User Tools

Site Tools


toh:arcadyan:arv752dpw

Arcadyan ARV752DPW

The ARV752DPW is a combined ADSL/VOIP/SIP/UMTS/3G-enabled WLAN router and home PBX device, primarily sold as "Easybox 802" by Vodafone Germany. It was also sold in the past by German fixed-line phone company Arcor, prior to the aquisition of Arcor by Vodafone.

In the so called "open" or user-defined configuration mode whith the firmware by Vodafone, the device can suit as a standalone UMTS/3G network router in combination with a compatible UMTS/3G USB modem, with any 3G network, the APN can be configured without any restrictions.

OpenWRT Status

BAUSTELLE The Device is not thorougly tested with OpenWrt. Do not follow the Informations here if you don't have a backup router inplace, you may end up with a bricked device… you've been warned.

This site here is Work in Progress. Please help if you have some usefull Informations, any help is welcome!

If you can confirm that OpenWrt is running on this device (i.e. you or someone else has tested it), please update the data accordingly. → Click View/Edit data

OpenWRT 15.05.1

Installation is directly possible with the uboot installation on this page

BusyBox v1.23.2 (2016-01-02 17:47:23 CET) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 CHAOS CALMER (15.05.1, r48532)
 -----------------------------------------------------

Informationen

Boot log

root@OpenWrt:~# dmesg [ 0.000000] Linux version 3.18.23 (buildbot@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r47269) ) #1 Sun Jan 31 12:02:45 CET 2016 [ 0.000000] SoC: Danube rev 1.3 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019641 (MIPS 24KEc) [ 0.000000] MIPS: machine is ARV752DPW - Arcor 802 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff] [ 0.000000] On node 0 totalpages: 16384 [ 0.000000] free_area_init_node: node 0, pgdat 804262f0, node_mem_map 81006ea0 [ 0.000000] Normal zone: 128 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 16384 pages, LIFO batch:3 [ 0.000000] Primary instruction cache 16kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 32 bytes [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: console=ttyLTQ0,115200 init=/etc/preinit [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=00040007 [ 0.000000] Readback ErrCtl register=00040007 [ 0.000000] Memory: 60144K/65536K available (3433K kernel code, 151K rwdata, 768K rodata, 172K init, 194K bss, 5392K reserved) [ 0.000000] NR_IRQS:256 [ 0.000000] CPU Clock: 333MHz [ 0.036000] Calibrating delay loop... 221.18 BogoMIPS (lpj=442368) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.044000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.052000] pinctrl core: initialized pinctrl subsystem [ 0.060000] NET: Registered protocol family 16 [ 0.072000] pinctrl-xway 1e100b10.pinmux: Init done [ 0.076000] dma-xway 1e104100.dma: Init done - hw rev: 3, ports: 5, channels: 20 [ 0.084000] PCI host bridge /fpi@10000000/pci@E105400 ranges: [ 0.088000] MEM 0x0000000018000000..0x0000000019ffffff [ 0.092000] IO 0x000000001ae00000..0x000000001affffff [ 0.108000] usbcore: registered new interface driver usbfs [ 0.112000] usbcore: registered new interface driver hub [ 0.116000] usbcore: registered new device driver usb [ 0.120000] PCI host bridge to bus 0000:00 [ 0.124000] pci_bus 0000:00: root bus resource [mem 0x18000000-0x19ffffff] [ 0.128000] pci_bus 0000:00: root bus resource [io 0xffffffff] [ 0.132000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.136000] pci 0000:00:0e.0: [1814:0601] type 00 class 0x028000 [ 0.136000] pci 0000:00:0e.0: reg 0x10: [mem 0xffff0000-0xffffffff] [ 0.136000] pci 0000:00:0e.0: PME# supported from D0 D3hot D3cold [ 