possible hardwareissue with pfsync on via C3 cpus: generated node
id is always the same, even on 2 different but identical equiped
systems
Holger Bauer
Holger.Bauer at citec-ag.de
Sat Mar 26 13:24:39 PST 2005
Hi pf-list,
I have been playing around with http://www.pfsense.com, a firewall distribution, that uses pf. It also is able to be configured with carp and pfsync for failover. The hardware I am running this on are 2 via c3 1000MHz mini-itx platforms. Carp and syncing is working, but I only see one syncing node. Further investigation showed, that the nodes are syncing but have the same node id. I was told, that the node id should be generated randomly on every reboot but I always get the same node id. The same id appears on BOTH systems. Did some reinstalls from scratch but always get the same node id on each system. On other machines the node ids are changing, so it must be something special concernig probabely the c3 cpus. The c3s have an integrated random generator. Maybe this one is not used or initialized correctly and that's why the results are always the same.
I have appended the output of some commands. One of the developers of pfsense told me that these should be useful for analyzing and showing the problem.
If anybody needs further information on hardware or wants me to run some commands and report the output just tell me.
Regards,
Holger Bauer
<<nodeids.txt>>
____________
Virus checked by G DATA AntiVirusKit
-------------- next part --------------
box1:
-----------------------------------------------------------------------------------------
# ifconfig
vr0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::240:63ff:fedb:8957%vr0 prefixlen 64 scopeid 0x1
ether 00:40:63:db:89:57
media: Ethernet autoselect (100baseTX)
status: active
aue0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.200.1 netmask 0xffffff00 broadcast 192.168.200.255
inet6 fe80::205:1bff:fe00:3dc3%aue0 prefixlen 64 scopeid 0x2
ether 00:05:1b:00:3d:c3
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.10.91 netmask 0xffffff00 broadcast 192.168.10.255
inet6 fe80::240:63ff:fedb:8989%vr1 prefixlen 64 scopeid 0x3
ether 00:40:63:db:89:89
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
pfsync0: flags=41<UP,RUNNING> mtu 1348
pfsync: syncif: aue0 maxupd: 128
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33208
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
ng0: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng1: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng2: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng3: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng4: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng5: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng6: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng7: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng8: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng9: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng10: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng11: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng12: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng13: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng14: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng15: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
ng16: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> mtu 1500
carp0: flags=41<UP,RUNNING> mtu 1500
inet 192.168.10.99 netmask 0xffffff00
carp: BACKUP vhid 1 advbase 1 advskew 0
carp1: flags=41<UP,RUNNING> mtu 1500
inet 192.168.1.10 netmask 0xffffff00
carp: BACKUP vhid 2 advbase 1 advskew 0
#
-----------------------------------------------------------------------------------------
# cat /usr/local/etc/rc.d/carp.sh
#!/bin/sh
/sbin/ifconfig pfsync0 create
/sbin/ifconfig pfsync0 syncif aue0
/sbin/ifconfig aue0 up
/sbin/ifconfig pfsync0 up
echo Creating 0 ...
/sbin/ifconfig carp0 create
/sbin/ifconfig carp0 192.168.10.99/24 broadcast 192.168.10.255 vhid 1 advskew 0 pass wan
/sbin/ifconfig carp0 up
echo Creating 1 ...
