User Tools

Site Tools


toh:zte:h218n

ZTE H218N

Supported Versions

Version/Model Launch Date S/N OpenWrt Version Supported Model Specific Notes
v1 2013 - - -

Device detection added to OpenWRT in r37996 (See https://dev.openwrt.org/ticket/14151)

  • Ethernet ports work
  • WiFi is not working. It depends on reverse engineering or Broadcom publishing specs or publishing drivers
  • VoIP is unlikely to work according to ticket #14151

Discussion:

Hardware Highlights

SoC Ram Flash Network USB Serial JTag
Broadcom BCM5357 64MiB 16MiB 5 GbE Yes 2x v2.0 ? ?

Manufacturer's site: http://wwwen.zte.com.cn/pub/en/products/access/cpe/201111/t20111110_262343.html

Installation

  1. »»»»here»»»»Latest OpenWrt release««««here«««« DO NOT PROVIDE OWN LINKS to http://downloads.openwrt.org/

Flash Layout

Please check out the article Flash.Layout. It contains an example and a couple of explanations.

OEM easy installation

FIXME The instructions below are for Broadcom devices and only serve as an example. Don't leave them in place if they do not apply to a particular device!

This section deals with how you install OpenWrt from a device freshly opened. Plus the steps required such as reset to factory defaults if the device has already been configured

Note: Reset router to factory defaults if it has been previously configured.

  • Browse to http://192.168.1.1/ → Administration –> System Management –> Software Upgrade
  • Upload .bin file to router
  • Wait for it to reboot
  • Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

OEM installation using the TFTP method

Specific values you need

Bootloader tftp server IPv4 address FILL-IN
Bootloader MAC address (special) FILL-IN
Firmware tftp image Latest OpenWrt release (NOTE: Name must contain "tftp")
TFTP Transfer Window FILL-IN seconds
TFTP Window Start approximately FILL-IN seconds after power on
TFTP Client Required IP Address FILL-IN

Upgrading OpenWrt

generic.sysupgrade

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

Terminal Upgrade Process

  • Login as root via SSH on 192.168.1.1
  • Use the following commands to upgrade.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
sysupgrade /tmp/xxx.abc

  • If sysupgrade does not support this router, use the following commands.

cd /tmp/
wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
mtd write /tmp/xxx.abc linux && reboot

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

Interfaces

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
vlan0 (eth0.0) LAN ports (1 to 4) None
vlan1 (eth0.1) WAN port DHCP
wl0 WiFi Disabled

Switch Ports (for VLANs)

Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port
Internet (WAN) 4
LAN 1 3
LAN 2 2
LAN 3 1
LAN 4 0

Failsafe mode

Buttons

hardware.button on howto use and configure the hardware button(s).

The ZTE H218N has two buttons. They are Reset and WPS. Here, we merely name the buttons, so we can use them in the above Howto:

BUTTON Event
Reset reset
WPS

Hardware

Info

Instruction set: MIPS
Vendor: ZTE
Bootloader: U-Boot / RedBoot / CFE / …
System-On-Chip: BCM5300 family
CPU @Frq MIPS 74Kc V4.9 @???MHz
Flash size: 16 MiB
Flash Chip:
RAM size: 64 MiB
RAM Chip:
Wireless No1: SoC-integrated: QCA9558-AT4A w/ 3x3 MIMO for 2.4GHz 802.11b/g/n
Switch:
Modem: none / xDSL / DOCSIS / Mobile Wireless/Cellular network
USB: Yes 2 x 2.0
Serial: FIXME
JTAG: FIXME

Photos

Model Number

Front:

Photo of front of the casing

Back:

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • To remove the cover do a/b/c

Main PCB

Photo of PCB

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Photo of PCB with markings

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

Debricking

Bootloader Mods

  1. you could read about bootloader in general

Hardware mods

  1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

No hardware mods known so far.

