Differences

This shows you the differences between two versions of the page.

toh:huawei:e970 [2013/04/13 10:33] (current)
Line 1: Line 1:
 +====== Huawei E970 / T-Mobile web'n'walk Box IV ======
 +As of now, this document covers an E970 labelled as T-Mobile web'n'walk Box IV. Please upgrade the document in case other devices differ.
 +Please note that this is work-in-progress, currently support for this device isn't even in trunk yet!
 +
 +===== Hardware Highlights =====
 +^ CPU ^ Ram ^ Flash ^ Network ^ USB ^ Serial ^ JTag ^
 +| Broadcom BMIPS3300 V2.9@240MHz | 32MiB | 4MiB | 4 x 100MBit | No | Yes | ? |
 +
 +Additionally, the device has a built-in 3G modem. Drivers are available in OpenWrt.
 +
 +The modem can also be accessed independently via a USB 2.0 device port
 +(router is disabled while USB is connected). Info from lsusb:
 +<code>
 +ID 12d1:1003 Huawei Technologies Co., Ltd. E220 HSDPA Modem / E230/E270/E870 HSDPA/HSUPA Modem
 +</code>
 +
 +===== Installation =====
 +  - -> [[doc:howto:obtain.firmware]]
 +  - -> [[doc:howto:generic.flashing|Install OpenWrt]]
 +
 +==== Flash Layout ====
 +This device uses CFE as boot loader. For generic info about flash layouts, see [[doc:techref:Flash Layout]].
 +
 +^  Huawei E970  Flash Layout          ^^^^^^^
 +^ Layer0      |                      Physically mapped flash -- total: 4096KiB                                                                                            ||||||
 +^ Layer1      |  mtd0 **//cfe//** 256KiB  |  mtd1 **//linux//** 3712KiB                                    |||  mtd5 **//factory//** 64KiB        |  mtd4 **//nvram//** 64KiB  |
 +^ Layer2      |                          |            |  mtd2 **//rootfs//**                                ||                                    |                            |
 +^ Layer3      |                          |            |                      |  mtd3 **//rootfs_data//**    |                                    |                            |
 +^ description  |  boot loader              |  kernel    |  read-only part      |  writeable part              |  factory data, see below          |  cfe configuration        |
 +^ mountpoint  |  //none//                |  //none//  |  ''/rom''            |  ''/overlay''                                        |  //none//  |  //none//                  |
 +^ filesystem  |  //none//                |  //none//  |  [[doc:techref:filesystems#SquashFS]]  |  [[doc:techref:filesystems#JFFS2]]  |  //none//  |  //none//                  |
 +
 +Sizes of kernel, mtd2 and mtd3 depend on the actual image being used (which kernel modules and packages are installed, ...).
 +
 +Note that this device has an additional partition called factory, located right in front of
 +the nvram partition. It contains device-specific data such as MAC addresses and serial numbers,
 +and is used by CFE to perform a factory reset. If this partition gets corrupt, on factory reset
 +CFE will set a default MAC address which is the same for all devices (00:90:4c:c0:85:59)!
 +
 +If that happens, restore the factory partition from a backup. If you don't have a backup,
 +you'll have to restore this info manually after every factory reset (from the sticker on the case):
 +<code>
 +nvram set il0macaddr=00:1E:10:xx:yy:zz    # (your MAC address)
 +nvram set et0macaddr=00:1E:10:xx:yy:zz    # (usually the same MAC address)
 +nvram set serno=<your_serial_number>
 +nvram commit
 +</code>
 +
 +==== OEM easy installation ====
 +
 +  *Browse to your router, login as admin
 +  *Go to Advanced Settings/System/Upgrade software
 +  *Select the openwrt-.bin for E970 and click Upgrade
 +  *Wait for it to reboot
 +  *Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.
