Difference between revisions of "SFPTotal Plus X"

From SFPTotal Wiki
Jump to: navigation, search
 
(8 intermediate revisions by the same user not shown)
Line 1: Line 1:
'''SFPTotal Plus X''' is a new revision of universal programming board SFPTotal Plus with improved support fiber optical transceivers. The coding board allows to reprogram 100M and 1.25G SFP, 8/10/16G SFP+, 25G SFP28, 10G XFP,  40G QSFP+, 100G QSFP28 and 200/400G QSFP-DD transceivers, DAC and AOC cables. Device connects to PC via USB interface through which performed control and power supply of transceiver. An external supply adapter connection socket is presented for work with high-powered transceivers with an overestimated power consumption (for example, transceivers for distance 40/80/120 km).
+
[[File:Sfptotal_plus_x.png|450px|thumb|right|Programmer SFPTotal Plus X]]'''SFPTotal Plus X''' is a new revision of universal programming board SFPTotal Plus with improved support fiber optical transceivers. The coding board allows to reprogram 100M and 1.25G SFP, 8/10/16G SFP+, 25G SFP28, 10G XFP,  40G QSFP+, 100G QSFP28 and 200/400G QSFP-DD transceivers, DAC and AOC cables. Device connects to PC via USB interface through which performed control and power supply of transceiver. An external supply adapter connection socket is presented for work with high-powered transceivers with an overestimated power consumption (for example, transceivers for distance 40/80/120 km).
  
 
== Application ==
 
== Application ==
Line 23: Line 23:
 
== Listing of elements ==
 
== Listing of elements ==
  
Listing of elements placed on circuit board of SFPTotal Plus programmer.
+
Listing of elements placed on circuit board of SFPTotal Plus X programmer  
 
+
  
  
 
'''1. Transceiver ports'''
 
'''1. Transceiver ports'''
  
'''P2''' - SFP, SFP+ port
+
'''P2''' - Port for SFP, SFP+, SFP28 transceivers
 
+
'''P11''' - QSFP, QSFP+, QSFP28 port
+
  
'''P9''' - XFP port
+
'''P11''' - Port for QSFP+, QSFP28 and QSFP-DD
  
'''P7''' - GBIC port
+
'''P9''' - Port for XFP
  
  
 
'''2. Power supply plans'''
 
'''2. Power supply plans'''
  
'''P1''' - power supply of SFP port, a pair of 3.3 V for VccT and VccR pins.
+
'''P26''' - Common power supply 3.3V for ports. Must be connected to provide power supply on ports.
  
'''P17, P16, P15''' - power supply of QSFP port, 3.3 V for Vcc1, VccTx and VccRx pins.
+
'''P1''' - PWR_TX and PWR_RX connectors are power supply of SFP port, a pair of 3.3 V for VccT and VccR pins.
  
'''P12, P14, P13, P10''' - power supply of XFP port: 3.3V, -5V, 5V and 1.8 power supply plans.
+
'''P24, P23, P17, P16, P15, P8''' - power supply of QSFP-DD port3.3 V for Vcc1, VccTx and VccRx pins.
  
'''P8''' - power supply of GBIC port, switch between 3.3V or 5V. For default, closed in 3V3 position.
+
'''P12, P14, P13, P10''' - power supply of XFP port: 3.3V, -5V, 5V and 1.8 power supply plans.
  
  
Line 85: Line 82:
 
'''4. Interfaces'''
 
'''4. Interfaces'''
  
'''P5''' - USB interface for connection to PC
+
'''P5''' - USB type C port for connection to PC
  
'''P22''' - I<sup>2</sup>C databus, logic level 5V
+
'''P22''' - I<sup>2</sup>C databus with logic level 3V3 and 5V
  
  
 
'''5. LED indicators '''
 
'''5. LED indicators '''
  
'''POWER''' - should statically light when board connected to USB or to external supply adapter.
+
'''LED1 - POWER''' - should statically light when board connected to USB or to external supply adapter.
  
'''MCU''' - indication of power supply for microcontroller.
+
'''LED2 - MCU''' - indication of power supply for microcontroller.
  
'''ERROR''' - should glow when unhandled errors occur on the data bus, for example: connection more than 1 transceiver.
+
'''LED3 - ERROR''' - should glow when unhandled errors occur on the data bus, for example: connection more than 1 transceiver.
  
