Sercomm AD1018

Devices with Broadcom WiFi chipsets have limited OpenWrt supportability (due to limited FLOSS driver availability for Broadcom chips). Consider this when choosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported. See Broadcom WiFi for details.

DSL will not work at all on devices with BCM63xx DSL chipset (due to unavailability of FLOSS driver for Broadcom chips). Consider this when choosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported.
See Broadcom DSL, Unsupported: DSL modem and Broadcom BCM63xx for details.

  • NAND supported since r13292
  • SPI only supported since r5531

The difference between v1 and v2 is the RAM size:

  • v1: 64 MiB RAM
  • v2: 128 MiB RAM

Note: the NOR installation requires a SPI flash hardware mod

Other downloads:

Hardware MOD
SPI NOR MOD AD1018-spimod-lede.zip stuff for installing LEDE/OpenWrt for the first time using the SPI flash mod
CFE-RAM AD1018-CFE_RAM.zip CFE RAM version with SPI and NAND flash support. Useful for making a NAND flash backup or writing to NAND flash, see NAND flash programmer. Special thanks to antares for this CFE mod

Install OpenWrt (generic explanation)

We'll need to get admin access to the OEM firmware web interface. Therefore if you don't know the admin password, first a factory reset to the default config is required, otherwise start at step 4.

  1. Power on the router and wait for the OEM firmware to load.
  2. Press the reset button, hold it about 8 or more seconds until the PHONE LED starts blinking. Release the button. Now the router will restart.
  3. Wait until the router restarted and access to its web interface:
    • Address: http://192.168.0.1
    • User: admin
    • Password: VF-ESad1018
  4. Go to Settings → Firmware Update, and select the Openwrt factory firmware (sercomm_ad1018-squashfs-factory.img)
  5. Press the Update button and wait some minutes until the update process finish

    The router will restart.
  6. ssh to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

Hardware modding for soldering a new SPI flash chip (> 8 MB) required. Access to the serial port on the router with an UART adapter (3.3V) also required. The specific stuff for this installation is into this file AD1018-spimod-lede.zip

  1. Solder a new flash chip to the test points as shown in the picture

    don't desolder R228 yet

  2. Connect the serial port at the router to your computer using an UART (3.3V) serial port adapter.

  3. Put the LEDE RAM firmware into a TFTP server in your computer. Conect an ethernet cable from your computer to the router, and set a static IP address compatible with the router (i.e. 192.168.1.7).

  4. Power on the router, break into the CFE command line using the serial console.

  5. Run the LEDE RAM firmware using the CFE serial console
    r 192.168.1.7:ad1018-lede-ram.elf
    (192.168.1.7 is an static IP on your computer and ad1018-lede-ram.elf is into the TFTP server's directory)

  6. Now with LEDE RAM firmware running, flash the new CFE into the SPI flash chip. In the LEDE command line execute:
    mtd write CFE-AD1018-CUSTOM-SPI.bin cfe

  7. Flash the LEDE firmware into the SPI flash chip
    mtd write ad1018-lede-r4696.bin linux

  8. Power off the router, and remove the R228 resistor

  9. Power on the router, the OpenWrt firmware will start up.

  10. Done

Recommended SPI flash chips, they're cheap and should work with the custom bootloader:

  • Winbond W25Q64: 8 MB (tested)
  • Winbond W25Q128: 16 MB (tested)
  • Winbond W25Q256: 32 MB

The bootloader (CFE) comes with a proprietary Sercomm module for recovering purposes. If for some reason the router is unable to boot due to a faulty firmware, you can recover the router by putting it into Sercomm Upgrade mode. Follow these steps:

  1. Power off the router
  2. Press the RESET button, don't release it yet!
  3. Power on the router
  4. Wait 8 seconds or more until the LEDs blink sequentially from left to right
  5. Release the RESET button
  6. Execute the sercomm-recovery utility as root in your OS-linux computer:
    sercomm-recovery -v eth0 flash_burn.bin

    If you have the serial console attached to the router, you'll se this output:

    CFE version 1.0.38-114.185 for BCM96328 (32bit,SP,BE) Build Date: 2013年 08月 21日 星期三 11:42:59 CST (root@localhost) Copyright (C) 2000-2011 Broadcom Corporation. NAND flash device: name , id 0x92f1 block 128KB size 131072KB Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 find flag begin read flash map Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-10) : 96328avngr Number of MAC Addresses (1-32) : 16 Base MAC Address : d4:21:22:89:e4:e4 PSI Size (1-64) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 Voice Board Configuration (0-7) : SI32176 SC_DEBUG: Nand Partition Table Magic Found at 20000. *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 Port 1 link UP 0 *************************************************** Sercomm Boot Version 1.1.3.0 *************************************************** Reset Button is pressed! DEBUG_INF:=================================================== DEBUG_INF:Sercomm Upgrade(Module Ver 2.01) Start! DEBUG_INF:=================================================== DEBUG_INF:event, get version DEBUG_INF:normal upgrade. DEBUG_INF:Erase Done. DEBUG_INF:Program Starting. DEBUG_INF:Verify Starting. DEBUG_ERR:stop timer DEBUG_INF:=================================================== DEBUG_INF:Stats of this Sercomm Upgrade is as below: DEBUG_INF:=================================================== DEBUG_INF:Partition cferom with index 0, offset 0x00000000, length 0x00020000 NOT erased! DEBUG_INF:Partition partition-map with index 1, offset 0x00020000, length 0x000a0000 NOT erased! DEBUG_INF:Partition cferam1 with index 2, offset 0x000c0000, length 0x00140000 NOT erased! DEBUG_INF:Partition cferam2 with index 3, offset 0x00200000, length 0x00140000 NOT erased! DEBUG_INF:Partition PCBASN with index 4, offset 0x00340000, length 0x000a0000 NOT erased! DEBUG_INF:Partition protect with index 5, offset 0x003e0000, length 0x00140000 NOT erased! DEBUG_INF:Partition xml_cfg with index 12, offset 0x06ba0000, length 0x00280000 NOT erased! DEBUG_INF:--------------------------------------------------- DEBUG_INF:Partition kernel_fs1 with index 6, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition lib_1 with index 7, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition kernel_fs2 with index 8, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition lib_2 with index 9, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition boot_flag1 with index 10, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition boot_flag2 with index 11, updated! (0000)bad, (0000)dropped! DEBUG_INF:Partition app_data with index 13, updated! (0000)bad, (0000)dropped! DEBUG_INF:=================================================== DEBUG_INF:Reset. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Resetting board in 0 seconds...HELO


OEM firmware (3.0.11) highlights:

  • Support for ADSL2+
  • Support for VoIP over the WAN port. It can reinject the voice through the ADSL port.
  • One ethernet port can be configured as WAN (FIBRE port).
  • No support for WEP WiFi encryption via web interface.
  • WDS bridging cannot be configured via web interface, but can be configured via busybox command line.
    • No encryption: tested OK. It should work with any router.
    • WEP: tested OK with some Broadcom based wifi routers. Only 802.11b/g (54 Mbps)
    • WPA2 AES: tested OK with a Comtrend AR-5315u (OEM firmware). Both routers must use the same SSID.
  • The configuration file is associated with the MAC address. It cannot be interchangeable with other AD1018 routers.
  • The ssh daemon isn't enabled by default. The only known way to enable it is to let the router be autoconfigured itself via TR-069 (made by the ISP).
  • The default IP is 192.168.0.1
  • dualImage_ctrl is used to upgrade the image, example: dualImage_ctrl -dsrcu /tmp/var/firmware.img
  • Command for entering into the Sercomm CLI: /bin/sc_cli -m SSH -p 127.0.0.1 -- support

For configuring the device there are three available users in the Vodafone-ES stock firmware:

User Default password Notes
vodafone vodafone Limited access
admin VF-ESad1018 Full access (root)
support support Full access (root). Only works when accessing through the WAN port
OEM firmware
MOD VFES_3.0.11 AD1018-firmware_MOD-VFES_3011.img Custom build from Sercomm GPL sourcecode, nand utils included
OEM VFES_2.0.08 AD1018-firmware_OEM-VFES_2008.img Original firmware from Vodafone ISP
OEM VFES_3.0.11 AD1018-firmware_OEM-VFES_3011-telnetd.img Original firmware from Vodafone ISP, telnetd (port 2323) added
OEM VFES_3.0.13 AD1018-firmware_OEM-VFES_3013.img Original firmware from Vodafone ISP, telnetd (port 2323) added
OEM source code AD1018_3011_20170822.tgz Sercomm GPL sourcecode, some bits may be missing

There are two firmware images. The device decides to boot one or another depending on a special flag stored in the bootflag partitions. Example:

  • bootflag1 partition: eRcOmM.004
  • bootflag2 partition: eRcOmM.003

In this case the device will boot the 1st firmware because its bootflag has the highest number. In the case both bootflags are equal it will boot the 1st firmware.

