[OpenWrt Wiki] Cisco RVS4000 v2

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Cisco RVS4000 v2 ======
Small Business / Home Router with L7 IPS and NAT (both hardware accelerated), a VLAN capable switch.

This page has preliminary documentation for those wishing to help in getting OpenWrt firmware running on this hardware.


===== Supported Versions =====
^ Version/Model   ^ Launch Date   ^ OpenWrt Version Supported   ^ Model Specific Notes   ^
| v1              |       ?       |       **unsupported**       |                        |
| v2              |       ?       |       **unsupported**       |                        |


===== Hardware Highlights =====
^ SoC ^ Ram ^ Flash ^ Network ^ USB ^ Serial ^ JTag ^
| [[wp>Cavium]] CNS1202 (Star Semiconductor STR9202) | 64MiB | 8MiB | RTL8366 1GbE(WAN), 4GbE(LAN | No| Yes | ? |


===== Installation =====
  - -> [[:downloads]]
  - -> [[docs:guide-user:installation:generic.flashing|Install OpenWrt]]

  * Access the following site on the OEM WebInterface: ''%%http://192.168.1.1/Hidden_telnet.htm%%''
  * Select //enable// and push //save//
  * Telnet on Port 23, username=''admin'', pwd=''admin''


==== Flash Layout ====
Please check out the article [[docs:techref:flash.layout]]. It contains an example and a couple of explanations.

=== Original Layout ===
Linux version 2.4.27-star (root@localhost) (gcc version 2.95.3 20010315 (release)) #1 Tue Mar 16 11:23:54 CST 2010

  * 0x00000000-0x00020000 : "BootLoader "
  * 0x00020000-0x00040000 : "System Configuration"
  * 0x00040000-0x00100000 : "Signature"
  * 0x00100000-0x00680000 : "Kernel"

^   Cisco RVS4000 V2  Flash Layout           ^^^^^
^ Layer0       | 8MiB  ||||
^ Layer1       | mtd0  **//BootLoader//** 128KiB | mtd1 **//System Configuration//** 128KiB | mtd2 **//Signature//** 1152KiB | mtd3 **//Kernel//** 6784KiB |

==== Upgrading OpenWrt ====
->  [[docs:guide-user:installation:generic.sysupgrade]]
TBD

=== Terminal Upgrade Process ===
TBD
===== Basic configuration =====
TBD
===== Specific Configuration =====
==== Interfaces ====
TBD

==== Switch Ports (for VLANs) ====
TBD

==== Failsafe mode ====
-> [[docs:guide-user:troubleshooting:failsafe_and_factory_reset]]

==== Buttons ====
-> [[docs:guide-user:hardware:hardware.button]] on howto use and configure the hardware button(s).

===== Hardware =====
It's been stated that the Cisco models RV220w and RV120w use the same CPU as this device.

==== Info ====
^ [[wp>Instruction set|Architecture]]    | [[wp>ARM architecture|ARM]] |
^ Vendor          | [[wp>Cavium Networks]] |
^ [[docs:techref:bootloader]]     | [[docs:techref:bootloader:armboot|ARMboot]] |
^ [[docs:techref:hardware:soc|System-On-Chip]]1  | Cavium Networks / Star BroadWeb CNS1202 (STR 9202 CPU: FA526id(wb) rev 1 (v4l) |
^ [[docs:techref:hardware:cpu|CPU]]1/Speed       | 250 MHz |
^ Flash           | MXIC MX29LV640EBTI-70G |
^ Flash Size      | 8192 KiB |
^ RAM | 2x EtronTec EM6AA160TSA-5G |
^ RAM Size        | 64 MiB   |
^ Ethernet        | Vitesse VSC7385 (4 port) RTL8366RB Gigabit w/ vlan support [[docs:techref:swconfig]] |
^ USB             | No |
^ [[docs:techref:hardware:port.serial|Serial]]        | [[#Serial|Yes]] |
^ [[docs:techref:hardware:port.jtag|JTAG]]            | [[#JTAG|Unknown]]  |

==== CPU ==== 

<code>
Device                        CNS1202
Part Number*                    "CNS1202-XXXBG304-Option Code "
"Parallel Flash"                    8/16-bit
Memory I/O                    16/32-bit
"Content Inspection Engine"        y
"Embedded Switch"                y
"Hardware NAT/NAPT"                y
"Interfaces: USB 1.1/2.0 PHY/CTL"    2 ports
Interfaces: PCMCIA                y
Interfaces: Ethernet                "2 x RGMII/MII"
PCI 2.2 Host                    "32-bit/66 MHz up to 3 devices"
Package                        BGA-304
</code>

==== Serial ====
-> [[docs:techref:hardware:port.serial]] general information about the serial port, serial port cable, etc.