 +
 +==== OEM installation using telnet ====
 +
 +  *Telnet to your router, login with username=admin, password=admin
 +  *If your OEM firmware doesn't have telnet opened, try a firmware upgrade/downgrade
 +  *How to backup mtdblock:
 +  *1. Save mtdblocks to ramfs /tmp:
 +<code>
 +# cat /proc/mtd
 +dev:    size  erasesize  name
 +mtd0: 00040000 00010000 "cfe"
 +mtd1: 00340000 00010000 "linux"
 +mtd2: 00281f40 00010000 "rootfs"
 +mtd3: 00060000 00010000 "resource"
 +mtd4: 00010000 00010000 "factory"
 +mtd5: 00010000 00002000 "nvram"
 +#
 +cat /dev/mtd/0 > /tmp/3w/0.jpg
 +cat /dev/mtd/1 > /tmp/3w/1.jpg
 +cat /dev/mtd/2 > /tmp/3w/2.jpg
 +cat /dev/mtd/3 > /tmp/3w/3.jpg
 +cat /dev/mtd/4 > /tmp/3w/4.jpg
 +cat /dev/mtd/5 > /tmp/3w/5.jpg
 +</code>
 +  *2. Download mtd blocks(download from a browser or a download manager):
 +
 +<code>
 +http://192.168.1.1/0.jpg
 +  ...
 +http://192.168.1.1/5.jpg
 +</code>
 +
 +  *3. Rename files:
 +<code>
 +0.jpg to cfe.bin
 +  ...
 +5.jpg to nvram.bin
 +</code>
 +  *[TODO:  describe how to flash openwrt]
 +
 +==== OEM installation using the TFTP method ====
 +
 +(Work-in-progress -- currently TFTP upgrade seems not to be possible with the version of CFE used by this device)
 +
 +==== Upgrading OpenWrt ====
 +->  [[doc:howto:generic.sysupgrade]]
 +
 +If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
 +
 +=== LuCI Web Upgrade Process ===
 +
 +  * Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
 +  * Upload image file for sysupgrade to LuCI
 +  * Wait for reboot
 +
 +=== Terminal Upgrade Process ===
 +
 +  * Login as root via SSH on 192.168.1.1
 +  * Use the following commands to upgrade.
 +
 +<code>
 +cd /tmp/
 +wget http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
 +sysupgrade /tmp/xxx.abc
 +</code>
 +
 +===== Basic configuration =====
 +-> [[doc:howto:basic.config|Basic configuration]] After flashing, proceed with this.\\
 +Set up your Internet connection, configure wireless, configure 3G connection, etc.
 +
 +
 +===== Specific Configuration =====
 +==== Interfaces ====
 +
 +The default network configuration is:
 +^ Interface Name ^ Description ^ Default configuration ^
 +| br-lan | LAN & WiFi | 192.168.1.1/24 |
 +| vlan0 (eth0.0) | LAN ports 1 to 3 | None |
 +| vlan1 (eth0.1) | LAN port 0 | DHCP(?) |
 +| wl0 | WiFi | Disabled |
 +
 +==== Switch Ports (for VLANs) ====
 +Numbers 0-3 are the 4 LAN ports, with port 0 being the one next to the external 3G antenna connector and port 3 the one next to the telephone connector.
 +Switch port 4 is unconnected, and 5 is the internal connection to the router itself.
 +
 +==== Failsafe mode ====
 +-> [[doc:howto:generic.failsafe]]
 +
 +==== Buttons ====
 +-> [[doc:howto:hardware.button]] on howto use and configure the hardware button(s).
