User Tools

Site Tools


toh:arcadyan:vgv7510kw22

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Previous revision
toh:arcadyan:vgv7510kw22 [2013/03/21 07:20]
toh:arcadyan:vgv7510kw22 [2016/08/23 13:04] (current)
lankaster [Arcadyan VGV7510KW22 (o2 Box 6431)]
Line 1: Line 1:
 +====== Arcadyan VGV7510KW22 (o2 Box 6431) ======
  
 +The internal Aradyan model number is VGV7510KW22,​ though it is better known as "o2 Box 6431".
 +
 +OpenWrt support is available with these patches:
 +  * [[https://​lists.openwrt.org/​pipermail/​openwrt-devel/​2015-June/​033439.html|lantiq:​ Add support for Arcadyan VGV7510KW22 (known as o2 Box 6431)]] - committed as SVN [[https://​dev.openwrt.org/​changeset/​45897/​|r45897]]
 +  * [[https://​lists.openwrt.org/​pipermail/​openwrt-devel/​2015-June/​033437.html|uboot-lantiq:​ Add Arcadyan VGV7510KW22 support]] - committed as SVN [[https://​dev.openwrt.org/​changeset/​45898/​|r45898]]
 +    * [[https://​github.com/​danielschwierzeck/​u-boot-lantiq/​pull/​15|uboot-lantiq:​ Patch for Arcadyan VGV7510KW22 with version 1.2 VR9 support]] - Pull request
 +
 +==== Highlights ====
 +^ CPU ^ Ram ^ Flash ^ Network ^ USB ^ Serial ^ UART mode ^
 +|  [[doc:​Hardware:​soc:​soc.lantiq|Lantiq Xway Danube]] @500Mhz Dual Core  |  64MB  |  16MB  |  4 Ports  |  Yes  |  Yes  |  Yes  |
 +
 + * Trunk supported SMP -> x2 CPU
 +===== Downloads =====
 +
 +^ Branch ^ Type ^ Download link ^
 +|  **Trunk**\\ (Chaos Calmer) ​ |  u-boot for installing on NOR flash (= replaces brnboot) ​ | [[https://​dl.dropboxusercontent.com/​u/​26940713/​OpenWrt/​openwrt-lantiq-vgv7510kw22_nor-u-boot.img|openwrt-lantiq-vgv7510kw22_nor-u-boot.img]] |
 +|  **15.05-rc2**\\ (Chaos Calmer) ​ |  OpenWrt image when using u-boot ​ | [[http://​downloads.openwrt.org/​chaos_calmer/​15.05-rc2/​lantiq/​xrx200/​openwrt-15.05-rc2-lantiq-xrx200-VGV7510KW22NOR-squashfs.image|openwrt-15.05-rc2-lantiq-xrx200-VGV7510KW22NOR-squashfs.image]] |
 +|  **Trunk**\\ (Chaos Calmer) ​ |  u-boot which can be started from brnboot ​ | [[https://​dl.dropboxusercontent.com/​u/​26940713/​OpenWrt/​openwrt-lantiq-vgv7510kw22_brn-u-boot.img|openwrt-lantiq-vgv7510kw22_brn-u-boot.img]] |
 +|  |  u-boot for Rev 1.2 which can be started from brnboot ​ | [[http://​rghost.net/​8gszYKWFc?​r=530|openwrt-lantiq-vgv7510kw22_brn-u-boot-soc12.img]] |
 +|  **15.05-rc2**\\ (Chaos Calmer) ​ |  OpenWrt image when using brnboot ​ | [[http://​downloads.openwrt.org/​chaos_calmer/​15.05-rc2/​lantiq/​xrx200/​openwrt-15.05-rc2-lantiq-xrx200-VGV7510KW22BRN-5BRNDA6431-brnImage|openwrt-15.05-rc2-lantiq-xrx200-VGV7510KW22BRN-5BRNDA6431-brnImage]] |
 +
 +===== Hardware info =====
 +| **Architecture:​** ​  | MIPS                                          |
 +| **Target:​** ​        | lantiq ​                                       |
 +| **Vendor:​** ​        | [[toh:​arcadyan:​|Arcadyan]] ​                   |
 +| **Bootloader:​** ​    | [[doc:​techref:​bootloader:​brnboot]] ​ 1.07.07 ​   (V1.08.1 on v1.2)|
 +| **System-On-Chip:​** | Infineon/​[[doc:​hardware:​soc:​soc.lantiq|Lantiq]] [[http://​www.lantiq.com/​uploads/​tx_abzlantiqproducts/​PB-e-0028-v1_lres.pdf|XWAY VRX288]] v1.1 , v1.2 |
 +| **CPU Speed:​** ​ | 500 Mhz |
 +| **Flash chip:** | [[http://​www.macronix.com/​QuickPlace/​hq/​PageLibrary4825740B00298A3B.nsf/​h_Index/​6F878CF760C559BD482576E00022E6CC/?​OpenDocument&​EPN=MX29GL128E|MXIC MX29GL128EL]] parallel NOR flash, 128*128KB blocks |
 +| **Flash size:** | 16 MiB / 128 Mibit        |
 +| **RAM chip:​** ​  | [[http://​www.etron.com/​en/​products/​specialtydram_detial.php?​Product_ID=33|EtronTech EM68B16CWQD-25H]] DDR2 SDRAM (running at 250MHz), 32Mi*16bit blocks |
 +| **RAM size:​** ​  | 64 MiB / 512 Mibit        |
 +| **WAN:​** ​       | 1x RJ46, VDSL1/2 and ADSL1/2/2+ capable (via VRX208), Fast Ethernet capable (via [[http://​www.icplus.com.tw/​pp-IP101A.html|IC+ IP101A LF]])  |
 +| **Modem:​** ​     | Infineon/​Lantiq [[http://​www.lantiq.com/​uploads/​tx_abzlantiqproducts/​PB-e-0027-v2_lres.pdf|XWAY VRX208]]\\ VDSL2 (G.993.2),​\\ VDSL1 (G.993.1, T1.424, TS 101 270),\\ ADSL1/2/2+ (G.992.1/​3/​5) Annexes A, B, I, J, M, L |
 +| **Ethernet:​** ​  | LAN: 4x RJ46 Fast Ethernet (provided by VRX288 SoC)\\ WAN: 1x RJ46 Fast Ethernet (provided by IC+ IP101A LF)  |
 +| **Wireless:​** ​  | [[http://​www.mediatek.com/​en/​products/​connectivity/​wifi/​home-network/​pci/​rt3062/​|Ralink/​Mediatek RT3062F]], 802.11b/g/n 300MBit/s |
 +| **Phone:​** ​     | [[http://​www.lantiq.com/​products/​voice-customer-premises-equipment/​slictm/​xwaytm-slic100/​xwaytm-slic120/​|Lantiq XWAY SLIC120 (PEF 42068 V V1.2)]], 3x FXS (TAE ports which provide POTS via a SIP gateway) |
 +| **Serial:​** ​    | yes (3.3V, reachable through ventilation slots) ​  |
 +| **JTAG:​** ​      | supported by SOC but no pads found on PCB yet     |
 +| **Buttons:​** ​   | power switch, WPS button, reset button ​           |
 +| **Power:​** ​     | external PSU, 15V DC, 1.2A, 18W, polarity: -(+)   |
 +
 +==== Details (trunk r49904)====
 +
 +=== CPU ===
 +<​code>​
 +# cat /​proc/​cpuinfo ​
 +system type : xRX200 rev 1.2
 +machine : VGV7510KW22 - o2 Box 6431
 +processor :​ 0
 +cpu model : MIPS 34Kc V5.6
 +BogoMIPS : 332.54
 +wait instruction :​ yes
 +microsecond timers : yes
 +tlb_entries :​ 16
 +extra interrupt vector : yes
 +hardware watchpoint :​ yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
 +isa : mips1 mips2 mips32r1 mips32r2
 +ASEs implemented :​ mips16 dsp mt
 +shadow register sets : 1
 +kscratch registers : 0
 +package : 0
 +core : 0
 +VCED exceptions :​ not available
 +VCEI exceptions :​ not available
 +VPE : 0
 +
 +processor :​ 1
 +cpu model : MIPS 34Kc V5.6
 +BogoMIPS : 251.90
 +wait instruction :​ yes
 +microsecond timers : yes
 +tlb_entries :​ 16
 +extra interrupt vector : yes
 +hardware watchpoint :​ yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
 +isa : mips1 mips2 mips32r1 mips32r2
 +ASEs implemented :​ mips16 dsp mt
 +shadow register sets : 1
 +kscratch registers : 0
 +package : 0
 +core : 0
 +VCED exceptions :​ not available
 +VCEI exceptions :​ not available
 +VPE : 0
 +</​code>​
 +
 +=== PCI ===
 +<​code>​
 +# lspci
 +00:0e.0 Network controller: Ralink corp. RT3592 Wireless 802.11abgn 2T/2R PCIe
 +</​code>​
 +
 +=== USB via dwc2===
 +<​code>​
 +# lsusb
 +Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 +</​code>​
 +
 +=== LAN ===
 +
 +<​code>​
 +# swconfig dev eth0 help
 +switch0: eth0(Lantiq XRX200 Switch), ports: 7 (cpu @ 6), vlans: 64
 +     ​--switch
 + Attribute 1 (int): enable_vlan (Enable VLAN mode)
 + Attribute 2 (none): apply (Activate changes in the hardware)
 + Attribute 3 (none): reset (Reset the switch)
 +     ​--vlan
 + Attribute 1 (int): vid (VLAN ID (0-4094))
 + Attribute 2 (int): enable (Enable VLAN)
 + Attribute 3 (ports): ports (VLAN port mapping)
 +     ​--port
 + Attribute 1 (int): uvr (Unknown VLAN Rule)
 + Attribute 2 (int): vsr (VLAN Security Rule)
 + Attribute 3 (int): vinr (VLAN Ingress Tag Rule)
 + Attribute 4 (int): tvm (Transparent VLAN Mode)
 + Attribute 5 (int): pvid (Primary VLAN ID)
 + Attribute 6 (unknown): link (Get port link information)
 +</​code>​
 +
 +<​code>​
 +# swconfig dev eth0 show
 +Global attributes:
 + enable_vlan:​ 1
 +Port 0:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:0 link:down
 +Port 1:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:1 link:down
 +Port 2:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:2 link:down
 +Port 3:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:3 link:down
 +Port 4:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:4 link:down
 +Port 5:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:5 link:down
 +Port 6:
 + uvr: 0
 + vsr: 0
 + vinr: 0
 + tvm: 0
 + pvid: 1
 + link: port:6 link:up speed:​1000baseT full-duplex auto
 +VLAN 1:
 + vid: 1
 + enable: 1
 + ports: 2 3 4 5 6t 
 +</​code>​
 +
 +== ascii layout ==
 +
 +<​code>​
 +    ________________________________________________________
 +   / ​                ​Lantiq XRX200 Switch ​                  \
 +   | port0   ​port1 ​  ​port2 ​  ​port3 ​  ​port4 ​  ​port5 ​  ​port6 ​ |
 +   ​\________________________________________________________/​
 +                       ​| ​      ​| ​      ​| ​      ​| ​      |
 +                    LAN 2   LAN 1   LAN 4   LAN 3     CPU
 +</​code>​
 +
 +=== WLAN ===
 +<​code>​
 +# iw phy0 info
 +Wiphy phy0
 + max # scan SSIDs: 4
 + max scan IEs length: 2257 bytes
 + max # sched scan SSIDs: 0
 + max # match sets: 0
 + Retry short limit: 7
 + Retry long limit: 4
 + Coverage class: 0 (up to 0m)
 + Available Antennas: TX 0 RX 0
 + Supported interface modes:
 + * IBSS
 + * managed
 + * AP
 + * AP/VLAN
 + * WDS
 + * monitor
 + * mesh point
 + Band 1:
 + Capabilities:​ 0x2f2
 + HT20/​HT40
 + Static SM Power Save
 + RX Greenfield
 + RX HT20 SGI
 + RX HT40 SGI
 + TX STBC
 + RX STBC 2-streams
 + Max AMSDU length: 3839 bytes
 + No DSSS/CCK HT40
 + Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
 + Minimum RX AMPDU time spacing: 2 usec (0x04)
 + HT RX MCS rate indexes supported: 0-15, 32
 + TX unequal modulation not supported
 + HT TX Max spatial streams: 2
 + HT TX MCS rate indexes supported may differ
 + Frequencies:​
 + * 2412 MHz [1] (20.0 dBm)
 + * 2417 MHz [2] (20.0 dBm)
 + * 2422 MHz [3] (20.0 dBm)
 + * 2427 MHz [4] (20.0 dBm)
 + * 2432 MHz [5] (20.0 dBm)
 + * 2437 MHz [6] (20.0 dBm)
 + * 2442 MHz [7] (20.0 dBm)
 + * 2447 MHz [8] (20.0 dBm)
 + * 2452 MHz [9] (20.0 dBm)
 + * 2457 MHz [10] (20.0 dBm)
 + * 2462 MHz [11] (20.0 dBm)
 + * 2467 MHz [12] (20.0 dBm) (no IR)
 + * 2472 MHz [13] (20.0 dBm) (no IR)
 + * 2484 MHz [14] (20.0 dBm) (no IR)
 + valid interface combinations:​
 + * #{ managed, AP, mesh point } <= 8,
 +    total <= 8, #channels <= 1
 + HT Capability overrides:
 + * MCS: ff ff ff ff ff ff ff ff ff ff
 + * maximum A-MSDU length
 + * supported channel width
 + * short GI for 40 MHz
 + * max A-MPDU length exponent
 + * min MPDU start spacing
 +</​code>​
 +
 +=== LEDs ===
 +^Symbol^Color^
 +|Power ​    | <color red>​red</​color>​ + <color green>​green</​color>​ |
 +|Internet ​ | <color red>​red</​color>​ + <color green>​green</​color>​ |
 +|Info      | <color red>​red</​color>​ + <color green>​green</​color>​ |
 +|Telefon ​  | <color green>​green</​color>​ |
 +|WLAN      | <color green>​green</​color>​ |
 +|DSL       | <color green>​green</​color>​ |
 +|LAN1(auto)| <color green>​green</​color>​ |
 +|LAN2(auto)| <color green>​green</​color>​ |
 +|LAN3(auto)| <color green>​green</​color>​ |
 +|LAN4(auto)| <color green>​green</​color>​ |
 +
 +<​code>​
 +# ls /​sys/​class/​leds
 +rt2800pci-phy0::​assoc ​      ​vgv7510kw22:​green:​power
 +rt2800pci-phy0::​quality ​    ​vgv7510kw22:​green:​telefon
 +rt2800pci-phy0::​radio ​      ​vgv7510kw22:​green:​wlan
 +vgv7510kw22:​green:​dsl ​      ​vgv7510kw22:​red:​info
 +vgv7510kw22:​green:​info ​     vgv7510kw22:​red:​internet
 +vgv7510kw22:​green:​internet ​ vgv7510kw22:​red:​power
 +</​code>​
 +===== Photos =====
 +{{:​media:​arcadyan:​vgv7510kw22-top.jpg?​400|Arcadyan VGV7510KW22 PCB}}
 +{{:​media:​arcadyan:​vgv7510kw22-bottom.jpg?​400|Arcadyan VGV7510KW22 PCB}}
 +
 +===== Serial console =====
 +The pin headers of the serial console can be reached through the second ventilation below the lower right corner of the sticker on the backside of the device.
