Differences

This shows you the differences between two versions of the page.

toh:arcadyan:vgv7519 [2013/07/07 11:48]
thelizard Changed order of buttons (top to bottom on device)
toh:arcadyan:vgv7519 [2014/03/02 02:10] (current)
dpeddi
Line 1: Line 1:
====== Astoria networks VGV7519 ====== ====== Astoria networks VGV7519 ======
-There seem to be ARV7519RW (aka Livebox 2.1) and ARV7519KW (aka KPN Experia Box v8).+There seem to be ARV7519KW (aka KPN Experia Box v8).
===== Supported Versions ===== ===== Supported Versions =====
^ Version/Model ^ Launch Date ^ S/N ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/Model ^ Launch Date ^ S/N ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1  |  ?  | J229112404 | ? | KPN Experia Box V8 |+| v1  |  ?  | J229112404 | [[https://dev.openwrt.org/changeset/38266/trunk|r38266]] | KPN Experia Box V8 |
**NOTE:** Anything not included in model specific notes, or where a short comment couldn't be included on the [[#notes]]. **NOTE:** Anything not included in model specific notes, or where a short comment couldn't be included on the [[#notes]].
Line 60: Line 60:
==== OEM easy installation ==== ==== OEM easy installation ====
 +The easiest way is to enter the recovery mode as described in [[doc/techref/bootloader/brnboot]]
 +Instead on what is documented on that page, for this model the recovery web interface is available on http://192.168.2.254/
-As the bootloaders password is still unknown, the only way to flash it, would be to use JTAG...+<color red>Additionally the page request for a PIN code which is still unknown... 
 +This PIN-code is also SHA-1 hashed and compared, I have no idea about constraints, the hash as taken from the disassembly is: 
 +B16D0EF3 DD0632DC D13D135E 02A097AE C4044C24</color> 
 + 
 +The bootloader's serial console is another option, but there is a SHA-1 hashed password as well. 
 +The only remaining way to flash it, would be to use JTAG...
I have managed to patch the password protection code sequence out, so I am able to gain access to the bootloader menu. I have managed to patch the password protection code sequence out, so I am able to gain access to the bootloader menu.
The loader itself won't let you erase or overwrite the first sectors so it is useless for flashing another bootloader. The loader itself won't let you erase or overwrite the first sectors so it is useless for flashing another bootloader.
 +
 +Administrator mode is aquired by pressing '!'
 +Sniffing around through the bootloader disassembly shows some differences, these are explained in the last column
The VR9 bootloader has the following menu options: The VR9 bootloader has the following menu options:
-| [#] | Set Serial Number | +|    | Menu item | Admin mode? | comments |  
-| [2] | Use Normal Firmware | +| [#] | Set Serial Number | |
-| [3] | Use ART-Testing Firmware | +| [2] | Use Normal Firmware | | not implemented
-| [9] | Taggle ART Firmware Enable/Disable | +| [3] | Use ART-Testing Firmware | | not implemented
-| [A] | Set MAC Address | +| [9] | Taggle ART Firmware Enable/Disable | |
-| [B] | Set WPA Key | +| [A] | Set MAC Address | |
-| [E] | Erase Flash | +| [B] | Set WPA Key | |
-| [G] | Run Runtime Code | +| [E] | Erase Flash | |
-| [H] | Set Options | +| [G] | Run Runtime Code | |
-| [P] | Print Boot Params | +| [H] | Set Options | | | 
-| [U] | Upload to Flash | +| [I] | Unlisted | | Doesn't show menu, guess it is patched out | 
-| [V] | Set Board Version |+| [L] | Unlisted | | Doesn't show menu, guess it is patched out | 
