RouterBOARD 133: Difference between revisions

From Noisebridge
Jump to navigation Jump to search
No edit summary
m (→‎Configure boot: no enter)
 
(9 intermediate revisions by 4 users not shown)
Line 1: Line 1:
See also: [[Sparky]]
See also: [[Sparky]]


Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf
==<span style="color:#FF00FF; background:#000000">OpenWrt</span>==


CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/


<pre>






BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
<span style="color:red; font-size:120pt;">空</span>
Enter 'help' for a list of built-in commands.


http://meraki.com/


Welcome to your Meraki device.  Please look for developer information at
=== Flashing (kamikaze) ===
http://meraki.com.  We would like to encourage you to play with this
platform and add your own features to it.  However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.


Like hacking on wireless stuff?  Come work with us!  jobs@meraki.com
Setup dhcp and tftp on a computer you can connect to via wired ethernet


Happy Hacking!
Download http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf to /srv/tftp/
00:18:0A:00:F0:DC:/# help


Built-in commands:
sudo dnsmasq -i eth0 --dhcp-range=192.168.1.70,192.168.1.77 --dhcp-boot=openwrt-adm5120-2.6-vmlinux.elf --enable-tftp --tftp-root=/srv/tftp/ -d -u dnsmasq -p0 -K --log-dhcp --bootp-dynamic
-------------------
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait
</pre>


reboot command, followed by any key to enter setup
Connect the RouterBOARD DB-9 serial to computer, and connect with 115200 8N1
<pre>


00:18:0A:00:F0:DC:/# reboot
Power up teh board
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release
 
The system is going down NOW !!
 
Sending SIGTERM to all processes.
 
Sending SIGKILL to all processes.
 
Please stand by while rebooting the system.
Restarting s\0xf9


<pre>
RouterBOOT booter 2.7
RouterBOOT booter 2.7


Line 55: Line 30:
   Memory size:  32 MB
   Memory size:  32 MB


Press any key within 2 seconds to enter setup.
Press any key within 2 seconds to enter setup
</pre>
 
'''''Press any key within 2 seconds'''''


<pre>
RouterBOOT-2.7
RouterBOOT-2.7
What do you want to configure?
What do you want to configure?
Line 74: Line 53:
</pre>
</pre>


==== Configure boot ====


== more console out ==
Press 'o' then '1' to set boot device to ethernet one time.


Routerboard 133 - we have several... here is some console out for you...
Press 'p' then '2' to use dhcp protocol.
io scheduler noop registered
 
io scheduler anticipatory registered (default)
==== Erase NAND ====
io scheduler deadline registered
 
io scheduler cfq registered
Press 'e' to erase/format nand memory. This will clear anything previously installed.
watchdog hb: 90 WDOG0: 0xa32806dd WDOG1: 0x7fff06dd
 
adm5120_wdt_init using heartbeat 90 s cycles 9000
Type 'yes' enter, wait...
watchdog hb: 90 WDOG0: 0xa3280001 WDOG1: 0x7fff0001
 
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
Press 'x', wait...
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
 
eth0: ADM5120 switch port0
==== Install OpenWrt ====
eth1: ADM5120 switch port1
 
eth2: ADM5120 switch port2
<pre>
tun: Universal TUN/TAP device driver, 1.6
BusyBox v1.8.2 (2008-05-30 09:59:52 EEST) built-in shell (ash)
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Enter 'help' for a list of built-in commands.
RB1xx nand
 
NAND device: Manufacturer ID: 0xad, Chip ID: 0x76 (Hynix NAND 64MiB 3,3V 8-bit)
  _______                    ________        __
Scanning device for bad blocks
|      |.-----.-----.-----.|  |  | |.----.| |_
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
|  -  ||  _  |  -__|    ||  |  |  ||  _||  _|
0x00000000-0x00400000 : "/bootpart"
  |_______||  __|_____|__|__||________||__| |____|
0x00400000-0x00800000 : "/storage"
          |__| W I R E L E S S  F R E E D O M
0x00800000-0x00810000 : "paniclog"
KAMIKAZE (bleeding edge, r11293) -------------------
0x00810000-0x04000000 : "extra"
  * 10 oz Vodka      Shake well with ice and strain
usbmon: debugfs is not available
  * 10 oz Triple sec  mixture into 10 shot glasses.
mice: PS/2 mouse device common for all mice
  * 10 oz lime juice  Salute!
NET: Registered protocol family 2
---------------------------------------------------
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
root@OpenWrt:/#
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
</pre>
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
 
