custom non-public Alice Firmware

Work in Progress

Jumper 5
VCC RX TX GND

115200 8-N-1

Beware: VCC is 3.3V, you will need a converter!

Alice has a updateserver which delivers updates for the Alice WLAN 1121, Alice MODEM 1111 and the Alice TV Box. It seems that all versions from start till now are present on this server for all models produced by Siemens.

It can be found at ftp://updatefirm:DidFS4a3SRd2t8ks@update-siem.hansenet.net

... It's an Alice WLAN 1121 (SIEMENS S1621-Z220-A) from Germany.

So far I have hooked up a serial terminal and booted a ramdisk image over the network. There is no firmware available for download for this device so I am not going to flash it until I have everything working that I need.

To make openwrt boot the kernel, I had to add a new device to board_bcm963xx.c. I basically copied the entry for 96338W and made a new one for 96338W2.

Are we not able to use the broadcom-wl driver because of this SDIO thing? This page says that my BCM4312 should be supported: http://wiki.archlinux.org/index.php/Broadcom_BCM43XX.

Anyway, I'm quite new to openwrt but I will help were I can. I am happy to write a wiki page for this device with the information I have so far if it's not too premature.

Here is a dump from the serial console from the original firmware:

CFE version 1.0.37-12.1 for BCM96338 (32bit,SP,BE) Build Date: Fri Nov 14 16:18:28 CST 2008 (root@localhost.localdomain) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbfc00000 Initializing Arena. Initializing Devices. Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB CPU type 0x29010: 240MHz Total memory: 16777216 bytes (16MB) Total memory used by CFE: 0x80401000 - 0x805281D0 (1208784) Initialized Data: 0x8041D700 - 0x8041F9F0 (8944) BSS Area: 0x8041F9F0 - 0x804261D0 (26592) Local Heap: 0x804261D0 - 0x805261D0 (1048576) Stack Area: 0x805261D0 - 0x805281D0 (8192) Text (code) segment: 0x80401000 - 0x8041D6F8 (116472) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.159 Gateway IP address : Run from flash/host (f/h) : h Default host run file name : 308nfs6358 Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-9) : 96338W2 Number of MAC Addresses (1-32) : 11 Base MAC Address : 00:1e:40:da:92:5a PSI Size (1-64) KBytes : 24 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 110 Booting from only image (0xbfc10000) ... Code Address: 0x80010000, Entry Address: 0x801ad018 Decompression OK! Entry at 0x801ad018 Closing network. Starting program at 0x801ad018 Linux version 2.6.8.1 (root@localhost.localdomain) (gcc version 3.4.2) #1 Fri Nov 21 15:48:30 CST 2008 Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB 96338W2 prom init CPU revision is: 00029010 Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 64 (order 6: 512 bytes) Using 120.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13924k/16000k available (1439k kernel code, 2056k reserved, 208k data, 68k init, 0k highmem) KLOB Pool 1 Initialized: 1048576 bytes <0x80e00000 ... 0x80f00000> Calibrating delay loop... 239.20 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 4096K with 71 sectors File system address: 0xbfc10100 Blk# BlkOff Blks MemLen Partition Name 0 1408 1 1024 NVRAM 69 40960 1 24576 Config 2 70 32768 1 8192 Scratch PAD 70 40960 1 24576 Config 1 Can't analyze prologue code at 80176654 Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry SES: Button Interrupt 0x0 is enabled SES: LED GPIO 0x8004 is enabled initLed: led[0]: mask=0x0000, state=0 initLed: led[1]: mask=0x0002, state=0 initLed: led[2]: mask=0x0010, state=0 initLed: led[3]: mask=0x0001, state=0 initLed: led[4]: mask=0x0020, state=1 Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 68k freed init started: BusyBox v1.00 (2008.11.21-07:57+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2008.11.21-07:57+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6338A2 Ethernet Network Device v0.3 Nov 21 2008 15:45:54 Config Ethernet Switch Through MDIO Pseudo PHY Interface ethsw: found bcm5325e! dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 00:1E:40:DA:92:5A SDIOH mode switch from 1 to 2 available commands: sdio sdioh ---SDIO init SUCCEEDED--- blockmode capable chipid 0x4014312 chip is bcm4312, use 512 bytes blksize bcmsdh_attach, sdioh_attach successful, bcmsdh->sdioh 0x80e9a760 wl: srom not detected, using main memory mapped srom info (wombo board) wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000 wl0: MAC Address: 00:1E:40:DA:92:5B wl0: Broadcom BCM4318 802.11 Wireless Controller 4.170.16.0.cpe2.1sd1 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Trying to free free IRQ25 BcmAdsl_Initialize=0xC00663E8, g_pFnNotifyCallback=0xC0080FE4 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003981 adsl2=0x00000000 pSdramPHY=0xA0FFFFF8, 0xFFBFFFDF 0x7FFFFFFF AdslCoreHwReset: AdslOemDataAddr = 0xA0FF9504 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003981 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered ATM proc init !!! ip_tables: (C) 2000-2002 Netfilter core team ip_conntrack version 2.1 (125 buckets, 0 max) - 384 bytes per conntrack ip_conntrack_pptp version 2.1 loaded ip_nat_pptp version 2.0 loaded ip_ct_h323: init success ip_nat_h323: init success BRCM NAT Caching v1.0 Nov 20 2007 10:22:27 BRCM NAT Cache: Hooking hit function @ c00a1088 ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading ==> Bcm963xx Software Version: 3.12L.01.B2pB023k.d20k_rc2 <== device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state defaultWPAKEY2=====================177647c793aac9 mac======177647c793aac9 dest2======MTc3NjQ3Yzc5M2FhYzk= dest======MTc3NjQ3Yzc5M2Fh defaultWPAKEY1=====================MTc3NjQ3Yzc5M2Fh Setting SSID "TUCKER-ALICE1" Setting country code using abbreviation: "DE" device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state startWsc@3229 cfg_state=[1] wsc_mode=enabled WlMngr::startWsc: client-pbc mode ********************************************* Wi-Fi Simple Config Application - Intel Corp. Version: Build 1.0.5, November 19 2006 ********************************************* Created @ Nov 20 2007 10:51:36 Initializing stack...button monitor start...! OK Now starting stack get mac = 00 1E 40 DA 92 5B UdpLib: Entered udp_open UdpLib: Socket open successful, sd: 12 UdpLib: Entered udp_bind UdpLib: Binding successful for socket [12] UdpLib: Entered udp_read UdpLib: Entered udp_open UdpLib: Socket open successful, sd: 13 UdpLib: Entered udp_bind UdpLib: Binding successful for socket [13] UdpLib: Entered udp_read UdpLib: Entered udp_open UdpLib: Socket open successful, sd: 11 UdpLib: Entered udp_write: len 5 UdpLib: Read 5 bytes UdpLib: Entered udp_read BcmRfc2684_init interface is not up nas_0_1_32! pvc2684ctl -a -v 0.1.32 -f & pvc2684d: Interface "nas_0_1_32" created sucessfully pvc2684d: Communicating over ATM 0.1.32, encapsulation: LLC device nas_0_1_32 entered promiscuous mode br0: port 3(nas_0_1_32) entering learning state br0: topology change detected, propagating br0: port 3(nas_0_1_32) entering forwarding state BcmRfc2684_init interface is not up nas_0_2_32! pvc2684ctl -a -v 0.2.32 & pvc2684d: Interface "nas_0_2_32" created sucessfully pvc2684d: Communicating over ATM 0.2.32, encapsulation: LLC device nas_0_2_32 entered promiscuous mode br0: port 4(nas_0_2_32) entering learning state br0: topology change detected, propagating br0: port 4(nas_0_2_32) entering forwarding state BcmRfc2684_init interface is not up nas_0_2_33! pvc2684ctl -a -v 0.2.33 & pvc2684d: Interface "nas_0_2_33" created sucessfully pvc2684d: Communicating