Problems RAQCOP & Velociraptor 1100

[pyrosster]

Hello,

I think I need to update the ROM of my Velociraptor Cobalt. But I sucessfully installed raqcop in a 20gb hard disk. I installed this hard disk on the velociraptor.
I spend a few hours trying to make this work, and finally I had to do the following:

set_boot_dev hdc4                  <--- it wont boot if I dont use this. NOT hda,hdb...
bfr

After that the velociraptor began to boot and I was happy until 2 minutes later.
This is the boot log of the velociraptor:

First stage kernel: Decompressing - done
Linux version 2.2.16C26 (thockin@freakshow) (gcc version egcs-2.91.66 19990314/L
inux (egcs-1.1.2 release)) #2 (ROM kernel) Thu May 17 18:20:29 PDT 2001
Ignoring bogus EBDA pointer 3FFF000
Detected 448210 kHz processor.
Pending 0x00
Calibrating delay loop... 894.57 BogoMIPS
Memory: 257468k/262144k available (1336k kernel code, 416k reserved, 2848k data,
 76k init)
Dentry hash table entries: 32768 (order 6, 256k)
Buffer cache hash table entries: 262144 (order 8, 1024k)
Page cache hash table entries: 65536 (order 6, 256k)
VFS: Diskquotas version dquot_6.4.0 initialized
CPU: L1 I Cache: 32K  L1 D Cache: 32K
CPU: L2 Cache: 128K
CPU: AMD AMD-K6(tm)-III Processor stepping 04
Checking 386/387 coupling... OK, FPU using exception 16 error reporting.
Checking 'hlt' instruction... OK.
POSIX conformance testing by UNIFIX
PCI: Using configuration type 1
PCI: Probing PCI hardware
Linux NET4.0 for Linux 2.2
Based upon Swansea University Computer Society NET3.039
NET4: Unix domain sockets 1.0 for Linux NET4.0.
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
TCP: Hash tables configured (ehash 262144 bhash 65536)
IPv4 over IPv4 tunneling driver
early initialization of device tunl0 is deferred
GRE over IPv4 tunneling driver
early initialization of device gre0 is deferred
GRE over IPv4 tunneling driver
early initialization of device gre0 is deferred
NET4: AppleTalk 0.18 for Linux NET4.0
Initializing RT netlink socket
Starting kswapd v 1.5
Cobalt I2C bus initialized
Cobalt temperature sensor v1.3 enabled
Serial driver version 4.27 with no serial options enabled
keyboard: Timeout - AT keyboard not present?
keyboard: Timeout - AT keyboard not present?
ttyS00 at 0x03f8 (irq = 4) is a 16550A
ttyS01 at 0x02f8 (irq = 3) is a 16550A
pty: 256 Unix98 ptys configured
Real Time Clock Driver v1.09
lcd: Cobalt LCD Driver v3.12
serialnumber: Version 1.9 initialized. Serial number=9c000008bce5fc01.
Copyright (c)1994-2000 Axent Technologies, Inc.
RAM disk driver initialized:  16 RAM disks of 4096K size
loop: registered device at major 7
Uniform Multi-Platform E-IDE driver Revision: 6.30
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
ALI15X3: IDE controller on PCI bus 00 dev 78
ALI15X3: chipset revision 193
ALI15X3: 100% native mode on irq 14
    ide0: BM-DMA at 0xf000-0xf007, BIOS settings: hda:DMA, hdb:DMA
    ide1: BM-DMA at 0xf008-0xf00f, BIOS settings: hdc:DMA, hdd:DMA
hdc: ST320413A, ATA DISK drive
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
ide1 at 0x170-0x177,0x376 on irq 15
hdc: ST320413A, 19092MB w/1024kB Cache, CHS=38792/16/63, UDMA(33)
md driver 0.90.0 MAX_MD_DEVS=256, MAX_REAL=12
translucent personality registered
linear personality registered
raid0 personality registered
raid1 personality registered
raid5 personality registered
raid5: measuring checksumming speed
raid5: MMX detected, trying high-speed MMX checksum routines
   pII_mmx   :   933.069 MB/sec
   p5_mmx    :   862.584 MB/sec
   8regs     :   438.912 MB/sec
   32regs    :   281.178 MB/sec
using fastest function: pII_mmx (933.069 MB/sec)
scsi : 0 hosts.
scsi : detected total.
PPP: version 2.3.7 (demand dialling)
TCP compression code copyright 1989 Regents of the University of California
PPP line discipline registered.
eth0: Invalid EEPROM checksum 0x3c4e, check settings before activating this devi
ce!
eth0: Intel PCI EtherExpress Pro100 82559ER, 00:10:E0:03:6E:28, I/O at 0x6040, I
RQ 11.
  Board assembly 000000-000, Physical connectors present:
  Primary interface chip None PHY #0.
  General self-test: passed.
  Serial sub-system self-test: passed.
  Internal registers self-test: passed.
  ROM checksum self-test: passed (0xdbd8681d).
  Receiver lock-up workaround activated.
eth1: Invalid EEPROM checksum 0x3d4e, check settings before activating this devi
ce!
eth1: Intel PCI EtherExpress Pro100 82559ER, 00:10:E0:03:6E:29, I/O at 0x6080, I
RQ 10.
  Board assembly 000000-000, Physical connectors present:
  Primary interface chip None PHY #0.
  General self-test: passed.
  Serial sub-system self-test: passed.
  Internal registers self-test: passed.
  ROM checksum self-test: passed (0xdbd8681d).
  Receiver lock-up workaround activated.
 Receiver lock-up workaround activated.
eth2: OEM i8255[789] 10/100 Ethernet, 00:02:B3:B8:E5:59, I/O at 0x7000, IRQ 9.
  Receiver lock-up bug exists -- enabling work-around.
  Board assembly a56744-002, Physical connectors present: RJ45
  Primary interface chip i82555 PHY #1.
    Secondary interface chip i82555.
  General self-test: passed.
  Serial sub-system self-test: passed.
  Internal registers self-test: passed.
  ROM checksum self-test: passed (0xb874c1d3).
eth3: OEM i8255[789] 10/100 Ethernet, 00:02:B3:B8:E5:5A, I/O at 0x7040, IRQ 10.
  Receiver lock-up bug exists -- enabling work-around.
  Board assembly a56744-002, Physical connectors present: RJ45
  Primary interface chip i82555 PHY #1.
    Secondary interface chip i82555.
  General self-test: passed.
  Serial sub-system self-test: passed.
  Internal registers self-test: passed.
  ROM checksum self-test: passed (0xb874c1d3).
md.c: sizeof(mdp_super_t) = 4096
Partition check:
 hdc: hdc1 hdc2 hdc4
autodetecting RAID arrays
autorun ...
... autorun DONE.
VFS: Mounted root (ext2 filesystem) readonly.
Freeing unused kernel memory: 76k freed
INIT: version 2.86 booting
Mounting /proc filesystem
Setting hostname
Loading /usr/share/kbd/keymaps/i386/qwerty/us.map.gz
Couldnt get a file descriptor referring to the console
Initializing Power Management
Initializing USB controllers
modprobe: Can't open dependencies file /lib/modules/2.2.16C26/modules.dep (No su
ch file or directory)
modprobe: modprobe: Can't open dependencies file /lib/modules/2.2.16C26/modules.
dep (No such file or directory)
fsck.ext3: No such device while trying to open /dev/harddisk4
/dev/harddisk4:
The superblock could not be read or does not describe a correct ext2
filesystem.  If the device is valid and it really contains an ext2
filesystem (and not swap or ufs or something else), then the superblock
is corrupt, and you might try running e2fsck with an alternate superblock:
    e2fsck -b 8193 <device>

