Huawei HG532c

Provided by the ISP Jazztel in Spain. Provided by O2 (Telefonica) in Ireland.

Supported Versions

Not supported

Hardware Highlights

CPU Ram Flash Network USB Serial JTag
Lexra LX5280@400 Mhz 32MiB 8MiB 4 x 1 Yes ? ?

Bootlogs

OEM bootlog

Booting Press 'ESC' to enter BOOT console... 8M flash ================ Using Int. PHY 0xB8003330=0x0 0xB800332C=0x0 0xB8001000=0xc0000000 0xB8003308=0xf35500 Listening Multicast upgrade packets.... 3210 Decompress primary image... image check addr:0xbd011000 len 3379200 ok! Linux version 2.6.21.5 (wangzhiquan@build.huawei.com) (gcc version 3.4.6-1.3.6) #3 Tue Aug 10 17:23:57 CST 2010 CPU revision is: 0000ff00 Determined physical RAM map: memory: 02000000 @ 00000000 (usable) User-defined physical RAM map: memory: 02000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 8128 Kernel command line: console=ttyS0, 115200 mem=32M root=31:2 Primary instruction cache 16kB, linesize 16 bytes. Primary data cache 8kB, linesize 16 bytes. Synthesized TLB refill handler (17 instructions). Synthesized TLB load handler fastpath (31 instructions). Synthesized TLB store handler fastpath (31 instructions). Synthesized TLB modify handler fastpath (25 instructions). PID hash table entries: 128 (order: 7, 512 bytes) Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 25828k/32768k available (3456k kernel code, 6940k reserved, 644k data, 120k init, 0k highmem) Mount-cache hash table entries: 512 Checking for 'wait' instruction... disabled. bhal: bhalInit entry MXIC matched!!get SPI chip driver! NET: Registered protocol family 16 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb Sangoma WANPIPE Router v1.1 (c) 1995-2000 Sangoma Technologies Inc. NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 128 (order: -3, 512 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro fuse init (API version 7. io scheduler noop registered (default) Serial: 8250/16550 driver $Revision: 1.3 $ 1 ports, IRQ sharing disabled netlog start serial8250: ttyS0 at MMIO 0x0 (irq = 12) is a 16550A PPP generic driver version 2.4.2 NET: Registered protocol family 24 IMQ starting with 3 devices... IMQ driver loaded successfully. Hooking IMQ before NAT on PREROUTING. Hooking IMQ after NAT on POSTROUTING. flash device: 0x1000000 at 0xbd000000 MXIC matched!!get SPI chip driver! Physically mapped flash: Found an alies 0x800000 for the chip at 0x0, mxic device detect. Creating 5 MTD partitions on "Physically mapped flash": 0x00000000-0x00010000 : "boot" 0x00010000-0x00011000 : "flag" mtd: partition "flag" doesn't end on an erase block -- force read-only 0x00011000-0x00501000 : "main" mtd: partition "main" doesn't start on an erase block boundary -- force read-only 0x00501000-0x00530000 : "config" mtd: partition "config" doesn't start on an erase block boundary -- force read-only 0x00530000-0x00800000 : "slave" usbcore: registered new interface driver cdc_acm drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters usbcore: registered new interface driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usbcore: registered new interface driver usbserial drivers/usb/serial/usb-serial.c: USB Serial support registered for generic usbcore: registered new interface driver usbserial_generic drivers/usb/serial/usb-serial.c: USB Serial Driver core drivers/usb/serial/usb-serial.c: USB Serial support registered for option1 usbcore: registered new interface driver option drivers/usb/serial/option.c: USB Driver for GSM modems: v0.7.1 usbcore: registered new interface driver usbtest MoniterInit entry Led_module_init ok<6>REALTEK NIC Ethernet driver v0.1 (Feb 13, 2009) eth0: RTL-8139C+ at 0xb8018000, 4c:ed:de:35:52:d0, IRQ 26 RTL8672 NIC100 Probing.. eth phy patch done! Enable 8671G 1 function Enable 8671 0 function Enable 8672 function initFreeRxSkbList initFreeRxSkbList free_rx_skb_producer=48 ratm: Realtek SAR v1.02 (Feb 17, 2009) RTL8192C/RTL8188C driver version 0.2 (2010-03-31/2010-05-11) =====>>INSIDE rtl8192cd_init_one <<===== Clock source is 35.328MHz vendor_deivce_id=819110ec _ =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== disable USB phy 0 dwc_otg: version 2.60a 22-NOV-2006 ----init hcd----- DWC_otg: Using DMA mode DWC_otg: address of dwc_otg_hcd->xacterr_cnt: 0x8112358c dwc_otg lm0: DWC OTG Controller dwc_otg lm0: new USB bus registered, assigned bus number 1 dwc_otg lm0: irq 11, io mem 0xb8030000 