 +| [M] | Upload to Memory | X |
 +| [P] | Print Boot Params | | | 
 +| [R] | Read from Memory | X | | 
 +| [S] | Unlisted | | Doesn't show menu, guess it is patched out | 
 +| [T] | Test Memory (not listed as option) | | Found in disassembly
 +| [U] | Upload to Flash | |
 +| [V] | Set Board Version | | | 
 +| [W] | Write to Memory | X | | 
 +| [Y] | Go to Memory | X | | 
 +| [Z] | Dump DDR Ram Register | X | | 
 +| [0] | Primary = Image 0 | X | | 
 +| [1] | Primary = Image 1 | X | | 
Line 148: Line 171:
| Reset | reset | back | | | Reset | reset | back | |
| ECO | ? | side | disables USB & WIFI | | ECO | ? | side | disables USB & WIFI |
-| Wifi enable | ? | side | | +| Wifi enable | rfkill | side | | 
-| Secure Easy Setup | ses | side | |+| wps | wps | side | |
Line 156: Line 179:
| **[[wp>Instruction set|Architecture]]:**    | [[wp>MIPS architecture|MIPS]] | | **[[wp>Instruction set|Architecture]]:**    | [[wp>MIPS architecture|MIPS]] |
| **Vendor:**          | [[wp>Lantiq]] | | **Vendor:**          | [[wp>Lantiq]] |
-| **[[doc:techref:Bootloader]]:**    | [[doc:techref:bootloader:uboot|U-Boot]] |+| **[[doc:techref:Bootloader]]:**    | [[doc:techref:bootloader:brnboot|BRNBoot]] |
| **[[doc:hardware:soc|System-On-Chip]]:**  | VRX288 V1.1 (MIPS, PSB 80920 EL) | | **[[doc:hardware:soc|System-On-Chip]]:**  | VRX288 V1.1 (MIPS, PSB 80920 EL) |
| **[[doc:hardware:cpu|CPU]]/Speed**        | 34Kc 500 Mhz | | **[[doc:hardware:cpu|CPU]]/Speed**        | 34Kc 500 Mhz |
Line 164: Line 187:
| **WAN:**            | 1x RJ45 | | **WAN:**            | 1x RJ45 |
| **Modem:**          | Infineon/Lantiq [[http://www.lantiq.com/uploads/tx_abzlantiqproducts/PB-e-0027-v2_lres.pdf|XWAY VRX208]]<html><br>VDSL2 (G.993.2),<br>VDSL1 (G.993.1, T1.424, TS 101 270),<br>ADSL1/2/2+ (G.992.1/3/5) Annexes A, B, I, J, M, L</html> | | **Modem:**          | Infineon/Lantiq [[http://www.lantiq.com/uploads/tx_abzlantiqproducts/PB-e-0027-v2_lres.pdf|XWAY VRX208]]<html><br>VDSL2 (G.993.2),<br>VDSL1 (G.993.1, T1.424, TS 101 270),<br>ADSL1/2/2+ (G.992.1/3/5) Annexes A, B, I, J, M, L</html> |
-| **Wireless:**        | (unknown for now) Atheros AR9103 2.4ghz 802.11bgn | +| **Wireless:**        | RALink RT5362F TPHR059609 1222STA1 2.4ghz 802.11bgn | 
-| **Ethernet:**        | (unknown for now) RealTek RTL8366RB Gigabit w/ vlan support [[doc:techref:swconfig]] |+| **Ethernet:**        | <del>(unknown for now) RealTek RTL8366RB Gigabit w/ vlan support [[doc:techref:swconfig]]</del> Internal configurable (Infineon) |
| **Internet:**        | ADSL2+  | | **Internet:**        | ADSL2+  |
| **Phone:** | [[http://www.lantiq.com/products/voice-customer-premises-equipment/slictm/xwaytm-slic100/xwaytm-slic120/|Lantiq XWAY SLIC120 (PEF 42068 V V1.2)]], 3x FXS (TAE ports which provide POTS via a SIP gateway) | | **Phone:** | [[http://www.lantiq.com/products/voice-customer-premises-equipment/slictm/xwaytm-slic100/xwaytm-slic120/|Lantiq XWAY SLIC120 (PEF 42068 V V1.2)]], 3x FXS (TAE ports which provide POTS via a SIP gateway) |
Line 228: Line 251:
| **Function** |  GND  |  RX  |  TX  |  VCC (3.3V)  | | **Function** |  GND  |  RX  |  TX  |  VCC (3.3V)  |
-<color red>Hooking up to the serial with 115200/8N1 enables you to access the bootloader. You have to enter three spaces immediately after powerup after which you have to enter some secret password (seems to be 16 characters, but of course I have no idea what it would be... The SHA-1 hash for the password is: 42f25cd06c3e1d7096b35cbd3c3813c23adaf03a</color>+<color red>Hooking up to the serial with 115200/8N1 enables you to access the bootloader. You have to enter three spaces immediately after powerup after which you have to enter some secret password (seems to be 16 characters, but of course I have no idea what it would be... The SHA-1 hash for the password is:  
