[SOLVED] install pfSense with passthrough 2 NIC doesn't work

[taafedi1]

Hello everyone,
I am currently despairing of an actually simple installation.
the following configuration is required:
pfSense --> passthrough a dedicated NIC for the WAN interface
pfSense --> passthrough a dedicated NIC for the LAN interface

System:
12 x Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz (1 socket)
Mainboard (HP Stuff)
VT-d active
Virtualization active
NICS for passthrough: 2x Aquantia Corp. AQC107 NBase-T/IEEE 802.3bz Ethernet Controller (ASUS)
onboard NIC Intel Corporation Ethernet Connection (7) I219-LM

my boot manager is systemd:
Boot0009* Linux Boot Manager HD(2,GPT,5f1b3a90-cef6-4e0f-af49-fa90b93188ab,0x800,0x100000)/File(\EFI\systemd\systemd-bootx64.efi)....ISPH

accordingly, after the updates of the freshly installed PVE, I added the /proc/cmdline file with
intel_iommu=on and also configured the etc/modules as listed below


root@lab2:~# cat /proc/cmdline initrd=\EFI\proxmox\5.11.22-4-pve\initrd.img-5.11.22-4-pve root=ZFS=rpool/ROOT/pve-1 boot=zfs intel_iommu=on



root@lab2:~# cat /etc/modules # /etc/modules: kernel modules to load at boot time. # # This file contains the names of kernel modules that should be loaded # at boot time, one per line. Lines beginning with "#" are ignored. vfio vfio_iommu_type1 vfio_pci vfio_virqfd

at last everything was written to intiramfs with update-initramfs -u
root@lab2:~# find /sys/kernel/iommu_groups -type l | sort -t '/' -n -k 5 /sys/kernel/iommu_groups/0/devices/0000:00:00.0 /sys/kernel/iommu_groups/1/devices/0000:00:02.0 /sys/kernel/iommu_groups/2/devices/0000:00:12.0 /sys/kernel/iommu_groups/3/devices/0000:00:14.0 /sys/kernel/iommu_groups/3/devices/0000:00:14.2 /sys/kernel/iommu_groups/4/devices/0000:00:16.0 /sys/kernel/iommu_groups/5/devices/0000:00:17.0 /sys/kernel/iommu_groups/6/devices/0000:00:1b.0 /sys/kernel/iommu_groups/7/devices/0000:00:1c.0 /sys/kernel/iommu_groups/8/devices/0000:00:1d.0 /sys/kernel/iommu_groups/9/devices/0000:00:1f.0 /sys/kernel/iommu_groups/9/devices/0000:00:1f.3 /sys/kernel/iommu_groups/9/devices/0000:00:1f.4 /sys/kernel/iommu_groups/9/devices/0000:00:1f.5 /sys/kernel/iommu_groups/9/devices/0000:00:1f.6 /sys/kernel/iommu_groups/10/devices/0000:01:00.0 /sys/kernel/iommu_groups/11/devices/0000:02:00.0 /sys/kernel/iommu_groups/12/devices/0000:03:00.0

