Version 2.29.185: Detection of all interfaces on Sophos XG210 Hardware

This hardware - based on a Celeron G9300 - is becoming freely available now that many service contracts are expiring. The hardware specs and its embedded switching modules offers some promise with IPFIRE …

But…

It will not detect the labelled “WAN” Interface; It will detect (and LED flash) basically every other hardware interface but the labelled “WAN” interface…

If Ubuntu 24.04 is deployed this interface is enumerated as /dev/enp3s0 …

Behaviour does not make sense with IPFIRE 2.29.185 .

Suggestions? Even kernel custom builds suggestions appreciated :slight_smile:

[ Mind you it can be overcome by just ignoring the issue and assigning a different port; yet it would be good to “fix” the actual issue as it is not just a problem with IPFIRE … ]

Without more details we can do nothing. Which hardware, chipset, used nic …

Intel Ark not know such SoC.?

Ubuntu 24.04 use kernel 6.8.x so this may added later to the kernel. IPFire use the newest lts kernel wich is 6.6.x

1 Like

Oops G3900 ! … Typo ! Dirty Glasses :wink:

Old hardware though … https://www.intel.com/content/www/us/en/products/sku/90741/intel-celeron-processor-g3900-2m-cache-2-80-ghz/specifications.html

cat /proc/cpuinfo
processor	: 0
vendor_id	: GenuineIntel
cpu family	: 6
model		: 94
model name	: Intel(R) Celeron(R) CPU G3900 @ 2.80GHz
stepping	: 3
microcode	: 0xf0
cpu MHz		: 799.999
cache size	: 2048 KB
physical id	: 0
siblings	: 2
core id		: 0
cpu cores	: 2
apicid		: 0
initial apicid	: 0
fpu		: yes
fpu_exception	: yes
cpuid level	: 22
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 sdbg cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust erms invpcid rdseed smap clflushopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm arat pln pts hwp hwp_notify hwp_act_window hwp_epp vnmi md_clear flush_l1d arch_capabilities
vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad ept_1gb flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest ple pml
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds mmio_stale_data retbleed
bogomips	: 5599.85
clflush size	: 64
cache_alignment	: 64
address sizes	: 39 bits physical, 48 bits virtual
power management:

(Same for Processor 2)

