Successful Install on Watchguard Firebox X700!

hmeister

Stephenw10 is right, the issue that you are having is very odd.

I did a full install on my firebox2 (old x700) a week or so back with no issues.
Got the lcd driver that Stephenw10 put together to work and now, with this help, have got the arm/disarm lcd turned green on both my fireboxes now as well!

Both my fireboxes still have their safenet card, but both my installations are full on a (6GB-ish) ide disk that I rescued from laptops in years long past.

Ditto - and Thanks Stephenw10 for the LCD fix - working great…..

hmeister

@tehtrk:

@Dayblade:

@Sifter:

Again, has anyone upgraded the memory on these boxes and gotten it to see the additional? I placed a 512meg module in the box, and it still registers at 256meg. I tried 2 separate sticks.

Perhaps jumper settings somewhere on the board?

Upgraded it to 512 MB just this week:

Kingston KVR100x64C2/512 512MB PC100 CL2

Also changed out the heatsink and fan - that is the MAJORITY of the noise factor in the x700 - they use a fan designed by Y.S. Tech (?) that was pushing 7200+ RPM's. I switched and installed a lower/larger fan combo @ 5500 RPM's and temps dropped by 10C and the noise is SUBJECTIVELY quieter.
(Granted I did not test decibel levels prior to the fan switch out)

Hope that helps - <3 pfSense on my WatchGuard btw - still working on getting the LCD to do its thang…otherwise, it works like a champ.

Dayblade

Thanks for the detailed info man. I'm looking to upgrade both ram and heatsink. I think I'll just play it safe and go with the ram you mentioned. Do you have the model number for that YS tech HSF? Sounds like it's performing well.

Apart from low ram (when running snort lol) and that whine I'm loving this WG pfsense box!

I tried the Kingston - Kingston 512MB
It keeps rebooting on this memory. I have a lot of old parts and found HP double sided 133 and it runs stable on that. I ordered the Kingston online and will ask the vendor to re-test it. Not sure if it is bad memory or something else - Currently running WG X700 with PFSense 2.0 Rc1.

hmeister

Hi…
I was asked to help with this first x700 box I have been working on - from a customer and setup the box with everyone's help here - for delivery next week. Thank-you everyone and big thanks to Steve who drilled down the LCD and LED issue. It has been tested and running stable for a number of days.

I just bought another x700 on eBay for $71 shipped... Not that cheap but I will be re-working this box for another small business - this is starting to catch on here with my customers when I say low cost firewall they say they want to try it!

Now I just saw the ALIX boxes and this is even more interesting! The 3 port small box setup looks great... Now I want to try that and setup the CF card with the embedded image...

Thanks for all the help with the first attempt - it runs great!...

H.

StuartW

Hi

A little OT, but this thread has become the definitive resource for watchguard hardware.

I picked up an x1000 from ebay that appeared to be DOA in that it would power up, but not POST (no beeb, arm/disarm light not lit). Lid comes off and after some diagnostics (swapping CPU and ram and putting CF card in another unit) I found that if the battery was removed and left out, the unit would POST and my forcing OS boot (select 0 at boot menu) the device would start to boot, but hang with the following one the console:

/etc/rc.d/rc.sysinit: /etc/sysconfig/clock: line 1: unexpected EOF while looking for matching `"'
/etc/rc.d/rc.sysinit: /etc/sysconfig/clock: line 4: syntax error: unexpected end of file

So I take the CF back out again, and place in an x500 known working which produces:

/etc/rc.d/rc.sysinit: /etc/sysconfig/clock: line 1: unexpected EOF while looking for matching `"'
/etc/rc.d/rc.sysinit: /etc/sysconfig/clock: line 4: syntax error: unexpected end of file
Setting clock : Sat May 7 02:58:06 BST 2011 [ OK ]

so the x1000 is hanging on setting the clock. Given there is no battery installed, this might make a bit of sense.

If I let the unit boot to the hang point without the battery AND with the BIOS reset jumper removed, and then put the jumper on when the device is live, it will boot through to completion. ???

Another strange thing is that on the boot menu, which would usually have a count down from 5 to 0, doesn't count, it just stays at 5 waiting for keyboard intervention.

Anyone with any ideas what is going on here? This does strike me as a hardware issue, but is this a recoverable situation?

As an aside, when swapping the CF card between the devices, I found that the model and serial numbers we set as per the unit the card was in (ie, always matched the sticker on the back). Seeing as all hardware in the x-core range is the same, where does this info come from? If I could "fool" the x500 into thinking it was the x1000, I'd be able to swap the cards out and be ok.