 +42f25cd06c3e1d7096b35cbd3c3813c23adaf03a</color>
For a photo see the second picture from the Main PCB section For a photo see the second picture from the Main PCB section
Line 312: Line 336:
<p style="padding: 10px;border:1px solid grey;height:600px;font:10px/14px Georgia, Garamond, Serif;overflow:Auto;background-color:#FFFFFF"> <p style="padding: 10px;border:1px solid grey;height:600px;font:10px/14px Georgia, Garamond, Serif;overflow:Auto;background-color:#FFFFFF">
<code> <code>
 +
 +## Booting kernel from Legacy Image at 81000000 ...
 +  Image Name:  MIPS OpenWrt Linux-3.8.13
 +  Created:      2013-07-15  0:36:22 UTC
 +  Image Type:  MIPS Linux Kernel Image (lzma compressed)
 +  Data Size:    1219536 Bytes = 1.2 MiB
 +  Load Address: 80002000
 +  Entry Point:  80002000
 +  Verifying Checksum ... OK
 +  Uncompressing Kernel Image ... OK
Starting kernel ... Starting kernel ...
-[    0.000000] Linux version 3.8.13 (thelizard@ubuntu) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2012.12 r37050) ) #31 Sat Jul 6 01:23:47 CEST 2013+[    0.000000] Linux version 3.8.13 (thelizard@ubuntu) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2012.12 r37050) ) #19 Mon Jul 15 02:35:59 CEST 2013
[    0.000000] SoC: VR9 rev 1.1 [    0.000000] SoC: VR9 rev 1.1
[    0.000000] bootconsole [early0] enabled [    0.000000] bootconsole [early0] enabled
Line 335: Line 369:
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] __ex_table already sorted, skipping sort [    0.000000] __ex_table already sorted, skipping sort
-[    0.000000] Writing ErrCtl register=00048068 +[    0.000000] Writing ErrCtl register=0004fa60 
-[    0.000000] Readback ErrCtl register=00048068 +[    0.000000] Readback ErrCtl register=0004fa60 
-[    0.000000] Memory: 61000k/65536k available (2616k kernel code, 4536k reserved, 860k data, 224k init, 0k highmem)+[    0.000000] Memory: 61060k/65536k available (2588k kernel code, 4476k reserved, 855k data, 192k init, 0k highmem)
[    0.000000] NR_IRQS:256 [    0.000000] NR_IRQS:256
[    0.000000] CPU Clock: 500MHz [    0.000000] CPU Clock: 500MHz
Line 348: Line 382:
[    0.060000] dma-xway 1e104100.dma: Init done - hw rev: 7, ports: 7, channels: 28 [    0.060000] dma-xway 1e104100.dma: Init done - hw rev: 7, ports: 7, channels: 28
[    0.068000] dcdc-xrx200 1f106a00.dcdc: Core Voltage : 1016 mV [    0.068000] dcdc-xrx200 1f106a00.dcdc: Core Voltage : 1016 mV
-[    0.084000] bio: create slab <bio-0> at 0 +[    0.080000] bio: create slab <bio-0> at 0 
-[    0.088000] gpio-stp-xway 1e100bb0.stp: Init done +[    0.084000] gpio-stp-xway 1e100bb0.stp: Init done 
-[    0.092000] usbcore: registered new interface driver usbfs +[    0.088000] usbcore: registered new interface driver usbfs 
-[    0.096000] usbcore: registered new interface driver hub +[    0.092000] usbcore: registered new interface driver hub 
-[    0.100000] usbcore: registered new device driver usb +[    0.096000] usbcore: registered new device driver usb 
-[    0.104000] Switching to clocksource MIPS +[    0.100000] Switching to clocksource MIPS 
-[    0.112000] NET: Registered protocol family 2 +[    0.108000] NET: Registered protocol family 2 
-[    0.116000] TCP established hash table entries: 512 (order: 0, 4096 bytes) +[    0.112000] TCP established hash table entries: 512 (order: 0, 4096 bytes) 
