Belkin 7130 is a 54g access point. 2 small antenna's are not detachable. The box looks and feels very cheap plastic. There is only one 10/100 ethernet port. Only 3 leds (on, wlan, wan). Cost about 170 EUR in Aug 2003 continental europe.
You need to upload at least 2.0 version of firmware to get it 802.11g rfc compliant. It is 802.11b compliant.
The web interface ( only way to configure it ) works fine in Mozilla, but is very limited in possibilities ( compared with linksys for example ).
One can find the start of the cramfs part of the .bin file by looking for hex values 3d4528cd. The offset of this 3d byte is the skip value ( converted to decimal ).
- hexdump BELKIN_AP_UK_2.00.01.bin | grep 3d45 | grep 28cd 00a0bb0 0000 0000 0000 0000 0000 0000 3d45 28cd
Of course it is possible that 3d45 and 28cd are not on the same line in hexdump output ...
Convert 00a0bb0 to decimal and add the offset in bytes to the 3d byte. That is where cramfs starts.
- mount -o loop,offset=658364 -t cramfs ./BELKIN_AP_UK_2.00.01.bin /mnt/something
or with really old kernels:
- dd if=BELKIN_AP_UK_2.00.01.bin of=belkin.cramfs bs=1 skip=658364 mount -o loop -t cramfs ./belkin.cramfs /mnt/something
( loop and cramfs are must be in kernel or as a module ).
Belkin 7130 accesspoint seems to be running 2.4.5 kernel ( 2.0 firmware ). There is a broadcom chipset driver as module.
CPU is a Broadcom BCM4702, the same as the Linksys WRT54g.
Firmware appears to be based on the same source as the WRT54g with some cosmetic and functional differences.
There appears to be no publically available (on the web UI at least) ping on this box - Making the "distribution" method for telnet access, etc harder to implement.
The factory default for this device is 192.168.2.254 The snmp 161/udp port is open, but have not got data out of it.
Please add more information here. memorysize, ... - Can one download the existing firmware before upgrading to a new one ( tftp command ?) - How comes the 7230 has newer official firmware then this (similar) device ?
It's a similar device, that's for sure. I'm fairly sure that it's the same hardware, but minus some components for the router router function. Hence it has one ethernet connection rather than five. See F5D7230 for more details about the router version.
To answer your questions - no, I don't think there is any way to download existing firmware. I guess the 7230 has newer software because there were more bugs to fix in the router feature. Or maybe they've just given up on the 7130. It's possible that the newer firmware will install and run on the 7130. If you were game, you could just try it.
I notice above that you say that the factory default for this device is 192.168.2.254. That's true - and as far as I have been able to determine, it's not possible to change that either. Seems pretty poor to me.
Here is the list of files and symlinks included in the BELKIN_AP_2.00.04.bin firmware. Note that it is still using the 2.4.5 kernel and the binaries are compiled against glibc, rather then uClibc, as in the recent linksys firmwares:
bin/busybox etc/ld.so.conf etc/ld.so.cache lib/ld.so.1 lib/libc.so.6 lib/modules/2.4.5/kernel/drivers/net/et/et.o lib/modules/2.4.5/kernel/drivers/net/led/led.o lib/modules/2.4.5/kernel/drivers/net/wl/wl.o sbin/rc sbin/wlconfig sbin/nas usr/lib/libnvram.so usr/lib/libnetconf.so usr/lib/libshared.so usr/sbin/nvram usr/sbin/brctl usr/sbin/netconf usr/sbin/led_mon usr/sbin/httpd www/main_router.css www/styles.css www/showMenu.js www/validate.js www/check_firmware_fail.html www/duplicate.html www/fw_id.html www/glossary.html www/help.html www/indexa.html www/index.html www/loginerr.html www/login.html www/reset_success.html www/restore_factory_default_success.html www/restore_setting_success.html www/update_firmware_success.html www/utilb_system.html www/util_factory.html www/util_firmware.html www/util_main.html www/util_prev.html www/util_reset.html www/util_save.html www/wireless_apt_disabled.html www/wireless_apt_enable.html www/wireless_apt.html www/wireless_bridge.html www/wireless_bridge_ss.html www/wireless_chan.html www/wireless_encrypt_128.html www/wireless_encrypt_64.html www/wireless_encrypt.html www/wireless_encrypt_no.html www/wireless_mac_ctrl.html www/wireless_main.html www/wireless_wpa.html www/wireless_wpa_psk.html www/graphics/bar_cap.gif www/graphics/bar_floor.gif www/graphics/bar.gif www/graphics/bar_slope.gif www/graphics/blu_bar.gif www/graphics/head_logo.gif www/graphics/shim.gif www/graphics/title.gif bin/cat -> busybox