How configure the MGMT port?

Hi,

I assume you are using XG hardware and talking about the console port?

The port is usable with a terminal plugged in no accessible from with the XG.

Ian

Hi,

Thanks for your response.

Is not the Console Port, I said it right, is the MGMT Port.

My hardware is XG430 https://www.firewallshop.es/344-home_default/sophos-xg-430.jpg

Greetings.

Hi,

From Advanced Shell, I've seen something interesting in /static/pciconf, exactly in files nameif_XG430_WP01.conf and nameif_XG430_WP02.conf, in second file not appear nothing about MGMT Port.

XG430_WP02_SFOS 17.0.5 MR-5# cat static/pciconf/nameif_XG430_WP01.conf
4
slot_0=0000:00:1c.0,PortB1,PortB2,PortB3,PortB4,PortB5,PortB6,PortB7,PortB8
slot_1=0000:00:01.1,PortC1,PortC2,PortC3,PortC4,PortC5,PortC6,PortC7,PortC8
slot_2=0000:00:01.0,PortA1,PortA2,PortA3,PortA4,PortA5,PortA6,PortA7,PortA8
slot_m=0000:00:1c.4,PortMGMT

XG430_WP02_SFOS 17.0.5 MR-5# cat static/pciconf/nameif_XG430_WP02.conf
11
slot_0=0000:00:1c.0,Port1
slot_1=0000:00:1c.1,Port2
slot_2=0000:00:1c.2,Port3
slot_3=0000:00:1c.3,Port4
slot_4=0000:00:1c.4,Port5
slot_5=0000:00:1c.5,Port6
slot_6=0000:00:1c.6,Port7
slot_7=0000:00:1c.7,Port8
slot_8=0000:00:1d.0,Port9,Port10
slot_9=0000:00:01.0,PortB1,PortB2,PortB3,PortB4,PortB5,PortB6,PortB7,PortB8
slot_10=0000:00:01.1,PortA1,PortA2,PortA3,PortA4,PortA5,PortA6,PortA7,PortA8

Hi,

HA enabled? 

Did you use the initial wizard at startup - He will create a bridge between Port1 and PortMGMT.

Hi,

Thanks for your response.

HA is disabled.

I use only a XG hardware appliance.

I used the initial wizard at startup and the MGMT physical Port didn't appear in the list.

And the port blink when I connect a cable.

Can you check your current setup, if you have a Bridge instead of Port1? 

Would recommend you to open a Support Case.

Saw another appliance couple days ago with the same behavior. Needs to be check by support. 

I don't have any Bridge configure.

Thanks for your recomendation, I'm glad to know that I'm not the only one with that problem.

Hi,

KB Article with required information: 132062 : Information on IPMI interface on SG/XG 4xx Rev.2 hardware appliances

Thanks for mentioning that you have XG 430 Hardware.

The SG/XG 4xx Rev.2 Hardware's having the port named as "MGMT Port" is not a regular RJ45 port, due to which it's not shown on the UI's Interfaces List as it's not mapped as a normal interface.

This MGMT interface is actually an 'IPMI/SoL/BMC' interface. (Intelligent_Platform_Management_Interface) (Only available on SG/XG 4xx  Rev.2 hardware)

https://www.sophos.com/en-us/medialibrary/pdfs/factsheets/sophos-xg-series-appliances-brna.aspx

IPMI interface(MGMT interface) is used as a 'Hardware Monitoring Interface' for monitoring hardware parameters such as voltages, temperature, BIOS, Fan Speed, power supply, reboot-shutdown-factory reset-reimage the firewall etc.

IPMI uses the same UDP port number (623 in decimal) as the ASF (Alert Standard Forum) protocol.

Information Related to IPMI: https://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface

Some configuration information for IPMI-MGMT Port of XG 4xx hardware related to IP/Username/Password: sophos-quick-start-guide-xg-430-450-rev2.pdf

You need to connect the laptop's LAN port to the MGMT port, then assign your laptop a static IP address as 192.168.1.2/24 with gateway 192.168.1.1. Open the browser and access http://192.168.1.1 that will open up the UI of IPMI-Java SOL (MegaRAC) where default credentials are admin/admin. Over there on the dashboard, you will get the required information of CPU, temp etc.  As well as you can edit the configuration and other things too.

Note: The 2 Management ports available on XG550, XG650 & XG750 are not IPMI interfaces, they are regular RJ45 ports just named as MGMT ports, which could be seen on the UI's interfaces list and edit normally.

Hope above may address your query [:)]

Thanks

Hi,

do you have any manual for this interface?

I'm trying to connect JSOL for remote control, but the windows stays black e nothing happens.

Thanks.

Hi,

The Remote Control JavaSOL file is used to have console access of firewall.

The firewall's console works at the baud rate 38400.

Have you tried running jsol file using "Volatile & Non-Volatile bit rate as 38.4K"? 

After that it should show the console screen OR else try pressing Enter Key on the black screen to see whether it asks to enter admin password and it should show the console screen.

Regarding the manual, we are still preparing an article. Once it's done it would be globally available, as well as I will mention the link in this article.

Thanks