Supported since R32892.

generic.overview

1. → obtain.firmware
2. → Install OpenWrt

Please check out the article Flash Layout. It contains an example and a couple of explanations.

• Get the firmware openwrt-CT6373-squashfs-cfe.bin
• Unplug the power cord
• Press the reset button, don't release it yet!
• Plug the power cord
• Wait 10 seconds
• Release the reset button
• Browse to http://192.168.1.1
• Upload openwrt-CT6373-squashfs-cfe.bin file to router
• Upgrade the image
• Wait for it to reboot
• Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

If you want to upgrade using TFTP you follow these steps (as an alternative to the above install process.

→ generic.sysupgrade

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

• Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
• Upload image file for sysupgrade to LuCI
• Wait for reboot

• Login as root via SSH on 192.168.1.1
• Use the following commands to upgrade.

cd /tmp/
wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-CT6373-squashfs-cfe.bin
sysupgrade /tmp/openwrt-CT6373-squashfs-cfe.bin

• If sysupgrade does not support this router, use the following commands.

cd /tmp/
wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-CT6373-squashfs-cfe.bin
mtd write /tmp/openwrt-CT6373-squashfs-cfe.bin linux && reboot

→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

The default network configuration is:

This is an example to configure the switch: numbers 0-2 will be lan, labeled as Ports 1-3 on the unit, number 3 will be the Internet (WAN), 5 is the internal connection to the router itself. Don't be fooled: vlan0 = eth0.0, vlan1 = eth0.1 and so on.

→ generic.failsafe

→ hardware.button on howto use and configure the hardware button(s).

The Comtrend 6373 has one button. It is the Reset.

