Differences

This shows you the differences between two versions of the page.

toh:arcadyan:vgv7519 [2013/05/19 11:25]
thelizard same contents
toh:arcadyan:vgv7519 [2014/03/02 02:10] (current)
dpeddi
Line 1: Line 1:
====== Astoria networks VGV7519 ====== ====== Astoria networks VGV7519 ======
-Also known as KPN Experia Box v8+ 
 +There seem to be ARV7519KW (aka KPN Experia Box v8).
===== Supported Versions ===== ===== Supported Versions =====
^ Version/Model ^ Launch Date ^ S/N ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/Model ^ Launch Date ^ S/N ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1  |  ?  | J229112404 | ? | KPN Experia Box V8 |+| v1  |  ?  | J229112404 | [[https://dev.openwrt.org/changeset/38266/trunk|r38266]] | KPN Experia Box V8 |
**NOTE:** Anything not included in model specific notes, or where a short comment couldn't be included on the [[#notes]]. **NOTE:** Anything not included in model specific notes, or where a short comment couldn't be included on the [[#notes]].
Line 24: Line 25:
  - -> [[doc:howto:generic.flashing|Install OpenWrt]]   - -> [[doc:howto:generic.flashing|Install OpenWrt]]
-==== Flash Layout ==== +Note that the only working method is using JTAG! 
-Please check out the article [[doc:techref:Flash Layout]]. It contains an example and a couple of explanations. + 
-Raw flash, 2 x EN29LV640AB-90TIP+==== Original Flash Layout ==== 
 + 
 +This is the Flash layout as logged by the original VR9 Bootloader 
 + 
 +^ # ^Area          ^Address  ^  Length^ 
 +|[0]|Boot          |0xB0000000|    256K| 
 +|[1]|Boot Params    |0xB0040000|    64K| 
 +|[2]|Certificate    |0xB0050000|    64K| 
 +|[3]|Special Area  |0xB0060000|    64K| 
 +|[4]|Reserve 0      |0xB0070000|    64K| 
 +|[5]|Code Image 0  |0xB0080000|  7680K| 
 +|[6]|Primary Setting|0xB4000000|    64K| 
 +|[7]|Configuration  |0xB4010000|    384K| 
 +|[8]|Reserve 1      |0xB4070000|    64K| 
 +|[9]|Code Image 1  |0xB4080000|  7680K| 
 +|[10]|1st Flash    |0xB0000000|  8192K| 
 +|[11]|2nd Flash    |0xB4000000|  8192K| 
 + 
 +==== OpenWRT Flash Layout ====
-On my device, both flashes contain the same contents...+^  Arcadyan VGV7519 Flash Layout          ^^^^^^^^ 
 +^ Layer0      |                      EN29LV640AB-90TIP  8192KiB                                                                      |||||  EN29LV640AB-90TIP 8192KiB  || 
 +^ Layer1      |  mtd0 **//u-boot//** |  reserved  |  **//u-boot-env//**  |  reserved  |  mtd5 **//firmware//** 15872KiB                                      |||| 
 +^ Layer2      |                              ||||  mtd1 **//kernel//** 1984KiB  |  mtd2 **//rootfs//** 13888KiB                          || 
 +^ <color magenta>mountpoint</color>  |      ||||                              |  <color magenta>''/''</color>                          || 
 +^ filesystem  |                              ||||                              |  [[doc:techref:filesystems#mini_fo|mini_fo]]/[[doc:techref:filesystems#overlayfs|overlayfs]]          || 
 +^ Layer3      |                              ||||                              |                |  mtd3 **//rootfs_data//** 11904KiB    | 
 +^ Size in KiB  |  256KiB  |  128KiB  |  64KiB  |  64KiB  |                      1984KiB                      |  1984KiB        |  11904KiB    | 
 +^ Name        |  **//u-boot//**              |  //none//  | **//u-boot env//** |  //none//  |  **//kernel//**              |                |  **//rootfs_data//**            | 
 +^ <color magenta>mountpoint</color>          |  //none//  |  //none//  |  //none//  |  //none//  |  //none//                    |  <color magenta>''/rom''</color>  |  <color magenta>''/overlay''</color>  | 
 +^ filesystem  |    //none//                  |  //none//  |  //none//  |  //none//  |  //none//  |  [[doc:techref:filesystems#SquashFS]]      ||
==== OEM easy installation ==== ==== OEM easy installation ====
 +The easiest way is to enter the recovery mode as described in [[doc/techref/bootloader/brnboot]]
 +Instead on what is documented on that page, for this model the recovery web interface is available on http://192.168.2.254/
-| FIXME The instructions below are for Broadcom devices and only serve as an example. Don't leave them in place if they do not apply to a particular device! |+<color red>Additionally the page request for a PIN code which is still unknown... 
