You are here: OpenWrt Wiki » Table of Hardware » Huawei » Huawei EchoLife HG556a

Differences

This shows you the differences between two versions of the page.

--- toh:huawei:hg556a [2013/02/07 21:53]
esf
+++ toh:huawei:hg556a [2013/05/02 11:49] (current)
danitool
@@ Line 4: / Line 4: @@
 The HG556A is an adsl wifi router mainly distributed by Vodafone to their customers.
-:!: **WARNING** Before trying to run OpenWRT, do backup the flash, especially the bootloader and the [[#ath_data|ath_data]] area. The nvram data embedded in the bootloader and the WLAN calibration data in ath_data are specific for your device and difficult to restore otherwise. They cannot be restored by flashing back a vendor firmware. (See [[toh:linksys:wag160nv2|WAG160NV2]])
+:!: It's a good idea to backup the [[#ath_data|cal_data]] area at the flash-chip. The WLAN calibration data is specific for your device.  If you wipe it accidentally it will be difficult to restore, it cannot be restored by flashing back a vendor firmware.
 ===== Supported Versions =====
 ^ Board model ^ Wifi chip ^ Supported ^ Notes ^
-| HG55VDFA VER.C   |  Atheros AR9223  |  **Yes**  | - |
+| HG55VDFA VER.C   |  Atheros AR9223  |  **Yes**  | without ADSL |
-| HG56BZRB VER.A   |  Ralink RT3062F  |  **Yes**  | - |
+| HG56BZRB VER.A   |  Ralink RT3062F  |  **Yes**  | without ADSL |
 About where the wifi calibration data is located in the flash chip see [[#notes]].
@@ Line 17: / Line 17: @@
 ^ SoC ^ Ram ^ Flash ^ Network ^ USB ^ Serial ^ JTag ^
 | Broadcom 6358 | 64MiB | 16MiB | 4 x 1| Yes | Yes | Yes |
@@ Line 29: / Line 26: @@
 Please check out the article [[doc:techref:Flash Layout]]. It contains an example and a couple of explanations.
-FIXME this is just a draft
+^ partition ^ name ^ filesystem ^ function ^
-^ partition ^ name^ function ^
+| mtd0 | **CFE** | n/a | bootloader |
-| mtd0 | CFE | bootloader |
+| n/a | n/a | n/a | firmware tag |
-| mtd1 | kernel | kernel |
+| mtd1 | **kernel** | RAM executable | kernel |
-| mtd2 | rootfs | squashfs |
+| mtd2 | **rootfs** | squashfs | root |
-| mtd3 | rootfs_data | jffs2 |
+| mtd3 | **rootfs_data** | jffs2 | configuration, install new packages |
-| mtd4 | cal_data | wifi calibration data |
+| mtd4 | **cal_data** | n/a | wifi calibration data |
-| mtd5 | nvram | OEM configuration data |
+| mtd5 | **nvram** | n/a | OEM configuration data |
+| mtd6 | **linux** | n/a | OpenWrt upgrade |
 ==== OEM easy installation ====
 This section deals with how you install OpenWrt from the device freshly opened.
+  *Download [[http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-HW556-squashfs-cfe.bin|openwrt-HW556-squashfs-cfe.bin]]. You may also be interested on [[#Backports|Backports]]
   *Unplug the power cord
   *Press the button labeled as //RESTART//, don't release it yet!
@@ Line 52: / Line 51: @@
 ==== OEM installation using the TFTP method ====
+  * Connect the [[#serial|serial]] TTL cable to send commands to CFE for loading the firmware via tftp.
+  * Start a TFTP server in your PC. Copy the //**openwrt-HW556-squashfs-cfe.bin**// firmware to the server.
+  * Set the IP at your pc to 192.168.1.35 (or any compatible), and connect the ethernet cable to the router.
+This is a session of flashing via TFTP:
+<HTML>
+<p style="padding: 10px;border:1px solid grey;height:350px;font:9px/12px Georgia, Garamond, Serif;overflow:Auto;background-color:#DEE4E7">
+<code>CFE> f 192.168.1.35:openwrt-HW556-squashfs-cfe.bin
+Loading 192.168.1.35:openwrt-HW556-squashfs-cfe.bin ...
-If you want to upgrade using TFTP you follow these steps (as an alternative to the above install process.
