ASUS WL-600g
This router is very similar to other devices using the same Broadcom 96348 hardware (ADSL2+, 802.11g), like:
- Hitachi SpeedWeb
- Telsey “Alice W-Gate” and Pirelli “Alice-W-Gate+” rented by “Telecom Italia” to ADSL customers (also found, cheap, sold on many radio-rally).
Supported since OpenWrt Backfire version. Internal ADSL modem not supported.
Forum: https://forum.openwrt.org/viewtopic.php?id=7355
| Backfire (10.03.1) | openwrt-96348GW-generic-squashfs-cfe.bin |
| Attitude Adjustment (12.09) | openwrt-96348GW-generic-squashfs-cfe.bin |
NOTE: Some people reported that only Backfire (10.03.1) works; Attitude Adjustment (12.09) and trunk boot but the device does not respond in any way (it is not bricked, the bootloader works, and firmware can be flashed over TFTP as described below). See bug https://dev.openwrt.org/ticket/12389 - it looks like it's related to usb and can be avoided by disabling uhci in custom firmware.
Hardware
Info
| Architecture | MIPS |
|---|---|
| Vendor | Broadcom |
| bootloader | cfe |
| Board Id | 96348GW-10 |
| System-On-Chip | BCM6348 |
| CPU/Speed | BMIPS3300 V0.7 / 256 MHz |
| Flash-Chip | MX29LV320CBTC-90G |
| Flash size | 4 MiB |
| RAM | Samsung K4S641632KUCL60 / 166 MHz / 8 MiB |
| RAM size | Total: 16 MiB |
| Wireless | Broadcom4318 802.11b/g (integrated) |
| Ethernet | Broadcom BCM5325 w/ vlan support swconfig |
| Internet | ADSL2+ |
| USB | yes Via VT6212L |
| Serial | Yes J503 |
| JTAG | Yes |
Image of the top of the motherboard
Image of the bottom of the motherboard
Image of Serial & JTAG
Serial
J503 is a serial port that could be cabled to get access to router console. 115000 8N1
Signals are 3.3V like many other boards.
Pinout:
GND | VC
N/A | TX
N/A | RX
JTAG
| Signal |
|---|
| TDI |
| TCK |
| TDO |
| TMS |
| TRST |
Software
This device runs Linux. A firmware upgrade is available on the Asus Site. It is a squashed filesystem with some other data appended to it. The squashfs is 2.0 and uses an LZMA Broadcom-flavour compression method.
Asus, like other, now has correctly put online the GPL source code:
http://support.asus.com/download/download.aspx?model=wl-600g&SLanguage=en-us
The stock firmware runs a 2.6.8.1 kernel and a bunch of other binary modules are in /lib. See the File Listing for details.
Firmware from Asus is quite buggy and unstable, it does not offer many important functions like static ip table.
Backfire firmware works very well on this router without support for ADSL. Configuring VLANs it is possible to use it as normal router setting one port from switch as wan.
Original Firmware versions
- 3.0.0.8A
- 3.0.0.8B
- 1.0.3.6A
- 1.0.3.5A
- 1.0.3.3A
- 1.0.0.3B
Custom firmwares
Dumb wifi radio, see thread Router for mpd like Asus WL 500g:
Flashing over TFTP / debricking
(from Hacking ASUS WL600g router, and the debrick subpage in particular)
To upload firmware over TFTP, boot into rescue mode by turning the device on while holding the RESET button. The power LED will flash slowly. Connect with cable to the router (any LAN socket), assign static IP to your computer in the range 192.168.1.2-192.168.1.254 -- the wl600g itself is 192.168.1.1. The device runs TFTP server, put the firmware on it:
$ tftp tftp> binary tftp> connect 192.168.1.1 tftp> verbose Verbose mode on. tftp> put WL-600g_1.0.3.6.A.trx putting WL-600g_1.0.3.6.A.trx to 192.168.1.1:WL-600g_1.0.3.6.A.trx [octet] Sent 3228760 bytes in 4.2 seconds [6150019 bits/sec] tftp> q
The device does NOT seem to reboot automatically after flashing new firmware - wait a few minutes and do it manually.
Basic configuration
Since this part is identical for all devices, see Basic configuration.
Connect stuff to the USB port
To connect stuff to the USB port, please see Connect stuff to the USB port.
Bootlogs
This is the serial output on start.
