User Tools

Site Tools


toh:thomson:tg582n

Technicolor TG582n

Basic Information

The Technicolor Gateway TG582n (also referred to as the 582n or "BE Box v2") is manufactured by Technicolor (formerly Thomson, a spin-off of Alcatel) who describe it as a "Wireless n Multi-User ADSL2+ Gateway".

Board Versions & Hardware Differences

The TG582n comes in two distinct hardware variants distinguished by their Board Name. There are two board variants, namely DANT-T or DANT-1. Testing so far indicates that the PCB layout is identical for both board variants and that the only difference in hardware is the Flash chip (double the amount in DANT-1 boards).

The board variant as well as basic info such as firmware version, bootloader, etc can be accessed via the web interface of the stock firmware (default: 192.168.1.254):

TG582n System Information

DANT-T Boards

The DANT-T borads come with a 8MB Flash.

Fullsize photo *warning 4.4MB*: http://streetunity.org/openwrt_wiki/DSCN0282.JPG

dscn0282_lores.jpg

CPU: BCM63281KFBG - As found in these routers

FLASH: MX25L6445EMI - (64Mb) 8MB SPI Serial Flash - Link 1 Link 2

RAM: Winbond 64MB DDR2

WIRELESS: BCM43227

SERIAL: On J3, unpopulated, R63,R64 and C106 missing on my board.

JTAG: On J4, unpopulated, missing C111, R180, R66 and RN6 seem to suggest that this is infact a JTAG header.

Probably the serial port will work if i just bridge the pads, I will test later and update.

This could be a useful router with OpenWRT, as it has a USB port.

DANT-1 Boards

The DANT-1 boards come with 16MB Flash. The DANT-1 boards come with a dual-bank flash chip, able to store 2 firmware images and switch between them when the TG582n runs on stock firmware. The board layout is identical to the DANT-T one and the only difference seems to be the Flash chip.

CPU: BCM63281KFBG

FLASH: cFeon EN25Q128-104FIP (128Mb) 16MB SPI Serial Flash

RAM: Winbond W9751G6KB-25 (512Mb) 64MB DDR2 RAM

Supported Versions

Not Supported Yet, Testing In Progress.

Version/Model Launch Date S/N OpenWrt Version Supported Model Specific Notes
v1 2006-07 - - -
v1.1 2008-12 - - -
v2 2011-01 - - -

NOTE: Anything not included in model specific notes, or where a short comment couldn't be included on the notes.

OEM source code available at: link

Hardware Highlights

Board Name SoC Ram Flash Network USB Serial JTag
DANT-T BCM63281 64MiB 8MiB 4 x 1 Yes Yes Yes
DANT-1 BCM63281 64MiB 16MiB 4 x 1 Yes Yes Yes

Manufacturer's Data Sheet: Technicolor TG582n PRO Router - Data Sheet

Forum Thread: Technicolor TG582n (BCM63281) and OpenWRT

Installation

  1. »»»»here»»»»Latest OpenWrt release««««here«««« DO NOT PROVIDE OWN LINKS to http://downloads.openwrt.org/

Flash Layout

Please check out the article Flash Layout. It contains an example and a couple of explanations.

OEM easy installation

FIXME The instructions below are for Broadcom devices and only serve as an example. Don't leave them in place if they do not apply to a particular device!

This section deals with how you install OpenWrt from a device freshly opened. Plus the steps required such as reset to factory defaults if the device has already been configured

Note: Reset router to factory defaults if it has been previously configured.

