Successful Install on Watchguard Firebox X700!

dig1234 · Aug 10, 2012, 8:28 PM

Just want everyone in the room to know that we (Watchguard Police) are coming to confiscate the modified Watchguard appliances.

You've violated your agreements and we know about it.

Actually once we have you here there's some issues we'd like to discuss..

stephenw10 · Aug 11, 2012, 12:02 AM

Just for a second there alarms went off in my head! ::)

Steve

summy · Aug 13, 2012, 10:13 PM

Ok, so I bought an X700 and I've been having fun messing with it. I had an older IDE hdd sitting around, and figured I would try to make use of it instead of going the CF route. I installed PFsense onto the hdd through a live cd, did the 99 install and selected embedded for console access. I had issues with the 2.x releases, so for now I put on 1.2.3 and planned on upgrading through the WebGUI to 2.1, etc. I put the hdd in, started the FB, and I get to the section where pfsense asks to mount the new hdd. Typing in "?" gives nothing to mount, auto-detection fails and will re-boot the box, and I tried a few of the options people have mentioned here (ufs:ad0s1a, etc)to no success. Am I missing something here? Thanks for any help ^^

I can post screens of the initial startup later tonight when I get home if that's necessary.

stephenw10 · Aug 13, 2012, 11:57 PM

Hmm, I've not actually done this myself on this box but according to the very first post of this now ridiculously long thread:
@jmcentire:

8. Couldn't mount drive(since installed on different machine), so it asks what you want to mount enter: ufs:ad2s1a

The internal IDE connector is the secondary and assuming your drive is configured as master (or cable select) it is assigned as ad2 by FreeBSD. Edit: I'm actually a little vague on this! ::)

Steve

summy · Aug 14, 2012, 4:23 AM

@stephenw10:

Hmm, I've not actually done this myself on this box but according to the very first post of this now ridiculously long thread:
@jmcentire:

8. Couldn't mount drive(since installed on different machine), so it asks what you want to mount enter: ufs:ad2s1a

The internal IDE connector is the secondary and assuming your drive is configured as master (or cable select) it is assigned as ad2 by FreeBSD. Edit: I'm actually a little vague on this! ::)

Steve

I thought the same thing, and actually tried quite a few combination of numbers to be safe… same result : / ad0, ad1, ad2, etc. hdd is also selected as master, and I forgot to mention I have the CF removed right now.

summy · Aug 14, 2012, 6:21 AM

I loaded the hdd into another computer to possibly modify fstab as I had seen in another thread. Here is a pic of the output, it looks like stephenw10 and I were on the right track, no idea why it won't mount. Any other ideas?

wallabybob · Aug 14, 2012, 6:45 AM

The console output before the report of the mount failure might be informative. For example, there might be a report of disk errors.

summy · Aug 14, 2012, 7:03 AM

@wallabybob:

The console output before the report of the mount failure might be informative. For example, there might be a report of disk errors.

Here is the full bootup and me entering "?", as well as "ufs:ad2s1a" Thanks!

wallabybob · Aug 14, 2012, 9:52 AM

The startup shows no signs of recognising your hard disk, which makes me wonder what the system was booting from.

Here's an extract from a pfSense startup showing detection of ad0 (hard disk) on disk channel ata0 on controller atapci0:

