Messages

1

18.1 Legacy Series / Reuse Fortinet FortiAP FAP-221C-E as WiFi Accesspoint

« on: April 28, 2018, 10:45:37 pm »

Hi Volks

I have an FortiGate 40C laying arround. Since I can't upgrade the Firmware (without paying another Membership) I switched to the OPNsense. Now I have an unused Fortinet FAP-221C Accesspoint. Is it possible, to connect it to OPNsense and use/mange it?

http://www.avfirewalls.com/FortiAP-221C.asp

2

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 22, 2018, 09:47:08 pm »

Hurray! It seams to work now. I can use the OPNsense now! Thank you.

3

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 22, 2018, 05:43:41 pm »

Tryied to repeat the Installation from USB Disk.

Console still looks strange, and I can't answer the Questions in the Process. Just hitting Enter seams to initiate the Installation Process, but I don't know, what I answered ...

Code: [Select]

FreeBSD/amd64 (OPNsense.localdomain) (ttyu0)

login: installer
Password:
----------------------------------------------
|      Hello, this is OPNsense 18.1          |         @@@@@@@@@@@@@@@
|                                            |        @@@@         @@@@
| Website:      https://opnsense.org/        |         @@@\\\   ///@@@
| Handbook:     https://docs.opnsense.org/   |       ))))))))   ((((((((
| Forums:       https://forum.opnsense.org/  |         @@@///   \\\@@@
| Lists:        https://lists.opnsense.org/  |        @@@@         @@@@
| Code:         https://github.com/opnsense  |         @@@@@@@@@@@@@@@
----------------------------------------------
[1;24r[m[?7h[?1h=[H[J[23B[H[23B[HF10=Refresh Display[4;47H@@@@@@@@@@@@@@@@@@@@@@@@@@@@[5;46H@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@[6;46H@@@@@[6;71H@@@@@[7;50H@@@@@[7;67H@@@@@[8;47H@@@@@@@@@@@       @@@@@@@@@@@[9;52H\\\\\[9;66H/////[10;46H))))))))))))       ((((((((((([11;52H/////[11;66H\\\\\[12;47H@@@@@@@@@@@       @@@@@@@@@@@[13;50H@@@@@[13;67H@@@@@[14;46H@@@@@[14;71H@@@@@[15;46H@@@@@[8BWaiting for backend...[5;46H                 [6;46H     [     [8;47H            [10;46H             [12;47H           [13;50H     [14;46H                   [16;47H                [20;19H[5;19H(0[1mlqqqqqqqqqqqqu(B OPNsense 18.1 (0tqqqqqqqqqqqqqk(B[m[6;19H(0[1mx(B[m[6;62H(0[1mx(B[m[7;19H(0[1mx(B[m Welcome to the OPNsense 18.1 installer!  (0[1mx(B[m[8;19H(0[1mx(B[m[8;62H(0[1mx(B[m[9;19H(0[1mx(B[m Before we begin, you will be asked a     (0[1mx(B[m[10;19H(0[1mx(B[m few questions so that this installation  (0[1mx(B[m[11;19H(0[1mx(B[m environment can be set up to suit your   (0[1mx(B[m[12;19H(0[1mx(B[m needs.[12;62H(0[1mx(B[m[13;19H(0[1mx(B[m[13;62H(0[1mx(B[m[14;19H(0[1mx(B[m You will then be presented a menu of     (0[1mx(B[m[15;19H(0[1mx(B[m items from which you may select to       (0[1mx(B[m[16;19H(0[1mx(B[m install a new system, with or without    (0[1mx(B[m[17;19H(0[1mx(B[m importing a previous configuration.      (0[1mx(B[m[18;19H(0[1mx(B[m[18;62H(0[1mx(B[m[19;19H(0[1mx(B[m[19;32H(0[1m(B< Ok, let's go. >[19;62H(0x(B[m[20;19H([4B(0[1m(B[mSet up the installation environment and continue[5A

4

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 22, 2018, 05:06:53 pm »

I was using https://www.decisivetactics.com/products/serial/ with 115200 8n1 settings

You are definitely my hero of the day, @binaryanomaly!