OEM bootlog
CFE version 1.0.37-0.8 for BCM96348 (32bit,SP,BE) Build Date: ¤@ 2¤ë 20 18:37:34 CST 2006 (root@localhost.localdomain) Copyright (C) 2000,2001,2002,2003 Broadcom Corporation. Initializing Arena. Initializing Devices. CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz Total memory used by CFE: 0x80401000 - 0x805246F0 (1193712) Initialized Data: 0x8041C680 - 0x8041E080 (6656) BSS Area: 0x8041E080 - 0x804226F0 (18032) Local Heap: 0x804226F0 - 0x805226F0 (1048576) Stack Area: 0x805226F0 - 0x805246F0 (8192) Text (code) segment: 0x80401000 - 0x8041C67C (112252) Boot area (physical): 0x00525000 - 0x00565000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id Name : 96348GW-10 Psi size in KB : 24 Number of MAC Addresses (1-32) : 11 Base MAC Address : 00:1b:fc:c1:38:21 Ethernet PHY Type : Internal Memory size in MB : 16 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 110 GPIOio_PIN_HIGH is Off Code Address: 0x80010000, Entry Address: 0x8024a018 Decompression OK! Entry at 0x8024a018 Closing network. Starting program at 0x8024a018 Linux version 2.6.8.1 (root@localhost.localdomain) (gcc version 3.4.2) #1 Tue Feb 9 17:43:54 CST 2010 Total Flash size: 4096K with 71 sectors 96348GW-10 prom init CPU revision is: 00029107 mpi: No Card is in the PCMCIA slot Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 64 (order 6: 512 bytes) Using 128.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13324k/16000k available (1590k kernel code, 2656k reserved, 686k data, 76k init, 0k highmem) Calibrating delay loop... 255.59 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Can't analyze prologue code at 8019bf84 usbcore: registered new driver usbfs usbcore: registered new driver hub devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 NTFS driver 2.1.15 [Flags: R/O DEBUG]. PPP generic driver version 2.4.2 NET: Registered protocol family 24 Linux video capture interface: v1.00 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry bcm963xx_serial driver v2.0 u32 classifier OLD policer on NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing unused kernel memory: 76k freed init started: BusyBox v1.00 (2010.02.09-09:52+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2010.02.09-09:52+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... Asus mknod Init Asus mknod finish (Roly) Using /lib/modules/2.6.8.1/extra/atmapi.ko atmapi: module license 'Proprietary' taints kernel. Using /lib/modules/2.6.8.1/extra/blaadd.ko blaadd: blaa_detect entry Using /lib/modules/2.6.8.1/extra/adsldd.ko adsl: adsl_init entry Using /lib/modules/2.6.8.1/extra/bcmprocfs.ko Broadcom BCMPROCFS v1.0 initialized Using /lib/modules/2.6.8.1/extra/bcm_enet.ko Broadcom BCM6348B0 Ethernet Network Device v0.3 Feb 9 2010 17:42:35 Config Ethernet Switch Through MDIO Sseudo PHY Interface eth0: MAC Address: 00:1B:FC:C1:38:21 Using /lib/modules/2.6.8.1/extra/bcm_usb.ko Broadcom BCM6348B0 USB Network Device v0.4 Feb 9 2010 20:14:40 usb0: MAC Address: 00 1B FC C1 38 21 usb0: Host MAC Address: 00 1B FC C1 38 21 Using /lib/modules/2.6.8.1/extra/wl.ko PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl: srom not detected, using main memory mapped srom info (wombo board) wl0: wlc_attach: using main board MAC address base in NVRAM (wombo board) wl0 MAC Address: 00:1B:FC:C1:38:21 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered wl0: Broadcom BCM4318 802.11 Wireless Controller 3.91.41.0 cfm init() xmlEndWebCamobj is not xmlstate.verify!!! xmlEndFTPobj is not xmlstate.verify xmlEndQoSobj is not xmlstate.verify eth0 Link UP. BcmAdsl_Initialize=0xC0054208, g_pFnNotifyCallback=0xC00673A4 AdslCoreHwReset: AdslOemDataAddr = 0xA0FF8054 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_tables.ko ip_tables: (C) 2000-2002 Netfilter core team Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/iptable_filter.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack.ko ip_conntrack version 2.1 (125 buckets, 0 max) - 384 bytes per conntrack Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/iptable_nat.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/iptable_mangle.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_conntrack_ipsec.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_nat_ipsec.ko insmod ip_conntrack_ftp port:1111 Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_ftp.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_gre.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_h323.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_irc.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_pptp.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_rtsp.ko ip_conntrack_rtsp: falsely claims to have parameter setup_timeout ip_conntrack_rtsp v0.01 loading Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_tftp.ko insmod ip_nat_ftp port:1111 Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_ftp.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_gre.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_h323.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_irc.