User Tools

Site Tools


inbox:zyxel:zyxel_vmg5313-b30a

ZyXEL VMG5313-B30A

xDSL CPE based on Broadcom BCM63168.

OpenWrt support

Model OpenWrt Version Supported
VMG5313-B30A WIP

Not supported yet. Work in progress.

Supporting activities

There is an active effort to port OpenWrt.

ZyXEL source code

Hardware highlights

CPU Ram Flash Network WLAN USB Serial JTag
Dual-core BCM63168 @ 400 MHz 128 MiB 128 MiB 4x 10/100 bg 1x 2.0 Yes MIPS EJTAG

Buttons

hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.

The ZyXEL VMG5313-B30A has the following buttons:

BUTTON Event
Reset reset
WPS wps

Hardware

Info

Architecture: MIPS
Vendor: ZyXEL
Bootloader: CFE
System-On-Chip: Broadcom BCM63168
CPU/Speed 400 MHz
Flash-Chip: Spansion S34ML01G200TF100
Flash size: 128MiB
RAM: DDR3 1Gb (128MiB) Hynix H5TQ1G63EFR
Wireless: 2.4GHz 802.11bg
Ethernet: 4x 10/100 Mbit/s ports
USB: 1x USB 2.0
Serial: Yes
JTAG: MIPS EJTAG

Photos

PCB

Opening the case

Remove the two screws on the back and separate front and back case.

Serial

port.serial general information about the serial port, serial port cable, etc.

UART pins are located above Eth4 port. Pin header is labeled "UART".

Pinout: [ 3,3 V - Tx - Rx - NC - GND ]

Serial connection parameters
for ZyXEL VMG5313-B30A
115200, 8N1

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

JTAG connector is located in top left corner, labeled "JTAG". It is a standard MIPS EJTAG 14-pin connector.

The operational status of JTAG is unknown.

Bootlogs

OEM bootlog

CPUI L1CI HELO CPUI L1CI DRAM


PHYS STRF 400H PHYE DDR3 NREF SIZ4 SIZ3 SIZ2 DINT USYN LSYN MFAS LMBE RACE PASS


ZBSS CODE DATA L12F MAIN

CFE version 1.0.38-112.118 for BCM963268 (32bit,SP,BE) Build Date: 06/25/2014 (chchien@ch_ubuntu) Copyright (C) 2000-2011 Broadcom Corporation.

NAND flash device: name Spansion S34ML01G1, id 0x01f1 block 128KB size 131072KB Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000

Checking Reset button on EXT INTR 0 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Boot image (0=latest, 1=previous) : 0 Board Id (0-15) : 963168_VMG5313 Number of MAC Addresses (1-32) : 18 Base MAC Address : ff:ff:ff:ff:ff:ff PSI Size (1-128) KBytes : 128 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 Voice Board Configuration (0-0) : ZL88601

* Press any key to stop auto run (1 seconds) * Auto run second count down: 0 Wait for Multiboot Service Packet… 0 Booting from latest image (0xbc020000) … Code Address: 0x80020000, Entry Address: 0x8033a860 Decompression OK! Entry at 0x8033a860 Closing network. Disabling Switch ports. Flushing Receive Buffers… 0 buffers found. Closing DMA Channels. Starting program at 0x8033a860 Linux version 2.6.30 (tresia@tpdc-desktop) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #1 SMP PREEMPT Thu Sep 25 19:30:03 HKT 2014 NAND flash device: name Spansion S34ML01G1, id 0x01f1 block 128KB size 131072KB 963168_VMG5313 prom init CPU revision is: 0002a080 (Broadcom4350) DSL SDRAM reserved: 0x132000 Determined physical RAM map: memory: 07ece000 @ 00000000 (usable) Zone PFN ranges:

DMA      0x00000000 -> 0x00001000
Normal   0x00001000 -> 0x00007ece

Movable zone start PFN for each node early_node_map[1] active PFN ranges

  0: 0x00000000 -> 0x00007ece

On node 0 totalpages: 32462 free_area_init_node: node 0, pgdat 80413bd0, node_mem_map 81000000

DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 222 pages used for memmap
Normal zone: 28144 pages, LIFO batch:7

Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32208 Kernel command line: root=mtd:rootfs ro rootfstype=jffs2 console=ttyS0,115200 wait instruction: enabled Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes NR_IRQS:128 PID hash table entries: 512 (order: 9, 2048 bytes) console [ttyS0] enabled Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0 Memory: 123408k/129848k available (3210k kernel code, 6268k reserved, 855k data, 152k init, 0k highmem) Calibrating delay loop… 398.33 BogoMIPS (lpj=199168) Mount-cache hash table entries: 512 –Kernel Config–

SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0

Broadcom Logger v0.1 Sep 25 2014 19:24:25 CPU revision is: 0002a080 (Broadcom4350) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Calibrating delay loop… 402.43 BogoMIPS (lpj=201216) Brought up 2 CPUs net_namespace: 1144 bytes NET: Registered protocol family 16 Internal 1P2 VREG will be shutdown if unused…Unused, turn it off (00009161-00009170=-15<300) registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10013fff] pci 0000:00:00.0: reg 30 32bit mmio: [0x000000-0x0007ff] pci 0000:00:00.0: supports D1 D2 pci 0000:00:00.0: PME# supported from D0 D3hot D3cold pci 0000:00:00.0: PME# disabled pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff] pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: disabled pci 0000:01:00.0: PREFETCH window: disabled PCI: Setting latency timer of device 0000:01:00.0 to 64 skbFreeTask created successfully BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 Sep 25 2014 19:29:15 initialized Broadcom GBPM v0.1 Sep 25 2014 19:29:15 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 3, 32768 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered NET: Registered protocol family 1 JFFS2 version 2.2. (NAND) �© 2001-2006 Red Hat, Inc. fuse init (API version 7.11) msgmni has been set to 241 io scheduler noop registered (default) PCI: Setting latency timer of device 0000:01:00.0 to 64 Driver 'sd' needs updating - please use bus_type methods PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered NET: Registered protocol family 24 Broadcom DSL NAND controller (BrcmNand Controller) –>brcmnand_scan: CS=0, numchips=1, csi=0 mtd→oobsize=0, mtd→eccOobSize=0 NAND_CS_NAND_XOR=00000000 Disabling XOR on CS#0 brcmnand_scan: Calling brcmnand_probe for CS=0 B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0 brcmnand_read_id: CS0: dev_id=01f1801d After: NandSelect=40000001, nandConfig=15142200 Block size=00020000, erase shift=17 NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11 busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff timing1 not adjusted: 6574845b timing2 not adjusted: 00001e96 brcmnand_adjust_acccontrol: gAccControl[CS=0]=00000000, ACC=f7441010 BrcmNAND mfg 1 f1 SPANSION_S30ML01GP_08 128MB on CS0

Found NAND on CS0: ACC=f7441010, cfg=15142200, flashId=01f1801d, tim1=6574845b, tim2=00001e96 BrcmNAND version = 0x0400 128MB @00000000 brcmnand_scan: Done brcmnand_probe brcmnand_scan: B4 nand_select = 40000001 brcmnand_scan: After nand_select = 40000001 100 CS=0, chip→ctrl→CS[0]=0 handle_acc_control: default CORR ERR threshold 1 bits ECC level threshold set to 1 bits ECC level 4, threshold at 1 bits ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16 reqEccLevel=0, eccLevel=4 190 eccLevel=4, chip→ecclevel=4, acc=f7441010 brcmnand_scan 10 200 CS=0, chip→ctrl→CS[0]=0 200 chip→ecclevel=4, acc=f7441010 page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17 brcmnand_scan 220 Brcm NAND controller version = 4.0 NAND flash size 128MB @18000000 brcmnand_scan 230 brcmnand_scan 40, mtd→oobsize=64, chip→ecclayout=00000000 brcmnand_scan 42, mtd→oobsize=64, chip→ecclevel=4, isMLC=0, chip→cellinfo=0 ECC layout=brcmnand_oob_bch4_2k brcmnand_scan: mtd→oobsize=64 brcmnand_scan: oobavail=35, eccsize=512, writesize=2048 brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7 300 CS=0, chip→ctrl→CS[0]=0 500 chip=87a44190, CS=0, chip→ctrl→CS[0]=0 –>brcmnand_default_bbt brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0 Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0 File system address: 0xbc020000 brcmnand_reset_corr_threshold: default CORR ERR threshold 1 bits for CS0 ECC level threshold default value is 1 bits for CS0 brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0 rescanning …. —– Contents of BBT —– —– END Contents of BBT —– brcmnandCET: Status → Deferred brcmnand_scan 99 Root file system size 3a80000 bad block number = 0 Creating 3 MTD partitions on "brcmnand.0": 0x000004020000-0x000005680000 : "rootfs" 0x000007b00000-0x000007f00000 : "data" 0x000000000000-0x000000020000 : "nvram" Watchdog Timer Init – kthread brcmboard: brcm_board_init entry SES: Button Interrupt 0x3 is enabled SES: LED GPIO 0x802c is enabled WLAN BTN: Button Interrupt 0x1 is enabled PCIe: No device found - Powering down

LED→ledHWDis:ffe1ff

LED→ledInit:18c

LED→ledInit:18c

GPIO→LEDCtrl:bfdf03

LED→ledLinkActSelLow:0

LED→ledLinkActSelHigh:0

LED→ledMode:000000000c000003 <6>Serial: BCM63XX driver $Revision: 3.00 $ Magic SysRq enabled (type ^ h for list of supported commands) ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX Total # RxBds=1448 bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized

bcmPktDma_init: Broadcom Packet DMA Library initialized bcmxtmrt: Broadcom BCM3168D0 ATM/PTM Network Device v0.4 Sep 25 2014 19:28:53 GACT probability NOT on Mirror/redirect action on u32 classifier