root@lab2:~# journalctl -b 0 | grep -i iommu Apr 05 10:13:26 lab2 kernel: Command line: initrd=\EFI\proxmox\5.11.22-4-pve\initrd.img-5.11.22-4-pve root=ZFS=rpool/ROOT/pve-1 boot=zfs intel_iommu=on Apr 05 10:13:26 lab2 kernel: Warning: PCIe ACS overrides enabled; This may allow non-IOMMU protected peer-to-peer DMA Apr 05 10:13:26 lab2 kernel: Kernel command line: initrd=\EFI\proxmox\5.11.22-4-pve\initrd.img-5.11.22-4-pve root=ZFS=rpool/ROOT/pve-1 boot=zfs intel_iommu=on Apr 05 10:13:26 lab2 kernel: DMAR: IOMMU enabled Apr 05 10:13:26 lab2 kernel: DMAR-IR: IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 1 Apr 05 10:13:26 lab2 kernel: iommu: Default domain type: Passthrough (set via kernel command line) Apr 05 10:13:26 lab2 kernel: pci 0000:00:00.0: Adding to iommu group 0 Apr 05 10:13:26 lab2 kernel: pci 0000:00:02.0: Adding to iommu group 1 Apr 05 10:13:26 lab2 kernel: pci 0000:00:12.0: Adding to iommu group 2 Apr 05 10:13:26 lab2 kernel: pci 0000:00:14.0: Adding to iommu group 3 Apr 05 10:13:26 lab2 kernel: pci 0000:00:14.2: Adding to iommu group 3 Apr 05 10:13:26 lab2 kernel: pci 0000:00:16.0: Adding to iommu group 4 Apr 05 10:13:26 lab2 kernel: pci 0000:00:17.0: Adding to iommu group 5 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1b.0: Adding to iommu group 6 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1c.0: Adding to iommu group 7 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1d.0: Adding to iommu group 8 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1f.0: Adding to iommu group 9 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1f.3: Adding to iommu group 9 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1f.4: Adding to iommu group 9 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1f.5: Adding to iommu group 9 Apr 05 10:13:26 lab2 kernel: pci 0000:00:1f.6: Adding to iommu group 9 Apr 05 10:13:26 lab2 kernel: pci 0000:01:00.0: Adding to iommu group 10 Apr 05 10:13:26 lab2 kernel: pci 0000:02:00.0: Adding to iommu group 11 Apr 05 10:13:26 lab2 kernel: pci 0000:03:00.0: Adding to iommu group 12 Apr 05 10:13:26 lab2 kernel: intel_iommu=on

Conclusion:
According to what I understand so far, this is correct and the passthrough should work so far.
To verify this, I set up a VM with Manjaro and the passthrough worked there.

Problem:

as soon as I try the passthrough with a pfSense VM pfSense does not recognize the NIC's. Accordingly I can't do anything after the boot of pfSense and get the error like in the picture below.


What did I do:

first I tried to change the VM settings
Linux kernel from 5.x - 2.6 kernel to Linux kernel 2.4
then separately and in combination
BIOS from SeaBios to UEFI
then separately and in combination
Machine type0 to q35
then separately and in combination all drive types
SCSI, IDE, SATA, etc...
Core always with 8 threads and 1 socket (CPU conditional)
Memory 8096
No Network interface (will passthrough the NIC)
Under Hardware via PCI both NIC's added with various combinations
All Function on and off
ROM-Bar on and off
PCI Expresse (q35) on and off

No improvement

next i created Linux bridges and added them
vmbr1 for WAN
vmbr2 for LAN (just for try)
with this I could finish the installation but pfSense in the dmesg didn't recognize the interfaces after that.

Re-installation from PVE 7.1 latest to PVE 7.0-11
went through everything again, same result.

afterwards I tried several modifications in /proc/cmdline
the configuration below I have tested with adding every single addition and saving with subsequent reboot. I also tested the above VM configurations again and again without success.

root@lab2:~# cat /proc/cmdline initrd=\EFI\proxmox\5.11.22-4-pve\initrd.img-5.11.22-4-pve root=ZFS=rpool/ROOT/pve-1 boot=zfs intel_iommu=on vfio-pci.ids=1d6a:07b1 iommu=pt pcie_acs_override=downstream,multifunction
I have tried everything with both pfSense versions as listed below.

I have of course read through everything in the forums and also followed the instructions in the wiki and carried out. Can it be that there are any limitations with PFSense and this NIC? (is a 10 Gbps card).

Maybe someone can help me ?

 

[taafedi1]

