Arcadyan VRV9510KWAC23 (Livebox Next)
The Arcadyan VRV9510KWAC23 (aka Livebox Next or Livebox 2.2) was a wifi router mainly distributed by spanish ISP Orange and Jazztel to their customers. There are two board revisions: 1-A-LT and A-LT. Differences between this boards revisions are minimal.
Supported Versions
Hardware Highlights
Installation
Installing OpenWrt - BRNBoot Recovery web interface (easy)
Prerequisites:
- OpenWRT initramfs (it's the file under the Factory snapshot link in the table above)
- OpenWRT sysupgrade image
We'll need to get access to the OEM recovery web interface.
- Connect an ethernet cable to the GE4 port of the router (the closest one to the phone ports) and your computer. On your PC, set a static IP address
192.168.1.2and gateway192.168.1.1for the Ethernet adapter. - While holding
RESETandWPSbuttons, power on the router. Release the buttons after 10 seconds. - Wait a few minutes until the recovery boots, and access its web interface at
http://192.168.1.1. PIN Code is4%dfsdiu*9DI!3Ciu^&
- Select
Bootloadas Update Target on the menu. Select theu-boot.ltq.lzo.nandsplpreviously downloaded and click theAPPLYbutton to flash the bootloader.
WARNING: The web interface won't notify you when the process is finished. To be sure the flashing process has finished, wait 2-3 minutes to proceed. Also, we are flashing a critical part of the firmware, so it's highly recommended to check the file integrity by comparing the MD5 hash of the U-Boot file.
- After a few minutes, power off your router.
- Set up a TFTP Server on your PC (you can use Tftpd if you are using Windows, or tftpd-hpa if you are in Linux). Rename the OpenWrt initramfs image to
rescue.binand place it in your TFTP directory.- If the router won't load the image, try powering on the router while pressing Service button (a blue LED should turn on). This mechanism may be helpful in case the router gets bricked. Learn more about this recovery mechanism in TFTP recovery mechanism
- Make sure the ethernet cable is connected to the GE4 port of the router (the closest one to the phone ports), and power on the router. A blue LED should turn on, indicating that the device is requesting an image.
- Wait until OpenWrt boots up (this may take a few minutes).
- Flash the OpenWrt sysupgrade image using the LuCI interface at
System > Backup/Flash Firmware. - Wait until the image is flashed. The router will reboot itself. You now have fully installed OpenWrt on your device.
Installing OpenWrt - Serial Console / UART
Prerequisites:
- U-Boot RAM: u-boot.asc
- OpenWrt initramfs image: openwrt-lantiq-xrx200-arcadyan_vrv9510kwac23-initramfs-kernel.bin
- OpenWrt squashfs image: openwrt-lantiq-xrx200-arcadyan_vrv9510kwac23-squashfs-sysupgrade.bin
1. Launching U-Boot via UART
This device comes with brnboot bootloader which is password protected. Password is !2^c&s*b (MD5 encrypted: 8c9922b21a3ff9d78f50f32c95963fd2). Despite knowing the password, we don't need that as we can access UART mode.
Connect a ethernet cable in the GE4 port of the router (the closest one to the phone ports) and your computer. Set a static IP address “192.168.1.2” and gateway “192.168.1.1” for your Ethernet adapter.
You will need to setup a TFTP server to send/receive images from/to the router. You can use TFTPD64 if you are using Windows or tftpd-hpa if you are using Linux.
Prepare the serial console and follow one of the methods described in Bootstrap/UART mode to get into UART mode.
ROM VER: 1.1.4 CFG 02 UART
Upload the U-Boot RAM image using your prefered serial console tool (Dump file/Send file option). This will take a minute or so. Once the upload is completed, you will see U-Boot launched
U-Boot 2013.10-openwrt4 (Dec 06 2022 - 22:36:13) VRV9510KWAC23
Board: Arcadyan VRV9510KWAC23
SoC: Lantiq VRX288 v1.2
CPU: 125 MHz
IO: 125 MHz
BUS: 125 MHz
BOOT: UART w/o EEPROM
DRAM: 256 MiB
NAND: 128 MiB
Using default environment
In: serial
Out: serial
Err: serial
Net: ltq-eth
VRV9510KWAC23 #
2. Performing a backup (optional)
Arcadyan has not provided a OEM firmware for this device, so if you want to go back to the OEM firmware in the future, performing a backup is mandatory. Make sure you give writing permissions to the server so the backup can be stored on your machine. Run the following commands
nand read 0x81000000 0x0 0x7f80000 tftpput 0x81000000 0x7f80000 arcadyan-VRV9510KWAC23-backup.bin
VRV9510KWAC23 # nand read 0x81000000 0x0 0x1700000
NAND read: device 0 offset 0x0, size 0x1700000
Skipping bad block 0x006c0000
Skipping bad block 0x02920000
Skipping bad block 0x06580000
133693440 bytes read: OK
VRV9510KWAC23 # tftpput 0x81000000 0x1700000 arcadyan-VRV9510KWAC23-backup.bin
ltq_phy: addr 0, link 1, speed 100, duplex 1
ltq_phy: addr 1, link 0, speed 10, duplex 0
ltq_phy: addr 17, link 0, speed 100, duplex 0
ltq_phy: addr 19, link 0, speed 100, duplex 0
ltq_phy: addr 5, link 0, speed 10, duplex 0
Using ltq-eth device
TFTP to server 192.168.1.2; our IP address is 192.168.1.1
Filename 'arcadyan-VRV9510KWAC23-backup.bin'.
Save address: 0x81000000
Save size: 0x1700000
Saving: ################################################################
#################################################################
###############
<deleted lines>
#################################################################
###################
1.8 MiB/s
done
Bytes transferred = 133693440 (24117248 hex)
VRV9510KWAC23 #
This process may take several minutes. When the process is finished, you will have a file named arcadyan-VRV9510KWAC23-backup.bin. I recomend performing a second backup, then compare the files to make sure the backup is correct.
3. Replacing the bootloader
We will replace BRNboot bootloader with U-Boot, so we will be able to control the boot configuration of our router.
Copy the u-boot.ltq.lzo.nandspl image to your TFTP server directory. Upload this image to the router by typing
tftpboot u-boot.ltq.lzo.nandspl
VRV9510KWAC23 # tftpboot u-boot.ltq.lzo.nandspl ltq_phy: addr 0, link 1, speed 100, duplex 1 ltq_phy: addr 1, link 0, speed 10, duplex 0 ltq_phy: addr 17, link 0, speed 100, duplex 0 ltq_phy: addr 19, link 0, speed 100, duplex 0 ltq_phy: addr 5, link 0, speed 10, duplex 0 Using ltq-eth device TFTP from server 192.168.2.2; our IP address is 192.168.2.1 Filename 'u-boot.ltq.lzo.nandspl'. Load address: 0x81000000 Loading: ######################### done Bytes transferred = 354728 (569a8 hex)
Type the following code to erase the NAND:
nand erase 0x0 0x16e0000
NAND erase.chip: device 0 whole chip Skipping bad block at 0x006c0000 OK
Flash the bootloader into the nand by typing
nand write $fileaddr 0 $filesize
NAND write: device 0 offset 0x0, size 0x569a8 354728 bytes written: OK
4. Installing OpenWrt
Power off your router. Rename the OpenWrt initramfs image to rescue.bin and place it in your TFTP directory.
Power on your router. On the first boot, a blue led will turn on, and the bootloader will perform some nand read/write operations to move the boradconfig partition. After that, the bootloader will request the rescue.bin file and run it.