-[    0.120000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) +[    0.116000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) 
-[    0.128000] TCP: Hash tables configured (established 512 bind 512) +[    0.124000] TCP: Hash tables configured (established 512 bind 512) 
-[    0.136000] TCP: reno registered +[    0.132000] TCP: reno registered 
-[    0.136000] UDP hash table entries: 256 (order: 0, 4096 bytes) +[    0.132000] UDP hash table entries: 256 (order: 0, 4096 bytes) 
-[    0.144000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) +[    0.140000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) 
-[    0.152000] NET: Registered protocol family 1 +[    0.148000] NET: Registered protocol family 1 
-[    0.156000] gptu: totally 6 16-bit timers/counters +[    0.152000] gptu: totally 6 16-bit timers/counters 
-[    0.160000] gptu: misc_register on minor 63 +[    0.156000] gptu: misc_register on minor 63 
-[    0.164000] gptu: succeeded to request irq 126 +[    0.160000] gptu: succeeded to request irq 126 
-[    0.168000] gptu: succeeded to request irq 127 +[    0.164000] gptu: succeeded to request irq 127 
-[    0.172000] gptu: succeeded to request irq 128 +[    0.168000] gptu: succeeded to request irq 128 
-[    0.176000] gptu: succeeded to request irq 129 +[    0.172000] gptu: succeeded to request irq 129 
-[    0.184000] gptu: succeeded to request irq 130 +[    0.180000] gptu: succeeded to request irq 130 
-[    0.188000] gptu: succeeded to request irq 131 +[    0.184000] gptu: succeeded to request irq 131 
-[    0.192000] phy-xrx200 gphy-xrx200.5: requesting lantiq/vr9_phy11g_a1x.bin +[    0.188000] phy-xrx200 gphy-xrx200.5: requesting lantiq/vr9_phy11g_a1x.bin 
-[    0.200000] phy-xrx200 gphy-xrx200.5: booting GPHY0 firmware at 38C0000 +[    0.196000] phy-xrx200 gphy-xrx200.5: booting GPHY0 firmware at 38C0000 
-[    0.208000] phy-xrx200 gphy-xrx200.5: booting GPHY1 firmware at 38C0000 +[    0.204000] phy-xrx200 gphy-xrx200.5: booting GPHY1 firmware at 38C0000 
-[    0.316000] squashfs: version 4.0 (2009/01/31) Phillip Lougher+[    0.312000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.320000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [    0.320000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
-[    0.332000] msgmni has been set to 119 +[    0.328000] msgmni has been set to 119 
-[    0.336000] io scheduler noop registered +[    0.332000] io scheduler noop registered 
-[    0.340000] io scheduler deadline registered (default) +[    0.336000] io scheduler deadline registered (default) 
-[    0.344000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 112) is a lantiq,asc +[    0.340000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 112) is a lantiq,asc 
-[    0.352000] console [ttyLTQ0] enabled, bootconsole disabled +[    0.348000] console [ttyLTQ0] enabled, bootconsole disabled 
-[    0.352000] console [ttyLTQ0] enabled, bootconsole disabled +[    0.348000] console [ttyLTQ0] enabled, bootconsole disabled 
-[    0.368000] lantiq nor flash device: 00800000 at 10000000 +[    0.364000] lantiq nor flash device: 00800000 at 10000000 
-[    0.372000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb +[    0.368000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb 
-[    0.380000] Amd/Fujitsu Extended Query Table at 0x0040 +[    0.376000] Amd/Fujitsu Extended Query Table at 0x0040 
-[    0.384000]  Amd/Fujitsu Extended Query version 1.1. +[    0.380000]  Amd/Fujitsu Extended Query version 1.1. 
