|Ver.||S/N||OpenWrt Version Supported||Model Specific Notes|
|v1||S30852-H70x-xxxx||no||original firmware version 2.x.x.x|
|v1||S30852-S70x-xxxx||no||original firmware version 2.x.x.x, see: https://forum.openwrt.org/viewtopic.php?id=36612|
|v2||S30852-S70x-xxxx||trunk, backfire with patch||original firmware version 4.x.x.x|
v1 is based on amazon SoC, so we won't talk about that version here.
Beware when buying a SX762 second hand, it might have the correct serial number, but the wrong firmware, see link above
|Lantiq Xway Danube @333Mhz Dual Core (second core is for voip dsp)||32MB||8MB||4 RJ45 ports||Yes||Yes||Yes|
- ADSL modem is working with both Annex A & Annex B supported.
- WiFi is working out of the box with trunk. (ath5k)
- FXS works and can be used with owsip daemon.
- USB works with a ugly patch.
- FXO port is not working.
Please check out the article Flash Layout. It contains an example and a couple of explanations.
|Default Flash Layout|
|mtd2||0x00010000||0x00700000||7104KB||secondary loader + runtime|
|Modified Flash Layout|
- The primary bootloader checks the header checksum (sha256) of the secondary bootloader
- The secondary bootloader does the same thing with the firmware.
- The sha256bit header checksum is generated by a 1024bit RSA private key which is currently unavailable.
Since the checking is only done for first 64Bytes of every 64k block it is possible to edit the secondary bootloader because it's size is less than 64k, by replacing lzma part and replacing it with lzma compressed u-boot. You have two options to install OpenWrt:
|If for any reason OpenWrt fails to boot, a recovery HTTP server can be started by keeping the reset button underneath pressed, while powering the router on.
Note that original fw .img can't be uploaded via recovery HTTP server.
- download a modified secondary bootloader here
- The modified secondary u-boot bootloader can be flashed from original web interface firmware upgrade section
- after replacing the original secondary bootloader over the original WebInterface with the version provided in the link, you need to reboot the device.
- since there is no OpenWrt in flash yet, after a reboot it will open HTTP server on 192.168.1.1 (tho it might be some other IP, such as 192.168.2.1; it probably depends on the IP preset in your nvram) asking for OpenWrt image.
|The secondary_boot.img in the link above has broken networking. After flashing it uploading through the HTTP server won't work. You have to use the serial interface and UART method afterwards as described below.|
|This is used to flash u-boot as a primary bootloader. There are two methods to flash u-boot as a primary bootloader, first one from a runing openwrt image, and a second one from serial console|
- before replacing the bootloader, make sure that you flashed secondary bootloader as noted above and that you are running openwrt fw from here
- if you compiled u-boot you will find the file
- copy u-boot-bootstrap.bin to /tmp folder inside router filesystem.
- flash env to uboot_env partition with "dd if=/dev/mtdblock3 of=/dev/mtdblock4"
- flash u-boot-bootstrap.bin with "mtd write /tmp/u-boot-bootstrap.bin uboot"
- now reboot, run recovery HTTP server, and flash image from trunk
|For the second method you must have a serial TTL interface installed! You need also a TFTP server and new built
- U-boot CLI commands:
setenv ipaddr 192.168.1.1 setenv serverip 192.168.1.254 //unprotect sectors protect off 1:0-20 //first copy nvram to new address: era 0xb0010000 0xb001ffff cp.b 0xb000e000 0xb0010000 0x2000 tftpboot 0x816e0000 u-boot-bootstrap.bin era 0xb0000000 0xb000ffff cp.b 0x816e0000 0xb0000000 0x10000 reset
- since there is no OpenWrt in flash yet, first time after reboot the bootloader will open HTTP server on 192.168.0.119 asking for OpenWrt image.
|System-On-Chip: Lantiq PSB 50702 E v1.3 or (v1.4) (MIPS 24Kc)|
|CPU/Speed 333 Mhz (second core is for voip dsp)|
|Flash size: 8 MiB|
|RAM: 32 MiB|
SX763: Atheros AR2414A b/g/super g
SX762: Atheros AR2413 b/g
|Ethernet: Infineon ADM6996i|
|Internet: ADSL2+ (annex A and B)|
|USB: Yes 1 x 2.0|
|system type : DANUBE|
|processor : 0|
|cpu model : MIPS 4KEc V4.1|
|BogoMIPS : 222.00|
|wait instruction : yes|
|microsecond timers : yes|
|tlb_entries : 16|
|extra interrupt vector : yes|
|hardware watchpoint : yes|
|VCED exceptions : not available|
|VCEI exceptions : not available|
(More images @ Gigaset)
Note: This will void your warranty!
To get to the board you need:
- unscrew 4 torx-10 screws underneath the cover,
- pull the upper cover which is connected by click.
If your serial cable requires a Vcc, you can use the lower-right pad (i.e. not the one just below the two GND pads, but the one below that).
Serial port is at 3.3V and the bitrate is 115200.
Serial output from default bootloader:
Bootstrap pin funcion table:
Value 1 = 3.3v is connected to that pin
Value 0 = Pin is connected to digital GND
To enable uart mode, short pins at boot_sel2 (see picture) and connect boot_sel0 to gnd. Than you can send u-boot.asc(downlaod here) to serial port.
For example if your serial port is ttyUSB0 than do: "cat u-boot.asc > /dev/ttyUSB0" and wait until u-boot starts.
UART mode looks like this:
ROM VER: 1.0.3 CFG 04 Read EEPROMX X UART
SX763 uses a DC/DC switching regulator for 5V USB power, and unfortunately the chip is disabled by OpenWRT and other unofficial firmware (as of april 2013). The chip that provides 5V for USB has enable pin (number 7 to be exact), and the original firmware pulls the enable pin from 0.3V to 3.3V about two seconds before the relay makes a click sound.
According to datasheet, enable pin can be unconnected if we want the chip to auto-start, and that is exactly what we want. Therefore, we just need to disconnect the pin number 7 and SX763 will have 5V at USB connector all the time.
Note: When sx76x support gets back to trunk, there will be usb power by default so this hack wont be needed.
Another close-up is available at :http://pljusak.com/papuk/RSCN1314.JPG
The good sides of this hack are: 1) if you break the pin on the chip no harm is done, and 2) there are no side-effects in possible overloading the other 5V regulator that is used if you bring the 5V from another DC/DC regulator, as in hack that follows.
Previous version of 5V-USB hack follows:
Here is example of added usb power (5.05V measured) over simple pin solder so devices can be recognized on boot. You can even use WIFI dongles as from Attitude Adjustment 12.09-RC1 it works just fine. USB Dongle tested and working: Edimax EW-7722UnD a/b/g/n - Tested in 40mhz HT mode. Max speed measured (TCP): 20mbit (dirty conditions). Over USB hub you could add few more which makes this even a very good base station.
On USB port - solder first pin from top.
More info can be found on: http://linux.jezgra.net/2013/02/sx763-hack/
Please note that side-effects of this power mod are unknown. (Probably there should be no 'ugly-usb-patch' added anymore, so it doesn't give power on already powered pin.)
There is a tarball with basic code at http://opensource.sagemcom.com/index.php?id=54
toh/gigaset/sx76x.txt · Last modified: 2014/03/03 19:29 by wvdakker