Currently there is no support for OpenWrt on this router; initial porting efforts are in progress.

• SoC: Marvell 88F5181
• CPU: ARM926EJ @ 500MHz
• 8-Port Gigabit Ethernet Switch: Marvell 88E6131
• Two gigabit transceivers: Marvell 88E1112
• Two MAC/baseband chips: Marvell 88W8363
• Two 2.4 / 5 GHz RF transceiver chips: Marvell 88W8060
• Flash: 8MB (Samsung K8D6316UBM-PI07)
• RAM: 32MB (DDR SDRAM - ProMOS V58C2128164SBI5 x 2)

This is pretty similar compared to Netgear WNR3500v1 except for the additional 5GHz radio.

There is a 4-pin serial console header on the mainboard (next to the ProMOS RAM chip).

The serial console gives you full access to the bootloader and a root shell once the factory firmware is booted.

# reboot # umount: ramfs busy - remounted read-only umount: none busy - remounted read-only The system is going down NOW !! Sending SIGTERM to all processes. Jan 1 00:02:00 2008 (none) syslog.info System log daemon exiting. SendZPlease stand by while rebooting the system. Restarting system. Resetting! __ __ _ _ | \/ | __ _ _ ____ _____| | | | |\/| |/ _` | '__\ \ / / _ \ | | | | | | (_| | | \ V / __/ | | |_| |_|\__,_|_| \_/ \___|_|_| _ _ ____ _ | | | | | __ ) ___ ___ | |_ | | | |___| _ \ / _ \ / _ \| __| | |_| |___| |_) | (_) | (_) | |_ \___/ |____/ \___/ \___/ \__| ** LOADER ** ** MARVELL BOARD: RD-88F5181L-VOIP-GE LE U-Boot 1.1.1 for BUFFALO AIRSTATION (Mar 22 2007 - 09:22:20) Marvell version: 1.10.8 # Buffalo Version: 1.09 DRAM CS[0] base 0x00000000 size 32MB DRAM Total size 32MB Memory Test start(00000000) end(02000000) size(02000000) Pattern 55555555 Writing... Reading...Pattern AAAAAAAA Writing... Reading...Pattern 00000000 Writing... Reading... Memory Test OK Unknown Vendor 0xecUnknown Chip Type id 0x22e2 Size: 8 MB,Bus Width: 2, device Width: 2. Flash base: 0xff800000,Number of Sectors: 135 Type: BOTTOM. Sector Start Addresses: 00000000 00002000 00004000 00006000 00008000 0000a000 0000c000 0000e000 00010000 00020000 00030000 00040000 00050000 00060000 00070000 00080000 00090000 000a0000 000b0000 000c0000 000d0000 000e0000 000f0000 00100000 00110000 00120000 00130000 00140000 00150000 00160000 00170000 00180000 00190000 001a0000 001b0000 001c0000 001d0000 001e0000 001f0000 00200000 00210000 00220000 00230000 00240000 00250000 00260000 00270000 00280000 00290000 002a0000 002b0000 002c0000 002d0000 002e0000 002f0000 00300000 00310000 00320000 00330000 00340000 00350000 00360000 00370000 00380000 00390000 003a0000 003b0000 003c0000 003d0000 003e0000 003f0000 00400000 00410000 00420000 00430000 00440000 00450000 00460000 00470000 00480000 00490000 004a0000 004b0000 004c0000 004d0000 004e0000 004f0000 00500000 00510000 00520000 00530000 00540000 00550000 00560000 00570000 00580000 00590000 005a0000 005b0000 005c0000 005d0000 005e0000 005f0000 00600000 00610000 00620000 00630000 00640000 00650000 00660000 00670000 00680000 00690000 006a0000 006b0000 006c0000 006d0000 006e0000 006f0000 00700000 00710000 00720000 00730000 00740000 00750000 00760000 00770000 00780000 00790000 007a0000 007b0000 007c0000 007d0000 007e0000 007f0000 [8192kB@ff800000] Flash: 8 MB Addresses 20M - 0M are saved for the U-Boot usage. Mem malloc Initialization (20M - 16M): Done ### buf_ver=[1.09] U-Boot Ver.