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_pptp.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_rtsp.ko ip_nat_rtsp v0.01 loading Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_tftp.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_FTOS.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_LOG.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_MARK.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_REDIRECT.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_TCPMSS.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_layer7.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_length.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_limit.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_mark.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_state.ko Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ipt_tcpmss.ko ADSL G.994 training ==> Bcm963xx Software Version: 3.02L.01.A2pB018e.d16f <== device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state pvc2684d: Interface "nas_8_35" created sucessfully pvc2684d: Communicating over ATM 0.8.35, encapsulation: LLC device nas_8_35 entered promiscuous mode br0: port 3(nas_8_35) entering learning state br0: topology change detected, propagating br0: port 3(nas_8_35) entering forwarding state device usb0 left promiscuous mode br0: port 1(usb0) entering disabled state device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state ADSL G.992 started device eth0 left promiscuous mode br0: port 2(eth0) entering disabled state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state device wl0 entered promiscuous mode infosvr start!!! xmlEndWebCamobj is not xmlstate.verify!!! xmlEndFTPobj is not xmlstate.verify xmlEndQoSobj is not xmlstate.verify Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_conntrack_ipsec.ko insmod: cannot insert `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_conntrack_ipsec.ko': Success (17): Success Using /lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_nat_ipsec.ko insmod: cannot insert `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_nat_ipsec.ko': Success (17)sntp: host not found xmlEndWebCamobj is not xmlstate.verify!!! xmlEndFTPobj is not xmlstate.verify xmlEndQoSobj is not xmlstate.verify watchdog init testing!!!!!!!!! : Success uhci_hcd: falsely claims to have parameter debug USB Universal Host Controller Interface driver v2.2 PCI: Enabling device 0000:00:07.0 (0000 -> 0001) uhci_hcd 0000:00:07.0: UHCI Host Controller uhci_hcd 0000:00:07.0: irq 32, io base 0c000000 uhci_hcd 0000:00:07.0: new USB bus registered, assigned bus number 1 ADSL G.992 channel analysis hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected PCI: Enabling device 0000:00:07.1 (0000 -> 0001) uhci_hcd 0000:00:07.1: UHCI Host Controller uhci_hcd 0000:00:07.1: irq 32, io base 0c000020 uhci_hcd 0000:00:07.1: new USB bus registered, assigned bus number 2 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected PCI: Enabling device 0000:00:07.2 (0000 -> 0002) ehci_hcd 0000:00:07.2: EHCI Host Controller capbase:::1000010 capbase:::1000010 ehci_hcd 0000:00:07.2: irq 32, pci mem a8010800 ehci_hcd 0000:00:07.2: new USB bus registered, assigned bus number 3 ehci_hcd 0000:00:07.2: USB 2.0 enabled, EHCI 1.00, driver 2004-May-10 hub 3-0:1.0: USB hub found hub 3-0:1.0: 4 ports detected usblp: falsely claims to have parameter proto_bias usbcore: registered new driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver ov511: falsely claims to have parameter ov518_color usbcore: registered new driver ov511 drivers/usb/media/ov511.c: v1.64 for Linux 2.5 : ov511 USB Camera Driver pwc: falsely claims to have parameter dev_hint pwc Philips webcam module version 9.0.1 loaded. pwc Supports Philips PCA645/646, PCVC675/680/690, PCVC720[40]/730/740/750 & PCVC830/840. pwc Also supports the Askey VC010, various Logitech Quickcams, Samsung MPC-C10 and MPC-C30, pwc the Creative WebCam 5 & Pro Ex, SOTEC Afina Eye and Visionite VCS-UC300 and VCS-UM100. usbcore: registered new driver Philips webcam SCSI subsystem initialized ADSL link up, fast, us=1148, ds=0 Initializing USB Mass Storage driver... usbcore: registered new driver usb-storage USB Mass Storage support registered. br0: port 1(usb0) entering disabled state PPP: PPP8_35_1 Start to connect ... ADSL link down ADSL G.994 training ADSL G.992 channel analysis ADSL link up, fast, us=1020, ds=0 PPP: PPP8_35_1 Start to connect ... std_rcv_pado: ses->state= 07, p_in->code=07, PADO_CODE=07 std_rcv_pado: ses->state= 65, p_in->code=07, PADO_CODE=07 std_rcv_pado: ses->state= 65, p_in->code=07, PADO_CODE=07 std_rcv_pado: ses->state= 65, p_in->code=07, PADO_CODE=07 std_rcv_pado: ses->state= 65, p_in->code=07, PADO_CODE=07 std_rcv_pado: ses->state= 65, p_in->code=07, PADO_CODE=07 PPP: PPP8_35_1 Connection Up. Primary DNS server = 8.8.8.8 Secondary DNS server = 8.8.4.4 ftp: 0 0,http: 2 2,telnet: 0 0, tftpd: 2 2 usb_ftpport is 1111 09:49:36 INFO:siproxd.c:192 siproxd-0.5.10-3874 i686-redhat-linux-gnu starting up