I´m at a bit of a dead end and don't have other ideas to get this working.

 

My system is ASRock J3455-ITX and I'm trying to passthrough a I350 Nic to a OPNsense VM.
Problem is its bound to IOMMU groupe 4 witch contains the following:
 

[8086:5ad8] 00:13.0 PCI bridge: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series PCI Express Port A #1 (rev fb)
[8086:5ad9] 00:13.1 PCI bridge: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series PCI Express Port A #2 (rev fb)
[8086:5ada] 00:13.2 PCI bridge: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series PCI Express Port A #3 (rev fb)
[8086:5adb] 00:13.3 PCI bridge: Intel Corporation Celeron N3350/Pentium N4200/Atom E3900 Series PCI Express Port A #4 (rev fb)
[10ec:8168] 01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 11)
[1b21:0612] 03:00.0 SATA controller: ASMedia Technology Inc. ASM1062 Serial ATA Controller (rev 02)
    [5:0:0:0] disk ATA Hitachi HUA72302 A840 /dev/sdf 2.00TB
    [6:0:0:0] disk ATA Hitachi HUA72302 A840 /dev/sdg 2.00TB
[8086:1521] 04:00.0 Ethernet controller: Intel Corporation I350 Gigabit Network Connection (rev 01)
[8086:1521] 04:00.1 Ethernet controller: Intel Corporation I350 Gigabit Network Connection (rev 01)
[8086:1521] 04:00.2 Ethernet controller: Intel Corporation I350 Gigabit Network Connection (rev 01)
[8086:1521] 04:00.3 Ethernet controller: Intel Corporation I350 Gigabit Network Connection (rev 01)

 

 

I have tried every PCIe ACS option to split the groupe, also trying pcie_acs_override=id of the pci bridge.
The Nic is loaded with vfio-pci.ids drivers at boot to stop unraid from assigning them to the os itself, I'm able to select the Nic in the VM menu but I get the "group 4 is not viable Please ensure all devices within the iommu_group are bound to their vfio bus driver."
The onboard Ethernet and SATA controller are use by unraid so as fare as I know I can't just go vfio-pci.ids=10ec:8168, 1b21:0612, 8086:1521.

Any help would be greatly appreciated.

Edited July 28, 20214 yr by RipSaw
Proper syntax

If you can't break apart the grouping via ACS there's not much you can do other than grab a new motherboard (with lots of expansion slots so you've got some options)