root@lab2:~# for d in /sys/kernel/iommu_groups/*/devices/*; do n=${d#*/iommu_groups/*}; n=${n%%/*}; printf 'IOMMU group %s ' "$n"; lspci -nns "${d##*/}"; done; IOMMU group 0 00:00.0 Host bridge [0600]: Intel Corporation 8th Gen Core Processor Host Bridge/DRAM Registers [8086:3ec2] (rev 07) IOMMU group 10 01:00.0 Non-Volatile memory controller [0108]: Samsung Electronics Co Ltd NVMe SSD Controller SM981/PM981/PM983 [144d:a808] IOMMU group 11 02:00.0 Ethernet controller [0200]: Aquantia Corp. AQC107 NBase-T/IEEE 802.3bz Ethernet controller [AQtion] [1d6a:07b1] (rev 02) IOMMU group 12 03:00.0 Ethernet controller [0200]: Aquantia Corp. AQC107 NBase-T/IEEE 802.3bz Ethernet controller [AQtion] [1d6a:07b1] (rev 02) IOMMU group 1 00:02.0 VGA compatible controller [0300]: Intel Corporation CometLake-S GT2 [UHD Graphics 630] [8086:3e92] IOMMU group 2 00:12.0 Signal processing controller [1180]: Intel Corporation Cannon Lake PCH Thermal Controller [8086:a379] (rev 10) IOMMU group 3 00:14.0 USB controller [0c03]: Intel Corporation Cannon Lake PCH USB 3.1 xHCI Host Controller [8086:a36d] (rev 10) IOMMU group 3 00:14.2 RAM memory [0500]: Intel Corporation Cannon Lake PCH Shared SRAM [8086:a36f] (rev 10) IOMMU group 4 00:16.0 Communication controller [0780]: Intel Corporation Cannon Lake PCH HECI Controller [8086:a360] (rev 10) IOMMU group 5 00:17.0 SATA controller [0106]: Intel Corporation Cannon Lake PCH SATA AHCI controller [8086:a352] (rev 10) IOMMU group 6 00:1b.0 PCI bridge [0604]: Intel Corporation Cannon Lake PCH PCI Express Root Port #21 [8086:a32c] (rev f0) IOMMU group 7 00:1c.0 PCI bridge [0604]: Intel Corporation Cannon Lake PCH PCI Express Root Port #7 [8086:a33e] (rev f0) IOMMU group 8 00:1d.0 PCI bridge [0604]: Intel Corporation Cannon Lake PCH PCI Express Root Port #9 [8086:a330] (rev f0) IOMMU group 9 00:1f.0 ISA bridge [0601]: Intel Corporation Cannon Point-LP LPC Controller [8086:a309] (rev 10) IOMMU group 9 00:1f.3 Audio device [0403]: Intel Corporation Cannon Lake PCH cAVS [8086:a348] (rev 10) IOMMU group 9 00:1f.4 SMBus [0c05]: Intel Corporation Cannon Lake PCH SMBus Controller [8086:a323] (rev 10) IOMMU group 9 00:1f.5 Serial bus controller [0c80]: Intel Corporation Cannon Lake PCH SPI Controller [8086:a324] (rev 10) IOMMU group 9 00:1f.6 Ethernet controller [0200]: Intel Corporation Ethernet Connection (7) I219-LM [8086:15bb] (rev 10)

 

[taafedi1]

