firewall update: pain never stops.

we had done nothing more than updating a pfsense 1.2.2-beta firewall running off a 512MB flash card in a Nokia IP 650 to 2.0-beta4.

Now i’m about 20 hours into this with no success.

Lets talk about whats not possible:

pfsense 2 (will hang at boot, no message visible on serial)

pfsense 1 (will apparently hang after root mount)

run pfpsense 2 ‘full’ on the 512MB flash disk (unsupported) to debug via VGA

buy a 1GB ICE flash module (transcend offers these up to … 512MB)

use vga to debug pfsense 2 embedded

run generic-pc m0n0wall with a working serial port (neither the front nor the two internal ones show any output. This might be cause I use screen /dev/ttyS0 which probably means sw flow control.

Boot off a standard SanDisk CF card using the builtin CF socket.

run embedded m0n0wall because differing from the general docs it will ONLY work on alix & friends.

CPU: Intel Pentium III (Unknown-class CPU)  Origin = “GenuineIntel”  Id = 0x686  Stepping = 6  Features=0x387f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,PN,MMX,FXSR,SSE>panic: CPU class not configuredUptime: 1s

someone should really be slapped for that. optimizing for i486 is fully understandable when considering slow embedded boards, but removing cpu arch support is highly stupid. You saved maybe 1K of kernel image size with that, and excluded all more powerful embedded systems as CompactPCI or it’s successors.

I think I bought my first used CompactPCI system in 2002, and it already used P3 CPUs.

I’ll grab a windows PC with PuTTY now, and hope there is some way to get a serial connect. Otherwise I’m really doomed.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s