User Tools

Site Tools


inbox:engenius:engenius_ecb9500

EnGenius ECB9500

Under Construction!
This page is currently under construction. You can edit the article to help completing it.

Seems that the same (or very similar) device has also been sold as ECB9750

Generic Router

OpenWrt support

WIP

The hardware seems to be supportable; the Belkin F5D8235-4 V1 seems to be similar in terms of specs, and supports OpenWRT.

See https://forum.lede-project.org/t/engenius-ecb9500/1233.

Hardware highlights

1)

CPU Ram Flash Network WLAN USB Serial JTag
Ralink RT2880 @ 266 MHz 32 MiB 8 MiB 1x 10/100/1000 bgn no Yes ?

Hardware

Info

Architecture: MIPS
Vendor: Ralink
Bootloader: U-Boot
System-On-Chip: Ralink RT2880 - MIPS 4KEc
CPU/Speed 266 MHz
Flash-Chip: ST M29W640GT
Flash size: 8 MiB
RAM: 32 MiB
Wireless: RT2820 2.4GHz 802.11bgn
Ethernet: 10/100/1000 Mbit/s (w/ vlan support?)
USB: no
Serial: yes
JTAG: unknown

Photos

Insert photo of front of the casing

Insert photo of back of the casing

Insert photo of backside label

Insert photo of PCB

Opening the case

FIXME Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, …

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the serial port of this specific device: 2)pinout is silkscreened about .75 cm next to 6 pin serial header. From left to right (front to back of device): 1. P3V3 (power) 2. GND (ground) 3. TXD (from device) 4. RXD (to device) 5. CTS 6. RTS.

See here on dd-wrt wiki for an image of the pins.

t the `console` prompt which appears when the router finishes booting, type `sn2450` to get shell access.3)

Serial connection parameters
for EnGenius ECB95004)
57600, 8N1

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

Bootlogs

OEM bootlog

U-Boot 1.1.3 (Nov 20 2008 - 18:00:37) Board: RT2880 DRAM: 32 MB relocate_code Pointer at: 8bfa8000 twe0 set to <NULL> toe0 set to <NULL> Default FLASH_CS1_CFG = 0511FFA1 Ready Set Value = 0x0511FFA1 Setup FLASH_CS1_CFG = 0511FFA1 CAS 3 (D1835272) EN_ID_29LV640H, Size = 00800000 bytes Set info->start[0]=BC000000 AMD Read Mode, flash reset,triger at BC000000 flash_protect ON: from 0xBC400000 to 0xBC42522F protect on 64 protect on 65 protect on 66 monitor protection ON by default,monitor_flash_len = 152112 ENV protection ON by default !! flash_protect ON: from 0xBC430000 to 0xBC43FFFF protect on 67 D-CACHE set to 4 way I-CACHE set to 4 way ##### The CPU freq = 266 MHZ #### SDRAM bus set to 32 bit SDRAM size =32 Mbytes Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 5: Load ucos code to SDRAM via TFTP. 2 1 0 3: System Boot system code via Flash. ## Booting image at bc450000 ... Image Name: Linux Kernel Image Created: 2012-03-13 9:12:20 UTC System Control Status = 0x02910084 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1030357 Bytes = 1006.2 kB Load Address: 8a000000 Entry Point: 8a196040 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8a196040) ... ## Giving linux memsize in MB, 32 Starting kernel ... THIS IS ASIC - VERSION B ramsize = 32 MBytes rambase not set, set to default (0x08000000) MEMORY DESCRIPTOR dump: [0,8a275cc0]: base<0a000000> size<02000000> type<Free RAM memory> PROC INIT OK! init started: BusyBox v1.7.5 (2012-03-13 17:11:12 CST) starting pid 10, tty '/dev/console': '/sbin/config_init' Config Init version: 2.3.3.471 date: 2012/03/13 starting pid 55, tty '/dev/ttyS1': '/sbin/config_term' ************************************************************************ * ECB9500 * ************************************************************************ KernelApp/Ramdisk Ver:2.3.3.471 Date:2012/03/13 console>


