Samsung SMT-G3000 series

: Please transfer the informations from the old wiki pages SMT-G3010, SMT-G3210 and SMT-G3220 into this page. Thank you.

From: Samsung IAD SMT-G3000 series (109 kB, pdf)

at: 31. January 2010

What do these mean?

• “DONE” means that it is implemented
• “WIP” means that the implementation is being worked on, but should not be considered ready for general testing.
• “SLOW” means that the feature is DONE, but not performant due to known deficiencies in the code.
• “TODO” means that the implementation is incomplete and nobody is working on it.
• “WAIT for ...” means the the feature is basically DONE but waits for implementation of an other feature
• “UNKNOWN” means that the current status of this item isn't known.

This was only tested on a Samsung SMT-G3210, but should also work with other devices. You need access to the serial console and OpenWrt trunk.

1. remove broken from target/linux/amazon/Makefile
2. run make menuconfig, select infineon amazon and configure the target image to ramdisk with lzma compression.
3. setup a tftp server and place bin/amazon/openwrt-amazon-uImage into the server dir
4. start the Samsung device, connect to it through serial console and enter u-boot (press enter while it starts u-boot, works only with Samsung firmware 1.02)
5. connect the pc with Ethernet to the device
6. change serverip in u-Boot to the ip address the PC has (setenv serverip 192.168.220.100), do not set it to the ip address of the Samsung device (printenv ipaddr)
7. change the bootfile variable (setenv bootfile openwrt-amazon-uImage)
8. run the boot command (run net_nfs)

Only if you want your device always boot via tftp, do the following before running the boot command:

• change boot command (setenv bootcmd net_nfs)
• save the u-boot environment to flash (saveenv)
• test your configuration by rebooting the router (reset)

If you want to change back to boot from flash to the following:

• change back to default boot command (setenv bootcmd flash_flash)
• save the u-boot environment to flash (saveenv)

Only OpenWrt trunk is running on these devices. You need a serial console to install. This was only tested on a Samsung SMT-G3010 and a Samsung SMT-G3210.

The following will only work if “AMD/SPANSION S29LG128 (128 Mbit)” or S29GL128 is used. This should be the normal flash chip on these devices. The flash chip can be verified with flinfo in u-boot.

1. remove broken from target/linux/amazon/Makefile
2. run make menuconfig, select infineon amazon and configure the image.
3. setup an tftp server and place bin/amazon/openwrt-amazon-squashfs.image into the server dir
4. start the Samsung device, connect to it through serial console and enter u-boot (press enter while it starts u-boot)
5. connect the pc with Ethernet to the device
6. change serverip in u-Boot to the ip address the PC has (setenv serverip 192.168.220.100), do not set it to the ip address of the Samsung device (printenv ipaddr)
7. enter flinfo to check if the flash chip is the correct one. It should print out “AMD/SPANSION S29LG128 (128 Mbit)”
8. The next commands will erase most parts of the flash chip. This is only correct if you have the correct flash chip.
   • erase 0xb3060000 0xb3fdffff
   • protect off 0xB3060000 0xb3fdffff
9. load the image into memory
   • tftpboot 80400000 openwrt-amazon-squashfs.image
10. write the image into the flash chip. Replace {image length} with the bytes transfered by tftpboot. If you get (Bytes transferred = 1835012 (1c0004 hex)) use cp.b 0x80400000 0xB3060000 1c0004
    • cp.b 0x80400000 0xB3060000 {image length}
11. reboot the system.
    • reset
12. Now OpenWrt should start on the device.

The manufactures flash layout should look like this:

Since this part is identical for all devices, see Basic configuration.

The hardware seems to be centered around Infineons reference design for an xDSL gateway (see page 9 of http://solution.eccn.com/pdf/Infineon_063141w.pdf).

Model Number

Front:

Photo of front

Back:

Photo of back

Main PCB

Photo of PCB

For more photos see http://laforge.gnumonks.org/photoalbum/devices/samsung_smt-g3210/.

There are four clearly visible screws on the backside of the device. Once they are removed, the two halves of the case can be taken apart easily.

The WiFi antenna is connected via a standard U.FL connector. Simply unplug it. The miniPCI card is glued into the socket, and also glued with an adhesive pad to the PCB below. With a bit of force, it can be removed from the adhesive pad.

On the inside, there is one stacked SLIC PCB which is fixed with one further screw. If you remove it, you can remove the stacked PCB. Removal is quite hard, since the connectors fit very tightly. Make sure to notice there are two stacking connectors!

Connector P1:

Running at 3.3 Volt; 115200 Baud, 8N1.

See port.jtag.

On the bottom of the PCB, there are testpads close to P1. The test pads are labelled TDI TDO TMS and TCK. TRST is pin1 of P1.

Right of connector P1:

The successful dump from the cpld. http://ting.ip-phone-forum.de/attachment.php?attachmentid=25944&d=1214415436 (Can someone fix this link? I fixed link bottom but I dont speak german and cannot find right attachment) The post of xorshadow in the forum. http://www.ip-phone-forum.de/showthread.php?t=151980&p=1121038&viewfull=1#post1121038

DSL/TEL port:

Connecting pin 7 (EN) with pin 4 (GND) of MP1583DN (U1 and U3, both next to the 12V DC connector) will disable these Step-Down converter.
U1 generates 5 volt and U3 generates 3 volt, it is sufficient to disable U3 to force a reset.
WARNING: You could damage your device by doing this, do it on your own risk.

Original information on http://www.samsungnetwork.com/IAD

• GPL-Devices Wiki - Samsung SMT-G3210 (Most of it applies to all routers of this series.)
• Bitflip.de - "Ressourcen für die Samsung SMT-G3XX0 Router" (german)
• IP-Phone-Forum - "Samsung SMT-G3010, SMT-G3210, SMT-G3220: rootfs patchen" (german)

How to add tags