Install on NETASQ U30 S ?

xobix · Feb 11, 2020, 8:52 AM

@stephenw10 it's always the same issue..

stephenw10 · Feb 11, 2020, 12:58 PM

Hmm, you might try some other common board rates. I expect cuaU0 to be the front panel com port, but they might be swapped for some reason.

It could be that the switch in the smallest unit doesn't have a console to access. Can you see what the switch chip is on the board?

Steve

xobix · Feb 11, 2020, 6:06 PM

On the board I see near the RJ45 connectors a chip named "LB G4P109 LF"
My friend google said that it's a "quad port network transformer"

stephenw10 · Feb 11, 2020, 7:21 PM

Hmm probably under that small heatsink unfortunately.

What baud rates did you try?

Any BIOS options that might suggest something?

Can you boot the original OS and check the boot messages?

Steve

xobix · Feb 11, 2020, 7:41 PM

I tried 4800 -> 115200 baudrate.

I will look in the bios tomorow.

OUPS ! Unfortunately I have written pfsense over the old OS

xobix · Feb 12, 2020, 9:17 AM

I don't see any option in bios thas suggest something. :(

xobix · Feb 12, 2020, 10:34 AM

[2.4.4-RELEASE][admin@pfSense.local]/dev: stty -a -f /dev/cuau0
speed 9600 baud; 0 rows; 0 columns;
lflags: icanon isig iexten echo echoe -echok echoke -echonl echoctl
        -echoprt -altwerase -noflsh -tostop -flusho -pendin -nokerninfo
        -extproc
iflags: -istrip icrnl -inlcr -igncr ixon -ixoff ixany imaxbel -ignbrk
        brkint -inpck -ignpar -parmrk
oflags: opost onlcr -ocrnl tab0 -onocr -onlret
cflags: cread cs8 -parenb -parodd hupcl clocal -cstopb -crtscts -dsrflow
        -dtrflow -mdmbuf
cchars: discard = ^O; dsusp = ^Y; eof = ^D; eol = <undef>;
        eol2 = <undef>; erase = ^?; erase2 = ^H; intr = ^C; kill = ^U;
        lnext = ^V; min = 1; quit = ^\; reprint = ^R; start = ^Q;
        status = ^T; stop = ^S; susp = ^Z; time = 0; werase = ^W;

xobix · Feb 12, 2020, 2:36 PM

@stephenw10 said in Install on NETASQ U30 S ?:

Hmm probably under that small heatsink unfortunately

I took the heatsink off ( I already tear up the warranty label :D)

It's an Atheros AR8328

--> it's not like in the command result where it is written intel --> I need to install a new driver ?

stephenw10 · Feb 12, 2020, 3:02 PM

Hmm, OK.
It looks like the Atheros AR8328 does not have a serial interface that could be used to configure it unlike the other Netasq devices. That makes things immediately 100x more difficult as you need to configure it via MDC/MDIO or
via the config eprom directly.
Netasq/Stormshield OS is built on FreeBSD though I believe, they have contributed stuff back into the base. Unfortunately though I don't see the 8328 as supported:
https://github.com/freebsd/freebsd/tree/master/sys/dev/etherswitch/arswitch
Unless it's so similar to the 8327 it might be able to use that. We are still talking about significant work to get it running.

One thing you might try here is Installing OpenWRT which does have support AR8328 switch. Even if just as a test.

Kind of curious what those jumpers might do but it's hard to recommend you change them without knowing. Are they labelled?

Steve

xobix · Feb 12, 2020, 5:33 PM

@stephenw10 said in Install on NETASQ U30 S ?:

Netasq/Stormshield OS is built on FreeBSD though I believe, they have contributed stuff back into the base. Unfortunately though I don't see the 8328 as supported:
https://github.com/freebsd/freebsd/tree/master/sys/dev/etherswitch/arswitch
Unless it's so similar to the 8327 it might be able to use that. We are still talking about significant work to get it running.

How can I try that ?

@stephenw10 said in Install on NETASQ U30 S ?:

One thing you might try here is Installing OpenWRT which does have support AR8328 switch. Even if just as a test.

