Installing and using hifn cryptocraphic card? -=*Can be removed*=-
-
Hello,
Tried to search this kind of topics, but i wasn't lucky.
I'm completely noob with pfsense and I bought soekris hifn cryptocard. I've installed hardware and newest 1.2.3 release of pfsense but I'm not sure that did system discover cryptocard.
Few questions:
-
How to detect is device found by system
-
How to install card if it's not found
-
How to configure for usage of that card
-Miika
-
-
I'm not sure that did system discover cryptocard.
If you post the output of the pfSense shell command dmesg here I'll tell you.
-
It may help to also have more detail about the hardware. If you have a slower system like ALIX/Soekris, it can help a lot. If you have a machine with a more powerful CPU, it may do more harm than good.
-
@jimp: Some sort of pentium4 it was, I didn't actually checked processor and stuff. I looked that nics are compatible
@wallabybob:dmesg
Copyright
1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-RELEASE-p5 #0: Sun Dec 6 23:20:31 EST 2009
sullrich@FreeBSD_7.2_pfSense_1.2.3_snaps.pfsense.org:/usr/obj.pfSense/usr/pf Sensesrc/src/sys/pfSense_SMP.7
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz (2666.38-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x6fb Stepping = 11
Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,c ="" mov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe="">Features2=0xe3fd <sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>Cores per package: 2
real memory = 3220045824 (3070 MB)
avail memory = 3145281536 (2999 MB)
ACPI APIC Table: <intelr awrdacpi="">FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID: 0
cpu1 (AP): APIC ID: 1
ioapic0: Changing APIC ID to 4
ioapic0 <version 2.0="">irqs 0-23 on motherboard
wlan: mac acl policy registered
kbd1 at kbdmux0
cryptosoft0: <software crypto="">on motherboard
padlock0: No ACE support.
acpi0: <intelr awrdacpi="">on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, bfde0000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
acpi_button0: <power button="">on acpi0
pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
pci0: <acpi pci="" bus="">on pcib0
pcib1: <pci-pci bridge="">irq 16 at device 1.0 on pci0
pci1: <pci bus="">on pcib1
vgapci0: <vga-compatible display="">port 0xef00-0xef7f mem 0xfa000000-0xfaffffff,0 xc0000000-0xdfffffff,0xf8000000-0xf9ffffff irq 16 at device 0.0 on pci1
pcib2: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
pci2: <acpi pci="" bus="">on pcib2
pcib3: <acpi pci-pci="" bridge="">irq 17 at device 28.1 on pci0
pci3: <acpi pci="" bus="">on pcib3
em0: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xcf00-0xcf1f mem 0xfddc0 000-0xfdddffff,0xfdd00000-0xfdd7ffff,0xfddfc000-0xfddfffff irq 17 at device 0.0 on pci3
em0: Using MSIX interrupts
em0: [ITHREAD]
em0: [ITHREAD]
em0: [ITHREAD]
em0: Ethernet address: 00:1b:21:81:cb:87
pcib4: <acpi pci-pci="" bridge="">irq 19 at device 28.3 on pci0
pci5: <acpi pci="" bus="">on pcib4
em1: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0x9f00-0x9f1f mem 0xfd9c0 000-0xfd9dffff,0xfd900000-0xfd97ffff,0xfd9fc000-0xfd9fffff irq 19 at device 0.0 on pci5
em1: Using MSIX interrupts
em1: [ITHREAD]
em1: [ITHREAD]
em1: [ITHREAD]
em1: Ethernet address: 00:1b:21:81:ca:d9
uhci0: <uhci (generic)="" usb="" controller="">port 0xff00-0xff1f irq 23 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <uhci (generic)="" usb="" controller="">on uhci0
usb0: USB revision 1.0
uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <uhci (generic)="" usb="" controller="">port 0xfe00-0xfe1f irq 19 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <uhci (generic)="" usb="" controller="">on uhci1
usb1: USB revision 1.0
uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <uhci (generic)="" usb="" controller="">port 0xfd00-0xfd1f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <uhci (generic)="" usb="" controller="">on uhci2
usb2: USB revision 1.0
uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb2
uhub2: 2 ports with 2 removable, self powered
uhci3: <uhci (generic)="" usb="" controller="">port 0xfc00-0xfc1f irq 16 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
uhci3: [ITHREAD]
usb3: <uhci (generic)="" usb="" controller="">on uhci3
usb3: USB revision 1.0
uhub3: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usb3
uhub3: 2 ports with 2 removable, self powered
ehci0: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">mem 0xfdfff000-0xfdfff3ff irq 23 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb4: waiting for BIOS to give up control
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <intel 82801gb="" r="" (ich7)="" usb="" 2.0="" controller="">on ehci0
usb4: USB revision 2.0
uhub4: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usb4
uhub4: 8 ports with 8 removable, self powered
pcib5: <acpi pci-pci="" bridge="">at device 30.0 on pci0
pci6: <acpi pci="" bus="">on pcib5
em2: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xaf00-0xaf3f mem 0xfd6e0 000-0xfd6fffff,0xfd6c0000-0xfd6dffff irq 21 at device 3.0 on pci6