Every time a firmware is flashed via stock firmware, it is made over the non booted firmware partitions, and its bootflag is increased. The device will boot from it on the next restart.

We can change the firmware to boot from by manually setting the bootflag. This can be done from the busybox CLI. Example for booting from the 2nd firmware:

flash_eraseall /dev/mtd8
flash_eraseall /dev/mtd9
echo -n "eRcOmM.000" | dd of=/dev/mtdblock8
echo -n "eRcOmM.001" | dd of=/dev/mtdblock9
ID code                          : 92f18095
Manufacturer                     : EON
Device                           : NAND 128MiB 3,3V 8-bit
Die/Package                      : 1
Cell type                        : 2 Level Cell
Simultaneously programmed paged  : 1
Interleave between multiple chips: False
Write cache                      : True
Page size                        : 2048 bytes (2 K)
Spare area size                  : 16 bytes / 512 byte
Block size                       : 131072 bytes (128 K)
Block count                      : 1024
Organization                     : X16
Serial access time               : 25 ns
OOB size                         : 64 bytes
Index Partition Name filesystem description Block Offset Size Size (KiB)
00 mtd0 cferom n/a rom bootloader 0 0x0000000 0x0020000 128
01 mtd3 partition-map n/a partition table 1 0x0020000 0x00a0000 640
02 mtd1 cferam1 jffs2 ram bootloader 1 5 0x00c0000 0x0140000 1280
03 mtd2 cferam2 jffs2 ram bootloader 2 16 0x0200000 0x0140000 1280
04 mtd4 PCBASN n/a serial number 26 0x0340000 0x00a0000 640
05 mtd5 protect jffs2 (rw) csn, hw_id, pin_code, wlan_ssid, wlan_wpa2_key 31 0x03e0000 0x0140000 1280
06 mtd6 kernel_fs1 jffs2 (ro) Linux root 1 41 0x0520000 0x1e00000 30720
07 mtd12 lib_1 jffs2 (ro) Linux root libraries 1 281 0x2320000 0x1400000 20480
08 mtd7 kernel_fs2 jffs2 (ro) Linux root 2 441 0x3720000 0x1e00000 30720
09 mtd13 lib_2 jffs2 (ro) Linux root libraries 2 681 0x5520000 0x1400000 20480
10 mtd8 bootflag1 n/a boot select 841 0x6920000 0x0140000 1280
11 mtd9 bootflag2 n/a boot select 851 0x6a60000 0x0140000 1280
12 mtd10 xml_cfg jffs2 (rw) configuration 861 0x6ba0000 0x0280000 2560
13 mtd11 app_data jffs2 (rw) logs 881 0x6e20000 0x0280000 2560

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
eth0 switch vlan1, vlan2
eth0.1 vlan1: LAN1, LAN2, LAN3 bridged
eth0.2 vlan2: FIBRE WAN, dhcp
wlan0 WiFi bridged (disabled)
Instruction set MIPS
Vendor Broadcom
bootloader CFE
Board ID 96328avngr
System-On-Chip Broadcom BCM6328 3KFBG
CPU @Frq BMIPS4350 V7.5 @320 MHz
Flash-Chip F59L1G81A-25T / TSOP48 NAND
Flash size 128 MiB
RAM-Chip EtronTech EM68C16CWQE-25H / DDR2-800
RAM size 128 MiB
Wireless BCM43217 802.11b/g/n (onboard)
Ethernet Internal BRCM6328 Switch, 4x 100M + ADSL2+
USB 1x 2.0 mod
FXS VoIP Silicon Labs Si32177-FM1
PSU 12V DC 1.5A / I.T.E MU18-R120150-C5
Serial Yes
JTAG Yes

Casing

Board

BCM43217 802.11b/g/n onboard wifi, 2x non-detachable external antennas.

No physical EEPROM at the board, nor partition reserverd for this data at the flash chip. In theory, in the original firmware, the EEPROM is taken from the file /etc/wlan/bcm43227_map.bin

In OpenWrt the kmod-b43 driver should be used, therefore N mode isn't available. kmod-bcmsmac could support N mode but isn't still supported for the BCM43217 wifi.

OEM wifi dumps:

~ # wlctl revinfo vendorid 0x14e4 deviceid 0x43a9 radiorev 0xe2057000 chipnum 0xa8d1 chiprev 0x1 chippackage 0x9 corerev 0x1e boardid 0x5e9 boardvendor 0x14e4 boardrev P256 driverrev 0x61e6607 ucoderev 0x3100002 bus 0x1 phytype 0x4 phyrev 0x11 anarev 0x0 ~ # wlctl srdump srom[000]: 0x2801 0x0000 0x05e9 0x14e4 0x0070 0xedbe 0x1c00 0x2bc4 srom[008]: 0x2a64 0x2964 0x2c64 0x3ce7 0x46ff 0x47ff 0x0c00 0x0820 srom[016]: 0x0030 0x1002 0x9f28 0x5d44 0x8080 0x1d8f 0x0032 0x0100 srom[024]: 0xdf00 0x71f5 0x8400 0x0083 0x8500 0x2010 0x0001 0x0000 srom[032]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[040]: 0x0000 0x0000 0x1008 0x0305 0x0000 0x0000 0x0000 0x0000 srom[048]: 0x43a9 0x8000 0x0002 0x0000 0x1f30 0x1800 0x0000 0x0000 srom[056]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[064]: 0x5372 0x1256 0x0200 0x0000 0x9800 0x0000 0x0000 0x0000 srom[072]: 0x0000 0x0000 0x0003 0xffff 0x88ff 0xffff 0x0003 0x0202 srom[080]: 0xffff 0x0033 0x0000 0x0000 0x0000 0x0000 0x0000 0x0415 srom[088]: 0x0000 0x7800 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[096]: 0x2046 0xfe69 0x1726 0xfa5c 0x0000 0x0000 0x0000 0x0000 srom[104]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[112]: 0x2046 0xfea8 0x1978 0xfa26 0x0000 0x0000 0x0000 0x0000 srom[120]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[128]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[136]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[144]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[152]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[160]: 0x0000 0x2222 0x4444 0x0000 0x0000 0x0000 0x0000 0x0000 srom[168]: 0x0000 0x2222 0x4444 0x2222 0x4444 0x2222 0x4444 0x2222 srom[176]: 0x4444 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[184]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[192]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[200]: 0x0000 0x0000 0x0000 0x0000 0x0000 0xffff 0xffff 0xffff srom[208]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[216]: 0xffff 0xffff 0xffff 0x7a08 ~ # wlctl nvram_dump sromrev=8 boardrev=0x1256 boardflags=0x200 boardflags2=0x9800 boardtype=0x5e9 subvid=0x14e4 boardnum=0 regrev=3 ledbh3=136 pa0b0=0xfe69 pa0b1=0x1726 pa0b2=0xfa5c pa0itssit=32 pa0maxpwr=70 opo=34 aa2g=3 aa5g=0 ag0=2 ag1=2 ag2=255 ag3=255 pa1b0=0x0 pa1b1=0x0 pa1b2=0x0 pa1lob0=0x0 pa1lob1=0x0 pa1lob2=0x0 pa1hib0=0x0 pa1hib1=0x0 pa1hib2=0x0 pa1itssit=0 pa1maxpwr=0 pa1lomaxpwr=0 pa1himaxpwr=0 bxa2g=0 rssisav2g=0 rssismc2g=0 rssismf2g=0 bxa5g=0 rssisav5g=0 rssismc5g=0 rssismf5g=0 tri2g=0 tri5g=0 tri5gl=0 tri5gh=0 rxpo2g=0 rxpo5g=0 txchain=3 rxchain=3 antswitch=0 tssipos2g=1 extpagain2g=2 pdetrange2g=2 triso2g=4 antswctl2g=0 tssipos5g=0 extpagain5g=0 pdetrange5g=0 triso5g=0 antswctl5g=0 ccode= macaddr=94:4a:0c:8c:54:5b tempthresh=120 tempoffset=0 rawtempsense=0x0 measpower=0x0 tempsense_slope=0x0 tempcorrx=0x0 tempsense_option=0x0 freqoffset_corr=0x0 iqcal_swp_dis=0x0 hw_iqcal_en=0x0 elna2g=0 elna5g=0 phycal_tempdelta=0 temps_period=0 temps_hysteresis=0 measpower1=0x0 measpower2=0x0 cck2gpo=0 ofdm2gpo=1145315874 ofdm5gpo=0 ofdm5glpo=0 ofdm5ghpo=0 mcs2gpo0=8738 mcs2gpo1=17476 mcs2gpo2=8738 mcs2gpo3=17476 mcs2gpo4=8738 mcs2gpo5=17476 mcs2gpo6=8738 mcs2gpo7=17476 mcs5gpo0=0 mcs5gpo1=0 mcs5gpo2=0 mcs5gpo3=0 mcs5gpo4=0 mcs5gpo5=0 mcs5gpo6=0 mcs5gpo7=0 mcs5glpo0=0 mcs5glpo1=0 mcs5glpo2=0 mcs5glpo3=0 mcs5glpo4=0 mcs5glpo5=0 mcs5glpo6=0 mcs5glpo7=0 mcs5ghpo0=0 mcs5ghpo1=0 mcs5ghpo2=0 mcs5ghpo3=0 mcs5ghpo4=0 mcs5ghpo5=0 mcs5ghpo6=0 mcs5ghpo7=0 cddpo=0 stbcpo=0 bw40po=0 bwduppo=0 pcieingress_war=15 rxgainerr2ga0=63 rxgainerr2ga1=31 rxgainerr2ga2=31 rxgainerr5gla0=63 rxgainerr5gla1=31 rxgainerr5gla2=31 rxgainerr5gma0=63 rxgainerr5gma1=31 rxgainerr5gma2=31 rxgainerr5gha0=63 rxgainerr5gha1=31 rxgainerr5gha2=31 rxgainerr5gua0=63 rxgainerr5gua1=31 rxgainerr5gua2=31 noiselvl2ga0=31 noiselvl2ga1=31 noiselvl2ga2=31 noiselvl5gla0=31 noiselvl5gla1=31 noiselvl5gla2=31 noiselvl5gma0=31 noiselvl5gma1=31 noiselvl5gma2=31 noiselvl5gha0=31 noiselvl5gha1=31 noiselvl5gha2=31 noiselvl5gua0=31 noiselvl5gua1=31 noiselvl5gua2=31 subband5gver=7 maxp2ga0=70 itt2ga0=32 itt5ga0=0 pa2gw0a0=0xfe69 pa2gw1a0=0x1726 pa2gw2a0=0xfa5c maxp5ga0=0 maxp5gha0=0 maxp5gla0=0 pa5gw0a0=0x0 pa5gw1a0=0x0 pa5gw2a0=0x0 pa5glw0a0=0x0 pa5glw1a0=0x0 pa5glw2a0=0x0 pa5ghw0a0=0x0 pa5ghw1a0=0x0 pa5ghw2a0=0x0 maxp2ga1=70 itt2ga1=32 itt5ga1=0 pa2gw0a1=0xfea8 pa2gw1a1=0x1978 pa2gw2a1=0xfa26 maxp5ga1=0 maxp5gha1=0 maxp5gla1=0 pa5gw0a1=0x0 pa5gw1a1=0x0 pa5gw2a1=0x0 pa5glw0a1=0x0 pa5glw1a1=0x0 pa5glw2a1=0x0 pa5ghw0a1=0x0 pa5ghw1a1=0x0 pa5ghw2a1=0x0 maxp2ga2=255 itt2ga2=255 itt5ga2=255 pa2gw0a2=0xffff pa2gw1a2=0xffff pa2gw2a2=0xffff maxp5ga2=255 maxp5gha2=255 maxp5gla2=255 pa5gw0a2=0xffff pa5gw1a2=0xffff pa5gw2a2=0xffff pa5glw0a2=0xffff pa5glw1a2=0xffff pa5glw2a2=0xffff pa5ghw0a2=0xffff pa5ghw1a2=0xffff pa5ghw2a2=0xffff maxp2ga3=255 itt2ga3=255 itt5ga3=255 pa2gw0a3=0xffff pa2gw1a3=0xffff pa2gw2a3=0xffff maxp5ga3=255 maxp5gha3=255 maxp5gla3=255 pa5gw0a3=0xffff pa5gw1a3=0xffff pa5gw2a3=0xffff pa5glw0a3=0xffff pa5glw1a3=0xffff pa5glw2a3=0xffff pa5ghw0a3=0xffff pa5ghw1a3=0xffff pa5ghw2a3=0xffff devid=0x43a9 watchdog=60000


port.jtag general information about the JTAG port, JTAG cable, etc.

TP17 = TCK TP16 = TMS TP15 = TDO TP14 = TDI TP13 = TRST

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Only connect TX, RX, and GND.

baud rate: 115200

Serial Peripheral Interface

The SPI interface is near the VoIP chip. An additional Slave Select is at the bottom of the board.

GPIO pin description, location
0 LED internet red
1 LED internet green
2 NAND
3 NAND
4 NAND
5 NAND
6 74HC164 serial_led_data
7 74HC164 serial_led_clk
8 NAND
9 NAND
10 NAND
11 NAND
12 NAND
13 NAND
14 NAND
15 NAND
16 NAND
17 LED ephy0_spd_led
18 R228, NAND/SPI boot strap
19
20
21 NAND
22 NAND
23 RV135, Si3277 INT# (pin 9) → ext IRQ0
24 BUTTON wps
25 BUTTON wifi
26 LED ephy1_act_led
27 LED ephy2_act_led
28 LED ephy3_act_led
29 RV131, Si32177 RST# (pin 20)
30 Relay (Omron G6S-2-Y 3VDC)
31 BUTTON reset

The board is equiped with a Si32177 FXS chip. Connected via SPI to the BCM6328 SoC, using the chip select 2:

Si32177 BCM6328
SDI SPI MOSI
SDO SPI MISO
SCLK SPI CLK
CS# SPI SS2#
INT# GPIO23, EXT_IRQ0
RST# GPIO29

It seems there are drivers available from Dragino2 board (but using SPI-GPIO bitbanging) → https://github.com/villagetelco/vt-fxs-packages/tree/master/dragino2-si3217x

→ as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

Once you have properly working the SPI flash chip as described in Installation, it's possible to use the router as a NAND flash programmer. You need to desolder the original NAND flash chip and solder a TSOP48 socket wired to the naked NAND pads. See pics

Download the CFE RAM version with support for both SPI/NAND flash chips

AD1018-CFE_RAM.zip

Break into the CFE's from the SPI command line, and run the RAM version over a TFTP server installed in your computer

r 192.168.1.7:cfe6328_ram

now you can dump or write the NAND flash, use the help from the command line to see detailed commands

