Kitz Forum
Broadband Related => Broadband Hardware => Topic started by: Dad-Of-5 on September 18, 2017, 01:06:49 PM
-
Hi guys newbie so please bear with me.
Does anyone know what chipset is in the Cisco Small Business Rv134W VDSL Modem Router please? https://www.cisco.com/c/en/us/products/routers/rv134w-vdsl2-wireless-ac-vpn-router/index.html.
Scant Reviews, but keen to find out as I need a solid fast VDSL modem with top tier VPN capabilities (my job takes me around the world so want to access web from my home network) and of course ability connect a network drive. I don't need its wifi capabilities as i plan to put it in front of a new Eero Mesh that's enroute from the US https://eero.com/shop courtesy of Ebay.
I'm on a Huawei broadcom cabinet roughly 450m-650m from the house according to ISP (ENTAnet).
I did try the Draytek 2860 but it was registering HEC and CRC errors on my line which in testing failed to show up on a Asus DSL-AC88U (very high sync rate but sent back due to unit failure) and also a Billion 8900ax-2400 (sent back due to lower sync rates compared to the 88U and slow GUI, also unit was very plasticky in comparison to previous units I've had from them).
Many thanks.
-
Welcome to the Kitz forum. :)
Hmm . . . It is rather difficult trying to find any technical specifications for the Cisco RV134W. Try as I might, I have discovered nothing.
Perhaps one of our members may be able to provide the required information.
-
I'm no expert at this, but a couple of things that may allow those more knowledgeable than me come to some conclusion.
In the document Open Source Used In Cisco RV134W 1.0.0.x (https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv134w/OSD/Cisco_RV134W_1_0_0_x_v1_0.pdf?dtid=osscdc000283) I see a reference to Broadcom bcm963xx 1.1.
I also grabbed the latest software, v1.0.0.29, from the Cisco website and pulled it apart with binwalk. That extracted a file that is reported as a JFFS2 filesystem, and whilst I've not been able to mount this, running a strings on it gives the following, which has references to bcm963xx and BCM63168
root@lampu:~/cisco/_RV134W_FW_ANNEX_A_1.0.0.29.bin.extracted# strings 0.jffs2 | grep -i bcm
BCM63xx DUART
ERROR BcmSpi_SetCtrlState: invalid slave id (%d) or busNum (%d)
BCM Flash API. Flash device is not found.
eg. bcm963xx_fs_kernel
e=192.168.1.1:ffffff00 h=192.168.1.100 g= r=f f=vmlinux i=bcm963xx_fs_kernel d=1 p=0 c= a= s= w= m=1 v=0 x= y=V01
BCM963268
athBCM63xx Ethernet
BCM63xx : Fail alloctxBds mem
BCM63xx : Fail alloc rxBds mem
BCM63xx : Failed allocRxBuffer mem
BCM63xx : Failed alloc txBuffer mem
%BCM
bcM~
bcm_boot_launcher
bcm_omci
bcm_ploam
Ibcm_user_ploam
bcm_user_tod
1Vu8bcmaal20
bcmadsl0
bcmadsl1
bcmarl
hbcmatm0
bcmatmb0
Zbcmendpoint0
Zbcmfap
-bcmles0
bcmmoca0
6bcmmoca1
}bcmomcipm
<cbcmprof
bcmvdsl0
Hybcmvlan
bcmxtmcfg0
!=RV134W_BCM63168
xf=4142RV134W_BCM631680642320
=eid_bcm_base.txt
eid_bcm_kthreads.txt
nV. reid_bcm_mgmt.txt
eid_bcm_swmdk.txt
eid_bcm_voip.txt
1bcm-base-drivers.sh
S45bcm-base-drivers
}*../init.d/bcm-base-drivers.sh
QUv%Bbcm43112_map.bin
bcm43131_map.bin
~'},gzZbcm4313_map.bin
bcm43217_map.bin
bcm4321_map.bin
@bcm43222_map.bin
bcm43224_map.bin
bcm43225_map.bin
Lbcm43226_map.bin
bcm43227_map.bin
bcm43228_map.bin
bcm4322_map.bin
bcm4331_map.bin
bcm4331_vars.bin
bcm43428_map.bin
UUbcm4360_963168AC5_map.bin
Y] bcm4360_963168ACH5_map.bin
bcm4360_map.bin
bcm4360_nvramvars.bin
bcm6362_map.bin
bcmcmn_nvramvars.bin
libcms_boardctl.so
3/lib/public/libcms_boardctl.so
_libcms_msg.so
/lib/public/libcms_msg.so
llibcms_util.so
/lib/public/libcms_util.so
