Silver Spring Networks Access Point: Difference between revisions

From RECESSIM, A Reverse Engineering Community
Jump to navigation Jump to search
No edit summary
Add on-air identification — EUI-64 addressing, mesh-root role, backhaul
 
Line 8: Line 8:
File:SilverSpringRouter8.JPG| Power connector  
File:SilverSpringRouter8.JPG| Power connector  
</gallery>
</gallery>
== On-air identification and role ==
(From passive capture of a fixed-AMI NIC 511 network — see
[[Silver Spring Networks Protocol]] for the frame format.)
Access points are the root of a local mesh cell: endpoints and relays route
toward them, and they backhaul to the utility head-end over cellular (the modem
in the teardown photos above) or fibre.
They are addressed by '''EUI-64''', distinct from endpoint meters:
* Access point / infrastructure: <code>00:13:50:FF:FE:60:xx:xx:xx</code> — the
  Silver Spring OUI <code>00:13:50</code> with the standard MAC-48 → EUI-64
  <code>FF:FE</code> expansion. The Itron OUI <code>00:07:81</code> is also seen
  post-acquisition.
* Endpoint meters: serial form <code>00:13:50:05:00:xx:xx:xx</code>.
An access point is '''not heard directly''' from an endpoint's vantage — it sits
on the far side of the tree on channels a fixed receiver near one meter does not
follow. It is identified instead by reference: a [[Silver Spring Networks Relay|relay]]
lists its uplink access point(s) in its beacon's neighbour records, each with a
link-quality metric. In one capture a relay was dual-homed to two access points
(a stable primary and a volatile secondary) for the whole observation window.

Latest revision as of 20:56, 31 August 2026

On-air identification and role

(From passive capture of a fixed-AMI NIC 511 network — see Silver Spring Networks Protocol for the frame format.)

Access points are the root of a local mesh cell: endpoints and relays route toward them, and they backhaul to the utility head-end over cellular (the modem in the teardown photos above) or fibre.

They are addressed by EUI-64, distinct from endpoint meters:

  • Access point / infrastructure: 00:13:50:FF:FE:60:xx:xx:xx — the
 Silver Spring OUI 00:13:50 with the standard MAC-48 → EUI-64
 FF:FE expansion. The Itron OUI 00:07:81 is also seen
 post-acquisition.
  • Endpoint meters: serial form 00:13:50:05:00:xx:xx:xx.

An access point is not heard directly from an endpoint's vantage — it sits on the far side of the tree on channels a fixed receiver near one meter does not follow. It is identified instead by reference: a relay lists its uplink access point(s) in its beacon's neighbour records, each with a link-quality metric. In one capture a relay was dual-homed to two access points (a stable primary and a volatile secondary) for the whole observation window.