Skip to content

Instantly share code, notes, and snippets.

@mach-kernel
Created March 1, 2020 00:02
Show Gist options
  • Save mach-kernel/bbe078aa9b5f66061790cee7704bccc8 to your computer and use it in GitHub Desktop.
Save mach-kernel/bbe078aa9b5f66061790cee7704bccc8 to your computer and use it in GitHub Desktop.
{
"@context": "https://schema.org",
"@type": "DiscussionForumPosting",
"@id": "https:\/\/forums.sgi.sh\/index.php?threads\/making-a-network-for-a-friend-did-i-miss-anything.180\/",
"headline": "Making a network for a friend -- did I miss anything?",
"articleBody": "A buddy of mine was complaining about his wifi being slow, so we decided to set about a project to set up the network at his house. We are trying to keep costs very low. I want to document what we've done thus far and see if anyone has suggestions!\n\nService: Verizon FiOS 1gbit symmetrical\n\nNeeds\n\nLots of clients. Many gadgets + IoT stuff everywhere\nSeveral people gaming at once\nStrong wifi signal everywhere (5GHz and 2.4 for legacy devices and a surprisingly large amount of the IoT stuff with old NICs)\nGuest networks\nNAS\nVPN but only for brief remote access, not for constant use\n\nEquipment decided\n\nZOTAC CI323 Nano $75\n\nOnboard GBE NIC\n$18The mPCIE slot the wifi card is installed in can host one of these: https:\/\/www.amazon.com\/CERRXIAN-Gigabit-Ethernet-Express-1000Mbps\/dp\/B0816BL79R\/ref=sr_1_3?keywords=mini+pci+ethernet+adapter&qid=1582854325&sr=8-3\n\nIt's Realtek and should work with pfSense\n\n\nRecycler gave us some PoE Netgears. Score!\n3x Meraki MR18 $60\n\n2x2 MIMO 802.11n ~ 600mbps\nhttps:\/\/www.ebay.com\/itm\/Cisco-Meraki-MR18-HW-Dual-Band-Cloud-Managed-Wireless-Access-Point-Unclaimed\/202753453454?epid=1930458946&hash=item2f350c2d8e:g:MAUAAOSw7HFdTdJu\nShittiest USB JTAG from Amazon $10\nMost fragile looking USB UART TTL cable from Amazon $7\n\nhttps:\/\/www.amazon.com\/JBtek-WINDOWS-Supported-Raspberry-Programming\/dp\/B00QT7LQ88\/ref=sr_1_8?keywords=usb+uart&qid=1582855170&sr=8-8\n\n\npfSense\n\nTotal: $145\n\n--\n\nFlashing the MR18s\n\nOpenWRT shows that if we're lucky, these can be flashed via UART by using the serial console to send it a command to pull firmware from a TFTP server on your LAN. However, you might be running firmware that is too new, which gives you a really stupid error message that we will see in a little bit. The observant will have noticed that this has gone poorly after seeing \"JTAG\" on our parts list. But I digress.\n\n\nSetting up\n\nThe above adapter is a PL2303 with drivers for everything available here: http:\/\/www.prolific.com.tw\/US\/ShowProduct.aspx?p_id=229&pcid=41 Mac users have Serial app, which has its own userland drivers, but it will not give you the tty device that you need. After installing you should be able to attach by doing:\n\nscreen \/dev\/tty.usbserial 115200\n\nWiring\n\nIt seems that the whole thing can start if you also connect VCC. Do not connect VCC with PoE plugged in or you may damage your USB port.