Successful Install on Igel 4210 LX Winestra thin client

robi

Hello to the pfSense community!

This post is just to let you know, pfSense works great on a thin client called Igel 4210 LX Winestra.
The box can be bought on eBay for around 45 EUR with shipping included. A real bargain.

The box has the following specs (details http://www.conactive.de/media/pdfs/igel/winestra.pdf):

CPU: VIA C7 CPU 1 GHz
Chipset Northbridge: CN700
RAM: 256 MB DDR2 (notebook-module, expandable to 2 GB)
CF-card: 128 MB
Display connector: VGA + DVI-I (cabable to show 1920 x 1440)
Display adapter with 16 MB RAM
Audio: AC97 kompatible 3,5 mm Stereo-jacks
Network: onboard 10/100Base-T Fast Ethernet (VIA Rhine II)
COM: 2x RS-232C Ports
LPT: DB-25, bidirectional
USB: 4x USB2.0 Ports
Keyboard and mouse: 2x PS/2 Ports
Storage: IDE-port (laptop-sized) + onboard CF card reader
PCI slot

Powered by an external 12V 4A supply.
Absolutely passive construction, no fans or any moving parts anywhere.

There are 3 versions out there: Linux-based, and Windows CE or XPe-based thin client.

Installation of pfSense is straightforward, just replace the original CF card with one which you preloaded the nanoBsd version as described in the documentation. The built-in NIC is automatically recoginzed, and with a second NIC in the PCI slot it works flawlessly.

CPU load, when generating full 100Mbit traffic from LAN to WAN and reverse WAN to LAN simultaneously, is only at 60-65%.

Most interesting part is that pfSense detects built-in Hardware crypto, namely a VIA Padlock, which can be used with OpenVPN for instance.

Super-satisfied, and many thanks for this great software!

igel_4210_2.jpg_thumb

robi

A quick note, this box (with its hardware crypto chip) is able to do in an OpenVPN connection in TUN mode, AES-256-CBC Encryption algorithm, 2048 bit TLS and 4096 bit DH param, a SAMBA file copy with 26 Mbps (!) speed thhrough the public internet. It could do even more, 'cause CPU load is about 75%, bandwidth cap (by provider) on WAN side is 30Mbps.

Just tested. I'm really impressed by this software and hardware combo.

harlock75

Good to know!
Can you check if this box have an IDE connector for hard disk on the mainboard?
I think this Thin client use some Via EPIA motherboard, probably M10000 or similar.
pfSense runs great also on this type of mainboard.

robi

If you look at the photo attached to the first post, you'll see the IDE connetor pins right above the CF card reader. The connector layout is laptop-type, so you need a laptop 44-pin IDE cable to connect a HDD. There's a jumper nearby which allows to select which port you want to be IDE master or slave: CF reader or IDE port.

robi

The motherboard in this box is perfectly recognized by mbmon, so temperature display in the Dashboard is possible.

Steps to enable this follow (v2.0.1-RELEASE (i386) / nanobsd_vga):

/etc/rc.conf_mount_rw

setenv PACKAGESITE "http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/i386/packages-8.1-release/Latest/"

pkg_add -r mbmon

test to see if mbmon works:

[2.0.1-RELEASE][root@pfSense.bubu]/root(4): mbmon -I -r -c 1
TEMP0 : 49.0
TEMP1 : 53.5
TEMP2 :  0.0
FAN0  :    0
FAN1  :    0
FAN2  :    0
VC0   :  +1.01
VC1   :  +0.03
V33   :  +3.36
V50P  :  +5.03
V12P  :  +8.27
V12N  :  -3.56
V50N  :  -0.67

in /usr/local/www/includes/functions.inc.php change functions according:

function has_temp() {
	return true;
}

and

function get_temp() {
	$cpu_temp_from_mbmon=`mbmon -I -T 2 -c 1`;

	return $cpu_temp_from_mbmon;
}

at the end, don't forget to

/etc/rc.conf_mount_ro

pfsense_igel_winestra_temp.png_thumb

robi

I just bought a second one, 100% satisfaction with this seller:

http://www.ebay.co.uk/itm/ws/eBayISAPI.dll?ViewItem&item=270891123063&ssPageName=ADME:L:OC:GB:1123

igel_4210_0.jpg_thumb

igel_4210_1.jpg_thumb

robi

Update: The Intel Dual Port 10/100 PCI Network Card (703875-004, E139761, 9213p referred as Dell, but absolutely no Dell trademark is present on mine) fits perfectly in the box and operates flawlessly in pfSense, it's detected as two Intel 82558 Pro/100 Ethernet cards.

