PHICOMM K2
The PHICOMM K2 PSG1218 is a wireless router with both 2.4 GHz and 5 GHz radios. It has five Fast Ethernet ports, later revisions featuring five Gigabit Ethernet ports, and a moderately fast processor.
Supported Versions
Philcom K2 Rev. A:
Philcom K2 Rev. B:
Hardware Highlights
Philcom K2 Rev. A:
Philcom K2 Rev. B:
Installation
Philcom K2 Rev. A:
Philcom K2 Rev. B:
→ Install OpenWrt (generic explanation)
Please add the installation procedure here.
Flash Layout
Find out flash layout, then add the flash layout table here (copy, paste, modify the example).
Please check out the article Flash layout. It contains examples and explanations that describe how to document the flash layout.
OEM easy installation
The instructions below are for Broadcom devices and only serve as an example.
Remove / modify them if they do not apply to this particular device!
This section deals with
- How you install OpenWrt from a device freshly opened
- The steps required such as reset to factory defaults if the device has already been configured
Note: Reset router to factory defaults if it has been previously configured.
- Browse to
http://192.168.1.1/Upgrade.asp - Upload .bin file to router
- Wait for it to reboot
- Telnet to 192.168.1.1 and set a root password, or browse to
http://192.168.1.1if LuCI is installed.
Upgrading OpenWrt
LuCI Web Upgrade Process
- Browse to
http://192.168.1.1/cgi-bin/luci/admin/system/flashLuCI Upgrade URL - Upload image file for sysupgrade to LuCI
- Wait for reboot
Terminal Upgrade Process
If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. There are command line methods for upgrading.
Note: It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
sysupgrade
- Login as root via SSH on 192.168.1.1, then enter the following commands:
Rev. A & SW Ver 22.4 or before:
cd /tmp wget https://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7620/openwrt-24.10.0-ramips-mt7620-phicomm_k2-v22.4-squashfs-sysupgrade.bin sysupgrade /tmp/openwrt-24.10.0-ramips-mt7620-phicomm_k2-v22.4-squashfs-sysupgrade.bin
Rev. A & SW Ver 22.5 or later:
cd /tmp wget https://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7620/openwrt-24.10.0-ramips-mt7620-phicomm_k2-v22.5-squashfs-sysupgrade.bin sysupgrade /tmp/openwrt-24.10.0-ramips-mt7620-phicomm_k2-v22.5-squashfs-sysupgrade.bin
Debricking
Failsafe mode
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Network interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| vlan0 (eth0.1) | LAN ports (1 to 4) | None |
| vlan1 (eth0.2) | WAN port | DHCP |
| wl0 | WiFi | Disabled |
Switch Ports (for VLANs)
The default switch port configuration is:
| Port | Switch port | Mode |
|---|---|---|
| LAN 1 | 0 | lan |
| LAN 2 | 1 | lan |
| LAN 3 | 2 | lan |
| LAN 4 | 3 | lan |
| WAN | 4 | Internet (WAN) |
| n/a | 6t | to CPU |
Buttons
→ hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.
The PHICOMM K2 has the following buttons:
| BUTTON | Event |
|---|---|
| Reset | Reset to default settings |
Hardware
Photos
Front:
Back:
Backside label:
Opening the case
Note: This will void your warranty!
- There is two screws under the label on the bottom cover.
- There are 10 tabs.
- Gently pry appart from the case.
Main PCB:
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device:
| Serial connection parameters for PHICOMM K2 | 57600, 8N1 |
|---|
Bootloader mods
Hardware mods
None so far.