root@XG-210:/home/radio# lspci
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Host Bridge/DRAM Registers (rev 07)
00:01.0 PCI bridge: Intel Corporation 6th-10th Gen Core Processor PCIe Controller (x16) (rev 07)
00:02.0 VGA compatible controller: Intel Corporation HD Graphics 510 (rev 06)
00:14.0 USB controller: Intel Corporation 100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller (rev 31)
00:14.2 Signal processing controller: Intel Corporation 100 Series/C230 Series Chipset Family Thermal Subsystem (rev 31)
00:16.0 Communication controller: Intel Corporation 100 Series/C230 Series Chipset Family MEI Controller #1 (rev 31)
00:17.0 SATA controller: Intel Corporation Q170/Q150/B150/H170/H110/Z170/CM236 Chipset SATA Controller [AHCI Mode] (rev 31)
00:1c.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #5 (rev f1)
00:1c.5 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #6 (rev f1)
00:1c.6 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #7 (rev f1)
00:1c.7 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #8 (rev f1)
00:1d.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #9 (rev f1)
00:1d.1 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #10 (rev f1)
00:1f.0 ISA bridge: Intel Corporation H110 Chipset LPC/eSPI Controller (rev 31)
00:1f.2 Memory controller: Intel Corporation 100 Series/C230 Series Chipset Family Power Management Controller (rev 31)
00:1f.3 Audio device: Intel Corporation 100 Series/C230 Series Chipset Family HD Audio Controller (rev 31)
00:1f.4 SMBus: Intel Corporation 100 Series/C230 Series Chipset Family SMBus (rev 31)
02:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
03:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
04:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
05:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
06:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
07:00.0 PCI bridge: Pericom Semiconductor PI7C9X2G404 EL/SL PCIe2 4-Port/4-Lane Packet Switch (rev 05)
08:01.0 PCI bridge: Pericom Semiconductor PI7C9X2G404 EL/SL PCIe2 4-Port/4-Lane Packet Switch (rev 05)
08:02.0 PCI bridge: Pericom Semiconductor PI7C9X2G404 EL/SL PCIe2 4-Port/4-Lane Packet Switch (rev 05)
08:03.0 PCI bridge: Pericom Semiconductor PI7C9X2G404 EL/SL PCIe2 4-Port/4-Lane Packet Switch (rev 05)
09:00.0 Ethernet controller: Intel Corporation I211 Gigabit Network Connection (rev 03)
0a:00.0 Ethernet controller: Intel Corporation I210 Gigabit Fiber Network Connection (rev 03)
0b:00.0 Ethernet controller: Intel Corporation I210 Gigabit Fiber Network Connection (rev 03)
root@XG-210:/home/radio# lshw -short
H/W path           Device     Class          Description
========================================================
                              system         XG (Default string)
/0                            bus            XG
/0/0                          memory         64KiB BIOS
/0/3e                         memory         64KiB L1 cache
/0/3f                         memory         64KiB L1 cache
/0/40                         memory         512KiB L2 cache
/0/41                         memory         2MiB L3 cache
/0/42                         processor      Intel(R) Celeron(R) CPU G3900 @ 2.8
/0/43                         memory         8GiB System Memory
/0/43/0                       memory         4GiB DIMM DDR4 Synchronous 2133 MHz
/0/43/1                       memory         [empty]
/0/43/2                       memory         4GiB DIMM DDR4 Synchronous 2133 MHz
/0/43/3                       memory         [empty]
/0/100                        bridge         Xeon E3-1200 v5/E3-1500 v5/6th Gen 
/0/100/1                      bridge         6th-10th Gen Core Processor PCIe Co
/0/100/2           /dev/fb0   display        HD Graphics 510
/0/100/14                     bus            100 Series/C230 Series Chipset Fami
/0/100/14/0        usb1       bus            xHCI Host Controller
/0/100/14/0/1                 bus            Keyboard Hub
/0/100/14/0/1/2    input7     input          Apple Inc. Apple Keyboard
/0/100/14/0/1/3    input6     input          PIXART USB OPTICAL MOUSE
/0/100/14/1        usb2       bus            xHCI Host Controller
/0/100/14.2                   generic        100 Series/C230 Series Chipset Fami
/0/100/16                     communication  100 Series/C230 Series Chipset Fami
/0/100/17          scsi0      storage        Q170/Q150/B150/H170/H110/Z170/CM236
/0/100/17/0.0.0    /dev/sda   disk           256GB Patriot P210 256
/0/100/17/0.0.0/1  /dev/sda1  volume         1023KiB BIOS Boot partition
/0/100/17/0.0.0/2  /dev/sda2  volume         14GiB Linux swap volume
/0/100/17/0.0.0/3             volume         130GiB EFI partition
/0/100/1c                     bridge         100 Series/C230 Series Chipset Fami
/0/100/1c/0        enp2s0     network        I211 Gigabit Network Connection
/0/100/1c.5                   bridge         100 Series/C230 Series Chipset Fami
/0/100/1c.5/0      enp3s0     network        I211 Gigabit Network Connection
/0/100/1c.6                   bridge         100 Series/C230 Series Chipset Fami
/0/100/1c.6/0      enp4s0     network        I211 Gigabit Network Connection
/0/100/1c.7                   bridge         100 Series/C230 Series Chipset Fami
/0/100/1c.7/0      enp5s0     network        I211 Gigabit Network Connection
/0/100/1d                     bridge         100 Series/C230 Series Chipset Fami
/0/100/1d/0        enp6s0     network        I211 Gigabit Network Connection
/0/100/1d.1                   bridge         100 Series/C230 Series Chipset Fami
/0/100/1d.1/0                 bridge         PI7C9X2G404 EL/SL PCIe2 4-Port/4-La
/0/100/1d.1/0/1               bridge         PI7C9X2G404 EL/SL PCIe2 4-Port/4-La
/0/100/1d.1/0/1/0  enp9s0     network        I211 Gigabit Network Connection
/0/100/1d.1/0/2               bridge         PI7C9X2G404 EL/SL PCIe2 4-Port/4-La
/0/100/1d.1/0/2/0  enp10s0    network        I210 Gigabit Fiber Network Connecti
/0/100/1d.1/0/3               bridge         PI7C9X2G404 EL/SL PCIe2 4-Port/4-La
/0/100/1d.1/0/3/0  enp11s0    network        I210 Gigabit Fiber Network Connecti
/0/100/1f                     bridge         H110 Chipset LPC/eSPI Controller
/0/100/1f/0                   system         PnP device PNP0c02
/0/100/1f/1                   communication  PnP device PNP0501
/0/100/1f/2                   communication  PnP device PNP0501
/0/100/1f/3                   input          PnP device PNP0f03
/0/100/1f/4                   system         PnP device PNP0c02
/0/100/1f/5                   system         PnP device PNP0c02
/0/100/1f/6                   system         PnP device PNP0b00
/0/100/1f/7                   generic        PnP device INT3f0d
/0/100/1f/8                   system         PnP device PNP0c02
/0/100/1f/9                   system         PnP device PNP0c02
/0/100/1f/a                   system         PnP device PNP0c02
/0/100/1f/b                   system         PnP device PNP0c02
/0/100/1f.2                   memory         Memory controller
/0/100/1f.3        card0      multimedia     100 Series/C230 Series Chipset Fami
/0/100/1f.3/0      input10    input          HDA Intel PCH HDMI/DP,pcm=3
/0/100/1f.3/1      input11    input          HDA Intel PCH HDMI/DP,pcm=7
/0/100/1f.3/2      input12    input          HDA Intel PCH HDMI/DP,pcm=8
/0/100/1f.4                   bus            100 Series/C230 Series Chipset Fami
/1                            power          To Be Filled By O.E.M.
/2                 input0     input          Sleep Button
/3                 input1     input          Power Button
/4                 input2     input          Power Button
/5                 input9     input          Video Bus

