WatchGuard Firebox T70

Eihab · Jul 8, 2021, 6:18 PM

@stephenw10 Any specific version of pfsense? I downloaded the latest iso and installed on the laptop with 2nd option or EFI boot.

bruor · Jul 8, 2021, 6:24 PM

@eihab I just updated to 2.5.2 release here.

My disk shows it's in bios mode, not sure if the T70 supports EFI boot.

Eihab · Jul 8, 2021, 6:59 PM

@bruor Thanks! that made it work... I am in on the LAN network...

stephenw10 · Jul 8, 2021, 7:17 PM

Same here:

[2.5.2-RELEASE][root@t70.stevew.lan]/root: sysctl machdep.bootmethod
machdep.bootmethod: BIOS

kubato · Apr 30, 2022, 1:07 AM

I Know this is old and might documented already but, here is how I install pfSense on Watchguard T70.
You will need SSD and power connector modded to work on the 2or3 pin power connector(check voltage with meter) next to the sata.
You could get the sata power off PC too but, this is how I did it. There is no VGA out so you will also need a Serial connector and teraterm (or whatever soft you use for terminal emulation)
Here is the guts:
Install PFsense on Watchguard Firebox T70

download pfsense pfSense-CE-memstick-serial-xxxxxxx-amd64.img (not iso)
on seperate pc, install ssd and use HDDRawCopy1.10Poratble.exe to copy the above img onto the SSD.
once done connect the sata and power connector to the firebox.
Set up Tera Term and Prolific usb to serial to see the install.
note: com, can be any but speed should be 115200,8,none,1,none in the form BPS=115200,Data Bits=8,Parity=none,stop bits=1, flow control (none)
set tera term to BPS of 115200 and you will see the correct data.
Before turning on Firebox for install, unseat the hd/memory card so it will not boot to that first. Turn on Firebox, count to 4 seconds (important, as it passes the boot but, will still do device detect)plug in card (just leave screwed in but in slot(it will work, screw it in if you want), so power is jumpy and data and it will boot to ssd.)
Intall as normal. Done

Default password first login
admin, pfsense

stephenw10 · Apr 30, 2022, 4:28 AM

Mmm, it's hard to recommend hot-plugging the mSATA card. I could imagine something going badly wrong!

Better to install to mSATA in something else and move it across if you can.

Steve

bruor · Apr 30, 2022, 1:07 AM

@kubato I wonder if you were to use a virgin or freshly wiped msata drive if the SATA SSD would boot and allow installation without trying to hotplug it.

kubato · Apr 30, 2022, 4:58 AM

@bruor
It might work as it appears to be going through the normal boot from bootable devices. That is where I noticed that, removing the mSata and just installing a working Sata with an "full" install of pfSense. It works fine via Sata drive. I just took the xtra step of seeing if I could get it to start boot on Sata then quickly install the mSata card and allow it to be detected. As you all may know, after the bios boot picks up bootable devices, which is only a sata card, then the pfSense OS starts it does a detection again so this trick will work. I have done it tons of time and never (knock on virgin wood) messed up a mSata card or shorted out and mSata. Speaking of messing up stuff, Be xtra careful if plugging in sata power in the connector. I plugged it in backwards once and thought I blew the whole thing but, it survived and is still working and pfSense it protecting my network.

kubato · Apr 30, 2022, 5:11 AM

@stephenw10 You are exactly right and I am doing everything wrong so anyone trying this it is best to stick a working copy on mSata, using another PC via mSata to Sata adapter. After full install, return it back to the Firebox T70. I really want to hack the bios and install a known password so I can get into the bios and change the boot order. I would like to know what device was used by the bios modder to read the bios. I see two and there is supposed to be another a he mentioned. Is that device plugged in via USB or directly connected to BIOS chip?

stephenw10 · Apr 30, 2022, 1:18 PM

Usually they are connected via the SPI header. I have not tried that on the T70.

It's much more convenient if you can boot something and read out the chip but I was never able to boot anything with a serial console. The HDMI header is unpopulated so...stuck at that point. It might be possible though.

Steve

kubato · Apr 30, 2022, 3:08 PM

@stephenw10
I have procured a T70 and if you or someone needs the original mSata for this....it can be sent for you to "look at".
Steven please contact me via Email and we can discuss via phone or emails.
I owe a lot to the group as you all moved me off of Zyxel stuff and onto "roll your own with pfSense".

stephenw10 · Apr 30, 2022, 11:55 PM

Thanks. I've already got one though. Someone else might.
I'm not sure there's much on it we can use. What there is there is detailed in this thread, mostly here.
It would be nice to know where the LEDs are connected. I could never find them in the usual places.

Steve

xxup · May 17, 2023, 7:21 AM

Thanks for this information. Unfortunately, it looks like the 1Gb of ram is a serious limitation. I managed to blow it after I installed Squid. All said, it is still a good platform for a peek at Pfsense.

stephenw10 · May 17, 2023, 1:00 PM

The T70 should have 2GB of RAM.

xxup · May 17, 2023, 7:20 PM

@stephenw10 You are absolutely correct. I missed by one key.

bruor · Nov 6, 2023, 3:26 PM

Just wanted to add some additional information here.

I just did a reinstall on this box to take it to CE 2.7 from plus. During the installation I chose GPT (bios) as the partition type and can confirm that it boots without issue. I think my first install may have been MBR mode.