OEM installation using the TFTP method

Specific values you need

Bootloader tftp server IPv4 address FILL-IN
Bootloader MAC address (special) FILL-IN
Firmware tftp image Latest OpenWrt release (NOTE: Name must contain "tftp")
TFTP Transfer Window FILL-IN seconds
TFTP Window Start approximately FILL-IN seconds after power on
TFTP Client Required IP Address FILL-IN

Upgrading OpenWrt

generic.sysupgrade

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

Terminal Upgrade Process

  • Login as root via SSH on 192.168.1.1
  • Use the following commands to upgrade.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
sysupgrade /tmp/xxx.abc

  • If sysupgrade does not support this router, use the following commands.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
mtd write /tmp/xxx.abc linux && reboot

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

Interfaces

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
vlan0 (eth0.0) LAN ports (1 to 4) None
vlan1 (eth0.1) WAN port DHCP
wl0 WiFi Disabled

Switch Ports (for VLANs)

Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port
Internet (WAN) 4
LAN 1 3
LAN 2 2
LAN 3 1
LAN 4 0

Failsafe mode

Buttons

hardware.button on howto use and configure the hardware button(s).

The Linksys WRT54GL has two buttons. They are Reset and Secure Easy Setup. Here, we merely name the buttons, so we can use them in the above Howto:

BUTTON Event
Reset reset
Secure Easy Setup ses

Hardware

Info

Instruction set: MIPS
Vendor: Broadcom
Bootloader: CUSTOM Thomson/Technicolor
System-On-Chip: BCM63281KFBG
CPU @Frq
Flash size: 8MB for DANT-T / 16MB for DANT-1
Flash Chip: MX25L6445EMI for DANT-T / cFeon EN25Q128-104FIP for DANT-1
RAM size: 64 MiB
RAM Chip: Winbond W9751G6KB-25 (512Mb) 64MB DDR2
Wireless No1: BCM43227
Wireless No2:
Switch:
Modem: xDSL
USB: Yes 1 x 2.0
Serial: Yes
JTAG: Yes

Photos

Model Number

Front:

Photo of front of the casing

Back:

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • To remove the cover do a/b/c

Main PCB

Photo of PCB

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

The Serial pins can be found on J3 (next to the JTAG at J4) on the PCB, you have to short-circuit R62 and R63.

Vcc 
GND 
Rx 
Tx 

Photo of PCB with markings

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

The JTAG pins can be found on J4 (single-row, pin 1 is on top) on the PCB, you have to short-circuit R180 to bring power (3.3V) on pin 1.

1 - N/C (resistor missing to 3.3V)
2 - N/C (3.3V Pullup / Possible nTRST) 
3 - TCK 
4 - TMS 
5 - GND 
6 - TDO 
7 - TDI 
8 - N/C (Diode missing to 3.3V)

Photo of PCB with markings

TG582n JTAG

Debricking

Bootloader Mods

  1. you could read about bootloader in general

Bootlogs

OEM bootlog

Board: DANT-T, Software release: 8.4.4.J, Software variant: BV, Bootloader: 1.0.5.

