I am still waiting for AT&T to light up my fiber running through my front yard. It has been a month.

 

[ddaenen1]

As mentioned in the other thread, i moved back to CE 2.7.2 with the deployment of the new routerbox. Honestly, there is really no difference. OK, you don't get the bootpool option and you don't have the ZFS widget but for the rest, it is all the same. Worked perfectly fine with the config from my old pfSense+ box.