Belkin F9K1110 v1
BELKIN F9K1110V1 (Belkin n750)
might also work for Belkin F9K1103V1
Supported Versions
| Version/Model | Launch Date | OpenWrt Version Supported | Model Specific Notes |
|---|---|---|---|
| v1 | 2012-11 | - | - |
NOTE: Anything not included in model specific notes, or where a short comment couldn't be included on the notes.
Hardware Highlights
| SoC | Ram | Flash | Network | USB | Serial | JTag |
|---|---|---|---|---|---|---|
| Ralink RT3883@500MHz | 64MiB | 8MiB | 4 x 1 | Yes | Yes | ? |
Manufacturer's site: http://www.belkin.com/us/F9K1110/p/P-F9K1110/
Keep the articles modular (fix)
| Please include only model specific information, omit bla,bla and put everything generic into separate articles |
| docs if you have no time to write certain stuff link to this |
| checks_and_troubleshooting should lead the way, do not explain this again |
| DO NOT provide a complete howto here! Instead groom the general HowTos. |
Installation (fix)
Flash Layout (fix)
Please check out the article flash.layout. It contains an example and a couple of explanations.
OEM easy installation
This section deals with how you install OpenWrt from a device freshly opened. Plus the steps required such as reset to factory defaults if the device has already been configured
Note: Reset router to factory defaults if it has been previously configured. →Browse to http://192.168.2.1/tl_sys_fc.htm and click the “Restore Defaults” button
- Browse to http://192.168.2.1/tl_sys_f.htm
- Upload .bin file to router
- Wait for it to reboot
OEM Recovery method
Verified method
- Hold reset button when plugging in power (for at-least 3 seconds after plugged in)
- Connect to a Lan port
- Set computer IP to 10.10.10.3 ( or anything in 10.10.10.??? )
- Browse to 10.10.10.123
- Click the Browse... Button and select the .bin file then click APPLY
Upgrading OpenWrt
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
LuCI Web Upgrade Process
- Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
- Upload image file for sysupgrade to LuCI
- Wait for reboot
Terminal Upgrade Process
- Login as root via SSH on 192.168.1.1
- Use the following commands to upgrade.
cd /tmp/ wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc sysupgrade /tmp/xxx.abc
- If sysupgrade does not support this router, use the following commands.
cd /tmp/ wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc mtd write /tmp/xxx.abc linux && reboot
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| vlan0 (eth0.0) | LAN ports (1 to 4) | None |
| vlan1 (eth0.1) | WAN port | DHCP |
| wl0 | WiFi | Disabled |
Switch Ports (for VLANs)
Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.
| Port | Switch port |
|---|---|
| Internet (WAN) | 4 |
| LAN 1 | 3 |
| LAN 2 | 2 |
| LAN 3 | 1 |
| LAN 4 | 0 |
Failsafe mode
Buttons
→ hardware.button on howto use and configure the hardware button(s).
The Belkin n750 has two buttons. They are Reset and WPS. Here, we merely name the buttons, so we can use them in the above Howto:
| BUTTON | Event |
|---|---|
| Reset | reset |
| Wi-Fi Protected Setup | wps |
Hardware
Info
| Instruction set | MIPS |
|---|---|
| Vendor | Ralink |
| bootloader | U-Boot |
| System-On-Chip | Ralink RT3883 |
| CPU @Frq | Embedded MIPS74Kc (500 MHz) with 64K I-Cache and 32K D-Cache |
| Flash size | 8 MiB |
| Flash Chip | MX25L6405D |
| RAM size | 64 MiB |
| RAM Chip | winbond W9751G6JB-25 |
| Wireless No1 | SoC-integrated: 3T3R 2.4/5 GHz w/ 450/450Mbps PHY data rate |
| Wireless No2 | distinct Chip: ralink RT3092L |
| switch | RealTek RTL8367R (Gigabit, VLAN) |
| Modem | none |
| USB | 2x 2.0 |
| Serial | Yes |
| JTAG | No |
Photos
Model Number
Front:
Photo of front of the casing
Back:
Photo of back of the casing
Opening the case
Note: This will void your warranty!
- To remove the cover do a/b/c
Main PCB
Photo of PCB
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device:
Same as F9K1103
^ | | to RAM | (GND) (RxD) (TxD) ----> 5 GHz ant (B) [3.3] J12
Photo of PCB with markings
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
How to connect to the JTAG Port of this specific device:
Photo of PCB with markings
Debricking
- Connect to the serial port and choose an option then the router is just booting up
2: Load system code then write to Flash via TFTP. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP.