Decompressing Bootloader.............................. Gateway initialization sequence started. Version BL: 1.0.5 Multicore disable; Booting Linux kernel BOOTING THE LINUX KERNEL Starting the kernel @ 0x801ddde0 Extra parameters passed to Linux: [0]: bootloader [1]: memsize=0x3EDD000 Linux version 2.6.30 (gcc version 3.4.6) #1 Wed Jul 20 16:54:36 CST 2011 BCM63XX prom init CPU revision is: 0002a075 (Broadcom4350) Determined physical RAM map: memory: 03edb000 @ 00002000 (usable) Wasting 64 bytes for tracking 2 unused pages Zone PFN ranges: DMA 0x00000002 -> 0x00001000 Normal 0x00001000 -> 0x00003edd Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000002 -> 0x00003edd On node 0 totalpages: 16091 free_area_init_node: node 0, pgdat 80234390, node_mem_map 81000040 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4062 pages, LIFO batch:0 Normal zone: 94 pages used for memmap Normal zone: 11903 pages, LIFO batch:1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 15965 Kernel command line: root=31:0 ro noinitrd memsize=0x3EDD000 console=ttyS0,115200 root=/dev/mtdblock2 rootfstype=squashfs wait instruction: enabled Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes NR_IRQS:128 PID hash table entries: 256 (order: 8, 1024 bytes) console [ttyS0] enabled Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 61168k/64364k available (1874k kernel code, 3176k reserved, 323k data, 108k init, 0k highmem) Calibrating delay loop... 318.46 BogoMIPS (lpj=159232) Mount-cache hash table entries: 512 --Kernel Config-- SMP=0 PREEMPT=0 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 net_namespace: 584 bytes NET: Registered protocol family 16 registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab at 0 usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff] pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:02:00.0: reg 10 64bit mmio: [0x000000-0x003fff] pci 0000:02:00.0: supports D1 D2 pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: 0x10f00000-0x10ffffff pci 0000:01:00.0: PREFETCH window: disabled PCI: Enabling device 0000:01:00.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:01:00.0 to 64 BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 Jul 20 2011 16:52:32 initialized NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher squashfs: version 4.0 with LZMA457 ported by BRCM JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc. msgmni has been set to 119 io scheduler noop registered (default) Gateway flash mapping flash mapping initialized Creating 4 MTD partitions on "thomson-spi": 0x000000040000-0x0000000b0000 : "userfs" 0x000000020000-0x000000040000 : "mtdss" 0x000000180000-0x000000800000 : "rootfs" 0x0000000b0000-0x000000180000 : "kernel" brcmboard: brcm_board_init entry Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xb0000100 (irq = 36) is a BCM63XX ttyS1 at MMIO 0xb0000100 (irq = 36) is a BCM63XX ttyS2 at MMIO 0xb0000120 (irq = 47) is a BCM63XX TCP cubic registered NET: Registered protocol family 17 NET: Registered protocol family 15 VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 108k freed init started: BusyBox v1.00 (2011.07.20-08:57+0000) multi-call binary init started: BusyBox v1.00 (2011.07.20-08:57+0000) multi-call binary Starting pid 111, console /dev/ttyS0: '/etc/init.d/rcS' Initializing random number generator Mounting encrypted partitions ... insmod: loop.ko: no module by that name found Warning: assuming 'archivefs' is on mtdblock3 /etc/init.d/cryptomount: 25: /usr/sbin/fssetup: not found mount: Mounting /dev/loop0 on /archive failed: No such device or address Using /lib/modules/kserport.ko kserport: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint Using /nmon/nmon.ko loading geniodb kernel modules... Using /lib/modules/geniodb.ko geniodb driver: Loading ... geniodb driver: Loading finished with SUCCESS Button char device has been created and initialized. [BCM ADSL] BcmAdsl_SetOverlayMode = 85 new=0 tmm_skb_desc.queuesize = 300 queue: 0xc09a3708 queue: 0xc09a3708, rp: 0xc09a3708, wp: 0xc09a3708 [BCM ADSL] ------ dslFileLoadImage : OverlayMode = 0 fname=ZXD3AA pci 0000:00:09.0: firmware: requesting ZXD3AA pSdramPHY=0xA3FFFFF8, 0x46F57 0xDEBDBEEF [BCM ADSL] Firmware load : 547100 547100 LMEM=(0xB0D80000, 41280) SDRAM=(0xA3F00000, 505812) pci 0000:00:09.0: firmware: requesting phy *** PhySdramSize got adjusted: 0x7B7D4 => 0x91368 *** AdslCoreSharedMemInit: shareMemAvailable=453744 BcmOs_vmalloc : wrong size = 18608 AdslCoreHwReset: Failed to calloc for pLocSbSta AdslCoreHwReset: pLocSbSta=0 bkupThreshold=1600 AdslCoreHwReset: AdslOemDataAddr = 0xA3F71E48 ADSL PHY version is A2pDT001g.d23g b6w_init FOUND WL DEVICE 0, bus=2, device=0, func=0, vendorid=14E4, deviceid=A8DC, regaddr=10F00000, irq=31 wl:srom not detected, using main memory mapped srom info(wombo board) veth0 (): not using net_device_ops yet NET: Registered protocol family 3 NET: Registered protocol family 9 NET: Registered protocol family 6 NET: Registered protocol family 4 NET: Registered protocol family 5 NET: Registered protocol family 18 NET: Registered protocol family 25 insmod: rawstorage.ko: no module by that name found Device ipsec not present. voice will be loaded modprobe: module l2cap not found. modprobe: failed to load module l2cap insmod: rawstorage.ko: no module by that name found Device endpoint not present. Device ikanos not present. Starting pid 350, console /dev/ttyS0: '/etc/init.d/rc' Switching to RUNLEVEL 1 ... Disabling hotplug helper route: SIOC[ADD|DEL]RT: File exists linux application start ... wait for linux_appl to initialize (1) wait for linux_appl to initialize (2) ************* ERROR RECORD ************* 000000:00:00.000000 Application NMON started after POWERON. ****************** END ***************** appl_init: BUILD VERIFIED! wait for linux_appl to initialize (3) wait for linux_appl to initialize (4) [SS EMUL] ERR: opening config file /active/ss.conf failed End of initialisation start fseventd ... fseventd is started. start storagepl ... storagepl is started start vfspl ... vfspl is started MVFS plugin started cifs plug-in: initializing ... cifs plug-in is started upnpavpl start ... /usr/bin/fusermount Loading fuse modulefuse init (API version 7.11) . Mounting fuse control filesystem. linuxappl: start loading after [ 3924ms ] WARNING: Unknown Parameter Type ifmfilter WARNING: Unknown Parameter Type ifmfilter S67stopload: wait until configuration load reaches phase 9... S67stopload: wait until configuration load reaches phase 9 (now -1, 1s) WARNING: Unknown Parameter Type brgroup WARNING: Unknown Parameter Type brgroup adsl: adsl_open entry ADSL Line state is: DOWN [adsl] trace = 5 0 S67stopload: wait until configuration load reaches phase 9 (now -1, 2s) The OBC bridge interface cannot be removed from this VLAN, because OBC is defined as untagged. S67stopload: wait until configuration load reaches phase 9 (now 3, 3s) S67stopload: wait until configuration load reaches phase 9 (now 3, 4s) S67stopload: wait until configuration load reaches phase 9 (now 3, 5s) S67stopload: wait until configuration load reaches phase 9 (now 3, 6s) S67stopload: wait until configuration load reaches phase 9 (now 3, 7s) DyingGasp RIP BIT is set! [ERROR : [DIAG 1004] -1 ] ADSL configuration: adslmultimode = adsl2plus syslog = disabled The OBC bridge interface cannot be removed from this VLAN, because OBC is defined as untagged. S67stopload: wait until configuration load reaches phase 9 (now 3, 8s) Failed to add host 58:98:35:9b:dd:bc stopping the pureftp-server ... S67stopload: wait until configuration load reaches phase 9 (now 3, 9s) the pureftp-server is stopped stopping the pure-authd ... the pure-authd is stopped 63xx USB Host Clock disable S67stopload: wait until configuration load reaches phase 9 (now 6, 10s) S67stopload: wait until configuration load reaches phase 9 (now 6, 11s) S67stopload: wait until configuration load reaches phase 9 (now 6, 12s) S67stopload: wait until configuration load reaches phase 9 (now 6, 13s) S67stopload: wait until configuration load reaches phase 9 (now 6, 14s) S67stopload: configuration load reached phase 9... Intel MicroStack 1.0 - Digital Media Server (DLNA 1.5)(pid = 829), loc_generate_uuid:3a56141b-123b-59e2-9daf-c006d02343a6 nlplugd start ... Initializing. Starting netlink plugin Daemonize netlink plugin udhcpcd start ... monitoripd start ... anti_spoofd start ... anti_spoofd : process exit ! start mud ... Starting power manager... Username :

OpenWrt bootlog

PUT HERE YOUR BOOTLOG

Notes

Tags

For some Help with the Tags, please have a look here: tags

toh/thomson/tg582n.txt · Last modified: 2014/07/30 13:47 by flaming_goat