+Finished loading 2883588 bytes
+Flashing root file system and kernel at 0xbe020000:
+ ~~~~~~~Flag: 3
+baseAddr 0xbe000000
+kernelAddr 0xbe020100
+rootfsAddr 0xbe020100
+tagFs 0x80800000
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+.
+Backup flag .
+ ~~~~~~~Flag: 1
+.
+*** Image flash done *** !
+Resetting board...
+</code>
+</p>
+</HTML>
 ==== Upgrading OpenWrt ====
@@ Line 73: / Line 131: @@
 <code>
 cd /tmp/
-wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
+wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-HW556-squashfs-cfe.bin
-sysupgrade /tmp/xxx.abc
+sysupgrade /tmp/openwrt-HW556-squashfs-cfe.bin
 </code>
@@ Line 81: / Line 139: @@
 <code>
 cd /tmp/
-wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
+wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-HW556-squashfs-cfe.bin
-mtd write /tmp/xxx.abc linux && reboot</code>
+mtd write /tmp/openwrt-HW556-squashfs-cfe.bin linux && reboot</code>
+=== CFE Upgrade Process ===
+This is a clean and safe upgrade, using the booloader web interface. Just use the [[#oem.easy.installation|OEM installation]] procedure.
+| {{:meta:icons:tango:48px-emblem-important.svg.png|}}| If after upgrading OpenWrt you get the message: <code>jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes </code> And you can't save changes. Enter OpenWrt [[#failsafe.mode|failsafe]] mode if needed. Then execute this command:\\ <code>mtd erase -r rootfs_data && reboot</code> |
 ===== Basic configuration =====
@@ Line 95: / Line 159: @@
 ^ Interface Name ^ Description ^ Default configuration ^
 | br-lan | LAN & WiFi | 192.168.1.1/24 |
-| eth0 | LAN ports (1 to 4) | None |
+| eth0 | LAN ports (1 to 4) | bridged |
-| wlan0 | WiFi | Disabled |
+| wlan0 | WiFi | bridged (disabled) |
 ==== Switch Ports (for VLANs) ====
@@ Line 108: / Line 172: @@
 <HTML>
-<div style="height:350px;font:10px/13px Georgia, Garamond, Serif;overflow-y:Auto">
+<p style=";padding: 10px;border:1px dashed grey;height:410px;font:9px/11px Georgia, Garamond, Serif;overflow:Auto">
-<p style="">
+<code># path: /etc/config/network
-<code>
-# path: /etc/config/network
 # port 4 = WAN
@@ Line 134: / Line 195: @@
         option proto 	dhcp
         option defaultroute 1
 config switch eth0
@@ Line 150: / Line 210: @@
 	option vlan 	1
 	option ports 	"3 5t"
+</code></p>
-</code>
-</p>
-</div>
 </HTML>
@@ Line 161: / Line 218: @@
 -> [[doc:howto:generic.failsafe]]
+**Openwrt failsafe:** Power on the router, press the button //RESTART// repeatedly to enter failsafe mode (the power led starts blinking very fast)
+**CFE failsafe:** This is for entering in the bootloader command line. Use a [[#serial|serial]] cable and press any key while loading CFE.
 ==== Buttons ====
 ->[[doc:howto:hardware.button]]
-The HG556a has four buttons.
+The HG556a has four buttons.
 ^ BUTTON label ^ Event (OEM) ^ GPIO ^ Openwrt name ^ Openwrt code ^
-| ? | diagnostic |  8  | diagnostic | BTN_0 |
+| ? | diagnostic |  8  |  **help**  | KEY_HELP |
-| <nowiki>((⚲))</nowiki>| wifi on/off |  9  | wifi | KEY_WPS_BUTTON  |
+| <nowiki>((i))</nowiki>| wifi on/off |  9  |  **wlan**  | KEY_WLAN  |
-| RESTART | reboot |  10  | restart | BTN_1 |
+| RESTART | reboot |  10  |  **restart**  | KEY_RESTART |
-| RESET | reset |  11  | reset | KEY_RESTART |
+| RESET | reset |  11  |  **reset**  | KEY_CONFIG |
 ===== Hardware =====
@@ Line 179: / Line 239: @@
 | **[[doc:techref:Bootloader]]:**     | [[doc:techref:bootloader:CFE|CFE]] ||
 | **[[doc:hardware:soc|System-On-Chip]]:**  | Broadcom 6358KFBG ||
-| **[[doc:hardware:cpu|CPU]]/Speed**        | BMIPS4350 V1.0 / 300 Mhz ||
