ZyXEL P-870HN-5xb

802.11n Wireless VDSL2 4-port Gateway

Supported Versions

Version/Model Launch Date S/N OpenWrt Version Supported Model Specific Notes
PARTLY SUPPORTED (router boots up, but some drivers don't work)
Both version have vital bugs:
1) switch - works only two middle FE ports!
2) wireless - bcm43222 isn't recognize !

Adsl driver on orginal fw - A2pv6C033a.d23e

The Board ID is the same as the Netgear DGND3700 v1

Hardware Highlights

model SoC Ram Flash Network Modem USB Serial JTag
P-870HN-51b BCM6368 @400Mhz 32MiB 8MiB 4x FE 1x DSL (rj11) Solder(No) Yes No?
P-870HN-53b BCM6368 @400Mhz 64MiB 8MiB 4x FE 1x DSL (rj45) Solder(No) Yes No?

Forum thread: https://forum.openwrt.org/viewtopic.php?id=47671

The Zyxel P-870HW-51a is very similar to this model, but has the following differences:

  1. Wireless: BCM4318 B/G.
  2. Flash size: 4 MB.
  3. VDSL capable only.

Hardware

Top of the motherboard:

P-870HN-51b P-870HN-53b
P-870HN-51b P-870HN-53b

More galleries: wikidevi.com/wiki/ZyXEL_P-870HN-51b

Info

P-870HN-51b P-870HN-53b
Architecture: MIPS
Vendor: Broadcom
Bootloader: CFE
System-On-Chip: BCM6368
Board ID: 96368MVWG
CPU/Speed BCM4350 V3.1 / 400MHz
Flash size: 8 MiB
Flash-Chip: Macronix MX29LV640EBTI-70G
RAM: 32 MiB 64MiB
RAM-Chip: Winbond W9412G6IH-5? x2 ???
Wireless: BCM43222KFBG/ 2x2 MIMO for 2,4GHz 802.11b/g/n
Switch: 4x FastEthernet10/100
Modem: ADSL2+/VDSL2 (physical port RJ11) ADSL2+/VDSL2 (physical port RJ45)
USB: Yes 2x (SoC) [NOT soldered on PCB]
Serial: Yes
JTAG: Seems no
FCC ID: I88P870HN51B

Logs

CFE version 1.0.37-107.23 for BCM96368 (32bit,SP,BE)
Build Date: 12/27/2011 (FuChia@MsgSW4-SerVer)
Copyright (C) 2000-2009 Broadcom Corporation.

Parallel flash device: name AM29DL800B, id 0x22cb size 8192KB
Total Flash size: 8192K with 135 sectors
Chip ID: BCM6368B2, MIPS: 400MHz
Main Thread: TP0
Total Memory: 33554432 bytes (32MB)
Boot Address: 0xb8000000

Checking Reset button on EXT INTR 0
Checking Reset button on EXT INTR 0
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 3
Board Id (0-15)                   : 96368MVWG
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : c8:6c:87:5c:11:a9
PSI Size (1-128) KBytes           : 64
Enable Backup PSI [0|1]           : 1
System Log Size (0-256) KBytes    : 0
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (3 seconds) ***
Auto run second count down: 0
Wait for Multiboot Service Packet...  0
Booting from only image (0xb8010000) ...
Code Address: 0x80010000, Entry Address: 0x80222300
Decompression OK!
Entry at 0x80222300
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x80222300
Linux version 2.6.30 (FuChia@MsgSW4-SerVer) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #2 Wed Jan 4 11:38:27 CST 2012
Parallel flash device: name AM29DL800B, id 0x22cb size 8192KB
96368MVWG prom init
CPU revision is: 0002a031 (Broadcom4350)
Determined physical RAM map:
 memory: 01f00000 @ 00000000 (usable)
Zone PFN ranges:
  DMA      0x00000000 -> 0x00001000
  Normal   0x00001000 -> 0x00001f00
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00001f00
On node 0 totalpages: 7936
free_area_init_node: node 0, pgdat 80295c20, node_mem_map 81000000
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 30 pages used for memmap
  Normal zone: 3810 pages, LIFO batch:0
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 7874
Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
wait instruction: enabled
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
RCU-based detection of stalled CPUs is enabled.
NR_IRQS:128
PID hash table entries: 128 (order: 7, 512 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 28516k/31744k available (2144k kernel code, 3228k reserved, 445k data, 116k init, 0k highmem)
Calibrating delay loop... 399.36 BogoMIPS (lpj=199680)
Mount-cache hash table entries: 512
net_namespace: 816 bytes
NET: Registered protocol family 16
Total Flash size: 8192K with 135 sectors
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
pci 0000:00:01.0: reg 10 32bit mmio: [0x000000-0x00ffff]
BLOG v2.1 Initialized
NET: Registered protocol family 8
NET: Registered protocol family 20
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
squashfs: version 4.0 with LZMA457 ported by BRCM
msgmni has been set to 55
io scheduler noop registered (default)
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
bcm963xx_mtd driver v1.0
File system address: 0xb8010100
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x1 is enabled
SES: LED GPIO 0x8018 is enabled
Serial: BCM63XX driver $Revision: 3.00 $
ttyS0 at MMIO 0xb0000100 (irq = 10) is a BCM63XX
ttyS1 at MMIO 0xb0000120 (irq = 11) is a BCM63XX
bcmxtmrt: Broadcom BCM6368B2 ATM/PTM Network Device v0.3 Jan  4 2012 11:12:01
Broadcom Logger v0.1 Jan  4 2012 11:11:09
Mirror/redirect action on
u32 classifier
    input device check on
    Actions configured
TCP cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 17
NET: Registered protocol family 15
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:0.
Freeing unused kernel memory: 116k freed
init started:  BusyBox v1.00 (2012.01.04-03:14+0000) multi-call binary


