WatchGuard Firebox T10 (DS1AE3)

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
WatchGuard Firebox T10
WikiDevi.wi-cat.ru WatchGuard Firebox T10 (DS1AE3)
3rd Party Firmware
dd-wrt Status Unknown
OpenWrt Supported
Tomato any flavor Incompatible
Gargoyle Status Unknown
Platform
BrandModelRev WatchGuard Firebox T10
Model Part Number DS1AE3
Board ID 7016A0815014
Type security appliance
CPU1 checkY Freescale (NXP) P1010
CPU1 Type Power QorIQ
CPU1 Speed 533 MHz
Flash1 Chip SK hynix H27U4G8F2DTR-BC
Flash1 Size 512 MiB 536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br /> (NAND)
Flash2 Chip Macronix MX25L8006EM2I-12G
Flash2 Size 1 MiB1,048,576 B <br />8,192 Kib <br />1,024 KiB <br />8 Mib <br />9.765625e-4 GiB <br /> (SPI NOR)
RAM1 Size 512 MiB 536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br />
RAM1 Chip Nanya NT5CC128M16IP-DI x 2
ETH chip1 Freescale (NXP) P1010
Switch 1 Atheros AR8033
Switch 2 Atheros AR8033
Switch 3 Atheros AR8033
Ethernet Port Count 1-1GbE-WAN
2-1GbE-LAN
Wired Standard IEEE 802.3i/3u/3ab
Stock bootloader U-Boot 2011.03
Stock FW OS Linux 3.12.19-rt30
Expansion IF types USB 2.0
USB ports 1
USB Hub Compatible Untested
Power 12 VDC, 1.2 A
Connector type barrel
5.5 mm (OD)
2.1 mm (ID)
9.5 mm (LEN)
Serial Port (UART) yes, console port, RJ45, (115200 8N1)

Flags:
RTC w/ battery, power switch, heatsink

Additional chips
2-Wire RTC;Seiko;S-35390A;;1;
Multichannel RS-232 Line Driver;TI;MA3232C;;1;
Trusted Platform Module;Atmel;AT97SC3204T;;1;
2A Bus Termination Regulator;Fitipower;FP6137E;;1;
30V 4.4A P-Channel MOSFET;Sinopower;SM3095;;2;
4 Output PCIe Gen 1/2 Synthesizer;Renesas;IDT5V41186;;1;

Other

Default IP address: 10.0.1.1
the IP 10.0.1.1 is used by 21 additional devices
of which 19 are WatchGuard devices
Default login user: admin
Default login password: readwrite
admin:readwrite credentials used by 25 additional devices
of which 25 are WatchGuard devices

Manuf/OEM/ODM Senao
3rd Party Firmware Support OpenWrt • (List | Dev | DLs)
Retail
Availability End of Life
End of Life date 30 June 2023
ASIN B00IUXW0WK
Country of manuf Taiwan
 CPU1 brandFLA1RAM1
WatchGuard Firebox T10 (DS1AE3)Freescale (NXP)512 MiB536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br />512 MiB536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br />
WatchGuard Firebox T10-W (DS3AE3)Freescale (NXP)512 MiB536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br />512 MiB536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br />

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented Freescale (NXP) SoC's with specifications, see Freescale.

For a list of all currently documented WatchGuard devices with specifications, see WatchGuard.

Overview

Hardware specification

  • CPU: Freescale P1010 PowerPC (@533MHz)
  • Memory: 512MB (SDRAM) DDR3
  • Storage: 1MB SPI Flash, 512MB NAND Flash
  • Network: 3x Gigabit Ethernet ports
  • USB: 1x USB 2.0 ports
  • Power: 12V, 1.25A via barrel

Links of Interest

Hardware Guide  • Quick Start Guide

Flashing

Flashing OpenWrt

Target: mpc85xx
Subtarget: p1010
Package architecture: powerpc_8540
Supported Since Commit
Support started version: 22.03.4
Current supported version: 25.12.4
LAN Hardware: Atheros AR8033
Installation method(s):
see git-commit
Recovery method(s):
see git-commit
Comment:
See https://github.com/openwrt/openwrt/issues/13505 for fix to install instructions
git • >>
mpc85xx: add support for Watchguard Firebox T10
Hardware
--------
SoC:    Freescale P1010
RAM:    512MB
FLASH:  1 MB SPI-NOR
        512 MB NAND
ETH:    3x Gigabite Ethernet (Atheros AR8033)
SERIAL: Cisco RJ-45 (115200 8N1)
RTC:    Battery-Backed RTC (I2C)

Installation
------------

1. Patch U-Boot by dumping the content of the SPI-Flash using a SPI
   programmer. The SHA1 hash for the U-Boot password is currently
   unknown.

   A tool for patching U-Boot is available at
   https://github.com/blocktrron/t10-uboot-patcher/

   You can also patch the unknown password yourself. The SHA1 hash is
   E597301A1D89FF3F6D318DBF4DBA0A5ABC5ECBEA

2. Interrupt the bootmenu by pressing CTRL+C. A password prompt appears.
   The patched password is '1234' (without quotation marks)

3. Download the OpenWrt initramfs image. Copy it to a TFTP server
   reachable at 10.0.1.13/24 and rename it to uImage.

4. Connect the TFTP server to ethernet port 0 of the Watchguard T10.

5. Download and boot the initramfs image by entering "tftpboot; bootm;"
   in U-Boot.

6. After OpenWrt booted, create a UBI volume on the old data partition.
   The "ubi" mtd partition should be mtd7, check this using

   $ cat /proc/mtd

   Create a UBI partition by executing

   $ ubiformat /dev/mtd7 -y

7. Increase the loadable kernel-size of U-Boot by executing

   $ fw_setenv SysAKernSize 800000

8. Transfer the OpenWrt sysupgrade image to the Watchguard T10 using
   scp. Install the image by using sysupgrade:

   $ sysupgrade -n <path-to-sysupgrade>

   Note: The LAN ports of the T10 are 1 & 2 while 0 is WAN. You might
   have to change the ethernet-port.

9. OpenWrt should now boot from the internal NAND. Enjoy.

Pictures

User Images