If I can get the device to boot, it will be next in line for my 3rd PFSense box - there, back on topic ;)

I took the HDD from my working PFsense x700 and placed it in the x1000 and hangs here:

ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿
³ ³
³ ³
³ ³
³ Welcome to pfSense! ³
³ ³ ______
³ ³ /
³ 1. Boot pfSense [default] ³ / f
³ 2. Boot pfSense with ACPI enabled ³ / \ /
³ 3. Boot pfSense in Safe Mode ³ / p _/ Sense
³ 4. Boot pfSense in single user mode ³ \ /
³ 5. Boot pfSense with verbose logging ³ _____/
³ 6. Escape to loader prompt ³ \ /
³ 7. Reboot ³ ______/
³ ³
³ ³
³ ³
³ ³
³ Select option, [Enter] for default ³
³ or [Space] to pause timer 3 ³
ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ

Copyright 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-RELEASE-p5 #0: Sun Dec 6 23:05:10 EST 2009
sullrich@FreeBSD_7.2_pfSense_1.2.3_snaps.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_wrap.7.i386

also, the countdown in the menu above also does not count down...

Thanks

Stuart

hmeister

Stuart…
Just for fun did you try another piece of memory or reseat the existing memory?
H

StuartW

@hmeister:

Stuart…
Just for fun did you try another piece of memory or reseat the existing memory?
H

Yeah, new memory & CPU from known working unit

stephenw10

Did you test or replace the battery? Many systems upon booting with a completely blank CMOS will through an error, set the defaults and then reboot. However with no battery or a veryflat one it can get stuck in a loop.
The serial number and model is stored in an EPROM on the board and you would need special software to alter it. If it was easy you could change your box from an x500 to an x1000 without paying.

Steve

StuartW

@stephenw10:

Did you test or replace the battery? Many systems upon booting with a completely blank CMOS will through an error, set the defaults and then reboot. However with no battery or a veryflat one it can get stuck in a loop.
The serial number and model is stored in an EPROM on the board and you would need special software to alter it. If it was easy you could change your box from an x500 to an x1000 without paying.

Steve

Yep, battery replaced with one from known working box. Still only boots without battery.

Is the EPROM the IC almost centre in the brown receptacle? Cause I swapped those between boxes too ;)

hmeister

Stuartw…
Beyond the battery, processor & mem there is not much else unless you get to the component level.
Sorry, but beyond that I would not know what else unless it is trial and error.
My guess is try everything again with the standard mem, standard celeron and no CF card/hard drive and see if there is anything you missed going on in the bios.

Unrelated but FWIW: I had an issue with my first X700 box and the hard drive I was using would not upgrade to 2.0 - 1.2.3 would run fine - I know this is not your symptom but just in case someone else is hitting the same wall I was. These are basic system boards so perhaps thinking through all aspects which it seems you have done the other item I would look at is the jumpers on the sys board. Find a photo and recheck those. Someone put a high def photo of the stock board and may be you could find it and recheck the jumpers.
I am wondering if there is a bios flash for these and/or new bios chip? It is probably soldered on but that would be what I would do after installing everything back stock, rechecking the jumpers and work a reboot from there...

hmeister

FWIW - A bit off topic but it relates to Watchguard platform…

Yesterday I installed Squid, Squid Proxy and am running transparent, setup Squid, setup Country Block, and finally guest wireless services with the portal working. I have 512mem, PIII and this x700 will be for a small office of only 10 to 15 connections so I have plenty of overhead. Today I sandwiched the x700 on my home network and started backing up one of my production websites and downloaded 2.1 gig without a hitch all the time still using the interface and web access working on another site that I was uploading some files to. The x700 took it all in stride and without a hick-up - The box is transparent and causes no lag or delay... Waiting on my next box to arrive that I bought on eBay...

My customer on this first one x700 is still out of town but I will be delivering this sometime in the next 2 weeks. I found a couple good primers that I posted on my nettechonlinedotnet website that link to discussions on DNS blacklist, Squid and Squid Proxy and some other primers. All basic stuff but if anyone is interested it will help you get a foot hold on some of the capabilities of PFS.

stephenw10

@StuartW:

Yep, battery replaced with one from known working box. Still only boots without battery.

