Hi to all,
we have a customer who bought 10 FGT 60D in a package with D-Link USB 3G Modems.
Now we try to deploy the first site and ran in different issues with this solution at all.
The modem is part of the Support List and should work, but it always were detected as mass storage
and we are not able to switch the state to modem.
Output of...
fnsysctl cat /proc/bus/usb/devices
T: Bus=02 Lev=02 Prnt=02 Port=00 Cnt=01 Dev#= 6 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 3 P: Vendor=2001 ProdID=a706 Rev= 3.00 S: Manufacturer=D-Link,Inc S: Product=D-Link DWM-156 S: SerialNumber=536591504161600 C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr=500mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage E: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms C: #Ifs= 1 Cfg#= 2 Atr=a0 MxPwr= 98mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none) E: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms C: #Ifs= 1 Cfg#= 3 Atr=e0 MxPwr= 0mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none) E: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
Diagnose sys modem...
FGT60DXXXXXXXX# diagnose sys modem The modem state is 1, poll rate is 300. The modem is not active.
config system modem set status enable set mode redundant set dial-on-demand enable set redial 3 set interface "wan1" set phone1 "*99#" end
config system 3g-modem custom
FGT60DXXXXXXXX (custom) # show
config system 3g-modem custom
edit 1
set vendor "D-Link,Inc"
set model "D-Link DWM-156"
set vendor-id 2001
set product-id 7d02
next
end
Diagnose debug application modemd -1
Plugin
modemd: usb hotplug event action:add vid=0x2001 pid=0xa706 modemd: scan usb device custom_list_load() reset_cur_modem_info:1539 modemd: query 3G modem info get_cur_modem_info:1629 force=1 inited=0 modemd: run_state_machine state 1(inactive) modemd: DOD enabled (do not dial). modemd: run_state_machine state 1(inactive) modemd: DOD enabled (do not dial). modemd: run_state_machine state 1(inactive)
I'm sure, we performed all the required steps but this dongle never run as a modem...
Last Question now and for me the most important:
Is there anybody that have a running solution (best would be in Germany) with USB 3G at a Fortigate 60D Device with Firmware 5.2.3. ?
The customer ask for a solution and if we have to switch to another model or another solution with Fortinet and 3G, he will do it, but I don't know which package is really working. Maybe an Extender works better (as if I dont think so)?
Thanks for all of your ideas!
FCNSA 5, FCNSP 5, NSE 4
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
I've seldom fought with 3/4G usb dongle and even if the model is listed with the same product code it can happen that you have purchased a different revison model :\ in this case the model that it's listed with fnsysctl
Troubleshooter_73 wrote:fnsysctl cat /proc/bus/usb/devices
T: Bus=02 Lev=02 Prnt=02 Port=00 Cnt=01 Dev#= 6 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 3 [style="background-color: #ffff00;"]P: Vendor=2001 ProdID=a706 Rev= 3.00[/style] S: Manufacturer=D-Link,Inc S: Product=D-Link DWM-156 S: SerialNumber=536591504161600 C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr=500mA I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage E: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
indicate an DWM-156 A7 revision with Mediatek chipset: i always use dd-wrt.com wiki and USB_ModeSwitch site as reference because FWIK "3g-modem custom" it's some sort of usb_modeswitch in fortigate land: so i'll try to build a more complete custom profile and see what's the result config system 3g-modem custom edit 1 set vendor "D-Link,Inc" set model "D-Link DWM-156" set vendor-id 2001 set product-id a706 set class-id ff set init-str "5553424312345678000000000000061b000000020000000000000000000000" next end you could also try to disable cd/storage emulation via AT commands but i dont have any cheat-sheet for mediatek chipsets
Best regards, Antonio
I believe you need the huawei equal of "AT^U2DIAG=0" or "ATZRUN=0", can you execute a modem inquiry from the cli ?
Also, I wonder if you could take the modems and write value to the active V0 or V1 profiles via a computer and then try the modem in the fortigate?
disable the autorun storage and then write to AT&W0 and AT&W1
Have anybody ever did this?