'''STATUS''' - should blinking when transceiver is not connected and statically light when transceiver is connected.
+
'''LED4 - STATUS''' - should blinking when transceiver is not connected and statically light when transceiver is connected.
  
 
== Management interface ==
 
== Management interface ==
Line 105: Line 102:
 
You can use the programming board without [[SFPTotal Wizard]] software to get more features or to realize the opportunities that are not available in the standard software. Use this document to get information about commands which supported by SFPTotal Plus.
 
You can use the programming board without [[SFPTotal Wizard]] software to get more features or to realize the opportunities that are not available in the standard software. Use this document to get information about commands which supported by SFPTotal Plus.
  
 
+
Management inerface is full compatible with SFPTotal Plus https://wiki.sfptotal.com/index.php/SFPTotal_Plus#Management_interface
=== Serial port settings ===
+
 
+
[[File:serial_port_settings.jpg|250px|right|Serial port settings]]
+
 
+
You can access the command line interface of the programmer not only with the SFPTotal Wizard, but also with the help of utilities for working with the serial port. For example,  [http://www.putty.org/ Putty].
+
 
+
The boards are support a flexible baud rate, but we recommend use value 115200.
+
 
+
:: '''Default settings'''
+
 
+
:: Baud rate: 115200
+
 
+
:: Data bits: 8
+
 
+
:: Parity: None
+
 
+
:: Stop bits: 1
+
 
+
:: Flow control: None
+
 
+
 
+
=== Configuration commands ===
+
 
+
;'''CLI'''
+
 
+
After reset the programmer does not display in the interface characters entered from the keyboard.
+
The command switches the echo output of command line. Default, CLI=0.
+
<pre style="color:#222;">
+
? CLI
+
CLI=0
+
 
+
CLI=1
+
</pre>
+
 
+
Set CLI=1 to turn on echo.
+
 
+
 
+
;'''STATUS'''
+
 
+
Commend returns current state GPIO for each port.
+
<pre style="color:#222;">
+
STATUS
+
[GBIC]: MOD_ABS=1; TX_FAULT=1; RX_LOS=1; TX_DIS=1
+
[SFP]:  MOD_ABS=1; TX_FAULT=1; RX_LOS=1; TX_DIS=1
+
[XFP]:  MOD_ABS=1; RX_LOS=1; INTERRUPT=1; MOD_SEL=1; P_DOWN/RESET=1;
+
[QSFP]: MOD_ABS=1; INTL=1; MOD_SEL=1; RESETL=1;
+
</pre>
+
 
+
 
+
'''TX_DIS'''
+
 
+
Command allows to disable power supply of transmitter for switching to low power mode (LPMODE). To activate the LPMODE, it is necessary to transfer command TX_DIS setting the flag value of 1.
+
 
+
To disable the mode, you must set the flag equal to 0. The current state can be requested with STATUS command.
+
<pre style="color:#222;">
+
TX_DIS=1
+
 
+
STATUS
+
MOD_ABS=0; TX_FAULT=1; RX_LOS=0; TX_DIS=1
+
 
+
TX_DIS=0
+
STATUS
+
MOD_ABS=0; TX_FAULT=1; RX_LOS=0; TX_DIS=0
+
</pre>
+
 
+
Low power mode is activated for default.
+
On the PCB of SFPTotal boards are placed contacts LP_MODE, which allows to switch low power mode in manual mode.
+
 
+
 
+
;'''VERSION'''
+
 
+
Command returns information about device: hardware revision, software version and unique serial number of the device.
+
<pre style="color:#222;">
+
VERSION
+
SFPTotal Plus (c) 2015-2016
+
HW: 1.1
+
SW: 1.0.5
+
SN: SFPT-P1116021001
+
</pre>
+
 
+
 
+
; '''I2CRATE'''
+
 
+
Note: Supported only on the SW versions 1.1.0 or above
+
 
+
This command sets the speed of I2C data bus.
+
 
+
<pre style="color:#222;">
+
I2CRATE=12 # Set up speed rate 100 kHz
+
I2CRATE=40 # Set up speed 30 kHz
+
I2CRATE=C6 # Set up speed 10 kHz
+
</pre>
+
 
+
To request a current speed use command: '''? I2CRATE'''
+
 
+
<pre style="color:#222;">
+
? I2CRATE
+
I2CRATE=C6
+
</pre>
+
 
+
 
+
; '''I2CPAUSE'''
+
 
+
Note: Supported only on the SW versions 1.2.2 or above
+
 
+
This command sets the interval between operation of I2C data bus.
+
Value equal to milliseconds in Hex format.
+
 
