Horaco 2.5GbE Managed Switch (8 x 2.5GbE + 1 10Gb SFP+)

[JBI]

I already bought SFP-10GSR-85:
View attachment 35535
but it is not compatible (official support told me that, but when I asked for a compatible devices they do not respond clearly).

Any advice?

I have two switches connected via these SFP. They work great, although the cable is 2 meters long. I just don't need it anymore. So you just need to try

 

[redliquid]

I have two switches connected via these SFP. They work great, although the cable is 2 meters long. I just don't need it anymore.
View attachment 35539

Thank you!

 

[Bezzoss]

I have tried ?a up to six times now with only exhausted results.

FYI, for anyone else attempting to try to crack this, using hengrui?a or any number of mask attack characters limits your performance significantly. I was getting 1.2mhs trying
`hashcat -O -a 3 -m 0 -i hengrui.hash hengrui?a?a?a?a?a?a?a?a'
After 6 ?a characters I decided to spin up an EC2 instance type g4dn.16xlarge
When I tried the same I was getting less performance than my home Radeon RX590
I then read: hashcat/docs/performance.txt at e194fec2291e487d01c313934932ba782eed1367 · hashcat/hashcat

I then tried:
`.\hashcat -O -a 3 -m 20 -i --increment-min=4 admin.hash.txt ?a?a?a?a?a`
where admin.hash.txt contains one line:
f6fdffe48c908deb0f4c3bd36c032e72:admin

The bruteforce ran much quicker treating the username as a salt and yielded:
f6fdffe48c908deb0f4c3bd36c032e72:admin:admin

I'm now running against hengrui.hash with a single line of:
81d57ea79621e8887914f40ee4122185:hengrui

locally using:
`.\hashcat -O -a 3 -m 20 -i --increment-min=7 .\hengrui.hash ?a?a?a?a?a?a?a?a`

It should only take 9 more hours for me to finish the 7 character attempt. 8 characters on my EC2 instance is going to take 6 days and 9 hours, and I'm probably going to cancel it tomorrow because I don't want to spend $3/hour for the next week to try. I am getting good speeds though at 12009.4 MH/s. Locally I'm only getting 1934.2 MH/s

Anyone else wanting to try, use the following options:
-O -a 3 -m 20 -i --increment-min=8 .\hengrui.hash ?a?a?a?a?a?a?a?a
with as many ?a's appended that you can afford.
Options:
-a 3
mask attack brute force
-m 20
md5($salt.$pass)
-i
incremental, tries each combo of ?a incrementally
--increment-min=8
I've ran ?a incrementally up to 6, and 7 should be done in 8 hours or so, this will start you at 8 and will run until ?a's are exhausted or a password is cracked

cat .\hengrui.hash
81d57ea79621e8887914f40ee4122185:hengrui

To test that it will work on admin:
cat .\admin.hash.txt
f6fdffe48c908deb0f4c3bd36c032e72:admin

If you're on Windows, be wary of how you create the text files to avoid incompatible line endings as hashcat expects CRLF linux line endings.

Now that I have this running better, I'm going to let 7 finish as a brute force attempt, cancel at 8 and try against more dictionary attacks with exotic rulesets. My previous attempts at this that have failed were:
.\hashcat.exe -O -w 3 -a 7 -m 0 hengrui.hash hengrui?a?a?a .\password-list-cn.tx
where password-list-cn.txt came from password-list/countries/password-list-cn.txt at main · scipag/password-list

I want to try with the m 20 attack mode, which will be faster along with other variations of much larger word lists using masks and known compromised passwords because I don't have the patience to wait a year to crack this through brute force means and don't want to drop the cash on a new graphics card or pay extravagant EC2 prices.

No luck with 8 symbols.
Timestamps are for the last session. Overall took about a week mixing it between GTX 1080Ti and Tesla P4.

