pfSense on Watchguard M270
-
Hmm, you want to add a LAGG between switch ports 2 & 3 to some other router? Not a switch?
The NICs in the M270, ix0 and ix1, are connected to switch ports 9 and 10. You can LAGG ix0 and ix1 to the internal switch if you want to but you don't really gain anything by doing so.
The biggest issue is that the internal switch can only do a load-balance LAGG, it cannot do LACP. So that makes it quite limited.
-
Upgraded from 23.05.1 to 23.09 without problems.
Just re-add (from serial console, after update) to /boot/device.hints the lines to load the drivers:
hint.mdio.0.at="ix1"
hint.e6000sw.0.addr=0
hint.e6000sw.0.is6190=1
hint.e6000sw.0.port0disabled=1
hint.e6000sw.0.port9cpu=1
hint.e6000sw.0.port10cpu=1
hint.e6000sw.0.port9speed=2500
hint.e6000sw.0.port10speed=2500 -
Is the solution now not interesting any more for private use, due to the information that the plus licence become no free access any more?
I don't need the plus licence, but there was no solution for the CE one with the M270.
What are your plannings in the next month, WHO written in this post before? -
Currently that's still true. It will only run with Plus because of the requirement for the specially modified ixgbe driver.
But there may be other options.
-
Other options coming or there are some already. Can you give updates about the news here?
-
Nothing yet. If you already had a plus sub it will still be valid though.
-
@stephenw10 How are you guys getting the plus version even installed. I have my M270 with a fresh install of CE 2.7.0. i have IP'S assigned to my WAN and LAN interfaces but since they are not UP, i cant connect to the webgui or ping from my laptop.
With the interfaces being in a down state, how do you upgrade to plus?Thank you in advance,
-
When I did it I installed it in something else first then moved the drive into the m270. Of course that's easier for me as I have numerous other things I can do it with and no issues with upgrading.
If you have a Plus sub already on some other NDI we can probably migrate it to the m270 if/when you move the drive.
Steve
-
@stephenw10 Man i really appreciate you guys help. Ive been looking at you guys post on this for a few weeks. Reading it and rereading them. Trying to understand whats being said and talked about. This is my first time trying this so its COMPLETELY new to me.
So, i dont have another device that i can put the msata drive into upgrade the install to Plus so, i guess Ill have to try the USB dongle route. I looked back over other post about what a "NDI" is and all that, cant say that i completely get it but, Im going down the rabbit hole with this build now. Ill try to connect a dongle in the next few days and see if i can get access to the M270's gui.
IF i do and can get the Plus upgrade done. I guess the next thing would be the "Hints" i keep reading about and interface Scripts. Is there a past post im missing that say's How To create the scripts in Pfsense? I literally have NEVER created one. I see people have shared their Script but, from what ive read you shouldnt just copy the script and save it into Pfsense. So, if theres a past post where someone has listed the commands and steps I would really be grateful.
Thank you guys for sharing your knowledge!
-
You can use the build in Easy Editor ,
ee, at the command line to create a script.Or, once you have access to the GUI via a USB NIC, just use the included Diag > Edit File function.
-
@stephenw10 Excellent.
I will give that a try and let you know how it goes.
PS, The BIOS password works!!!
-
@stephenw10 For anyone reading this in the future.
I bought a usb to ethernet adapter (two actually) set it to a simple static IP like 192.168.1. 40/24. Pfsense couldn't ping my connected laptop (192.168.1.41/24) and my laptop couldn't ping pfsense. Verified cables were good, both devices could ping THEMSELVES, even switched usb to ethernet adapters and verified mac addresses were seen using arp -a. But, still no pings.
So, from the menu i did a reset. And reconfigured pfsense to be the DHCP server and use the usb to ethernet adapter interface. BINGO, i can ping back and forth. I can also access the gui!
Over first hurdle, now find out how to upgrade to Plus.
Thank you for your help guys/gals.
-
@stephenw10 I think im ready for the next step. I have CE upgraded to Plus. When you guys are adding the hints, are you adding them to the existing hints or replacing them completely with the new hints?
-
They are new hints. Nothing for the switch is configured by default.
-
@stephenw10 Interesting, Ill probably try it this weekend but, there was a file already there called Device.hints in the /boot/ folder. Ill double check and remove it if it is.
Thanks again.
-
The hints don't have to be there, you can put them in /boot/loader.conf.local.
-
So i mistakenly altered the /boot/loader.conf file. Which after doing so wouldn't boot the M270. So i reloaded from scratch (Im learning) . After a fresh install there is indeed a device.hints file in the /boot/folder (i wont touch that).
Back to your suggestion. Are you saying create a file called loader.conf.local in /boot/ and put the hints in it or are you saying loader.conf.local should exist (which i do not see) and add the hints to it?Thanks again,
-
Yes, create the /boot/loader.conf.local file and put the custom hints and loader values in there.
It doesn't actually matter where the hints are the bootloader looks in all the files. However the main loader.conf file is frequently overwritten by pfSense which is why custom values should be put in .local
Steve
-
@stephenw10 Ive created the loader.conf.local file in /boot/, added the hints to it and saved it. Then i went to /usr/local/bin/ and ran my M270.sh file. It does something and i see a bunch of "Forwarding"... commands scroll by. But when i reboot the M270 the loader.conf.local file no longer exists in the /boot/ folder.
-
@stephenw10 ok after reading through the post, i see after the M270 reboots everything is set back to ports disabled. Ill look at the post again and see if someone has a work around.
I appreciate everything.
