pfsense and Riverbed CX-780
-
Re: PfSense on a Riverbed Steelhead
Just picked up a CX-780 from ebay, 120$
Specs:
Xeon D-1533N
Dual MSATA ports (comes with 30GB and 250GB)
Single SATA Port (came with 1TB SATA 3.5"Disk)
16GB Ram (upgraded to 64, DDR4-2666)
8 RJ45
2 SFP+ ports
Did not test pfsense just yet or tests disabling in-path feature.
So far I added esxi 7.0 and got ipmitool to work via CLI, goal would be to find a way to disable the in-path feature for esx as this would make a nice little server. -
@mistera Nice box. Are Riverbed appliances all Intel CPU? NICs, too?
-
@mistera Yes Sir.
Intel X552 10 GbE SFP+
intel I350 Gigabit NetworkStill need to figure out how disable inpath via IPMI or ESXCLI but with the two 10G links I might not be worried if I don't have 4x1g nics working.
-
Fun! Does it have BIOS access? Options to disable the NIC bypass relays?
Steve
-
@stephenw10 Bios is accessible however, could not find an option to disable the relays.
What is strange when secure boot is enables it reveals more options for the nics but still no options to disable relays. -
Mmm, that could be a problem then. I'd expect them to be bypassed by default which would require something in pfSense to change it.
-
@stephenw10 Decided to add ESXi and pfsense on-top but the nics still need the relay disabled.
Here are some bios screenshots:
-
Intel NIC Details via nvmupdaten64e
Num Description Ver.(hex) DevId S:B Status === ================================== ============ ===== ====== ============== 01) Intel(R) Ethernet Connection X552 0.05(0.05) 15AC 00:003 Update not 10 GbE SFP+ available 02) Intel(R) I350 Gigabit Network 1.99(1.63) 1521 00:006 Update not Connection available 03) Intel(R) I350 Gigabit Network 1.99(1.63) 1521 00:008 Update not Connection availabl [00:003:00:00]: Intel(R) Ethernet Connection X552 10 GbE SFP+ Vendor : 8086 Device : 15AC Subvendor : 8086 Subdevice : 0000 Revision : 0 LAN MAC : 000EB6D0966E Alt MAC : 000EB6D0966E SAN MAC : 000000000000 ETrackId : 800008F7 SerialNumber : 0000C9FFFF000000 NVM Version : 0.05(0.05) PBA : 000600-000 VPD status : Valid VPD size : 45 NVM update : No config file entry checksum : Valid PHY NVM update : No config file entry version : 3.8.1 OROM update : No config file entry CIVD : 1.1275.0 PXE : 2.3.58, checksum Valid EFI : 5.1.19, checksum None [00:003:00:01]: Intel(R) Ethernet Connection X552 10 GbE SFP+ Vendor : 8086 Device : 15AC Subvendor : 8086 Subdevice : 0000 Revision : 0 LAN MAC : 000EB6D0966F Alt MAC : 000EB6D0966F SAN MAC : 000000000000 ETrackId : 800008F7 SerialNumber : 0000C9FFFF000000 NVM Version : 0.05(0.05) PBA : 000600-000 VPD status : Valid VPD size : 45 NVM update : No config file entry checksum : Valid PHY NVM update : No config file entry version : 3.8.1 OROM update : No config file entry CIVD : 1.1275.0 PXE : 2.3.58, checksum Valid EFI : 5.1.19, checksum None [00:006:00:00]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6100CA8 Alt MAC : 000EB6D09666 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:01]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6100CA9 Alt MAC : 000EB6D09667 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:02]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D09668 Alt MAC : 000EB6D09668 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:03]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D09669 Alt MAC : 000EB6D09669 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:008:00:00]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966A Alt MAC : 000EB6D0966A SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:01]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966B Alt MAC : 000EB6D0966B SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:02]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966C Alt MAC : 000EB6D0966C SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:03]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966D Alt MAC : 000EB6D0966D SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid -
Yup it's probably via a separate driver. If you're lucky there might be jumpers on the board to set the relays.
-
@stephenw10 Did not see any jumpers close to where the 4 intpah interfaces are but this might take a while to get it working.