Unpopulated J1 header is a 3.3V serial port that is the primary serial console. It's possible to solder a 3 pin header onto the PCB and access the serial console including the bootloader prompt, using an FTDI 3.3V serial-to-usb cable.

 Pinout

  - VDD (the [] marked pin)
  - RX
  - TX
  - GND

Only RX TX and Ground are needed to use the terminal set up with 38400 baud, 8 data bits, no parity and one stop bit (38400 8N1). Uses 3.3V TTL.

==== JTAG ====

It remains to be seen if there is any JTAG support on this board. There is no obvious unpopulated connector that could be JTAG.

===== Debricking =====
-> [[docs:guide-user:troubleshooting:generic.debrick]]

===== Hardware mods =====

===== Notes =====

==== Hidden Telnet ====

You can (insanely) enable telnet access on all ports (WAN and LAN) by the web interface:
  http://$ROUTER_IP/Hidden_telnet.htm

This is useful for poking around on your router without too much trouble.

==== Bootloader Log ====

<WRAP bootlog>
<nowiki>ARMboot 1.1.0 (Mar  4 2010 - 15:27:17)

Star maintain version 0.14.100000000
ARMboot code: 00000000 -> 0001aeb0
ARMboot code(Bin file):00000000 ->00016ca0

STR9100 CPU Clock: 250 MHz

DDR Bank #0: 00000000 64 MB
DDR Controller Data Bus Width: 32 bits
Flash Dev.id = 22CB

Flash Bank #1: 8 MB

*** Using default environment
## Starting application at 0x01000000 ...
Reset switch by gpio 10,low active

RTL8366RB Chip version [3]
Force RTL8366 MAC5 link up and 1000M
Boot version 1.04

MAC Address:58-8d-09-e2-96-8e
the product id is : 65 52 63 4F 6D 4D
the pruduct ID check OK!
## Application terminated, rc = 0x0

Hit ENTRY to stop autoboot:  0 
## Starting application at 0x10160000 ...
Uncompressing Linux.....................

ARMboot 1.1.0 (Mar  4 2010 - 15:27:17)

Star maintain version 0.14.100000000
ARMboot code: 00000000 -> 0001aeb0
ARMboot code(Bin file):00000000 ->00016ca0

STR9100 CPU Clock: 250 MHz

DDR Bank #0: 00000000 64 MB
DDR Controller Data Bus Width: 32 bits
Flash Dev.id = 22CB

Flash Bank #1: 8 MB

*** Using default environment
## Starting application at 0x01000000 ...
Reset switch by gpio 10,low active

RTL8366RB Chip version [3]
Force RTL8366 MAC5 link up and 1000M
Boot version 1.04

MAC Address:58-8d-09-e2-96-8e
the product id is : 65 52 63 4F 6D 4D
the pruduct ID check OK!
## Application terminated, rc = 0x0

Hit ENTRY to stop autoboot:  0 
STR9100></nowiki>
</WRAP>\\


==== Kernel Log ====

<WRAP bootlog>
<nowiki>## Starting application at 0x10160000 ...
Uncompressing Linux....................................................................... done, booting the kernel.
request_standard_resources()....OK
trap_init().....OK
init_IRQ().....OK
sched_init().....OK
softirq_init().....OK
time_init().....OK
Linux version 2.4.27-star (root@sbu-ii-1-server) (gcc version 2.95.3 20010315 (release)) #3 Thu May 12 16:07:18 CST 2011
CPU: FA526id(wb) revision 1
ICache:16KB enabled, DCache:16KB enabled, BTB support
Machine: STAR_STR9100
MM: not creating mapping for 0x10000000 at 0x10000000 in user region
On node 0 totalpages: 16384
zone(0): 16384 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram0 MEM=64
I-base_addr : c01d3000
IRQ Timer1 at interrupt number 0x0 and clock 125000000(Hz)
console_init().....OK
kmem_cache_init().....OK
Calibrating delay loop... 192.10 BogoMIPS
Memory: 64MB = 64MB total
Memory: 57884KB available (1985K code, 435K data, 68K init)
mem_init().....OK
pgtable_cache_init().....OK
proc_caches_init().....OK
Dentry cache hash table entries: 8192 (order: 4, 65536 bytes)
Inode cache hash table entries: 4096 (order: 3, 32768 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
vfs_caches_init().....OK
Buffer cache hash table entries: 4096 (order: 2, 16384 bytes)
buffer_init().....OK
Page-cache hash table entries: 16384 (order: 4, 65536 bytes)
page_cache_init().....OK
signals_init().....OK
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
do initcalls start
Starting kswapd
pty: 256 Unix98 ptys configured
Str9100 Serial Driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf7800000 (irq = 10) is a Star_UART