Bootlogs

OEM bootlog

PUT HERE YOUR BOOTLOG


OpenWrt bootlog

[ 0.000000] Linux version 3.10.10 (dani@x200) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2013.05 r37960) ) #10 Fri Sep 13 08:55:42 EEST 2013 [ 0.000000] CPU revision is: 00019749 (MIPS 74Kc) [ 0.000000] bcm47xx: using bcma bus [ 0.000000] bcma: bus0: Found chip with id 0x5357, rev 0x02 and package 0x09 [ 0.000000] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x26, class 0x0) [ 0.000000] bcma: bus0: Core 3 found: MIPS 74K (manuf 0x4A7, id 0x82C, rev 0x04, class 0x0) [ 0.000000] bcma: bus0: Found rev 9 PMU (capabilities 0x28A42A09) [ 0.000000] bcma: bus0: Found serial flash [ 0.000000] bcma: bus0: Found M25FL128 serial flash (size: 16384KiB, blocksize: 0x10000, blocks: 256) [ 0.000000] bcma: bus0: Early bus registered [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] On node 0 totalpages: 16384 [ 0.000000] free_area_init_node: node 0, pgdat 802d09d0, node_mem_map 81000000 [ 0.000000] Normal zone: 128 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 16384 pages, LIFO batch:3 [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 59956k/65536k available (2390k kernel code, 5580k reserved, 565k data, 1776k init, 0k highmem) [ 0.000000] NR_IRQS:128 [ 0.032000] Calibrating delay loop... 249.34 BogoMIPS (lpj=498688) [ 0.032000] pid_max: default: 32768 minimum: 301 [ 0.032000] Mount-cache hash table entries: 512 [ 0.036000] NET: Registered protocol family 16 [ 0.052000] bio: create slab <bio-0> at 0 [ 0.056000] Switching to clocksource MIPS [ 0.064000] NET: Registered protocol family 2 [ 0.064000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.064000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.064000] TCP: Hash tables configured (established 512 bind 512) [ 0.064000] TCP: reno registered [ 0.064000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.064000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.064000] NET: Registered protocol family 1 [ 0.064000] PCI: CLS 0 bytes, default 32 [ 2.236000] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1C, class 0x0) [ 2.236000] bcma: bus0: Core 2 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x03, class 0x0) [ 2.236000] bcma: bus0: Core 4 found: USB 2.0 Host (manuf 0x4BF, id 0x819, rev 0x05, class 0x0) [ 2.236000] bcma: bus0: Core 5 found: DDR1/DDR2 Memory Controller (manuf 0x4BF, id 0x82E, rev 0x02, class 0x0) [ 2.236000] bcma: bus0: Core 6 found: I2S (manuf 0x4BF, id 0x834, rev 0x02, class 0x0) [ 2.236000] bcma: bus0: Core 7 found: Internal Memory (manuf 0x4BF, id 0x80E, rev 0x0B, class 0x0) [ 2.240000] can not parse nvram name sb/1/rxpo2g(null) with value 0xff got -34 [ 2.240000] can not parse nvram name sb/1/ag2(null) with value 0xff got -34 [ 2.240000] can not parse nvram name sb/1/ag3(null) with value 0xff got -34 [ 2.260000] bcma: bus0: Using SPROM revision 8 provided by platform. [ 2.260000] bcma: bus0: PMU resource config unknown or not needed for device 0x5357 [ 2.260000] bcma: bus0: Workarounds unknown or not needed for device 0x5357 [ 2.260000] bcma: bus0: Initializing MIPS core... [ 2.260000] bcma: bus0: set_irq: core 0x0812, irq 3 => 3 [ 2.260000] bcma: bus0: set_irq: core 0x082d, irq 4 => 4 [ 2.260000] bcma: bus0: set_irq: core 0x0819, irq 5 => 5 [ 2.260000] bcma: bus0: set_irq: core 0x0800, irq 2 => 2 [ 2.260000] bcma: bus0: set_irq: core 0x0834, irq 2 => 2 [ 2.260000] bcma: bus0: IRQ reconfiguration done [ 2.260000] bcma: core 0x0800, irq : 2(S)* 3 4 5 6 D I [ 2.260000] bcma: core 0x082c, irq : 2(S) 3 4 5 6 D I* [ 2.260000] bcma: core 0x0812, irq : 2(S) 3* 4 5 6 D I [ 2.260000] bcma: core 0x082d, irq : 2(S) 3 4* 5 6 D I [ 2.260000] bcma: core 0x0819, irq : 2(S) 3 4 5* 6 D I [ 2.260000] bcma: core 0x082e, irq : 2(S) 3 4 5 6 D* I [ 2.260000] bcma: core 0x0834, irq : 2(S)* 3 4 5 6 D I [ 2.260000] bcma: core 0x080e, irq : 2(S) 3 4 5 6 D I* [ 2.268000] bcma: bus0: Bus registered [ 2.268000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 2.268000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 2.272000] msgmni has been set to 117 [ 2.272000] io scheduler noop registered [ 2.272000] io scheduler deadline registered (default) [ 2.272000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled [ 2.296000] serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 2) is a U6_16550A [ 2.652000] console [ttyS0] enabled [ 2.908000] 2 bcm47xxpart partitions found on MTD device bcm47xxsflash [ 2.916000] Creating 2 MTD partitions on "bcm47xxsflash": [ 2.920000] 0x000000000000-0x000000ff0000 : "boot" [ 2.928000] 0x000000ff0000-0x000001000000 : "nvram" [ 2.940000] bcm47xx-wdt bcm47xx-wdt.0: BCM47xx Watchdog Timer enabled (30 seconds) [ 2.948000] TCP: cubic registered [ 2.952000] NET: Registered protocol family 17 [ 2.956000] 8021q: 802.1Q VLAN Support v1.8 [ 2.976000] Freeing unused kernel memory: 1776K (802e4000 - 804a0000) [ 3.028000] bgmac bcma0:1: Found PHY addr: 30 (NOREGS) [ 3.032000] bgmac bcma0:1: Failed to parse et_swtype () [ 3.040000] bgmac bcma0:1: TX on ring 0x200 supports unaligned addressing but this feature is not implemented [ 3.052000] bgmac bcma0:1: TX on ring 0x240 supports unaligned addressing but this feature is not implemented [ 3.060000] bgmac bcma0:1: TX on ring 0x280 supports unaligned addressing but this feature is not implemented [ 3.072000] bgmac bcma0:1: TX on ring 0x2C0 supports unaligned addressing but this feature is not implemented [ 3.080000] bgmac bcma0:1: RX on ring 0x200 supports unaligned addressing but this feature is not implemented [ 3.096000] bgmac bcma0:1: Support for Roboswitch not implemented [ 3.104000] libphy: bgmac mii bus: probed [ 3.112000] b53_common: found switch: BCM5325, rev 0 [ 3.120000] (unregistered net_device): attached PHY driver [Broadcom B53 (2)] (mii_bus:phy_addr=bgmac-0-0:1e) [ 3.132000] bgmac: Broadcom 47xx GBit MAC driver loaded [ 3.144000] Found board: "Unknown Board" [ 3.148000] diag: unknown board found, try legacy detect [ 3.152000] diag: please open a ticket at https://dev.openwrt.org and attach the complete nvram [ 3.164000] diag: Router model not detected. [ 3.224000] bgmac bcma0:1: Failed to parse et_swtype () [ 6.472000] bgmac bcma0:1: Failed to parse et_swtype () [ 7.948000] NET: Registered protocol family 10 [ 8.012000] wl: module license 'unspecified' taints kernel. [ 8.016000] Disabling lock debugging due to kernel taint [ 8.108000] wl0: 5.10.56.27 driver failed with code 13 [ 8.112000] The attach callback failed, BCMA probe aborted [ 8.120000] SSB/BCMA glue driver successfully attached [ 8.128000] PPP generic driver version 2.4.2 [ 8.144000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 8.164000] xt_time: kernel timezone is -0000 [ 8.172000] NET: Registered protocol family 24 [ 8.188000] nf_conntrack version 0.5.0 (964 buckets, 3856 max) [ 8.220000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 8.276000] diag: unknown board found, try legacy detect [ 8.280000] diag: please open a ticket at https://dev.openwrt.org and attach the complete nvram [ 8.292000] diag: Router model not detected. [ 9.928000] bgmac bcma0:1: Failed to parse et_swtype () [ 10.916000] bgmac bcma0:1: Failed to parse et_swtype () [ 10.936000] bgmac bcma0:1: Failed to parse et_swtype () [ 10.948000] device eth0.1 entered promiscuous mode [ 10.956000] device eth0 entered promiscuous mode [ 10.968000] br-lan: port 1(eth0.1) entered forwarding state [ 10.972000] br-lan: port 1(eth0.1) entered forwarding state [ 11.944000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready [ 12.976000] br-lan: port 1(eth0.1) entered forwarding state


Notes

Tags

toh/zte/h218n.txt · Last modified: 2015/12/12 07:09 by tmomas