Horaco 2.5GbE Managed Switch (8 x 2.5GbE + 1 10Gb SFP+)

[ScroogeMcAllister]

You can dump the unique id of your flash and run the python script posted in either of those github issues to generate the otp bytes to write (just replace uid which is 1st 4 bytes of unique id in lowercase hex concat together)

hi, I accidentally erased OTP on my SWTG218ANS (managed poe) with FM25Q16A chip onboard
(by ERASESS in FM25Q16A_SS.pas I guess and didn't save the origin OTP at first READSS)

i've got a dump from here, also changed MAC at 0x1fc000 and ran calcsum.py to update a chesksum, then uploaded it to flash

now I see PayLoad Chksum Error while boot
I've generated 16-byte key with encuid.py script from your github

uid entered: 10093f25 (full chip uid is 10093f25f4c24ca1)

mr@scrooge:~# python3 enc.py
12fafe6e023251b0

encrypted uid str: 12fafe6e023251b0
encrypted uid hex: 31326661666536653032333235316230

I need an OTP example how it looks like to load it back with ch341a FM25Q16A_SS.pas WRITESS
thx in advance

 

[Shonk]

I erased the flash on my ZX-SWTGW218AS with a ch341 last week and restored a backup
and didnt have any problems it was a Winbond 25Q16JVSIQ am i missing something

This is the only image i have from when i did it

 

[McArrow74]

hi, I accidentally erased OTP on my SWTG218ANS (managed poe) with FM25Q16A chip onboard
(by ERASESS in FM25Q16A_SS.pas I guess and didn't save the origin OTP at first READSS)

I need an OTP example how it looks like to load it back with ch341a FM25Q16A_SS.pas WRITESS
thx in advance

I suggest you to use IMSProg instead (OTP area erase/write is easier and reliable). Also it's better to use encuid2, where you can choose OTP encryption algo depending on the switch HW/SW revision.

If you need to stick with AsProgrammer then I recommend to fix FM25Q16A_SS.pas script as mentioned here: The detailed procedure and steps for the repair · Issue #16 · up-n-atom/SWTG118AS

To successfully write OTP data you need all 1024 bytes in the buffer (encrypted ID padded with FFs). I have used following steps:

1) load the file with encrypted ID
2) ERASESS
3) READSS (to fill the rest of the buffer with FFs)
4) WRITESS

The result should look similar like this:

 

[sp300b]

encuid2.exe

Details here: GitHub - up-n-atom/SWTG118AS: SWTG###AS RE

Open Source Software - Compiled and providing encuid2 DOS exe software - here

Put tools.zip file it in some folder - run un-zip twice, both times with the same password: encuid2

Run the extracted encuid2.exe program from CMD prompt.

 

[ScroogeMcAllister]

Hi, thx for tool, I have hw ver 1.0, chip uid 10093f25f4c24ca1

encuid2.exe -a 0 10093f25f4c24ca1
12fafe6e023251b0

encuid2.exe -a 1 10093f25f4c24ca1
0a2b3d21ea90bfb93c41579673aab2de1e7a6ce2d6c67f14c9d99da193107a71

encuid2.exe -a 2 10093f25f4c24ca1
ae056bf8acea4c6549fb7d67343e6d5e095ec88ef109c54b56013ac550c72de1

so the Bold one key is mine right? I'll try to flash it to OTP with IMSProg tomorrow

Another question, does anyone have fw for SWTGW218AS-150 PoE Managed switch?
I guess all the dumps from github up-n-atom/SWTG118AS are non-poe

Thanks in advance

 

[sp300b]

1) Bold is Yours - if you'll use it without option "-a", you'll get the BOLD one, too.

2) Another Question / Another answer : Check mine post #653

 

[ScroogeMcAllister]

2) Another Question / Another answer : Check mine post #653

There is original firmware dump V200.1.10 as I see
Will it fit my hardware version 1.0? Will it need -v2 otp for that image or I leave -v1 generate otp key?

 

[sp300b]

If Your HW ver. is 1.0 then seems not compatible....
For encuid2 calculated value I think there is only one possibility and we have already agreed the value.

 

[ScroogeMcAllister]

Looks like I need firmware 1.9.1 Managed PoE for SWTG118AS or SWTGW218AS

if there any? I would appreciate

 

[ScroogeMcAllister]

I will post here some photos of my device version 1.0

 

[McArrow74]

so the Bold one key is mine right? I'll try to flash it to OTP with IMSProg tomorrow

The choice of the encryption algorithm depends on the FW version used by the switch (older FW versions 1.x expect ID encrypted with -a 0, while V100.x and V200.1.x usually -a 1).