 +This PIN-code is also SHA-1 hashed and compared, I have no idea about constraints, the hash as taken from the disassembly is: 
 +B16D0EF3 DD0632DC D13D135E 02A097AE C4044C24</color>
-This section deals with how you install OpenWrt from a device freshly opened.  Plus the steps required such as reset to factory defaults if the device has already been configured+The bootloader's serial console is another option, but there is a SHA-1 hashed password as well. 
 +The only remaining way to flash it, would be to use JTAG...
-**Note:** Reset router to factory defaults if it has been previously configured. +I have managed to patch the password protection code sequence out, so I am able to gain access to the bootloader menu
-  *Browse to http://192.168.1.1/Upgrade.asp +The loader itself won't let you erase or overwrite the first sectors so it is useless for flashing another bootloader.
- *Upload .bin file to router +
-  *Wait for it to reboot +
-  *Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.+
-==== OEM installation using the TFTP method ====+Administrator mode is aquired by pressing '!' 
 +Sniffing around through the bootloader disassembly shows some differences, these are explained in the last column
--[[doc:howto:generic.flashing.tftp]]+The VR9 bootloader has the following menu options: 
 + 
 +|    | Menu item | Admin mode? | comments |  
 +| [#] | Set Serial Number | | | 
 +| [2] | Use Normal Firmware | | not implemented | 
 +| [3] | Use ART-Testing Firmware | | not implemented | 
 +| [9] | Taggle ART Firmware Enable/Disable | | | 
 +| [A] | Set MAC Address | | | 
 +| [B] | Set WPA Key | | | 
 +| [E] | Erase Flash | | | 
 +| [G] | Run Runtime Code | | | 
 +| [H] | Set Options | | | 
 +| [I] | Unlisted | | Doesn't show menu, guess it is patched out | 
 +| [L] | Unlisted | | Doesn't show menu, guess it is patched out | 
 +| [M] | Upload to Memory | X | | 
 +| [P] | Print Boot Params | | | 
 +| [R] | Read from Memory | X | | 
 +| [S] | Unlisted | | Doesn't show menu, guess it is patched out | 
 +| [T] | Test Memory (not listed as option) | | Found in disassembly | 
 +| [U] | Upload to Flash | | | 
 +| [V] | Set Board Version | | | 
 +| [W] | Write to Memory | X | | 
 +| [Y] | Go to Memory | X | | 
 +| [Z] | Dump DDR Ram Register | X | | 
 +| [0] | Primary = Image 0 | X | | 
 +| [1] | Primary = Image 1 | X | |
-=== Specific values you need === 
-| Bootloader tftp server IPv4 address | FILL-IN | 
-| Bootloader MAC address (special) | FILL-IN | 
-| Firmware tftp image | [[http://downloads.openwrt.org/FILL-IN/openwrt-FILL-IN-generic-FILL-IN-squashfs-tftp.bin]] (**''NOTE:''** Name must contain //"tftp"//) | 
-| TFTP Transfer Window | FILL-IN seconds | 
-| TFTP Window Start | approximately FILL-IN seconds after power on | 
-| TFTP Client Required IP Address | FILL-IN | 
==== Upgrading OpenWrt ==== ==== Upgrading OpenWrt ====
->  [[doc:howto:generic.sysupgrade]] ->  [[doc:howto:generic.sysupgrade]]
 +
 +FIXME - haven't installed OpenWRT yet, so no updated instructions
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing. If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
Line 115: Line 167:
-> [[doc:howto:hardware.button]] on howto use and configure the hardware button(s). -> [[doc:howto:hardware.button]] on howto use and configure the hardware button(s).
