Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Successful Install on Watchguard Firebox X700!

    Scheduled Pinned Locked Moved
    Hardware
    151
    690
    888.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      flachance
      last edited by

      ???

      What's a dmesg?

      1 Reply Last reply Reply Quote 0
      • S
        sullrich
        last edited by

        run "dmesg -a" from a command prompt (option 8 from console menu) or ssh in.

        1 Reply Last reply Reply Quote 0
        • J
          jmcentire
          last edited by

          I assume this is what you are looking for:

          Copyright © 1992-2007 The FreeBSD Project.
          Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
          The Regents of the University of California. All rights reserved.
          FreeBSD is a registered trademark of The FreeBSD Foundation.
          FreeBSD 6.2-RELEASE-p10 #0: Tue Jan 15 22:46:42 EST 2008
              sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense_wrap.6
          Timecounter "i8254" frequency 1193182 Hz quality 0
          CPU: Intel(R) Celeron(TM) CPU                1200MHz (1202.73-MHz 686-class CPU)
            Origin = "GenuineIntel"  Id = 0x6b4  Stepping = 4
            Features=0x383f9ff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,sep,mtrr,pge,mca,cmov,pat,pse36,mmx,fxsr,sse>real memory  = 268435456 (256 MB)
          avail memory = 253267968 (241 MB)
          wlan: mac acl policy registered
          ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
          cpu0 on motherboard
          pcib0: <intel 82815="" (i815="" gmch)="" host="" to="" hub="" bridge="">pcibus 0 on motherboard
          pir0: <pci 11="" interrupt="" routing="" table:="" entries="">on motherboard
          $PIR: Using invalid BIOS IRQ 9 from 2.13.INTA for link 0x63
          pci0: <pci bus="">on pcib0
          pcib1: <pci-pci bridge="">at device 1.0 on pci0
          pci1: <pci bus="">on pcib1
          pcib2: <pcibios pci-pci="" bridge="">at device 30.0 on pci0
          pci2: <pci bus="">on pcib2
          pci2: <unknown>at device 6.0 (no driver attached)
          re0: <realtek 10="" 8139c+="" 100basetx="">port 0xd500-0xd5ff mem 0xefefa000-0xefefa1ff irq 10 at device 9.0 on pci2
          miibus0: <mii bus="">on re0
          rlphy0: <realtek internal="" media="" interface="">on miibus0
          rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re0: Ethernet address: 00:90:7f:30:e6:73
          re0: [FAST]
          re1: <realtek 10="" 8139c+="" 100basetx="">port 0xd600-0xd6ff mem 0xefefb000-0xefefb1ff irq 5 at device 10.0 on pci2
          miibus1: <mii bus="">on re1
          rlphy1: <realtek internal="" media="" interface="">on miibus1
          rlphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re1: Ethernet address: 00:90:7f:30:e6:74
          re1: [FAST]
          re2: <realtek 10="" 8139c+="" 100basetx="">port 0xd900-0xd9ff mem 0xefefc000-0xefefc1ff irq 11 at device 11.0 on pci2
          miibus2: <mii bus="">on re2
          rlphy2: <realtek internal="" media="" interface="">on miibus2
          rlphy2:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re2: Ethernet address: 00:90:7f:30:e6:75
          re2: [FAST]
          re3: <realtek 10="" 8139c+="" 100basetx="">port 0xda00-0xdaff mem 0xefefd000-0xefefd1ff irq 12 at device 12.0 on pci2
          miibus3: <mii bus="">on re3
          rlphy3: <realtek internal="" media="" interface="">on miibus3
          rlphy3:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re3: Ethernet address: 00:90:7f:30:e6:76
          re3: [FAST]
          re4: <realtek 10="" 8139c+="" 100basetx="">port 0xdd00-0xddff mem 0xefefe000-0xefefe1ff irq 9 at device 13.0 on pci2
          miibus4: <mii bus="">on re4
          rlphy4: <realtek internal="" media="" interface="">on miibus4
          rlphy4:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re4: Ethernet address: 00:90:7f:30:e6:77
          re4: [FAST]
          re5: <realtek 10="" 8139c+="" 100basetx="">port 0xde00-0xdeff mem 0xefeff000-0xefeff1ff irq 6 at device 14.0 on pci2
          miibus5: <mii bus="">on re5
          rlphy5: <realtek internal="" media="" interface="">on miibus5
          rlphy5:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
          re5: Ethernet address: 00:90:7f:30:e6:78
          re5: [FAST]
          isab0: <pci-isa bridge="">at device 31.0 on pci0
          isa0: <isa bus="">on isab0
          atapci0: <intel ich2="" udma100="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 31.1 on pci0
          ata0: <ata 0="" channel="">on atapci0
          ata1: <ata 1="" channel="">on atapci0
          orm0: <isa option="" rom="">at iomem 0xe0000-0xe0fff on isa0
          ppc0: <parallel port="">at port 0x378-0x37f irq 7 on isa0
          ppc0: Generic chipset (ECP/PS2/NIBBLE) in COMPATIBLE mode
          ppc0: FIFO with 16/16/16 bytes threshold
          ppbus0: <parallel port="" bus="">on ppc0
          ppi0: <parallel i="" o="">on ppbus0
          sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
          sio0: type 16550A, console
          sio1: configured irq 3 not in bitmap of probed irqs 0
          sio1: port may not be enabled
          unknown: <pnp0c01>can't assign resources (memory)
          speaker0: <pc speaker="">at port 0x61 on isa0
          unknown: <pnp0501>can't assign resources (port)
          unknown: <pnp0401>can't assign resources (port)
          RTC BIOS diagnostic error 20 <config_unit>Timecounter "TSC" frequency 1202733781 Hz quality 800
          Timecounters tick every 10.000 msec
          Fast IPsec: Initialized Security Association Processing.
          ad2: DMA limited to UDMA33, controller found non-ATA66 cable
          ad2: 76319MB <toshiba mk8025gas="" ka023a="">at ata1-master UDMA33
          Trying to mount root from ufs:/dev/ad2s1a</toshiba></config_unit></pnp0401></pnp0501></pc></pnp0c01></parallel></parallel></parallel></isa></ata></ata></intel></isa></pci-isa></realtek></mii></realtek></realtek></mii></realtek></realtek></mii></realtek></realtek></mii></realtek></realtek></mii></realtek></realtek></mii></realtek></unknown></pci></pcibios></pci></pci-pci></pci></pci></intel></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,sep,mtrr,pge,mca,cmov,pat,pse36,mmx,fxsr,sse>

