ASKEY RTV7705VW-D112 (o2 Box 6741)
The internal ASKEY model number is RTV7705VW-D112, though it is better known as “o2 HomeBox 6741”.
OpenWrt support is currently unavailable!
Highlights
CPU | Ram | Flash | Network | WLAN Hardware | USB | Serial | UART mode | DSL |
---|---|---|---|---|---|---|---|---|
? | ? | ? | 3 Ports, 1000Mbit | Quantenna QT3840BC + ? | Yes | Yes | Yes | Yes, ? |
Hardware info
Architecture: | ? |
Target: | ? |
Vendor: | ASKEY |
Bootloader: | Quantenna Mini U-Boot v36.6.0.7 Built: May 09 2014 at 19:26:48 |
System-On-Chip: | ARC 700 Family |
CPU Speed: | 500Mhz |
Flash chip: | |
Flash size: | ? |
RAM chip: | ? |
RAM size: | 128MB DDR3@500Mhz |
WAN: | 1x RJ45, DSL? |
Modem: | ? |
Ethernet: | LAN: 2x RJ45 Gigabit WAN: 1x RJ45 Gigabit Port |
Wireless: | 802.11b/g/n 300MBit/s, Quantenna QT3840BC |
Phone: | Yes, ? |
Serial: | yes 3.3V |
USB: | 2x 2.0 |
Buttons: | power switch, reset button, dect button |
Power: | external PSU, 12V DC, 2.5A, 30W, polarity: -(+) |
LEDs
Symbol | Color |
---|---|
Power | red + green |
LAN | green |
WLAN | green |
DECT | green |
DSL | green |
Internet | red + green |
Telefon | green |
Info | red + green |
Serial console
This device has 2 serial UART Pins. the one next to the WAN (blue) port is for ?. The other one is left to the analog phone ports. Boardrate is 115200 Pin 1 is marked with a small “1”. The voltage is 3.3V. Please do *not* connect the VCC pin of the PCB to the VCC pin of you serial interface as this may destroy both of the devices. The pinout is as follows:
Pin number | 1 | 2 | 3 | 4 |
Function | VCC (3.3V) | GND | TX | RX |
Picture (Sorry, would upload it here, but no Permission): https://dl.bixilon.de/images/o2/homebox/6741/openwrt/serial.jpg (Yellow is Pin 4 (RX), Green is Pin 3 (TX), Black is Pin 2 (GND))
Disassembly
Disassembly is kinda tricky. Note that the “bubble” under the sticker is *not* a screw but merely the sprue hole from the molding process of the plastic case. There are 2 screws at the botton (not hidden). You can use a screw driver to clip the front case out. Then you need to use a bit of force to seperate the white cover (in the middle is a little “clip”. You need to use force. Nothing is clipped in, so nothing will break). Don't use to much force:)
Bootlogs
OEM bootlog
Quantenna Mini U-Boot Version: v36.6.0.7 Built: May 09 2014 at 19:26:48 QTN-EMAC 1G-FD Using QTN-EMAC device TFTP from server 1.1.1.1; our IP address is 1.1.1.2 Filename 'u-boot.bin'. Load address: 0x88000000 Loading: Quantenna Mini U-Boot Version: v36.6.0.7 Built: May 09 2014 at 19:26:48 QTN-EMAC 1G-FD Using QTN-EMAC device TFTP from server 1.1.1.1; our IP address is 1.1.1.2 Filename 'u-boot.bin'. Load address: 0x88000000 Loading: T ARP Retry count exceeded; starting again T Transmit timeout 1G-FD BOOTP broadcast 1 BOOTP broadcast 2 Retry count exceeded; starting again 1G-FD Using QTN-EMAC device TFTP from server 1.1.1.1; our IP address is 1.1.1.2 Filename 'u-boot.bin'. Load address: 0x88000000 Loading: ##### done Bytes transferred = 68808 (0x10cc8) Boot reached stage 13 Boot reached stage 12 Valid CRC found in flash restoring env... Boot reached stage 11 hw_config_id 65535: 'QTM840_5S1_MS_2MAC_BOND' Cold boot Reset status: 0x00000002 Info: data uncached: addr=0xc0000000 size=1024MB Info: text at 0x88014000, stack at 0x88013ffc(8192), heap at 0x88000000(73728), uboot size 173140 Info: i-cache is enabled Info: d-cache is enabled Info: CPU