!!!RESET SWITCH

RTL8366RB Chip version [3]
RTL8366 force link and 1000M success!
!!!Init default VLAN
!!!Init ACL 

!!!Power save enable 

rxring.vir_addr=C4800000	rxring.phy_addr=00376000 
txring.vir_addr=C4802000	txring.phy_addr=00350000 
eth0: Switch Type: ONEARM(One Mac mode) 
[orn_drv_open_poll,3362]
[orn_drv_open_poll,3368]
[orn_drv_open_poll,3380]
[orn_drv_open_poll,3397]
Check MAC/PHY 0 Link Status : UP!
[orn_drv_open_poll,3422]
[orn_drv_open_poll,3443]
Star9100 one arm Lan Port Bridge Mode 
Error : PORT0 is disabled 
[orn_drv_open_poll,3467]
[orn_drv_open_poll,3473]

gsw_info.vlan[0].vlan_vid : 3292

gsw_info.vlan[1].vlan_vid : 1
[orn_drv_open_poll,3522]
[orn_drv_open_poll,3529]
[orn_drv_open_poll,3543]
[orn_drv_open_poll,3546]
eth0: STAR9100 LAN Port Initial Finished 
eth1: STAR9100 WAN Port Initial Finished 
 Enable AN
STAR9100 EWC Project MAC1 Initial
eth2: STAR9100 EWC Port Initial Finished 
RAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksize
loop: loaded (max 8 devices)
PPP generic driver version 2.4.2
 Amd/Fujitsu Extended Query Table v1.1 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Creating 4 MTD partitions on "str9100_flash":
0x00000000-0x00020000 : "BootLoader "
0x00020000-0x00040000 : "System Configuration"
0x00040000-0x00160000 : "Signature"
0x00160000-0x00800000 : "Kernel"
IPv6 v0.8 for NET4.0
IPv6 over IPv4 tunneling driver
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 4096 bind 4096)
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
Linux IP multicast router 0.06 plus PIM-SM
klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: cvs2006Jan12_11:29:56
klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
ipsec_3des_init(alg_type=15 alg_id=3 name=3des): ret=0
netfilter PSD loaded - (c) astaro AG
ipt_random match loaded
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
ip6_tables: (C) 2000-2002 Netfilter core team
Str9100 Information inited 
STAR9100 Software HNAT Driver Initialed
NetWinder Floating Point Emulator V0.97 (double precision)
do initcalls end
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4349K
VFS: Mounted root (ext2 filesystem) readonly.
Freeing init memory: 68K
UART IRQ_ports = c02370d8
UART IRQ at interrupt number 0xa
init started:  BusyBox v1.00 (2011.05.12-08:02+0000) multi-call binary
init started:  BusyBox v1.00 (2011.05.12-08:02+0000) multi-call binary
Starting pid 9, console /dev/ttyS0: '/etc/init.d/rc.sysinit'
Mounting root fs rw ...
Mounting other filesystems ...
mount: Mounting none on /proc/bus/usb failed: No such file or directory
Sysinit done
Call /etc/rcS...
Using /usr/sbin/led.o
Using /usr/sbin/push_button.o
Using /lib/modules/ipt_DLOG.o
Using /lib/modules/ipt_webstr.o
Using /lib/modules/ipt_http_string.o
Using /lib/modules/ipt_multi_match.o
Using /lib/modules/ipt_multiaddr.o
Using /lib/modules/ipt_httpMETHOD.o
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=vlan action=start
/bin/cp /proc/uptime /tmp/var/run/rc.vlan.run
rc starting vlan...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=port action=start
/bin/cp /proc/uptime /tmp/var/run/rc.port.run
rc starting port...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=initqos action=start
/bin/cp /proc/uptime /tmp/var/run/rc.initqos.run
rc starting initqos...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=qos action=start
/bin/cp /proc/uptime /tmp/var/run/rc.qos.run
rc starting qos...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=wan_mac action=start
/bin/cp /proc/uptime /tmp/var/run/rc.wan_mac.run
rc starting wan_mac...
/sbin/ifconfig eth1 up
install_isr
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=lan action=start
/bin/cp /proc/uptime /tmp/var/run/rc.lan.run
rc starting lan...
/sbin/ifconfig eth0 172.16.72.1 netmask 255.255.255.0