 +Pin 1 is on the right, marked with a white arrow on the PCB, so the pin numbers are counted from right to left. The voltage is 3.3V. Please do *not* connect the VCC pin of the PCB to the VCC pin of you serial interface as this may destroy both of the devices. The pinout is as follows:
 +| **Pin number** ​  ​| ​  ​4 ​  ​| ​ 3   ​| ​ 2   ​| ​     1       |
 +| **Function** ​    ​| ​ GND  |  RX  |  TX  |  VCC (3.3V) ​ |
 +
 +==== Booting via UART ====
 +
 +**NOTE:** This requires soldering to SMD solder pads!
 +
 +{{http://​abload.de/​img/​2015-05-3018.15.26ftuzp.jpg?​400|}}
 +
 +It seems that this device uses the same UART pins as [[toh/​arcadyan/​arv7519|ARV7519 ("​Livebox 2.1"​)]].\\
 +To enable booting via UART one has to:
 +  - **Temporarily** bridge both R148 pins (= connecting them)
 +  - **Temporarily** bridge the R155 pins using a 1kOhm resistor in between (one solder pad -> resistor -> second solder pad)
 +    - The resistor prevents killing the NOR flash - this information was found by [[http://​foro.seguridadwireless.net/​openwrt/​(desarrollo)-openwrt-en-astoria-arv7519rw22-livebox-2-1/​msg307381/#​msg307381|"​espeltron"​ on a Spanish forum]]
 +  - Turn on the device
 +  - You should now see that it enters CFG04 mode
 +    - Check your solder points if this doesn'​t happen!
 +  - Remove the bridges from R148 and R155 again (= bring them back to their original state)
 +  - Then you can upload the u-boot code to memory: <​code>​cat openwrt-lantiq-vgv7510kw22_ram-u-boot.asc > /​dev/​ttyUSB0</​code>​
 +    - Please note that the CPU will run at 125MHz - so don't expect it to be as fast as usual
 +
 +==== brnboot ====
 +
 +Hooking up to the serial with 115200/8N1 enables you to access the [[doc:​techref:​bootloader:​brnboot]] bootloader and save or overwrite the flash contents along with the option to change some settings like MAC address and serial number. You have to enter three spaces immediately after powerup and then enter one exclamation mark (!) to get to the more advanced "​Administrator menu".
 +
 +== starting u-boot from brnboot ==
 +
 +To boot from brnboot into u-boot you need to:
 +  - Enter the "​Administrator menu"
 +  - Press m, then [enter]
 +  - Then run <​code>​sx openwrt-lantiq-vgv7510kw22_brn-u-boot.img < /​dev/​ttyUSB0 > /​dev/​ttyUSB0</​code>​
 +    - sx is provided by [[https://​www.gnu.org/​software/​lrzsz/​|lrzsz]]
 +  - Wait until the upload is completed
 +  - Go back to your serial console
 +  - Press [enter] (this brings you back to the menu)
 +  - Now press y and finally [enter]
 +    - u-boot should now start
 +
 +== brnboot "​recovery"​ web UI ==
 +
 +The recovery web UI can be used to flash "​brnboot"​ images and reset the device to factory defaults.
 +
 +  - Turn off the device
 +  - Press and hold the "​reset"​ button
 +  - Turn the device back on
 +  - Keep the "​reset"​ button pressed for ~5 seconds (until the power LED) turns red)
 +  - You can now access the recovery web UI at [[http://​192.168.1.1]]
 +
 +== Creating backup of the original firmware / flash contents ==
 +
 +  - Start u-boot from brnboot (see above)
 +  - Load the OpenWrt brnboot image via TFTP: <​code>​tftpboot openwrt-lantiq-xrx200-VGV7510KW22BRN-uImage-initramfs;​ bootm</​code>​
 +  - Now you have OpenWrt running from memory
 +  - Create a backup of all mtd devices: <​code>​dd if=/​dev/​mtd0 of=/​tmp/​Boot_Params.dump
 +dd if=/​dev/​mtd1 of=/​tmp/​Boot.dump
 +dd if=/​dev/​mtd2 of=/​tmp/​Configuration.dump
 +dd if=/​dev/​mtd3 of=/​tmp/​Certificate.dump
 +dd if=/​dev/​mtd4 of=/​tmp/​Special_Area.dump
 +dd if=/​dev/​mtd5 of=/​tmp/​Primary_Setting.dump
 +dd if=/​dev/​mtd6 of=/​tmp/​Code_Image_0.dump
 +dd if=/​dev/​mtd7 of=/​tmp/​Code_Image_1.dump</​code>​
 +  - Compare the sizes of the backup files with the ones from the "Flash layout"​ table below
 +  - Copy the dump files to a safe place (over network via scp, using a usb flash drive, etc.)
 +
 +==== u-boot ====
 +
 +The factory-installed bootloader can be replaced by u-boot. This removes another piece of closed-source software from your router.\\
 +**NOTE:** If installing u-boot fails then you need to recover via UART boot, which requires soldering to SMD solder pads!
 +
 +== Install u-boot ==
 +
 +  - Make sure that you have all required files on a TFTP server:
 +    - openwrt-lantiq-vgv7510kw22_nor-u-boot.img
 +    - openwrt-lantiq-xrx200-VGV7510KW22NOR-squashfs.image
 +  - Either use brnboot or "boot via UART" to start u-boot from memory
 +  - Load the new u-boot to memory: <​code>​tftpboot openwrt-lantiq-vgv7510kw22_nor-u-boot.img</​code>​
 +  - Write the new u-boot to flash: <​code>​run write-uboot-nor</​code>​
 +  - reboot the device: <​code>​reset</​code>​
 +
 +== Install OpenWrt from u-boot ==
 +
 +  - Start u-boot (has to be installed on NOR flash already)
 +  - Load the image to memory: <​code>​tftpboot openwrt-lantiq-xrx200-VGV7510KW22NOR-squashfs.image</​code>​
 +  - Erase the flash area where u-boot and it's environment are stored: <​code>​erase 0xb0080000 +e60000</​code>​
 +  - Write the OpenWrt image to flash: <​code>​cp.b $fileaddr 0xb0080000 $filesize</​code>​
 +  - reboot the device: <​code>​reset</​code>​
 +===== Flash layout =====
 +====Default flash layout====
 +This is the default flash layout as reported by the bootloader:
 +<​code>​---------------------------------------
 +    Area            Address ​     Length ​
 +---------------------------------------
 +[0] Boot            0xB0000000 ​    256K
 +[1] Configuration ​  ​0xB0040000 ​    256K
 +[2] Certificate ​    ​0xB0080000 ​    128K
 +[3] Special Area    0xB00A0000 ​    128K
 +[4] Primary Setting 0xB00C0000 ​    128K
 +[5] Code Image 0    0xB00E0000 ​   7680K
 +[6] Code Image 1    0xB0860000 ​   7680K
 +[7] Boot Params ​    ​0xB0FE0000 ​    128K
 +[8] Flash Image     ​0xB0000000 ​   16384K
 +---------------------------------------</​code>​
 +
 +Please note that area/​partition "[8] Flash Image" is the complete flash, so do **never** try to erase or reflash this area. Also don't mess with areas 0, 1, 2, 3, 4 and 7 as you might brick your device.
 +
 +=== Reverting back to stock firmware ===
 +
 +This assumes you took a backup as shown above. The backup files need to be available in the root directory of your TFTP server.
 +
 +In u-boot, first set up your network connection, then:
 +<​code>​
 +protect off all
 +erase all
 +tftpboot Boot.dump
 +cp.b ${loadaddr} B0000000 ${filesize}
 +tftpboot Configuration.dump
 +cp.b ${loadaddr} 0xB0040000 ${filesize}
 +tftpboot Certificate.dump
 +cp.b ${loadaddr} 0xB0080000 ${filesize}
 +tftpboot Special_Area.dump
 +cp.b ${loadaddr} 0xB00A0000 ${filesize}
 +tftpboot Primary_Setting.dump
 +cp.b ${loadaddr} 0xB00C0000 ${filesize}
 +tftpboot Code_Image_0.dump
 +cp.b ${loadaddr} 0xB00E0000 ${filesize}
 +tftpboot Code_Image_1.dump
 +cp.b ${loadaddr} 0xB0860000 ${filesize}
 +tftpboot Boot_Params.dump
 +cp.b ${loadaddr} 0xB0FE0000 ${filesize}
 +</​code>​
 +
 +====Flash layout when using u-boot====
 +| **offset** | **size (hex)** | **size (KiB)** | **content** |
 +| 0x0 | 0x60000 | 384 KiB | u-boot |
 +| 0x60000 | 0x20000 | 128 KiB | uboot-env |
 +| 0x80000 | 0xe60000 | 15744 KiB | firmware ("free space" = 15744 KiB - size of the OpenWrt image) |
 +| 0xfe0000 | 0x20000 | 128 KiB | board_config (contains MAC addresses, wifi calibration data, etc) |
 +
 +==== VDSL Firmware ====
 +As of now (r47959) you will have to select the to be included xdsl firmware manually when compiling/​creating your own image (''​make menuconfig''​ => ''​Firmware''​ => ''​dsl-vrx200-firmware-xdsl-b''​).
 +
 +A list of other firmware versions, including those with vectoring support, can be found here: https://​xdarklight.github.io/​lantiq-xdsl-firmware-info/​.
 +
 +===== Disassembly =====
 +Disassembly is kinda tricky. Note that the "​bubble"​ under the sticker is *not* a screw but merely the sprue hole from the molding process of the plastic case. Here are a few [[https://​www.iter-artificis.de/​o2-router-6431-durch-fritzbox-7390-ersetzen-teil-1-hardware/​|notes on how to disassemble the device (German)]]
 +
 +===== Decrypting the OEM Firmware =====
 +The OEM Firmware (Code Image 0/1) is obfuscated. It can be de-obfuscated using the source code provided at https://​sviehb.wordpress.com/​2011/​09/​06/​reverse-engineering-an-obfuscated-firmware-image-e01-unpacking/​.
 +
 +===== Decrypting configuration backup =====
 +The device'​s configuration can be backupped to (and restored from) a file using the web interface. This file is encrypted, however, it can be decrypted.
 +
 +If your box is running an old firmware (probably before September 2012), you can try to use [[http://​pastebin.com/​AR4t75HR|this java code I stumbled across]]. (German) usage instructions can be found [[http://​www.ip-phone-forum.de/​showthread.php?​t=232799&​page=2&​p=1772424&​viewfull=1#​post1772424|here]]. Please not that this code is intended for the IAD 4421 and not the 6431, but it might work anyhow.
 +
 +If your box is running firmware version 1.01.18 (~September 2012) up to 1.01.22:
 +The config file comes in "​CFG5"​ format, you can use [[http://​hph.name/​303|this great tool by Hanno '​hph'​ Heinrichs]]. Usage instructions,​ feedback and further discussions (in German) can be found [[http://​www.ip-phone-forum.de/​showthread.php?​t=256873|here]].
 +
 +If your box is running firmware 1.01.23b or newer:
 +1. Firmware 1.01.23b introduced the new config file format "​OBC6"​.
 +2. The webinterface censors PPPoE and VoIP login data from the configuration backup file. Though you can still decrypt decrypt it.
 +3. If you want to extract your PPPoE/VoIP data, you need to dump the config directly from the flash as described [[http://​hph.name/​303|here (English)]] and [[http://​www.ip-phone-forum.de/​showthread.php?​t=264942|here (German)]].
 +4. The (static) root password is also censored by the webserver. You can still extract, if you dump the flash as described in step 2.
 +
 +===== Bootlogs =====
 +==== OEM bootlog ====
 +<WRAP bootlog>
 +<​nowiki>​ROM VER: 1.0.5
 +CFG 01
 +Tuning DDR begin
 +DDR Access auto data-eye tuning Rev 0.3a
 +DDR size from 0xa0000000 - 0xa3ffffff
 +DDR check ok... start booting...
 +
 +
 +
 +
 +=======================================================================
 +Wireless ADSL Gateway DANUBE Loader V1.07.07 build Jan 11 2011 16:08:20
 +                    Arcadyan Technology Corporation
 +=======================================================================
 +MXIC MX29GL128EL top boot 16-bit mode found
 +
 +Copying boot params.....DONE
 +
 +
 +Press Space Bar 3 times to enter command mode ...
 +Flash Checking [0] Passed.
 +Image[1] at 0xb00e0000, len:​2124048,​ type:0
 +Image[2] at 0xb02e6c00, len:163210, type:10
 +Image[3] at 0xb030ec00, len:216504, type:11
 +Image[4] at 0xb0343c00, len:234819, type:12
 +Image[5] at 0xb037d400, len:344044, type:60
 +Image[6] at 0xb03d1800, len:387052, type:90
 +Firmware image at 0, ART image at -1
 +
 +Run-up ART Firmware... Fail
 +Back to run-up Normal Firmware...
 +
 +Unzipping firmware [0(5)] at 0x80002000 ... [ZIP 3] [ZIP 1]  done
 +Run-time code running ...
 +
 +In c_entry() function ...
 +install_exception ​
 +Co config = 80048483
 +sys_irq_init ...
 +VR9 is not A21 chip !!!!, ifx_bsp_basic_mps_decrypt bfc01ea4
 +0xbf106a0b : 7f
 +0xbf106a0b : 78
 +0xbf106a0c : 80
 +0xbf106a0c : 80
 +##### _ftext ​     = 0x80002000
 +##### _fdata ​     = 0x80872B90
 +##### __bss_start = 0x80929BDC
 +##### end         = 0x83BC1DE0
 +allocate_memory_after_end>​ len 749644, ptr 0x83bc9de0
 +##### Backup Data from 0x80872B90 to 0x83BC9DE0~0x83C80E2C len 749644
 +##### Backup Data completed
 +##### Backup Data verified
 +[GPIO FLOW] SetGpio() Begin ..
 +
 +Test USB Power ON!!
 +************************ LED all ON
 +led_all_on>​ 0
 +************************ LED all OFF
 +[GPIO FLOW] SetGpio() End.
 +[INIT] System Log Pool startup ...
 +[INIT] MTinitialize ..
 +CPU Clock 500000000 Hz
 +mips_counter_frequency:​250000000
 +r4k_offset: 0x0003d090(250000)
 +init_US_counter : time1 = 91 , time2 = 200127, diff 200036
 +US_counter = 125
 +set to constant US_counter = 112
 + cnt1 2040006 cnt2 2042845, diff 2839
 + cnt1 2886355 cnt2 2888219, diff 1864
 +Runtime code version: 1.01.24
 +System startup...
 +[INIT] Memory COLOR 0, 4048576 bytes ..
 +[INIT] Memory COLOR 1, 524288 bytes ..
 +[INIT] Memory COLOR 2, 8759456 bytes ..
 +
 +rzMemory start: 0x81C7EFFC, end 0x81DDE7FC, size 1439744InitCommSys:​ RESOURCE_BASE = 129, NUMRES = 640
 +InitCommSys:​ EVENT_BASE = 336, NUMEVT = 818
 +InitCommSys:​ MAILBOX_BASE = 6, NUMMBX = 64
 +MXIC MX29GL128EL bottom boot 16-bit mode found
 +Set flash memory layout to Boot Parameters found !!!
