User Tools

Site Tools


toh:bt:homehub.3.0

BT HomeHub 3.0a

Update (December 2014)

Working trunk build for the BT Home Hub 3.0A: http://openwrt.ebilan.co.uk/viewtopic.php?f=5&t=72

Patches:

NEWSFLASH (JANUARY 2014):

Following the sad closure of http://psidoc.com, all members of the BT Home Hub Openwrt community are now encouraged to join in ongoing development efforts concentrated on the Home Hub 3.0a, at http://openwrt.ebilan.co.uk.

Identification

Although sharing identical cases, the HomeHub 3.0a has totally different hardware to the BT HomeHub 3.0b and the BT Business Hub 3.0.

For identification purposes, the white boilerplate on the base of the device distinguishes the model number. The HH3.0a and the BT Business 3.0a, and the HH3.0b also have DC input sockets with a different diameter.

Hardware

Info

Architecture: MIPS
Vendor: Lantiq
Bootloader: U-Boot
System-On-Chip: Lantiq ARX100 "AR9" ARX168 PSB50810 (MIPS 34Kc)
CORES: 1
CPU/Speed: 333 MHz
NOR Flash:
NAND Flash: 32MiB NAND256W3A2BZA6
RAM Chip:
RAM Specs: 64 MiB
Wireless: Atheros AR9227 b/g/n (2.4GHz only)
Ethernet: Infineon, 5x 100M
USB: 1x 2.0
DECT:
Slic:
Serial: Yes
JTAG: ?

original nand layout

offset size content
0x0 0x200 nand preload
0x200 0x7E00 nand bootstrap + last page DDR tune params.
0x8000 0x4c000 uboot code
0x54000 0x10000 empty ?
0x64000 0x4000 - uboot config
0x68000 0xc000 empty?
0x74000 0xaf0000 - first openrg image
0xB64000 0x147c000 - second openrg image
0x17e0000 0x20000 - jffs partition (ath data and rgconfig data)

GPIO

IFX GPIO Pin Usage

0 1 2 3 4 5 6 7
P0 LED LED LED Available Available LED LED Available
P1 SSC SSC SSC Available Available PCI Available NAND
P2 INT_SW USB Available Available Available Available Available INT_SW
P3 NAND NAND Available Available BUTTONS BUTTONS BUTTONS Available
8 9 10 11 12 13 14 15
P0 Available LED Available LED LED NAND LED LED
P1 NAND Available Available Available Available Available Available Available
P2 Available Available INT_SW INT_SW Available INT_SW Available Available
P3 N/A N/A N/A N/A N/A N/A N/A N/A

serial

Serial port location:

Configuration pin location (it is nessary to boot processor in UART booting mode):

Bootlog

Oem Bootlog (partial)

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK
MC_DC15 0x00000147
MC_DC21 0x00001745
MC_DC22 0x00001616
MC_DC24 0x00000068
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...



U-Boot 1.1.5-LANTIQ-v-1.8.14 (Apr 13 2011 - 14:29:58)

Boot from NAND flash
AR9 BOARD
CLOCK CPU 333M RAM 166M
DRAM:  64 MB

 relocate_code start
 relocate_code finish.
32 MiB
In:    serial
Out:   serial
Err:   serial
Net:
switch chip id=00002599
amazon_s Switch

Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0

Looking for active section/image:
  0. section: type:10 not an image
  1. section: type:8 not an image
  2. section: type:9 not an image
  3. section: type:2 image. reading section header @0xaf3f6c...
Reading data from 0xaf3f6c -- 100% complete.
     counter:0x3
  4. section: type:2 image. reading section header @0x15e3f6c...
Reading data from 0x15e3f6c -- 100% complete.
     counter:0x2
  5. section: type:7 not an image
  6. section: type:3 not an image
  7. section: type:3 not an image
  8. section: type:1 not an image
  9. section: type:11 not an image

Verifying image(s):
  3. section: image. reading image content 0x92f55d@0x74000...
Reading data from 0x9a3400 -- 100% complete.
     checking ... ok: 'Downloaded at: Wed Jan  1 00:13:15 2003' 0x92f55d@0xa1000000 count:0x3

Active image: 0xa1000280.
## Booting image at a1000280 ...
   Image Name:   OpenRG
   Created:      2011-01-24   3:53:48 UTC
   Image Type:   MIPS Linux Kernel Image (gzip compressed)
   Data Size:    9630365 Bytes =  9.2 MB
   Load Address: 80002000
   Entry Point:  8033e000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8033e000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

command interface

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK
MC_DC15 0x00000147
MC_DC21 0x00001745
MC_DC22 0x00001616
MC_DC24 0x00000068
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...



U-Boot 1.1.5-LANTIQ-v-1.8.14 (Apr 13 2011 - 14:29:58)

Boot from NAND flash
AR9 BOARD
CLOCK CPU 333M RAM 166M
DRAM:  64 MB

 relocate_code start
 relocate_code finish.
32 MiB
In:    serial
Out:   serial
Err:   serial
Net:
switch chip id=00002599
amazon_s Switch

Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0
AMAZON_S #
AMAZON_S # help
?       - alias for 'help'
askenv  - get environment variables from stdin
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dualimage - sets openrg_start and openrg_size according to the current active image.
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
go      - start application at address 'addr'
help    - print online help
imls    - list all images found in flash
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
upgrade - forward/backward copy memory to pre-defined flash location
version - print monitor version
AMAZON_S #

Grounding config ping gets this

ROM VER: 1.1.3
CFG 04
UART
ram u-boot can be sent using serial port using ZModem/ or plaintext file transfer, plain text file transfer worked for me in CuteCom had problem with others

Tags

toh/bt/homehub.3.0.txt · Last modified: 2015/08/04 13:03 by zx82