But did you actually measure it? I should be above 3V. Half flat batteries can cause strange behaviour.
Like you say it hangs when trying to read the real time clock from the board, which is powered by the battery. Strange that applying the cmos reset jumper allows it to continue.

@StuartW:

Is the EPROM the IC almost centre in the brown receptacle? Cause I swapped those between boxes too ;)

You mean this:

That's the bios eeprom which holds the bios code. It's unlikely the serial number would be stored there as there are many ways of accessing that chip. Interesting that swapping it made no difference though.

Steve

StuartW

Didnt test it, but both batteries function ok in my workin unit.

I agree very strange that applying the reset jumper when life forces past the RTC point. I'm also hung on the fact that any countdowns don work. Fried RTC?

I thought it might be BIOS EEPROM at first, but changed my mind when I saw an IC with Award label in it, below and about 7.00 from the one pictured.

hmeister

Stuart…

I agree with Steve...

But did you actually measure it? I should be above 3V. Half flat batteries can cause strange behaviour.
Like you say it hangs when trying to read the real time clock from the board, which is powered by the battery. Strange that applying the cmos reset jumper allows it to continue.

You said you have another working unit - perhaps use the CMOS battery on that unit in the unit in question to see if you can breathe some life into it?

H.

StuartW

@StuartW:

Didnt test it, but both batteries function ok in my working unit.

:)

stephenw10

@StuartW:

I agree very strange that applying the reset jumper when life forces past the RTC point. I'm also hung on the fact that any countdowns don work. Fried RTC?

Yes that would explain it. Hard to change that. If you could look at the bios you could see. That would involve a PCI graphics card. If the RTC is dead the bios may not load since it too will try to read it.
@StuartW:

I thought it might be BIOS EEPROM at first, but changed my mind when I saw an IC with Award label in it, below and about 7.00 from the one pictured.

You mean this:

I believe that if you remove the label on that chip you'll find it's the SuperIO chip. I haven't looked on the X-core though.

Steve

fastcon68

I been working on my x-box 500. I install a full copy on a IDE 160 GB hard drive. Then I powered the Firebox x500 off. I then connected the IDE hard drive and powered it by a external source. I got a boot menu on the LCD but was unable to boot from the IDE drive.

I really would like to add the internal HD to my Firebox-X. What steps am I missing?

The other issue that I am having is with bridging function. It worked in 1.2.3 that I had installed, I am having a issue with it in @.0 and I think it is the way I am configuring the port.
RC

hmeister

Fastcon…
Run the harddrive on a laptop and make sure the 2.0 is booting correctly. I had one 2.5 harddrive that the /mbr was not being recognized correctly with PFSense 2.0rc1 and it would not boot correctly. The drive would work with 1.2.3 correctly and when I used that drive inside the Watchguard and tried to do a web update to 2.0rc1 the box would look like it was updating and then would not find the update after the first reboot. The /mbr was reporting incorrectly on 2.0. Why it would work on 1.2.3 version and not 2 I never figured out...

Good luck...

H.

stephenw10

@fastcon68:

The other issue that I am having is with bridging function. It worked in 1.2.3 that I had installed, I am having a issue with it in @.0 and I think it is the way I am configuring the port.
RC

Yes there was definately a change in the way bridges are configured in 2.0.
Try reading through the sticky in the 2.0 forum here

Steve

hmeister

Got my second x700…
The first one gets delivered this weekend...
Built out the newest x700 using 2gbCF and it loaded fine...
Got control using web-gui.

The nanoimage I used is: pfSense-2.0-RC1-2g-i386-20110226-1633-nanobsd.img.gz - Is this the correct one to use?

I see no menu using serial like everyone else using the CF?? I know this was an issue on some of these later 2.0rc1 builds -
On my other x700 I used the CD Live install with uniprocessor and HD and have the menu...??
And, I do not even see the serial option in the menu with the CF load - strange??
I can manage everything from the web but was wondering if anyone had any success or updates about the serial menu not showing....?

Thx...

H.

hmeister

@fastcon68:

I been working on my x-box 500. I install a full copy on a IDE 160 GB hard drive. Then I powered the Firebox x500 off. I then connected the IDE hard drive and powered it by a external source. I got a boot menu on the LCD but was unable to boot from the IDE drive.

I really would like to add the internal HD to my Firebox-X. What steps am I missing?

The other issue that I am having is with bridging function. It worked in 1.2.3 that I had installed, I am having a issue with it in @.0 and I think it is the way I am configuring the port.
RC

Fastcon
Were you able to bridge the ports?

H.