Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense on Watchguard M370

    Scheduled Pinned Locked Moved Hardware
    311 Posts 46 Posters 137.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zero67 @stephenw10
      last edited by

      @stephenw10 said in pfSense on Watchguard M370:

      ./WGXepc64 -l green

      Hi stephenw10, I try to do ./WGXepc64 -l green and all working fine (shield led become green). How I can do it on firebox startup?

      thanks

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yes. Use a Shellcmd: https://docs.netgate.com/pfsense/en/latest/development/executing-commands-at-boot-time.html

        Z 1 Reply Last reply Reply Quote 1
        • Z
          zero67 @stephenw10
          last edited by

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by stephenw10

            Easier to use the Shellcmd package to avoid any xml errors. That looks correct though. (edit: gotta be inside the <system> tags)

            Check the file permissions. It's probably running OK as root/admin but not the normal shellcmd user.

            Steve

            Z 1 Reply Last reply Reply Quote 1
            • Z
              zero67 @stephenw10
              last edited by

              @stephenw10

              I put shell command in the wrong place... ahh! All working fine now. Thanks for everything!!! ๐Ÿ‘

              1 Reply Last reply Reply Quote 0
              • V
                valepe69 @melozo
                last edited by

                @melozo hi, can you give me some links where to buy these cheap modules? Thanks

                stephenw10S 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator @valepe69
                  last edited by

                  Yes let me know if you find that source! ๐Ÿ˜‰

                  They are waaaaay outside my 'experimental' price range here.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • D
                    droid.dron @stephenw10
                    last edited by

                    Hi @stephenw10

                    Thank you for putting so much effort and covering information about WatchGuard hardware and pfsense. I recently received XTM800 and wondered if it is possible to unlock bios for it. Before I used some
                    manuals for M400 and they work but didn't find info about XTM800.

                    Thank you!

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      The BIOS on the XTM800/1500 is not locked it just doesn't have console redirect to allow using the serial console.
                      There are other threads better suited for questions regarding that. This one maybe.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • R
                        requiemshymn
                        last edited by

                        Hi @stephenw10 ,

                        I recently replaced my firewall with a WG M370 that was donated to me and I was succesfully able to flash it with pfsense 2.5.1 CE. I'd like to thank you for the work and documentation for getting pfsense working on this box. I'm still a beginner and learning.

                        The only issue I have right now is when trying to get your WGXepc script working. It errors out on me whenever I try to run it via ssh, and using shellcmd to schedule it doesn't seem to work either. (I also couldnt get "." to execute the script either so I had to install bash not sure if this is part of my problem either).

                        Does the script still work for the latest version of pfsense 2.5.1 CE? I've attached a screenshot of the error I am getting. Thanks for any insight!

                        wxgepc error.PNG

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by stephenw10

                          It's not a script. That's the C code you would use to compile it. Download the compiled 64bit version (or compile it yourself) then run that:

                          [21.05-RELEASE][admin@m470.stevew.lan]/root: ./WGXepc64
                          Found Firebox M370/470/570/670.
                          WGXepc Version 1.5 5/6/2020 stephenw10
                          WGXepc can accept two arguments:
                           -f (CPU fan) will return the current and minimum fan speed or if followed
                              by a number in hex, 00-FF, will set it.
                           -f2 (System fan) will return the current and minimum fan speed or if followed
                              by a number in hex, 00-FF, will set it.
                           -l (led) will set the arm/disarm led state to the second argument:
                              red, green, red_flash, green_flash, red_flash_fast, green_flash_fast, off
                           -b (backlight) will set the lcd backlight to the second argument:
                              on or off. Do not use with LCD driver.
                           -t (temperature) shows the current CPU temperature reported by the
                              SuperIO chip. X-e box only.
                          Not all functions are supported by all models
                          

                          Steve

                          R 1 Reply Last reply Reply Quote 1
                          • R
                            requiemshymn @stephenw10
                            last edited by

                            @stephenw10 Thanks very much! That worked for me and thanks again!