Bootlogs
OEM bootlog
ARC Uboot:1.7.4 (Jul 11 2011 - 15:53:59) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83fa0000 spi_wait_nsec: 30 spi device id: c2 20 17 c2 20 (2017c220) find flash: MX25L6405D ..============================================ Ralink UBoot Version: 3.5.2.0 -------------------------------------------- ASIC 3883_MP (MAC to VITESSE Mode) DRAM_CONF_FROM: Boot-Strapping DRAM_TYPE: DDR2 DRAM_SIZE: 512 Mbits DRAM_WIDTH: 16 bits DRAM_TOTAL_WIDTH: 16 bits TOTAL_MEMORY_SIZE: 64 MBytes Flash component: SPI Flash Date:Jul 11 2011 Time:15:53:59 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 500 MHZ #### estimate memory size =64 Mbytes Please choose the operation: 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. 4 initializing CHIP_RTL8367R_VB 1010 0 initializing CHIP_RTL8367R_VB 1010 3: System Boot system code via Flash. ## Booting image at bc050000 ... . Image Name: N750F9K1103VB Created: 2012-06-28 0:33:54 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 7398305 Bytes = 7.1 MB Load Address: 80000000 Entry Point: 8033e000 ................................................................................................................. Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8033e000) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.22 (kevinlin@arc-vcs) (gcc version 4.1.2) #2 Thu Jun 28 08:29:18 CST 2012 cmd line = console=ttyS1,57600n8 root=/dev/mtdblock5 init=/sbin/preinit The CPU feqenuce set to 500 MHz CPU revision is: 0001974c Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 16256 Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5 init=/sbin/preinit Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). cause = 40808000, status = 11000000 PID hash table entries: 256 (order: 8, 1024 bytes) calculating r4koff... 001e8480(2000000) CPU frequency 500.00 MHz Using 250.000 MHz high precision timer. console handover: boot [early0] -> real [ttyS1] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 61184k/65536k available (2649k kernel code, 4336k reserved, 666k data, 124k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 RALINK_PCI_PCICFG_ADDR = 0 *************** Ralink PCIe RC mode ************* registering PCI controller with io_map_base unset SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb [junius] pcibios_init Next Bus No=0 hose= 80307758 Mem=8030778C Io=803077A8 2->[1][0][0][30]=0 5->[1][0][0][30]=fffffffe 2->[1][0][0][30]=0 5->[1][0][0][30]=0 PCI: Bridge: 0000:00:00.0 IO window: disabled. MEM window: 20000000-200fffff PREFETCH window: disabled. BAR0 at slot 0 = 0 bus=0, slot = 0x0 P2P(PCI) 0x00 = 08021814 P2P(PCI) 0x04 = 00100007 P2P(PCI) 0x08 = 06040001 P2P(PCI) 0x0c = 00010000 P2P(PCI) 0x10 = 00000000 P2P(PCI) 0x14 = 20100000 P2P(PCI) 0x18 = 00010100 P2P(PCI) 0x1c = 000000f0 P2P(PCI) 0x20 = 20002000 P2P(PCI) 0x24 = 0000fff0 P2P(PCI) 0x28 = 00000000 P2P(PCI) 0x2c = 00000000 P2P(PCI) 0x30 = 00000000 P2P(PCI) 0x34 = 00000040 P2P(PCI) 0x38 = 00000000 P2P(PCI) 0x3c = 000401ff res[0]->start = 0 res[0]->end = 1ffffff res[1]->start = 20100000 res[1]->end = 2010ffff res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=1, slot = 0x0 dev III(PCIe) 0x00 = 30911814 dev III(PCIe) 0x04 = 00100000 dev III(PCIe) 0x08 = 02800000 dev III(PCIe) 0x0c = 00000000 dev III(PCIe) 0x10 = 20000000 dev III(PCIe) 0x14 = 00000000 dev III(PCIe) 0x18 = 00000000 dev III(PCIe) 0x1c = 00000000 dev III(PCIe) 0x20 = 00000000 dev III(PCIe) 0x24 = 00000000 dev III(PCIe) 0x28 = 00000000 dev III(PCIe) 0x2c = 30911814 dev III(PCIe) 0x30 = 00000000 dev III(PCIe) 0x34 = 00000040 dev III(PCIe) 0x38 = 00000000 dev III(PCIe) 