ROM VER: 1.1.4
CFG 06
NAND
NAND Read OK
U-Boot SPL 2014.07-g2530d1beed-dirty (Nov 06 2023 - 23:49:24)
SPL: applying tuned DDR SDRAM settings
MEM: DDR Echo DLL delay: 13/13
MEM: DDR Write DQS delay: 66/66
MEM: DDR Read DQS delay: 1f/1f
SPL: loading U-Boot to RAM
SPL: checking U-Boot image
SPL: decompressing U-Boot with LZO
SPL: jumping to U-Boot
U-Boot 2014.07-g2530d1beed-dirty (Nov 06 2023 - 23:49:24)VRV9510KWAC
Board: Arcadyan VRV9510KWAC
SoC: Lantiq VRX288 v1.2
CPU: 500 MHz
IO: 250 MHz
BUS: 250 MHz
BOOT: NAND
DRAM: 256 MiB
NAND: 128 MiB
In: serial
Out: serial
Err: serial
Net: ltq-eth
Hit any key to stop autoboot: 3 2
ROM VER: 1.1.4
CFG 06
NAND
NAND Read OK
U-Boot SPL 2014.07-g2530d1beed-dirty (Nov 06 2023 - 23:49:24)
SPL: applying tuned DDR SDRAM settings
MEM: DDR Echo DLL delay: 13/13
MEM: DDR Write DQS delay: 66/66
MEM: DDR Read DQS delay: 1f/1f
SPL: loading U-Boot to RAM
SPL: checking U-Boot image
SPL: decompressing U-Boot with LZO
SPL: jumping to U-Boot
U-Boot 2014.07-g2530d1beed-dirty (Nov 06 2023 - 23:49:24)VRV9510KWAC
Board: Arcadyan VRV9510KWAC
SoC: Lantiq VRX288 v1.2
CPU: 500 MHz
IO: 250 MHz
BUS: 250 MHz
BOOT: NAND
DRAM: 256 MiB
NAND: 128 MiB
In: serial
Out: serial
Err: serial
Net: ltq-eth
Hit any key to stop autoboot: 3 2 1 0
NAND read: device 0 offset 0x0, size 0x16e1000
Skipping bad block 0x006c0000
23990272 bytes read: OK
NAND erase: device 0 offset 0x7ea0000, size 0x1000
Erasing at 0x7ea0000 -- 100% complete.
OK
NAND write: device 0 offset 0x7ea0000, size 0x1000
4096 bytes written: OK
Saving Environment to NAND...
Erasing NAND...
Erasing at 0x80000 -- 100% complete.
Writing to NAND... OK
Waiting for PHY link (prio 0)
Using PHY at addr 5, speed 1000, duplex 1
Using ltq-eth device
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename 'rescue.bin'.
Load address: 0x81000000
Loading: *#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#############################################
7.5 MiB/s
done
Bytes transferred = 7339687 (6ffea7 hex)
## Booting kernel from Legacy Image at 81000000 ...
Image Name: MIPS OpenWrt Linux-5.15.132
Created: 2023-09-24 11:09:16 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 7339623 Bytes = 7 MiB
Load Address: 80002000
Entry Point: 80002000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
[ 0.000000] Linux version 5.15.132 (danie@DANIEL-ASUS) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24008-76e419288f) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Sun Sep 24 11:09:16 2023
[ 0.000000] SoC: xRX200 rev 1.2
[ 0.000000] printk: bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019556 (MIPS 34Kc)
<deleted lines>
BusyBox v1.36.1 (2023-09-24 11:09:16 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt SNAPSHOT, r24008-76e419288f
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#
The router will launch OpenWrt. It may take up to 3 minutes to be ready (Power LED should be fixed when finish booting). Once it's ready, open your browser and go to 192.168.1.1 to open LuCi interface. Go to System > Flash Firmware to flash the openwrt-lantiq-xrx200-arcadyan_vrv9510kwac23-squashfs-sysupgrade.bin image
Once the flash is complete, the router will reboot itself, and it should start OpenWRT normally. OpenWRT installation process is done.
Back to OEM Firmware
Since Arcaydan hasn't provided an official recovery image, you need to have a backup file to continue. Performing a backup
Prepare the the Serial. Turn on your router and press any key to stop U-Boot autoboot.
You will need to setup a TFTP server to upload the backup. You can use TFTP64 if you are using Windows or tftpd-hpa if you are using Linux. Once setup is done, upload your backup to the router and flash it by typing this commands:
tftpboot arcadyan-VRV9510KWAC23-backup.bin nand erase.chip nand write $fileaddr 0x0 $filesize
Reboot your router. You will now be on OEM firmware.
Recovering from brick
Please, first try failsafe_and_factory_reset, if you bricked Openwrt while configuring after installation.
TFTP Recovery mechanism (soft brick)
In order to provide a way the user can restore the router in case of brick after installing U-Boot/OpenWrt, we implemented a way to load an image on RAM by using TFTP without using Serial Port.
- Download OpenWrt initramfs image: openwrt-lantiq-xrx200-arcadyan_vrv9510kwac23-initramfs-kernel.bin
- Setup a TFTP Server. Rename the previusly downloaded image to
rescue.binand copy it into your TFTP directory. - While holding “Servicio” button, power on the router. Hold the button for 5 seconds and then release it. A blue LED should turn on, meaning the device is requesting a image via TFTP
- If the blue LED won't turn on, or there is no LED turned on, proceed with the following recovery method.
- The router will automatically request, download and run the
rescue.binimage from your TFTP Server. Wait a few minutes until OpenWrt boots up. - Download the OpenWrt squashfs image and flash it using LuCi interface on
System > Backup/Flash Firmware
Recovering using UART (hard brick)
Hard brick occurs when powering on the router won't show any LED or the previusly described mechanism didn't work (Blue LED not turning on). Use the steps described at Installing OpenWrt - Serial Console/UART to recover from a hard brick.
OEM NAND flash layout
The following flash layout have been extracted from the BRN bootloader and does not represent the actual flash layout
| index | part_name | offset | size | size (KiB) |
|---|---|---|---|---|
| 00 | Boot | 0x0000000 | 0x0100000 | 1024 |
| 01 | Image 0 | 0x0100000 | 0x0a00000 | 10240 |
| 02 | Image 1 | 0x0b00000 | 0x0a00000 | 10240 |
| 03 | Configuration | 0x1500000 | 0x0200000 | 2048 |
| 04 | Boot Params | 0x1700000 | 0x0200000 | 2048 |
| 05 | Nvram | 0x1900000 | 0x0200000 | 2048 |
| 06 | Cert | 0x1a00000 | 0x2000000 | 32768 |
| 07 | EmergencyValue | 0x3a00000 | 0x0600000 | 6144 |
| 08 | Configuration2 | 0x4000000 | 0x0020000 | 2048 |
NAND flash dump: arcadyan-vrv9510kwac23-backup.bin
Hardware
Info
| Architecture | MIPS |
|---|---|
| Vendor | Lantiq |
| bootloader | BRNBoot |
| System-On-Chip | Lantiq VRX288 (MIPS, PSB 80920 EL) |
| CPU/Speed | 34Kc 500 MHz |
| Flash-Chip | ZENTEL A5U1GA31ATS 8G (NAND) |
| Flash size | 128 MiB |
| RAM | 2x NANYA NT5TU128M8HE-AC DDR2 x8 |
| RAM size | 256 MiB |
| Modem | VDSL/ADSL2+ XWAY VRX208 |
| Wireless 1 | Broadcom BCM43222KFBG 802.11b/g/b MIMO 2T2R |
| Wireless 2 | Broadcom BCM4360KMLG 802.11ac MIMO 3T3R |
| Ethernet | 3x Lantiq PEF7071V |
| Ethernet ports | 5x RJ45 Gigabit ethernet |
| Phone | Lantiq PEF 42068 V XWAY SLIC120 |
| USB | Yes 2 x 2.0 |
| Serial | Yes |
| JTAG | No |
Photos
Casing
Board
Wifi
This boards comes with two Broadcomm Wi-Fi chipsets.
