Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Watchguard Firebox M400/M500

    Scheduled Pinned Locked Moved Hardware
    584 Posts 58 Posters 676.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Does it reboot correctly with that CPU out of interest?

      The power draw can be affected by a number of things. Addtional drives. NIC that are linked. Fan speed. 40W does seem high though, how are you measuring it?

      E 1 Reply Last reply Reply Quote 0
      • E
        eisenb11 @stephenw10
        last edited by

        @stephenw10 No, the i3-4370T has the reboot hang issue. Not a big deal as instead I just do a HALT, then power off and on with the button afterwards.

        I'm measuring with an Emporia outlet device. At 1% load, I'm mostly idling. If SpeedStep is significant (e.g. drops it to less than 10W) it would be a worthwhile update, but I have no idea what to expect by enabling it.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Enabling high C states usually has a greater affect, especially if your CPU is mostly idle.
          Check the available C state and the 'lowest' value. The default Celeron and BIOS don't offer much:

          [2.7.0-DEVELOPMENT][admin@pfsense.fire.box]/root: sysctl dev.cpu.0
          dev.cpu.0.temperature: 39.0C
          dev.cpu.0.coretemp.throttle_log: 0
          dev.cpu.0.coretemp.tjmax: 100.0C
          dev.cpu.0.coretemp.resolution: 1
          dev.cpu.0.coretemp.delta: 60
          dev.cpu.0.cx_method: C1/hlt
          dev.cpu.0.cx_usage_counters: 66905813
          dev.cpu.0.cx_usage: 100.00% last 620us
          dev.cpu.0.cx_lowest: C1
          dev.cpu.0.cx_supported: C1/1/0
          dev.cpu.0.%parent: acpi0
          dev.cpu.0.%pnpinfo: _HID=none _UID=0 _CID=none
          dev.cpu.0.%location: handle=\_PR_.CPU0
          dev.cpu.0.%driver: cpu
          dev.cpu.0.%desc: ACPI CPU
          
          E 1 Reply Last reply Reply Quote 0
          • E
            eisenb11 @stephenw10
            last edited by

            @stephenw10 Sounds like it may be worth a try. I may try to pick up another M400 so I'll have a backup and maybe try to "downgrade" it to a i3-4130T as well. Lower clock should use less power and I hear it doesn't have the reboot issue so a win-win. Might also upgrade that machine to pfsense 2.6 as I'm on 2.4.5 currently.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              With an i3-4160 and unlocked BIOS to enable speedstep:

              [2.7.0-DEVELOPMENT][admin@m400-2.stevew.lan]/root: sysctl dev.cpu.0
              dev.cpu.0.temperature: 37.0C
              dev.cpu.0.coretemp.throttle_log: 0
              dev.cpu.0.coretemp.tjmax: 100.0C
              dev.cpu.0.coretemp.resolution: 1
              dev.cpu.0.coretemp.delta: 63
              dev.cpu.0.cx_method: C1/hlt
              dev.cpu.0.cx_usage_counters: 20326
              dev.cpu.0.cx_usage: 100.00% last 1186us
              dev.cpu.0.cx_lowest: C1
              dev.cpu.0.cx_supported: C1/1/0
              dev.cpu.0.freq_levels: 3600/54000 3400/49609 3200/45377 3000/41815 2900/39829 2700/36458 2500/32748 2300/29177 2100/26204 1900/22916 1700/20193 1500/17168 1400/15710 1200/13290 1000/10588 800/8400
              dev.cpu.0.freq: 800
              dev.cpu.0.%parent: acpi0
              dev.cpu.0.%pnpinfo: _HID=none _UID=0 _CID=none
              dev.cpu.0.%location: handle=\_PR_.CPU0
              dev.cpu.0.%driver: cpu
              dev.cpu.0.%desc: ACPI CPU
              

              Kill-a-Watt style device shows it idles at ~27W

              That CPU doesn't reboot though so upgrades are a PITA!

              E 2 Replies Last reply Reply Quote 0
              • E
                eisenb11 @stephenw10
                last edited by

                @stephenw10 Oh, the i3-4130T is also on the reboot naughty list? I thought someone had posted in this thread that the 4130 was OK?

                1 Reply Last reply Reply Quote 0
                • E
                  eisenb11 @stephenw10
                  last edited by

                  @stephenw10 Oops, ignore my comment - just realized you were posting about the 4160 and not the 4130 re: reboots. I just bought another M400 on eBay for $50 and ordered a i3-4130T for a whopping $10! I'll probably set that up from scratch then swap firewalls keeping the current as a backup if I don't brick it doing the bios update.

