Netgear GS108Tv3/GS110TPv3/GS110TPP switch support

This looks like a very exciting project!
I have a GS108Tv2 that uses Broadcom BCM53312. Interesting they moved to Realtek for v3, I suppose all these "web managed" switches use pretty much the same platform.

D-Link's DGS-1210 series has also used three different platforms. I don't know why they do this. Maybe availability of certain parts?

I've purchased three other switches based on the Realtek chips in the mean time, so this little switch hasn't been getting so much attention lately :grimacing:

Any favorites so far or any models that work with OpenWRT already? I have a Cisco SG250-08 but it takes forever to boot with the stock firmware, the UI and even ssh are very slow and there are so many features that I don't really use it, it sits in its box. All I want is VLANs and some decent security (https, ssh).

Since the GS108Tv3 only has 8 ports, it might be pretty straightforward to add support. For the GS110TPPv1, the missing parts are currently the PoE management and support for ports 9 and 10.

Edit the GS308T (a.k.a. S350 8P) also appears to be Realtek based. It is not PoE powered, so a bit cheaper than the GS108Tv3.

Great to have support for these too. Just a word of caution to those that might be tempted by it, it does NOT have wall mounting holes on the back if that's how you plan to install it. And I believe it has some limited/short warranty that's why it's cheaper than the GS108T otherwise the hardware should be the same.

The GS108T is also built with an RTL8380, while the GS308T appears to be built with something from the RTL93xx-series. I don't think this is quite as well supported currently as the RTL83xx SoCs.

1 Like

Ah OK. I was going to ask about the cheaper GS108E and similar ones TP-Link TL-SG108 or Zyxel GS1200-8. But these are very likely different boards. These would be attractive for home use due to price, but the software needs a bit of help, e.g. move the management VLAN, have secure https access and disallow crazy configs that make no sense.

U-Boot identifies the GS380T as a RTL838x CPU:500MHz LXB:200MHz MEM:300MHz. What is confusing is the boardmodel is RTL8393M_DEMO. But it appears that is very similar to the situation with the GS108Tv3 as well.

1 Like

You can read the SoC model (in the u-boot shell) from address the register at 0xBB0000D4. You may have to set the INT_READ_EN bit at 0xBB000058 first to get a useful value from the first register.

Result is 83806800. So this should be an RTL3830M just like the GS108Tv3.

1 Like

Can any one out there share a close up shot of the electrolytic capacitors on GS110TPP? I need to get new caps.

--- Many thanks. --

Does this picture help? https://biot.com/switches/_detail/wiki/gs110tpp-top.jpg?id=gs110tpp

I could get you the values for C320 and C335 later, if you can't recover them from you device.

That helped. Thank you.

Would anyone happen to have a dump of the "SYSINFO" mtd partition from a GS108Tv3/GS110TPv3/GS110TPP that they could upload? There's something I'm interested in looking at in there.

This is from my GS108Tv3. Hoping a hexdump -C is OK since there isn't much here:

00000000  90 ff f5 9e 62 6f 6f 74  70 61 72 74 69 74 69 6f  |....bootpartitio|
00000010  6e 3d 30 00 73 73 6f 3d  31 00 00 00 00 00 00 00  |n=0.sso=1.......|
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00001000  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00010000

I'm not 100% sure, but this might have been captured after registering the switch with Netgear. I wonder if that sso=1 variable is related to the registration, and is what opens up the full OEM web GUI?

Interesting, I expected the partition to be larger. Here's the layout shown by show tech-support on my GS110TPv3:

mtd0: 0xbd000000-0xbd0dffff "LOADER"
mtd1: 0xbd0e0000-0xbd0effff "BDINFO"
mtd2: 0xbd0f0000-0xbd0fffff "SYSINFO"
mtd3: 0xbd100000-0xbd1fffff "JFFS2
mtd4: 0xbd200000-0xbd2fffff "JFFS2
mtd5: 0xbd300000-0xbe17ffff "RUNTIME"
mtd6: 0xbe180000-0xbeffffff "RUNTIME2"

But, that is actually what I am working on: I'm still using the Netgear firmware on my switch, and while online registration of the switch is no longer required to access the full management UI, I'm working on figuring out how the registration keys are generated.

So far, it looks like the registration key is the last five characters of the MD5 hash of what I think is most likely to be the serial number (read from the SYSINFO partition, it seems) combined with a string that is hardcoded in one of the libraries in the Netgear firmware.

This is really just for fun, but I'm hoping it'll get rid of the nag screen that asks you to enter the registration key.

And I think you're right, sso=1 is probably related to the switch's registration status since the names of the functions related to this are all prefixed with "sso" in the Netgear binaries.

I can't edit my previous post anymore, but I'll leave this here in case anyone still using the original Netgear firmware is interested. I've figured out how the registration keys are generated, so you can get rid of the nag screen without having to create a Netgear account and add the switch to it: https://github.com/zsrv/netgear-registration-key

6 Likes

After finding a post from someone who successfully installed the OpenWrt GS108Tv3 image onto their GS110TPv3, I decided to try it out myself. I installed the OpenWrt 22.03.0-rc6 GS108Tv3 image onto my GS110TPv3 using the OEM easy installation steps here with no problems encountered! I can't test the SFP ports but everything else seems to be working fine (including PoE to my access points)!

1 Like

Nice! I can confirm that this tool calculates the same key I got from Netgear for my GS108Tv3

1 Like

According to this, they both share the same I2C clock line:

Don't know if anyone came up with a proper solution for that?