BusyBox v1.00 (2012.01.04-03:14+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.


Loading drivers and kernel modules...

pktflow: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Broadcom Packet Flow Cache  Char Driver v2.1 Jul 15 2010 09:29:38 Registered<242>
NBUFF v1.0 Initialized
Broadcom Packet Flow Cache learning via BLOG enabled.
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Constructed Broadcom Packet Flow Cache v2.1 Jul 15 2010 09:29:37
Broadcom Packet CMF (Experimental) Char Driver v0.1 Jul 15 2010 09:29:34 Registered<232>
Broadcom Packet CMF (Experimental) [6368-B2] v0.1 Jul 15 2010 09:29:33 Loaded
bcmxtmcfg: bcmxtmcfg_init entry
adsl: adsl_init entry
Broadcom BCM6368B2 Ethernet Network Device v0.1 Jan  4 2012 11:11:15
ETH Init: 180 tx BDs at 0xa18d4000
ETH Init: 180 tx BDs at 0xa199c000
ETH Init: 400 rx BDs at 0xa19eb000
ETH Init: 400 rx BDs at 0xa19fb000
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
Broadcom Packet CMF (Experimental) SWC RESET.
Broadcom Packet CMF (Experimental) SWC INITIALIZED.
Broadcom Packet CMF (Experimental) Forwarder Net Device 0 v0.1 Jul 15 2010 09:29:35 Registered
Broadcom Packet CMF (Experimental) Forwarder Net Device 0 v0.1 Jul 15 2010 09:29:35 Registered
Broadcom Packet CMF (Experimental) ENABLED.
eth0: MAC Address: C8:6C:87:5C:11:A9
eth1: MAC Address: C8:6C:87:5C:11:A9
eth2: MAC Address: C8:6C:87:5C:11:A9
eth3: MAC Address: C8:6C:87:5C:11:A9
eth4: MAC Address: C8:6C:87:5C:11:A9
PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
PCI: Setting latency timer of device 0000:00:01.0 to 64
wl:srom not detected,using main memory mapped srom info(wombo board)
wl:loading /etc/wlan/bcm43222_map.bin
wl0: Broadcom BCMa8d6 802.11 Wireless Controller 5.60.120.11.cpe4.06L02.1
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
IRQ 21/brcm_21: IRQF_DISABLED is not guaranteed on shared IRQs
p8021ag: p8021ag_init entry
Broadcom 802.1Q VLAN Interface, v0.1

===== Release Version 4.06L.02 (build timestamp 120104_1421) =====

Sun Jan  1 00:00:00 UTC 2012
update Persistent size = 24029, offset = 0
update BackupPsi size = 24029, offset = 0
ip_tables: (C) 2000-2006 Netfilter Core Team
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
dhcpd:error:12.771:set_iface_config_defaults:621:SIOCGIFADDR failed on br0!
xt_time: kernel timezone is -0000
iptables: Bad rule (does a matching rule exist in that chain?)
Sntp: Using new rule EST5EDT,M3.2.0/2,M11.1.0/2
device eth0.0 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.0) entering forwarding state
device eth0 is not a slave of br0
Created new Tag Rule: dev=eth0, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth0, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth0, dir=1, tags=2, id=0