freq is 500000000, dev freq is 125000000 Info: Quantenna U-Boot version:v36.7.0.6 Info: build date 'Окт 22 2014', time '18:00:49' SPI flash info: name : mx25l512e jedec_id : 0xc22010 sector size : 4096 number of sector : 16 frequency : 104000000 flags : 0x2 lock : DDR_INIT: type = 16 speed = 500MHz BDA at 0x80002000 In: serial Out: serial Err: serial Boot reached stage 64 Boot reached stage 65 QTN-EMAC Hit any key to stop autoboot: 0 Boot reached stage 80 1G-FD Using QTN-EMAC device TFTP from server 1.1.1.1; our IP address is 1.1.1.2 Filename 'topaz-linux.lzma.img'. Load address: 0x83000000 Loading: ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ##### done Bytes transferred = 5761753 (0x57ead9) Boot reached stage 81 Boot reached stage 84 Boot reached stage 1 ## Booting kernel from Legacy Image at 83000000 ... Boot reached stage 2 Boot reached stage 3 Image Name: topaz-linux Image Type: arc Linux Kernel Image (lzma compressed) Data Size: 5753561 Bytes = 5.5 MB Load Address: 8493a000 Entry Point: 8493a000 Verifying Checksum ... OK Boot reached stage 4 Boot reached stage 5 Boot reached stage 6 Boot reached stage 14 Uncompressing Kernel Image ... OK Boot reached stage 7 Boot reached stage 8 Command line TAG setup Params->u.cmdline.cmdline console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 p console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 ## Transferring control to Linux (at address 8493a000) ATAG parameters 8803bb50 - 8803bba8... [ 0.000000] Linux version 2.6.35.12 (lvr@bree) (gcc version 4.2.1 (ARC_2.3)) #2 Thu Dec 14 18:51:02 MSK 2017 [ 0.000000] Parsing ATAG parameters from bootloader [ 0.000000] ATAG_CORE: successful parsing [ 0.000000] ATAG_CMDLINE: command line = console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 [ 0.000000] Board id: 65535 [ 0.000000] ATAG_HW_CONFIG_ID: hw_config_id = 65535 [ 0.000000] [ 0.000000] Processor Family: ARC 700 [0x33] [ 0.000000] CPU speed : 500.00 Mhz [ 0.000000] Timers: TIMER1 TIMER0 [ 0.000000] Interrupt Vect Base: 0x88026800 [ 0.000000] Peripheral Base: NOT present; assuming 0xCOFC0000 [ 0.000000] Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB [ 0.000000] ARC700 MMU Ver [2] [ 0.000000] PAGE SIZE 8k [ 0.000000] JTLB 128 x 2 = 256 entries [ 0.000000] uDTLB 8 entr, uITLB 4 entr [ 0.000000] TLB Refill "will NOT" Flush uTLBs [ 0.000000] Detected I-cache : [ 0.000000] Type=2 way set-assoc, Line length=32, Size=16K (enabled) [ 0.000000] Detected D-cache : [ 0.000000] Type=4 way set-assoc, Line length=32, Size=16K (enabled) [ 0.000000] Extensions: [ 0.000000] MPY: 32x32 with ANY Result Reg MAC MPY: Dual 16 x 16 and 32 x 16 [ 0.000000] DCCM: N/A ICCM: N/A [ 0.000000] CRC: N/A, SWAP: Present NORM: Present [ 0.000000] Min-Max: Present, Barrel Shifter: Present [ 0.000000] Ext Arith Insn: Present [ 0.000000] Floating Point Extension: N/A [ 0.000000] On node 0 totalpages: 16383 [ 0.000000] free_area_init_node: node 0, pgdat 85af1d0c, node_mem_map 85ba2024 [ 0.000000] Normal zone: 72 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 16311 pages, LIFO batch:3 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16311 [ 0.000000] Kernel command line: console=ttyS0,115200n8 earlyprintk=1 hw_config_id=65535 [ 0.000000] bootconsole [ruby_early0] enabled [ 0.000000] PID hash table entries: 512 (order: -2, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 3, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 2, 