All nic’s seems to have the same chips. But one of then is behind a PCIe/PCIe multiplexer. (But this is not enp3s0)

can you made the same lists also with IPFire kernel.
Have all the nic’s valid mac addresses? IPFire cannot handle nic’s with invalid mac’s

Hi Arne,

MACs are not invalid … I’ll drop a new SSD into the device and replicate some of the output here into this post.

root@XG-210:/home/radio# nmcli -f GENERAL.DEVICE,GENERAL.TYPE,GENERAL.HWADDR dev show
GENERAL.DEVICE:                         enp3s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:59

GENERAL.DEVICE:                         lo
GENERAL.TYPE:                           loopback
GENERAL.HWADDR:                         00:00:00:00:00:00

GENERAL.DEVICE:                         enp10s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5E

GENERAL.DEVICE:                         enp11s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5F

GENERAL.DEVICE:                         enp2s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:58

GENERAL.DEVICE:                         enp4s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5A

GENERAL.DEVICE:                         enp5s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5B

GENERAL.DEVICE:                         enp6s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5C

GENERAL.DEVICE:                         enp9s0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         7C:5A:1C:4B:56:5D

Interesting … Now not seeing issues with a 2.29.185 deployment and the labelled “Wan” interface (termed enp3s0)

Only difference in procedure this time was to remove all cables from NICs and then a power off AFTER the deployment step…

There was an experiment to supply “green” to the equivalent of enp6s0 … then mysteriously enp3s0 … which has been missing … becomes available.

Glitch? Firmware? Hardware issue (this device was replaced due to the Sophos S/W mulched). Registers in wrong states? Later kernel kicking device into an operational state? No idea at this point !

All steps are to be replicated tomorrow … hopefully no further posts !

Is the cpu upgradable in this device?

Phisically seems so
image
(source: eBay for Celeron G3900)
However, i don’t bet for a “full skylake support” into XG210 bios.
Every “T” processor would be a significant drop in TDP and, outiside from i3, also a significant bump up for cache L2 and L3.

I found this - https://www.reddit.com/r/sophos/comments/15xrhd4/cpu_upgrade_for_sg230r2/

Why would one want to upgrade a CPU on the SOCs? One can get cheaper and more capable hardware for almost next to nothing these days …

Back to original… The original system was pushed out of service as it became unreliable and had to be rebooted.

This port was clearly misbehaving; its not now. Thois port was not being detected nor was it operational not only just with 2.29.185; it was also showing the same issue with PFSENSE and OpenSense.

Perhaps the U 24.04 kicked something somewhere back into life? There are known vulnerabilities with the Sophos systems at the best of times !

Thanks for the assistance … But this has been more of a “think out aloud” solution !

I have replaced a G3900 (51W, DualCore, 2MB Cache) in a cheap HP 1L Desktop PC with a I5-6500T. (35W, QuadCore, 6MB Cache) It has two cores more, needs much less power and is significant faster even with lower base clock.

As @arne_f stated, more options are available on the used market for at least increase computational power, sometimes with reduced maximum consumption.

I mean…
If the OS can take advantage of an efficient power management, having more cpu power even with more maximum power consumption could allow, in long term, lower power usage due to less time at maximum cpu performances…
Celeron, Pentium and some i3 of that days are “born to be slow and sluggish”. Then Ryzen kicked in and Intel get somehow… straight-er