Broadcom Packet Flow Cache flushing the flows
device eth1.0 entered promiscuous mode
device eth1 entered promiscuous mode
br0: port 2(eth1.0) entering forwarding state
device eth1 is not a slave of br0
Created new Tag Rule: dev=eth1, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth1, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth1, dir=1, tags=2, id=0

Broadcom Packet Flow Cache flushing the flows
device eth2.0 entered promiscuous mode
device eth2 entered promiscuous mode
br0: port 3(eth2.0) entering forwarding state
device eth2 is not a slave of br0
Created new Tag Rule: dev=eth2, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth2, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth2, dir=1, tags=2, id=0

Broadcom Packet Flow Cache flushing the flows
device eth3.0 entered promiscuous mode
device eth3 entered promiscuous mode
br0: port 4(eth3.0) entering forwarding state
device eth3 is not a slave of br0
Created new Tag Rule: dev=eth3, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth3, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth3, dir=1, tags=2, id=0

Broadcom Packet Flow Cache flushing the flows
WLmngr Daemon is running
optarg=0 shmId=0
BcmAdsl_Initialize=0xC00F8E2C, g_pFnNotifyCallback=0xC0128AF4
wlevt_init@107: opened loopback socket 4
wlevt is ready for new msg...
Clocks for QPROC and AFE are being aligned with step through ...
AFE is aligned, i = 067, PhaseValue = -050, PhaseCntl = 0x3FBD0000
QPROC is aligned, i = 068, PhaseValue = -150, PhaseCntl = 0x3FBD7FBD
Clocks for QPROC and AFE are aligned with syn_status AFE = 0x70, QPROC = 0x78
AFE  phase control reg @0xb0f570f8 default actual = 0x0021C38F, exp = 0x0021c38f
QPRC phase control reg @0xb0f5f0c0 default actual = 0x0421C38F, exp = 0x0421c38f
pSdramPHY=0xA1FFFFF8, 0x11541401 0x572DBFEF
*** XfaceOffset: 0x5FF90 => 0x5FF90 ***
*** PhySdramSize got adjusted: 0xBDAC0 => 0xEB1E0 ***
AdslCoreSharedMemInit: shareMemAvailable=85504
AdslCoreHwReset: pLocSbSta=80428000 bkupThreshold=3072
AdslCoreHwReset:  AdslOemDataAddr = 0xA1FB3438
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
XTM Init: 400 rx BDs at 0xa09bd000
XTM Init: 100 rx BDs at 0xa0917800

 PROGRAM : VcAutoHunt main > ENTER
/var/cert/acscert2.cacert: cannot open
ln: /var/cert/bdbefb5f.0: File exists
Broadcom Packet CMF (Experimental) ENABLED.
Broadcom Packet Flow Cache learning via BLOG enabled.
Broadcom Packet Flow Cache flushing the flows
monitor task is initialized pid= 191
General UPnP daemon is ready to run with NATT 1
Switch MDK: num_switches = 1
Switch MDK: unit = 0; phy_pbmp = 0x1f; config_pbmp = 0x1f
Switch MDK link poll thread: unit=0; phypbmp=0x1f
eth4 Link UP -1 mbps half duplex
update Persistent size = 24029, offset = 0
update BackupPsi size = 24029, offset = 0
update Persistent size = 23956, offset = 0
update BackupPsi size = 23956, offset = 0
There is no Predefined DevicePin in CFE
WPS Device PIN = 17258227
Setting SSID: "FrontierHSI"
Setting SSID: "wl0_Guest1"
Setting SSID: "wl0_Guest2"
Setting SSID: "wl0_Guest3"

version
Frontier P-870HN-51b
Login: admin
Password:
update Persistent size = 24303, offset = 0
update BackupPsi size = 24303, offset = 0
 > cat /proc/cpuinfo
system type             : 96368MVWG
processor               : 0
cpu model               : Broadcom4350 V3.1
BogoMIPS                : 399.36
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

unaligned exceptions            : 21
 >

 > cat /proc/version
Linux version 2.6.30 (FuChia@MsgSW4-SerVer) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #2 Wed Jan 4 11:38:27 CST 2012
 > free
consoled:error:333.883:processInput:507:unrecognized command free
 > Line 0: xDSL G.994 training
cat /proc/meminfo Line 0: ADSL link down
bcmxtmcfg: XTM Link Information, portid = 0, State = DOWN, Service Support = PTM
Broadcom Packet CMF (Experimental) SWC FLUSHED.
bcmxtmcfg: Reinitialize port 0 traffictype 2
bcmxtmcfg: Normal(XTM/PTM) Mode enabled