 +Bootcode version: V1.07.07
 +Serial number: NSERIALNRN
 +Hardware version: 01
 +Mar 20 2014 18:03:25
 +[BUILD:PIN] PIN:​NSERIALNRN,​ MAC:​00MACADDR00
 +[BUILD-PIN]:​ PIN:​24735193,​ len=8
 +MXIC MX29GL128EL bottom boot 16-bit mode found
 +MXIC MX29GL128EL bottom boot 16-bit mode found
 +decode_config>​ remain buffer len=4906319
 +decomp_buf2buf_impl>​ buffer size *M=4906319
 +Decompression ratio = 10.0
 +Signature matched at offset 360258
 +Add-on new config tail> oldSize:​360288,​ oldCfgSize:​13205,​ adjust length to -1
 +[CONFIG] read_config_from_flash ret=0
 +
 +my CFGVersionMagic = 33343536, old CFGVersionMagic on flash = 33343536
 +my CFGsize = 359392, my CFGDescSize = 40837
 +my Version = 1.01.24, Version on flash= 1.01.25
 +[CONFIG] old cfg version:​[1.01.25],​ [1.1.25.100.4.0]
 +source CFGsize = 360288, CFGDescSize = 41119
 +(oldCfg) Warning! nLen, 401407 > cfg_src_size,​ 373493
 +OldCfgHexSize:​13197
 +Unzipping from 8151EBB8 to 81514B08 ... [ZIP 2] allocate_memory_after_end>​ len 81516, ptr 0x83c80e40
 +done
 +Uncompressed size = 41117
 +Tail1 : END_III_Config_t
 +
 +Size of Old CFG_DESC is :41117!!!
 +useCfgDesc:​1
 +MyCfgHexSize:​13117
 +Unzipping from 815117B0 to 81507818 ... [ZIP 2] done
 +Uncompressed size = 40835
 +My CFGDescSize:​40837
 +useCfgDesc:​1
 +Tail : END_III_Config_t
 +
 +useCfgDesc:​3
 +
 +Restore Config file from ver:​1.01.25!!!
 +
 +[CONFIG] DS_Tail:​[t_ARV752DPW]
 +[CONFIG] load_config ret=1
 +[updateConfig] flash version:​[1.01.25],​ [1.1.25.100]
 +[updateConfig] code version:​[1.01.24],​ [1.1.24.100]
 +Access Network = 3
 +check_WAN_switch returns -1
 +default route: 0.0.0.0
 +[CheckUSBBackConf]Erase the garbage config in usbBackConf_s
 +BufferInit:
 +BUF_HDR_SZ=192 BUF_ALIGN_SZ=20 BUFFER_OFFSET=448
 +BUF_BUFSZ0=576 BUF_BUFSZ1=4352
 +NUM_OF_B0=0 NUM_OF_B1=2400
 +BUF_POOL0_SZ=0 BUF_POOL1_SZ=10905600
 +sizeof(BUFFER0)=768,​sizeof(BUFFER1)=4544
 +*BUF0=0x828d66b8 *BUF1=0x81e6fe98
 +Altgn *BUF0=0x828d66c0 *BUF1=0x81e6fea0
 +End at BUF0:​0x828d66c0,​ BUF1:​0x828d66a0
 +
 +BUF0[0]=0x828d66c0 BUF1[0]=0x81e6fea0
 +
 +buffer0 pointer init OK!
 +buffer1 pointer init OK!
 +[qm_lnk_init] CLOCKHZ=1000 ...
 +CLOCKHZ=1000
 +gConfig.Interface[0].IP_Addr = 127.0.0.1
 +gConfig.Interface[0].Subnet_Mask = 255.255.255.255
 +gConfig.Interface[0].Description = LOCAL_LOOPBACK
 +***** [iput_IpLinkUp] ifno=0, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 0 ip = 127.0.0.1
 +
 +gConfig.Interface[1].IP_Addr = 192.168.1.1
 +gConfig.Interface[1].Subnet_Mask = 255.255.255.0
 +gConfig.Interface[1].Description = LAN
 +[mac_0_init] ifno=1, vlan=0, vid=1, port_mask=0xf,​ mac_0_initialized=0
 +[KERN_INFO]IFX PMU driver, version 1.0.5, (c)2009 Infineon Technologies AG
 +ifx_dma_init_module : 
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615929f module 5 regid 0 regbit 5
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module DMA has been activated 1 times before
 +[map_dma_chan 1576]: dma_chan[0] request_irq 64
 +IrqConnect : IRQ = 64, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[1] request_irq 65
 +IrqConnect : IRQ = 65, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[2] request_irq 66
 +IrqConnect : IRQ = 66, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[3] request_irq 67
 +IrqConnect : IRQ = 67, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[4] request_irq 68
 +IrqConnect : IRQ = 68, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[5] request_irq 69
 +IrqConnect : IRQ = 69, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[6] request_irq 70
 +IrqConnect : IRQ = 70, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[7] request_irq 71
 +IrqConnect : IRQ = 71, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[8] request_irq 72
 +IrqConnect : IRQ = 72, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[9] request_irq 73
 +IrqConnect : IRQ = 73, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[10] request_irq 74
 +IrqConnect : IRQ = 74, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[11] request_irq 75
 +IrqConnect : IRQ = 75, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[12] request_irq 89
 +IrqConnect : IRQ = 89, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[13] request_irq 90
 +IrqConnect : IRQ = 90, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[14] request_irq 91
 +IrqConnect : IRQ = 91, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[15] request_irq 92
 +IrqConnect : IRQ = 92, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[16] request_irq 93
 +IrqConnect : IRQ = 93, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[17] request_irq 62
 +IrqConnect : IRQ = 62, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[18] request_irq 80
 +IrqConnect : IRQ = 80, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[19] request_irq 85
 +IrqConnect : IRQ = 85, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[20] request_irq 128
 +IrqConnect : IRQ = 128, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[21] request_irq 129
 +IrqConnect : IRQ = 129, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[22] request_irq 130
 +IrqConnect : IRQ = 130, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[23] request_irq 131
 +IrqConnect : IRQ = 131, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[24] request_irq 132
 +IrqConnect : IRQ = 132, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[25] request_irq 133
 +IrqConnect : IRQ = 133, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[26] request_irq 134
 +IrqConnect : IRQ = 134, Handler = 0x8042F2BC
 +[map_dma_chan 1576]: dma_chan[27] request_irq 135
 +IrqConnect : IRQ = 135, Handler = 0x8042F2BC
 +ifx_dma_init_module : g_desc_list 80d28c00
 +[KERN_INFO]IFX DMA driver, version ifxmips_dma_core.c:​v1.0.4 ​
 +,(c)2009 Infineon Technologies AG
 +ifx_gpio_init() !!!
 +ifx_gpio_pre_init() !!!
 +[KERN_INFO]IFX GPIO driver, version 1.2.10, (c)2009 Infineon Technologies AG
 +[KERN_INFO]Infineon Technologies RCU driver version 1.1.2 
 +[amazon_s_eth_init] Loading A5 (MII0/1 + ATM) driver ......
 +[amazon_s_eth_init] gPPE_Start_Module=0x1,​ gPPE_HAL_Start_Module=0x0
 +
 +a5 wanitf case 1 g_eth_wan_mode=0
 +
 +a5 final g_wan_itf=0xc0
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 9 regid 0 regbit 9
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module DSL-DFE has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 13 regid 0 regbit 13
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module AHBS has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 19 regid 0 regbit 19
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-SSL01 has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 21 regid 0 regbit 21
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-TC has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 22 regid 0 regbit 22
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-EMA has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 23 regid 0 regbit 23
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-DPLUSM has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 24 regid 0 regbit 24
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-DPLUSS has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 28 regid 0 regbit 28
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module SWITCH has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc615909f module 29 regid 0 regbit 29
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-TOP has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 18 regid 0 regbit 18
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module PPE-QSB has been activated 1 times before
 +[a5 alloc_dma] pre_alloc_desc_total_num=704,​ line 6193
 +[turn_on_dma_rx] a5, line 4559
 +[turn_on_dma_rx] a5, line 4559
 +IrqConnect : IRQ = 87, Handler = 0x80457CD4
 +IrqConnect : IRQ = 88, Handler = 0x80457DDC
 +Succeeded!
 +PPE datapath driver info:
 +  Version ID: 64.3.7.1.0.1.4
 +  Family ​   : VR9
 +  DR Type   : Normal Data Path | Indirect-Fast Path
 +  Interface : MII0 | MII1 | ATM
 +  Mode      : Routing
 +  Release ​  : 0.1.4
 +PPE firmware info:
 +  Version ID: 7.2.4.6.1.17
 +  Family ​   : VR9
 +  FW Type   : Acceleration
 +  Interface : MII0/1 + ATM
 +  Mode      : Bridging + IPv4 Routing
 +  Release ​  : 1.17
 +IFX SWITCH API, Version 1.1.6.7
 +IFX_ETHSW_Open() !!!
 +[KERN_INFO]SWAPI:​ Registered character device [switch_api] with major no [81]
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 29 regid 0 regbit 29
 +ifx_pmu_set:​ Module PPE-TOP has been activated 2 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 23 regid 0 regbit 23
 +ifx_pmu_set:​ Module PPE-DPLUSM has been activated 2 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 24 regid 0 regbit 24
 +ifx_pmu_set:​ Module PPE-DPLUSS has been activated 2 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 28 regid 0 regbit 28
 +ifx_pmu_set:​ Module SWITCH has been activated 2 times before
 +Switch API: PCE MicroCode loaded !!
 +IFX_ETHSW_IOCTL_WrapperInit() !!!
 +chip_id 101c0083 chip_id 1c0
 +Switch Auto Polling value = 0
 +[KERN_ERR ] GPHY FW load for A1x !!
 +vr9_gphy_gpio_init : Config GPIO3 clock !!!
 +IF_CLK = 10e10008
 +BSP_GPIO_P0_ALTSEL0 00002080 BSP_GPIO_P0_ALTSEL1 000000a0 0000fca4 0000fea4
 +BSP_GPIO_P1_ALTSEL0 00008580 BSP_GPIO_P1_ALTSEL1 00000000 0000b1b8 0000b1b8
 +BSP_GPIO_P2_ALTSEL0 00001e03 BSP_GPIO_P2_ALTSEL1 00003000 0000bb02 0000bf02
 +BSP_GPHY0_Cfg 1fe70000 BSP_GPHY1_Cfg 1fe70000
 +ifx_pmu_set:​ PMU_PWDCR0 = 0xc611909f module 28 regid 0 regbit 28
 +ifx_pmu_set:​ Module SWITCH has been activated 3 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x8611909f module 30 regid 0 regbit 30
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module GPHY has been activated 1 times before
 +Switch Auto Polling value = 0
 +vr9_gphy_reset() !!!
 +GPHY FIRMWARE LOAD SUCCESSFULLY AT ADDR : 7e0000, gphy_fw_dma=0x807d7650
 +[KERN_INFO] IFX GPHY driver FE Mode, version ifxmips_vr9_gphy:​ V0.9 - Firmware: 107
 +
 +Disable all FE ports...
 +
 +power-down WAN PHY
 +[disable_vrx_switch_ports] sizeof(SWITCH_PORT)/​sizeof(int)=5
 +[disable_vrx_switch_ports] cmd_str=PortCfgSet 0 0 0 0 0 0 0 1 255 0 0
 +[disable_vrx_switch_ports] cmd_str=PortCfgSet 2 0 0 0 0 0 0 1 255 0 0
 +[disable_vrx_switch_ports] cmd_str=PortCfgSet 3 0 0 0 0 0 0 1 255 0 0
 +[disable_vrx_switch_ports] cmd_str=PortCfgSet 4 0 0 0 0 0 0 1 255 0 0
 +[disable_vrx_switch_ports] cmd_str=PortCfgSet 5 0 0 0 0 0 0 1 255 0 0
 +[enable_vrx_switch_ports] sizeof(SWITCH_PORT)/​sizeof(int)=4
 +[enable_vrx_switch_ports] cmd_str=PortCfgSet 2 1 0 0 0 0 0 0 255 0 0
 +[enable_vrx_switch_ports] cmd_str=PortCfgSet 3 1 0 0 0 0 0 0 255 0 0
 +[enable_vrx_switch_ports] cmd_str=PortCfgSet 4 1 0 0 0 0 0 0 255 0 0
 +[enable_vrx_switch_ports] cmd_str=PortCfgSet 5 1 0 0 0 0 0 0 255 0 0
 +
 +power-down WAN PHY
 +[switch_enable_igmp_snooping] gSetting.IGMP_Snooping=1
 +Error: the prot was not in the member
 +Error: the prot was not in the member
 +MulticastRouterPortAdd 6
 +
 +===AccessNetworkDiscovery Enabled, normal switch setup is applied===
 +MAC Address: 00:​de:​ad:​be:​ef:​33
 +
 +Enable all FE ports...
 +***** [iput_IpLinkUp] ifno=1, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 1 ip = 192.168.1.1
 +
 +gConfig.Interface[2].IP_Addr = 0.0.0.0
 +gConfig.Interface[2].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[2].Description = WLAN
 +ifx_pci_startup !!!
 +[/​home/​jason/​hansenet_vr9_V23/​source/​firmware/​hardware/​InfVR9_v5.1/​pci/​ifxmips_pci.c dump_cs 579]: Dumping b7007000
 +b7007000: 35921814
 +b7007004: 04300000
 +b7007008: 02800000
 +b700700c: 00000000
 +b7007010: ffff0000
 +b7007014: 00000000
 +b7007018: 00000000
 +b700701c: 00000000
 +b7007020: 00000000
 +b7007024: 00000000
 +b7007028: ffffffff
 +b700702c: 35921814
 +b7007030: 00000000
 +b7007034: 00000040
 +b7007038: 00000000
 +b700703c: 04020100
 +b7007040: c9cb0001
 +b7007044: 00000000
 +b7007048: 00000000
 +b700704c: 00000000
 +b7007050: 00000000
 +b7007054: 00000000
 +b7007058: 00000000
 +b700705c: 00000000
 +b7007060: 00000000
 +b7007064: 00000000
 +b7007068: 00000000
 +b700706c: 00000000
 +b7007070: 00000000
 +b7007074: 00000000
 +b7007078: 00000000
 +b700707c: 00000000
 +b7007080: 00000000
 +b7007084: 00000000
 +b7007088: 00000000
 +b700708c: 00000000
 +b7007090: 00000000
 +b7007094: 00000000
 +b7007098: 00000000
 +b700709c: 00000000
 +b70070a0: 00000000
 +b70070a4: 00000000
 +b70070a8: 00000000
 +b70070ac: 00000000
 +b70070b0: 00000000
 +b70070b4: 00000000
 +b70070b8: 00000000
 +b70070bc: 00000000
 +b70070c0: 00000000
 +b70070c4: 00000000
 +b70070c8: 00000000
 +b70070cc: 00000000
 +b70070d0: 00000000
 +b70070d4: 00000000
 +b70070d8: 00000000
 +b70070dc: 00000000
 +b70070e0: 00000000
 +b70070e4: 00000000
 +b70070e8: 00000000
 +b70070ec: 00000000
 +b70070f0: 00000000
 +b70070f4: 00000000
 +b70070f8: 00000000
 +b70070fc: 00000000
 +
 +Found 00:00 [15d1/0019] 000280 00
 +[KERN_ERR]No hose for PCI dev 00:00.0!
 +Found 00:70 [1814/3592] 000280 00
 +[KERN_ERR]No hose for PCI dev 00:0e.0!
