Debian on CISCO ON100-K9

@bobba / Bender
https://www.dropbox.com/sh/1le7tzpjadzk8ye/AACAdi2Ao5ydVbSdk9zNQwpDa?dl=0

@Joey
Your turn to hook yours up and slap up some outputs.



Edited 1 time(s). Last edit at 07/27/2016 03:17PM by Gravelrash.

@Gravelrash,

I saw JTAG and UART unpopulated headers, SD, and USB, but not seeing the Ethernet ports. Are there 2 of those in the rear?

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

Gravelrash Wrote:
-------------------------------------------------------
> @bobba / Bender
> https://www.dropbox.com/sh/1le7tzpjadzk8ye/AACAdi2
> Ao5ydVbSdk9zNQwpDa?dl=0
>

Thanks a lot.

I'm not seeing Sata or pcie anywhere on that board. Lord knows it has some of the biggest SMDs I've seen, but apart from that it's useless to me. It's basically a Cisco PogoPlug Mobile with better hardware.

I think I'll pass. No sata/pcie no party. This thing will be a decent router/firewall (no-wifi/no-switch), doing VPN, firewalling, VOIP, traffic sniffing (also called black boxes) and all that sorts of mostly-networking things, but I have already a router for that.

It seems the USB comes straight from the SoC, in that case it could be (theoretically) turned into "mass storage" mode to show a network share (hosted somewhere else) as mass storage.

bodhi Wrote:
-------------------------------------------------------
> @Gravelrash,
>
> I saw JTAG and UART unpopulated headers, SD, and
> USB, but not seeing the Ethernet ports. Are there
> 2 of those in the rear?

They are inside the yellow boxes facing the same direction of the SD card. Pretty standard router ports in plastic casing.



Edited 1 time(s). Last edit at 07/27/2016 05:08PM by bobafetthotmail.

Ah, I see.

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

Got mine in, but pending Soundblaster to PC cable and a needle-tipped soldering iron, ASAP but I doubt before weekend.

I took it apart w pictures and doubt any more light is shed after Gravelrash's pics. I don't see pins sticking out but so see holes for sticking in pins. ARE YOU NUTS? If so, I feel right at home :-)

=========
-= Cloud 9 =-



Edited 2 time(s). Last edit at 07/28/2016 04:42PM by JoeyPogoPlugE02.

For the Cisco ON100 documentation:

Downloading and installing the base software image (requires Internet connection).
You will only see this pattern prior to activation (during out-of-box installation) or after a factory reset.

So out of the box the unit must install the software image from a now obsolete download site that it appears has been re-directed to a malware site. Good job Cisco! NOT! The second unit I have exhibited the same behavior so I started digging around. It appears that originally the box would download firmware on startup from failsafe.imageboot.com. This URL is not re-directing to http://sso.anbtr.com/domain/failsafe.imageboot.com which Norton Security says is a malware site!

I can break out of the download script which then gives me a login prompt:

ap_failSafeUpdate: Bundle download was successful - in terms of a successful transfer ...  
ap_failSafeUpdate: Downloaded the bundle fine, but the tar file is corrupt 
ap_failSafeUpdate: Failed attempt 2 to download the recovery file! 
^C
Please press Enter to activate this console. 

ON100_6400F120DF66 login:

So now I just need to figure out what the login credentials are. Further complicating issues is the stock bootcmd which is as follows:

bootcmd=fsload 0x400000 boot.img;autoscr 0x400000

Which apparently loads a script and then executes it. Now how do I figure out how to read this script?

Ray

> So out of the box the unit must install the
> software image from a now obsolete download site
> that it appears has been re-directed to a malware
> site. Good job Cisco! NOT!

Cool, they were kill-switched, and someone flipped that switch.
They are dead electronics now.

Might be a good idea to use this information to lower the price... hmmm.

> Which apparently loads a script and then executes
> it. Now how do I figure out how to read this
> script?

You need to dump the NAND partition containing it either from Debian (if it can read the NAND at all) or from uboot (i doubt it can write things somewhere else).

Imho it's not terribly necessary to do so, it's not going to have any useful info anywyay.

Can you try kwboot on this box? http://forum.doozan.com/read.php?3,7852,7852
If this box can load a new uboot over serial (most kirkwoods can), testing new uboots is easy and safe.

This box does not have any special hardware attached, so I think info in uboot source will be enough to make a new uboot and a dtb for Debian.