MemTotal:          28632 kB
MemFree:            1868 kB
Buffers:            2696 kB
Cached:             8772 kB
SwapCached:            0 kB
Active:             3804 kB
Inactive:           9948 kB
Active(anon):        904 kB
Inactive(anon):     1380 kB
Active(file):       2900 kB
Inactive(file):     8568 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2304 kB
Mapped:             2916 kB
Slab:               9260 kB
SReclaimable:        420 kB
SUnreclaim:         8840 kB
PageTables:          280 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       14316 kB
Committed_AS:       6308 kB
VmallocTotal:    1032148 kB
VmallocUsed:        3420 kB
VmallocChunk:    1022260 kB
 > cat /proc/mtd
dev:    size   erasesize  name
mtd0: 0049a000 0049a000 "Physically mapped flash"
 > cat /proc/interrupts
           CPU0
  7:     364626         BCM63xx  timer
 10:        324         BCM63xx  brcm_10
 12:       2789         BCM63xx  brcm_12
 21:          0         BCM63xx  brcm_21
 22:          0         BCM63xx  brcm_22
 23:          0         BCM63xx  brcm_23
 28:          0         BCM63xx  brcm_28
 29:          0         BCM63xx  brcm_29
 40:          0         BCM63xx  brcm_40
 41:          0         BCM63xx  brcm_41
 42:          0         BCM63xx  brcm_42
 48:          0         BCM63xx  brcm_48
 49:          0         BCM63xx  brcm_49
 50:          0         BCM63xx  brcm_50

ERR:          0
 > dmesg
consoled:error:370.114:processInput:507:unrecognized command dmesg
 >

 > help
?
help
logout
exit
quit
reboot
df
meminfo
kill
echo
ifconfig
ping
ps
pwd
sysinfo
tftp
wlctl
arp
lan
lanhosts
restoredefault
save
swversion
wlan
tr064
cfm
vcautohunt
dhcpcondserv
captiveurl
 > meminfo
Total MDM Shared Memory Region : 1024KB
Shared Memory Usable           : 000929KB
Shared Memory in-use           : 000117KB
Shared Memory free             : 000812KB
Shared Memory allocs           : 023067
Shared Memory frees            : 021132
Shared Memory alloc/free delta : 001935

Heap bytes in-use     : 000016
Heap allocs           : 000914
Heap frees            : 000913
Heap alloc/free delta : 000001
 > ifconfig
bcmsw           Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:1000
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
                Base address:0x6a00

br0             Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                inet addr:192.168.254.254  Bcast:192.168.254.255  Mask:255.255.255.0
                UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:37 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:9646 (9.4 KiB)

eth0            Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:1000
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0.0          Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:38 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:9706 (9.4 KiB)

eth1            Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:1000
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


eth1.0          Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:36 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:9586 (9.3 KiB)

eth2            Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:1000
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


eth2.0          Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:34 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:9466 (9.2 KiB)

eth3            Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:1000
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


eth3.0          Link encap:Ethernet  HWaddr C8:6C:87:5C:11:A9
                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:32 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:9346 (9.1 KiB)

lo              Link encap:Local Loopback
                inet addr:127.0.0.1  Mask:255.0.0.0
                UP LOOPBACK RUNNING  MTU:16436  Metric:1
                RX packets:90 errors:0 dropped:0 overruns:0 frame:0
                TX packets:90 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:6606 (6.4 KiB)  TX bytes:6606 (6.4 KiB)

sar             Link encap:UNSPEC  HWaddr FE-FF-FF-FF-FF-FF-FF-FF-00-00-00-00-00-00-00-00
                UP NOTRAILERS RUNNING NOARP  MTU:0  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
                Interrupt:50 Base address:0x5220

swc             Link encap:UNSPEC  HWaddr FE-FF-FF-FF-FF-FF-FF-FF-00-00-00-00-00-00-00-00
                UP NOTRAILERS RUNNING NOARP  MTU:0  Metric:1
                RX packets:0 errors:0 dropped:0 overruns:0 frame:0
                TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
                Interrupt:42 Base address:0x6a40

