Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
inbox:toh:sagem:f_st3864op [2024/02/14 17:04] – [OEM bootlog] rikka0w0inbox:toh:sagem:f_st3864op [2024/10/19 06:51] – [Photos] rikka0w0
Line 1: Line 1:
 ====== Sagem F@ST3864OP ====== ====== Sagem F@ST3864OP ======
-~~NOTOC~~+{{page>meta:infobox:construction&noheader&nofooter&noeditbtn}}
  
-/* This template is intended to be used via https://openwrt.org/meta/create_new_device_page . */+[[:toh:hwdata:sagem:sagem_f_st3864op#F@ST3864OP]] is a xDSL modem with four 1Gbps LAN ports, 2.4g+5g Wifi and FXS. It can also work as a normal router which connects to the internet via a 1Gbps WAN port. In Australia, this modem was provided by [[https://www.optus.com.au/content/dam/optus/documents/for-you/device-warranties/Sagem%20F3864%20Datasheet.pdf|Optus]] as an NBN modem.
  
-{{page>meta:infobox:construction&noheader&nofooter&noeditbtn}}+{{ media:example:genericrouter1.png?200|Generic Router}}
  
-//Write a shortrelevant description of the device. Include a technical overview, but avoid marketing buzzwords/useless stuff. Two to four sentences is about rightA picture is good, too. Edit the page to see how to add pictures.//+<WRAP center round important 60%> 
 + <color #ed1c24>**WAN-LAN traffic overloads the CPUas the hardware NAT offloading is not supported yetWAN-LAN speed is around 144Mbps.**</color> 
 +</WRAP>
  
-/*****/ +===== Hardware highlights ===== 
-/* How to add images ========> https://openwrt.org/meta/adding_images_to_openwrt_wiki */ +^ CPU                            ^ Ram       ^ Flash          ^ Network  ^ WLAN  ^ USB       ^ Serial  ^ JTag  ^ 
-/*****/+| BCM63168D0, Dual-Core @400MHz  |  128 MiB  |  128 MiB NAND  |  4x 1G LAN, 1x 1G WAN    bgn  |  2 x 2.0  |  Yes    |  ?    |
  
-{{ media:example:genericrouter1.png?200|Generic Router}} 
  
 +/*** if info available: uncomment and fill in
 +===== Installation =====
 +  - → [[:downloads|Obtain firmware]]
 +  - → [[docs:guide-user:installation:generic.flashing|Install OpenWrt]]
 +  - → [[:downloads|Latest OpenWrt release]]
 +
 +==== Installing OpenWrt ====
 +***/
 +
 +
 +/*** if info available: uncomment and fill in
 +===== Debricking =====
 +-> [[docs:guide-user:troubleshooting:generic.debrick]]
 +***/
  
 ===== OpenWrt support ===== ===== OpenWrt support =====
  
-<color red>**Not supported.**</color>+<color red>**W.I.P.**</color>
  
 +=== Whats working ===
 +  - All ethernet ports.
 +  - VLAN tagging of both internal (SoC) and external switches(BCM53124SKMMLG).
 +  - All USB ports.
 +  - Most LEDs, except for the Wifi indicator, the amber and the green LEDs near the WAN port.
 +
 +=== Whats NOT working ===
 +  - WAN-LAN hardware acceleration does not work at the moment, NAT speed is limited to around 144Mbps at full CPU load.
 +  - Some LEDs (gpio-leds, see dts).
 +  - WAN LEDs control needs improvement.
 +  - PCIe, ''lspci'' shows no device attached but the root PCIEe bridge. There should be some PCIe device attached by looking at the stock boot log.
 +  - WiFi does not work at the moment.
 +  - xDSL and FXS are unlikely to get supported.
  
 /*** if info available: uncomment and fill in /*** if info available: uncomment and fill in
Line 41: Line 69:
  
  
-===== Hardware highlights ===== 
-^ CPU                            ^ Ram       ^ Flash          ^ Network  ^ WLAN  ^ USB       ^ Serial  ^ JTag  ^ 
-| BCM63168D0, Dual-Core @400MHz  |  128 MiB  |  128 MiB NAND  |  4x 1G    bgn  |  2 x 2.0  |  Yes    |  ?    | 
- 
- 
-/*** if info available: uncomment and fill in 
-===== Installation ===== 
-  - → [[:downloads|Obtain firmware]] 
-  - → [[docs:guide-user:installation:generic.flashing|Install OpenWrt]] 
-  - → [[:downloads|Latest OpenWrt release]] 
- 
-==== Installing OpenWrt ==== 
-***/ 
- 
- 
-/*** if info available: uncomment and fill in 
-===== Debricking ===== 
--> [[docs:guide-user:troubleshooting:generic.debrick]] 
-***/ 
  
  
Line 108: Line 117:
 ***/ ***/
  
 +==== Boot OpenWrt in RAM ====
 +
 +  - Open the case and connect the [[:inbox:toh:sagem:f_st3864op#serial|internal serial headers]] to a PC via a USB-Serial adapter.
 +  - Power on the device, keep pressing any key until you see the CFE prompt appears.
 +  - Set the IPv4, netmask, and gateway of your PC to ''192.168.1.100'', ''255.255.255.0'', and ''192.168.1.1'', respectively.
 +  - Connect any of the router LAN ports to your PC.
 +  - Setup a TFTP server on your PC to serve the ''openwrt-bmips-bcm63268-sagem_fast-3864op-initramfs.elf'' OpenWrt image.
 +  - Use command ''openwrt-bmips-bcm63268-sagem_fast-3864op-initramfs.elf'' to boot an OpenWrt instance in RAM.
 +
 +Use this command to safely browse the stock firmware files:
 +
 +''mount -t jffs2 -o ro /dev/mtdblock1 /mnt/mtd1/''
 +
 +==== Installation ====
 +<WRAP center round alert 60%>
 + <color #ed1c24>**Flashing via CFE's 192.168.1.1 has not been tested and could brick your device!!!**</color>
 +
 +Any help or information on this are welcomed.
 +</WRAP>
 +<WRAP center round important 60%>
 + <color #ed1c24>**Using LuCI sysupgrade to install on a fresh OEM device bricks it, use the following steps to install or recover.**</color>
 +</WRAP>
 +
 +This section explains a safer way of installing OpenWrt to a F@ST3864OP device. This method does not touch the CFE bootloader, and it is less likely to brick the router.
 +
 +  - You would need to prepare a USB-TTL serial adapter, open the case of the router, and solder the serial headers.
 +  - Follow the [[:inbox:toh:sagem:f_st3864op#boot_openwrt_in_ram|Boot OpenWrt in RAM]] section until you get an OpenWrt (run in RAM) shell.
 +  - Setup a web server (e.g. ''python3 -m http.server'') on your PC that serves the OpenWrt firmware ''openwrt-bmips-bcm63268-sagem_fast-3864op-squashfs-cfe.bin''.
 +  - On the OpenWrt shell, download the OpenWrt firmware to ramdisk ''/tmp'': ''cd /tmp && wget http://192.168.1.100:8000/openwrt-bmips-bcm63268-sagem_fast-3864op-squashfs-cfe.bin''
 +  - Use sha256sum to check if the firmware file is intact.
 +  - **Up to this step, you still can reboot the router with the stock firmware untouched.**
 +  - Wipe the stock firmware and create a clean JFF2: ''flash_erase -j /dev/mtd6 0 982'', where ''/dev/mtd6'' is the 'wfi' partition. You can find out which mtd is the wfi partition by using command ''cat /proc/mtd''. After this step, the stock firmware is gone.
 +  - Install OpenWrt firmware permanently to the NAND flash: ''nandwrite -p /dev/mtd6 /tmp/openwrt-bmips-bcm63268-sagem_fast-3864op-squashfs-cfe.bin''
 +  - Now reboot. If everything goes well, you will get a OpenWrt shell.
 +  - **LuCI sysupgrade can be used from now on.**
  