Bootlogs
OEM bootlog
COPY HERE THE BOOTLOG WITH THE ORIGINAL FIRMWARE
OpenWrt bootlog
Boot and Recovery Environment for Embedded Devices Copyright (C) 2020 HackPascal <hackpascal@gmail.com> Build date 2020-10-09 [git-676bfd4] Version 1.1 (r1286) DRAM: 64MB Platform: MediaTek MT7620A ver 2, eco 6 Board: Phicomm PSG1208 (K1) Clocks: CPU: 580MHz, Bus: 193MHz Flash: GigaDevice GD25Q64 (8MB) on rt2880-spi rt2880-eth: Using MAC address (redacted) eth0: MediaTek MT7620A built-in 5-port 10/100M switch Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0 Press any key to interrupt autoboot ... 0 Trying to boot firmware from 0x00050000 in flash bank 0 ... Reading data into memory ... U-Boot firmware image header detected. Image Name: MIPS OpenWrt Linux-5.15.167 Data Size: 2303171 Bytes Load Address: 80000000 Entry Point: 80000000 Uncompressing data (LZMA) ... done. Flushing cache ... done. Starting kernel at 0x80000000... [ 0.000000] Linux version 5.15.167 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24106-10cc5fcd00) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 Mon Sep 23 12:34:46 2024 [ 0.000000] Board has DDR2 [ 0.000000] Analog PMU set to hw control [ 0.000000] Digital PMU set to hw control [ 0.000000] SoC Type: MediaTek MT7620A ver:2 eco:6 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019650 (MIPS 24KEc) [ 0.000000] MIPS: machine is Phicomm K2 v22.4 or older [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16240 [ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2 [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.000000] Writing ErrCtl register=0002bf5d [ 0.000000] Readback ErrCtl register=0002bf5d [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 56072K/65536K available (5949K kernel code, 611K rwdata, 744K rodata, 1200K init, 225K bss, 9464K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS: 256 [ 0.000000] CPU Clock: 580MHz [ 0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns [ 0.000000] systick: enable autosleep mode [ 0.000000] systick: running - mult: 214748, shift: 32 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns [ 0.000002] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns [ 0.015577] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.087799] pid_max: default: 32768 minimum: 301 [ 0.098162] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.112593] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.138180] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.157651] futex hash table entries: 256 (order: -1, 3072 bytes, linear) [ 0.171404] pinctrl core: initialized pinctrl subsystem [ 0.183479] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.195948] thermal_sys: Registered thermal governor 'step_wise' [ 0.466841] rt2880_gpio 10000600.gpio: registering 24 gpios [ 0.489816] rt2880_gpio 10000600.gpio: registering 24 irq handlers [ 0.504327] PCI host bridge to bus 0000:00 [ 0.512401] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff] [ 0.526008] pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff] [ 0.539680] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.555486] pci 0000:00:00.0: [1814:0801] type 01 class 0x060400 [ 0.567389] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 0.579840] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff] [ 0.592383] pci 0000:00:00.0: supports D1 [ 0.600251] pci 0000:00:00.0: PME# supported from D0 D1 D3hot [ 0.613861] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.629983] pci 0000:01:00.0: [14c3:7662] type 00 class 0x028000 [ 0.641871] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit] [ 0.655347] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] [ 0.668746] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold [ 0.682908] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 0.695986] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 [ 0.709177] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000] [ 0.722256] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000] [ 0.736094] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff] [ 0.749596] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref] [ 0.763961] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff] [ 0.777474] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit] [ 