- Broadcom BCM43222KFBG: Connected to the board via PCI for 2.4GHz, 802.11b/g/n. It has limited support with the b43 driver. The following SPROM has been extracted from the OEM firmware
pci/0/14/sromrev=8 pci/0/14/devid=0x4350 pci/0/14/boardrev=0x1308 pci/0/14/boardflags=0x200 pci/0/14/boardflags2=0x402 pci/0/14/boardtype=0x4d2 pci/0/14/regrev=0 pci/0/14/pa0b0=0xff25 pci/0/14/pa0b1=0x14bc pci/0/14/pa0b2=0xfb49 pci/0/14/pa0itssit=32 pci/0/14/pa0maxpwr=72 pci/0/14/opo=0 pci/0/14/aa2g=3 pci/0/14/aa5g=3 pci/0/14/ag0=2 pci/0/14/ag1=2 pci/0/14/ag2=255 pci/0/14/ag3=255 pci/0/14/pa1b0=0xfea2 pci/0/14/pa1b1=0x15c4 pci/0/14/pa1b2=0xfaa0 pci/0/14/pa1lob0=0xfe87 pci/0/14/pa1lob1=0x1637 pci/0/14/pa1lob2=0xfa8e pci/0/14/pa1hib0=0xfe9A pci/0/14/pa1hib1=0x1521 pci/0/14/pa1hib2=0xfab9 pci/0/14/pa1itssit=62 pci/0/14/pa1maxpwr=72 pci/0/14/pa1lomaxpwr=56 pci/0/14/pa1himaxpwr=72 pci/0/14/bxa2g=3 pci/0/14/rssisav2g=7 pci/0/14/rssismc2g=15 pci/0/14/rssismf2g=15 pci/0/14/bxa5g=3 pci/0/14/rssisav5g=7 pci/0/14/rssismc5g=15 pci/0/14/rssismf5g=15 pci/0/14/tri2g=255 pci/0/14/tri5g=255 pci/0/14/tri5gl=255 pci/0/14/tri5gh=255 pci/0/14/rxpo2g=-1 pci/0/14/rxpo5g=-1 pci/0/14/txchain=3 pci/0/14/rxchain=3 pci/0/14/antswitch=0 pci/0/14/tssipos2g=1 pci/0/14/extpagain2g=2 pci/0/14/pdetrange2g=4 pci/0/14/triso2g=3 pci/0/14/antswctl2g=0 pci/0/14/tssipos5g=1 pci/0/14/extpagain5g=2 pci/0/14/pdetrange5g=4 pci/0/14/triso5g=3 pci/0/14/antswctl5g=0 pci/0/14/elna2g=255 pci/0/14/elna5g=255 pci/0/14/tempthresh=255 pci/0/14/tempoffset=255 pci/0/14/cck2gpo=0 pci/0/14/ofdm2gpo=0x22000000 pci/0/14/ofdm5gpo=0x44400000 pci/0/14/ofdm5glpo=0x44400000 pci/0/14/ofdm5ghpo=0x44400000 pci/0/14/mcs2gpo0=0 pci/0/14/mcs2gpo1=0x64000000 pci/0/14/mcs2gpo2=0 pci/0/14/mcs2gpo3=0x64000000 pci/0/14/mcs2gpo4=0 pci/0/14/mcs2gpo5=0x64000000 pci/0/14/mcs2gpo6=0 pci/0/14/mcs2gpo7=0x64000000 pci/0/14/mcs5gpo0=0 pci/0/14/mcs5gpo1=17472 pci/0/14/mcs5gpo2=0 pci/0/14/mcs5gpo3=17472 pci/0/14/mcs5gpo4=0 pci/0/14/mcs5gpo5=17472 pci/0/14/mcs5gpo6=0 pci/0/14/mcs5gpo7=17472 pci/0/14/mcs5glpo0=0 pci/0/14/mcs5glpo1=0 pci/0/14/mcs5glpo2=0 pci/0/14/mcs5glpo3=0 pci/0/14/mcs5glpo4=0 pci/0/14/mcs5glpo5=0 pci/0/14/mcs5glpo6=0 pci/0/14/mcs5glpo7=0 pci/0/14/mcs5ghpo0=0 pci/0/14/mcs5ghpo1=17472 pci/0/14/mcs5ghpo2=0 pci/0/14/mcs5ghpo3=17472 pci/0/14/mcs5ghpo4=0 pci/0/14/mcs5ghpo5=17472 pci/0/14/mcs5ghpo6=0 pci/0/14/mcs5ghpo7=17472 pci/0/14/cddpo=0 pci/0/14/stbcpo=0 pci/0/14/bw40po=0 pci/0/14/bwduppo=0 pci/0/14/ccode=Q1 pci/0/14/macaddr=1C:C6:3C:49:11:32 pci/0/14/phycal_tempdelta=255 pci/0/14/maxp2ga0=0x4c pci/0/14/itt2ga0=32 pci/0/14/itt5ga0=62 pci/0/14/pa2gw0a0=0xfeed pci/0/14/pa2gw1a0=0x153e pci/0/14/pa2gw2a0=0xfb1f pci/0/14/maxp5ga0=0x54 pci/0/14/maxp5gha0=72 pci/0/14/maxp5gla0=56 pci/0/14/pa5gw0a0=0xFEA0 pci/0/14/pa5gw1a0=0x145C pci/0/14/pa5gw2a0=0xFAF0 pci/0/14/pa5glw0a0=0xFE6E pci/0/14/pa5glw1a0=0x110C pci/0/14/pa5glw2a0=0xFB7E pci/0/14/pa5ghw0a0=0xFF00 pci/0/14/pa5ghw1a0=0x13C4 pci/0/14/pa5ghw2a0=0xFB30 pci/0/14/maxp2ga1=0x4c pci/0/14/itt2ga1=32 pci/0/14/itt5ga1=62 pci/0/14/pa2gw0a1=0xfeb8 pci/0/14/pa2gw1a1=0x1508 pci/0/14/pa2gw2a1=0xfacb pci/0/14/maxp5ga1=72 pci/0/14/maxp5gha1=72 pci/0/14/maxp5gla1=56 pci/0/14/pa5gw0a1=0xFEB2 pci/0/14/pa5gw1a1=0x156E pci/0/14/pa5gw2a1=0xFABF pci/0/14/pa5glw0a1=0xFE57 pci/0/14/pa5glw1a1=0x1139 pci/0/14/pa5glw2a1=0xFB6D pci/0/14/pa5ghw0a1=0xFF38 pci/0/14/pa5ghw1a1=0x13EE pci/0/14/pa5ghw2a1=0xFB6D pci/0/14/maxp2ga2=255 pci/0/14/itt2ga2=255 pci/0/14/itt5ga2=255 pci/0/14/pa2gw0a2=0xffff pci/0/14/pa2gw1a2=0xffff pci/0/14/pa2gw2a2=0xffff pci/0/14/maxp5ga2=255 pci/0/14/maxp5gha2=255 pci/0/14/maxp5gla2=255 pci/0/14/pa5gw0a2=0xffff pci/0/14/pa5gw1a2=0xffff pci/0/14/pa5gw2a2=0xffff pci/0/14/pa5glw0a2=0xffff pci/0/14/pa5glw1a2=0xffff pci/0/14/pa5glw2a2=0xffff pci/0/14/pa5ghw0a2=0xffff pci/0/14/pa5ghw1a2=0xffff pci/0/14/pa5ghw2a2=0xffff pci/0/14/maxp2ga3=255 pci/0/14/itt2ga3=255 pci/0/14/itt5ga3=255 pci/0/14/pa2gw0a3=0xffff pci/0/14/pa2gw1a3=0xffff pci/0/14/pa2gw2a3=0xffff pci/0/14/maxp5ga3=255 pci/0/14/maxp5gha3=255 pci/0/14/maxp5gla3=255 pci/0/14/pa5gw0a3=0xffff pci/0/14/pa5gw1a3=0xffff pci/0/14/pa5gw2a3=0xffff pci/0/14/pa5glw0a3=0xffff pci/0/14/pa5glw1a3=0xffff pci/0/14/pa5glw2a3=0xffff pci/0/14/pa5ghw0a3=0xffff pci/0/14/pa5ghw1a3=0xffff pci/0/14/pa5ghw2a3=0xffff