 +Reference: [[:toh:huawei:hg253s_v2]]
 ===== Hardware ===== ===== Hardware =====
 ==== Info ==== ==== Info ====
Line 116: Line 161:
 ^ System-On-Chip  | BCM63168D0                                                              | ^ System-On-Chip  | BCM63168D0                                                              |
 ^ CPU/Speed       | Core 400MHz, DDR: 400MHz, Bus: 200MHz                                   | ^ CPU/Speed       | Core 400MHz, DDR: 400MHz, Bus: 200MHz                                   |
-^ Flash-Chip      | W29N01HVSINA, TSOP1 package                                             |+^ Flash-Chip      | [[https://au.mouser.com/datasheet/2/949/w29n01hvxina_revc-1489886.pdf|W29N01HVSINA]], TSOP1 package                                             |
 ^ Flash size      | 128MiB, blocksize: 64 pages, page size: 2048 bytes + 64-byte OOB data.  | ^ Flash size      | 128MiB, blocksize: 64 pages, page size: 2048 bytes + 64-byte OOB data.  |
-^ RAM             | NT5CC64M16GP-DI, DDR3 128MiB                                            |+^ RAM             [[https://www.nanya.com/en/Product/3747/NT5CC64M16GP-DI|NT5CC64M16GP-DI]], DDR3 128MiB                                            |
 ^ Wireless        | built-in? Need more investigation                                       | ^ Wireless        | built-in? Need more investigation                                       |
 ^ Ethernet        | 1x WAN, 4x LAN, all support 10/100/1000                                 | ^ Ethernet        | 1x WAN, 4x LAN, all support 10/100/1000                                 |
Line 126: Line 171:
 ^ JTAG            | ???                                                                     | ^ JTAG            | ???                                                                     |
  
-Datasheets+Other ICs on the board
-  * NT5CC64M16GP-DI: https://www.nanya.com/en/Product/3747/NT5CC64M16GP-DI +  * [[https://assets.nexperia.com/documents/data-sheet/74HC_HCT164.pdf|74HC164D]] 
-  * W29N01HVSINA: https://au.mouser.com/datasheet/2/949/w29n01hvxina_revc-1489886.pdf+  * [[https://www.renesas.com/in/en/products/interface-connectivity/wireless-communications/dect/lmx4181-high-frequency-dect-transceiver-standard-cmos-technology|LMX4181]] 
 +  * [[https://au.mouser.com/datasheet/2/472/Si32260_61-2507288.pdf|SI32260-C-FM1]] 
 +  * [[https://www.digikey.co.uk/en/products/detail/broadcom-limited/BCM6302KMLG/6147288|BCM6302]]
  
-Other ICs on board+CPU Pinout
-  * 74HC164Dhttps://assets.nexperia.com/documents/data-sheet/74HC_HCT164.pdf +[[:docs:techref:hardware:soc:soc.broadcom.bcm63xx#bcm63168_pinout]] 
-  * LMX4181https://www.renesas.com/in/en/products/interface-connectivity/wireless-communications/dect/lmx4181-high-frequency-dect-transceiver-standard-cmos-technology + 
-  * SI32260-C-FM1: https://au.mouser.com/datasheet/2/472/Si32260_61-2507288.pdf +==== Network ==== 
-  BCM6302: https://www.digikey.co.uk/en/products/detail/broadcom-limited/BCM6302KMLG/6147288+This router has 2 switches! The BCM63168D0 SOC has 8 internet interfaces, 3xFE, 1xGE, and 4xRGMII, all from a built-in switchIn this router, the GE port (id=3) is used for WAN RJ45 connection, and the first RGMII (id=4) goes to an external switch (BCM53125?) which then powers all accessible LAN ports. **Why didn't they just simply connect 4 PHYs at the RGMIIs to make 4xGE LAN ports?**
  
 Note: Note:
-  * CFE reports the external switch as 53125, but the boot log of the stock firmware shows that it forces to use a 53115 driver.+  * CFE reports the external switch (BCM53124SKMMLG) as [[https://www.mouser.com/datasheet/2/678/broadcom_limited_avgo-s-a0007199287-1-1747746.pdf|53125]], but the boot log of the stock firmware shows that it forces to use a 53115 driver.
  
-===== Flash Layout =====+==== Serial ==== 
 +-> [[docs:techref:hardware:port.serial]] general information about the serial port, serial port cable, etc.
  
 +There is an unsoldered 4-pin header (J708) near the power jack, which provides an interactive console. You can interrupt the boot process and enter the CFE bootloader console by pressing any key repeatedly, or wait for it boots and then login to the management console using the following credentials:
 +
 +^ Credential of an Australian Optus OEM F@ST3864OP ||
 +^ user | admin |
 +^ password | 0ptU%1M5 |
 +
 +If the above does not work, then try the other keys:
 +
 +https://github.com/mattimustang/optus-sagemcom-fast-3864-hacks
 +
 +The management console offers a very limited set of commands, the sh command will drop you to a BusyBox Linux shell.
 +
 +^ Serial parameters for Sagem F@ST3864OP ||
 +^ Baudrate | 115200 |
 +^ Setup| 8N1 |
 +^ Voltage | 3.3V TTL|
 +
 +==== LEDs and buttons ====
 +There are three types of LEDs on this device:
 +  - Connected to a serial LED driver which then drives up to 8 LEDs via a 74HC164D.
 +  - Connected to a SoC pin and controlled by a hardware LED control register.
 +  - Connected to a SoC pin and controlled by Linux via gpio-leds.
 +
 +LED and Button connections:
 +  * WAN Port: Yellow(460+6, gpio38), Green(460+7, gpio39)
 +  * WLAN Led (D12): (460+4, gpio36) Logic XOR (460+5, gpio37), this is weird!
 +  * Internet Led (D17): Green(480+8, gpio8), Red(74HC164D@Q2)
 +  * DSL Bonding Led (D17): Green(480+9, gpio9)
 +  * Power Led (D15): Green(480+20, gpio20), Red(480+15, gpio15)
 +  * DSL (D7): Green(74HC164D@Q3)
 +  * FXS (D11, Foreign Exchange Station, the phone ports, not to be confused with the xDSL port): Green(74HC164D@Q4), Red(74HC164D@Q5)
 +  * WPS Led (D13): Green(74HC164D@Q0), Red(74HC164D@Q1)
 +  * Reset button (SW5): (460+0, gpio32)
 +  * WPS button (SW3): (460+1, gpio33)
 +  * WLAN button (SW2): (460+2, gpio34)
 +  * Some LEDs are driven by 74HC164D:
 +  * Clock (CP) = gpio0 (/sys/class/gpio/gpio480), serial_led_clk
 +  * DSA (Data input) = gpio1 (/sys/class/gpio/gpio481), serial_led_data
 +  * DSB (AND with DSA), MR(Output Async Reset) are pulled high.
 +
 +===== Flash Layout =====
 +Stock firmware dump:
 +https://github.com/rikka0w0/fast3864op-hacks
 ==== Stock ==== ==== Stock ====
 From OEM Bootlog: From OEM Bootlog:
Line 153: Line 244:
 </code> </code>
  
