Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is it possible to set up a console over USB serial?

    Scheduled Pinned Locked Moved General pfSense Questions
    20 Posts 3 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jahonixJ
      jahonix
      last edited by

      @guardian:

      Is it possible to set up a console over USB serial?
      …interact with the console out of band?

      What exactly do you have currently? (eg. pfsense hardware, where's serial, where is USB)

      For out of band management you could create an additional interface with its own subnet and exclusively allow ssh access there.
      Or use a board with an IPMI port (HP calls it ILO)

      1 Reply Last reply Reply Quote 0
      • G
        guardian Rebel Alliance
        last edited by

        Thanks guys..

        @Paint:

        The UART serial interfaces only show up as one line for each devices as well. 
        You should be able to create a serial device with two USB to RS232 adapters and one db9 gender changer  In theory this should work, but I have never used a setup like this. 
        Are you sure your machine has no com or UART interfaces? What is your motherboards?

        Here are the adapters I use for my machine.

        DB9 Female / DB9 Female Null Modem Mini Adapter: https://www.amazon.com/gp/product/7507825604/
        USB to RS232 DB9 Serial Male Converter Adapter Cable with FTDI: https://www.amazon.com/gp/product/B00QUZY4JC/

        @jahonix:

        @guardian:

        Is it possible to set up a console over USB serial?
        …interact with the console out of band?

        What exactly do you have currently? (eg. pfsense hardware, where's serial, where is USB)

        For out of band management you could create an additional interface with its own subnet and exclusively allow ssh access there.
        Or use a board with an IPMI port (HP calls it ILO)

        Thanks Guys….

        I had not seen those FTDI USB connectors.... that's neat... I'm going to try and get one of those.

        Do you have this hooked up to pfSense?  Which side, and what does the dmesg look like?

        The pfSense box is a little net appliance from China... 4 Intel Nics
        https://www.amazon.com/gp/product/B019Z8T9J0/ref=oh_aui_detailpage_o00_s00?ie=UTF8&psc=1

        I do at this point have one real serial port on my Windows Box which I will be using to do the admin, so I should be OK, but I don't have an extra NIC (although a USB NIC is a possibilty if absolutely necessary.  Out of band is not essential as it's a home network, but "nice to have" if easy to do.

        What if anything will come out over the USB serial during reboot?  (SSH is obviously dead till everything is up)

        If you find my post useful, please give it a thumbs up!
        pfSense 2.7.2-RELEASE

        1 Reply Last reply Reply Quote 0
        • P
          Paint
          last edited by

          @guardian:

          Thanks guys..

          @Paint:

          The UART serial interfaces only show up as one line for each devices as well. 
          You should be able to create a serial device with two USB to RS232 adapters and one db9 gender changer  In theory this should work, but I have never used a setup like this. 
          Are you sure your machine has no com or UART interfaces? What is your motherboards?

          Here are the adapters I use for my machine.

          DB9 Female / DB9 Female Null Modem Mini Adapter: https://www.amazon.com/gp/product/7507825604/
          USB to RS232 DB9 Serial Male Converter Adapter Cable with FTDI: https://www.amazon.com/gp/product/B00QUZY4JC/

          @jahonix:

          @guardian:

          Is it possible to set up a console over USB serial?
          …interact with the console out of band?

          What exactly do you have currently? (eg. pfsense hardware, where's serial, where is USB)

          For out of band management you could create an additional interface with its own subnet and exclusively allow ssh access there.
          Or use a board with an IPMI port (HP calls it ILO)

          Thanks Guys….

          I had not seen those FTDI USB connectors.... that's neat... I'm going to try and get one of those.

          Do you have this hooked up to pfSense?  Which side, and what does the dmesg look like?

          The pfSense box is a little net appliance from China... 4 Intel Nics
          https://www.amazon.com/gp/product/B019Z8T9J0/ref=oh_aui_detailpage_o00_s00?ie=UTF8&psc=1

          I do at this point have one real serial port on my Windows Box which I will be using to do the admin, so I should be OK, but I don't have an extra NIC (although a USB NIC is a possibilty if absolutely necessary.  Out of band is not essential as it's a home network, but "nice to have" if easy to do.

          What if anything will come out over the USB serial during reboot?  (SSH is obviously dead till everything is up)

          Yes, i use that setup on my pfsense box in my signature.

          Serial console allows you to access the terminal before ssh and see the full boot process /debug if needed.

          pfSense i5-4590
          940/880 mbit Fiber Internet from FiOS
          BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
          Netgear R8000 AP (DD-WRT)

          1 Reply Last reply Reply Quote 0
          • G
            guardian Rebel Alliance
            last edited by

            @Paint:

            Yes, i use that setup on my pfsense box in my signature.

