Any guidance with TippingPoint S10?
-
Yeah, they pretty much have to be non-latching otherwise they don't failover in a power failure.
They probably only have two positions also; 1a connected to 1b or not. However with a normal lan-bypass setup you have one NIC for each port and there aren't enough here. :-\
Steve
Well, I can see five ports and five transformers, and five Intel chips for ethernet. (the one on the far left is still under it's heatsink, but you can see the transformer traces going over there)
The four ports next to the relays are in their bypass setup, the one leftmost is a non-bypass port, presumably to connect to a management network. -
Ah, under the heatsink. I guess that's why it's detected as something different. Though quite why the management port needs heatsinking and the in-band ports don't…..
Easy to test the by-pass mode. Without any power connected to the box test for connectivity between 1a and 1b (or 2a and 2b).Steve
-
That would indeed work, lets see if the TS can test that when he/she gets home.
I did a small inspection on the traces to those ULN2003A's, it looks like every chip controls 4 relays, and per chip, only the first four channels are used.
Those channels are tied together on one trace, so in theory, shorting one of them to Vcc will switch the relays.On the right hand side of the ULN chips, you can see U69, which looks like one pin is connected to the two ULN's up there, another to Vcc and the head pin to a trace that goes down to the Lattice chip. I could be wrong as the photo isn't sharp enough to do that kind of PCB tracing when zoomed in, but it's pretty logical to me. The Lattice is probably responsible for some general glue logic.
-
I am new to pfSense, I'm so thankful for this forum and the people who contribute to it. Saved me a lot of time.
tippingpoint_s10. Anways, with only 1 ethernet port I manage to get flashrom installed and read out the bios.[2.1.5-RELEASE][root@pfSense.localdomain]/root(8): flashrom -p internal -r tippS10.bin flashrom v0.9.7-r1711 on FreeBSD 8.3-RELEASE-p16 (i386) flashrom is free software, get the source code at http://www.flashrom.org Calibrating delay loop... OK. Found chipset "Intel ICH6-M". Enabling flash write... OK. Found SST flash chip "SST49LF008A" (1024 kB, FWH) at physical address 0xfff00000. Reading flash... done.
So much fun, I want to learn all this stuff, but I don't have time. Any pointers to bios editing would be helpful. I did some search, but only came up with bios-mods.com, too much information here with no guidance. Their latest message on the welcome page is from 2013.
Here are the original photo, I had to cut the previous one to size. My phone camera isn't that great.
https://drive.google.com/file/d/0B3viFJ2DdornNGRtN1FleFloSEU/view?usp=sharing
With the power off, 2a is connected to 2b, and 1a is connected to 1b.
edit1: I can tell you that the one labeled Intel legacy gigabit is a different chip. This is the one currently working, this chip is under the heatsink. I'm not worry about this chip. It's the other 4 that don't seem to work at all. My guess is the TippingPoint OS turns them on, because they light up after TOS boots.
-
Ok, that is a standard Award BIOS. Console redierction is enabled by default at 115200bps. Try connecting at that speed and use TAB to connect. The com port is not specified though so it may be using an internal com port. Though if that was the case I would not expect the pfSense serial console to work. The BIOS may specify com2 somewhere though…
It does have options to disable the two lan-bypass segments.
Com ports look absolutely normal and the pfSense console works so nothing suspicious there. There is no 'Agent wait time' option so possibly it isn't waiting in which case you may have a very short time to be pressing TAB. Start pressing it as soon as you power on.
Steve
-
If you're not able to reach the BIOS setup we could try editing the image to make lan-bypass disabled the default option. You can flash that back and clear the CMOS to apply it. Of course that carries some risk.
Steve
-
Nope, tried multiple times, I can't get into the bios settings. If you could modify the bios for me, I will flash it. I understand the risk. I have done multiple bios recovery before, no problem. I was also looking around for for the same type of bios (SST49LF008A-33-4C-NHE). Just in case something goes wrong and I need another chip.
My questions are: I notice when I extracted the bios it was only 1024 kB. The same type of chip has a 8MB version and a 4MB version? Can I flash a 1MB bin file to a 8MB or 4MB bios? Or do I have to find the exact capacity bios? Also, where did you learn how to edit bios firmware? What program did you use? Are they manufacture specific?
Thanks for your help.
-
49LF008 is by definition 8Mbit = 1Mbyte (Mb is a megabit, MB is megabyte). So a 1MB BIOS is the right size for a 8Mb flash chip. Many/most memories are usually specified in bits not bytes (because they can be arranged differently - sometimes 8 bits wide, 16 bits wide etc).
There is no 4 Megabit 49LF008.
-
Yup, BIOS rom chip size is always given in Mbits for some reason. ::)
I know that people have used a 512KB image on an 8Mb chip without issue. Obviously it won't fit the other way around.
I'll try and modify that image when I get a chance then.
Another option, potentially more fun but also more frustrating, is to probe the various GPIO pins until you find where the lan-bypass relays are connected.Steve
-
could you point me in the right direction on how to modify firmware&bios images?
-
49LF008 is by definition 8Mbit = 1Mbyte (Mb is a megabit, MB is megabyte). So a 1MB BIOS is the right size for a 8Mb flash chip. Many/most memories are usually specified in bits not bytes (because they can be arranged differently - sometimes 8 bits wide, 16 bits wide etc).
There is no 4 Megabit 49LF008.
Thank you for clearing this up. I understand the difference btw Mb & MB. Just so used to working in Megabyte, that when ever anyone refer to MB or Mb, I tho they mean the same. In reality (technically) they are not, so thank you.
-
Ok, find attached the modified bios image the only thing I have changed here are the default values for the two lan-bypass segments from enabled to disabled. For this to have any effect you'll have to flash it then reset the cmos to load the defaults. It may catch fire etc… ;)
Remove the .png extension. The MD5 should be 2a4017953a1031f97b36b1174b85f9b1.Steve
-
Yup followed those directions and it works. Had to reset bios.
Stephenw10, are you in Europe? How many Euros do I owe you? Thanks a million.
-
I'm in London, we haven’t moved to Euros, yet.
That's great news anyway. Does it control the 'active' leds also? If not that's more potential fun right there. :DSteve
-
LED on the ports are working.
-
Ok, find attached the modified bios image the only thing I have changed here are the default values for the two lan-bypass segments from enabled to disabled. For this to have any effect you'll have to flash it then reset the cmos to load the defaults. It may catch fire etc… ;)
Steve, how did you modify the bios file?
-
yes, i want to know/learn and would be willing to take the ferry to london to find out :D :D
-
There's no big secret I just opened it in modbin6. Pretty easy with older bioses like this. ;)
Steve
-
I'm just going to point out that Paul, Netgate's COO, used to work at Tipping Point as the VP Business Management / VP Product Management.
IJS…