Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WatchGuard Firebox T70

    Scheduled Pinned Locked Moved Hardware
    54 Posts 8 Posters 13.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bruor @bruor
      last edited by

      @bruor confirming, used the super fine tip on my iron, popped the resistor off, switch is active on igb3!

      Thanks for the help!

      1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Nice!
        I wish there was a better way. Maybe one day...

        Steve

        1 Reply Last reply Reply Quote 0
        • S
          Souljumper
          last edited by

          @stephenw10 it worked perfectly with my T70 and OPNsense. Thank you very much! Now I can use the 5 port switch as lan interface.

          1 Reply Last reply Reply Quote 0
          • E
            Eihab @stephenw10
            last edited by

            @stephenw10 can you upload the config.xml with the defaults of pfsense setup . Unable to reconfigure setup, my m2 laptop has no ethernet ports and setup shutdown immediately. Thanks

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              It uses igb ports. pfSense will assign igb0 as WAN and igb1 as LAN by default.

              Are you seeing something different?

              You can setup the interfaces from the console anyway.

              Steve

              E 1 Reply Last reply Reply Quote 0
              • E
                Eihab @stephenw10
                last edited by

                @stephenw10 Thanks for the reply. I tried getting into the console but unable to directly on the T70. Since I was unable to get to the GUI on my laptop I could not enable console access. I added a USB ethernet interface to the laptop, it automatically makes it a WAN. I can SSH to it as well, but do not know how to enable console access in the initial setup [not listed as an option] so that when I move into T70 it will allow console access.

                B 1 Reply Last reply Reply Quote 0
                • B
                  bruor @Eihab
                  last edited by

                  @eihab you should be able to just run through the pfsense installation on your laptop, don't boot it, then swap the drive into the t70.

                  I had no success getting console to work on the t70. Even when configured properly I'll get an initial handshake with some output, but then it goes kind of dead and doesn't respond to keystrokes etc. Have tried a mix of cables with null modem adapters etc.

                  E 1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Hmm, weird. The serial console works fine here. Nothing special required.

                    But, yeah. If you install to the mSATA drive on something else and then move it across before the first boot it will use the defaults which should allow you access it on the LAN port.

                    Steve

                    E 1 Reply Last reply Reply Quote 0
                    • E
                      Eihab @bruor
                      last edited by

                      @bruor Thanks for the tip. I tried that using the second option [EFI] but nothing happens on the T70? I am unable to access from a PC connected to the LAN port? Any thing I missed?

                      1 Reply Last reply Reply Quote 0
                      • E
                        Eihab @stephenw10
                        last edited by

                        @stephenw10 Any specific version of pfsense? I downloaded the latest iso and installed on the laptop with 2nd option or EFI boot.

                        B 1 Reply Last reply Reply Quote 0
                        • B
                          bruor @Eihab
                          last edited by

                          @eihab I just updated to 2.5.2 release here.

                          My disk shows it's in bios mode, not sure if the T70 supports EFI boot.

                          E 1 Reply Last reply Reply Quote 0
                          • E
                            Eihab @bruor
                            last edited by

                            @bruor Thanks! that made it work... I am in on the LAN network...

                            1 Reply Last reply Reply Quote 2
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by stephenw10

                              Same here:

                              [2.5.2-RELEASE][root@t70.stevew.lan]/root: sysctl machdep.bootmethod
                              machdep.bootmethod: BIOS
                              
                              1 Reply Last reply Reply Quote 0
                              • stephenw10S stephenw10 referenced this topic on
                              • stephenw10S stephenw10 referenced this topic on
                              • K
                                kubato
                                last edited by

                                I Know this is old and might documented already but, here is how I install pfSense on Watchguard T70.
                                You will need SSD and power connector modded to work on the 2or3 pin power connector(check voltage with meter) next to the sata.
                                You could get the sata power off PC too but, this is how I did it. There is no VGA out so you will also need a Serial connector and teraterm (or whatever soft you use for terminal emulation)
                                Here is the guts:
                                Install PFsense on Watchguard Firebox T70

                                1. download pfsense pfSense-CE-memstick-serial-xxxxxxx-amd64.img (not iso)
                                2. on seperate pc, install ssd and use HDDRawCopy1.10Poratble.exe to copy the above img onto the SSD.
                                3. once done connect the sata and power connector to the firebox.
                                4. Set up Tera Term and Prolific usb to serial to see the install.
                                  note: com, can be any but speed should be 115200,8,none,1,none in the form BPS=115200,Data Bits=8,Parity=none,stop bits=1, flow control (none)
                                  set tera term to BPS of 115200 and you will see the correct data.
                                5. Before turning on Firebox for install, unseat the hd/memory card so it will not boot to that first. Turn on Firebox, count to 4 seconds (important, as it passes the boot but, will still do device detect)plug in card (just leave screwed in but in slot(it will work, screw it in if you want), so power is jumpy and data and it will boot to ssd.)
                                  Intall as normal. Done

                                Default password first login
                                admin, pfsense

                                B 1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Mmm, it's hard to recommend hot-plugging the mSATA card. I could imagine something going badly wrong!

                                  Better to install to mSATA in something else and move it across if you can.

                                  Steve

                                  K 1 Reply Last reply Reply Quote 2
                                  • B
                                    bruor @kubato
                                    last edited by

                                    @kubato I wonder if you were to use a virgin or freshly wiped msata drive if the SATA SSD would boot and allow installation without trying to hotplug it.

                                    K 1 Reply Last reply Reply Quote 0
                                    • K
                                      kubato @bruor
                                      last edited by kubato

                                      @bruor
                                      It might work as it appears to be going through the normal boot from bootable devices. That is where I noticed that, removing the mSata and just installing a working Sata with an "full" install of pfSense. It works fine via Sata drive. I just took the xtra step of seeing if I could get it to start boot on Sata then quickly install the mSata card and allow it to be detected. As you all may know, after the bios boot picks up bootable devices, which is only a sata card, then the pfSense OS starts it does a detection again so this trick will work. I have done it tons of time and never (knock on virgin wood) messed up a mSata card or shorted out and mSata. Speaking of messing up stuff, Be xtra careful if plugging in sata power in the connector. I plugged it in backwards once and thought I blew the whole thing but, it survived and is still working and pfSense it protecting my network.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kubato @stephenw10
                                        last edited by kubato

                                        @stephenw10 You are exactly right and I am doing everything wrong so anyone trying this it is best to stick a working copy on mSata, using another PC via mSata to Sata adapter. After full install, return it back to the Firebox T70. I really want to hack the bios and install a known password so I can get into the bios and change the boot order. I would like to know what device was used by the bios modder to read the bios. I see two and there is supposed to be another a he mentioned. Is that device plugged in via USB or directly connected to BIOS chip?

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Usually they are connected via the SPI header. I have not tried that on the T70.

                                          It's much more convenient if you can boot something and read out the chip but I was never able to boot anything with a serial console. The HDMI header is unpopulated so...stuck at that point. It might be possible though.

                                          Steve

                                          K 1 Reply Last reply Reply Quote 0
                                          • K
                                            kubato @stephenw10
                                            last edited by

                                            @stephenw10
                                            I have procured a T70 and if you or someone needs the original mSata for this....it can be sent for you to "look at".
                                            Steven please contact me via Email and we can discuss via phone or emails.
                                            I owe a lot to the group as you all moved me off of Zyxel stuff and onto "roll your own with pfSense".

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.