libwlbcmcrypto.so
libwlbcmshared.so
{BCM
bcm_bpm.ko
bcm_enet.ko
bcm_ingqos.ko
bcm_usb.ko
bcmarl.ko
6bcmfap.ko
BcMX1
bcmvlan.ko
bcmxtmcfg.ko
Olibcms_cli.so
libcms_core.so
tlibcms_dal.so
Ilibcms_qdm.so
libcms_boardctl.so
_libcms_msg.so
llibcms_util.so
bcmlog
echo $* > /proc/bcmlog
bcMx
.BCm<
-
I believe that means BCM963268 is the board, and BCM63168 is the chipset.
-
So the device is definitely Broadcom based.
Another example of team-work's success. :thumbs:
-
burakkucat, guys thanks for the warm welcome! wow you fellas are quick! the router arrived.
the unit is well built by today's standard and definitely better built than the Billion 8900ax-2400.
I had to call cisco to finalise the setup as after setting up PPOE. Turns out I had to tell it which port to look for in order for it to resolve web pages... long story... scary thing is I figured it out myself as the tech guy had no idea what to do and was about to issue me an RMA.
Pros:
1. The router is nice, well built, solid connection and holding well at 65Mbs. Im only supposed to be getting 55Mbps however i saw similar speeds with the 88u.
2. Unlike the 88U, it offers full bridge only mode if required
3. Fast GUI
4. WIFI and LAN(laptop lacks a lan port so I have to use usb-Lan adapter) are very quick to connect
5. Temperature: Runs really really cool in fact its the coolest running modem I've had; I have 5 kids and 1 wife and they all want to stream stuff.....
Cons:
1. Between Cisco UK, USA and several Cisco Partners, they were unable to tell me the chipset in it! (pat on the back smf22!!).
2. Based on my experience re: point 1, it was evident during the call that the tech guy was not at trained in the product,neither was pre-sales who I also contacted re: chipset, in fact pre sales were just terrible to the point I made an excuse in to end the call quickly
3. Shockingly, there is no XDsl Stats page within the GUI!!! Rather than rely on web speedtest I had to call my isp to find out what speed I was syncing at!!
Nice router but its going back
-
I found the Command Line Interface (CLI) Reference Guide (https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv132w/CLI_guide/rv132w_cli_guide.pdf?dtid=osscdc000283) on the Cisco website and it seems there's a 'wan show' command. There's no detail within the guide as to what information is returned from this command, but perhaps give that a try before removing/returning the modem.... if for no other reason than we get the output documented somewhere on the Internet :D
-
Nice router but its going back
Please give it a little time . . . just because support is lacking doesn't imply that the product is not fit for purpose. I think the information is "out there". It's just a little hard to find. :-X
I found the Command Line Interface (CLI) Reference Guide (https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv132w/CLI_guide/rv132w_cli_guide.pdf?dtid=osscdc000283) on the Cisco website and it seems there's a 'wan show' command. There's no detail within the guide as to what information is returned from this command, but perhaps give that a try before removing/returning the modem.... if for no other reason than we get the output documented somewhere on the Internet :D
Ah, now that might be useful. In fact I've just downloaded a copy, to have a look. ;)
-
Would you be willing to disclose the cost of that RV134W, please?
-
hi burakkucat sure I got it from https://shop.hyperscaleit.com/cisco-rv134w-vdsl2-wireless-ac-vpn-router.html around £160 and cheaper than waht i saw on ebay at the time. 14 days no quibbles return.