/sbin/ifconfig carp1 create
/sbin/ifconfig carp1 192.168.1.10/24 broadcast 192.168.1.255 vhid 2 advskew 0 pass lan
/sbin/ifconfig carp1 up
/etc/rc.filter_configure#
-----------------------------------------------------------------------------------------
# /sbin/pfctl -vvss | /usr/bin/grep creator | /usr/bin/cut -d" " -f7 | /usr/bin/sort -u
08e72600
#
-----------------------------------------------------------------------------------------
# dmesg -a
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.4-PRERELEASE #1: Tue Mar 22 03:26:39 UTC 2005
sullrich at builder.livebsd.com:/usr/obj/usr/src/sys/FREESBIE.5
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: VIA C3 Nehemiah+RNG+ACE (1002.28-MHz 686-class CPU)
Origin = "CentaurHauls" Id = 0x698 Stepping = 8
Features=0x381b83f<FPU,VME,DE,PSE,TSC,MSR,SEP,MTRR,PGE,CMOV,PAT,MMX,FXSR,SSE>
real memory = 251592704 (239 MB)
avail memory = 236552192 (225 MB)
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pir0: <PCI Interrupt Routing Table: 7 Entries> on motherboard
pci0: <PCI bus> on pcib0
agp0: <VIA 862x (CLE266) host to PCI bridge> mem 0xe6000000-0xe63fffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xd000-0xd0ff mem 0xe6400000-0xe64000ff irq 10 at device 15.0 on pci0
miibus0: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:40:63:db:89:57
uhci0: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 11 at device 16.0 on pci0
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xd800-0xd81f irq 5 at device 16.1 on pci0
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xdc00-0xdc1f irq 12 at device 16.2 on pci0
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
aue0: ADMtek USB To LAN Converter, rev 1.10/1.01, addr 2
miibus1: <MII bus> on aue0
ukphy1: <Generic IEEE 802.3u media interface> on miibus1
ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
aue0: Ethernet address: 00:05:1b:00:3d:c3
aue0: if_start running deferred for Giant
pci0: <serial bus, USB> at device 16.3 (no driver attached)
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 UDMA133 controller> port 0xe000-0xe00f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 17.1 on pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
vr1: <VIA VT6102 Rhine II 10/100BaseTX> port 0xe400-0xe4ff mem 0xe6402000-0xe64020ff irq 11 at device 18.0 on pci0
miibus2: <MII bus> on vr1
ukphy2: <Generic IEEE 802.3u media interface> on miibus2
ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr1: Ethernet address: 00:40:63:db:89:89
orm0: <ISA Option ROM> at iomem 0xc0000-0xcdfff on isa0
pmtimer0 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: parallel port not found.
unknown: <PNP0303> can't assign resources (port)
speaker0: <PC speaker> at port 0x61 on isa0
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
Timecounter "TSC" frequency 1002279306 Hz quality 800
Timecounters tick every 1.000 msec
Fast IPsec: Initialized Security Association Processing.
ata0-master: FAILURE - SETFEATURES SET TRANSFER MODE status=51<READY,DSC,ERROR> error=4<ABORTED>
ata0-master: FAILURE - SETFEATURES SET TRANSFER MODE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: FAILURE - SETFEATURES ENABLE RCACHE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: FAILURE - SETFEATURES ENABLE WCACHE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: 246MB <SAMSUNG CF/ATA/Rev 7.0> [985/16/32] at ata0-master BIOSPIO
acd0: CDRW <AOPEN CD-RW CRW2040/1.01> at ata1-slave UDMA33
cd0 at ata1 bus 0 target 1 lun 0
cd0: <AOPEN CD-RW CRW2040 1.01> Removable CD-ROM SCSI-0 device
cd0: 33.000MB/s transfers
cd0: cd present [18434 x 2048 byte records]
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
Starting pfSense ...
WARNING: R/W mount of / denied. Filesystem is not clean - run fsck
mount:
/dev/ad0s1a
:
Operation not permitted
** /dev/ad0s1a
** Last Mounted on /
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
4408 files, 81707 used, 136508 free (396 frags, 17014 blocks, 0.2% fragmentation)
***** FILE SYSTEM MARKED CLEAN *****
kernel dumps on /dev/ad0s1b
swapon: adding /dev/ad0s1b as swap device
savecore: no dumps found
net.inet.tcp.sack.enable:
1
->
0
Syncing master.passwd...
Initializing timezone...
done
Initializing PC cards...
failed (probably no PC card controller present)
Configuring LAN interface...
done
Configuring WAN interface...
done
Configuring OPT1 (Sync) interface...
done
Mar 26 21:07:30 pflogd[168]: [priv]: msg PRIV_OPEN_LOG received
Configuring firewall...
done
Starting syslog service...
done
Starting webGUI...
done
Starting DNS forwarder...
done
Starting NTP client...
done
Configuring PPTP VPN service...
done
Starting INETD and FTP Helpers for FTP-PROXY...
Starting Secure Shell Services...
Done.
Starting USB...
Syncing package configurations...
Syncing packages:
carp
vr1: promiscuous mode enabled
vr0: promiscuous mode enabled
arp_rtrequest: bad gateway 192.168.10.99 (!AF_LINK)
arp_rtrequest: bad gateway 192.168.1.10 (!AF_LINK)
nmap
doorman
.
Executing rc.d items...
Starting /usr/local/etc/rc.d/carp.sh...
Starting /usr/local/etc/rc.d/doormand.sh...
Starting /usr/local/etc/rc.d/ifstated.sh...
Final firewall setup in progress...
Welcome to pfSense (left-pfsense.local) (console)
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
*** This is pfSense version 0.56.2-BobbaBooey-#2
Copyright 2004 Scott Ullrich. All rights reserved.