over ATM 0.2.33, encapsulation: LLC device nas_0_2_33 entered promiscuous mode br0: port 5(nas_0_2_33) entering learning state br0: topology change detected, propagating br0: port 5(nas_0_2_33) entering forwarding state BcmRfc2684_init interface is not up nas_0_1_34! pvc2684ctl -a -v 0.1.34 & pvc2684d: Interface "nas_0_1_34" created sucessfully pvc2684d: Communicating over ATM 0.1.34, encapsulation: LLC device nas_0_1_34 entered promiscuous mode br0: port 6(nas_0_1_34) entering learning state br0: topology change detected, propagating br0: port 6(nas_0_1_34) entering forwarding state BcmRfc2684_init interface is not up nas_0_8_35! pvc2684ctl -a -v 0.8.35 & pvc2684d: Interface "nas_0_8_35" created sucessfully pvc2684d: Communicating over ATM 0.8.35, encapsulation: LLC device nas_0_8_35 entered promiscuous mode br0: port 7(nas_0_8_35) entering learning state br0: topology change detected, propagating br0: port 7(nas_0_8_35) entering forwarding state device eth0 left promiscuous mode br0: port 1(eth0) entering disabled state eth0.2: MAC Address: 00:1E:40:DA:92:5A eth0.3: MAC Address: 00:1E:40:DA:92:5A eth0.4: MAC Address: 00:1E:40:DA:92:5A UdpLib: Entered udp_write: len 21 UdpLib: Entered udp_write: len 125 UdpLib: Entered udp_read UdpLib: Read 21 bytes ******* MODE: AP with built-in Registrar and UPnP Proxy ******* wsc_del_ie: no valid ie was saved, len = -1 WSC: Build-in Registrar, wait for start command.... eth0.5: MAC Address: 00:1E:40:DA:92:5A UdpLib: Entered udp_read UdpLib: Read 125 bytes wsc_del_ie: no valid ie was saved, len = -1 device wl0 left promiscuous mode br0: port 2(wl0) entering disabled state device nas_0_2_32 left promiscuous mode br0: port 4(nas_0_2_32) entering disabled state device nas_0_2_33 left promiscuous mode br0: port 5(nas_0_2_33) entering disabled state device nas_0_1_34 left promiscuous mode br0: port 6(nas_0_1_34) entering disabled state device nas_0_8_35 left promiscuous mode br0: port 7(nas_0_8_35) entering disabled state device wl0 entered promiscuous mode br0: port 1(wl0) entering learning state br0: topology change detected, propagating br0: port 1(wl0) entering forwarding state device eth0.2 entered promiscuous mode br0: port 2(eth0.2) entering learning state br0: topology change detected, propagating br0: port 2(eth0.2) entering forwarding state device eth0.3 entered promiscuous mode br0: port 4(eth0.3) entering learning state br0: topology change detected, propagating br0: port 4(eth0.3) entering forwarding state device eth0.4 entered promiscuous mode br0: port 5(eth0.4) entering learning state br0: topology change detected, propagating br0: port 5(eth0.4) entering forwarding state device eth0.5 entered promiscuous mode br1: port 1(eth0.5) entering learning state br1: topology change detected, propagating br1: port 1(eth0.5) entering forwarding state device nas_0_2_32 entered promiscuous mode br1: port 2(nas_0_2_32) entering learning state br1: topology change detected, propagating br1: port 2(nas_0_2_32) entering forwarding state device nas_0_2_33 entered promiscuous mode br1: port 3(nas_0_2_33) entering learning state br1: topology change detected, propagating br1: port 3(nas_0_2_33) entering forwarding state device nas_0_1_34 entered promiscuous mode br1: port 4(nas_0_1_34) entering learning state br1: topology change detected, propagating br1: port 4(nas_0_1_34) entering forwarding state device nas_0_8_35 entered promiscuous mode br0: port 6(nas_0_8_35) entering learning state br0: topology change detected, propagating br0: port 6(nas_0_8_35) entering forwarding state get_manual_ppp 0 br0: port 2(eth0.2) entering disabled state br0: port 4(eth0.3) entering disabled state br0: port 5(eth0.4) entering disabled state br1: port 1(eth0.5) entering disabled state