Much like Draytek, the unit is definitely feature rich but being broadcom for me more appealing.
@smf22 thanks for that idea, not had the chance to look into it yet but I'll try and run Command Line today and let you know.
[Moderator edited to simplify the link.]
-
@smf22 not much there is it because i'm running it in bridge mode?
routerba353x> wan show interface
Type PortId VPI/VCI Link Type Categ. encap Enable QoS Enable V LAN Mux
ATM 0 0/33 EoA UBR LLC Yes
Type PortId VPI/VCI Link Type Categ. encap Enable QoS Enable V LAN Mux
ATM 0 0/35 Unconfigured UBR LLC No
Type PortId Priority Enable QoS Enable VLAN Mux
PTM 0 both Yes
Type PortId VPI/VCI Link Type Categ. encap Enable QoS Enable V LAN Mux
ATM 0 0/35 Unconfigured UBR LLC No
routerba353x> wan show
VCC Con. Service Interface Proto. IGMP Src? MLD Src? Status IP
ID Name Name address
0.0.33 1 ipoe_0_0_33.1 atm0.1 IPoE Enable Disable Enable Enable Unconfigured
N/A 1 ipoe_eth0.1 eth0.1 IPoE Enable Disable Enable Enable Unconfigured
N/A 2 br_0_1_0.2 ptm0.2 Bridged Enable Disable Enable Enable Connected
N/A 1 ip_usb eth5 IPoE Disable Disable Disable Enable Unconfigured
N/A 1 ppp_usb ppp7 PPP Disable Disable Disable Enable Unconfigured
-
Underneath the surface it appears to be running Busybox like many of the other routers/modems. Try simply entering sh at the > prompt and see what happens. If you get another prompt e.g., a #, then try xdslctl and see what options there are. Usually xdslctl info with one of a number of options provides a wealth of information.
Edit: I've now mounted the JFFS2 file system I extracted from the RV134's OS I downloaded from Cisco and can see the xdslctl command is definitely there in /bin. These are the options based on a strings of the command.
Usage: %s start [--up] <configure command options>
%s stop
%s connection [--up] [--down] [--loopback] [--reverb]
[--medley] [--noretrain] [--L3] [--diagmode] [--L0]
[--tones <r1-r2,r3-r4,...>] [--normal] [--freezeReverb] [--freezeMedley]
%s configure/configure1 [--mod <a|d|l|t|2|p|e|m|M3|M5%s>] [--lpair <(i)nner|(o)uter>]
[--trellis <on|off>] [--snr <snrQ4>] [--bitswap <on|off>] [--sesdrop <on|off>]
[--sra <on|off>] [--CoMinMgn <on|off>] [--i24k <on|off>] [--phyReXmt <0xBitMap-UsDs>]
[--Ginp <0xBitMap-UsDs>] [--TpsTc <0xBitMap-AvPvAaPa>] [--monitorTone <on|off>]
[--profile <0x00 - 0xFF>|<"8a |8b |8c |8d |12a |12b |17a |30a">] [--us0 <on|off>]
[--dynamicD <on|off>] [--dynamicF <on|off>] [--SOS <on|off>] [--maxDataRate <maxDsDataRateKbps maxUsD
ataRateKbps maxAggrDataRateKbps>]
[--forceJ43 <on|off>] [--toggleJ43B43 <on|off>]
%s bert [--start <#seconds>] [--stop] [--show]
%s afelb [--time <sec>] [--tones] [--signal <1/2/8>]
%s qlnmntr [--time <sec>] [--freq <msec>]
%s inm [--start <INMIATO> <INMIATS><INMCC><INM_INPEQ_MODE><INM_INPEQ_FORMAT>] [--show]
%s snrclamp [--shape <shapeId>] [--bpshape [bpIndex-bpLevel,]]
%s nlnm [--show ] [--setThld <Thld_Num_Tones>]
%s diag [--logstart <nBytes>] [--logpause] [--logstop] [--loguntilbufferfull <nBytes>] [--loguntilretrain
<nBytes>] [--dumpBuf <sizeKb>]
%s ntr [--start [output freq(default is 8000)]] [--stop]
%s info [--state] [--show] [--stats] [--SNR] [--QLN] [--Hlog] [--Hlin] [--HlinS] [--Bits]
[--pbParams] [--linediag] [--linediag1] [--reset] [--vendor] [--cfg]
%s profile [--show] [--save] [--restore]
%s --version
%s --help
-
hi burakkucat sure I got it from https://shop.hyperscaleit.com/cisco-rv134w-vdsl2-wireless-ac-vpn-router.html around £160 and cheaper than waht i saw on ebay at the time. 14 days no quibbles return.
