Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Watchguard XTM 5 Series

    Hardware
    129
    1.1k
    1.1m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • chpalmerC
      chpalmer
      last edited by

      @m0reilly:

      So I have to reinstall, or can this be done via web interface?

      What have you done so far?  My crystal ball is broken..

      Step by step please.

      You have to have console access in order to set up the interfaces.  Have you done that?  It wont do it by itself.

      Triggering snowflakes one by one..
      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

      1 Reply Last reply Reply Quote 0
      • M
        m0reilly
        last edited by

        Haha. yes, i understand. I left everything default, as I though I would be able to set things up in the web interface. I can login to the gui, but will need to change the network pool, as I was originally thinking of running the xtm between my asus router and my system.
          The Asus router is set for 192.168.1.x ,  so either I set the xtm to a different pool, or the router (my wife was home today, so playing with the router was not on the table). I actually would rather set the Asus up as an access point for my wife's wireless needs, and use the xtm in a routing capacity, so cable modem to xtm, and my ethernet needs and my wife's wireless needs off of the xtm (Asus router set solely as a wireless access point).  My Windows ten install sees the xtm, gets a default 192.168.1.100 ip, default gateway of 192.168.1.1, but no wan access. I went ahead and gave the firewall a rule of all traffic is allowed, just to see what's what. not sure how to proceed. Thank you for responding.

        1 Reply Last reply Reply Quote 0
        • M
          m0reilly
          last edited by

          I was able to get the lan side ports up and running, but status states that DHCP is down for wan, and I am unable to get it (DHCP) going…

          1 Reply Last reply Reply Quote 0
          • D
            DeLorean
            last edited by

            Open the serial console and choose option 2 -> Set interfaces IP
            Choose EM1 and use 192.168.2.1
            In the next step type 24 en press Enter
            Enter
            Enter
            On the question if you want to use DHCP , choose Y and press enter
            Choose the first IP of your desired IP pool like 192.168.2.2
            and the last IP like 192.168.2.254
            On the question if you want to proceed with HTTP choose No.

            Reboot your firewall and everything shall be fine now.

            Grtz
            DeLorean

            1 Reply Last reply Reply Quote 0
            • M
              m0reilly
              last edited by

              Thanks, that is what i did earlier today. After attempting to install OPNsense (didn't find an option for CF to sata install unless outside of unit), I went through the motions of setup via seriral, then tried another reinstall of PFsense, as I had noticed that I had previously left the wan at em0…set it to fxp0, assigned the rest of the lan ports, and in the webgui, set up pass rules per port and google dns...all good. I will now start to research firewall rule options, but at the moment I am pleased that it is up and running. Thanks for your response!

              1 Reply Last reply Reply Quote 0
              • D
                DeLorean
                last edited by

                Keep in mind that the fxp0 port is only a 100Mbps port.
                If your internet connection is not above the 100Mbps speed, it doesn't matter.
                By default, pfSense assign the WAN to EM0 and the LAN to EM1.
                There are no extra firewall rules needed to pass through internet.
                By default you have already access to the internet.

                Grts
                DeLorean

                1 Reply Last reply Reply Quote 0
                • M
                  m0reilly
                  last edited by

                  I still couldn't get the other ports (sans em0) through without setting more protocol than tcp allowed. After allowing 'any', the ports received dns, and everything worked. I will go back and whittle it down a bit, but want to first make sure my wife is issue free with her wireless needs. Thanks again.

                  1 Reply Last reply Reply Quote 0
                  • C
                    crash9877
                    last edited by

                    Hi, just got my hands on a XTM515. Bios not flashed.
                    ARM/DISARM works
                    but my Display doesn´t show e.g. Hostname. so i tried every setting under LCDproc. The only setting that works is traffic of interface. Did i get a faulty display?
                    Driver is Watchguard Firebox
                    Displaysize is 2 rows 20 colums

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      If it shows anything then the display is probably fine. If you kill the lcdproc service in Status > Services do you see the goodbye message from the daemon?