0.136000] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00 [ 0.136000] pci 0000:00:0e.0: BAR 0: assigned [mem 0x18000000-0x1800ffff] [ 0.140000] Switched to clocksource MIPS [ 0.144000] NET: Registered protocol family 2 [ 0.152000] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.160000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.164000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.172000] TCP: reno registered [ 0.176000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.180000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.188000] NET: Registered protocol family 1 [ 0.192000] PCI: CLS 0 bytes, default 32 [ 0.192000] gptu: totally 6 16-bit timers/counters [ 0.196000] gptu: misc_register on minor 63 [ 0.200000] gptu: succeeded to request irq 126 [ 0.208000] gptu: succeeded to request irq 127 [ 0.212000] gptu: succeeded to request irq 128 [ 0.216000] gptu: succeeded to request irq 129 [ 0.220000] gptu: succeeded to request irq 130 [ 0.224000] gptu: succeeded to request irq 131 [ 0.236000] lantiq,vmmc 1f103000.vmmc: requested GPIO 465 [ 0.240000] lantiq,vmmc 1f103000.vmmc: reserved 1MB at 0x03a00000 [ 0.248000] ralink,eeprom ralink_eep: using RT2860.eeprom as eeprom [ 0.256000] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.268000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.272000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.312000] msgmni has been set to 117 [ 0.320000] io scheduler noop registered [ 0.324000] io scheduler deadline registered (default) [ 0.332000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 112, base_baud = 0) is a lantiq,asc [ 0.340000] console [ttyLTQ0] enabled [ 0.348000] bootconsole [early0] disabled [ 0.356000] lantiq nor flash device: 00800000 at 10000000 [ 0.360000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb [ 0.372000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.376000] Amd/Fujitsu Extended Query version 1.1. [ 0.380000] number of CFI chips: 1 [ 0.384000] 4 ofpart partitions found on MTD device ltq_nor [ 0.388000] Creating 4 MTD partitions on "ltq_nor": [ 0.392000] 0x000000000000-0x000000010000 : "uboot" [ 0.400000] 0x000000010000-0x000000020000 : "uboot_env" [ 0.404000] 0x000000020000-0x0000007f0000 : "firmware" [ 0.476000] 2 uimage-fw partitions found on MTD device firmware [ 0.480000] 0x000000020000-0x0000001959b3 : "kernel" [ 0.484000] 0x0000001959b3-0x0000007f0000 : "rootfs" [ 0.492000] mtd: device 4 (rootfs) set to be root filesystem [ 0.496000] 1 squashfs-split partitions found on MTD device rootfs [ 0.500000] 0x0000004a0000-0x0000007f0000 : "rootfs_data" [ 0.572000] 0x0000007f0000-0x000000800000 : "board_config" [ 0.608000] libphy: ltq_mii: probed [ 0.700000] Registering RTL8306SDM switch with Chip ID: 0x5988, version: 0x0000 [ 0.704000] eth0: attached PHY [Realtek RTL8306S] (phy_addr=1e180000.etop-ff:00, irq=-1) [ 0.716000] wdt 1f8803f0.watchdog: Init done [ 0.724000] TCP: cubic registered [ 0.724000] NET: Registered protocol family 17 [ 0.728000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 0.740000] Bridge firewalling registered [ 0.744000] 8021q: 802.1Q VLAN Support v1.8 [ 0.756000] UBIFS error (pid 1): ubifs_mount: cannot open "ubi0:rootfs", error -19 [ 0.772000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. [ 0.780000] Freeing unused kernel memory: 172K (80445000 - 80470000) [ 3.512000] init: Console is alive [ 3.516000] init: - watchdog - [ 6.980000] IFXUSB: ifxusb_hcd: version 3.2 B110801 [ 7.484000] IFXUSB: USB core #0 soft-reset [ 7.688000] IFXUSB: USB core #0 soft-reset [ 7.692000] ifxusb_hcd ifxusb_hcd: IFX USB Controller [ 7.696000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1 [ 7.704000] ifxusb_hcd ifxusb_hcd: irq 62, io mem 0xbe101000 [ 7.712000] IFXUSB: Mode Mismatch Interrupt: currently in Host mode [ 7.716000] IFXUSB: Mode Mismatch Interrupt: currently in Host mode [ 7.724000] IFXUSB: Init: Power Port (0) [ 7.728000] hub 1-0:1.0: USB hub found [ 7.732000] hub 1-0:1.0: 1 port detected [ 7.736000] ifxusb_hcd ifxusb_hcd: requested GPIO 464 [ 7.996000] init: - preinit - [ 8.212000] usb 1-1: new high-speed USB device number 2 using ifxusb_hcd [ 8.468000] hub 1-1:1.0: USB hub found [ 8.468000] hub 1-1:1.0: 4 ports detected [ 8.476000] random: procd urandom read with 81 bits of entropy available [ 8.664000] random: nonblocking pool is initialized [ 12.092000] jffs2: notice: (293) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 12.112000] mount_root: switching to jffs2 overlay [ 12.152000] procd: - early - [ 12.152000] procd: - watchdog - [ 13.544000] procd: - ubus - [ 14.564000] procd: - init - [ 16.568000] IFXOS, Version 1.5.14 (c) Copyright 2009, Lantiq Deutschland GmbH [ 16.568000] M [ 16.616000] NET: Registered protocol family 10 [ 16.636000] Lantiq TAPI device driver, version 3.13.0.2, (c) 2001-2010 Lantiq Deutschland GmbH [ 16.652000] NET: Registered protocol family 8 [ 16.656000] NET: Registered protocol family 20 [ 16.672000] PPP generic driver version 2.4.2 [ 16.688000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 16.724000] IFX MEI Version 5.00.00 [ 16.744000] Infineon CPE API Driver version: DSL CPE API V3.24.4.4 [ 16.760000] Loading modules backported from Linux version master-2015-03-09-0-g141f155 [ 16.768000] Backport generated by backports.git backports-20150129-0-gdd4a670 [ 16.796000] Lantiq MIPS24KEc MPS driver, version 2.2.2.5, (c) 2006-2010 Lantiq Deutschland GmbH [ 16.804000] request_timer(3, 0x000001AE, 1)...successful! [ 16.808000] Lantiq VMMC device driver, version 1.9.0.3, (c) 2006-2010 Lantiq Deutschland GmbH [ 16.820000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 16.840000] ATM1.0.26 ATM (A1) firmware version 0.17 [ 16.844000] ifxmips_atm: ATM init succeed [ 16.876000] nf_conntrack version 0.5.0 (942 buckets, 3768 max) [ 16.944000] NET: Registered protocol family 24 [ 17.008000] xt_time: kernel timezone is -0000 [ 17.120000] cfg80211: Calling CRDA to update world regulatory domain [ 17.124000] cfg80211: World regulatory domain updated: [ 17.128000] cfg80211: DFS Master region: unset [ 17.132000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 17.144000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 17.152000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 17.160000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 17.168000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 17.176000] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 17.184000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 17.192000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 17.200000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 17.436000] PCI: Enabling device 0000:00:0e.0 (0000 -> 0002) [ 17.440000] rt2800pci 0000:00:0e.0: failed to load eeprom property [ 17.444000] ieee80211 phy0: rt2x00lib_request_eeprom_file: Info - Loading EEPROM data from 'RT2860.eeprom'. [ 17.456000] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 2860, rev 0103 detected [ 17.464000] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 0001 detected [ 17.472000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 34.404000] device eth0 entered promiscuous mode [ 34.420000] br-lan: port 1(eth0) entered forwarding state [ 34.424000] br-lan: port 1(eth0) entered forwarding state [ 36.428000] br-lan: port 1(eth0) entered forwarding state


