~/aredn $ scp -O -oHostKeyAlgorithms=+ssh-rsa -oPubkeyAcceptedAlgorithms=+ssh-rsa -oUserKnownHostsFile=/dev/null -oStrictHostKeyChecking=no lb5ac.bin   admin@192.168.1.20:/tmp/factory.bin
Warning: Permanently added '192.168.1.20' (RSA) to the list of known hosts.
admin@192.168.1.20's password: 
lb5ac.bin                                     100% 6081KB   2.2MB/s   00:02    
~/aredn $ ssh -oHostKeyAlgorithms=+ssh-rsa -oPubkeyAcceptedAlgorithms=+ssh-rsa -oUserKnownHostsFile=/dev/null -oStrictHostKeyChecking=no admin@192.168.1.20
Warning: Permanently added '192.168.1.20' (RSA) to the list of known hosts.
admin@192.168.1.20's password: 
 ___  ___
|\  \|\  \      Welcome to airOS
\ \  \\\  \
 \ \  \\\  \    PRODUCT: LiteBeam 5AC
  \ \  \\\  \	MAC: F4E2C6320F74
   \ \_______\
    \|_______|  VERSION: WA.v8.7.4

WA# hexdump -Cv /bin/ubntbox | sed 's/14 40 fe 27/00 00 00 00/g' | hexdump -R > 
/tmp/fwupdate.real
WA# 
WA# chmod +x /tmp/fwupdate.real
WA# /tmp/fwupdate.real -m /tmp/factory.bin
Writing 'kernel         ' to /dev/mtd2(kernel         ) ...  [%100]
Writing 'rootfs         ' to /dev/mtd3(rootfs         ) ...  [%100]
Done

#waited 5 minues, no response, power cycle, still no response

~/aredn $ ip a show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether dc:a6:32:ea:68:07 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.10/24 scope global eth0
       valid_lft forever preferred_lft forever
~/aredn $ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
From 192.168.1.10 icmp_seq=1 Destination Host Unreachable
From 192.168.1.10 icmp_seq=5 Destination Host Unreachable
From 192.168.1.10 icmp_seq=6 Destination Host Unreachable
^C