-[    0.392000] number of CFI chips: 1+[    0.388000] number of CFI chips: 1
[    0.392000] lantiq nor flash device: 00800000 at 14800000 [    0.392000] lantiq nor flash device: 00800000 at 14800000
-[    0.400000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb +[    0.396000] ltq_nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x00007f Chip ID 0x0022cb 
-[    0.408000] Amd/Fujitsu Extended Query Table at 0x0040+[    0.404000] Amd/Fujitsu Extended Query Table at 0x0040
[    0.412000]  Amd/Fujitsu Extended Query version 1.1. [    0.412000]  Amd/Fujitsu Extended Query version 1.1.
-[    0.420000] number of CFI chips: 1 +[    0.416000] number of CFI chips: 1 
-[    0.424000] Concatenating MTD devices: +[    0.420000] Concatenating MTD devices: 
-[    0.428000] (0): "ltq_nor" +[    0.424000] (0): "ltq_nor" 
-[    0.428000] (1): "ltq_nor" +[    0.424000] (1): "ltq_nor" 
-[    0.432000] into device "10000000.nor-boot" +[    0.428000] into device "10000000.nor-boot" 
-[    0.436000] 3 ofpart partitions found on MTD device 10000000.nor-boot +[    0.432000] 3 ofpart partitions found on MTD device 10000000.nor-boot 
-[    0.444000] Creating 3 MTD partitions on "10000000.nor-boot": +[    0.440000] Creating 3 MTD partitions on "10000000.nor-boot": 
-[    0.448000] 0x000000000000-0x000000040000 : "uboot" +[    0.444000] 0x000000000000-0x000000040000 : "uboot" 
-[    0.456000] 0x000000060000-0x000000070000 : "uboot_env" +[    0.452000] 0x000000060000-0x000000070000 : "uboot_env" 
-[    0.460000] 0x000000080000-0x000001000000 : "linux"+[    0.456000] 0x000000080000-0x000001000000 : "linux" 
 +[    0.460000] found squashfs behind kernel
[    0.464000] Creating 2 MTD partitions on "10000000.nor-boot": [    0.464000] Creating 2 MTD partitions on "10000000.nor-boot":
-[    0.468000] 0x000000080000-0x0000001b0000 : "kernel" +[    0.468000] 0x000000080000-0x0000001ad510 : "kernel" 
-[    0.476000] 0x0000001b0000-0x000001000000 : "rootfs" +[    0.476000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only 
-[    0.480000] mtd: partition "rootfs" set to be root filesystem +[    0.488000] 0x0000001ad510-0x000001000000 : "rootfs" 
-[    0.484000] mtd: partition "rootfs_data" created automatically, ofs=390000, len=C70000 +[    0.492000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only 
-[    0.492000] 0x000000390000-0x000001000000 : "rootfs_data" +[    0.508000] mtd: partition "rootfs" set to be root filesystem 
-[    0.608000] libphy: lantiq,xrx200-mdio: probed +[    0.512000] mtd: partition "rootfs_data" created automatically, ofs=390000, len=C70000 
-[    0.616000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:00, irq=-1) +[    0.520000] 0x000000390000-0x000001000000 : "rootfs_data" 
-[    0.624000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:01, irq=-1) +[    0.632000] libphy: lantiq,xrx200-mdio: probed 
-[    0.632000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:11, irq=-1) +[    0.640000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:00, irq=-1) 
-[    0.636000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:13, irq=-1) +[    0.648000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:01, irq=-1) 
-[    0.648000] eth1: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:05, irq=-1) +[    0.656000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:11, irq=-1) 
-[    0.656000] wdt 1f8803f0.watchdog: Init done +[    0.664000] eth0: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.4] (phy_addr=0:13, irq=-1) 