DWC_otg: Init: Port Power? op_state=1 DWC_otg: Init: Power Port (0) usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected GACT probability on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (256 buckets, 2048 max) nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading ip_tables: (C) 2000-2006 Netfilter Core Team ipt_time loading TCP cubic registered fastpath init(1020304 5060708)... Realtek SD2-FastPath v1.00beta_2.4.26-uc0 /proc/FastPath created Realtek MCast FastPath /proc/mc_FastPath created NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 120k freed init started: BusyBox vv1.9.1 (2010-08-10 17:24:50 CST) starting pid 123, tty '': '/etc/init.d/rcS' rcs RCS DONE starting pid 126, tty '': '/bin/sh' BusyBox vv1.9.1 (2010-08-10 17:24:50 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... Start mic now ... load cfm ok. start log proc... ADSL FirmwareVersion : 2.9.0.83 ADSL DRV: version : 2.9.0.83 ifconfig: SIOCSIFNETMASK: Cannot assign requested address InitAdslMode.... InitAdsl RTL: Adsl DOWN. RTL: Adsl DOWN. RTL: Adsl DOWN. ratm(itf 0): open 8.35 create: ch0 (8/35) 7679,0 sar_set_atm_data_mode initFreeRxSkbList initFreeRxSkbList free_rx_skb_producer=48 Enable 8671G 1 function Enable 8671 0 function Enable 8672 function create: ch0 (8/35) 7679,0 applying workaround...done Use default bin /var/cwmp now ... device wl0 is not a slave of br0 device wl0.1 is not a slave of br0 device wl0.2 is not a slave of br0 device wl0.3 is not a slave of br0 begin WlanUpInterfaces... No 0 block_relay=0 acCmd:iwpriv wl0 set_mib qos_enable=1 power = 20,cut=0 begin WlanStartServices... Interface doesn't accept private ioctl... 89F1: Operation not permitted device wl0 entered promiscuous mode _ val=4 ===> LoadFirmware() <=== LoadFirmware() val=c6 br0: port 1(wl0) entering learning state br0: topology change detected, propagating br0: port 1(wl0) entering forwarding state device wl0.1 is not a slave of br0 device wl0.2 is not a slave of br0 device wl0.3 is not a slave of br0 begin WlanSetupBridge... vlan enabled! device eth0 is not a slave of br0 device eth0.2 entered promiscuous mode device eth0.3 entered promiscuous mode device eth0.4 entered promiscuous mode device eth0.5 entered promiscuous mode eth0.2: Promiscuous mode enabled. eth0.2: Promiscuous mode enabled. br0: port 2(eth0.2) entering learning state br0: topology change detected, propagating br0: port 2(eth0.2) entering forwarding state eth0.2: Promiscuous mode enabled. eth0.3: Promiscuous mode enabled. eth0.3: Promiscuous mode enabled. br0: port 3(eth0.3) entering learning state br0: topology change detected, propagating br0: port 3(eth0.3) entering forwarding state eth0.3: Promiscuous mode enabled. eth0.4: Promiscuous mode enabled. eth0.4: Promiscuous mode enabled. br0: port 4(eth0.4) entering learning state br0: topology change detected, propagating br0: port 4(eth0.4) entering forwarding state eth0.4: Promiscuous mode enabled. eth0.5: Promiscuous mode enabled. eth0.5: Promiscuous mode enabled. br0: port 5(eth0.5) entering learning state br0: topology change detected, propagating br0: port 5(eth0.5) entering forwarding state eth0.5: Promiscuous mode enabled. device eth0 is not a slave of br0 arp uses obsolete (PF_INET,SOCK_PACKET) atp: cur kernel version:[2.6.21.5] open /var/umts_sign failed. file[wuapi.c]:line[848]. open /var/umts_sign failed. file[wuapi.c]:line[848]. Card is unknow kind[ATP_SNTP_SetVar 702]---->Notice: current sntp libaray didn't compiled with DST feature.[ATP_SNTP_SetVar 702]---->Notice: current sntp libaray didn't compiled with DST feature.killall: ddnsc: no process killed Current sntp process is 754!close atm port mirror! eth0.2: Promiscuous mode enabled. br0: port 2(eth0.2) entering disabled state eth0.3: Promiscuous mode enabled. br0: port 3(eth0.3) entering disabled state eth0.4: Promiscuous mode enabled. br0: port 4(eth0.4) entering disabled state eth0.5: Promiscuous mode enabled. br0: port 5(eth0.5) entering disabled state PPP:pppd_ath[2642]:ATH set erro! PPP:pppd_ath[2645]:ATH set erro! ppp disconnect ,modem hungup failed tcgetattr: Inappropriate ioctl for device(25) sh: -c requires an argument disconnect script failed ***pppc clear tcp mss pppc -I ppp257 exit.ifconfig: SIOCSIFFLAGS: Cannot assign requested address bridge br0:9 doesn't exist; can't delete it Append upnp ssdp listener ok. Use default bin /var/upnp now ...

