Do you have ever tried to put a Mikrotik in front of a Cisco Catalyst SDWAN Router in NAT Mode ? It seems it is not already easy to make it works with a simple :

/ip firewall nat
add action=masquerade chain=srcnat out-interface=PPP src-address=10.0.0.0/29

Same for :

/ip firewall nat
add action=src-nat chain=srcnat out-interface=PPP src-address=10.0.0.0/29 to-addresses=<IP_ADDRESS>

Replace with a Cisco with a simple nat overload and it works perfectly. So ? what ? It seems Mikrotik and Cisco is not working with NAT is the same way and it making DTLS and BFD Cisco SDWAN failing. The way I found to do it is as :

To be true with you, I don’t have had enought time to go on my previous try to make it run FreeBSD on my Macbook-Pro mid-2010. I need to go on more quickly than I thought. Due to the fact, my company give me the opportunity to study for CCIE Service Provider by means of NIL Project 525, probably in may or next october, I need to have a quick new study laptop. Though I have choosen to stop there with FreeBSD for now, and use Linux Mint which seems more convinient and quick for me to set it up.
I have used and installed lot of BSD, Linux on this MAC without really good stability. I have been amazed by simplicy and all works quickly without any problem. You need to install Broadcom-DKMS drivers for WiFi card but works well. Although, first update has gone there with Linux Kernel 6.17 version. And you have failures to install it and some problem with deb dependencies. Thanks to reddit forums you can solve it with :

My last tries to make work bwn driver on FreeBSD 14.3p5 give tips :

1. Have /usr/src sources (thank you captain obvious

If you have intalled as me without sources :

git clone -b stable/14 --depth 1 https://git.freebsd.org/src.git /usr/src

2. Make a custom kernel with bwn

cp /usr/src/sys/amd64/conf/GENERIC /usr/src/sys/amd64/conf/BWN

Edit with your prefered editor ‘/usr/src/sys/amd64/conf/BWN’ and find :

#device         bwn                     # Broadcom BCM43xx wireless NICs.

And uncomment it. Add :

option BWN_DEBUG
option BWN_GPL_PHY

3. Check modules Makefile

Check it is as :

During some stuff to make work my bwn driver working on my MacBookPro7,1 with FreeBSD 14.3-p5, I see that : FreeBSD 15.0-RELEASE is out :) Have fun guys… Probably kernel is able to build bwn with options BWN_DEBUG and BWN_GPL_PHY without hiting this bug, I will try soon.

See you

–Christophe

Hi guys, Beginning of my working stuff on trying to make work WiFi on FreeBSD-14.3p5 with MacBookPro7,1 (mid-2010)(I know it is old). I am trying to make a reborn of this laptop for my future CCIE SP journey (next year (thanks to Linkt). For now it is not working well, due to a bug.

More information in next future.

Christophe

Hi guys and girls, I am so sorry for this long time. It was really awesome how Alpine Linux is. I have tried in my home lab to make some different ntp server on my different vm on different proxmox hypervisors. I have tried OpenNTPd. Unfortunately I was not able to make it works. My Cisco switches cry with :

.Apr 16 21:56:47.016: NTP: rcv packet from 10.20.0.3 to 10.20.0.252 on Vlan200:
.Apr 16 21:56:47.016:  leap 3, mode 2, version 3, stratum 2, ppoll 64
.Apr 16 21:56:47.016:  rtdel 0328 (12.329), rtdsp 0000 (0.000), refid 5242284F (82.66.40.79)
.Apr 16 21:56:47.016:  ref EBAA89A0.323EAFFF (21:55:12.196 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  org EBAA89FF.049EF92D (21:56:47.018 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  rec EBAA89FD.D3E977FF (21:56:45.827 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  xmt EBAA89FD.D3E9C7FF (21:56:45.827 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016:  inp EBAA89FF.056B27F5 (21:56:47.021 CET Wed Apr 16 2025)
.Apr 16 21:56:47.016: NTP: packet from 10.20.0.3 failed validity tests 20
.Apr 16 21:56:47.016: Peer/Server Clock unsynchronized

And :

You probably already have this warning and think you have correctly installed php8.X-imagick. You check lot of times, but don’t search how to remove it.

Try this :

# apt-get install libmagickcore-6.q16-6-extra

$ whois -h whois.ripe.net POEM-RIPE55-SONG
[...]

% Information related to 'POEM-RIPE55-SONG'

poem: POEM-RIPE55-SONG
form: FORM-PROSE
descr: At his first RIPE meeting, Gary wrote this and performed at
descr: the closing plenary. It was truly awesome.
descr: http://www.youtube.com/watch?v=_y36fG2Oba0
descr:
text: A long long time ago
text: I can still remember
text: when my laptop could connect elsewhere.
text:
text: And I tell you all there was a day
text: the network card I threw away
text: had a purpose - and it worked for you and me.
text:
text: But 18 years completely wasted
text: with each address we've aggregated
text: the tables overflowing
text: the traffic just stopped flowing...
text:
text: And now we're bearing all the scars
text: and all my traceroutes showing stars.
text: The packets would travel faster in cars
text: the day the routers died.
[... continued ...]

1. To be able to correct “Too many redirection” 

Add this code to the backend pool. Services -> HAProxy -> Settings -> Virtual Service -> Backend Pools -> your backend pool -> Edit -> Advanced Mode -> Option pass-through:

#force SSL redirect redirect scheme https if !{ ssl_fc } # close open connections option http-server-close # add X-FORWARDED-FOR option forwardfor # add X-Forwarded-Proto http-request set-header X-Forwarded-Proto https if { ssl_fc }

If you need to use ACME plugin to register certificate (by using nsupdate (RFC2136)), you could be faced on the problem below

Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: signer "opnsense" approved
Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: updating zone 'clucas.fr/IN': adding an RR at '_acme-challenge.cloud-home.clucas.fr' TXT "-_UEEMEIYvUxwoHWhBbdxiSzil62dgNoHCBfZJCzIiE"
Nov  6 07:58:24 Sagitarius named[121]: /etc/bind/clucas.fr.zone.jnl: create: permission denied
Nov  6 07:58:24 Sagitarius named[121]: client @0x7f68640c70d0 10.20.3.1#50544/key opnsense: updating zone 'clucas.fr/IN': error: journal open failed: unexpected error

You can try to ’touch’ this file, here “clucas.fr.zone.jnl”. Even if you change owner, permission (even 777), you will not ble able to make it work. You will be face this time on :