eth0:star9100_gsw1000_lan_open
star9100_gsw1000_lan_open Exit!! 
not install_isr
/bin/echo "lanip 172.16.72.1" >/proc/star9100_shnat_setting
/bin/echo "interswitch lanip:172.16.72.1/24" >/proc/str9100/shnat
iptables -t nat -I PREROUTING -i eth0 -s 172.16.72.1/255.255.255.0 -d 172.16.72.1 -p tcp --dport 443 -j DNAT --to 172.16.72.1:30443
iptables -t nat -I PREROUTING -i eth0 -s 172.16.72.1/255.255.255.0 -d 172.16.72.1 -p udp --dport  53 -j DNAT --to 8.8.8.8
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=printk action=start
/bin/cp /proc/uptime /tmp/var/run/rc.printk.run
rc starting printk...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=syslogd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.syslogd.run
rc starting syslogd...
/sbin/syslogd -f /etc/syslog.conf
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=httpd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.httpd.run
rc starting httpd...
/bin/rm -f /tmp/www
/bin/ln -s -f /www.eng /tmp/www
/usr/sbin/mini_httpd -d /tmp/www -r "Router" -c '*.cgi' -t 1800 -i /var/run/mini_httpd.pid -a Digest -S -E /usr/sbin/certSrv.pem &
bind: Address already in use
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=dhcpd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.dhcpd.run
rc starting dhcpd...
/bin/echo "1:21500076:16777215;0:1:1:1:1" >/proc/vid_config
/usr/sbin/udhcpd /etc/udhcpd.conf&
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=dhcp-fwd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.dhcp-fwd.run
/bin/cp /proc/uptime /tmp/var/run/rc.dhcp-fwd.run
rc starting dhcp-fwd...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=route action=start
/bin/cp /proc/uptime /tmp/var/run/rc.route.run
rc starting route...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=ripd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.ripd.run
rc starting ripd...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=natpt action=start
/bin/cp /proc/uptime /tmp/var/run/rc.natpt.run
/bin/cp /proc/uptime /tmp/var/run/rc.natpt.run
rc starting natpt...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=dhcp6 action=start
/bin/cp /proc/uptime /tmp/var/run/rc.dhcp6.run
rc starting dhcp6...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
start wan init=0
/sbin/ifconfig eth1 up
/sbin/ifconfig eth1 mtu 1460
/sbin/ifconfig eth1 192.168.4.2 netmask 255.255.255.0
/sbin/route del default
route: SIOC[ADD|DEL]RT: No such process
/sbin/route add default gw 192.168.4.1
echo nameserver 192.168.4.1>>/etc/resolv.conf
/bin/cp /proc/uptime /tmp/wan_uptime
/usr/sbin/rc dhcpd create
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=dhcpd action=create
/bin/cp /proc/uptime /tmp/var/run/rc.dhcpd.run
/bin/echo "1:21500076:16777215;0:1:1:1:1" >/proc/vid_config
/usr/sbin/rc service restart
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=(null) action=restart
rc ntp stop
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=ntp action=stop
/bin/cp /proc/uptime /tmp/var/run/rc.ntp.run
/usr/bin/killall ntp
killall: ntp: no process killed
route del default gw 192.168.4.1
/usr/sbin/fw-scripts/firewall stop
.: 19: Can't open /tmp/firewall.conf
killall: dnrd: no process killed
/usr/bin/killall IGMPProxy
killall: IGMPProxy: no process killed
/usr/sbin/tc qdisc del dev eth0 root
RTNETLINK answers: No such file or directory
/usr/sbin/tc qdisc del dev eth1 root
RTNETLINK answers: No such file or directory
/usr/sbin/iptables -F -t mangle
iptables -t nat -I PREROUTING -i eth0 -s 172.16.72.1/255.255.255.0 -d 172.16.72.1 -p tcp --dport 443 -j DNAT --to 172.16.72.1:30443
iptables -t nat -I PREROUTING -i eth0 -s 172.16.72.1/255.255.255.0 -d 172.16.72.1 -p udp --dport  53 -j DNAT --to 8.8.8.8
/usr/bin/killall dhcp-fwd >/dev/null 2>&1
killall -SIGINT routed