The App "Serial" does the JOb correctly, and I can even use Serial-USB-Converters, I didn't have Mac Drivers for!

T H A N K    Y O U !

Now, I'm trying to do all the Upgrades via the Console and than check back for the rest. Maybee I have to consider to repeat the Istallation, since I was kind of "blind" in the console, with my other Terminal Program, and just was hitting "Enter" until the installation was done.

5

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 22, 2018, 03:05:58 pm »

Thanks @binaryanomaly. Will definitely give "Serial" a Try. May take a Moment now.

6

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 19, 2018, 10:43:51 pm »

I just rebooted now, see Consoleoutput below.

While connectin with the Browser to 192.168.1.1 (LAN Port, directly connected). It Firefox says: "TLS Handshacking", and later "Timed Out"

Code: [Select]

H,MMX,FXSR,SSE,SSE2,HTT>
  Features2=0x3ed8220b<SSE3,PCLMULQDQ,MON,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AESNI,XSAVE,OSXSAVE,AVX,F16C>
  AMD Features=0x2e500800<SYSCALL,NX,MMX+,FFXSR,Page1GB,RDTSCP,LM>
  AMD Features2=0x1d4037ff<LAHF,CMP,SVM,ExtAPIC,CR8,ABM,SSE4A,MAS,Prefetch,OSVW,IBS,SKINIT,WDT,Topology,PNXC,DBE,PTSC,PL2I>
  Structured Extended Features=0x8<BMI1>
  XSAVE Features=0x1<XSAVEOPT>
  SVM: NP,NRIP,AFlush,DAssist,NAsids=8
  TSC: P-state invariant, performance statistics
real memory  = 4815060992 (4592 MB)
avail memory = 4083642368 (3894 MB)
Event timer "LAPIC" quality 100
ACPI APIC Table: <CORE   COREBOOT>
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 4 core(s)
random: unblocking device.
ioapic1: Changing APIC ID to 5
ioapic0 <Version 2.1> irqs 0-23 on motherboard
ioapic1 <Version 2.1> irqs 24-55 on motherboard
SMP: AP CPU #2 Launched!
SMP: AP CPU #1 Launched!
SMP: AP CPU #3 Launched!
Timecounter "TSC" frequency 998150009 Hz quality 1000
random: entropy device external interface
wlan: mac acl policy registered
netmap: loaded module
module_register_init: MOD_LOAD (vesa, 0xffffffff810a67f0, 0) error 19
kbd0 at kbdmux0
nexus0
vtvga0: <VT VGA driver> on motherboard
cryptosoft0: <software crypto> on motherboard
acpi0: <CORE COREBOOT> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
cpu2: <ACPI CPU> on acpi0
cpu3: <ACPI CPU> on acpi0
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
Event timer "RTC" frequency 32768 Hz quality 0
attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
acpi_timer0: <32-bit timer at 3.579545MHz> port 0x818-0x81b on acpi0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> at device 2.2 on pci0
pcib1: failed to allocate initial I/O port window: 0x1000-0x1fff
pci1: <ACPI PCI bus> on pcib1
igb0: <Intel(R) PRO/1000 Network Connection, Version - 2.5.3-k> mem 0xfe600000-0xfe61ffff,0xfe620000-0xfe623fff at device 0.0 on pci1
igb0: Using MSIX interrupts with 5 vectors
igb0: Ethernet address: 00:0d:b9:4b:23:ec
igb0: Bound queue 0 to cpu 0
igb0: Bound queue 1 to cpu 1
igb0: Bound queue 2 to cpu 2
igb0: Bound queue 3 to cpu 3
igb0: netmap queues/slots: TX 4/1024, RX 4/1024
pcib2: <ACPI PCI-PCI bridge> at device 2.3 on pci0
pci2: <ACPI PCI bus> on pcib2
igb1: <Intel(R) PRO/1000 Network Connection, Version - 2.5.3-k> port 0x2000-0x201f mem 0xfe700000-0xfe71ffff,0xfe720000-0xfe723fff at device 0.0 on pci2