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FPI_ERR_TAG_REG = 0000000f
 +PCI_CR_PCI_IRR_REG = 00000000
 +PCI_CR_PCI_IRA_REG = 00000000
 +PCI_CR_PCI_IRM_REG = 00000000
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_PCI_IRR_REG = 00000000
 +IrqConnect : IRQ = 49, Handler = 0x8046D5A8
 +PCI_irhan : ==========================================
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FPI_ERR_TAG_REG = 0000000f
 +PCI_CR_PCI_IRR_REG = 00000001
 +PCI_CR_PCI_IRA_REG = 00000001
 +PCI_CR_PCI_IRM_REG = fbffffff
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_PCI_IRR_REG = 00000000
 +PCI_irhan : ==========================================
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FPI_ERR_TAG_REG = 0000000f
 +PCI_CR_PCI_IRR_REG = 00000000
 +PCI_CR_PCI_IRA_REG = 00000000
 +PCI_CR_PCI_IRM_REG = fbffffff
 +PCI_CR_PCI_FPI_ERR_ADDR_REG = ffffffff
 +PCI_CR_FCI_PCI_ERR_ADDR_REG = ffffffff
 +PCI_CR_PCI_IRR_REG = 00000000
 +setPCI_int : PCI_CR_PCI_IRR_REG = 00000000
 +setPCI_int : PCI_CR_PCI_IRM_REG = fbffffff
 +[KERN_INFO]IFX PCI host controller driver, version 1.1.3, (c)2009 Infineon Technologies AG
 +[HWLAN] ifno=2 irno=7 port=0x00000000
 +===> rt2860_probe
 +--> RTMPAllocAdapterBlock
 +RTMP_ADAPTER_mem : 80bffd08, sizeof(RTMP_ADAPTER) 416496
 +
 +
 +=== pAd = FFFFFFFF80BFFD08,​ size = 416496 ===
 +
 +<-- RTMPAllocAdapterBlock,​ Status=0
 +pAd->​CSRBaseAddress =0xffffffffb8000000
 +AP Driver version-2.2.5.0
 +NVM is EEPROM
 +Allocate a net device with private data size=0!
 +RtmpOSNetDevAttach()--->​
 +<​---RtmpOSNetDevAttach(),​ ret=0
 +<=== rt2860_probe
 +***** [iput_IpLinkUp] ifno=2, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 2 ip = 192.168.1.1
 +
 +gConfig.Interface[3].IP_Addr = 0.0.0.0
 +gConfig.Interface[3].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[3].Description = PTM1
 +VCC entry 1 is not active!!
 +Interface 3 ip = 0.0.0.0
 +
 +gConfig.Interface[4].IP_Addr = 0.0.0.0
 +gConfig.Interface[4].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[4].Description = PTM2
 +[sar_0_init] ifno=4, T_WAN_INT=3,​ sar_init=0, g_atm_priv_data.max_connections=15
 +ATM_UBR
 +[ppe_open] g_atm_priv_data.connection_table=0
 +[turn_on_dma_rx] a5, line 4559
 +[ppe_open] (1.32): conn = 0, f_enable_irq=1
 +[sar_0_init] index=0, ifno=4, f_llc=1
 +[mpoa_setup] mpoa_type=0,​ f_llc=1
 +[sar_0_init] Init SAR ifno:4 g_atm_vcc[0] CONN:0 VPI/​VCI:​1/​32 PORT:0
 +[sar_0_init] sar ifno: 4, flag: 0x00000200, up, sar_init=1
 +SAR ifno=4, mac_inc=3, cmpaddr Address: 00:​de:​ad:​be:​ef:​33
 +SAR ifno=4 MAC Address: 00:​de:​ad:​be:​ef:​36
 +This vid exists
 +IOCTL failed for ioctl command 0x40084512, returned -1
 +WARNING: (MAC Address search Not Found) /​home/​jason/​hansenet_vr9_V23/​source/​firmware/​hardware/​InfVR9_v5.1/​switch_core/​v5.1/​switch_api/​ifx_ethsw_flow_api.c:​IFX_FLOW_MAC_TableEntryRemove:​1359 ​
 +Interface 4 ip = 0.0.0.0
 +
 +gConfig.Interface[11].IP_Addr = 0.0.0.0
 +gConfig.Interface[11].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[11].Description = PPPoE1
 +IFLNK_PPPOE init : (Linkp)ifno = 11 idx = 2
 +IFLNK_PPPOE init : (Driverp)ifno = 11 idx = 4
 +[0] Allocate resource 129, FreeResource = 1
 +Allocate ppp mutex (129,0,0) for IF 11 (PPPoE1)
 +
 +pppInit> set (PPPShutdownRequest[ifno] = 0)
 +[change_phase] start to release the allocated memory in if_table[0].ppp_p->​state
 +[pppoe_init]
 +Interface 11 ip = 0.0.0.0
 +
 +gConfig.Interface[12].IP_Addr = 0.0.0.0
 +gConfig.Interface[12].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[12].Description = PPPoE2
 +IFLNK_PPPOE init : (Linkp)ifno = 12 idx = 2
 +IFLNK_PPPOE init : (Driverp)ifno = 12 idx = 4
 +[0] Allocate resource 130, FreeResource = 2
 +Allocate ppp mutex (130,0,0) for IF 12 (PPPoE2)
 +
 +pppInit> set (PPPShutdownRequest[ifno] = 0)
 +[change_phase] start to release the allocated memory in if_table[0].ppp_p->​state
 +[pppoe_init]
 +[PPPoE]gInitOk==1 , So Not Do pppoe_init
 +Interface 12 ip = 0.0.0.0
 +
 +gConfig.Interface[20].IP_Addr = 0.0.0.0
 +gConfig.Interface[20].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[20].Description = WDS1
 +[HWLAN] ifno=20 irno=7 port=0x00000000
 +***** [iput_IpLinkUp] ifno=20, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 20 ip = 192.168.1.1
 +
 +gConfig.Interface[21].IP_Addr = 0.0.0.0
 +gConfig.Interface[21].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[21].Description = WDS2
 +[HWLAN] ifno=21 irno=7 port=0x00000000
 +***** [iput_IpLinkUp] ifno=21, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 21 ip = 192.168.1.1
 +
 +gConfig.Interface[22].IP_Addr = 0.0.0.0
 +gConfig.Interface[22].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[22].Description = WDS3
 +[HWLAN] ifno=22 irno=7 port=0x00000000
 +***** [iput_IpLinkUp] ifno=22, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 22 ip = 192.168.1.1
 +
 +gConfig.Interface[23].IP_Addr = 0.0.0.0
 +gConfig.Interface[23].Subnet_Mask = 0.0.0.0
 +gConfig.Interface[23].Description = WDS4
 +[HWLAN] ifno=23 irno=7 port=0x00000000
 +***** [iput_IpLinkUp] ifno=23, link_type:​12
 +TRAP(linkUp) : send ok!
 +Interface 23 ip = 192.168.1.1
 +
 +ruleCheck()>​ Group: 0,  Error: Useless rule index will be truncated, from idx:1
 +ruleCheck()>​ Group: 1,  Error: Useless rule index will be truncated, from idx:22
 +ruleCheck()>​ Group: 2,  Error: Useless rule index will be truncated, from idx:0
 +CBAC rule format check succeed !!
 +reqCBACBuf()>​ init match pool, Have: 1000
 +Memory Address: 0xffffffff83b53504 ~ 0xffffffff83b5a280
 +reqCBACBuf()>​ init timeGap pool, Have: 10000
 +Memory Address: 0xffffffff83b5a280 ~ 0xffffffff83b8afd4
 +reqCBACBuf()>​ init sameHost pool, Have: 2000
 +Memory Address: 0xffffffff83b8afd4 ~ 0xffffffff83b9a9f4
 +CBAC rule pool initialized !!
 +[init_if] local_if_mask=0xf80007
 +[init_if] local_wiredif_mask=0x80002
 +[init_if] local_wirelessif_mask=0xf00004
 +[init_if] localorVPN_if_mask=0xf80007
 +[nd_InitNDResp] The first RandAdvInterval[0] = 453 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[1] = 281 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[2] = 408 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[3] = 213 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[4] = 592 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[5] = 511 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[6] = 350 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[7] = 201 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[8] = 519 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[9] = 524 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[10] = 489 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[11] = 405 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[12] = 360 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[13] = 412 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[14] = 246 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[15] = 390 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[16] = 579 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[17] = 529 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[18] = 434 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[19] = 331 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[20] = 492 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[21] = 417 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[22] = 545 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[23] = 410 seconds.
 +[nd_InitNDResp] The first RandAdvInterval[24] = 218 seconds.
 +[nd_InitNDResp] do nd_RegisterHandler()...
 +[ndevt_RegisterHandler] insert_enlist_entry()...
 +[ndevt_RegisterHandler] insert_enlist_entry()...
 +[ndevt_RegisterHandler] insert_enlist_entry()...
 +[ndevt_RegisterHandler] insert_enlist_entry()...
 +[v6tunnel_init] enable=0
 +[init_connv6] init complete
 +Init NAT data structure
 +RUNTASK id=2 if_task if0...
 +RUNTASK id=3 if_task if1...
 +RUNTASK id=4 if_task if2...
 +RUNTASK id=5 if_task if3...
 +RUNTASK id=6 if_task if4...
 +RUNTASK id=7 if_task if20...
 +RUNTASK id=8 if_task if21...
 +RUNTASK id=9 if_task if22...
 +RUNTASK id=10 if_task if23...
 +RUNTASK id=11 timer_task...
 +RUNTASK id=12 conn_mgr...
 +RUNTASK id=13 main_8021x...
 +Build Day = Mar 20 2014
 +RUNTASK id=14 saveRandomSeedTask...
 +[VFS_init] Start...
 +[VFS_init] vfsState:1
 +vfs_codepage_init() TimeZone:​23,​ vfs_cp_idx:​23,​ vfs_cp_ID:5
 +fat_codePageInit() TimeZone:​23,​ codePage:​CP850,​ cPID:5, cpSize:256, toUpSize:30
 +ntfs_codepage timezone:​23,​ lan= 0
 +ntfs_codePageInit() TimeZone:​23,​ codePage:5
 +==[vfs_register_filesystem]============================
 +list size:​1, ​ Method:​0x8087f234
 +  1) Type:0xfc, Name:​BRN-VFS
 +=================================================================
 +[VFS_init] VFS ROOT FS init OK
 +==[vfs_register_filesystem]============================
 +list size:​7, ​ Method:​0x8087f474
 +  1) Type:0x01, Name:FAT12
 +  2) Type:0x04, Name:FAT16
 +  3) Type:0x06, Name:FAT16
 +  4) Type:0x0b, Name:FAT32
 +  5) Type:0x0c, Name:FAT32
 +  6) Type:0x0e, Name:FAT16
 +  7) Type:0x81, Name:Minix
 +=================================================================
 +[VFS_init] FAT init OK
 +==[vfs_register_filesystem]============================
 +list size:​1, ​ Method:​0x80880048
 +  1) Type:0x07, Name:​NTFS/​HPFS
 +=================================================================
 +[VFS_init] NTFS init OK
 +[VFS_init]-[vfs_mount_root] Start...
 +[VFS_init]-[vfs_mount_root] Init <​root>​ OK...
 +[VFS_init]-[vfs_mount_root] Init <dev> OK...
 +[VFS_init]-[vfs_mount_root] Init <mnt> OK...
 +[0-START]=========================================
 +  Node 000-[\], ​ DIR, MountFlag:​0x00
 +[0-END]===========================================
 +  [1-START]=========================================
 +    Node 001-[dev], ​ DIR, MountFlag:​0x00
 +  [1-END]===========================================
 +  [1-START]=========================================
 +    Node 002-[mnt], ​ DIR, MountFlag:​0x00
 +  [1-END]===========================================
 +dump_inode() freeCnt:77, usedCnt:3
 +[USB-INIT] main() ====== call UsbSysInit() ... 
 +[USB-INIT] main() ====== after call UsbSysInit() ​
 +RUNTASK id=17 period_task...
 +
 +========== ADSL Modem initialization OK ! ======
 +
 +[Dhcpd_Start]
 +RUNTASK id=18 dhcp_daemon...
 +RUNTASK id=19 ssh_telnetd_main...
 +main()> usb:1, ftp:1
 +RUNTASK id=20 ftpd_main...
 +Primary image: 0, flash area 5
 +found signature: 78h 56h 34h 12h
 +ulImgLens=2124048,​ LENGTH[5]-12=7864308,​ type:0
 +length checking OK
 +[0]2 find End at 0xFFFFFFFFB02E6800 len=2124048,​ type=0
 +found signature: 78h 56h 34h 12h
 +ulImgLens=163210,​ LENGTH[5]-12=7864308,​ type:10
 +length checking OK
 +[1]2 find End at 0xFFFFFFFFB030E800 len=163210, type=10
 +found signature: 78h 56h 34h 12h
 +ulImgLens=216504,​ LENGTH[5]-12=7864308,​ type:11
 +length checking OK
 +[2]2 find End at 0xFFFFFFFFB0343800 len=216504, type=11
 +found signature: 78h 56h 34h 12h
 +ulImgLens=234819,​ LENGTH[5]-12=7864308,​ type:12
 +length checking OK
 +[3]2 find End at 0xFFFFFFFFB037D000 len=234819, type=12
 +---[ LZMA head start in 0xFFFFFFFFB037D400 ]---
 +found signature: 78h 56h 34h 12h
 +ulImgLens=344044,​ LENGTH[5]-12=7864308,​ type:60
 +length checking OK
 +[4]2 find End at 0xFFFFFFFFB03D1400 len=344044, type=60
 +---[ LZMA head start in 0xFFFFFFFFB03D1800 ]---
 +found signature: 78h 56h 34h 12h
 +ulImgLens=387052,​ LENGTH[5]-12=7864308,​ type:90
 +length checking OK
 +[5]2 find End at 0xFFFFFFFFB0430000 len=387052, type=90
 +Image[1] at 0xB00E0000, len=2124048,​ type=0
 +Image[2] at 0xB02E6C00, len=163210, type=10
 +Image[3] at 0xB030EC00, len=216504, type=11
 +Image[4] at 0xB0343C00, len=234819, type=12
 +Image[5] at 0xB037D400, len=344044, type=60
 +Image[6] at 0xB03D1800, len=387052, type=90
 +[get_web_address] Web-0: ​ addr:​0xb02e6c00,​ len:163210, type:10
 +[get_web_address] Web-1: ​ addr:​0xb030ec00,​ len:216504, type:11
 +[get_web_address] Web-2: ​ addr:​0xb0343c00,​ len:234819, type:12
 +getUnZipFileLength:​ [ZIP 3]
 +getUnZipFileLength:​ [ZIP 1]
 +Unzipping from B02E6C00 to 83E9F800 ... [ZIP 3] [ZIP 2] done
 +Uncompressed size = 328752
 +getUnZipFileLength:​ [ZIP 3]
 +getUnZipFileLength:​ [ZIP 1]
 +[absread] flash_init: pfs image found at ffffffffb030ec00,​ size is 1189196 bytes
 +Unzipping from B030EC00 to 83D7D000 ... [ZIP 3] [ZIP 2] done
 +Uncompressed size = 1189196
 +ht_ListenPort_add2 (192.168.1.1,​ 80, 0) Success
 +RUNTASK httpd...
 +RUNTASK id=23 dnsproxy...
 +startNBIOSTask()...
 +RUNTASK id=24 nbios_main...
 +RUNTASK id=25 padmin_task_entry...
 +RUNTASK id=26 dhcpd_mgmt_task...