CPU Informationen

root@OpenWrt:~# cat /proc/cpuinfo
system type             : Danube rev 1.3
machine                 : ARV752DPW - Arcor 802
processor               : 0
cpu model               : MIPS 24KEc V4.1
BogoMIPS                : 221.18
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp
shadow register sets    : 1
kscratch registers      : 0
package                 : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

Flash Layout

root@OpenWrt:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00010000 00002000 "uboot"
mtd1: 00010000 00010000 "uboot_env"
mtd2: 007d0000 00010000 "firmware"
mtd3: 001759b3 00010000 "kernel"
mtd4: 0065a64d 00010000 "rootfs"
mtd5: 00350000 00010000 "rootfs_data"
mtd6: 00010000 00010000 "board_config"

Free Flash Space

root@OpenWrt:~#  df -h
Filesystem                Size      Used Available Use% Mounted on
rootfs                    3.3M    280.0K      3.0M   8% /
/dev/root                 3.0M      3.0M         0 100% /rom
tmpfs                    29.4M    640.0K     28.8M   2% /tmp
/dev/mtdblock5            3.3M    280.0K      3.0M   8% /overlay
overlayfs:/overlay        3.3M    280.0K      3.0M   8% /
tmpfs                   512.0K         0    512.0K   0% /dev

PCI Bus

root@OpenWrt:~# lspci -v
00:0e.0 Network controller: Ralink corp. RT2800 802.11n PCI
        Subsystem: Ralink corp. Device 2860
        Flags: bus master, 66MHz, slow devsel, latency 64, IRQ 135
        Memory at 18000000 (32-bit, non-prefetchable) [size=64K]
        Memory at <unassigned> (32-bit, non-prefetchable) [size=2]
        Memory at <unassigned> (32-bit, non-prefetchable) [size=2]
        Memory at <unassigned> (32-bit, non-prefetchable) [size=2]
        Memory at <unassigned> (32-bit, non-prefetchable) [size=2]
        Memory at <unassigned> (32-bit, non-prefetchable) [size=2]
        Expansion ROM at <unassigned> [disabled] [size=2]
        Capabilities: [40] Power Management version 3
        Kernel driver in use: rt2800pci
lspci: Unable to load libkmod resources: error -12

USB Bus

root@OpenWrt:~# lsusb -t
/:  Bus 01.Port 1: Dev 1, Class=root_hub, Driver=ifxusb_hcd/1p, 480M
    |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/4p, 480M

root@OpenWrt:~# lsusb
Bus 001 Device 002: ID 0424:2514 Standard Microsystems Corp. USB 2.0 Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Switch Configuration

root@OpenWrt:~# swconfig dev switch0 show
Global attributes:
        enable_vlan: 0
        trunk: 0
        trunk_sel: 0
Port 0:
        pvid: 0
        link: port:0 link:down
Port 1:
        pvid: 1
        link: port:1 link:up speed:100baseT full-duplex auto
Port 2:
        pvid: 2
        link: port:2 link:down
Port 3:
        pvid: 3
        link: port:3 link:down
Port 4:
        pvid: 4
        link: port:4 link:down
Port 5:
        pvid: 5
        link: port:5 link:up speed:100baseT full-duplex
VLAN 0:
        vid: 0
        ports: 0 5t
VLAN 1:
        vid: 1
        ports: 1 5t
VLAN 2:
        vid: 2
        ports: 2 5t
VLAN 3:
        vid: 3
        ports: 3 5t
VLAN 4:
        vid: 4
        ports: 4 5t
VLAN 5:
        vid: 5
        ports: 0 1 2 3 4

Ports 1-4 are the ports on the back of the router.

Wifi

root@OpenWrt:~# iwinfo wlan0 info
wlan0     ESSID: "testnetzwerk"
          Access Point: 00:0C:43:28:60:00
          Mode: Master  Channel: 1 (2.412 GHz)
          Tx-Power: 20 dBm  Link Quality: unknown/70
          Signal: unknown  Noise: unknown
          Bit Rate: unknown
          Encryption: WPA2 PSK (CCMP)
          Type: nl80211  HW Mode(s): 802.11bgn
          Hardware: 1814:0601 1814:2860 [Generic MAC80211]
          TX power offset: unknown
          Frequency offset: unknown
          Supports VAPs: yes  PHY name: phy0

