OpnSense on Sophos SG series

[Legremlins_keitaro]

Hi,

I have an old Sophos SG115 (64GB SSD + 4GB RAM + Atom CPU), I try to install opnsense but I have an error on the boot when I choose to install it, it said kdb error and stop working. For test I have try the last verison of psfsense but I have exactly the same error.

Somebody have an idea ?

[shezzski]

Hi Legremlins_keitaro,

Sophos UTM is based on CentOS AFAIK, which is obviously Linux.  OPNsense is based on FreeBSD so the errors you are seeing are probably due to the fact that FreeBSD does not support the hardware that you have.

Try running FreeBSD 11.0 to check.  If FreeBSD 11.0 runs then the OPNsense developers may be able to fix your issue.

[ejt]

Hi,

I also have a Sophos SG 115 where i tried to install the OPNsense 17.1.5 which failed due some nmi message regarding  I assume the keyboard, which is a usb keyboard and the installation was halted.

However I could install Freebsd 11, although the error messages occurs, it does not halt. I managed to install OPNsense on top of Freebsd 11 using the script referred to in another forum post.

I have also installed Linux/Sophos UTM home that installation also works.

I wonder if there is some configuration/flag regading nmi errors in the install/boot config which halts the installation compared to the Freebsd install.

I have changed hard drive, ram and also used an usb bluetoth keyboard, but the install still halts.

I wonder if there could be some bios setting regarding the usb keyboard that causes this.

Attached a screenshot with the error message from the install.

[ejt]

Problem solved  :D

There is a setting in bios about emulation of I/O ports 64h and 60h, disabling that setting and the installation works without problem.

[CDuv]

I have a Sophos SG 115 that I want to use as OPNsense box.

ejt, which image version did you used for installing 17.1 ?
Have you tried OPNsense 18.1 ?

[ejt]

I used 17.1.5 , I haven't used 18.1, running with another software currently.

I have a Sophos SG 115 that I want to use as OPNsense box.

ejt, which image version did you used for installing 17.1 ?
Have you tried OPNsense 18.1 ?

[mimugmail]

I also run 18.1.6 on SG115rev1

[CDuv]

I can confirm v18.1.6 VGA (OPNsense-18.1.6-OpenSSL-vga-amd64.img.bz2) can be installed on the Sophos SG 115.

At first, it booted fine on the USB drive where I had dumped the OPNsense image but during the execution of OPNsense (past the OPNsense boot menu) it somehow crashed and rebooted automatically

As said by ejt, the solution was to go to the Sophos SG 115's BIOS, into the "Advanced" tab and set to "Disabled" the "Port 60/64 Emulation" setting.

Also, I got it updated to 18.1.13 without issue.

[CDuv]

Just an update: My Sophos SG 115 ran fine on various OPNsense versions since my last post on this topic :

• 18.7
• 19.1
• 19.7 (current: 19.7.10_1)

20.1 is yet to test.

[Antaris]

It's good to know that there will be second live for overpriced Sophos routers after initial licenses expired...

[CDuv]

New update: v20.1 is running just fine on my Sophos SG 115 (for about 20 days now).

[optic]

Installed latest opnsense on a SG230 (rev1) this weekend. Works without a problem. What i cannot get to work is the LCD Display in Front, still saying its a Sophos ;-)

[Maestro86]

Maybe I can help. I run OPNsense on a Sophos SG330rev1 and I got my LCD screen working with lcdproc. Use the following config:

Code Select Expand

[server]
DriverPath=/usr/local/lib/lcdproc/
Driver=hd44780
Bind=127.0.0.1
Port=13666
ReportToSyslog=yes
User=nobody
Foreground=no
Hello="  Welcome to"
Hello="   OPNsense!"
GoodBye="Thanks for using"
GoodBye="   OPNsense!"
WaitTime=5
TitleSpeed=5
ServerScreen=on
Backlight=open
ToggleRotateKey=Enter
PrevScreenKey=Up
NextScreenKey=Down

[menu]
MenuKey=Escape
EnterKey=Enter
UpKey=Up

[hd44780]
ConnectionType=ezio
Device=/dev/cuau1
Keypad=yes
Size=16x2
KeyMatrix_4_1=Enter
KeyMatrix_4_2=Up
KeyMatrix_4_3=Down
KeyMatrix_4_4=Escape


You may have to change a few things, especially under the hd44780-section, but this should give you a start for getting the LCD panel to work.

[optic]

@Maestro86: Thank you so much!!! this worked!

[patan32]

@Maestro86: Thank you so much!!! this worked!

Hello Maestro86,

I have the same setup as you. The LCD is working fine but i can't get the disk stats to show. It's disabled in the config file but it still shows up when i reboot. If you have a idea to disable it or get it going would be great.

I have the same hardware also.

Regards Ronald.