                  1 Reply Last reply Reply Quote 1
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    With Xanthos fully unlocked BIOS you can enabled higher C-states:

                    dev.cpu.0.temperature: 35.0C
                    dev.cpu.0.coretemp.throttle_log: 0
                    dev.cpu.0.coretemp.tjmax: 100.0C
                    dev.cpu.0.coretemp.resolution: 1
                    dev.cpu.0.coretemp.delta: 65
                    dev.cpu.0.cx_method: C1/mwait/hwc C2/mwait/hwc
                    dev.cpu.0.cx_usage_counters: 210 8837
                    dev.cpu.0.cx_usage: 2.32% 97.67% last 1629us
                    dev.cpu.0.cx_lowest: C2
                    dev.cpu.0.cx_supported: C1/1/1 C2/2/148
                    dev.cpu.0.freq_levels: 3600/54000 3400/49609 3200/45377 3000/41815 2900/39829 2700/36458 2500/32748 2300/29177 2100/26204 1900/22916 1700/20193 1500/17168 1400/15710 1200/13290 1000/10588 800/8400
                    dev.cpu.0.freq: 800
                    dev.cpu.0.%parent: acpi0
                    dev.cpu.0.%pnpinfo: _HID=none _UID=0 _CID=none
                    dev.cpu.0.%location: handle=\_PR_.CPU0
                    dev.cpu.0.%driver: cpu
                    dev.cpu.0.%desc: ACPI CPU
                    

                    Note that it spends almost the entire time in C2 if enabled. Idles at ~24W.
                    The CPU claims to support higher C states but pfSense doesn't see them.

                    E 1 Reply Last reply Reply Quote 0
                    • E
                      eisenb11 @stephenw10
                      last edited by

                      @stephenw10 Just finished downloading Xanthos' files and various instructions posted between him and yourself. Do you think disabling the i3's iGPU in Xanthos' unlocked bios will reclaim a few watts?

                      Too bad it wasn't possible to get the 13W Xeon to work, that would have been crazy.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        The TDP rating of a CPU is only a guide to the cooling solution needed to run at full power. It does not tell you the minimum power consumption. Whilst the lower TDP devices usually do run at lower idle power it's often not by much. No where near what you might think if you only look at the TDP.
                        Using a CPU without on-board GPU can save a few Watts, I've tested that on earlier gen CPUs. I'm not sure if disabling it does much though. On more recent devices other users have demonstrated that loading a graphics driver that can put the GPU into an idle state can produce a decent saving.

                        E 1 Reply Last reply Reply Quote 0
                        • E
                          eisenb11 @stephenw10
                          last edited by

                          @stephenw10 BIOS update successful, but I have an embarrassing question - how do I install pfsense? ha ha

                          The last time I did it was when we had nano-bsd images and now we have the memstick images. I RUFUS'ed the image to CF, inserted it into the M400, booted, select install, select keyboard, then I get stuck when asked to partition the disk. ZFS takes me down some RAID path, UFS BIOS says "device busy", UFS EUFI also says "device busy". Any pointers?

                          Thanks!

                          E 1 Reply Last reply Reply Quote 0
                          • E
                            eisenb11 @eisenb11
                            last edited by

                            @eisenb11 oh, nevermind - I just had to try a few times and it moved forward.

                            1 Reply Last reply Reply Quote 1
                            • M
                              mtnhansen
                              last edited by

                              I have an M400 which I have tried to flash with Zanthos' BIOS. Have used a CH341A SPI Flash Reader and ASprogammer. When I start up the Wathguard it is on for 3-4 seconds and then it turns off again. Is there something I did wrong or has the flash itself failed? It said that everything was successful.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Hmm, that's not good. Could be either with those symptoms.

                                You might try re-flashing it. Or restoring the old file if you backed it up.

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mtnhansen @stephenw10
                                  last edited by

                                  @stephenw10 Tried to reflash and restore back to the original BIOS without success. Have also tried another PSU, but with the same result.

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Hmm, not sure what else to suggest. Had you swapped out any hardware before that?

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mtnhansen @stephenw10
                                      last edited by

                                      @stephenw10 Have not replaced any hardware. It should be said that I tried a long time ago to flash the bios with software flash with Zanthos' version and that's when it failed. Finally ordered an SPI reader and thought it would work. I extracted the original BIOS from an identical M400 that I have that works. It might not work?

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        I would expect it to work. It's possible you had a hardware failure that happened to coincide with the original BIOS flash attempt of course. Seems pretty unlikely but....

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mtnhansen @stephenw10
                                          last edited by

                                          @stephenw10 Tried to find a detailed overview of the motherboard, but can't find it anywhere. Do you know where I can possibly find it?

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            The Lanner FW-7585 manual is the closest you're likely to find. It's not exactly the same but close enough.

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.