PCNSE
NSE
StrongSwan
Hello Emnoc, yes I try to do it on programmatically base since I've found that some models, we use mostly huawei or zte, are slow at disabling features during modeswitch on FGT power-on (i.e. modem not recognized at power-on but work ok upon exec reboot) and disabling cd/store autorun has positive effects on stability. Btw for the sake of knowledge on some recent huawei dongles AT^U2DIAG it's not implemented and you have to use AT^SETPORT ^SETPORT:A1: CDROM ^SETPORT:A2: SD ^SETPORT:A: BLUE TOOTH ^SETPORT:B: FINGER PRINT ^SETPORT:D: MMS ^SETPORT:E: PC VOICE ^SETPORT:1: MODEM ^SETPORT:2: PCUI ^SETPORT:3: DIAG ^SETPORT:4: PCSC ^SETPORT:5: GPS ^SETPORT:6: GPS CONTROL ^SETPORT:7: NDIS ^SETPORT:16: NCM AT^SETPORT? - Display current configuration AT^GETPORTMODE - Display currently active mode AT^SETPORT = "A1, A2; 1,2,3,7, A1, A2" - Set default configuration AT^SETPORT = "A1, A2; 1,2,3,7" - Disable CD+SD after modeswitch (credits go to dd-wrt forums) About Mediatek models I have no information so per your suggestion I would try some AT inquiry commands
Best regards,
Antonio
Created on 08-19-2015 02:53 AM
Antonio Milanese wrote:Btw for the sake of knowledge on some recent huawei dongles AT^U2DIAG it's not implemented and you have to use AT^SETPORT ^SETPORT:A1: CDROM ^SETPORT:A2: SD ^SETPORT:A: BLUE TOOTH ^SETPORT:B: FINGER PRINT ^SETPORT:D: MMS ^SETPORT:E: PC VOICE ^SETPORT:1: MODEM ^SETPORT:2: PCUI ^SETPORT:3: DIAG ^SETPORT:4: PCSC ^SETPORT:5: GPS ^SETPORT:6: GPS CONTROL ^SETPORT:7: NDIS ^SETPORT:16: NCM AT^SETPORT? - Display current configuration AT^GETPORTMODE - Display currently active mode AT^SETPORT = "A1, A2; 1,2,3,7, A1, A2" - Set default configuration AT^SETPORT = "A1, A2; 1,2,3,7" - Disable CD+SD after modeswitch
Where do I have to execute these commands?
Directly by CLI at the Fortigate?
FCNSA 5, FCNSP 5, NSE 4
I want to update this Topic, because we found the solution together with Fortinet Support:
Hardware:
Appliance: Fortigate 60D (the solution should be work with other models also, but we tested with 60D only...)
USB WAN Device: D-Link DWM-156
Config:
FGT60DXXXXXXXXXX (modem) # config system modem FGT60DXXXXXXXXXX (modem) # show config system modem set status enable set pin-init "AT+CPIN=\"5943\"" set mode redundant set dial-on-demand enable set redial 1 set interface "wan1" set phone1 "*99#" set username1 "vf" (only a Placeholder, the provider does not require username, but it should not empty in the config...) set passwd1 ENC ............................ (encoded Password of Provider here...) set extra-init1 "at+cfun=1;AT+CGDCONT=1,\"IP\",\"web.vodafone.de\"" (Vodafone Germany was the test provider) set distance 5 set priority 20 end
FGT60DXXXXXXXXXX # config system 3g-modem custom
FGT60DXXXXXXXXXX (custom) # edit 1
FGT60DXXXXXXXXXX (1) # show config system 3g-modem custom edit 1 set vendor "D-Link" set model "DWM-156" set vendor-id 2001 set product-id a706 set class-id 08 set init-string "inquire=1 msg=5553424312345678000000000000061b000000020000000000000000000000" (that was the issue!) next end
After create default Route for WAN1 with a Distance of 10 (cabled WAN access), set ECMP PING Server and created required Policies, everything works as expected.
Thanks to all for the suggestions and ideas!
FCNSA 5, FCNSP 5, NSE 4
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1709 | |
1093 | |
752 | |
446 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.