TCP: Hash tables configured (established 2048 bind 2048)
<span style="color:#FFFF00; background:#000000; font-size:24pt;">Teh SECRET sauce</span>
TCP reno registered
 
ip_conntrack version 2.4 (256 buckets, 2048 max) - 232 bytes per conntrack
<code>mount /dev/mtdblock2 /mnt; cd /mnt</code>
ip_conntrack_pptp version 3.1 loaded
 
ip_nat_pptp version 3.0 loaded
<code>wget http://yourserver/kernel</code>
ip_tables: (C) 2000-2006 Netfilter Core Team
 
ClusterIP Version 0.8 loaded successfully
<code>cd /; umount /mnt; mount /dev/mtdblock3 /mnt; cd /mnt</code>
TCP bic registered
 
NET: Registered protocol family 1
<code>wget http://yourserver/openwrt-adm5120-2.6-rootfs.tgz</code>
NET: Registered protocol family 17
 
Bridge firewalling registered
<code>gzip -d openwrt-adm5120-2.6-rootfs.tgz; tar xvf openwrt-adm5120-2.6-rootfs.tar; rm openwrt-adm5120-2.6-rootfs.tar; cd /; umount /mnt; sync; reboot</code>
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
 
All bugs added by David S. Miller <davem@redhat.com>
===Downloads===
Freeing unused kernel memory: 9544k freed
*netboot image (stage 0)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf
*kernal (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/kernel
*image (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-rootfs.tgz
*packages (stage 2)
** https://web.archive.org/web/20090210193059/http://downloads.openwrt.org/kamikaze/packages/mipsel/
** http://wifi.ozo.com/airo/openwrt/packages/mipsel/
 
===References===
*http://rb1xx.ozo.com/doku.php
*https://wiki.openwrt.org/toh/mikrotik/common
*https://downloads.openwrt.org/kamikaze/docs/openwrt.html
 
==Meraki Flashed Versions==
 
Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf
 
<span style="color:#00FF00">Note: The following references boards that have a meraki flashed NAND.</span>
 
 
===<span style="color:#00FF00; background:#000000">power</span>===
The board has a non-standard PoE option, there is also a barrel connector that supports 9-28V DC tip positive supply
 
 
===<span style="color:#00FF00; background:#000000">www</span>===
Connecting the first ethernet port (has PoE sticker) to a DHCP enabled network will allow access to some meraki web pages. Browse to the IP to see these pages.
 
*index.cgi
*advanced.html
*configure/index.cgi


init started:  BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary
Some pages are password protected. The username is 'admin' and the password is the serial number. The serial number can be obtained via the serial terminal using 'cat /MERAKI_SERIAL'


Please press Enter to activate this console. yaffs: dev is 32505856 name is "mtdblock0"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.0, "mtdblock0"
yaffs: auto selecting yaffs1
yaffs: dev is 32505857 name is "mtdblock1"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1


=== serial boot output ===


CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/


<pre>
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
Enter 'help' for a list of built-in commands.
Line 148: Line 154:


Happy Hacking!
Happy Hacking!
00:18:0A:00:F1:20:/# adm5120_wdt: starting watchdog w/timeout 90 seconds
00:18:0A:00:F0:DC:/# help
watchdog hb: 90  WDOG0: 0xa3280291  WDOG1: 0x7fff0291
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
wlan: 0.8.4.2 (svn 10828)
ath_rate_sample: 1.2 (svn 10828)
ath_pci: 0.9.4.5 (svn 10828)
PCI: Enabling device 0000:00:02.0 (0000 -> 0002)
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 10.4 phy 6.1 radio 6.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
couldn't load module 'wlan_scan_sta' (-89)
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15


