mirror of
https://github.com/Fohdeesha/lab-docu.git
synced 2024-11-28 11:05:13 +01:00
107 lines
4.2 KiB
Markdown
107 lines
4.2 KiB
Markdown
# Hidden Brocade Dev Stuff
|
|
This is a collection of hidden tools, modes, and commands buried inside Brocade FastIron products.
|
|
|
|
## Hidden Commands
|
|
|
|
All Fastiron platforms have hidden CLI commands, with the biggest one being `dm`. The ```dm``` command is available (but hidden) for diagnostic use. Type ```dm``` and hit tab to see available options, like the below for example:
|
|
```
|
|
FCX3(config)#dm
|
|
HEX Number
|
|
802-1w show 802-1w internal information
|
|
aaa-acct-session
|
|
acl_tcam command for tcam manager
|
|
aging-loop Turn off/on system aging loop
|
|
allled Toggle -On/Off All LED
|
|
alt-diag Test only, off/on
|
|
app_vlan_debug App VLAN table (shadow)
|
|
auq-resync Sync Auq for a device
|
|
auq-status show auq status
|
|
badaddr Test only, will reboot
|
|
blink Show gig link changes due to PHY blink
|
|
buffer DMA CPU buffer related
|
|
cancel-flash-timeout set flash timeout to default
|
|
clear_boot_count Clear crash dump
|
|
cpld-reg-dump Dump the CPLD register
|
|
```
|
|
There's hundreds of other options. These are low level debug commands, so if you don't know what they do you can easily break your switch.
|
|
|
|
**Note:** There are most likely many other commands that are hidden so they do not show up under tab completion, like the commands above do. An example of some of these that I have managed to find are below:
|
|
```
|
|
dm license get
|
|
dm license exempt
|
|
dm license reset
|
|
dm license version
|
|
dm license vls
|
|
```
|
|
## Hidden OS Console
|
|
This only works over a serial connection. It will not work over telnet/ssh/etc. Connect to a FastIron device over serial, and once it's fully booted and running, press ```ctrl+y```, let go, then press ```m```. Then hit enter. It should drop you down to the OS console:
|
|
```
|
|
OS>
|
|
```
|
|
|
|
> Note: This is mainly for the PowerPC architecture switches (FCX, ICX6610). The ARM switches (ICX6450, ICX7xxx) still have this hidden console available, but it only has ~5 commands. For a proper low level CLI on ARM switches, use the *Accessing Linux* section.
|
|
|
|
Press the question mark on your keyboard for a list of all available options:
|
|
|
|
```
|
|
OS>
|
|
clear Clear internal table
|
|
console Attach console to a process
|
|
copy Copy file
|
|
daw Set data address watchpoint
|
|
dbg Toggle debug mode
|
|
dq Display memory in 64-bit quad word
|
|
dd Display memory in 32-bit double word
|
|
del Delete flash file
|
|
dir List flash files
|
|
----trimmed----
|
|
```
|
|
You'll note the options are nearly identical to what's available in the bootloader, except while the switch is fully booted and running. There's a couple extra options here too that aren't available in just the bootloader. To exit this mode, just hit ```ctrl+z```.
|
|
|
|
## Hidden Bootloader Modes
|
|
|
|
All the newer switches that run linux (ICX6450, ICX6650, ICX7xxx) use u-boot as the bootloader. However it runs in a very locked down mode with only a few commands available. Thankfully after contacting Arris (who own Ruckus, who now owns Brocade), they published their u-boot [source code](https://sourceforge.net/arris/wiki/Projects/).
|
|
|
|
From analyzing their u-boot source, we are able to find some hidden environment variables that will force the switch to boot into fully unlocked u-boot. To do so, run the following in the bootloader:
|
|
|
|
#### ICX6430 & ICX6450
|
|
```
|
|
setenv pp_init_enable 1
|
|
setenv diag_cmd_on 1
|
|
saveenv
|
|
reset
|
|
## it will reboot into fully unlocked u-boot
|
|
|
|
## set it back to normal
|
|
setenv pp_init_enable
|
|
setenv diag_cmd_on
|
|
saveenv
|
|
reset
|
|
```
|
|
#### ICX6650 & ICX7250 & ICX7450
|
|
```
|
|
setenv diag_mode_enable 1
|
|
saveenv
|
|
reset
|
|
## it will reboot into fully unlocked u-boot
|
|
|
|
## set it back to normal
|
|
setenv diag_mode_enable
|
|
saveenv
|
|
reset
|
|
```
|
|
#### ICX7650:
|
|
```
|
|
setenv diag_mode_on 1
|
|
saveenv
|
|
reset
|
|
## it will reboot into fully unlocked u-boot
|
|
|
|
## set it back to normal
|
|
setenv diag_mode_on
|
|
saveenv
|
|
reset
|
|
```
|
|
|
|
#### ICX7150, ICX7750, ICX7850
|
|
Unknown, but most likely one of the three above. If you try all three, make sure to undo each one (follow the `back to normal` bit) before moving onto the next attempt. |