-[    0.660000] leds-gpio gpio-leds.7: pins are not configured from the driver +[    0.672000] eth1: attached PHY [Lantiq XWAY VR9 GPHY 11G v1.3] (phy_addr=0:05, irq=-1) 
-[    0.668000] TCP: cubic registered +[    0.680000] wdt 1f8803f0.watchdog: Init done 
-[    0.672000] NET: Registered protocol family 17 +[    0.684000] leds-gpio gpio-leds.7: pins are not configured from the driver 
-[    0.676000] 8021q: 802.1Q VLAN Support v1.8 +[    0.696000] TCP: cubic registered 
-[    0.688000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. +[    0.700000] NET: Registered protocol family 17 
-[    0.696000] Freeing unused kernel memory: 224k freed+[    0.704000] 8021q: 802.1Q VLAN Support v1.8 
 +[    0.716000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. 
 +[    0.720000] Freeing unused kernel memory: 192k freed
procd: Console is alive procd: Console is alive
-[    2.260000] IFXUSB: ifxusb_hcd: version 3.2 B110801 +[    2.288000] IFXUSB: ifxusb_hcd: version 3.2 B110801 
-[    2.264000] Chip Version :01c0 BurstSize=0 +[    2.292000] Chip Version :01c0 BurstSize=0 
-[    2.868000] IFXUSB: USB core #0 soft-reset +[    2.896000] IFXUSB: USB core #0 soft-reset 
-[    3.168000] IFXUSB: USB core #0 soft-reset +[    3.196000] IFXUSB: USB core #0 soft-reset 
-[    3.172000] ifxusb_hcd ifxusb_hcd: IFX USB Controller +[    3.200000] ifxusb_hcd ifxusb_hcd: IFX USB Controller 
-[    3.176000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1 +[    3.204000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1 
-[    3.184000] ifxusb_hcd ifxusb_hcd: irq 62, io mem 0xbe101000 +[    3.212000] ifxusb_hcd ifxusb_hcd: irq 62, io mem 0xbe101000 
-[    3.188000] IFXUSB: Init: Power Port (0) +[    3.220000] IFXUSB: Init: Power Port (0) 
-[    3.196000] eth0: port 4 got link +[    3.224000] hub 1-0:1.0: USB hub found 
-[    3.196000] hub 1-0:1.0: USB hub found +[    3.228000] hub 1-0:1.0: 1 port detected 
-[    3.200000] hub 1-0:1.0: 1 port detected +[    3.732000] IFXUSB: USB core #1 soft-reset 
-[    3.704000] IFXUSB: USB core #1 soft-reset +[    4.032000] IFXUSB: USB core #1 soft-reset 
-[    4.008000] IFXUSB: USB core #1 soft-reset +[    4.036000] ifxusb_hcd ifxusb_hcd: IFX USB Controller 
-[    4.012000] ifxusb_hcd ifxusb_hcd: IFX USB Controller +[    4.040000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 2 
-[    4.016000] ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 2 +[    4.048000] ifxusb_hcd ifxusb_hcd: irq 91, io mem 0xbe106000 
-[    4.024000] ifxusb_hcd ifxusb_hcd: irq 91, io mem 0xbe106000 +[    4.052000] IFXUSB: Init: Power Port (0) 
-[    4.028000] IFXUSB: Init: Power Port (0) +[    4.060000] hub 2-0:1.0: USB hub found 
-[    4.032000] hub 2-0:1.0: USB hub found +[    4.060000] hub 2-0:1.0: 1 port detected 
-[    4.036000] hub 2-0:1.0: 1 port detected +[    4.068000] ifxusb_hcd ifxusb_hcd: requested GPIO 233
-[    4.040000] ifxusb_hcd ifxusb_hcd: requested GPIO 233+
procd: - preinit - procd: - preinit -
 +[    4.272000] eth0: port 4 got link
Press the [f] key and hit [enter] to enter failsafe mode Press the [f] key and hit [enter] to enter failsafe mode
mount_root: jffs2 is ready mount_root: jffs2 is ready
-[    7.464000] jffs2: notice: (257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 8 of xref (0 dead, 2 orphan) found.+[    7.492000] jffs2: notice: (253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 8 of xref (0 dead                   , 2 orphan) found.
