critical WPA2 vulnerabilities afoot, see KRACK attacks (discussion @ /r/KRaCK, HN, /r/netsec, Slashdot)

Ubiquiti Networks airRouter

From WikiDevi
Jump to: navigation, search

Ubiquiti Networks airRouter (AR)
Availability: uncommon

FCC approval date: 22 June 2010
UPC: 609728683566 (UPC DB, On eBay)

Amazon image

ASIN
B004EFLMAE (Flag of the United States.svg, On Amazon, On CCC)
multiple revisions of this device, use caution

Type: wireless router

FCC ID: SWX-E2
Industry Canada ID: 6545A-E2

Power: 5 VDC, 2 A
Connector type: barrel

CPU1: Atheros AR7241 (400 MHz)
FLA1: 8 MiB
8,388,608 B
65,536 Kib
8,192 KiB
64 Mib
0.00781 GiB
(Macronix MX25L6406EMI-12G)
RAM1: 32 MiB
33,554,432 B
262,144 Kib
32,768 KiB
256 Mib
0.0313 GiB
(Mira P2S56D40GTP)

Expansion IFs: USB 2.0
USB ports: 1
Serial: yes, internal, 12-pin header, (115200,8,N,1), JP3

WI1 chip1: Atheros AR9285
WI1 802dot11 protocols: bgn
WI1 MIMO config: 1x1:1
WI1 antenna connector: none

ETH chip1: Atheros AR7241
Switch: Atheros AR7241
LAN speed: 10/100
LAN ports: 4
WAN speed: 10/100
WAN ports: 1

bgn

Stock bootloader: U-Boot 1.1.4.2-s445 UBNT

Stock FW OS: Linux 2.6.15-5.2 AirOS

Third party firmware supported: OpenWrt, DD-WRT • (List)

Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1032 additional devices
of which 8 are Ubiquiti Networks devices
Default login user: ubnt
Default login password: ubnt
ubnt:ubnt credentials used by 16 additional devices
of which 16 are Ubiquiti Networks devices

802dot11 OUI: 00:15:6D (8 E, 22 W, 2008), 00:27:22 (2 E, 4 W, 2010)
Ethernet OUI: 00:15:6D (8 E, 22 W, 2008), 00:27:22 (2 E, 4 W, 2010)

 CPU1 brandWI1 chip1 brandWI1 chip2 brand
Ubiquiti Networks airRouterAtherosAtheros
Ubiquiti Networks airRouter HPAtherosAtheros
For a list of all currently documented Atheros chipsets with specifications, see Atheros.


Product page

The Ubiquiti Networks logo and "SIMPLE AP N" appears to be silkscreened on these boards.

"11-00124-04" and "UBIQUITI NETWORKS (C) 2010" is also etched onto the board.

The wireless chip used is apparently the AR9285 [1] [2].

There are U.FL connectors on the board, but they are not connected by default.

UBNT's FCC internal photos for this device are perma-confidential.

Additional external links[edit]

Wikis[edit]

This router seems to be supported by DD-WRT, but activation is required.

Forum threads[edit]

Teardowns / etc[edit]

Serial[edit]

The UART header would not seem to be populated on all units.

Pinout[edit]

[3.3] (   ) U
(RxD) (   ) A
(   ) (   ) R
(   ) (   ) T
(TxD) (   )
(GND) (   ) JP2

----> to screw
<---- to board edge

'Stock' (or at least, w/ some version of AirOS) boot log[edit]


U-Boot 1.1.4.2-s445 (Sep  6 2010 - 14:46:33)

Board: Ubiquiti Networks XM board (rev 1.1 e4a2)
DRAM:  32 MB
Flash:  8 MB
Net:   eth0, eth1
Hit any key to stop autoboot:  0
## Booting image at 9f050000 ...
   Image Name:   MIPS Ubiquiti Linux-2.6.15-5.2
   Created:      2011-01-14  12:43:09 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    771914 Bytes = 753.8 kB
   Load Address: 80002000
   Entry Point:  80002000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Booting...
...mounts done
...filesystem init done
...base ok
...update ok
...symlinks ok
...httpd ok
...detect ok
...running /sbin/init

Please press Enter to activate this console.

cat /proc/cpuinfo[edit]

XM.v5.3# cat /proc/cpuinfo
system type             : Atheros AR7240 (Python)
processor               : 0
cpu model               : MIPS 24K V7.4
BogoMIPS                : 259.07
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16
VCED exceptions         : not available
VCEI exceptions         : not available

Images[edit]

RayKnight's unit[edit]

AirRouter-1.JPG