Skip to main content

Dump. Thoughts, ideas, notes ..

Cisco 2960 WS-C2960-48TT-L

WS-C2960-48TT-L Cisco 2960 Series switch. Writing down remarks, findings about under the hood components.

History

Cisco 2960 Series switch Cisco 2960

Series was released : 18.09.2005 End of sales date : 31.10.2014 End of support date: 31.10.2019

Product lifecycle from the release to the last support date is 14years.

Product description

  • WS-C2960-48TT-L : 48 10/100BASE-TX Ethernet ports and 2 10/100/1000BASE-T copper uplink ports (no SFP module slot)

ModelMotherboard assembly nrMotherboard revision nrModel revision nrSerial nrSystem serial nr
WS-C2960-48TT-L73-10391-05A0E0F0C130333V2FOC1315Y71V
WS-C2960-48TT-L73-10391-05A0E0F0C130333V2FOC1303V29T
WS-C2960-48TT-L73-10391-04B0E0F0C13160EGJFOC1151W0G8

Differences

FOC1303V29T model :

  • Uplink copper port transcievers
  • Serial RJ45 line driver/receiver
  • ASIC CPU SRAM
  • Clock buffers
  • RAM

Baseline for the component descriptio is the 05-A0 model. All differences are listed explicitely after the baseline model. If there is no difference specified, components are the same.

The 73-10391-04 B0 E0 model( F0C13160EGJ)

  • Flash

Software

Boot details

File "flash:c2960-lanbasek9-mz.122-46.SE/c2960-lanbasek9-mz.122-46.SE.bin" uncompressed and installed, entry point: 0x3000
executing...
Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Thu 21-Aug-08 15:59 by nachen
Image text-base: 0x00003000, data-base: 0x01200000

Have you ever wondered who is nachen ? Deployment manager, last commiter, first standby dude ?

Initializing flashfs...

flashfs[1]: 533 files, 19 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 32514048
flashfs[1]: Bytes used: 10655744
flashfs[1]: Bytes available: 21858304
flashfs[1]: flashfs fsck took 1 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.
cisco WS-C2960-48TT-L (PowerPC405) processor (revision E0) with 61440K/4088K bytes of memory.
Processor board ID FOC1315Y71V
Last reset from power-on
1 Virtual Ethernet interface
48 FastEthernet interfaces
2 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
64K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:25:46:4D:97:80
Motherboard assembly number     : 73-10391-05
Power supply part number        : 341-0097-02
Motherboard serial number       : FOC13160EGJ
Power supply serial number      : DCA131481UM
Model revision number           : E0
Motherboard revision number     : A0
Model number                    : WS-C2960-48TT-L
System serial number            : FOC1315Y71V
Top Assembly Part Number        : 800-27222-04
Top Assembly Revision Number    : B0
Version ID                      : V04
CLEI Code Number                : COM3H00BRC
Hardware Board Revision Number  : 0x02
Switch Ports Model              SW Version            SW Image                 
------ ----- -----              ----------            ----------               
*    1 50    WS-C2960-48TT-L    12.2(46)SE            C2960-LANBASEK9-M  

Identical Motherboard/model series

Continuosly confusing differences within same motherboard series :

  • 800-26688-01-A0
  • 700-20563-01 REV.A1
  • FOXCONN01/13/2009
File "flash:/c2960-lanbasek9-mz.122-52.SE/c2960-lanbasek9-mz.122-52.SE.bin" uncompressed and installed, entry point: 0x3000
executing...

Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(52)SE, RELEASE SOFTWARE (fc3)
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Fri 25-Sep-09 08:49 by sasyamal
Image text-base: 0x00003000, data-base: 0x01500000

Initializing flashfs...

fsck: Disable shadow buffering due to heap fragmentation.
flashfs[1]: 538 files, 19 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 32514048
flashfs[1]: Bytes used: 11966976
flashfs[1]: Bytes available: 20547072
flashfs[1]: flashfs fsck took 5 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.


cisco WS-C2960-48TT-L (PowerPC405) processor (revision E0) with 65536K bytes of memory.
Processor board ID FOC1303V29T
Last reset from power-on
1 Virtual Ethernet interface
48 FastEthernet interfaces
2 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