 +
 +There are two buttons:
 +  * Factory reset: connected to GPIO 6
 +  * On/Off: implemented in hardware, not usable for user-defined events
 +
 +
 +===== Hardware =====
 +==== Info ====
 +| **Architecture:** MIPS |
 +| **Vendor:** Broadcom |
 +| **Bootloader:** CFE |
 +| **System-On-Chip:** Broadcom BCM5354 |
 +| **CPU/Speed** 3300 V2.9@240MHz |
 +| **Flash-Chip:** Spansion  S29GL032A |
 +| **Flash size:** 4 MiB |
 +| **RAM-Chip:** Hynix  HY5DU561622ETP |
 +| **RAM:** 32 MiB |
 +| **Wireless:** Broadcom BCM5354 integrated 2.4ghz 802.11bg |
 +| **Ethernet:** Broadcom 44xx/47xx 10/100BaseT Ethernet w/ vlan support |
 +| **Internet:** 3G HSDPA/HSUPA, 2.5G GPRS/EDGE, wired (via LAN port) |
 +| **USB:** v2.0 (internal only, used by modem) |
 +| **Serial:** [[#Serial|Yes]] |
 +| **JTAG:** [[#JTAG|Probably, not tested]] |
 +
 +==== Photos ====
 +Model Number
 +
 +//Front://
 +
 +{{:media:toh:huawei:huawei.b970.top.jpg|}}
 +
 +**Photo of front of the casing**
 +
 +
 +//Back://
 +
 +{{:media:toh:huawei:huawei.b970.bottom.jpg|}}
 +
 +**Photo of back of the casing**
 +
 +==== Opening the case ====
 +**Note:** This will void your warranty!
 +
 +  *Remove the four rubber pads, then unscrew
 +
 +//Main PCB//
 +
 +{{:media:toh:huawei:huawei.b970.main_pcb_t.jpg|}}
 +
 +{{:media:toh:huawei:huawei.b970.main_pcb_b.jpg|}}
 +
 +**Photo of MAIN PCB**
 +
 +//Modem PCB//
 +
 +{{:media:toh:huawei:huawei.b970.modem_pcb_b.jpg|}}
 +
 +{{:media:toh:huawei:huawei.b970.modem_pcb_f.jpg|}}
 +
 +**Photo of MODEM PCB**
 +
 +
 +==== Serial ====
 +-> [[doc:hardware:port.serial]] general information about the serial port, serial port cable, etc.
 +
 +How to connect to the Serial Port of this specific device:
 +
 +**Photo of PCB with markings**
 +{{:toh:huawei:huawei.b970.serial.jpg|}}
 +
 +==== JTAG ====
 +-> [[doc:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.
 +
 +How to connect to the JTAG Port of this specific device:
 +
 +**Photo of PCB with markings**
 +
 +
 +===== Debricking =====
 +-> [[doc:howto:generic.debrick]]
 +
 +===== Bootloader Mods =====
 +  - you could read about [[doc:techref:bootloader]] in general
 +
 +===== Hardware mods =====
 +  - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then obtain some practical experience!
 +==== USB Mod ====
 +  - Board Connector photo:
 +{{:media:toh:huawei:huawei.b970.bord-connector.jpg|}}
 +  - Board Connector Pinout
 +
 +| ** 1 :**  | Modem Vcc  | ** 9 :**  | Modem Vcc  |
 +| ** 2 :**  | GND  | ** 10 :**  | GND  |
 +| ** 3 :**  | USB host D-  | ** 11 :**  | *UNK  |
 +| ** 4 :**  | USB host D+  | ** 12 :**  | Modem LED Signal Red  |
 +| ** 5 :**  | Modem antenna SW  | ** 13 :**  | Modem LED Signal Green  |
 +| ** 6 :**  | LED Power/Power on Signal  | ** 14 :**  | Modem LED Mode Green  |
 +| ** 7 :**  | *UNK  | ** 15 :**  | Modem LED Mode Blue  |
 +| ** 8 :**  | *UNK  | ** 16 :**  | Power on/off Button  |
 +
 +===== Notes =====
 +
 +
 +===== Tags =====
 +For some Help with the Tags, please have a look here: [[meta/tags]]
 +
 +{{tag>FastEthernet 4Port 32RAM 4Flash MIPS MIPS32}}

Back to top

toh/huawei/e970.txt · Last modified: 2013/04/13 10:33 (external edit)