0.792020] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref] [ 0.806367] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.816224] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff] [ 0.829731] pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref] [ 0.844785] clocksource: Switched to clocksource systick [ 0.857112] NET: Registered PF_INET protocol family [ 0.867079] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.882562] tcp_listen_portaddr_hash hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.899336] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.914657] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.929894] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.943914] TCP: Hash tables configured (established 1024 bind 1024) [ 0.956755] UDP hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.969688] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.983963] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.995253] PCI: CLS 0 bytes, default 32 [ 1.003202] rt-timer 10000100.timer: maximum frequency is 1220Hz [ 1.020209] workingset: timestamp_bits=14 max_order=14 bucket_order=0 [ 1.040548] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 1.052081] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 1.073497] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252) [ 1.091546] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 1.107823] printk: console [ttyS0] disabled [ 1.116345] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103 [ 1.135993] printk: console [ttyS0] enabled [ 1.135993] printk: console [ttyS0] enabled [ 1.152566] printk: bootconsole [early0] disabled [ 1.152566] printk: bootconsole [early0] disabled [ 1.192898] spi spi0.0: force spi mode3 [ 1.202234] spi-nor spi0.0: gd25q64 (8192 Kbytes) [ 1.211765] 4 fixed-partitions partitions found on MTD device spi0.0 [ 1.224501] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 1.239129] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 1.254188] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 1.268844] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 1.283665] Creating 4 MTD partitions on "spi0.0": [ 1.293258] 0x000000000000-0x000000030000 : "u-boot" [ 1.306949] 0x000000030000-0x000000040000 : "u-boot-env" [ 1.319102] 0x000000040000-0x000000050000 : "factory" [ 1.332633] 0x000000050000-0x000000800000 : "firmware" [ 1.344607] 2 uimage-fw partitions found on MTD device firmware [ 1.356525] Creating 2 MTD partitions on "firmware": [ 1.366431] 0x000000000000-0x000000232503 : "kernel" [ 1.376330] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only [ 1.396237] 0x000000232503-0x0000007b0000 : "rootfs" [ 1.406251] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only [ 1.426932] mtd: setting mtd5 (rootfs) as root device [ 1.437225] 1 squashfs-split partitions found on MTD device rootfs [ 1.449588] 0x0000005b0000-0x0000007b0000 : "rootfs_data" [ 1.492166] gsw: setting port4 to ephy mode [ 1.500981] mtk_soc_eth 10100000.ethernet: mdio-bus disabled [ 1.512563] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver [ 1.525259] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 [ 1.542632] rt2880_wdt 10000120.watchdog: Initialized [ 1.554932] NET: Registered PF_INET6 protocol family [ 1.572915] Segment Routing with IPv6 [ 1.580443] In-situ OAM (IOAM) with IPv6 [ 1.588467] NET: Registered PF_PACKET protocol family [ 1.598701] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.624981] 8021q: 802.1Q VLAN Support v1.8 [ 1.635676] clk: Disabling unused clocks [ 1.653519] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 1.674214] Freeing unused kernel image (initmem) memory: 1200K [ 1.686058] This architecture does not have kernel memory protection. [ 1.698904] Run /sbin/init as init process [ 2.549041] init: Console is alive [ 2.556637] init: - watchdog - [ 3.749347] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.839118] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.859780] init: - preinit - [ 5.322961] random: jshn: uninitialized urandom read (4 bytes read) [ 5.520038] random: jshn: uninitialized urandom read (4 bytes read) [ 5.769913] random: jshn: uninitialized urandom read (4 bytes read) [ 6.594080] 8021q: adding VLAN 0 to HW filter on device eth0 [ 6.620888] random: procd: uninitialized urandom read (4 bytes read) Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.666991] jffs2: notice: (300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 16 of xdatum (14 unchecked, 2 orphan) and 21 of xref (2 dead, 0 orphan) found. [ 7.701738] mount_root: switching to jffs2 overlay [ 7.718430] overlayfs: upper fs does not support tmpfile. [ 7.737462] urandom-seed: Seeding with /etc/urandom.seed [ 7.877504] procd: - early - [ 7.883839] procd: - watchdog - [ 8.355139] procd: - watchdog - [ 8.362150] procd: - ubus - [ 8.468207] random: ubusd: uninitialized urandom read (4 bytes read) [ 8.484892] random: ubusd: uninitialized urandom read (4 bytes read) [ 8.505645] random: ubusd: uninitialized urandom read (4 bytes read) [ 8.525646] procd: - init - Please press Enter to activate this console. [ 9.751702] random: jshn: uninitialized urandom read (4 bytes read) [ 9.832337] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.873335] random: ubus: uninitialized urandom read (4 bytes read) [ 9.941978] kmodloader: loading kernel modules from /etc/modules.d/* [ 10.661957] Loading modules backported from Linux version v6.1.110-0-g5f55cad62cc9d [ 10.677338] Backport generated by backports.git v6.1.110-1-0-g965f73fc [ 11.304649] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4 [ 11.317459] mt76x2e 0000:01:00.0: ASIC revision: 76120044 [ 12.016867] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a [ 12.055784] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00 [ 12.066820] mt76x2e 0000:01:00.0: Build: 1 [ 12.074982] mt76x2e 0000:01:00.0: Build Time: 201607111443____ [ 12.132981] mt76x2e 0000:01:00.0: Firmware running! [ 12.142908] mt76x2e 0000:01:00.0: registering led 'mt76-phy0' [ 12.415786] PPP generic driver version 2.4.2 [ 12.454717] NET: Registered PF_PPPOX protocol family [ 12.703497] rt2800_wmac 10180000.wmac: loaded eeprom from mtd device "factory" [ 12.717956] ieee80211 phy1: rt2x00_set_rt: Info - RT chipset 6352, rev 0500 detected [ 12.733434] ieee80211 phy1: rt2x00_set_rf: Info - RF chipset 7620 detected [ 12.885757] kmodloader: done loading kernel modules from /etc/modules.d/* [ 42.572978] random: crng init done [ 42.579781] random: 88 urandom warning(s) missed due to ratelimiting [ 71.297186] 8021q: adding VLAN 0 to HW filter on device eth0 [ 71.380982] br-lan: port 1(eth0.1) entered blocking state [ 71.391846] br-lan: port 1(eth0.1) entered disabled state [ 71.403067] device eth0.1 entered promiscuous mode [ 71.412627] device eth0 entered promiscuous mode [ 71.595687] br-lan: port 1(eth0.1) entered blocking state [ 71.606546] br-lan: port 1(eth0.1) entered forwarding state [ 72.333465] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 82.815118] ieee80211 phy1: rt2800_rxiq_calibration: Warning - RXIQ calibration FAIL [ 82.975015] ieee80211 phy1: rt2800_rxiq_calibration: Warning - RXIQ calibration FAIL [ 83.121990] br-lan: port 2(phy1-ap0) entered blocking state [ 83.133306] br-lan: port 2(phy1-ap0) entered disabled state [ 83.144844] device phy1-ap0 entered promiscuous mode [ 83.154968] br-lan: port 2(phy1-ap0) entered blocking state [ 83.166125] br-lan: port 2(phy1-ap0) entered forwarding state [ 83.183114] br-lan: port 2(phy1-ap0) entered disabled state [ 84.102722] IPv6: ADDRCONF(NETDEV_CHANGE): phy1-ap0: link becomes ready [ 84.116252] br-lan: port 2(phy1-ap0) entered blocking state [ 84.127421] br-lan: port 2(phy1-ap0) entered forwarding state [ 86.782490] br-lan: port 3(phy0-ap0) entered blocking state [ 86.793812] br-lan: port 3(phy0-ap0) entered disabled state [ 86.805342] device phy0-ap0 entered promiscuous mode [ 86.815555] br-lan: port 3(phy0-ap0) entered blocking state [ 86.826733] br-lan: port 3(phy0-ap0) entered forwarding state [ 86.841397] br-lan: port 3(phy0-ap0) entered disabled state [ 88.471533] IPv6: ADDRCONF(NETDEV_CHANGE): phy0-ap0: link becomes ready [ 88.485060] br-lan: port 3(phy0-ap0) entered blocking state [ 88.496230] br-lan: port 3(phy0-ap0) entered forwarding state BusyBox v1.36.1 (2024-09-23 12:34:46 UTC) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt 23.05.5, r24106-10cc5fcd00 ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@Phicomm:/#
Notes
Space for additional notes, links to forum threads or other resources.
- ...