CFE version 1.0.37-10.1-1 for BCM96358 (32bit,SP,BE) Build Date: Fri Jun 22 16:26:35 CST 2007 (root@rd4-linux) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name STM29W640FB, id 0x22fd, size 8192KB CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Total memory used by CFE: 0x80401000 - 0x805282D0 (1209040) Initialized Data: 0x8041D950 - 0x8041FB00 (8624) BSS Area: 0x8041FB00 - 0x804262D0 (26576) Local Heap: 0x804262D0 - 0x805262D0 (1048576) Stack Area: 0x805262D0 - 0x805282D0 (8192) Text (code) segment: 0x80401000 - 0x8041D948 (117064) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-12) : CT6373-1 Number of MAC Addresses (1-32) : 11 Base MAC Address : 64:68:xx:xx:xx PSI Size (1-64) KBytes : 24 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xbe010000) ... Code Address: 0x80010000, Entry Address: 0x801cc018 Decompression OK! Entry at 0x801cc018 Closing network. Starting program at 0x801cc018 Linux version 2.6.8.1 (adams@rd5-linux) (gcc version 3.4.2) #5 Fri Dec 11 15:11:56 CST 2009 Parallel flash device: name STM29W640FB, id 0x22fd, size 8192KB CT6373-1 prom init CPU revision is: 0002a010 Determined physical RAM map: memory: 01fa0000 @ 00000000 (usable) On node 0 totalpages: 8096 DMA zone: 4096 pages, LIFO batch:1 Normal zone: 4000 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB 2-way, linesize 16 bytes. PID hash table entries: 128 (order 7: 1024 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x8104ca80 SIZE=609696, INIT=0x0 SIZE=0 Memory: 29404k/32384k available (1540k kernel code, 2936k reserved, 231k data, 72k init, 0k highmem) KLOB Pool 1 Initialized: 1048576 bytes <0x80e00000 ... 0x80f00000> Calibrating delay loop... 299.00 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 8192K with 135 sectors File system address: 0xbe010100 Can't analyze prologue code at 8018fb64 usbcore: registered new driver hub Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) ehci_hcd 0000:00:0a.0: EHCI Host Controller PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: irq 18, pci mem c0000300 ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 PCI: cache line size of 32 is not supported by device 0000:00:0a.0 ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) ohci_hcd: block sizes: ed 64 td 64 PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: OHCI Host Controller PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: irq 13, pci mem c0001400 ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected usbcore: registered new driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver brcmboard: brcm_board_init entry kerSysScreenPciDevices: 0x14e4:0x4318:(slot 1) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 9) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 10) detected Invalid External Interrupt definition Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 2048 bind 4096) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered hub 1-0:1.0: over-current change on port 2 NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 72k freed init started: BusyBox v1.00 (2009.12.11-03:43+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2009.12.11-03:43+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6358A1 Ethernet Network Device v0.3 Dec 11 2009 11:37:53 Config Ethernet Switch Through MDIO Pseudo PHY Interface dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 64:68:0C:xx:xx:xx Broadcom BCM6358A1 USB Network Device v0.4 Dec 11 2009 11:37:55 usb0: MAC Address: 64 68 0C xx xx xx usb0: Host MAC Address: 64 68 0C xx xx xx PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl0: Broadcom BCM4318 802.11 Wireless Controller 4.150.10.5.cpe2.