User Tools

Site Tools


toh:engenius:esr6670

EnGenius ESR-6670 / ZyXEL NBG-417N / ZyXEL NBG-4415

This router is based on the Ralink RT3052 Soc. With the original firmware it was capable to distribute internet connection from an USB HSDPA stick. It has 1 WAN and 2 LAN ports.

The PCB have the numer: 7016A0294010 V-1.10

The ZyXEL have only one antenna and no soldered Serial connector.

Currently there is no support for this device, but there are several RT3052F based devices supported.

Hardware info

Architecture: MIPS
Vendor: Ralink
Bootloader: Uboot
System-On-Chip: Ralink RT3052
CPU Speed: 384Mhz
Flash-Chip:MX 29LV320DTTI - 70G
Flash size: 4MB
RAM: EtronTech EM63A165TS-6G 16MB 166Mhz SDRAM
Wireless: Ralink RT3052 (integrated)
Ethernet: Ralink RT3052 (integrated)
USB: USB 2.0 OTG
Serial: Yes
JTAG: Yes
Power supply: 12V 1.25A

Opening the case

Note: This will void your warranty!

  • There is only one screw in the middle of the device. Check the board picture below for it's position.

Board images

esr6670.pcb.jpg

Serial

Console port CN1 uses 3.3 V signaling at speed 57600 8n1. Header is pre-installed on EnGenius. Not pre-installed on ZyXEL.

CN1
1 2 3 4
Vcc GND TX RX

JTAG

There is a 14 pin unpopulated SMD pinhead near the reset button. it should be JTAG. The pins marked with ? are unknown currently, but research is in progress. Probably this is EJTAG 2.5 compilant.

? 1 2 GND
? 3 4 GND
? 5 6 GND
? 7 8 GND
? 9 10 GND
? 11 12 ?
? 13 14 3V3

Stock firmware startup log

U-boot Ver:1.0.1.1 2009/09/25


Board: Ralink APSoC DRAM:  32 MB  1*32 MB
============================================ 
ASIC 3052_MP2 (Port5<->None)
Product Name: ESR-6670
SDRAM CAS = 3(d1835272) 
============================================ 

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 

LINUX started...
init started: BusyBox v1.7.5 (2010-01-11 10:07:29 CST)
starting pid 152, tty '/dev/console': '/sbin/config_init'
Config Init version: 1.1.0.159 date: 2010/01/11
starting pid 209, tty '/dev/ttyS1': '/sbin/config_term'
************************************************************************
*                                 ESR-6670                             *
************************************************************************

KernelApp/Ramdisk Ver:1.1.0.159			 Date:2010/01/11
console> cat: can't open '/apps/lib/modules/2.6.21/modulesApp.dep': No such file or directory
ln: /sbin/./apps_init: File exists

unfortunatelly I have not found any way to interact with the device on the serial port. Hitting 1 does not effect anything, and in the console prompt I have not find any working command. Hitting Ctrl+C kills the console, –so the communication to the device works too on the serial line– but it starts again:

process '/sbin/config_term' (pid 209) exited. Scheduling it for restart.
starting pid 460, tty '/dev/ttyS1': '/sbin/config_term'

Tags

toh/engenius/esr6670.txt · Last modified: 2016/02/27 04:34 by pkirkovsky