Session..........: eight                               
Status...........: Exhausted
Hash.Mode........: 20 (md5($salt.$pass))
Hash.Target......: 81d57ea79621e8887914f40ee4122185:hengrui
Time.Started.....: Tue Mar 26 22:21:13 2024 (6 hours, 22 mins)
Time.Estimated...: Wed Mar 27 04:43:47 2024 (0 secs)
Kernel.Feature...: Optimized Kernel
Guess.Mask.......: ?a?a?a?a?a?a?a?a [8]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........: 10678.5 MH/s (0.88ms) @ Accel:16 Loops:512 Thr:512 Vec:4
Recovered........: 0/1 (0.00%) Digests (total), 0/1 (0.00%) Digests (new)
Progress.........: 6634204312890625/6634204312890625 (100.00%)
Rejected.........: 0/6634204312890625 (0.00%)
Restore.Point....: 7737809375/7737809375 (100.00%)
Restore.Sub.#1...: Salt:0 Amplifier:857088-857375 Iteration:0-512
Candidate.Engine.: Device Generator
Candidates.#1....: }y}*={~} ->  ~| ~}|}
Hardware.Mon.#1..: Temp: 70c Fan: 42% Util: 96% Core:1480MHz Mem:5005MHz Bus:16

Started: Tue Mar 26 22:21:11 2024
Stopped: Wed Mar 27 04:43:48 2024

P.S. Definitely checked that hashcat works as expected on admin before starting it on hengrui.

 

[berwhale]

Hello guys. Have you tried the SFP+ port? I want to connect two places via fiber over 200m distance (Horaco 2xZX-SWTGW215AS 5xRJ45 + SFP+). I want to achieve 10Gbit connection. I already have a multimode cable, but I don't know which SFP+ modules should I buy.
View attachment 35534

I already bought SFP-10GSR-85:
View attachment 35535
but it is not compatible (official support told me that, but when I asked for a compatible devices they do not respond clearly).

Any advice?

Interesting, I am using the Cisco SFP-10G-SR module that your FS module is supposed to be compatible with. I am testing with a 3m OM3 LC-LC at the moment (switches arrived from China yesterday)...

 

[berwhale]

I didn't get the hengrui password and login_ft.cgi to work. You can access the the factory methods using the admin credentials by cgi (attached is an example of changing the colour to pink)

/ftdft.cgi
/ftlogo.cgi
/ftcolor.cgi

Thanks for the URLs. The radio button to switch from Chinese to English on the login page was bothering me. Disabling Chinese on the factory default URL (/ftdft.cgi) forces the login straight to English.

 

[Shonk]

Does anyone with an 8+1 Know the gap from the SFP+ Cage to the case

I want to order some heatsink's to put on the cage for when my Ampcom SWTGW218AS arrives
As im going to be using SFP+ to RJ45

 

[xxtraPickles]

So I have this switch and everything is working fine on the latest firmware, including a 3 port LACP trunk connection but my SYS light is always blinking. Nothing about it in the documentation, anyone seen this?

 

[MountainBofh]

So I have this switch and everything is working fine on the latest firmware, including a 3 port LACP trunk connection but my SYS light is always blinking. Nothing about it in the documentation, anyone seen this?

My 8 SFP+ Horaco does that too. Its annoying, but otherwise the switch is working fine. Hoping to find a firmware update for it that might fix it.

 

[xxtraPickles]

My 8 SFP+ Horaco does that too. Its annoying, but otherwise the switch is working fine. Hoping to find a firmware update for it that might fix it.

Thanks for confirming its not just me...I am on 1.9, its been running for about a week now, but only just noticed the light

 

[ms264556]

My 8 SFP+ Horaco does that too. Its annoying, but otherwise the switch is working fine. Hoping to find a firmware update for it that might fix it.

All of my 4+2 hasivo/poeplus managed switches also do this. v1.7 and V1.9 firnware. The flashing is much more rapid if you screw up a firmware upgrade and they're in recovery mode.

