attempting to re-purpose box with only nic interfaces

mistwolf · 01-27-2011, 08:45 AM

Hey all,

I'm pretty new to Linux / Ubuntu but have managed to get a few servers up and running halfway well. I now have a challenge that I don't even know where to start.

I have what was a web filtering box (Fortigate) that has 10 100Mb nic interfaces on it. The hardware in the box is decent and I'd love to load Ubuntu server on it for various tasks; however, there are no other IO ports - no monitor, no keyboard, etc, other than a console port and 1 usb port.

Can this be done? If so, how in the world do I go about doing it?

Could I "simply" load Ubuntu on another server, then swap the hdd into the Fortigate box, boot it up, and try to ssh into the IP address, as it has a number of nics to use?

I (think) that ubuntu does some hardware loading @ installation, so i'm not thinking that be above would work.

I'd love some ideas / tips.

Thanks!

Damian Bailey
Louisa County Schools

szboardstretcher · 01-27-2011, 09:15 AM

I would install Ubuntu, or whatever you like on a HDD and put it in the fortinet. If it doesn't work . . .

Then insert a script into the new drive, that will capture all system information (Dmesg, lsusb, lspci) into a text file, named by time (feb-7-012399-info.txt) on boot up. Put it into the fortinet, let it boot up, let it write that text file, take it back out and install it into the other computer, grab that file and build it up to have and install the correct drivers and so on.

never say never · 01-27-2011, 11:46 AM

Just a few thoughts.

I am not sure ubuntu server is your best option unless you are planning on using a X server on the box your are controlling this machine from. Really no sense in burdening the server with GUI services when they aren't going to be used.

If you have a null modem cable, try connecting it to the Console port, and opening a terminal session, or connecting a dumb terminal to it. You may be able to do some configuration and exploration of the box this way. Some linux distros will figure out there is no video card, find the console port and auto configure to use the console port instead.

What services are you wanting to run on this box? Sounds like a good candidate for a router, and or SQUID, ... In which case something like PFSense could fill the bill since it is web administered after the initial setup.

Let us know what you discover, it may help someone else later on.

mistwolf · 01-28-2011, 05:36 AM

Thanks for all the quick replies!

I'll get working on this early next week and post back with my results.

Never say never: I agree - the server version of Ubuntu is exactly what you describe - command line only. I'm not a huge fan of the GUI if I can avoid it

Though I'm not quite willing to run Windows Server Core either lol.

Silly question: is a null model cable the same as a Cisco "rollover" cable used to console into their brand of switches?

As far as services - at least email filtering using postfix / spamassassin / amavis, and possibly some Apache-based sites.

szboardstretcher: great idea on finding out the drivers. I hope I don't need to go that route, but if so, at least you've given me a place to start.

Thanks!
Damian Bailey
Louisa County Schools

michaelk · 01-28-2011, 06:48 AM

It depends on the hardware. Most distributions expect PC compatible hardware and therefore if not standard x86 hardware Ubuntu is not going to work. As stated you might be able to telnet into the device and find out something about whats running inside. The manual should say how to access the device via the console port.

mistwolf · 01-28-2011, 01:39 PM

Well, here's an update:

Basically, on opening the box, the Fortigate appears to be booting off of proprietary firmware, then looks to a compact flash card for its configuration. So, being the techie person that I am, I removed the CF card.

Now just the firmware loads, but doesn't see the hard drive that I have installed.

I see what appears to be 2 sata ports; plugging the hard drive into one of the ports and power doesn't seem to help.

Here's all I get as output over the console port when I have a sata drive plugged in:

Code:

FGT1KA ( 9:51-02.02.2006)
Ver:04000004
Serial number:FGT1KA2606500121Super io and COM port initialization completed.
Start RAM initialization.

RAM activation
Start to setup MTRR.
CPU(00:00000f41 bfebfbff): Do MP initialization
CPU(01:00000f41 bfebfbff): Do MP initialization
Ready to main hardware initialization.
Start p64h2 PCI bridge initialization.
Start LCD initialization.
Total RAM: 1024MB
Enabling cache...Done.
Start to enumerate PCI device.
Scanning PCI bus...Done.
Start PCI configuration.
Allocating PCI resources...Done.
Start to enable PCI device.
Enabling PCI resources...Done.
Start mainboard final initialization.
Start superIO final initialization.
Start northbridge final initialization.
Start southbridge final initialization.
Start to initialize IDE device.
Zeroing IRQ settings...Done.
Verifying PIRQ tables...Done.
Boot up, boot device capacity: 8192MB.
Press any key to display configuration menu...
......
You must format the boot device.

When I "press any key" for config menu, then C (config), then I (hardware info), I get :

Code:

Press any key to display configuration menu...
.
[G]:  Get firmware image from TFTP server.
[F]:  Format boot device.
[B]:  Boot with backup firmware and set as default.
[C]:  Configuration and information.
[Q]:  Quit menu and continue to boot with default firmware.
[H]:  Display this list of options.

Enter G,F,B,C,Q,or H:

[S]:  Set serial port baudrate(will take effect on next boot).
[T]:  Set image download port.
[C]:  Set DHCP enable (will take effect on next boot).
[D]:  Set bootup debug message display (will take effect on next boot).
[I]:  Display hardware information.
[Q]:  Quit this menu.
[H]:  Display this list of options.

Enter S,T,C,D,I,Q,or H:

OS image name   : flatkc
vendor_id       : GenuineIntel
cpu family      : 15
model           : 4
model name      : Intel(R) Xeon(TM) CPU 3.20GHz
stepping        : 1
cpu MHz         : 3199.819
cache size      : 1024 KB
memory          : DDR SDRAM 1024MB 400MHz
IDE device channel 0 drive 0:
        No device
IDE device channel 0 drive 1:
        No device
IDE device channel 1 drive 0:
        No device
IDE device channel 1 drive 1:
        No device

Enter S,T,C,D,I,Q,or H:

So I'm rather stuck. If it's possible, it seems I need to wipe the firmware off the device, but I doubt I can get it to boot then. Any thoughts?

michaelk · 01-28-2011, 06:18 PM

Since this appliance does not have a PC type BIOS removing the firmware will not force it to boot from the hard drive and will indeed make it a big paperweight.

The hardware information looks like embedded Xeon hardware so it might be possible to replace the firmware with linux versions designed for such.

hvc123 · 01-29-2011, 05:13 PM

well looks like th arch is x86 so why dont you try to netboot it from openwrt image and install that. it can run all sorts of services as well as bein a router