// HP BladeSystem - Onboard supervisor chip reverse engineering

In a previous post I presented way to power up blade switch module, without having a chassis. It was a pure hardware approach, by enforcing logic states on particular IC's pins. Now, I'll present internal onboard protocol eavesdroping which lead to preparing custom firmware.

 Eavesdropped I²C communication during boot

// Hardware Hacking of Cisco Catalyst for HP Blade System

CBS-3020 Gigabit Ethernet switch offers stunning performance and many enterprise features for relatively cheap price, comparable with SOHO devices. As it was designed for HP's proprietary c-class Blade System, bringing it to operation at home requires some tinkering, but not much.

It has 8x (or 24x) ports, including 4 slots for SFP modules for optical transceivers. It is fully managed, has full support for L2 switching, and limited L3 routing at wire-speed. In addition, it weights less than 2kg, and the size is 200x270x30mm – less then most of rack devices (19” or even 10”).