killall: routed: no process killed
sh: /user/sbin/iptables: not found
/usr/bin/killall syslogd
killall: LicMgm: no process killed
rc starting wan_basic...
rc ntp start
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=ntp action=start
/bin/cp /proc/uptime /tmp/var/run/rc.ntp.run
rc starting ntp...
/usr/sbin/ntp -z GMT-5 0 14& 
rc dhcp6 restart
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=dhcp6 action=restart
/bin/cp /proc/uptime /tmp/var/run/rc.dhcp6.run
/usr/bin/killall dhcp6-serv
killall: dhcp6-serv: no process killed
rc starting dhcp6...
route add default gw 192.168.4.1 dev eth1
/bin/echo "lanip 172.16.72.1" >/proc/star9100_shnat_setting
/bin/echo "wanip 192.168.4.2" >/proc/star9100_shnat_setting
rc starting dns...
rc starting firewall...
iptables -t nat -F
cp /etc/crontab /etc/crontab.policy
echo "vserver clean" > /proc/star9100_shnat_setting
/usr/sbin/fw-scripts/firewall start
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/ipsec spi --clear
/usr/sbin/ipsec eroute --clear
/usr/sbin/ipsec whack --shutdown
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
/sbin/ifconfig ipsec0 down
/usr/sbin/ipsec tncfg --clear
/usr/sbin/iptables -D INPUT -p udp --dport 500 -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/iptables -D INPUT -p udp --dport 4500 -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/iptables -D INPUT -p esp -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/iptables -t nat -D PREROUTING -p udp --dport 500 -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/iptables -t nat -D PREROUTING -p udp --dport 4500 -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
/usr/sbin/iptables -t nat -D PREROUTING -p esp -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)
vpn down null complete./usr/bin/killall ssl_server
killall: ssl_server: no process killed
gateway==[192.168.4.1]
VPN parse_conf Error!!
 index=-1  
Error Number=-3
eth1,192.168.4.2,255.255.255.0,192.168.4.255,192.168.4.1
/usr/sbin/ipsec spi --clear
/usr/sbin/ipsec eroute --clear
/usr/sbin/iptables -I INPUT -p udp --dport 500 -j ACCEPT
/usr/sbin/iptables -I INPUT -p udp --dport 4500 -j ACCEPT
/usr/sbin/iptables -I INPUT -p esp -j ACCEPT
/usr/sbin/iptables -t nat -I PREROUTING -p udp --dport 500 -j ACCEPT
/usr/sbin/iptables -t nat -I PREROUTING -p udp --dport 4500 -j ACCEPT
/usr/sbin/iptables -t nat -I PREROUTING -p esp -j ACCEPT
/bin/echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter
/usr/sbin/ipsec tncfg --attach --virtual ipsec0 --physical eth1
/sbin/ifconfig ipsec0 192.168.4.2 broadcast 192.168.4.255 netmask 255.255.255.0
/usr/sbin/ipsec pluto --secretsfile /etc/ipsec.secrets --nat_traversal --uniqueids --adns /usr/local/libexec/ipsec/_pluto_adns  
Jan  1 00:00:30 pluto[425]: Starting Pluto (Openswan Version cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OE@ECqImzhFD)
vpn_up_null up.
/usr/sbin/ssl_server &
/usr/bin/killall IGMPProxy >/dev/null 2>&1
Jan  1 00:00:30 pluto[425]: @(#) built on May 12 2011:16:06:15:
Jan  1 00:00:30 pluto[425]: Setting NAT-Traversal port-4500 floating to on
Jan  1 00:00:30 pluto[425]:    port floating activation criteria nat_t=1/port_fload=1
Jan  1 00:00:30 pluto[425]:   including NAT-Traversal patch (Version 0.6c)
Jan  1 00:00:30 pluto[425]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Jan  1 00:00:30 pluto[425]: starting up 1 cryptographic helpers
Jan  1 00:00:30 pluto[425]: started helper pid=430 (fd:4)
the function is main,the line is 94,the file is serv.c
the function is main,the line is 100,the file is serv.c
the function is main,the line is 104,the file is serv.c
the function is main,the line is 108,the file is serv.c
the function is main,the line is 111,the file is serv.c
Jan  1 00:00:30 pluto[425]: Using KLIPS IPsec interface code on 2.4.27-star
