criggie.org.nz

Images

Outside

Inside

Hidden Stuff

Expansion Cards

Specifications

This is the hardware:

• CPU: AMD K6 II at 266 MHz normally, but mine had an intel Pentium 166. Some later models of the IP330 had a K6 II at 500 or 550 MHz. Special cooling shroud needed on those.
• RAM: 64 Mb SDRAM by default. Definitely takes a 256 Mb PC133 fine, and rumoured to take a maximum of 512 Mb SDRAM. There is one SDRAM slot, and solder pads for a second.
• HDD: 8 Gb 3.5" IDE drive, but mine had a 4.3 Gb WD IDE drive. I've since changed to a 256 Mb CF card in a IDE/CF adapter.
• Three 10/100 Mbit Intel wired NICs which use the fxp driver. pfSense automatically deals with the invalid MAC address of ff:ff:ff:ff:ff:ff
• Expansion by one Compact PCI slot on the front, and by an unnamed and unidentified slot on the rear.

CPU

Standard Socket 7 board, which normally was filled with an AMD K6 II at 266 MHz. Mine had an Intel Pentium 166, which was far too gutless. However this machine came out with an AMD K6 II clocked at 500 and 550 MHz. At those speeds, heat was much more of an issue. These higher-clock speed CPUs have a shroud over their heatsink which tunnels air past and out the end cooling fan.

Console and serial cable

The machine has a standard Award BIOS, but to get to it you require a special serial null-modem cable. In the BIOS you can (apparently) boot from a CDROM and other stuff. I haven't managed to make the serial console work in pfSense yet, despite turning it on in the Advanced page.

 
NOKIA IP300 ADAPTER
Special about this adapter is, that it connects pin 1 with 6 of
the DTE's. Without that it is not possible to gain access to the BIOS.
    Pinout:
    (DB9F_DTE)  (RJ45F_NOKIA)   (NOKIA RJ45 Cable)   (RJ45F_NOKIA)  (DB9F_DTE)
     (DCD) 1 ---- 1 (DCD)            1 ---- 4          
     (RCV) 2 ---- 2 (RCV)            2 ---- 3
     (XMT) 3 ---- 3 (XMT)            3 ---- 2
     (DTR) 4 ---- 4 (DTR)            4 ---- 1
     (GND) 5 ---- 5 (GND)            5 ---- 5                  (Same)
     (DSR) 6 ---- 1 (DSR)            6      6        
     (RTS) 7 ---- 7 (RTS)            7 ---- 8
     (CTS) 8 ---- 8 (CTS)            8 ---- 7
     (RNG) 9      -


-----Original Message-----
From: Grabowski, David [mailto:david.grabowski@xxxxxxxxxxxxxxxx] 
Sent: Saturday, 11 October 2003 6:56 AM
To: Mike.Carlson@xxxxxxxxxx; fw1-gurus@xxxxxxxxxxxxxxxxxx
Subject: RE: [fw1-gurus] Using Cisco ASYNC to connect to Nokia IPxx


Mike,

I don't have exactly the same environment as you, but it is similar.
Take this for what it's worth (which may not be much)

I've got a Cisco AS2511-RJ, which has sixteen serial interfaces. I use
it to connect directly to the console ports of my cisco devices and my
Nokia IP440's. It took some custom cabling to get it to work. I don't
know if the 2511's ports are wired the same as a standard AUX port, but
I wouldn't be surprised.

Anyway, here's the pinout of an RJ45-RJ45 cable that I use. On the Nokia
side, I use the RJ45-DB9 adapter that came with the Nokia.