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered DSP Driver: DSP init stub Endpoint: endpoint_init entry BOS: Enter bosInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Endpoint: endpoint_init COMPLETED BcmAdsl_Initialize=0xC006A3F8, g_pFnNotifyCallback=0xC00893F4 AnnexCParam=0x7FFF78E0 AnnexAParam=0x00003980 adsl2=0x00000000 pSdramPHY=0xA1FFFFF8, 0x3024B 0xD68DF64F AdslCoreSharedMemInit: shareMemAvailable=20624 AdslCoreHwReset: AdslOemDataAddr = 0xA1FEFDAC AnnexCParam=0x7FFF78E0 AnnexAParam=0x00003980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered atmapi: prioritize receive packets ATM proc init !!! Loading boot image .. done Loading target image through HMI: done bind now the file descriptor from IP 0.0.0.0, my port 57665. socket init is now finished vdslctl: Started successfully ==> Bcm963xx VDSL Software Version: 09.07.29, 2009-04-03 <== ==> Comtrend Router Software Version: I131-S310CTL-C03_R02 <== device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state Setting SSID "WLAN" Setting country code using abbreviation: "AT" wlctl: Not Found wlctl: Not Found wlctl: Not Found KLOB extended to 2 pools device wl0 entered promiscuous mode br0: port 3(wl0) entering learning state br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state device usb0 left promiscuous mode br0: port 1(usb0) entering disabled state device eth0 left promiscuous mode br0: port 2(eth0) entering disabled state device wl0 left promiscuous mode br0: port 3(wl0) entering disabled state device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state device wl0 entered promiscuous mode br0: port 3(wl0) entering learning state br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state Voice App. Comparing interface: current br0 (3) - passed br0. Voice App. Comparing interface: current br0 (3) - passed br0. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Starting the SIP application with the following parameters: SIP Proxy (IP address or FQDN): SIP Proxy port: 5060 SIP Outbound Proxy (IP address or FQDN): SIP Outbound Proxy port: 5060 SIP Registrar (IP address or FQDN): SIP Registrar Port port: 5060 Enable SIP tag matching: No Log IP address: 192.168.1.4 Log port: 514 Music server address: 0.0.0.0 Music server port: 0 PSTN number of channels: 1 PSTN routing: LINE1 PSTN routing data: 0 Extension 1: Password 1: Extension 2: Disabled Password 2: Disabled Extension 3: Disabled Password 3: Disabled Extension 4: Disabled Password 4: Disabled Max Digits: 24 Interface name: br0 Domain name: Locale name: DEU Pref. codec: none Pref. ptime: 20 Console log level: 5 Register Expire Time: 120 Max Digits: 24 Line 1 call forwarding number: Line 1 call forwarding busy: Disabled Line 1 call forwarding all: Disabled Line 1 call forwarding no answer: Disabled Line 1 call waiting: Enabled Line 2 call forwarding number: Not available Line 2 call forwarding busy: Disabled Line 2 call forwarding all: Disabled Line 2 call forwarding no answer: Disabled Line 2 call waiting: Enabled BOS: Enter bosInit bosTimerInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Created queue CFGMGR_Q 00:00:30 Init Configuration Manager: CFGMGR_VOIP_RETCODE_SUCCESS 00:00:30 Setting provisioning default values. option 7, cfx1 = option 5 option A callfwd busy = 0 option A callfwd all = 0 option A callfwd no answer = 0 option A callwaiting = 15 Sip registration timeout = 120Sip transport protocol = 1User line enabled = 10 user line 1 mwi enabled = 1 user line 2 mwi enabled = 1 user line 3 mwi enabled = 1 user line 4 mwi enabled = 1 Codec name = G711A, encoder=0x2, parm=0 Codec name = G711U, encoder=0x1, parm=1 Codec name = G729, encoder=0x4000, parm=2 dtmf relay method = 0 T38 disabled VAD enabled 00:00:30 Process 593 priority is 0 00:00:30 Process 593: old priority 0, new priority -15 Enter TaskCreate VRGCMGR TaskCreate - spawn new task VRGCMGR Exit TaskCreate KLOB extended to 3 pools br0: port 2(eth0) entering disabled state kernel::endpoint_open kernel::endpoint_open COMPLETED 00:00:30 Endpoint Event task started with pid 605... 00:00:30 Endpoint Packet task started with pid 606 ... Enter bosStartApp br0: port 1(usb0) entering disabled state bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... Enter TaskCreate aoAP TaskCreate - spawn new task aoAP Exit bosStartApp Exit TaskCreate AppResetDetectionEnable() - Enabled reset detection. PLL init completed. PLL registers set to: PCM->pcm_pll_ctrl1 = 0x00020001 PCM->pcm_pll_ctrl2 = 0x0008492B PCM->pcm_pll_ctrl3 = 0x00001E1C Set up PCM registers Channel 0 assigned to timeslot 0 Channel 1 assigned to timeslot 1 Channel 2 assigned to timeslot 2 Tx Desc (0xA0819000): chan 0, buf 0, sts 0xe000, len 1280, bufp 0xdab000 Tx Desc (0xA0819008): chan 0, buf 1, sts 0x7000, len 1280, bufp 0xdab510 Rx Desc (0xA02AA000): chan 0, buf 0, sts 0x8000, len 1280, bufp 0x2a8000 Rx Desc (0xA02AA008): chan 0, buf 1, sts 0x9000, len 1280, bufp 0x2a8510 initIudma: chan 0, descBase 0xa02aa000, descBaseIudma 0x2aa000 initIudma: chan 1, descBase 0xa0819000, descBaseIudma 0x819000 rm: cannot remove `/var/fyi/sys/gateway': No such file or directory rm: cannot remove `/var/fyi/sys/dns': No such file or directory Clean Up IP Connection Tracking Table PCM ENABLE INFO: DMA0 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA0 IRQ MASK 0x00000005 PCM ENABLE INFO: DMA1 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA1 IRQ MASK 0x00000005 PCM ENABLE INFO: PCM IRQ MASK 0x00000003 PCM ENABLE INFO: PCM IRQ PENDING 0x00000007 Enter TaskCreate CMT_EXCEPTION_IST TaskCreate - spawn new task CMT_EXCEPTION_IST cat: /proc/clean_ip_conntrack: No such file or directory Voice QoS: registering interface br0 for voice Exit TaskCreate regStatus (reg 12 sel 0) = 0x10008501 regStatus (reg 12 sel 7) = 0x00000101 regCause (reg 13 sel 0) = 0x00000000 regCause (reg 13 sel 7) = 0x00808000 regCMT (reg 22 sel 0) = 0xe30e1006 regCMT (reg 22 sel 1) = 0x10008001 Kicking off secondary thread processor at entry point 0x8104CAC0... Secondary thread processor entry point at 0x8104cac0 Thread processor handshake. Secondary app initialized