Install on NETASQ U30 S ?
-
I mean anything is possible; it's a simple matter of coding.
But if I were doing this I would start by trying to get OpenWRT to work with it as that's much closer to what you need to talk to the switch. Once that is working you will know exactly how it's connected and what it can do so it would make any work in pfSense much easier.
Steve
-
Unfortunately there is no Steve to help me on openwrt
.
I find many drivers for wireless Atheros but no for AR8328. -
Unfortunately there's not enough space in my head for that!
But they have support for the AR8328 it's not as a separate driver, it's probably included and you just need to configure it to know there is a switch on em0 or whatever the interface is detected as there.
https://openwrt.org/docs/techref/hardware/switch#qualcommatherosMost x86 stuff doesn't have a switch so it's probably not enabled by default.
Steve
-
@stephenw10 : hello, i successfully intall pfsense and manage interfaces with the help of this procedure ( serial connexion ) :
Define 2 VLAN at startup : VLAN 1 et VLAN 2 both on em0 interface then,
Assign em0_vlan1 to WAN
Assign em0_vlan2 to LAN
The switch configuration hereafter has to be respected to obtain :
port 1 = WAN
port 2 to 6 = LANConfiguration of switch NetASQ_U70 :
cu -s 9600 -l /dev/ttyu1vlan
VLAN> aware 1 enable
VLAN> pvid 1 none
VLAN> frame type 1 Tagged
VLAN> aware 2-8 disable
VLAN> pvid 2 1
VLAN> pvid 3-8 2
VLAN> del 1-4094
VLAN> add 1 1-2
VLAN> add 2 1,3-8
VLAN> config
VLAN Configuration:
Port Aware PVID Ingress Filtering Frame Type
1: enabled none disabled Tagged
2: disabled 1 disabled All
3: disabled 2 disabled All
4: disabled 2 disabled All
5: disabled 2 disabled All
6: disabled 2 disabled All
7: disabled 2 disabled All
8: disabled 2 disabled AllEntries in permanent table: 1: 1,2 2: 1,3,4,5,6,7,8VLAN>
Use the cu(1) escape sequence <Enter> then ~ (tilde) followed by . (dot) -
Yes it's possible on the larger boxes as the switch has a console to configure it.
But it appears the U30s does not.
Steve
-
@stephenw10 ok bad news : it works on U70 (mine ) : strange U30 and U70 no share the same hardware ( entry level both )
-
Yup, same on the u250s I have. The Atheros AR8328 in the u30s doesn't have a console at all though. It's something more often found in SOHO routers. If I was doing it I was try with OpenWRT as I suggested. They do have support for that in their switch framework.
Steve
-
@stephenw10
The main issue is to configure the switch Atheros AR8328 somehow .
Will the idea of openwrt is to configure the switch and then move back to pfsense work?
Steve suggested to configure via MDC/MDIO bus ! But how? Can someone help?
Thank you in advance. -
That probably won't work. When you reboot between OpenWRT and pfSense the switch should be reset by the BIOS. For that not to happen would be a security issue in the original application.
It looks like the em NICs attach OK with the switch on the PHY side which igb might not.
Has anyone just tried running OpenWRT on it directly yet? That needs to happen first to confirm what we are guessing is actually how it's connected.
Steve
-
@stephenw10
Good to hear that someone is still following this project.
From my experience with other Stormshield and Netasq appliances the UART once written into it, the configuration remains.
For instance, I have done configurations on one SN250 using opensense , then changed the to Pfsense using another HD . I did not have to access the serial and change anything.
So what I mean , if there is a way to write the configuration to the switch the rest will be fluid.
I have failed so far to make this work on SN200 and SN150 (Not even able to make it boot) . Anything above 250 In Netasq and Stormshield worked fine.
Even on Arkoon I made it work. -
Well try it and see if you have the hardware. The most difficult part of that is probably going to be setting up dual booting with OpenWRT and pfSense. I'm not sure I've ever seen anyone do that.