                      If so it's the client not passing the various displays to the daemon correctly. Check the client settings in the package.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • D
                        DeLorean
                        last edited by

                        @crash9877:

                        Hi, just got my hands on a XTM515. Bios not flashed.
                        ARM/DISARM works
                        but my Display doesn´t show e.g. Hostname. so i tried every setting under LCDproc. The only setting that works is traffic of interface. Did i get a faulty display?
                        Driver is Watchguard Firebox
                        Displaysize is 2 rows 20 colums

                        What version of pfSense do you use ?
                        I have seen this behaviour once with the embedded version 2.3.5 , while version 2.3.4 runs fine.

                        Grtz
                        DeLorean

                        1 Reply Last reply Reply Quote 0
                        • C
                          crash9877
                          last edited by

                          @stephenw10:

                          If it shows anything then the display is probably fine. If you kill the lcdproc service in Status > Services do you see the goodbye message from the daemon?

                          If so it's the client not passing the various displays to the daemon correctly. Check the client settings in the package.

                          Steve

                          Hi Steve,

                          thanks for your reply. Yes, if i stop the service it says "Thanks for using"

                          what should i check in the client settings?

                          crash9877

                          1 Reply Last reply Reply Quote 0
                          • C
                            crash9877
                            last edited by

                            @DeLorean:

                            @crash9877:

                            Hi, just got my hands on a XTM515. Bios not flashed.
                            ARM/DISARM works
                            but my Display doesn´t show e.g. Hostname. so i tried every setting under LCDproc. The only setting that works is traffic of interface. Did i get a faulty display?
                            Driver is Watchguard Firebox
                            Displaysize is 2 rows 20 colums

                            What version of pfSense do you use ?
                            I have seen this behaviour once with the embedded version 2.3.5 , while version 2.3.4 runs fine.

                            Grtz
                            DeLorean

                            Hi DeLorean,

                            using Pfsense 2.4.2 (64Bit) installed it with 2 ssd´s and zfs and raid (mirrored)

                            this was a clean install. so i installed it when the ssd´s were connected to my pc and after installation i plunged it right back in to the WG

                            1 Reply Last reply Reply Quote 0
                            • C
                              crash9877
                              last edited by

                              Hey Guyz,

                              this is what i tried so far.
                              looks like my XTM515 has a newer Display. tried with pfsense 2.34 and 2.4 fresh installations. no chance. 2nd row doesn´t work at all.
                              the only thing that works is time, load and that´s it.

                              1 Reply Last reply Reply Quote 0
                              • C
                                crash9877
                                last edited by

                                Hey Guyz,

                                this is what i tried so far.
                                looks like my XTM515 has a newer Display. tried with pfsense 2.34 and 2.4 fresh installations. no chance. 2nd row doesn´t work at all.
                                the only thing that works is time, load and that´s it.

                                dmidecode | less brings this

                                Scanning /dev/mem for entry point.
                                SMBIOS 2.5 present.
                                44 structures occupying 2148 bytes.
                                Table at 0x000FBCD0.

                                Handle 0x0000, DMI type 0, 24 bytes
                                BIOS Information
                                        Vendor: American Megatrends Inc.
                                        Version: 080015
                                        Release Date: 04/26/2010
                                        Address: 0xF0000
                                        Runtime Size: 64 kB
                                        ROM Size: 1024 kB
                                        Characteristics:

                                1 Reply Last reply Reply Quote 0
                                • T
                                  t-rexky
                                  last edited by

                                  G'day,

                                  I've been lurking here for a while and many of the posts have been extremely helpful in allowing me to tweak my very recent hardware version of XTM 515.  Thank you for that to everyone!  Now, I don't actually run pfSense on my XTM but in all the fun time spent with the box I learned a few new things that might be useful to others.  So here it goes…

                                  • The on-board VGA header definitely works, and it works very well.  I made a custom cable with a connector I got from digiKey and it's been extremely useful in playing with the box.  The front USB ports work well with USB keyboards and mice as well, so the box becomes a fully functional PC with on-board video.