procd: - early - procd: - early -
procd: - watchdog - procd: - watchdog -
procd: - init - procd: - init -
Please press Enter to activate this console. Please press Enter to activate this console.
-[    8.952000] IFXOS, Version 1.5.14 (c) Copyright 2009, Lantiq Deutschland GmbH+[    9.136000] IFXOS, Version 1.5.14 (c) Copyright 2009, Lantiq Deutschland GmbH
-[    9.100000] Loading modules backported from Linux version master-2013-06-27-0-gdcfa6d5 +[    9.236000] Loading modules backported from Linux version master-2013-06-27-0-gdcfa6d5 
-[    9.104000] Backport generated by backports.git backports-20130617-4-ge3220f5 +[    9.244000] Backport generated by backports.git backports-20130617-4-ge3220f5 
-[    9.140000] cfg80211: Calling CRDA to update world regulatory domain +[    9.268000] cfg80211: Calling CRDA to update world regulatory domain 
-[    9.148000] cfg80211: World regulatory domain updated: +[    9.272000] cfg80211: World regulatory domain updated: 
-[    9.152000] cfg80211:  (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) +[    9.276000] cfg80211:  (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) 
-[    9.160000] cfg80211:  (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) +[    9.284000] cfg80211:  (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
-[    9.164000] cfg80211:  (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) +[    9.292000] cfg80211:  (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) 
-[    9.172000] cfg80211:  (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) +[    9.300000] cfg80211:  (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) 
-[    9.180000] cfg80211:  (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) +[    9.308000] cfg80211:  (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
-[    9.188000] cfg80211:  (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) +[    9.316000] cfg80211:  (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) 
-[    9.428000] NET: Registered protocol family 10 +[    9.560000] NET: Registered protocol family 10 
-[  10.144000] NET: Registered protocol family 8 +[  10.176000] NET: Registered protocol family 8 
-[  10.148000] NET: Registered protocol family 20 +[  10.180000] NET: Registered protocol family 20 
-[  10.220000] PPP generic driver version 2.4.2 +[  10.252000] PPP generic driver version 2.4.2 
-[  10.460000] ip_tables: (C) 2000-2006 Netfilter Core Team +[  10.492000] ip_tables: (C) 2000-2006 Netfilter Core Team 
-[  10.540000] xt_time: kernel timezone is -0000 +[  10.572000] xt_time: kernel timezone is -0000 
-[  10.552000] NET: Registered protocol family 24 +[  10.580000] NET: Registered protocol family 24 
-[  10.636000] nf_conntrack version 0.5.0 (956 buckets, 3824 max) +[  10.668000] nf_conntrack version 0.5.0 (957 buckets, 3828 max) 
-[  11.116000] ip6_tables: (C) 2000-2006 Netfilter Core Team +[  11.148000] ip6_tables: (C) 2000-2006 Netfilter Core Team 