 +UPnP task run-up... upnpFunc:1
 +UPNP Device initialize success! slot=27
 +update_device_OUI:​ OUI_str=880355
 +[0] Allocate mailbox 6
 +[0] Allocate mailbox 7
 +FirstUseDate:​2014-06-02T18:​01:​35
 +WPS_Main.....................................
 +RUNTASK id=30 wscmain...
 +RUNTASK id=31 wsc_Send_eap_packet...
 +RUNTASK id=32 wsc_Send_UPNP_packet...
 +RUNTASK id=33 WSC_WaitUserAction_Task...
 +UART RX Input
 +RUNTASK id=34 xdsl_mgmt_task...
 +[0] Allocate resource 131, FreeResource = 3
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x8611909f module 8 regid 0 regbit 8
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module SPI has been activated 1 times before
 +[KERN_INFO]IFX SSC driver, version 2.1.3, (c)2009 Infineon Technologies AG
 +
 +call ifx_ssc_init() = 0
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x8611809f module 12 regid 0 regbit 12
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module GPTC has been activated 1 times before
 +[KERN_INFO]gptu:​ totally 6 16-bit timers/​counters
 +IrqConnect : IRQ = 118, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 118
 +IrqConnect : IRQ = 119, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 119
 +IrqConnect : IRQ = 120, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 120
 +IrqConnect : IRQ = 121, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 121
 +IrqConnect : IRQ = 122, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 122
 +IrqConnect : IRQ = 123, Handler = 0x80430E84
 +[KERN_INFO]gptu:​ succeeded to request irq 123
 + ​do_div error ???
 +[KERN_INFO]ifx_gptu_timer_set(4,​ 16000), divider = 15625000
 +request_timer(4,​ 0x0000010D, 15625000)
 +[KERN_INFO]request_timer(4,​ 0x0000010D, 15625000)...ifx_pmu_set:​ PMU_PWDCR0 = 0x8611809f module 12 regid 0 regbit 12
 +ifx_pmu_set:​ Module GPTC has been activated 2 times before
 +successful!
 +Init timer (4) - OK
 +RUNTASK id=36 apAppInit...
 +[setNextBBIDisconnectTime]:​ Enter!! type = 0
 +[setNextBBIDisconnectTime]:​ Old next disconnect time to 02:00
 +[setNextBBIDisconnectTime]:​ Update next disconnect time to 02:59
 +RUNTASK id=39 pppFailBackPeriodCheckTask()...
 +RUNTASK id=40 pid_cc_err_stats_task...
 +Access Network Discovery mechanism is enabled!
 +
 +>>>>>​ ACCESS NETWORK DISCOVERY already succeeded, accessnetwork = 3 <<<<<​
 +Starting Multitask...
 +[USB] UsbSPoolArray:​ 80D32610H ~ 80E3340F, UsbSPool:​80D32620
 +[USB] UsbMPoolArray:​ 80E33410H ~ 80E3532F, UsbMPool:​80E33420
 +[USB] UsbLPoolArray:​ 80E35330H ~ 80E8D34F, UsbLPool:​80E35340
 +[USB] Small  Un-Cached Memory(5977):​ 80D32620 ~ 80E3334F
 +[USB] Medium Un-Cached Memory(30): 80E33420 ~ 80E3521F
 +[USB] Large  Un-Cached Memory(21): 80E35340 ~ 80E8933F
 +setUsbPciInfo() cpu_to_usb_addr_shift[3]:​0x00000000,​ usb_to_cpu_addr_shift[3]:​0x00000000
 +usb_pci_probe() Found Synopsis OTG-1, baseAddr:​0xbe101000
 +setUsbPciInfo() cpu_to_usb_addr_shift[4]:​0x00000000,​ usb_to_cpu_addr_shift[4]:​0x00000000
 +usb_pci_probe() Found Synopsis OTG-2, baseAddr:​0xbe106000
 +usb_power_set() Previous power off:0, current time:0
 +usb_power_set(1) min time delay:6000, current delay:0
 +usb_power_set() Need delay:6500 **********15
 +[ipv6_autocfg_task] If(1)
 +[ipv6_autocfg_task] If(1) ready
 +[ipv6_setup_interface] ifno=1, if_table[1].ipv6_UnicastAddr=0x0,​ if_table[1].ipv6_MulticastAddr=0x830af340
 +ifno2dot1x_if[2]=0
 +dot1x_wireless_if_mask=0x4
 +Lantiq TAPI device driver, version 3.11.0.3, (c) 2001-2010 Lantiq Deutschland GmbH
 +[41] Allocate mailbox 8
 +TAPI_init_task_queue:​ enter loop..8
 +if_task[task_id=5]>​ if#3 closed ​
 +[37] Allocate mailbox 9
 +[37] Allocate mailbox 10
 +[37] Allocate mailbox 11
 +[37] Allocate mailbox 12
 +[37] Allocate mailbox 13
 +[37] Allocate mailbox 14
 +[37] Allocate mailbox 15
 +[37] Allocate mailbox 16
 +[37] Allocate mailbox 17
 +[37] Allocate mailbox 18
 +[37] Allocate mailbox 19
 +[37] Allocate mailbox 20
 +[37] Allocate mailbox 21
 +[37] Allocate mailbox 22
 +[37] Allocate mailbox 23
 +[37] Allocate mailbox 24
 +[37] Allocate resource 132, FreeResource = 4
 +ifx_tapi_KPI_IngressThread() check: [TAPIkpi_in],​805E3610,​pid=0,​ 5
 +##### [IFXOS_ThreadInit] name <​TAPIkpi_in>,​ tid 5, nStackSize=8000
 +[37] Allocate resource 133, FreeResource = 5
 +Lantiq MIPS34KEc MPS driver, version 2.2.0.3, (c) 2006-2010 Lantiq Deutschland GmbH
 +request_timer(2,​ 0x000001AE, 1)
 +[KERN_INFO]request_timer(2,​ 0x000001AE, 1)...successful!
 +ifx_mps_init_gpt() - calibration done, waited 293 loops!
 +ifx_mps_init_structures request_irq 1 146
 +IrqConnect : IRQ = 146, Handler = 0x804A5D34
 +ifx_mps_init_structures request_irq 2 147
 +IrqConnect : IRQ = 147, Handler = 0x804A5E70
 +ifx_mps_init_structures request_irq 3 0 142
 +IrqConnect : IRQ = 142, Handler = 0x804A5F18
 +ifx_mps_init_structures request_irq 3 1 143
 +IrqConnect : IRQ = 143, Handler = 0x804A5F18
 +ifx_mps_init_structures request_irq 3 2 144
 +IrqConnect : IRQ = 144, Handler = 0x804A5F18
 +ifx_mps_init_structures request_irq 3 3 145
 +IrqConnect : IRQ = 145, Handler = 0x804A5F18
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 1 
 +
 +--> vinax_task() started ...
 +<​6>​ADM5120 Board Driver, Version 0.0.4.1
 +<​6>​(c) Copyright 2003, Infineon Technologies AG
 +Board_InitIrq!
 +Board_InitIrq!
 +--> drv_danube_rb_init() finished ...
 +MEI CPE Driver, Version 1.0.2
 +(c) Copyright 2009, Infineon Technologies AG
 +### MEI CPE - MEI CPE - MEI CPE - MEI CPE ###
 +Using major number 0
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x8611809f module 9 regid 0 regbit 9
 +ifx_pmu_set:​ Module DSL-DFE has been activated 2 times before
 +--> drv_vinax_init() finished ...
 +--> DSL_ModuleInit() finished ...
 +-->VINAX control device open finished ...
 +T >> init dev: base address = 0xBE116000
 +T >> parse: opt value = 99
 +T >> open device: /​dev/​mei_cpe/​0.
 +T >> ioct(FIO_MEI_DEV_INIT):​ baseaddr = 0xBE116000, IRQ = 99
 +MEI_Ioctl called
 +FIO_MEI_DEV_INIT case
 +pInitDev->​meiBaseAddr=0xbe116000
 +hwVers=0x230
 +MEI_DRV[00]:​ INIT DEVICE - NO INTERUPTS --> ACTIVE POLL MODE
 +MEI_DRV[00]:​ Start Driver Control Thread
 +##### [IFXOS_ThreadInit] name <​VnxCtrl>,​ tid 42, nStackSize=10000
 +T >> Line = 00 Return = 0
 +T >> MEI DBG WrOff: 0x000E2000
 +T >> MEI DBG Dest: 0x00000002
 +T >> Value: 0x00000001
 +T >> open device: /​dev/​mei_cpe/​0.
 +T >> ioct(.., FIO_MEI_DBG_WRITE,​ ..): off=0x000E2000,​ des=2, count=1
 +T >> DBG Dest[2] Write[0x000E2000] = 0x8147A3C0
 +MEI_Ioctl called
 +T >> DONE - ioct(.., FIO_MEI_DBG_WRITE,​ ..)
 +T >> Line = 00 Return = 0
 +--> drv_vinax_cfg() finished ...
 +[DSL_CPE_ArgParse] fw1 name=
 +Image[1] at 0xB00E0000, len=2124048,​ type=0
 +Image[2] at 0xB02E6C00, len=163210, type=10
 +Image[3] at 0xB030EC00, len=216504, type=11
 +Image[4] at 0xB0343C00, len=234819, type=12
 +Image[5] at 0xB037D400, len=344044, type=60
 +Image[6] at 0xB03D1800, len=387052, type=90
 +[get_datapump_address] Datapump for Annex A0:-1, B0:4, C0:-1
 +[get_datapump_address] Datapump for Annex A1:-1, B1:-1, C1:-1
 +[get_datapump_address] r_img=4, t_img=6
 +Unzip VDSL2 firmware ...
 +Unzipping from B037D400 to 8398F000 ... [ZIP 2] ht_ListenPort_addV6:​ if_addr:​FE80:​0000:​0000:​0000:​0000:​0000:​0000:​0001,​ port=80, isSecured=0
 +Add ListenPort for V6 successfully(port 80)
 +Advertising(Periodly Sending RA): On 
 +[ipv6_autocfg_task] run RFC_6204_WPD_4_task() successfully.
 +[ipv6_autocfg_task] If(2)
 +[ipv6_autocfg_task] If(2) ready
 +[ipv6_setup_interface] ifno=2, if_table[2].ipv6_UnicastAddr=0x0,​ if_table[2].ipv6_MulticastAddr=0x830afa00
 +[nd_resp.c nd_Tick] Tick! ifno=1, 1 seconds is up, send one ND Router Advertisement
 +[nd_Tick] ifno=1, Next RandAdvInterval = 16 seconds
 +done
 +Uncompressed size = 760888
 +DSL_CPE_Open called
 +DSL_DRV_Open called
 +DSL_DRV_HandleInit called
 +DSL_CPE: Device /​dev/​dsl_cpe_api/​0 opened successfully
 +DSL_FIO_VERSION_INFORMATION_GET=0xc0247204 in control
 +DSL_FIO_INSTANCE_CONTROL_SET=0xc00c7224 in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_FIO_EVENT_STATUS_MASK_CONFIG_SET=0xc00c721d in control
 +DSL_CPE: Firmware WHAT String1: V_5.3.4.A.1.6
 +DSL_CPE: Firmware AppType: 6
 +DSL_CPE: Firmware WHAT String2: 5.3.5.9.0.2
 +DSL_CPE: Firmware AppType: 2
 +DSL_CPE: Firmware features (vcpe_hw.bin):​ 0x6
 +nFwFeatures1 = 6
 +ANNEX B in DSL_CPE_DeviceInit
 +
 +deciding mode, vdsl=0, adsl=1
 +
 +adsl mode only, disable all VDSL XTSE bits
 +pData->​data.pFirmware=0x8398f000
 +pData->​data.nFirmwareSize=0xb9c38
 +DSL_DRV_FwDownload called
 +DSL_FW_REQUEST_ADSL in DSL_DRV_DEV_FwDownload
 +hwVers=0x230
 +hwVers=0x230
 +MEI_InternalFirmwareDownload called
 +Advertising(Periodly Sending RA): On 
 +[ipv6_autocfg_task] run RFC_6204_WPD_4_task() successfully.
 +[restart_dhcpv6s] ifno=1
 +[restart_dhcpv6s] AddrPool[0].used=1
 +[restart_dhcpv6s] dump AddrPool[0].inmap addresses
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0010
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0011
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0012
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0013
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0014
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0015
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0016
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0017
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0018
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0019
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001A
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001B
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001C
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001D
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001E
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​001F
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0020
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0021
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0022
 +2001:​0288:​0001:​0250:​0000:​0000:​0000:​0023
 +[restart_dhcpv6s] SrvInfo_s.SERVER_DUID.data._LLT.hwType=1
 +[restart_dhcpv6s] SrvInfo_s.SERVER_DUID.data._LLT.llAddr:​ 00:​de:​ad:​be:​ef:​33
 +[restart_dhcpv6s] SrvInfo_s.SrvIf[0].ifno = 1;
 +[restart_dhcpv6s] create server UDP socket (interface 1)
 +IP_ADD_MEMBERSHIP:​ ffffffff814c5810
 +IP_ADD_MEMBERSHIP:​ ffffffff814c5810
 +[restart_dhcpv6s] DHCPv6 Server: Task Success.
 +ifx_tapi_DeviceCreate:​ ndev = 0, TapiDev 81C72F74
 +Cap: INFINEON TECHNOLOGIES , type 0 = 0 size=21
 +Cap: VMMC , type 1 = 6 size=4
 +Cap: POTS , type 2 = 0 size=4
 +Cap: PSTN , type 2 = 1 size=4
 +Cap: DEVICE TYPE , type 11 = 6 size=11
 +Cap: DEVICE VERSION , type 10 = 257 size=14
 +ifx_tapi_ChannelPrepare:​ nChannel 0
 +DSL_CPE: User Thread Startup <​evnthnd>,​ TID 44 (PID 44) - ENTER
 +evtWaitQue=96
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 2 
 +ifx_tapi_ChannelPrepare:​ nChannel 1
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 3 
 +ifx_tapi_ChannelPrepare:​ nChannel 2
 +
 + ​StatusData.nStatus=255
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 4 
 +ifx_tapi_ChannelPrepare:​ nChannel 3
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 5 
 +ifx_tapi_ChannelPrepare:​ nChannel 4
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 6 
 +ifx_tapi_ChannelPrepare:​ nChannel 5
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 7 
 +ifx_tapi_ChannelPrepare:​ nChannel 6
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 8 
 +ifx_tapi_ChannelPrepare:​ nChannel 7
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 9 
 +[37] Allocate resource 134, FreeResource = 6
 +Lantiq VMMC device driver, version 1.7.0.3, (c) 2006-2010 Lantiq Deutschland GmbH
 +vpe1_mem = 200000
 +stlb = 0, vpe0_wired = 0 vpe1_wired=1
 +Wired TLB entries for Linux read_c0_wired() = 0
 +VMMC_Open : Major 122 Minor 10 
 +VMMC_LL_Open:​ 8111138c
 +VMMC_Open --> 81c6142c
 +VMMC_handle[0] : 81c6142c
 +VMMC_Open : Major 122 Minor 11 
 +VMMC_LL_Open:​ 811113f8
 +VMMC_Open --> 81c61410
 +VMMC_handle[1] : 81c61410
 +VMMC_Open : Major 122 Minor 12 
 +VMMC_LL_Open:​ 81111440
 +VMMC_Open --> 81c613f4
 +VMMC_handle[2] : 81c613f4
 +VMMC_Open : Major 122 Minor 13 
 +VMMC_LL_Open:​ 81111488
 +VMMC_Open --> 81c613d8
 +VMMC_handle[3] : 81c613d8
 +VMMC_Open : Major 122 Minor 14 
 +VMMC_LL_Open:​ 811114d0
 +VMMC_Open --> 81c613bc
 +VMMC_handle[4] : 81c613bc
 +VMMC_Open : Major 122 Minor 15 
 +VMMC_LL_Open:​ 81111518
 +VMMC_Open --> 81c613a0
 +VMMC_handle[5] : 81c613a0
 +VMMC_Open : Major 122 Minor 16 
 +VMMC_LL_Open:​ 81111560
 +VMMC_Open --> 81c61384
 +VMMC_handle[6] : 81c61384
 +VMMC_Open : Major 122 Minor 17 
 +VMMC_LL_Open:​ 811115a8
 +VMMC_Open --> 81c61368
 +VMMC_handle[7] : 81c61368
 +VMMC_Open : Major 122 Minor 18 
 +VMMC_LL_Open:​ 811115f0
 +VMMC_Open --> 81c6134c
 +VMMC_handle[8] : 81c6134c
 +[37] Allocate resource 135, FreeResource = 7
 +[37] Allocate resource 136, FreeResource = 8
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 10 
 +VMMC_Register_Callback(),​ registered for mpsCh=0 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=1 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=2 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=3 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=4 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=5 (success)
 +VMMC_Register_Callback(),​ registered for mpsCh=6 (success)
 +[get_vcpufirmware_address] DSP firmware: [5 -1], dCnt:1
 +Unzipping from B03D1800 to 831DE140 ... [ZIP 2] done
 +Uncompressed size = 568172
 +IFX_MPS: Download firmware (size 568172 bytes)...