Wifi is not working at the moment, these tickets refer to the problem:

Hardware info

Architecture: MIPS
Target: ifxmips / lantiq
Vendor: Arcadyan
Bootloader: brnboot
System-On-Chip: Infineon/Lantiq Xway Danube
CPU Speed: 333 Mhz
Flash chip: Macronix MX 29LV640EBTI-70G
Flash size: 8 MiB
RAM chip: PSC A3S12D40ETP
RAM size: 64 MiB (DDR400 SDRAM)
USB: 3x USB2.0 (one of these ports is connected with a grey cable)
WAN: 1x RJ45
MODEM: ADSL (G.992.1 & T1.413, V2), ADSL2 (G.992.3), ADSL2+ (G.992.5)
Ethernet: Realtek RTL8306G, 4x LAN 100MBit/s
Wireless: Ralink RT2860T, 802.11n 300MBit/s 2.4 GHz 2 antennas
Phone: 3x FXS ( 2x TAE ports which provide POTS via a SIP gateway), ISDN S0
ISDN: XHFC-2SU
Serial: yes (see picture below)
JTAG: no
Buttons: power switch, WPS button, reset button
Power: external PSU, 15V DC, 1,6A (25W max, 16W typical) polarity: -(+)

Pictures

  • Serial console connectors in the middle of the mainboard: The serial cable is the selfmade black thick one, connected with 3 Pins to the serial port. The thinner gray cable (4 pin) in the downer right is one of three usb-connectors of this board)

arv752dpw.jpg
easybox_802_pcb_map.jpg

serial console pin layout

 6  7  8  9  10
[ ][ ][ ][ ][ ]
[ ]Rx Tx [ ]Gnd
 1  2  3  4  5

Pin 1 is marked with an small arrow on the motherboard, speed is 115200 8N1

console output

After connect and power on the device you should see something like this:

  [root@localhost]# screen /dev/ttyUSB0 115200

ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X

========================================================================
Wireless ADSL Gateway DANUBE Loader V1.00.01 build Sep 24 2008 10:11:06
                    Arcadyan Technology Corporation
========================================================================
MXIC MX29LV640BB bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ...123
Yes, Enter command mode ...

[DANUBE Boot]:

Layout of the original Flash Image

If you select "[E] Erase Flash" in the bootloader you can see the original flash layout:

[DANUBE Boot]:E ERASE Flash ————————————— Area Address Length ————————————— [0] Boot 0xB0000000 128K [1] Configuration 0xB0020000 256K [2] None 0xB0060000 64K [3] Special Area 0xB0070000 64K [4] Primary Setting 0xB0080000 64K [5] Code Image 0 0xB0090000 3776K [6] Code Image 1 0xB0440000 3776K [7] Boot Params 0xB07F0000 64K [8] Flash Image 0xB0000000 8192K ————————————— Enter area to ERASE: ESC pressed ERROR: Not a valid area.

U-Boot

There are three ways to get U-Boot running on the device. Each approach requires different uboot images. At the moment trunk snapshot does not contain those images. See Downloads for copies.

In case your u-boot supports loady, you can upload everything you need via YModem Transfer. If loady is not supported, the user pgid69 has written a nice python script to easily write data to your router:

Is this router based on the infineon danube?

1. BRNBOOT

Temporarily load U-Boot as second stage bootloader from within the vendor Bootloader (brnboot) Requires: uboot-lantiq-arv752DPW_brnboot

(taken and tested from ARV752DPW22 Wiki Article

run u-boot noninvasive via serial port

  1. download uboot-lantiq-arv752DPW_brnboot version for u-boot ( see Downloads )
  2. get into administrative mode of bootloader (hit exclamation mark "!")
  3. choose
    [M] Upload to Memory
    at default address 0x80002000
  4. exit terminal (screen: Ctrl-a-k , minicom: ctrl-a-z )
  5. send u-boot.bin via XMODEM protocoll:
    sx u-boot.bin </dev/ttyUSB0 >/dev/ttyUSB0 — What is u-boot.bin? is it bin/lantiq/uboot-lantiq-arv752dpw_brn/openwrt-lantiq-arv752dpw_brn-u-boot.img ? — JPT1 2016/05/03 17:52
  6. get to the console via terminal again & type [Return]
  7. choose
    [Y] Go to Memory
    to default address 0x80002000

u-boot starts like this:

[DANUBE Boot]:Y

Go to Memory Address: (default:0x80002000) : 0x
Jump to address 0x80002000 ...