-[  11.148000] MEI CPE Driver, Version 1.2.0+[  11.180000] MEI CPE Driver, Version 1.2.0
-[  11.148000] (c) Copyright 2009, Infineon Technologies AG+[  11.180000] (c) Copyright 2009, Infineon Technologies AG
### MEI CPE - MEI CPE - MEI CPE - MEI CPE ### ### MEI CPE - MEI CPE - MEI CPE - MEI CPE ###
Lantiq CPE API Driver version: DSL CPE API V4.11.4 Lantiq CPE API Driver version: DSL CPE API V4.11.4
-[  11.240000+[  11.272000
-[  11.240000] Predefined debug level: 2 +[  11.272000] Predefined debug level: 2 
-[  11.352000] ATM1.0.26    ATM (A1) firmware version 0.24 +[  11.384000] ATM1.0.26    ATM (A1) firmware version 0.24 
-[  11.356000] ifxmips_atm: ATM init succeed +[  11.388000] ifxmips_atm: ATM init succeed 
-[  11.476000] Infineon Technologies DEU driver version 2.0.0 +[  11.508000] Infineon Technologies DEU driver version 2.0.0 
-[  11.480000] IFX DEU DES initialized (multiblock). +[  11.512000] IFX DEU DES initialized (multiblock). 
-[  11.484000] IFX DEU AES initialized (multiblock). +[  11.516000] IFX DEU AES initialized (multiblock). 
-[  11.488000] IFX DEU ARC4 initialized (multiblock). +[  11.520000] IFX DEU ARC4 initialized (multiblock). 
-[  11.496000] IFX DEU SHA1 initialized. +[  11.528000] IFX DEU SHA1 initialized. 
-[  11.496000] IFX DEU MD5 initialized. +[  11.528000] IFX DEU MD5 initialized. 
-[  11.500000] IFX DEU SHA1_HMAC initialized. +[  11.532000] IFX DEU SHA1_HMAC initialized. 
-[  11.504000] IFX DEU MD5_HMAC initialized.+[  11.536000] IFX DEU MD5_HMAC initialized.
[  15.360000] device eth0 entered promiscuous mode [  15.360000] device eth0 entered promiscuous mode
[  15.364000] br-lan: port 1(eth0) entered forwarding state [  15.364000] br-lan: port 1(eth0) entered forwarding state
Line 501: Line 538:
===== Notes ===== ===== Notes =====
 +SIP:
 +
 +daemon to test:
 +sofia-sip
 +pjsip(already in openwrt)
 +owsip(already in openwrt)
 +
 +driver vmmc:
 +http://mirror2.openwrt.org/sources/drv_vmmc-1.9.0.tar.bz2
 +drv_vmmc-1.9.0/FEATURES_and_OPEN_ISSUES
 +* TAPI 3.13.0.2, drv_vmmc 1.9.0.3, KPI 2.2.0.0, MPS 2.2.2.5
 +* XWAY VRX288 VoIP Firmware  2.1.0.7.0
 +Original firmware 1.9.0.4
 +
 +need firmware dump for dsl, voip and coef + populate openwrt/package/ifx-vmmc/Makefile
 +
 +driver tapi:
 +http://mirror2.openwrt.org/sources/drv_tapi-3.13.0.tar.bz2
 +Same level as original firmware
 +
 +http://dev.phrozen.org/ltq-mirror/ (dsl and other stuff)
 +
 +DSL:
 +available version 4.11.4 - my firmware version: 4.12.4 - May works
 +need firmware dump
 +
 +SWITCH:
 +look at switch_utils note at http://wiki.openwrt.org/toh/tp-link/td-w8970#switch_utility
 +we need to decompile original firmware and recovery switch initialization params
===== Tags ===== ===== Tags =====

Back to top

toh/arcadyan/vgv7519.1373190538.txt.bz2 · Last modified: 2013/07/07 11:48 by thelizard