0x3c = 000001ff res[0]->start = 20000000 res[0]->end = 2000ffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 register_mtd_chip_driver for cfi_probe Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered deice id : c2 20 17 c2 20 (2017c220) MX25L6405D(c2 2017c220) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 Creating 8 MTD partitions on "raspi": 0x00000000-0x00800000 : "ALL" 0x00000000-0x00030000 : "Bootloader" 0x00030000-0x00040000 : "Config" 0x00040000-0x00050000 : "Factory" 0x00050000-0x0019d3e1 : "Kernel" mtd: partition "Kernel" doesn't end on an erase block -- force read-only 0x0019d3e1-0x00800000 : "RootFS" mtd: partition "RootFS" doesn't start on an erase block boundary -- force read-only 0x00050000-0x007f0000 : "Kernel_RootFS" 0x007f0000-0x00800000 : "UserCfg" RT3xxx EHCI/OHCI init. VFS: Disk quotas dquot_6.5.1 Dquot-cache hash table entries: 1024 (order 0, 4096 bytes) squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher fuse init (API version 7.8) io scheduler noop registered (default) pcie_portdrv_probe->Dev[1814:0802] has invalid IRQ. Check vendor BIOS assign_interrupt_mode Found MSI capability Ralink gpio driver initialized spidrv_major = 217 ARC_KERNEL_OSIX_init() success HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A loop: module loaded MAC_ADRH -- : 0x00000000 MAC_ADRL -- : 0x00000000 MAC_ADRH -- : 0x00000000 MAC_ADRL -- : 0x00000000 Ralink APSoC Ethernet Driver Initilization. v2.0 256 rx/tx descriptors allocated, mtu = 1500! MAC_ADRH -- : 0x0000000c MAC_ADRL -- : 0x43388338 PROC INIT OK! Pull high SDA & SCK GPIO pin 24 reset to switch rtl8367_RouterVlanInit() rv=0 IsolateWanPort() rtk_vlan_set(VLAN1) rv=0 IsolateWanPort() rtk_vlan_set(VLAN2) rv=0 IsolateWanPort() rtk_vlan_get(VLAN1) rv=0 mbrmsk=ef untagmsk=f fid=0 IsolateWanPort() rtk_vlan_get(VLAN2) rv=0 mbrmsk=30 untagmsk=10 fid=1 IsolateWanPort() rtk_vlan_portPvid_get(0) rv=0 vid=1 pri=0 IsolateWanPort() rtk_vlan_portPvid_get(1) rv=0 vid=1 pri=0 IsolateWanPort() rtk_vlan_portPvid_get(2) rv=0 vid=1 pri=0 IsolateWanPort() rtk_vlan_portPvid_get(3) rv=0 vid=1 pri=0 IsolateWanPort() rtk_vlan_portPvid_get(4) rv=0 vid=2 pri=0 IsolateWanPort() rtk_vlan_portPvid_get(5) rv=0 vid=1 pri=0 rtl8367b driver initialized PPP generic driver version 2.4.2 PPP BSD Compression module registered NET: Registered protocol family 24 block2mtd: version $Revision: 1.1.1.1 $ dev_nvram_init() 827 mtd->name=UserCfg rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (512 buckets, 4096 max) ctnetlink v0.93: registering with nfnetlink. ip_tables: (C) 2000-2006 Netfilter Core Team ClusterIP Version 0.8 loaded successfully arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 mcps_module_init() initializing Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 124k freed Warning: unable to open an initial console. Algorithmics/MIPS FPU Emulator v1.5 [sighandler]: No more events to be processed, quitting. [cleanup]: Waiting for children. [cleanup]: All children terminated. sysinit() done use original.... Assume Wi-Fi RadioOn everytime reboot!! connect: Network is unreachable rt2860v2_ap: module license 'unspecified' taints kernel. === pAd = c000f000, size = 487768 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 === pAd = c0307000, size = 513184 === <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc01a0000, csr_addr=0xc01a0000! Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. NET: Registered protocol family 10 MAC_ADRH -- : 0x00000886 MAC_ADRL -- : 0x3baff1c0 phy_tx_ring = 0x00340000, tx_ring = 0xa0340000 phy_rx_ring0 = 0x00341000, rx_ring0 = 0xa0341000 CDMA_CSG_CFG = 81000007 GDMA1_FWD_CFG = C0710000 eth2.1: dev_set_promiscuity(master, 1) device eth2 entered promiscuous mode device eth2.1 entered promiscuous mode br0: port 1(eth2.1) entering learning state force port 0 up force port 1 up force port 2 up force port 3 up rmmod: hw_nat CHIPID=RT3883 Ralink HW NAT Module Enabled /bin/mknod /dev/ac0 c 240 0 Policy Table Base=B0101000 Offset=3320 B0101CF8: 00110F01 B0101CFC: 00000000 done Policy Table Base=B0101000 Offset=3320 B0101CF8: 00110F01 B0101CFC: 00000000 Policy Table Base=B0101000 Offset=3328 B0101D00: 00210F05 B0101D04: 00000000 done Starting HotPlug: /usr/sbin/hotplugd -D -f Starting jcpd daemon: /usr/sbin/jcpd br0: topology change detected, propagating br0: port 1(eth2.1) entering forwarding state fw_rule_isolatedlan: br0 fw_rule_isolatedlan: br0 fw_rule_SkipSnatToLans: br0 fw_rule_SkipDnatFromLans: br0 RX DESC a0357000 size = 2048 Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 8 2. Phy Mode = 8 3. Phy Mode = 8 RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff ff 00 01 SYNC - BBP R4 to 20MHz.l Main bssid = 08:86:3b:af:f1:c2 <==== rt28xx_init, Status=0 0x1300 = 00064300 device ra0 entered promiscuous mode br0: port 2(ra0) entering learning state RX DESC a311e000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff 00 00 00 SYNC - BBP R4 to 20MHz.l Starting Samba: /usr/sbin/smbd -D br0: topology change detected, propagating br0: port 2(ra0) entering forwarding state Main bssid = 08:86:3b:af:f1:c0 <==== rt28xx_init, Status=0 0x1300 = 00064380 /usr/sbin/nmbd -D device rai0 entered promiscuous mode br0: port 3(rai0) entering learning state br0: topology change detected, propagating br0: port 3(rai0) entering forwarding state eth2.2: Setting MAC address to 08 86 3b af f1 c1. < rc_wan_start: 640>: ifconfig eth2.2 up do init wsc MsgQ System Initialization! udhcpc_main(452): udhcp client (v0.9.8) started rc_nat_dmz_stop, 256 rc_nat_dmz_action nat_dmz_rule_flush, 67: wan_index 0 set FW_DMZ_STAT 0 with wan_index 0 CFG_NAT_DMZ_HOST = 2139564456 host = rc_nat_vts_stop, 336 Create netlink socket thread success! Create ioctl socket(6) success! Create wscd wpsm_upnp_attach() OK Starting sxuptpd ipv6 started 0 share memory key=74565 successful id on creating=32769 led_process_init() eco=0 signalling RUNNING USB port mode selector has been enabled Initializing USB port mode: rc_fw_macflt_stop : 163 port1 = NAS port2 = NAS usbcore: registered new interface driver sxuptp_driver Starting usbjcpd start Eco_mode insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/storage/usb-storage.ko': Invalid parameters (17): Invalid argument ***** g_wl_interface = rai0 ****** lld2d: listening on interface br0 start belkin_wan_cfg rc_nat_Masquerade_stop, 182 rc_nat_Masquerade_action nat_Masquerade_rule_flush UPnP daemon is ready to run belkin_wan_cfg running on 102a8c0 udhcpc_main(737): Received SIGTERM ctrl_flags=0x38 mcps: mcps_netlink_rcv() nlh->nlmsg_len=528mcps: mcps_process_registration() mcps_pid=991 mcps: mcps_process_registration() set control flag 0x38 Succeed cTmpString = belkin.1c0 Daemonizing... /usr/local/twonky/twonkystarter -D -appdata /tmp/twonky WaitUntilTwonkyRPCReady[1018]: /bin/mknod /dev/ARCOSIX_DEV c 253 0 twonky_cmd[879]: wget -O /tmp/twonky_cmd "http://127.0.0.1:9000/rpc/info_status" Connecting to 127.0.0.1:9000 (127.0.0.1:9000) twonky_cmd 100% |*******************************| 341 --:--:-- ETA serverkind|ME WaitUntilTwonkyRPCReady: count 19, ret 1 twonky_add_drive starting NO USB MOUNTED twonky_add_drive[737]: DONE rc_twonky_start: 1118 rc_all_start 112
OpenWrt bootlog
PUT HERE YOUR BOOTLOG