Watchguard Firebox X Peak platform

stephenw10

Edit: Anyone reading this: These are instructons are old and overly complex. See this post for a simpler updated solution.

Mostly for my own benefit because I completely hosed my install messing about with ACPI and have to reflash my CF card. ::)
Here's some concise instructions for installing the firebox lcd software.
Download the file with the driver, lcdd3.tar, from here (can't attach it to this post >:()
http://sites.google.com/site/pfsensefirebox/home/lcdd3.tar?attredirects=0
Copy it to the firebox to /var/tmp. This is a folder that only exists in memory and gets wiped at boot. I used WinSCP.
Connect to the box (with putty via ssh or serial or whatever). Then:


[root@pfSense.local]/root(2): cd /var/tmp

[root@pfSense.local]/var/tmp(5): tar -xvf lcdd3.tar
x ./install-embed.lcdd.sh
x ./lcdd/
x ./lcdd/drivers/
x ./lcdd/LCDd.conf
x ./lcdd/lcdd.sh
x ./lcdd/lcdproc
x ./lcdd/LCDd
x ./lcdd/drivers/curses.so
x ./lcdd/drivers/sdeclcd.so
x ./lcdd2.tar

[root@pfSense.local]/var/tmp(7): ./install-embed.lcdd.sh

[root@pfSense.local]/var/tmp(8): cd /lib

[root@pfSense.local]/lib(10): /etc/rc.conf_mount_rw

[root@pfSense.local]/lib(11): ln -s libc.so.7 libc.so.6

[root@pfSense.local]/lib(12): ln -s libkvm.so.4 libkvm.so.3

[root@pfSense.local]/lib(13): /etc/rc.conf_mount_ro

[root@pfSense.local]/lib(14): /usr/local/etc/rc.d/lcdd.sh

And it should all be working! ;)
I have removed a few steps from the other instructions on the forum. I have included the newest driver in the tarball. I found I didn't need to alter the permisions of the install script.
I tested this on a fresh install of the embedded 1.2.3-release.
It will not work on 2.0 beta, I tried! :P

Steve

Edit: It does work in 2.0 you have to sym link both libkvm.so.3 and libkvm.so.4 to libkvm.so.5

stephenw10

For completeness I just thought I'd add this picture of the hard drive caddy that the X peak was designed for.

It's from Watchguards demanufacturing instructions.
Anybody got one on their box? Anyone ever seen one? :P

It'd be nice to have. ;)

Steve

CaseyBlackburn

I've got one, so I have seen one and have one. It works nicely for me, I boot from a harddrive in it.

stephenw10

Bah! Why haven't I got one?! >:(

I think you must be lucky. I've not seen another on the X peak. All the Cores seem to have them though.

Steve

mericksonj

Cores have a caddy blank, there's no connector or tapped holes for screws. I don't think they ever made/sold an actual HDD upgrade for the X Core series.. interesting to see they have one for the x Peak.

Also, anyone found a good source for decom X Peak units besides ebay? I'm looking for about 3-4 more…

--J

stephenw10

They went as far as publishing some instructions for fitting the drive in Core hardware. Notice there's no photo of an actual drive in them though. ::)

I'd be amased if they had completely designed the caddy from scratch. I bet the case manufacturer has something similar for other clients.

I suspect that, unfortunately, a lot of Watchguard hardware goes straight into landfill/recycling. :'(
It's probably just not worth the time and effort to re-sell them. You can see how much some people are trying to charge for them on Ebay. With no passwords for software that's worthless anyway! :o

Any possibility of finding your bios version?

Steve

mericksonj

Does the Bios version show up in serial connection during normal bootup or anywhere else while running? I can open it up easily if it's printed anywhere, otherwise, you'll have to show me how you managed to sneak a peek at it, If I remember correctly from following your posts, you used a special software on your CF?

stephenw10

Unfortunately it doesn't show up in normal boot. :(
Even now that I have turned on console redirection I still have to press tab and delete wildly to get the post to show. If I press nothing I get a couple of AT commands, as if it's looking for a modem, and then it boots normally. You could try pressing tab and delete and see if anything happens. Reading back through my posts I never really tried very hard before I modified the bios, since I expected to see something without having to randomly hit keys. ::)
The only reliable method I found was to boot into Freedos and use a dos command, biosid. Of course once you have that you can also read the bios to a file and write a new one etc. I could send you an image of the CF card I used if you'e willing to try it.