-The Linksys WRT54GL has two buttons. They are Reset and Secure Easy Setup. Here, we merely name the buttons, so we can use them in the above Howto: +The Arcadyan VGV7519 has four buttons. They are Reset, Secure Easy Setup, WDS and Wifi enable. Here, we merely name the buttons, so we can use them in the above Howto: 
-^ BUTTON ^ Event ^ Location ^ +^ BUTTON ^ Event ^ Location ^ Action
-| Reset | reset | back | +| Reset | reset | back |
-| Secure Easy Setup | ses | side | +| ECO | ? | side | disables USB & WIFI
-| WDS | ? | side | +| Wifi enable | rfkill | side |
-| Wifi enable | ? | side |+| wps | wps | side | |
Line 127: Line 179:
| **[[wp>Instruction set|Architecture]]:**    | [[wp>MIPS architecture|MIPS]] | | **[[wp>Instruction set|Architecture]]:**    | [[wp>MIPS architecture|MIPS]] |
| **Vendor:**          | [[wp>Lantiq]] | | **Vendor:**          | [[wp>Lantiq]] |
-| **[[doc:techref:Bootloader]]:**    | [[doc:techref:bootloader:uboot|U-Boot]] / [[doc:techref:bootloader:RedBoot]] / ... |+| **[[doc:techref:Bootloader]]:**    | [[doc:techref:bootloader:brnboot|BRNBoot]] |
| **[[doc:hardware:soc|System-On-Chip]]:**  | VRX288 V1.1 (MIPS, PSB 80920 EL) | | **[[doc:hardware:soc|System-On-Chip]]:**  | VRX288 V1.1 (MIPS, PSB 80920 EL) |
-| **[[doc:hardware:cpu|CPU]]/Speed**        | 24Kc V7.4 500 Mhz |+| **[[doc:hardware:cpu|CPU]]/Speed**        | 34Kc 500 Mhz |
| **Flash-Chip:**      | [[http://www.eonssi.com/upfile/p2010610151847.pdf|EN29LV640AB-90TIP]] | | **Flash-Chip:**      | [[http://www.eonssi.com/upfile/p2010610151847.pdf|EN29LV640AB-90TIP]] |
| **Flash size:**      | 2x 8192 MiB | | **Flash size:**      | 2x 8192 MiB |
Line 135: Line 187:
| **WAN:**            | 1x RJ45 | | **WAN:**            | 1x RJ45 |
| **Modem:**          | Infineon/Lantiq [[http://www.lantiq.com/uploads/tx_abzlantiqproducts/PB-e-0027-v2_lres.pdf|XWAY VRX208]]<html><br>VDSL2 (G.993.2),<br>VDSL1 (G.993.1, T1.424, TS 101 270),<br>ADSL1/2/2+ (G.992.1/3/5) Annexes A, B, I, J, M, L</html> | | **Modem:**          | Infineon/Lantiq [[http://www.lantiq.com/uploads/tx_abzlantiqproducts/PB-e-0027-v2_lres.pdf|XWAY VRX208]]<html><br>VDSL2 (G.993.2),<br>VDSL1 (G.993.1, T1.424, TS 101 270),<br>ADSL1/2/2+ (G.992.1/3/5) Annexes A, B, I, J, M, L</html> |
-| **Wireless:**        | (unknown for now) Atheros AR9103 2.4ghz 802.11bgn | +| **Wireless:**        | RALink RT5362F TPHR059609 1222STA1 2.4ghz 802.11bgn | 
-| **Ethernet:**        | (unknown for now) RealTek RTL8366RB Gigabit w/ vlan support [[doc:techref:swconfig]] |+| **Ethernet:**        | <del>(unknown for now) RealTek RTL8366RB Gigabit w/ vlan support [[doc:techref:swconfig]]</del> Internal configurable (Infineon) |
| **Internet:**        | ADSL2+  | | **Internet:**        | ADSL2+  |
| **Phone:** | [[http://www.lantiq.com/products/voice-customer-premises-equipment/slictm/xwaytm-slic100/xwaytm-slic120/|Lantiq XWAY SLIC120 (PEF 42068 V V1.2)]], 3x FXS (TAE ports which provide POTS via a SIP gateway) | | **Phone:** | [[http://www.lantiq.com/products/voice-customer-premises-equipment/slictm/xwaytm-slic100/xwaytm-slic120/|Lantiq XWAY SLIC120 (PEF 42068 V V1.2)]], 3x FXS (TAE ports which provide POTS via a SIP gateway) |
Line 148: Line 200:
//Front:// //Front://
-{{:media:toh:arcadyan:vgv7519:vgv7519_front.jpg|}}+{{:media:toh:arcadyan:vgv7519:vgv7519_front.jpg?400|}}
