Transceiver notes: I2C addresses, password unlock bytes and known default passwords for SFP EEPROM
A notes repository on hacking SFP/QSFP EEPROM: SFPs present EEPROM at I2C 0x50 and DOM plus vendor/password features at 0x51; locked moddules need a 4-byte password written to 0x51 bytes 0x7b-0x7e. It lists several known unlock passwords and evaluates write methods (off-the-shelf coder limited to certain hardware and unable to reach 0x51, Linux i2c on OpenWRT devices with SFP ports, and MCU breaout boards).
- Hardware: Brocade ICX6610, OpenWRT devices with SFP ports
- Transceivers: locked SFP
- Form factor: SFP, QSFP
Symptoms / messages:
reference: unlock addresses and passwords
Also available in: English
العربية
Deutsch
Español
Français
हिन्दी
Bahasa Indonesia
Italiano
日本語
한국어
Nederlands
Polski
Português
Русский
Türkçe
Tiếng Việt
简体中文
Comments 1
Write the 4-byte password to I2C 0x51 bytes 0x7b-0x7e; documented attempts include 0,0,0,0; 255,255,255,255; 0x00 0x00 0x10 0x11; 0x4F 0x43 0x50 0x00 and others. Off-the-shelf coders often cannot reach 0x51, so use a Linux i2c host or an MCU breakout to unlock.