Watchguard XTM 5 Series

dazedman

Hi All, After going through this entire threat at least 5 times. I have gone out and purchased a used XTM 5. I have received the new box and it has been sitting waiting for parts. However, last night I booted it up and now port 5 no longer appears to work. Has anyone tried to bring a port back to life? If its not possible I will be setting it up with pfsense and reselling it on ebay with the known bad port. Get my money back and buy a different one and hope I have better luck. I am going to explore some other options for now to try and repair it but I'm not holding my breath.

~~Also, would it be worth while to flash the bios?~~ Would I be able to just disable that port via the bios? The reason I ask is because right now it boots into pfsense no problem but if I set anything to the em4 port it sometimes gets moved to em3. my guess is because the bad port sometimes works and changes the mac address.

EDIT: I updated the bios based on the forum thread and my dead port is just that, dead. I did not see a place to disable the port completely. I have moved all networks to em0 - em3, em4 (really em5). This is the one I leave as my DMZ because it doesn't always come back after reboot

I will update the thread. Thank you everyone who has taken the trip to get the XTM 5 running pfsense. I look forward to my new firewall hardware.

stephenw10

@Smoothrunnings:

Hey Steve, this link doesn't have anything in it or on it. It works but the page only has the subject. :)

I have popped into the CARP thread and asked my question.

Thanks,

Dammit! Auto html chewed off the last ) ::)

Try this.

Steve

stephenw10

@dazedman:

Has anyone tried to bring a port back to life?

No. Never seen that. It's definitely one of the em ports and not the fxp(10/100) port?

The ports are enumerated in the order they are detected by the OS at boot when it reads the PCI tree. If one of the ports is not detected everything after that will be shuffled down.
If that is happening it may show in the boot log. Possibly as the driver returning code 6, failed to attach. If it shows nothing at all then there's not much we do about that.

Steve

dazedman

@stephenw10:

@dazedman:

Has anyone tried to bring a port back to life?

No. Never seen that. It's definitely one of the em ports and not the fxp(10/100) port?

The ports are enumerated in the order they are detected by the OS at boot when it reads the PCI tree. If one of the ports is not detected everything after that will be shuffled down.
If that is happening it may show in the boot log. Possibly as the driver returning code 6, failed to attach. If it shows nothing at all then there's not much we do about that.

Steve

Here is the screen to configure my interfaces and you can see the 5 ports are em with a gap in the mac address which is port 5 on the front of the XTM 5. The fxp0 is the 10/100 port and the mac address shows it comes before the em0.

I have not checked the error log yet but I will and if it has a code 6 what does that mean?

xtm5_interfaces.png_thumb

DeLorean

If you like, i can provide you a image of the Watchguard XTM 5 Fireware software,
to verify if port 5 is faulty or not.
I have once experienced same problem with a port of a Intel Pro 1000 Dual Gigabit not recognized,
and the problem was a mismatch after a config restore.

Grtz
DeLorean

dazedman

@DeLorean:

If you like, i can provide you a image of the Watchguard XTM 5 Fireware software,
to verify if port 5 is faulty or not.
I have once experienced same problem with a port of a Intel Pro 1000 Dual Gigabit not recognized,
and the problem was a mismatch after a config restore.

Grtz
DeLorean

That would be awesome! Do you have it somewher eI can download or would you like me to private message you a cloud link?

DeLorean

Hi Dazedman,

I send you the link from my site for dl the image.

Grtz
DeLorean

dazedman

Thanks for the image but with the hardware upgrade I have done it appears that the fireware does not like some of the hardware or the unlocked bios. The kernal panics and crashed out. I was able to load the recovery partition and it was also missing the 5th 1gb port when it booted up. I am fine knowing it is dead and placed a blank in the port so i dont make the mistake of trying to use it in haste.

thanks again for the help and tips.

Smoothrunnings

@stephenw10:

@Smoothrunnings:

Hey Steve, this link doesn't have anything in it or on it. It works but the page only has the subject. :)

I have popped into the CARP thread and asked my question.

Thanks,

Dammit! Auto html chewed off the last ) ::)

Try this.

Steve

Meant to ask you Steve how to do use the 10/100 port on the XTM? When I look the LAN available on mine unit it only lists the 4 x 4 ports. Do I need to install a driver to use it or enable something in PFsense?

Thanks,

stephenw10

Nothing special is required to use it. It should appear as fxp0 with the em ports.

I'm not quite sure what you mean by '4 x 4' ports though.

Steve

xtm5nics.png_thumb

Smoothrunnings

@stephenw10:

Nothing special is required to use it. It should appear as fxp0 with the em ports.

I'm not quite sure what you mean by '4 x 4' ports though.

Steve

Sorry I was thinking back to my x750e which has two separate 4 x 4 10/100/1000Mbit ports that are labeled differently.

stephenw10

Ah Ok. No em or fxp NIC on there. But as I said the fxp NIC should appear by default in any pfSense version on the XTM5.