Much like Draytek, the unit is definitely feature rich but being broadcom for me more appealing.
Thank you. Quite pricey and above what I would be prepared to pay. :o
Having read the CLI Reference Guide (https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv132w/CLI_guide/rv132w_cli_guide.pdf), I realised that there was no mention of access to the Busybox shell . . . so that was a negative mark "on the list".
If smf22's idea fails, I think I would be more inclined to return it. :-\
-
just got round to trying to get that info...... not boding well...
=====================================================
routerba353x> sh
syslog:system log commands
save:save
swversion:get software version
ssh:enable disable ssh server
Syntax error: unrecognized command sh
routerba353x> xdslctl info
Syntax error: unrecognized command xdslctl
routerba353x> xdslctl
Syntax error: unrecognized command xdslctl
routerba353x> ?
?
dhcpserver
exit
help
lan
lanhosts
loglevel
logout
nslookup
ping
quit
reboot
restoredefault
save
ssh
swversion
syslog
tr69cfg
traceroute
uptime
vlan
vpn
wan
wlan
routerba353x> wan
Usage:
wan <add|edit> interface atm <PORTID.VPI.VCI>
--linktype [EoA|PPPoA|IPoA] [--encap <llc|vcmux>]
[--atmcat UBR | --atmcat CBR <PCR> | --atmcat nrtVBR <PCR> <SCR> <MBS> | --atmcat rtVBR <PCR> <SCR> <MBS>]
wan <add|edit> service atm <PORTID.VPI.VCI> --protocol <bridge|ipoe|pppoe|ipoa|pppoa>
wan <add|edit> service ptm --protocol <bridge|ipoe|pppoe>
wan <add|edit> service eth --protocol <dhcp|static|pppoe|l2tp|pptp>
wan delete service atm <PORTID.VPI.VCI> [--vlan <VLANID>]
wan delete service ptm [--vlan <VLANID>]
wan delete service eth --vlan <ETHVLANID>
wan show
wan show interface
wan --help <bridge|pppoe|pppoa|ipoe|ipoa|dhcp|static|l2tp|pptp>
Define:
VLANID: -1 | 2-4194
ETHVLANID: -1 | 2-4194
PORTID: 0(FAST) | 1(INTERLEAVED) (Select DSL Latency)
USERNAME: [a-zA-Z0-9*_]{1-256}
PASSWORD: [a-zA-Z0-9*_]{1-256}
TIMEOUT: 1 - 9999 (minutes, default: 5)
IPV4ADDRESS: [0-254].[0-254].[0-254].[0-254] (e.g. 192.168.1.111)
IPV4NETMASK: [1-255].[0-255].[1-255].[0-255] (e.g. 255.255.255.0)
IPV4MASKLEN: 0-32
IPV6ADDRESS: [a-fA-FA-9]{1-4}:[a-fA-F0-9]{1-4}:[a-fA-F0-9]{0-4}:[a-fA-FA-9]{0-4}:[a-fA-F0-9]{1-4}:[a-fA-F0-9]{0-4}:[a-fA-F0-9]{1-4}:[a-fA-F0-9]{0-4} (e.g. 2001::, 2002:200:122:333::)
IPV6PREFIXLEN: 1-64
FQDN: [0-9a-zA-Z_-].[0-9a-zA-Z][0-9a-zA-Z-]{0,61}.[a-z]{2,6} (a domain name address, e.g. www.google.com.)
