Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problems on a watchguard x550e

    Scheduled Pinned Locked Moved Hardware
    26 Posts 3 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      drdyno
      last edited by

      Steve,

      Thank you for responding here are some screenshots..

      ![Screenshot 2014-05-18 10.17.32.png](/public/imported_attachments/1/Screenshot 2014-05-18 10.17.32.png)
      ![Screenshot 2014-05-18 10.17.32.png_thumb](/public/imported_attachments/1/Screenshot 2014-05-18 10.17.32.png_thumb)
      ![Screenshot 2014-05-18 14.20.10.png](/public/imported_attachments/1/Screenshot 2014-05-18 14.20.10.png)
      ![Screenshot 2014-05-18 14.20.10.png_thumb](/public/imported_attachments/1/Screenshot 2014-05-18 14.20.10.png_thumb)

      1 Reply Last reply Reply Quote 0
      • D
        drdyno
        last edited by

        Steve,

        also I checked both sets of dip switches both sets are set for dolthan.

        I have not installed ANY packages in this setup as I can't even get it to load.

        Jeff

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          If you run it at the console you get a break down of CPU usage in a line at the top which is useful. However here it's obvious 'check reload status' is using all your cpu cycles. That is usually a symptom of something else.

          Powerd is not a package it's enabled just with a check box.

          Anything in the system logs?

          Steve

          1 Reply Last reply Reply Quote 0
          • D
            drdyno
            last edited by

            it looks like it keeps refreshing the dhcpv6 address on the wan interface

            I disabled ipv6 on the wan and the cpu usage went to 0%

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Ah, well caught. What is it connected to upstream?
              pfSense can have problems if it is offered an incomplete or broken IPv6 interface. At the moment it will default to IPv6 if it's available so if it's broken you end up with nothing. See:
              https://doc.pfsense.org/index.php/Controlling_IPv6_or_IPv4_Preference

              Steve

              1 Reply Last reply Reply Quote 0
              • D
                drdyno
                last edited by

                Steve,

                currently I have the watchguard on my network behind another watchguard..

                my dell poweredge 10.13.x.x network

                to the wan of the firebox 192.168.1.x network.

                I have done this just to setup and configure the watchguard system to replace my poweredge server

                I have ipv6 running on my poweredge

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  So all pfSense boxes then? I wonder if it's some hardware offloading option that doesn't work with v6. Pure guess.  ::)

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • D
                    drdyno
                    last edited by

                    However I am now getting

                    ad0: TIMEOUT - READ_DMA timed out LBA=512

                    time outs and failure on boot

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Exactly what image did you flash to the CF card? DMA should be disabled on the standard Nano images.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • D
                        drdyno
                        last edited by

                        nanobsd-4g image

                        i was working on getting other this running and had just added entries into

                        /boot/loader.conf.local

                        and rebooted then I get these errors

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          What entries?

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • D
                            drdyno
                            last edited by

                            hw.msk.msi_disable=1
                            hint.p4tcc.0.disabled=1
                            hint.acpi_throttle.0.disabled=1
                            if_sk_load="yes"
                            if_msk_load="yes"

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Hmm, Ok. Those all look like things you probably want to have.
                              Look in /boot/loader.conf, you should see some entries disabling DMA:

                              
                              hw.ata.atapi_dma="0"
                              hw.ata.ata_dma="0"
                              hw.ata.wc="0"
                              
                              

                              The CF card slot on the X-e box doesn't have the pins that support DMA connected so if it tries to use it it fails.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • D
                                drdyno
                                last edited by

                                ok so dumb question.

                                how do i get to the /boot/loader.conf.local file if it won't boot?

                                1 Reply Last reply Reply Quote 0
                                • D
                                  drdyno
                                  last edited by

                                  nm i may have it figured out

                                  1 Reply Last reply Reply Quote 0
                                  • chpalmerC
                                    chpalmer
                                    last edited by

                                    @drdyno:

                                    However I am now getting

                                    ad0: TIMEOUT - READ_DMA timed out LBA=512

                                    time outs and failure on boot

                                    Scandisk brand card?

                                    Triggering snowflakes one by one..
                                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Interesting question.
                                      Can you boot from the alternate slice at the boot loader?
                                      I'm suddenly unsure of what appears at boot via the serial console.
                                      If you can escape at the boot load prompt you can issue a:

                                      set hw.ata.ata_dma="0"
                                      boot

                                      See: https://doc.pfsense.org/index.php/Boot_Troubleshooting#NanoBSD_on_Newer_Hardware

                                      If you've made a whole series of changes and revisions it might be time to re-image the card anyway.

                                      I don't think it's that Scandisk error since that usually displays 'NID not found'.
                                      https://doc.pfsense.org/index.php/DMA_and_LBA_Errors#Non-Fatal_Errors
                                      I could be wrong though.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        drdyno
                                        last edited by

                                        no its a duracell brand card.. only thing i could find from fry's at the time.

                                        I over wrote my loader.conf instead of writing it to loader.conf.local
                                        DOH!

                                        fixed now though..

                                        trying to figure out now if it is the hardware slowing it all down

                                        I get 54/11 from my poweredge

                                        and get 25/10 out of the firebox

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Can easily happen.  ;)

                                          With that CPU you should see in excess of 500Mbps. You will be limited by that fact that the X550e has only the sk interfaces which all share a single PCI bus.
                                          Which reminds me you don't need these lines in loader.conf.local since you don't have msk NICs:

                                          
                                          hw.msk.msi_disable=1
                                          if_msk_load="yes"
                                          

                                          Steve

                                          1 Reply Last reply Reply Quote 0
                                          • chpalmerC
                                            chpalmer
                                            last edited by

                                            @stephenw10:

                                            Can easily happen.  ;)

                                            With that CPU you should see in excess of 500Mbps. You will be limited by that fact that the X550e has only the sk interfaces which all share a single PCI bus.
                                            Which reminds me you don't need these lines in loader.conf.local since you don't have msk NICs:

                                            
                                            hw.msk.msi_disable=1
                                            if_msk_load="yes"
                                            

                                            Steve

                                            Unless your lucky enough to have liberated the addin card out of a bad x1250 in order to add it to your x550…    ;D 8)

                                            Thanks for the links about the errors.  Ive just ignored them on the logs with no issues on a production box at a remote site. But it would be nice to not see them again.

                                            Triggering snowflakes one by one..
                                            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.