=[1.09] ### build_date(env)=[Mar 22 2007 - 09:22:20] build_date(bin)=[Mar 22 2007 - 09:22:20] Soc: 88F5181 B1 CPU: ARM926 (Rev 0) running @ 500Mhz Orion 1 streaming disabled SysClock = 166Mhz , TClock = 166Mhz USB 0: host mode PCI 0: PCI Express Root Complex Interface PCI 1: Conventional PCI, speed = 33000000 Net: egiga0 [PRIME] Hit any key to stop autoboot: 1  0 tftp server(receive) go, waiting:4[sec] Load address: 0x400000 TftpServer Timeout; no file was loaded. ### CRAMFS loading 'uImage' to 0x400000 ### CRAMFS load complete: 1024112 bytes loaded to 0x400000 ## Booting image at 00400000 ... Image Name: Linux-2.4.27-vrs1 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1024048 Bytes = 1000 kB Load Address: 00008000 Entry Point: 00008000 Verifying Checksum ... OK OK Starting kernel ... Uncompressing Linux...................................................................... done, booting the kernel. ZLinux version 2.4.27-vrs1 (vc03021@mkitec-xen) (gcc version 3.4.4 (release) (CodeSourcery ARM 2005q3-1)) #1 Thu Jan 10 20:23:58 JST 2008 CPU: ARM926EJ-Sid(wb) revision 0 Machine: MV-88fxx81 Using UBoot passing parameters structure Sys Clk = 166666667, Tclk = 166666667 - Warning - This LSP release was tested only with U-Boot release 1.10.16 On node 0 totalpages: 8192 zone(0): 8192 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyS0,115200 mtdparts=phys_mapped_flash:7m(root),1m@7m(uboot)ro root=/dev/mtdblock1 rw ip=192.168.11.1:192.168.11.108:::DB88FXX81:eth0:none Calibrating delay loop... 332.59 BogoMIPS Memory: 32MB 0MB 0MB 0MB = 32MB total Memory: 30040KB available (1915K code, 341K data, 76K init) Dentry cache hash table entries: 4096 (order: 3, 32768 bytes) Inode cache hash table entries: 2048 (order: 2, 16384 bytes) Mount cache hash table entries: 512 (order: 0, 4096 bytes) Buffer cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 8192 (order: 3, 32768 bytes) CPU: Testing write buffer: pass POSIX conformance testing by UNIFIX init hw started. CPU Interface ------------- SDRAM_CS0 ....base 00000000, size 32MB SDRAM_CS1 ....disable SDRAM_CS2 ....disable SDRAM_CS3 ....disable PEX0_MEM ....base e0000000, size 128MB PEX0_IO ....base f2000000, size 1MB PCI0_MEM ....base e8000000, size 128MB PCI0_IO ....base f2100000, size 1MB INTER_REGS ....base f1000000, size 1MB DEVICE_CS0 ....no such DEVICE_CS1 ....no such DEVICE_CS2 ....no such DEV_BOOCS ....base f4000000, size 16MB Flash bankwidth 2, base f4000000, size 1000000 PCI: bus0: Fast back to back transfers enabled HW already initialized. PCI: bus1: Fast back to back transfers enabled Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Marvell Development Board (LSP Version 1.1.3)-- RD-88F5181L-VOIP-GE Soc: 88F5181 B1 Detected Tclk 166666667 and SysClk 166666667 Starting kswapd Journalled Block Device driver loaded devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 JFFS2 version 2.1. (C) 2001 Red Hat, Inc., designed by Axis Communications AB. mel_initsw: GPIO initialize done.. BUFFALO SWICH & LED DRIVER ver 1.00 Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled ttyS00 at 0xf1012000 (irq = 3) is a 16550A HDLC line discipline: version $Revision: 3.7 $, maxframe=4096 N_HDLC line discipline registered. Marvell Gateway Driver: Detected RD_88F5181L_VOIP_GE Using VLAN-tag Mode L3/L4 Checksum offload enabled Link status indication mode is on (switch irq=40) Multi queue support ( rxq0=128 rxq1=64 rxq2=64 rxq3=64 txq0=2000 ) Using boot network interface configuration eth0: mac_addr 00:16:01:ab:06:1d, VID 0x100, port list: port-4 eth1: mac_addr 00:16:01:ab:06:1d, VID 0x200, port list: port-0 port-1 port-2 port-3 init switch layer... my_gateway: SetPhyReg(port=0,pd_port=2)=1111 my_gateway: SetPhyReg(port=1,pd_port=1)=1111 my_gateway: SetPhyReg(port=2,pd_port=0)=1111 my_gateway: SetPhyReg(port=3,pd_port=7)=1111 my_gateway: SetPhyReg(port=4,pd_port=5)=1111 done init