Image and use Stormshield SN300 with openwrt
I have already written a little about the Stormshield SN300, about the components and specifications. You can read more about it here -> https://github.com/bmn-m/Stormshield-SN300-opnsense#stormshield-sn300
OPNSense runs on the Stormshioeld SN300, but rather bad than good. Especially the load of the singlecore CPU is quite high with OPNSense. In the Linux world there are often already suitable distributions for the needed purpose. We have a piece of hardware that we want to use as a firewall router? So what is more obvious than to adapt OpenWrt for our purposes... Especially the low hardware requirements speak for the use of OpenWrt. Don't ask me for the exact hardware requirements for OpenWrt, I couldn't find them. Make yourselves a picture: https://openwrt.org/toh/recommended_routers.
First of all we need to download the OpenWrt image, write it to flash memory and customize it.
I have downloaded the https://downloads.openwrt.org/releases/22.03.2/targets/x86/64/openwrt-22.03.2-x86-64-generic-ext4-combined.img.gz image.
Unpack it with:
gzip -dk openwrt-22.03.2-x86-64-generic-ext4-combined.img.gz
Next we write the unpacked image to the 2GB flash memory.
With lsblk you can check which blockdevice you have to write to, in my case /dev/sda:
dd if=openwrt-22.03.2-x86-64-generic-ext4-combined.img of=/dev/sda
If you don't like the console, you can also use gnome-disk-utilitys. Next we mount the rootfs to edit the network config an add a little programm we need later.
/dev/sda2 /media/bmn-m/rootfs ext4 (rw,nosuid,nodev,relatime,uhelper=udisks2)
Now we have to copy the "network" file i created to (your mountpoint)/etc/config/. Please edit the IP to your needs. Then we have to download the screen package from https://downloads.openwrt.org/releases/22.03.2/packages/x86_64/packages/screen_4.8.0-2_x86_64.ipk and copy it to (your mountpoint)/root/. I will explain these adjustments later.
As the device is still on your PC, lets rezise the rootfs partition:
fdisk /dev/sda1
e2fsck -f -y -v -C 0 '/dev/sda2'
resize2fs -p '/dev/sda2
Open fdisk and observe with p where the partition starts, remove it (d), and create (n) larger one on the same place. Pay attention on its start sector and use exactly the same sector when creating the new partition. Now set the ending sector a little smaller than the last usable sector. Exit fdisk with writing the changes (w). Sync and unmount your flash drive, mount the hardware back into the device and boot. Now you should be able to reach the Stormshield SN300 at the IP address you set via http in the Network file.
Now if you login you should be able to observe smt. like this:
Interfaces
Devices
If you were not able to connect to the Stormshield via Web interface, then we have to config the built in switch via console.