NEWER NOTE FROM CASEY:

Its worse than i thought, please read www.maokhian.com/wireless/wap11.html before
you preform this "dirty" hack.

NOTE FROM CASEY:  

WAP11 100mW output is pretty dirty under a spectrum
analyzer.  We are seeing the signal double in bandwidth (from about 22MHz
to 44MHz) and extra spurs/harmonics 80-100MHz off carrier with 1/2-1/4 the
power of the center carrier (more testing to be done on specifics)

Avoid dedicated operation, use of amplifiers, and high gain antennas when
testing.  This can anger our ham and MMDS friends to the left and right of
us.

-----------------

k, since this seems to be a new topic, I thought I'd start a new thread.

Step 1)
Download this:
http://www.gigafast.com/drivers/SNMPV1743.exe

(I also have it on my ftp at ftp://www.andrewhakman.dhs.org/wap11/, but the 
university's main router/firewall where my server is went down about 2 hours 
ago, and I'm not sure when it will be back up)

Step 2)
If you have ver 1.1 hardware, you can use 1.4h3, but if you only have ver 1 
hardware, you must have firmware 1.4gx to use that configuration utility 
mentioned above (the ver 1 hardware doesn't support SNMP in 1.4h3 for 
whatever reason). Make sure you use the linksys or SMC config util to setup 
SNMP (in the SMC util, there's even a program that can scan the network at 
layer 2 (MAC) to allow you to change the IP if it's on the wrong subnet 
without using the USB config util - more on the SMC util at the bottom)

Step 3)
Install above ap configurator. Once installed, go to c:\windows or c:\winnt 
(if you run nt4/2k) and find snmpmanager.ini. Edit so it looks like this:

[SNMPmanager]
AppMode=2
AppView=2

Step 4) Run the Atmel AP configurator, log into your AP using the password 
you previously set, and "Administrator" as the authority setting.

Step 5)
HAVE FUN - you have ALL the options, even the ones that the linksys software 
doesn't give you. This also gives any compatable AP (like the SMC MC2655W 
and the Netgear ME102) all the extra operating modes like briding and AP 
clinet and whatnot.

For the output power part, go to the Radio -> configuration option. All the 
textboxes that come up are the power output for each channel. The highest 
output power (100mw supposedly) is at hex value 80, and as you change the 
value (in either direction) from 80, the power output drops linearly (so 7A 
and 86 are the same power output). These settings might also explain why out 
of the box, performance isn't the same on all channels (with ver 1.1 
hardware, certain channels have lower output power by default, with ver 1 
hardware, they're all the same)!

Step 6)
Use File -> download changes to send your new settings to the AP

Step 7) (optional, but FUN FUN FUN!)
Using your Orinoco signal meter, actually see an increase in power output 
from the WAP-11 (if you have an Orinoco card that is) - you should be able 
to see signal of -30dB easily if you are close to the WAP-11, instead of the 
-50 you normally see from 30mW devices.


Other interesting things

1) There must be something else that can be changed in the .ini file to 
allow you to actually change, _and make stick_, the operational region 
setting, thus you can put it in japan region, and get all 14 channels (and 
pump them all up to 100mw) which could allow you to run bridges in channels 
that don't interfer with regular access points in a really dense network, 
etc. With this current hack, you can change the setting, but it never sticks 
in the AP - once you disconnect and reconnect to it, it's back to it's usual 
FCC domain.

After exams, and when I'm not doing the 10 million other things I want to do 
_after exams_, I'm going to see if I can reverse engineer this software and 
see if there is some other mode or line it's looking for in the .ini file. I 
also think that there may be another option besides administrator and user 
when you initally log in like OEM or something like that, and that that 
option is just hidden until you feed it the right value in the .ini file. I 
have used eXescope to take an inital look, but couldn't see the options of 
the dropdown.

2) Using the SMC config program for their MC2655W (which hardware wise is 
identical), you can (as I mentioned before) change the IP even if it's not 
on the same subnet, and do everything (including FIRMWARE UPDATES) ACROSS 
THE NETWORK via SNMP. This means that you don't need to think about USB over 
Ethernet (I've tried it by the way - works to ~60 feet - you must use all 4 
pins in USB - even though the WAP-11 is externally powered, USB uses it's 
power pins to decide if a device is connected or not) or having physical 
access to the unit's USB port to do firmware updates (like if you mount it 
in a weather proof box on your roof!).

I also have the SMC config util on my ftp, when they fix the router and it 
comes back up - ftp://www.andrewhakman.dhs.org/wap11

Have fun playing with your WAP11/SMC MC2655W/or Netgear ME102 (and others 
too) in all operating modes at 100mw on all channels now!

Andrew Hakman

_________________________________________________________________
SNMP/Version Issue Solution
-----------------------------------------------------------------

>So, I applied the latest firmware (1.4h.3) to my WAP11 to fix the lockup
>problem.  This is bad.  Now I cannot connect via SNMP which means I cannot
>do the 100mW power hack.  Ack!  I tried downgrading to the 1.4g.5 firmware
>but the firmware utility won't do it.  Have any of you dealt with this yet?
>I'd really like to try out the 100mW hack!

Yes, I did deal with that problem before. Here's how to fix it:

1)
Download these files from my ftp, or directly from SMC / the other address 
given in the wiki 
(ftp://www.andrewhakman.dhs.org/wap11/smc_config/2655W_FW.zip)
(ftp://www.andrewhakman.dhs.org/wap11/smc_config/APMG_V1.7_SMC2655W.zip)
(ftp://www.andrewhakman.dhs.org/wap11/atmel_config/SNMPV1743.exe)

you probably aready have the last one, but just make sure you know where you 
extracted it to because we need one of those files later, and it doesn't get 
moved to the directory where you installed it to...

2) extract the ROM to C:\Program Files\Linksys\Linksys WAP11 Firmware 
Upgrade. extract the SMC configurator to wherever and install it, and same 
for the atmel configurator.

3) rename bridge14h3.rom to .bak, then rename ap14g7.rom (the one you jsut 
downloaded and extracted) to bridge14h3.rom

4) run the linksys USB firmware update

5) it will quit with a horible error, and the configurator won't be able to 
see your device plugged into USB anymore - I was initally worried when this 
happend as well, but IT'S OK, we'll fix that...

6) (if necessary) run the IPConfig.exe file where you EXTRACTED the ATMEL 
CONFIG tool. Type in your mac, and set the IP.

7) Now using the SMC tool, connect to your AP, and upgrade the firmware.

You now have gone back to firmware 1.4g7, and are ready to do the 100mw 
hack.

Have fun.
Andrew