 +cpu1_base_addr 83f00000 (0)
 +FW_FORMAT_NEW!
 +VPE loader: VPE1 running successfully
 +[USBLPT] Printer Initialize Fail : Plug Out !!
 +padmin_task_entry() task running
 +********** upnp_main() Unsupportted UPnP root device:0
 +upnp_main(1-0) Run-up UPnP device IGD...
 +[Init_SSLClient] Certificate_Id=0,​ nConnectProtocol=6
 +*********************************************
 +****Wi-Fi Simple Config Application***** ​
 +Version: Build 2.02.2.DTM1.1,​ Mar 20 2014 18:01:29
 +*********************************************
 +wsc_Send_UPNP_packet>​ enter
 +wsc_Send_eap_packet:​udpFdupnp_wcn:​33;;​udpFdupnp:​35
 +ptp Daemon task running
 +[28] sslc_conf_init>​ ssl client info:
 +[28] PrivateKey=
 +[28] MyCertificate=
 +[28] CaCertificate=
 +[28] SSL_method=31
 +[28] verify_mode=1
 +[28] cipher_suites=ADH:​SHA1:​HIGH:​EXP
 +[28] tftp_server_ip=140.92.61.131
 +[28] fn_myCerttificate=ServCert.pem
 +[28] fn_privateKey=PrivKey.pem
 +[28] fn_caCertificate=CaCert.pem
 +[28] sslc_conf_init>​ ssl client info end:
 +PKCS12_PBE_add>​
 +PKCS12_PBE_add>​ support RC4
 +PKCS12_PBE_add>​ support DES
 +PKCS12_PBE_add>​ support RC2
 +[28] sslc_conf_init>​ pCtx=0x81c5e728 in ssld_conf_init
 +
 +[28] sslc_ctx_reset_cert>​ re-LoadCACertificate( 3rdCA ) ok!!
 +[28] sslc_ctx_reset_cert>​ re-LoadCACertificate( 2ndCA ) ok!!
 +[28] sslc_ctx_reset_cert>​ re-LoadCACertificate( 1stCA ) ok!!sslc_ctx_reset_cert>​ this is pkcs12 type certificate
 +
 +[28] sslc_ctx_reset_cert : re-LoadServerCertAndKey() ok!!
 +[28] sslc_conf_init>​ sslc_conf_init() ok
 +lpd Daemon task running
 +[USB ROOTHUB_LOOP] RUNTASK id=49 lpd_main ...
 +[USB] lpd_init() End.
 +ifStrInit()>​ i:0, dtlStr:​[Loop/​Loop],​ rfStr[LB0], type:0, count:1
 +ifStrInit()>​ i:1, dtlStr:[LAN 1/LAN1], rfStr[L1], type:1, count:1
 +ifStrInit()>​ i:2, dtlStr:​[WLAN1/​WLAN1],​ rfStr[WL1], type:3, count:1
 +ifStrInit()>​ i:3, dtlStr:[ATM 1/ATM1], rfStr[A1], type:5, count:1
 +ifStrInit()>​ i:4, dtlStr:[ATM 2/ATM2], rfStr[A2], type:5, count:2
 +ifStrInit()>​ i:5, dtlStr:[ATM 3/ATM3], rfStr[A3], type:5, count:3
 +ifStrInit()>​ i:6, dtlStr:[ATM 4/ATM4], rfStr[A4], type:5, count:4
 +ifStrInit()>​ i:7, dtlStr:[ATM 5/ATM5], rfStr[A5], type:5, count:5
 +ifStrInit()>​ i:8, dtlStr:[ATM 6/ATM6], rfStr[A6], type:5, count:6
 +ifStrInit()>​ i:9, dtlStr:[ATM 7/ATM7], rfStr[A7], type:5, count:7
 +ifStrInit()>​ i:10, dtlStr:[ATM 8/ATM8], rfStr[A8], type:5, count:8
 +ifStrInit()>​ i:11, dtlStr:[PoE 1/PoE1], rfStr[P1], type:6, count:1
 +ifStrInit()>​ i:12, dtlStr:[PoE 2/PoE2], rfStr[P2], type:6, count:2
 +ifStrInit()>​ i:13, dtlStr:[PoE 3/PoE3], rfStr[P3], type:6, count:3
 +ifStrInit()>​ i:14, dtlStr:[PoE 4/PoE4], rfStr[P4], type:6, count:4
 +ifStrInit()>​ i:15, dtlStr:[PoE 5/PoE5], rfStr[P5], type:6, count:5
 +ifStrInit()>​ i:16, dtlStr:[PoE 6/PoE6], rfStr[P6], type:6, count:6
 +ifStrInit()>​ i:17, dtlStr:[PoE 7/PoE7], rfStr[P7], type:6, count:7
 +ifStrInit()>​ i:18, dtlStr:[PoE 8/PoE8], rfStr[P8], type:6, count:8
 +ifStrInit()>​ i:19, dtlStr:​[CLONE1/​CLONE1],​ rfStr[CL1], type:9, count:1
 +ifStrInit()>​ i:20, dtlStr:​[WDS1/​WDS1],​ rfStr[WD1], type:8, count:1
 +ifStrInit()>​ i:21, dtlStr:​[WDS2/​WDS2],​ rfStr[WD2], type:8, count:2
 +ifStrInit()>​ i:22, dtlStr:​[WDS3/​WDS3],​ rfStr[WD3], type:8, count:3
 +ifStrInit()>​ i:23, dtlStr:​[WDS4/​WDS4],​ rfStr[WD4], type:8, count:4
 +ifStrInit()>​ i:24, dtlStr:[/], rfStr[], type:12, count:0
 +printer schedule task running
 +upnp_Init(0) upnpGlobalInit[1]:​0
 +SSDP Initialization completed...
 +GenaInit : event_hook is NULL!!
 +
 +>> Parse Service '​urn:​schemas-microsoft-com:​service:​OSInfo:​1'​ : TRUE
 +>> Parse Service '​urn:​schemas-upnp-org:​service:​Layer3Forwarding:​1'​ : TRUE
 +>> Parse Service '​urn:​schemas-upnp-org:​service:​WANCommonInterfaceConfig:​1'​ : TRUE
 +>> Parse Service '​urn:​schemas-upnp-org:​service:​WANEthernetLinkConfig:​1'​ : TRUE
 +>> Parse Service '​urn:​schemas-upnp-org:​service:​WANPPPConnection:​1'​ : TRUE
 +>> Parse Service '​urn:​schemas-upnp-org:​service:​WANIPConnection:​1'​ : TRUE
 +>> Parse Device '​urn:​schemas-upnp-org:​device:​WANConnectionDevice:​1'​ : TRUE
 +>> Parse Device '​urn:​schemas-upnp-org:​device:​WANDevice:​1'​ : TRUE
 +>> Parse Device '​urn:​schemas-upnp-org:​device:​InternetGatewayDevice:​1'​ : TRUE
 +********** upnp_main1() Record pDevRoot[1]:​81c43f40
 +
 +>>>>​ UPNP init successfully ...
 +********** upnp_main() Unsupportted UPnP root device:2
 +upnp_main(3-0) Run-up UPnP device WPS-WCN...
 +upnp_Init(0) upnpGlobalInit[3]:​0
 +
 +>> Parse Service '​urn:​schemas-wifialliance-org:​service:​WFAWLANConfig:​1'​ : TRUE
 +>> Parse Device '​urn:​schemas-wifialliance-org:​device:​WFADevice:​1'​ : TRUE
 +********** upnp_main1() Record pDevRoot[3]:​81c19b44
 +
 +>>>>​ UPNP init successfully ...
 +********** upnp_main() Unsupportted UPnP root device:4
 +********** upnp_main() Unsupportted UPnP root device:5
 +********** upnp_main() Unsupportted UPnP root device:6
 +MEI_DRV: Cntrl Thr Enter - VnxCtrl
 +Autoboot State: firmwareReady
 +##### [IFXOS_ThreadInit] name <​autbtex>,​ tid 27, nStackSize=10000
 +##### [IFXOS_ThreadInit] name <​pmex_ne>,​ tid 54, nStackSize=10000
 +##### [IFXOS_ThreadInit] name <​pmex_fe>,​ tid 55, nStackSize=10000
 +DSL_CPE: Device initialized succeeded (ret=0).
 +DSL_CPE_Event_S_AutobootStatusHandle called
 +Autoboot State: Init
 +DSL_DRV_PM_Resume called
 +nReturn=0 nData="​67C3 0001 0001 "
 +StatusData.nStatus=1
 +MEI_DRV[00 - 01]: ReadAck[0x3D03] - FctOP ERROR 0x81!
 +MEI_DRV[00 - 01]: Send Msg[0x3D43] read ACK failed (cnt: 8, t: 4479 - 4488 = 9)
 +DSL[00]: Error -1008 during FIO_MEI_MBOX_MSG_SEND (MsgID=0x3D43),​ FctCode 0x8100!
 +
 +[restart_dhcpv6c] ifno=1,​M_flag=0x0,​O_flag=0x1,​stop=0,​gSetting.Interface[1].RunDHCPc6Client=0
 +
 +[restart_dhcpv6c] ifno=2,​M_flag=0x0,​O_flag=0x1,​stop=0,​gSetting.Interface[2].RunDHCPc6Client=0
 +DSL[00]: ERROR - Vendor Version set, retCode=-14!
 +@@@ DSL_LINESTATE_IDLE dms 67C3 1 1 3100
 +nReturn=0 nData="​67C3 0001 0001 "
 +@@@ DSL_LINESTATE_IDLE dms 19C5 0 1 2000
 +nReturn=0 nData="​19C5 0000 0001 "
 +@@@ DSL_LINESTATE_IDLE dms 2d48 0 1 e
 +nReturn=0 nData="​2D48 0000 0001 "
 +StatusData.nStatus=2
 +Autoboot State: Train
 +usb_power_set(2) min time delay:6000, current delay:6500
 +dwc_otg_vbus_on(NULL) Enable USB power!!
 +usb_hcd_init() func(0):0
 +usb_hcd_init() func(1):0
 +usb_hcd_init() func(2):0
 +usb_hcd_init() func(3):1
 +localhc_init() install otg driver(self->​driver = 0x8090A614, otg_driver=0x8090A614).
 +usb_hcd_init() func(4):1
 +localhc_init() install otg driver(self->​driver = 0x8090A614, otg_driver=0x8090A614).
 +usb_hcd_init():​ succ.
 +IFXOS_EventWait:​ -20
 +ifx_mps_get_fw_version:​ ifx_mps_mbx_write_message...
 +ifx_mps_get_fw_version:​ Before sleep
 +ifx_mps_get_fw_version:​ After sleep!
 +ifx_mps_get_fw_version:​ ifx_mps_mbx_read_message retval 0 bytes_read 8
 +ok!
 +Version 1.0.0.7.0 up and running...
 +VMMC_TAPI_LL_FW_Start:​ ifx_mps_ioctl ret 0
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +[37] Allocate resource 137, FreeResource = 9
 +[37] Allocate resource 138, FreeResource = 10
 +[37] Allocate resource 139, FreeResource = 11
 +[37] Allocate resource 140, FreeResource = 12
 +[37] Allocate resource 141, FreeResource = 13
 +[37] Allocate resource 142, FreeResource = 14
 +[37] Allocate resource 143, FreeResource = 15
 +[37] Allocate resource 144, FreeResource = 16
 +[37] Allocate resource 145, FreeResource = 17
 +[37] Allocate resource 146, FreeResource = 18
 +[37] Allocate resource 147, FreeResource = 19
 +[37] Allocate resource 148, FreeResource = 20
 +[37] Allocate resource 149, FreeResource = 21
 +[37] Allocate resource 150, FreeResource = 22
 +[37] Allocate resource 151, FreeResource = 23
 +[37] Allocate resource 152, FreeResource = 24
 +[37] Allocate resource 153, FreeResource = 25
 +[37] Allocate resource 154, FreeResource = 26
 +[37] Allocate resource 155, FreeResource = 27
 +[37] Allocate resource 156, FreeResource = 28
 +[37] Allocate resource 157, FreeResource = 29
 +[37] Allocate resource 158, FreeResource = 30
 +[37] Allocate resource 159, FreeResource = 31
 +[37] Allocate resource 160, FreeResource = 32
 +[37] Allocate resource 161, FreeResource = 33
 +[37] Allocate resource 162, FreeResource = 34
 +[37] Allocate resource 163, FreeResource = 35
 +[37] Allocate resource 164, FreeResource = 36
 +[37] Allocate resource 165, FreeResource = 37
 +[37] Allocate resource 166, FreeResource = 38
 +[37] Allocate resource 167, FreeResource = 39
 +[37] Allocate resource 168, FreeResource = 40
 +[37] Allocate resource 169, FreeResource = 41
 +[37] Allocate resource 170, FreeResource = 42
 +IFXOS_EventWait:​ -20
 +
 +FWVERS: 1.0.0  Platform:​0x07 Customer:​0x00
 +IFXOS_EventWait:​ -20
 +Config Method:0x84
 +*********************************************
 +***Waiting for Registrar to connect...***
 +*********************************************
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +VMMC_TAPI_LL_FW_Init:​ VMMC_ALM_SmartSLIC_ChGet 2 2
 +
 +FWCAP: nPCM: 8  nALM: 2  nSIG: 5  nCOD: 5  nDECT: 6
 +FWCAP: nNLEC: 4 nWLEC: 4 nES: 4   nAGC: 5  nFAX: 5
 +FWCAP: nUTG:​16 ​ UTG/CH: 2 nMFTD: 5 nLIN: 2
 +FWCAP: nDTMFR: 5 nDTMFG: 5 nCIDS: 5 nCIDR: 5
 +VMMC_AddCaps:​ CODECS = 5cf
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +IFXOS_EventWait:​ -20
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 11 
 +[37] Allocate resource 171, FreeResource = 43
 +>>>>>>>>>>>>>>>>>>>>>>>>>​ IFXOS_EventInit event number 12 
 +[37] Allocate resource 172, FreeResource = 44
 +IFX_TAPI_Phone_Init:​ TAPI BBD_Dnld 0
 +===> ​
 +Set PCM I/F 0 VMMC_handle:​81c6142c
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 + ​VMMC_Ioctl:​ Phone 1 IFX_TAPI_LINE_TYPE ok!