//Back:// //Back://
-{{:media:toh:arcadyan:vgv7519:vgv7519_back.jpg|}} +{{:media:toh:arcadyan:vgv7519:vgv7519_back.jpg?400|}} 
-{{:media:toh:arcadyan:vgv7519:vgv7519_back_connectors.jpg|}} + 
-{{:media:toh:arcadyan:vgv7519:vgv7519_back_label.jpg|}}+{{:media:toh:arcadyan:vgv7519:vgv7519_back_connectors.jpg?400|}} 
 + 
 +{{:media:toh:arcadyan:vgv7519:vgv7519_back_label.jpg?400|}} 
* Note that in this pictures the casing was placed on top of the PCB, not fitting the connectors (as the jtag cables were still attached) * Note that in this pictures the casing was placed on top of the PCB, not fitting the connectors (as the jtag cables were still attached)
Line 166: Line 221:
//Main PCB// //Main PCB//
-{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_front.jpg|}}+{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_front.jpg?400|}}
I had to solder the 14 pins EJTAG header, but the location is quite clear I had to solder the 14 pins EJTAG header, but the location is quite clear
-{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_front_headers.jpg|}}+ 
 +{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_front_headers.jpg?400|}} 
EJTAG header and serial port header (4pins), 1st pin is at the right side (Pin 1 marking is located at the other side of the pin) EJTAG header and serial port header (4pins), 1st pin is at the right side (Pin 1 marking is located at the other side of the pin)
-{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_back.jpg|}}+ 
 +{{:media:toh:arcadyan:vgv7519:vgv7519_pcb_back.jpg?400|}} 
 + 
 +Both flash chips are located at the bottom of the PCB 
 + 
 +==== Important components ==== 
 +The actual VRX288 version is important because of the internal ethernet PHY firmware, mine is a V1.1 
 + 
 +{{:media:toh:arcadyan:vgv7519:vgv7519_vrx288_v1_1.jpg?400|}} 
 + 
 + 
 +There are 3 external ethernet PHY chips available (these are V1.3) 
 + 
 +{{:media:toh:arcadyan:vgv7519:vgv7519_ethernet_phy.jpg?400|}} 
==== Serial ==== ==== Serial ====
Line 180: Line 251:
| **Function** |  GND  |  RX  |  TX  |  VCC (3.3V)  | | **Function** |  GND  |  RX  |  TX  |  VCC (3.3V)  |
-<color red>Hooking up to the serial with 115200/8N1 enables you to access the bootloader. You have to enter three spaces immediately after powerup after which you have to enter some secret password (seems to be 16 characters, but of course I have no idea what it would be...</color>+<color red>Hooking up to the serial with 115200/8N1 enables you to access the bootloader. You have to enter three spaces immediately after powerup after which you have to enter some secret password (seems to be 16 characters, but of course I have no idea what it would be... The SHA-1 hash for the password is:  
 +42f25cd06c3e1d7096b35cbd3c3813c23adaf03a</color>
For a photo see the second picture from the Main PCB section For a photo see the second picture from the Main PCB section
Line 203: Line 275:
===== Bootloader Mods ===== ===== Bootloader Mods =====
  - you could read about [[doc:techref:bootloader]] in general   - you could read about [[doc:techref:bootloader]] in general
 +
 +I have patched out the password protection to gain access to the bootloader's menu, There aren't really interesting things to do there, so I flashed it over with u-boot.