-^  Stock F@ST3864OP Flash Layout                                                                                                                             ||||||| 
-^ Hardware                        |  128MiB NAND W29N01HVSINA                                                                                                 |||||| 
-^ Label                            **//nvram//**              **//rootfs//**  |  **//rootfs_update//**  |  **//hidden1//**  | **//data//**  | **//hidden2//**  | 
-| mtd device name                  mtd3                      |  mtd0 (mtd4)      mtd1 (mtd5)            |  -                |  mtd3          -               | 
-| Start                            0x0000000                  0x0020000        0x3D80000              |  0x7AE0000        | 0x7B00000     | 0x7F00000        | 
-| <color magenta>Size</color>      0x0020000                  0x3D60000        0x3D60000              |  0x0020000        | 0x0400000     | 0x0100000        | 
-| :::                             | :::                        | :::              | :::                      0x0520000                                         ||| 
-| End                              0x0020000                  0x3D80000        0x7AE0000              |  0x7B00000        | 0x7F00000     | 0x8000000        | 
  
  
-OpenWrt:+^  F@ST3864OP Flash Layout                                                                                                                                                                                                                                                               ||||||| 
 +^ Hardware                      128MiB NAND W29N01HVSINA                                                                                                                                                                                                                                |||||| 
 +^ Stock Label                  |  **//nvram//**              |  **//rootfs//** jffs2 filesystem                                                                |  **//rootfs_update//** empty jffs2  |  **//hidden1//**              **//data//** jffs2 filesystem      |  **//hidden2//**             | 
 +^ Stock mtd device name        |  mtd3                        mtd0 (mtd4)                                                                                    |  mtd1 (mtd5)                        |  -                            mtd2                      -                           | 
 +| Start                        |  0x0000000                  |  0x0020000                                                                                      |  0x3D80000                          |  0x7AE0000                   | 0x7B00000                 | 0x7F00000                    | 
 +| <color magenta>Size</color>  |  0x0020000                  |  0x3D60000                                                                                      |  0x3D60000                          |  0x0020000                   | 0x0400000                 | 0x0100000                    | 
 +| :::                          | :::                         | :::                                                                                             | :::                                  0x0520000                                                                            ||| 
 +| End                          |  0x0020000                  |  0x3D80000                                                                                      |  0x7AE0000                          |  0x7B00000                   | 0x7F00000                 | 0x8000000                    | 
 +OpenWrt Layer1                mtd0 **//cferom_nvram//**  |  mtd1 **//stock_rootfs//**                                                                      |  mtd2 **//stock_rootfs_update//**    mtd3 **//stock_hidden1//**  |  mtd4 **//stock_data//**  |  mtd5 **//stock_hidden2//** 
 +^ OpenWrt Layer2               :::                          mtd6 **//wfi//**                                                                                                                    || :::                          | :::                       | :::                          | 
 +| Filesystem                    CFE Bootloader              **//wfi-split//**, OpenWrt firmware, contains part of the CFE bootloader, kernel, and rootfs.                                       ||  ?                            JFFS2                    |  ?                           | 
 + 
 + 
 +==== OpenWrt ====
 <code> <code>
-0x000000000000-0x000000030000 : "u-boot+7 fixed-partitions partitions found on MTD device brcmnand.0 
-0x000000030000-0x000000040000 : "u-boot-env+Creating 7 MTD partitions on "brcmnand.0": 
-0x000000040000-0x000000050000 : "factory+0x000000000000-0x000000020000 : "cferom_nvram" 
-0x000000050000-0x000000060000 : "config2_stock+0x000000020000-0x000003d80000 : "stock_rootfs
-0x000000060000-0x000000fb0000 : "firmware" +0x000003d80000-0x000007ae0000 : "stock_rootfs_update" 
-0x000000fb0000-0x000001000000 : "private_stock"+0x000007ae0000-0x000007b00000 : "stock_hidden1" 
 +0x000007b00000-0x000007f00000 : "stock_data
 +0x000007f00000-0x000008000000 : "stock_hidden2
 +0x000000020000-0x000007ae0000 : "wfi
 +cferam: bootflag1=0 
 +5 bcm-wfi-split-fw partitions found on MTD device wfi 
 +Creating 5 MTD partitions on "wfi": 
 +0x000000000000-0x000000040000 : "cferam" 
 +0x000000040000-0x000003d60000 : "firmware" 
 +0x000000040000-0x000000540000 : "kernel" 
 +0x000000540000-0x000003d60000 : "ubi" 
 +0x000003d60000-0x000007ac0000 : "img2"
 </code> </code>
- 
-^  DIR-853 Rev A1 Flash Layout                                                                                                                                                                                                                                                                                        ||||||||                                      | 
-^ Layer0                              |  raw 16MB NOR SPI flash (GD25Q127CSIG, using GD25Q128C driver)                                                                                                                                                                                                                 |||||||                                      | 
-^ Layer1                              |  mtd0 **//u-boot//** 192 KiB                                    |  mtd1 **//u-boot-env//** 64 KiB  |  mtd2 **//factory//** 64 KiB  |  mtd3 **//config2_stock//** 64 KiB  |  mtd4 **//firmware//** 15680 KiB                                                                        |||  mtd8 **//private_stock//** 320 KiB  | 
-| **Layer2**                          |                                                                                                  |                                                                    mtd5 **//kernel//** 2645 KiB      mtd6 **//rootfs//** 13035 KiB                                       ||                                      | 
-| **Layer3**                          |                                                                                                  |                                                                                                                                      mtd7 **//rootfs_data//** 8768 KiB  |                                      | 
-| <color magenta>Mount Point</color>  |  none                                                            none                            |  none                          none                                none                              ''/rom'' as SquashFS, **ro**    ''/overlay'' as JFFS2, **rw**      |  none                                | 
-| :::                                  :::                                                            |  :::                              :::                          |  :::                                |  :::                              |  ''/'' as OverlayFS, **rw**                                         | :::                                  | 
- 
- 
 ==== Photos ==== ==== Photos ====
-/* =====>>>>> Standard size for photosadd ?400 to the medialink                                */ +=== PCB ==
-/* When uploading photos, **name them** intelligently. Nobody knows what 20100930_000602.jpg is! */ +{{:media:sagem:sagem_f_st3864_front_pcb.jpg?400|}} 
-/* e.g. {{:media:yourbrand:yourbrand_yourmodel_front.jpg?400|}}                                  */ +{{:media:sagem:sagem_f_st3864_back_pcb.jpg?400|}} 
-/* Thanks, your wiki administration - Oct. 2015 */+==== Opening the case ====
  
-**Insert photo of front of the casing**+<WRAP BOX> 
 +FIXME //Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, ...// 
 +</WRAP>
  
-**Insert photo of back of the casing** 
  
-**Insert photo of backside label** 
  
-**Insert photo of PCB** 
  
-==== Opening the case ==== 
  
-<WRAP BOX> +===== Hardware Mods ===== 
-FIXME //Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, ...// +This may apply: 
-</WRAP>+[[:toh:sercomm:ad1018]]
  
-==== Serial ==== +==== Spare SPI Flash ====
--> [[docs:techref:hardware:port.serial]] general information about the serial port, serial port cable, etc.+
  