- Broadcom BCM4360KMLG: Connected to the board via PCIe for 5GHz, 802.11ac. It has NO support at all due to the lack of FLOSS drivers. The following SPROM has been extracted from the OEM firmware
pci/1/0/aa2g=7 pci/1/0/aa5g=7 pci/1/0/aga0=0 pci/1/0/aga1=0 pci/1/0/aga2=0 pci/1/0/agbg0=71 pci/1/0/agbg1=71 pci/1/0/agbg2=133 pci/1/0/antswitch=0 pci/1/0/boardflags2=2 pci/1/0/boardflags3=0 pci/1/0/boardflags=0x10001000 pci/1/0/boardnum=20578 pci/1/0/boardrev=0x1302 pci/1/0/boardtype=0x633 pci/1/0/cckbw202gpo=0 pci/1/0/cckbw20ul2gpo=0 pci/1/0/ccode= pci/1/0/devid=0x43a2 pci/1/0/dot11agduphrpo=0 pci/1/0/dot11agduplrpo=0 pci/1/0/dot11agofdmhrbw202gpo=17408 pci/1/0/epagain2g=0 pci/1/0/epagain5g=0 pci/1/0/femctrl=6 pci/1/0/gainctrlsph=0 pci/1/0/macaddr=1C:C6:3C:72:DF:10 pci/1/0/maxp2ga0=66 pci/1/0/maxp2ga1=66 pci/1/0/maxp2ga2=66 pci/1/0/maxp5ga0=84,84,84,84 pci/1/0/maxp5ga1=84,84,84,84 pci/1/0/maxp5ga2=84,84,84,84 pci/1/0/maxp5ga3=84,84,84,84 pci/1/0/mcsbw1605ghpo=0 pci/1/0/mcsbw1605glpo=0 pci/1/0/mcsbw1605gmpo=0 pci/1/0/mcsbw202gpo=0x99000000 pci/1/0/mcsbw205ghpo=0x98664222 pci/1/0/mcsbw205glpo=0x98664222 pci/1/0/mcsbw205gmpo=0x98664222 pci/1/0/mcsbw402gpo=0x77000000 pci/1/0/mcsbw405ghpo=0x98664222 pci/1/0/mcsbw405glpo=0x98664222 pci/1/0/mcsbw405gmpo=0x98664222 pci/1/0/mcsbw805ghpo=0x98862222 pci/1/0/mcsbw805glpo=0x98862222 pci/1/0/mcsbw805gmpo=0x98862222 pci/1/0/mcslr5ghpo=0 pci/1/0/mcslr5glpo=0 pci/1/0/mcslr5gmpo=0 pci/1/0/measpower1=0x7f pci/1/0/measpower2=0x7f pci/1/0/measpower=0x7f pci/1/0/noiselvl2ga0=31 pci/1/0/noiselvl2ga1=31 pci/1/0/noiselvl2ga2=31 pci/1/0/noiselvl5ga0=31,31,31,31 pci/1/0/noiselvl5ga1=31,31,31,31 pci/1/0/noiselvl5ga2=31,31,31,31 pci/1/0/noiselvl5gha0=31 pci/1/0/noiselvl5gha1=31 pci/1/0/noiselvl5gha2=31 pci/1/0/noiselvl5gla0=31 pci/1/0/noiselvl5gla1=31 pci/1/0/noiselvl5gla2=31 pci/1/0/noiselvl5gma0=31 pci/1/0/noiselvl5gma1=31 pci/1/0/noiselvl5gma2=31 pci/1/0/noiselvl5gua0=31 pci/1/0/noiselvl5gua1=31 pci/1/0/noiselvl5gua2=31 pci/1/0/ofdmlrbw202gpo=0 pci/1/0/pa2ga0=0xff24,0x188e,0xfce6 pci/1/0/pa2ga1=0xff3e,0x15f9,0xfd36 pci/1/0/pa2ga2=0xff25,0x18a6,0xfce2 pci/1/0/pa5ga0=0xff5a,0x1505,0xfd8e,0xff55,0x1536,0xfd7f,0xff53,0x1672,0xfd66,0xff49,0x17c1,0xfd41 pci/1/0/pa5ga1=0xff55,0x1625,0xfd69,0xff4b,0x1686,0xfd58,0xff44,0x160f,0xfd5e,0xff48,0x178e,0xfd3b pci/1/0/pa5ga2=0xff4c,0x1522,0xfd7c,0xff49,0x14f4,0xfd84,0xff4b,0x1663,0xfd61,0xff45,0x16e4,0xfd50 pci/1/0/papdcap2g=0 pci/1/0/papdcap5g=0 pci/1/0/pcieingress_war=15 pci/1/0/pdgain2g=10 pci/1/0/pdgain5g=10 pci/1/0/pdoffset40ma0=12834 pci/1/0/pdoffset40ma1=12834 pci/1/0/pdoffset40ma2=12834 pci/1/0/pdoffset80ma0=256 pci/1/0/pdoffset80ma1=256 pci/1/0/pdoffset80ma2=256 pci/1/0/physcal_tempdelta=255 pci/1/0/rawtempsense=0x1ff pci/1/0/regrev=0 pci/1/0/rxchain=7 pci/1/0/rxgainerr2g=0xffff pci/1/0/rxgainerr2ga0=63 pci/1/0/rxgainerr2ga1=31 pci/1/0/rxgainerr2ga2=31 pci/1/0/rxgainerr5g=0xffff,0xffff,0xffff pci/1/0/rxgainerr5ga0=63,63,63,63 pci/1/0/rxgainerr5ga1=31,31,31,31 pci/1/0/rxgainerr5ga2=31,31,31,31 pci/1/0/rxgains2gelnagaina0=0 pci/1/0/rxgains2gelnagaina1=0 pci/1/0/rxgains2gelnagaina2=0 pci/1/0/rxgains2gtrelnabypa0=0 pci/1/0/rxgains2gtrelnabypa1=0 pci/1/0/rxgains2gtrelnabypa2=0 pci/1/0/rxgains2gtrisoa0=0 pci/1/0/rxgains2gtrisoa1=0 pci/1/0/rxgains2gtrisoa2=0 pci/1/0/rxgains5gelnagaina0=3 pci/1/0/rxgains5gelnagaina1=3 