I did it PM.
eth1 is a Broadcomm, but down. nothing appends when i plug a cable in one of 4 ports.
I don't know what test I have to do.

@stephenw10 said in Install on NETASQ U30 S ?:

Kind of curious what those jumpers might do but it's hard to recommend you change them without knowing. Are they labelled?

Yes they are : JP3 et JP4

stephenw10 · Feb 13, 2020, 1:35 PM

So you did install OpenWRT already?

I'm not sure exactly what you were seeing as Broadcom. The two NIC would still be Intel. It may have created a bridge as OpenWRT usually does.
You probably have to install the correct switch control modules for it to see and recognise the switch. Not entirely sire what those might be though...

xobix · Feb 16, 2020, 8:41 PM

I will search on this way

xobix · Feb 16, 2020, 8:41 PM

Nothing better...
I don't understand why cu command freez on "connected"

stephenw10 · Feb 16, 2020, 11:22 PM

The 'connected' output is generated by cu, it implies that cu is connected to the port. After that there is nothing there because there is nothing connected to the second com port. It's listening but nothing ever arrives.

You can only configure that switch chip via the MDC/MDIO bus.

Steve

xobix · Feb 17, 2020, 9:22 AM

@stephenw10 said in Install on NETASQ U30 S ?:

The 'connected' output is generated by cu, it implies that cu is connected to the port. After that there is nothing there because there is nothing connected to the second com port. It's listening but nothing ever arrives.

In bios COM1 and COM2 are mapped with physical interface. is there a relation to ?

@stephenw10 said in Install on NETASQ U30 S ?:

You can only configure that switch chip via the MDC/MDIO bus.

it's doable for me ?

stephenw10 · Feb 17, 2020, 5:24 PM

I mean anything is possible; it's a simple matter of coding.

But if I were doing this I would start by trying to get OpenWRT to work with it as that's much closer to what you need to talk to the switch. Once that is working you will know exactly how it's connected and what it can do so it would make any work in pfSense much easier.

Steve

xobix · Feb 17, 2020, 6:33 PM

Unfortunately there is no Steve to help me on openwrt .
I find many drivers for wireless Atheros but no for AR8328.

stephenw10 · Feb 17, 2020, 7:27 PM

Unfortunately there's not enough space in my head for that!

But they have support for the AR8328 it's not as a separate driver, it's probably included and you just need to configure it to know there is a switch on em0 or whatever the interface is detected as there.
https://openwrt.org/docs/techref/hardware/switch#qualcommatheros

Most x86 stuff doesn't have a switch so it's probably not enabled by default.

Steve

bolino · Mar 11, 2020, 2:56 PM

@stephenw10 : hello, i successfully intall pfsense and manage interfaces with the help of this procedure ( serial connexion ) :

Define 2 VLAN at startup : VLAN 1 et VLAN 2 both on em0 interface then,
Assign em0_vlan1 to WAN
Assign em0_vlan2 to LAN
The switch configuration hereafter has to be respected to obtain :
port 1 = WAN
port 2 to 6 = LAN

Configuration of switch NetASQ_U70 :
cu -s 9600 -l /dev/ttyu1

vlan
VLAN> aware 1 enable
VLAN> pvid 1 none
VLAN> frame type 1 Tagged
VLAN> aware 2-8 disable
VLAN> pvid 2 1
VLAN> pvid 3-8 2
VLAN> del 1-4094
VLAN> add 1 1-2
VLAN> add 2 1,3-8
VLAN> config
VLAN Configuration:
Port Aware PVID Ingress Filtering Frame Type
1: enabled none disabled Tagged
2: disabled 1 disabled All
3: disabled 2 disabled All
4: disabled 2 disabled All
5: disabled 2 disabled All
6: disabled 2 disabled All
7: disabled 2 disabled All
8: disabled 2 disabled All

Entries in permanent table:
   1:  1,2
   2:  1,3,4,5,6,7,8

VLAN>
Use the cu(1) escape sequence <Enter> then ~ (tilde) followed by . (dot)

stephenw10 · Mar 11, 2020, 3:02 PM

Yes it's possible on the larger boxes as the switch has a console to configure it.

But it appears the U30s does not.

Steve