diff options
author | Simone <26844016+simonebortolin@users.noreply.github.com> | 2024-02-18 11:30:52 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-02-18 11:30:52 +0100 |
commit | eddf563f18fe6283615af62edea91ee6fc13447c (patch) | |
tree | 7cdaef6d0d1bb86cdc59a011e6a98ad5943d4125 /_router_pon/free_iliad_box_pop.md | |
parent | Update ont-nokia-xs-010x-q.md with new version (#305) (diff) | |
download | hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar.gz hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar.bz2 hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar.lz hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar.xz hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.tar.zst hack-gpon.github.io-eddf563f18fe6283615af62edea91ee6fc13447c.zip |
Diffstat (limited to '_router_pon/free_iliad_box_pop.md')
-rw-r--r-- | _router_pon/free_iliad_box_pop.md | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/_router_pon/free_iliad_box_pop.md b/_router_pon/free_iliad_box_pop.md new file mode 100644 index 0000000..fc48698 --- /dev/null +++ b/_router_pon/free_iliad_box_pop.md @@ -0,0 +1,53 @@ +--- +title: FreeBox Pop/IliadBox +has_children: false +layout: default +parent: Free/Iliad +--- + +# Hardware Specifications + +| | | +| ---------------- | ---------------------------------------------------------------------------------- | +| Vendor/Brand | Free/Iliad | +| Model | | +| ODM | | +| ODM Product Code | | +| Chipset | BCM63153 | +| Flash | 4GB eMMC 5.1 KLM4G1FETE-B041 | +| RAM | 2x 512MB DDR3L-1866 NT5CC128M16JR-EK | +| CPU | | +| CPU Clock | | +| Bootloader | | +| System | | +| Load addr | | +| SFP | 1G-BASEX, 10G-BASESR-LR, HSGMII (only AFM0003ILD), PON equivalent symbol EPON 10/1 | +| Ethernet | 2 1GbE, 1 2.5GbE LAN/WAN | +| Optics | SC/UPC | +| IP address | 192.168.1.254 | +| Web Gui | ✅ | +| SSH | | +| Telnet | | +| Serial | | +| Serial baud | 115200 | +| Serial encoding | 8-N-1 | +| Form Factor | CPE with SFP w/o MAC support | + + + +## Serial + +The serial port is routed through the USB-C port used for power (which is PD compliant, tested with a notebook power supply). The pins are SBU1 and SBU2, reversal is handled using an open drain buffer (SN74LVC2G07) so a pull-up resistor on RX is needed. On the power daughter board TP7 is TX and TP8 is RX. There is also a USB differential pair routed through the USB-C connector but there is no use for it yet. +At the moment nothing more than a boot log is available. [^bcm61650hack] [^freeboxhack] + +## SFP Whitelist +- WTD RTXM166-401-C13 (EPON w/o MAC) +- WTD RTXM166-401-C11 (EPON w/o MAC) +- Hisense LTF7215-BH+ (EPON w/o MAC) +- [Technicolor AFM0003](/ont-technicolor-afm0003) (GPON with MAC) +- SFP Copper 10Gtek (1 and 10 Gbps) + +# Miscellaneous Links + +[^bcm61650hack]: *Pwning the bcm61650* https://blog.xilokar.info/pwning-the-bcm61650.html +[^freeboxhack]: *Firmware key extraction by gaining EL3* https://blog.xilokar.info/firmware-key-extraction-by-gaining-el3.html |