USWRT bootlog

persist 2011.06-rc2 (Sep 19 2012 - 13:00:55) Board: RTL8672 mips CPU: RTL8672 proc_id=0xcf01 DRAM: 32 MiB *** Warning - bad CRC, using default environment In: serial Out: serial Err: serial ## Booting kernel from Legacy Image at bd040000 ... Image Name: Multi-FW Created: 2012-09-26 9:20:07 UTC Image Type: MIPS Linux Multi-File Image (uncompressed) Data Size: 3324720 Bytes = 3.2 MiB Load Address: 00000000 Entry Point: 00000000 Contents: Image 0: 1824538 Bytes = 1.7 MiB Image 1: 1500168 Bytes = 1.4 MiB Verifying Checksum ... OK ## Loading init Ramdisk from multi component Legacy Image at bd040000 ... Uncompressing Kernel Image ... OK Starting kernel ... arrow, after rtl8672 console init [ 0.000000] Linux version 3.3.8 (arrow@basic) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #13 Mon Sep 24 18:43:00 CST 2012 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0000ff00 (Mips3k) [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] User-defined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00002000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] Early memory PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00002000 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: root=/dev/mtdblock3 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 mem=32M panic=20 initcall_debug=0 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Checking for 'wait' instruction... disabled. [ 0.000000] Primary instruction cache 16kB, linesize 16 bytes. [ 0.000000] Primary data cache 8kB, linesize 16 bytes. [ 0.000000] Memory: 27456k/32768k available (3914k kernel code, 5312k reserved, 774k data, 180k init, 0k highmem) [ 0.000000] NR_IRQS:128 [ 0.000000] arrow, rtl8672_clockevent_init: 93 [ 0.000000] arrow, rtl8672_clockevent_init: 103, pass [ 0.000000] console [ttyS0] enabled, bootconsole disabled [ 0.000000] console [ttyS0] enabled, bootconsole disabled [ 0.010000] Calibrating delay loop... 398.13 BogoMIPS (lpj=1990656) [ 0.060000] pid_max: default: 32768 minimum: 301 [ 0.060000] Mount-cache hash table entries: 512 [ 0.070000] NET: Registered protocol family 16 [ 0.170000] bio: create slab at 0 [ 0.190000] SCSI subsystem initialized [ 0.190000] usbcore: registered new interface driver usbfs [ 0.200000] usbcore: registered new interface driver hub [ 0.210000] usbcore: registered new device driver usb [ 0.220000] cfg80211: Calling CRDA to update world regulatory domain [ 0.240000] NET: Registered protocol family 2 [ 0.250000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.260000] TCP established hash table entries: 1024 (order: 1, 8192 bytes) [ 0.270000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.270000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.280000] TCP reno registered [ 0.280000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.290000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.300000] NET: Registered protocol family 1 [ 0.300000] memmap_pid load [ 0.370000] VFS: Disk quotas dquot_6.5.2 [ 0.370000] Dquot-cache hash table entries: 1024 (order 0, 4096 bytes) [ 0.380000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.390000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 RedHat, Inc. [ 0.400000] msgmni has been set to 53 [ 0.400000] io scheduler noop registered [ 0.410000] io scheduler deadline registered (default) [ 0.420000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled [ 0.420000] serial8250: ttyS0 at MMIO 0x0 (irq = 12) is a 16550A [ 0.440000] flash device: 0x800000 at 0xbd000000 [ 0.460000] SFCR:0xb8001200 SFCSR:0xb8001208 SFDR:0xb800120c [ 0.460000] can not get SPI chip driver! [ 0.470000] [ 0.470000] MXIC matched!!get SPI chip driver! [ 0.480000] Creating 7 MTD partitions on "Physically mapped flash": [ 0.480000] 0x000000000000-0x000000020000 : "boot" [ 0.490000] 0x000000020000-0x000000040000 : "nvram" [ 0.510000] 0x000000040000-0x000000600000 : "fwmtd" [ 0.520000] 0x00000004004c-0x0000005fffbe : "rootfs" [ 