pfsense and Riverbed CX-780
-
@mistera Nice box. Are Riverbed appliances all Intel CPU? NICs, too?
-
@mistera Yes Sir.
Intel X552 10 GbE SFP+
intel I350 Gigabit NetworkStill need to figure out how disable inpath via IPMI or ESXCLI but with the two 10G links I might not be worried if I don't have 4x1g nics working.
-
Fun! Does it have BIOS access? Options to disable the NIC bypass relays?
Steve
-
@stephenw10 Bios is accessible however, could not find an option to disable the relays.
What is strange when secure boot is enables it reveals more options for the nics but still no options to disable relays. -
Mmm, that could be a problem then. I'd expect them to be bypassed by default which would require something in pfSense to change it.
-
@stephenw10 Decided to add ESXi and pfsense on-top but the nics still need the relay disabled.
Here are some bios screenshots:
-
Intel NIC Details via nvmupdaten64e
Num Description Ver.(hex) DevId S:B Status === ================================== ============ ===== ====== ============== 01) Intel(R) Ethernet Connection X552 0.05(0.05) 15AC 00:003 Update not 10 GbE SFP+ available 02) Intel(R) I350 Gigabit Network 1.99(1.63) 1521 00:006 Update not Connection available 03) Intel(R) I350 Gigabit Network 1.99(1.63) 1521 00:008 Update not Connection availabl [00:003:00:00]: Intel(R) Ethernet Connection X552 10 GbE SFP+ Vendor : 8086 Device : 15AC Subvendor : 8086 Subdevice : 0000 Revision : 0 LAN MAC : 000EB6D0966E Alt MAC : 000EB6D0966E SAN MAC : 000000000000 ETrackId : 800008F7 SerialNumber : 0000C9FFFF000000 NVM Version : 0.05(0.05) PBA : 000600-000 VPD status : Valid VPD size : 45 NVM update : No config file entry checksum : Valid PHY NVM update : No config file entry version : 3.8.1 OROM update : No config file entry CIVD : 1.1275.0 PXE : 2.3.58, checksum Valid EFI : 5.1.19, checksum None [00:003:00:01]: Intel(R) Ethernet Connection X552 10 GbE SFP+ Vendor : 8086 Device : 15AC Subvendor : 8086 Subdevice : 0000 Revision : 0 LAN MAC : 000EB6D0966F Alt MAC : 000EB6D0966F SAN MAC : 000000000000 ETrackId : 800008F7 SerialNumber : 0000C9FFFF000000 NVM Version : 0.05(0.05) PBA : 000600-000 VPD status : Valid VPD size : 45 NVM update : No config file entry checksum : Valid PHY NVM update : No config file entry version : 3.8.1 OROM update : No config file entry CIVD : 1.1275.0 PXE : 2.3.58, checksum Valid EFI : 5.1.19, checksum None [00:006:00:00]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6100CA8 Alt MAC : 000EB6D09666 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:01]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6100CA9 Alt MAC : 000EB6D09667 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:02]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D09668 Alt MAC : 000EB6D09668 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:006:00:03]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D09669 Alt MAC : 000EB6D09669 SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFF100CA8 EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid OROM update : No config file entry CIVD : 1.2074.0 PXE : 1.5.86, checksum Valid EFI : 8.5.21, checksum None [00:008:00:00]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966A Alt MAC : 000EB6D0966A SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:01]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966B Alt MAC : 000EB6D0966B SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:02]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966C Alt MAC : 000EB6D0966C SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid [00:008:00:03]: Intel(R) I350 Gigabit Network Connection Vendor : 8086 Device : 1521 Subvendor : 1B2E Subdevice : 1244 Revision : 1 LAN MAC : 000EB6D0966D Alt MAC : 000EB6D0966D SAN MAC : 000000000000 ETrackId : 00000000 SerialNumber : 000EB6FFFFD0966A EEPROM Version : 1.99(1.63) PBA : 106300-000 VPD status : Not set VPD size : 0 EEPROM update : No config file entry checksum : Valid -
Yup it's probably via a separate driver. If you're lucky there might be jumpers on the board to set the relays.
-
@stephenw10 Did not see any jumpers close to where the 4 intpah interfaces are but this might take a while to get it working.
-
@mistera Bumping this two years later. Did you happen to come across anything? Or did you just settle on using the 4 available NICs rather than all 8?
In your photo I did notice quite a few jumpers near the DIMM slots including what looks like JTAG. One is populated with a jumper, but wasn't sure if that was for CMOS clearing or not. I'll be getting my own CX780 next week and will do some perusing of my own. Will report back if I find anything.
If I don't happen to reply, assume I've hit a dead-end and just opted to use the "primary" ports without the in-path ports. -
Still using the box. Ended up switching to the two 10g sfps for all my physical links. Could not make the 4 pass-through nics to be normal mode. With so many nic’s, I didn’t feel the need to explore other possibilities.
.