RJ45 (cisco)	RJ45 (Nokia)
1 CTS			7 RTS
2 DTR			1 DCD/DSR
3 TXD			2 RXD
4 GND			n/c
5 GND			5 GND
6 RXD			3 TXD
7 DCD/DSR		4 DTR
8 RTS			8 CTS

To enable serial console you have to edit /etc/ttys and on the line starting ttyd0 change the "off" to "on"

More details will be added over time. Any queries - email me from this mailer page

Links

• pfSense homepage
• Serial Cables for Console this box has a weird cable to access the BIOS
• Boring Nokia press release

  PDFs

• IP110 - little brother but still a PC
• IP130 - little brother
• Current Products Nokia comparison of current firewall boxes
• IP330 specification one page glossy

Output of dmesg in Nokia's Checkpoint IPSO

Starting bootmgr
Loading boot manager..Bootmgr loaded.Entering autoboot mode.
Type any character to enter command mode.
Booting wd(0,f)/image/IPSO-3.2-fcs4-08.17.1999-124427-783/kernel @ 0xf0100000
text=0x111000 data=0x25000 bss=0x22fa8 symbols=[+0x58+0x4+0x1749c+0x4+0x1cee9]
total=0x28d38d entry point=0x100000
[kernel] symtab f0259000, sym_start f0259004, sym_end f02704a0
[kernel] sym_size 1f0d, str_size 1cef0
[ preserving 0x34390 bytes of kernel symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.

Resizing packet buffers: mbufs 28672 clusters 14336
releng 783  08.17.1999-124427
CPU: 167-MHz Pentium 735\90 or 815\100 (586-class CPU)
real memory  = 67108864 (65536K bytes)
avail memory = 55951360 (54640K bytes)
chip0  rev 1 on pci0:0:0
piix0  rev 2 on pci0:7:0
Probing for devices on the ISA bus:
sio0 at 0x3f8-0x3ff irq 4 on isa
sio0: type 16550A
sio1 at 0x2f8-0x2ff irq 3 on isa
sio1: type 16550A
fdc0 at 0x3f0-0x3f7 irq 6 drq 2 on isa
wdc0 at 0x1f0-0x1f7 irq 14 on isa
wdc0: unit 0 (wd0): 
wd0: 4112MB (8421840 sectors), 8912 cyls, 15 heads, 63 S/T, 512 B/S
npx0 on motherboard
npx0: INT 16 interface
ultraio0 at 0x0 on isa
piix1  rev 1 on pci0:7:2
piix2  rev 2 on pci0:7:3
fxp0  rev 5 int a irq 10 slot 3
netlog:eth-s3p1 .. Ethernet address 0:a0:8e:7:41:70
fxp1  rev 5 int a irq 11 slot 4
netlog:eth-s4p1 .. Ethernet address 0:a0:8e:7:41:74
fxp2  rev 5 int a irq 12 slot 5
netlog:eth-s5p1 .. Ethernet address 0:a0:8e:7:41:78
changing root device to wd0f
swapon: adding /dev/wd0b as swap device
Automatic reboot in progress...
/dev/rwd0f: clean, 361061 free (269 frags, 45099 blocks, 0.1% fragmentation)
/dev/rwd0a: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0a: 4 files, 8 used, 34851 free (19 frags, 4354 blocks, 0.1% fragmentati
on)
/dev/rwd0d: UNREF FILE I=76801  OWNER=0 MODE=20600
/dev/rwd0d: SIZE=0 MTIME=Jan 26 00:11 2000  (CLEARED)
/dev/rwd0d: FREE BLK COUNT(S) WRONG IN SUPERBLK (SALVAGED)
/dev/rwd0d: BLK(S) MISSING IN BIT MAPS (SALVAGED)
/dev/rwd0d: SUMMARY INFORMATION BAD (SALVAGED)
/dev/rwd0d: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0d: 612 files, 127609 used, 2659221 free (845 frags, 332297 blocks, 0.0%
 fragmentation)
/dev/rwd0e: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0e: 676 files, 22686 used, 513125 free (565 frags, 64070 blocks, 0.1% fr
agmentation)
clearing /tmp
checking for core dump...savecore: no core dump
recording kernel -c changes
starting system daemons: syslogd done.
 rcm done.
 ifmnetlog:eth-s3p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s3p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s4p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s4p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s5p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s5p1 .. enabling 100baseTX/UTP port in full duplex mode
 done.
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s3p1 .. enabling 100baseTX
/UTP port in half duplex mode
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s3p1 .. enabling 100baseTX
/UTP port in full duplex mode
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s4p1 .. enabling 100baseTX
/UTP port in half duplex mode
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s4p1 .. enabling 100baseTX
/UTP port in full duplex mode
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s5p1 .. enabling 100baseTX
/UTP port in half duplex mode
Apr 27 23:52:19 fwi [LOG_INFO] kernel: netlog:eth-s5p1 .. enabling 100baseTX
/UTP port in full duplex mode
Generating config files for fwi.domainname.com :ipsrd hosts password resolver snmp inetd ttys tz ntp ssmtp skey arp aggrclass acl syslog autosupport net:ip:forwarding 1 -> 0 httpd done.
Thu Apr 27 23:52:23 GMT 2006

