Time to crack her open and get inside the network for AP2

[demundus]

Cabled ordered, appears there wont be any meaningful updates until:
"Estimated delivery: Oct 31 – Nov 21"

Compared the maxwell cable that arrived in about two days....

Ahh, the joys of shipping electronics from China....

My cable came in about a week and a half... hopefully yours does too

 

[bmah]

Subbed!

PSA: You don't have to post to a thread to "subscribe" to it. Just click/touch/tap/whatever "Watch thread" over on the right side of the window (above the first message on the page).

Bruce.

 

[Bladerskb]

Subbed!


Lol

 

[lunitiks]

Someone FedEX @BigD0g the cabling he needs NOW before tesla shuts this off through an OTA

Anyway finally another super exiting thread. Huge thanks d0g

 

[appleguru]

Yes, the benefit of key-less Z connector is you can plug it anywhere in the car, otherwise IC and diag ethernet and such have different keys.

Do you happen to know the key-ing of the other connectors? I was under the impression that all of the Ethernet in the car was keyed as B, but I also haven't had my car apart yet to verify. In any case, the Z series is definitely more flexible; I don't really see the downside to Z for these applications (just don't accidentally plug your Ethernet cable into your backup camera ;-)).

 

[appleguru]

The diagnostic cable on my AP2 (February build) is directly under the CID. You press down on the little cubby hole and it pops off to reveal it, but it's completely locked down, you can't get in. There's all sorts of security guarding the "easy" port, I won't get into it here, but look @green1 thread I reference above and they talk all about the security and that port. Regardless your not getting into that port without a ranger / service center laptop.

Correct, the diagnostic port for Toolbox on AP2 cars is under the CID, and yes, is locked down.

What I was saying is that the other end of that cable goes to, I think, the APE. I believe that module has two ports, one connected to the diagnostic cable, and the other connected to, I believe, the CID. So, if you plug in there, you should also be able to get onto the internal network.

 

[BigD0g]

Correct, the diagnostic port for Toolbox on AP2 cars is under the CID, and yes, is locked down.

What I was saying is that the other end of that cable goes to, I think, the APE. I believe that module has two ports, one connected to the diagnostic cable, and the other connected to, I believe, the CID. So, if you plug in there, you should also be able to get onto the internal network.

Oh interesting, but I'll need to google around a bit, but don't you have to remove the entire right dash to get access to the APE? I'll definitely look into this avenue as I wait on my new cable!

Besides, who doesn't want more pics of the APE sitting naked on a bench....

 

[lunitiks]

What I was saying is that the other end of that cable goes to, I think, the APE. I believe that module has two ports, one connected to the diagnostic cable, and the other connected to, I believe, the CID. So, if you plug in there, you should also be able to get onto the internal network.

FWIW, here's an overview of the APE connector types.
AP2.0 Cameras: Capabilities and Limitations?

 

[lunitiks]

Yes @kdday already showed us how to gain physical access to APE
Inside the NVIDIA PX2 board on my HW2 AP2.0 Model S (with Pics!)

 

[BigD0g]

Yah, also the pic here:
Inside the NVIDIA PX2 board on my HW2 AP2.0 Model S (with Pics!)

Shows the connectors and there is two low and behond! One purple, One white... so the question is which one is from the under the CID and which goes to the CID =).

I'll start traveling down this road while I wait for my cable.

 

[verygreen]

Do you happen to know the key-ing of the other connectors? I was under the impression that all of the Ethernet in the car was keyed as B, but I also haven't had my car apart yet to verify. In any case, the Z series is definitely more flexible; I don't really see the downside to Z for these applications (just don't accidentally plug your Ethernet cable into your backup camera ;-)).

The diagnotic port is white and CID->IC is black, whatever that means in those keying things.

 

[lunitiks]

One purple, One white... so the question is which one is from the under the CID and which goes to the CID =).