U-Boot 2013.10-openwrt4 (May 03 2016 - 16:56:57) ARV752DPW

Board: Arcadyan ARV752DPW
SoC:   Lantiq Danube-S v1.5
CPU:   333.333 MHz
IO:    166.667 MHz
BUS:   83.333 MHz
BOOT:  NOR
DRAM:  64 MiB
Flash: 8 MiB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   Board Net Initialization Failed
ltq-eth
Hit any key to stop autoboot:  0 

Updated above log with recent output. If I let autoboot run it just stops. If I stop autoboot I have the uboot shell. But what now? — JPT1 2016/05/03 17:52

You can hit [Ctrl] + [C] to get to the command line or hitting a key at the requested time.

2. FLASH

Use this image when you want to put the u-boot permanently on the flash. Requires: uboot-lantiq-arv752DPW_flash

From a running u-boot (see instructions above)

1. copy flash image to ram (see steps 2-6 from above with 0x80500000 as address before executing the u-boot at address 0x80002000, download u-boot.bin, see Downloads )

2. unprotect the sector where the U-BOOT config is being stored.

protect off 0xb0010000 0xb001FFFF

2. erase the flash

erase 0xb0000000 0xb001FFFF

3. write the uploaded u-boot.bin to flash (here; 0x80500000 is the RAM adress, where i've uploaded my file)

cp.b 0x80500000 0xb0000000 10000

4. protect the config sector

protect on 0xb0010000 0xb001FFFF

5. reboot device and hope for the best :)

reset

* If kernel ignores parameters from u-boot, remove the preceding - in linux's hardcoded cmdline

PANIC! i flashed U-Boot, now TFTP/HTTP in U-BOOT is not working anymore

calm down, you can upload everything you need via your serial connection.

3. UART

Hand over the u-boot directly to the cpu with UART, this requires soldering and is intended for rescue purposes. Requires: uboot-lantiq-arv752DPW_ramboot

You need to shortcut R80 and bring +3.3V on the left side of R65, see picture.

If you power on the device you will see this on serial console:

ROM VER: 1.0.3
CFG 04
Read EEPROMX
 X
UART

Jumpstart your Device by getting a suitable u-boot.asc File ( uboot-lantiq-arv752DPW_ramboot ). see Downloads

send this file via your serial connection to the router.

cat u-boot.asc > /dev/ttyUSB0

or by using cutecom, send file - plain

after the file is transmitted, uboot should load. Beware, u-boot is being currently loaded only in the ram. powering off your router will kill your u-boot, you will need to start again with this procedure.

To restore u-boot completely, upload u-boot via your serial connection and write it back to flash using the u-boot functions (see 2. FLASH)


FXS/FXO

There are some parts for telephony on the PCB. This parts are currently not supported.

Sip client for infineon danube based routers running openwrt: http://code.google.com/p/danube-voip/

Some research on university of freiburg germany (german): http://lab.ks.uni-freiburg.de/issues/515

A "map" of the PCB: http://lab.ks.uni-freiburg.de/attachments/download/431/baugruppen.jpg

Parts

ISDN

NTBA

  • PEF80902

POTS

  • Si3011
  • Si3050

Backup

Please Backup your original firmware!

Tools

brntool

I will use brntool to explain the backup here. As an alternative you could use brndumper to save the original firmware. (if you prefer a grafical interface brndumper may be better for you)

You have to download the small Python tool. You also need the packages python and phyton-Serial(Debian and clones) or pyserial(Redhat and clones) to run brntool.