igb1: Using MSIX interrupts with 5 vectors
igb1: Ethernet address: 00:0d:b9:4b:23:ed
igb1: Bound queue 0 to cpu 0
igb1: Bound queue 1 to cpu 1
igb1: Bound queue 2 to cpu 2
igb1: Bound queue 3 to cpu 3
igb1: netmap queues/slots: TX 4/1024, RX 4/1024
pcib3: <ACPI PCI-PCI bridge> at device 2.4 on pci0
pci3: <ACPI PCI bus> on pcib3
igb2: <Intel(R) PRO/1000 Network Connection, Version - 2.5.3-k> port 0x3000-0x301f mem 0xfe800000-0xfe81ffff,0xfe820000-0xfe823fff at device 0.0 on pci3
igb2: Using MSIX interrupts with 5 vectors
igb2: Ethernet address: 00:0d:b9:4b:23:ee
igb2: Bound queue 0 to cpu 0
igb2: Bound queue 1 to cpu 1
igb2: Bound queue 2 to cpu 2
igb2: Bound queue 3 to cpu 3
igb2: netmap queues/slots: TX 4/1024, RX 4/1024
pci0: <encrypt/decrypt> at device 8.0 (no driver attached)
xhci0: <AMD FCH USB 3.0 controller> mem 0xfeb22000-0xfeb23fff at device 16.0 on pci0
xhci0: 32 bytes context size, 64-bit DMA
xhci0: Unable to map MSI-X table
usbus0 on xhci0
usbus0: 5.0Gbps Super Speed USB v3.0
ahci0: <AMD Hudson-2 AHCI SATA controller> port 0x4010-0x4017,0x4020-0x4023,0x4018-0x401f,0x4024-0x4027,0x4000-0x400f mem 0xfeb25000-0xfeb253ff at device 17.0 on pci0
ahci0: AHCI v1.30 with 2 6Gbps ports, Port Multiplier supported with FBS
ahcich0: <AHCI channel> at channel 0 on ahci0
ahcich1: <AHCI channel> at channel 1 on ahci0
ehci0: <AMD FCH USB 2.0 controller> mem 0xfeb25400-0xfeb254ff at device 19.0 on pci0
usbus1: EHCI version 1.0
usbus1 on ehci0
usbus1: 480Mbps High Speed USB v2.0
isab0: <PCI-ISA bridge> at device 20.3 on pci0
isa0: <ISA bus> on isab0
sdhci_pci0: <Generic SD HCI> mem 0xfeb25500-0xfeb255ff at device 20.7 on pci0
sdhci_pci0: 1 slot(s) allocated
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: console (19200,n,8,1)
orm0: <ISA Option ROM> at iomem 0xef000-0xeffff on isa0
ppc0: cannot reserve I/O port range
uart1: <16550 or compatible> at port 0x2f8 irq 3 on isa0
hwpstate0: <Cool`n'Quiet 2.0> on cpu0
Timecounters tick every 1.000 msec
nvme cam probe device init
ugen1.1: <AMD EHCI root HUB> at usbus1
ugen0.1: <0x1022 XHCI root HUB> at usbus0
uhub0: <AMD EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <SATA SSD SBFM01.1> ACS-4 ATA SATA 3.x device
ada0: Serial Number A45A0782058600245702
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 8192bytes)
ada0: Command Queueing enabled
ada0: 15272MB (31277232 512 byte sectors)
uhub1: <0x1022 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
Trying to mount root from ufs:/dev/gpt/rootfs [rw,noatime]...
WARNING: /mnt was not properly dismounted
WARNING: /mnt: mount pending error: blocks 16 files 0
Mounting filesystems...
tunefs: soft updates remains unchanged as enabled
WARNING: /mnt: reload pending error: blocks 16 files 0
tunefs: file system reloaded
uhub1: 4 ports with 4 removable, self powered
tunefs: issue TRIM to the disk remains unchanged as enabWARNING: /mnt: reload pending error: blocks 16 files 0
led
tunefs: file system reloaded
** /dev/gpt/rootfs
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
INCORRECT BLOCK COUNT I=1685395 uhub0: 2 ports with 2 removable, self powered
(8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=1685396 (8 should be 0)
CORRECT? yes

** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
UNREF FILE  I=722345  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

NO lost+found DIRECTORY
CREATE? yes

UNREF FILE  I=722772  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

UNREF FILE  I=722804  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RWARNING: /mnt: reload pending error: blocks 16 files 0
ECONNECT? yes

UNREF FILE  I=722849  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

UNREF FILE  I=722852  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

UNREF FILE  I=722853  OWNER=root MODE=100640
ugen1.2: <vendor 0x0438 product 0x7900> at usbus1
uhub2 on uhub0
uhub2: <vendor 0x0438 product 0x7900, class 9/0, rev 2.00/0.18, addr 2> on usbus1

SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

UNREF FILE  I=1685403  OWNER=root MODE=100640
SIZE=0 MTIME=Apr 19 22:35 2018
RECONNECT? yes

** Phase 5 - Check Cyl groups
FREE BLK COUNT(S) WRONG IN SUPERBLK
SALVAGE? yes

SUMMARY INFORMATION BAD
SALVAGE? yes

BLK(S) MISSING IN BIT MAPS
SALVAGE? yes

34841 files, 279738 used, 3252010 free (426 frags, 406448 blocks, 0.0% fragmentation)

***** FILE SYSTEM STILL DIRTY *****

***** FILE SYSTEM WAS MODIFIED *****

***** PLEASE RERUN FSCK *****
** /dev/gpt/rootfs
** Lasuhub2: 4 ports with 4 removable, self powered
t Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
34841 files, 279738 used, 3252010 free (426 frags, 406448 blocks, 0.0% fragmentation)

***** FILE SYSTEM MARKED CLEAN *****
Configuring vt: blanktime.
Configuring crash dump device: /dev/null
.ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/ipsec /usr/local/lib/perl5/5.24/mach/CORE
32-bit compatibility ldconfig path:
done.
>>> Invoking early script 'update'
>>> Invoking early script 'configd'
Starting configd.
>>> Invoking early script 'php'
Configuring PHP: OK
>>> Invoking early script 'backup'
Launching the init system...done.
Initializing............done.
Starting device manager...done.
Configuring login behaviour...done.
Configuring loopback interface...done.
Configuring kernel modules...done.
Setting up extended sysctls...done.
Setting timezone...done.
Writing firmware setting...done.
Setting hostname: OPNS.isparks
Generating /etc/hosts...done.
Configuring system logging...done.
Configuring loopback interface...done.
Creating wireless clone interfaces...done.
Configuring WAN interface...done.
Configuring WAN2 interface...done.
Configuring LAN interface...done.
Generating /etc/resolv.conf...done.
Configuring firewall......done.
Setting up gateway monitors...done.
Configuring OpenSSH...done.
Starting web GUI...done.
Configuring CRON...done.
Setting up routes...done.
Starting Unbound DNS...done.
Starting DHCP service...done.
Generating /etc/hosts...done.
Configuring firewall......done.
Starting NTP service...deferred.
Generating RRD graphs...done.
Configuring system logging...done.
>>> Invoking start script 'newwanip'
>>> Invoking start script 'freebsd'
Configuring additional services: OK
>>> Invoking start script 'carp'
>>> Invoking start script 'cron'
Starting Cron: OK
>>> Invoking start script 'beep'
Root file system: /dev/gpt/rootfs