00:18:0A:00:F1:20:/#
Built-in commands:
00:18:0A:00:F1:20:/# click: starting router thread pid 479 (812cb480)
-------------------
wlan: mac acl policy registered
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait
</pre>


!!!!! reading /tmp/mtunnel_state failed: No such file or directory
reboot command, followed by any key to enter setup
<pre>


00:18:0A:00:F1:20:/# couldn't load module 'wlan_scan_monitor' (-89)
00:18:0A:00:F0:DC:/# reboot
unable to load wlan_scan_monitor
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release
 
00:18:0A:00:F1:20:/# reboot
00:18:0A:00:F1:20:/# adm5120_wdt_release: release


The system is going down NOW !!
The system is going down NOW !!
Line 190: Line 177:


Please stand by while rebooting the system.
Please stand by while rebooting the system.
Restar
Restarting s\0xf9


RouterBOOT booter 2.7
RouterBOOT booter 2.7
Line 215: Line 202:
   t - do memory testing
   t - do memory testing
   x - exit setup
   x - exit setup
your choice: r - reset configuration
your choice:  
 
</pre>
 
writing settings to flash... OK




===<span style="color:#00FF00; background:#000000">more console out</span>===


<pre>
RouterBOOT booter 2.7
RouterBOOT booter 2.7


Line 235: Line 222:
mem_detect: disable buffers for both banks
mem_detect: disable buffers for both banks
mem_detect: checking for 64MB chip in 1st bank
mem_detect: checking for 64MB chip in 1st bank
mem_detect: write 0x55555555 to 0xA0000000
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA1000000 is 0x55555555
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: mirrored data found at offset 0x2000000
mem_detect: chip size in 1st bank is 64MB
mem_detect: chip size in 1st bank is 32MB
mem_detect: enable buffers for both banks
mem_detect: enable buffers for both banks
mem_detect: 1x32MB memory found
mem_detect: 1x64MB memory found
<6>ADM5120 revision 8, running at 175MHz
<6>ADM5120 revision 8, running at 175MHz
<6>Boot loader is: RouterBOOT
<6>Boot loader is: RouterBOOT
Line 282: Line 271:
io scheduler deadline registered
io scheduler deadline registered
io scheduler cfq registered
io scheduler cfq registered
watchdog hb: 90  WDOG0: 0xa32806dc WDOG1: 0x7fff06dc
watchdog hb: 90  WDOG0: 0xa32806dd WDOG1: 0x7fff06de
adm5120_wdt_init using heartbeat 90 s cycles 9000
adm5120_wdt_init using heartbeat 90 s cycles 9000
watchdog hb: 90  WDOG0: 0xa3280000  WDOG1: 0x7fff0001
watchdog hb: 90  WDOG0: 0xa3280000  WDOG1: 0x7fff0000
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
Line 320: Line 309:
All bugs added by David S. Miller <davem@redhat.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 9544k freed
Freeing unused kernel memory: 9544k freed
init started:  BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary
init started:  BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary


Line 332: Line 319:
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1
yaffs: auto selecting yaffs1
 
adm5120_wdt: starting watchdog w/timeout 90 seconds
 
watchdog hb: 90  WDOG0: 0xa328028c WDOG1: 0x7fff028c
 
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
 
http://meraki.com/
 
Welcome to your Meraki device.  Please look for developer information at
http://meraki.com.  We would like to encourage you to play with this
platform and add your own features to it.  However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.
 
Like hacking on wireless stuff?  Come work with us!  jobs@meraki.com
 
Happy Hacking!
00:18:0A:00:F1:20:/# adm5120_wdt: starting watchdog w/timeout 90 seconds
watchdog hb: 90  WDOG0: 0xa3280297 WDOG1: 0x7fff0296
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
Line 371: Line 341:
unable to load wlan_scan_sta
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15
wifi0: Atheros 5212: mem=0x11400000, irq=15
click: starting router thread pid 479 (802fd480)
click: starting router thread pid 478 (818d3480)
wlan: mac acl policy registered
wlan: mac acl policy registered
ifconfig
lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.255.255.255
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


