Sagem F@ST2404

Some very short description about the model. If you have nothing substantial → leave blank, omit marketing bla, bla.

Supported Versions

Version/Model Launch Date S/N OpenWrt Version Supported Model Specific Notes
- - - - -

NOTE: Anything not included in model specific notes, or where a short comment couldn't be included on the notes.

Hardware Highlights

SoC Ram Flash Network USB Serial JTag
Broadcom 6348 / 256 MHz 16MiB 4MiB 4 x 1 No Yes ?

Keep the articles modular

Please include only model specific information, omit bla,bla and put everything generic into separate articles
generic.overview if you have no time to write certain stuff link to this
basic.config should lead the way, do not explain this again
DO NOT provide a complete howto here! Instead groom the general HowTos.

Installation

Flash Layout

Please check out the article Flash Layout. It contains an example and a couple of explanations.

OEM easy installation

FIXME The instructions below are for Broadcom devices and only serve as an example. Don't leave them in place if they do not apply to a particular device!

This section deals with how you install OpenWrt from a device freshly opened. Plus the steps required such as reset to factory defaults if the device has already been configured

Note: Reset router to factory defaults if it has been previously configured.

OEM installation using the TFTP method

If you want to upgrade using TFTP you follow these steps (as an alternative to the above install process.

Upgrading OpenWrt

generic.sysupgrade

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

Terminal Upgrade Process

  • Login as root via SSH on 192.168.1.1
  • Use the following commands to upgrade.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
sysupgrade /tmp/xxx.abc

  • If sysupgrade does not support this router, use the following commands.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
mtd write /tmp/xxx.abc linux && reboot

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

Interfaces

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
vlan0 (eth0.0) LAN ports (1 to 4) None
vlan1 (eth0.1) WAN port DHCP
wl0 WiFi Disabled

Switch Ports (for VLANs)

Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port
Internet (WAN) 4
LAN 1 3
LAN 2 2
LAN 3 1
LAN 4 0

Failsafe mode

Buttons

hardware.button on howto use and configure the hardware button(s).

The Linksys WRT54GL has two buttons. They are Reset and Secure Easy Setup. Here, we merely name the buttons, so we can use them in the above Howto:

BUTTON Event
Reset reset
Secure Easy Setup ses

Hardware

Info

Architecture: MIPS
Vendor: Broadcom
Bootloader: CFE
System-On-Chip: BCM6348SKFBG
CPU/Speed BMIPS3300 V0.7 / 256 MHz
Flash-Chip: A29L320ATV-70F (SST39VF3201)
Flash size: 4 MiB
RAM: 16 MiB
Wireless: Broadcom 4318 802.11b/g
Ethernet: Broadcom BCM5325 w/ vlan support swconfig
Internet: ADSL2+
USB: No
Serial: Yes
JTAG: Yes?

Photos

Model Number

Front:

Photo of front of the casing

Back:

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • To remove the cover do a/b/c

//Main PCB//

Photo of PCB

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Photo of PCB with markings

Bootlogs

OEM Bootlog

Sagem CFE version: 3.13.5 Build Date: Mon May 14 17:56:09 CST 2007 (shenmc@svr1.sagemharbournetworks.com) Copyright (C) 2005-2006 Sagem communication. Boot Address 0xbfc00000 Initializing Arena. Initializing Devices. Parallel flash device: name SST39VF3201, id 0x235b, size 4096KB Enter readNvramData(CFE) Enter kerSysNvRamGet(CFE) kerSysNvRamGet(CFE) Mac address:00:19:4b:b4:dd:aa, BoardId=F@ST2404 Enter readNvramData(CFE) Enter kerSysNvRamGet(CFE) kerSysNvRamGet(CFE) Mac address:00:19:4b:b4:dd:aa, BoardId=F@ST2404 Enter readNvramData(CFE) Enter kerSysNvRamGet(CFE) kerSysNvRamGet(CFE) Mac address:00:19:4b:b4:dd:aa, BoardId=F@ST2404 CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz Total memory: 16777216 bytes (16MB) Total memory used by CFE: 0x80401000 - 0x80528470 (1209456) Initialized Data: 0x8041EAE0 - 0x80421AB0 (12240) BSS Area: 0x80421AB0 - 0x80426470 (18880) Local Heap: 0x80426470 - 0x80526470 (1048576) Stack Area: 0x80526470 - 0x80528470 (8192) Text (code) segment: 0x80401000 - 0x8041EAD8 (121560) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Enter readNvramData(CFE) Enter kerSysNvRamGet(CFE) kerSysNvRamGet(CFE) Mac address:00:19:4b:b4:dd:aa, BoardId=F@ST2404 Enter readNvramData(CFE) Enter kerSysNvRamGet(CFE) kerSysNvRamGet(CFE) Mac address:00:19:4b:b4:dd:aa, BoardId=F@ST2404 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.28 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id Name : F@ST2404 Psi size in KB : 24 Number of MAC Addresses (1-32) : 11 Base MAC Address : 00:19:4b:b4:dd:aa Ethernet PHY Type : Internal Memory size in MB : 16 CMT Thread Number : 0 Customer Name :SAGM(default) *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Code Address: 0x80010000, Entry Address: 0x801c6018 Decompression OK! Entry at 0x801c6018 Closing network. Starting program at 0x801c6018 Linux version 2.6.8.1 (chenc@svr1.sagem-szn.com) (gcc version 3.4.2) #1 Wed Jun8 Parallel flash device: name SST39VF3201, id 0x235b, size 4096KB Total Flash size: 4096K with 1024 sectors fInfo.flash_scratch_pad_start_blk = 1016 fInfo.flash_scratch_pad_number_blk = 2 fInfo.flash_scratch_pad_length = 0x2000 fInfo.flash_scratch_pad_blk_offset = 0x0 fInfo.flash_nvram_start_blk = 0 fInfo.flash_nvram_blk_offset = 0x580 fInfo.flash_nvram_number_blk = 1 fInfo.flash_persistent_start_blk = 1018 fInfo.flash_persistent_blk_offset = 0x0 fInfo.flash_persistent_number_blk = 6 backup_start_blk = 1010 backup_blk_offset = 0x0 backup_number_blk = 6 backup_length = 24576 psi startAddr = bfffa000 sp startAddr = bfff8000 backup startAddr = bfff2000 F@ST2404 prom init CPU revision is: 00029107 Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 64 (order 6: 512 bytes) Using 128.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13816k/16000k available (1515k kernel code, 2164k reserved, 233k data, ) Calibrating delay loop... 254.77 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Can't analyze prologue code at 80189494 usbcore: registered new driver hub Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) ohci_hcd: block sizes: ed 64 td 64 PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: OHCI Host Controller PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: irq 20, pci mem c0000b00 ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 1 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected usbcore: registered new driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver brcmboard: brcm_board_init entry RestoreMacFilter: Button GPIO 0x21 is enabled RestoreMacFilter: Button Interrupt 0x1 is enabled RestoreMacFilter: Interrupt mapping OK Serial: BCM63XX driver $Revision: 1.3 $ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes ********* ip_rt_init ************ sizeof(struct rtable)=244 ip_rt_max_size=2048, rt_hash_mask=511, ipv4_dst_ops.gc_thresh=512, ip_rt_gc_interval=12000, rt_secret_rebuild=120000 TCP: Hash tables configured (established 512 bind 1024) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 72k freed init started: BusyBox v1.00 (2008.06.25-10:09+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 mount: Mounting tmpfs on /tmp failed: No such file BusyBox v1.00 (2008.06.25-10:09+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6348B0 Ethernet Network Device v0.3 Jun 25 2008 18:01:31 Config Ethernet Switch Through SPI Slave Select 0 dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 00:19:4B:B4:DD:AA Cfm wathcer has been setup! PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl: srom not detected, using main memory mapped srom info (wombo board) wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000 wl0: MAC Address: 00:19:4B:B4:DD:AB wl0: Broadcom BCM4318 802.11 Wireless Controller 4.150.10.15.cpe2.2 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered eth0 Link UP. Cfm has been started to initiate! Read Flash: part=[PERSISTENT] Read Flash: part=[PERSISTENT] PSI has been initiated successfully! BcmAdsl_Initialize=0xC006D928, g_pFnNotifyCallback=0xC0088D14 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 pSdramPHY=0xA0FFFFF8, 0x28041 0x9689ACE8 AdslCoreHwReset: AdslOemDataAddr = 0xA0FFBB64 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 Read Flash: part=[FACTORYINFO] Enter kerSysFactoryInfoGet: strLen[256],offset[0] FactoryInfo[1-10]=[����������] ATM proc init !!! ATM Config Management initiated successfully! Security configuration management initiated successfully! ==> Software Version: 3.24a4 <== device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state Setting SSID "Sagem" Setting SSID "Guest" Setting country code using abbreviation: "FR" wlctl band b run 0 time! wlctl band b run 0 time! channel 11 selected device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state device wl0.1 entered promiscuous mode br0: port 3(wl0.1) entering learning state br0: topology change detected, propagating br0: port 3(wl0.1) entering forwarding state EngDbg:- PSI Retrieve Status for PortMirrorStatus = 3 EngDbg:- In Effect Port Mirror Cfg ENGDBG :- In Effect Port Mirroring, status = 0 count = 0 Read Flash: part=[SCRATCH_PAD] Read Flash: part=[SCRATCH_PAD] Network initiated successfully! Web Server initiated successfully! Read Flash: part=[SCRATCH_PAD] Cfm initiated successfully! No POSTINIT command need excuting Admin URL is blank, then don't start RemoteAutoUpgradeThread ========>Load the wireless_reload_monitor thread<======= nat_cache: Unknown symbol invert_tuplepr nat_cache: Unknown symbol ip_ct_find_helper nat_cache: Unknown symbol ip_ct_refresh insmod: cannot insert `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/s --->syslog_options_up: blocksite unloged! nat_cache: Unknown symbol invert_tuplepr nat_cache: Unknown symbol ip_ct_find_helper nat_cache: Unknown symbol ip_ct_refresh insmod: cannot insert `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/s Read Flash: part=[FACTORYINFO] Enter kerSysFactoryInfoGet: strLen[1024],offset[0] FactoryInfo[1-10]=[����������]

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

Debricking

Bootloader Mods

  1. you could read about bootloader in general

Hardware mods

  1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

128MiB RAM Mod

I²C GPIO Mod

I²C Tiny-USB Mod

Notes

Tags

For some Help with the Tags, please have a look here: tags

Back to top

toh/sagem/fast2404.txt · Last modified: 2012/01/16 22:53 by danitool