Example:

  • Backup:
    1. Make sure the TFTP server on your computer will accept uploading files from the AD1018 device
    2. In our cfe6328_ram execute
      dumpspare 192.168.1.7:dumpspare.bin
      dumpflash 192.168.1.7:dumpnand.bin
  • Restore the backup
    1. Put dumpspare.bin and dumpnand.bin files into a TFTP server in your PC
    2. Erase the NAND chip, at the cfe6328_ram execute
      eraseflash
    3. Write dumpnand.bin:
      writeflash 192.168.1.7:dumpnand.bin 0
    4. Write the OOB area:
      writespare 192.168.1.7:dumpspare.bin
    5. Done. This a session of restoring a backup

      CFE> eraseflash Do you really want to erase the NAND flash? (y/n):y ......................................................................................................................................................... ......................................................................................................................................................... ......................................................................................................................................................... ......................................................................................................................................................... ......................................................................................................................................................... ......................................................................................................................................................... .......................................................................................................... *** command status = 0 CFE> writeflash 192.168.1.7:dumpnand.bin arg0: 192.168.1.7:dumpnand.bin, arg1: (null), Block: 0 Reading FILE... .......................................................................................................................................................... .......................................................................................................................................................... .......................................................................................................................................................... .......................................................................................................................................................... .......................................................................................................................................................... .......................................................................................................................................................... ...................................................................................................- last block - . 134217728 Bytes writen in blocks 0 to 1023 *** command status = 0 CFE> writespare 192.168.1.7:dumpspare.bin Reading FILE... - last block - 4194304 bytes read from 192.168.1.7:dumpspare.bin 4194304 bytes written to NAND (spare area) *** command status = 0 CFE>


Credits to antares

The board is ready to support an USB host port. We only need to solder a few components

  • F1: 0 ohm resistor
  • R166: 0 ohm resistor
  • R15, R13: 0 ~ 120 ohm resistor. Recommended: 22 ohm
  • Optional: C163, C155, C125, C118: ceramic capacitors with high capacity.