+
<pre style="color:#222;">
+
I2CPAUSE=20 # Set interval 32ms
+
I2CPAUSE=32 # Set interval 50ms (for default)
+
I2CPAUSE=64 # Set interval 100ms
+
</pre>
+
 
+
To request a current interval use command: '''? I2CPAUSE'''
+
 
+
<pre style="color:#222;">
+
? I2CPAUSE
+
I2CPAUSE=32
+
</pre>
+
 
+
 
+
;'''BPS'''
+
 
+
The command set number bytes in block of write. Default, BPS=08
+
<pre style="color:#222;">
+
? BPS
+
BPS=08
+
 
+
BPS=01 # Set block size in 1 byte
+
BPS=08 # Set block size in 8 bytes (default)
+
BPS=FF # Set block size in 255 bytes
+
</pre>
+
 
+
By default, the recording is performed by blocks of 8 bytes. For the programming of some transceivers with protection, it may be necessary to change the block size, for example, writing by each byte (BPS=01) or writing the entire block as a whole (BPS=FF).
+
 
+
 
+
; '''AUTO_WR_ADDTBL'''
+
 
+
Note: Supported only on the SW versions 1.1.0 or above
+
 
+
If the flag is set, the programmer will automatically change the address of the additional tables before performing reading and writing operations.
+
 
+
<pre style="color:#222;">
+
AUTO_WR_ADDTBL=1
+
+
AUTO_WR_ADDTBL=0
+
</pre>
+
 
+
To request a current value use command: '''? AUTO_WR_ADDTBL'''
+
 
+
<pre style="color:#222;">
+
? AUTO_WR_ADDTBL
+
AUTO_WR_ADDTBL=0
+
</pre>
+
 
+
 
+
 
+
=== Read and write ===
+
 
+
 
+
; '''rXYYAABBCC''' ('''RXYYAABBCC''')
+
 
+
Command for reading memory of transceiver.
+
 
+
<pre style="color:#222;">
+
r1A000007F
+
Read 128 byte(s) Table 0xA0 from 0x00
+
 
+
##    00  01  02  03  04  05  06  07  08  09  0A  0B  0C  0D  0E  0F
+
 
+
00 :  03  04  07  20  00  00  00  00  00  00  00  06  67  00  0A  64
+
01 :  00  00  00  00  4F  45  4D  20  20  20  20  20  20  20  20  20
+
02 :  00  20  20  20  00  00  00  00  31  30  47  42  2D  53  46  50
+
03 :  2D  4C  52  2D  45  20  20  20  31  2E  30  20  05  1E  00  F9
+
04 :  00  1A  00  00  45  58  50  39  36  4C  30  31  31  20  20  20
+
05 :  20  20  20  20  31  31  30  38  30  39  20  20  68  F0  03  02
+
06 :  45  58  54  52  45  4D  45  20  4C  52  00  00  00  00  00  00
+
07 :  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00  00
+
</pre>
+
 
+
<pre style="color:#222;">
+
R1A000007F 
+
03040720000000000000000667000A64000000004F454D202020202020202020
+
0020202000000000313047422D5346502D4C522D45202020312E3020051E00F9
+
001A000045585039364C30313120202020202020313130383039202068F00302
+
45585452454D45204C5200000000000000000000000000000000000000000000
+
</pre>
+
 
+
 
+
; '''wXYYAABBCC''' ('''WXYYAABBCC''')
+
 
+
Command for writing to the memory of transceiver.
+
 
+
'''w''' &mdash; (1 byte) &mdash; Write command. Symbol register is responsible for the subsequent read after write. If you use uppercase (W) after the recording is complete programmer will make reading the memory area which has been overwritten. To  write without return a write result of lower case (w) must be used.
+
               
+
'''X'''  &mdash; (1 byte)  &mdash;  Transceiver type (1 - SFP, 2 - SFP+).
+
 
+
'''YY''' &mdash; (2 bytes) &mdash;  The device address on the I2C bus.
+
 
+
'''AA'''  &mdash; (2 bytes) &mdash;    Address of additional table.
+
 
+
'''BB'''  &mdash; (2 bytes) &mdash;    Address table. Value in HEX. For example: A0 or A2.
+
 
+
'''СС'''  &mdash; (2 bytes) &mdash;  Write byte count. Hexadecimal value reduced by one.  For example, for writing 128 bytes you should set this parameter in 7F (0x7F in HEX, 127 in decimal).
+
 