Hmm, interesting read here (official EoL statement from Cisco, stating that these devices are dead just as the service they were providing since Cisco switched to another system) https://supportforums.cisco.com/document/137496/onplus-eol-faq

Q: I’ve recently installed an ON100, but I wont be able to make use of the complete duration of the 3-year subscription. What can I do?

A: An OnPlus subscription includes 3 years of service, and is included with every purchase of an ON100 Network Agent. If by the time the service has terminated 3 years have not expired since an ON100’s installation, you may request a refund from Cisco for the remaining amount of time of the subscription, based on ON100-K9 street price of $177.00.

This applies only to subscriptions actually registered before the shutdown of the server, but would have been cool to have nontheless.

@Gravelrash,

Are there any screw to open, anything I need to watch for so to avoid breaking the box casing?

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

@Ray,

Can you post the URL of the source code?

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bodhi Wrote:
-------------------------------------------------------
> @Gravelrash,
>
> Are there any screw to open, anything I need to
> watch for so to avoid breaking the box casing?


yes there are 4 underneath the rubber feet and there are a also case catches - i opened mine with an old credit card after removing the four screws

bodhi Wrote:
-------------------------------------------------------
> @Ray,
>
> Can you post the URL of the source code?

Wouldn't do you any good as it was a temporary link that is now dead!

Ray

bobafetthotmail Wrote:
-------------------------------------------------------
SNIP
> Can you try kwboot on this box?
> http://forum.doozan.com/read.php?3,7852,7852
> If this box can load a new uboot over serial (most
> kirkwoods can), testing new uboots is easy and
> safe.
>
> This box does not have any special hardware
> attached, so I think info in uboot source will be
> enough to make a new uboot and a dtb for Debian.

kwboot definitely works as I built u-boot from the provided source and used kwboot to boot it successfully. I was also able to boot into the 4.4 Debian on USB, but no working Ethernet with the DTB I used.

Ray

rayknight Wrote:
-------------------------------------------------------
> bodhi Wrote:
> --------------------------------------------------
> -----
> > @Ray,
> >
> > Can you post the URL of the source code?
>
> Wouldn't do you any good as it was a temporary
> link that is now dead!
>
> Ray

Ok then perhaps you could (take your time when convenient) uploading it somewhere?

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bodhi Wrote:
-------------------------------------------------------
> rayknight Wrote:
> --------------------------------------------------
> -----
> > bodhi Wrote:
> >
> --------------------------------------------------
>
> > -----
> > > @Ray,
> > >
> > > Can you post the URL of the source code?
> >
> > Wouldn't do you any good as it was a temporary
> > link that is now dead!
> >
> > Ray
>
> Ok then perhaps you could (take your time when
> convenient) uploading it somewhere?

The file is 276MB. Where would you like me to upload it?

Ray

rayknight Wrote:
-------------------------------------------------------
> The file is 276MB. Where would you like me to
> upload it?
>
> Ray

Google Drive (if you have a gmail account)?
Sky Drive (if you have a microsoft/hotmail/outlook account)?

Otherwise bodhi can send you a dropbox file request (available for free accounts too), that allows you to upload stuff to his dropbox directly.



Edited 1 time(s). Last edit at 07/30/2016 05:47AM by bobafetthotmail.

Anybody who has connected serial console, please post pintouts.

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bobafetthotmail Wrote:
-------------------------------------------------------
> rayknight Wrote:
> --------------------------------------------------
> -----
> > The file is 276MB. Where would you like me to
> > upload it?
> >
> > Ray
>
> Google Drive (if you have a gmail account)?
> Sky Drive (if you have a microsoft/hotmail/outlook
> account)?
>
> Otherwise bodhi can send you a dropbox file
> request (available for free accounts too), that
> allows you to upload stuff to his dropbox
> directly.

Any of the big 3 (Dropbox, Google Drive, Sky Drive) is fine!

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

@bodhi - from what i remember its standard pinouts with the square solder point as the earth.

I found a diagram somewhere - i will have a look around and see if i can find it again.

The easiest way to check the negative/earth would be to get your multimeter out and take a lead from the square tag to some other metal component and work back from there. obviously dont have the power or any cables connected when you do (just posting that for others who may stumble across this post)

I was too lazy to open up my multimeter :)) on the shelf somewhere.

