Help with ATLS21QGE 7055021

shimo

Hey! I was hoping someone could help me get the ATLS21QGE 7055021 nic up and running. I picked it up because the documentation noted that it had FreeBSD drivers. Obviously the card wasn't auto detected. But what I don't understand is why I can't run make to compile the driver myself, I'm getting this as an error and it's something I'm not used to.

[2.6.0-RELEASE][admin@pfSense.home.arpa]/root/driver/igb-2.5.19/src: make
make: "/usr/share/mk/bsd.kmod.mk" line 16: Unable to locate the kernel source tree. Set SYSDIR to override.

And when I run pciconf -lv this is what I see along with the other hardware.

none6@pci0:1:0:0:	class=0x020000 card=0x0000108e chip=0xabcd108e rev=0x01 hdr=0x00
    vendor     = 'Oracle/SUN'
    device     = 'Multithreaded 10-Gigabit Ethernet Network Controller'
    class      = network
    subclass   = ethernet
none7@pci0:1:0:1:	class=0x020000 card=0x0000108e chip=0xabcd108e rev=0x01 hdr=0x00
    vendor     = 'Oracle/SUN'
    device     = 'Multithreaded 10-Gigabit Ethernet Network Controller'
    class      = network
    subclass   = ethernet
none8@pci0:1:0:2:	class=0x020000 card=0x0000108e chip=0xabcd108e rev=0x01 hdr=0x00
    vendor     = 'Oracle/SUN'
    device     = 'Multithreaded 10-Gigabit Ethernet Network Controller'
    class      = network
    subclass   = ethernet
none9@pci0:1:0:3:	class=0x020000 card=0x0000108e chip=0xabcd108e rev=0x01 hdr=0x00
    vendor     = 'Oracle/SUN'
    device     = 'Multithreaded 10-Gigabit Ethernet Network Controller'
    class      = network
    subclass   = ethernet

stephenw10

There are no build tools in pfSense. Including them just increases the attack surface. If you really need to build drivers you need to do so from the equivalent FreeBSD version on move the resulting kernel modules across. The are no guarantees that will work though.

https://docs.netgate.com/pfsense/en/latest/development/compile-software.html

It looks like you're trying to build igb though, which is included. Does this card just need a modified igb?

Steve

shimo

@stephenw10 I fail to see how build tools increases attack vectors. Maybe if I start compiling things that are insecure. But that's on me. I could just as easily configure it insecurely, and that's far more likely for an end user/ Feels like a really dumb excuse to not have it available.

Either way. After some extensive research it seems Sun Oracle may have pulled a BS move and changed the chipset. The model I have is the V1 where as the one the drivers are for is the V4 where it uses an underlying Intel chipset. For my purposes I'm SOL as this card only runs on Solaris and there are no Windows or Linux Drivers for it. ¯\ _(ツ) _/¯ Found this out when I got frustrated with PF and OPN sense and installed straight FreeBSD to test and it still couldn't detect it. So I installed the demo version of Windows server and it also failed to auto install the card and the available drivers did not detect the card. Just wish that was clearer and I hadn't wasted my money after finding it had BSD drivers on their site. ¯\ _(ツ) _/¯ They ALSO really shouldn't sell two completely different architecture cards under the same bloody model number.

Soooo for anyone looking at this thread. Don't buy the ATLS21QGE it does not work. And unless you know how to make your own drivers for it it will never work.

stephenw10

If you have build tools on the firewall you have to ensure only the right users can run them or the result, which is an attack surface in itself.

Yeah, there are a number of threads here on the forum from people trying to use this card and I don't see anyone who managed to build a driver for it.

Steve