User Tools

Site Tools


toh:linksys:wag200g

Linksys WAG200G

The Linksys WAG200G, and its EU variant (WAG200G-EU), is an ADSL2+ home gateway which integrates a 4 port switch and an 802.11G wireless acccess point.

It is similar in appearance to the WAG54G, except that it lacks a power button.

Under Construction!
This page is currently under construction. You can edit the article to help completing it.

Supported Versions

Version/Model Launch Date S/N OpenWrt Version Supported Model Specific Notes
v1 :?: - - -

OEM source code available at: http://support.linksys.com/en-eu/gplcodecenter

Hardware Highlights

SoC Ram Flash Network USB Serial JTag
Texas Instruments TNETD7200ZDW@211MHz 16MiB 4MiB 4 x 1 No Yes ?

Manufacturer's site: WAG200G

Flash Layout

Please check out the article Flash.Layout. It contains an example and a couple of explanations.

dev size erasesize name
mtd0 002d0000 00010000 mtd0
mtd1 000b0000 00010000 mtd1
mtd2 00020000 00010000 mtd2
mtd3 00010000 00010000 mtd3
mtd4 00010000 00010000 mtd4
mtd5 00040000 00010000 mtd5

Hardware

Info

Instruction set: MIPS
Vendor: Texas Instruments
Bootloader: Adam2
System-On-Chip: TNETD7200ZDW
CPU @Frq MIPS 4KEc V4.8 @211MHz
Flash size: 4 MiB
Flash Chip: MXIC 29LV320MBTC
RAM size: 16 MiB
RAM Chip: Mira P2V28S40BTP
Wireless No1: VLYNQ: TNETW1350A w/ antenna for 2.4GHz 802.11b/g
Switch: Marvell 88E6060-RCJ
Modem: xDSL
USB: No
Serial: Yes
JTAG: Yes

Photos

Front:

wag200g_front2.jpg

Back:

wag200g_back2.jpg

Opening the case

Note: This will void your warranty!

  • To remove the cover remove four screws under rubber pads

Main PCB

Serial

port.serial general information about the serial port, serial port cable, etc.

The WAG200G integrates a dual 16550 UART for remote console: on of the two is accessibile via the 4-pin header (which need to be soldered) labelled JP603.

How to connect to the Serial Port of this specific device:

FIXME

Pin Signal
1 GND
2 TxD
3 VCC
4 RxD

The settings are: 115200 bauds, 8 bits, no parity, 1 stop bit (115200 8N1)

terminal confiration
Bits per second 115200
Data bits 8
Parity None
Stop bits 1
Flow control Hardware

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

The WAG200G JTAG connector is JP602.

The pinout and specifications are the same of others AR7 devices that is 14 ping ejtag 2.6.

How to connect to the JTAG Port of this specific device:

FIXME

The pinout is the following:

Signal Pin Pin Signal
nTRST 1 2 GND
TDI 3 4 GND
TDO 5 6 GND
TMS 7 8 GND
TCK 9 10 GND
nSRST 11 12 n/a
n/a 13 14 Vcc

OEM bootlog

ADAM2 Revision 0.22.02 (C) Copyright 1996-2003 Texas Instruments Inc. All Rights Reserved. (C) Copyright 2003 Telogy Networks, Inc. memsize == 0x01000000Usage: setmfreq [-d] [-s sys_freq, in MHz] [cpu_freq, in MHz] maca 00:1a:70:9b:b1:c4 macb 00:1a:70:9b:b1:c5 memsize 0x01000000 flashsize 0x00400000 modetty0 115200,n,8,1,hw modetty1 115200,n,8,1,hw bootserport tty0 cpufrequency 211968000 sysfrequency 105984000 bootloaderVersion 0.22.02 ProductID WAG200G HWRevision Unknown SerialNumber none my_ipaddress 169.254.87.1 prompt WAG200G firstfreeaddress 0x9401bd20 req_fullrate_freq 125000000 mtd0 0x900d0000,0x903a0000 mtd1 0x90020000,0x900d0000 mtd2 0x90000000,0x90020000 mtd3 0x903e0000,0x903f0000 mtd4 0x903f0000,0x90400000 mtd5 0x903a0000,0x903e0000 oam_lb_timeout 100 WAG200G > addr=90020000 Launching kernel decompressor. Starting LZMA Uncompression Algorithm. Copyright (C) 2003 Texas Instruments Incorporated; Copyright (C) 1999-2003 Igor Pavlov. Compressed file is LZMA format. Kernel decompressor was successful ... launching kernel. LINUX started... Config serial console: ttyS0,115200 Auto Detection OHIO chip This SOC has MDIX cababilities on chip. WLAN 1350 chip configured. CONFIG_AVALANCHE_VLYNQ_POLARITY_LOW Success in setting up the VLYNQ. CPU revision is: 00018448 Primary instruction cache 16kb, linesize 16 bytes (4 ways) Primary data cache 8kb, linesize 16 bytes (4 ways) Number of TLB entries 16. Linux version 2.4.17_mvl21-malta-mips_fp_le (root@ubuntu) (gcc version 2.95.3 20010315 (release/MontaVista)) #196 Tue May 29 13:00:28 CST 2007 Determined physical RAM map: memory: 14000000 @ 00000000 (reserved) memory: 00020000 @ 14000000 (ROM data) memory: 00fe0000 @ 14020000 (usable) On node 0 totalpages: 4096 zone(0): 4096 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: calculating r4koff... 00102c00(1059840) CPU frequency 211.97 MHz Calibrating delay loop... 211.35 BogoMIPS Freeing Adam2 reserved memory [0x14001000,0x0001f000] Memory: 14172k/16384k available (1640k kernel code, 2212k reserved, 143k data, 64k init) Dentry-cache hash table entries: 2048 (order: 2, 16384 bytes) Inode-cache hash table entries: 1024 (order: 1, 8192 bytes) Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 4096 (order: 2, 16384 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 TI Optimizations: Allocating TI-Cached Memory Pool. Warning: Number of buffers is not configured.Setting default to 120 Using 120 Buffers for TI-Cached Memory Pool. DEBUG: Using Hybrid Mode. NSP Optimizations: Succesfully allocated TI-Cached Memory Pool. Initializing RT netlink socket Starting kswapd Disabling the Out Of Memory Killer devfs: v1.7 (20011216) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 Adam2 environment variables API installed. pty: 32 Unix98 ptys configured Serial driver version 5.05c (2001-07-08) with no serial options enabled ttyS00 at 0xa8610e00 (irq = 15) is a 16550A Installed misc driver vlynq0: it handles vlynq bridge0 with 1 hop(s). block: 64 slots per queue, batch=16 DEBUG: Initializing the voice port management module. DEBUG: Initialization of the voice port management module successful.. Error getting CPMAC Configuration params for instance:0 Environment Variable:MACCFG_A not set in bootloader Setting Default configuration params for CPMAC instance:0 Default Asymmetric MTU for eth0 1500 TI CPMAC Linux DDA version 1.8 - CPMAC DDC version 0.2 Cpmac: Installed 1 instances. Cpmac driver is allocating buffer memory at init time. PPP generic driver version 2.4.1 avalanche flash device: 0x400000 at 0x10000000. Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank Amd/Fujitsu Extended Query Table at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. Looking for mtd device :mtd0: Found a mtd0 image (0xd0000), with size (0x2d0000). Looking for mtd device :mtd1: Found a mtd1 image (0x20000), with size (0xb0000). Looking for mtd device :mtd2: Found a mtd2 image (0x0), with size (0x20000). Looking for mtd device :mtd3: Found a mtd3 image (0x3e0000), with size (0x10000). Looking for mtd device :mtd4: Found a mtd4 image (0x3f0000), with size (0x10000). Looking for mtd device :mtd5: Found a mtd5 image (0x3a0000), with size (0x40000). Creating 6 MTD partitions on "Physically mapped flash": 0x000d0000-0x003a0000 : "mtd0" 0x00020000-0x000d0000 : "mtd1" 0x00000000-0x00020000 : "mtd2" 0x003e0000-0x003f0000 : "mtd3" 0x003f0000-0x00400000 : "mtd4" 0x003a0000-0x003e0000 : "mtd5" NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP, IGMP IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 1024 bind 1024) Linux IP multicast router 0.06 plus PIM-SM ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading PPTP netfilter connection tracking: <0> registered PPTP netfilter NAT helper: registered netfilter PSD loaded - (c) astaro AG ipt_random match loaded NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 Initializing the WAN Bridge. Please set the MAC Address for the WAN Bridge. Set the Environment variable 'wan_br_mac'. MAC Address should be in the following format: xx.xx.xx.xx.xx.xx VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing unused kernel memory: 64k freed init started: BusyBox v1.00 (2007.06.04-10:30+0000) multi-call binary init started: BusyBox v1.00 (2007.06.04-10:30+0000) multi-call binary Starting pid 10, console /dev/tts/0: '/usr/etc/rcS' Algorithmics/MIPS FPU Emulator v1.5 Using /lib/modules/2.4.17_mvl21-malta-mips_fp_le/kernel/drivers/atm/tiatm.o registered device TI Avalanche SAR Ohio250(7200/7100A2) detected DBG: oam retry = 0x3FFF, str=a30085cc3FFF DBG: To read and write SAR oam retry counter: Reading 2 words from address = 0xa30085cc 0xf 0x0 Writing 0x3fff to address = 0xa30085cc DBG: SAR oam retry counter after setting: Reading 2 words from address = 0xa30085cc 0x3fff 0x0 DBG: Read the SAR OAM respnse drop counter: Reading 2 words from address = 0xa30085c4 0x0 0x0 DSP binary filesize = 361770 bytes Texas Instruments ATM driver: version:[5.00.04.00] Using /lib/modules/push_button.o Using /lib/modules/led.o download uses obsolete (PF_INET,SOCK_PACKET) PID[]=sErCoMm Default Asymmetric MTU for br0 1500 device eth0 entered promiscuous mode * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * SYSTEM: echo MMODE > /proc/sys/dev/dslmod tn7dsl_set_modulation : Setting mode to 0x1 ap_name=printk action=start * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=lan action=start SYSTEM: /sbin/ifconfig br0 192.168.1.1 netmask 255.255.255.0 broadcast 192.168.1.255 * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=wlan action=start 4x Disabled SYSTEM: /usr/sbin/wlan_init /usr/sbin/wpa_auth /lib/modules/tiap.o wlan0 br0 wcfglib: Setting default parameters. start_process: wait for the child pid = 52 Using /lib/modules/tiap.o *** sending hello msg with cipher = 0 SecurityType = 2*** *** sending hello msg with cipher = 4 SecurityType = 8*** wpa auth:waiting for driver to come up... wpa auth:waiting for driver to come up... wcfg_nvs_read_data: TNETW Die ID=98015C49 D04A140C Reads TNETW NVS parameters from /dev/mtdblock/4 NOT sending FW on init! init: lightly deinitializing wcfglib SYSTEM: /bin/cp /proc/uptime /tmp/wlan_uptime * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=syslogd action=start killall: syslogd: no process killed SYSTEM: /sbin/syslogd -f /etc/syslog.conf * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=httpd action=start SYSTEM: /usr/bin/killall -9 mini_httpd > /dev/null killall: mini_httpd: no process killed SYSTEM: /bin/rm -f /tmp/www SYSTEM: /bin/ln -sf /www.eng /tmp/www SYSTEM: /usr/sbin/mini_httpd -d /www -r "Linksys WAG200G " -c '*.cgi' -t 300 -i /var/run/mini_httpd.pid -S -E /usr/sbin/certSrv.pem & * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=dhcpd action=start SYSTEM: /usr/sbin/udhcpd /etc/udhcpd.conf& * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=ntp action=start SYSTEM: /usr/sbin/ntp -t 3600 -z GMT+0 2& * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=route action=start * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=ripd action=start * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=snmp action=start killall: snmp: no process killed iptables: Bad rule (does a matching rule exist in that chain?) iptables v1.2.8: invalid port/service `' specified Try `iptables -h' or 'iptables --help' for more information. sh: 80,32764: not found SYSTEM: iptables -t nat -D PREROUTING -p udp --dport 161 -d 192.168.1.1 -j ACCEPT iptables: Bad rule (does a matching rule exist in that chain?) * * * * * * * {~._.~} * * ( Y ) * * ()~*~() * * (_)-(_) * * * * * * ap_name=upnp action=start SYSTEM: /usr/bin/killall -9 upnpd killall: upnpd: no process killed SYSTEM: route add -net 239.0.0.0 netmask 255.0.0.0 br0 SYSTEM: /usr/sbin/upnpd nas0 br0 30 4& Starting pid 121, console /dev/tts/0: '/bin/sh' BusyBox v1.00 (2007.06.04-10:30+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. #

Notes

See also the oldwiki

Tags

toh/linksys/wag200g.txt · Last modified: 2015/05/06 12:31 by theoradicus