isa0: <isa bus="">on isab0
atapci0: <via 8235="" udma133="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xed00-0xed0f at device 17.1 on pci0
ata0: <ata channel="">at channel 0 on atapci0
ata0: [ITHREAD]
ata1: <ata channel="">at channel 1 on atapci0
ata1: [ITHREAD]
pci0: <multimedia, audio="">at device 17.5 (no driver attached)
vr0: <via 10="" vt6102="" rhine="" ii="" 100basetx="">port 0xe800-0xe8ff mem 0xef004000-0xef0040ff irq 11 at device 18.0 on pci0
vr0: Quirks: 0x0
vr0: Revision: 0x74
miibus1: <mii bus="">on vr0
ukphy0: <generic ieee="" 802.3u="" media="" interface="">PHY 1 on miibus1
ukphy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto, auto-flow
vr0: [ITHREAD]
acpi_tz0: <thermal zone="">on acpi0
atrtc0: <at realtime="" clock="">port 0x70-0x73 irq 8 on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
atpic: Mismatched config for IRQ4: trigger edge, polarity low
uart0: [FILTER]
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
atpic: Mismatched config for IRQ3: trigger edge, polarity low
uart1: [FILTER]
pmtimer0 on isa0
sc0: <system console="">at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
atkbdc0: <keyboard controller="" (i8042)="">at port 0x60,0x64 on isa0
atkbd0: <at keyboard="">irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
ppc0: parallel port not found.
acpi_throttle0: <acpi cpu="" throttling="">on cpu0
Timecounter "TSC" frequency 797736152 Hz quality 800
Timecounters tick every 1.000 msec
IPsec: Initialized Security Association Processing.
usbus0: 12Mbps Full Speed USB v1.0
usbus1: 12Mbps Full Speed USB v1.0
usbus2: 12Mbps Full Speed USB v1.0
usbus3: 480Mbps High Speed USB v2.0
ad0: DMA limited to UDMA33, device found non-ATA66 cable
ad0: 955MB <transcend 20071207="">at ata0-master UDMA33
ugen0.1: <via>at usbus0
uhub0: <via 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0
ugen1.1: <via>at usbus1
uhub1: <via 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1
ugen2.1: <via>at usbus2
uhub2: <via 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2
ugen3.1: <via>at usbus3
uhub3: <via 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus3
uhub0: 2 ports with 2 removable, self powered
uhub1: 2 ports with 2 removable, self powered
uhub2: 2 ports with 2 removable, self powered
uhub3: 6 ports with 6 removable, self powered
ugen3.2: <ralink>at usbus3
run0: <1.0> on usbus3
run0: MAC/BBP RT3070 (rev 0x0201), RF RT3020 (MIMO 1T1R), address c8:3a:35:c4:ee:f3
run0: firmware RT2870 loaded
Trying to mount root from ufs:/dev/ad0s1a</ralink></via></via></via></via></via></via></via></via></transcend></acpi></at></keyboard></generic></system></at></thermal></generic></mii></via></multimedia,></ata></ata></via></isa>

I'm a little surprised your startup didn't report any USB devices, but maybe the BIOS disabled USB devices on the grounds they couldn't be used in that box.

There is a boot variable that can be added to /boot/loader.conf.local (or specified to the FreeBSD boot loader to pause a little before looking for the boot device. The variable is kern.cam.boot_delay and it takes a value in milliSeconds, thus kern.cam.boot_delay=10000 will pause 10 seconds.

First time you will need to specify the variable and value at boot time, then you can edit /boot/loader.conf.local so that it will be picked up automatically on subsequent boots. (Or you can boot the hard drive on another system, then edit /boot/loader.conf.local.)

At the FreeBSD boot loader startup (options 1-7 listed), type 6 to get the loader prompt, then at the prompt type the line

kern.cam.boot_delay=10000

then at the next prompt type

boot

and see if that makes a difference.

stephenw10 · Aug 14, 2012, 10:08 AM

Hmm, yes that's a little odd, not detecting a drive.

A problem I have seen, though it may not apply here, is that sometimes when you install on an old drive the boot slice can be offset by a previous install. However you can see the two slices appear correctly as s1a and s1b on your other machine. :-\

Steve

summy · Aug 14, 2012, 4:58 PM

@wallabybob:

The startup shows no signs of recognising your hard disk, which makes me wonder what the system was booting from.

I'm a little surprised your startup didn't report any USB devices, but maybe the BIOS disabled USB devices on the grounds they couldn't be used in that box.

There is a boot variable that can be added to /boot/loader.conf.local (or specified to the FreeBSD boot loader to pause a little before looking for the boot device. The variable is kern.cam.boot_delay and it takes a value in milliSeconds, thus kern.cam.boot_delay=10000 will pause 10 seconds.

First time you will need to specify the variable and value at boot time, then you can edit /boot/loader.conf.local so that it will be picked up automatically on subsequent boots. (Or you can boot the hard drive on another system, then edit /boot/loader.conf.local.)

At the FreeBSD boot loader startup (options 1-7 listed), type 6 to get the loader prompt, then at the prompt type the line

kern.cam.boot_delay=10000

then at the next prompt type

boot

and see if that makes a difference.