MAC layer... done loading network interfaces: eth0 eth1 PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered physmap flash device: 1000000 at f4000000 Amd/Fujitsu Extended Query Table v0.0 at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling fast programming due to code brokenness. Using physmap partition definition Creating 4 MTD partitions on "Physically mapped flash": 0x00000000-0x00780000 : "rootfs" 0x00780000-0x007a0000 : "user_property" 0x007a0000-0x007c0000 : "uboot_environ" 0x007c0000-0x00800000 : "uboot" Initializing Cryptographic API IPv6 v0.8 (usagi-cvs) for NET4.0 IPv6 over IPv4 tunneling driver NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 2048 bind 4096) ip_conntrack version 2.1 (256 buckets, 2048 max) - 316 bytes per conntrack ip_tables: (C) 2000-2002 Netfilter core team ipt_time loading NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. ip6_tables: (C) 2000-2002 Netfilter core team NET4: Ethernet Bridge 008 for NET4.0 Fast Floating Point Emulator V0.94M by Peter Teichmann. VFS: Mounted root (cramfs filesystem). Mounted devfs on /dev Freeing init memory: 76K =ZZZinit started: BusyBox v1.00 (2008.01.10-11:29+0000) multi-call binary ZMidLayer.c(1953) ML_Initialize :***** Please push init button if you want to init_reboot ****** insmod: /lib/modules/2.4.27-vrs1: No such file or directory insmod: ae531x.o: no module by that name found insmod: /lib/modules/2.4.27-vrs1: No such file or directory Using /lib/modules/kernel/drivers/net/wl/ap8x-8363.o Warning: loading ap8x-8363 will taint the kernel: non-GPL license - Proprietary See http://www.tux.org/lkml/#export-tainted for information about tainted modules ap0: Marvell AP-8x 802.11n adapter: mem=0xe8000000, irq=38 Z Please press Enter to activate this console. ap1: Marvell AP-8x 802.11n adapter: mem=0xe8020000, irq=36 mv_gateway: starting eth1 mv_gateway: eth1 db1 port-mask=0x8, 00:16:01:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, ff:ff:ff:ff:ff:ff added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: starting eth0 mv_gateway: eth0 db0 port-mask=0x8, 00:16:01:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, ff:ff:ff:ff:ff:ff added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:ff:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 01:00:5e:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:ff:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 01:00:5e:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:ff:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 01:00:5e:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:ff:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:e8:67:64:30 added mv_gateway: eth0 db0 port-mask=0x28, 01:00:5e:00:00:01 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:ff:ab:06:1d added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:02 added mv_gateway: eth0 db0 port-mask=0x28, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:e8:67:64:30 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:e8:67:64:30 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:e8:67:64:30 added mv_gateway: eth1 db1 port-mask=0x8f, 01:00:5e:00:00:01 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:ff:ab:06:1d added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:02 added mv_gateway: eth1 db1 port-mask=0x8f, 33:33:00:00:00:01 added br_add_if:253: add device eth1 to br0, with rule 00000000 br_add_if:253: add device eth0 to br0, with rule 00000000 br_add_if:253: add device ap0 to br0, with rule 00000000 br_add_if:253: add device ap1 to br0, with rule 00000000