            Serial console allows you to access the terminal before ssh and see the full boot process /debug if needed.

            I assume that you are using a "real serial port" is on the pfSense box, and the USB is on the machine you are using for management correct?

            I don't know a lot about either FreeBSD or USB, but from what I have read (and may or may not have understood or remembered correctly), a "Real Serial Port", is (or at least can be) interrrupt driven I/O, but a USB serial is polled I/O (Am I correct???).  Is that going to work with pfSense (FreeBSD)?

            If you find my post useful, please give it a thumbs up!
            pfSense 2.7.2-RELEASE

            1 Reply Last reply Reply Quote 0
            • P
              Paint
              last edited by

              @guardian:

              @Paint:

              Yes, i use that setup on my pfsense box in my signature.

              Serial console allows you to access the terminal before ssh and see the full boot process /debug if needed.

              I assume that you are using a "real serial port" is on the pfSense box, and the USB is on the machine you are using for management correct?

              I don't know a lot about either FreeBSD or USB, but from what I have read (and may or may not have understood or remembered correctly), a "Real Serial Port", is (or at least can be) interrrupt driven I/O, but a USB serial is polled I/O (Am I correct???).  Is that going to work with pfSense (FreeBSD)?

              Yes, I am using real serial port on my pfSense box (RS232) with a RS232 to USB adapter to a raspberry Pi.

              I am not sure if a usb serial device will work via FreeBSD.

              pfSense i5-4590
              940/880 mbit Fiber Internet from FiOS
              BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
              Netgear R8000 AP (DD-WRT)

              1 Reply Last reply Reply Quote 0
              • G
                guardian Rebel Alliance
                last edited by

                Unfortunately I don't have a USB port on my pfSense box, so I don't have a choice.  I wonder if there is anyone here who knows FreeBSD well enough to know if it is possible or not.

                If you find my post useful, please give it a thumbs up!
                pfSense 2.7.2-RELEASE

                1 Reply Last reply Reply Quote 0
                • P
                  Paint
                  last edited by

                  @guardian:

                  Unfortunately I don't have a USB port on my pfSense box, so I don't have a choice.  I wonder if there is anyone here who knows FreeBSD well enough to know if it is possible or not.

                  I did some more research on this….. I don't think the console will work over usb

                  pfSense i5-4590
                  940/880 mbit Fiber Internet from FiOS
                  BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
                  Netgear R8000 AP (DD-WRT)

                  1 Reply Last reply Reply Quote 0
                  • G
                    guardian Rebel Alliance
                    last edited by

                    Thanks… I was afraid of that.

                    If you find my post useful, please give it a thumbs up!
                    pfSense 2.7.2-RELEASE

                    1 Reply Last reply Reply Quote 0
                    • jahonixJ
                      jahonix
                      last edited by

                      You can still use telnet or ssh to monitor your console, once your pfSense has booted up.

                      1 Reply Last reply Reply Quote 0
                      • G
                        guardian Rebel Alliance
                        last edited by

                        @jahonix:

                        You can still use telnet or ssh to monitor your console, once your pfSense has booted up.

                        Thanks, yes I do that now… was just hoping not to have to pull a monitor off a PC to watch the FW boot.  Not the end of the world, don't have to boot very often, and as long as it boots within 2-3 minutes, I likely don't really need to see it live, I can just dmesg.

                        If you find my post useful, please give it a thumbs up!
                        pfSense 2.7.2-RELEASE

                        1 Reply Last reply Reply Quote 0
                        • jahonixJ
                          jahonix
                          last edited by

                          @guardian:

                          …hoping not to have to pull a monitor off a PC to watch the FW boot...

                          Still 2 possibilities.
                          a) Get a streaming device that converts your VGA to an IP stream to be viewed with any streaming receiver  OR
                          b) look at your motherboard and find out what the white pin header at bottom center is. (see pic attached) Could be a serial port.

                          71Awe-pCDmL.SL1026.jpg
                          71Awe-pCDmL.SL1026.jpg_thumb

                          1 Reply Last reply Reply Quote 0
                          • G
                            guardian Rebel Alliance
                            last edited by

                            @jahonix:

                            @guardian:

                            …hoping not to have to pull a monitor off a PC to watch the FW boot...

                            Still 2 possibilities.
                            a) Get a streaming device that converts your VGA to an IP stream to be viewed with any streaming receiver  OR
                            b) look at your motherboard and find out what the white pin header at bottom center is. (see pic attached) Could be a serial port.

