Network cards for a firewall server?
Hello everyone I am trying to build a firewall server with FreeBSD 4.7, but I'm having some problems with the network cards. When I install it with two Netgear FA-310TX network cards, I get the dc0: watchdog timeout messages. If I try two Intel PRO/100 cards, I get the fxp0: DMA timeout and fxp0: SCB timeout messages. Searching the mailing lists the problems for both these types of cards seems to be reasonably well known. I tried moving the cards around the PCI-slots, but without any success. Anyone who can recommend network cards with less problems for a firewall server (or knows the solution to these problems). Thanks Magnus (I am not on the mailing list) -- ___ Get your free email from http://mail.usa.com To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
Re: Network cards for a firewall server?
Hello Currently the FA310-cards are installed. The mobo is the last versio of Abit BE6-II, (with a PIII 850MHz). It starts with the message: dc0: failed to force tx and rx to idle state, then the dc0: watchdog timeout messages starts showing up. PnP is disabled in BIOS. From dmesg I have: dc0: 82c169 PNIC 10/100BaseTX port 0xc400 - 0xc4ff mem 0xd3402000 - 0xd34020ff irq 11 at device 9.0 on pci0 dc0: Ethernet address: 00:a0:cc:d5:b2:e3 dc1: 82c169 PNIC 10/100BaseTX port 0xc800 - 0xc8ff mem 0xd3403000 - 0xd34030ff irq 5 at device 11.0 on pci0 dc1: Ethernet address: 00:a0:cc:d5:dd:c8 Thanks for a quick reply. Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 18:13:11 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hello, On Sun, 2003-01-05 at 18:01, Magnus Johansson wrote: Hello everyone I am trying to build a firewall server with FreeBSD 4.7, but I'm having some problems with the network cards. When I install it with two Netgear FA-310TX network cards, I get the dc0: watchdog timeout messages. If I try two Intel PRO/100 cards, I get the fxp0: DMA timeout and fxp0: SCB timeout messages. Searching the mailing lists the problems for both these types of cards seems to be reasonably well known. I tried moving the cards around the PCI-slots, but without any success. What motherboard are you using? Can you post each card's dmesg entries here? Initially, you might want to ensure that the P 'n P OS options in the BIOS settings are disabled. Anyone who can recommend network cards with less problems for a firewall server (or knows the solution to these problems). Check back with that info and and when you can. Regards, Stacey Thanks Magnus (I am not on the mailing list) -- Stacey Roberts B.Sc (HONS) Computer Science Web: www.vickiandstacey.com -- ___ Get your free email from http://mail.usa.com To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
Re: Network cards for a firewall server?
Hi Yes, this is the 4.7 GENERIC kernel, and according to LINT, PCI_ENABLE_IO_MODES is compiled into the kernel. In /etc/rc.conf I have: ifconfig_dc0 = inet numbers.of.my.public.ip-address netmask 255.255.255.0 ifconfig_dc1 = inet 192.168.1.1 netmask 255.255.255.0 It is after these statements are executed that I start seeing the reported messages, I have to do CTRL-C to even get to login prompt. IRQ 11 is also used by the SCSI-controller, removing that controller completely doesn't make any difference, still the same messages. IRQ 5 is also used by the USB-controller on the mobo. If I hook up the same cables to another box, there are no problems. Thanks again Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 18:56:04 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hi, Is options PCI_ENABLE_IO_MODES compiled into the kernel? Check LINT for more information On Sun, 2003-01-05 at 18:37, Magnus Johansson wrote: Hello Currently the FA310-cards are installed. The mobo is the last versio of Abit BE6-II, (with a PIII 850MHz). It starts with the message: dc0: failed to force tx and rx to idle state, then the dc0: watchdog timeout messages starts showing up. PnP is disabled in BIOS. From dmesg I have: dc0: 82c169 PNIC 10/100BaseTX port 0xc400 - 0xc4ff mem 0xd3402000 - 0xd34020ff irq 11 at device 9.0 on pci0 dc0: Ethernet address: 00:a0:cc:d5:b2:e3 dc1: 82c169 PNIC 10/100BaseTX port 0xc800 - 0xc8ff mem 0xd3403000 - 0xd34030ff irq 5 at device 11.0 on pci0 dc1: Ethernet address: 00:a0:cc:d5:dd:c8 FreeBSD sees the nics okay enough.., What do you have in /etc/rc.conf for each nic? Post each nic's respective line entry please. Also, exactly *when* do these messages appear? Do the nics start okay, then lock-up? Check for IRQ conflicts, and, as this appears to happen with two sets of nics, you can't rule out physical network problems - check cabling, etc. Regards, Stacey Thanks for a quick reply. Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 18:13:11 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hello, On Sun, 2003-01-05 at 18:01, Magnus Johansson wrote: Hello everyone I am trying to build a firewall server with FreeBSD 4.7, but I'm having some problems with the network cards. When I install it with two Netgear FA-310TX network cards, I get the dc0: watchdog timeout messages. If I try two Intel PRO/100 cards, I get the fxp0: DMA timeout and fxp0: SCB timeout messages. Searching the mailing lists the problems for both these types of cards seems to be reasonably well known. I tried moving the cards around the PCI-slots, but without any success. What motherboard are you using? Can you post each card's dmesg entries here? Initially, you might want to ensure that the P 'n P OS options in the BIOS settings are disabled. Anyone who can recommend network cards with less problems for a firewall server (or knows the solution to these problems). Check back with that info and and when you can. Regards, Stacey Thanks Magnus (I am not on the mailing list) -- Stacey Roberts B.Sc (HONS) Computer Science Web: www.vickiandstacey.com -- Stacey Roberts B.Sc (HONS) Computer Science Web: www.vickiandstacey.com -- ___ Get your free email from http://mail.usa.com To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
Re: Network cards for a firewall server?