PCR: 4000-65534 (Peak Cell Rate)
SCR: 4000-65534 (Sustainable Cell Rate)
MBS: 1-1000000 (Maximum Burst Size)
VPI: 0-65535
VCI: 0-65535
routerba353x>
-
just got round to trying to get that info...... not boding well...
Hmm . . . No. :no:
-
From the Cisco Administration Guide (https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv132w/admin_guide/en/RV132W_RV134W.pdf):
Your device supports two user accounts for administering and viewing settings: an administrative user (default user name and password: cisco) and a guest user
(default user name: guest).
I presume you're logging in as the admin user?
Thank you. Quite pricey and above what I would be prepared to pay. :o
That's Cisco. So I can't tempt you with one of their 8GB memory upgrades at $4,000. :'(
-
yep I was aware of two user accounts from instructions and I definitely use admin account, i've never attempted to use guest account.
All in all a shame.
any advice on a broadcom based modem with strong vpn features and option to run full bridge mode incase I eve need it. Bridge mode option eliminates asus on official firmware unless 3rd prty firmware offers bridging only as an option?. wifi capabilities are not a must. would like to avoid billion if possible....
-
One last quick test would be to try invoking shell from the CLI prompt . . . just in case.
That's Cisco. So I can't tempt you with one of their 8GB memory upgrades at $4,000. :'(
No, thank you. :o
-
tried and nope, comes up bad command.
I'm boxing it up sunday...
is there anything modem wise that comes close to Draytek but with broadcom? I know chipsets shouldn't matter in this day and age however withrespect to my line, I have definitely noticed better performance on broadcom chipset and ours is a Huawei FTTC with BDCM....
I work from home and travel quite a bit overseas with work so robust VPN is a must. I also need to manage the household..... like I said 5 kids 1 wife yikes....
-
is there anything modem wise that comes close to Draytek but with broadcom? I know chipsets shouldn't matter in this day and age however withrespect to my line, I have definitely noticed better performance on broadcom chipset and ours is a Huawei FTTC with BDCM....
Do you actually mean "combined modem/router"?
I work from home and travel quite a bit overseas with work so robust VPN is a must.
You mean a VPN to allow you to "dial-in" to your home network?
-
Do you actually mean "combined modem/router"?You mean a VPN to allow you to "dial-in" to your home network?
Hi Dray,
Yes combined modem/router not really too bothered in its wifi capabilities as I will be running with eero mesh behind it for (family) wifi. I would need modem/router to handle the VPN tunnels and allow me to dial in and it would need to be able to connect a network drive.....
-
tried and nope, comes up bad command.
I'm boxing it up sunday...
If you still have the router connected perhaps you might indulge a little further. Among many other commands the router also supports the dumpmdm command:
root@lampu:/mnt# ls bin
acs_cli date ethctl lldpcli openl2tpd send_syslog_mail udpecho
acsd ddnsd ethswctl lldpd openssl setkey umount
adsl deluser false ln ping setmem uname
adslctl df false_httpd ls ping6 sh upnp
arl dhclient fap mailmonitor pluto sleep urlfilterd
arlctl dhcp6d fapctl mcp pppd smd usbcheck
ash dhcpc fc mcpctl pppoe-relay sntp usb_modeswitch
attached_devices dhcpd fcctl mcpd pptp spu usleep
avahi-daemon dmesg grep mdkshell ps spuctl vlanctl
bash dnsproxy hotplug mdm psp sshd wan_recovery
bcm_boot_launcher dnsspoof htpasswd meminfo pwd ssk wl
bpm dropbear httpd mkdir pwr stress wlctl
bpmctl dropbearkey http_get mknod pwrctl stty wlevt
brctl dropbearmulti ip mount racoon swmdk wlmngr
busybox dsldiagd ip6tables mroute radvd sync wlschd
buttonmonitor dumpcfg ipsec mv radvd_test tc wl_server
cat dumpeid iptables nas rastatus6 tcpdump wl_server_socket
chmod dumpmdm iq nas4not rawSocketTest telnetd wps_monitor
clicmds dumpmem iqctl nbsrelay ripd touch xdslctl
conntrack eapd kill netstat ripngd tr69c xtables-multi
consoled ebtables led_all nptest rm traffic_meter xtm
cp echo ledctl nvram sed true xtmctl
c_rehash epi_ttcp lld2d nvramUpdate send_cms_msg udhcpd zebra
root@lampu:/mnt# ls sbin
bcrelay depmod fdisk hotplug init klogd modprobe pppd2 pppstats pptpd rmmod sysinfo vconfig
chat ethctl halt ifconfig insmod logread poweroff pppdump pptpctrl reboot route syslogd
It was found by @highpriest in the thread VMG8924-B10A unbranded supervisor password (http://forum.kitz.co.uk/index.php/topic,19186.msg340936.html#msg340936) that the ZyXel routers dumped the 'supervisor' user password when this command was run. On the ZyXel, when logging in as supervisor, the 'sh' command then becomes available. Does the dumpmdm command work on the Cisco, if that so, is it the same as the ZyXel and dumps usernames and passwords?
