Colubris CN3200 (AKA MSC-3200)

As of October 1st, 2008 Coubris Networks was adquired by Hewlett-Packard and integrated their devices under the product line HP ProCurve. They didn't release any source code spite this hardware (and probably similar boards) uses a linux kernel. The OEM firmware is encripted (CIM?). Now under HP this board has a different name:

Colubris name HP ProCurve name
MSC-3200 MultiService Controller MSM313 Access Point

ftp://ftp.hp.com/pub/japan/procurve/

Hardware Highlights

CPU CPU speed Ram Flash USB Serial JTag
IBM PowerPC 405EP 133 Mhz 32Mib 16MiB No Yes ?

powerpc.405ep.pdf

Hardware

Info

Architecture: PowerPC
Vendor: IBM
Bootloader: ¿?
CPU/Speed: PowerPC 405EP/133 Mhz
EPROM: ST M27W101 / 128 KiB
Flash-Chip: Toshiba TC58DVM72A1FT00 (NAND)
Flash size: 16 MiB
RAM-chip: Infineon HYB39S128160CT-7
RAM: 32 MiB
Wireless: Atheros AR5212A 802.11a/b/g (mini-pci)
Ethernet: 2 eth, Altima AC101L
USB: no
Serial: Yes (Maxim MAX3225E)
JTAG: Yes

Photos

Main PCB

Photo of PCB

Serial

There is a wired rj11 external port between the two ethernets. The pinout is unknown.

JTAG

JTAG ID processor version register
0x20267049 0x51210950

This is the JTAG at the CPU (not the board)

And this is the JTAG at the board:

It seems the connector matches to this one:

IBM 4XX 16-PIN (JTAG RISCWATCH)
AMONTEC REF: IBM16
NAME: IBM 4xx
TARGET: IBM 4xx
COMMENT: IBM also calls RISCWatch.
CONNECTOR: 16-pin Header (2.54mm)
CONNECTOR TYPE: dual
TDO o 1 2 nc -
TDI i 3 4 i nTRST
HALTED o 5 6 p VREF
TCK i 7 8 nc -
TMS i 9 10 nc -
HALT i 11 12 p GND
nSRST od 13 14 k KEY
- nc 15 16 p GND

Please someone provide a backup of the bootloaderdanitool 2012/01/21 23:14

Back to top

toh/colubris/cn3200.txt · Last modified: 2012/03/29 20:17 by danitool