Successful Install on Watchguard Firebox X700!

moogoom · Sep 5, 2012, 6:37 PM

Steve !
I have problem with console. I remove CF card from X700. On my HDD (40GB from old laptop with ATA interface) I installed pfSense. Installed I make on USB port on my laptop and converter USB-ATA (dedicated for laptop HDD). Installation is OK!. When I connected HDD from X700 and open console terminal (9600-8-n-1-hardware) I have empty screen. When I connect CF, console is live :-) When I make bug ? Maybe I must switched some jumper on the board ?

Pawel

moogoom · Sep 5, 2012, 8:10 PM

OK ! I see on my terminal :

mountroot>

:-))))

stephenw10 · Sep 5, 2012, 10:08 PM

Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:

ufs:ad2s1a

Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve

moogoom · Sep 5, 2012, 11:32 PM

@stephenw10:

Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:
ufs:ad2s1a
Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve

It's all right. My disk mounted, but is problem:

init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

:/

Do You have any idea ? I go to read forum. :-)

Pawel

moogoom · Sep 5, 2012, 11:50 PM

@moogoom:

@stephenw10:
Type ? at that prompt to see what drives are available.
Assuming your laptop drive is set as master then the correct entry should be:
ufs:ad2s1a
Also if you did the standard 'full' install you will have to tell it to use the serial port for the console at some point. This can be done in the webgui if you boot fully in the laptop first.

Steve
It's all right. My disk mounted, but is problem:

init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

:/

Do You have any idea ? I go to read forum. :-)

Pawel

it's such communicat:

Bootup complete.
rm: /booting : No such file or directory
init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

Maybe is problem with bootloader ?

moogoom · Sep 6, 2012, 12:09 PM

@moogoom:

it's such communicat:

Bootup complete.
rm: /booting : No such file or directory
init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory

Maybe is problem with bootloader ?

Hello Steve !

I read about this problem on Internet and think maybe problem is with support for disk driver. I find this article in network: http://lists.freebsd.org/pipermail/freebsd-bugs/2007-April/023225.html . What do you think ?

Pawel

stephenw10 · Sep 6, 2012, 1:52 PM

I don't that is the problem. It's a patch to support SATA drives on FreeBSD 6.2. pfSense 2.0.1 is based on FreeBSD 8.1 and the x700 doesn't have any SATA interfaces anyway.
What have you done so far exactly?

Steve

moogoom · Sep 6, 2012, 2:12 PM

@stephenw10:

I don't that is the problem. It's a patch to support SATA drives on FreeBSD 6.2. pfSense 2.0.1 is based on FreeBSD 8.1 and the x700 doesn't have any SATA interfaces anyway.
What have you done so far exactly?

Steve

Hi Steve !

Nothing . I have problem with pfSense installation on X700 and I seek solution.

Pawel

moogoom · Sep 6, 2012, 3:32 PM

Steve !

I have an idea. Maybe must I do installing pfSense on the CF card and running X700 with CF card and HDD. Only I don't know, can I move system pfSense from CF card –>on HDD? It's possible ?
Maybe I should change completely method and start from scratch? New install ? I should seek new (different) HDD ?

I don't know why it just happened to me... It don't can be very hard. ;)

Log from my console:

miibus5: <mii bus=""> on re5
rlphy5: <realtek internal="" media="" interface=""> PHY 0 on miibus5
rlphy5:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
re5: [FILTER]
isab0: <pci-isa bridge=""> at device 31.0 on pci0
isa0: <isa bus=""> on isab0
atapci0: <intel ich2="" udma100="" controller=""> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 31.1 on pci0
ata0: <ata 0="" channel=""> on atapci0
ata0: [ITHREAD]
ata1: <ata 1="" channel=""> on atapci0
ata1: [ITHREAD]
cpu0 on motherboard
pmtimer0 on isa0
unknown: <pnp0c01> can't assign resources (memory)
atrtc0: <at realtime="" clock=""> at port 0x70-0x71 irq 8 pnpid PNP0b00 on isa0
atkbdc0: <keyboard controller="" (i8042)=""> at port 0x60,0x64 irq 1 pnpid PNP0303 on isa0
atkbd0: <at keyboard=""> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
uart0: <16550 or compatible> at port 0x3f8-0x3ff irq 4 flags 0x10 pnpid PNP0501 on isa0
uart0: [FILTER]
uart0: console (9600,n,8,1)
ppc0: <ecp parallel="" printer="" port=""> at port 0x378-0x37f,0x778-0x77a irq 7 drq 3 pnpid PNP0401 on isa0
ppc0: Generic chipset (ECP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/16 bytes threshold
ppc0: [ITHREAD]
ppbus0: <parallel port="" bus=""> on ppc0
plip0: <plip network="" interface=""> on ppbus0
plip0: [ITHREAD]
lpt0: <printer> on ppbus0
lpt0: [ITHREAD]
lpt0: Interrupt-driven port
ppi0: <parallel i="" o=""> on ppbus0
orm0: <isa option="" rom=""> at iomem 0xe0000-0xe0fff pnpid ORM0000 on isa0
unknown: <pnp0c01> can't assign resources (memory)
RTC BIOS diagnostic error 20 <config_unit>Timecounter "TSC" frequency 1202731218 Hz quality 800
Timecounters tick every 1.000 msec
IPsec: Initialized Security Association Processing.
ata1: DMA limited to UDMA33, controller found non-ATA66 cable
ad2: 38154MB <hts541040g9at00 mb2ia60a=""> at ata1-master UDMA33
GEOM: ad2: partition 1 does not start on a track boundary.
GEOM: ad2: partition 1 does not end on a track boundary.
GEOM: ad2s1: geometry does not match label (255h,63s != 16h,255s).
Trying to mount root from ufs:/dev/da0s1a
ROOT MOUNT ERROR:
If you have invalid mount options, reboot, and first try the following from
the loader prompt:

     set vfs.root.mountfrom.options=rw

and then remove invalid mount options from /etc/fstab.

Loader variables:
vfs.root.mountfrom=ufs:/dev/da0s1a
vfs.root.mountfrom.options=rw

Manual root filesystem specification:
  <fstype>:<device>  Mount <device> using filesystem <fstype>
                       eg. ufs:/dev/da0s1a
                       eg. cd9660:/dev/acd0
                       This is equivalent to: mount -t cd9660 /dev/acd0 /

  ?                  List valid disk boot devices
  <empty line="">       Abort manual input

mountroot> ufs:ad2s1a
Trying to mount root from ufs:ad2s1a
WARNING: / was not properly dismounted
Configuring crash dumps...
No suitable dump device was found.
Mounting filesystems...
WARNING: R/W mount of / denied.  Filesystem is not clean - run fsck
mount: /dev/ad2s1a : Operation not permitted
** /dev/ad2s1a
** Last Mounted on /
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
1074 files, 36866 used, 10117329 free (161 frags, 1264646 blocks, 0.0% fragmentation)

***** FILE SYSTEM MARKED CLEAN *****
Can't stat /dev/da0s1b: No such file or directory
Can't stat /dev/da0s1b: No such file or directory
mount: /dev/da0s1b : No such file or directory
readlink: not found
grep: not found
/etc/rc: /usr/sbin/pwd_mkdb: not found
/etc/rc: /usr/bin/cut: not found
/etc/rc: /usr/bin/grep: not found
/etc/rc: /usr/bin/grep: not found
/etc/rc: /usr/bin/wc: not found
/etc/rc: /usr/bin/grep: not found
/etc/rc: /usr/bin/cut: not found
[: : bad number

     ___
 ___/ f \
/ p \___/ Sense
\___/   \
    \___/

Welcome to  2.0.1-RELEASE  on the 'pfSense' platform ...

/etc/rc: /usr/bin/grep: not found
/etc/rc: /usr/bin/cut: not found
Dump device does not exist.  Savecore not run.
Creating symlinks...ln: /tmp/tmp: No such file or directory
mkdir: /tmp: No such file or directory
chmod: /tmp/uploadbar: No such file or directory
.grep: not found
wc: not found
awk: not found
[: : bad number
grep: not found
wc: not found
awk: not found
[: : bad number
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
/etc/rc: /usr/sbin/clog: not found
chmod: /var/log/*.log: No such file or directory
./etc/rc: /usr/bin/grep: not found
/etc/rc: /usr/bin/wc: not found
/etc/rc: /usr/bin/cut: not found
.ldconfig: warning: /usr/lib: No such file or directory
ldconfig: warning: /usr/local/lib: No such file or directory
done.
/etc/rc: /usr/bin/awk: not found
[: -lt: unexpected operator
/etc/rc: /usr/bin/cap_mkdb: not found
/etc/rc: cannot create /tmp/php_errors.txt: No such file or directory
/etc/rc: /usr/local/bin/php: not found
/etc/rc: /usr/bin/nice: not found
Launching the init system.../etc/rc: /usr/bin/touch: not found
/etc/rc: /etc/rc.bootup: not found
Starting CRON... cd: can't cd to /tmp
done.
/etc/rc: /etc/rc.start_packages: not found
/etc/rc: /usr/local/bin/minicron: not found
/etc/rc: /usr/local/bin/minicron: not found
/etc/rc: /usr/local/bin/minicron: not found
chmod: /tmp/.: No such file or directory
Bootup complete
rm: /booting: No such file or directory
/etc/rc: /usr/local/bin/beep.sh: not found
rm: /tmp/config.cache: No such file or directory
Oct 29 11:41:25 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file orOct 29 11:41:25 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:41:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file orOct 29 11:41:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:42:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file orOct 29 11:42:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:42:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
 orOct 29 11:42:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:43:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:43:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:43:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:43:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:44:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:44:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:44:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:44:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:45:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:45:26 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:45:56 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:45:57 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:46:27 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:46:27 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:46:57 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:46:57 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:47:27 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:47:27 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
Oct 29 11:47:57 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyu0: No such file or directory
Oct 29 11:47:57 init: can't exec getty '/usr/libexec/getty' for port /dev/ttyv0: No such file or directory
[/code]

