Linux on Proxim 802.11a AP
NEWS
Software development suspended,( because everything is working already). Now I
am working on antennas and packaging.
AP linux firmware is quite ready, all interface is similar to LinuxAP, but
more powerfull and flexible.
Gpio outputs can be easily controlled and used for leds only or you can connect
something external to control.
Bridging in client mode dont work because of wlan driver limitations, but that
can be emulated with arp bridge (parprouted ) (only ip nonmulticast traffic will
pass).
Very directional antenna for 5.3ghz is required now, to allow full speed over
long distances.
theoreticaly it is possible to reflash ap even without jtag, because I know
password, but then some bootloader which takes less than 64kb is required.
.......
I decided to find password to access proxim telnet without jtag crack,
Engineer who created that firmware was total joker, everybody thinks that
password must be brando
(since that string can be found in firmware near password prompt and was used on
older devices) but password
is notbrando
btw, you must NOT use putty telnet, or it wont work, it is best to use windows
telnet. or putty in raw mode
......
Implemented basic gpio control, but it need to be made more led oriented, or now
it is impossible to control separate leds.
......
gpio led control appears to me nesecary function, or now it is imposible to know
when ap is on.
unfortunately there is no example of userspace program available
anywhere.
........
web control panel improved a lot, now it allows total control over boot process.
added parprouted, ( but untested now) which should allow to emulate
bridge.
now it is only possible to use AP as router
..........
Instructions how to reflash AP
...........
seems madwifi driver is not good, it woks only in ap or client mode.
ap cant connect to ap , client cant work as bridge.
2004.10.11: first boot as independent device
By now it probably contains all required software to work as bridge or router
...........
First try to boot as standalone device, was not successful,
ethernet driver hangs linux during boot time --- Fixed,( interrupt
registers were uninitialized)
web control panel (because I hate vi :) --- mostly
completed
Some way to store configuration -- OK
initramdisk -- OK
bootloader --- finished
flash-mtd driver -- finished
basic
root system -- OK
wlan driver -- Usable
linux kernel -- OK
released files are here
This device is small computer with ppc processor
| cpu: | IBM PPC405GP 200Mhz RISC, MMU integrated: uart, ethernet, pci |
| flash: | SST 1MB 16bit very fast programming |
| Ram: | hynix 8MB ddram |
| Phy: | LSI L80225 100Mbit Just some cheap one and uses half of all AP electric power |
| pci interface: | usualy cardbus = pci and I don't know which one is used on this ap |
| wlan: | proxim 802.11a atheros with amplifier
6-108mbit speed, 5ghz Potentialy can be quite high power, because other similar cards do not have amplifier also contains saw filters that are not used on cheap cardbus cards |
| Antena system | If somebody understand how that works, tell me. Antena cables are so thin, that they insert probably more than 3db loss. also they used 1/2 wavelength dipole intead of usual 1/4 what means it is same antenna on 802.11a as 802.11b |
New firmware will (probably) contain these functions
Client mode
Traffic shapping
iptables
Monitor mode
Custom scripts
Mini webserver
GPIO-led outputs/inputs for external hardware control
NOTES
The big surprise, that ppc files are bigger than i386,
but they compress much better
Example:
busybox
i386 243kb -> 125kb 7zip or 141kb gzip
ppc 271kb -> 110kb 7zip or 136kb gzip
So 1mb flash is going to fit quite lot of stuff
...
depending on how much people will be interested in this project I will post more news.
If you want to have such super access point, but are unable to modify
it yourself, then I can do this for you,
I do not want money for this job, I prefer to get another wireless AP.
Required stuff:
1. wiggler JTAG adapter (for instructions how to make it go
here) TRST must NOT
be open collector output. ( modified schematic is here )
2. TTL to Uart adapter (I will post schematic later, if there will be such
request) or use data cable from your
mobile phone ;) or build
this one
3. OCD commander (get it from
www.macraigor.com. All bugs, it contains, are free : )
4. if you want to recompile source code you need computer with linux (or
BSD probably) capable to run ppc crosscompiler
5. Some knowledge about electronic, if you dont have it then get it, it is
free afterall. ;)
|
Possible UART - TTL converter schematic. It have advantage over max232,
|
................................

Connect jtag and uart (you need only UTX and URX lines) resolder
that jumper, check if you can control cpu.
Uart uses standard settings (9600bps, no control.)
Download required files here you will need .s19
and .mac files
because OCD commander cant reset cpu ( did they at least test their
software?) and 405GP damages itself(until next reset) if it runs bad
instructions
you will need to use this trick to avoid that problem.
WARNING: as I know new OCD commander is somehow
broken, to avoid problems use older one from my page.
it is already configured, as required. But you must also install new ocd
commander anyway, or nothing will work.
1. initialize cpu: (run init.mac)
2 write assembler instruction b 0 to 'reset vector' location. ( run wrb.mac)
3 reset board use reset switch or unplug power cable.
4 initialize again. (run init.mac)
now you can erase and reflash
5 download (with ocd commander to ram ) umon.s19 file
6 download flash.s19
7 erase chip (run erase.mac)
8 program it ( type 'pc 0' and press go )
I had no much motivation to make full featured flash program so it will not tell
when it finishes
just wait 15-20 sec and press stop then type 'dasm' if cpu is stuck on 'b
0' instruction then all is done
Flash contains micromonitor now, it can be used to load linux or
anything else,
my binary have default ip address 192.168.10.90 and you can use tftp to download
files from some sever
I was not able to finish flash driver for micromonitor and don't need it that
much anymore.
Source code is available for all software
Linux can be flashed in same way.
download all files from here to
c:\images
1. initialize cpu: (run init.mac)
2 write assembler instruction b 0 to 'reset vector' location. ( run wrb.mac)
3 reset board use reset switch or unplug power cable.
4. run script.mac
5. write to flash ( type 'pc 0' and press go )
you need to wait about 30sec until everything is done,
then reset board and enjoy new linux firmware.
For questions, and comments email is tpt#pupa.da.ru
example output from AP with
|
Unpacking linux |