Install OpnSense on a Cisco ASA-5508-X?

[fbeye]

Hello

I have seen similar approaches to 5515,5506, 5516 so on and so forth, and I know more or less the MB and chipsets are the same, the only differences being the VPN throughput, ethernet ports etc, hardware differences. But I am a firm believer I am the 1% who always gets the thing no one else did, or can't be upgraded.

Like my Wifi Router... 300 bucks all excited, but IT was not able to be flashed.

So, anyone know of any success?

I am currently running OPnsense as a VM on a Proxmox system that runs 1250 Watts.. I turn all my servers off at night, but the internet, and wanted to move Opnsense to a more refined, less power consuming  device.

[Loader009]

Same issue here - I have bought a ASA 5508 thinking I could somehow install/flash/boot OPNsense on it.

Sadly there is no VGA pinout on the mainboard (at least from the top), so there is no way to see/navigate the bios, if there is any (I actually think there is).
ROMMON is booting and I can interrupt the boot sequence in there - it can see my SATA HDD (connected it to test if it works), since it can read the SN.

Did you get further @fbeye ?

If someone finds a picture helpful, I can do some macro photos.
edit: I have checked both sides of the mainboard - there is no recognizable VGA pinout. I have given up the thought and will look for another customizable firewall.

[doktornotor]

Sadly there is no VGA pinout on the mainboard (at least from the top), so there is no way to see/navigate the bios, if there is any (I actually think there is).

Hmmm, no VGA, but there are supposed to be 2 serial ports, no?

https://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5508xguide/b_install_guide_5508/m_console.html

[Loader009]

Yes - kinda.
There is the miniUSB port for serial - and also the console RJ45 port (I don't have a cable for that yet).
I can get into ROMMON, but that's past bios.

On the mainboard is a "EJTAG" pinout, I am not entirely sure if that's useful at all.
There is also some not described 3-pin (one is probably GND) pinout.
I could use my old analog oscilloscope to check the voltage, maybe that's also serial.

[doktornotor]

The Cisco "RJ45" cables, have bunch of them here from various equipement. Should be super-easy to get. The EJTAG is probably only useful for some low-lever recovery when you manage to brick the thing, would not waste time on that.

[Loader009]

How are they more useful than that miniUSB port?
Both are serial, the RJ45 serial probably does not have any kind of configuration access to the BIOS, thus I have no way to change the boot device, meaning no way to install opnsense...

edit: btw. I can crimp my own RJ45 cable and connect it through 3.3/5V serial adapter.

[doktornotor]

Well, they do not require installing drivers.

https://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5508xguide/b_install_guide_5508/b_install_guide_5508_chapter_0100.html#concept_D1D7527047C54DC6A69D09F0901AC61E

Also worth noting to not waste time:

Only one console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes active.

[Loader009]

I use Linux, so you don't have to worry about that.
I can access the miniUSB serial as soon as I plug it in.

[doktornotor]

Ok, this does not seem the forum to seek help with Cisco boxes then.