OpenWrt bootlog

U-Boot 1.1.3 (Nov 20 2008 - 18:00:37) Board: RT2880 DRAM: 32 MB relocate_code Pointer at: 8bfa8000 twe0 set to <NULL> toe0 set to <NULL> Default FLASH_CS1_CFG = 0511FFA1 Ready Set Value = 0x0511FFA1 Setup FLASH_CS1_CFG = 0511FFA1 CAS 3 (D1835272) EN_ID_29LV640H, Size = 00800000 bytes Set info->start[0]=BC000000 AMD Read Mode, flash reset,triger at BC000000 flash_protect ON: from 0xBC400000 to 0xBC42522F protect on 64 protect on 65 protect on 66 monitor protection ON by default,monitor_flash_len = 152112 ENV protection ON by default !! flash_protect ON: from 0xBC430000 to 0xBC43FFFF protect on 67 D-CACHE set to 4 way I-CACHE set to 4 way ##### The CPU freq = 266 MHZ #### SDRAM bus set to 32 bit SDRAM size =32 Mbytes Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 5: Load ucos code to SDRAM via TFTP.  2  1  0 3: System Boot system code via Flash. ## Booting image at bc450000 ... Image Name: MIPS LEDE Linux-4.4.45 Created: 2017-02-01 20:16:44 UTC System Control Status = 0x02910084 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1297708 Bytes = 1.2 MB Load Address: 88000000 Entry Point: 88000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 88000000) ... ## Giving linux memsize in MB, 32 Starting kernel ... [ 0.000000] Linux version 4.4.45 (buildbot@buildslave) (gcc version 5.4.0 (LEDE GCC 5.4.0 r3176-82d580e) ) #0 Wed Feb 1 20:16:44 2017 [ 0.000000] SoC Type: Ralink RT2880 id:2 rev:0 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001906c (MIPS 4KEc) [ 0.000000] MIPS: machine is Belkin F5D8235 v1 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 08000000 (usable) [ 0.000000] Wasting 1048576 bytes for tracking 32768 unused pages [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000008000000-0x0000000009ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000008000000-0x0000000009ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000008000000-0x0000000009ffffff] [ 0.000000] Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 16 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Memory: 28180K/32768K available (2997K kernel code, 135K rwdata, 712K rodata, 180K init, 200K bss, 4588K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:256 [ 0.000000] CPU Clock: 266MHz [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 14334453388 ns [ 0.000021] sched_clock: 32 bits at 133MHz, resolution 7ns, wraps every 16106127356ns [ 0.015745] Calibrating delay loop... 265.42 BogoMIPS (lpj=1327104) [ 0.101083] pid_max: default: 32768 minimum: 301 [ 0.110656] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.123838] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.149557] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.169509] pinctrl core: initialized pinctrl subsystem [ 0.183111] NET: Registered protocol family 16 [ 0.235938] rt2880_gpio 300600.gpio: registering 24 gpios [ 0.248982] PCI host bridge to bus 0000:00 [ 0.257170] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff] [ 0.270863] pci_bus 0000:00: root bus resource [io 0x460000-0x46ffff] [ 0.283903] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.297460] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.314255] pci 0000:00:00.0: BAR 0: assigned [mem 0x20000000-0x27ffffff pref] [ 0.330900] clocksource: Switched to clocksource MIPS [ 0.344521] NET: Registered protocol family 2 [ 0.355550] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.369555] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.382270] TCP: Hash tables configured (established 1024 bind 1024) [ 0.395403] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.407145] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.420290] NET: Registered protocol family 1 [ 0.453329] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.465753] No memory allocated for crashlog [ 0.522097] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.533776] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.560562] io scheduler noop registered [ 0.568404] io scheduler deadline registered (default) [ 0.579707] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.600651] console [ttyS0] disabled [ 0.607860] 300c00.uartlite: ttyS0 at MMIO 0x300c00 (irq = 16, base_baud = 8333333) is a Palmchip BK-3103 [ 0.626997] console [ttyS0] enabled [ 0.626997] console [ttyS0] enabled [ 0.640964] bootconsole [early0] disabled [ 0.640964] bootconsole [early0] disabled [ 0.660107] bc400000.cfi: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000020 Chip ID 0x00227e [ 0.680450] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.690940] Amd/Fujitsu Extended Query version 1.3. [ 0.701221] bc400000.cfi: Swapping erase regions for top-boot CFI table. [ 0.714824] number of CFI chips: 1 [ 0.736184] 4 ofpart partitions found on MTD device bc400000.cfi [ 0.748437] Creating 4 MTD partitions on "bc400000.cfi": [ 