HELO CPUI L1CI DRAM ---- PHYS ZQDN 300H PHYE DINT LSYN USYN MSYN LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN RO08 SUN2 find flag find flag SUN6 000 000 000 000 RAM1 NAN3 RFS0 NAN5 CFE version 1.0.38-114.185 for BCM96328 (32bit,SP,BE) Build Date: 2013��� 08�.. 21�.� �..�..��. 11:42:59 CST (root@localhost) Copyright (C) 2000-2011 Broadcom Corporation. NAND flash device: name , id 0x92f1 block 128KB size 131072KB Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 find flag begin read flash map Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-10) : 96328avngr Number of MAC Addresses (1-32) : 16 Base MAC Address : d4:21:22:89:e4:e4 PSI Size (1-64) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 Voice Board Configuration (0-7) : SI32176 SC_DEBUG: Nand Partition Table Magic Found at 20000. *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 Port 1 link UP 0 *************************************************** Sercomm Boot Version 1.1.3.0 *************************************************** Entering Firmware : Everything is OK. begin check sum safe value is 255 check sum ok Booting from First image (0xb8520000) ... Decompression OK! Entry at 0x80310230 Closing network. Disabling Switch ports. Flushing Receive Buffers... 1 buffers found. Closing DMA Channels. Starting program at 0x80310230 Linux version 2.6.30 (sharon@localhost.localdomain) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #1 Fri Nov 22 17:23:33 CST 2013 BCM Flash API. Flash device is not found. 96328avngr prom init CPU revision is: 0002a075 (Broadcom4350) DSL SDRAM reserved: 0x100000 Determined physical RAM map: memory: 07f00000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00007f00 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00007f00 On node 0 totalpages: 32512 free_area_init_node: node 0, pgdat 803e5200, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 222 pages used for memmap Normal zone: 28194 pages, LIFO batch:7 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32258 Kernel command line: root=mtd:rootfs rw rootfstype=jffs2 console=ttyS0,115200 wait instruction: enabled Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes NR_IRQS:128 PID hash table entries: 512 (order: 9, 2048 bytes) console [ttyS0] enabled Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0 Memory: 124300k/130048k available (3099k kernel code, 5568k reserved, 830k data, 136k init, 0k highmem) Calibrating delay loop... 319.48 BogoMIPS (lpj=159744) Mount-cache hash table entries: 512 --Kernel Config-- SMP=0 PREEMPT=0 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 Broadcom Logger v0.1 Nov 22 2013 17:13:38 net_namespace: 816 bytes NET: Registered protocol family 16 Total Flash size: 0K with -1 sectors registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff] pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:02:00.0: reg 10 64bit mmio: [0x000000-0x007fff] pci 0000:02:00.0: supports D1 D2 pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: 0xa0000000-0xa00fffff pci 0000:01:00.0: PREFETCH window: disabled PCI: Enabling device 0000:01:00.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:01:00.0 to 64 BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 Nov 22 2013 17:21:33 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 2, 16384 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered NET: Registered protocol family 1 NTFS driver 2.1.29 [Flags: R/W]. JFFS2 version 2.2. (NAND) �� 2001-2006 Red Hat, Inc. fuse init (API version 7.11) msgmni has been set to 243 io scheduler noop registered (default) pcieport-driver 0000:01:00.0: device [14e4:6328] has invalid IRQ; check vendor BIOS PCI: Setting latency timer of device 0000:01:00.0 to 64 Driver 'sd' needs updating - please use bus_type methods PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered NET: Registered protocol family 24 bcm963xx_mtd driver v2.0 Failed to read image tag from flash Broadcom DSL NAND controller (BrcmNand Controller) -->brcmnand_scan: CS=0, numchips=1, csi=0 mtd->oobsize=0, mtd->eccOobSize=0 NAND_CS_NAND_XOR=00000000 Disabling XOR on CS#0 brcmnand_scan: Calling brcmnand_probe for CS=0 B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0 brcmnand_read_id: CS0: dev_id=92f18095 After: NandSelect=40000001, nandConfig=15142200 DevId 92f18095 may not be supported. Will use config info Block size=00020000, erase shift=17 NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11 busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff timing1 not adjusted: 5363444f timing2 not adjusted: 00000fc6 BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 128MB on CS0 Found NAND on CS0: ACC=f3000000, cfg=15142200, flashId=92f18095, tim1=5363444f, tim2=00000fc6 BrcmNAND version = 0x0202 128MB @00000000 B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0 brcmnand_read_id: CS0: dev_id=92f18095 After: NandSelect=40000001, nandConfig=15142200 Found NAND flash on Chip Select 0, chipSize=128MB, usable size=128MB, base=0 brcmnand_scan: Done brcmnand_probe brcmnand_scan: B4 nand_select = 40000001 brcmnand_scan: After nand_select = 40000001 brcmnand_scan 10 200 CS=0, chip->ctrl->CS[0]=0 200 chip->ecclevel=15, acc=f3000000 page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17 brcmnand_scan 220 Brcm NAND controller version = 2.2 NAND flash size 128MB @18000000 brcmnand_scan 230 brcmnand_scan 40, mtd->oobsize=64, chip->ecclayout=00000000 brcmnand_scan 42, mtd->oobsize=64, chip->ecclevel=15, isMLC=0, chip->cellinfo=0 ECC layout=brcmnand_oob_bch4_4k brcmnand_scan: mtd->oobsize=64 brcmnand_scan: oobavail=50, eccsize=512, writesize=2048 brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=15, eccbytes=3 300 CS=0, chip->ctrl->CS[0]=0 500 chip=879a7980, CS=0, chip->ctrl->CS[0]=0 -->brcmnand_default_bbt brcmnand_default_bbt: bbt_td = bbt_main_descr Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0 Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0 brcmnand_scan 99 ==> sc_setup_mtd_partitions [sc_setup_mtd_partitions] try read a page at offset = 0x20000 [sc_setup_mtd_partitions] read page OK at offset = 0x20000 mmap flag found on oft = 0x20000 [sc_setup_mtd_partitions] try read a page at offset = 0x20800 [sc_setup_mtd_partitions] read page OK at offset = 0x20800 =====> sc_set_running_rootfs bootflags 1 = eRcOmM.000bootflags 2 = eRcOmM.000set booting from kfs 1 <===== sc_set_running_rootfs <== sc_setup_mtd_partitions Creating 14 MTD partitions on "brcmnand.0": 0x000000000000-0x000000020000 : "cferom" 0x0000000c0000-0x000000200000 : "mmap" 0x000000200000-0x000000340000 : "cferam1" 0x000000020000-0x0000000c0000 : "cferam2" 0x000000340000-0x0000003e0000 : "serial" 0x0000003e0000-0x000000520000 : "protect" 0x000000520000-0x000002320000 : "rootfs" 0x000003720000-0x000005520000 : "rootfs_inactive" 0x000006920000-0x000006a60000 : "bootflag1" 0x000006a60000-0x000006ba0000 : "bootflag2" 0x000006ba0000-0x000006e20000 : "xml_cfg" 0x000006e20000-0x0000070a0000 : "app_dat" 0x000002320000-0x000003720000 : "kfs1_lib" 0x000005520000-0x000006920000 : "kfs2_lib" ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: EHCI Host Controller ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM ehci_hcd 0000:00:0a.0: irq 50, io mem 0x10002500 ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver PCI: Enabling device 0000:00:09.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: OHCI Host Controller ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 ohci_hcd 0000:00:09.0: irq 49, io mem 0x10002600 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected usbcore: registered new interface driver usblp Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. brcmboard: brcm_board_init entry SES: Button Interrupt 0x1 is enabled sesBtn_mapIntr: is_sesBtn_irq_shared=0, sesBtn_irq=1 Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xb0000100 (irq = 36) is a BCM63XX ttyS1 at MMIO 0xb0000120 (irq = 47) is a BCM63XX bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized bcmxtmrt: Broadcom BCM6328B0 ATM/PTM Network Device v0.3 Nov 22 2013 17:20:25 GACT probability NOT on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (2032 buckets, 8128 max) nf_nat_pt: no ports specified ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered ebt_time registered ebt_ftos registered ebt_wmm_mark registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Empty flash at 0x01a1084c ends at 0x01a11000 Empty flash at 0x01a12218 ends at 0x01a12800 Empty flash at 0x01a13b64 ends at 0x01a14000 VFS: Mounted root (jffs2 filesystem) on device 31:6. Freeing unused kernel memory: 136k freed init started: BusyBox v1.15.3 () starting pid 241, tty '': '/etc/rcS' Empty flash at 0x00041598 ends at 0x00041800 Empty flash at 0x00047178 ends at 0x00047800 Empty flash at 0x0004d178 ends at 0x0004d800 Empty flash at 0x00053178 ends at 0x00053800 Empty flash at 0x00104b40 ends at 0x00105000 JFFS2 notice: (269) check_node_data: wrong data CRC in data node at 0x000589c4: read 0xba0378ce, calculated 0x4d0e34a9. JFFS2 notice: (269) check_node_data: wrong data CRC in data node at 0x000529c4: read 0xba0378ce, calculated 0x4d0e34a9. bcm_ingqos: module license 'Proprietary' taints kernel. Broadcom Ingress QoS Module Char Driver v0.1 Nov 22 2013 17:19:48 Registered<243> Broadcom Ingress QoS ver 0.1 initialized JFFS2 notice: (269) check_node_data: wrong data CRC in data node at 0x0004c9c4: read 0xba0378ce, calculated 0x4d0e34a9. pktflow: module license 'Proprietary' taints kernel. NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v2.2 Nov 22 2013 17:19:48 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. Constructed Broadcom Packet Flow Cache v2.2 Nov 22 2013 17:19:48 JFFS2 notice: (269) check_node_data: wrong data CRC in data node at 0x000469c4: read 0xba0378ce, calculated 0x4d0e34a9. bcmxtmcfg: module license 'Proprietary' taints kernel. JFFS2 notice: (269) check_node_data: wrong data CRC in data node at 0x00040df8: read 0x80a95ec1, calculated 0xac95fdaa. bcmxtmcfg: bcmxtmcfg_init entry adsldd: module license 'Proprietary' taints kernel. adsl: adsl_init entry Broadcom BCM6328B0 Ethernet Network Device v0.1 Nov 22 2013 17:20:14 ETH Init: Ch:0 - 200 tx BDs at 0xa7a90000 ETH Init: Ch:0 - 600 rx BDs at 0xa70f8000 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered eth0: MAC Address: D4:21:22:89:E4:E4 eth1: MAC Address: D4:21:22:89:E4:E4 eth2: MAC Address: D4:21:22:89:E4:E4 eth3: MAC Address: D4:21:22:89:E4:E4 bcmarl: module license 'Proprietary' taints kernel. [NTC arl] arlEnable : Enabled ARL binding to Flow Cache Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 Nov 22 2013 17:17:22 Registered <245> bcmvlan: module license 'Proprietary' taints kernel. Broadcom 802.1Q VLAN Interface, v0.1 pwrmngtd: module license 'Proprietary' taints kernel. endpointdd: module license 'Proprietary' taints kernel. Endpoint: endpoint_init entry Endpoint: endpoint_init COMPLETED Success Success Success Success Success sc_drv: module license 'Sercomm' taints kernel. Note: Loading 6300 MDK (default) driver for 6328 chip Switch MDK: num_switches = 1 Switch MDK: unit = 0; phy_pbmp = 0xf; config_pbmp = 0xf Switch MDK link poll thread: unit=0; phypbmp=0xf Host MIPS Clock divider pwrsaving is enabled DDR Self Refresh pwrsaving is enabled AD1018_SERCOMM_VFES_2008 [LAN] LAN3 Link UP 100 mbps full duplex eth1 (switch port: 1) Link UP 100 mbps full duplex message received before monitor task is initialized kerSysSendtoMonitorTask ap_name=syslogd, action=start ap_name=coredump, action=start ap_name=dnrd, action=start ap_name=phy, action=start ap_name=lanip, action=start ap_name=firewall, action=start ap_name=telnetd, action=start ap_name=httpd, action=start ap_name=redirect, action=start socket: Address family not supported by protocol ap_name=dnrd, action=start ap_name=networkmap, action=start ap_name=srt, action=restart ap_name=rp, action=start ap_name=ntp, action=start ap_name=wlan, action=start ap_name=ingress_qos, action=start ap_name=ingress_classify, action=start ap_name=qos, action=start ap_name=qos_cls, action=start Success Success ap_name=qos_remark, action=start Setting SSID: "WLAN_87" ap_name=cpm, action=start ap_name=wanip, action=stop /bin/wlctl: Unsupported ap_name=redirect, action=start ap_name=dnrd, action=start ap_name=wanip, action=stop ap_name=igd_upnp, action=start ap_name=dnsr, action=start invalid option in file /tmp/miniupnpd.0.conf line 5 : lan_netmask=255.255.255.0 invalid option in file /tmp/miniupnpd.0.conf line 9 : upc=Vodafone Entry Level Router invalid option in file /tmp/miniupnpd.0.conf line 10 : sn=E1408AQS113081 invalid option in file /tmp/miniupnpd.0.conf line 11 : nat=1 invalid option in file /tmp/miniupnpd.0.conf line 23 : wan_type=ppp ap_name=cron, action=start ap_name=snmp, action=start 7200 sec killall: wps_det: no process killed starting pid 1250, tty '': '/sbin/getty ttyS0 115200' ad1018 login:


HELO CPUI L1CI DRAM ---- PHYS ZQDN 300H PHYE DINT LSYN USYN MSYN LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN RO08 SUN2 find flag find flag SUN6 001 001 000 000 RAM1 NAN3 RFS0 NAN5 CFE version 1.0.38-114.185 for BCM96328 (32bit,SP,BE) Build Date: 2013年 08月 21日 星期三 11:42:59 CST (root@localhost) Copyright (C) 2000-2011 Broadcom Corporation. NAND flash device: name , id 0x92f1 block 128KB size 131072KB Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 find flag begin read flash map Correctable ECC Error detected: addr=0x000e0a00, intrCtrl=0x00000090, accessCtrl=0xF3000000 Board IP address : 192.168.1.4:ffffff00 Host IP address : 192.168.1.8 Gateway IP address : 192.168.1.1 Run from flash/host (f/h) : f Default host run file name : ad1018.elf Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-10) : 96328avngr Number of MAC Addresses (1-32) : 16 Base MAC Address : d4:21:22:18:db:a2 PSI Size (1-64) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 Voice Board Configuration (0-7) : SI32176 SC_DEBUG: Nand Partition Table Magic Found at 20000. *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 Port 2 link UP 10 *************************************************** Sercomm Boot Version 1.1.3.0 *************************************************** Entering Firmware : Everything is OK. begin check sum safe value is 255 check sum ok Booting from First image (0xb8520000) ... Decompression OK! Entry at 0x80a00000 Closing network. Disabling Switch ports. Flushing Receive Buffers... 69 buffers found. Closing DMA Channels. Starting program at 0x80a00000 [ 0.000000] Linux version 5.4.43 (noltari@skynet) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r12787-af5ccfbac7)) #0 SMP Wed Jun 3 07:00:09 2020 [ 0.000000] Detected Broadcom 0x6328 CPU revision b0 [ 0.000000] CPU frequency is 320 MHz [ 0.000000] 64MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.38-114.185 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0002a075 (Broadcom BMIPS4350) [ 0.000000] board: board name: 96328avngr [ 0.000000] MIPS: machine is Sercomm AD1018 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] percpu: Embedded 14 pages/cpu s26048 r8192 d23104 u57344 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16240 [ 0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 56164K/65536K available (5692K kernel code, 216K rwdata, 1216K rodata, 1316K init, 206K bss, 9372K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. [ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS: 256 [ 0.000000] random: get_random_bytes called from start_kernel+0x338/0x564 with crng_init=0 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11945377789 ns [ 0.000020] sched_clock: 32 bits at 160MHz, resolution 6ns, wraps every 13421772796ns [ 0.008155] Calibrating delay loop... 319.74 BogoMIPS (lpj=639488) [ 0.050564] pid_max: default: 32768 minimum: 301 [ 0.055742] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.063338] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.078276] rcu: Hierarchical SRCU implementation. [ 0.084614] smp: Bringing up secondary CPUs ... [ 0.089351] smp: Brought up 1 node, 1 CPU [ 0.103934] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.114050] futex hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.121266] pinctrl core: initialized pinctrl subsystem [ 0.128029] NET: Registered protocol family 16 [ 0.380734] registering PCI controller with io_map_base unset [ 0.491195] PCI host bridge to bus 0000:00 [ 0.495635] pci_bus 0000:00: root bus resource [mem 0x10f00000-0x10ffffff] [ 0.502746] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.509740] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.516724] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.524937] pci 0000:00:00.0: [14e4:6328] type 01 class 0x060400 [ 0.531283] pci 0000:00:00.0: PME# supported from D0 D3hot [ 0.538771] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.547417] pci 0000:01:00.0: [14e4:a8db] type 00 class 0x028000 [ 0.553704] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit] [ 0.560767] pci 0000:01:00.0: enabling Extended Tags [ 0.566040] pci 0000:01:00.0: supports D1 D2 [ 0.572197] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 0.579069] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 [ 0.585913] pci 0000:00:00.0: BAR 8: assigned [mem 0x10f00000-0x10ffffff] [ 0.592929] pci 0000:01:00.0: BAR 0: assigned [mem 0x10f00000-0x10f07fff 64bit] [ 0.600482] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.605599] pci 0000:00:00.0: bridge window [mem 0x10f00000-0x10ffffff] [ 0.624628] clocksource: Switched to clocksource MIPS [ 0.633470] NET: Registered protocol family 2 [ 0.639840] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) [ 0.648651] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.656644] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear) [ 0.664044] TCP: Hash tables configured (established 1024 bind 1024) [ 0.671216] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.678143] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.686089] NET: Registered protocol family 1 [ 0.690793] PCI: CLS 0 bytes, default 16 [ 0.709617] workingset: timestamp_bits=14 max_order=14 bucket_order=0 [ 0.735182] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.741254] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.803319] bcm6328-pinctrl 10000080.pin-controller: registered at mmio (ptrval) [ 0.812769] pcieport 0000:00:00.0: enabling device (0000 -> 0002) [ 0.820384] 10000100.serial: ttyS0 at MMIO 0x10000100 (irq = 36, base_baud = 1562500) is a bcm63xx_uart [ 0.830142] printk: console [ttyS0] enabled [ 0.830142] printk: console [ttyS0] enabled [ 0.838764] printk: bootconsole [early0] disabled [ 0.838764] printk: bootconsole [early0] disabled [ 0.865678] nand: device found, Manufacturer ID: 0x92, Chip ID: 0xf1 [ 0.872316] nand: Eon NAND 128MiB 3,3V 8-bit [ 0.876751] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 0.884609] bcm6368_nand 10000200.nand: detected 128MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, Hamming ECC [ 0.898229] Bad block table found at page 65472, version 0x01 [ 0.905100] Bad block table found at page 65408, version 0x01 [ 0.913105] 11 fixed-partitions partitions found on MTD device brcmnand.0 [ 0.920244] Creating 11 MTD partitions on "brcmnand.0": [ 0.925656] 0x000000000000-0x000000020000 : "cferom" [ 0.933295] 0x000000020000-0x0000000c0000 : "mmap" [ 0.940793] 0x0000000c0000-0x000000200000 : "cferam1" [ 0.948641] 0x000000200000-0x000000340000 : "cferam2" [ 0.956411] 0x000000340000-0x0000003e0000 : "serial" [ 0.963922] 0x0000003e0000-0x000000520000 : "protect" [ 0.971526] 0x000006920000-0x000006a60000 : "bootflag1" [ 0.979378] 0x000006a60000-0x000006ba0000 : "bootflag2" [ 0.987200] 0x000000520000-0x000006920000 : "wfi" [ 1.023395] sercomm: bootflag1=1 [ 1.027916] sercomm: bootflag2=0 [ 1.034400] random: fast init done [ 1.098114] 4 ser-wfi-fw partitions found on MTD device wfi [ 1.103881] Creating 4 MTD partitions on "wfi": [ 1.108571] 0x000000000000-0x000003200000 : "firmware" [ 1.117011] 0x000000000000-0x000000500000 : "kernel" [ 1.124649] 0x000000500000-0x000003200000 : "ubi" [ 1.132448] 0x000003200000-0x000006400000 : "img2" [ 1.140393] 