===== Hardware mods ===== ===== Hardware mods =====
  - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then obtain some practical experience!   - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then obtain some practical experience!
-==== 128MiB RAM Mod ==== +I had to solder the JTAG header on the board
-==== I²C GPIO Mod ==== +
-==== I²C Tiny-USB Mod ====+
===== Bootlogs ===== ===== Bootlogs =====
Line 217: Line 289:
<code> <code>
-ROM VER: 1î 
ROM VER: 1.0.5 ROM VER: 1.0.5
CFG 01 CFG 01
Line 231: Line 302:
In c_entry() function ... In c_entry() function ...
install_exception install_exception
 +
 +</code>
 +</p>
 +</HTML>
 +
 +==== u-boot bootlog ====
 +<HTML>
 +<p style="padding: 10px;border:1px solid grey;height:600px;font:10px/14px Georgia, Garamond, Serif;overflow:Auto;background-color:#FFFFFF">
 +<code>
 +
 +U-Boot 2013.04-rc1-g9d05354-dirty (Jul 06 2013 - 01:13:10) VGV7519
 +
 +Board: Arcadyan VGV7519 VRX288 Board
 +SoC:  Lantiq VRX288 v1.1
 +CPU:  500 MHz
 +IO:    250 MHz
 +BUS:  250 MHz
 +BOOT:  NOR
 +DRAM:  64 MiB
 +Flash: 16 MiB
 +In:    serial
 +Out:  serial
 +Err:  serial
 +Net:  ltq-eth
 +VGV7519 #
</code> </code>
Line 241: Line 337:
<code> <code>
-PUT HERE YOUR BOOTLOG+## Booting kernel from Legacy Image at 81000000 ... 
 +  Image Name:  MIPS OpenWrt Linux-3.8.13 
 +  Created:      2013-07-15  0:36:22 UTC 
 +  Image Type:  MIPS Linux Kernel Image (lzma compressed) 
 +  Data Size:    1219536 Bytes = 1.2 MiB 
 +  Load Address: 80002000 
 +  Entry Point:  80002000 
 +  Verifying Checksum ... OK 
 +  Uncompressing Kernel Image ... OK 
 + 
 +Starting kernel ... 
 + 
 +[    0.000000] Linux version 3.8.13 (thelizard@ubuntu) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2012.12 r37050) ) #19 Mon Jul 15 02:35:59 CEST 2013 
 +[    0.000000] SoC: VR9 rev 1.1 
 +[    0.000000] bootconsole [early0] enabled 
 +[    0.000000] CPU revision is: 00019555 (MIPS 34Kc) 
 +[    0.000000] Determined physical RAM map: 
 +[    0.000000]  memory: 04000000 @ 00000000 (usable) 
 +[    0.000000] Initrd not found or empty - disabling initrd 
 +[    0.000000] Zone ranges: 
 +[    0.000000]  Normal  [mem 0x00000000-0x03ffffff] 
 +[    0.000000] Movable zone start for each node 
 +[    0.000000] Early memory node ranges 
 +[    0.000000]  node  0: [mem 0x00000000-0x03ffffff] 
 +[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. 
