Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| inbox:toh:sagem:f_st3864op [2024/02/20 16:40] – [Serial] rikka0w0 | inbox:toh:sagem:f_st3864op [2024/10/19 06:51] – [Photos] rikka0w0 | ||
|---|---|---|---|
| Line 176: | Line 176: | ||
| * [[https:// | * [[https:// | ||
| * [[https:// | * [[https:// | ||
| + | |||
| + | CPU Pinout: | ||
| + | [[: | ||
| ==== Network ==== | ==== Network ==== | ||
| Line 183: | Line 186: | ||
| * CFE reports the external switch (BCM53124SKMMLG) as [[https:// | * CFE reports the external switch (BCM53124SKMMLG) as [[https:// | ||
| - | ===== Flash Layout ===== | + | ==== Serial |
| + | -> [[docs: | ||
| + | There is an unsoldered 4-pin header (J708) near the power jack, which provides an interactive console. You can interrupt the boot process and enter the CFE bootloader console by pressing any key repeatedly, or wait for it boots and then login to the management console using the following credentials: | ||
| + | |||
| + | ^ Credential of an Australian Optus OEM F@ST3864OP || | ||
| + | ^ user | admin | | ||
| + | ^ password | 0ptU%1M5 | | ||
| + | |||
| + | If the above does not work, then try the other keys: | ||
| + | |||
| + | https:// | ||
| + | |||
| + | The management console offers a very limited set of commands, the sh command will drop you to a BusyBox Linux shell. | ||
| + | |||
| + | ^ Serial parameters for Sagem F@ST3864OP || | ||
| + | ^ Baudrate | 115200 | | ||
| + | ^ Setup| 8N1 | | ||
| + | ^ Voltage | 3.3V TTL| | ||
| + | |||
| + | ==== LEDs and buttons ==== | ||
| + | There are three types of LEDs on this device: | ||
| + | - Connected to a serial LED driver which then drives up to 8 LEDs via a 74HC164D. | ||
| + | - Connected to a SoC pin and controlled by a hardware LED control register. | ||
| + | - Connected to a SoC pin and controlled by Linux via gpio-leds. | ||
| + | |||
| + | LED and Button connections: | ||
| + | * WAN Port: Yellow(460+6, | ||
| + | * WLAN Led (D12): (460+4, gpio36) Logic XOR (460+5, gpio37), this is weird! | ||
| + | * Internet Led (D17): Green(480+8, | ||
| + | * DSL Bonding Led (D17): Green(480+9, | ||
| + | * Power Led (D15): Green(480+20, | ||
| + | * DSL (D7): Green(74HC164D@Q3) | ||
| + | * FXS (D11, Foreign Exchange Station, the phone ports, not to be confused with the xDSL port): Green(74HC164D@Q4), | ||
| + | * WPS Led (D13): Green(74HC164D@Q0), | ||
| + | * Reset button (SW5): (460+0, gpio32) | ||
| + | * WPS button (SW3): (460+1, gpio33) | ||
| + | * WLAN button (SW2): (460+2, gpio34) | ||
| + | * Some LEDs are driven by 74HC164D: | ||
| + | * Clock (CP) = gpio0 (/ | ||
| + | * DSA (Data input) = gpio1 (/ | ||
| + | * DSB (AND with DSA), MR(Output Async Reset) are pulled high. | ||
| + | |||
| + | ===== Flash Layout ===== | ||
| + | Stock firmware dump: | ||
| + | https:// | ||
| ==== Stock ==== | ==== Stock ==== | ||
| From OEM Bootlog: | From OEM Bootlog: | ||
| Line 201: | Line 248: | ||
| ^ F@ST3864OP Flash Layout | ^ F@ST3864OP Flash Layout | ||
| ^ Hardware | ^ Hardware | ||
| - | ^ Stock Label | **// | + | ^ Stock Label | **// |
| ^ Stock mtd device name | mtd3 | ^ Stock mtd device name | mtd3 | ||
| | Start | 0x0000000 | | Start | 0x0000000 | ||
| Line 233: | Line 280: | ||
| </ | </ | ||
| ==== Photos ==== | ==== Photos ==== | ||
| - | /* =====>>>>> | + | === PCB === |
| - | /* When uploading photos, **name them** intelligently. Nobody knows what 20100930_000602.jpg is! */ | + | {{:media: |