64K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:24:98:79:14:00
Motherboard assembly number     : 73-10391-05
Power supply part number        : 341-0097-02
Motherboard serial number       : FOC130333V2
Power supply serial number      : DCA130281B5
Model revision number           : E0
Motherboard revision number     : A0
Model number                    : WS-C2960-48TT-L
System serial number            : FOC1303V29T
Top Assembly Part Number        : 800-27222-04
Top Assembly Revision Number    : A0
Version ID                      : V04
CLEI Code Number                : COM3H00BRC
Hardware Board Revision Number  : 0x02


Switch Ports Model              SW Version            SW Image                 
------ ----- -----              ----------            ----------               
*    1 50    WS-C2960-48TT-L    12.2(52)SE            C2960-LANBASEK9-M  

64K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:1E:BD:F2:EE:80
Motherboard assembly number     : 73-10391-04
Power supply part number        : 341-0097-02
Motherboard serial number       : FOC11503GAM
Power supply serial number      : AZS11470046
Model revision number           : D0
Motherboard revision number     : B0
Model number                    : WS-C2960-48TT-L
System serial number            : FOC1151W0G8
Top Assembly Part Number        : 800-27222-03
Top Assembly Revision Number    : B0
Version ID                      : V03
CLEI Code Number                : COM3H00BRB
Hardware Board Revision Number  : 0x02


Switch Ports Model              SW Version            SW Image                 
------ ----- -----              ----------            ----------               
*    1 50    WS-C2960-48TT-L    12.2(46)SE            C2960-LANBASEK9-M  

Forensic details

##########     ##########      #########
###########    ###########    ##########
###     ###    ###      ##    ##
###      ##    ###########    #########
###      ##    ###########     #########
###     ###    ###      ##            ##
###########    ###########    ##########
##########     ##########     #########



   DATAGROUP Business Solutions GmbH



Unbefugter Zugriff wird strafrechtlich verfolgt!
Access for authorized users only.

Bei Stoerungen wenden Sie sich bitte an folgende Tel.Nr.,
On failure please call the following  number:
+49-(911) 65004 299
mail: Netz-Team-NBG.dg-bs@datagroup.de

Please enter your username and password!
show configuration

username klippel privilege 15 secret 5 $1$7CXP$eBgfs9BYdILD36lKiV3pQ.
username netzadmin privilege 15 secret 5 $1$1E0s$GjYEmaB2DquzvjnDFquqZ/

username narkumar privilege 15 secret 5 $1$IU.M$7k17Tknn9ZHGAyKGonZcv1
username admin privilege 15 secret 5 $1$9UAp$pHzv.fZTOsN12FUrMcm3W.
username trageing privilege 15 secret 5 $1$1Tz8$pMWbwXR3xlzKM5gXCAHcr0
username cattools privilege 15 secret 5 $1$gWc2$19qBsgUTLvLqfDz1Tt80Y1
username kempnada privilege 15 secret 5 $1$.FTh$bGz4/uUP2ZThNqo9zhjmM.
77   BRO-Guest-NUE                    active    
220  B1-K/M-Printers-NUE              active    
651  B1-Clients-NUE                   active    
658  B1-WLAN-NUE                      active    
900  COLT-MPLS-WAN                    active 
1002 fddi-default                     act/unsup 
1003 trcrf-default                    act/unsup 
1004 fddinet-default                  act/unsup 
1005 trbrf-default                    act/unsup 

Features

  • Auto-negotiation
  • Dynamic Trunking Protocol (DTP)
  • Port Aggregation Protocol (PAgP)
  • Link Aggregation Control Protocol (LCAP)
  • Automatic media-dependent interface crossover (MDIX)
  • Unidirectional Link Detection Protocol (UDLD)
  • Dynamic Host Configuration Protocol (DHCP)
  • Switching Database Manager (SDM)
  • Local Proxy Address Resolution Protocol (ARP)
  • Internet Group Management Protocol (IGMP)
  • Per-port broadcast, multicast, and unicast storm control
  • Voice VLAN
  • Cisco VLAN Trunking Protocol (VTP)
  • Switch Port Analyzer (SPAN)
  • Remote Monitoring (RMON)
  • Trivial File Transfer Protocol (TFTP)
  • Network Timing Protocol (NTP)
  • Cisco Emergency Responder (CER)

Board

Top view on the board.

P/N : 73-10391-05 AO PID VID identifier : WS-C2960-48TT-L V03

Additional information :

  • SN : F0C115W0G8
  • IOS VER : 12.2(35)SE5
  • MAC 00:1E:BD:F2:EE:80
  • CLEI Code COM3H00BRB

CLEI code is unique code assigned by Telcordia Technologies (URN - Uniformed Resource Name, RFC 4152) based on the request of hardware producer

The model was produced in 03/26/2009. Reference : 700-20563-01 REV. A1

Another reference number on the metal chasis is : 800-2669-01 A0. A0 seems to be submodel type.