Originally based on m0n0wall, version 1.2b1
m0n0wall is Copyright 2002-2004 by Manuel Kasper. All rights reserved
LAN -> vr0 -> 192.168.1.1
WAN -> vr1 -> 192.168.10.91
OPT1 -> aue0 -> 192.168.200.1(Sync)
pfSense console setup
**********************
0) Logout if accessing via SSH
1) Interfaces: assign network ports
2) Set up LAN IP address
3) Reset webGUI password
4) Reset to factory defaults
5) Reboot system
6) Halt system
7) Ping host
8) Shell
9) PFtop
Enter a number:
#
-----------------------------------------------------------------------------------------
# uname -a
FreeBSD left-pfsense.local 5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #1: Tue Mar 22 03:26:39 UTC 2005 sullrich at builder.livebsd.com:/usr/obj/usr/src/sys/FREESBIE.5 i386
-----------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------
box2:
-----------------------------------------------------------------------------------------
# ifconfig
vr0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::240:63ff:fedb:8aa5%vr0 prefixlen 64 scopeid 0x1
ether 00:40:63:db:8a:a5
media: Ethernet autoselect (100baseTX)
status: active
aue0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.200.2 netmask 0xffffff00 broadcast 192.168.200.255
inet6 fe80::205:1bff:fe00:41d5%aue0 prefixlen 64 scopeid 0x2
ether 00:05:1b:00:41:d5
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.10.92 netmask 0xffffff00 broadcast 192.168.10.255
inet6 fe80::240:63ff:fedb:8a74%vr1 prefixlen 64 scopeid 0x3
ether 00:40:63:db:8a:74
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
pfsync0: flags=41<UP,RUNNING> mtu 1348
pfsync: syncif: aue0 maxupd: 128
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33208
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
carp0: flags=41<UP,RUNNING> mtu 1500
inet 192.168.10.99 netmask 0xffffff00
carp: MASTER vhid 1 advbase 1 advskew 0
carp1: flags=41<UP,RUNNING> mtu 1500
inet 192.168.1.10 netmask 0xffffff00
carp: MASTER vhid 2 advbase 1 advskew 0
#
-----------------------------------------------------------------------------------------
# cat /usr/local/etc/rc.d/carp.sh
#!/bin/sh
/sbin/ifconfig pfsync0 create
/sbin/ifconfig pfsync0 syncif aue0
/sbin/ifconfig aue0 up
/sbin/ifconfig pfsync0 up
echo Creating 0 ...
/sbin/ifconfig carp0 create
/sbin/ifconfig carp0 192.168.10.99/24 broadcast 192.168.10.255 vhid 1 advskew 0 pass wan
/sbin/ifconfig carp0 up
echo Creating 1 ...
/sbin/ifconfig carp1 create
/sbin/ifconfig carp1 192.168.1.10/24 broadcast 192.168.1.255 vhid 2 advskew 0 pass lan
/sbin/ifconfig carp1 up
/etc/rc.filter_configure#
-----------------------------------------------------------------------------------------
# /sbin/pfctl -vvss | /usr/bin/grep creator | /usr/bin/cut -d" " -f7 | /usr/bin/sort -u
08e72600
-----------------------------------------------------------------------------------------
# dmesg -a
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.4-PRERELEASE #1: Tue Mar 22 03:26:39 UTC 2005
sullrich at builder.livebsd.com:/usr/obj/usr/src/sys/FREESBIE.5
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: VIA C3 Nehemiah+RNG+ACE (1002.28-MHz 686-class CPU)
Origin = "CentaurHauls" Id = 0x698 Stepping = 8
Features=0x381b83f<FPU,VME,DE,PSE,TSC,MSR,SEP,MTRR,PGE,CMOV,PAT,MMX,FXSR,SSE>
real memory = 251592704 (239 MB)
avail memory = 236552192 (225 MB)
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pir0: <PCI Interrupt Routing Table: 7 Entries> on motherboard
pci0: <PCI bus> on pcib0
agp0: <VIA 862x (CLE266) host to PCI bridge> mem 0xe6000000-0xe67fffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xd000-0xd0ff mem 0xe6800000-0xe68000ff irq 12 at device 15.0 on pci0
miibus0: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:40:63:db:8a:a5
uhci0: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 11 at device 16.0 on pci0
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xd800-0xd81f irq 11 at device 16.1 on pci0
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xdc00-0xdc1f irq 9 at device 16.2 on pci0
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
aue0: ADMtek USB To LAN Converter, rev 1.10/1.01, addr 2
miibus1: <MII bus> on aue0
ukphy1: <Generic IEEE 802.3u media interface> on miibus1
ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
aue0: Ethernet address: 00:05:1b:00:41:d5
aue0: if_start running deferred for Giant
pci0: <serial bus, USB> at device 16.3 (no driver attached)
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 UDMA133 controller> port 0xe000-0xe00f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 17.1 on pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
vr1: <VIA VT6102 Rhine II 10/100BaseTX> port 0xe400-0xe4ff mem 0xe6802000-0xe68020ff irq 11 at device 18.0 on pci0
miibus2: <MII bus> on vr1
ukphy2: <Generic IEEE 802.3u media interface> on miibus2
ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr1: Ethernet address: 00:40:63:db:8a:74
orm0: <ISA Option ROM> at iomem 0xc0000-0xcdfff on isa0
pmtimer0 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
unknown: <PNP0303> can't assign resources (port)
speaker0: <PC speaker> at port 0x61 on isa0
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0400> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
Timecounter "TSC" frequency 1002279090 Hz quality 800
Timecounters tick every 1.000 msec
Fast IPsec: Initialized Security Association Processing.
