enable telnet
login as admin
http://192.168.2.127/r38571,/adv,/cgi-bin/remote_help-cgi?type=backdoor
telnet 192.168.2.127 root YOUR_PASS
USB TTL to NSA-320
NSA325: http://dl.panticz.de/zyxell/tty_nsa325.jpg
NSA320: http://dl.panticz.de/hardware/zyxel_nsa320/nsa320_usb_ttl.jpg
install ssh
wget ftp://ftp.zyxel-tech.de/2.new_mirror/NSA310/4.40/zypkg/web_prefix -O /i-data/d154583a/admin/zy-pkgs/web_prefix
# firmware / package / reload
# install ffp
/i-data/d154583a/admin/zy-pkgs/ffp/ffp.log
ZyXEL NSA320
https://forum.doozan.com/read.php?2,88619
Update uboot
http://forum.doozan.com/file.php?3,file=160,filename=kwboot-tool.tar.gz,download=1
download: https://bitly.com/1W6D2pd
dhcp
tftpboot 0x800000 uboot.2017.07-tld-1.nsa325.mtd0.kwb
nand erase 0x0 0x80000
nand write.e 0x800000 0x0 0x80000
reset
Create USB boot disk
download: https://bitly.com/3zCSrnC
DEVICE=/dev/sdc sudo umount ${DEVICE}* sudo parted ${DEVICE} -s rm 1 sudo parted ${DEVICE} -s mklabel msdos sudo parted ${DEVICE} -s mkpart primary ext3 0% 100% sudo mkfs.ext3 ${DEVICE}1 -F -L rootfs sudo mount ${DEVICE}1 /mnt sudo tar xjf Debian-5.13.6-kirkwood-tld-1-rootfs-bodhi.tar.bz2 -C /mnt/ sync sudo umount ${DEVICE}1
Boot from NAND (optinal)
https://forum.doozan.com/read.php?2,12096
download: https://bitly.com/3zCSrnC
dhcp tftp 0x00800000 uImage nand erase 0x00c80000 0x00a00000 nand write 0x00800000 0x00c80000 0x00a00000 tftp 0x01c00000 kirkwood-nsa325.dtb nand erase 0x01700000 0x00a00000 nand write 0x01c00000 0x01700000 0x00a00000 tftp 0x1100000 uInitrd nand erase 0x04640000 0x00a00000 nand write 0x1100000 0x04640000 0x00a00000 setenv bootargs 'console=ttyS0,115200 root=LABEL=rootfs rootdelay=3 loglevel=7' setenv bootcmd 'nand read.e 0x0800000 0x00c80000 0xa00000; nand read.e 0x01c00000 0x01700000 0xa00000; nand read.e 0x1100000 0x04640000 0xa00000; bootm 0x800000 0x1100000 0x1c00000' saveenv reset
Boot from USB
setenv load_dtb 'ext4load usb 0:1 0x1c00000 /boot/dts/kirkwood-nsa325.dtb' setenv load_initrd 'ext4load usb 0:1 0x1100000 /boot/uInitrd' setenv load_uimage 'ext4load usb 0:1 0x800000 /boot/uImage' setenv bootargs 'console=ttyS0,115200 root=LABEL=rootfs rootdelay=3 loglevel=7' setenv bootcmd 'usb start; run load_dtb; run load_uimage; if run load_initrd; then bootm 0x800000 0x1100000 0x1c00000; else bootm 0x800000 - 0x1c00000; fi' setenv bootdelay 3 saveenv reset
NSA320