 > sysconfig
consoled:error:175.526:processInput:507:unrecognized command sysconfig
 > sysinfo
Number of processes: 42
 12:03am  up 3 min,
load average: 1 min:0.03, 5 min:0.07, 15 min:0.03
              total         used         free       shared      buffers
  Mem:        28632        26536         2096            0         2696
 Swap:            0            0            0
Total:        28632        26536         2096
 > swversion
Usage: swversion show
       swversion help
 > swversion show
1.10(VFS.0)b3
 >

CFE> athe
Available commands:

ATSE                show the seed of password generator
ATEN                set BootExtension Debug Flag
ATSH                dump manufacturer related data in ROM
ATER                Erase ROM-D partition
ATBR                Reset to default Romfile
ATGO                boot router
ATSR                system reboot
ATHE                print help

For more information about a command, enter 'help command-name'
*** command status = 0
CFE>

CFE> ATSH                dump manufacturer related data in ROM

ZLD      Version       : V1.10(VFS.0)b3
Bootbase Version       : V1.34 | 12/27/2011 22:37:03
Vendor Name            : Frontier Communications Corp.
Product Model          : P-870HN-51b
Serial Number          : S110Y44018146
First MAC Address      : C86C875C11A9
Last MAC Address       : C86C875C11B2
MAC Address Quantity   : 10
Default Country Code   : FF
Boot Module Debug Flag : 00
RootFS      Checksum   : 65ee40b7
Kernel      Checksum   : d71645ce
RomFile     Checksum   : eba9b27e
ImageDefaultChecksum   : 54f14a56
Main Feature Bits      : 00
Other Feature Bits     :
                5a 59 40 16 00 00 00 00-00 00 00 00 00 00 00 00
                00 00 00 00 00 00 00 00-00 00 00 00 00 00

Openwrt bootlog

 > tftp
BusyBox v1.00 (2012.01.04-03:14+0000) multi-call binary

Usage: tftp [-p|-g] [-t i|c] [-f filename] tftp_server_ip

Update firmware image and configuration data from OR backup configuration
data to a tftp server.

Examples:
-g -t i -f filename server_ip   Get (flash) broadcom or whole image to modem
-g -t c -f filename server_ip   Get (flash) config file to modem
-p -f filename server_ip        Put (backup) config file to tftpd server


 > tftp -g -t i -f openwrt-96368MVWG-generic-squashfs-cfe.bin 192.168.254.33
exit mcpd!!
MemTotal:          28632 kB
MemFree:           11364 kB
Buffers:             152 kB
Cached:             2908 kB
SwapCached:            0 kB
Active:             2336 kB
Inactive:           2216 kB
Active(anon):        628 kB
Inactive(anon):      864 kB
Active(file):       1708 kB
Inactive(file):     1352 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          1512 kB
Mapped:             2636 kB
Slab:               9088 kB
SReclaimable:        264 kB
SUnreclaim:         8824 kB
PageTables:          184 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       14316 kB
Committed_AS:       3960 kB
VmallocTotal:    1032148 kB
VmallocUsed:        3420 kB
VmallocChunk:    1022260 kB
Allocating 8388628 bytes for flash image.
Memory allocated
Got image via tftp, total image size: 3276804
tftp:error:556.544:verifyZyXELModelId:143:Not find ZyXEL identify, just fall through
Flashing root file system and kernel...
....................................................

****** DDR->DSLCorePhaseCntl=0 ******

ý

CFE version 1.0.37-107.23 for BCM96368 (32bit,SP,BE)
Build Date: 12/27/2011 (FuChia@MsgSW4-SerVer)
Copyright (C) 2000-2009 Broadcom Corporation.