          1 Reply Last reply Reply Quote 0
          • J
            jmcentire
            last edited by

            BTW whoever fixed the bootup and shutdown beeps in RC4 THANK YOU!  I swear this thing would sit and beep for a minute and a half whenever I started it up.

            And it seemed to boot a lot faster and is using quite a bit less memory than RC3 was!

            1 Reply Last reply Reply Quote 0
            • R
              ridnhard19
              last edited by

              Hey this is pretty cool. I just found myself a x700 box on bay for cheep and am anxious to give this a try.  You start pricing out the newer alix boards, if you can find a good deal on one of these it really makes sense.  These seem to have a more powerful CPU.

              1 Reply Last reply Reply Quote 0
              • S
                Sifter
                last edited by

                how noisy are these boxes?  Anything like the nokia Ip330's?  Also, I dont see your crypto card being recognized in your dmesg.

                1 Reply Last reply Reply Quote 0
                • R
                  ridnhard19
                  last edited by

                  @Sifter:

                  how noisy are these boxes?  Anything like the nokia Ip330's?  Also, I dont see your crypto card being recognized in your dmesg.

                  Yea i'd be curious to know too. From what it looks like there are only 3 fans in the back.  I'm hoping its quite.

                  Like you, I also noticed nothing about the encryption card in his dmesg log; I'll also be looking to try to figure that piece out when I get my paws on mine.

                  1 Reply Last reply Reply Quote 0
                  • B
                    BenHead
                    last edited by

                    Dunno if you had tried this, but I figured I'd attempt just swapping their CF card out for one with the pfSense embedded image on it.  No luck that way.  :(  (Figured I'd mention it in case anyone else had the same thought.)  Guess it's off to scrounge up a spare hard disk.

                    1 Reply Last reply Reply Quote 0
                    • R
                      rsw686
                      last edited by

                      @BenHead:

                      Dunno if you had tried this, but I figured I'd attempt just swapping their CF card out for one with the pfSense embedded image on it.  No luck that way.  :(  (Figured I'd mention it in case anyone else had the same thought.)  Guess it's off to scrounge up a spare hard disk.

                      I wonder if a simple IDE to CF adapter would work?

                      1 Reply Last reply Reply Quote 0
                      • V
                        Valhalla1
                        last edited by

                        anyone tried a full hard drive install with a IDE adapter, instead of embedded ?

                        (-edited to add, this works fine)

                        1 Reply Last reply Reply Quote 0
                        • Cry HavokC
                          Cry Havok
                          last edited by

                          On another platform, yes.  The FX5620 comes with a built in IDE-CF adaptor and I plugged a microdrive in then did a full install onto that.