                                  • The unit serial number is present in the original BIOS.  If you have backed-up your original BIOS, as you should have, the serial number is stored in plain ASCII starting at offset 0x0h, and is terminated with 0x00h.  There is also  another ASCII sequence stored in the original BIOS at offset 0x100h.  Both of those are replaced with zeros once you edit the BIOS image with AMI editors.  So, if anyone feels adventurous enough you can re-instate your serial number and the other number back into the edited BIOS and see if it works.

                                  • I had great success in unlocking and modifying the BIOS.  The log of my modifications is shown below.  I can make it available for anyone who is interested.

                                  XTM515-BIOS1.3-UNLOCKED-5:
Changed 'Sign On Message' to include 'Unlocked v1.5 PT'.
Enabled 'PCIPnP' and 'Chipset' menus.
Enabled 'CPU Configuration' submenu in 'Advanced' menu.
Enabled 'ACPI Configuration' submenu in 'Advanced' menu.

XTM515-BIOS1.3-UNLOCKED-4:
Updated platform 11 CPUID 1067a microcode to version a0b.

XTM515-BIOS1.3-UNLOCKED-3:
Disabled 'Lan ByPass Control' submenu in 'Advanced' menu.
Modified BIOS Strings from 'Port0 AHCI Speed limit to' to 'Port0 AHCI Speed limit' for POrt0 to Port3.

XTM515-BIOS1.3-UNLOCKED-2:
Changed 'Aways CF Card Boot' to 'Show' in 'Advanced' menu.

XTM515-BIOS1.3-UNLOCKED-1:
Unlocked the BIOS by changing 'User Access Level' to 03 in 'Security' menu.

                                  Cheers,
                                  Peter.

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    DeLorean
                                    last edited by

                                    @t-rexky:

                                    G'day,

                                    I've been lurking here for a while and many of the posts have been extremely helpful in allowing me to tweak my very recent hardware version of XTM 515.  Thank you for that to everyone!  Now, I don't actually run pfSense on my XTM but in all the fun time spent with the box I learned a few new things that might be useful to others.  So here it goes…

                                    • The on-board VGA header definitely works, and it works very well.  I made a custom cable with a connector I got from digiKey and it's been extremely useful in playing with the box.  The front USB ports work well with USB keyboards and mice as well, so the box becomes a fully functional PC with on-board video.

                                    • The unit serial number is present in the original BIOS.  If you have backed-up your original BIOS, as you should have, the serial number is stored in plain ASCII starting at offset 0x0h, and is terminated with 0x00h.  There is also  another ASCII sequence stored in the original BIOS at offset 0x100h.  Both of those are replaced with zeros once you edit the BIOS image with AMI editors.  So, if anyone feels adventurous enough you can re-instate your serial number and the other number back into the edited BIOS and see if it works.

                                    • I had great success in unlocking and modifying the BIOS.  The log of my modifications is shown below.  I can make it available for anyone who is interested.

                                    XTM515-BIOS1.3-UNLOCKED-5:
Changed 'Sign On Message' to include 'Unlocked v1.5 PT'.
Enabled 'PCIPnP' and 'Chipset' menus.
Enabled 'CPU Configuration' submenu in 'Advanced' menu.
Enabled 'ACPI Configuration' submenu in 'Advanced' menu.

XTM515-BIOS1.3-UNLOCKED-4:
Updated platform 11 CPUID 1067a microcode to version a0b.

XTM515-BIOS1.3-UNLOCKED-3:
Disabled 'Lan ByPass Control' submenu in 'Advanced' menu.
Modified BIOS Strings from 'Port0 AHCI Speed limit to' to 'Port0 AHCI Speed limit' for POrt0 to Port3.

XTM515-BIOS1.3-UNLOCKED-2:
Changed 'Aways CF Card Boot' to 'Show' in 'Advanced' menu.

XTM515-BIOS1.3-UNLOCKED-1:
Unlocked the BIOS by changing 'User Access Level' to 03 in 'Security' menu.