# http://forum.doozan.com/file.php?3,file=160,filename=kwboot-tool.tar.gz,download=1 # unbrick sudo /tmp/kwboot -p -t -B 115200 /dev/ttyUSB0 -b /tmp/uboot.2016.05-tld-1.nsa320.mtd0.kwb # flash uboot # http://forum.doozan.com/read.php?3,12381 dhcp tftpboot 0x800000 nsa320/uboot.2016.05-tld-1.nsa320.mtd0.kwb nand erase 0x0 0x80000 nand write.e 0x800000 0x0 0x80000 reset # flash image to nand (optional) dhcp tftp 0x00800000 /nsa320/uImage nand erase 0x00c80000 0x00a00000 nand write 0x00800000 0x00c80000 0x00a00000 tftp 0x01c00000 /nsa320/kirkwood-nsa320.dtb nand erase 0x01700000 0x00a00000 nand write 0x01c00000 0x01700000 0x00a00000 tftp 0x1100000 /nsa320/uInitrd nand erase 0x04640000 0x00a00000 nand write 0x1100000 0x04640000 0x00a00000 setenv bootargs 'console=ttyS0,115200 root=LABEL=rootfs rootdelay=3 loglevel=7' setenv bootcmd 'nand read.e 0x0800000 0x00c80000 0xa00000; nand read.e 0x01c00000 0x01700000 0xa00000; nand read.e 0x1100000 0x04640000 0xa00000; bootm 0x800000 0x1100000 0x1c00000' saveenv reset # boot from USB setenv load_dtb 'ext4load usb 0:1 0x1c00000 /boot/dts/kirkwood-nsa320.dtb' setenv load_initrd 'ext4load usb 0:1 0x1100000 /boot/uInitrd' setenv load_uimage 'ext4load usb 0:1 0x800000 /boot/uImage' setenv bootargs 'console=ttyS0,115200 root=LABEL=rootfs rootdelay=3 loglevel=7' setenv bootcmd 'usb start; run load_dtb; run load_uimage; if run load_initrd; then bootm 0x800000 0x1100000 0x1c00000; else bootm 0x800000 - 0x1c00000; fi' saveenv reset # create USB (Debian Jessie) DEVICE=/dev/sdc umount ${DEVICE}* parted ${DEVICE} -s rm 1 parted ${DEVICE} -s mklabel msdos parted ${DEVICE} -s mkpart primary ext4 0% 99% parted ${DEVICE} -s mkpart primary linux-swap 99% 100% mkfs.ext4 ${DEVICE}1 -F -L rootfs mkswap ${DEVICE}2 wget https://www.dropbox.com/s/qt2v378sm3j0loe/Debian-4.4.0-kirkwood-tld-1-rootfs-bodhi.tar.bz2 -P /tmp mount /dev/sdc1 /mnt tar xjf /tmp/Debian-4.4.0-kirkwood-tld-1-rootfs-bodhi.tar.bz2 -C /mnt/ sync umount /dev/sdc1 root@debian:~# uname -a Linux debian 4.6.0-kirkwood-tld-1 #1 PREEMPT Wed May 18 03:54:14 PDT 2016 armv5tel GNU/Linux # # OLD # # # flash new uboot # # http://forum.doozan.com/read.php?2,7806 # on tftp server wget http://dl.dropbox.com/u/1015928/Kirkwood/rootfs_images/NSA320quickstart.tar.gz -O /tmp/NSA320quickstart.tar.gz tar -C /tmp -xzf /tmp/NSA320quickstart.tar.gz NSA320quickstart/uboot.NAND-NSA320-IDEfixedv4-scripted.kwb.tar.gz tar -C /tmp -xzf /tmp/NSA320quickstart/uboot.NAND-NSA320-IDEfixedv4-scripted.kwb.tar.gz cp /tmp/uboot.NAND-NSA320-IDEfixedv4-scripted.kwb /var/lib/tftpboot/ # flash dhcp tftpboot 0x800000 uboot.NAND-NSA320-IDEfixedv4-scripted.kwb nand erase 0x0 0x80000 nand write.e 0x800000 0x0 0x80000 reset # set netconsole setenv serverip 192.168.2.155 # set to your desktop ip setenv ipaddr 192.168.2.1 saveenv # start netconsole on your desktop nc -l -u -p 6666 sudo /tmp/kwboot -p -t -B 115200 /dev/ttyUSB0 -b /tmp/uboot.NAND-NSA320-IDEfixedv4-scripted.kwb sudo /home/pako/develop/nsa320/kwboot -p -t -B 115200 /dev/ttyUSB0 -b /tmp/NSA320quickstart/uboot.NAND-NSA320-IDEfixedv4-scripted.kwb
#
# install debian
#
on TFTP Server