+
'''{DATA}'''  &mdash; Write data in HEX, 2 characters for each byte of the parcel.
+
 
+
 
+
''' Examples '''
+
 
+
Write code 128 bytes in Table A0 Upper address 00 for SFP transceiver:
+
<pre style="color:#222;">
+
W1A000007F
+
03040720000000000000000667000A64000000004F454D202020202020202020
+
0020202000000000313047422D5346502D4C522D45202020312E3020051E00F9
+
001A000045585039364C30313120202020202020313130383039202068F00302
+
45585452454D45204C5200000000000000000000000000000000000000000000
+
</pre>
+
 
+
Write password 0123 (HEX: 30h 31h 32h 33h) in Table A2 address 7B for SFP+ transceiver:
+
<pre style="color:#222;">w2A2007B0330313233</pre>
+
 
+
'''Note: Write command should type without newline characters and spaces. Shifts are given for the convenience display of the material in the examples.'''
+
 
+
 
+
=== Brute-force mode ===
+
 
+
Starting  from SW 1.2.3 firmware version has been added the function that allows searching for a password in brute mode without using the SFPTotal Wizard software. It  mean that programming board can check passwords by itself in wide range of values.
+
 
+
''' How does it works? '''
+
 
+
To check the password programmer should make few operations:
+
# Enter password in password area
+
# Write a check word to Vendor name area
+
# Read vendor name area
+
# Compare a check word with vendor name.
+
 
+
The programmer goes through the password values sequentially within the specified range. By default, the programmer write a check word "SFPTOTAL" (8 bytes) in Table A0h with offset 14h.
+
Then it compares the data that was read after the control word was written.
+
 
+
If the read data is the same as the control word, then it mean the record is successful. The programmer will stop the brute-force process and return the current password as a result of a successful search.
+
 
+
We are developed this function for searching passwords to MSA compliant transceivers. Anyway, you should check the documentation and standards for your module before using brute-force mode.
+
 
+
 
+
; '''BFSET'''
+
 
+
The command sets the password search parameters and starts the brute-force process.
+
<pre style="color:#222;">
+
BFSET A2 7B AAAAAAAA FFFFFFFF CCCCCCCC
+
</pre>
+
 
+
'''A2''' - address of Table, where must be entered a password. For XFP and QSFP address should be set in A0.
+
 
+
'''7B''' - offset for entering a password
+
 
+
'''AAAAAAAA''' - start of range
+
 
+
'''FFFFFFFF''' - end of range
+
 
+
'''CCCCCCCC''' - value from where should be started brute-force process
+
 
+
Recommended ranges for search:
+
 
+
<pre style="color:#222;">
+
BFSET A2 7B 41414141 5A5A5A5A 41414141 # A-Z
+
 
+
BFSET A2 7B 61616161 7A7A7A7A 61616161 # a-z
+
 
+
BFSET A2 FC 30303030 39393939 30303030 # 0-9
+
 
+
BFSET A2 7B 20202020 7A7A7A7A 20202020 # Symbols + Numeric + Literal
+
</pre>
+
 
+
 
+
; '''BFSTOP'''
+
Use command BFSTOP to stop brute-force process. You could continue from this point using command BFSTART.
+
 
+
 
+
; '''BFSTART'''
+
Use command BFSTART to continue brute-force progress from last point.
+
 
+
 
+
; '''? BFPASS'''
+
Use command '''? BFPASS''' to get know current password in brute-force progress.
+
 
+
 
+
; '''BFCWADR'''
+
Set device address of entering check word. Fo example, BFCWADR=A0
+
 
+
 
+
; '''BFCWOFT'''
+
Set offset parameter for entering check word. For default, BFCWOFT=14.
+
 