pci/1/0/rxgains5gelnagaina2=3 pci/1/0/rxgains5ghelnagaina0=7 pci/1/0/rxgains5ghelnagaina1=7 pci/1/0/rxgains5ghelnagaina2=7 pci/1/0/rxgains5ghtrelnabya0=1 pci/1/0/rxgains5ghtrelnabya1=1 pci/1/0/rxgains5ghtrelnabya2=1 pci/1/0/rxgains5ghtrelnabypa0=1 pci/1/0/rxgains5ghtrelnabypa1=1 pci/1/0/rxgains5ghtrelnabypa2=1 pci/1/0/rxgains5ghtrisoa0=15 pci/1/0/rxgains5ghtrisoa1=15 pci/1/0/rxgains5ghtrisoa2=15 pci/1/0/rxgains5gmelnagaina0=7 pci/1/0/rxgains5gmelnagaina1=7 pci/1/0/rxgains5gmelnagaina2=7 pci/1/0/rxgains5gmtrisoa0=15 pci/1/0/rxgains5gmtrisoa1=15 pci/1/0/rxgains5gmtrisoa2=15 pci/1/0/rxgains5gtrelnabya0=1 pci/1/0/rxgains5gtrelnabya1=1 pci/1/0/rxgains5gtrelnabya2=1 pci/1/0/rxgains5gtrelnabypa0=1 pci/1/0/rxgains5gtrelnabypa1=1 pci/1/0/rxgains5gtrelnabypa2=1 pci/1/0/rxgains5gtrisoa0=6 pci/1/0/rxgains5gtrisoa1=6 pci/1/0/rxgains5gtrisoa2=6 pci/1/0/sar2g=18 pci/1/0/sar5g=15 pci/1/0/sb20in40hrpo=0 pci/1/0/sb20in40hrrpo=0 pci/1/0/sb20in40lrpo=0 pci/1/0/sb20in80and160hr5ghpo=0 pci/1/0/sb20in80and160hr5glpo=0 pci/1/0/sb20in80and160hr5gmpo=0 pci/1/0/sb20in80and160lr5ghpo=0 pci/1/0/sb20in80and160lr5glpo=0 pci/1/0/sb20in80and160lr5gmpo=0 pci/1/0/sb40and80hr5ghpo=0 pci/1/0/sb40and80hr5glpo=0 pci/1/0/sb40and80hr5gmpo=0 pci/1/0/sb40and80lr5ghpo=0 pci/1/0/sb40and80lr5glpo=0 pci/1/0/sb40and80lr5gmpo=0 pci/1/0/sromrev=11 pci/1/0/subband5gver=4 pci/1/0/subvid=0x14e4 pci/1/0/tempcorrx=0x3f pci/1/0/tempoffset=255 pci/1/0/temps_hysteresis=15 pci/1/0/temps_period=15 pci/1/0/tempsense_option=0x3 pci/1/0/tempsense_slope=0xff pci/1/0/tempthresh=255 pci/1/0/tssiposslope2g=1 pci/1/0/tssiposslope5g=1 pci/1/0/tworangetssi2g=0 pci/1/0/tworangetssi5g=0 pci/1/0/txchain=7 pci/1/0/xtalfreq=65535 pci/1/0/extpagain2g=0 pci/1/0/extpagain5g=0 pci/1/0/phycal_tempdelta=255
DSL
DSL in this device has not been tested. Nevertheless, drivers and other stuff have been configured so it should work (regarding other routers with similar SoC). Please tell if it works. The following information have been extracted from the p-2812hnu-f1
You may need to adapt the network settings to connect to your internet provider. These settings can be found in /etc/config/network. Depending on your internet provider those settings may differ. For Telfort in the Netherlands the following will work.
config atm-bridge 'atm'
option vpi '0'
option vci '34'
option encaps 'llc'
option payload 'bridged'
option nameprefix 'dsl'
config interface 'wan'
option ifname 'dsl0.34'
option proto 'dhcp'
option force_link '1'
option delegate '0'
option ipv6 '1'
Make sure that ifname of wan interface has the following format: option ifname 'dsl<vpi>.<vci>' and it needs to match the atm-bridge options.
GPIO
LEDS
| GPIO | LED |
|---|---|
| 26 | INTERNET green |
| 33 | INTERNET red |
| 38 | POWER green |
| 40 | WIFI blue |
| 41 | UPGRADE blue |
| 44 | PHONE green |
| 45 | LAN green |
| 47 | WIFI green |
Buttons
| GPIO | Button |
|---|---|
| 5 | WIFI |
| 6 | WPS |
| 20 | RESET |
Serial
Warning: Don't connect the Vcc pin of the serial port to a TTL-to-USB adapter. While doing this, some people damaged the board. There's no need to connect it, communication works without Vcc.
| Serial connection parameters for VRV9510KWAC23 | 115200, 8N1, 3.3V |
|---|
Maybe TX and RX are backwards, but no damage can be done to the device wiring TX and RX wrong with each other.
Bootstrap / UART mode
There are 2 known modes to reach the UART mode at boottime:
Bridge R141
Bridge resistor R141 as seen in the photo
- boot_sel2 is currently unknown.
- boot_sel0 is at R141. Short circuit R141 and boot_sel0 enters CFG 04 UART mode.
- boot_sel1 is currently unknown. |
NAND flash hack
This seems to be a common hack to all Lantiq systems relying on a nand flash.
During boot, shortcircuit pins 8&9. Flash won't be recognized and therefore system fails to UART mode.
