pfSense on Watchguard M370
-
So in theory, can one now use the discovered BIOS password to set it to boot via USB and install pfSense that way? Or is it still suggested to just install outside of the Firebox?
Currently running 2.6.0 on an XTM5 with a Core2Duo E7400 and 4GB of RAM. Will have access to an M370 soon and wondering if it's worth upgrading to it. I don't feel compelled to go through the reflashing of the BIOS process, but if it works fine with the locked BIOS and the ability to set fan speeds thanks to @stephenw10, I think I'd be fine. Can you update the CPU and RAM without flashing the BIOS? What is the latest gen CPU you can add to the M370?Or should I just figure out how to reflash the BIOS?
Thanks for all the work on this unit. Looks like it will be a huge upgrade, looking at the specs.
-
Yes, you can just set it to boot from USB which simplifies the process. A lot!
You can switch out the CPU and RAM etc without flashing anything. I'm not sure if you run 7th gen CPUs, I've never tried but I think the chipset may support that. Check the thread. I have an i3 6100T in the M470 I have and it's more than sufficient for my use. Also uses less power, runs cooler and faster if required than the default. However you cannot enable speedstep without flashing. I haven't had cause o try that yet.
Steve
-
@soupman Did you have to reflash the BIOS to use the i5-7400 in your M370?
Thank you.
-
@rflcptr Are the fan headers in the M370 12v or 5v? Looking to order the Noctua fans and getting parts ready. I don't have the M370 yet to tear into.
Thank you.
-
@stephenw10 Thanks for the info. Haven't been able to find an answer to the CPU question yet. Oddly the i3 costs more than an i5-7400 or 7500.
-
They are 4 wire 12V fans on a 5-pin header. See: https://forum.netgate.com/assets/uploads/files/1551402532089-watchguad_m370_internals.jpg
But you might want to wait until you hear them. They are fairly quiet once you turn them down in WGXepc.
Steve
-
@stephenw10 Plus, with the BIOS password now known, can they not be adjusted that way ? Can't recall.
-
@stephenw10 Right, good plan. Thank you. I'll wait.
-
@mookatroid There are very few settings available unfortunately. Can't enabled EIST for example. I don't believe you can do anything but disable the smart fan control.
-
@stephenw10 I am new to literally everything mentioned on this page. I am trying to get the WGXepc working so I can quiet down the fans on my M370 that I just got PFsense working on.
Idk if this is right: do I need to compile the c code into an .exe and move that onto the pfsense where I add a shellcmd command into the xml configuration file to make sure the exe runs everytime the machine boots? I'm stuck at the first part of that.
I tried to compile in Developer Command Prompt for VS 2022 on Windows 10 but got the error: "fatal error C1083: Cannot open include file: 'unistd.h': No such file or directory".
I tried to do the same thing in Ubuntu running in VirtualBox on the same Windows 10 system but got the error: "WGXepc64.c:11:10: fatal error: machine/cpufunc.h: No such file or directory"
Is there an executable (if that's what I even need) available that I could download? I have no experience doing any of this and I'm just YouTubing my way through it. Thanks! -
You'd need to compile it on FreeBSD.
Google retired sites which is where it was hosted. I uploaded a binary to github, try this:
https://github.com/stephenw10/WGXepc/raw/master/WGXepc64Steve
-
@stephenw10 I'm sure I'm doing everything the wrong way but Idk what I'm doing.
-
I downloaded the binary WGXepc to my windows machine
-
I uploaded to pfSense using the webgui Diagnostics>Command Prompt>Upload
-
I used Putty SSH to pfSense and moved the binary from /tmp to /root
-
Tried both ./WGXepc64 -1 green and ./WGXepc64 -f as admin and root and
got permission denied
There's so many places I could have screwed up.
-
-
You need to set the permissions to allow it to be executable. I just used:
chmod 0755 WGXepc64 -
It's been a while since I started using this unit as my main pFSense router. It has been running undoubtedly perfect but i would like to get a little bit more of it.
I'm planning on going the Virtualization way with esxi (already tested) and more ram, more SSDs and a CPU Upgrade. Right now is running an i3 6100 but i would like to swap it for a Core i7 7700k, you know, those extra GHz and HT. Has anyone been able to get this particular CPU working in the m370? Also considering replacing the original heatsink for a Dynatron k199.Suggestions welcome.
Cheers.
-
@nicknitro said in pfSense on Watchguard M370:
Also considering replacing the original heatsink for a Dynatron k199.
A ducted cooling solution, like the OEM setup, is better than that IMO. Expel the heat from the case rather than just blow air about inside it.
-
@stephenw10 Got the idea, thanks for pointing that suggestion. A plastic shroud could handle it.
About the CPU, well I've seen someone used a 7th gen i5, haven't seen anyone using a i7 nor i7 (k) edition, there's a big difference in the CPU wattage per model, 61w vs 91w, perhaps that could be a limiting factor.Another factor I was considering is the lack of Intel Microcode in the BIOS for that i7 7700k, the only way is testing it but i don't have any around.
-
The standard cooling solution is pretty good anyway. I think the M670 may have more fans pulling the air through.
-
@stephenw10 I think both (m370 and m670) have the same board layout and 3 exhaust fans, the difference is chipset, CPU support and the PCIe X8 expansion.
-
I love forums like this.
I've got a M370 and now I can access the BIOS and also upgraded to an I5 7500 CPU :D
-
These M370s really make excellent pfSense boxes.
A few tips from having done a couple of them…-
The best CPU to use is an Intel Core i7-7700T. It’s fast, multithreaded and only 35W TDP. (QC/8MB/8T/2.9GHz/35W)
-
These Crucial RAM modules work perfectly to give 32GB. Overkill, yes.
https://www.amazon.co.uk/gp/aw/d/B019FRBCQE -
This Kingston KC600 mSATA 256GB SSD also works perfectly. Lots of room for logs.
https://www.amazon.co.uk/gp/aw/d/B08ZNSNL1K -
Noctua NF-A4x20 PWM fans make it silent but make sure you move the blue wire over from pin 4 to pin 5, otherwise they’ll run at full blast with no PWM.
-
The PSU fan can also be replaced by a Noctua NF-A4x10 FLX. Remove the 3 pins from the fan connector, cut the yellow wire, and then solder the black and red onto the circuit board on the side where the old fan was previously connected.
You’re left with a totally silent and fast pfSense box. These Watchguards are really beautifully built.
-