wired0    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:20 
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:17
00:18:0A:00:F1:20:/#
!!!!! reading /tmp/mtunnel_state failed: No such file or directory
!!!!! reading /tmp/mtunnel_state failed: No such file or directory
couldn't load module 'wlan_scan_monitor' (-89)
couldn't load module 'wlan_scan_monitor' (-89)
unable to load wlan_scan_monitor
unable to load wlan_scan_monitor
ifconfig
clients  Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:10.128.128.128  Bcast:10.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.255.255.255
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


log0      Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:1.0.0.1  Bcast:1.0.0.3  Mask:255.255.255.252
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


srcr2    Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
          inet addr:6.0.241.32  Bcast:6.255.255.255  Mask:255.0.0.0
Enter 'help' for a list of built-in commands.
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)


to_gw    Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
http://meraki.com/
          inet addr:6.0.241.32  Bcast:6.255.255.255  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


tunnel    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
Welcome to your Meraki device. Please look for developer information at
          inet addr:6.0.241.32 P-t-P:6.0.241.32 Mask:255.255.255.255
http://meraki.comWe would like to encourage you to play with this
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1200  Metric:1
platform and add your own features to itHowever, our lawyers
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
require us to tell you that much of the software on this device is
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
protected by copyrights, and may not be redistributed or sold.
          collisions:0 txqueuelen:500
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


wifi0    Link encap:Ethernet HWaddr 00:18:0A:00:F1:20  
Like hacking on wireless stuff? Come work with us! jobs@meraki.com
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:537 errors:0 dropped:0 overruns:0 frame:93
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:59
          RX bytes:105941 (103.4 KiB)  TX bytes:0 (0.0 B)
          Interrupt:15 Memory:b1400000-b1410000


wired0    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:20 
Happy Hacking!
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
00:18:0A:00:F1:7C:/#  
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
</pre>
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:17
 
wired1    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:21 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:242 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:25791 (25.1 KiB)  TX bytes:1812 (1.7 KiB)
          Interrupt:17
 
00:18:0A:00:F1:20:/# ifconfig
ath0      Link encap:Ethernet  HWaddr 00:18:0A:00:F1:20 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
 
ath2      Link encap:UNSPEC  HWaddr 0A-18-0A-00-F1-20-00-00-00-00-00-00-00-00-00-00 
          UP BROADCAST RUNNING MULTICAST  MTU:1900  Metric:1
          RX packets:434 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:5
          RX bytes:90641 (88.5 KiB)  TX bytes:0 (0.0 B)
 
clients  Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:10.128.128.128  Bcast:10.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
 
lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.255.255.255
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:11 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:990 (990.0 B)  TX bytes:990 (990.0 B)
 
log0      Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:1.0.0.1  Bcast:1.0.0.3  Mask:255.255.255.252
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
 
srcr2    Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:6.0.241.32  Bcast:6.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:0 (0.0 B)  TX bytes:266 (266.0 B)
 
to_gw    Link encap:Ethernet  HWaddr 00:01:02:03:04:05 
          inet addr:6.0.241.32  Bcast:6.255.255.255  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
 
tunnel    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 
          inet addr:6.0.241.32  P-t-P:6.0.241.32  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1200  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
 
wifi0    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:20 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1045 errors:0 dropped:0 overruns:0 frame:121
          TX packets:5 errors:1 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:59
          RX bytes:206128 (201.2 KiB)  TX bytes:534 (534.0 B)
          Interrupt:15 Memory:b1400000-b1410000


wired0    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:20 
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:17


wired1    Link encap:Ethernet  HWaddr 00:18:0A:00:F1:21 
          inet addr:172.30.2.230  Bcast:172.30.3.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:456 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:80
          RX bytes:49138 (47.9 KiB)  TX bytes:2276 (2.2 KiB)
          Interrupt:17


