Watchguard Firebox M440

pglover19

It seems to be stuck on throwing the stuff on the console and does not enter the boot cycle.. I will try again.

stephenw10

One option here is to reboot from the GUI and then copy out the system log as soon as it boots up.

At Diag > Command prompt run:
clog /var/log/system.log > /tmp/systemlog.txt

Then you can download and look through that txt file.

Steve

pglover19

I got it... Attached is the boot log...

0_1539604066476_BootFile_2.txt

pglover19

Please let me know if the log file is what you need. I will be leaving for work in the next 15 minutes; however, I want to make sure you have the correct log file. Let me now...

stephenw10

It should be in that file, yes. Looking through it.....

pglover19

Ok.. Let me know.. I can stick around for 10 minutes to make sure you got what you need.. I will be available after work (6:00PM EST) to continue working on this issue. Please continue to post throughout the day tasks you want me to execute and I will do that after 6:00PM EST. Thanks

stephenw10

Yeah we have the error. Basically these lines:

e1000_read_phy_reg_mdic
MDI Error
PHY Initialization Error
igb1: Setup of Shared code failed
device_attach: igb1 attach returned 6

Now how to prevent that.....

pglover19

Great.. let me know the next steps..what is your assessment so far? You think we can get all the ports working with pfSense?

stephenw10

Well we have a much better understanding of the issues at this point.

The driver is failing because it can't initialise the PHY. Not surprising because it has no PHY. But WGOS doesn't appear to use a special driver so it could be the switch is not presenting to the NIC as expected at this point.

We know the switch will require some configuration to be usable in pfSense in any way. Right now the best bet for that looks to be via the debug port so at some point that will need investigating. The switch is still somewhat a mystery as there's no datasheet for that part number (I can find).

Steve

pglover19

So what can I do to help?

stephenw10

Is it possible for you to setup a connection for me to access the device? Via SSH?
Probably best via PM if so.

Otherwise I'd look at connecting to the switch debug port. Can you get hold of a serial cable of some sort? A multi-meter will probably do to check the connection type.

Steve

pglover19

Yes... I assume I could use something like teamviewer...

pglover19

If I get teamviewer setup tonight, will you be able remote into my system tonight?

stephenw10

Yes, but SSH to the device would be better if you can.

Steve

pglover19

Once you go in via teamviewer, the M440 device will be on the network and we can use Putty to establish a SSH session to the device.

Do you have a simpler method?

stephenw10

Just setup a port forward to ssh on it on some random high port. Restrict it to my source IP only?
That's what I would do here. You have another pfSense box in front of it?

Steve

pglover19

Not sure how to do that. I will need to do some research to implement your suggestion.

pglover19

Any instructions on how to set this up in pfSense?

stephenw10

Setting up a port forward? Sure: https://www.netgate.com/docs/pfsense/book/nat/port-forwards.html

If the m440 is using only the igb NIC and it's the LAN it might need it's default route setting to your upstream pfSense in order to reply though.

Steve

pglover19

The M440 will have a default address of 192.168.1.1 on the LAN interface which is a valid IP address on my network. I will be able to access the device from any computer on my network.

So, can you provide details on how I would setup port forwarding in pfSense to allow you in?