• Please review our updated Terms and Rules here

Help please. Cisco service contract?

Status
Not open for further replies.
A

alpher

Experienced Member
Joined
Feb 17, 2013
Messages
64
Location
Toronto
I was given a couple of Cisco Aironet 3500e Access Points, had an idea of using one at home.
Looks like that requires a $5000 "network controller", but there is a hope.
There is an option to turn this access point into a standalone unit by flashing the different firmware.
But the catch is that in order to download the image from Cisco you have to have a valid "service contract " with them.:(
Obviously I dont have one and won't be buying one just to download one file for an essentialy obsolete hardware.
Is there someone with the contract willing to help?

File in question : ap3g1-k9w7-tar.153-3.JD.tar

Available here:

https://software.cisco.com/download/release.html?mdfid=283307702&flowid=16363&softwareid=284180979&release=15.3.3-JD&relind=AVAILABLE&rellifecycle=ED&reltype=latest
 
All I can tell you is to just get rid of them, they're more trouble than they're worth.

I was in a similar situation several years ago with a Cisco router. A misguided relative bought me a Cisco 2600 router from a business inventory clearance with the intention I could learn IOS. Unfortunately, the router was locked down and was never unlocked and the unlock procedure required both proprietary Cisco software and a proprietary and expensive serial cable that used an RJ-12 phone jack to the router.

I looked high and low for the software for months which I was never able to find, the same for the weird serial cable. I asked everyone and even some people I knew that had Cisco contracts and they refused saying they could be dropped for contract violations of giving out the software.
 
It's not so bad with these access points, actually I was able to wire my own cerial console cable and I can see the console output no problems so far.
I can even log in using "Cisco" as user/password combo, the procedure to update firmware is also quite well documented on the net.
The only issue is that damn image.:mad:

Here's the console output log:
Code: 
r WRDTR,CLKTR: 0x8200083f 0x40000000
r RQDC ,RFDC : 0x80000032 0x00000212

using  eeprom values

WRDTR,CLKTR: 0x8200083f 0x40000000
RQDC ,RFDC : 0x80000032 0x00000212

using SMSJ ddr static values from serial eeprom
ddr init done

Running Normal Memtest...
Passed.
IOS Bootloader - Starting system.
FLASH CHIP:  Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................
Xmodem file system is available.

DDR values used from system serial eeprom.
WRDTR,CLKTR: 0x8200083f, 0x40000000
RQDC, RFDC : 0x80000032, 0x00000212

PCIE0: link is up.
PCIE0: VC0 is active
PCIE1: link is up.
PCIE1: VC0 is active
64bit PCIE devices
PCIEx: initialization done
flashfs[0]: 48 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31739904
flashfs[0]: Bytes used: 13108224
flashfs[0]: Bytes available: 18631680
flashfs[0]: flashfs fsck took 10 seconds.
Reading cookie from system serial eeprom...Done
Base Ethernet MAC address: d8:67:d9:9d:06:c7
Waiting for PHY auto negotiation to complete... TIMEOUT !
Ethernet link is down.
Error:  RGMII speed

The system has encountered an error initializing
the Ethernet port.
The system is ignoring the error and continuing to boot.
If you abort the system boot process, the following
commands will re-initialize Ethernet, TFTP, and finish
loading the operating system software:

    ether_init
    tftp_init
    boot

Loading "flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724"...#################

File "flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724" uncompressed and installed, entry point: 0x4000
executing...
enet halted

IOS Secondary Bootloader - Starting system.
FLASH CHIP:  Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................
Xmodem file system is available.

DDR values used from system serial eeprom.
WRDTR,CLKTR: 0x8200083f, 0x40000000
RQDC, RFDC : 0x80000032, 0x00000212

PCIE0: link is up.
PCIE0: VC0 is active
PCIE1: link is up.
PCIE1: VC0 is active
Radio 0 : Vendor 0x11AB, Device 0x8350

64bit PCIE devices
Radio 1 : Vendor 0x11AB, Device 0x8324

PCIEx: initialization done
flashfs[0]: 48 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31739904
flashfs[0]: Bytes used: 13108224
flashfs[0]: Bytes available: 18631680
flashfs[0]: flashfs fsck took 10 seconds.
Reading cookie from system serial eeprom...Done
Base Ethernet MAC address: d8:67:d9:9d:06:c7
Creating Test Kernel diagnostic commands

Radio 0 : Vendor 0x11AB, Device 0x8324

Radio 1 : Vendor 0x11AB, Device 0x8350

Radio 2 : Vendor 0x7571, Device 0x5FF3

Radio 3 : Vendor 0xD455, Device 0xBFDF
******** AUTOMATIC DDR CALIBRATION UPGRADE LOGIC *********
=== 1. Is original FCS bootloader in BS:?  If not, skip upgrade ===
    ---> original FCS bootloader not detected -- skip upgrade
Boot CMD: 'boot  flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-xx.ap_o_v15t_esc.201412101724;flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-xx.ap_o_v15t_esc.201412101724'
Loading "flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-xx.ap_o_v15t_esc.201412101724"...##############################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################

File "flash:/ap3g1-k9w8-mx.ap_o_v15t_esc.201412101724/ap3g1-k9w8-xx.ap_o_v15t_esc.201412101724" uncompressed and installed, entry point: 0x100000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, C3500 Software (AP3G1-K9W8-M), Experimental Version 15.2(20141211:014359) [wnbubld 121]
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Wed 10-Dec-14 18:24 by wnbubld

Initializing flashfs...
FLASH CHIP:  Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................

flashfs[3]: 48 files, 9 directories
flashfs[3]: 0 orphaned files, 0 orphaned directories
flashfs[3]: Total bytes: 31481856
flashfs[3]: Bytes used: 13108224
flashfs[3]: Bytes available: 18373632
flashfs[3]: flashfs fsck took 7 seconds.
flashfs[3]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 0 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCC
Copy in progress...CCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.