\n\nGND\nTX\nRX\nVCC\n\n\n\nAttempt 1\n\nLooks like we can see it booting:\n\n__________________sri____________________\n944x BootROM Ver. (asic) 1.0 [Nov 8 2011 13:42:57]\n_________________________________________\nfind_hif: bootstrap = 0x31c58\nNand Flash init\nhdr: [0xbd000400 : 0xbd000400 : 0x6fb4 : 0xe5c86b84]\nnand_load_fw: read 13 pages\nnand_load_fw: 0x10000 0x800 0xbd000bf0\nnand_load_fw: 0x20000 0x800 0xbd0013f0\nnand_load_fw: 0x30000 0x800 0xbd001bf0\nnand_load_fw: 0x40000 0x800 0xbd0023f0\nnand_load_fw: 0x50000 0x800 0xbd002bf0\nnand_load_fw: 0x60000 0x800 0xbd0033f0\nnand_load_fw: 0x70000 0x800 0xbd003bf0\nnand_load_fw: 0x80000 0x800 0xbd0043f0\nnand_load_fw: 0x90000 0x800 0xbd004bf0\nnand_load_fw: 0xa0000 0x800 0xbd0053f0\nnand_load_fw: 0xb0000 0x800 0xbd005bf0\nnand_load_fw: 0xc0000 0x800 0xbd0063f0\nnand_load_fw: 0xd0000 0x800 0xbd006bf0\nf\/w 0 read complete, jumping to 0xbd000400\n\n\n\nMeraki Atheros LinuxLoader MR18 built Jan 31 2014 15:53:22\nqca955x_init_ddr ok\ntest_memory ok\nD-cache size: 64K\nI-cache size: 32K\ninit_dram_uncached ok\ninit_icache ok\ninit_dcache ok\nenable_caches ok\ntest_memory ok\nnand_flash_init ok\nloading fw at 256\nhdr: [0x8e73ed8a : 0x400 : 0x16fee8 ]\npart1: Copying image to memory ... ...........\ndone.\npart1: Checking sha1 (from 0x80060000 length 1507048) ... match\npart1: sha1 calculated: 3f387c516d74dd96356e306e69763365853d075a\nstarting stage2\ndecompressing embedded kernel image 0x81c024f0(0x16d9d9)\ngot osize 446134\n.....................done\nstarting linux\n[ 0.000000] Linux version 3.4.113-meraki-ar7100 (jenkins@dal248.meraki.com) (gcc version 4.8.3 (GCC) ) #4 Wed Dec 11 15:43:47 PST 2019\n\nLet's try to see if the ODM command works:\n\n\n<Meraki> odm\nUNRECOGNIZED COMMAND LOGGED TO CLOUD SERVERS.\n<Meraki> odm help\nUNRECOGNIZED COMMAND LOGGED TO CLOUD SERVERS.\n<Meraki> ^CWARNING! THIS CONSOLE IS LOGGED! UNAUTHORIZED ACCESS FORBIDDEN!\n<Meraki> ^C^CWARNING! THIS COWARNING! THIS CONSOLE IS LOGGED! UNAUTHORIZED ACCESS FORBIDDEN!\n\n\nNope! Looks like our firmware is too new. Sunk cost fallacy says we have to make these $60 dollars work. Time to do a bad job soldering some wires on:\n\n\n\n\nStay tuned for figuring out how to shoehorn the USBJTAGNT configuration into OpenOCD!",
"articleSection": "Everything Else",
"author": {
"@type": "Person",
"name": "mach_kernel"
},
"datePublished": "2020-02-28",
"dateModified": "2020-02-29",
"image": "https:\/\/secure.gravatar.com\/avatar\/3345d5456f72c4e78bfbf9f0f55d7c9a?s=96",
"interactionStatistic": {
"@type": "InteractionCounter",
"interactionType": "https://schema.org/ReplyAction",
"userInteractionCount": 4
},
"publisher": {
"@context": "https://schema.org",
"@type": "Organization",
"name": "Silicon Graphics User Group",
"logo": {
"@type": "ImageObject",
"url": "https://cdn.forums.sgi.sh/assets/logo/sgug-logo-1.png"
},
"url": "https://sgi.sh",
"contactPoint": [
{
"@type": "ContactPoint",
"email": "webmaster@sgi.sh",
"contactType": "Suggestions",
"contactOption": "TollFree",
"areaServed": "International"
}
]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment