I recently opened a SLM2008 and noticed the unpopulated header with two signal lines : looked like a RS232 header.
Browsing the web (Maxim Integrated’s website) , I found a device that could be used for the unpopulated U11 : Max3243 (exact part could be another one, as I am not sure for pins 21/22 & 23, but I only really care about the TX/RX pins). On this part, there is a RS232-to-TTL between pins 6&17 and opposite TTL-to-RS232 between 13&10.
I quickly added wires on those pins :
And the ‘bus pirate’ on the header.
Here is the output when booting normally (115200bps) + some commands :
Booting ...image 0 S/W Version: 2.0.0.10 Password: ******** Incorrect password Password: ******** Press ? or help to get help. The help depends on the context: - At top level, a list of command groups will be shown. - At group level, a list of the command syntaxes will be shown. - If given after a command, the syntax and a description of the command will be shown. >? Commands at top level: System - System commands Console - Console commands Port - Port commands MAC - MAC commands VLAN - VLAN commands Aggr - Aggregation commands LACP - IEEE 802.3ad Link Aggregation commands RSTP - IEEE 802.1w Rapid Spanning Tree commands User Group - User Group commands QoS - QoS commands Mirror - Mirror commands IP - IP commands Dot1x - Dot1x commands IGMP - IGMP Snooping commands Debug - Debug commands > >system config System Configuration: Name: MobileSwitch S/W Version: 2.0.0.10 CVS Tag: Cisco_test_0.0.1 Compile Date: Apr 15 2009 14:33:43 H/W Version: 1.0 MAC address: f4-ac-c1-14-66-ea SNMP: enabled Trap IP: 0.0.0.0 Readcommunity: public Writecommunity: private Trapcommunity: public >debug phy r Port 1: (MIIM: 0 PHY: 0) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 2005 0000 0400 0000 Port 2: (MIIM: 0 PHY: 1) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 2005 0000 0400 0000 Port 3: (MIIM: 0 PHY: 2) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 0005 0000 0400 0000 Port 4: (MIIM: 0 PHY: 3) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 0005 0000 0400 0000 Port 5: (MIIM: 0 PHY: 4) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 0005 0000 0400 0000 Port 6: (MIIM: 0 PHY: 5) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 0005 0000 0400 0000 Port 7: (MIIM: 0 PHY: 6) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 0005 0000 0400 0000 Port 8: (MIIM: 0 PHY: 7) 1040 7949 0007 0580 01e1 0000 0004 2001 0000 0600 4000 0000 0000 0000 0000 3000 0000 0000 00c8 0000 0000 0000 3200 0020 8242 0000 0000 0000 2005 0000 0400 0000 >
And when pressing Ctrl-C when ‘booting…’ is displayed (but then I was not able to go further…) :
Booting ... [press Ctrl-C] *** Booting cancelled. Invalid command Invalid command Invalid command