properly. Enter TaskCreate HTSK TaskCreate - spawn new task HTSK rm: cannot remove `/var/fyi/sys/gateway': No such file or directory rm: cannot remove `/var/fyi/sys/dns': No such file or directory Clean Up IP Connection Tracking Table cat: /proc/clean_ip_conntrack: No such file or directory Exit TaskCreate SUCCESS: Took semaphore SUCCESS: Gave semaphore INFO: MSPI POLLING MODE INFO: IRQ MASK 0xe0082ca4 INFO: IRQ STATUS 0x420000 INFO: BLOCK ENABLES 0x3e0f20 Read data from Rev ID register: 0x4, 0xb3 OpenSlic: country code = 9 SLIC LE88221 Registers... 0x41: Tx TSlt.........0x0 0x43: Rx TSlt.........0x0 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x3 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x10 0x53: I/O Data........0x0 0x55: I/O Direction...0x2 0x57: Sys State.......0x0 0x61: Oper Func.......0xBF 0x69: Sys State Cfg...0x9 0x6D: Int Mask........0x1F 0x71: Oper Cond.......0xFF 0x73: Revision........0x4 0xB3 0x81: GX Filter.......0xA3B3 0x83: GR Filter.......0x3AA1 0x87: B FIR Filter....0x725A22241AA1BB22B32B4AA5BB60 0x89: X Filter........0x4BD0AA44B22DAB2D2AB42AAD 0x8B: R FIR Filter....0x2E12C0A448322B22A1A2BA43B4 0x97: B IIR Filter....0xB4A1 0x99: Z FIR Filter....0x2D51CA325BCBB8FAB363 0x9B: Z IIR Filter....0xAAF3579F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x1B84B35 0xC7: DC Feed.........0x138 0xCB: DISN............0xE7 0xD1: Metering........0x213D3C0 0xD3: Gen A/B &Bias...0x00003736460000 0xD5: Gen A/B &Bias...0x177727D4CCD27D4 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 0xE3: Caller ID.......0x0 0xE5: Switch Reg......0x058 0xE7: Sw Reg Ctrl.....0x5 0xEB: CID Parms.......0x3 ---------------- OpenSlic: country code = 9 SLIC LE88221 Registers... 0x41: Tx TSlt.........0x0 0x43: Rx TSlt.........0x0 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x3 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x10 0x53: I/O Data........0x0 0x55: I/O Direction...0x2 0x57: Sys State.......0x0 0x61: Oper Func.......0xBF 0x69: Sys State Cfg...0x9 0x6D: Int Mask........0x1F 0x71: Oper Cond.......0xFF 0x73: Revision........0x4 0xB3 0x81: GX Filter.......0xA3B3 0x83: GR Filter.......0x3AA1 0x87: B FIR Filter....0x725A22241AA1BB22B32B4AA5BB60 0x89: X Filter........0x4BD0AA44B22DAB2D2AB42AAD 0x8B: R FIR Filter....0x2E12C0A448322B22A1A2BA43B4 0x97: B IIR Filter....0xB4A1 0x99: Z FIR Filter....0x2D51CA325BCBB8FAB363 0x9B: Z IIR Filter....0xAAF3579F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x1B84B35 0xC7: DC Feed.........0x138 0xCB: DISN............0xE7 0xD1: Metering........0x213D3C0 0xD3: Gen A/B &Bias...0x00003736460000 0xD5: Gen A/B &Bias...0x177727D4CCD27D4 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 0xE3: Caller ID.......0x0 0xE5: Switch Reg......0x058 0xE7: Sw Reg Ctrl.....0x5 0xEB: CID Parms.......0x3 ---------------- DAA Device Init reset don't need. DAA DBG: Successful READ!!!! count = 0 DAA DBG: ISOCAP lock count = 0 Si3050 SLAC Initialised, Line side device = Si: Unknown (0x4) System dev rev: 0x4, Line dev rev: 0x6 Line dev status: FDT:0x1, LCS: 0x0 DAA initialized with country code 9 Si3050 Registers Values Reg 0x1. Control 1 - 0x0 (Res 0xba) Reg 0x2. Control 2 - 0x7 (Res 0xdf) Reg 0x3. Int Mask - 0x80 (Res 0xff) Reg 0x4. Int Source - 0x0 (Res 0xff) Reg 