-There is an unsoldered 4-pin header (J708near the power jack, which provides an interactive console. You can interrupt the boot process and enter the CFE bootloader console by pressing any key repeatedly, or wait for it boots and then login to the management console using the following credentials:+There'an unsoldered SPI Flash (SOIC16on the bottom of the board that connects to ''HSSPI.CS0''. It is known that a SOIC8 Winbond "W25Q64" soldered with jumper wires works with ''spidev'' driver. Custom firmware compilation is required with the following appended to the dts: 
 +<WRAP bootlog><nowiki>&hsspi { 
 + status = "okay";
  
-^ Credential of an Australian Optus OEM F@ST3864OP || + mydev@0{ 
-^ user | admin | + compatible = "rohm,dh2228fv"; 
-^ password | 0ptU%1M5 |+ reg = <0>; 
 + spi-max-frequency = <781000>; 
 + }; 
 +};</nowiki></WRAP> 
 +To use the ''spidev'' driver in the latest kernel (6.6 as of Sep 19, 2024), one has to use a specific device name ("rohm,dh2228fv" in this case), the old "linux, spidev" no longer works. Not sure if it is a kernel bug or not.
  
-If the above does not work, then try the other keys:+The SPI Flash can be accessed with ''flashrom-spi'' and ''spi-tools'' (available in the OpenWRT opkg repo):
  
-https://github.com/mattimustang/optus-sagemcom-fast-3864-hacks+<WRAP bootlog><nowiki>root@OpenWrt:/# flashrom-spi -p linux_spi:dev=/dev/spidev1.
 +flashrom v1.2 on Linux 5.4.188 (mips) 
 +flashrom is free software, get the source code at https://flashrom.org
  
-The management console offers a very limited set of commandsthe sh command will drop you to a BusyBox Linux shell.+Using clock_gettime for delay loops (clk_id: 1resolution: 1ns). 
 +Using default 2000kHz clock. Use 'spispeed' parameter to override. 
 +Found Winbond flash chip "W25Q64.V" (8192 kB, SPI) on linux_spi. 
 +No operations were specified.
  
-^ Serial parameters for Sagem F@ST3864OP || +root@OpenWrt:/# echo -n -e \\x9F\\xFF\\xFF\\xFF spi-pipe -d /dev/spidev1.0 -b4 -n1 hexdump -C 
-^ Baudrate 115200 +00000000  ff ef 40 17                                       |..@.
-^ Setup| 8N1 | +00000004</nowiki></WRAP>
-^ Voltage | 3.3V TTL|+
  
-==== JTAG ==== +==== PCIe ==== 
--> [[docs:techref:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.+It is believed that the SOC has PCI or PCIE buses and devices attachedThe following came from the shell of the stock firmware:
  
-How to connect to the JTAG Port of this specific device:\\ +<WRAP bootlog><nowiki> 
-**Insert photo of PCB with markings for JTAG port**+# cd /sys/bus/pci 
 +# ls devices/ -al 
 +drwxr-xr-x    2 admin    root             0 Jul 10 04:02 . 
 +drwxr-xr-x    5 admin    root             0 Jul 10 04:00 .. 
 +lrwxrwxrwx    1 admin    root             0 Jul 10 04:02 0000:00:00.0 -> ../../../devices/pci0000:00/0000:00:00.0 
 +lrwxrwxrwx    1 admin    root             0 Jul 10 04:02 0000:00:09.0 -> ../../../devices/pci0000:00/0000:00:09.0 
 +lrwxrwxrwx    1 admin    root             0 Jul 10 04:02 0000:00:0a.0 -> ../../../devices/pci0000:00/0000:00:0a.0 
 +lrwxrwxrwx    1 admin    root             0 Jul 10 04:02 0000:01:00.0 -> ../../../devices/pci0000:01/0000:01:00.0 
 +# ls drivers -al 
 +drwxr-xr-x    6 admin    root             0 Jul 10 04:02 . 
 +drwxr-xr-x    5 admin    root             0 Jul 10 04:00 .. 
 +drwxr-xr-x    2 admin    root             0 Jul 10 04:03 ehci_hcd 
 +drwxr-xr-x    2 admin    root             0 Jul 10 04:03 ohci_hcd 
 +drwxr-xr-x    2 admin    root             0 Jul 10 04:03 pcieport 
 +drwxr-xr-x    2 admin    root             0 Jul 10 04:03 wl 
 +# cd /sys/devices/ 
 +# ls 
 +pci0000:00  pci0000:01  platform    system      virtual 
 +# cd /sys/module 
 +# ls 
 +8021q                   l2tp_core               pwrmngtd 
 +adsldd                  l2tp_ppp                qcserial 
 +bcm_bpm                 nciTMSkmod              rcutree 
 +bcm_enet                nf_conntrack            sch_htb 
 +bcm_ingqos              nf_conntrack_ftp        scsi_mod 
 +bcmarl                  nf_conntrack_h323       spurious 
 +bcmfap                  nf_conntrack_ipv4       tcp_cubic 
 +bcmvlan                 nf_conntrack_irc        ubi 
 +bcmxtmcfg               nf_conntrack_pptp       ubifs 
 +block                   nf_conntrack_proto_gre  usb_storage 
 +bridge                  nf_conntrack_rtsp       usb_wwan 
 +chipinfo                nf_conntrack_tftp       usbcore 
 +dect                    nf_defrag_ipv4          usblp 
 +dectshim                nf_nat                  usbserial 
 +ehci_hcd                nf_nat_ftp              wl 
 +endpointdd              nf_nat_h323             xt_DSCP 
 +fuse                    nf_nat_irc              xt_LOG 
 +ip6_tables              nf_nat_pptp             xt_SKIPLOG 
 +ip6table_mangle         nf_nat_proto_gre        xt_TCPMSS 
 +ip_gre                  nf_nat_rtsp             xt_conntrack 
 +ip_tables               nf_nat_tftp             xt_dscp 
 +ipt_MASQUERADE          nfnetlink               xt_limit 
 +ipt_REDIRECT            nfnetlink_queue         xt_mac 
 +iptable_filter          option                  xt_mark 
 +iptable_mangle          p8021ag                 xt_multiport 
 +iptable_nat             pcie_aspm               xt_state 
 +ipv6                    pcmshim                 xz_dec 
 +ipw                     pktflow 
 +kernel                  printk
  
-===== Boot OpenWrt in RAM ======+# cat /proc/iomem 
 +00000000-07ecdfff : System RAM 
 +  00010000-003f111f : Kernel code 
 +  003f1120-004e897f : Kernel data 
 +10000200-10000383 : brcmnand 
 +10002500-100025ff : ehci_hcd 
 +10002600-100026ff : ohci_hcd 
 +11000000-11efffff : bcm63xx pcie memory space 
 +a0f00000-a0ffffff : bcm63xx pci memory space 
 +# cat /proc/ioports 
 +a2000000-a200ffff : bcm63xx pci IO space 
 +</nowiki></WRAP>
  