Bootlogs
OEM bootlog
ROM VER: 1.1.4 CFG 06 NAND NAND Read OK ROM VER: 1.1.4 CFG 06 NAND NAND Read OK DDR PARAM flash addr 1700000 DDR PARAM: 88888888 00142304 00142304 00566504 00566604 00000300 Rev 0.3d DDR check ok... start booting... END TUNE DDR Start booting........... ======================================================================= Wireless ADSL IAD VR9 Loader v1.00.13 build Apr 25 2014 13:12:00 Arcadyan Technology Corporation ======================================================================= A2x VR9 0xbe22ff1c : 97b41c5f 0xBf203014 : 70380000 EON/Zentel NAND 128MB 3,3V 8-bit found ----------------------------- NAND page size : 2048 NAND oob size : 64 NAND block size : 131072 NAND page/block : 64 NAND block/chip : 1024 NAND chip size : 0x8000000 NAND page shift : 11 NAND page mask : 0xFFFF NAND block shift : 17 ----------------------------- Scan BAD Block ... BAD Block [1023] : 0x07FE0000 data: 0x00 1 Bad Block(s) Copying boot params.....DONE Enter command mode ... Get Primary to 1.....Image Check from FLASH_AREA_IMAGE_1 : Unzipping firmware at 0x80002000 ... with nAREA[2][ZIP 3] [ZIP 1] done Ready to run firmware --> [is_power_on_reboot] reset_status = 0x70380000 Enable UART TX Disable UART TX Enable UART TX Disable UART TX Enable UART TX RFPI before chk 02 d5 9e 76 f0 Disable UART TX Enable UART TX Turn off COSIC function now...48500 1 Disable UART TX Enable UART TX usb_explore_task() COSIC is ready. time=48883 Disable UART TX
UART mode bootlog
ROM VER: 1.1.4 CFG 04 EEPROM Data OK UART
OpenWrt bootlog
ROM VER: 1.1.4 CFG 06 NAND NAND Read OK U-Boot SPL 2014.07-g11dc0e7421-dirty (Dec 06 2022 - 12:30:24) SPL: applying tuned DDR SDRAM settings MEM: DDR Echo DLL delay: 21/22 MEM: DDR Write DQS delay: 65/66 MEM: DDR Read DQS delay: 1f/1f SPL: loading U-Boot to RAM SPL: checking U-Boot image SPL: decompressing U-Boot with LZO SPL: jumping to U-Boot U-Boot 2014.07-g11dc0e7421-dirty (Dec 06 2022 - 12:30:24)VRV9510KWAC23 Board: Arcadyan VRV9510KWAC23 SoC: Lantiq VRX288 v1.2 CPU: 500 MHz IO: 250 MHz BUS: 250 MHz BOOT: NAND DRAM: 128 MiB NAND: 128 MiB *** Warning - bad CRC, using default environment In: serial Out: serial Err: serial Net: ltq-eth Hit any key to stop autoboot: 2 1 0 NAND read: device 0 offset 0xa0000, size 0x300000 3145728 bytes read: OK ## Booting kernel from Legacy Image at 81000000 ... Image Name: MIPS OpenWrt Linux-5.10.155 Created: 2022-12-06 21:17:45 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2757025 Bytes = 2.6 MiB Load Address: 80002000 Entry Point: 80002000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK [ 0.000000] Linux version 5.10.155 (osboxes@osboxes) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 11.3.0 r21359-786d78c474) 11.3.0, GNU ld (GNU Binutils) 2.37) #0 SMP Tue Dec 6 21:17:45 2022 [ 0.000000] SoC: xRX200 rev 1.2 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019556 (MIPS 34Kc) [ 0.000000] MIPS: machine is Arcadyan VRV9510KWAC23 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Detected 1 available secondary CPU(s) [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x000000000fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x000000000fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff] [ 0.000000] percpu: Embedded 14 pages/cpu s26576 r8192 d22576 u57344 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64960 [ 0.000000] Kernel command line: console=ttyLTQ0,115200 [ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear) [ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear) [ 0.000000] Writing ErrCtl register=000113a0 [ 0.000000] Readback ErrCtl register=000113a0 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 249012K/262144K available (6669K kernel code, 626K rwdata, 1644K rodata, 1284K init, 211K bss, 13132K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 256 [ 0.000000] CPU Clock: 500MHz [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041786 ns [ 0.000012] sched_clock: 32 bits at 250MHz, resolution 4ns, wraps every 8589934590ns [ 0.007981] Calibrating delay loop... 331.77 BogoMIPS (lpj=1658880) [ 0.074058] pid_max: default: 32768 minimum: 301 [ 0.078977] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.086169] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.098185] rcu: Hierarchical SRCU implementation. [ 0.103405] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build [ 0.111526] smp: Bringing up secondary CPUs ... [ 0.117316] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.117331] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.117453] CPU1 revision is: 00019556 (MIPS 34Kc) [ 0.171095] Synchronize counters for CPU 1: done. [ 0.195375] smp: Brought up 1 node, 2 CPUs [ 0.205664] Fallback driver started [ 0.205844] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.219168] futex hash table entries: 512 (order: 2, 16384 bytes, linear) [ 0.226138] pinctrl core: initialized pinctrl subsystem [ 0.233379] NET: Registered protocol family 16 [ 0.282353] dcdc-xrx200 1f106a00.dcdc: Core Voltage : 1016 mV [ 0.290078] pinctrl-xway 1e100b10.pinmux: Init done [ 0.305402] dma-xway 1e104100.dma: Init done - hw rev: 7, ports: 7, channels: 28 [ 0.313909] PCI host bridge /fpi@10000000/pci@e105400 ranges: [ 0.319643] MEM 0x0000000018000000..0x0000000019ffffff [ 0.324831] IO 0x000000001ae00000..0x000000001affffff [ 0.330756] b43 sprom probe is launched [ 0.330833] b43-sprom bcm43222-sprom: patching SPROM with 6 fixups... [ 0.341276] b43-sprom bcm43222-sprom: random mac 16:70:c6:55:4f:d3 [ 0.411131] gpio-stp-xway 1e100bb0.stp: Init done [ 0.417407] usbcore: registered new interface driver usbfs [ 0.423010] usbcore: registered new interface driver hub [ 0.428567] usbcore: registered new device driver usb [ 0.436394] PCI host bridge to bus 0000:00 [ 0.440457] pci_bus 0000:00: root bus resource [mem 0x18000000-0x19ffffff] [ 0.447336] pci_bus 0000:00: root bus resource [io 0x1ae00000-0x1affffff] [ 0.454317] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.461131] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.471502] pci 0000:00:0e.0: [14e4:a8d6] type 00 class 0x028000 [ 0.477439] pci 0000:00:0e.0: reg 0x10: [mem 0x00000000-0x00003fff] [ 0.486863] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00 [ 0.493411] pci 0000:00:0e.0: BAR 0: assigned [mem 0x18000000-0x18003fff] [ 0.501493] clocksource: Switched to clocksource MIPS [ 0.509193] b43-pci-bridge 0000:00:0e.0: enabling device (0000 -> 0002) [ 0.561545] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08 [ 0.636997] ssb_fallback_sprom: pci bus/device num mismatch: expected 0/1, but got 0/14 [ 0.701649] b43-pci-bridge 0000:00:0e.0: Sonics Silicon Backplane found on PCI device 0000:00:0e.0 [ 0.711275] NET: Registered protocol family 2 [ 0.716147] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear) [ 0.724616] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) [ 0.733015] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear) [ 0.740584] TCP bind hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.747863] TCP: Hash tables configured (established 2048 bind 2048) [ 