00:18:0A:00:F1:20:/#
!!!!! reading /tmp/upgrade-progress failed: No such file or directory
cd tmp
00:18:0A:00:F1:20:~# ls
brain_state              fcgi_sock                mtunnel_state
config.new                harvest_interval          udhcpc.wired1.configured
current_channel          lighttpd.user            var
00:18:0A:00:F1:20:~# cd var
00:18:0A:00:F1:20:~/var# ls
log  run
00:18:0A:00:F1:20:~/var# cd ..
00:18:0A:00:F1:20:~# ls
brain_state              fcgi_sock                mtunnel_state
config.new                harvest_interval          udhcpc.wired1.configured
current_channel          lighttpd.user            var
00:18:0A:00:F1:20:~# cat current_channel
1
00:18:0A:00:F1:20:~# chatter: expensive Packet::push; have 16 wanted 58
chatter: expensive Packet::push; have 16 wanted 58
chatter: expensive Packet::push; have 32 wanted 58
chatter: expensive Packet::push; have 16 wanted 58
chatter: expensive Packet::push; have 32 wanted 58


Wiki page for RB133  
Wiki page for RB133  
http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100
http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100

Latest revision as of 16:15, 1 September 2016

See also: Sparky

OpenWrt[edit]


Flashing (kamikaze)[edit]

Setup dhcp and tftp on a computer you can connect to via wired ethernet

Download http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf to /srv/tftp/

sudo dnsmasq -i eth0 --dhcp-range=192.168.1.70,192.168.1.77 --dhcp-boot=openwrt-adm5120-2.6-vmlinux.elf --enable-tftp --tftp-root=/srv/tftp/ -d -u dnsmasq -p0 -K --log-dhcp --bootp-dynamic

Connect the RouterBOARD DB-9 serial to computer, and connect with 115200 8N1

Power up teh board

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
  Memory size:  32 MB

Press any key within 2 seconds to enter setup

Press any key within 2 seconds

RouterBOOT-2.7
What do you want to configure?
   d - boot delay
   k - boot key
   s - serial console
   o - boot device
   u - cpu mode
   r - reset configuration
   e - format nand
   g - upgrade firmware
   i - board info
   p - boot protocol
   t - do memory testing
   x - exit setup
your choice: 

Configure boot[edit]

Press 'o' then '1' to set boot device to ethernet one time.

Press 'p' then '2' to use dhcp protocol.

Erase NAND[edit]

Press 'e' to erase/format nand memory. This will clear anything previously installed.

Type 'yes' enter, wait...

Press 'x', wait...

Install OpenWrt[edit]

BusyBox v1.8.2 (2008-05-30 09:59:52 EEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 KAMIKAZE (bleeding edge, r11293) -------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
 ---------------------------------------------------
root@OpenWrt:/#

Teh SECRET sauce

mount /dev/mtdblock2 /mnt; cd /mnt

wget http://yourserver/kernel

cd /; umount /mnt; mount /dev/mtdblock3 /mnt; cd /mnt

wget http://yourserver/openwrt-adm5120-2.6-rootfs.tgz

gzip -d openwrt-adm5120-2.6-rootfs.tgz; tar xvf openwrt-adm5120-2.6-rootfs.tar; rm openwrt-adm5120-2.6-rootfs.tar; cd /; umount /mnt; sync; reboot

Downloads[edit]

References[edit]

Meraki Flashed Versions[edit]

Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf

Note: The following references boards that have a meraki flashed NAND.


power[edit]

The board has a non-standard PoE option, there is also a barrel connector that supports 9-28V DC tip positive supply


www[edit]

Connecting the first ethernet port (has PoE sticker) to a DHCP enabled network will allow access to some meraki web pages. Browse to the IP to see these pages.

  • index.cgi
  • advanced.html
  • configure/index.cgi

Some pages are password protected. The username is 'admin' and the password is the serial number. The serial number can be obtained via the serial terminal using 'cat /MERAKI_SERIAL'


serial boot output[edit]

CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/

BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device.  Please look for developer information at
http://meraki.com.  We would like to encourage you to play with this
platform and add your own features to it.  However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff?  Come work with us!  jobs@meraki.com

Happy Hacking!
00:18:0A:00:F0:DC:/# help

Built-in commands:
-------------------
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait

reboot command, followed by any key to enter setup


00:18:0A:00:F0:DC:/# reboot
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release

The system is going down NOW !!