I'll try updating the boot delay tonight, I think its current value is 3 seconds (3000), maybe some extra time will help? X700 doesn't have any USB ports that I know of, which is probably why they don't show up. I'm just stumped as to how it can load pfsense off the hdd, yet not find it by any other means??? I updated the "loader.conf" in my other computer last night to see if that would resolve the issue and still nothing. I'll play more tonight.. Thanks!

moogoom · Sep 4, 2012, 7:01 PM

Hello all !

I welcome Yours. I'm new user pfsense forum. I'm from Poland and I send You greetings.
I found on the Internet this forum and I liked the idea of pfSense on the WG X700 platform. I bought him, I have him (x700) and I want install pfSense on him.

I read forum but I have problem with installation. Do you can help me ? I need instruction "step by step". I want install pfsense on the HDD 40GB with old laptop (ATA 44pin).

I need your help. Thanks.

Pawel

moogoom · Sep 4, 2012, 7:28 PM

@moogoom:

Hello all !

I welcome Yours. I'm new user pfsense forum. I'm from Poland and I send You greetings.
I found on the Internet this forum and I liked the idea of pfSense on the WG X700 platform. I bought him, I have him (x700) and I want install pfSense on him.

I read forum but I have problem with installation. Do you can help me ? I need instruction "step by step". I want install pfsense on the HDD 40GB with old laptop (ATA 44pin).

I need your help. Thanks.

Pawel

I forgot ask question: do i can install immediately 2.0.1 version ? If yes, the what exactly ?

Pawel

stephenw10 · Sep 4, 2012, 10:25 PM

Hi,
The easiest way to do this is to install from the CD on the HD while it's in the laptop and then transfer it to the firebox. When you first boot you will see the mountroot> prompt and you'll have to enter the mount point for root. Then edit the fstab to correct this error on subsequent boots.
Use the i386 iso image of 2.0.1 to do this, e.g: http://mirror.qubenet.net/mirror/pfsense/downloads/pfSense-2.0.1-RELEASE-i386.iso.gz

It's easier to use a CF card and the nanoBSD image.

Steve

moogoom · Sep 5, 2012, 3:27 PM

@stephenw10:

Hi,
The easiest way to do this is to install from the CD on the HD while it's in the laptop and then transfer it to the firebox. When you first boot you will see the mountroot> prompt and you'll have to enter the mount point for root. Then edit the fstab to correct this error on subsequent boots.
Use the i386 iso image of 2.0.1 to do this, e.g: http://mirror.qubenet.net/mirror/pfsense/downloads/pfSense-2.0.1-RELEASE-i386.iso.gz

It's easier to use a CF card and the nanoBSD image.

Steve

Thanks Steve !
I go to check it.

Pawel

moogoom · Sep 5, 2012, 6:37 PM

Steve !
I have problem with console. I remove CF card from X700. On my HDD (40GB from old laptop with ATA interface) I installed pfSense. Installed I make on USB port on my laptop and converter USB-ATA (dedicated for laptop HDD). Installation is OK!. When I connected HDD from X700 and open console terminal (9600-8-n-1-hardware) I have empty screen. When I connect CF, console is live :-) When I make bug ? Maybe I must switched some jumper on the board ?

Pawel

moogoom · Sep 5, 2012, 8:10 PM

OK ! I see on my terminal :

mountroot>

:-))))

stephenw10 · Sep 5, 2012, 10:08 PM

Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:

ufs:ad2s1a

Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve

moogoom · Sep 5, 2012, 11:32 PM

@stephenw10:

Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:
ufs:ad2s1a
Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve

It's all right. My disk mounted, but is problem:

init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

:/

Do You have any idea ? I go to read forum. :-)

Pawel

moogoom · Sep 5, 2012, 11:50 PM

@moogoom:

@stephenw10:
Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:
ufs:ad2s1a
Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve
It's all right. My disk mounted, but is problem:

init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

:/

Do You have any idea ? I go to read forum. :-)

Pawel

it's such communicat:

Bootup complete.
rm: /booting : No such file or directory
init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

Maybe is problem with bootloader ?