Pawel</empty></fstype></device></device></fstype></hts541040g9at00></config_unit></pnp0c01></isa></parallel></printer></plip></parallel></ecp></at></keyboard></at></pnp0c01></ata></ata></intel></isa></pci-isa></realtek></mii>

moogoom · Sep 7, 2012, 6:14 PM

I'm happy !!! :-)
Victory !!! I have running system pfSense on the WatchGuard X700.

My problem remove when I connected my HDD on ATA slot in My PC by means of adapter ATA (2,5") <–> ATA (3,5). Next step - as in first post.

Steve - THANK YOU from Your helping. I'm very happy, because I can make first configuration. Question: Can I find on forum any configuration instruction ?

P.S. My english language is bad. Sorry. ;-)

stephenw10 · Sep 7, 2012, 6:32 PM

Ah so it was connected via usb when you installed before?
There are instructions in the wiki: http://doc.pfsense.org/index.php/Main_Page
What configuration do you want?

Steve

moogoom · Sep 8, 2012, 10:11 AM

Hi Steve !

Yes, first so it was connected via usb. And this was problem…

I want no special configuration: 1 WAN (4/2 Mbps with 5 used public IP) and 2 LAN.
LAN 1: Network in my home and office - because i have office in home. ;-)
LAN 2: Network for my friends and neighbors. Unfortunately I live in block...
LAN 3: DMZ for my 2-3 servers: 1 - my machine (HTTP, mail, ftp, mail, etc.) 2 - machine for my frends/neighbors (mail, ftp, etc.), 3 - DNS (chroot) and ftp for my best friend, hi is computer science specialist. This machine is for him backups.

Networks LAN1 and LAN2 are NOT CONNECTED, but are have access to Internet.
LAN 3 - known...

Pawel

stephenw10 · Sep 8, 2012, 3:04 PM

Maybe better to discuss this in a new thread since this is now a general configuration problem not specific to the firebox. This thread is already too long! ;)

It doesn't look like a difficult config though.

Steve

moogoom · Sep 8, 2012, 7:53 PM

Of course. I have a request to the Moderator: Do You move my last 2 entries to a new topic: "Configure 1xWAN, 2xLAN and 1xDMZ of 5 IP addresses" ?
Thank You. :)

Steve - if you want help me understand pfSense rules - welcome to the new topic or my e-mail. Thank You for You fast helping. ;D

Pawel

moogoom · Dec 31, 2012, 1:18 PM

Happy New 2013 Year!

Thank you for your help and kindness. At the beginning of 2013 I wish You all the best and fulfill their dreams. All the best!

Pablo

woc38 · Jan 6, 2013, 6:18 PM

After upgrading from 2.0.1-RELEASE to 2.0.2-RELEASE the serial console stopped working again on my Firebox X700. The console shows the boot progress and then stops working after 'Bootup complete'.

In previous 2.0.x versions I used this solution.
After the upgrade to 2.0.2 the file "/usr/local/share/misc/serialbandaid.sh" was still available. The added lines to /etc/rc however, where gone. By simply adding the described lines again and a reboot the serial console works again!

stephenw10 · Jan 6, 2013, 6:31 PM

If you use this solution instead it will survive a firmware update:
http://forum.pfsense.org/index.php/topic,7458.msg241783.html#msg241783

Also that is 'cleaner' since it doesn't involve editing any files or running scripts.

Steve

woc38 · Jan 7, 2013, 10:17 PM

Thanks Steve! I thought I used that method before, but can't remind exactly… I will give it a new try.

vrocco · Jan 13, 2013, 8:22 PM

Does anyone have any information on the max processor that these boxes will support? I know some have replaced the processor with 1.4 Pentium M or Celerons, has anyone gone higher?

If I'm going to buy a replacement, I might as well go as big as possible since these processors are so cheap.

Thanks

stephenw10 · Jan 13, 2013, 8:35 PM

On the X-Core boxes you can only use Pentium 3 (or equivalent Celeron chip). The fastest P3 was 1.4GHz.
http://en.wikipedia.org/wiki/List_of_Intel_Pentium_III_microprocessors#.22Tualatin.22_.28130_nm.29

I don't think anyone has ever tried one of the VIA Socket 370 CPUs. If those worked you would have the advantage of the on board encryption accelration (VIA Padlock):
http://en.wikipedia.org/wiki/List_of_VIA_C3_microprocessors#.22Nehemiah.22_.28130_nm.29

Steve