bin/chmod -> busybox bin/cp -> busybox bin/date -> busybox bin/dd -> busybox bin/echo -> busybox bin/grep -> busybox bin/kill -> busybox bin/ln -> busybox bin/ls -> busybox bin/mkdir -> busybox bin/mknod -> busybox bin/more -> busybox bin/mount -> busybox bin/msh -> busybox bin/mv -> busybox bin/ping -> busybox bin/ps -> busybox bin/pwd -> busybox bin/rm -> busybox bin/rmdir -> busybox bin/sh -> busybox bin/sleep -> busybox bin/touch -> busybox bin/umount -> busybox etc/resolv.conf -> /tmp/resolv.conf etc/hosts -> /tmp/hosts etc/nsswitch.conf -> /tmp/nsswitch.conf lib/modules/2.4.5/build -> /home/hyin/cvs/BELKIN/ASKEY_31190/src/linux/linux sbin/ifconfig -> ../bin/busybox sbin/insmod -> ../bin/busybox sbin/lsmod -> ../bin/busybox sbin/reboot -> ../bin/busybox sbin/rmmod -> ../bin/busybox sbin/syslogd -> ../bin/busybox sbin/init -> rc sbin/erase -> rc sbin/write -> rc sbin/stats -> rc sbin/hotplug -> rc usr/sbin/fw -> netconf usr/bin/free -> ../../bin/busybox usr/bin/killall -> ../../bin/busybox usr/bin/route -> ../../bin/busybox usr/bin/tftp -> ../../bin/busybox usr/bin/wget -> ../../bin/busybox usr/tmp -> ../tmp var -> tmp/var www/tmp -> /tmp/www
Just got myself a F5D7130. Firmware Version = 3.00.07. Boot Version v1.03.12.bk.
You can find it via this vendor support/download page:
http://web.belkin.com/support/download/download.asp?download=F5D7130&lang=1&mode=
Upgraded firmware of 7130 to 3.0.08 of F5D7230 using Linksys TFTP-client on bootup of the AP. Works like a charm (be sure to reset factory defaults to get the actual router 'functionality').
I was hacking this device all night and was able to build a fully functional image using the gpl-tools from belkin.com; here is what i did:
- the firmware is composed of three main parts, the kernel (starting "HDR0"), the cramfs-image(starting "0x453d", close before "Compressed") and the nvars-section (at "NVAR")
- each part has its own header including size and checksum
- a fourth header is added with overall size and checksum
- the kernel starts at 0x38, gzip-format
- every other starting-point is relative to the end of the kernel
- trx adjusts offsets between kernel, cramfs and flash-boundaries automagically
so i went and created a modified cramfs-image from the 4.03.03 7230-firmware and dd'ed the kernel out then i copied the first 28 bytes from the original firmware created a new .trx file with trx ("trx -o new.trx vmlinuz new.cramfs"). i added those 28 bytes to the beginning of the new .trx, edited the nvars-section (dd'ed out at "NVAR"), modified its filesize and checksum (crc32.pl, look @ 7230, dont forget to exclude the first 12 bytes from checksum calculation) and cat'ed onto the end of the .trx. then i modified the main headers filesize and checksum (the first 28 bytes, starting with "LOAD"), which gave me a fully working firmware. best of it all: i didn't even need to use tftpd, the update-website flashed it flawlessly.
My version of this WAP uses the Broadcom BCM4306 chip, not the BCM4702 mentioned earlier. The label on mine indicates that it is version 1110, so this may be an earlier (or later) version than the above.
Also, under the factory-loaded firmware (don't remember the version) and under the latest version (4.03.03) the IP address of the WAP can easily be changed via the web-based setup utility. From the setup home, simply select "Specify IP Address" and edit to the desired IP.
As far as the difference between the 7130 and the 7230, I would agree with the comment above that the 7130 is likely just a 7230 without the router/switch hardware. The PCB inside mine is only partially populated with obvious locations for additional RJ connectors and support hardware. Also supporting this theory is the fact that the NVRAM variable hw_model is set to F5D7230, not F5D7130 as one would expect. To see this and some other interesting data, select "Save/Backup Settings", then click "Save". The result is a mostly-ASCII listing including some of the NVRAM variables used by the WAP for configuration. By the way, if you really want to save this configuration, you'll need to use your browser's "Save Page As..." capability.
Some of the more interesting variables found:
fw_src=http://networking.belkin.com/update/files/54g_ap.html (where the WAP checks for updated firmware)
- burnin=0 (Cool)
- boot_wait=on (Thank you, Belkin!)
- kernel_mods=et wl
- remote_config_ip= (Hints at some interesting capabilities)
- tftp_ipaddr=192.168.2.1
- dos_enable=1 (What could this be?)
- fw_magic=0x44414f4c
- boardflags=0x0008