 + ​VMMC_Ioctl:​ Phone 1 IFXPHONE_SET_LINEFEED ok!
 +Set PCM I/F 1 VMMC_handle:​81c61410
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 + ​VMMC_Ioctl:​ Phone 2 IFX_TAPI_LINE_TYPE ok!
 + ​VMMC_Ioctl:​ Phone 2 IFXPHONE_SET_LINEFEED ok!
 +Set PCM I/F 2 VMMC_handle:​81c613f4
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 3 VMMC_handle:​81c613d8
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 4 VMMC_handle:​81c613bc
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 5 VMMC_handle:​81c613a0
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 6 VMMC_handle:​81c61384
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 7 VMMC_handle:​81c61368
 +IFX_TAPI_Phone_Init:​ TAPI FW_Start 0
 +===> ​
 +Set PCM I/F 8 VMMC_handle:​81c6134c
 +Setting HOOK Related Parameters 0
 +Setting HOOKFLASH_TIME min 80 ms max 900 ms
 +Setting HOOKON_TIME min 320 max 320
 +Setting HOOK Related Parameters 1
 +Setting HOOKFLASH_TIME min 80 ms max 900 ms
 +Setting HOOKON_TIME min 320 max 320
 +Setting HOOK Related Parameters 2
 +Setting HOOK Related Parameters 3
 +RUNTASK id=30 VINETIC_DRV_Task...
 +[60] Allocate mailbox 25
 +RUNTASK id=60 VINETIC_T38_Task...
 +RUNTASK id=62 FXO_flash_task...
 +RUNTASK id=61 VOICE_API_task...
 +************** Enable ProDaaCheckInterrupt() detect 9855
 +RUNTASK id=63 Atheros_NetTask ...
 +IrqConnect : IRQ = 22, Handler = 0x801BD3C8
 +<-- RTMPAllocTxRxRingMemory,​ Status=0
 +Channel=0
 +rtmp_read_wds_from_file() is called !!!
 +rtmp_read_wds_from_file : WDS disabled ​
 +
 +[GreenAP Enable]
 +[RTMPSetProfileParameter] AntDiversity=0
 +Magic No. in Boot Param check OK!!!
 +sould check E2PROM MAC ?????????????????​
 +NICReadEEPROMParameters 885 
 +NICReadEEPROMParameters 948 
 +NICReadEEPROMParameters 973 
 +[APStartUp] pAd->​ApCfg.bGreenAPEnable:​1
 +[APStartUp] Call EnableAPMIMOPS
 +<==== rt28xx_init,​ Status=0
 +0x1300 = 00064300
 +ND 2 ???
 +ND 1 ???
 +pAd->​VirtualIfCnt 1
 +Relay Off now ch:0
 +
 +[TEL_MGR_GetActiveCallChannel] phoneIdx:1, channel_id: 0 ********
 +
 +[TEL_MGR_GetActiveCallChannel] phoneIdx:2, channel_id: 1 ********
 +When * the value is 60000
 +When * the value is 60000
 +When * the value is 60000
 +sys_voip_cfg->​cpt.reorder = 425@-280;​60(.25/​.25/​1)
 +TEL_DRV_TONE_REORDER ​ duration = 500
 +When * the value is 60000
 +[37] Allocate resource 173, FreeResource = 45
 +[37] Allocate mailbox 26
 +TEL_MGR_Init
 +[37] Allocate resource 174, FreeResource = 46
 +tel_mgr_mutex=174
 +[37] Allocate mailbox 27
 + ​TEL_DM_Init
 +[37] Allocate resource 175, FreeResource = 47
 +[37] Allocate resource 176, FreeResource = 48
 +
 +[reset_802dot1x] wireless module ready
 +[init_wpa] dot1x_ready[0]=3,​configp->​ifno:​2,​ssid:​o2-WLAN98
 +config->​enablePreAuthen=1
 +install group key to Mac ASIC ????????????????????????​
 +[init_wpa] dot1x_ready[1]=1,​configp->​ifno:​20,​ssid:​
 +[init_wpa] dot1x_ready[2]=1,​configp->​ifno:​21,​ssid:​
 +[init_wpa] dot1x_ready[3]=1,​configp->​ifno:​22,​ssid:​
 +[init_wpa] dot1x_ready[4]=1,​configp->​ifno:​23,​ssid:​
 +
 + ​TEL_MGR_VoiceChannelInit
 +
 +[htf_dbg] ​    - OnlineActiveWirless() 1400
 +Do APScan()
 +
 +xSpeedtsk priority is 80
 +
 +[37] Allocate resource 177, FreeResource = 49
 +[37] Allocate mailbox 28
 +[68] Allocate resource 178, FreeResource = 50
 +[68] Allocate resource 179, FreeResource = 51
 +[SIP_CORE_Task] sip_core_ready
 +TEL_MGR_SetVoipPhoneEvtHookFunc
 +TEL_MGR_SetVoipPhoneEvtHookFunc
 +[37] Allocate resource 180, FreeResource = 52
 +[37] Allocate mailbox 29
 +VOICE_IVR_Init:​ voice_ivr_channel[0].ivrQueueId = 29
 +[37] Allocate mailbox 30
 +VOICE_IVR_Init:​ voice_ivr_channel[1].ivrQueueId = 30
 +[37] Allocate mailbox 31
 +VOICE_IVR_Init:​ voice_ivr_channel[2].ivrQueueId = 31
 +[37] Allocate mailbox 32
 +VOICE_IVR_Init:​ voice_ivr_channel[3].ivrQueueId = 32
 +TEL_MGR_DisableDebug
 +autoChannel : 11
 +[WirelessCFG_task] CHannelBW:1
 +[WirelessCFG_task] APOverlappingBSSScan()...
 +
 +[APOverlappingBSSScan] needFallBack:​1
 +WirelessMode 9 BasicRate 15
 +AutochannelSelect 0 Channel 0 
 +autoChannel : 11
 +NEW : channel 11, BW 1(40MHZ), EXTCHA 3(BELOW)
 +Set_PreAuth_Proc called, PreAuth=1
 +[APStartUp] pAd->​ApCfg.bGreenAPEnable:​1
 +[APStartUp] Call EnableAPMIMOPS
 +[APStartUp] pAd->​ApCfg.bGreenAPEnable:​1
 +[APStartUp] Call EnableAPMIMOPS
 +[signal_1x_reset] ...
 +>>>>>>>>>>>>>>>>>>>>>>​tick 17262
 +[HWLAN] [64] rapi_tmr_task running ​
 +[USB] dwc3884_start() Core id:0, funcIdx:3
 +setSynopsisPower() check clock gating...
 +pll0 N = 124, M = 8, PLL_BP = 0, PLL_EN = 1
 +pll1 N = 64, M = 5, K_hi = 467, K_lo = 659, phdiven = 1, dsmsel = 1, modulo = 2 PLL_BP = 0 PLL_EN = 1
 +pll2 N = 11, M = 0, PLL_BP = 0, PLL_EN = 1
 + ​do_div error ???
 +pll0_fosc ​   = 1000000000
 + ​do_div error ???
 +pll1_fosc ​   = 392934082
 +pll2_fosc ​   = 864000000
 +cpu clock    = 500000000
 +DDR clock    = 250000000
 +FPI bus 1    = 250000000
 +FPI bus 2    = 250000000
 +PP32 clock   = 432000000
 + ​do_div error ???
 +PCI clock    = 33333333
 +Ethernet MII0= 50000000
 +Ethernet MII1= 50000000
 +
 + ​*IFX_CGU_IF_CLK 10e18008 ​
 +USB clock    = 12000000
 +Clockout0 ​   = 0
 +Clockout1 ​   = 0
 +Clockout2 ​   = 0
 +Clockout3 ​   = 0
 +ifx_get_fpi_hz 250000000
 +*IFX_CGU_IF_CLK 10e1800b
 +setSynopsisPower() set power...
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x84118093 module 6 regid 0 regbit 6
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module USB0-CTRL has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x84118093 module 27 regid 0 regbit 27
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module USB1-CTRL has been activated 1 times before
 +setSynopsisPower() USB PHY configurations...
 +setSynopsisPower() set PMU...
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x84118092 module 0 regid 0 regbit 0
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module USB0-PHY has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x80118092 module 26 regid 0 regbit 26
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module USB1-PHY has been activated 1 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x80118092 module 9 regid 0 regbit 9
 +ifx_pmu_set:​ Module DSL-DFE has been activated 3 times before
 +ifx_pmu_set:​ PMU_PWDCR0 = 0x80110092 module 15 regid 0 regbit 15
 +ifx_pmu_set:​ Actual enabling.......... 1
 +ifx_pmu_set:​ Module AHBM has been activated 1 times before
 +[USB] dwc3884_start() DWC3884 core version:​0x4F54281A,​ 2.81a, channel:16
 +[USB] dwc3884_reset(XR9) Reset In, core_id:0
 +[USB] dwc3884_reset(VR9) IFX_RCU_USB0_CFG:​0xBF203018,​ var:​0x00001480
 +[USB] dwc3884_reset(VR9) IFX_RCU_USB1_CFG:​0xBF203034,​ var:​0x00001400
 +[USB] dwc3884_reset(VR9) IFX_RCU_RST_REQ:​0xBF203010
 +[USB] dwc3884_reset() rstctl:​0xBE101010
 +[USB] dwc3884_start() intsts:​0xBE101014,​ var:​0x54000029
 +
 +
 +>>>>>>​ usbd_new_device:​ adding unit bus:1, addr=1, rev=0200, class=9, subclass=0, protocol=1, maxpacket=64,​ len=18, speed=3
 +
 +usbd_probe_and_attach(Hub)>​ Reopen STATIC default pipe OK
 +usbd_open_pipe_intr:​ addr:1, ep address=0x81 flags=0x4 len=1
 +usbd_open_pipe_intr:​ ipipe=83886640 repeat=0 xfer=A0D32A40
 +usbd_probe_and_attach,​probe 1!
 +[USB] dwc3884_start() Core id:1, funcIdx:4
 +[USB] dwc3884_start() DWC3884 core version:​0x4F54281A,​ 2.81a, channel:16
 +[USB] dwc3884_reset(XR9) Reset In, core_id:1
 +[USB] dwc3884_reset() rstctl:​0xBE106010
 +[USB] dwc3884_start() intsts:​0xBE106014,​ var:​0x54000029
 +[nd_resp.c nd_Tick] Tick! ifno=1, 16 seconds is up, send one ND Router Advertisement
 +[nd_Tick] ifno=1, Next RandAdvInterval = 16 seconds
 +
 +
 +>>>>>>​ usbd_new_device:​ adding unit bus:2, addr=1, rev=0200, class=9, subclass=0, protocol=1, maxpacket=64,​ len=18, speed=3
 +
 +usbd_probe_and_attach(Hub)>​ Reopen STATIC default pipe OK
 +usbd_open_pipe_intr:​ addr:1, ep address=0x81 flags=0x4 len=1
 +usbd_open_pipe_intr:​ ipipe=83886DC0 repeat=0 xfer=A0D32FC0
 +ifno2dot1x_if[2]=0
 +dot1x_wireless_if_mask=0x4
 +[reset_802dot1x] wireless module ready
 +[init_wpa] dot1x_ready[0]=3,​configp->​ifno:​2,​ssid:​o2-WLAN98
 +usbd_probe_and_attach,​probe 1!
 +startExplore() usb explore task run-up, slot:0, tsk_id:36, reason:0
 +usb_hc_install_interrupt() Install OTG-1 interrupt 54
 +IrqConnect : IRQ = 54, Handler = 0x8047DEFC
 +IrqConnect : IRQ = 60, Handler = 0x80481DD4
 +usb_hc_install_interrupt() Install OTG-2 interrupt 83
 +IrqConnect : IRQ = 83, Handler = 0x8047DF28
 +USB Module: Version 2.0.0 build Mar 20 2014 18:00:56
 +config->​enablePreAuthen=1
 +install group key to Mac ASIC ????????????????????????​
 +[init_wpa] dot1x_ready[1]=1,​configp->​ifno:​20,​ssid:​
 +[init_wpa] dot1x_ready[2]=1,​configp->​ifno:​21,​ssid:​
 +[init_wpa] dot1x_ready[3]=1,​configp->​ifno:​22,​ssid:​
 +[init_wpa] dot1x_ready[4]=1,​configp->​ifno:​23,​ssid:​
 +[reset_802dot1x] 802.1Xv2 ready
 +usb_explore_task() Begin ...
 +
 +[%%%%%%% saveRandomSeedTask]
 +fwrite_specialConfigPara() Save random seed:​4489969
 +MXIC MX29GL128EL bottom boot 16-bit mode found
 +erase from location b00a0000 done
 +write length 0x5b0
 +0[nd_resp.c nd_Tick] Tick! ifno=1, 16 seconds is up, send one ND Router Advertisement
 +[nd_Tick] ifno=1, Next RandAdvInterval = 364 seconds</​nowiki>​
 +</​WRAP>​\\
 +
 +==== Openwrt bootlog ====
 +<WRAP bootlog>
 +<​nowiki>​
 +ROM VER: 1.1.4
 +CFG 01
 +
 +
 +U-Boot 2013.10-openwrt4 (Aug 23 2016 - 09:24:48) VGV7510KW22
 +
 +Board: Arcadyan VGV7510KW22
 +SoC:   ​Lantiq VRX288 v1.2
 +CPU:   500 MHz
 +IO:    250 MHz
 +BUS:   250 MHz
 +BOOT:  NOR
 +DRAM:  64 MiB
 +Flash: 16 MiB
 +*** Warning - bad CRC, using default environment
 +
 +In:    serial
 +Out:   ​serial
 +Err:   ​serial
 +Net:   Phy not found
 +ltq-eth
 +Hit any key to stop autoboot: ​ 0 
 +## Booting kernel from Legacy Image at b0080000 ...
 +   Image Name:   MIPS OpenWrt Linux-4.4.14
 +   ​Created: ​     2016-08-22 ​ 16:55:10 UTC
 +   Image Type:   MIPS Linux Kernel Image (lzma compressed)
 +   Data Size:    1775502 Bytes = 1.7 MiB
 +   Load Address: 80002000
 +   Entry Point: ​ 80002000
 +   ​Verifying Checksum ... OK
 +   ​Uncompressing Kernel Image ... OK
 +
 +Starting kernel ...