root@lab2:~# lspci -v 00:00.0 Host bridge: Intel Corporation 8th Gen Core Processor Host Bridge/DRAM Registers (rev 07) Subsystem: Hewlett-Packard Company 8th Gen Core Processor Host Bridge/DRAM Registers Flags: bus master, fast devsel, latency 0, IOMMU group 0 Capabilities: [e0] Vendor Specific Information: Len=10 <?> Kernel driver in use: skl_uncore Kernel modules: ie31200_edac 00:02.0 VGA compatible controller: Intel Corporation CometLake-S GT2 [UHD Graphics 630] (prog-if 00 [VGA controller]) DeviceName: Onboard IGD Subsystem: Hewlett-Packard Company UHD Graphics 630 (Desktop) Flags: bus master, fast devsel, latency 0, IRQ 162, IOMMU group 1 Memory at e0000000 (64-bit, non-prefetchable) [size=16M] Memory at d0000000 (64-bit, prefetchable) [size=256M] I/O ports at 3000 [size=64] Expansion ROM at 000c0000 [virtual] [disabled] [size=128K] Capabilities: [40] Vendor Specific Information: Len=0c <?> Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00 Capabilities: [ac] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [d0] Power Management version 2 Capabilities: [100] Process Address Space ID (PASID) Capabilities: [200] Address Translation Service (ATS) Capabilities: [300] Page Request Interface (PRI) Kernel driver in use: i915 Kernel modules: i915 00:12.0 Signal processing controller: Intel Corporation Cannon Lake PCH Thermal Controller (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH Thermal Controller Flags: fast devsel, IRQ 16, IOMMU group 2 Memory at 4000107000 (64-bit, non-prefetchable) [size=4K] Capabilities: [50] Power Management version 3 Capabilities: [80] MSI: Enable- Count=1/1 Maskable- 64bit- Kernel driver in use: intel_pch_thermal Kernel modules: intel_pch_thermal 00:14.0 USB controller: Intel Corporation Cannon Lake PCH USB 3.1 xHCI Host Controller (rev 10) (prog-if 30 [XHCI]) Subsystem: Hewlett-Packard Company Cannon Lake PCH USB 3.1 xHCI Host Controller Physical Slot: 5 Flags: bus master, medium devsel, latency 0, IRQ 138, IOMMU group 3 Memory at e1e20000 (64-bit, non-prefetchable) [size=64K] Capabilities: [70] Power Management version 2 Capabilities: [80] MSI: Enable+ Count=1/8 Maskable- 64bit+ Capabilities: [90] Vendor Specific Information: Len=14 <?> Kernel driver in use: xhci_hcd Kernel modules: xhci_pci 00:14.2 RAM memory: Intel Corporation Cannon Lake PCH Shared SRAM (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH Shared SRAM Physical Slot: 5 Flags: fast devsel, IOMMU group 3 Memory at e1e32000 (64-bit, non-prefetchable) [disabled] [size=8K] Memory at 4000106000 (64-bit, non-prefetchable) [disabled] [size=4K] Capabilities: [80] Power Management version 3 00:16.0 Communication controller: Intel Corporation Cannon Lake PCH HECI Controller (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH HECI Controller Flags: bus master, fast devsel, latency 0, IRQ 161, IOMMU group 4 Memory at 4000105000 (64-bit, non-prefetchable) [size=4K] Capabilities: [50] Power Management version 3 Capabilities: [8c] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [a4] Vendor Specific Information: Len=14 <?> Kernel driver in use: mei_me Kernel modules: mei_me 00:17.0 SATA controller: Intel Corporation Cannon Lake PCH SATA AHCI Controller (rev 10) (prog-if 01 [AHCI 1.0]) Subsystem: Hewlett-Packard Company Cannon Lake PCH SATA AHCI Controller Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 125, IOMMU group 5 Memory at e1e30000 (32-bit, non-prefetchable) [size=8K] Memory at e1e36000 (32-bit, non-prefetchable) [size=256] I/O ports at 3080 [size=8] I/O ports at 3088 [size=4] I/O ports at 3060 [size=32] Memory at e1e35000 (32-bit, non-prefetchable) [size=2K] Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [70] Power Management version 3 Capabilities: [a8] SATA HBA v1.0 Kernel driver in use: ahci Kernel modules: ahci 00:1b.0 PCI bridge: Intel Corporation Cannon Lake PCH PCI Express Root Port #21 (rev f0) (prog-if 00 [Normal decode]) Physical Slot: 8191-2 Flags: bus master, fast devsel, latency 0, IRQ 122, IOMMU group 6 Bus: primary=00, secondary=01, subordinate=01, sec-latency=0 I/O behind bridge: [disabled] Memory behind bridge: e1d00000-e1dfffff [size=1M] Prefetchable memory behind bridge: [disabled] Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Hewlett-Packard Company Cannon Lake PCH PCI Express Root Port Capabilities: [a0] Power Management version 3 Capabilities: [100] Advanced Error Reporting Capabilities: [140] Access Control Services Capabilities: [150] Precision Time Measurement Capabilities: [220] Secondary PCI Express Capabilities: [250] Downstream Port Containment Kernel driver in use: pcieport 00:1c.0 PCI bridge: Intel Corporation Cannon Lake PCH PCI Express Root Port #7 (rev f0) (prog-if 00 [Normal decode]) Physical Slot: 8191-1 Flags: bus master, fast devsel, latency 0, IRQ 123, IOMMU group 7 Bus: primary=00, secondary=02, subordinate=02, sec-latency=0 I/O behind bridge: [disabled] Memory behind bridge: e1800000-e1cfffff [size=5M] Prefetchable memory behind bridge: [disabled] Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Hewlett-Packard Company Cannon Lake PCH PCI Express Root Port Capabilities: [a0] Power Management version 3 Capabilities: [100] Advanced Error Reporting Capabilities: [140] Access Control Services Capabilities: [150] Precision Time Measurement Capabilities: [220] Secondary PCI Express Capabilities: [250] Downstream Port Containment Kernel driver in use: pcieport 00:1d.0 PCI bridge: Intel Corporation Cannon Lake PCH PCI Express Root Port #9 (rev f0) (prog-if 00 [Normal decode]) Physical Slot: 4 Flags: bus master, fast devsel, latency 0, IRQ 124, IOMMU group 8 Bus: primary=00, secondary=03, subordinate=03, sec-latency=0 I/O behind bridge: [disabled] Memory behind bridge: e1000000-e14fffff [size=5M] Prefetchable memory behind bridge: [disabled] Capabilities: [40] Express Root Port (Slot+), MSI 00 Capabilities: [80] MSI: Enable+ Count=1/1 Maskable- 64bit- Capabilities: [90] Subsystem: Hewlett-Packard Company Cannon Lake PCH PCI Express Root Port Capabilities: [a0] Power Management version 3 Capabilities: [100] Advanced Error Reporting Capabilities: [140] Access Control Services Capabilities: [150] Precision Time Measurement Capabilities: [220] Secondary PCI Express Capabilities: [250] Downstream Port Containment Kernel driver in use: pcieport 00:1f.0 ISA bridge: Intel Corporation Cannon Point-LP LPC Controller (rev 10) Subsystem: Hewlett-Packard Company Cannon Point-LP LPC Controller Flags: bus master, fast devsel, latency 0, IOMMU group 9 00:1f.3 Audio device: Intel Corporation Cannon Lake PCH cAVS (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH cAVS Flags: bus master, fast devsel, latency 64, IRQ 163, IOMMU group 9 Memory at 4000100000 (64-bit, non-prefetchable) [size=16K] Memory at 4000000000 (64-bit, non-prefetchable) [size=1M] Capabilities: [50] Power Management version 3 Capabilities: [80] Vendor Specific Information: Len=14 <?> Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel, snd_sof_pci 00:1f.4 SMBus: Intel Corporation Cannon Lake PCH SMBus Controller (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH SMBus Controller Flags: medium devsel, IRQ 16, IOMMU group 9 Memory at 4000104000 (64-bit, non-prefetchable) [size=256] I/O ports at efa0 [size=32] Kernel driver in use: i801_smbus Kernel modules: i2c_i801 00:1f.5 Serial bus controller [0c80]: Intel Corporation Cannon Lake PCH SPI Controller (rev 10) Subsystem: Hewlett-Packard Company Cannon Lake PCH SPI Controller Flags: fast devsel, IOMMU group 9 Memory at fe010000 (32-bit, non-prefetchable) [size=4K] 00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (7) I219-LM (rev 10) DeviceName: Onboard Lan Subsystem: Hewlett-Packard Company Ethernet Connection (7) I219-LM Flags: bus master, fast devsel, latency 0, IRQ 126, IOMMU group 9 Memory at e1e00000 (32-bit, non-prefetchable) [size=128K] Capabilities: [c8] Power Management version 3 Capabilities: [d0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Kernel driver in use: e1000e Kernel modules: e1000e 01:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller SM981/PM981/PM983 (prog-if 02 [NVM Express]) Subsystem: Samsung Electronics Co Ltd NVMe SSD Controller SM981/PM981/PM983 Flags: bus master, fast devsel, latency 0, IRQ 16, NUMA node 0, IOMMU group 10 Memory at e1d00000 (64-bit, non-prefetchable) [size=16K] Capabilities: [40] Power Management version 3 Capabilities: [50] MSI: Enable- Count=1/32 Maskable- 64bit+ Capabilities: [70] Express Endpoint, MSI 00 Capabilities: [b0] MSI-X: Enable+ Count=33 Masked- Capabilities: [100] Advanced Error Reporting Capabilities: [148] Device Serial Number 00-00-00-00-00-00-00-00 Capabilities: [158] Power Budgeting <?> Capabilities: [168] Secondary PCI Express Capabilities: [188] Latency Tolerance Reporting Capabilities: [190] L1 PM Substates Kernel driver in use: nvme Kernel modules: nvme 02:00.0 Ethernet controller: Aquantia Corp. AQC107 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion] (rev 02) Subsystem: ASUSTeK Computer Inc. AQC107 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion] Flags: fast devsel, IRQ 18, IOMMU group 11 Memory at e1c00000 (64-bit, non-prefetchable) [size=64K] Memory at e1c10000 (64-bit, non-prefetchable) [size=4K] Memory at e1800000 (64-bit, non-prefetchable) [size=4M] Expansion ROM at e1c40000 [disabled] [size=256K] Capabilities: [40] Express Endpoint, MSI 00 Capabilities: [80] Power Management version 3 Capabilities: [90] MSI-X: Enable- Count=32 Masked- Capabilities: [a0] MSI: Enable- Count=1/32 Maskable- 64bit+ Capabilities: [c0] Vital Product Data Capabilities: [100] Advanced Error Reporting Capabilities: [150] Vendor Specific Information: ID=0001 Rev=1 Len=024 <?> Capabilities: [180] Secondary PCI Express Kernel driver in use: vfio-pci Kernel modules: atlantic 03:00.0 Ethernet controller: Aquantia Corp. AQC107 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion] (rev 02) Subsystem: ASUSTeK Computer Inc. AQC107 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion] Flags: fast devsel, IRQ 16, IOMMU group 12 Memory at e1400000 (64-bit, non-prefetchable) [size=64K] Memory at e1410000 (64-bit, non-prefetchable) [size=4K] Memory at e1000000 (64-bit, non-prefetchable) [size=4M] Expansion ROM at e1440000 [disabled] [size=256K] Capabilities: [40] Express Endpoint, MSI 00 Capabilities: [80] Power Management version 3 Capabilities: [90] MSI-X: Enable- Count=32 Masked- Capabilities: [a0] MSI: Enable- Count=1/32 Maskable- 64bit+ Capabilities: [100] Advanced Error Reporting Capabilities: [150] Vendor Specific Information: ID=0001 Rev=1 Len=024 <?> Capabilities: [180] Secondary PCI Express Kernel driver in use: vfio-pci Kernel modules: atlantic