# get uImage from Arch Linux (no nfs server support?) mkdir /var/lib/tftpboot/nsa320 #wget -q http://us.mirror.archlinuxarm.org/os/ArchLinuxARM-armv5te-latest.tar.gz -O - | tar -C /tmp/ -xz ./boot/uImage #mv /tmp/boot/uImage /var/lib/tftpboot/nsa320/ #rm -r /tmp/boot/ # get initrd.gz # dep # wget http://www.scintilla.utwente.nl/~petero/nsa310/initrd.gz -O /var/lib/tftpboot/nsa320/initrd.gz wget -q ftp://ftp.debian.org/debian/dists/stable/main/installer-armel/current/images/kirkwood/netboot/marvell/sheevaplug/uInitrd -O /var/lib/tftpboot/nsa320/initrd.gz <strong>on ZyXEL NSA320 (serial)</strong> setenv mainlineLinux yes setenv arcNumber 3956 saveenv reset dhcp tftpboot 0x800000 /nsa320/uImage tftpboot 0xb00000 /nsa320/initrd.gz setenv bootargs 'console=ttyS0,115200n8' bootm 0x00800000 0xb00000 <strong>flash uImage to nand</strong> dhcp tftp 0x800000 /nsa320/uImage nand erase 0x4640000 0x300000 nand write.e 0x800000 0x4640000 0x300000 # boot from second device (USB pen) setenv bootargs 'console=ttyS0,115200 root=/dev/sdb1 rootdelay=10 loglevel=7' setenv bootcmd 'nand read.e 0x2000000 0x04640000 0x400000; bootm 0x2000000' saveenv reset <strong>v2, get kernel and initrd from doozan.com</strong> http://forum.doozan.com/read.php?2,12096,12180 umount /dev/sdb1 dd if=/dev/zero of=/dev/sdb bs=1M count=1 fdisk /dev/sdb mkfs.ext3 -L rootfs /dev/sdb1 mount /dev/sdb1 /mnt wget "http://dl.dropboxusercontent.com/s/818tlrq9seb2rgy/Debian-3.12.0-kirkwood-tld-3-rootfs-bodhi.tar.bz2?dl=1&token_hash=AAENHmNkqRuE1nujL4M3mgjP6E-HD3qykyDp9rLCNaSa6A" -O - | tar -C /tmp/ -xj ./boot/uInitrd ./boot/uImage cp /tmp/boot/uImage /tmp/boot/uInitrd /var/lib/tftpboot/nsa320/ #tar -C /mnt/ -xjf /tmp/Debian-3.12.0-kirkwood-tld-3-rootfs-bodhi.tar.bz2 #sync #umount /mnt tftp 0x800000 /nsa320/uImage nand erase 0x00C80000 0xa00000 nand write 0x800000 0x00C80000 0xa00000 tftp 0xb00000 /nsa320/uInitrd nand erase 0x04640000 0xa00000 nand write 0xb00000 0x04640000 0xa00000 #setenv bootargs 'console=ttyS0,115200n8 root=/dev/sda1 rootdelay=10 loglevel=7' #setenv bootargs 'console=ttyS0,115200n8 root=UUID=9080a964-97f8-497a-82ab-d1aae62310fe rootdelay=10 loglevel=7' setenv bootargs 'console=ttyS0,115200 root=LABEL=rootfs rootdelay=10 loglevel=7' setenv bootcmd 'nand read.e 0x800000 0x00C80000 0xa00000; nand read.e 0xb00000 0x04640000 0xa00000; bootm 0x800000 0xb00000' saveenv reset
SSH credentials
user: root pass: root
Bootmanager
# USB usb reset usb start usb info usb storage ls usb 0:1 / # env env print # set original mac address in u-boot setenv ethaddr XX:XX:XX:XX:XX:XX saveenv
HDD LEDs
