I had been running 2.2-RC on my home router for a while now with no issues,
so I figured I'd try upgrading my office firewalls to 2.2 from 2.1.5 this
morning.

Everything seems to have gone just fine with one minor exception: the IPMI
serial port console stopped working.

I upgraded my backup firewall first, then the primary. The only thing that
went down was the site-to-site vpn, since OpenVPN does not properly detect
and fail over to the backup box because I have a gateway group with two
WANs.  Nobody even noticed anything else drop any connections.

Anyhow, for anyone else interested in the serial console change necessary,
here it is.

On the pfSense/Netgate C2758 the motherboard has an on-board IPMI module
that provides among other things a serial port over LAN (SoL) that shows up
as COM2 to the motherboard.

In FreeBSD 8, to set the console to the alternate port, in
/boot/loader.conf.local you need to set these:

hint.uart.1.flags="0x10"
hint.uart.0.flags="0x00"

However, these look to be ignored by FreeBSD 10 for actually choosing the
console. Now, it seems if you set this:

comconsole_port="0x2f8"

it does the right thing.

The only other tweak I needed to make was to update /etc/ttys as follows:

ttyu0 "/usr/libexec/getty al.115200" cons25 onifconsole secure
ttyu1 "/usr/libexec/getty al.115200" cons25  onifconsole secure

That is, the ttyu0 line was changed from "on" to "onifconsole" and ttyu1
was cloned from that.

So now I have my serial console back via IPMI, and I can remote manage
these things easily.

On my data center systems which run on different Supermicro motherboards,
the IPMI serial port is COM3, so I need to set comconsole_port="0x3e8" and
add the ttys line for ttyu2.
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to