0x5. DAA Ctrl 1 - 0x0 (Res 0x6d) Reg 0x6. DAA Ctrl 2 - 0x0 (Res 0x18) Reg 0x7. Smp Rate - 0x0 (Res 0x8) Reg 0x8. Reserved - 0x0 (Res 0x0) Reg 0x9. Reserved - 0x0 (Res 0x0) Reg 0xa. DAA Ctrl 3 - 0x0 (Res 0x1) Reg 0xb. S/LSD Rev - 0x44 (Res 0xff) Reg 0xc. LSD Status - 0x40 (Res 0x5f) Reg 0xd. LSD Rev - 0x58 (Res 0x3c) Reg 0xe. DAA Ctrl 4 - 0x0 (Res 0x2) Reg 0xf. T/R Gain 1 - 0x0 (Res 0x88) Reg 0x10. Int Ctrl 1 - 0x0 (Res 0x53) Reg 0x11. Int Ctrl 2 - 0x0 (Res 0xff) Reg 0x12. Int Ctrl 3 - 0x0 (Res 0x2) Reg 0x13. Int Ctrl 4 - 0x2 (Res 0x7) Reg 0x14. CP Rx Atte - 0x0 (Res 0xff) Reg 0x15. CP Tx Atte - 0x0 (Res 0xff) Reg 0x16. Rg Ctrl 1 - 0x96 (Res 0xff) Reg 0x17. Rg Ctrl 2 - 0x13 (Res 0xff) Reg 0x18. Rg Ctrl 3 - 0x99 (Res 0xbf) Reg 0x19. Res Calib - 0x9 (Res 0xef) Reg 0x1a. DC Ctrl - 0xc2 (Res 0xf3) Reg 0x1b. Reserved - 0x7 (Res 0x0) Reg 0x1c. Loop Sta - 0x0 (Res 0xff) Reg 0x1d. Line V Sta - 0x0 (Res 0xff) Reg 0x1e. AC Ctrl - 0x3 (Res 0xf) Reg 0x1f. DAA Ctrl 5 - 0x28 (Res 0xeb) Reg 0x20. Gd Sta Ctl - 0x7 (Res 0x7) Reg 0x21. PCM/SPI Md - 0x38 (Res 0xfb) Reg 0x22. PCM T St L - 0x21 (Res 0xff) Reg 0x23. PCM T St H - 0x0 (Res 0x3) Reg 0x24. PCM R St L - 0x21 (Res 0xff) Reg 0x25. PCM R St H - 0x0 (Res 0x3) Reg 0x26. T Gain 2 - 0x0 (Res 0x1f) Reg 0x27. R Gain 2 - 0x0 (Res 0x1f) Reg 0x28. T Gain 3 - 0x0 (Res 0x1f) Reg 0x29. R Gain 3 - 0x0 (Res 0x1f) Reg 0x2a. GCI Ctrl - 0x0 (Res 0xf) Reg 0x2b. LV T Int - 0x0 (Res 0xff) Reg 0x2c. LV T IntC - 0x0 (Res 0xf) Reg 0x2d. Prg Hyb 1 - 0x0 (Res 0xff) Reg 0x2e. Prg Hyb 2 - 0x0 (Res 0xff) Reg 0x2f. Prg Hyb 3 - 0x0 (Res 0xff) Reg 0x30. Prg Hyb 4 - 0x0 (Res 0xff) Reg 0x31. Prg Hyb 5 - 0x0 (Res 0xff) Reg 0x32. Prg Hyb 6 - 0x0 (Res 0xff) Reg 0x33. Prg Hyb 7 - 0x0 (Res 0xff) Reg 0x34. Prg Hyb 8 - 0x0 (Res 0xff) Reg 0x35. Reserved - 0x0 (Res 0x0) Reg 0x36. Reserved - 0x0 (Res 0x0) Reg 0x37. Reserved - 0x0 (Res 0x0) Reg 0x38. Reserved - 0xf (Res 0x0) Reg 0x39. Reserved - 0x0 (Res 0x0) Reg 0x3a. Reserved - 0x0 (Res 0x0) Reg 0x3b. SQC - 0x0 (Res 0x50) DAA Device Init completed. boardHalInit completed Enter TaskCreate HRTBEAT TaskCreate - spawn new task HRTBEAT Exit TaskCreate bosMsgQCreate: Created message queue VRGEVQ at address 0x8001 Enter TaskCreate VRGEVPR TaskCreate - spawn new task VRGEVPR Exit TaskCreate Enter TaskCreate HCAS TaskCreate - spawn new task HCAS Exit TaskCreate *** gStartRxDesc[0] = 0xA02AA000 *** gBufferSizeBytes = 1280 *** gStartTxDesc[0] = 0xA0819000 hal6358PcmInit 260 nextTxDesc = 0xA0819000 hal6358PcmInit 260 nextTxDesc = 0xA0819008 hal6358PcmInit 264 Ownership for TX desc not set. Use this buffer. PERF->IrqMask = 0xE0082CA4 PERF->IrqMask1 = 0x00800000 bosMsgQCreate: Created message queue PSTN_CTL_EVQ at address 0x10002 Enter TaskCreate PSTN TaskCreate - spawn new task PSTN Exit TaskCreate dgasp: kerSysRegisterDyingGaspHandler: endpoint registered DAA: Enable on-hook Caller ID receive. routing data index = 0 Setting egress: 0, ingress: 0 kernel: DoVrgEndptGetHookStatus() kernel: DoVrgEndptSetRelayStat() Active relay on channel 0 pin = 256 Active relay on channel 1 pin = 256 kernel: DoVrgEndptGetHookStatus() kernel: DoVrgEndptSetRelayStat() Active relay on channel 0 pin = 256 Active relay on channel 1 pin = 256 00:00:33 RTCP thread started with pid 706