                            Thanks for the reply… Can't cost justify a)... likely cheaper to upgrade from a 4 to 8 port KVM switch.
                            b) is a possibility... not sure how I would do it though, or how I would work out the mechanics of an external connection without making the box look like a piece of crap.

                            Open to suggestions.  For now, I'll run it headless as long as it boots OK, and if it hangs for any reason, I'll have to pull the KVM leads off another box.  I might consider the serial mods on my FreeNAS box, it has a real serial port... then I have a spare KVM port.

                            If you find my post useful, please give it a thumbs up!
                            pfSense 2.7.2-RELEASE

                            1 Reply Last reply Reply Quote 0
                            • jahonixJ
                              jahonix
                              last edited by

                              @guardian:

                              …the mechanics of an external connection without making the box look like a piece of crap...

                              Come on!
                              There are two (unused ?!!) holes for wireless antennas already in the box. Use a 3,5mm jack and install it in one of them. All you need are 3 pins for TX, RX and GND and a custom cable with a 3,5mm stereo connector to a db9 plug.

                              Or wire the db9 socket with 2m of small cable directly through the hole. I use small diameter AES/EBU microphone cables for that (2 leads and 1 screen). Done.
                              Something like that:
                              https://www.amazon.com/24AWG-Extra-Digital-Audio-Cable/dp/B00HRO5A02/ref=sr_1_13?ie=UTF8&qid=1470139237&sr=8-13&keywords=24AWG+AES%2FEBU+cable
                              Your local music store is happy to help you with that.

                              1 Reply Last reply Reply Quote 0
                              • G
                                guardian Rebel Alliance
                                last edited by

                                Good point… I've been staring at the port side of the box because of where it's mounted, so I forgot about those holes, so I could see possibly doing that.

                                Only thing is, if that is a serial port, wouldn't it show in dmesg?  I don't have the FreeBSD background to know how to probe for the UART.

                                So before cracking open the case and risking physical damage I would want to:

                                Step 1: Detect the presence of a UART though software to determine if it exists and what it's hardware is.
                                Step 2: Determine if there is a driver for that hardware, and if it needs CTS/RTS flow control to operate.

                                If I get though 1 & 2, then I'd do a test with the box open, and if that passed, I'd worry about making it pretty, but unless I get 1 and 2 figured out first, don't want to put the effort into the physical stuff.

                                **An aside:
                                Also, how to you reassemble the unit.  I looked inside when I installed memory and SSD, and that heat sink arrangement looked pretty scary to put back together if the motherboard was removed. **

                                BTW… does your original image file have higher resolution of the components around that connector? When I looked at it, my first guess was that it was power to support a SATA device plugged into the SATA port.

                                If you find my post useful, please give it a thumbs up!
                                pfSense 2.7.2-RELEASE

                                1 Reply Last reply Reply Quote 0
                                • jahonixJ
                                  jahonix
                                  last edited by

                                  @guardian:

                                  … does your original image file have higher resolution...

                                  Me?
                                  That's a picture from the Amazon article description. I don't know more about that unit than what's written here or there. I don't have one.

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    Paint
                                    last edited by

                                    @guardian:

                                    Good point… I've been staring at the port side of the box because of where it's mounted, so I forgot about those holes, so I could see possibly doing that.

                                    Only thing is, if that is a serial port, wouldn't it show in dmesg?  I don't have the FreeBSD background to know how to probe for the UART.

                                    So before cracking open the case and risking physical damage I would want to:

                                    Step 1: Detect the presence of a UART though software to determine if it exists and what it's hardware is.
                                    Step 2: Determine if there is a driver for that hardware, and if it needs CTS/RTS flow control to operate.

                                    If I get though 1 & 2, then I'd do a test with the box open, and if that passed, I'd worry about making it pretty, but unless I get 1 and 2 figured out first, don't want to put the effort into the physical stuff.

                                    **An aside:
                                    Also, how to you reassemble the unit.  I looked inside when I installed memory and SSD, and that heat sink arrangement looked pretty scary to put back together if the motherboard was removed. **

                                    BTW… does your original image file have higher resolution of the components around that connector? When I looked at it, my first guess was that it was power to support a SATA device plugged into the SATA port.

                                    I think your best bet is to switch one of your 8 KVM devices to use the serial console and change your pfSense box to that open KVM connection.

                                    I agree that we should be seeing the serial port show up in dmesg if it was detected on the motherboard. Do you have any serial or com port settings in the BIOS?

                                    I also agree that putting this machine back together may be difficult with the heatsink

                                    pfSense i5-4590
                                    940/880 mbit Fiber Internet from FiOS
                                    BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
                                    Netgear R8000 AP (DD-WRT)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.