 +[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes 
 +[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256 
 +[    0.000000] Kernel command line: console=ttyLTQ0,115200 init=/etc/preinit 
 +[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) 
 +[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) 
 +[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) 
 +[    0.000000] __ex_table already sorted, skipping sort 
 +[    0.000000] Writing ErrCtl register=0004fa60 
 +[    0.000000] Readback ErrCtl register=0004fa60 
 +[    0.000000] Memory: 61060k/65536k available (2588k kernel code, 4476k reserved, 855k data, 192k init, 0k highmem) 
 +[    0.000000] NR_IRQS:256 
 +[    0.000000] CPU Clock: 500MHz 
 +[    0.000000] Calibrating delay loop... 332.54 BogoMIPS (lpj=665088) 
 +[    0.032000] pid_max: default: 32768 minimum: 301 
 +[    0.036000] Mount-cache hash table entries: 512 
 +[    0.040000] pinctrl core: initialized pinctrl subsystem 
 +[    0.044000] NET: Registered protocol family 16 
 +[    0.056000] pinctrl-xway 1e100b10.pinmux: Init done 
 +[    0.060000] dma-xway 1e104100.dma: Init done - hw rev: 7, ports: 7, channels: 28 
 +[    0.068000] dcdc-xrx200 1f106a00.dcdc: Core Voltage : 1016 mV 
 +[    0.080000] bio: create slab <bio-0> at 0 
 +[    0.084000] gpio-stp-xway 1e100bb0.stp: Init done 
 +[    0.088000] usbcore: registered new interface driver usbfs 
 +[    0.092000] usbcore: registered new interface driver hub 
 +[    0.096000] usbcore: registered new device driver usb 
 +[    0.100000] Switching to clocksource MIPS 
 +[    0.108000] NET: Registered protocol family 2 
 +[    0.112000] TCP established hash table entries: 512 (order: 0, 4096 bytes) 
 +[    0.116000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) 
 +[    0.124000] TCP: Hash tables configured (established 512 bind 512) 
 +[    0.132000] TCP: reno registered 
 +[    0.132000] UDP hash table entries: 256 (order: 0, 4096 bytes) 
 +[    0.140000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) 
 +[    0.148000] NET: Registered protocol family 1 
 +[    0.152000] gptu: totally 6 16-bit timers/counters 
 +[    0.156000] gptu: misc_register on minor 63 
 +[    0.160000] gptu: succeeded to request irq 126 
 +[    0.164000] gptu: succeeded to request irq 127 
 +[    0.168000] gptu: succeeded to request irq 128 
 +[    0.172000] gptu: succeeded to request irq 129 
 +[    0.180000] gptu: succeeded to request irq 130 
 +[    0.184000] gptu: succeeded to request irq 131 
 +[    0.188000] phy-xrx200 gphy-xrx200.5: requesting lantiq/vr9_phy11g_a1x.bin 
 +[    0.196000] phy-xrx200 gphy-xrx200.5: booting GPHY0 firmware at 38C0000 
 +[    0.204000] phy-xrx200 gphy-xrx200.5: booting GPHY1 firmware at 38C0000 
 +[    0.312000] squashfs: version 4.0 (2009/01/31) Phillip Lougher 
 +[    0.320000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. 
 +[    0.328000] msgmni has been set to 119 
 +[    0.332000] io scheduler noop registered 
 +[    0.336000] io scheduler deadline registered (default) 
 +[    0.340000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 112) is a lantiq,asc 
 +[    0.348000] console [ttyLTQ0] enabled, bootconsole disabled 
 +[    0.348000] console [ttyLTQ0] enabled, bootconsole disabled 
 +[    0.364000] lantiq nor flash device: 00800000 at 10000000 
 +[    0.368000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb 
 +[    0.376000] Amd/Fujitsu Extended Query Table at 0x0040 
 +[    0.380000]  Amd/Fujitsu Extended Query version 1.1. 
 +[    0.388000] number of CFI chips: 1 
 +[    0.392000] lantiq nor flash device: 00800000 at 14800000 
 +[    0.396000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb 
 +[    0.404000] Amd/Fujitsu Extended Query Table at 0x0040 
 +[    0.412000]  Amd/Fujitsu Extended Query version 1.1. 