0x000006ba0000-0x000006e20000 : "xml_cfg" [ 1.148017] 0x000006e20000-0x0000070a0000 : "app_dat" [ 1.179493] libphy: Fixed MDIO Bus: probed [ 1.184689] bcm63xx_enetsw bcm63xx_enetsw.0: IRQ index 1 not found [ 1.233686] b53_common: found switch: BCM63xx, rev 0 [ 1.239605] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 1.249839] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) [ 1.257096] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) [ 1.264294] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) [ 1.271485] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) [ 1.278680] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) [ 1.286284] bcma-pci-bridge 0000:01:00.0: enabling device (0000 -> 0002) [ 1.293306] bcma-pci-bridge 0000:01:00.0: bus0: Found chip with id 43217, rev 0x01 and package 0x09 [ 1.302714] bcma-pci-bridge 0000:01:00.0: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x27, class 0x0) [ 1.313718] bcma-pci-bridge 0000:01:00.0: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1E, class 0x0) [ 1.324828] bcma-pci-bridge 0000:01:00.0: bus0: Core 2 found: PCIe (manuf 0x4BF, id 0x820, rev 0x14, class 0x0) [ 1.356656] bcma-pci-bridge 0000:01:00.0: bus0: Bus registered [ 1.365826] NET: Registered protocol family 10 [ 1.380906] Segment Routing with IPv6 [ 1.384958] NET: Registered protocol family 17 [ 1.389692] 8021q: 802.1Q VLAN Support v1.8 [ 1.424528] UBI: auto-attach mtd11 [ 1.428038] ubi0: attaching mtd11 [ 1.872927] ubi0: scanning is finished [ 1.899004] ubi0: attached mtd11 (name "ubi", size 45 MiB) [ 1.904772] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 1.911869] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 1.918864] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 1.926046] ubi0: good PEBs: 360, bad PEBs: 0, corrupted PEBs: 0 [ 1.932233] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 [ 1.939678] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1591115144 [ 1.949095] ubi0: available PEBs: 0, total reserved PEBs: 360, PEBs reserved for bad PEB handling: 20 [ 1.958836] ubi0: background thread "ubi_bgt0d" started, PID 448 [ 1.969837] block ubiblock0_0: created from ubi0:0(rootfs) [ 1.975563] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem [ 1.999277] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. [ 2.025058] Freeing unused kernel memory: 1316K [ 2.029761] This architecture does not have kernel memory protection. [ 2.036385] Run /sbin/init as init process [ 3.078410] init: Console is alive [ 3.082534] init: - watchdog - [ 4.958743] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 5.143831] usbcore: registered new interface driver usbfs [ 5.149786] usbcore: registered new interface driver hub [ 5.155567] usbcore: registered new device driver usb [ 5.180651] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 5.190933] ehci-fsl: Freescale EHCI Host controller driver [ 5.200897] ehci-platform: EHCI generic platform driver [ 5.312293] ehci-platform ehci-platform: EHCI Host Controller [ 5.318332] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 [ 5.326952] ehci-platform ehci-platform: irq 50, io mem 0xb0002500 [ 5.348238] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored [ 5.358866] hub 1-0:1.0: USB hub found [ 5.363697] hub 1-0:1.0: 1 port detected [ 5.383527] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 5.393280] ohci-platform: OHCI generic platform driver [ 5.398999] ohci-platform ohci-platform: Generic Platform OHCI controller [ 5.406111] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2 [ 5.414503] ohci-platform ohci-platform: irq 49, io mem 0xb0002600 [ 5.486482] hub 2-0:1.0: USB hub found [ 5.491306] hub 2-0:1.0: 1 port detected [ 5.498777] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 5.517139] init: - preinit - [ 7.354558] random: jshn: uninitialized urandom read (4 bytes read) [ 7.447424] random: jshn: uninitialized urandom read (4 bytes read) [ 7.810052] random: jshn: uninitialized urandom read (4 bytes read) [ 8.836714] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN2, 100Mbps, full-duplex [ 8.846745] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 8.996820] urandom_read: 2 callbacks suppressed [ 8.996836] random: procd: uninitialized urandom read (4 bytes read) [ 9.828243] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 13.450412] UBIFS (ubi0:1): Mounting in unauthenticated mode [ 13.457022] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 570 [ 13.547777] UBIFS (ubi0:1): recovery needed [ 13.835560] UBIFS (ubi0:1): recovery completed [ 13.840605] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data" [ 13.848722] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 13.858945] UBIFS (ubi0:1): FS size: 38473728 bytes (36 MiB, 303 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs) [ 13.869703] UBIFS (ubi0:1): reserved for root: 1817208 bytes (1774 KiB) [ 13.876523] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 153D57F7-D456-469D-B3E8-D94FDDAC968B, small LPT model [ 13.898879] mount_root: switching to ubifs overlay [ 13.948896] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 13.970230] urandom-seed: Seeding with /etc/urandom.seed [ 14.246220] procd: - early - [ 14.249552] procd: - watchdog - [ 15.103676] procd: - watchdog - [ 15.107698] procd: - ubus - [ 15.252747] random: ubusd: uninitialized urandom read (4 bytes read) [ 15.265572] random: ubusd: uninitialized urandom read (4 bytes read) [ 15.273260] random: ubusd: uninitialized urandom read (4 bytes read) [ 15.282880] procd: - init - Please press Enter to activate this console. [ 17.004366] random: crng init done [ 17.007819] random: 1 urandom warning(s) missed due to ratelimiting [ 17.049937] kmodloader: loading kernel modules from /etc/modules.d/* [ 17.391996] Loading modules backported from Linux version v5.7-rc3-0-g6a8b55ed4056 [ 17.399976] Backport generated by backports.git v5.7-rc3-1-0-gc0c7d2bb [ 17.534604] xt_time: kernel timezone is -0000 [ 18.031568] PPP generic driver version 2.4.2 [ 18.054673] NET: Registered protocol family 24 [ 18.155339] urngd: v1.0.2 started. [ 18.197348] b43-phy0: Broadcom 43217 WLAN found (core revision 30) [ 18.236288] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 17 [ 18.242688] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2057, Revision 14, Version 0 [ 18.264934] Broadcom 43xx driver loaded [ Features: PNL ] [ 18.444666] kmodloader: done loading kernel modules from /etc/modules.d/* [ 44.420708] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN2, 100Mbps, full-duplex [ 44.457542] br-lan: port 1(eth0.1) entered blocking state [ 44.463199] br-lan: port 1(eth0.1) entered disabled state [ 44.469495] device eth0.1 entered promiscuous mode [ 44.474478] device eth0 entered promiscuous mode [ 44.539895] br-lan: port 1(eth0.1) entered blocking state [ 44.545523] br-lan: port 1(eth0.1) entered forwarding state [ 45.241044] br-lan: port 2(eth0.2) entered blocking state [ 45.246697] br-lan: port 2(eth0.2) entered disabled state [ 45.253162] device eth0.2 entered promiscuous mode [ 45.258473] br-lan: port 2(eth0.2) entered blocking state [ 45.264078] br-lan: port 2(eth0.2) entered forwarding state [ 45.413272] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready


HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LSYN USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 2.0.3 for BCM63XX (32bit,SP,BE) Build Date: Fri Aug 18 14:21:52 CEST 2017 (dani@tool) Copyright (C) 2000-2009 Broadcom Corporation. HS Serial flash device: name ID_W25X64, id 0xef17 size 8192KB Total Flash size: 8192K with 2048 sectors Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-3) : 96328avngr Number of MAC Addresses (1-32) : 10 Base MAC Address : 00:11:22:33:44:55 PSI Size (1-64) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 Voice Board Configuration (0-11) : *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xb8010000) ... Code Address: 0x80A00000, Entry Address: 0x80a00000 LZMA: Prossible old LZMA format, trying to decompress.. Decompression OK! Entry at 0x80a00000 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Starting program at 0x80a00000 [ 0.000000] Linux version 4.4.79 (dani@tool) (gcc version 5.4.0 (LEDE GCC 5.4.0 r4696-df3295f) ) #0 Sat Aug 12 10:28:44 2017 [ 0.000000] Detected Broadcom 0x6328 CPU revision b0 [ 0.000000] CPU frequency is 320 MHz [ 0.000000] 128MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.37-106.24 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0002a075 (Broadcom BMIPS4350) [ 0.000000] board: board name: 96328avngr [ 0.000000] MIPS: machine is Sercomm AD1018 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Memory: 124292K/131072K available (3103K kernel code, 154K rwdata, 788K rodata, 1260K init, 197K bss, 6780K reserved, 0K cma) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:256 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11945377789 ns [ 0.000018] sched_clock: 32 bits at 160MHz, resolution 6ns, wraps every 13421772796ns [ 0.008097] Calibrating delay loop... 319.74 BogoMIPS (lpj=639488) [ 0.046774] pid_max: default: 32768 minimum: 301 [ 0.051827] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.058632] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.075524] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.085611] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.092218] pinctrl core: initialized pinctrl subsystem [ 0.099337] NET: Registered protocol family 16 [ 0.349434] registering PCI controller with io_map_base unset [ 0.374569] PCI host bridge to bus 0000:00 [ 0.378837] pci_bus 0000:00: root bus resource [mem 0x10f00000-0x10ffffff] [ 0.385906] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.392888] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.399874] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.408748] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.418279] pci 0000:00:00.0: BAR 8: assigned [mem 0x10f00000-0x10ffffff] [ 0.425315] pci 0000:01:00.0: BAR 0: assigned [mem 0x10f00000-0x10f07fff 64bit] [ 0.432851] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.437948] pci 0000:00:00.0: bridge window [mem 0x10f00000-0x10ffffff] [ 0.446648] clocksource: Switched to clocksource MIPS [ 0.455727] NET: Registered protocol family 2 [ 0.462098] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.469395] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.475993] TCP: Hash tables configured (established 1024 bind 1024) [ 0.483024] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.489112] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.496147] NET: Registered protocol family 1 [ 0.512647] Crashlog allocated RAM at address 0x3f00000 [ 0.554931] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.560958] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.577718] io scheduler noop registered [ 0.581801] io scheduler deadline registered (default) [ 0.588395] bcm6328-pinctrl 10000080.pin-controller: registered at mmio b0000080 [ 0.597841] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 0.604678] bcm63xx_uart.0: ttyS0 at MMIO 0xb0000100 (irq = 36, base_baud = 1562500) is a bcm63xx_uart [ 0.614343] console [ttyS0] enabled [ 0.614343] console [ttyS0] enabled [ 0.621503] bootconsole [early0] disabled [ 0.621503] bootconsole [early0] disabled [ 0.643012] m25p80 spi1.0: s25fl064k (8192 Kbytes) [ 0.648489] bcm63xxpart: CFE boot tag found with version 6 and board type 96328avngr [ 0.656570] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.663217] bcm63xxpart: Partition 1 is kernel offset 10100 and length 14728c [ 0.670539] bcm63xxpart: Partition 2 is rootfs offset 15738c and length 698c74 [ 0.677977] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.685232] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000 [ 0.692488] 5 bcm63xxpart partitions found on MTD device spi1.0 [ 0.698578] Creating 5 MTD partitions on "spi1.0": [ 0.703526] 0x000000000000-0x000000010000 : "CFE" [ 0.711611] 0x000000010100-0x00000015738c : "kernel" [ 0.720400] 0x00000015738c-0x0000007f0000 : "rootfs" [ 0.729183] mtd: device 2 (rootfs) set to be root filesystem [ 0.735932] 1 squashfs-split partitions found on MTD device rootfs [ 0.742333] 0x0000003b0000-0x0000007f0000 : "rootfs_data" [ 0.750920] 0x0000007f0000-0x000000800000 : "nvram" [ 0.759651] 0x000000010000-0x0000007f0000 : "linux" [ 0.808016] b53_common: found switch: BCM63xx, rev 0 [ 0.813740] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.824047] PCI: Enabling device 0000:01:00.0 (0000 -> 0002) [ 0.829957] bcma: bus0: Found chip with id 43217, rev 0x01 and package 0x09 [ 0.837197] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x27, class 0x0) [ 0.846026] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1E, class 0x0) [ 0.854950] bcma: bus0: Core 2 found: PCIe (manuf 0x4BF, id 0x820, rev 0x14, class 0x0) [ 0.877004] bcma: bus0: Bus registered [ 0.884047] NET: Registered protocol family 10 [ 0.895366] NET: Registered protocol family 17 [ 0.900122] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need t. [ 0.913155] 8021q: 802.1Q VLAN Support v1.8 [ 0.929287] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.953695] Freeing unused kernel memory: 1260K (80405000 - 80540000) [ 2.803375] init: Console is alive [ 2.807251] init: - watchdog - [ 4.340367] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.498618] usbcore: registered new interface driver usbfs [ 4.504584] usbcore: registered new interface driver hub [ 4.510280] usbcore: registered new device driver usb [ 4.530875] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 4.540791] ehci-platform: EHCI generic platform driver [ 4.646704] ehci-platform ehci-platform: EHCI Host Controller [ 4.652703] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 [ 4.661230] ehci-platform ehci-platform: irq 50, io mem 0xb0002500 [ 4.678698] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored [ 4.689005] hub 1-0:1.0: USB hub found [ 4.693530] hub 1-0:1.0: 1 port detected [ 4.705470] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 4.714888] ohci-platform: OHCI generic platform driver [ 4.720553] ohci-platform ohci-platform: Generic Platform OHCI controller [ 4.727632] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2 [ 4.735956] ohci-platform ohci-platform: irq 49, io mem 0xb0002600 [ 4.800724] hub 2-0:1.0: USB hub found [ 4.805357] hub 2-0:1.0: 1 port detected [ 4.811151] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.829239] init: - preinit - [ 6.301787] random: jshn: uninitialized urandom read (4 bytes read, 122 bits of entropy available) [ 6.541675] random: jshn: uninitialized urandom read (4 bytes read, 123 bits of entropy available) [ 6.781565] random: jshn: uninitialized urandom read (4 bytes read, 124 bits of entropy available) [ 6.876570] random: jshn: uninitialized urandom read (4 bytes read, 124 bits of entropy available) [ 7.009481] random: jshn: uninitialized urandom read (4 bytes read, 125 bits of entropy available) [ 7.176428] random: nonblocking pool is initialized [ 7.567052] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN3, 100Mbps, full-duplex Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 10.141272] jffs2: notice: (359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and. [ 10.161341] mount_root: switching to jffs2 overlay [ 10.210925] urandom-seed: Seeding with /etc/urandom.seed [ 10.458491] procd: - early - [ 10.461668] procd: - watchdog - [ 11.202354] procd: - watchdog - [ 11.206090] procd: - ubus - [ 11.491034] procd: - init - Please press Enter to activate this console. [ 12.245029] kmodloader: loading kernel modules from /etc/modules.d/* [ 12.380204] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 12.413432] Loading modules backported from Linux version wt-2017-01-31-0-ge882dff19e7f [ 12.421716] Backport generated by backports.git backports-20160324-13-g24da7d3c [ 12.435705] ip_tables: (C) 2000-2006 Netfilter Core Team [ 12.461186] nf_conntrack version 0.5.0 (1961 buckets, 7844 max) [ 12.568698] xt_time: kernel timezone is -0000 [ 12.724369] PPP generic driver version 2.4.2 [ 12.734097] NET: Registered protocol family 24 [ 12.784918] b43-phy0: Broadcom 43217 WLAN found (core revision 30) [ 12.792210] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 17 [ 12.798608] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2057, Revision 14, Version 0 [ 12.807260] Broadcom 43xx driver loaded [ Features: PNL ] [ 12.964342] kmodloader: done loading kernel modules from /etc/modules.d/* [ 26.263810] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN3, 100Mbps, full-duplex [ 26.292015] device eth0.1 entered promiscuous mode [ 26.296975] device eth0 entered promiscuous mode [ 26.316996] br-lan: port 1(eth0.1) entered forwarding state [ 26.322820] br-lan: port 1(eth0.1) entered forwarding state [ 28.326665] br-lan: port 1(eth0.1) entered forwarding state BusyBox v1.26.2 () built-in shell (ash) _________ / /\ _ ___ ___ ___ / LE / \ | | | __| \| __| / DE / \ | |__| _|| |) | _| /________/ LE \ |____|___|___/|___| lede-project.org \ \ DE / \ LE \ / ----------------------------------------------------------- \ DE \ / Reboot (SNAPSHOT, r4696+1-df3295f) \________\/ ----------------------------------------------------------- === WARNING! ====]���������������j There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@LEDE:/#


This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2024/02/12 08:58
  • by 127.0.0.1