32768 bytes) [ 0.000000] Memory: 36488KB available (2161K code,1206K data, 15472K init) [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU debugfs-based tracing is enabled. [ 0.000000] Verbose stalled-CPUs detection is disabled. [ 0.000000] clockevent mode switch to [1] [ 0.000000] clockevent mode switch to [2] [ 0.000000] Calibrating delay loop... 249.03 BogoMIPS (lpj=622592) [ 0.115000] pid_max: default: 4096 minimum: 301 [ 0.120000] Mount-cache hash table entries: 1024 [ 0.125000] Starting run_ksoftirqd, stack (thread_info) at 85b16000 cpu 0 [ 0.130000] NET: Registered protocol family 16 [ 0.135000] Topaz heap in SRAM 88016780<->88020000, B2 BASE 17800 [ 0.150000] bio: create slab <bio-0> at 0 [ 0.155000] watch64: 2003/08/22 Josef 'Jeff' Sipek <jeffpc@xxxxxxxxxxxxx> [ 0.160000] watch64: Enabling Watch64 extensions...done. [ 0.165000] Switching to clocksource ARC Timer1 [ 0.175000] NET: Registered protocol family 2 [ 0.180000] IP route cache hash table entries: 2048 (order: 0, 8192 bytes) [ 0.185000] TCP established hash table entries: 4096 (order: 2, 32768 bytes) [ 0.190000] TCP bind hash table entries: 4096 (order: 1, 16384 bytes) [ 0.195000] TCP: Hash tables configured (established 4096 bind 4096) [ 0.200000] TCP reno registered [ 0.205000] NET: Registered protocol family 1 [ 0.790000] JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc. [ 0.795000] msgmni has been set to 71 [ 0.800000] io scheduler noop registered (default) [ 1.225000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled [ 1.235000] serial8250.0: ttyS0 at MMIO 0xf0000000 (irq = 48) is a 16550A [ 1.245000] brd: module loaded [ 1.255000] loop: module loaded [ 1.260000] spi_flash: Force not to support Protect Mode [ 1.265000] Creating 3 MTD partitions on "spi_flash": [ 1.270000] 0x000000000000-0x000000005000 : "uboot" [ 1.275000] 0x000000005000-0x00000000b000 : "uboot_env" [ 1.285000] 0x00000000b000-0x000000010000 : "data" [ 1.290000] spi_flash: SPI flash driver initialized successfully! [ 1.295000] ruby_health loading [ 1.295000] HBM pool: emac rx 0x0 to 0x8000, wmac rx 0x8000 to 0xa000 [ 1.805000] HBM meta: emac rx 0x63c040 to 0x6bc040, wmac rx 0x6bc080 to 0x6dc080 [ 1.810000] topaz_hbm_init_pool_list pool 0 pool_list 0x88000000 bus_range 0x6ec400 to 0x26ec400 sz 4096 count 8192 [ 1.810000] topaz_hbm_init_pool_list pool 1 pool_list 0x88008000 bus_range 0x26fc400 to 0x48fc400 sz 17408 count 2048 [ 1.810000] topaz_hbm_init_pool_list pool 3 pool_list 0x8800a000 bus_range 0x0 to 0x0 sz 0 count 4096 [ 1.820000] topaz_busmon_init success [ 1.820000] topaz_temp_sens_init success [ 1.825000] u32 classifier [ 1.830000] input device check on [ 1.830000] Actions configured [ 1.835000] Netfilter messages via NETLINK v0.30. [ 1.840000] nf_conntrack version 0.5.0 (570 buckets, 2280 max) [ 1.845000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 1.850000] TCP cubic registered [ 1.850000] NET: Registered protocol family 10 [ 1.860000] NET: Registered protocol family 17 [ 1.860000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> [ 1.865000] All bugs added by David S. Miller <davem@redhat.com> [ 1.870000] turn off boot console ruby_early0
Pictures
https://dl.bixilon.de/images/o2/homebox/6741/openwrt/board_front.jpg, https://dl.bixilon.de/images/o2/homebox/6741/openwrt/board_back.jpg, https://dl.bixilon.de/images/o2/homebox/6741/openwrt/front.jpg, https://dl.bixilon.de/images/o2/homebox/6741/openwrt/back.jpg