-  - Open the case and connect serial console to PC. +The following came from the ''lspci'' command on OpenWRT port (old target bcm63xx): 
-  Power on the device, keep pressing any key until you see the CFE prompt appears. +<WRAP bootlog><nowiki> 
-  Set the IPv4netmaskand gateway of your PC to ''192.168.1.100''''255.255.255.0'', and ''192.168.1.1'', respectively. +root@OpenWrt:/sys/class/gpio# lspci -
-  Connect any of the router LAN port to your PC. +00:00.0 PCI bridge: Broadcom Incand subsidiaries Device 6326 (rev 80) (prog-if 00 [Normal decode]) 
-  Setup a TFTP server on your PC to serve the '''xxx-initramfs.elf''' OpenWrt image. +        Flags: fast devselIRQ 48 
-  - Use command ''r xxx-initramfs.elf'' to boot an OpenWrt instance in RAM.+        Bus: primary=00secondary=01subordinate=01, sec-latency=
 +        I/O behind bridge: 00000000-00000fff [size=4K] 
 +        Memory behind bridge: [disabled] 
 +        Prefetchable memory behind bridge: [disabled] 
 +        Capabilities: [48] Power Management version 3 
 +        Capabilities: [ac] Express Root Port (Slot-), MSI 00 
 +        Capabilities: [100] Advanced Error Reporting 
 +        Kernel driver in use: pcieport 
 +lspci: Unable to load libkmod resources: error -12
  
-Use this command to safely browse the stock firmware files:+root@OpenWrt:/sys/bus/pci# ls devices/ -al 
 +drwxr-xr-x    2 root     root             0 Jan  1  1970 . 
 +drwxr-xr-x    5 root     root             0 Jan  1  1970 .. 
 +lrwxrwxrwx    1 root     root             0 Jan  1  1970 0000:00:00.0 -> ../../../devices/pci0000:00/0000:00:00.0
  
-''mount -t jffs2 -o ro /dev/mtdblock1 /mnt/mtd1/''+root@OpenWrt:/sys/bus/pci# ls drivers-al 
 +drwxr-xr-x    6 root     root             0 Jul 11 10:51 . 
 +drwxr-xr-x    5 root     root             0 Jan  1  1970 .. 
 +drwxr-xr-x    2 root     root             0 Jul 11 10:52 b43-pci-bridge 
 +drwxr-xr-x    2 root     root             0 Jul 11 10:52 bcma-pci-bridge 
 +drwxr-xr-x    2 root     root             0 Jul 11 10:52 brcmfmac 
 +drwxr-xr-x    2 root     root             0 Jul 11 10:52 pcieport
  
 +root@OpenWrt:/# cat /proc/iomem
 +00000000-07ffffff : System RAM
 +  00010000-006327f3 : Kernel code
 +  006327f4-00731c3f : Kernel data
 +  01610000-01644757 : Kernel bss
 +100000b0-100000bf : 10000200.nand nand-int-base
 +100000c0-100000c7 : 100000c0.pin-controller dirout
 +100000c8-100000cf : 100000c0.pin-controller dat
 +100000d0-100000d3 : 100000c0.pin-controller led
 +100000d8-100000db : 100000c0.pin-controller mode
 +100000dc-100000df : 100000c0.pin-controller ctrl
 +100000f8-100000fb : 100000c0.pin-controller basemode
 +10000180-10000197 : 10000180.serial serial@10000180
 +10000200-1000037f : 10000200.nand nand
 +10000600-100007ff : 10000200.nand nand-cache
 +10000800-10000f0b : 10000800.spi spi@10000800
 +10001000-100015ff : 10001000.spi spi@10001000
 +10001900-10001923 : 10001900.led-controller led-controller@10001900
 +11000000-11efffff : bcm63xx PCIe memory space
 +b000009c-b00000a7 : bcm63xx-wdt
 +b0002500-b00025ff : ehci-platform
 +  b0002500-b00025ff : ehci-platform ehci-platform
 +b0002600-b00026ff : ohci-platform
 +  b0002600-b00026ff : ohci-platform ohci-platform
 +b000d800-b000d8ff : bcm63xx_enet_shared.0
 +  b000d800-b000d8ff : bcm63xx_enet_shared.0 bcm63xx_enet_shared.0
 +b000da00-b000dbff : bcm63xx_enet_shared.0
 +  b000da00-b000dbff : bcm63xx_enet_shared.0 bcm63xx_enet_shared.0
 +b000dc00-b000ddff : bcm63xx_enet_shared.0
 +  b000dc00-b000ddff : bcm63xx_enet_shared.0 bcm63xx_enet_shared.0
 +b0700000-b070ffff : bcm63xx_enetsw.0
 +</nowiki></WRAP>
  
-Installation reference: 
  