Parallel flash device: name AM29DL800B, id 0x22cb size 8192KB
Total Flash size: 8192K with 135 sectors
Chip ID: BCM6368B2, MIPS: 400MHz
Main Thread: TP0
Total Memory: 33554432 bytes (32MB)
Boot Address: 0xb8000000

Checking Reset button on EXT INTR 0
Checking Reset button on EXT INTR 0
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 3
Board Id (0-15)                   : 96368MVWG
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : c8:6c:87:5c:11:a9
PSI Size (1-128) KBytes           : 64
Enable Backup PSI [0|1]           : 1
System Log Size (0-256) KBytes    : 0
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (3 seconds) ***
Auto run second count down: 0
Wait for Multiboot Service Packet...  0
Booting from only image (0xb8010000) ...
Code Address: 0x80010000, Entry Address: 0x80010000
LZMA: Prossible old LZMA format, trying to decompress..
Decompression OK!
Entry at 0x80010000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
1 buffers found.
Closing DMA Channels.
Starting program at 0x80010000
[    0.000000] Linux version 3.10.21 (thepeople@trabant) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2013.05 r38990) ) #1 Tue Dec 3 08:27:54 CET 2013
[    0.000000] Detected Broadcom 0x6368 CPU revision b2
[    0.000000] CPU frequency is 400 MHz
[    0.000000] 32MB of RAM installed
[    0.000000] registering 38 GPIOs
[    0.000000] board_bcm963xx: Boot address 0xb8000000
[    0.000000] board_bcm963xx: CFE version: 1.0.37-107.23
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0002a031 (Broadcom BMIPS4350)
[    0.000000] board_bcm963xx: board name: 96368MVWG
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Memory: 28752k/32768k available (2440k kernel code, 4016k reserved, 704k data, 244k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
[    0.032000] pid_max: default: 32768 minimum: 301
[    0.036000] Mount-cache hash table entries: 512
[    0.044000] NET: Registered protocol family 16
[    0.052000] registering PCI controller with io_map_base unset
[    0.056000] registering PCI controller with io_map_base unset
[    0.064000] bio: create slab <bio-0> at 0
[    0.068000] PCI host bridge to bus 0000:00
[    0.072000] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff]
[    0.076000] pci_bus 0000:00: root bus resource [io  0x8000000-0x8007fff]
[    0.080000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.096000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff]
[    0.100000] PCI host bridge to bus 0000:01
[    0.104000] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff]
[    0.108000] pci_bus 0000:01: root bus resource [io  0x8008000-0x800ffff]
[    0.112000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.116000] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.120000] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff]
[    0.124000] pci 0000:01:1e.0: BAR 7: assigned [io  0x8008000-0x80080ff]
[    0.128000] pci 0000:01:1e.0: BAR 8: assigned [io  0x8008400-0x80084ff]
[    0.132000] pci 0000:01:1e.0: CardBus bridge to [bus 02-05]
[    0.136000] pci 0000:01:1e.0:   bridge window [io  0x8008000-0x80080ff]
[    0.140000] pci 0000:01:1e.0:   bridge window [io  0x8008400-0x80084ff]
[    0.144000] pci 0000:01:1e.0:   bridge window [mem 0x38000000-0x3fffffff]
[    0.148000] PCI: Enabling device 0000:01:1e.0 (0000 -> 0003)
[    0.152000] Switching to clocksource MIPS
[    0.160000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
[    0.188000] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08
[    0.252000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0
[    0.260000] NET: Registered protocol family 2
[    0.264000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.272000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.280000] TCP: Hash tables configured (established 512 bind 512)
[    0.284000] TCP: reno registered
[    0.288000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.296000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.304000] NET: Registered protocol family 1
[    0.308000] audit: initializing netlink socket (disabled)
[    0.316000] type=2000 audit(0.316:1): initialized
[    0.320000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.324000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.336000] msgmni has been set to 56
[    0.340000] io scheduler noop registered
[    0.344000] io scheduler deadline registered (default)
Ę[    0.360000] console [ttyS0] enabled, bootconsole disabled= 10) is a bcm63xx_uart
[    0.360000] console [ttyS0] enabled, bootconsole disabled
[    0.372000] bcm63xx-rng bcm63xx-rng: registered RNG driver
[    0.380000] physmap platform flash device: 08000000 at 18000000
[    0.384000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x0022cb
[    0.396000] Amd/Fujitsu Extended Query Table at 0x0040
[    0.400000]   Amd/Fujitsu Extended Query version 1.1.
[    0.408000] number of CFI chips: 1