Sending SIGTERM to all processes.

Sending SIGKILL to all processes.

Please stand by while rebooting the system.
Restarting s\0xf9

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
  Memory size:  32 MB

Press any key within 2 seconds to enter setup.

RouterBOOT-2.7
What do you want to configure?
   d - boot delay
   k - boot key
   s - serial console
   o - boot device
   u - cpu mode
   r - reset configuration
   e - format nand
   g - upgrade firmware
   i - board info
   p - boot protocol
   t - do memory testing
   x - exit setup
your choice: 


more console out[edit]

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
  Memory size:  32 MB

Press any key within 2 seconds to enter setup..
loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code
mem_detect: disable buffers for both banks
mem_detect: checking for 64MB chip in 1st bank
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA1000000 is 0x55555555
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: chip size in 1st bank is 64MB
mem_detect: enable buffers for both banks
mem_detect: 1x64MB memory found
<6>ADM5120 revision 8, running at 175MHz
<6>Boot loader is: RouterBOOT
<6>Booted from   : NAND flash
<6>Board is      : RouterBOARD 133
<6>Memory size   : 32MB
done meminit
Linux version 2.6.16.16 (xyu@xyu-dev) (gcc version 3.4.6 (OpenWrt-2.0)) #14 Wed Sep 26 18:49:21 PDT 2007
ADM5120 board setup
CPU revision is: 0001800b
Determined physical RAM map:
 memory: 013d1000 @ 00c2f000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 rootfstype=squashfs,yaffs2,jffs2 init=/etc/preinit
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 87.500 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 19960k/20292k available (2336k kernel code, 316k reserved, 447k data, 9544k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
unpacking initramfs....done
NET: Registered protocol family 16
adm5120: system has PCI BIOS
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Algorithmics/MIPS FPU Emulator v1.5
PCI: slot number 0 is not supported
PCI: mapping irq for 0000:00:02.0 pin:1, irq:15
yaffs Sep 20 2007 18:44:25 Installing. 
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
watchdog hb: 90  WDOG0: 0xa32806dd  WDOG1: 0x7fff06de
adm5120_wdt_init using heartbeat 90 s cycles 9000
watchdog hb: 90  WDOG0: 0xa3280000  WDOG1: 0x7fff0000
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
eth0: ADM5120 switch port0
eth1: ADM5120 switch port1
eth2: ADM5120 switch port2
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
RB1xx nand
NAND device: Manufacturer ID: 0xad, Chip ID: 0x76 (Hynix NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00400000 : "/bootpart"
0x00400000-0x00800000 : "/storage"
0x00800000-0x00810000 : "paniclog"
0x00810000-0x04000000 : "extra"
usbmon: debugfs is not available
mice: PS/2 mouse device common for all mice
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 232 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 9544k freed
init started:  BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary

Please press Enter to activate this console. yaffs: dev is 32505856 name is "mtdblock0"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.0, "mtdblock0"
yaffs: auto selecting yaffs1
yaffs: dev is 32505857 name is "mtdblock1"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1
adm5120_wdt: starting watchdog w/timeout 90 seconds
watchdog hb: 90  WDOG0: 0xa328028c  WDOG1: 0x7fff028c
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
wlan: 0.8.4.2 (svn 10828)
ath_rate_sample: 1.2 (svn 10828)
ath_pci: 0.9.4.5 (svn 10828)
PCI: Enabling device 0000:00:02.0 (0000 -> 0002)
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 10.4 phy 6.1 radio 6.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
couldn't load module 'wlan_scan_sta' (-89)
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15
click: starting router thread pid 478 (818d3480)
wlan: mac acl policy registered

!!!!! reading /tmp/mtunnel_state failed: No such file or directory
couldn't load module 'wlan_scan_monitor' (-89)
unable to load wlan_scan_monitor



BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device.  Please look for developer information at
http://meraki.com.  We would like to encourage you to play with this
platform and add your own features to it.  However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff?  Come work with us!  jobs@meraki.com

Happy Hacking!
00:18:0A:00:F1:7C:/# 



Wiki page for RB133 http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100