Acording to the readme of brntool: "A successful flash block read will output '.' while a botched one (a byte or more gets lost in the serial port) will output '!' and retry. Even so, unless in a hurry, I'd recommend to at least dump twice and compare the dumps, just to be on the safe side."

A dump of the firmware is done in ~~1 hour. to dump twice as recomended by the autor of brntool you have to plan 2 hours to backup your device. First you have to enter the "Administrator Mode" in DANUBE Boot. Just fire up your serial terminal (screen /dev/ttyUSB0 115200), power on the device, hurry press 3x space bar. You will see the bootloader prompt: [DANUBE Boot]:. Then type a exclamation mark (!) to enter the administration mode in the DANUBE bootloader. You will see this output:

Press Space Bar 3 times to enter command mode …123 Yes, Enter command mode … [DANUBE Boot]:! Enter Administrator Mode ! ====================== [#] Set Serial Number [2] Use Normal Firmware [3] Use ART-Testing Firmware [9] Taggle ART Firmware Enable/Disable [A] Set MAC Address [E] Erase Flash [G] Run Runtime Code [H] Set Options [M] Upload to Memory [P] Print Boot Params [R] Read from Memory [T] Memory Test [U] Upload to Flash [V] Set Board Version [W] Write to Memory [Y] Go to Memory [Z] Dump DDR Ram Register [0] Primary = Image 0 [1] Primary = Image 1 ====================== [DANUBE Boot]:

Kill your serial terminal (screen: "ctrl+a, k" and confirm exit with "y"). Now you are able to dump the original firmware as shown below.

[root@localhost]# time ./brntool.py –read=ARV752DPW_whole.dump –addr=0xB0000000 –verbose –size=0x800000 Waiting for a prompt… Ok. ………………..!…!…………!…. [abbreviated version, you will see many more dots and exclamation marks] real 61m27.738s user 1m18.327s sys 0m47.164s

Powercycle the router, enter the "Admin Mode" of the bootloader and dump the firmware again:

[root@localhost]# ./brntool.py –read=ARV752DPW_whole2.dump –addr=0xB0000000 –verbose –size=0x800000

Compare the files. If everything is ok you will end with 2 identical files:

[root@localhost]# ls -l ARV752DPW_whole*.dump -rw-r–r–. 1 root root 8388608 12. Feb 23:32 ARV752DPW_whole2.dump -rw-r–r–. 1 root root 8388608 13. Feb 00:58 ARV752DPW_whole.dump [root@localhost]# diff ARV752DPW_whole.dump ARV752DPW_whole2.dump [root@localhost]# cmp ARV752DPW_whole.dump ARV752DPW_whole2.dump [root@localhost]# md5sum ARV752DPW_whole* b245fc54da24db7a81bb915e968453f8 ARV752DPW_whole2.dump b245fc54da24db7a81bb915e968453f8 ARV752DPW_whole.dump

As you see, the two files are the same. If you compare your own output with this example you probably note the md5sums differ, thats ok: You have to end with md5sums different like shown here in this example, because my MAC Adress/Serial No./configuration its also saved in this dump.

Flash to OpenWRT without opening the device

This information is very old. But it is still posible to boot to the Recovery Mode.

Tested on similar device - Arcadyam ARV752DPW22 (EasyBox 803)

WIP: DO NOT FOLLOW THIS INFORMATIONS AT THE MOMENT: SIGNED FIRMWARE IS NOT WORKING (uboot can't find the ethernet devices, a bugreport is opened, stay tuned, we are working on this issue)

  • download a prebuild, signed firmware image from http://nanl.de/todo.. (alternative download location: https://belug.de/~lutz/pub/todo..)
  • press and hold the "reset"-button: use a toothpick or paper clip to press and hold the button
  • power on the device (hold the reset button while power on the device)
  • release the reset-Button 3 seconds after power on
  • use an ethernet cable that forms a direct connection between the router and your computer or notebook (you MUST NOT use a switch, you will need a direct cabled connection. WLAN will also not work at this state)
  • configure your ethernet device to a static ip address 192.168.2.100, netmask is 255.255.255.0 (/24)
  • open a browser and navigate to http://192.168.2.1
  • you will see the "Recovering Tool" user interface shown in the picture below:

  • select "Firmware" as upgrade target, pick up the previously downloaded firmware file, and press the "APPLY" button
  • confirm the messages: the firmware will be uploaded and flashed onto the device

DO NOT POWER OFF THE DEVICE! Drink some coffee, tea… simply do nothing, just wait. The first reboot will take some time, because the device will be flashed with new firmware. AGAIN: DO NOT POWER OFF THE DEVICE! The LED in front of the device will show you the status and success of the process:

  1. a permanent white glowing of the "Power" LED (approximately 50 sec)
  2. flashing (approximately 1 flash per second) of the "Power" LED (white light, approximately 30 sec)
  • reload/refresh your browser, if you see the power LED flashing for ~30 seconds: you will see the "Recovering Tool" user interface again
  • select reboot from the "Recovering Tool" user interface

Drink more tea now… wait, and do not power off the device. The second reboot will take a bit longer, compared with the first one. The LED in front of the device will show you the current state of the process again:

  1. a permanent red glowing of the "Power" LED (approximately 3 sec)
  2. all lights are off (approximately 40 sec)
  3. a permanent blue glowing of the "internet" LED (approximately 2 sec)
  4. all lights are off

Power off the device now, its bricked :)

Just kidding… powercycle your device now.

Congratulations: you will see the failsafe interface of uboot:

DSL

Setup

Working DSL setup

config atm-bridge 'atm'
        option vpi '1'
        option vci '32'
        option encaps 'llc'
        option payload 'bridged'

config interface 'wan'
        option ifname 'nas0'
        option proto 'pppoe'
        option username '24235@eveundeve.de'
        option password '7046107807'
        option ipv6 '0'
        option pppd_options 'debug kdebug 2 lcp-max-terminate 0 ipcp-max-terminate 0'
        option keepalive 0
        option mtu 1500

config interface 'wan6'
        option ifname '@wan'
        option proto 'dhcpv6'

config adsl 'dsl'
        option annex 'b'
        option firmware '/lib/firmware/adsl.bin'

Downloads

Successfully flashed and tested Attitude Adjustment image (bootloader is still missing here!) :

Chaos Calmer also without bootloader, working except wifi and isdn.

U-Boot snapshots are broken at the moment (August 2013), here is a backup for some working images:

Also, 12.09-rc1 still contains some automatically built images:

The lantiq snapshot repo may contain some useful images:

Alternatively, try this repo to build u-boot yourself:

Python script to transfer over serial:

(original source: https://forum.openwrt.org/viewtopic.php?pid=183315#p183315 )

Building

I am new to openwrt and want to build the firmware for this device. There are no build instructions yet so I will add them here while I am experimenting with build. — JPT1 2016/04/29 15:16

  • Follow this https://wiki.openwrt.org/doc/howto/buildroot.exigence but probably fetch 15.5 branch: git clone git:git.openwrt.org/15.05/openwrt.git
  • when running make menuconfig select the following
    • Target System: lantiq
    • Target Profile: Easybox 802 - ARV752DPW
    • optional: usb-2.0 drivers, printer and usb-storage?
    • optional: filesystem drivers?
    • Ralink RT2860 PCI is reported not to work in 15.5 (see above). wireless drivers are already selected, firmware is available. so this seems to be a runtime problem. maybe this helps in trouble shooting: https://wireless.wiki.kernel.org/en/users/drivers/rt2800pci
    • Boot Loaders: uboot-lantiq-arv752dpw_brn or other formats depending on how you are gonna install the firmware (see above)
  • make
  • find your firmware images in bin/lantiq

Tags

toh/arcadyan/arv752dpw.txt · Last modified: 2016/05/29 00:24 by mar