Waiting for PHY auto negotiation to complete... TIMEOUT !
Ethernet link is down.
Error:  RGMII speed

Radio0  present 8364B 8000 B8020000 0 B8030000 10
Rate table has 300 entries (16 legacy/64 11n/220 11ac)

POWER TABLE FILENAME = ram:/D2.bin

Radio1  present 8364B 8000 B0020000 0 B0030000 C
POWER TABLE FILENAME = ram:/D5.bin

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP3502E-A-K9 (PowerPC460exr) processor (revision A0) with 98294K/32768K bytes of memory.
Processor board ID FTX1627K3N9
PowerPC460exr CPU at 666MHz, revision number 0x18A8
Last reset from power-on
LWAPP image version 7.6.130.16
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: D8:67:D9:9D:06:C7
Part Number                          : 73-12175-06
PCA Assembly Number                  : 800-32268-06
PCA Revision Number                  : A0
PCB Serial Number                    : FOC162230CJ
Top Assembly Part Number             : 800-32904-02
Top Assembly Serial Number           : FTX1627K3N9
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP3502E-A-K9
% Please define a domain-name first.


Press RETURN to get started!


*Mar  1 00:00:10.865: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (11)
*Mar  1 00:00:10.868: *** CRASH_LOG = YES

*Mar  1 00:00:10.868: 64bit PCIE devices
*Mar  1 00:00:11.975: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (1-4)
*Mar  1 00:00:11.975: Security Core found.

*Mar  1 00:00:11.988: Registering HW DTLS
Base Ethernet MAC address: D8:67:D9:9D:06:C7

*Mar  1 00:00:53.040: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar  1 00:00:56.129: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
*Mar  1 00:00:59.397: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)capwap_read_version_info: Info file flash:/ap3g1-k9w8-mx.ap_lmr1_v15t_esc.201309060723/info not find
*Mar  1 00:13:24.185: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C3500 Software (AP3G1-K9W8-M), Experimental Version 15.2(20141211:014359) [wnbubld 121]
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Wed 10-Dec-14 18:24 by wnbubld
*Mar  1 00:13:24.185: %SNMP-5-COLDSTART: SNMP agent on host APd867.d99d.06c7 is undergoing a cold start
*Mar  1 00:13:24.226: %CDP_PD-4-POWER_OK: Full power - AC_ADAPTOR inline power source
*Mar  1 00:13:24.267: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:13:24.434: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar  1 00:13:24.434: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully

*Mar  1 00:13:25.226: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar  1 00:13:42.717: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar  1 00:13:43.805: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:13:43.811: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar  1 00:13:44.805: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar  1 00:13:44.903: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar  1 00:13:45.903: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Mar  1 00:13:52.714: Logging LWAPP message to 255.255.255.255.

*Mar  1 00:13:54.702: %LINK-6-UPDOWN: Interface BVI1, changed state to down
*Mar  1 00:13:55.702: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down

After that if you plug the network cable it just gets IP address from DHCP and complains that cannot communicate with some type of server,
my guess the infamous " network controller".
 
That's correct, it's loaded with "Lightweight Access Point" (LWAPP) firmware. You can reflash it, but as you've discovered you need to somehow obtain the software. I see there's an IOS 12.x release for it, that won't require a license, but IOS 15.x might. Some devices have a "permanent" license for basic features but require you purchase a license if you want advanced features -- for instance, many Cisco switches have a base IP permanent license, which allows you to do all of the normal switching stuff plus some very basic routing, but you have to upgrade to something higher if you want advanced routing functions and services.

There are pirate IOS images floating around on the Internet but personally I wouldn't trust any of them, not even for goofing around in a home lab. This bit of hardware is also new enough that Cisco is probably actively trying to squash IOS piracy for it (they clearly don't care about, e.g. Cisco 2500 series routers, the firmware is everywhere and even Cisco will give it to you for free). Your best bet is probably finding someone who's got a Cisco support contract and seeing if they can get you legit firmware, though you may still be stuck with the license issue.
 
I'll be happy with most basic feature set, right now I have a Dlink wireless router in the basement and a Linksys router acting as a bridge in the upstair bedroom and still
cannot get fast and reliable connection especially in the yard.
I was given couple of these Ciscos each witch a set of 2 antennas, just when I was looking to buy some decent acces point, maybe an Ubiquiti.
 
alpher said:
I'll be happy with most basic feature set, right now I have a Dlink wireless router in the basement and a Linksys router acting as a bridge in the upstair bedroom and still
cannot get fast and reliable connection especially in the yard.
Click to expand...

This is because the repeater (the Linksys router) will only repeat the signal it gets from the device it's repeating (the Dlink.)

If the Linksys router is only getting 50% signal strength, it will only repeat that 50% signal strength, along with any other connectivity issues between it and the main router.

No number of WAPs is going to fix that problem, you need to run a hard line from the basement to wherever the Linksys router is. If you don't fancy running wire in the walls, get a pair of ethernet over powerline adapters to run between both routers.
 
This thread is pushing too far, both in regards to the definition of vintage and also in terms of ethics as it is essentially requesting how to hack a currently supported product that was still for sale earlier this year. It is therefore being closed.
 
Status
Not open for further replies.
Back
Top