Hi Stacey After following your advice, including reading the manual more carefully with respect to IRQs, it now works without problems. Thank you very very much Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 19:49:50 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hello, On Sun, 2003-01-05 at 19:30, Magnus Johansson wrote: Hi Yes, this is the 4.7 GENERIC kernel, and according to LINT, PCI_ENABLE_IO_MODES is compiled into the kernel. In /etc/rc.conf I have: ifconfig_dc0 = inet numbers.of.my.public.ip-address netmask 255.255.255.0 ifconfig_dc1 = inet 192.168.1.1 netmask 255.255.255.0 It is after these statements are executed that I start seeing the reported messages, I have to do CTRL-C to even get to login prompt. IRQ 11 is also used by the SCSI-controller, removing that controller completely doesn't make any difference, still the same messages. IRQ 5 is also used by the USB-controller on the mobo. Been googling and found the following information: Finally, the BE6-II, like the BE6 before it, includes the ability to manually assign IRQs. This is important, as it is often the only way to resolve problems in the case of an IRQ conflict. You might want to look into whether or not you are able to ensure unique IRQ values for each attached PCI device as a start. Also (and this is something becoming more prevalent now) you need to determine if the FA310TX requires a bus-mastering PCI slot in order to function.. As such, you'd want to check with the BE6-11's manual to hwo this is organized amongst the available slots. For most boards (should there be only one) slot 1 is usually the slot that does this. Regards, Stacey If I hook up the same cables to another box, there are no problems. Thanks again Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 18:56:04 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hi, Is options PCI_ENABLE_IO_MODES compiled into the kernel? Check LINT for more information On Sun, 2003-01-05 at 18:37, Magnus Johansson wrote: Hello Currently the FA310-cards are installed. The mobo is the last versio of Abit BE6-II, (with a PIII 850MHz). It starts with the message: dc0: failed to force tx and rx to idle state, then the dc0: watchdog timeout messages starts showing up. PnP is disabled in BIOS. From dmesg I have: dc0: 82c169 PNIC 10/100BaseTX port 0xc400 - 0xc4ff mem 0xd3402000 - 0xd34020ff irq 11 at device 9.0 on pci0 dc0: Ethernet address: 00:a0:cc:d5:b2:e3 dc1: 82c169 PNIC 10/100BaseTX port 0xc800 - 0xc8ff mem 0xd3403000 - 0xd34030ff irq 5 at device 11.0 on pci0 dc1: Ethernet address: 00:a0:cc:d5:dd:c8 FreeBSD sees the nics okay enough.., What do you have in /etc/rc.conf for each nic? Post each nic's respective line entry please. Also, exactly *when* do these messages appear? Do the nics start okay, then lock-up? Check for IRQ conflicts, and, as this appears to happen with two sets of nics, you can't rule out physical network problems - check cabling, etc. Regards, Stacey Thanks for a quick reply. Magnus - Original Message - From: Stacey Roberts [EMAIL PROTECTED] Date: 05 Jan 2003 18:13:11 + To: Magnus Johansson [EMAIL PROTECTED] Subject: Re: Network cards for a firewall server? Hello, On Sun, 2003-01-05 at 18:01, Magnus Johansson wrote: Hello everyone I am trying to build a firewall server with FreeBSD 4.7, but I'm having some problems with the network cards. When I install it with two Netgear FA-310TX network cards, I get the dc0: watchdog timeout messages. If I try two Intel PRO/100 cards, I get the fxp0: DMA timeout and fxp0: SCB timeout messages. Searching the mailing lists the problems for both these types of cards seems to be reasonably well known. I tried moving the cards around the PCI-slots, but without any success. What motherboard are you using? Can you post each card's dmesg entries here? Initially, you might want to ensure that the P 'n P OS options in the BIOS settings are disabled. Anyone who can recommend network cards with less problems for a firewall server (or knows the solution to these problems). Check back with that info and and when you can. Regards, Stacey Thanks Magnus (I am not on the mailing list) -- Stacey Roberts B.Sc (HONS) Computer Science Web: www.vickiandstacey.com -- Stacey Roberts B.Sc (HONS) Computer Science Web