Checking root filesystem: Failed
*** An error occurred during the file system check.
*** Dropping you to a shell; the system will reboot
*** when you leave the shell.
Give root password for maintenance
(or type Control-D to continue):
Unmounting filesystems
Automatic reboot in progress.
stopping all md devices.
disabling network interfaces.
Restarting system.


If I type Control-D for maintenace the system reboots. What can I do? What is this problem? What I'm doing wrong?

I hope your help.
Regards.

[Davesworld]

No surprise here since the 1100 is really a Raq XTR which is Gen V hardware and Raqcop as of yet does not run on that. Our Raq 3,  4, Qube 3, Velociraptor 500 through 1000 units are all gen III hardware which we like as a firewall because they are small, quiet, and only consume 40 watts or so. The XTR is a large and noisy beast. I have a few of them that I use as file servers only. Yes, Raqcop could be recompiled to run on Gen V hardware but the only Gen V unit that makes sense as a firewall appliance would be the Raq 550 even though it is still awfully noisy but it is only about 15" deep. The other problem you would have with the VR1100/XTR is that the first available drive in the first bay is actually hde, NOT hda. Also the LCD is completely different on an 1100/XTR. It uses a completely different bus than all the Gen III units and even the Raq 550.

EDIT: I mistakenly thought the VR1100 was a Gen V XTR but it is clearly a Gen III Raq 3, or 4.

[pyrosster]

Dear Davesworld,

First of all, thanks very much for your answer, because I didn't know what type of hardware I had.
Second, What software can I use on this velociraptor to work as a fileserver? FreeNAS? any other software? Pleae help me with this.
The rack come with only 2 harddisks bays, and 1 20gb hard disk installed.
I think it's not so much noisy compared to other servers I have seen. I think the noise it's similar to a gigabit switch more or less.

And what any other software could I install on this rack? For what an I use it? any other firewall software could be installed on it.