                                    Cheers,
                                    Peter.

                                    Hello,

                                    Thank you for the usefull information.
                                    I have also being experimenting with the BIOS unlocking, and noticed also that the original serial number is wiped,
                                    from the moment you do a modification.
                                    The downside is, that the BIOS is still let the box boot pfSense without any problem,
                                    but when you want to use back the original Watchguard OS, the login in the Web GUI fails.
                                    The box passes internet, but when you try to login with the right credentials, the page refresh and stays at the login page.

                                    I had discovered if you open the BIOS file with notepad, that the serial number is at the very first line,
                                    but nowhere else (or i missed it).

                                    Grtz
                                    DeLorean

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      DrKappy
                                      last edited by

                                      Greetings…

                                      I have 2 XTM 505's I've converted to pfsense a while back, still running Celeron 440.  One I use actively and the other is just a spare.  With the upcoming AES NI requirements, I was looking to upgrade the CPU's in these (FW-7580) to the fastest CPU's that have AES NI capable.  Has anyone done this?  If so, can you please share with me what would be your recommendation?  I've not found an AES NI CPU that I believe with will work on this motherboard.

                                      TIA.

                                      Kap

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        DeLorean
                                        last edited by

                                        @DrKappy:

                                        Greetings…

                                        I have 2 XTM 505's I've converted to pfsense a while back, still running Celeron 440.  One I use actively and the other is just a spare.  With the upcoming AES NI requirements, I was looking to upgrade the CPU's in these (FW-7580) to the fastest CPU's that have AES NI capable.  Has anyone done this?  If so, can you please share with me what would be your recommendation?  I've not found an AES NI CPU that I believe with will work on this motherboard.

                                        TIA.

                                        Kap

                                        The XTM 5 series use a mainboard with Intel Socket S775 , in the S775 design there doesn't exist any CPU that supports AES-NI.
                                        For these boxes to upgrade from the stock Celeron, i always use a Intel E5800 Dual Core @ 3.2Ghz ,
                                        this type is in the same thermal range (65Watt) as the original cpu.
                                        That way, the cpu runs at same temperature (sometimes even cooler) then the original cpu, and you still got a decent extra cpu power.
                                        There are users that use a Intel Quad Core Q6600 cpu in these boxes, but i never done this,
                                        because that cpu is a 105Watt type, so the box gets hotter and draws more power.

                                        Grtz
                                        DeLorean

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          DrKappy
                                          last edited by

                                          @DeLorean:

                                          @DrKappy:

                                          Greetings…

                                          I have 2 XTM 505's I've converted to pfsense a while back, still running Celeron 440.  One I use actively and the other is just a spare.  With the upcoming AES NI requirements, I was looking to upgrade the CPU's in these (FW-7580) to the fastest CPU's that have AES NI capable.  Has anyone done this?  If so, can you please share with me what would be your recommendation?  I've not found an AES NI CPU that I believe with will work on this motherboard.

                                          TIA.

                                          Kap

                                          The XTM 5 series use a mainboard with Intel Socket S775 , in the S775 design there doesn't exist any CPU that supports AES-NI.
                                          For these boxes to upgrade from the stock Celeron, i always use a Intel E5800 Dual Core @ 3.2Ghz ,
                                          this type is in the same thermal range (65Watt) as the original cpu.
                                          That way, the cpu runs at same temperature (sometimes even cooler) then the original cpu, and you still got a decent extra cpu power.
                                          There are users that use a Intel Quad Core Q6600 cpu in these boxes, but i never done this,
                                          because that cpu is a 105Watt type, so the box gets hotter and draws more power.

                                          Grtz
                                          DeLorean

                                          Yes - this is what I thought, but wanted some confirmation in case I overlooked something.  So I guess the XTM 5 series is confined to 2.4 since the 2.5 will require AES NI.  Guess I will need a new box when 2.5 arrives :)

                                          Thanks for your quick response…

                                          Kap

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Well 2.4 will be supported for some time after that, like 2.3 is now. So there will be time to make the switch.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post