+| **[[doc:hardware:cpu|CPU]]/Speed**        | BMIPS4350 V1.0 / 300 Mhz  [[doc:hardware:soc:soc.broadcom.bcm63xx:smp|BMIPS Dual Core]] ||
 | **Flash-Chip:**      | Macronix MX29GL128EH \\ Macronix MX29LV128DB \\ Spansion S29GL128P10 ||
 | **Flash size:**      | 16 MiB ||
-| **RAM:**             | 64 MiB   ||
+| **RAM:**             | [[http://www.hynix.com/datasheet/pdf/dram/HY5DU124(8,16)22D(L)TP(Rev0.1).pdf|HY5DU121622DTP-J]] / DDR-333  ||
+| **RAM size:**             | 64 MiB   ||
 | **Wireless:**        | Atheros AR9223 802.11b/g/n \\ Ralink RT3062F 802.11b/g/n | HG55VDFA VER.C\\ HG56BZRB VER.A |
 | **Ethernet:**        | Broadcom  [[http://wiki.openwrt.org/_media/toh/bcm5325_pinout.png|BCM5325]] w/ vlan support [[doc:uci:network#swconfig]] ||
 | **Internet:**        | ADSL2+  ||
 | **VoIP:**        | Zarlink Le88266DLC, Si3050 DAA  ||
-| **USB:**             | 2x 2.0  / SMSC HUB [[http://www.smsc.com/index.php?tid=295&pid=19|USB2502-AEZG]] \\ 1x 1.1 ||
+| **USB:**             | 2x 2.0  / SMSC HUB [[http://www.smsc.com/index.php?tid=295&pid=19|USB2502-AEZG]] \\ 1x 2.0 internal ||
 | **[[doc:hardware:port.serial|Serial]]:**          | [[#Serial|Yes]] ||
 | **[[doc:hardware:port.jtag|JTAG]]:**            | [[#JTAG|Yes]]  ||
 ==== Photos ====
+Photo of front and back of the casing:\\
+{{:media:toh:huawei:hg556a-front.jpg?300x300|}}{{:media:toh:huawei:hg556a-back.jpg?300x300|}}
+==== Opening the case ====
+**Note:** This will void your warranty!
+  *To remove the cover:
+| {{:media:toh:huawei:hg556a_rcase0.jpg?200x150|}} | remove the screw hidden under the label at the back of the router |
+| {{:media:toh:huawei:hg556a_rcase1.jpg?200x150|}} | remove the router's foot |
+| {{:media:toh:huawei:hg556a_rcase2.jpg?200x150|}} | carefully separate both parts of the casing |
+=== Photo of PCB ===
 <sortable>
 ^ HG55VDFA VER.C ^ HG56BZRB VER.A ^
@@ Line 200: / Line 274: @@
 </sortable>
-==== Opening the case ====
-**Note:** This will void your warranty!
-  *To remove the cover do a/b/c
-//Main PCB//
+==== Serial ====
+-> [[doc:hardware:port.serial]] general information about the serial port, serial port cable, etc.
+How to connect to the Serial Port of this specific device:
+Use a serial TTL adapter to connect your PC with HG556a.\\
+**Settings:**
+  * Baudrate: 112500
+  * Data bits: 8
+  * Parity: None
+  * Stop bits: 1
+**Photo of PCB with markings**
+{{:toh:huawei:hg556a_serial_ttl.jpg?400|}}
+==== JTAG ====
+-> [[doc:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.
+pin header marked J400 (see back of board picture below). Uses [[http://www.jtagtest.com/pinouts/avr|AVR JTAG]] layout. Broadcom CPU recognised by TJTAG version 3.0.1
+**Photo of PCB with markings (VER.C)**
+{{:media:toh:huawei:hg556ac_jtag_j400.jpg?400x250|}}
+We can use [[https://docs.google.com/leaf?id=0B07LcVZMfvdkZTc1MDA5MjUtZTMzYy00OGQzLWE5MjAtODFiN2RkMTJmNDQ5&sort=name&layout=list&num=50|the updated version of debrick on Google Docs]]
+But we'll need to change a couple of things
+<code diff>
+--- wrt54g.c
++++ wrt54g.c
+@@ -252,6 +252,7 @@
+    { 0x0535217F, 8, "Broadcom BCM5352 Rev 1 CPU" },
+    { 0x0536517F, 8, "Broadcom BCM5365 Rev 1 CPU" },         // BCM5365 Not Completely Verified Yet
+    { 0x0634817F, 5, "Broadcom BCM6348 Rev 1 CPU" },         // is bigendian
++   { 0x0635817F, 5, "Broadcom BCM6358 Rev 1 CPU" }, //flash base: 0x1e000000 0x1e800000 0x1f000000 0x1f800000
+    { 0x0634517F, 5, "Broadcom BCM6345 Rev 1 CPU" },         // BCM6345 Not Completely Verified Yet
+    { 0x0000100F, 5, "TI AR7WRD TNETD7300GDU Rev 1 CPU" },   // TI AR7WRD Only Partially Verified