Same A0 reference is on the P/N number from the board.

There are multiple variants of the board for the WS-C2960-48TT-L model.

P/N : 73-10391-04 B0

Core model is part of 73-10391 range, adjustments are described after the “-” sign as 04 B0 or 05 A0 . Interesting how you are able to adapt the hadrware setup within the same model range during the product lifetime period 31.10.2014 - 31.10.2019

Components

Power supply unit

73-10391-05 AO model power supply unit is Delta DPSN 60CP

Serial : DCA131481UM, Model nr: 341-0097-02, REV: A0

Schema description based on the TUV test result

Model 3 power supply unit is different

Can’t find any schema description

  • AZS11470046
  • 341-0097-02 REV:A0
  • 03060-0448
  • 03040-0448

Just based on look & feel Delta powered up between 2007 and 2009

CPU

Yeti-2

Part number : 08-0718-01, YETI-2, 98P1561 GE14, 0902D51DEP

As there is not much available by the part number search, only what I found is based on Cisco boot log : (PowerPC405) processor (revision E0) PowerPC 405 wiki link describes the series

Flash

IOS Flash

Spansion

Product identifiers

  • S29GL256N11TAI01
  • 907FV146 H
Details
  • 2006S29GL-N MirrorBit™ Flash Family
  • 256 Mbit
  • 3.0 Volt page mode flashing memory
  • 90 ns access time
  • Low power consumption
  • 25 mA typical active read current
  • 50 mA typical erase/program current
  • 1 μA typical standby mode current
  • Two hundred fifty-six 64 Kword (128 Kbyte) sectors
  • 8-word/16-byte page read buffer
  • 25 ns page read times
  • 16-word/32-byte write buffer reduces overall programming time for multiple-word updates

Software features

  • Program Suspend and Resume: read other sectors before programming operation is completed
  • Erase Suspend and Resume: read/program other sectors before an erase operation is completed—
  • Data# polling and toggle bits provide status
  • Unlock Bypass Program command reduces overall multiple-word programming time
  • CFI (Common Flash Interface) compliant: allows host system to identify and accommodate multiple flash devices

Hardware features

  • Advanced Sector Protection
  • WP#/ACC input accelerates programming time (when high voltage is applied) for greater throughput during system production. Protects first or last sector regardless of sector protection settings
  • Hardware reset input (RESET#) resets device
  • Ready/Busy# output (RY/BY#) detects program or erase cycle completion

Micron

Compared to other two models (73-10391-05 | A0 | E0 ) Cisco decided to use 2 * 128Mbit (1682) instead of 1 * 256 Mbit (Spansion model). The production date is 2007 which is two years earlier and it was most likely cheaper to have 1 * 256Mbit flash instead of 2 * 128Mb

Product identifiers

WS-C2960-48TT-L | 73-10391-04 | B0 | E0 | F0C13160EGJ|

  • MT28F128
Data sheet

Micron page throws 404

Board

RAM

Samsung 913

DDR SDRAM for the Yeti-2 CPU

32M * 16 RAM

1/2 available

  • K4H511638D-UCB3
  • H5116 2P8712CBC

Data sheet

Chip on the board

Micron

Board view

  • 46V32MI6

Datasheet

Functional architecture

Serial RJ45 line driver/receiver

  • MAX3232

Serial port connectivity is handled via Texas Instruments Max3232 Line Driver/Receiver. Line Driver and Receiver Integrated Circuits Line driver and receiver integrated circuits are used to transmit digital information from one subsystem or system to another. A line driver is used at the transmitting end and a matching line receivers required at the receiving end.

Details from the datasheet

Pin mapping

Motherboard with serial nr : FOC130333V2, same model and revision nr!? uses

  • ADM3202ARN

Board :

10/100Base-T ports

All 48 ports are connected via 6x Broadcom

  • BCM5248UA4KQM
  • HG0906 P14
  • 909992 1A

Data sheet

Elec & Eltec, Honkong

  • 824-M0060R
  • 0843 CN2

Board :

Motherboard with serial nr : FOC130333V2, same model and revision nr!? uses

Pulse

  • H5007NL
  • 0852J-China
  • 1000BASE-T magnetic module
  • Designed to support 1:1 turns radio transceiver

Data sheet :

Gigabit transcievers

Next to the upling copper ports we can find two gigabit transcievers from Marvell

  • Alaska 88E1112

Board view

They are located next to Elec&Eltec 1000 Base-T single port magnetic modules

Fan

Nidec Gamma 30

  • Model A34123-57
  • PBT-GF30-FRK

Data sheet

ASIC

There is not much I can find about ASIC model, as it’s under the heat sink. Don’t know how to safely remove it without destroying the ASIC.