root@OpenWrt:~# dmesg [ 0.000000] Linux version 3.0.18 (dani@tool) (gcc version 4.5.4 20120105 (prerelease) (Linaro GCC 4.5-2012.01) ) #3 Tue Feb 14 12:19:57 CET 2012 [ 0.000000] Detected Broadcom 0x6358 CPU revision a1 [ 0.000000] CPU frequency is 300 MHz [ 0.000000] 32MB of RAM installed [ 0.000000] registering 40 GPIOs [ 0.000000] board_bcm963xx: Boot address 0xbe000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.37-10.1 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] board_bcm963xx: board name: CT6373-1 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00002000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] early_node_map[1] active PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00002000 [ 0.000000] On node 0 totalpages: 8192 [ 0.000000] free_area_init_node: node 0, pgdat 8027b600, node_mem_map 81000000 [ 0.000000] Normal zone: 64 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 8128 pages, LIFO batch:0 [ 0.000000] Reserving 0MB of memory at 0MB for crashkernel [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Memory: 29568k/32768k available (2121k kernel code, 3200k reserved, 358k data, 160k init, 0k highmem) [ 0.000000] NR_IRQS:128 [ 0.000000] Calibrating delay loop... 299.26 BogoMIPS (lpj=598528) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 512 [ 0.052000] NET: Registered protocol family 16 [ 0.064000] registering PCI controller with io_map_base unset [ 0.072000] bio: create slab at 0 [ 0.080000] pci 0000:00:01.0: [14e4:4318] type 0 class 0x000280 [ 0.080000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x00001fff] [ 0.096000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30001fff] [ 0.100000] pci 0000:00:01.0: BAR 0: set to [mem 0x30000000-0x30001fff] (PCI address [0x30000000-0x30001fff]) [ 0.104000] Switching to clocksource MIPS [ 0.116000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.120000] PCI: Setting latency timer of device 0000:00:01.0 to 64 [ 0.144000] ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x0D, vendor 0x4243) [ 0.144000] ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x09, vendor 0x4243) [ 0.144000] ssb: Core 2 found: PCI (cc 0x804, rev 0x0C, vendor 0x4243) [ 0.144000] ssb: Core 3 found: PCMCIA (cc 0x80D, rev 0x07, vendor 0x4243) [ 0.192000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 0.200000] NET: Registered protocol family 2 [ 0.204000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.212000] TCP established hash table entries: 1024 (order: 1, 8192 bytes) [ 0.220000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.228000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.236000] TCP reno registered [ 0.236000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.244000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.252000] NET: Registered protocol family 1 [ 0.256000] PCI: CLS 0 bytes, default 32 [ 0.260000] audit: initializing netlink socket (disabled) [ 0.264000] type=2000 audit(0.264:1): initialized [ 0.272000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.276000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.288000] msgmni has been set to 57 [ 0.292000] io scheduler noop registered [ 0.296000] io scheduler deadline registered (default) [ 0.304000] bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0100 (irq = 10) is a bcm63xx_uart [ 0.312000] console [ttyS0] enabled, bootconsole disabled [ 0.324000] gpiodev: gpio device registered with major 254 [ 0.332000] bcm963xx-flash bcm963xx-flash.0: 0x02000000 at 0x1e000000 [ 0.340000] bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000020 Chip ID 0x0022fd [ 0.352000] bcm963xx: Found an alias at 0x800000 for the chip at 0x0 [ 0.352000] bcm963xx: Found an alias at 0x1000000 for the chip at 0x0 [ 0.352000] bcm963xx: Found an alias at 0x1800000 for the chip at 0x0 [ 0.352000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.356000] Amd/Fujitsu Extended Query version 1.3. [ 0.360000] number of CFI chips: 1 [ 0.364000] bcm963xx_flash: Read Signature value of CFE1CFE1 [ 0.372000] bcm963xx-flash bcm963xx-flash.0: CFE bootloader detected [ 0.376000] bcm963xx_flash: CFE boot tag found with version 6 and board type CT6373-1 [ 0.384000] bcm963xx_flash: Partition 0 is CFE offset 0 and length 10000 [ 0.392000] bcm963xx_flash: Partition 1 is kernel offset 10100 and length dff00 [ 0.400000] bcm963xx_flash: Partition 2 is rootfs offset f0000 and length 700000 [ 0.408000] bcm963xx_flash: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.416000] bcm963xx_flash: Partition 4 is linux offset 10000 and length 7e0000 [ 0.424000] bcm963xx_flash: Spare partition is 320000 offset and length 4d0000 [ 0.428000] Creating 5 MTD partitions on "bcm963xx": [ 0.436000] 0x000000000000-0x000000010000 : "CFE" [ 