0.754455] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.760866] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.768402] NET: Registered protocol family 1 [ 0.772769] PCI: CLS 0 bytes, default 32 [ 0.777391] gptu: totally 6 16-bit timers/counters [ 0.782280] gptu: misc_register on minor 63 [ 0.786375] gptu: succeeded to request irq 126 [ 0.790853] gptu: succeeded to request irq 127 [ 0.795612] gptu: succeeded to request irq 128 [ 0.799960] gptu: succeeded to request irq 129 [ 0.804525] gptu: succeeded to request irq 130 [ 0.808969] gptu: succeeded to request irq 131 [ 0.813736] No VPEs reserved for AP/SP, not initialize VPE loader [ 0.813736] Pass maxvpes=<n> argument as kernel argument [ 0.825121] No TCs reserved for AP/SP, not initializing RTLX. [ 0.825121] Pass maxtcs=<n> argument as kernel argument [ 0.839997] workingset: timestamp_bits=14 max_order=16 bucket_order=2 [ 0.853147] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.858818] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.875498] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 112, base_baud = 0) is a lantiq,asc [ 0.884524] printk: console [ttyLTQ0] enabled [ 0.884524] printk: console [ttyLTQ0] enabled [ 0.893163] printk: bootconsole [early0] disabled [ 0.893163] printk: bootconsole [early0] disabled [ 0.906370] nand: device found, Manufacturer ID: 0x92, Chip ID: 0xf1 [ 0.911288] nand: Eon NAND 128MiB 3,3V 8-bit [ 0.915563] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 0.923277] Scanning device for bad blocks [ 0.930267] Bad eraseblock 54 at 0x0000006c0000 [ 0.943753] Bad eraseblock 329 at 0x000002920000 [ 0.964312] Bad eraseblock 812 at 0x000006580000 [ 0.975076] Bad eraseblock 1023 at 0x000007fe0000 [ 0.978398] 4 fixed-partitions partitions found on MTD device 10000000.flash [ 0.985419] Creating 4 MTD partitions on "10000000.flash": [ 0.990867] 0x000000000000-0x000000080000 : "uboot" [ 0.997158] 0x000000080000-0x0000000a0000 : "u-boot-env" [ 1.002616] 0x0000000a0000-0x000000440000 : "kernel" [ 1.007723] 0x0000003a0000-0x000008000000 : "ubi" [ 1.364432] gswip 1e108000.switch: dsa switch register failed: -517 [ 1.383249] NET: Registered protocol family 10 [ 1.396893] Segment Routing with IPv6 [ 1.399232] NET: Registered protocol family 17 [ 1.404368] 8021q: 802.1Q VLAN Support v1.8 [ 1.413778] pcie-xrx200 1d900000.pcie: failed to get the PCIe PHY [ 1.764537] gswip 1e108000.switch lan2 (uninitialized): PHY [1e108000.switch-mii:00] driver [Intel XWAY PHY11G (PEF 7071/PEF 7072) v1.5 / v1.6] (irq=POLL) [ 1.781876] gswip 1e108000.switch lan3 (uninitialized): PHY [1e108000.switch-mii:01] driver [Intel XWAY PHY11G (PEF 7071/PEF 7072) v1.5 / v1.6] (irq=POLL) [ 1.799041] gswip 1e108000.switch lan4 (uninitialized): PHY [1e108000.switch-mii:11] driver [Intel XWAY PHY11G (xRX v1.2 integrated)] (irq=POLL) [ 1.815510] gswip 1e108000.switch wan (uninitialized): PHY [1e108000.switch-mii:13] driver [Intel XWAY PHY11G (xRX v1.2 integrated)] (irq=POLL) [ 1.831792] gswip 1e108000.switch lan1 (uninitialized): PHY [1e108000.switch-mii:05] driver [Intel XWAY PHY11G (PEF 7071/PEF 7072) v1.5 / v1.6] (irq=POLL) [ 1.846287] gswip 1e108000.switch: Unsupported port: 6 [ 1.850096] gswip 1e108000.switch: Unsupported port: 6 [ 1.855236] gswip 1e108000.switch: fixed link full duplex 1000Mbps not recognised [ 1.862670] gswip 1e108000.switch: configuring for fixed/internal link mode [ 1.869870] DSA: tree 0 setup [ 1.872623] gswip 1e108000.switch: probed GSWIP version 21 mod 0 [ 1.879853] gswip 1e108000.switch: Link is Up - 1Gbps/Full - flow control off [ 2.007271] PCI host bridge /fpi@10000000/pcie@d900000 ranges: [ 2.011975] PCI host bridge to bus 0000:01 [ 2.015810] pci_bus 0000:01: root bus resource [mem 0x1c000000-0x1cffffff] [ 2.022716] pci_bus 0000:01: root bus resource [io 0x1d800000-0x1d8fffff] [ 2.029503] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0] [ 2.036361] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff] [ 2.044351] ifx_pcie_rc_class_early_fixup: fixed pcie host bridge to pci-pci bridge [ 2.061968] pci 0000:01:00.0: ifx_pcie_rc_class_early_fixup+0x0/0x80 took 17159 usecs [ 2.068360] pci 0000:01:00.0: [1bef:0011] type 01 class 0x060400 [ 2.074540] pci 0000:01:00.0: PME# supported from D0 D3hot [ 2.083102] pci 0000:01:00.0: bridge configuration invalid ([bus 02-00]), reconfiguring [ 2.090012] pci 0000:02:00.0: [14e4:4360] type 00 class 0x028000 [ 2.095827] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit] [ 2.102759] pci 0000:02:00.0: supports D1 D2 [ 2.106774] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:01:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link) [ 2.124702] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02 [ 2.129886] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 02 [ 2.136606] pci 0000:01:00.0: BAR 8: assigned [mem 0x1c000000-0x1c0fffff] [ 2.143387] pci 0000:02:00.0: BAR 0: assigned [mem 0x1c000000-0x1c007fff 64bit] [ 2.150610] pci 0000:01:00.0: PCI bridge to [bus 02] [ 2.155648] pci 0000:01:00.0: bridge window [mem 0x1c000000-0x1c0fffff] [ 2.162546] ifx_pcie_bios_map_irq port 0 dev 0000:01:00.0 slot 0 pin 1 [ 2.168945] ifx_pcie_bios_map_irq dev 0000:01:00.0 irq 144 assigned [ 2.175308] pcieport 0000:01:00.0: enabling device (0000 -> 0002) [ 2.182235] ifx_pcie_bios_map_irq port 0 dev 0000:02:00.0 slot 0 pin 1 [ 2.187967] ifx_pcie_bios_map_irq dev 0000:02:00.0 irq 144 assigned [ 2.194318] bcma-pci-bridge 0000:02:00.0: enabling device (0000 -> 0002) [ 2.201097] bcma-pci-bridge 0000:02:00.0: bus0: Found chip with id 0x4360, rev 0x03 and package 0x01 [ 2.210170] bcma-pci-bridge 0000:02:00.0: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x2B, class 0x0) [ 2.220767] bcma-pci-bridge 0000:02:00.0: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x2A, class 0x0) [ 2.231501] bcma-pci-bridge 0000:02:00.0: bus0: Core 2 found: ARM CR4 (manuf 0x4BF, id 0x83E, rev 0x02, class 0x0) [ 2.241814] bcma-pci-bridge 0000:02:00.0: bus0: Core 3 found: PCIe Gen2 (manuf 0x4BF, id 0x83C, rev 0x01, class 0x0) [ 2.252339] bcma-pci-bridge 0000:02:00.0: bus0: Core 4 found: USB 2.0 Device (manuf 0x4BF, id 0x81A, rev 0x11, class 0x0) [ 2.279875] bcma-pci-bridge 0000:02:00.0: bus0: Invalid SPROM read from the PCIe card, trying to use fallback SPROM [ 2.288914] bcma_fallback_sprom: pci bus/device num mismatch: expected 0/1, but got 2/0 [ 2.300020] bcma-pci-bridge 0000:02:00.0: bus0: Bus registered [ 2.305797] UBI: auto-attach mtd3 [ 2.307790] ubi0: attaching mtd3 [ 2.456345] ubi0: scanning is finished [ 2.472316] ubi0: attached mtd3 (name "ubi", size 124 MiB) [ 2.476399] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 129024 bytes [ 2.483388] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 512 [ 2.489979] ubi0: VID header offset: 512 (aligned 512), data offset: 2048 [ 2.496808] ubi0: good PEBs: 991, bad PEBs: 4, corrupted PEBs: 0 [ 2.502814] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 [ 2.509954] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 841375533 [ 2.519071] ubi0: available PEBs: 0, total reserved PEBs: 991, PEBs reserved for bad PEB handling: 16 [ 2.528357] ubi0: background thread "ubi_bgt0d" started, PID 486 [ 2.534844] block