-[[:toh:huawei:hg253s_v2]] 
 ===== Bootlogs ===== ===== Bootlogs =====
 ==== OEM bootlog ==== ==== OEM bootlog ====
Line 869: Line 1079:
 ==== OpenWrt bootlog ==== ==== OpenWrt bootlog ====
 <WRAP bootlog> <WRAP bootlog>
-<nowiki>COPY HERE THE BOOTLOG ONCE OPENWRT IS INSTALLED AND RUNNING</nowiki>+<nowiki>HELO 
 +CPUI 
 +L1CI 
 +HELO 
 +CPUI 
 +L1CI 
 +4.1404-1.0.38-117.113 
 +DRAM 
 +---- 
 +PHYS 
 +STRF 
 +400H 
 +PHYE 
 +DDR3 
 +SIZ4 
 +SIZ3 
 +SIZ2 
 +DINT 
 +USYN 
 +LSYN 
 +MFAS 
 +LMBE 
 +RACE 
 +PASS 
 +---- 
 +ZBSS 
 +CODE 
 +DATA 
 +L12F 
 +MAIN 
 +FPS0 
 +BT00 
 +0001 
 +STOP 
 +NAN9 
 +NAN3 
 +RFS1 
 +NAN5 
 + 
 +Base: 4.14_04 
 +CFE version 8.353.1 for BCM963268 (32bit,SP,BE) 
 +Build Date: Sat Jul 23 18:46:20 CST 2016 (cookiechen@SZ01007.DONGGUAN.CN) 
 +Copyright (C) 2005-2011 SAGEM Corporation. 
 + 
 +Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz 
 +Main Thread: TP0 
 +Memory Test Passed 
 +Total Memory: 134217728 bytes (128MB) 
 +Boot Address: 0xb8000000 
 + 
 +NAND flash device: , id 0xeff1 block 128KB size 131072KB 
 +External switch id = 53125 
 +Board IP address                  : 192.168.1.1:ffffff00 
 +Host IP address                   : 192.168.1.100 
 +Gateway IP address                : 
 +Run from flash/host/tftp (f/h/c)  : f 
 +Default host run file name        : vmlinux 
 +Default host flash file name      : bcm963xx_fs_kernel 
 +Boot delay (0-9 seconds)          : 1 
 +Boot image (0=latest, 1=previous) : 0 
 +Default host ramdisk file name    : 
 +Default ramdisk store address     : 
 +Board Id (0-38)                   : F@ST3864V2 
 +Number of MAC Addresses (1-32)    : 11 
 +Base MAC Address                  : d8:d7:75:13:03:72 
 +PSI Size (1-64) KBytes            : 40 
 +Enable Backup PSI [0|1]           : 0 
 +System Log Size (0-256) KBytes    : 0 
 +Auxillary File System Size Percent: 0 
 +Main Thread Number [0|1]          : 0 
 +GPON Serial Number                : "BRCM12345678" 
 +GPON Password                     : "          " 
 +Voice Board Configuration (0-0)   : SI32261 
 + 
 +*** Press any key to stop auto run (1 seconds) *** 
 +Auto run second count down: 0 
 +Booting from latest image (0xb8020000) ... 
 +Decompression OK! 
 +Entry at 0x81000000 
 +Closing network. 
 +Disabling Switch ports. 
 +Flushing Receive Buffers... 
 +179 buffers found 
 +Closing DMA Channels 
 +Starting program at 0x81000000 
 +[    0.000000] Linux version 6.1.77 (rikka@zbook14g2) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r25136-6497cdba09) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Sat Feb 17 15:28:34 2024 
 +[    0.000000] CPU0 revision is: 0002a080 (Broadcom BMIPS4350) 
 +[    0.000000] MIPS: machine is Sagemcom F@st3864OP 
 +[    0.000000] 128MB of RAM installed 
 +[    0.000000] earlycon: bcm63xx_uart0 at MMIO 0x10000180 (options '115200n8'
 +[    0.000000] printk: bootconsole [bcm63xx_uart0] enabled 
 +[    0.000000] Initrd not found or empty - disabling initrd 
 +[    0.000000] Reserving 0KB of memory at 4194303KB for kdump 
 +[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. 
 +[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes 
 +[    0.000000] Zone ranges: 
 +[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff] 
 +[    0.000000] Movable zone start for each node 
 +[    0.000000] Early memory node ranges 
 +[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff] 
 +[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] 
 +[    0.000000] percpu: Embedded 11 pages/cpu s13984 r8192 d22880 u45056 
 +[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480 
 +[    0.000000] Kernel command line: earlycon 
 +[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear) 
 +[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear) 
 +[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off 
 +[    0.000000] Memory: 118692K/131072K available (7298K kernel code, 619K rwdata, 1560K rodata, 1268K init, 219K bss, 12380K reserved, 0K cma-reserved) 
 +[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 
 +[    0.000000] rcu: Hierarchical RCU implementation. 
 +[    0.000000]  Tracing variant of Tasks RCU enabled. 
 +[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. 
 +[    0.000000] NR_IRQS: 256 
 +[    0.000000] irq_bcm6345_l1: registered BCM6345 L1 intc (IRQs: 128) 
 +[    0.000000] irq_bcm6345_l1:   CPU0 (irq = 2) 
 +[    0.000000] irq_bcm6345_l1:   CPU1 (irq = 3) 
 +[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. 
 +[    0.000000] brcm,bcm63268 detected @ 400 MHz 
 +[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns 
 +[    0.000002] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns 
 +[    0.008233] Calibrating delay loop... 398.13 BogoMIPS (lpj=1990656) 
 +[    0.074649] pid_max: default: 32768 minimum: 301 
 +[    0.081602] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    0.089116] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    0.103942] cblist_init_generic: Setting adjustable number of callback queues. 
 +[    0.111407] cblist_init_generic: Setting shift to 1 and lim to 1. 
 +[    0.118387] rcu: Hierarchical SRCU implementation. 
 +[    0.123321] rcu:     Max phase no-delay instances is 1000. 
 +[    0.129982] smp: Bringing up secondary CPUs ... 
 +[    0.136376] SMP: Booting CPU1... 
 +[   11.676032] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. 
 +[   11.676070] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes 
 +[   11.676350] CPU1 revision is: 0002a080 (Broadcom BMIPS4350) 
 +[    1.136908] Synchronize counters for CPU 1: 
 +[    1.157622] SMP: CPU1 is running 
 +[    1.157641] done. 
 +[    1.167499] smp: Brought up 1 node, 2 CPUs 
 +[    1.182799] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns 
 +[    1.192985] futex hash table entries: 512 (order: 3, 32768 bytes, linear) 
 +[    1.200289] pinctrl core: initialized pinctrl subsystem 
 +[    1.208490] NET: Registered PF_NETLINK/PF_ROUTE protocol family 
 +[    1.249948] clocksource: Switched to clocksource MIPS 
 +[    1.258602] NET: Registered PF_INET protocol family 
 +[    1.264284] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) 
 +[    1.273552] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) 
 +[    1.282233] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) 
 +[    1.290223] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    1.298110] TCP bind hash table entries: 1024 (order: 2, 16384 bytes, linear) 
 +[    1.305554] TCP: Hash tables configured (established 1024 bind 1024) 
 +[    1.312446] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) 
 +[    1.319186] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) 
 +[    1.327040] NET: Registered PF_UNIX/PF_LOCAL protocol family 
 +[    1.333069] PCI: CLS 0 bytes, default 16 
 +[    1.343740] workingset: timestamp_bits=14 max_order=15 bucket_order=1 
 +[    1.361659] squashfs: version 4.0 (2009/01/31) Phillip Lougher 
 +[    1.367635] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. 
 +[    1.392697] bcm63xx-power-controller 1000184c.power-controller: registered 14 power domains 
 +[    1.403635] 10000180.serial: ttyS0 at MMIO 0x10000180 (irq = 8, base_baud = 1562500) is a bcm63xx_uart 
 +[    1.413350] printk: console [ttyS0] enabled 
 +[    1.413350] printk: console [ttyS0] enabled 
 +[    1.421939] printk: bootconsole [bcm63xx_uart0] disabled 
 +[    1.421939] printk: bootconsole [bcm63xx_uart0] disabled 
 +[    1.470366] bcm2835-rng 10002880.rng: hwrng registered 
 +[    1.480908] bcm6368_nand 10000200.nand: there is not valid maps for state default 
 +[    1.489784] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xf1 
 +[    1.496407] nand: Winbond W29N01HV 
 +[    1.499859] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 
 +[    1.507723] bcm6368_nand 10000200.nand: detected 128MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, Hamming ECC 
 +[    1.520298] Bad block table found at page 65472, version 0x01 
 +[    1.527554] Bad block table found at page 65408, version 0x01 
 +[    1.535429] 7 fixed-partitions partitions found on MTD device brcmnand.0 
 +[    1.542424] OF: Bad cell count for /ubus/nand@10000200/nandcs@0/partitions 
 +[    1.549495] OF: Bad cell count for /ubus/nand@10000200/nandcs@0/partitions 
 +[    1.557137] Creating 7 MTD partitions on "brcmnand.0": 
 +[    1.562496] 0x000000000000-0x000000020000 : "cferom_nvram" 
 +[    1.570911] OF: Bad cell count for /ubus/nand@10000200/nandcs@0/partitions 
 +[    1.578652] 0x000000020000-0x000003d80000 : "stock_rootfs" 
 +[    1.587062] 0x000003d80000-0x000007ae0000 : "stock_rootfs_update" 
 +[    1.596163] 0x000007ae0000-0x000007b00000 : "stock_hidden1" 
 +[    1.605038] 0x000007b00000-0x000007f00000 : "stock_data" 
 +[    1.612732] 0x000007f00000-0x000008000000 : "stock_hidden2" 
 +[    1.620827] 0x000000020000-0x000007ae0000 : "wfi" 
 +[    2.140021] random: crng init done 
 +[    2.264455] cferam: bootflag1=0 
 +[    2.421003] 5 bcm-wfi-split-fw partitions found on MTD device wfi 
 +[    2.427241] Creating 5 MTD partitions on "wfi": 
 +[    2.431953] 0x000000000000-0x000000040000 : "cferam" 
 +[    2.438771] 0x000000040000-0x000003d60000 : "firmware" 
 +[    2.446288] 0x000000040000-0x000000540000 : "kernel" 
 +[    2.453312] 0x000000540000-0x000003d60000 : "ubi" 
 +[    2.460471] 0x000003d60000-0x000007ac0000 : "img2" 
 +[    2.557541] bcm6368-mdio-mux 107000b0.mdio: Broadcom BCM6368 MDIO mux bus 
 +[    2.566013] bcm53xx mdio_mux-0.1:1e: found switch: BCM53125, rev 4 
 +[    2.572726] bcm53xx mdio_mux-0.1:1e: failed to register switch: -517 
 +[    2.580463] b53-switch 10700000.switch: found switch: BCM63268, rev 0 
 +[    2.589304] bcm6368-enetsw 1000d800.ethernet: mtd mac d8:d7:75:13:03:72 
 +[    2.711103] bcm6368-enetsw 1000d800.ethernet: eth0 at 0xb000d800, IRQ 0 
 +[    2.719799] bcm7038-wdt 1000009c.watchdog: Registered BCM7038 Watchdog 
 +[    2.729605] NET: Registered PF_INET6 protocol family 