 +[    0.416000] number of CFI chips: 1 
 +[    0.420000] Concatenating MTD devices: 
 +[    0.424000] (0): "ltq_nor" 
 +[    0.424000] (1): "ltq_nor" 
 +[    0.428000] into device "10000000.nor-boot" 
 +[    0.432000] 3 ofpart partitions found on MTD device 10000000.nor-boot 
 +[    0.440000] Creating 3 MTD partitions on "10000000.nor-boot": 
 +[    0.444000] 0x000000000000-0x000000040000 : "uboot" 
 +[    0.452000] 0x000000060000-0x000000070000 : "uboot_env" 
 +[    0.456000] 0x000000080000-0x000001000000 : "linux" 
 +[    0.460000] found squashfs behind kernel 
 +[    0.464000] Creating 2 MTD partitions on "10000000.nor-boot": 
 +[    0.468000] 0x000000080000-0x0000001ad510 : "kernel" 
 +[    0.476000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only 
 +[    0.488000] 0x0000001ad510-0x000001000000 : "rootfs" 
 +[    0.492000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only 
 +[    0.508000] mtd: partition "rootfs" set to be root filesystem 
 +[    0.512000] mtd: partition "rootfs_data" created automatically, ofs=390000, len=C70000 
 +[    0.520000] 0x000000390000-0x000001000000 : "rootfs_data" 
 +[    0.632000] libphy: lantiq,xrx200-mdio: probed 
 +[    0.640000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:00, irq=-1) 
 +[    0.648000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:01, irq=-1) 
 +[    0.656000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:11, irq=-1) 
 +[    0.664000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:13, irq=-1) 
 +[    0.672000] eth1: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:05, irq=-1) 
 +[    0.680000] wdt 1f8803f0.watchdog: Init done 
 +[    0.684000] leds-gpio gpio-leds.7: pins are not configured from the driver 
 +[    0.696000] TCP: cubic registered 
 +[    0.700000] NET: Registered protocol family 17 
 +[    0.704000] 8021q: 802.1Q VLAN Support v1.8 
 +[    0.716000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. 
 +[    0.720000] Freeing unused kernel memory: 192k freed 
 +procd: Console is alive 
 +[    2.288000] IFXUSB: ifxusb_hcd: version 3.2 B110801 
 +[    2.292000] Chip Version :01c0 BurstSize=0 
 +[    2.896000] IFXUSB: USB core #0 soft-reset 
 +[    3.196000] IFXUSB: USB core #0 soft-reset 
 +[    3.200000] ifxusb_hcd ifxusb_hcd: IFX USB Controller 
 +[    3.204000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1 
 +[    3.212000] ifxusb_hcd ifxusb_hcd: irq 62, io mem 0xbe101000 
 +[    3.220000] IFXUSB: Init: Power Port (0) 
 +[    3.224000] hub 1-0:1.0: USB hub found 
 +[    3.228000] hub 1-0:1.0: 1 port detected 
 +[    3.732000] IFXUSB: USB core #1 soft-reset 
 +[    4.032000] IFXUSB: USB core #1 soft-reset 
 +[    4.036000] ifxusb_hcd ifxusb_hcd: IFX USB Controller 
 +[    4.040000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 2 
 +[    4.048000] ifxusb_hcd ifxusb_hcd: irq 91, io mem 0xbe106000 
 +[    4.052000] IFXUSB: Init: Power Port (0) 
 +[    4.060000] hub 2-0:1.0: USB hub found 
 +[    4.060000] hub 2-0:1.0: 1 port detected 
 +[    4.068000] ifxusb_hcd ifxusb_hcd: requested GPIO 233 
 +procd: - preinit - 
 +[    4.272000] eth0: port 4 got link 
 +Press the [f] key and hit [enter] to enter failsafe mode 
 +mount_root: jffs2 is ready 
 +[    7.492000] jffs2: notice: (253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 8 of xref (0 dead                    , 2 orphan) found. 
 +procd: - early - 
 +procd: - watchdog - 
 +procd: - init - 
 +Please press Enter to activate this console. 
