Installing and using hifn cryptocraphic card? -=*Can be removed*=-



  • Hello,

    Tried to search this kind of topics, but i wasn't lucky.

    I'm  completely noob with pfsense and I bought soekris hifn cryptocard. I've installed hardware and newest 1.2.3 release of pfsense but I'm not sure that did system discover cryptocard.

    Few questions:

    • How to detect is device found by system

    • How to install card if it's not found

    • How to configure for usage of that card

    -Miika



  • @Metu69salemi:

    I'm not sure that did system discover cryptocard.

    If you post the output of the pfSense shell command dmesg here I'll tell you.


  • Rebel Alliance Developer Netgate

    It may help to also have more detail about the hardware. If you have a slower system like ALIX/Soekris, it can help a lot. If you have a machine with a more powerful CPU, it may do more harm than good.



  • @jimp: Some sort of pentium4 it was, I didn't actually checked processor and stuff. I looked that nics are compatible
    @wallabybob:

    dmesg

    Copyright © 1992-2009 The FreeBSD Project.
    Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
            The Regents of the University of California. All rights reserved.
    FreeBSD is a registered trademark of The FreeBSD Foundation.
    FreeBSD 7.2-RELEASE-p5 #0: Sun Dec  6 23:20:31 EST 2009
        sullrich@FreeBSD_7.2_pfSense_1.2.3_snaps.pfsense.org:/usr/obj.pfSense/usr/pf                                                                                                                Sensesrc/src/sys/pfSense_SMP.7
    Timecounter "i8254" frequency 1193182 Hz quality 0
    CPU: Intel(R) Core(TM)2 Duo CPU    E6750  @ 2.66GHz (2666.38-MHz 686-class CPU)
      Origin = "GenuineIntel"  Id = 0x6fb  Stepping = 11
      Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,c   ="" mov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe="">Features2=0xe3fd <sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>Cores per package: 2
    real memory  = 3220045824 (3070 MB)
    avail memory = 3145281536 (2999 MB)
    ACPI APIC Table: <intelr awrdacpi="">FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
    cpu0 (BSP): APIC ID:  0
    cpu1 (AP): APIC ID:  1
    ioapic0: Changing APIC ID to 4
    ioapic0 <version 2.0="">irqs 0-23 on motherboard
    wlan: mac acl policy registered
    kbd1 at kbdmux0
    cryptosoft0: <software crypto="">on motherboard
    padlock0: No ACE support.
    acpi0: <intelr awrdacpi="">on motherboard
    acpi0: [ITHREAD]
    acpi0: Power Button (fixed)
    acpi0: reservation of 0, a0000 (3) failed
    acpi0: reservation of 100000, bfde0000 (3) failed
    Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
    acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
    acpi_button0: <power button="">on acpi0
    pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
    pci0: <acpi pci="" bus="">on pcib0
    pcib1: <pci-pci bridge="">irq 16 at device 1.0 on pci0
    pci1: <pci bus="">on pcib1
    vgapci0: <vga-compatible display="">port 0xef00-0xef7f mem 0xfa000000-0xfaffffff,0                                                                                                                xc0000000-0xdfffffff,0xf8000000-0xf9ffffff irq 16 at device 0.0 on pci1
    pcib2: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
    pci2: <acpi pci="" bus="">on pcib2
    pcib3: <acpi pci-pci="" bridge="">irq 17 at device 28.1 on pci0
    pci3: <acpi pci="" bus="">on pcib3
    em0: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xcf00-0xcf1f mem 0xfddc0                                                                                                                000-0xfdddffff,0xfdd00000-0xfdd7ffff,0xfddfc000-0xfddfffff irq 17 at device 0.0                                                                                                                on pci3
    em0: Using MSIX interrupts
    em0: [ITHREAD]
    em0: [ITHREAD]
    em0: [ITHREAD]
    em0: Ethernet address: 00:1b:21:81:cb:87
    pcib4: <acpi pci-pci="" bridge="">irq 19 at device 28.3 on pci0
    pci5: <acpi pci="" bus="">on pcib4
    em1: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0x9f00-0x9f1f mem 0xfd9c0                                                                                                                000-0xfd9dffff,0xfd900000-0xfd97ffff,0xfd9fc000-0xfd9fffff irq 19 at device 0.0                                                                                                                on pci5
    em1: Using MSIX interrupts
    em1: [ITHREAD]
    em1: [ITHREAD]
    em1: [ITHREAD]
    em1: Ethernet address: 00:1b:21:81:ca:d9
    uhci0: <uhci (generic)="" usb="" controller="">port 0xff00-0xff1f irq 23 at device 29.0                                                                                                                on pci0
    uhci0: [GIANT-LOCKED]
    uhci0: [ITHREAD]
    usb0: <uhci (generic)="" usb="" controller="">on uhci0
    usb0: USB revision 1.0
    uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb0
    uhub0: 2 ports with 2 removable, self powered
    uhci1: <uhci (generic)="" usb="" controller="">port 0xfe00-0xfe1f irq 19 at device 29.1                                                                                                                on pci0
    uhci1: [GIANT-LOCKED]
    uhci1: [ITHREAD]
    usb1: <uhci (generic)="" usb="" controller="">on uhci1
    usb1: USB revision 1.0
    uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb1
    uhub1: 2 ports with 2 removable, self powered
    uhci2: <uhci (generic)="" usb="" controller="">port 0xfd00-0xfd1f irq 18 at device 29.2                                                                                                                on pci0
    uhci2: [GIANT-LOCKED]
    uhci2: [ITHREAD]
    usb2: <uhci (generic)="" usb="" controller="">on uhci2
    usb2: USB revision 1.0
    uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb2
    uhub2: 2 ports with 2 removable, self powered
    uhci3: <uhci (generic)="" usb="" controller="">port 0xfc00-0xfc1f irq 16 at device 29.3                                                                                                                on pci0
    uhci3: [GIANT-LOCKED]
    uhci3: [ITHREAD]
    usb3: <uhci (generic)="" usb="" controller="">on uhci3
    usb3: USB revision 1.0
    uhub3: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb3
    uhub3: 2 ports with 2 removable, self powered
    ehci0: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">mem 0xfdfff000-0xfdfff3ff irq                                                                                                                23 at device 29.7 on pci0
    ehci0: [GIANT-LOCKED]
    ehci0: [ITHREAD]
    usb4: waiting for BIOS to give up control
    usb4: EHCI version 1.0
    usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
    usb4: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">on ehci0
    usb4: USB revision 2.0
    uhub4: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usb4
    uhub4: 8 ports with 8 removable, self powered
    pcib5: <acpi pci-pci="" bridge="">at device 30.0 on pci0
    pci6: <acpi pci="" bus="">on pcib5
    em2: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xaf00-0xaf3f mem 0xfd6e0                                                                                                                000-0xfd6fffff,0xfd6c0000-0xfd6dffff irq 21 at device 3.0 on pci6
    em2: [FILTER]
    em2: Ethernet address: 00:1b:21:80:7f:fe
    em3: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xae00-0xae3f mem 0xfd6a0                                                                                                                000-0xfd6bffff,0xfd680000-0xfd69ffff irq 22 at device 4.0 on pci6
    em3: [FILTER]
    em3: Ethernet address: 00:1b:21:80:7e:f9
    hifn0 irq 23 at device 5.0 on pci6
    hifn0: proc unit did not reset
    hifn0: proc unit did not reset
    hifn0: crypto enabling failed