-
will try tonight
-
If you still have the router connected perhaps you might indulge a little further. Among many other commands the router also supports the dumpmdm command:
root@lampu:/mnt# ls bin
acs_cli date ethctl lldpcli openl2tpd send_syslog_mail udpecho
acsd ddnsd ethswctl lldpd openssl setkey umount
adsl deluser false ln ping setmem uname
adslctl df false_httpd ls ping6 sh upnp
arl dhclient fap mailmonitor pluto sleep urlfilterd
arlctl dhcp6d fapctl mcp pppd smd usbcheck
ash dhcpc fc mcpctl pppoe-relay sntp usb_modeswitch
attached_devices dhcpd fcctl mcpd pptp spu usleep
avahi-daemon dmesg grep mdkshell ps spuctl vlanctl
bash dnsproxy hotplug mdm psp sshd wan_recovery
bcm_boot_launcher dnsspoof htpasswd meminfo pwd ssk wl
bpm dropbear httpd mkdir pwr stress wlctl
bpmctl dropbearkey http_get mknod pwrctl stty wlevt
brctl dropbearmulti ip mount racoon swmdk wlmngr
busybox dsldiagd ip6tables mroute radvd sync wlschd
buttonmonitor dumpcfg ipsec mv radvd_test tc wl_server
cat dumpeid iptables nas rastatus6 tcpdump wl_server_socket
chmod dumpmdm iq nas4not rawSocketTest telnetd wps_monitor
clicmds dumpmem iqctl nbsrelay ripd touch xdslctl
conntrack eapd kill netstat ripngd tr69c xtables-multi
consoled ebtables led_all nptest rm traffic_meter xtm
cp echo ledctl nvram sed true xtmctl
c_rehash epi_ttcp lld2d nvramUpdate send_cms_msg udhcpd zebra
root@lampu:/mnt# ls sbin
bcrelay depmod fdisk hotplug init klogd modprobe pppd2 pppstats pptpd rmmod sysinfo vconfig
chat ethctl halt ifconfig insmod logread poweroff pppdump pptpctrl reboot route syslogd
But surely that relies upon first gaining access to the Busybox shell? :-\
-
Most likely, but wondered whether some of those commands were hidden but available directly via the Cisco CLI before getting to the shell. So in the same way that in the ZyXel commands such as brctl and ifconfig are not displayed when entering help, but can still be executed from the ZyXel CLI.
-
If you want to explore the firmware in more depth I've converted the JFFS2 to little-endian (for Intel/AMD x86 based systems), extracted the root file-system and made it browsable online on my web-site as well as downloadable as a TAR archive (https://iam.tj/projects/cisco/RV134W/).
I've also included a mount.sh shell script for Linux PCs to enable direct local mounting of the RV134W.le.jffs2 image. The script is commented so it should be easy enough to figure out.
You'll see it does include the /bin/xdslctl program.
-
Anyone know if the latest firmware for this unit has a page showing the dsl stats added in?