Can be bought for $10-$20 on eBay.

intel_703875-004_dual_lan_100tx.jpg_thumb

Clinxer

Hello,
I bought a IGEL 4210lx winestra on ebay and have administrator password. IGEL not supported and the seller does not give me any solution.
Maybe if someone could send me the link dump of the compactflash could solve my problem.
Any help is good.

Thanks

robi

You don't need the original compactflash to install pfSense. It's too small for that. Get a bigger one. I use 4GB CF cards in both units, they run pfSense perfectly.
BIOS password can be cleared with a jumper near the battery, old Igel system password goes away with the old CF…

Clinxer

Thank you for your answer.

Before installing pfSense I would like to try the original software that comes with the IGEL but I can not because there administrator password in linux. Therefore seek a dump of the original CF.

Thanks again.

robi

Grab a dump from here: CF1_128mb_bak_dump_dd.rar - 82.2 MB

Clinxer

Many thanks for your help. I have it working.
I bought it on ebay at the following link

http://www.ebay.es/itm/ws/eBayISAPI.dll?ViewItem&item=360430734166&ssPageName=ADME:B:EOIBSA:ES:1123

and the vendor "www-kreher-org" does not respond to the problem. IGEL does not support private clients.

Thanks to your help works. If you come to Spain you have a beer paid.

A greeting.

robi

You're welcome. I didn't know at first that you actually needed the factory CF image.

Cheers!

robi

After further research I found that the motherboard type is WinNET P680, this is the same board that is used in the HP/Neoware e140 thin client (aka CA22).

Although the Via CN700 system chip according to the specs supports up to 2GB of RAM, it seems that on this mobo max 1GB can be installed. Additionally, not any DDR2 module of 1 GB is recognized by the bios, looks like this one will only support 4 memory banks on the module.

Here's a screenshot performing with the factory 256MB or RAM.

features_pfsense_1.png_thumb

WhiteSpy

Hi,

on my IGEL (got the same one since a couple of months), 512MB is max. recognized. I've testet a few different 1GB modules, but got only error-beeps after turning it on (with BIOS v5.03.x), only 512MB ones work. After the upgrade to v5.05.x, I get a short glimpse of the screen after turning it on, but a second later the screen goes black (but no beeping). So I'm still with 512MB…it works flawlessly.

Maybe you want to try the v5.05 (that's the newest version for the WinNET P680 I could find):

required flashing-tool...just flash it under good old plain DOS :):
http://www.mediafire.com/?2d2rok3c104wx5l

Here is the link for the v5.05:
http://www.mediafire.com/?4xhvt8lrfknh7cz

Maybe someone got a newer version, so I can test my 1GB modules again :)

Greetings from Germany

robi

Is this a bios for Igel 4210 LX / WinNET P680 ?

WhiteSpy

Yes, it is for the WinNET P680 Board :)

I suggest to do backup of your installed BIOS (option for that is integrated in the flash.exe) as I did.

robi

Did you try coreboot bios on this motheboard? Compatibility description here.

WhiteSpy

I read about it, but it sounds a bit too "alpha" to me.

For now, my IGEL is running on the v5.05 BIOS with a normal installation of pfsense on a 8GB CF, 512MB module and a Intel PRO 1000GT Dual port NIC. I just wanted to find a way to get the 1GB module working :)

robi

Mee too! I was hoping maybe someone has experience with that open source bios also…

Anyway, thanks for this v5.05, I'll see tomorrow how it performs. Where did you find it btw?