    device_attach: hifn0 attach returned 6
    isab0: <pci-isa bridge="">at device 31.0 on pci0
    isa0: <isa bus="">on isab0
    atapci0: <intel ich7="" udma100="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x37                                                                                                                6,0xfb00-0xfb0f at device 31.1 on pci0
    ata0: <ata 0="" channel="">on atapci0
    ata0: [ITHREAD]
    atapci1: <intel ich7="" sata300="" controller="">port 0xfa00-0xfa07,0xf900-0xf903,0xf800                                                                                                                -0xf807,0xf700-0xf703,0xf600-0xf60f irq 19 at device 31.2 on pci0
    atapci1: [ITHREAD]
    ata2: <ata 0="" channel="">on atapci1
    ata2: [ITHREAD]
    ata3: <ata 1="" channel="">on atapci1
    ata3: [ITHREAD]
    pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
    acpi_tz0: <thermal zone="">on acpi0
    speaker0: <pc speaker="">port 0x61 on acpi0
    cpu0: <acpi cpu="">on acpi0
    est0: <enhanced speedstep="" frequency="" control="">on cpu0
    est: CPU supports Enhanced Speedstep, but is not recognized.
    est: cpu_vendor GenuineIntel, msr 82a082a0600082a
    device_attach: est0 attach returned 6
    p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
    cpu1: <acpi cpu="">on acpi0
    est1: <enhanced speedstep="" frequency="" control="">on cpu1
    est: CPU supports Enhanced Speedstep, but is not recognized.
    est: cpu_vendor GenuineIntel, msr 82a082a0600082a
    device_attach: est1 attach returned 6
    p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
    pmtimer0 on isa0
    orm0: <isa option="" roms="">at iomem 0xd0000-0xd0fff,0xd1000-0xd1fff,0xd2000-0xd2fff                                                                                                                ,0xd3000-0xd3fff pnpid ORM0000 on isa0
    atkbdc0: <keyboard controller="" (i8042)="">at port 0x60,0x64 on isa0
    atkbd0: <at keyboard="">irq 1 on atkbdc0
    kbd0 at atkbd0
    atkbd0: [GIANT-LOCKED]
    atkbd0: [ITHREAD]
    sc0: <system console="">at flags 0x100 on isa0
    sc0: VGA <16 virtual consoles, flags=0x300>
    sio0: configured irq 4 not in bitmap of probed irqs 0
    sio0: port may not be enabled
    sio0: configured irq 4 not in bitmap of probed irqs 0
    sio0: port may not be enabled
    sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
    sio0: type 8250 or not responding
    sio0: [FILTER]
    sio1: configured irq 3 not in bitmap of probed irqs 0
    sio1: port may not be enabled
    vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
    Timecounters tick every 1.000 msec
    IPsec: Initialized Security Association Processing.
    acd0: CDRW <hl-dt-st gce-8525b="" 1.03="">at ata0-master UDMA33
    ad4: 117246MB <maxtor 6y120m0="" yar51ew0="">at ata2-master SATA150
    SMP: AP CPU #1 Launched!
    Trying to mount root from ufs:/dev/ad4s1a
    pflog0: promiscuous mode enabled
    em0: link state changed to UP
    em1: link state changed to UP
    em1: link state changed to DOWN
    em3: link state changed to UP
    em3: link state changed to DOWN
    em1: link state changed to UP
    em1: link state changed to DOWN
    em3: link state changed to UP
    em3: link state changed to DOWN
    em1: link state changed to UP
    em1: link state changed to DOWN
    em3: link state changed to UP
    em3: link state changed to DOWN
    em2: link state changed to UP
    em2: link state changed to DOWN
    em1: link state changed to UP
    em3: link state changed to UP
    em1: link state changed to DOWN
    em1: link state changed to UP
    #</maxtor></hl-dt-st></generic></system></at></keyboard></isa></cpu></enhanced></acpi></cpu></enhanced></acpi></pc></thermal></serial></ata></ata></intel></ata></intel></isa></pci-isa></intel(r)></intel(r)></acpi></acpi></intel></intel></intel></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></intel(r)></acpi></acpi></intel(r)></acpi></acpi></acpi></acpi></vga-compatible></pci></pci-pci></acpi></acpi></power></intelr></software></version></intelr></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,c >