0.444000] 0x000000010100-0x0000000f0000 : "kernel" [ 0.448000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.464000] 0x0000000f0000-0x0000007f0000 : "rootfs" [ 0.472000] mtd: partition "rootfs" set to be root filesystem [ 0.480000] mtd: partition "rootfs_data" created automatically, ofs=310000, len=4E0000 [ 0.488000] 0x000000310000-0x0000007f0000 : "rootfs_data" [ 0.496000] 0x0000007f0000-0x000000800000 : "nvram" [ 0.504000] 0x000000010000-0x0000007f0000 : "linux" [ 0.520000] bcm63xx_enet MII bus: probed [ 0.528000] bcm63xx-wdt bcm63xx-wdt.0: started, timer margin: 30 sec [ 0.536000] TCP westwood registered [ 0.540000] NET: Registered protocol family 17 [ 0.544000] 802.1Q VLAN Support v1.8 [ 0.560000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.568000] Freeing unused kernel memory: 160k freed [ 3.240000] eth1: link forced UP - 100/full - flow control off/off [ 3.440000] roboswitch: Probing device eth0: [ 3.444000] roboswitch: [/media/scsi/kamikaze/trunk/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:121] SIOCGETCPHYRD failed! [ 3.456000] roboswitch: [/media/scsi/kamikaze/trunk/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:121] SIOCGETCPHYRD failed! [ 3.468000] No Robo switch in managed mode found, phy_id = 0xffffffff [ 3.472000] roboswitch: Probing device eth1: found a 5325! It's a 5350. [ 12.184000] Compat-wireless backport release: compat-wireless-2012-01-16-14-g02166d5 [ 12.192000] Backport based on wireless-testing.git master-2012-02-06 [ 12.252000] cfg80211: Calling CRDA to update world regulatory domain [ 13.008000] cfg80211: World regulatory domain updated: [ 13.012000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 13.020000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.028000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 13.036000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 13.044000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.052000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.224000] SCSI subsystem initialized [ 13.520000] usbcore: registered new interface driver usbfs [ 13.528000] usbcore: registered new interface driver hub [ 13.536000] usbcore: registered new device driver usb [ 14.164000] b43-phy0: Broadcom 4318 WLAN found (core revision 9) [ 14.240000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 14.240000] Registered led device: b43-phy0::tx [ 14.240000] Registered led device: b43-phy0::rx [ 14.244000] Registered led device: b43-phy0::radio [ 14.244000] Broadcom 43xx driver loaded [ Features: PL ] [ 14.276000] Button Hotplug driver version 0.4.1 [ 15.116000] PPP generic driver version 2.4.2 [ 15.632000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 15.972000] NET: Registered protocol family 24 [ 16.184000] nf_conntrack version 0.5.0 (464 buckets, 1856 max) [ 16.836000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 16.844000] bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller [ 16.852000] bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 [ 16.860000] bcm63xx_ohci bcm63xx_ohci.0: irq 13, io mem 0xfffe1400 [ 16.924000] hub 1-0:1.0: USB hub found [ 16.928000] hub 1-0:1.0: 1 port detected [ 17.128000] Initializing USB Mass Storage driver... [ 17.136000] usbcore: registered new interface driver usb-storage [ 17.140000] USB Mass Storage support registered. [ 17.724000] hub 1-0:1.0: over-current condition [ 20.100000] bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (2)] [ 21.328000] eth1: link forced UP - 100/full - flow control off/off [ 21.952000] device eth1 entered promiscuous mode [ 22.236000] br-lan: port 1(eth1) entering forwarding state [ 22.244000] br-lan: port 1(eth1) entering forwarding state [ 27.336000] device eth1 left promiscuous mode [ 27.340000] br-lan: port 1(eth1) entering forwarding state [ 28.048000] device eth1 entered promiscuous mode [ 28.052000] br-lan: port 1(eth1) entering forwarding state [ 28.056000] br-lan: port 1(eth1) entering forwarding state [ 42.120000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 42.136000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 42.140000] jffs2_build_filesystem(): erasing all blocks after the end marker... done. [ 84.396000] JFFS2 notice: (1319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. root@OpenWrt:~#

Model Number

Front	Back

Note: This will void your warranty!

• To remove the cover do a/b/c

Main PCB

Top View	Bottom View
GPIO controller	Flash chip

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

→ generic.debrick

1. you could read about bootloader in general

This is the bootloader backup: CT-6373_CFE.zip — danitool 2012/02/15 13:34

1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

For some Help with the Tags, please have a look here: tags