Pirelli Alice Gate W2+

This page is about the above mentioned device also know as AG3 or "Vela".
There are several models of Alice Gate out there.

Hardware Highlights

CPU Ram Flash Network USB Serial JTag
Broadcom BCM6348KFBG 16MiB 8MiB 4 x 100Mbps No* No* No*

*Not provided, but support can be added via HW modification. See below

Installation

This section deals with how you install OpenWrt on the device.

You will need a serial adapter!! Don't even try to go further without a serial adapter!!

Support for Alice Gate W2+ is achieved applying the patch below against the svn (tested as far as rev. 33981). https://dl.dropbox.com/u/39223193/OpenWRT_AGA_Vela/Attitude_Adjustment_rev_33981/AGW2%2B_AliceGateW2%2B_20121009.patch

Optionally, you may download the pre-built image based on Attitude Adjustmet rev. 33981 https://dl.dropbox.com/u/39223193/OpenWRT_AGA_Vela/Attitude_Adjustment_rev_33981/openwrt-AliceGateW2%2B-squashfs-cfe.bin

  • Power on the router and stop it at CFE prompt
  • type "e a" and press enter (to clean up everything and force writing of FW in the first image position)
  • Connect your PC to the ethernet (Eth4) port closer to power plug and set an address in 192.168.1.2-254/24 range (e.g. 192.168.1.100/24)
  • Upload .bin file to router
  • Wait for it to reboot (allow first boot to up to 5 minutes)
  • Telnet to 192.168.1.1 and set a root password

Due to limited resources, LuCI is NOT installed by default. After setting the pw for root, you'll access via ssh

OPTIONAL Image above is built with zram support. To take advantage of it, save the following as zram.sh and run from root (/):

!/bin/bash
cd /
wget http://downloads.openwrt.org/attitude_adjustment/12.09-beta/brcm63xx/generic/packages/swap-utils_2.21.2-1_brcm63xx.ipk
tar -xvzf swap-utils_2.21.2-1_brcm63xx.ipk
tar -xvzf data.tar.gz
wget http://downloads.openwrt.org/attitude_adjustment/12.09-beta/brcm63xx/generic/packages/libblkid_2.21.2-1_brcm63xx.ipk
tar -xvzf libblkid_2.21.2-1_brcm63xx.ipk
tar -xvzf data.tar.gz
wget http://downloads.openwrt.org/attitude_adjustment/12.09-beta/brcm63xx/generic/packages/libuuid_2.21.2-1_brcm63xx.ipk
tar -xvzf libuuid_2.21.2-1_brcm63xx.ipk
tar -xvzf data.tar.gz
rm -r data.tar.gz control.tar.gz debian-binary swap-utils_2.21.2-1_brcm63xx.ipk libuuid_2.21.2-1_brcm63xx.ipk libblkid_2.21.2-1_brcm63xx.ipk

and add the following lines to /etc/rc.local

echo 100000000 > /sys/block/zram0/disksize
mkswap /dev/zram0
swapon -p 5 /dev/zram0

Flash Layout

Device Size Erasesize Name
mtd0 00010000 00010000 CFE
mtd1 000eff00 00010000 kernel
mtd2 006f0000 00010000 rootfs
mtd3 00590000 00010000 rootfs_data
mtd4 00010000 00002000 nvram
mtd5 007e0000 00010000 linux

Terminal Upgrade Process

  • Login as root via SSH
  • Use the following commands to upgrade.

cd /tmp/
wget <url of new image>
mtd -r write <newimage.bin> linux 

Bootlogs

OEM bootlog

CFE version 1.0.37-3.1 P6 for BCM96348 (32bit,SP,BE) Build Date: lun gen 30 13:13:30 CET 2006 (root@linux_gpaolo) Copyright (C) 2000-2005 Broadcom Corporation. Boot Address 0xbf000000 Initializing Arena. Initializing Devices. Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz Total memory: 16777216 bytes (16MB) Total memory used by CFE: 0x80401000 - 0x805254A0 (1197216) Initialized Data: 0x8041CD00 - 0x8041EC40 (8000) BSS Area: 0x8041EC40 - 0x804234A0 (18528) Local Heap: 0x804234A0 - 0x805234A0 (1048576) Stack Area: 0x805234A0 - 0x805254A0 (8192) Text (code) segment: 0x80401000 - 0x8041CCF4 (113908) Boot area (physical): 0x00526000 - 0x00566000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 3 Boot image (0=latest, 1=previous) : 0 Board Id Name : Alice Gate W2+ Psi size in KB : 24 Number of MAC Addresses (1-32) : 13 Base MAC Address : 00:13:xx:xx:xx:xx Ethernet PHY Type : Internal Memory size in MB : 16

OpenWrt bootlog

[ 0.000000] Linux version 3.3.8 (xxxx@xxxx) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #2 Thu Nov 1 16:49:28 CET 2012 [ 0.000000] Detected Broadcom 0x6348 CPU revision b0 [ 0.000000] CPU frequency is 256 MHz [ 0.000000] 16MB of RAM installed [ 0.000000] registering 37 GPIOs [ 0.000000] gpiochip_add: registered GPIOs 0 to 36 on device: bcm63xx-gpio [ 0.000000] board_bcm963xx: Boot address 0xbf000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.37-3.1 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00029107 (Broadcom BMIPS3300) [ 0.000000] board_bcm963xx: board name: Alice Gate W2+ [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 01000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00001000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] Early memory PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00001000 [ 0.000000] On node 0 totalpages: 4096 [ 0.000000] free_area_init_node: node 0, pgdat 802a5c80, node_mem_map 8031d000 [ 0.000000] Normal zone: 32 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 4064 pages, LIFO batch:0 [ 0.000000] Reserving 0MB of memory at 0MB for crashkernel [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 64 (order: -4, 256 bytes) [ 0.000000] Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.000000] Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes [ 0.000000] Memory: 12996k/16384k available (2242k kernel code, 3388k reserved, 406k data, 200k init, 0k highmem) [ 0.000000] NR_IRQS:128 [ 0.000000] Calibrating delay loop... 254.46 BogoMIPS (lpj=508928) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 512 [ 0.056000] NET: Registered protocol family 16 [ 0.080000] registering PCI controller with io_map_base unset [ 0.112000] bio: create slab at 0 [ 0.124000] PCI host bridge to bus 0000:00 [ 0.128000] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff] [ 0.132000] pci_bus 0000:00: root bus resource [io 0x8000000-0x800ffff] [ 0.136000] pci 0000:00:01.0: [14e4:4318] type 0 class 0x000280 [ 0.136000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x00001fff] [ 0.148000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30001fff] [ 0.156000] Switching to clocksource MIPS [ 0.172000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.180000] b43-pci-bridge 0000:00:01.0: setting latency timer to 64 [ 0.204000] ssb: Found chip with id 0x4318, rev 0x02 and package 0x02 [ 0.212000] ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x0D, vendor 0x4243) [ 0.212000] ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x09, vendor 0x4243) [ 0.212000] ssb: Core 2 found: PCI (cc 0x804, rev 0x0C, vendor 0x4243) [ 0.212000] ssb: Core 3 found: PCMCIA (cc 0x80D, rev 0x07, vendor 0x4243) [ 0.252000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 0.264000] NET: Registered protocol family 2 [ 0.268000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.276000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.284000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.292000] TCP: Hash tables configured (established 512 bind 512) [ 0.296000] TCP reno registered [ 0.300000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.308000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.312000] NET: Registered protocol family 1 [ 0.320000] PCI: CLS 0 bytes, default 16 [ 0.324000] audit: initializing netlink socket (disabled) [ 0.332000] type=2000 audit(0.332:1): initialized [ 0.336000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.344000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.356000] msgmni has been set to 25 [ 0.360000] io scheduler noop registered [ 0.364000] io scheduler deadline registered (default) [ 0.372000] bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart [ 0.380000] console [ttyS0] enabled, bootconsole disabled [ 0.404000] physmap platform flash device: 01000000 at 1f000000 [ 0.408000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x00227e [ 0.420000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.424000] Amd/Fujitsu Extended Query version 1.3. [ 0.432000] physmap-flash.0: Swapping erase regions for top-boot CFI table. [ 0.436000] number of CFI chips: 1 [ 0.440000] bcm63xxpart: CFE boot tag found with version 6 and board type Alice Gate W2+ [ 0.452000] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.456000] bcm63xxpart: Partition 1 is kernel offset 10100 and length eff00 [ 0.464000] bcm63xxpart: Partition 2 is rootfs offset 100000 and length 6f0000 [ 0.472000] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.480000] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000 [ 0.488000] bcm63xxpart: Spare partition is offset 260004 and length 58fffc [ 0.492000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0 [ 0.500000] Creating 5 MTD partitions on "physmap-flash.0": [ 0.508000] 0x000000000000-0x000000010000 : "CFE" [ 0.516000] 0x000000010100-0x000000100000 : "kernel" [ 0.524000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.544000] 0x000000100000-0x0000007f0000 : "rootfs" [ 0.552000] mtd: partition "rootfs" set to be root filesystem [ 0.560000] mtd: partition "rootfs_data" created automatically, ofs=260000, len=590000 [ 0.568000] 0x000000260000-0x0000007f0000 : "rootfs_data" [ 0.580000] 0x0000007f0000-0x000000800000 : "nvram" [ 0.592000] 0x000000010000-0x0000007f0000 : "linux" [ 0.616000] bcm63xx_enet MII bus: probed [ 0.620000] bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (1)] [ 0.640000] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.652000] Registered led device: Alice Gate W2+:green:power [ 0.652000] Registered led device: Alice Gate W2+:red:power [ 0.652000] Registered led device: Alice Gate W2+:green:ethernet [ 0.656000] Registered led device: Alice Gate W2+:green:adsl [ 0.656000] Registered led device: Alice Gate W2+:red:service [ 0.656000] Registered led device: Alice Gate W2+:green:voip [ 0.660000] Registered led device: Alice Gate W2+:red:voip [ 0.660000] zram: num_devices not specified. Using default: 1 [ 0.664000] zram: Creating 1 devices ... [ 0.672000] TCP cubic registered [ 0.676000] NET: Registered protocol family 17 [ 0.684000] 8021q: 802.1Q VLAN Support v1.8 [ 0.696000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.708000] Freeing unused kernel memory: 200k freed [ 4.512000] eth1: link forced UP - 100/full - flow control off/off [ 4.600000] roboswitch: Probing device eth0: Failed to enable switch [ 4.612000] roboswitch: Probing device eth1: found a 5325! It's a 5350. [ 11.280000] JFFS2 notice: (351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 2 orphan) found. [ 14.160000] Compat-drivers backport release: compat-drivers-2012-09-04-2-gddac993 [ 14.168000] Backport based on wireless-testing.git master-2012-09-07 [ 14.176000] compat.git: wireless-testing.git [ 14.260000] cfg80211: Calling CRDA to update world regulatory domain [ 14.264000] cfg80211: World regulatory domain updated: [ 14.272000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 14.280000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 14.288000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 14.296000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 14.304000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 14.312000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 15.476000] b43-phy0: Broadcom 4318 WLAN found (core revision 9) [ 15.528000] b43-phy0: Found PHY: Analog 3, Type 2 (G), Revision 7 [ 15.556000] Broadcom 43xx driver loaded [ Features: PNL ] [ 15.628000] Button Hotplug driver version 0.4.1 [ 15.920000] PPP generic driver version 2.4.2 [ 16.784000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 16.788000] Registered led device: b43-phy0::tx [ 16.788000] Registered led device: b43-phy0::rx [ 16.788000] Registered led device: b43-phy0::radio [ 16.812000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 17.148000] NET: Registered protocol family 24 [ 17.200000] nf_conntrack version 0.5.0 (206 buckets, 824 max) [ 24.728000] device eth0 entered promiscuous mode [ 24.772000] eth1: link forced UP - 100/full - flow control off/off [ 24.800000] device eth1 entered promiscuous mode [ 24.804000] br-lan: port 2(eth1) entered forwarding state [ 24.812000] br-lan: port 2(eth1) entered forwarding state [ 26.816000] br-lan: port 2(eth1) entered forwarding state [ 30.460000] b43-phy0: Loading firmware version 666.2 (2011-02-23 01:15:07) [ 30.616000] device wlan0 entered promiscuous mode [ 30.792000] b43-phy0: Loading firmware version 666.2 (2011-02-23 01:15:07) [ 32.136000] br-lan: port 3(wlan0) entered forwarding state [ 32.140000] br-lan: port 3(wlan0) entered forwarding state [ 34.144000] br-lan: port 3(wlan0) entered forwarding state

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

Interfaces

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
eth0 LAN port (Eth1) None
eth1 LAN port (Eth2 to 4) None
wl0 WiFi Disabled

Failsafe mode

Hardware

Info

Architecture: MIPS
Vendor: Broadcom
Bootloader: CFE
System-On-Chip: brcm63xx
CPU/Speed BCM6348 256 Mhz
Flash-Chip: Macronix MX29LV640MTTC
Flash size: 8192 KiB
RAM: 16 MiB
Wireless: BCM94318MPG (Chipset BCM4318)
Ethernet: Broadcom BCM5325EKQMG w/ vlan support swconfig
Internet: no xDSL driver
USB: Yes 1x 1.1 device. Optional USB 1.1 Master via mod
Serial: Yes, via mod
JTAG: Yes, via mod

Photos

Alice Gate W2+ also known as AG3 or "Vela"

alicevelagf6.jpg

Opening the case

Note: This will void your warranty!

vela2.jpg

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Different from other devices AliceGate W2+ needs some HW mods to enable serial port. Serial connector is not present but can be soldered (on the side of the smartcard connector, beside JTAG connector). In addition to solder the serial connector, we have to make some short-circuits (or solder 0 ohms resistors) beside serial connector itself:

  R257
  R276
  R277

Following pictures show the point to short-circuit corti_seriale.jpg corti_seriale_zoom.jpg

Once done, you'll have the serial signals on the connector as per this pinout: connettore_seriale.jpg

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Similar to the serial port, we need HW mods to anable JTAG also. JTAG connector is not present, but can be soldered (on the side of the smartcard connector, identified as CN3). In addition to solder the connector, we have to make some short-circuits (or solder 0 ohms resistors) to route JTAG signals to the JTAG connector. The resistor to short are on the rear side of the board:

  R55
  R56
  R57
  R105
  R108

The picture shows the short-circuits.

corti_jtag.jpg

This is a standard MIPS EJTAG and this is the pinout, when looked from the top.

Signal PIN PIN Signal
TRST 1 2 GND
TDI 3 4 GND
TDO 5 6 GND
TMS 7 8 GND
TCK 9 10 GND
SRST 11 12 GND

Debricking

Hardware mods

  1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

Adding a USB 1.1 Master port USB%20HOST%20su%20MODEM%20ROUTER%20WiFi%20Pirelli%20Gate%20W2+%20(Vela).pdf

Notes

Tags

Back to top

toh/pirelli/alicegatew2.txt · Last modified: 2012/11/01 23:52 (external edit)