 +[    9.136000] IFXOS, Version 1.5.14 (c) Copyright 2009, Lantiq Deutschland GmbH 
 + 
 +[    9.236000] Loading modules backported from Linux version master-2013-06-27-0-gdcfa6d5 
 +[    9.244000] Backport generated by backports.git backports-20130617-4-ge3220f5 
 +[    9.268000] cfg80211: Calling CRDA to update world regulatory domain 
 +[    9.272000] cfg80211: World regulatory domain updated: 
 +[    9.276000] cfg80211:  (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) 
 +[    9.284000] cfg80211:  (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
 +[    9.292000] cfg80211:  (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) 
 +[    9.300000] cfg80211:  (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) 
 +[    9.308000] cfg80211:  (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
 +[    9.316000] cfg80211:  (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
 +[    9.560000] NET: Registered protocol family 10 
 +[  10.176000] NET: Registered protocol family 8 
 +[  10.180000] NET: Registered protocol family 20 
 +[  10.252000] PPP generic driver version 2.4.2 
 +[  10.492000] ip_tables: (C) 2000-2006 Netfilter Core Team 
 +[  10.572000] xt_time: kernel timezone is -0000 
 +[  10.580000] NET: Registered protocol family 24 
 +[  10.668000] nf_conntrack version 0.5.0 (957 buckets, 3828 max) 
 +[  11.148000] ip6_tables: (C) 2000-2006 Netfilter Core Team 
 +[  11.180000] MEI CPE Driver, Version 1.2.0 
 + 
 +[  11.180000] (c) Copyright 2009, Infineon Technologies AG 
 +### MEI CPE - MEI CPE - MEI CPE - MEI CPE ### 
 + 
 + 
 +Lantiq CPE API Driver version: DSL CPE API V4.11.4 
 +[  11.272000] 
 +[  11.272000] Predefined debug level: 2 
 +[  11.384000] ATM1.0.26    ATM (A1) firmware version 0.24 
 +[  11.388000] ifxmips_atm: ATM init succeed 
 +[  11.508000] Infineon Technologies DEU driver version 2.0.0 
 +[  11.512000] IFX DEU DES initialized (multiblock). 
 +[  11.516000] IFX DEU AES initialized (multiblock). 
 +[  11.520000] IFX DEU ARC4 initialized (multiblock). 
 +[  11.528000] IFX DEU SHA1 initialized. 
 +[  11.528000] IFX DEU MD5 initialized. 
 +[  11.532000] IFX DEU SHA1_HMAC initialized. 
 +[  11.536000] IFX DEU MD5_HMAC initialized. 
 +[  15.360000] device eth0 entered promiscuous mode 
 +[  15.364000] br-lan: port 1(eth0) entered forwarding state 
 +[  15.372000] br-lan: port 1(eth0) entered forwarding state 
 +[  17.376000] br-lan: port 1(eth0) entered forwarding state 
 +procd: - init complete -
</code> </code>
Line 250: Line 538:
===== Notes ===== ===== Notes =====
 +SIP:
 +
 +daemon to test:
 +sofia-sip
 +pjsip(already in openwrt)
 +owsip(already in openwrt)
 +
 +driver vmmc:
 +http://mirror2.openwrt.org/sources/drv_vmmc-1.9.0.tar.bz2
 +drv_vmmc-1.9.0/FEATURES_and_OPEN_ISSUES
 +* TAPI 3.13.0.2, drv_vmmc 1.9.0.3, KPI 2.2.0.0, MPS 2.2.2.5
 +* XWAY VRX288 VoIP Firmware  2.1.0.7.0
 +Original firmware 1.9.0.4
 +
 +need firmware dump for dsl, voip and coef + populate openwrt/package/ifx-vmmc/Makefile
 +
 +driver tapi:
 +http://mirror2.openwrt.org/sources/drv_tapi-3.13.0.tar.bz2
 +Same level as original firmware
 +
 +http://dev.phrozen.org/ltq-mirror/ (dsl and other stuff)
 +
 +DSL:
 +available version 4.11.4 - my firmware version: 4.12.4 - May works
 +need firmware dump
 +
 +SWITCH:
 +look at switch_utils note at http://wiki.openwrt.org/toh/tp-link/td-w8970#switch_utility
 +we need to decompile original firmware and recovery switch initialization params
===== Tags ===== ===== Tags =====
For some Help with the Tags, please have a look here: [[meta/tags]] For some Help with the Tags, please have a look here: [[meta/tags]]
-{{tag>GigabitEthernet FastEthernet 5Port 2PHY USB 2USB ath9k 64RAM 16Flash MIPS MIPS32 34K}}+{{tag>GigabitEthernet 4Port 1NIC 1WNIC USB 2USB ath9k 64RAM 16Flash MIPS MIPS32 34K lantiq VR9 VDSL2}}

Back to top

toh/arcadyan/vgv7519.1368955514.txt.bz2 · Last modified: 2013/05/19 11:25 by thelizard