pfSense on Watchguard M370

stephenw10 · Feb 16, 2020, 5:37 PM

Oh nice! Those 10G cards are still waaay outside my price range.

I do have one of the older Lanner style for the XTM800/1500 which works fine.

Steve

stephenw10 · Feb 16, 2020, 5:44 PM

I removed your other thread, it has nothing to do with firewalling.

If you look 5 posts up though you will see that WGXepc can now detect and set the fan speed on that board. I don't have access to an M670 to test with but they are all the same board AFAIK so it should work. Give it a try.

Steve

melozo · Feb 16, 2020, 5:45 PM

@stephenw10 In my here is very cheap, 650 yuan; 100 dollars.

melozo · Feb 16, 2020, 5:49 PM

@stephenw10 BIOS password has been unable to clear, the research for many days.
4 * 10 g network card is very cheap, less than $100, China's 650 yuan.

stephenw10 · Feb 16, 2020, 5:51 PM

I haven't seen one for less than £1000 here. So I don't have one.

melozo · Feb 16, 2020, 5:53 PM

@stephenw10 This equipment is our China Taiwan production, all is very cheap in China.

melozo · Feb 16, 2020, 5:57 PM

@networkBob I buy is M670, has been looking for a BIOS password.

stephenw10 · Feb 16, 2020, 7:09 PM

If it's just the fan issue try WGXepc. I only have an m470 to test with but it's reported working with the m370 also and I believe they are all the same board so included the description for all of them in the code.

Steve

melozo · Feb 23, 2020, 12:50 PM

@stephenw10 How do you do you have a way of regulating M470 fan speed, speed is too high, it's very noisy.

stephenw10 · Feb 23, 2020, 2:02 PM

Yes, download WGXepc from here https://forum.netgate.com/post/861920 and run it. You should be able to set the fan speed and the arm/disarm LED.
I've never tested a 670 as I don't have one but we know it works on the 370 and 470 and they are the same as far as I know.

Be sure to test it under load etc with whatever fan speed you choose as the CPU in the m670 has a higher TDP.

Steve

howdoyouturn69 · Jun 4, 2020, 4:07 PM

Hello to all. Thanks to all the shared info.

I got recently a WG M470 HA.

I'm lay down here cuz the WG people, told me a HA unit cannot be activated by itself, no standalone license. And depends on other units on same network.

That was a subtle way to say from those F was a waste of money and cannot use it.

In any case I can't trough out the money, so I was looking the way to install Pfsense on it.

Replace the mSata for a TSMicro 128G, keep the original one aside for the future if needed, and install a Kinston 480G SSD

Here come some questions, hopefully i will get some ideas.

1- Is required a SSD and the mSata? Or only would do the job?

2- If not required, can the SSD be used aside for with purpose? Considering the mSata will be principal.

3- Is my first time using a console conection to manage a firewall, the WG had come with his own cable, how do I use that? need a serial port Pc capable of, but then how do I connect with Windows to make the installation

4- I already put the flash pfsense into a USB 32G with Rufus, waiting to see how I clear the installation procedure in my head.

Thanks in advance for your support and help.

stephenw10 · Jun 4, 2020, 4:17 PM

You can use just mSATA. pfSense does not support two drives in any inclusive way unless you set them up as a mirror which is probably not what you want.

The M470 will not boot from USB into the installer. The default BIOS settings do not allow is and it is password locked so you can't change that. You need to install pfSense to the mSATA drive in something else and then move it across.

Nothing special is required after that. If there were no igb NICs in your install device you will need to reassign WAN and LAN at the serial console at first boot.

Have fun!

Steve

howdoyouturn69 · Jun 4, 2020, 6:24 PM

@stephenw10 said in pfSense on Watchguard M370:

You can use just mSATA. pfSense does not support two drives in any inclusive way unless you set them up as a mirror which is probably not what you want.

The M470 will not boot from USB into the installer. The default BIOS settings do not allow is and it is password locked so you can't change that. You need to install pfSense to the mSATA drive in something else and then move it across.

Nothing special is required after that. If there were no igb NICs in your install device you will need to reassign WAN and LAN at the serial console at first boot.

Have fun!

Steve

Hi, thanks for your answer.

Question, since I having a hard time to get a mSata adapter. Can I use the SSD only? Meaning, I install the SSD in a PC, and then connect it to the sata port, without the mSata connected.

Lets see how lucky I'm am.

Regards.

stephenw10 · Jun 5, 2020, 12:05 AM

I have never tried that but it may well work. I know others have done it on the M400 for example.

Steve

howdoyouturn69 · Jun 5, 2020, 7:04 PM

I want to confirm. Thanks for all your advice.

I been capable to install it without any problem.

ibg0 was WAN, ibg1 was a dhcp lan which allow me to connect to the router a finish the installation process.

Just a bit of netgating (googling forum) give me the params for the serial connection (baud rate 115200)

And Voila!...

But find out later on the console connection is not required for installation, just deploy the installation in the disk, and insert it.

Wait some time for the funny bip sounds and ready to connect.

Also thanks to another user above, used the right file system during installation.

I may assume in theory, the M470 and the M470 HA are same way, hardware appliance Pfsense capable (which was my main worry).

Keep informed.

Cheers...

stephenw10 · Jun 5, 2020, 9:50 PM

The HA hardware is identical as far as know.

It's good to have console access available even if you don't need it...yet.

zero67 · Jul 29, 2020, 3:53 PM

Hi Bob, can u explain hot to I can install pfSense on my M370? I buyed in error this machine "High Availability (HA) Device" and I cant activate it without another M370. I think with pfSense I will have full functionality.
Thanks a lot

zero67 · Jul 29, 2020, 12:22 PM

@stephenw10 said in pfSense on Watchguard M370:

reassign WAN and LAN at the serial console

Hello, how I cano do? I need serial cable? I have only m370 ha and pc.
Thanks a lot

stephenw10 · Jul 29, 2020, 2:14 PM

Yes you need a serial console cable. You might be able to do something with pre-defined interfaces but use the console is going to be easier.

There is (currently) no way to boot from USB so you need to install to mSATA in something else and then move the card into the M370.

Steve

zero67 · Jul 29, 2020, 2:58 PM

@stephenw10 said in pfSense on Watchguard M370:

Yes you need a serial console cable.

Ok... I will try with this cable

I can install directly pfSense with console cable on Firebox or I must attache mSata drive on my pc and after installation move drive to Firebox?

Thanks a lot