0.520000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.530000] mtd: partition "rootfs" set to be root filesystem [ 0.540000] 0x000000600000-0x0000007c0000 : "rootfs_data" [ 0.550000] 0x0000007c0000-0x0000007e0000 : "data_store" [ 0.560000] 0x0000007e0000-0x000000800000 : "data_store_bk" [ 0.580000] tun: Universal TUN/TAP device driver, 1.6 [ 0.590000] tun: (C) 1999-2004 Max Krasnyansky [ 0.590000] PPP generic driver version 2.4.2 [ 0.600000] NET: Registered protocol family 24 [ 0.610000] usbcore: registered new interface driver dm9601 [ 0.610000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.620000] usbcore: registered new interface driver usblp [ 0.630000] Initializing USB Mass Storage driver... [ 0.640000] usbcore: registered new interface driver usb-storage [ 0.640000] USB Mass Storage support registered. [ 0.650000] usbcore: registered new interface driver usbserial [ 0.660000] usbserial: USB Serial Driver core [ 0.660000] USB Serial support registered for ch341-uart [ 0.670000] usbcore: registered new interface driver ch341 [ 0.680000] USB Serial support registered for GSM modem (1-port) [ 0.680000] usbcore: registered new interface driver option [ 0.690000] option: v0.7.2:USB Driver for GSM modems [ 0.700000] Mirror/redirect action on [ 0.700000] u32 classifier [ 0.710000] Performance counters on [ 0.710000] input device check on [ 0.720000] Actions configured [ 0.720000] Netfilter messages via NETLINK v0.30. [ 0.720000] nf_conntrack version 0.5.0 (429 buckets, 1716 max) [ 0.730000] xt_time: kernel timezone is -0000 [ 0.740000] IPv4 over IPv4 tunneling driver [ 0.740000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 0.750000] TCP cubic registered [ 0.760000] NET: Registered protocol family 10 [ 0.770000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 0.770000] IPv6 over IPv4 tunneling driver [ 0.780000] NET: Registered protocol family 17 [ 0.790000] 8021q: 802.1Q VLAN Support v1.8 [ 0.800000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 0.810000] Freeing unused kernel memory: 180k freed - preinit - Press the [f] key and hit [enter] to enter failsafe mode - regular preinit - [ 5.680000] JFFS2 notice: (322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. switching to jffs2 - init - init started: BusyBox v1.19.4 () Please press Enter to activate this console. BusyBox v1.19.4 () built-in shell (ash) Enter 'help' for a list of built-in commands. - W I R E L E S S F R E E D O M - - rtl8672 (v, a, t, s) MIPS go on - - persist create - ------------------------------------ root@rtl8672:/# [ 13.830000] device eth0 entered promiscuous mode [ 14.010000] br-lan: port 1(eth0) entered forwarding state [ 14.020000] br-lan: port 1(eth0) entered forwarding state sysinit: Loading defaults [ 16.020000] br-lan: port 1(eth0) entered forwarding state sysinit: Loading synflood protection sysinit: Adding custom chains sysinit: Loading zones sysinit: Loading forwardings sysinit: Loading rules sysinit: Loading redirects sysinit: Loading includes sysinit: Optimizing conntrack sysinit: Loading interfaces sysinit: Generating RSA private key, 1024 bit long modulus root@rtl8672:/# help Built-in commands: ------------------ . : [ [[ alias bg break cd chdir command continue echo eval exec exit export false fg getopts hash help jobs kill let local printf pwd read readonly return set shift source test times trap true type ulimit umask unalias unset wait sysinit: Generating selfsigned certificate with subject 'C=DE;ST=Berlin;L=Berlin;CN=OpenWrt;' and validity 2001-09-09 01:46:40-2003-09-09 01:46:40 sysinit: service: file '/usr/sbin/ntpd' is not executable root@rtl8672:/usr/bin# cat /proc/cpuinfo system type : Grass processor : 0 cpu model : Mips3k V0.0 BogoMIPS : 398.13 wait instruction : no microsecond timers : no tlb_entries : 32 extra interrupt vector : no hardware watchpoint : no ASEs implemented : shadow register sets : 0 kscratch registers : 0 core : 0 VCED exceptions : not available VCEI exceptions : not available

