XG-7100 Default Port Configuration

jeffc

In reading these posts, I think I may have mis-ordered my XG-7100 (just delivered yesterday).

No problems accessing the console port from my Mac (BTW, SecureCRT, recommended for Windows, runs on the Mac too, the instructions should be updated to refer to that).

However, I'm having a hell of a problem configuring my interface ports. In the short term (for configuration), I want my WAN and LAN ports on 1GB RJ-45, but over the long term, I want the IX0 to go to my switch and ETH1 to go to my external network interface. However, I don't think the RJ-45 ports actually work the way I want - Are these a SWITCH (if so, I missed that), or can these be used as an interface?

If I connect my laptop to ETH0 or ETH1, it doesn't seem to be found. When I try and assign ports from the console, I see:

(ix0 ix2 ix3 lagg0.4090 lagg0.4091 a or nothing if finished): a

Connect the LAN interface now and make sure that the link is up.
Then press ENTER to continue.

No link-up detected.

Enter the LAN interface name or 'a' for auto-detection 
NOTE: this enables full Firewalling/NAT mode.
(ix0 ix2 ix3 lagg0.4090 lagg0.4091 a or nothing if finished):

Auto-detection doesn't work, and ETH1-ETH8 aren't listed as choices. Are these not valid options? How might I use ETH0 and ETH1 as LAN and WAN respectively? Or do I need additional hardware for that?

Please advise, thanks.

/Jeff

Rico

Yes, the 8 ports (ETH0-ETH7) is one Marvell switch. But that is not a big problem because you can configure the ports to be separated.
Check out https://www.netgate.com/resources/videos/configuring-netgate-appliance-integrated-switches-on-pfsense-244.html

-Rico

jeffc

This helps a lot, thanks for the help. I did look at the documentation, and had some questions:

To use the switch, I need to configure as lagg0.4090 (in the console), connect my laptop to ETH1 (at manual IP 192.168.1.10, say), then browse to 192.168.1.1? Do I need to do anything about setting the IP address of the router itself from the console?
I will ultimately be restoring a configuration (saved backup) to the switch. Due to this (and from the docs), I'll need to edit the XML file for the new interfaces? Or can I restore, then go back to the console to fix the interfaces? If I do need to edit the XML, is it straightforward to do this (I've never done it before)?

Thanks so much for your help!

SteveITS

@jeffc said in XG-7100 Default Port Configuration:

I will ultimately be restoring a configuration (saved backup) to the switch

I am pretty sure I've read here that Netgate support will help with that.
Or you can back up the 7100 configuration and paste your firewall rules and whatnot into that file and restore it. XML is just text. It's been a while since I've done it but the rules are attached to the interface (<interface>wan</interface>) so if the 7100 config has WAN set then the rule will apply to that interface. I would just validate the XML before uploading, e.g. open the file with a browser.

stephenw10

Yes, we can modify your old config so you can import it directly. Just open a ticket with us: https://go.netgate.com/

If you restore the factory defaults from the console you will be able to access the webgui via any of the LAN ports (Eth2-8) to import it.

Steve

jeffc

Just to follow up: Netgate support did modify my old configuration and it came up just fine on the new router. Fantastic experience, thanks Netgate!