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

You could annotate a piece of a picture Gravelrash if you have a minute. I was never sure where it is, one of two possibilities.

* update - I'm out. I actually had a tear in my eye when the box arrived. But life being comparable to progress determined by traffic lights out of my control, I'd say this project is hitting me with all reds and I'm late to other commitments. I'm going to reallocate my pennies from a "guess' order of still-unknown soldering iron or whatever.

So it's with real sadness I scrap this and store the box in a safe place until I have time and material support, or other option that doesn't involve time. No I'm not sending it to anyone because I don't believe in others having fun off my suffering :-)

=========
-= Cloud 9 =-



Edited 2 time(s). Last edit at 07/31/2016 01:09PM by JoeyPogoPlugE02.

bodhi Wrote:
-------------------------------------------------------
> Anybody who has connected serial console, please
> post pintouts.

                J4        J6  3.3V | RXD | TXD | GND   
JTAG    X|X|X|X|X|X|X|X|X|X|               JP1 
        X|X|X|X|X|X|X|X|X|X|   GND | TXD | RXD | 3.3V
______________________________________________
Front Edge Of Cisco ON100-K9 Board

On 1 of my units the Serial Port closest to the board edge with Ground on the left has a 4 pin connector soldered (but I suspect a bad solder joint) as it shows garbage characters when booting. The 4 pins on the other side work fine. On the second unit it doesn't seem to matter which port I use as both work equally well.


Ray

rayknight Wrote:
-------------------------------------------------------
> bodhi Wrote:
> --------------------------------------------------
> -----
> > Anybody who has connected serial console,
> please
> > post pintouts.
>

>                 J4        J6  3.3V | RXD | TXD |
> GND   
> JTAG    X|X|X|X|X|X|X|X|X|X|               JP1 
>         X|X|X|X|X|X|X|X|X|X|   GND | TXD | RXD |
> 3.3V
> ______________________________________________
> Front Edge Of Cisco ON100-K9 Board
> 
>

>
>
> On 1 of my units the Serial Port closest to the
> board edge with Ground on the left has a 4 pin
> connector soldered (but I suspect a bad solder
> joint) as it shows garbage characters when
> booting. The 4 pins on the other side work fine.
> On the second unit it doesn't seem to matter
> which port I use as both work equally well.
>
>
> Ray

Thanks Ray!

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bobafetthotmail Wrote:
-------------------------------------------------------
> rayknight Wrote:
> --------------------------------------------------
> -----
> > The file is 276MB. Where would you like me to
> > upload it?
> >
> > Ray
>
> Google Drive (if you have a gmail account)?
> Sky Drive (if you have a microsoft/hotmail/outlook
> account)?
>
I've never actually made use of Google Drive before, so let me know if the following link does not work:

https://drive.google.com/file/d/0B9BuGVh30LKyek5IZFk3d090ZUE/view?usp=sharing

Ray

@Ray,

> https://drive.google.com/file/d/0B9BuGVh30LKyek5IZ
> Fk3d090ZUE/view?usp=sharing
>

I could not use wget to download this.

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bodhi Wrote:
-------------------------------------------------------
> @Ray,
>
> >
> https://drive.google.com/file/d/0B9BuGVh30LKyek5IZ
>
> > Fk3d090ZUE/view?usp=sharing
> >
>
> I could not use wget to download this.

It's normal, you need a modern GUI browser or special tools that interact with google's API https://github.com/prasmussen/gdrive

Google stuff switched to OAuth tokens for authentication, Wget does not support that.

wget https://doc-08-7o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/q9col44fp9q3rqu5ralpm115j1blgbk8/1470132000000/14819486730827555679/*/0B9BuGVh30LKyek5IZFk3d090ZUE?e=download

should grab it

then rename to "something.zip" and extract



Edited 1 time(s). Last edit at 08/02/2016 06:03AM by Gravelrash.

Gravelrash Wrote:
-------------------------------------------------------
> wget
> https://doc-08-7o-docs.googleusercontent.com/docs/
> securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/q9col44f
> p9q3rqu5ralpm115j1blgbk8/1470132000000/14819486730
> 827555679/*/0B9BuGVh30LKyek5IZFk3d090ZUE?e=downloa
> d
>
> should grab it

I wonder if that will only work temporarily as it should be using your own authentication for that link.

@bobba - dunno

just tried it on two different machines and it grabbed it - have to rename the downloaded file though