The ASIC is basically a CPU that is not a general purpose CPU but is a CPU for making switching decisions very quickly. It can’t be used for much else. This is similar to a high-end graphics card that has a special CPU for graphics processing that wouldn’t be good for general applications. Source

ASIC CPU SRAM

Looking at the board, next to each ASIC, there is a SRAM

128K x 36, 256K x 18

Renesas

  • IDT 71V3558X
  • S133PF
  • X0912J

Board view

Motherboard with serial nr : FOC130333V2, same model and revision nr!? uses

Samsung 849

  • K7N401809B

Datasheet

ASIC CAM

TCAM (ternary content-addressable memory) is a specialized type of high-speed memory that searches its entire contents in a single clock cycle. Generally speaking, CAM is often described as the opposite of random access memory (RAM). Source

Renesas TCAM part id’s

  • R8A20120BG
  • 8489SB00

Switch#show platform tcam usage

=============================================================================
                                  TCAM Table       
 TCAM / SSRAM Table            TCAM            SSRAM
                                Start   Size X    Start   Size Y     
=============================================================================
 Local Forwarding Table:            0   2200 1        0   2200   4
 Local Learning Table:              0   2200 1     8800   2200   2
 Secondary Forwarding Table:     2080    200 1     CC00    200   8
 QoS Table:                      2280    C00 1     F700    C00   4
 ACL Table:                      2E80    C00 1    12700    C00   4
 IPV6 Secondary Forwarding Tabl  3E40     C0 2     DC00     60   8
 IPV6 Classification Table:      3F00     80 2    15700     40   4
 IPV6 ACL Table:                 3F80     70 2    15800     38   4
 Station Table:                     0      0 0    15900   2200   4
 MAC Address Table:                 0      0 0    1E100      2   8
 Multicast Expansion Table:         0      0 0    1E180    122  40
 VLAN List Table:                   0      0 0    22A00     40  10
 Equal Cost Route Table:            0      0 0    22A00      0  20

 X - Number of 144-bit TCAM entries per descriptor
 Y - Number of bytes per descriptor
=============================================================================
SDM template realignment scheme-2 in effect
Dummy SFD start: 0xE700, entries 0x200, size 8
Switch#show platform tcam utilization

CAM Utilization for ASIC# 0                      Max            Used
                                             Masks/Values    Masks/values

 Unicast mac addresses:                       1040/8320         12/24    
 IPv4 IGMP groups + multicast routes:           48/384           6/26    
 IPv4 unicast routes:                            0/0             0/0     
 IPv4 policy based routing aces:                 0/0             0/0     
 IPv4 qos aces:                                384/384         260/260   
 IPv4 security aces:                           384/384          27/27    

Note: Allocation of TCAM entries per feature uses
a complex algorithm. The above information is meant
to provide an abstract view of the current TCAM utilization

Model 3 with system serial nr. FOC1151W0G8 has a different TCAM implementation

  • IDT 75N414
  • S125BC
  • Z0747J
  • W10517MN1 IND GX

Couldn’t find data sheet details via standard Google search

Clock buffer

Introduction to Clock buffers

Source : Silicon Labs (Linda Lua), lost the reference

Pericom
  • P149FCT
Data sheet
Board view
Cypress Clock
  • CY2CC8100XI-1
Data sheet
Board view

RAM termination

Termination power provider

  • Philips NE57810
Memory termination
Board view

Octal bus transceiver

  • Nexperia NXP LVC245A

Data sheet

Board view

Single supply Quad Comparator

  • ON Semiconductor
  • LM339DG
  • PAA842

Data sheet

Board view

Quadruple Bus Buffer Gate

  • LC125A and LVC126A

Data sheet

Board view

Serial/parallel-out shift register

  • NXP
  • 74HC595D

Data sheet

Board view

Sequencing controller

  • Supertex inc
  • PS10NG

Data sheet

Board view