 

[tamuin]

It looks like TP-Link is now selling a version of this switch:

TL-SE2109 2.5G云管理交换机 - TP-LINK官方网站

TP-LINK（普联技术有限公司）是领先的ICT设备与解决方案提供商。自1996年成立以来，我们提供的海量设备已服务千行百业、千家万户，用以构建万物互联的世界。我们致力于让我们的系统和解决方案，成为农业、工业、流通和服务业等广泛领域的生产力工具，提高社会效率，节约社会成本，创造社会财富，为数字化社会的建设提供服务。

www.tp-link.com.cn

If the firmware is compatible that might be very interesting. I don't see any firmware downloads on their web site.

 

[up-n-atom]

Does anyone with an 8+1 Know the gap from the SFP+ Cage to the case

I want to order some heatsink's to put on the cage for when my Ampcom SWTGW218AS arrives
As im going to be using SFP+ to RJ45

Did the same and used 7mm high which has about 1-2mm of headroom. 55mm length and cut to length, depending on the pad thickness it can be anywhere from 35-40mm.

 

[custom90gt]

Did the same and used 7mm high which has about 1-2mm of headroom. 55mm length and cut to length, depending on the pad thickness it can be anywhere from 35-40mm.

Any link to the heatsink you used? I just installed my SFP+ to RJ45 and it gets toasty.

 

[Shonk]

My Ampcom 8+1 Just turned up

here's its defaults from the factory

The PSU is 12V 1a is that normal my Hisource 4+2 Unmanaged Came with 12v 1a also

https://i.postimg.cc/Nsgvjky5/Amp-Com-9-Port-Sw-itch-Defaults-Anonimized.png

Stock Logo attached (Someone was looking for this the other day)

 

[up-n-atom]

Any link to the heatsink you used? I just installed my SFP+ to RJ45 and it gets toasty.

Just a cheap aluminum sink. Unless you have a band saw or want to grunt it with a hack saw I'd recommend to buy as close to the length as possible instead.

https://aliexpress.com/item/1005003083684958.html

The pad is cut from a sample from Bergquest GPVOUS-0.250-01-0816 which isn't realistic to get but I'm certain you can get similar thicknesses from Ali.

 

[Shonk]

My AmpCom 8+1 is another built by the same oem
PCB:SWTG118AS-V2.1

I ended up using a Cheap NVME heatsink angled to miss the capacitor
stuck to the cage with akasa AK-TT12-80 Thermal Adhesive Tape

then a 0.5mm strip of Silicone Thermal Pad ontop
then another NVME heatsink
then another 0.5mm strip of Silicone Thermal Pad to sink the sinks into the top of the case

Here's an image before i did the second Heatsink

 

[felixtheflash]

I'm sorry to be a bit of a noob here but I'm having some trouble with my switch. Recently bought the Horaco managed 8port(zx-swtgw218as) but I cant login to the switch via web interface. I wanted to upgrade the fw to 1.9 to get LACP. But following the ip adress in the manual gives me no connection. (192.168.2.1). Any advice?

 

[blunden]

I'm sorry to be a bit of a noob here but I'm having some trouble with my switch. Recently bought the Horaco managed 8port(zx-swtgw218as) but I cant login to the switch via web interface. I wanted to upgrade the fw to 1.9 to get LACP. But following the ip adress in the manual gives me no connection. (192.168.2.1). Any advice?

Is your computer on the same 192.168.2.0/24 subnet?

Is that IP also printed on the sticker on the bottom of the switch? It's not impossible that the manual is wrong.

 

[felixtheflash]

Is your computer on the same 192.168.2.0/24 subnet?

Is that IP also printed on the sticker on the bottom of the switch? It's not impossible that the manual is wrong.

Thanks for answering

Its the same ip printed on the bottom of the switch yes,

This is one of the computers that ive tried to connect to it, should be the same subnet.

 

[blunden]

Thanks for answering

Its the same ip printed on the bottom of the switch yes,

This is one of the computers that ive tried to connect to it, should be the same subnet.
View attachment 35911

Ok, then I don't know. Since you claimed to be "a bit of a noob" I figured it was worth double checking the more basic stuff, just in case.

Does it work if you only connect a cable directly to the switch, with nothing else plugged in to the other switch ports? The fact that I see IPv6 DNS servers (or any at all) indicates to me that you might already have it connected to the rest of your network, unless you statically set those.