Repair log

Thirty-six access points, still running vendor firmware

A lot of enterprise WiFi access points arrived locked to vendor firmware. One is proven converted. The other thirty-five are still ahead of us.

Thirty-six enterprise WiFi access points came in on one lot, and every one of them arrived running the original vendor’s proprietary firmware, locked to that vendor’s own management ecosystem. That is close to worthless for resale as-is. Without a license to the vendor’s cloud controller, a buyer gets a brick with an antenna on it.

What vendor-locked actually means for a buyer

These are 802.11ac PoE access points built to be managed through a vendor cloud platform. Out of the box, a locked access point either needs an active subscription to that platform to do anything useful, or it sits there broadcasting nothing while waiting for a controller it will never talk to. A buyer who does not already have that vendor’s ecosystem cannot use the hardware at all, no matter how good the radio inside it is.

That is exactly why a lot like this is cheap. The landed cost across all 36 units, purchase price plus buyer premium plus tax, came to $214.65 total, $5.96 a unit. Nobody wanted 36 units of hardware they could not manage.

The fix, and what is actually proven

The plan was to flash every unit to OpenWrt, open-source router firmware that does not care what vendor’s cloud it was born under, then verify each one before it shipped: boots into OpenWrt cleanly, broadcasts on both 2.4GHz and 5GHz, a client associates and passes traffic, and the radio stays stable running on PoE power alone rather than a bench supply.

The flash procedure itself is proven, not just on paper. One unit went all the way through: converted, listed as OpenWrt flashed and ready, and sold for $24.99, a closed sale. That is the real result so far, and it is real: the recipe works on this hardware.

Where the rest of the lot actually stands

Here is the honest part. Thirty-five of the thirty-six units are still sitting exactly where they landed: untested, unflashed, at intake. Only about an hour of bench time has gone into this ticket so far against an estimate of eighteen hours for the full lot, which matches what the inventory shows. This is not a lot of tested, working access points sitting around waiting for buyers to find them. It is mostly a lot of locked access points still waiting for the work.

Why this is still a thesis worth stating

The one converted unit tells us the thesis is sound: vendor-locked hardware nobody else wants becomes genuinely sellable once it is flashed to something open, and it found a buyer. What is still open is whether that holds at scale, once the other 35 actually get the same treatment. That is real work still ahead of us, not a rounding error.

We will come back to this lot once more of it has actually been converted and sold, and report the real numbers, good or not.