Installing pfSense on the T8Pro
Posted: Mon Jan 09, 2023 10:37 pm
As I mentioned in other posts, I wanted to try pfSense on the T8Pro, since it comes with dual NICs, and is so small that it seems to be a perfect fit for the OS. I'm posting this for my own reference (in case I ever want to do this again) and as help for anyone else who might want to try.
I noticed on an Amazon review that somebody complained about the T8Pro coming with Realtek NICs, which are known for stability issues with FreeBSD's default drivers in pfsense. I went into this project having some warning that I would want to research that, and I found a few sites that talk about how to update the drivers: https://www.ismoothblog.com/2021/02/off ... sense.html and https://forum.netgate.com/topic/169896/ ... se-2-6-0/7 were the main ones, although I had to do some other manual steps to get it working.
So, download the pfsense ISO from here: https://www.pfsense.org/download/ - I grabbed the AMD64 DVD ISO for 2.6.0 (latest of of today), and used Rufus to copy it to a USB drive. Boot the T8pro into BIOS (spam that DEL key) and choose to boot from the USB drive.
Install was pretty easy, just accept most of the defaults and overwrite the drive. That's why I purchased a secondary 2242 NVMe drive, so I could go back to the default Windows install when I want.
Boot pfsense, make sure it has a valid network connection. I used a single NIC on the LAN, and had to configure the gateway to direct traffic out, so I could download packages and updates (Interfaces > LAN - IPv4 Upstream gateway). I also had to manually set up SSH (System > Advanced - Secure Shell). That's necessary to access the shell to edit config files and download packages.
The ismoothblog post didn't mention having to enable FreeBSD repos, so I found those steps (https://forum.netgate.com/topic/98082/2 ... sitories/8):
I did a reboot to verify it was working, and the "kldstat" command to show me that it's using the correct drivers, and things seem pretty happy right now.
Additional note, running "pciconf -lv" lets you see what hardware is in the system, but it doesn't tell you which drivers are in use.
Although pciconf can see the Reaktek RTL8821CE wireless adapter, so far I haven't found a driver that lets me use it. Not too surprising, as pfsense is normally used in wired environments, but I'll keep checking.
I noticed on an Amazon review that somebody complained about the T8Pro coming with Realtek NICs, which are known for stability issues with FreeBSD's default drivers in pfsense. I went into this project having some warning that I would want to research that, and I found a few sites that talk about how to update the drivers: https://www.ismoothblog.com/2021/02/off ... sense.html and https://forum.netgate.com/topic/169896/ ... se-2-6-0/7 were the main ones, although I had to do some other manual steps to get it working.
So, download the pfsense ISO from here: https://www.pfsense.org/download/ - I grabbed the AMD64 DVD ISO for 2.6.0 (latest of of today), and used Rufus to copy it to a USB drive. Boot the T8pro into BIOS (spam that DEL key) and choose to boot from the USB drive.
Install was pretty easy, just accept most of the defaults and overwrite the drive. That's why I purchased a secondary 2242 NVMe drive, so I could go back to the default Windows install when I want.
Boot pfsense, make sure it has a valid network connection. I used a single NIC on the LAN, and had to configure the gateway to direct traffic out, so I could download packages and updates (Interfaces > LAN - IPv4 Upstream gateway). I also had to manually set up SSH (System > Advanced - Secure Shell). That's necessary to access the shell to edit config files and download packages.
The ismoothblog post didn't mention having to enable FreeBSD repos, so I found those steps (https://forum.netgate.com/topic/98082/2 ... sitories/8):
- Make sure "enabled" key is set to "yes" in /etc/pkg/FreeBSD.conf
- Change "enabled: no" to "enabled: yes" in /usr/local/etc/pkg/repos/FreeBSD.conf
- Change "enabled: no" to "enabled: yes" in /usr/local/etc/pkg/repos/pfSense.conf for FreeBSD repo
Code: Select all
if_re_load="YES"
if_re_name="/boot/modules/if_re.ko"
Additional note, running "pciconf -lv" lets you see what hardware is in the system, but it doesn't tell you which drivers are in use.
Although pciconf can see the Reaktek RTL8821CE wireless adapter, so far I haven't found a driver that lets me use it. Not too surprising, as pfsense is normally used in wired environments, but I'll keep checking.