0.759260] 0x000000000000-0x000000030000 : "uboot" [ 0.773276] 0x000000030000-0x000000040000 : "uboot-env" [ 0.788537] 0x000000040000-0x000000050000 : "factory" [ 0.803593] 0x000000050000-0x000000800000 : "firmware" [ 0.821764] 2 uimage-fw partitions found on MTD device firmware [ 0.833853] 0x000000050000-0x00000018cd6c : "kernel" [ 0.848393] 0x00000018cd6c-0x000000800000 : "rootfs" [ 0.863277] mtd: device 5 (rootfs) set to be root filesystem [ 0.874879] 1 squashfs-split partitions found on MTD device rootfs [ 0.887466] 0x0000003f0000-0x000000800000 : "rootfs_data" [ 0.906828] mtk_soc_eth 400000.ethernet: using fixed link parameters [ 0.919810] mtk_soc_eth 400000.ethernet eth0 (uninitialized): link up (1000Mbps/Full duplex) [ 0.938507] mtk_soc_eth 400000.ethernet eth0: mediatek frame engine at 0xa0400000, irq 5 [ 0.956145] rt2880_wdt 300120.watchdog: Initialized [ 0.969369] NET: Registered protocol family 10 [ 0.990346] NET: Registered protocol family 17 [ 0.999695] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 1.025291] 8021q: 802.1Q VLAN Support v1.8 [ 1.047344] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 1.064032] Freeing unused kernel memory: 180K (883c3000 - 883f0000) [ 2.478876] init: Console is alive [ 2.486435] init: - watchdog - [ 3.515830] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.675996] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.701576] init: - preinit - [ 4.580672] mtk_soc_eth 400000.ethernet eth0: link up (1000Mbps/Full duplex) [ 4.597014] 8021q: adding VLAN 0 to HW filter on device eth0 Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 6.914191] jffs2: notice: (304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 6.948083] mount_root: switching to jffs2 overlay [ 7.004313] urandom-seed: Seeding with /etc/urandom.seed [ 7.386483] mtk_soc_eth 400000.ethernet eth0: link down [ 7.418233] procd: - early - [ 7.424451] procd: - watchdog - [ 8.102638] procd: - ubus - [ 8.173736] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.337578] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.356844] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.375227] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.394768] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.413132] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.432008] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.451461] random: ubusd: uninitialized urandom read (4 bytes read, 13 bits of entropy available) [ 8.470828] procd: - init - Please press Enter to activate this console. [ 9.160076] kmodloader: loading kernel modules from /etc/modules.d/* [ 9.186979] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 9.231028] Loading modules backported from Linux version wt-2016-10-03-1-g6fcb1a6 [ 9.246400] Backport generated by backports.git backports-20160324-9-g0e38f5c [ 9.270086] ip_tables: (C) 2000-2006 Netfilter Core Team [ 9.299861] nf_conntrack version 0.5.0 (443 buckets, 1772 max) [ 9.395089] sky2: driver version 1.30 [ 9.444395] xt_time: kernel timezone is -0000 [ 9.584089] PPP generic driver version 2.4.2 [ 9.598733] NET: Registered protocol family 24 [ 9.667798] rt2800_wmac 480000.wmac: loaded eeprom from mtd device "factory" [ 9.682197] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 2872, rev 0200 detected [ 9.697950] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 0001 detected [ 9.941872] kmodloader: done loading kernel modules from /etc/modules.d/* [ 11.846380] random: jshn: uninitialized urandom read (4 bytes read, 18 bits of entropy available) [ 12.031110] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available) [ 24.240222] mtk_soc_eth 400000.ethernet eth0: link up (1000Mbps/Full duplex) [ 24.255143] 8021q: adding VLAN 0 to HW filter on device eth0 [ 24.319347] device eth0.1 entered promiscuous mode [ 24.329166] device eth0 entered promiscuous mode [ 24.411441] br-lan: port 1(eth0.1) entered forwarding state [ 24.422898] br-lan: port 1(eth0.1) entered forwarding state [ 26.421003] br-lan: port 1(eth0.1) entered forwarding state [ 30.648140] ieee80211 phy0: rt2800_is_305x_soc: Warning - Unknown RF chipset on rt305x [ 30.700973] ieee80211 phy0: rt2800_is_305x_soc: Warning - Unknown RF chipset on rt305x [ 30.717087] ieee80211 phy0: rt2800_is_305x_soc: Warning - Unknown RF chipset on rt305x [ 30.757103] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 30.820683] device wlan0 entered promiscuous mode [ 31.701290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.714594] br-lan: port 2(wlan0) entered forwarding state [ 31.725924] br-lan: port 2(wlan0) entered forwarding state [ 33.720927] br-lan: port 2(wlan0) entered forwarding state [ 64.871044] random: nonblocking pool is initialized


Notes

Tags

inbox/engenius/engenius_ecb9500.txt · Last modified: 2017/02/02 07:02 by hhm