Watchguard XTM 5 Series

sammyji

@sammyji:

They are some generic ones. Will post a pic soon.

My xtm5 box refused to power on initially too. Ended up being a memory stick issue. Reseated and it came back on. Male sure to have only the necessary components in it first before you add the pcie riser/additional ram/etc. Try to boot it stock. Not saying that you've missed something, but I did and almost threw my xtm530 out.

So when you say that it refused to power on were you getting any thing at all out of it? Because when I hit the power button on mine i get nothing, I do not get any kind of life out of it at all unless I force it on via the AT power switch jumper.

Also, something interesting. I discovered that you can get the XTM's (or close to them) straight from china…. https://tostarcn.en.alibaba.com/product/60044665760-800205511/_1U280SF_NM70SL_1U_VPN_Firewall_with_2_SFP.html

Or heck we could even upgrade our XTM boxes: https://tostarcn.en.alibaba.com/product/60476540616-802197910/LGA_771_ATX_Power_G41_6_LAN_Motherboard_network_Server_Firewall_router_Motherboard.html

When i powered on, the fans ran, nothing on console, no beeps when the memory was the issue.

PS : Rack ear pics attached - If you are local, you can pick them up for free :)

[Rack Ears.zip](/public/imported_attachments/1/Rack Ears.zip)
[Rack Ears.zip](/public/imported_attachments/1/Rack Ears.zip)

Alup

@sammyji:

When i powered on, the fans ran, nothing on console, no beeps when the memory was the issue.

PS : Rack ear pics attached - If you are local, you can pick them up for free :)

Well they look like they would fit it box but I dont think they are long enough to make up for the stupid size of the box to fit in the rack and mount. I had got some ears off an old dell powerconnect and drilled the holes to make it work for the xcoree and discovered that same thing.

if I can not get this xtm 5 to work then I will just send you the ears off it.

chpalmer

@Alup:

Well they look like they would fit it box but I dont think they are long enough to make up for the stupid size of the box to fit in the rack and mount.

On what box? The XTM just about takes up the entire width between my 19" rack..

Smoothrunnings

@Alup:

@sammyji:

When i powered on, the fans ran, nothing on console, no beeps when the memory was the issue.

PS : Rack ear pics attached - If you are local, you can pick them up for free :)

Well they look like they would fit it box but I dont think they are long enough to make up for the stupid size of the box to fit in the rack and mount. I had got some ears off an old dell powerconnect and drilled the holes to make it work for the xcoree and discovered that same thing.

if I can not get this xtm 5 to work then I will just send you the ears off it.

You know you can buy the ears from Watchguard right, or at least they will give you the info where you can buy them.

When I am on my other PC I will up this post with the actual Part# which I got from WatchGuard. I got it because initially the box I was going to buy didn't have any ears. But fortunately the boxes I did get, two XTM 510's, X750e, and x1250e all came with their ears. People have been selling their XTM 5's for about $150 on ebay and locally where I am, I got all 4 for $150. :)

Alup

As I have said before, I really just paid like 20 bucks for mine and the listing was labeled at parts/not working. I really was not expecting much so im not really out anything here. I may get a new one in the future but for now im not really worried about it.

EDIT: I just tried the ram that I had put in my XcoreE box in the XTM 5 box and it still would not boot. I then put the ram that came in the XTM 5 box in my XcoreE box and it booted and passed the ram test… So... its not a ram issue... I wonder if the PSU i have is not powerfull enough to fully supply the board with enough power. Hrm.... I will have to go and grab the 400watt psu i have upstairs and try it, maybe, if im really lucky that will make it boot.

EDIT2: Nope just tried it with a 400W PSU and still nothing. I will have to go though the board component by component and figure out what is fried.

Smoothrunnings

Check the capacitors on the board to see if any of them have leaked. You can figure this out by putting your finger on the top of them and see if they are bulging.

Try a different CPU maybe? Since these boards don't have any thing else you'll have to give that a try.

Smoothrunnings

@Alup:

yeah but for the price that I got this "TrustWave" for I was like meh what the hell give it a shot. I will create a thread when I get it describing how to put PFSENSE on it.

I have a custom built pfSense box, im not really doing this for purpose of "setting up a firewall" Im getting it because I love making hardware do things it was not intended to do. I like stuff like this. Its more fun than anything else and if fun comes this cheap then so be it. Plus if i get it and give the specs/stats then others could get one too that dont have alot of cash and get a firewall for themselves.

The XTM box i got was only 26 dollars when i bought it so im not really that upset that i cant get it to boot.

WG ears.

I got this from Watchgaurd's FB. I emailed them. I think there is a person in the UK that sells them on Ebay.

Rack Mount Kit 8 and 5 series P/N: WG8544

Good luck!

stephenw10

@Alup I don't recall having to use any special address offset when flashing the BIOS chip. I was using flashrom directly with that parallel port cable I made up and it detected it automatically.
It did require the PSU to be connected but not actively powered up, it still supplies 5V to the chip even when powered down.
The times it did manage to flash bad code to it preventing it booting it still powered up, fans and LEDs, but didn't beep or POST. That is a long while back now though. ;)

I don't think that PCIe extensions cable you linbked to will work. To use a regular PCIe card with the 'golden fingers' connector require s a female to female PCIe adapter and I've never seen one available.