[    0.412000] bcm63xxpart: CFE boot tag found with version 6 and board type 96368MVWG
[    0.420000] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000
[    0.424000] bcm63xxpart: Partition 1 is kernel offset 10100 and length 11ff00
[    0.432000] bcm63xxpart: Partition 2 is rootfs offset 130000 and length 6c0000
[    0.440000] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000
[    0.448000] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000
[    0.456000] bcm63xxpart: Spare partition is offset 330004 and length 4bfffc
[    0.460000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0
[    0.468000] Creating 5 MTD partitions on "physmap-flash.0":
[    0.476000] 0x000000000000-0x000000010000 : "CFE"
[    0.480000] 0x000000010100-0x000000130000 : "kernel"
[    0.488000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.500000] 0x000000130000-0x0000007f0000 : "rootfs"
[    0.508000] mtd: device 2 (rootfs) set to be root filesystem
[    0.512000] mtd: partition "rootfs_data" created automatically, ofs=0x330000, len=0x4c0000
[    0.520000] 0x000000330000-0x0000007f0000 : "rootfs_data"
[    0.528000] 0x0000007f0000-0x000000800000 : "nvram"
[    0.536000] 0x000000010000-0x0000007f0000 : "linux"
[    0.544000] bcm63xx-spi bcm63xx-spi: at 0xb0000800 (irq 9, FIFOs size 542)
[    0.592000] b53_common: found switch: BCM63xx, rev 0
[    0.596000] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.608000] TCP: cubic registered
[    0.608000] NET: Registered protocol family 17
[    0.616000] Bridge firewalling registered
[    0.620000] 8021q: 802.1Q VLAN Support v1.8
[    0.632000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    0.640000] Freeing unused kernel memory: 244K (80323000 - 80360000)
procd: Console is alive
procd: - watchdog -
procd: - preinit -
ifconfig: SIOCGIFFLAGS: No such device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    4.428000] Button Hotplug driver version 0.4.1
mount_root: jffs2 is not ready - EOF marker found
ifconfig: SIOCGIFFLAGS: No such device
procd: - early -
procd: - watchdog -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[    8.292000] NET: Registered protocol family 10
[    8.316000] nf_conntrack version 0.5.0 (453 buckets, 1812 max)
[    8.332000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    8.356000] Loading modules backported from Linux version master-2013-11-05-0-gafa3093
[    8.364000] Backport generated by backports.git backports-20130802-0-gdb67a3f
[    8.376000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    8.436000] xt_time: kernel timezone is -0000
[    8.468000] cfg80211: Calling CRDA to update world regulatory domain
[    8.488000] cfg80211: World regulatory domain updated:
[    8.492000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
[    8.500000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[    8.508000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
[    8.516000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
[    8.524000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[    8.532000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (300 mBi, 2000 mBm)
[    8.540000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm)
[    8.652000] PPP generic driver version 2.4.2
[    8.660000] NET: Registered protocol family 24
[    8.704000] b43-phy0: Broadcom 43222 WLAN found (core revision 16)
[    8.756000] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 6
[    8.788000] Broadcom 43xx driver loaded [ Features: PNL ]
[   16.752000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   16.772000] jffs2_build_filesystem(): unlocking the mtd device... done.
[   16.776000] jffs2_build_filesystem(): erasing all blocks after the end marker... [   17.472000] device eth0.1 entered promiscuous mode
[   17.476000] device eth0 entered promiscuous mode
[   17.488000] br-lan: port 1(eth0.1) entered forwarding state
[   17.492000] br-lan: port 1(eth0.1) entered forwarding state
[   18.460000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   19.496000] br-lan: port 1(eth0.1) entered forwarding state
done.
[   58.092000] jffs2: notice: (547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
procd: - init complete -



BusyBox v1.19.4 (2013-12-03 08:14:57 CET) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------ujjjjjjjj
                                        BARRIER BREAKER (Bleeding Edge, r38990)
 -----------------------------------------------------
  * 1/2 oz Galliano         Pour all ingredients into
  * 4 oz cold Coffee        an irish coffee mug filled
  * 1 1/2 oz Dark Rum       with crushed ice. Stir.
  * 2 tsp. Creme de Cacao
 -----------------------------------------------------
root@OpenWrt:/#

Openwrt debug level 4 pastebin: http://pastebin.com/KCBeMZif

Tags

For some Help with the Tags, please have a look here: tags

Back to top

toh/zyxel/p-870hn-51b.txt · Last modified: 2014/10/12 12:55 by theoradicus