Watchguard XTM 5 Series

shawl01

@stephenw10 Hi Steve, apologies for the delay in coming back to you. Well I have tried the VGA boot with no joy I have also tried all the other settings such as safe mode, verbose, single user, all with no joy and all stop at the same place. I have also tried booting with no console cable attached, nothing good.

The seller I bough from ebay has other units for auction so have contacted him about purchasing a second unit to confirm if unit number one is faulty as they have a returns policy so could return it.

chpalmer

Try hooking a sata drive up to it and see if it will load that way.

shawl01

@chpalmer Yep that's what I have done, installed sata drive in a VM and confirmed it boots without any prompts, but in the XTM I get the freeze at the same place with versions 2.4.4, 2.3.5, i386, amd64, nanobsd, memstick, on CF or SATA

stephenw10

Hmm, but you were able to interrupt the boot loader and enter characters which implies the console is working fine at that point. Hard to say then, I don't recall anything stopping at that point previously.

Steve

ledufakademy

hello,

first very impressed of the activity for this redbox AND pfsense : woahhhh !
secondly :
i have 3 of thix box running fine for a long time.
But with a fourth, i just buy , big problem.
motherboard is FW-7580 W REV 1.0

1 - i can't install if not flashing to xtm5_83.rom : i need to pass ATA from IDE to AHCI , why ?
2 - but with new BIOS (Pfsense 1.8) : just LAN NIC is working all other can't acces WAN (internet)
3 - how can i come back to my bios backup ? (if no web access , for downloading flashrom ... obtain flashrom binary, and install how to do that ?!!)

i really need your help !

stephenw10

So only the fxp port is working?

You can still set that as the WAN and use that to pull in flashrom. If you only have one port defined it will be WAN.

Were the other ports working before you flashed the BIOS? I have never seen that be an issue. I'm not sure how it would break the NICs. Unless that board is completely different, which seems unlikely.

Steve

ledufakademy

@stephenw10
hello stephnew10 : happy to see you here !!!
What a marvellous adventure pfsense on Watchguard . pfffiiiouuuu ;-)

Yep with bios WG 1.3 , just laste nic em5 was probably out of order.
But with xtm5_83.rom ... lol !
just one.

stephenw10

Hmm, well hard to explain how that could be. It would be good to know which one still works. I'm guessing it's the 100M port (fxp0) since that's completely different.
Whichever it is you should be able to use it as WAN to connect out and install flashrom.

Steve

ledufakademy

@stephenw10
hello, sorry for delay.

root@OPNsense:~ # pkg install flashrom
Updating OPNsense repository catalogue...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg: https://pkg.opnsense.org/FreeBSD:11:amd64/20.1/latest/meta.txz: Authentication error
repository OPNsense has no meta file, using default settings
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
2813191321208:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg: https://pkg.opnsense.org/FreeBSD:11:amd64/20.1/latest/packagesite.txz: Authentication error
Unable to update repository OPNsense
Error updating repositories!

chpalmer

@ledufakademy said in Watchguard XTM 5 Series:

Unable to update repository OPNsense

Your not running pfsense. Without knowing the particulars of that product nobody here would be able to guess correctly.

stephenw10

@ledufakademy said in Watchguard XTM 5 Series:

root@OPNsense

Umm... yup, can't help you with that.

ledufakademy

@stephenw10
ok i will flash the card F with last pfsense

with pfsense : boot stuck at :

em5: <Intel(R) PRO/1000 Network Connection 7.6.1-k> port 0xac00-0xac1f mem 0xfe7e0000-0xfe7fffff,0xfe7dc000-0xfe7dffff irq 17 at device 0.0 on pci2 : solved.

same issue :

[2.4.3-RELEASE][root@pfSense.localdomain]/root: pkg update
Updating pfSense-core repository catalogue...
pkg: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
Certificate verification failed for /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
34405266376:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/builder/ce-243/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg: https://pkg.pfsense.org/pfSense_v2_4_3_amd64-pfSense_v2_4_3/packagesite.txz: Authentication error
Unable to update repository pfSense
Error updating repositories!

Dufflepod

This is really a 'thank-you' to those forum contributors who did all the heavy lifting
investigating this box and getting pfSense running with all the hardware whistles & bells configured.

After lurking for a few weeks and on this thread and others concerning the XTM 5 series, I took the
plunge and bought one from eBay for £45 for my home setup.

I installed the latest pfSense 2.4.5 on a ZFS mirror with two cheapo 120 Gb SSDs, flashed the
BIOS with xtm5_83.rom without any drama, and had no problems accessing the BIOS screens with a
serial cable. The 4G RAM upgrade and E5700 CPU upgrade also went without a hitch.

I built a 64 bit WGXepc binary from source in a FreeBSD 11.3 VM (the base for pfSense 2.4.5)
and the Arm/Disarm light now does whatever I tell it to via ShellCmd.

Flush with success I splashed out £12 on an Intel Q8200S on eBay and that arrived last week
and I finally hit my first hurdle - the board doesn't boot with this chip, but will if I
reinsert the E5700. So I just wanted to check that others have got this processor working with
the xtm5_83.rom image? It's no real hardship if I can't get it working, it may just be a dudd
Chinese-scavenged chip, but it would be the icing on the cake if I could get it going.

Also - following the mantra of 'hope for success, plan for failure', I couldn't find the pinout of the SPI
header anywhere in the forums, even though it was mentioned a few times. As I'm putting together a duplicate box
for my brother this might come in handy, (though hopefully not). I've searched and googled but found nothing.
Can anyone help with this info?

Once again - thanks to everyone.

stephenw10

It should work with the Q8200S. The board seems very accommodating in general. https://forum.netgate.com/post/427056 and https://forum.netgate.com/post/544654

After camping ebay (for literally years ) I have a Xeon L3110 in mine and that runs great.

The SPI pinout is standard as far as I know. From the FW-7581 manual though:

Steve

Dufflepod

@stephenw10 Outstanding! Thanks for the info.

anoxy

Hi,

Sorry to disturbe the subject.

I have bought a WatchGuard XTM 505 and I will change the processor and the RAM.

About the processor, I have found a Pentium Dual Core E5300, does it fit with the XTM 505 ? Will it works?

For the RAM, I read that we can add up to 8Go but I think 4Go is adequate ?

I want to use all links at Gigabit speed, I have fiber that provide me 990mb/s download and 600mb/s in upload.

I will add an SSD with PFSense.

Do you think my config is good?

Thanks!

stephenw10

Yes, it probably will work. Yes it will pass Gigabit line rate (941Mbps) but it will be quite taxed doing so. I would just get an E7500 C2D as they cost peanuts these days unless you already have the E5300 in which case test it and see.

4GB is enough for almost everything sane in that level of device. I never bothered putting more than 2GB in mine. I still use it for testing stuff on occasion.

Steve

anoxy

Ok thanks! I have ordered an E7500 and 4Go DDR2 800.

I currently have a PFSense running in old stuff, with an SSD. Can I just take the SSD to the Watchguard ? or it would be better to make a fresh install ? My old stuff just has 3 gigabit ports so if I just move the SSD I guess I just have to re-configure network interface?

Thanks

stephenw10

Yes you would need to reconfigure the interfaces if they are not em in the previous box.

Yes you could just move the SSD. If the previous device does not have a serial console be sure to enable that in Sys > Adv > Admin Access before moving it.

A fresh install is probably a good idea. You will have to boot from CF though unless/until you have swapped out the BIOS to allow USB booting.

Steve

anoxy

I see. Thanks for the help, I think I will make a fresh install :)