Steve

Alup

Yeah, I think I have a blown fuse or something on the board. I originally thought this was a bios issue now im thinking its more like this thing got hit with a huge power surge and fried the board. You are right, that cable wont work without modifying it.

whats really strange is that on my setup if i have the board plugged in but not powered on and i try to flash the bios it fails. however if I unplug the board i am able to flash it. I use a Willem Programmer to flash it, its an old LPT one but it still works great.

Smoothrunnings

Is it possible to setup a heartbeat/failover link between two Watchguard XTM 5 series running pfsense? I would like to have this option so I can update one firewall fw, failover to the second, then update the fw on the second and failover to the first one to minimize the down time.

Thanks,

stephenw10

Sure set them up as an HA pair as you would for any hardware. I'd probably use the 100Mb port for the sync interface.

https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)

Better to ask questions about that in the CARP board though as it's not hardware specific:
https://forum.pfsense.org/index.php?board=36.0

Steve

Edit: Fixed link.

Smoothrunnings

@stephenw10:

Sure set them up as an HA pair as you would for any hardware. I'd probably use the 100Mb port for the sync interface.

https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)

Steve

Hey Steve, this link doesn't have anything in it or on it. It works but the page only has the subject. :)

I have popped into the CARP thread and asked my question.

Thanks,

dazedman

Hi All, After going through this entire threat at least 5 times. I have gone out and purchased a used XTM 5. I have received the new box and it has been sitting waiting for parts. However, last night I booted it up and now port 5 no longer appears to work. Has anyone tried to bring a port back to life? If its not possible I will be setting it up with pfsense and reselling it on ebay with the known bad port. Get my money back and buy a different one and hope I have better luck. I am going to explore some other options for now to try and repair it but I'm not holding my breath.

~~Also, would it be worth while to flash the bios?~~ Would I be able to just disable that port via the bios? The reason I ask is because right now it boots into pfsense no problem but if I set anything to the em4 port it sometimes gets moved to em3. my guess is because the bad port sometimes works and changes the mac address.

EDIT: I updated the bios based on the forum thread and my dead port is just that, dead. I did not see a place to disable the port completely. I have moved all networks to em0 - em3, em4 (really em5). This is the one I leave as my DMZ because it doesn't always come back after reboot

I will update the thread. Thank you everyone who has taken the trip to get the XTM 5 running pfsense. I look forward to my new firewall hardware.

stephenw10

@Smoothrunnings:

Hey Steve, this link doesn't have anything in it or on it. It works but the page only has the subject. :)

I have popped into the CARP thread and asked my question.

Thanks,

Dammit! Auto html chewed off the last ) ::)

Try this.

Steve

stephenw10

@dazedman:

Has anyone tried to bring a port back to life?

No. Never seen that. It's definitely one of the em ports and not the fxp(10/100) port?

The ports are enumerated in the order they are detected by the OS at boot when it reads the PCI tree. If one of the ports is not detected everything after that will be shuffled down.
If that is happening it may show in the boot log. Possibly as the driver returning code 6, failed to attach. If it shows nothing at all then there's not much we do about that.

Steve

dazedman

@stephenw10:

@dazedman:

Has anyone tried to bring a port back to life?

No. Never seen that. It's definitely one of the em ports and not the fxp(10/100) port?

The ports are enumerated in the order they are detected by the OS at boot when it reads the PCI tree. If one of the ports is not detected everything after that will be shuffled down.
If that is happening it may show in the boot log. Possibly as the driver returning code 6, failed to attach. If it shows nothing at all then there's not much we do about that.

Steve

Here is the screen to configure my interfaces and you can see the 5 ports are em with a gap in the mac address which is port 5 on the front of the XTM 5. The fxp0 is the 10/100 port and the mac address shows it comes before the em0.

I have not checked the error log yet but I will and if it has a code 6 what does that mean?

xtm5_interfaces.png_thumb

DeLorean

If you like, i can provide you a image of the Watchguard XTM 5 Fireware software,
to verify if port 5 is faulty or not.
I have once experienced same problem with a port of a Intel Pro 1000 Dual Gigabit not recognized,
and the problem was a mismatch after a config restore.

Grtz
DeLorean

dazedman

@DeLorean:

If you like, i can provide you a image of the Watchguard XTM 5 Fireware software,
to verify if port 5 is faulty or not.
I have once experienced same problem with a port of a Intel Pro 1000 Dual Gigabit not recognized,
and the problem was a mismatch after a config restore.

Grtz
DeLorean

That would be awesome! Do you have it somewher eI can download or would you like me to private message you a cloud link?

DeLorean

Hi Dazedman,

I send you the link from my site for dl the image.

Grtz
DeLorean

dazedman

Thanks for the image but with the hardware upgrade I have done it appears that the fireware does not like some of the hardware or the unlocked bios. The kernal panics and crashed out. I was able to load the recovery partition and it was also missing the 5th 1gb port when it booted up. I am fine knowing it is dead and placed a blank in the port so i dont make the mistake of trying to use it in haste.

thanks again for the help and tips.