 +[    2.738667] Segment Routing with IPv6 
 +[    2.742584] In-situ OAM (IOAM) with IPv6 
 +[    2.746758] NET: Registered PF_PACKET protocol family 
 +[    2.752654] 8021q: 802.1Q VLAN Support v1.8 
 +[    3.013139] registering PCI controller with io_map_base unset 
 +[    3.019372] PCI host bridge to bus 0000:00 
 +[    3.023635] pci_bus 0000:00: root bus resource [mem 0x11000000-0x11efffff] 
 +[    3.030727] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] 
 +[    3.038889] pci 0000:00:00.0: [14e4:6326] type 01 class 0x060400 
 +[    3.045164] pci 0000:00:00.0: PME# supported from D0 D3hot 
 +[    3.054116] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring 
 +[    3.062847] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 
 +[    3.069669] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 
 +[    3.076533] pci 0000:00:00.0: PCI bridge to [bus 01] 
 +[    3.082127] pcieport 0000:00:00.0: PME: Signaling with IRQ 40 
 +[    3.090810] bcm53xx mdio_mux-0.1:1e: found switch: BCM53125, rev 4 
 +[    3.097265] bcm53xx mdio_mux-0.1:1e: failed to register switch: -517 
 +[    3.104313] b53-switch 10700000.switch: found switch: BCM63268, rev 0 
 +[    3.251119] b53-switch 10700000.switch: Using legacy PHYLIB callbacks. Please migrate to PHYLINK! 
 +[    3.263184] b53-switch 10700000.switch wan (uninitialized): PHY [mdio_mux-0.0:04] driver [Generic PHY] (irq=POLL) 
 +[    3.280231] device eth0 entered promiscuous mode 
 +[    3.285102] DSA: tree 0 setup 
 +[    3.289359] bcm53xx mdio_mux-0.1:1e: found switch: BCM53125, rev 4 
 +[    3.466115] bcm53xx mdio_mux-0.1:1e: Using legacy PHYLIB callbacks. Please migrate to PHYLINK! 
 +[    3.477527] bcm53xx mdio_mux-0.1:1e: Configured port 8 for rgmii 
 +[    3.485252] bcm53xx mdio_mux-0.1:1e lan4 (uninitialized): PHY [dsa-1.0:01] driver [Generic PHY] (irq=POLL) 
 +[    3.499708] bcm53xx mdio_mux-0.1:1e lan3 (uninitialized): PHY [dsa-1.0:02] driver [Generic PHY] (irq=POLL) 
 +[    3.513283] bcm53xx mdio_mux-0.1:1e lan2 (uninitialized): PHY [dsa-1.0:03] driver [Generic PHY] (irq=POLL) 
 +[    3.526897] bcm53xx mdio_mux-0.1:1e lan1 (uninitialized): PHY [dsa-1.0:04] driver [Generic PHY] (irq=POLL) 
 +[    3.542205] device extsw entered promiscuous mode 
 +[    3.547256] DSA: tree 1 setup 
 +[    3.554341] UBI: auto-attach mtd10 
 +[    3.557847] ubi0: attaching mtd10 
 +[    4.104051] ubi0: scanning is finished 
 +[    4.128067] ubi0: attached mtd10 (name "ubi", size 56 MiB) 
 +[    4.133807] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes 
 +[    4.140880] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 
 +[    4.147833] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 
 +[    4.155020] ubi0: good PEBs: 449, bad PEBs: 0, corrupted PEBs: 0 
 +[    4.161197] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 
 +[    4.168620] ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 1708097443 
 +[    4.178042] ubi0: available PEBs: 0, total reserved PEBs: 449, PEBs reserved for bad PEB handling: 20 
 +[    4.187624] ubi0: background thread "ubi_bgt0d" started, PID 335 
 +[    4.196565] block ubiblock0_0: created from ubi0:0(rootfs) 
 +[    4.202317] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem 
 +[    4.218973] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. 
 +[    4.235256] Freeing unused kernel image (initmem) memory: 1268K 
 +[    4.241366] This architecture does not have kernel memory protection. 
 +[    4.247947] Run /sbin/init as init process 
 +[    5.156932] init: Console is alive 
 +[    5.161229] init: - watchdog - 
 +[    6.740766] kmodloader: loading kernel modules from /etc/modules-boot.d/
 +[    6.855812] usbcore: registered new interface driver usbfs 
 +[    6.861676] usbcore: registered new interface driver hub 
 +[    6.867267] usbcore: registered new device driver usb 
 +[    6.930031] ehci-platform 10002500.usb: EHCI Host Controller 
 +[    6.935874] ehci-platform 10002500.usb: new USB bus registered, assigned bus number 1 
 +[    6.944387] ehci-platform 10002500.usb: irq 10, io mem 0x10002500 
 +[    6.979992] ehci-platform 10002500.usb: USB 2.0 started, EHCI 1.00, overcurrent ignored 
 +[    6.990417] hub 1-0:1.0: USB hub found 
 +[    6.994374] hub 1-0:1.0: 2 ports detected 
 +[    7.015732] ohci-platform 10002600.usb: Generic Platform OHCI controller 
 +[    7.022807] ohci-platform 10002600.usb: new USB bus registered, assigned bus number 2 
 +[    7.031116] ohci-platform 10002600.usb: irq 11, io mem 0x10002600 
 +[    7.105798] hub 2-0:1.0: USB hub found 
 +[    7.109762] hub 2-0:1.0: 2 ports detected 
 +[    7.141968] kmodloader: done loading kernel modules from /etc/modules-boot.d/
 +[    7.160470] init: - preinit - 
 +[    9.265867] b53-switch 10700000.switch extsw: configuring for fixed/rgmii link mode 
 +[    9.273984] b53-switch 10700000.switch extsw: Link is Up - 1Gbps/Full - flow control off 
 +[    9.278973] bcm53xx mdio_mux-0.1:1e lan1: configuring for phy/gmii link mode 
 +[    9.290492] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready 
 +[    9.297247] IPv6: ADDRCONF(NETDEV_CHANGE): extsw: link becomes ready 
 +Press the [f] key and hit [enter] to enter failsafe mode 
 +Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level 
 +[   11.735417] UBIFS (ubi0:1): Mounting in unauthenticated mode 
 +[   11.741770] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 495 
 +[   11.827767] UBIFS (ubi0:1): recovery needed 
 +[   12.013190] UBIFS (ubi0:1): recovery completed 
 +[   12.018221] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data" 
 +[   12.026351] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes 
 +[   12.036562] UBIFS (ubi0:1): FS size: 47742976 bytes (45 MiB, 376 LEBs), max 386 LEBs, journal size 2412544 bytes (2 MiB, 19 LEBs) 
 +[   12.048592] UBIFS (ubi0:1): reserved for root: 2255018 bytes (2202 KiB) 
 +[   12.055387] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID CF6C009E-936B-4C3B-9972-991947625859, small LPT model 
 +[   12.073832] mount_root: switching to ubifs overlay 
 +[   12.101343] urandom-seed: Seeding with /etc/urandom.seed 
 +[   12.354120] procd: - early - 
 +[   12.357602] procd: - watchdog - 
 +[   13.158015] procd: - watchdog - 
 +[   13.162996] procd: - ubus - 
 +[   13.416171] procd: - init - 
 +Please press Enter to activate this console. 
 +[   14.889111] kmodloader: loading kernel modules from /etc/modules.d/
 +[   15.786339] Loading modules backported from Linux version v6.5-0-g2dde18cd1d8f 
 +[   15.793806] Backport generated by backports.git v5.15.92-1-56-g5fb2ccb6b9e8 
 +[   16.264590] PPP generic driver version 2.4.2 
 +[   16.272404] NET: Registered PF_PPPOX protocol family 
 +[   16.301618] Broadcom 43xx driver loaded [ Features: NL ] 
 +[   16.321953] kmodloader: done loading kernel modules from /etc/modules.d/
 +[   17.344711] urngd: v1.0.2 started. 
 +[   36.815112] b53-switch 10700000.switch extsw: Link is Down 
 +[   36.977978] b53-switch 10700000.switch extsw: configuring for fixed/rgmii link mode 
 +[   36.986223] b53-switch 10700000.switch extsw: Link is Up - 1Gbps/Full - flow control off 
 +[   36.994857] IPv6: ADDRCONF(NETDEV_CHANGE): extsw: link becomes ready 
 +[   37.012918] bcm53xx mdio_mux-0.1:1e lan1: configuring for phy/gmii link mode 
 +[   37.034539] switch: port 1(lan1) entered blocking state 
 +[   37.040112] switch: port 1(lan1) entered disabled state 
 +[   37.126262] device lan1 entered promiscuous mode 
 +[   37.710192] bcm53xx mdio_mux-0.1:1e lan2: configuring for phy/gmii link mode 
 +[   37.718045] 8021q: adding VLAN 0 to HW filter on device lan2 
 +[   37.793109] switch: port 2(lan2) entered blocking state 
 +[   37.798501] switch: port 2(lan2) entered disabled state 
 +[   37.829770] device lan2 entered promiscuous mode 
 +[   38.062224] bcm53xx mdio_mux-0.1:1e lan3: configuring for phy/gmii link mode 
 +[   38.070070] 8021q: adding VLAN 0 to HW filter on device lan3 
 +[   38.102888] switch: port 3(lan3) entered blocking state 
 +[   38.108279] switch: port 3(lan3) entered disabled state 
 +[   38.119725] device lan3 entered promiscuous mode 
 +[   38.332057] bcm53xx mdio_mux-0.1:1e lan4: configuring for phy/gmii link mode 
 +[   38.339677] 8021q: adding VLAN 0 to HW filter on device lan4 
 +[   38.372331] switch: port 4(lan4) entered blocking state 
 +[   38.377707] switch: port 4(lan4) entered disabled state 
 +[   38.388471] device lan4 entered promiscuous mode 
 +[   38.601601] b53-switch 10700000.switch wan: configuring for phy/gmii link mode 
 +[   38.631781] switch: port 5(wan) entered blocking state 
 +[   38.637068] switch: port 5(wan) entered disabled state 
 +[   38.840165] device wan entered promiscuous mode 
 +[   41.870595] bcm53xx mdio_mux-0.1:1e lan2: Link is Up - 1Gbps/Full - flow control off 
 +[   41.878638] switch: port 2(lan2) entered blocking state 
 +[   41.884065] switch: port 2(lan2) entered forwarding state 
 +[   41.899154] IPv6: ADDRCONF(NETDEV_CHANGE): switch: link becomes ready 
 +[   41.920312] IPv6: ADDRCONF(NETDEV_CHANGE): switch.1: link becomes ready 
 +[   41.927821] IPv6: ADDRCONF(NETDEV_CHANGE): switch.2: link becomes ready 
 + 
 + 
 + 
 +BusyBox v1.36.1 (2024-02-17 15:28:34 UTC) built-in shell (ash) 
 + 
 +  _______                     ________        __ 
 +       |.-----.-----.-----.|  |  |  |.----.|  |_ 
 +     ||  _  |  -__|     ||  |  |  ||   _||   _| 
 + |_______||   __|_____|__|__||________||__|  |____| 
 +          |__| W I R E L E S S   F R E E D O M 
 + ----------------------------------------------------- 
 + OpenWrt SNAPSHOT, r25136+1-6497cdba09 
 + ----------------------------------------------------- 
 +=== WARNING! ===================================== 
 +There is no root password defined on this device! 
 +Use the "passwd" command to set up a new password 
 +in order to prevent unauthorized SSH logins. 
 +-------------------------------------------------- 
 +root@OpenWrt:/# 
 +</nowiki>
 </WRAP>\\ </WRAP>\\
  