 +
 +[    0.000000] Linux version 4.4.14 (build@trunk) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 49904) ) #1 SMP Tue Aug 23 12:09:44 UTC 2016
 +[    0.000000] SoC: xRX200 rev 1.2
 +[    0.000000] bootconsole [early0] enabled
 +[    0.000000] CPU0 revision is: 00019556 (MIPS 34Kc)
 +[    0.000000] MIPS: machine is VGV7510KW22 - o2 Box 6431
 +[    0.000000] Determined physical RAM map:
 +[    0.000000] ​ memory: 04000000 @ 00000000 (usable)
 +[    0.000000] Initrd not found or empty - disabling initrd
 +[    0.000000] Zone ranges:
 +[    0.000000] ​  ​Normal ​  [mem 0x0000000000000000-0x0000000003ffffff]
 +[    0.000000] Movable zone start for each node
 +[    0.000000] Early memory node ranges
 +[    0.000000] ​  ​node ​  0: [mem 0x0000000000000000-0x0000000003ffffff]
 +[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
 +[    0.000000] Detected 1 available secondary CPU(s)
 +[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
 +[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
 +[    0.000000] PERCPU: Embedded 9 pages/cpu @8108b000 s8128 r8192 d20544 u36864
 +[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
 +[    0.000000] Kernel command line: console=ttyLTQ0,​115200 init=/​etc/​preinit
 +[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
 +[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
 +[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
 +[    0.000000] Writing ErrCtl register=00070c40
 +[    0.000000] Readback ErrCtl register=00070c40
 +[    0.000000] Memory: 58000K/​65536K available (4022K kernel code, 174K rwdata, 1172K rodata, 1208K init, 222K bss, 7536K reserved, 0K cma-reserved)
 +[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0,​ CPUs=2, Nodes=1
 +[    0.000000] Hierarchical RCU implementation.
 +[    0.000000] NR_IRQS:256
 +[    0.000000] Setting up vectored interrupts
 +[    0.000000] Setting up IPI vectored interrupts
 +[    0.000000] CPU Clock: 500MHz
 +[    0.000000] clocksource:​ MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns:​ 7645041786 ns
 +[    0.000012] sched_clock:​ 32 bits at 250MHz, resolution 4ns, wraps every 8589934590ns
 +[    0.007879] Calibrating delay loop... 332.54 BogoMIPS (lpj=665088)
 +[    0.042370] pid_max: default: 32768 minimum: 301
 +[    0.047246] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
 +[    0.053791] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
 +[    0.065109] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
 +[    0.065126] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
 +[    0.065354] CPU1 revision is: 00019556 (MIPS 34Kc)
 +[    0.124688] Synchronize counters for CPU 1: done.
 +[    0.129599] Brought up 2 CPUs
 +[    0.137071] clocksource:​ jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns:​ 7645041785100000 ns
 +[    0.146892] pinctrl core: initialized pinctrl subsystem
 +[    0.152844] NET: Registered protocol family 16
 +[    0.163471] pinctrl-xway 1e100b10.pinmux:​ Init done
 +[    0.169664] dma-xway 1e104100.dma:​ Init done - hw rev: 7, ports: 7, channels: 28
 +[    0.282533] dcdc-xrx200 1f106a00.dcdc:​ Core Voltage : 1016 mV
 +[    0.301677] PCI host bridge /​fpi@10000000/​pci@E105400 ranges:
 +[    0.307360] ​ MEM 0x0000000018000000..0x0000000019ffffff
 +[    0.312631] ​  IO 0x000000001ae00000..0x000000001affffff
 +[    0.342649] usbcore: registered new interface driver usbfs
 +[    0.348386] usbcore: registered new interface driver hub
 +[    0.353829] usbcore: registered new device driver usb
 +[    0.359659] PCI host bridge to bus 0000:00
 +[    0.363698] pci_bus 0000:00: root bus resource [mem 0x18000000-0x19ffffff]
 +[    0.370601] pci_bus 0000:00: root bus resource [io  0x1ae00000-0x1affffff]
 +[    0.377535] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
 +[    0.384399] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
 +[    0.393100] pci 0000:​00:​0e.0:​ BAR 0: assigned [mem 0x18000000-0x1800ffff]
 +[    0.401563] clocksource:​ Switched to clocksource MIPS
 +[    0.409442] NET: Registered protocol family 2
 +[    0.414711] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
 +[    0.421623] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
 +[    0.428032] TCP: Hash tables configured (established 1024 bind 1024)
 +[    0.434543] UDP hash table entries: 256 (order: 1, 8192 bytes)
 +[    0.440394] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
 +[    0.447012] NET: Registered protocol family 1
 +[    0.451894] gptu: totally 6 16-bit timers/​counters
 +[    0.456765] gptu: misc_register on minor 63
 +[    0.460948] gptu: succeeded to request irq 126
 +[    0.465433] gptu: succeeded to request irq 127
 +[    0.469927] gptu: succeeded to request irq 128
 +[    0.474459] gptu: succeeded to request irq 129
 +[    0.478990] gptu: succeeded to request irq 130
 +[    0.483488] gptu: succeeded to request irq 131
 +[    0.489250] ralink,​eeprom ralink_eep: using RT3062.eeprom as eeprom
 +[    0.495851] phy-xrx200 gphy-xrx200:​ requesting lantiq/​vr9_phy22f_a2x.bin
 +[    0.503333] phy-xrx200 gphy-xrx200:​ booting GPHY0 firmware at 3A00000
 +[    0.509699] phy-xrx200 gphy-xrx200:​ booting GPHY1 firmware at 3A00000
 +[    0.619504] futex hash table entries: 512 (order: 2, 16384 bytes)
 +[    0.645008] squashfs: version 4.0 (2009/​01/​31) Phillip Lougher
 +[    0.650777] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
 +[    0.663738] io scheduler noop registered
 +[    0.667589] io scheduler deadline registered (default)
 +[    0.673998] 1e100c00.serial:​ ttyLTQ0 at MMIO 0x1e100c00 (irq = 112, base_baud = 0) is a lantiq,asc
 +[    0.682917] console [ttyLTQ0] enabled
 +[    0.682917] console [ttyLTQ0] enabled
 +[    0.690250] bootconsole [early0] disabled
 +[    0.690250] bootconsole [early0] disabled
 +[    0.700218] lantiq nor flash device: 01000000 at 10000000
 +[    0.704405] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x00227e
 +[    0.713810] Amd/Fujitsu Extended Query Table at 0x0040
 +[    0.718964] ​  ​Amd/​Fujitsu Extended Query version 1.3.
 +[    0.724009] number of CFI chips: 1
 +[    0.727455] 4 ofpart partitions found on MTD device ltq_nor
 +[    0.732964] Creating 4 MTD partitions on "​ltq_nor":​
 +[    0.737827] 0x000000fe0000-0x000001000000 : "​board_config"​
 +[    0.745624] 0x000000000000-0x000000060000 : "​uboot"​
 +[    0.751604] 0x000000060000-0x000000080000 : "​uboot-env"​
 +[    0.757828] 0x000000080000-0x000000fe0000 : "​firmware"​
 +[    0.774202] 2 uimage-fw partitions found on MTD device firmware
 +[    0.778729] 0x000000080000-0x0000002317ce : "​kernel"​
 +[    0.785672] 0x0000002317ce-0x000000fe0000 : "​rootfs"​
 +[    0.791603] mtd: device 5 (rootfs) set to be root filesystem
 +[    0.795941] 1 squashfs-split partitions found on MTD device rootfs
 +[    0.802116] 0x0000005a0000-0x000000fe0000 : "​rootfs_data"​
 +[    0.893578] libphy: lantiq,​xrx200-mdio:​ probed
 +[    0.966216] eth0: attached PHY [Lantiq XWAY XRX PHY22F v1.4] (phy_addr=0:​11,​ irq=-1)
 +[    1.034214] eth0: attached PHY [Lantiq XWAY XRX PHY22F v1.4] (phy_addr=0:​12,​ irq=-1)
 +[    1.102212] eth0: attached PHY [Lantiq XWAY XRX PHY22F v1.4] (phy_addr=0:​13,​ irq=-1)
 +[    1.170212] eth0: attached PHY [Lantiq XWAY XRX PHY22F v1.4] (phy_addr=0:​14,​ irq=-1)
 +[    1.241685] eth1: attached PHY [ICPlus IP101A/G] (phy_addr=0:​01,​ irq=-1)
 +[    1.249069] wdt 1f8803f0.watchdog:​ Init done
 +[    1.258788] NET: Registered protocol family 10
 +[    1.263874] NET: Registered protocol family 17
 +[    1.267063] bridge: automatic filtering via arp/​ip/​ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
 +[    1.279570] 8021q: 802.1Q VLAN Support v1.8
 +[    1.296160] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
 +[    1.306154] Freeing unused kernel memory: 1208K (80542000 - 80670000)
 +[    2.750443] init: Console is alive
 +[    2.752738] init: - watchdog -
 +[    3.101689] eth0: port 4 got link
 +[    4.732413] SCSI subsystem initialized
 +[    4.745051] dwc2 1e101000.ifxhcd:​ requested GPIO 509
 +[    4.748701] dwc2 1e101000.ifxhcd:​ Configuration mismatch. Forcing host mode
 +[    5.613838] dwc2 1e101000.ifxhcd:​ DWC OTG Controller
 +[    5.617450] dwc2 1e101000.ifxhcd:​ new USB bus registered, assigned bus number 1
 +[    5.624783] dwc2 1e101000.ifxhcd:​ irq 62, io mem 0x00000000
 +[    5.630296] dwc2 1e101000.ifxhcd:​ Hardware does not support descriptor DMA mode -
 +[    5.637731] dwc2 1e101000.ifxhcd:​ falling back to buffer DMA mode.
 +[    5.645444] hub 1-0:1.0: USB hub found
 +[    5.647935] hub 1-0:1.0: 1 port detected
 +[    5.657287] usbcore: registered new interface driver usb-storage
 +[    5.668361] init: - preinit -
 +[    6.413609] random: procd urandom read with 86 bits of entropy available
 +Press the [f] key and hit [enter] to enter failsafe mode
 +Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
 +[    9.594845] jffs2: notice: (427) jffs2_build_xattr_subsystem:​ complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
 +[    9.611127] mount_root: switching to jffs2 overlay
 +[    9.632438] procd: - early -
 +[    9.634188] procd: - watchdog -
 +[   ​10.303513] procd: - ubus -
 +[   ​10.363711] procd: - init -
 +Please press Enter to activate this console.
 +[   ​10.970495] random: nonblocking pool is initialized
 +[   ​12.427522] IFXOS, Version 1.5.19 (c) Copyright 2009, Lantiq Deutschland GmbH
 +[   ​12.441332] NET: Registered protocol family 8
 +[   ​12.444331] NET: Registered protocol family 20
 +[   ​12.466082] PPP generic driver version 2.4.2
 +[   ​12.476613] ip6_tables: (C) 2000-2006 Netfilter Core Team
 +[   ​12.504288] Lantiq (VRX) DSL CPE MEI driver, version 1.4.8.5, (c) 2013 Lantiq Deutschland GmbH
 +
 +Lantiq CPE API Driver version: DSL CPE API V4.16.6.3
 +[   ​12.525329] ​
 +[   ​12.525329] Predefined debug level: 3
 +[   ​12.540973] Loading modules backported from Linux version wt-2016-05-12-0-g7a54796
 +[   ​12.547161] Backport generated by backports.git backports-20160216-0-ge3c56e4
 +[   ​12.558531] ip_tables: (C) 2000-2006 Netfilter Core Team
 +[   ​12.568825] Infineon Technologies DEU driver version 2.0.0 
 +[   ​12.574635] IFX DEU DES initialized (multiblock).
 +[   ​12.579403] IFX DEU AES initialized (multiblock).
 +[   ​12.583371] IFX DEU ARC4 initialized (multiblock).
 +[   ​12.587842] IFX DEU SHA1 initialized.
 +[   ​12.591450] IFX DEU MD5 initialized.
 +[   ​12.595056] IFX DEU SHA1_HMAC initialized.
 +[   ​12.599132] IFX DEU MD5_HMAC initialized.
 +[   ​12.611249] nf_conntrack version 0.5.0 (925 buckets, 3700 max)
 +[   ​12.668606] NET: Registered protocol family 24
 +[   ​12.673740] usbcore: registered new interface driver ums-alauda
 +[   ​12.680071] usbcore: registered new interface driver ums-cypress
 +[   ​12.686740] usbcore: registered new interface driver ums-datafab
 +[   ​12.693088] usbcore: registered new interface driver ums-freecom
 +[   ​12.699554] usbcore: registered new interface driver ums-isd200
 +[   ​12.706103] usbcore: registered new interface driver ums-jumpshot
 +[   ​12.712506] usbcore: registered new interface driver ums-karma
 +[   ​12.719389] usbcore: registered new interface driver ums-sddr09
 +[   ​12.725915] usbcore: registered new interface driver ums-sddr55
 +[   ​12.732536] usbcore: registered new interface driver ums-usbat
 +[   ​12.756382] xt_time: kernel timezone is -0000
 +[   ​12.854278] PCI: Enabling device 0000:​00:​0e.0 (0000 -> 0002)
 +[   ​12.858736] rt2800pci 0000:​00:​0e.0:​ failed to load eeprom property
 +[   ​12.864742] ieee80211 phy0: rt2x00lib_request_eeprom_file:​ Info - Loading EEPROM data from '​RT3062.eeprom'​.
 +[   ​12.875456] ieee80211 phy0: rt2x00_set_rt:​ Info - RT chipset 3572, rev 0223 detected
 +[   ​12.882259] ieee80211 phy0: rt2x00_set_rf:​ Info - RF chipset 0008 detected
 +[   ​18.747309] PTM 1.0.27 ​   PTM (E1) firmware version 0.30
 +[   ​18.751244] ifxmips_ptm:​ PTM init succeed
 +[   ​22.304680] device eth0.1 entered promiscuous mode
 +[   ​22.308246] device eth0 entered promiscuous mode
 +[   ​22.325325] br-lan: port 1(eth0.1) entered forwarding state
 +[   ​22.329654] br-lan: port 1(eth0.1) entered forwarding state
 +[   ​22.390231] IPv6: ADDRCONF(NETDEV_UP):​ ptm0: link is not ready
 +[   ​24.333581] br-lan: port 1(eth0.1) entered forwarding state
 +</​nowiki>​
 +</​WRAP>​\\
 +
 +===== Link dump =====
 +
 +  *http://​hilfe.o2online.de/​t5/​Router-Co/​o2-Router-o2-Box-6431-VDSL/​ta-p/​258592
 +  *http://​hilfe.o2online.de/​o2de/​attachments/​o2de/​7000_1@tkb/​6/​3/​10141%20BDA_O2_6431.pdf
 +  *https://​sviehb.wordpress.com/?​p=4
 +  *https://​sviehb.wordpress.com/?​p=49
 +  *http://​hph.name/​269
 +  *http://​www.ip-phone-forum.de/​showthread.php?​t=256873
 +  *http://​www.ip-phone-forum.de/​showthread.php?​t=250734&​page=2
 +  *http://​www.ip-phone-forum.de/​showthread.php?​t=211537&​p=1700608&​viewfull=1#​post1700608
 +  *http://​ar7-firmware.berlios.de/​doc/​loader.html.de
 +  *https://​huaweihg612hacking.wordpress.com/​2011/​07/​14/​using-mips-linux-objdump-for-disassembly-of-raw-binary/​
 +  *http://​lethalman.hostei.com/​mipsdis.html
 +
 +===== Tags =====
 +{{tag>​16flash 1WNIC 1usb 2ant 2core 2x2 32bit 34kc 5port 64ram 802.11b 802.11bgn 802.11g 802.11n adsl adsl2+ brnboot crypto fastethernet fxo internalantenna ip101a lantiq mips mips32 rt2860 rt3062 serial usb usb2.0 vdsl vdsl2 vr9 vrx288}}