CFE version 1.0.37-12.1 for BCM96338 (32bit,SP,BE) Build Date: Fri Nov 14 16:18:28 CST 2008 (root@localhost.localdomain) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbfc00000 Initializing Arena. Initializing Devices. Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB CPU type 0x29010: 240MHz Total memory: 16777216 bytes (16MB) Total memory used by CFE: 0x80401000 - 0x805281D0 (1208784) Initialized Data: 0x8041D700 - 0x8041F9F0 (8944) BSS Area: 0x8041F9F0 - 0x804261D0 (26592) Local Heap: 0x804261D0 - 0x805261D0 (1048576) Stack Area: 0x805261D0 - 0x805281D0 (8192) Text (code) segment: 0x80401000 - 0x8041D6F8 (116472) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.10 Gateway IP address : Run from flash/host (f/h) : h Default host run file name : openwrt-brcm63xx-vmlinux-nowlan.elf Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 3 Board Id (0-9) : 96338W2 Number of MAC Addresses (1-32) : 11 Base MAC Address : 00:1e:40:da:92:5a PSI Size (1-64) KBytes : 24 *** Press any key to stop auto run (3 seconds) *** Auto run second count down: 2 web info: Waiting for connection on socket 0. CFE> CFE> r 0x80010000/3869688 0x803c0bf8/137688 Entry at 0x80014310 Closing network. Starting program at 0x80014310 Linux version 2.6.32.16 (luke@xenon.fritz.box) (gcc version 4.3.3 (GCC) ) #1 Tue Oct 26 00:59:57 CEST 2010 Detected Broadcom 0x6338 CPU revision a2 CPU frequency is 240 MHz 16MB of RAM installed registering 8 GPIOs board_bcm963xx: CFE version: 1.0.37-12.1 bootconsole [early0] enabled CPU revision is: 00029010 (Broadcom BCM6338) board_bcm963xx: board name: 96338W2 Determined physical RAM map: memory: 01000000 @ 00000000 (usable) Initrd not found or empty - disabling initrd Zone PFN ranges: Normal 0x00000000 -> 0x00001000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000 Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064 Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 PID hash table entries: 64 (order: -4, 256 bytes) Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes. Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes Memory: 12240k/16384k available (2053k kernel code, 4144k reserved, 361k data, 1364k init, 0k highmem) Hierarchical RCU implementation. NR_IRQS:128 Calibrating delay loop... 238.59 BogoMIPS (lpj=477184) Mount-cache hash table entries: 512 NET: Registered protocol family 16 bio: create slab <bio-0> at 0 Switching to clocksource MIPS NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 512 (order: 0, 4096 bytes) TCP bind hash table entries: 512 (order: -1, 2048 bytes) TCP: Hash tables configured (established 512 bind 512) TCP reno registered NET: Registered protocol family 1 audit: initializing netlink socket (disabled) type=2000 audit(5.261:1): initialized squashfs: version 4.0 (2009/01/31) Phillip Lougher Registering mini_fo version $Id$ JFFS2 version 2.2. (NAND) (SUMMARY) �� 2001-2006 Red Hat, Inc. msgmni has been set to 23 io scheduler noop registered io scheduler deadline registered (default) gpiodev: gpio device registered with major 254 gpiodev: gpio platform device registered with access mask FFFFFFFF bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart console [ttyS0] enabled, bootconsole disabled console [ttyS0] enabled, bootconsole disabled bcm963xx_flash: 0x00400000 at 0x1fc00000 bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank CFI mfr 0x000000c2 CFI id 0x000022a8 Amd/Fujitsu Extended Query Table at 0x0040 Amd/Fujitsu Extended Query version 1.1. number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. bcm963xx_flash: Read Signature value of CFE1CFE1 bcm963xx_flash: CFE bootloader detected bcm963xx_flash: CFE boot tag found with version 6 and board type 96338W2 bcm963xx_flash: Partition 0 is CFE offset 0 and length 10000 bcm963xx_flash: Partition 1 is kernel offset 32c100 and length 84830 bcm963xx_flash: Partition 2 is rootfs offset 3b0930 and length 3f6d0 bcm963xx_flash: Partition 3 is nvram offset 3f0000 and length 10000 bcm963xx_flash: Partition 4 is linux offset 10000 and length 3e0000 bcm963xx_flash: Spare partition is 3c0000 offset and length 30000 Creating 5 MTD partitions on "bcm963xx": 0x000000000000-0x000000010000 : "CFE" 0x00000032c100-0x0000003b0930 : "kernel" mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- fory 0x0000003b0930-0x0000003f0000 : "rootfs" mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- fory mtd: partition "rootfs" set to be root filesystem split_squashfs: no squashfs found in "bcm963xx" 0x0000003f0000-0x000000400000 : "nvram" 0x000000010000-0x0000003f0000 : "linux" bcm63xx_wdt started, timer margin: 30 sec Registered led device: adsl Registered led device: ses Registered led device: ppp-fail Registered led device: power Registered led device: stop TCP westwood registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Freeing unused kernel memory: 1364k freed - preinit - Press the [f] key and hit [enter] to enter failsafe mode - regular preinit - - init - Please press Enter to activate this console. eth0: link forced UP - 100/full - flow control off/off Compat-wireless backport release: compat-wireless--2010-09-02-9-gf63dbfd Backport based on wireless-2.6.git v2.6.36-rc4-47529-g4697e4e cfg80211: Calling CRDA to update world regulatory domain cfg80211: World regulatory domain updated: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) roboswitch: Probing device eth0: found a 5325! It's a 5350. There is already a switch registered on the device 'eth0' Broadcom 43xx driver loaded [ Features: PL, GPIO LED Mask: 0x000f, Firmware-ID: FW13 ] PPP generic driver version 2.4.2 ip_tables: (C) 2000-2006 Netfilter Core Team NET: Registered protocol family 24 nf_conntrack version 0.5.0 (212 buckets, 848 max) BusyBox v1.15.3 (2010-10-26 00:39:42 CEST) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M Backfire (10.03, r23591) -------------------------- * 1/3 shot Kahlua In a shot glass, layer Kahlua * 1/3 shot Bailey's on the bottom, then Bailey's, * 1/3 shot Vodka then Vodka. --------------------------------------------------- root@OpenWrt:/#