*** OPNS.isparks: OPNsense 18.1 (amd64/OpenSSL) ***

 LAN (igb0)      -> v4: 192.168.1.1/24
 WAN (igb1)      ->
 WAN2 (igb2)     ->


FreeBSD/amd64 (OPNS.isparks) (ttyu0)



login:

7

18.1 Legacy Series / Re: No GUI, Serial Console and Installing Issues

« on: April 19, 2018, 10:28:50 pm »

Hello BeNe

Thanks for your quick response. Are your working with Mac OS as well? I think Problem 2 might be a specific Mac/USB2Serial Cabel/Serial Console Issue.

1. I installed it from Scratch. Now GUI was working and I could configure some stuff. I activated SSH, but was not able to login:

Code: [Select]

mymac:mbr schmidsi$ ssh username@192.168.1.1
The authenticity of host '192.168.1.1 (192.168.1.1)' can't be established.
ECDSA key fingerprint is SHA256:5fCj9Q6CAk4PfFgI+5tr4xfvYQ2MuNM0hqynxCOlFfY.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.1' (ECDSA) to the list of known hosts.
Permission denied (publickey).
Does it mean, I have to install the publickey first? Where can I download it?

Whilie doeing the Update, from 18.1 to the actual version, it stopped after Fetching 11/82. Now I can't login anymore. Firefox tells me "Time Out".


2. My Settings are 115000 8N1 with and without XON/XOFF. I also changed the Speed to 19200, but same Issue.

Again, I try to du the Upgrade via Console. I type in "12", hit Enter. It just skips the "Proceed with this action? [y/N]: " Question...

Code: [Select]

Enter an option: 12


Fetching change log information, please wait... done

This will automatically fetch all available updates, apply them,
and reboot if necessary.

Proceed with this action? [y/N]:
*** OPNS.isparks: OPNsense 18.1 (amd64/OpenSSL) ***

 LAN (igb0)      -> v4: 192.168.1.1/24
 WAN (igb1)      -> v4/DHCP4: 192.168.101.19/24
 WAN2 (igb2)     ->

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Upgrade from console
  6) Reboot system                      13) Restore a backup

Enter an option:


8

18.1 Legacy Series / No GUI, Serial Console and Installing Issues

« on: April 19, 2018, 07:58:28 pm »

Dear Community I'm new to opnsense and have some strange problems during installation. Couldn't find any solutions in the web, so I poste here...

1. No GUI

Just after the Installation on the APU2C4, with OPNsense 18.1 (amd64/OpenSSL), I was able to connect via GUI on the WAN Port (DHCP Adress from my other Router). I could make some Settings like Timezone, Language. After pushing UPdate, it was no more possible to connect to the gui, not via WAN, not via LAN Ports. Ping is not working, Portscan shows no open Ports.

If I'm in the console and chose 8 for Shell. I'm able to Ping the other Router and also web HOsts. So the Appliace could connect to the Internet.
Is there a way to restart/reconfigue GUI or SSH Access via Shell? See also Issue 2....


2. Console Issues

I use a PC Engines APU2C4 Board. While connecting to the Serialconsole (Mac OS, Cool Term, PL2303 Adapter) I have strange behaviour in the Console: It seams to always reapeat my Inputs with an untyped character. For Example, I chose 5 for Power of the System, i cant Answer the following y/N Question, since, it starts automaticali over with the Menu:

Code: [Select]

Enter an option: 5


The system will halt and power off. Do you want to proceed? [y/N]:
*** OPNsense.localdomain: OPNsense 18.1 (amd64/OpenSSL) ***

 WAN (igb0)      -> v4/DHCP4: 192.168.101.17/24

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Upgrade from console
  6) Reboot system                      13) Restore a backup

Enter an option:
During Boot, while pushing "F10" to enter Bootmenu, nothing happens.

Thank you very much!