/usr/bin/killall utelnetd > /dev/null 2>&1
Jan  1 00:00:30 pluto[425]: Changing to directory '/etc/ipsec.d/cacerts'
Jan  1 00:00:30 pluto[425]: Changing to directory '/etc/ipsec.d/aacerts'
Jan  1 00:00:30 pluto[425]: Changing to directory '/etc/ipsec.d/ocspcerts'
Jan  1 00:00:30 pluto[425]: Changing to directory '/etc/ipsec.d/crls'
Jan  1 00:00:30 pluto[425]:   Warning: empty directory
/bin/echo "I" > /proc/led
/sbin/rmmod ip_nat_sip
rmmod: ip_nat_sip: No such file or directory
/sbin/rmmod ip_conntrack_sip
rmmod: ip_conntrack_sip: No such file or directory
cp /etc/crontab.policy /etc/crontab
iptables -F ip_filter
ip link set dev eth1 multicast on
rc starting dhcp-fwd...
rc starting ddns...
rc starting ripd...
rc starting pppoe_rule...
rc starting pppoe_unNB_IP...
/usr/bin/killall -SIGUSR2 udhcpd
/etc/rcS: 75: /usr/sbin/wizd: not found
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=upnp action=start
/bin/cp /proc/uptime /tmp/var/run/rc.upnp.run
rc starting upnp...
/bin/echo "lanip 172.16.72.1" >/proc/star9100_shnat_setting
/bin/echo "wanip 192.168.4.2" >/proc/star9100_shnat_setting
/usr/bin/killall -9 upnpd
killall: upnpd: no process killed
Using /usr/sbin/led.o
insmod: A module named led already exists
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=ips action=start
/bin/cp /proc/uptime /tmp/var/run/rc.ips.run
rc starting ips...
Using /root/kris.o
/bin/echo i1 > /proc/led
kris daemon version 1.7
the function is main,the line is 94,the file is serv.c
the function is main,the line is 100,the file is serv.c
the function is main,the line is 104,the file is serv.c
the function is main,the line is 108,the file is serv.c
the function is main,the line is 111,the file is serv.c
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=radvd action=start
/bin/cp /proc/uptime /tmp/var/run/rc.radvd.run
rc starting radvd...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=LicMgm action=start
/bin/cp /proc/uptime /tmp/var/run/rc.LicMgm.run
rc starting LicMgm...
Sum=0x01C426B7,InvSum=0xFE3BD949,Result=0x00000000
killall: LicMgm: no process killed
Kris Rule Version 1.42
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=snmp action=start
/bin/cp /proc/uptime /tmp/var/run/rc.snmp.run
=> AcquireBasicData(UDI=C78A32118C603FB6D362C8440F79081F145A98AA4B771687694FC50468BB2C2E06D07E)
Start TMZ_request_HTTP()
rc starting snmp...
/usr/bin/killall snmp
killall: snmp: no process killed
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=sigmail action=start
/bin/cp /proc/uptime /tmp/var/run/rc.sigmail.run
rc starting sigmail...
Donot send signature email duto no email information!
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=vpn_netbios action=start
/bin/cp /proc/uptime /tmp/var/run/rc.vpn_netbios.run
rc starting vpn_netbios...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=http_HNAT action=start
/bin/cp /proc/uptime /tmp/var/run/rc.http_HNAT.run
rc starting http_HNAT...
echo "table alg add sport:80" > /proc/star9100_shnat_setting
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=radius action=start
/bin/cp /proc/uptime /tmp/var/run/rc.radius.run
rc starting radius...
     *           *  
  *      *   *      *
  *     {~._.~}      *
  *      ( Y )       *
   *    ()~*~()    *
     *  (_)-(_)  *
       *       *
         *   *
           *
ap_name=rstp action=start
/bin/cp /proc/uptime /tmp/var/run/rc.rstp.run
rc starting rstp...
Starting pid 532, console /dev/ttyS0: '/bin/sh'


BusyBox v1.00 (2011.05.12-08:02+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

# </nowiki>
</WRAP>\\

===== Tags =====
[[meta:tags|How to add tags]]
{{tag>GigabitEthernet FastEthernet 5Port 8flash 64ram CNS1202 Cavium unsupported}}
gigabitethernet fastethernet 5port 8Flash 64RAM cns1202 cavium Unsupported devices