   IPSO (fwi.domainname.com) (ttyd0)

login: FW-1: only 25 internal hosts allowed
FW-1: License ok
FW-1: only 25 internal hosts allowed
FW-1: 4 interfaces installed
FW-1: only 25 internal hosts allowed
FW-1: setting external interface to eth-s4p1c0


   IPSO (fwi.domainname.com) (ttyd0)

login:

I couldn't go any further - I don't have a username/password for this install.

Output of dmesg in pfSense (FreeBSD 6.0)

Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-RC1 #1: Sun Oct 30 20:04:35 UTC 2005
    sullrich@builder.livebsd.com:/usr/obj/usr/src/sys/pfSense.6
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Pentium/P54C (167.05-MHz 586-class CPU)
  Origin = "GenuineIntel"  Id = 0x52c  Stepping = 12
  Features=0x1bf
real memory  = 268435456 (256 MB)
avail memory = 253104128 (241 MB)
Intel Pentium detected, installing workaround for F00F bug
wlan: mac acl policy registered
ath_hal: 0.9.16.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, DFS)
npx0: [FAST]
npx0: 

Output of dmesg in pfSense (FreeBSD 6.0) after installing new CPU

I changed the Pentium 166 to a AMD K6 II at 450 MHz and the damn thing is still running at 166 MHz.

Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 6.1-RC #0: Mon Apr 17 22:46:03 UTC 2006
    sullrich@builder.livebsd.com:/usr/obj.pfSense/usr/src/sys/pfSense.6
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD-K6(tm) 3D processor (167.05-MHz 586-class CPU)
  Origin = "AuthenticAMD"  Id = 0x58c  Stepping = 12
  Features=0x8021bf
  AMD Features=0x80000800
real memory  = 268435456 (256 MB)
avail memory = 253100032 (241 MB)
wlan: mac acl policy registered
kbd1 at kbdmux0
K6-family MTRR support enabled (2 registers)
ath_hal: 0.9.16.16 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
npx0: [FAST]
npx0: 

Other Interesting Stuff

Hidden Stuff

Firstly, there is a hidden socket on the front panel. Its just to the right of fxp2 and left of the Power and Fault lights.

The machine has these things not used

1. USB controller - Intel UHCI
2. Floppy controller - solder pads on the left by the cPCI slot
3. An ISA bridge - isab0: PCI-ISA bridge at device 7.0 on pci0
4. Two IDE channels, one not used
5. A keyboard controller - atkbdc0: Keyboard controller (i8042) at port 0x60,0x64 on isa0
6. Parallel printer port - ppc1: ECP parallel printer port at port 0x378-0x37f,0x778-0x77a irq 7 drq 3 on isa0

pfSense tricks

I have a CF card rather than a hard drive. So enable Embedded mode with

echo embedded > /etc/platform 

The need to fix up the mac addresses has been removed. pfSense notices the invalid MAC address now and writes a new one into its config file. The only drawback is that if you reinstall the mac address may change.

freeBSD tricks

Seems that polling is a bad thing on this machine.

With polling enabled on all three NICs
CPU states:  0.0% user,  0.0% nice,  1.5% system, 47.5% interrupt, 51.0% idle

With polling disabled.
CPU states:  0.4% user,  0.0% nice,  3.1% system,  3.1% interrupt, 93.4% idle

More details will be added over time. Any queries - email me from this mailer page

This file last modified Friday July 14, 2017

If you find something here useful, feel free to donate bitcoin: Donations address: 14LHst9s1UEh8NMem87qaEd9tJWSCiNt1x

.