Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [As Good As Solved!] Watchguard Firebox Arm/Disarm LED

    Hardware
    22
    128
    92.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      iFloris
      last edited by

      After trying both ./writeio 0x408f 0x01 and ./writeio 0x408e 0x9f, I found the following:
      The first command (0x01) makes the red led blink red / off (looks like it blinks synchronised to re0, but I'm not sure).
      The second command (0x9f) does nothing (seemingly).

      Afterwards, I reset 0x0408f to 0x09 and 0x408e to 0xbf.

      one layer of information
      removed

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmmm, interesting. Well it's something at least. It proves that the led is driven by the gpios i some way.
        So it doesn't blink regularly, like once a second?

        Anyway it seems that 0x408f bit 3 is red on.
        To find green leave red off (or blink in this case) and try turning on bits 1 or 4 i.e.

        ./writeio 0x408f 0x11 or 0x03.

        Normally the blinking action is set by the blink register which for you should be at 0x409b, to correspond with the ouputs at 0x408f. Try reading 0x409b, by default it is 00.

        Steve

        1 Reply Last reply Reply Quote 0
        • I
          iFloris
          last edited by

          I've tried both settings.

          ./writeio 0x408f 0x11 turns the led green and blinks at fast but irregular intervals.
          ./writeio 0x408f 0x03 does the same, but turns the led back to red.

          I've reset to 0x11 now, so at least the arm led is green!
          This is awesome.

          Edit: actually, the blinking is regular. About four blinks per second.

          one layer of information
          removed

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, even more interesting.
            So 0x408f set to 03 is the same as 01 yes?
            The built in blink function is definitely 1Hz so if it's blinking at around 4Hz then something else is doing it. Still worth checking the blink registers at 0x409A and 0x409B.
            It's likely only two pins actually do anything giving only 4 possible states. It appears to be 0x408F bits 3 and 4. We have tried:
            01 which is default, solid red
            00 red flashing
            10 green flashing
            11 haven't tried that yet.

            Try ./writeio 0x408f 19

            As I said there are four possible gpio pins so 16 possible states. Since there is some confusion I think we may just have to work through them.

            Steve

            1 Reply Last reply Reply Quote 0
            • I
              iFloris
              last edited by

              Good guess!  ./writeio 0x408f 19 turns the led green without blinking.

              Edit: Seeing as you now know how to turn the led green on both the x peak and x core devices, perhaps someone can help you with building a package for everyone using a flavor of the firebox?

              one layer of information
              removed

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                @iFloris:

                Edit: Seeing as you now know how to turn the led green on both the x peak and x core devices, perhaps someone can help you with building a package for everyone using a flavor of the firebox?

                That's the long term plan. Hopefully we can also include the lcd driver so we can have a single package for Firebox users that doesn't get broken every time you update.

                It seems like we're missing something here though. The control is very different to the other two boxes.
                Can you tell me what the out outs of these are:

                ./readio 0x409a
                ./readio 0x409b

                Do you have bios access to your box? You can set the initial led status in the bios on the X-core. I can't remember what you could set it to but it was a load of different settings. We should be able to get, at least, all of those.

                Anyway it seems like we are mostly victorious!  ;D

                Steve

                1 Reply Last reply Reply Quote 0
                • I
                  iFloris
                  last edited by

                  Nice, but strange that the control is so very different.
                  Output for the commands is:

                  
[2.0-BEAT5][admin@firebox1.domain]/etc/rc.d(3): ./readio 0x409a
Reading 409a :4
[2.0-BEAT5][admin@firebox1.domain]/etc/rc.d(4): ./readio 0x409b
Reading 409b :0

                  And no, I don't have access to the bios.
                  It has been at least ten years since I touched a pci video card..

                  one layer of information
                  removed

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Clearing out some stuff over the weekend I found an ISA video card!  Couldn't bring myself to dispose of an antique like that.  ::)

                    Hmm, 00 04 indicates that none of the gpios are set to flash, yet they are flashing….

                    @iFloris:

                    ./writeio 0x408f 0x03 does the same, but turns the led back to red.

                    When you said that did you mean just fast flashing red or did you mean flashing red then green?

                    With the led set to green solid (0x408f = 0x19) try setting 0x409B to 0x10. It should make the led flash slowly (about 1Hz) but it may be between green and (some other state!).

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • I
                      iFloris
                      last edited by

                      @stephenw10:

                      When you said that did you mean just fast flashing red or did you mean flashing red then green?
                      With the led set to green solid (0x408f = 0x19) try setting 0x409B to 0x10. It should make the led flash slowly (about 1Hz) but it may be between green and (some other state!).

                      OT: ISA, amazing! I think the only time I ever had anything to do with ISA was when I tried to upgrade my (then modern!) 386.

                      But I digress. What I meant by the same but ted was that the led flashed as fast as when it was green, but that it was the red led that was flashing.
                      So just red flashing.

                      ./writeio 0x409B 0x10 results in slow (1 second/Hz) flashing, alternating between red and green (as you thought it might).

                      To iterate what we've found so far:

                      ./writeio 0x408f 0x11    - turns the led green and blinks (fast)
                      ./writeio 0x408f 0x03    - turns the led red and blinks (fast)
                      ./writeio 0x408f 19      - turns the led green without blinking
                      ./writeio 0x409B 0x10  - turns the led green and blinks (slowly)
                      ./writeio 0x0408f 0x09  - turns the led red without blinking

                      Is that correct?
                      And does this give us the means to control the led completely, or is there something else that we need to test?

                      one layer of information
                      removed

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        That looks correct.
                        Since 0x03 and 0x01 are the same it appears the other two gpios do not have any function for the led.