  • Rebel Alliance Developer Netgate

    You might try IPsec with and without the card in. IPsec will use it automatically.

    With that fast of a system, the Hifn card may end up slowing you down.



  • The startup reports that the hifn driver recognised the card in the system:

    
    hifn0 irq 23 at device 5.0 on pci6
    
    

    but the driver encountered an unexpected event

    
    hifn0: proc unit did not reset
    hifn0: proc unit did not reset
    hifn0: crypto enabling failed
    
    ```and the card is not available for use:
    

    device_attach: hifn0 attach returned 6



  • Thank your for your reply.
    What should I do to get drivers to understand that machine?

    -Miika



  • Suggestion: Search the FreeBSD PR (Problem Report) database for any report of this problem. If found, post a pointer here so the pfSense developers can track it and (if appropriate) add your own problem report. If not found, report the problem. You can search the FreeBSD PR database at http://www.freebsd.org/cgi/query-pr-summary.cgi and submit a PR at http://www.freebsd.org/send-pr.html

    Also you could google something like FreeBSD hifn "proc unit did not reset" to see if anyone else has reported a similar looking problem. The search results might suggest an appropriate action.



  • Thank you all for your answers and time.
    I couldn't find any other same sort of problem from FreeBSD PR database (I didn't spend hours to search).

    This card was only nice to try/have. So it's not so big problem to me as it's not working correctly or at all.

    Like I said thank you for your time.

    P.S. If there is someone from Finland and want to have this card for experimental use, please send a PM.

    -Miika


Locked