Sophos SG 105w Rev 3

Sophos SG105w is a four-port router/firewall appliance with built-in Wireless AC networking. Architecture-wise, it's a very straightforward 64-bit PC, or, in OpenWrt terms, an x64 target.

SG 105w Rev.3 runs on an Intel Atom E3930 processor with 2 GB or RAM, and a 64 GB SSD. Wired networking is handled by an Intel I211 Gigabit Ethernet card, wireless, by a Qualcomm Atheros QCA986x/988x wireless AC card.

Connectivity options for management include two console ports (RJ-45 and micro-USB), two USB type A ports, and an HDMI port.

Sophos SG 105w has been confirmed to work with 22.03.2 for x86_64. Both the x86-64-generic-ext4-combined image and the generic-squashfs-combined image have been confirmed as working.

OpenWrt install URLs (either image will work):

x86-64-generic-ext4-combined image:

https://downloads.openwrt.org/releases/22.03.2/targets/x86/64/openwrt-22.03.2-x86-64-generic-ext4-combined.img.gz

generic-squashfs-combined image:

https://downloads.openwrt.org/releases/22.03.2/targets/x86/64/openwrt-22.03.2-x86-64-generic-squashfs-combined.img.gz

There are two ways to install OpenWrt on the SG 105w:

  1. Take the SSD out of the device and write the installation image directly onto it
  2. Boot the device from a USB stick and copy OpenWrt onto the device's SSD

The first method is rather self-explanatory, so let's spend some time on the second.

Make a bootable USB stick with OpenWrt on it. Then, before you turn on your SG 105w:

  • Connect the port labeled LAN to an upstream router providing Internet access and DHCP service. To repeat, this is the port that OpenWrt will designate as WAN, never mind the label.
  • Connect your command-and-control devices (either a console cable to a computer or a monitor to the HDMI port and a keyboard to one of the USB ports).
  • Connect your bootable USB stick to the SG105w.

Next, turn on the SG 105w. The SG 105w should recognize the bootable USB media. If it doesn't and begins to load stock firmware instead, reboot the device, access BIOS by repeatedly pressing the Del od Esc key on boot and adjust boot device order as you would on a regular PC.

If all goes well, you will eventually see this message among others:

Please press Enter to activate this console.

When you see it, do as requested. You will be shown the OpenWrt logo and taken to the command line.

At this point, the SG 105w should be able to connect to the upstream device and the Internet. Verify that you have a connection. For example, send a ping to Google:

ping -c 3 google.com 

Next, verify the naming of the primary SSD; you will need it to install OpenWrt onto it. It's probably going to be sda, but it doesn't hurt to check. To check, install the lsblk utility:

opkg update && opkg install lsblk

Once that is done, run:

lsblk 

You will be shown a list of drives and partitions present on the system and their sizes. Most likely, the SSD will be identified as sda and the USB drive from which the device is now running, as sdb. You should be able to tell which is which just by looking at sizes.

Next, download and unzip the image file. The example below assumes that we are installing a SuashFS image of OpenWrt 22.03.2:

cd /tmp
wget https://downloads.openwrt.org/releases/22.03.2/targets/x86/64/openwrt-22.03.2-x86-64-generic-squashfs-combined.img.gz
gunzip openwrt-*.img.gz

Now write OpenWrt onto the SSD:

dd if=openwrt-22.03.2-x86-64-generic-squashfs-combined.img bs=1M of=/dev/sda

The SSD should be ready to serve as a boot drive now. Halt the SG 105w:

halt

Wait until you see the message:

reboot: Power down

At this point, the power button on the SG105w should change from blue (the device is on) to red (the device is connected to power, but is off). Remove the USB stick from the SG 105w.

Post-Installation Configuration

Whatever installation method you used, you should now have a device capable of wired LAN and WAN connections. Wireless, however, it still not configured. To enable wireless networking, turn the device back on and install a few additional packages:

opkg update && opkg install hostapd ath10k-firmware-qca988x kmod-ath10k

Then, configure wireless networking per OpenWrt documentation (either via LuCI or by editing /etc/config/wireless).

generic.sysupgrade

You can upgrade via LuCI or using sysupgrade on the command line.

  • Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
  • Upload image file for sysupgrade to LuCI
  • Wait for reboot

Log in as root via SSH on 192.168.1.1, then enter the following commands:

cd /tmp
wget https://downloads.openwrt.org/releases/XXX/targets/x86/64/xxx.img.gz
gunzip openwrt-*.img.gz
sysupgrade /tmp/xxx.img.gz

The default network configuration is:

Interface Name Description Default configuration
br-lan EXAMPLE LAN & WiFi EXAMPLE 192.168.1.1/24
vlan0 (eth0.0) EXAMPLE LAN ports (1 to 4) EXAMPLE None
vlan1 (eth0.1) EXAMPLE WAN port EXAMPLE DHCP
wl0 EXAMPLE WiFi EXAMPLE Disabled

</WRAP>

FIXME Please fill in real values for this device, then remove the EXAMPLEs

Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port
Internet (WAN) EXAMPLE 4
LAN 1 EXAMPLE 3
LAN 2 EXAMPLE 2
LAN 3 EXAMPLE 1
LAN 4 EXAMPLE 0

hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.

FIXME Please fill in real values for this device, then remove the EXAMPLEs

The Sophos SG 105w has the following buttons:

BUTTON Event
EXAMPLE Reset reset
EXAMPLE Secure Easy Setup ses
EXAMPLE No buttons at all. -

FIXME

  1. This table is automatically generated, once the correct filters for Brand and Model are set.
  2. If you see “Nothing.” instead of a table, please edit this section and adjust the filters with the proper Brand and Model. Just try, it's easy.
  3. If you still don't see a table here, or a table filled with '¿': Is there already a Techdata page available for Sophos SG 105w Rev 3? If not: Create one.
  4. If you see a table with the desired device data, everything is OK and you can delete this text and the <WRAP> that encloses it.
  5. If it still doesn't work: Don't panic, calm down, take a deep breath and contact a wiki admin (tmomas) for help.
Nothing.

Front:
Insert photo of front of the casing

Back:
Insert photo of back of the casing

Backside label:
Insert photo of backside label

Note: This will void your warranty!

FIXME Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, …

  • To remove the cover and open the device, do a/b/c

Main PCB:
Insert photo of PCB

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:
Insert photo of PCB with markings for serial port

FIXME Replace EXAMPLE by real values.

Serial connection parameters
for Sophos SG 105w Rev 3
EXAMPLE 115200, 8N1, 3.3V

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

None so far.

COPY HERE THE BOOTLOG WITH THE ORIGINAL FIRMWARE


COPY HERE THE BOOTLOG ONCE OPENWRT IS INSTALLED AND RUNNING


Space for additional notes, links to forum threads or other resources.

FIXME Add tags below, then remove this fixme.

How to add tags

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2023/01/02 21:45
  • by nc1