 

[Spoonman2002]

Manjaro = Linux
pfSense = FreeBSD

https://www.educba.com/linux-vs-freebsd/

FreeBSD is more picky with hardware and drivers.
I would suggest you replace the ASUS nic with an Intel dual/quad nic card.

 

[taafedi1]

Manjaro = Linux
pfSense = FreeBSD

https://www.educba.com/linux-vs-freebsd/

FreeBSD is more picky with hardware and drivers.
I would suggest you replace the ASUS nic with an Intel dual/quad nic card.

Never! I fail only because of too less skill not because it is not possible.

Now I have been able to fix the problem.

Whoever wants to use this NIC with pfSense, I can help.

First, unfortunately, the installation of pfSense must go through.
so create Linux bridges to provide them to your pfSense as WAN and LAN interface (will not be needed later) (make sure you have internet accesss for curl the zip file)

After pfSense has been successfully installed a driver must be manually installed to make the NIC functional for pfSense.

To do this, proceed as follows:

1. access shell via SSH or proxymox
2. access shell with menu item 8
3. curl -L -O https://forum.netgate.com/assets/uploads/files/1617363589664-if_atlantic0.0.5_freebsd12.2.zip
4. unzip 1617363589664-if_atlantic0.0.5_freebsd12.2.zip
5. chmod 555 if_atlantic.ko
6. cp if_atlantic.ko /boot/kernel
7. vi or nano /boot/loader.conf
8. create a new line at the bottom and add if_atlantic_load="YES".
9. reboot