+    { 0x0470417F, 8, "Broadcom BCM4704 Rev 8 CPU" },         // BCM4704 chip (used in the WRTSL54GS units)
+@@ -1287,7 +1288,7 @@
+     // Default to Standard Flash Window for Detection if not CUSTOM
+     if (strcasecmp(AREA_NAME,"CUSTOM")==0)
+          FLASH_MEMORY_START = selected_window;
+-    else FLASH_MEMORY_START = 0x1FC00000;
++    else FLASH_MEMORY_START = 0x1e000000;
+     printf("\nProbing Flash at (Flash Window: 0x%08x) ... ", FLASH_MEMORY_START);</code>
+We can use a unbuffered cable, but not longer than 15 cm.
+Backup the whole flash:
+  nice ./debrick -backup:custom /window:1e000000 /start:1e000000 /length:1000000 /silent
+Swap bytes for extracting or whatever you want with the backup
+  cat CUSTOM.BIN | ./switchend > HG556a_backup.bin
+Backup the calibration data:
+  nice ./debrick -backup:custom /window:1EEFE000 /start:1EEFE000 /length:2000 /silent
+or for the flash chip MX29LV128DB:
+  nice ./debrick -backup:custom /window:1EF7E000 /start:1EF7E000 /length:2000 /silent
+===== Debricking =====
+-> [[doc:howto:generic.debrick]]
+===== CFE Bootloader =====
+  - you could read about [[doc:techref:bootloader]] in general
+With a serial console we can get some interesting info
+About the version and build:
+  CFE version cfe.d081.5003 for BCM96358 (32bit,SP,BE)
+  Build Date: Wed Nov 11 10:36:35 CST 2009 (Lihua_68693)
+And about the possible boards compatible with this CFE:
+<code>CFE>
+b
+Press:  <enter> to use current value
+        '-' to go previous parameter
+        '.' to clear the current value
+        'x' to exit this command
+Board Id Name (0-11)
+HW6358GW_A       -------  0
+HW6358GW_B       -------  1
+HW550            -------  2
+HW550_FXO        -------  3
+HW553            -------  4
+HW556            -------  5
+HW556aV2         -------  6
+VW2         -------  7
+VW-16       -------  8
+GW          -------  9
+GW-16       ------- 10
+M           ------- 11       :  5  </code>
+This is the backup of my bootloader: [[http://files.myopera.com/danitool/linux/bootloaders/hg556a_CFE.zip|hg556a_CFE.zip]] --- //danitool 2012/01/06 15:39//
+===== Hardware mods =====
+ -> as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then obtain some practical experience!
+No mods yet.
+===== Firmware mods =====
+==== Backports ====
+  * Backfire backport (**10.03**). Only VER.C boards:\\ [[https://files.myopera.com/danitool/linux/hg556a/hg556a_ath_backport_10.02-luci.zip|hg556a_ath_backport_10.02-luci.zip]]
+  * Attitude Adjustment backport (**12.09**):\\ [[https://files.myopera.com/danitool/linux/hg556a/hg556a_backport_12.09-luci.zip|hg556a_backport_12.09-luci.zip]]
-**Photo of PCB**
+===== BOOTLOGS =====
-==== BOOTLOGS ====
+==== OEM bootlog: ====
-=== OEM bootlog: ===
 <HTML>
@@ Line 986: / Line 1168: @@
 </HTML>
-=== Openwrt bootlog: ===
+==== Openwrt bootlog: ====
 <HTML>
@@ Line 1283: / Line 1465: @@
 </HTML>
-==== Serial ====
--> [[doc:hardware:port.serial]] general information about the serial port, serial port cable, etc.
-How to connect to the Serial Port of this specific device:
-**OEM firmware settings:**
-  * Baudrate: 112500
-  * Data bits: 8
-  * Parity: None
-  * Stop bits: 1
-**Photo of PCB with markings**
-{{:toh:huawei:hg556a_serial_ttl.jpg?400|}}
-==== JTAG ====
--> [[doc:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.
-pin header marked J400 (see back of board picture below). Uses [[http://www.jtagtest.com/pinouts/avr|AVR JTAG]] layout. Broadcom CPU recognised by TJTAG version 3.0.1
-**Photo of PCB with markings (VER.C)**
