User Tools

Site Tools


toh:bt:homehub.3.0

BT HomeHub 3.0a

Update (December 2014)

Working trunk build for the BT Home Hub 3.0A: http://openwrt.ebilan.co.uk/viewtopic.php?f=5&t=72

Patches:

NEWSFLASH (JANUARY 2014):

Following the sad closure of http://psidoc.com, all members of the BT Home Hub Openwrt community are now encouraged to join in ongoing development efforts concentrated on the Home Hub 3.0a, at http://openwrt.ebilan.co.uk.

Hardware

Info

Architecture: MIPS
Vendor: Lantiq
Bootloader: U-Boot
System-On-Chip: Lantiq ARX100 "AR9" ARX168 PSB50810 (MIPS 34Kc)
CORES: 1
CPU/Speed: 333 MHz
NOR Flash:
NAND Flash: 32MiB NAND256W3A2BZA6
RAM Chip:
RAM Specs: 64 MiB
Wireless: Atheros AR9227 b/g/n (2.4GHz only)
Ethernet: Infineon
USB: 1x
DECT:
Slic:
Serial: Yes
JTAG: ?

original nand layout

offset size content
0x0 0x200 nand preload
0x200 0x7E00 nand bootstrap + last page DDR tune params.
0x8000 0x4c000 uboot code
0x54000 0x10000 empty ?
0x64000 0x4000 - uboot config
0x68000 0xc000 empty?
0x74000 0xaf0000 - first openrg image
0xB64000 0x147c000 - second openrg image
0x17e0000 0x20000 - jffs partition (ath data and rgconfig data)

GPIO

IFX GPIO Pin Usage

0 1 2 3 4 5 6 7
P0 LED LED LED Available Available LED LED Available
P1 SSC SSC SSC Available Available PCI Available NAND
P2 INT_SW USB Available Available Available Available Available INT_SW
P3 NAND NAND Available Available BUTTONS BUTTONS BUTTONS Available
8 9 10 11 12 13 14 15
P0 Available LED Available LED LED NAND LED LED
P1 NAND Available Available Available Available Available Available Available
P2 Available Available INT_SW INT_SW Available INT_SW Available Available
P3 N/A N/A N/A N/A N/A N/A N/A N/A

serial

Serial port location:

Configuration pin location (it is nessary to boot processor in UART booting mode):

Bootlog

Oem Bootlog (partial)

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK
MC_DC15 0x00000147
MC_DC21 0x00001745
MC_DC22 0x00001616
MC_DC24 0x00000068
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...



U-Boot 1.1.5-LANTIQ-v-1.8.14 (Apr 13 2011 - 14:29:58)

Boot from NAND flash
AR9 BOARD
CLOCK CPU 333M RAM 166M
DRAM:  64 MB

 relocate_code start
 relocate_code finish.
32 MiB
In:    serial
Out:   serial
Err:   serial
Net:
switch chip id=00002599
amazon_s Switch

Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0

Looking for active section/image:
  0. section: type:10 not an image
  1. section: type:8 not an image
  2. section: type:9 not an image
  3. section: type:2 image. reading section header @0xaf3f6c...
Reading data from 0xaf3f6c -- 100% complete.
     counter:0x3
  4. section: type:2 image. reading section header @0x15e3f6c...
Reading data from 0x15e3f6c -- 100% complete.
     counter:0x2
  5. section: type:7 not an image
  6. section: type:3 not an image
  7. section: type:3 not an image
  8. section: type:1 not an image
  9. section: type:11 not an image

Verifying image(s):
  3. section: image. reading image content 0x92f55d@0x74000...
Reading data from 0x9a3400 -- 100% complete.
     checking ... ok: 'Downloaded at: Wed Jan  1 00:13:15 2003' 0x92f55d@0xa1000000 count:0x3

Active image: 0xa1000280.
## Booting image at a1000280 ...
   Image Name:   OpenRG
   Created:      2011-01-24   3:53:48 UTC
   Image Type:   MIPS Linux Kernel Image (gzip compressed)
   Data Size:    9630365 Bytes =  9.2 MB
   Load Address: 80002000
   Entry Point:  8033e000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8033e000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

command interface

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK

ROM VER: 1.1.3
CFG 06
NAND
NAND Read OK
MC_DC15 0x00000147
MC_DC21 0x00001745
MC_DC22 0x00001616
MC_DC24 0x00000068
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...



U-Boot 1.1.5-LANTIQ-v-1.8.14 (Apr 13 2011 - 14:29:58)

Boot from NAND flash
AR9 BOARD
CLOCK CPU 333M RAM 166M
DRAM:  64 MB

 relocate_code start
 relocate_code finish.
32 MiB
In:    serial
Out:   serial
Err:   serial
Net:
switch chip id=00002599
amazon_s Switch

Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0
AMAZON_S #
AMAZON_S # help
?       - alias for 'help'
askenv  - get environment variables from stdin
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dualimage - sets openrg_start and openrg_size according to the current active image.
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
go      - start application at address 'addr'
help    - print online help
imls    - list all images found in flash
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
upgrade - forward/backward copy memory to pre-defined flash location
version - print monitor version
AMAZON_S #

Grounding config ping gets this

ROM VER: 1.1.3
CFG 04
UART
ram u-boot can be sent using serial port using ZModem/ or plaintext file transfer, plain text file transfer worked for me in CuteCom had problem with others

Tags

toh/bt/homehub.3.0.txt · Last modified: 2015/04/29 19:08 by daemon123