ata0-master: FAILURE - SETFEATURES SET TRANSFER MODE status=51<READY,DSC,ERROR> error=4<ABORTED>
ata0-master: FAILURE - SETFEATURES SET TRANSFER MODE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: FAILURE - SETFEATURES ENABLE RCACHE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: FAILURE - SETFEATURES ENABLE WCACHE status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: 246MB <SAMSUNG CF/ATA/Rev 7.0> [985/16/32] at ata0-master BIOSPIO
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
Starting pfSense ...
WARNING: R/W mount of / denied. Filesystem is not clean - run fsck
mount:
/dev/ad0s1a
:
Operation not permitted
** /dev/ad0s1a
** Last Mounted on /
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
3330 files, 68681 used, 149534 free (190 frags, 18668 blocks, 0.1% fragmentation)
***** FILE SYSTEM MARKED CLEAN *****
kernel dumps on /dev/ad0s1b
swapon: adding /dev/ad0s1b as swap device
savecore: no dumps found
net.inet.tcp.sack.enable:
1
->
0
Syncing master.passwd...
Initializing timezone...
done
Initializing PC cards...
failed (probably no PC card controller present)
Configuring LAN interface...
done
Configuring WAN interface...
done
Configuring OPT1 (Sync) interface...
done
Mar 26 21:07:27 pflogd[168]: [priv]: msg PRIV_OPEN_LOG received
Configuring firewall...
done
Starting syslog service...
done
Starting webGUI...
done
Starting DNS forwarder...
done
Starting DHCP service...
done
Starting NTP client...
done
Starting INETD and FTP Helpers for FTP-PROXY...
Starting Secure Shell Services...
Done.
Starting USB...
Syncing package configurations...
Syncing packages:
carp
vr1: promiscuous mode enabled
vr0: promiscuous mode enabled
arp_rtrequest: bad gateway 192.168.10.99 (!AF_LINK)
arp_rtrequest: bad gateway 192.168.1.10 (!AF_LINK)
.
Executing rc.d items...
Starting /usr/local/etc/rc.d/carp.sh...
Final firewall setup in progress...
Welcome to pfSense (right-pfSense.local) (console)
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
*** This is pfSense version 0.56.2-BobbaBooey-#2
Copyright 2004 Scott Ullrich. All rights reserved.
Originally based on m0n0wall, version 1.2b1
m0n0wall is Copyright 2002-2004 by Manuel Kasper. All rights reserved
LAN -> vr0 -> 192.168.1.2
WAN -> vr1 -> 192.168.10.92
OPT1 -> aue0 -> 192.168.200.2(Sync)
pfSense console setup
**********************
0) Logout if accessing via SSH
1) Interfaces: assign network ports
2) Set up LAN IP address
3) Reset webGUI password
4) Reset to factory defaults
5) Reboot system
6) Halt system
7) Ping host
8) Shell
9) PFtop
Enter a number:
-----------------------------------------------------------------------------------------
# uname -a
FreeBSD right-pfSense.local 5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #1: Tue Mar 22 03:26:39 UTC 2005 sullrich at builder.livebsd.com:/usr/obj/usr/src/sys/FREESBIE.5 i386
-----------------------------------------------------------------------------------------
More information about the freebsd-pf
mailing list