                        One weird thing is that there's no 'off'. As I said in an earlier post I think that Watchguard probably used a software method to flash the leds since they have fast and slow flash on all the boxes. However to do this you would need an off state to switch to.

                        I can certainly plug those numbers in my program and we will then have control via an easy to use command line.
                        Something tells me we're missing something though. This is definitely different to the other boxes where the gpios control the led directly, here we seem to be talking to some intermediate piece of hardware.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Here is the new program incorporating all the new values for the X-Core.
                          Obviously rename it WGXepc (remove the .png extension). Copy it to your box and chmod it to 0755. Run it!  ;D

                          Because the new memory locations were quite high I felt it would be dangerous to simply write all the values on every box, which is what the previous programs did. This new one tries to find out which Firebox model it's running on by reading the gpio_sel register and comparing it with known values. It works fine for me here on the three boxes I've tested it on but I don't have an X-Core and I can imagine that a different bios version might cause detection problems. Deal with that if it happens. Hopefully this might stop people randomly installing it on any box and messing with some important setting!  ::)

                          It seems to run fine on 1.2.3 and 2.0Beta5.

                          Steve

                          Edit: Now tested as working on the X-core boxes and under 2.0RC2

                          WGXepc.png

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            For bonus points, convert it to an led(4) driver :-)

                            http://www.freebsd.org/cgi/man.cgi?query=led&apropos=0&sektion=0&manpath=FreeBSD+8.1-RELEASE&format=html
                            http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/dev/led/

                            See also: http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/i386/i386/geode.c

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 0
                            • F
                              fastcon68
                              last edited by

                              will this work on the embedded version 1.2.3?
                              RC

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                It should work fine with any install type.
                                I've tested it with NanoBSD installs of 1.2.3-release and 2.0Beta.

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • B
                                  brcisna
                                  last edited by

                                  stephenw10.

                                  I been trying to follow this thread as of late. I am a bit confused on WG FB hardware versioning? Will your proggy work on an x550 WG FB?
                                  If so,Ill give it a spin in a couple days and post a report.

                                  Thanks,
                                  Barry

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    I'm assuming you mean the X550e right?
                                    If so then yes it should work fine. I used the X750e to test it and that's the same box but with a 4 port add on card.
                                    You get all the functions on that box.

                                    Steve

                                    Edit: Just to add, if you have an unusual Firebox then it probably won't be detected as a Firebox and the program will just exit. Even if it happens to have the gpio_sel register set in such a way that it is detected as a Firebox the likely result is that nothing will happen. Even if, in a bizarre coincidence, there is something present at the gpio being altered it all gets reset by the bios at boot time so you can just turn it off and on again.  ;D

                                    1 Reply Last reply Reply Quote 0
                                    • I
                                      iFloris
                                      last edited by

                                      Sorry for the delay.

                                      I've tried the program and it seems to work!

                                      
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(15): chmod 0755 WGXepc 
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(16): ./WGXepc
Found Firebox X-Core
WGXepc Version 0.3 17:2:2011
WGXepc can accept two arguments:
 -f (fan) will return the current fan speed or if followed
    by a number in hex, 00-FF, will set it.
 -l (led) will set the arm/disarm to the second argument:
    red, green, red_flash, green_flash, off
Not all functions are supported by all models
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(17): ./WGXepc -l green
Found Firebox X-Core
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(18): ./WGXepc -l red
Found Firebox X-Core
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(19): ./WGXepc -l red_flash
Found Firebox X-Core
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(20): ./WGXepc -l green_flash
Found Firebox X-Core
[2.0-BETA5][admin@firebox1.domain]/etc/rc.d(21): ./WGXepc -l green
Found Firebox X-Core

                                      The commands do what they are supposed to, and response is immediate.

                                      one layer of information
                                      removed

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Excellent!  ;D

                                        1 Reply Last reply Reply Quote 0
                                        • B
                                          brcisna
                                          last edited by

                                          stephen,

                                          I will have to look at my WG FB. I am thinking mine is not the 'e' suffix? Doesn't the 'e' suffixed WG FB's have the gigE ethernet?
                                          Mine only has 10/100 nics in it. I should know what the model is too?:(.
                                          Won't know for a couple days,when I get back to work. I'll give your prog a spin regardless and report.
                                          I guess,I'm not real clear. Does your prog do the 'native' green to red routine at bootup,when everything is up, ,or is it simply capable of you manually toggling the led to do whatever you want it to?

                                          thanks,
                                          Barry

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Hmm, x550 no e?
                                            Be interesting to see if it detects it.
                                            At the moment the program is 'manual' only.
                                            It's easy to put a bash script in /usr/local/etc/rc.d to make it go green at the end of boot.

                                            Steve

                                            Edit:
                                            I can't find any mention of the x550 on Watchguard's website, but a lot of the good information is hidden away. The models I haven't yet any gpio information on are:
                                            X-Peak-E; almost certainly the same as the X-Core-E but with more ram, faster CPU and vpn card.
                                            SSL-100; looks like an X550E with different software, maybe an encryption card, 2GB ram!
                                            SSL-500/1000; also same as X550E.
                                            SSL-Core; looks like an X-Core but has different software using the harddisk bay!

                                            All the other newer models are still way too valuable to show up on Ebay!  ::)

                                            Edit: X-Peak-E confirmed working. Same board as the X-Core-E.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post