The wiring schematics tell me that Purple is "diagnostics", while white is "ethernet gateway". The latter is connected directly to CID/gateway.
The purple however, should be dangling behind the cubby

 

[lunitiks]

Oh wait, @verygreen are u sure of this?

 

[verygreen]

Oh wait, @verygreen are u sure of this?

absolutely: Successful connection on the Model S internal Ethernet network

I know it's a picture of old style ap1 car. I don't remember what color is the diag port under the cid, but I think I remember t was white. Keep in mid they could be different keys on different sides of the cable.

 

[lunitiks]

We must be talking about different things. That old post from 2014 you linked to, refers to the color of the connector on the IC side (that's no longer there). I'm talking about those two ethernet connectors on the AP2 ECU.

I triple checked now, and according to Tesla's diagrams, White is CID/GW and Bordeaux (Purple) is DIAG, like I said.

 

[verygreen]

We must be talking about different things. That old post from 2014 you linked to, refers to the color of the connector on the IC side (that's no longer there). I'm talking about those two ethernet connectors on the AP2 ECU.

I triple checked now, and according to Tesla's diagrams, White is CID/GW and Bordeaux (Purple) is DIAG, like I said.

That's what I am saying too.
The diag port was moved to under cid, but it' still white I believe, this is not to say that the other end could not havea different color-key.
I totally don't see why would they want to move diag connector from CID to AP too, since I believe CID still has that diag port on it and it is still controlled by gateway that is on cid board.

 

[appleguru]

I think both evergreen and lumitiks are correct... I have a feeling that Tesla is playing some games with connector colors (maybe to throw us off?? ).

You can find the keys here: https://www.rosenberger.com/0_documents/de/codes/codes_coding_auto_hsd.pdf

A is black, B is white, C is blue, D is purple, E is green, F is brown, and Z is teal (Z fits all).

Piecing a few things together, I think the Ethernet network on an AP2 car goes something like this (starting with the unconnected diagnostic cable under the CID):

White (B) --> Purple (D) --> APE --> White (B) --> White (B) --> CID --> Black (A) --> Black (A) --> IC

 

[appleguru]

That's what I am saying too.
The diag port was moved to under cid, but it' still white I believe, this is not to say that the other end could not havea different color-key.
I totally don't see why would they want to move diag connector from CID to AP too, since I believe CID still has that diag port on it and it is still controlled by gateway that is on cid board.

I think instead of adding another port onto the CID or adding a separate ethernet switch for AP2 cars, Tesla decided to use the port labelled "diag" on the CID to now go to the new AP ECU, which needed an Ethernet connection. So, appears to likely have been a practical decision.

 

[lunitiks]

I was just about to suggest that. They've prob switched the loose cubby connector from direct CID access to APECU access and from there CID access. Kind of what they did with rv-cam (no longer hooked up to CID directly but to APECU)

 

[verygreen]

I was just about to suggest that. They've prob switched the loose cubby connector from direct CID access to APECU access and from there CID access. Kind of what they did with rv-cam (no longer hooked up to CID directly but to APECU)

While this is possible, it is somewhat cumbersome.
The locked port is done by ethernet switch with basic vlan-capable ports on the cid board (I only looked in great details on my ap1 bench setup). So the switch is connected to gateway on the master port and diag is connected to a restricted port, all traffic from restricted port flows to the master port and master decides which packets to let through or not (only lets in the magic unlock packet in locked state).
cid node is connected to fully unrestricted port and ic is connected to partially restricted port (the only restriction I saw so far is no ic<->gtw communications are allowed)

Now if you reuse the diag port as the link to ape, how are you going to do the locking? you cannot tell if the incoming datagram came from ape/lb/ap2b or the diag port... You need to somehow propagate the locking/unlocking logic to ape/lb but I am not quite sure I see this logic anywhere, though I guess if it's hidden withing gateway and it just commands lb to do more things, that's possible, just a lot more cumbersome. Somebody needs to take a look at the harness, I guess.