                            1 Reply Last reply Reply Quote 0
                            • bingo600B bingo600 referenced this topic on
                            • H
                              HangmansNoose001380
                              last edited by

                              In case anyone is interested or would like to work with me on unlocking I believe I've managed to get a .bin backup of the bios from an M370. SPI header layout is the same as the M400 & XTM5 series but a programmer won't read the chip until the CMOS jumper is set to reset (pins 2+3). Please let me know if anyone is interested. Current screenshots of bios in BCP5:
                              7064400e-1e99-4129-9edd-75842cd06293-Setup.JPG
                              fea8708e-b7ce-4bbb-ac7b-ed054120da4b-image.png

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Ah, that's fun! I assume it won't boot in that state?

                                1 Reply Last reply Reply Quote 1
                                • H
                                  HangmansNoose001380
                                  last edited by

                                  Not sure yet, still working up the courage to try and change it and re-flash it. Those images are from the extracted bios. I've been going through the settings in BCP and the UBU tool and it looks like it should boot in that state. Console redirection appears to be turned off so I can't Freedos for flashing and it looks like it'll have to be via SPI. I've never flashed one via SPI before so I'm being thorough before making the attempt. If you would like I can post a link to the .bin file?

                                  Here's some of the output from the UBU Tool in case anyone finds it helpful:

                                  ac072a05-77a1-4089-ad66-53cd79947993-UBU_InitialScan.JPG
                                  ed70bbe4-3509-4f65-89a5-31558d253ecc-UBU_InitialScan_P2.JPG
                                  970fdcdd-5d05-453f-8af5-3624cfd81f79-UBU_MCExtractor2.JPG
                                  e88f893d-a0ad-42fb-84bf-04c01d86642e-UBU_IFR_Extractor.JPG

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Sure I'll poke at it if you have a link. Maybe PM it.
                                    It's been a while but IIRC flashrom could not read it at all.
                                    I would have though FreeDOS would work but I'm not sure any version of AFUDOS will read that. It might require the uefi version which I've never tried via serial console...

                                    H 1 Reply Last reply Reply Quote 1
                                    • H
                                      HangmansNoose001380 @stephenw10
                                      last edited by

                                      @stephenw10 So far I haven't been able to get FreeDOS to redirect anything but garbage over serial. I'll PM you the file, from what I'm seeing the bios doesn't appear to be heavily locked down (ME is disabled) but it looks like the only way to flash over a new rom is with SPI or a PCIE video card and/or soldering on a VGA header.

                                      S 1 Reply Last reply Reply Quote 0
                                      • S
                                        soupman @HangmansNoose001380
                                        last edited by

                                        @hangmansnoose001380

                                        I have an m370 and tried to unlock it.

                                        I booted from a windows 10 disk that I moved to the m370 and used rdp to log in.
                                        Flashrom for windows can't read the chip. However ami AFUWIN tool can read the flash and I tried to remove the password with Uefitool ( not sure anymore). The password is located at 2 locations and I blanked both. Reflashed with AFUWIN.
                                        After a reboot the system is strangely slow and will reset, after that the password is back. I checked and reflashed multiple times and always ended up back to the password on boot.

                                        I gave up...too much time wasted on this. I still have the bios bin somewhere. Anybody ?

                                        H 1 Reply Last reply Reply Quote 0
                                        • H
                                          HangmansNoose001380 @soupman
                                          last edited by

                                          @soupman I'm going to admit I've been lazy about doing my write up on this. From what I've read the Aptio V Bios can store the setup password in the TPM and regen it if it's cleared out of the bios file. I tried the same method and was not able to get it cleared out. I did manage to modify a Lanner original bios (no password) and flash it/overwrite the stock bios on 2 M370's successfully using a CH341A Black. I've been running the modified bios for the last few months now. If you're interested I can write up the steps and post them on here and DM you a link for the bios file?

                                          S J 2 Replies Last reply Reply Quote 1
                                          • S
                                            soupman @HangmansNoose001380
                                            last edited by

                                            @hangmansnoose001380

                                            sure I will try it. DM me the link. I will flash it with afuwin and see what happens...

                                            The lanner bios is unlocked ? Can boot from usb ?

                                            thx

                                            H 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.