Install on NETASQ U30 S ?

xobix

@stephenw10 it's always the same issue..

stephenw10

Hmm, you might try some other common board rates. I expect cuaU0 to be the front panel com port, but they might be swapped for some reason.

It could be that the switch in the smallest unit doesn't have a console to access. Can you see what the switch chip is on the board?

Steve

xobix

On the board I see near the RJ45 connectors a chip named "LB G4P109 LF"
My friend google said that it's a "quad port network transformer"
alt text

stephenw10

Hmm probably under that small heatsink unfortunately.

What baud rates did you try?

Any BIOS options that might suggest something?

Can you boot the original OS and check the boot messages?

Steve

xobix

I tried 4800 -> 115200 baudrate.

I will look in the bios tomorow.

OUPS ! Unfortunately I have written pfsense over the old OS

xobix

I don't see any option in bios thas suggest something. :(

xobix

[2.4.4-RELEASE][admin@pfSense.local]/dev: stty -a -f /dev/cuau0
speed 9600 baud; 0 rows; 0 columns;
lflags: icanon isig iexten echo echoe -echok echoke -echonl echoctl
        -echoprt -altwerase -noflsh -tostop -flusho -pendin -nokerninfo
        -extproc
iflags: -istrip icrnl -inlcr -igncr ixon -ixoff ixany imaxbel -ignbrk
        brkint -inpck -ignpar -parmrk
oflags: opost onlcr -ocrnl tab0 -onocr -onlret
cflags: cread cs8 -parenb -parodd hupcl clocal -cstopb -crtscts -dsrflow
        -dtrflow -mdmbuf
cchars: discard = ^O; dsusp = ^Y; eof = ^D; eol = <undef>;
        eol2 = <undef>; erase = ^?; erase2 = ^H; intr = ^C; kill = ^U;
        lnext = ^V; min = 1; quit = ^\; reprint = ^R; start = ^Q;
        status = ^T; stop = ^S; susp = ^Z; time = 0; werase = ^W;

xobix

@stephenw10 said in Install on NETASQ U30 S ?:

Hmm probably under that small heatsink unfortunately

alt text

I took the heatsink off ( I already tear up the warranty label :D)

It's an Atheros AR8328

--> it's not like in the command result where it is written intel --> I need to install a new driver ?

stephenw10

Hmm, OK.
It looks like the Atheros AR8328 does not have a serial interface that could be used to configure it unlike the other Netasq devices. That makes things immediately 100x more difficult as you need to configure it via MDC/MDIO or
via the config eprom directly.
Netasq/Stormshield OS is built on FreeBSD though I believe, they have contributed stuff back into the base. Unfortunately though I don't see the 8328 as supported:
https://github.com/freebsd/freebsd/tree/master/sys/dev/etherswitch/arswitch
Unless it's so similar to the 8327 it might be able to use that. We are still talking about significant work to get it running.

One thing you might try here is Installing OpenWRT which does have support AR8328 switch. Even if just as a test.

Kind of curious what those jumpers might do but it's hard to recommend you change them without knowing. Are they labelled?

Steve

xobix

@stephenw10 said in Install on NETASQ U30 S ?:

Netasq/Stormshield OS is built on FreeBSD though I believe, they have contributed stuff back into the base. Unfortunately though I don't see the 8328 as supported:
https://github.com/freebsd/freebsd/tree/master/sys/dev/etherswitch/arswitch
Unless it's so similar to the 8327 it might be able to use that. We are still talking about significant work to get it running.

How can I try that ?

@stephenw10 said in Install on NETASQ U30 S ?:

One thing you might try here is Installing OpenWRT which does have support AR8328 switch. Even if just as a test.

I did it PM.
eth1 is a Broadcomm, but down. nothing appends when i plug a cable in one of 4 ports.
I don't know what test I have to do.

@stephenw10 said in Install on NETASQ U30 S ?:

Kind of curious what those jumpers might do but it's hard to recommend you change them without knowing. Are they labelled?

Yes they are : JP3 et JP4

stephenw10

So you did install OpenWRT already?

I'm not sure exactly what you were seeing as Broadcom. The two NIC would still be Intel. It may have created a bridge as OpenWRT usually does.
You probably have to install the correct switch control modules for it to see and recognise the switch. Not entirely sire what those might be though...

xobix

I will search on this way

xobix

Nothing better...
I don't understand why cu command freez on "connected"

stephenw10

The 'connected' output is generated by cu, it implies that cu is connected to the port. After that there is nothing there because there is nothing connected to the second com port. It's listening but nothing ever arrives.

You can only configure that switch chip via the MDC/MDIO bus.

Steve

xobix

@stephenw10 said in Install on NETASQ U30 S ?:

The 'connected' output is generated by cu, it implies that cu is connected to the port. After that there is nothing there because there is nothing connected to the second com port. It's listening but nothing ever arrives.

In bios COM1 and COM2 are mapped with physical interface. is there a relation to ?

@stephenw10 said in Install on NETASQ U30 S ?:

You can only configure that switch chip via the MDC/MDIO bus.

it's doable for me ?

stephenw10

I mean anything is possible; it's a simple matter of coding.

But if I were doing this I would start by trying to get OpenWRT to work with it as that's much closer to what you need to talk to the switch. Once that is working you will know exactly how it's connected and what it can do so it would make any work in pfSense much easier.

Steve

xobix

Unfortunately there is no Steve to help me on openwrt .
I find many drivers for wireless Atheros but no for AR8328.

stephenw10

Unfortunately there's not enough space in my head for that!

But they have support for the AR8328 it's not as a separate driver, it's probably included and you just need to configure it to know there is a switch on em0 or whatever the interface is detected as there.
https://openwrt.org/docs/techref/hardware/switch#qualcommatheros

Most x86 stuff doesn't have a switch so it's probably not enabled by default.

Steve

bolino

@stephenw10 : hello, i successfully intall pfsense and manage interfaces with the help of this procedure ( serial connexion ) :

Define 2 VLAN at startup : VLAN 1 et VLAN 2 both on em0 interface then,
Assign em0_vlan1 to WAN
Assign em0_vlan2 to LAN
The switch configuration hereafter has to be respected to obtain :
port 1 = WAN
port 2 to 6 = LAN

Configuration of switch NetASQ_U70 :
cu -s 9600 -l /dev/ttyu1

vlan
VLAN> aware 1 enable
VLAN> pvid 1 none
VLAN> frame type 1 Tagged
VLAN> aware 2-8 disable
VLAN> pvid 2 1
VLAN> pvid 3-8 2
VLAN> del 1-4094
VLAN> add 1 1-2
VLAN> add 2 1,3-8
VLAN> config
VLAN Configuration:
Port Aware PVID Ingress Filtering Frame Type
1: enabled none disabled Tagged
2: disabled 1 disabled All
3: disabled 2 disabled All
4: disabled 2 disabled All
5: disabled 2 disabled All
6: disabled 2 disabled All
7: disabled 2 disabled All
8: disabled 2 disabled All

Entries in permanent table:
   1:  1,2
   2:  1,3,4,5,6,7,8

VLAN>
Use the cu(1) escape sequence <Enter> then ~ (tilde) followed by . (dot)

stephenw10

Yes it's possible on the larger boxes as the switch has a console to configure it.

But it appears the U30s does not.

Steve