Steve

Smoothrunnings

Has anyone tried to look through the Watchguard code to see if it's possible to get their VPN accelerator card working?

I am asking because I just ran R-Tools through my XTM 5 series 1GB CF Cards and managed to get the entire Linux OS with all the libs etc. It looks like the use ELF. It also has another partition that has Executable, Libary, and DLL. I don't see any Dll's in there but I do see ELF Library, Executable and Module at are ELF files.

Just wondering. :)

chpalmer

https://forum.pfsense.org/index.php?topic=43574.msg363472#msg363472

https://forum.pfsense.org/index.php?topic=43574.msg412994#msg412994

You havent read all 29 pages! ;D

stephenw10

Yes, unfortunately we hit a road block there. Doesn't look like anything has changed in last 3 years either….

Those chips are everywhere, it would be nice to see them supported. I still don't hold out much hope though.

Steve

Smoothrunnings

Is there a bios update for the XTM 5 series?

I got two more XTM 5 series today for a really good price. But I noticed with the first one that has 4GB of RAM on it that PFSense is only seeing 3005MB and I am also experiencing some weird with the boot. After installing Pfsense onto the HD and rebooting I can see all the info on the screen after the bios, but after that when I boot the system is black with the cursor moving on the screen, the Pfsense loads up find as I it beeps normally.

So I thought maybe the bios is out of date a bit?

Thanks,

stephenw10

The XTM 5 was updated during it's lifecycle. I believe the second gen just had newer CPUs and same board but I've never had one to be sure.

What models are they?

3GB detected sounds a lot like it's running 32bit.

I have seen issues with putty where the cursor moved but doesn't write anything at a reboot. If you restart putty at the reboot it usually displays fine after that.

I'm not aware of any updated BIOS versions but I've only ever looked in the one box.

Steve

Smoothrunnings

@stephenw10:

The XTM 5 was updated during it's lifecycle. I believe the second gen just had newer CPUs and same board but I've never had one to be sure.

What models are they?

3GB detected sounds a lot like it's running 32bit.

I have seen issues with putty where the cursor moved but doesn't write anything at a reboot. If you restart putty at the reboot it usually displays fine after that.

I'm not aware of any updated BIOS versions but I've only ever looked in the one box.

Steve

CPU maybe?

It has a Celeron 440 in it. I tried a E6700 that I had kicking around but it still only shows 3005MB, the bios shows 4062MB. I am using the same version I installed on my other boxes which have Core 2 Quad 9450's and 4GB of RAM and they show 4GB of ram in PfSense.. maybe I have to redownload and flash the CF card again?

Thanks,

stephenw10

It should be pretty obvious if you're running 32bit, it reported in multiple places. That's about the only reason I can think of for seeing 3GB though.

Does it report that at the beginning of the boot also? For example (not an XTM5):

Copyright (c) 1992-2016 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 11.0-RELEASE-p7 #9 5ee3f5a72da(RELENG_2_4): Fri Feb  3 13:37:02 CST 2017
    root@buildbot2.netgate.com:/builder/ce/tmp/obj/builder/ce/tmp/FreeBSD-src/sys/pfSense amd64
FreeBSD clang version 3.8.0 (tags/RELEASE_380/final 262564) (based on LLVM 3.8.0)
VT(vga): resolution 640x480
CPU: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz (3292.60-MHz K8-class CPU)
  Origin="GenuineIntel"  Id=0x306a9  Family=0x6  Model=0x3a  Stepping=9
  Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x3d9ae3bf <sse3,pclmulqdq,dtes64,mon,ds_cpl,vmx,est,tm2,ssse3,cx16,xtpr,pdcm,pcid,sse4.1,sse4.2,popcnt,tscdlt,xsave,osxsave,avx,f16c>AMD Features=0x28000800 <syscall,rdtscp,lm>AMD Features2=0x1 <lahf>Structured Extended Features=0x281 <fsgsbase,smep,erms>XSAVE Features=0x1 <xsaveopt>VT-x: (disabled in BIOS) PAT,HLT,MTF,PAUSE,EPT,UG,VPID
  TSC: P-state invariant, performance statistics
real memory  = 8589934592 (8192 MB)
avail memory = 8144412672 (7767 MB)</xsaveopt></fsgsbase,smep,erms></lahf></syscall,rdtscp,lm></sse3,pclmulqdq,dtes64,mon,ds_cpl,vmx,est,tm2,ssse3,cx16,xtpr,pdcm,pcid,sse4.1,sse4.2,popcnt,tscdlt,xsave,osxsave,avx,f16c></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>

Steve

chpalmer

Compare your bios settings. Especially when it comes to video memory. Yours may have some memory reserved for other functions. I know mine did but no longer.. ;)