Other thing, The velociraptor came with a ROM 2.3.49, so I need to update the rom right? What ROM should I install? This: cobalt-2.10.3-ext3-1M.rom??
 
Again, thanks very much for the help.

[pyrosster]

Dear DavesWorld,

Finally I risk and tried to flash the ROM of the velociraptor 1100, and now it's a scrap, dont boot...

 

It's a joke, jejeje. Now I have ROM 2.10 ext3 on my Velociraptor 1100, and now it's boot of a different way. I like more. Surfing on internet I found different ways of flashing the rom, and I choose the hardest one, and the most dangerous.
I choosed to flash my rom using the serial port of a computer.

I installed debian on a computer with serial port. Then I connected the velociraptor to the computer by a serial cable.
I pressed S key to enter boot menu in the velociraptor, then I choose the command "dl_kernel" and in another console of the computer I typed "cat cobalt-rom-ext3..." > /dev/ttyS0. It tooks about 2-3 minutes. The I go to the eeprom menu and typed "write_eeprom 0" and in 2 minutes more the rom was updated. So the last command was "reboot" and pray.
It worked perfectly, and I was very afraid for the method, but it's an easy method if you do it carefully.

I wrote this because if any other people need to update their raq, I hope my information could be of utility for them.

And if you want Dave, I could be a betatester for raqcop if you decide to make a version for my velociraptor 1100.

Next... Dave what would you do in my case? Install Strongbolt? Install Debian, gentoo or any other distro?

Dave you have done a good work with raqcop, continue this way.
(I'm sorry for my english)

Regards.

[Davesworld]

I was mislead by the data sheet that has both the 1100 and 1300 on the same paper and shows an XTR with a yellow front. As soon as I saw your specs I realized that I gave you bad information. Thanks for going forward despite the confusion. You can use Raqcop as it is now that you have the right rom installed as your 1100 clearly is a Gen III unit so I would just use it as a firewall. I think the smaller Gen III units are perfectly suited to a headless firewall. Just use ours.

If you ever do have a flash failure, there are people who will change the flashrom chips on your motherboard, some I know have even had the option of making a socket done so easy rom chip swaps are possible.

[pyrosster]

Dear Dave,

Right, I like this unit to be used as firewall, because it's small and not so much noisy. I will use raqcop as the firewall for this unit. 
Today I will make some photos of the unit and post some links here, so you can look it.
I will post the photos on imageshack so anyone could look the unit.

Also today I will change the 20GB hard disk inside the unit, for another one, because the hard disk it's making some noise and it's possible that will failure in the future.
I will post here my results installing raqcop.

As I said in a post before, the raqcop team is doing a very good work with this proyect. 
Regards.

[chemikalguy]

Dave,

I see previously you mentioned that you have some XTRs that you use as file servers. I have a Velociraptor 1300 and a Symantec Gateway Security 5300 that I have installed one with the Cobalt XTR OS, and one with Strongbolt 1.06, both with ROM 2.10.3. So, how do you configure these to run as file servers? I want to set up one as a file server, and one as a firewall, router, etc. What OS do you run, and if you don't mind, how did you install it?

I've searched around trying to find stuff, but I can't find much info out there on firewall applications for XTRs. Can you help me out?

Thanks!

Scott

[Davesworld]

Sorry about the long delay. I actually use Strongbolt on my XTR units which can be translated to running Centos plus BlueQuartz. Strongbolt is really the installer and cobalt bootable kernel. I since have made a string of custom kernels including 2.6.29 which modularizes everything not needed for boot and adds samba and nfs support. I use webmin to manage it, BlueQuartz is useless if you just want a file server. The drive bays all support lba48 no problem.

As an experiment, I got an ide to sata converter and ran a seagate sata drive in one of the bays. Even though you have four hot swap bays, each of the ports in each bay will control two drives if the right ribbon is used. Of course it would be a kluge but the driver ruler will control up to 8 drives if you can find a place to put them. The hot swap function is not functional with the newer kernels yet anyway.

As far as Raqcop on an XTR, it could be done after mounting and customizing an image to look for /dev/hde as the first ide device. With IPCop 2.0 it will not matter as the devices are not hardlinked anyway as they are in 1.4.x. No matter what you do you will need a serial terminal to set the boot and root devices. The rom on the xtr is the same as the raq/qube3 and raq4. The 550 is unique as far as roms go. In the end though the XTR will leave you with a noisy 26" deep firewall appliance with either a PIII 850mhz or 1ghz.

The 550 is only 2" deeper than a raq3/4 and quieter fans can be retrofitted. These came with either a 1ghz or 1.266ghz PIII as well as a pci-x slot. The 550 is actually a very nice piece of hardware and those were actually built by Sun, not acquired with the Cobalt Networks purchase as the raq3/4 qube3 and xtr were. Toolless cover removal, separate leds for each nic and drive are just a few of the nice touches.