USWRT is a firmware based in OPENWRT, but is provided upon payment, if want get FW free then need contact with the owner of this site.

The above bootlog is an early version without some basic features and non-functional USB and PCIe. Only suitable for very basic testing. The beta FW V0.0.3 which released at 2014/06/10 support almost all functions(ADSL, USB, WIFI without GUI), but the author tested with Huawei HG526.

Hardware

Info

Architecture: MIPS
Vendor: Realtek
Bootloader: Realtek propietary
System-On-Chip: Realtek RTL8672
CPU/Speed Lexra LX5280 400 Mhz
Flash-Chip: MXIC MX25L6445E
Flash size: 8192 KiB
RAM: 32 MiB EM6AA160TSA-5G
Wireless: RTL8192CE
Ethernet: RealTek RTL8306N
Internet: ADSL2+
USB: Yes 1 x 2.0
Serial: Yes
JTAG: ?

Photos

Model Number

Front:

Photo of front of the casing

Back:

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • To remove the cover do a/b/c

Main PCB Photo of PCB

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Photo of PCB with markings

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

Debricking

Bootloader Mods

  1. you could read about bootloader in general

Hardware mods

  1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

Notes

Tags

For some Help with the Tags, please have a look here: tags

Back to top

toh/huawei/hg532c.txt · Last modified: 2014/06/20 09:47 by arrow