| - | /* e.g. {{:media:yourbrand:yourbrand_yourmodel_front.jpg? | + | {{:media:sagem:sagem_f_st3864_back_pcb.jpg? |
| - | /* Thanks, your wiki administration - Oct. 2015 */ | + | ==== Opening the case ==== |
| - | **Insert photo of front of the casing** | + | <WRAP BOX> |
| + | FIXME //Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, ...// | ||
| + | </ | ||
| - | **Insert photo of back of the casing** | ||
| - | **Insert photo of backside label** | ||
| - | **Insert photo of PCB** | ||
| - | ==== Opening the case ==== | ||
| - | <WRAP BOX> | + | ===== Hardware Mods ===== |
| - | FIXME //Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, screws, ...// | + | This may apply: |
| - | </ | + | [[: |
| + | ==== Spare SPI Flash ==== | ||
| + | There' | ||
| + | <WRAP bootlog>< | ||
| + | status = " | ||
| - | ==== LEDs and buttons ==== | + | mydev@0{ |
| - | There are three types of LEDs on this device: | + | compatible |
| - | - Connected to a serial LED driver | + | reg = < |
| - | - Connected | + | spi-max-frequency |
| - | - Connected to a SoC pin and controlled by Linux via gpio-leds. | + | }; |
| + | };</ | ||
| + | To use the '' | ||
| - | LED and Button connections: | + | The SPI Flash can be accessed with '' |
| - | * WAN Port: Yellow(460+6, gpio38), Green(460+7, | + | |
| - | * WLAN Led (D12): (460+4, gpio36) Logic XOR (460+5, gpio37), this is weird! | + | <WRAP bootlog>< |
| - | * Internet Led (D17): Green(480+8, | + | flashrom v1.2 on Linux 5.4.188 |
| - | * DSL Bonding Led (D17): Green(480+9, | + | flashrom is free software, get the source code at https:// |
| - | * Power Led (D15): Green(480+20, | + | |
| - | * DSL (D7): Green(74HC164D@Q3) | + | Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns). |
| - | * FXS (D11, Foreign Exchange Station, the phone ports, not to be confused with the xDSL port): Green(74HC164D@Q4), | + | Using default 2000kHz clock. Use ' |
| - | * WPS Led (D13): Green(74HC164D@Q0), | + | Found Winbond flash chip " |
| - | * Reset button | + | No operations were specified. |
| - | * WPS button (SW3): (460+1, gpio33) | + | |
| - | * WLAN button | + | root@OpenWrt:/# echo -n -e \\x9F\\xFF\\xFF\\xFF | spi-pipe -d /dev/spidev1.0 -b4 -n1 | hexdump -C |
| - | * Some LEDs are driven by 74HC164D: | + | 00000000 |
| - | * Clock (CP) = gpio0 (/sys/class/gpio/ | + | 00000004< |
| - | | + | |
| - | * DSB (AND with DSA), MR(Output Async Reset) are pulled high. | + | |
| ==== PCIe ==== | ==== PCIe ==== | ||
| Line 406: | Line 455: | ||
| - | ===== Hardware Mods ===== | ||
| - | This may apply: | ||
| - | [[: | ||
| - | |||
| - | CPU Pinout: | ||
| - | [[: | ||
| - | |||
| - | ==== Spare SPI Flash ==== | ||
| - | |||
| - | There' | ||
| - | |||
| - | <WRAP bootlog>< | ||
| - | flashrom v1.2 on Linux 5.4.188 (mips) | ||
| - | flashrom is free software, get the source code at https:// | ||
| - | |||
| - | Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns). | ||
| - | Using default 2000kHz clock. Use ' | ||
| - | Found Winbond flash chip " | ||
| - | No operations were specified. | ||
| - | |||
| - | root@OpenWrt:/# | ||
| - | 00000000 | ||
| - | 00000004</ | ||
| ===== Bootlogs ===== | ===== Bootlogs ===== | ||
| ==== OEM bootlog ==== | ==== OEM bootlog ==== | ||
| Line 1410: | Line 1436: | ||
| Source code: | Source code: | ||
| - | https:// | + | https:// |
| Before the cferam.000 is merged into '' | Before the cferam.000 is merged into '' | ||