Differences

This shows you the differences between two versions of the page.

--- speedstream_2602 [2011/01/14 18:52]
zashi [Hacking the SpeedStream 2602]
+++ speedstream_2602 [2016/03/10 23:11] (current)
zashi
@@ Line 1: / Line 1: @@
+{{tag>hardware software hacking dead}}
+{{ http://i.imgur.com/yzQ5Y.jpg?nolink}}
+====== Hacking the SpeedStream 2602 ======
+The SpeedStream 2602 is a SOHO firewall/router. With a whopping 2 LAN ports, 1 WAN port and no wifi, this has to be the dinkiest firewall/router box I've seen yet.
+There is frustratingly little information available on it and no pre-made dd-wrt images for it. That's my goal, btw, to get dd-wrt or at least uClinux + busybox running on this thing. It has an arm processor with <del>plenty of</del> some free GPIO pins. I picked this thing up at a thrift store in an unopened box for $5.95 + tax.
+===== Hardware =====
+This is the information I've been digging up on the SS 2602. It is interesting to note that WAN and LAN are handled by different chips.
+==== Chips ====
+| Processor (ARM)| Samsung S3C4510X01 - QERO | {{http://pdf1.alldatasheet.com/datasheet-pdf/view/37744/SAMSUNG/S3C4510B/+257W5UOYlSuOpdVYpCDvvL+/datasheet.pdf|Datasheet}} |
+| WAN Ethernet | RTL9019AS 1B232S1 | {{http://www.ethernut.de/pdf/8019asds.pdf|Datasheet}} |
+| LAN Ethernet | Marvel 88E6050 - RJJ | Can't find a datasheet, let me know in the discussion section if you've got a link|
+| RS-232 / TTL | Sipex SP213ECA | {{http://www.chipcatalog.com/Docs/EB0B4FC57BC634903556C814D2886194.pdf?pass=11169812830260762|Datasheet}} |
+The SP213ECA is connected to the ARM's builtin UART, allowing for a direct serial connection. The processor can address up to 8MB SDRAM and 2MB FLASH.
+==== Headers ====
+=== JTAG ===
+There is definitely a jtag port. It looks to be a standard 14-pin connector. Several of the pins on one side are connected to ground. As I don't really have enough information on this device, I've personally ruled out jtag as a hacking option (for now).
+=== Serial ===
+There is definitely a serial header as it is connected to the RS-232 to TTL chip. I spent a few minutes mapping out the pins and cross checking the rs-232 chip's datasheet. Here's the pinout, if you're looking at the top of the board and the reset button is at the top right. The serial header is at the top between the LEDs and the reset button.
+|0|1|2|3|4|
+|5|6|7|8|9|
+^ 0 | Ground |
+^ 1 | T<sub>2</sub>OUT |
+^ 2 | T<sub>1</sub>OUT |
+^ 3 | R<sub>1</sub>IN |
+^ 4 | R<sub>4</sub>IN |
+^ 5 | NC |
+^ 6 | NC |
+^ 7 | R<sub>3</sub>IN  |
+^ 8 | T<sub>3</sub>OUT |
+^ 9 | R<sub>2</sub>IN |
+===== Software =====
+The stock firmware is VxWorks. Some output from the first serial port:
+                               VxWorks System Boot
+    Copyright 1984-1998  Wind River Systems, Inc.
+    BSP version: 1.2/9
+    Creation date: Oct 12 2001, 13:40:08
+    Press any key to stop auto-boot...
+    Verify product code.....................PASS
+    [flash_Read]::from 0x1000000, size=0x1b4
+    [flash_Read]::exit
+    [flash_Read]::from 0x1000000, size=0x1b4
+    [flash_Read]::exitAttached TCP/IP interface to secEnd unit 0
+    Attaching interface lo0...done
+    Adding 4038 symbols for standalone.
+                         VxWorks
+    Copyright 1984-1998  Wind River Systems, Inc.
+                CPU: KS32C50100 FOR SNDS100
+            VxWorks: 5.4
+        BSP version: 1.2/9
+      Creation date: Oct 25 2001
+                WDB: Ready.
+===== References =====
+  * 1: http://www.ixo.de/info/zyxel_uclinux/
+  * 2: [[http://wiki.openwrt.org/doc/devel/platform?s[]=new&s[]=device|http://wiki.openwrt.org/doc/devel/platform?s[]=new&s[]=device]]
+~~DISCUSSION:off~~

Differences

Search