[FIRMWARE] Itus Shield v2

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
128 messages Options
1 ... 4567
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Roadrunnere42
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Roadrunnere42
I did the test as asked and all connected ok

cable in Eth0    cable in Eth2   NO cable in Eth1 booted ok and obtained ip addresses through DHCP

cable in Eth0    cable in Eth2   cable in Eth1  booted ok and obtained ip addresses through DHCP

Reboot by unplugging power and ip address obtained ok through DHCP

Im using
Firmware Version   OpenWrt SNAPSHOT r13960-ff8cdd5395 / LuCI Master git-20.206.32620-95d004f
Kernel Version 5.4.52

hope this helps

On Tue, 5 Jan 2021 at 20:47, Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2169.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Grommish
Administrator
Wonder if it's a hardware issue on my device then? No idea. Thanks for checking! 

On Wed, Jan 6, 2021, 4:08 AM Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
I did the test as asked and all connected ok

cable in Eth0    cable in Eth2   NO cable in Eth1 booted ok and obtained ip addresses through DHCP

cable in Eth0    cable in Eth2   cable in Eth1  booted ok and obtained ip addresses through DHCP

Reboot by unplugging power and ip address obtained ok through DHCP

Im using
Firmware Version   OpenWrt SNAPSHOT r13960-ff8cdd5395 / LuCI Master git-20.206.32620-95d004f
Kernel Version 5.4.52

hope this helps

On Tue, 5 Jan 2021 at 20:47, Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2169.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2170.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Turrican
Sounds like the issue I was getting on my shields for a while, if I recall we though it was a thermal issue, not sure if it was or not though. l have stopped using them now and to be honest The fw is a mess on both devices so can really help to test


From: Grommish [via Itus Networks Owners Forum] <[hidden email]>
Sent: Wednesday, January 6, 2021 10:19:58 AM
To: Turrican <[hidden email]>
Subject: Re: Suricata on the Shield
 
Wonder if it's a hardware issue on my device then? No idea. Thanks for checking! 

On Wed, Jan 6, 2021, 4:08 AM Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
I did the test as asked and all connected ok

cable in Eth0    cable in Eth2   NO cable in Eth1 booted ok and obtained ip addresses through DHCP

cable in Eth0    cable in Eth2   cable in Eth1  booted ok and obtained ip addresses through DHCP

Reboot by unplugging power and ip address obtained ok through DHCP

Im using
Firmware Version   OpenWrt SNAPSHOT r13960-ff8cdd5395 / LuCI Master git-20.206.32620-95d004f
Kernel Version 5.4.52

hope this helps

On Tue, 5 Jan 2021 at 20:47, Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2169.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2170.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2171.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running v2 Firmware
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Grommish
Administrator
You could fix that 😂. Actually, I'm at the point I've got Rust lang working, Suricata and Snort3 working, I'm about finished I think.  

On Wed, Jan 6, 2021, 5:22 AM Turrican [via Itus Networks Owners Forum] <[hidden email]> wrote:
Sounds like the issue I was getting on my shields for a while, if I recall we though it was a thermal issue, not sure if it was or not though. l have stopped using them now and to be honest The fw is a mess on both devices so can really help to test


From: Grommish [via Itus Networks Owners Forum] <[hidden email]>
Sent: Wednesday, January 6, 2021 10:19:58 AM
To: Turrican <[hidden email]>
Subject: Re: Suricata on the Shield
 
Wonder if it's a hardware issue on my device then? No idea. Thanks for checking! 

On Wed, Jan 6, 2021, 4:08 AM Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
I did the test as asked and all connected ok

cable in Eth0    cable in Eth2   NO cable in Eth1 booted ok and obtained ip addresses through DHCP

cable in Eth0    cable in Eth2   cable in Eth1  booted ok and obtained ip addresses through DHCP

Reboot by unplugging power and ip address obtained ok through DHCP

Im using
Firmware Version   OpenWrt SNAPSHOT r13960-ff8cdd5395 / LuCI Master git-20.206.32620-95d004f
Kernel Version 5.4.52

hope this helps

On Tue, 5 Jan 2021 at 20:47, Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2169.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2170.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2171.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2172.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware
Reply | Threaded
Open this post in threaded view
|

Re: Suricata on the Shield

Roadrunnere42
Cant wait to try the shield with snort3 when you release it.

Andy

On Wed, 6 Jan 2021 at 10:27, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
You could fix that 😂. Actually, I'm at the point I've got Rust lang working, Suricata and Snort3 working, I'm about finished I think.  

On Wed, Jan 6, 2021, 5:22 AM Turrican [via Itus Networks Owners Forum] <[hidden email]> wrote:
Sounds like the issue I was getting on my shields for a while, if I recall we though it was a thermal issue, not sure if it was or not though. l have stopped using them now and to be honest The fw is a mess on both devices so can really help to test


From: Grommish [via Itus Networks Owners Forum] <[hidden email]>
Sent: Wednesday, January 6, 2021 10:19:58 AM
To: Turrican <[hidden email]>
Subject: Re: Suricata on the Shield
 
Wonder if it's a hardware issue on my device then? No idea. Thanks for checking! 

On Wed, Jan 6, 2021, 4:08 AM Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
I did the test as asked and all connected ok

cable in Eth0    cable in Eth2   NO cable in Eth1 booted ok and obtained ip addresses through DHCP

cable in Eth0    cable in Eth2   cable in Eth1  booted ok and obtained ip addresses through DHCP

Reboot by unplugging power and ip address obtained ok through DHCP

Im using
Firmware Version   OpenWrt SNAPSHOT r13960-ff8cdd5395 / LuCI Master git-20.206.32620-95d004f
Kernel Version 5.4.52

hope this helps

On Tue, 5 Jan 2021 at 20:47, Roadrunnere42 [via Itus Networks Owners Forum] <[hidden email]> wrote:
Hi
Will Try tomorrow when the house is empty.

On Tue, 5 Jan 2021 at 18:28, Grommish [via Itus Networks Owners Forum] <[hidden email]> wrote:
Interesting development and I'm not sure how/where to attribute this (I'm still testing).

I was having issues loading an image and the system would not pickup a DHCP address on eth0.  We've seen this issue in the past and were never able to track it down.  After blowing the Shield up to the point I am having to TFTP a rescue image, I noticed I have any issues with the network port IN THE FIRMWARE..  Eh, this is new?

I've tracked it down to the following: If the Shield is booted with a cable plugged into Eth1, the ports will never work.  If you unplug the Eth1 cable (Eth0/Eth2 seem fine) it boots fine. It's either a CABLE issue or a FIRMWARE issue.  I'm testing the cable as soon as I can, but I wonder if anyone wants to try and confirm this on their device?  Simply put, cold-boot with a cable not plugged into Eth1, make sure it works..  Plug eth1 in, reboot..  If this works as a bug, eth0 will NOT have an IP address.  If so, unplug, reboot and see if the IP on eth0  comes back up.

Just as a FYI if you get issues with picking up a DHCP address, try that :)
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2168.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2169.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2170.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2171.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2172.html
To unsubscribe from [FIRMWARE] Itus Shield v2, click here.
NAML
Running Itus Shield v2 Firmware



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Shield-v2-tp2014p2173.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML
Reply | Threaded
Open this post in threaded view
|

Update on the Shield

Grommish
Administrator
Hey anyone who still receives reply notifications! :)

I'm calling a halt to base OpenWrt development for the Shield.  The only reason I had a separate repo for OpenWrt source was to maintain the Bridge and Gateway modes, and to test to see if setting the Kernel arch to Octeon3 vs Octeonplus produced any increase in performance.

It did not increase performance, and frankly, if anyone NEEDS the other slots, they can hit me up.

The device is officially supported by OpenWrt now.  It already receives "Snapshot" images builds in the development branch and will receive "Official" images when the next major release (20/21.xx) drops.

What does this mean to you?

First, you should move to the Snapshot images if you already haven't.  This includes folks who are on my development images.  I do NOT know if running the sysupgrade file will update the system or not.  Since the arch is different (Octeon3 vs Octeonplus), it may not.

If it does NOT allow a direct upgrade, all you need to do is download the itus_shield-router-initramfs-kernel.bin and put in /dev/mmcblk1p1 as ItusrouterImage, reboot, then run the upgrade.

Please be aware that, by default, LuCI is NOT installed..  Once you install and run the sysupgrade, you can use opkg to install LuCI.  The ability to use opkg is one of the advantages of using the SnapShot builds.

If you need any HELP with this, please let me know.
Running Itus Shield v2 Firmware
Reply | Threaded
Open this post in threaded view
|

Re: Update on the Shield

user8446
Administrator
Hey @Grommish

Got the latest official stable v21.03.3 loaded and you mentioned earlier that software & hardware flow offloading should be enabled. Software offloading is not default checked and the hardware one isn't available in LuCI.

Do you still recommend both of these be on?

Also, it appears the memory leak is fixed according to your discussion on this OpenWrt thread: https://forum.openwrt.org/t/upstream-kernel-memleak-5-10-octeon-ethernet-ko/111827/44

So would it be ok to upgrade to the next stable v22.03 when released?

Again, nice work! Cheers!
Running the latest OpenWrt stable release
1 ... 4567