Hacking the SpeedStream 2602

The SpeedStream 2602 is a SOHO firewall/router. With a whopping 2 LAN ports, 1 WAN port and no wifi, this has to be the dinkiest firewall/router box I've seen yet.

There is frustratingly little information available on it and no pre-made dd-wrt images for it. That's my goal, btw, to get dd-wrt or at least uClinux + busybox running on this thing. It has an arm processor with plenty of some free GPIO pins. I picked this thing up at a thrift store in an unopened box for $5.95 + tax.

This is the information I've been digging up on the SS 2602. It is interesting to note that WAN and LAN are handled by different chips.

The SP213ECA is connected to the ARM's builtin UART, allowing for a direct serial connection. The processor can address up to 8MB SDRAM and 2MB FLASH.

There is definitely a jtag port. It looks to be a standard 14-pin connector. Several of the pins on one side are connected to ground. As I don't really have enough information on this device, I've personally ruled out jtag as a hacking option (for now).

There is definitely a serial header as it is connected to the RS-232 to TTL chip. I spent a few minutes mapping out the pins and cross checking the rs-232 chip's datasheet. Here's the pinout, if you're looking at the top of the board and the reset button is at the top right. The serial header is at the top between the LEDs and the reset button.

The stock firmware is VxWorks. Some output from the first serial port:

                             VxWorks System Boot
  
  
  Copyright 1984-1998  Wind River Systems, Inc.
  
  
  
  
  
  BSP version: 1.2/9
  Creation date: Oct 12 2001, 13:40:08
  
  
  
  
  Press any key to stop auto-boot...
   0
  
  Verify product code.....................PASS
  [flash_Read]::from 0x1000000, size=0x1b4
  [flash_Read]::exit
  [flash_Read]::from 0x1000000, size=0x1b4
  [flash_Read]::exitAttached TCP/IP interface to secEnd unit 0
  Attaching interface lo0...done
  
  Adding 4038 symbols for standalone.
  
  
                       VxWorks
  
  Copyright 1984-1998  Wind River Systems, Inc.
  
              CPU: KS32C50100 FOR SNDS100
          VxWorks: 5.4
      BSP version: 1.2/9
    Creation date: Oct 25 2001
              WDB: Ready.

• 1: http://www.ixo.de/info/zyxel_uclinux/
• 2: http://wiki.openwrt.org/doc/devel/platform?s[]=new&s[]=device

~~DISCUSSION:off~~