  input device check on 
  Actions configured 

TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 10 IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Initializing MCPD Module Ebtables v2.0 registered ebt_time registered ebt_ftos registered ebt_wmm_mark registered 802.1Q VLAN Support v1.8 Ben Greear greearb@candelatech.com All bugs added by David S. Miller davem@redhat.com VFS: Mounted root (jffs2 filesystem) readonly on device 31:0. Freeing unused kernel memory: 152k freed mdev: can't create 'cpu_dma_latency': Read-only file system mdev: can't create 'network_latency': Read-only file system mdev: can't create 'network_throughput': Read-only file system mdev: can't create 'full': Read-only file system mdev: can't create 'kmsg': Read-only file system mdev: can't create 'mtd0ro': Read-only file system mdev: can't create 'mtd1ro': Read-only file system mdev: can't create 'mtd2ro': Read-only file system

Loading drivers and kernel modules…

chipinfo: module license 'proprietary' taints kernel. Disabling lock debugging due to kernel taint brcmchipinfo: brcm_chipinfo_init entry Broadcom Ingress QoS Module Char Driver v0.1 Sep 25 2014 19:27:09 Registered<243>

Broadcom Ingress QoS ver 0.1 initialized BPM: tot_mem_size=134217728B (128MB), buf_mem_size=20132655B (19MB), num of buffers=9460, buf size=2128 Broadcom BPM Module Char Driver v0.1 Sep 25 2014 19:25:26 Registered<244> [NTC bpm] bpm_set_status: BPM status : enabled

NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v2.2 Sep 25 2014 19:27:10 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. Constructed Broadcom Packet Flow Cache v2.2 Sep 25 2014 19:27:10 chipId 0x631680D0 Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 Sep 25 2014 19:27:03 Registered <241> Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done FAP Debug values at 0xa5d9cf90 0xa5e1cf90 Allocated FAP0 GSO Buffers (0xA5DAE018) : 1048576 bytes @ 0xA5F00000 Allocated FAP1 GSO Buffers (0xA5E2E018) : 1048576 bytes @ 0xA5800000 Allocated FAP0 TM SDRAM Queue Storage (a5dae01c) : 341376 bytes @ a5e80000 Allocated FAP1 TM SDRAM Queue Storage (a5e2e01c) : 341376 bytes @ a5900000 [NTC fapProto] fapReset : Reset FAP Protocol layer fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytes fapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytes bcmPktDma_bind: FAP Driver binding successfull [FAP0] DSPRAM : stack <0x80000000><1536>, global <0x80000600><3960>, free <2696>, total<8192> [FAP1] DSPRAM : stack <0x80000000><1536>, global <0x80000600><3960>, free <2696>, total<8192> [FAP0] PSM : addr<0x80002000>, used <23436>, free <1140>, total <24576> [FAP1] PSM : addr<0x80002000>, used <23436>, free <1140>, total <24576> [FAP0] DQM : availableMemory 14652 bytes, nextByteAddress 0xE0004948 [FAP1] DQM : availableMemory 14652 bytes, nextByteAddress 0xE0004948 [FAP0] GSO Buffer set to 0xA5F00000 [FAP1] GSO Buffer set to 0xA5800000 [FAP0] FAP BPM Initialized. [FAP1] FAP BPM Initialized. [FAP0] FAP TM: ON [FAP1] FAP TM: ON bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM63168D0 Ethernet Network Device v0.1 Sep 25 2014 19:28:46 fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000 ETH Init: Ch:0 - 200 tx BDs at 0xb0820650 fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000 ETH Init: Ch:1 - 200 tx BDs at 0xb0a20650 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184 ETH Init: Ch:0 - 600 rx BDs at 0xb0821910 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184 ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910 For port 3; changing the MII adv to 0x1e1 changing the GMII adv to 0x0 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered phy_id = 0x1<3>create_vport, eth2, i = 1, j = 0, phy_id = 0x1


OpenWrt bootlog

0x80010000/4131836 0x80400bfc/1309212 Entry at 0x80015020 Closing network. Disabling Switch ports. Flushing Receive Buffers… 0 buffers found. Closing DMA Channels. Starting program at 0x80015020 [ 0.000000] Linux version 4.1.23 (danijel@server) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 r49395) ) #1 Sat Sep 17 14:23:35 UTC 2016 [ 0.000000] Detected Broadcom 0x63268 CPU revision d0 [ 0.000000] CPU frequency is 400 MHz [ 0.000000] 128MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: unknown [ 0.000000] bcm63xx_nvram: nvram checksum failed, contents may be invalid (expected c4d699f9, got 3c969a66) R(�֙��0.000000] board_bcm963xx: unknown bcm963xx board: ���������� [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0002a080 (Broadcom BMIPS4350) [ 0.000000] Kernel panic - not syncing: unable to detect bcm963xx board [ 0.000000] —[ end Kernel panic - not syncing: unable to detect bcm963xx board


Notes

Tags

inbox/zyxel/zyxel_vmg5313-b30a.txt · Last modified: 2016/09/17 16:51 by danijel.tudek