I copy-pasted some - probably nonworking - patch…
This is just for testing, LEDs, WPS-Switch and Reset-Switch are to be defined, these values are guessed!!
e.g Power-LED is bicolor

board-96338W2.patch

--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
+++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
@@ -146,6 +146,38 @@ static struct board_info __initdata boar
 		},
 	},
 };
+static struct board_info __initdata board_96338w2 = {
+	.name				= "96338W2",
+	.expected_cpu_id		= 0x6338,
+	.has_uart0			= 1,
+	.has_enet0			= 1,
+	.enet0 = {
+		.force_speed_100	= 1,
+		.force_duplex_full	= 1,
+	},
+		.leds = {
+		{	.name		= "adsl",
+			.gpio		= 3,
+			.active_low	= 1,
+		},
+		{	.name		= "ses",
+			.gpio		= 5,
+			.active_low	= 1,
+		},
+		{	.name		= "ppp-fail",
+			.gpio		= 4,
+			.active_low	= 0,
+		},
+		{	.name		= "power",
+			.gpio		= 0,
+			.active_low	= 1,
+			.default_trigger = "default-on",
+		},
+		{	.name		= "stop",
+			.gpio		= 1,
+			.active_low	= 1,},
+	},
+};
 #endif
 
 /*
@@ -1294,6 +1326,7 @@ static const struct board_info __initdat
 #ifdef CONFIG_BCM63XX_CPU_6338
 	&board_96338gw,
 	&board_96338w,
+	&board_96338w2,
 #endif
 #ifdef CONFIG_BCM63XX_CPU_6345
 	&board_96345gw2,

https://forum.openwrt.org/viewtopic.php?pid=119749#p119749
http://wiki.birth-online.de/de/know-how/hardware/siemens-s1621-z220-a
http://www.alice-wiki.de/Alice_Modem_1121_WLAN