ubiblock0_0: created from ubi0:0(rootfs) [ 2.539795] ubiblock: device ubiblock0_0 (rootfs) set to be root files[ 2.557318] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. [ 2.567065] Freeing unused kernel memory: 1284K [ 2.570139] This architecture does not have kernel memory protection. [ 2.576644] Run /sbin/init as init process [ 3.256813] init: Console is alive [ 3.259359] init: - watchdog - [ 4.651515] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.813581] gpio-keys-polled: probe of keys failed with error -16 [ 4.828610] dwc2 1e101000.usb: supply vusb_d not found, using dummy regulator [ 4.834920] dwc2 1e101000.usb: supply vusb_a not found, using dummy regulator [ 4.943619] dwc2 1e101000.usb: DWC OTG Controller [ 4.946938] dwc2 1e101000.usb: new USB bus registered, assigned bus number 1 [ 4.954092] dwc2 1e101000.usb: irq 62, io mem 0x1e101000 [ 4.961034] hub 1-0:1.0: USB hub found [ 4.963625] hub 1-0:1.0: 1 port detected [ 4.969527] dwc2 1e106000.usb: supply vusb_d not found, using dummy regulator [ 4.975856] dwc2 1e106000.usb: supply vusb_a not found, using dummy regulator [ 5.086895] dwc2 1e106000.usb: DWC OTG Controller [ 5.090215] dwc2 1e106000.usb: new USB bus registered, assigned bus number 2 [ 5.097363] dwc2 1e106000.usb: irq 91, io mem 0x1e106000 [ 5.104347] hub 2-0:1.0: USB hub found [ 5.106860] hub 2-0:1.0: 1 port detected [ 5.114875] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 5.132765] init: - preinit - [ 6.467348] random: jshn: uninitialized urandom read (4 bytes read) [ 6.758665] random: jshn: uninitialized urandom read (4 bytes read) /bin/board_detect: /etc/board.d/02_network: line 203: arithmetic syntax error [ 7.037933] random: jshn: uninitialized urandom read (4 bytes read) [ 7.570647] gswip 1e108000.switch lan1: configuring for phy/rgmii link mode [ 7.576632] 8021q: adding VLAN 0 to HW filter on device lan1 [ 7.604903] random: procd: uninitialized urandom read (4 bytes read) Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 9.651909] gswip 1e108000.switch lan1: Link is Up - 100Mbps/Full - flow control off [ 9.658240] IPv6: ADDRCONF(NETDEV_CHANGE): lan1: link becomes ready [ 9.935251] UBIFS (ubi0:1): Mounting in unauthenticated mode [ 9.941673] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 635 [ 9.991871] UBIFS (ubi0:1): recovery needed [ 10.112214] UBIFS (ubi0:1): recovery completed [ 10.115580] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data" [ 10.123099] UBIFS (ubi0:1): LEB size: 129024 bytes (126 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 10.133053] UBIFS (ubi0:1): FS size: 119218176 bytes (113 MiB, 924 LEBs), journal size 5935104 bytes (5 MiB, 46 LEBs) [ 10.143661] UBIFS (ubi0:1): reserved for root: 4952683 bytes (4836 KiB) [ 10.150209] UBIFS (ubi0:1): media format: w5/r0 (latest is w5/r0), UUID 1B4277E7-465C-4299-A5E8-F497E4AFC23C, small LPT model [ 10.163564] mount_root: switching to ubifs overlay [ 10.178267] urandom-seed: Seeding with /etc/urandom.seed [ 10.381116] gswip 1e108000.switch lan1: Link is Down [ 10.404958] procd: - early - [ 10.406814] procd: - watchdog - [ 11.109266] procd: - watchdog - [ 11.260214] procd: - ubus - [ 11.433713] random: ubusd: uninitialized urandom read (4 bytes read) [ 11.442195] random: ubusd: uninitialized urandom read (4 bytes read) [ 11.453384] random: ubusd: uninitialized urandom read (4 bytes read) [ 11.471196] procd: - init - Please press Enter to activate this console. [ 12.823289] random: jshn: uninitialized urandom read (4 bytes read) [ 12.864522] random: ubusd: uninitialized urandom read (4 bytes read) [ 12.870022] random: ubus: uninitialized urandom read (4 bytes read) [ 13.031817] kmodloader: loading kernel modules from /etc/modules.d/* [ 13.433191] urngd: v1.0.2 started. [ 13.738180] IFXOS, Version 1.7.1 (c) Copyright 2009, Lantiq Deutschland GmbH [ 13.750986] NET: Registered protocol family 8 [ 13.754058] NET: Registered protocol family 20 [ 13.768288] PPP generic driver version 2.4.2 [ 13.793937] Lantiq (VRX) DSL CPE MEI driver, version 1.5.17.6, (c) 2007-2015 Lantiq Beteiligungs-GmbH & Co. KG [ 13.809728] [ 13.809728] [ 13.809728] Lantiq CPE API Driver version: DSL CPE API V4.17.18.6 [ 13.827441] [ 13.827441] Predefined debug level: 3 [ 13.849060] Loading modules backported from Linux version v5.15.74-0-ga3f2f5ac9d61 [ 13.855354] Backport generated by backports.git v5.15.74-1-0-ge2d78967 [ 13.870339] Infineon Technologies DEU driver version 2.0.0 [ 13.878450] IFX DEU DES initialized (multiblock). [ 13.886819] IFX DEU AES initialized (multiblock). [ 13.890587] IFX DEU SHA1 initialized. [ 13.894414] IFX DEU MD5 initialized. [ 13.897811] IFX DEU SHA1_HMAC initialized. [ 13.902005] IFX DEU MD5_HMAC initialized. [ 13.929568] NET: Registered protocol family 24 [ 14.029965] random: crng init done [ 14.032076] random: 26 urandom warning(s) missed due to ratelimiting [ 14.246113] b43-phy0: Broadcom 4360 WLAN found (core revision 42) [ 14.251200] b43-phy0 ERROR: FOUND UNSUPPORTED PHY (Analog 0, Type 0 (A), Revision 0) [ 14.258673] b43: probe of bcma0:1 failed with error -122 [ 14.264284] b43-phy1: Broadcom 43222 WLAN found (core revision 16) [ 14.355561] b43-phy1: Found PHY: Analog 8, Type 4 (N), Revision 6 [ 14.360236] b43-phy1: Found Radio: Manuf 0x17F, ID 0x2056, Revision 6, Version 0 [ 14.395987] Broadcom 43xx driver loaded [ Features: PNL ] [ 14.413490] kmodloader: done loading kernel modules from /etc/modules.d/* [ 34.178193] gswip 1e108000.switch lan1: configuring for phy/rgmii link mode [ 34.188315] 8021q: adding VLAN 0 to HW filter on device lan1 [ 34.196020] br-lan: port 1(lan1) entered blocking state [ 34.199869] br-lan: port 1(lan1) entered disabled state [ 34.208171] device lan1 entered promiscuous mode [ 34.211507] device eth0 entered promiscuous mode [ 34.323490] gswip 1e108000.switch lan2: configuring for phy/rgmii link mode [ 34.343063] 8021q: adding VLAN 0 to HW filter on device lan2 [ 34.348084] br-lan: port 2(lan2) entered blocking state [ 34.352719] br-lan: port 2(lan2) entered disabled state [ 34.522206] device lan2 entered promiscuous mode [ 34.593267] gswip 1e108000.switch lan3: configuring for phy/rgmii link mode [ 34.605693] 8021q: adding VLAN 0 to HW filter on device lan3 [ 34.615016] br-lan: port 3(lan3) entered blocking state [ 34.618820] br-lan: port 3(lan3) entered disabled state [ 34.641592] device lan3 entered promiscuous mode [ 34.701569] gswip 1e108000.switch lan4: configuring for phy/internal link mode [ 34.707867] 8021q: adding VLAN 0 to HW filter on device lan4 [ 34.722490] br-lan: port 4(lan4) entered blocking state [ 34.726289] br-lan: port 4(lan4) entered disabled state [ 34.738845] device lan4 entered promiscuous mode [ 37.335360] gswip 1e108000.switch lan1: Link is Up - 100Mbps/Full - flow control off [ 37.351574] br-lan: port 1(lan1) entered blocking state [ 37.355443] br-lan: port 1(lan1) entered forwarding state [ 37.371617] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready BusyBox v1.35.0 (2022-12-03 10:09:10 UTC) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r21363-18ad0bb874 ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@OpenWrt:/#