Remember to use IMSProg v1.5.1+

 

[ScroogeMcAllister]

Thanks for reply
What's the hardware difference/ requirements for V1.9.1 and V200.1.x?
Will V200.1.x run fine on my hw 1.0 with -v1 encrypted id? Or they changed something except flash

My flash is FM25Q16A, but on 2.0 boards I saw W25Q16V, at least size is the same

 

[McArrow74]

What's the hardware difference/ requirements for V1.9.1 and V200.1.x?
Will V200.1.x run fine on my hw 1.0 with -v1 encrypted id? Or they changed something except flash

My flash is FM25Q16A, but on 2.0 boards I saw W25Q16V, at least size is the same

You can basically run new FW with older HW (with proper OTP data), but PoE, LEDs and SFP may not work correctly.

Also check this post: https://forums.servethehome.com/ind...witch-8-x-2-5gbe-1-10gb-sfp.41571/post-430180

Older switches used FM25Q16A, newer use W25Q16JV... but it doesn't matter. The same SPI instruction is used to read the OTP data.

 

[ScroogeMcAllister]

Hi guys. Some time ago I asked for help unbreak my SKS3200-8E1X-P. After firmware upgrade the device has been quiet and only one led blinking all time. The full dump could helped to make up for a life the router.

SKS3200-8E1X-P-V100.9.6-dump.bin

drive.google.com

This is full dump from another same router and if you want change MAC or other default settings you may it do on http://192.168.10.12/ftdft.cgi

Hi, I can confirm that this V100.9.6 dump loads well on my hw 1.2 pcb and generated otp key -v1 by
encuid2.exe -a 1 10093f25f4c24ca1
0a2b3d21ea90bfb93c41579673aab2de1e7a6ce2d6c67f14c9d99da193107a71
I've loaded it easily by IMSprog (thanks, this tool works great)
and the V200.1.10 dump not loads at all at 1.2 hw pcb - it stucks at early booting

EDIT: Succeded with this item, thanks for everyone. Regards

 

[sp300b]

Just a remark - V200.1.10 dump is firmware to be used for update via web interface.

 

[slawekk]

I have an SKS3200M-8GPY1XF device which, after a power outage, entered blinking mode. I tried various methods, but unfortunately I was unable to resolve the issue.





Below is what I have done so far:

1. I connected a USB FT232RL / FT232BL to a TTL module (5V / 3.3V, USB 2.0). The computer correctly detected the device.





I connected the wires (GND, TX, RX) to the main board of the SKS3200M-8GPY1XF and to the USB module.
Then I launched PuTTY on the computer, but nothing happens.


Please provide a detailed, step-by-step guide on how to perform the entire procedure via the terminal, including how to properly configure the COM port on the computer (baud rate, data bits, parity, stop bits, flow control, etc.) and what exact steps I should follow.


2. I reflashed the entire system using a USB programmer from the EEPROM CH341A / CH341B series (24/25 series).

The device is still blinking.






Please help me and let me know what I should do to recover or restore this device.

Pliki: Download
- A9_RF_V1.9.1_SKS3200M-8GPY1XF_0603_cn.bin ( Firmware )
- ch341_fm25q16_兮克_SKS3200M-8GPY1XF.bin ( Flash )
- ch341_fm25q16_兮克_SKS3200M-8GPY1XF.rar (All Pack)

PLEASE HELP ME !!!!

 

[switchfan]

PLEASE HELP ME !!!!

Your switch died probably for the same reason as mine did - it doesn't work with full flash access speed anymore, maybe due to degradation of the flash chip.

But there's help out there:
Just go to GitHub - logicog/RTLPlayground: A Playground for Firmware development for RTL8372/RTL8373 based 2.5GBit Switches, build the firmware for MACHINE_SWTGW218AS, flash it with you programmer/clamp and you will likely have a working switch again.

If you have troubles in building the firmware yourself, I could provide you with an image.
Edit: Just attached a fresh build.

 

[slawekk]

Your switch died probably for the same reason as mine did - it doesn't work with full flash access speed anymore, maybe due to degradation of the flash chip.

But there's help out there:
Just go to GitHub - logicog/RTLPlayground: A Playground for Firmware development for RTL8372/RTL8373 based 2.5GBit Switches, build the firmware for MACHINE_SWTGW218AS, flash it with you programmer/clamp and you will likely have a working switch again.

If you have troubles in building the firmware yourself, I could provide you with an image.
Edit: Just attached a fresh build.

How do I load this software onto the flash?

 

[switchfan]

Just as you did with the OEM firmware: Use your programmer.
Of yourse you have to unzip it first.

 

[slawekk]

Just as you did with the OEM firmware: Use your programmer.
Of yourse you have to unzip it first.

I understand that I should load this bin file as I did before when updating the flash?