# add to /etc/rc.local
http://dl.panticz.de/hardware/zyxel_nsa320/leds
Wake On Lan
# enable wol under linux? ethtool -s eth0 wol g # wol from other machine wakeonlan -i 192.168.2.255 ec:43:f6:be:6e:3b
Install kernel modules (in running nsa320 linux system)
wget http://dl.dropboxusercontent.com/s/818tlrq9seb2rgy/Debian-3.12.0-kirkwood-tld-3-rootfs-bodhi.tar.bz2 -O /tmp/Debian-3.12.0-kirkwood-tld-3-rootfs-bodhi.tar.bz2
tar -C /tmp -xjf /tmp/Debian-3.12.0-kirkwood-tld-3-rootfs-bodhi.tar.bz2
cp -a /tmp/lib/modules/ /lib/
Auto power on after power failure
http://forum.doozan.com/read.php?2,12096,13404#msg-13404
# power on on power fail /bin/echo 47 > /sys/class/gpio/export /bin/echo 49 > /sys/class/gpio/export # 49 out, value 1 /bin/echo "out" > /sys/class/gpio/gpio49/direction /bin/echo 1 > /sys/class/gpio/gpio49/value # 47 out, value 1 /bin/echo "out" > /sys/class/gpio/gpio47/direction # next line 0 to disable, 1 to enable resume from power loss (powers the PHY also!!) /bin/echo 1 > /sys/class/gpio/gpio47/value # set 49 value 0 /bin/echo 0 > /sys/class/gpio/gpio49/value
Install sensors
apt-get install lm-sensors
Install S.M.A.R.T.
wget -q --no-check-certificate https://raw.githubusercontent.com/panticz/installit/master/install.smartmontools.sh -O - | bash -
Links
http://forum.nas-central.org/viewtopic.php?f=249&t=3939
http://archlinuxarm.org/platforms/armv5/zyxel-nsa320
http://linuxwiki.de/ZYXEL%20NSA-310/
https://github.com/peeter123/NSA310-320-debian
http://forum.doozan.com/read.php?2,12096
http://blog.julianxhokaxhiu.com/entry/install-debian-wheezy-zyxel-nsa320
# recovery
wget ftp://ftp.zyxel.it/guide/nas/nsa320_recovery_usb.zip -O /tmp/nsa320_recovery_usb.zip
cd /tmp
unzip nsa320_recovery_usb.zip
bin2ram little /tmp/nsa310_fw/ras.bin /tmp/tlv.bin; [ $? == 4 ] && echo OK
mkdir /tmp/nsa320fw
fw_unpack -C /tmp/nsa320fw -i /tmp/tlv.bin; [ $? == 0 ] && echo OK
tar cjf nsa320_fw.tar.bz2 /tmp/nsa320fw/
Create RAID
for DEV in /dev/sd{a..b}; do parted ${DEV} -s mklabel msdos parted ${DEV} -s mkpart primary 2048s 100% parted ${DEV} -s set 1 raid on # mdadm --zero-superblock ${DEV}1 done
Install FTP server
apt install -y vsftpd sed -i 's|anonymous_enable=.*|anonymous_enable=YES|g' /etc/vsftpd.conf sed -i 's|#anon_upload_enable=YES|anon_upload_enable=YES|g' /etc/vsftpd.conf sed -i 's|#anon_mkdir_write_enable=YES|anon_mkdir_write_enable=YES|g' /etc/vsftpd.conf echo "anon_root=/media/" >> /etc/vsftpd.conf service vsftpd restart
Links
https://openwrt.org/toh/zyxel/nsa325
ftp://ftp.zyxel.it/guide/nas/
http://downloads.zyxel.nas-central.org/Users/Mijzelf/
http://www.zyxelforum.de/nsa-320-325-boot-probleme-oder-im-netzwerk-nicht-gefunden%C7%83-t4310.html