                          1 Reply Last reply Reply Quote 0
                          • C
                            cirrusflyer
                            last edited by

                            Would this work on the older WG FB II?

                            1 Reply Last reply Reply Quote 0
                            • H
                              hoba
                              last edited by

                              Have a look here http://www.ls-net.com/m0n0wall-watchguard/ (Hardware seems to be a bit weak though and remember you'll need 128 mb ram at least).

                              1 Reply Last reply Reply Quote 0
                              • V
                                Valhalla1
                                last edited by

                                thanks jmcentire and ridnhard19 and pfsense guys…just finished installing pfsense on a watchguard  and swapping it in place of my old pfsense box

                                works great, what a deal..

                                to those who were wondering about the noise, it is kinda noisy with the 3 fans in the back, compared to a silent embedded device.  and be sure to use the hard drive 'cage' if you do a laptop hard drive install like I did, if you just lay the hard drive on the motherboard its likely to short something out and not boot (happened to me)

                                1 Reply Last reply Reply Quote 0
                                • V
                                  Valhalla1
                                  last edited by

                                  supposedly the mini pci VPN accelerator card is based on the SafeNet SafeXcel 1141  which according to the product brief: 
                                  http://www.safenet-inc.com/Library/3/SafeXcel-1141_ProductBrief.pdf

                                  "Full driver support is available for
                                  development on the most common Operating
                                  Systems, including Windows, Linux,
                                  VxWorks, NetBSD, and FreeBSD. Additional
                                  OS driver support can be delivered
                                  upon request."

                                  says the 1141 is supported in FreeBSD

                                  maybe 1.3 will recognize it ?  or maybe we need a diff kernel option compiled in?

                                  driver info-
                                  http://www.mirbsd.org/htman/sparc/man4/safe.htm

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    jmcentire
                                    last edited by

                                    http://www.freebsd.org/releases/6.2R/hardware-i386.html#CRYPTO-ACCEL

                                    It says the SafeNet 1141 is supported already, but still doesn't show up in pfSense.

                                    BTW so far have been running two of these x700/pfsense boxes for a few months in a production environment.  No problems whatsoever!

                                    Thanks

                                    1 Reply Last reply Reply Quote 0
                                    • V
                                      Valhalla1
                                      last edited by

                                      just had to physically reset my firebox as all network connectivity was lost for no apparent reason   :-\  although the LCD was still cycling as normal and the box seemed "alive" (blinking network lights, lcd).  but pings, ssh logins, or internet traffic were all frozen

                                      I would have checked the status or rebooted cleanly via serial console, but that brings me to my question..  I am able to see the freebsd bootup sequence for pfsense over a null modem serial connection to my firebox x500, but once bootup is complete and the "beep" sounds, the serial console seems to 'die', and is unresponsive to keyboard input, nor does it update the display on hyperterminal

                                      also I don't see any POST bios/bootup info over the serial console (before the OS starts loading), like I do with my soekris net4501.  I only get info over serial once the freebsd kernel bootstraps and it stops once pfsense finishes booting.  I'm guessing I might see the BIOS POST if I installed a pci video card, but I haven't messed with that.  Maybe if I did install one, I could get into bios setup and fix my serial console issue?

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        hoba
                                        last edited by

                                        Try to check the serial port option at system>advanced and see if that makes a difference for the console. The other issue sounds like you maybe have been running out of states. If that is the case you can bump up that value too at system>advanced.

                                        1 Reply Last reply Reply Quote 0
                                        • V
                                          Valhalla1
                                          last edited by

                                          @hoba:

                                          Try to check the serial port option at system>advanced and see if that makes a difference for the console. The other issue sounds like you maybe have been running out of states. If that is the case you can bump up that value too at system>advanced.

                                          duh, I can't believe I missed the serial console option, thanks.

                                          I upped the states to 50,000.  I previously had it set to 30,000, although I've never seen it get near that high before. Hopefully it was just a fluke

                                          1 Reply Last reply Reply Quote 0
                                          • V
                                            Valhalla1
                                            last edited by

                                            well I've had to reboot my Watchguard 3 times now, I've narrowed down the problem..

                                            in the system logs right before the "lockups", you see "re1 watchdog timeout"  repeated serveral times.

                                            from searching the forum, looks like ridnhard19 also had these problems with this firebox..
                                            I issued "echo "hint.acpi.0.disabled=1" >> /boot/loader.conf"  in the console and hopefully that will fix this

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post