Differences

This shows you the differences between two versions of the page.

toh:arcadyan:arv7506 [2013/03/21 04:22]
hardfalcon
toh:arcadyan:arv7506 [2013/11/30 18:00] (current)
hph updated config decryption part (OBC6 file format)
Line 3: Line 3:
This device is also known as [[toh:alice:iad4421|Alice IAD WLAN 4421]] and as [[toh:o2:box4421|o2 Box 4421]]. This device is also known as [[toh:alice:iad4421|Alice IAD WLAN 4421]] and as [[toh:o2:box4421|o2 Box 4421]].
-===== Hardware info =====+===== Hardware ===== 
 +==== Info ====
| **Architecture:** | MIPS | | **Architecture:** | MIPS |
| **Target:** | lantiq | | **Target:** | lantiq |
Line 18: Line 19:
| **Ethernet:** | [[http://www.realtek.com.tw/products/productsView.aspx?Langid=1&PFid=20&Level=5&Conn=4&ProdID=196|Realtek RTL8306G]], 4x LAN 100MBit/s | | **Ethernet:** | [[http://www.realtek.com.tw/products/productsView.aspx?Langid=1&PFid=20&Level=5&Conn=4&ProdID=196|Realtek RTL8306G]], 4x LAN 100MBit/s |
| **Wireless:** | Ralink RT3060F, 802.11n 300MBit/s | | **Wireless:** | Ralink RT3060F, 802.11n 300MBit/s |
-| **Phone:** | [[http://www.lantiq.com/products/voice-access/voicevoip-slictm/slictm/slictm-dc/|Lantiq SLIC-DC]] [[http://media.digikey.com/pdf/Data%20Sheets/Infineon%20PDFs/PEF%204268%20T,F%20Product%20Brief.pdf|PEF-4268T V1.2]], 2x FXS (TAE ports which provide POTS via a SIP gateway) | +| **Phone:** | [[http://www.lantiq.com/products/voice-access/voicevoip-slictm/slictm/slictm-dc/|Lantiq SLIC-DC]] [[http://media.digikey.com/pdf/Data%20Sheets/Infineon%20PDFs/PEF%204268%20T,F%20Product%20Brief.pdf|PEF-4268T V1.2]], 2x FXS ([[wp>TAE ports]] which provide POTS via a SIP gateway) | 
-| **Serial:** | yes (see picture below) |+| **Serial:** | [[#Serial|yes]] |
| **JTAG:** | supported by SOC but no pads found on PCB yet | | **JTAG:** | supported by SOC but no pads found on PCB yet |
| **Buttons:** | power switch, WPS button, reset button | | **Buttons:** | power switch, WPS button, reset button |
| **Power:** | external PSU, 12V DC, 1A, polarity: -(+) | | **Power:** | external PSU, 12V DC, 1A, polarity: -(+) |
-===== Photo / Serial interface ===== 
-{{:toh:arcadyan:arv7506-pcb-serial.jpg|}} +==== Photo ==== 
-You can reach the serial interface pins without opening the case through the ventilation slots if you are patient enough and like to tinker.+ 
 +{{https://dl.dropboxusercontent.com/u/3680600/ARV7506PW11-WLAN-Router.jpg?500}} 
 + 
 +==== Serial ==== 
 +You can reach the serial interface pins without opening the case through the ventilation slots if you are patient enough and like to tinker
 + 
 +{{:toh:arcadyan:arv7506-pcb-serial.jpg?400|}}
===== Decrypting configuration backup ===== ===== Decrypting configuration backup =====
Line 34: Line 40:
If your box is running an old firmware (before September 2012), you can use [[http://pastebin.com/AR4t75HR|this java code I stumbled across]]. (German) usage instructions can be found [[http://www.ip-phone-forum.de/showthread.php?t=232799&page=2&p=1772424&viewfull=1#post1772424|here]]. If your box is running an old firmware (before September 2012), you can use [[http://pastebin.com/AR4t75HR|this java code I stumbled across]]. (German) usage instructions can be found [[http://www.ip-phone-forum.de/showthread.php?t=232799&page=2&p=1772424&viewfull=1#post1772424|here]].
-If your box is running a newer firmware (after September 2012, firmware version *.18), you can use [[http://hph.name/269|this great tool by Hanno 'hph' Heinrichs]]. Usage instructions, feedback and further discussions (in German) can be found [[http://www.ip-phone-forum.de/showthread.php?t=256873|here]].+If your box is running firmware version *.18 (~September 2012) up to *.22: 
 +The config file comes in "CFG5" format, you can use [[http://hph.name/303|this great tool by Hanno 'hph' Heinrichs]]. Usage instructions, feedback and further discussions (in German) can be found [[http://www.ip-phone-forum.de/showthread.php?t=256873|here]]
 + 
 +If your box is running firmware 1.01.23b or newer: 
 +1. Firmware 1.01.23b introduced the new config file format "OBC6". 
 +2. The webinterface censors PPPoE and VoIP login data from the configuration backup file. Though you can still decrypt decrypt it. 
 +3. If you want to extract your PPPoE/VoIP data, you need to dump the config directly from the flash as described [[http://hph.name/303|here (English)]] and [[http://www.ip-phone-forum.de/showthread.php?t=264942|here (German)]]. 
 +4. The (static) root password is also censored by the webserver. You can still extract, if you dump the flash as described in step 2.
===== Serial link ===== ===== Serial link =====
Line 537: Line 550:
===== Tags ===== ===== Tags =====
-{{tag>0usb 1radio 24kec 2ant 2core 2x2 4port 64ram 802.11b 802.11bgn 802.11g 802.11n 8flash adls2+ adsl ADSL2plus alice arcadyan astoria brnboot buttons danube ddr dsl ethernet fastethernet fxo gpios hwvlan internalantenna lantiq macronix mips mips32 nousb o2 pinout port qos rt2860 rt3060 rtl8306 serial upnp wip wlan wps xway}}+{{tag>0usb 1WNIC 2ant 2core 2x2 4port 64ram 802.11b 802.11bgn 802.11g 802.11n 8flash adsl2+ adsl alice arcadyan astoria brnboot buttons danube ddr dsl ethernet fastethernet fxo gpios hwvlan internalantenna mips mips32 24kec nousb rt2860 rt3060 rtl8306 serial lantiq danube TAE_connector}}

Back to top

toh/arcadyan/arv7506.1363836156.txt.bz2 · Last modified: 2013/03/21 04:22 by hardfalcon