WatchGuard Firebox T70

bruor

@networkbob how did you get pfsense installed on the msata drive in the T70? Should I install using another system or can I do boot selection using the serial console and install via USB?

stephenw10

There's no way to install to it in the T70 directly as the BIOS is locked down, no way to select a boot device other than the mSATA.
So, yes, install in something else and move it across. If that other thing is not a serial console device then be sure to enable the serial console in the webgui before moving it.

Steve

bruor

@stephenw10 awesome thanks, I was able to get it installed, but it doesn't look like I was successful in breaking the trace under the blue line. I'm trying to score the board with a utility knife, how did you sever it?

stephenw10

Yes I used a small craft knife. I think I went over that with the corner of a watchmakers screwdriver. It's a delicate operation!

bruor

@stephenw10 I might just try to remove that resistor instead

bruor

@bruor confirming, used the super fine tip on my iron, popped the resistor off, switch is active on igb3!

Thanks for the help!

stephenw10

Nice!
I wish there was a better way. Maybe one day...

Steve

Souljumper

@stephenw10 it worked perfectly with my T70 and OPNsense. Thank you very much! Now I can use the 5 port switch as lan interface.

Eihab

@stephenw10 can you upload the config.xml with the defaults of pfsense setup . Unable to reconfigure setup, my m2 laptop has no ethernet ports and setup shutdown immediately. Thanks

stephenw10

It uses igb ports. pfSense will assign igb0 as WAN and igb1 as LAN by default.

Are you seeing something different?

You can setup the interfaces from the console anyway.

Steve

Eihab

@stephenw10 Thanks for the reply. I tried getting into the console but unable to directly on the T70. Since I was unable to get to the GUI on my laptop I could not enable console access. I added a USB ethernet interface to the laptop, it automatically makes it a WAN. I can SSH to it as well, but do not know how to enable console access in the initial setup [not listed as an option] so that when I move into T70 it will allow console access.

bruor

@eihab you should be able to just run through the pfsense installation on your laptop, don't boot it, then swap the drive into the t70.

I had no success getting console to work on the t70. Even when configured properly I'll get an initial handshake with some output, but then it goes kind of dead and doesn't respond to keystrokes etc. Have tried a mix of cables with null modem adapters etc.

stephenw10

Hmm, weird. The serial console works fine here. Nothing special required.

But, yeah. If you install to the mSATA drive on something else and then move it across before the first boot it will use the defaults which should allow you access it on the LAN port.

Steve

Eihab

@bruor Thanks for the tip. I tried that using the second option [EFI] but nothing happens on the T70? I am unable to access from a PC connected to the LAN port? Any thing I missed?

Eihab

@stephenw10 Any specific version of pfsense? I downloaded the latest iso and installed on the laptop with 2nd option or EFI boot.

bruor

@eihab I just updated to 2.5.2 release here.

My disk shows it's in bios mode, not sure if the T70 supports EFI boot.

Eihab

@bruor Thanks! that made it work... I am in on the LAN network...

stephenw10

Same here:

[2.5.2-RELEASE][root@t70.stevew.lan]/root: sysctl machdep.bootmethod
machdep.bootmethod: BIOS

kubato

I Know this is old and might documented already but, here is how I install pfSense on Watchguard T70.
You will need SSD and power connector modded to work on the 2or3 pin power connector(check voltage with meter) next to the sata.
You could get the sata power off PC too but, this is how I did it. There is no VGA out so you will also need a Serial connector and teraterm (or whatever soft you use for terminal emulation)
Here is the guts:
Install PFsense on Watchguard Firebox T70

download pfsense pfSense-CE-memstick-serial-xxxxxxx-amd64.img (not iso)
on seperate pc, install ssd and use HDDRawCopy1.10Poratble.exe to copy the above img onto the SSD.
once done connect the sata and power connector to the firebox.
Set up Tera Term and Prolific usb to serial to see the install.
note: com, can be any but speed should be 115200,8,none,1,none in the form BPS=115200,Data Bits=8,Parity=none,stop bits=1, flow control (none)
set tera term to BPS of 115200 and you will see the correct data.
Before turning on Firebox for install, unseat the hd/memory card so it will not boot to that first. Turn on Firebox, count to 4 seconds (important, as it passes the boot but, will still do device detect)plug in card (just leave screwed in but in slot(it will work, screw it in if you want), so power is jumpy and data and it will boot to ssd.)
Intall as normal. Done

Default password first login
admin, pfsense

stephenw10

Mmm, it's hard to recommend hot-plugging the mSATA card. I could imagine something going badly wrong!

Better to install to mSATA in something else and move it across if you can.

Steve