+
Note: for XFP and QSFP transceivers use BFCWOFT=94.
+
 
+
 
+
'''How to start brute-force for SFP+ transceiver?'''
+
 
+
<pre>
+
BFCWADR=A0
+
BFCWOFT=14
+
BFSET A2 7B 20202020 7A7A7A7A 20202020
+
</pre>
+
 
+
 
+
'''How to start brute-force for XFP transceiver?'''
+
 
+
Set jumper on P20 contact on programming board.
+
 
+
<pre>
+
BFCWADR=A0
+
BFCWOFT=94
+
BFSET A0 7B 20202020 7A7A7A7A 20202020
+
</pre>
+

Latest revision as of 16:49, 10 May 2021

Programmer SFPTotal Plus X
SFPTotal Plus X is a new revision of universal programming board SFPTotal Plus with improved support fiber optical transceivers. The coding board allows to reprogram 100M and 1.25G SFP, 8/10/16G SFP+, 25G SFP28, 10G XFP, 40G QSFP+, 100G QSFP28 and 200/400G QSFP-DD transceivers, DAC and AOC cables. Device connects to PC via USB interface through which performed control and power supply of transceiver. An external supply adapter connection socket is presented for work with high-powered transceivers with an overestimated power consumption (for example, transceivers for distance 40/80/120 km).

Application

Programmers SFPTotal are used to solve next tasks:

  • Programming transceviers SFP, XFP, QSFP and QSFP-DD form factors
  • Providing of compatibility between network equipment of different manufacturers
  • Reflashing memory of write-protected transceivers
  • Changing settings of PHY controllers
  • Branding for OEM transceivers
  • Diagnosis transceiver by reading the DDM
  • Accounting for optical transceivers

Quick start guide

  1. Connect SFPTotal Plus board to your PC using USB type C cable
  2. Install drivers for SFPTotal Device
  3. Download application SFPTotal Wizard
  4. Start SFPTotal Wizard
  5. Insert transceiver to the programmer port
  6. Reading transceiver's memory

Listing of elements

Listing of elements placed on circuit board of SFPTotal Plus X programmer


1. Transceiver ports

P2 - Port for SFP, SFP+, SFP28 transceivers

P11 - Port for QSFP+, QSFP28 and QSFP-DD

P9 - Port for XFP


2. Power supply plans

P26 - Common power supply 3.3V for ports. Must be connected to provide power supply on ports.

P1 - PWR_TX and PWR_RX connectors are power supply of SFP port, a pair of 3.3 V for VccT and VccR pins.

P24, P23, P17, P16, P15, P8 - power supply of QSFP-DD port, 3.3 V for Vcc1, VccTx and VccRx pins.

P12, P14, P13, P10 - power supply of XFP port: 3.3V, -5V, 5V and 1.8 power supply plans.


3. Jumpers

P3 - low power mode, keep closed to disable low power mode (TX enable).

P4 - RS1 (position 1-2) and RS0 (position 3-4) pins.

P18 - QSFP ModSelL

The ModSelL is an input pin. When held low by the host, the module responds to 2-wire serial communication commands. The ModSelL allows the use of multiple QSFP modules on a single 2-wire interface bus. When the ModSelL is “High”, the module shall not respond to or acknowledge any 2-wire interface communication from the host. ModSelL signal input node must be biased to the “High” state in the module.

INF-8438

Notice: The programmer automatically switches the contact to "Low" level when performing read and write operations on the data bus.

P19 - QSFP ResetL

P20 - XFP ModDeSel

The Mod_DeSel is an input pin. When held Low by the host, the module responds to 2-wire serial communication commands. The Mod_DeSel allows the use of multiple XFP modules on a single 2-wire interface bus.
When the Mod_DeSel pin is “High”, the module shall not respond to or acknowledge any 2-wire interface communication from the host. Mod_DeSel pin must be pulled to VCC3 in the module.

INF-8077i

Notice: The programmer automatically switches the contact to "Low" level when performing read and write operations on the data bus.

P21 - XFP PDOWN/RESET

This is a multifunction pin for module Power Down and Reset. The P_Down/RST pin must be pulled up to VCC3 in the XFP module.

INF-8077i


4. Interfaces

P5 - USB type C port for connection to PC

P22 - I2C databus with logic level 3V3 and 5V


5. LED indicators

LED1 - POWER - should statically light when board connected to USB or to external supply adapter.

LED2 - MCU - indication of power supply for microcontroller.

LED3 - ERROR - should glow when unhandled errors occur on the data bus, for example: connection more than 1 transceiver.

LED4 - STATUS - should blinking when transceiver is not connected and statically light when transceiver is connected.

Management interface

The device provides access to management interface (CLI) by connecting through a virtual serial port. You can use the programming board without SFPTotal Wizard software to get more features or to realize the opportunities that are not available in the standard software. Use this document to get information about commands which supported by SFPTotal Plus.

Management inerface is full compatible with SFPTotal Plus https://wiki.sfptotal.com/index.php/SFPTotal_Plus#Management_interface