Steve

mericksonj

Sure I'm willing. Thanks! I have several CF I can use if it makes any difference, 64M 128M and 4G.

stephenw10

Ok here's the file: freedosconsole1.vhd
It's a 'virtual hard disk' file I created with WinImage but I tested it with Physdiskwrite and it seemed ok. The card I used is 16MB so that's the file size, compressed image didn't work. I flashed and booted a 128MB card no problem, you just get a 16MB partition.
When you boot the CF card with the image you must have a serial terminal already open connected to com1 (the front port) on your firebox. This is because freedos will switch to a serial console at the end of the boot up and it hangs if it doesn't find one. I added in a series of three beeps just before it switches so you know it booted OK.
The program, biosid.com, is in the c:\bios folder. It simply displays the bios information, although the formatting for serial console is all wrong. Also in there is awdflash.exe and a few of the modified bioses I went through. Good Luck!

Steve

File size should be: 15,991,296 bytes, MD5 sum: 5fb23e7ef53cffed4b26f6f37b8ab33a

stephenw10

Anyone got any news on their bios version? ???

Steve

Xfinity

What kind of RAM upgrades can you do with this Firebox? (Speculate mode on ;))

stephenw10

The 875p chipset supports up to 4GB in 4 dimm slots. However the X-peak motherboard only has two slots (although it has space for 4 if you're feeling brave with a soldering iron!) so I would say 2GB.
Reference: here.
Steve

Xfinity

Thanks for the info, any good pointers in ram-modules that work as well? ;)

stephenw10

Hmm,
Well first off I've not tried any other DIMMs in my firebox. To be honest 512MB seems more than enough for my needs. You could look at Intels guide for their desktop 875p board here . It doesn't mention any specific manufacturers though. Otherwise try Googling for 875p motherboards from other manufacturers who may have lists of approved DIMMs.
Do you have a firebox then?

Steve

Xfinity

Thanks for all information regarding the memory on this thing, going to check ebay in a few and see what I can find ;)…

stephenw10

No problem! ;D
Keep us updated with what works and what doesn't.

Steve

stephenw10

The Advantech AIMB-X3 motherboard has by default only one usb connection, the front mounted usb port. It has hardware, however, to support at least 4 ports and possibly 6 or 8! The Intel FWE6300ESB chip haas a 4 port controller and the I/O chip has an additional controller. The usbdevs command shows 6 ports.

There are unpopulated headers on the motherboard for three additonal ports. They are just behind the existing USB port and labeled CN25 and CN27. In order to get these to function some soldering skills are required along with some bravery!

The 5V power for the USB ports is supplied via a fuse and the data connections are routed via a common mode filtering choke. Only the existing port has a choke and fuse in place, the others are unpopulated. Fortunately the existing fuse, Fuse 3 (FS3, 1.1A), supplies both the front port and CN27 so to get just one internal port we don't have to add any fuses. The filtering chokes are layed out in a line on the pcb labeled CK1-CK4. Only CK4 is present. I purchased the smalled choke I could easily find but it was still far too big (3x2mm!) as a test I simply used some wire instead of the choke and so far it seems to function just fine. It could be that the filtering is overkill or that I'm not really stressing it enough to show up any problems.

Warning: some very bad soldering is in this picture! :P

I don't have any surface mount reworking tools so I had to use the smallest soldering iron I could find which was still far too large. Despite that I had a huge problem getting a pin into the GND connection on the header. The ground plane on the PCB just sinks all the heat. In the end I had to drill it out with a very small drill bit! :o

The internal USB connection opens up some exiting possibilties: 3g modem, flash drive, etc.

StuartW

Hi

I ran the commands up to here:

@stephenw10:

/etc/rc.conf_mount_rw
Because I'm using an embedded image I first mount it read-write.
pkg_add -r mbmon
Add the mbmmon package.
 /etc/rc.conf_mount_ro
Remount the CF card read only.

But when I run this bit:
@stephenw10:

./mbmon -d
ioctl(smb0:open): No such file or directory
SMBus[Intel8XX(ICH/ICH2/ICH3/ICH4/ICH5/ICH6)] found, but No HWM available on it!!
Using ISA-IO access method!!
* Winbond Chip W83627HF/THF/THF-A found.

All I get is:


# ./mbmon
./mbmon: Command not found.
#

Any suggestion as to what I might be doing wrong?

Thanks

Stuart

stephenw10

You have to call it from the right directory or use the absolute path:

/usr/local/bin/mbmon -I

The -I causes mbmon to use only the ISA bus sensors, which are the only ones available on the Firebox under FreeBSD.

Steve