Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PFSense on a DEC3840 (Netboard A20)

    Scheduled Pinned Locked Moved Hardware
    51 Posts 2 Posters 9.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bpl294 @stephenw10
      last edited by bpl294

      @stephenw10 It has 4 Intel I210s and 2 AMD SFP+ ports. OPNSense looks like it load the ax drivers for them. Does PFSense support those? I can try disabling them in the bios for the PF install.

      I installed pf on a donor machine and put the drive in the DEC3840, same issue. It hangs on loading the kernel. I tried disabling the SFP+ ports as well, no change in outcome.

      1 Reply Last reply Reply Quote 0
      • B
        bpl294 @stephenw10
        last edited by

        @stephenw10 Also, looks like there is another loader.conf in the /boot/defaults directory:

        Not sure if it shows anything else there...

        defaults_loader.txt

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Yeah, if it didn't have drivers for the ax NICs it should still boot completely with igb0 as WAN and igb1 as LAN. Assuming you didn't configure any interfaces on the install box before moving it.

          In that case this looks like not a console problem at all bit actually hanging booting the kernel for some reason. Might be time to check the FreeBSD forum for anything known for that CPU/platform. Or dig in the OPN code when they introduced it for any defaults they changed.

          Steve

          B 1 Reply Last reply Reply Quote 0
          • B
            bpl294 @stephenw10
            last edited by

            @stephenw10 I contacted the Manufacturer of this appliance, they said the following:

            "We don't support pfSense, in order to gain pfSense support you likely need to compile your own kernel at least for the 10gbps drivers to work, the serial console might have issues as well as the Epyc is only supported correctly in the current FreeBSD source if I'm correct.
            You can always give it a try to downgrade to pfSense, but we can't really help you on that front.

            If you're tech savvy enough, I don't mind sharing some of the upstream FreeBSD code references you will likely need in your kernel, just let me know in that case."

            is any of that helpful in pointing me in the right direction?

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Certainly support for the AMD SoC axgbe driver is not in FreeBSD 12 so that would require a back-port which is unlikely.
              https://github.com/freebsd/freebsd-src/commit/7113afc84c0b68f1e531dbd6d57d024d868d11c0

              Surprising it would require anything for serial console support but...
              This maybe: https://bsdimp.blogspot.com/2018/07/how-to-get-memory-mapped-serial-console.html

              If that was the case though I'd expect to see a loader value for it and the only one they have are the default values.

              Can you see the console location in the OPN boot log?

              Steve

              B 1 Reply Last reply Reply Quote 0
              • B
                bpl294 @stephenw10
                last edited by

                @stephenw10 the dmesg | grep tty didnt return anything in the serial console. In the /dev/ directory i do see quite a few "tty*" files. Only one was changed since i logged in, that was "ttyu0", see below...

                Is this what you meant?

                9d3efbb1-2c23-4e22-9a8e-3ea6fe61c364-image.png

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  If it's this: https://reviews.freebsd.org/D16432
                  Then I expect uart0 to show as something other than that standard IO port in the boot log there.

                  Steve

                  B 2 Replies Last reply Reply Quote 0
                  • B
                    bpl294 @stephenw10
                    last edited by bpl294

                    This post is deleted!
                    1 Reply Last reply Reply Quote 0
                    • B
                      bpl294 @stephenw10
                      last edited by

                      @stephenw10 here is some of the code changes that he was referring to:

                      "To make sure the OS can find the serial port, you need to remove some pre production acpi hack, this https://github.com/freebsd/freebsd-src/commit/35af9331 should do the trick.

                      The 10gbps network card needs a driver, which AMD upstreams to https://github.com/freebsd/freebsd-src/tree/main/sys/dev/axgbe, we do have some additional bug fixes which will likely land later on (you can find them now in our repo, https://github.com/opnsense/src)"

                      can these changes be applied via a module or does it need to be applied in the kernel itself?

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Ok, that is in 2.6 so the first thing to do there is just try a 2.6 snapshot:
                        https://github.com/pfsense/FreeBSD-src/commit/a7c68340584c942792188ad50593d4ef15cc8982#diff-96de3fc05e938f0fd1d95debb8e797e7c1da4645867d1722e01b1eff85e17186

                        Steve

                        B 1 Reply Last reply Reply Quote 0
                        • B
                          bpl294 @stephenw10
                          last edited by

                          @stephenw10 the most recent snapshot of 2.6 stalls at the spot below:

                          5f889d88-5f6b-4ba7-bc20-1542df893d09-image.png

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            So slightly further?

                            B 2 Replies Last reply Reply Quote 0
                            • B
                              bpl294 @stephenw10
                              last edited by

                              @stephenw10 yes:

                              2.5.2
                              e120e15f-a855-41ea-989e-15ebd0e28d01-image.png

                              2.6
                              a6ecc437-b8cc-4adb-986b-b187365567d9-image.png

                              1 Reply Last reply Reply Quote 0
                              • B
                                bpl294 @stephenw10
                                last edited by bpl294

                                @stephenw10 support from Decisio metioned the following as well:

                                "Try to add the following to loader.conf.local hw.uart.console="io:0x3f8,br:115200" "

                                Would this get added to the loader.conf.local after install on a donor system? or can it be done pre-install?

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  You could set that at the loader prompt before it boots.

                                  OK> set hw.uart.console="io:0x3f8,br:115200"
                                  OK> boot
                                  

                                  You could add it to loader.conf.local on the other system before moving is across.

                                  That was the only line we saw which looked like it could be doing anything so it's certainly worth trying. Those are the default com1 values though.
                                  Having read through the commits it might be setting it back to the default values after the detection quirks that were added for earlier EPYC systems were interfering.

                                  Steve

                                  B 1 Reply Last reply Reply Quote 0
                                  • B
                                    bpl294 @stephenw10
                                    last edited by

                                    @stephenw10 that did the trick!! Thanks alot man!!

                                    So the loader.conf.local file wouldn't be removed or changed during updates or anything right?

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Ah, nice. Interesting that does anything.

                                      Yes, that will be retained across updates.

                                      Steve

                                      B 1 Reply Last reply Reply Quote 0
                                      • B
                                        bpl294 @stephenw10
                                        last edited by

                                        @stephenw10 One more thing, the cpu is being detected in PFSense as 2 cache groups x2cores. could this cause any performance impact? and is there a way to define what type of cores they are?

                                        3d61354f-06a3-4808-9cca-c2201bbdbe7a-image.png

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          That's just how the CPU/BIOS reports it. I wouldn't expect it to make any difference.

                                          More concerning is the fact it shows as running at 1200MHz. Does it ever rise from that?

                                          You might need to enable powerd if you haven't already. Assuming there is a driver to support switching it.

                                          Steve

                                          B 1 Reply Last reply Reply Quote 0
                                          • B
                                            bpl294 @stephenw10
                                            last edited by bpl294

                                            @stephenw10 Yea that was my other concern, it does not. If i disable PowerD, running " sysctl dev.cpu.0.freq " shows 2100. But with PowerD it stays at 1200 and that's with running multiple speed tests at gigabit over wireguard and not.

                                            So i have disabled PowerD for now as the CPU temp is pretty steady at about 115 Fahrenheit.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.