-{{:media:toh:huawei:hg556ac_jtag_j400.jpg?400x250|}}
-We can use [[https://docs.google.com/leaf?id=0B07LcVZMfvdkZTc1MDA5MjUtZTMzYy00OGQzLWE5MjAtODFiN2RkMTJmNDQ5&sort=name&layout=list&num=50|the updated version of debrick on Google Docs]]
-But we'll need to change a couple of things
-<code diff>
---- wrt54g.c
-+++ wrt54g.c
-@@ -252,6 +252,7 @@
-    { 0x0535217F, 8, "Broadcom BCM5352 Rev 1 CPU" },
-    { 0x0536517F, 8, "Broadcom BCM5365 Rev 1 CPU" },         // BCM5365 Not Completely Verified Yet
-    { 0x0634817F, 5, "Broadcom BCM6348 Rev 1 CPU" },         // is bigendian
-+   { 0x0635817F, 5, "Broadcom BCM6358 Rev 1 CPU" }, //flash base: 0x1e000000 0x1e800000 0x1f000000 0x1f800000
-    { 0x0634517F, 5, "Broadcom BCM6345 Rev 1 CPU" },         // BCM6345 Not Completely Verified Yet
-    { 0x0000100F, 5, "TI AR7WRD TNETD7300GDU Rev 1 CPU" },   // TI AR7WRD Only Partially Verified
-    { 0x0470417F, 8, "Broadcom BCM4704 Rev 8 CPU" },         // BCM4704 chip (used in the WRTSL54GS units)
-@@ -1287,7 +1288,7 @@
-     // Default to Standard Flash Window for Detection if not CUSTOM
-     if (strcasecmp(AREA_NAME,"CUSTOM")==0)
-          FLASH_MEMORY_START = selected_window;
--    else FLASH_MEMORY_START = 0x1FC00000;
-+    else FLASH_MEMORY_START = 0x1e000000;
-     printf("\nProbing Flash at (Flash Window: 0x%08x) ... ", FLASH_MEMORY_START);</code>
-We can use a unbuffered cable, but not longer than 15 cm.
-Backup the whole flash:
-  nice ./debrick -backup:custom /window:1e000000 /start:1e000000 /length:1000000 /silent
-Swap bytes for extracting or whatever you want with the backup
-  cat CUSTOM.BIN | ./switchend > HG556a_backup.bin
-Backup the calibration data:
-  nice ./debrick -backup:custom /window:1EEFE000 /start:1EEFE000 /length:2000 /silent
-or for the flash chip MX29LV128DB:
-  nice ./debrick -backup:custom /window:1EF7E000 /start:1EF7E000 /length:2000 /silent
-===== Debricking =====
--> [[doc:howto:generic.debrick]]
-===== CFE Bootloader =====
-  - you could read about [[doc:techref:bootloader]] in general
-With a serial console we can get some interesting info
-About the version and build:
-  CFE version cfe.d081.5003 for BCM96358 (32bit,SP,BE)
-  Build Date: Wed Nov 11 10:36:35 CST 2009 (Lihua_68693)
-And about the possible boards compatible with this CFE:
-<code>CFE>
-b
-Press:  <enter> to use current value
-        '-' to go previous parameter
-        '.' to clear the current value
-        'x' to exit this command
-Board Id Name (0-11)
-HW6358GW_A       -------  0
-HW6358GW_B       -------  1
-HW550            -------  2
-HW550_FXO        -------  3
-HW553            -------  4
-HW556            -------  5
-HW556aV2         -------  6
-VW2         -------  7
-VW-16       -------  8
-GW          -------  9
-GW-16       ------- 10
-M           ------- 11       :  5  </code>
-This is the backup of my bootloader: [[http://files.myopera.com/danitool/linux/bootloaders/hg556a_CFE.zip|hg556a_CFE.zip]] --- //danitool 2012/01/06 15:39//
-===== Hardware mods =====
-  - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then obtain some practical experience!
-==== 128MiB RAM Mod ====
-==== I²C GPIO Mod ====
-==== I²C Tiny-USB Mod ====
 ===== Notes =====
@@ Line 1441: / Line 1517: @@
 For some Help with the Tags, please have a look here: [[meta/tags]]
-{{tag>bcm63xx bcm6358 FastEthernet 4Port 3USB ath9k 64RAM 16Flash MIPS MIPS32 34K}}
+{{tag>bcm63xx bcm6358 FastEthernet 4Port 3USB ath9k 64RAM 16Flash MIPS MIPS32}}

toh/huawei/hg556a.1360270401.txt.bz2 · Last modified: 2013/02/07 21:53 by esf

OpenWrt

Wiki Search

Actions

Donate

Translations

Differences