em2: [FILTER]
em2: Ethernet address: 00:1b:21:80:7f:fe
em3: <intel(r) 1000="" pro="" network="" connection="" 6.9.6="">port 0xae00-0xae3f mem 0xfd6a0 000-0xfd6bffff,0xfd680000-0xfd69ffff irq 22 at device 4.0 on pci6
em3: [FILTER]
em3: Ethernet address: 00:1b:21:80:7e:f9
hifn0 irq 23 at device 5.0 on pci6
hifn0: proc unit did not reset
hifn0: proc unit did not reset
hifn0: crypto enabling failed
device_attach: hifn0 attach returned 6
isab0: <pci-isa bridge="">at device 31.0 on pci0
isa0: <isa bus="">on isab0
atapci0: <intel ich7="" udma100="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x37 6,0xfb00-0xfb0f at device 31.1 on pci0
ata0: <ata 0="" channel="">on atapci0
ata0: [ITHREAD]
atapci1: <intel ich7="" sata300="" controller="">port 0xfa00-0xfa07,0xf900-0xf903,0xf800 -0xf807,0xf700-0xf703,0xf600-0xf60f irq 19 at device 31.2 on pci0
atapci1: [ITHREAD]
ata2: <ata 0="" channel="">on atapci1
ata2: [ITHREAD]
ata3: <ata 1="" channel="">on atapci1
ata3: [ITHREAD]
pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
acpi_tz0: <thermal zone="">on acpi0
speaker0: <pc speaker="">port 0x61 on acpi0
cpu0: <acpi cpu="">on acpi0
est0: <enhanced speedstep="" frequency="" control="">on cpu0
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 82a082a0600082a
device_attach: est0 attach returned 6
p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
cpu1: <acpi cpu="">on acpi0
est1: <enhanced speedstep="" frequency="" control="">on cpu1
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 82a082a0600082a
device_attach: est1 attach returned 6
p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
pmtimer0 on isa0
orm0: <isa option="" roms="">at iomem 0xd0000-0xd0fff,0xd1000-0xd1fff,0xd2000-0xd2fff ,0xd3000-0xd3fff pnpid ORM0000 on isa0
atkbdc0: <keyboard controller="" (i8042)="">at port 0x60,0x64 on isa0
atkbd0: <at keyboard="">irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
sc0: <system console="">at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 8250 or not responding
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounters tick every 1.000 msec
IPsec: Initialized Security Association Processing.
acd0: CDRW <hl-dt-st gce-8525b="" 1.03="">at ata0-master UDMA33
ad4: 117246MB <maxtor 6y120m0="" yar51ew0="">at ata2-master SATA150
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/ad4s1a
pflog0: promiscuous mode enabled
em0: link state changed to UP
em1: link state changed to UP
em1: link state changed to DOWN
em3: link state changed to UP
em3: link state changed to DOWN
em1: link state changed to UP
em1: link state changed to DOWN
em3: link state changed to UP
em3: link state changed to DOWN
em1: link state changed to UP
em1: link state changed to DOWN
em3: link state changed to UP
em3: link state changed to DOWN
em2: link state changed to UP
em2: link state changed to DOWN
em1: link state changed to UP
em3: link state changed to UP
em1: link state changed to DOWN
em1: link state changed to UP
#</maxtor></hl-dt-st></generic></system></at></keyboard></isa></cpu></enhanced></acpi></cpu></enhanced></acpi></pc></thermal></serial></ata></ata></intel></ata></intel></isa></pci-isa></intel(r)></intel(r)></acpi></acpi></intel></intel></intel></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></intel></uhci></uhci></intel(r)></acpi></acpi></intel(r)></acpi></acpi></acpi></acpi></vga-compatible></pci></pci-pci></acpi></acpi></power></intelr></software></version></intelr></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,c > -
You might try IPsec with and without the card in. IPsec will use it automatically.
With that fast of a system, the Hifn card may end up slowing you down.
-
The startup reports that the hifn driver recognised the card in the system:
hifn0 irq 23 at device 5.0 on pci6but the driver encountered an unexpected event
hifn0: proc unit did not reset hifn0: proc unit did not reset hifn0: crypto enabling failed ```and the card is not available for use:device_attach: hifn0 attach returned 6
-
Thank your for your reply.
What should I do to get drivers to understand that machine?-Miika
-
Suggestion: Search the FreeBSD PR (Problem Report) database for any report of this problem. If found, post a pointer here so the pfSense developers can track it and (if appropriate) add your own problem report. If not found, report the problem. You can search the FreeBSD PR database at http://www.freebsd.org/cgi/query-pr-summary.cgi and submit a PR at http://www.freebsd.org/send-pr.html
Also you could google something like FreeBSD hifn "proc unit did not reset" to see if anyone else has reported a similar looking problem. The search results might suggest an appropriate action.
-
Thank you all for your answers and time.
I couldn't find any other same sort of problem from FreeBSD PR database (I didn't spend hours to search).This card was only nice to try/have. So it's not so big problem to me as it's not working correctly or at all.
Like I said thank you for your time.
P.S. If there is someone from Finland and want to have this card for experimental use, please send a PM.
-Miika