 ===== Notes ===== ===== Notes =====
 +Source code:
  
-https://forum.openwrt.org/t/help-with-cfe-on-bcm63168d0-based-actiontec-f2250/85240/13+https://github.com/rikka0w0/openwrt-fast3864op/tree/fast3864_master_20240315
  
-https://forum.openwrt.org/t/help-with-cfe-on-bcm63168d0-based-actiontec-f2250/85240/12+Before the cferam.000 is merged into ''https://github.com/openwrt/bcm63xx-cfe.git'', we need to supply our cferam.000 manually:
  
 +'' mkdir -p build_dir/target-mips_mips32_musl/linux-bmips_bcm63268/bcm63xx-cfe/sagem,fast-3864-op''
  
-Before the cferam.000 is merged into ''https://github.com/openwrt/bcm63xx-cfe.git''we need to supply our cferam.000 manually:+'' wget -O build_dir/target-mips_mips32_musl/linux-bmips_bcm63268/bcm63xx-cfe/sagem,fast-3864-op/cferam.000 https://github.com/openwrt/bcm63xx-cfe/raw/0b956812e3564920905e4185d1cb17b3a8819b43/sagem,fast-3864-op/cferam.000'' 
 + 
 + 
 + 
 +https://forum.openwrt.org/t/help-with-cfe-on-bcm63168d0-based-actiontec-f2250/85240/13 
 + 
 +https://forum.openwrt.org/t/help-with-cfe-on-bcm63168d0-based-actiontec-f2250/85240/12
  
-'' mkdir -p build_dir/target-mips_mips32_musl/linux-bmips_bcm63268/bcm63xx-cfe/sagem,fast-3864op'' +https://github.com/openwrt/openwrt/issues/10313
-'' cp -v xxx/cferam.000 build_dir/target-mips_mips32_musl/linux-bmips_bcm63268/bcm63xx-cfe/sagem,fast-3864op''+
 ===== Tags ===== ===== Tags =====
 [[meta:tags|How to add tags]] [[meta:tags|How to add tags]]
-{{tag>EXAMPLETAG unsupported}}+{{tag>MIPS BCM63168 BCM63268 128nand 128ram wip unsupported}}
  • Last modified: 2024/10/19 06:56
  • by rikka0w0