Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
toh:sercomm:ad1018 [2018/03/06 18:47] – [NAND flash programmer] danitooltoh:sercomm:ad1018 [2021/08/15 19:57] – [OEM NAND flash layout] danitool
Line 1: Line 1:
 ====== Sercomm AD1018 ====== ====== Sercomm AD1018 ======
 +{{:media:sercomm:ad1018-casing.png?0x120&nolink}}
  
-{{:media:sercomm:ad1018-casing.png?0x200&nolink&|}}+{{section>meta:infobox:broadcom_wifi#infobox_for_dataentries&noheader&nofooter&noeditbutton}}
  
 +{{section>meta:infobox:broadcom_dsl#infobox_for_dataentries&noheader&nofooter&noeditbutton}}
 +===== Supported Versions =====
 +---- datatable ----
 +cols    : Brand, Model, Versions, Supported Since Rel, Supported Current Rel, Unsupported Functions_unsupporteds, Comment installation, Forum search_search-forums, Device Techdata_pageid
 +headers : Brand, Model, Version, Supported Since, Current Release, Unsupported Functions, Comment installation,  Forum Search, Technical Data
 +align   : c,c,c,c,c,l,c
 +filter  : Model=AD1018
 +sort    : version
 +----
 +
 +  * **NAND** supported since [[commit>5f82691923|r13292]]
 +  * **SPI only** supported since [[commit>e12c72bb52|r5531]]
  
 ===== Hardware Highlights ===== ===== Hardware Highlights =====
-SoC             ^ CPU speed   ^ Ram     Flash   ^ Network   USB   ^ Serial   ^ JTag   ^ +---- datatable ---- 
-| Broadcom 6328   | 320MHz      | 128MiB   | 128MiB NAND    | 4 x 1     | mod   | Yes      | ?    |+cols    : Model, Versions, CPU, CPU MHz, Flash MB_mbflashs, RAM MB_mbram, WLAN Hardware, WLAN 2.4GHz, WLAN 5.0GHz, Ethernet 100M ports_, Ethernet Gbit ports_, Modem, USB ports_ 
 +header  : Model, Version,SoC,CPU MHz,Flash MB,RAM MB,WLAN Hardware,WLAN2.4,WLAN5.0,100M ports,Gbit ports,Modem,USB 
 +align   : c,c,c,c,c,c,c,c,c,c,c,c,
 +filter  : Model=AD1018 
 +sort    : version 
 +----
  
 +The difference between v1 and v2 is the RAM size:
 +  * **v1**: 64 MiB RAM
 +  * **v2**: 128 MiB RAM
  
-===== OpenWrt support =====+===== Installation ===== 
 +---- datatable ---- 
 +headers : Model, Version, Current Release, Firmware OpenWrt stable Install, Firmware OpenWrt stable Upgrade 
 +cols    : Model, Version, Supported Current Rel, Firmware OpenWrt Install URL_url, Firmware OpenWrt Upgrade URL_url 
 +align   : c,c,c 
 +filter  : Model=AD1018 
 +sort    : version 
 +----
  
-  Supported since [[https://git.lede-project.org/?p=source.git;a=commit;h=e12c72b|r5531-e12c72b]] (only SPI flash mod). +<WRAP center round info 60%> 
-  * NAND flash not supported+**Note**: the NOR installation requires [[#spi_flash_mod_installation|SPI flash hardware mod]] 
 +</WRAP>
  
-Since NAND flash chips aren't still supported, we need to solder an SPI flash chip to the board with a new bootloader.+**Other downloads:** 
 +^ Hardware MOD ^^^ 
 +| **SPI NOR MOD** | [[https://drive.google.com/uc?export=download&id=0B-EMoBe-_OdBZUJXb0NlTW5LZEU|AD1018-spimod-lede.zip]] | **stuff for installing LEDE/OpenWrt for the first time using the SPI flash mod** | 
 +| CFE-RAM | [[https://drive.google.com/uc?export=download&id=1xtG890A1ZrnFe-EPhge9qhqahAB-XCgY|AD1018-CFE_RAM.zip]] | CFE RAM version with SPI and NAND flash support. Useful for making NAND flash backup or writing to NAND flash, see [[#NAND_flash_programmer|NAND flash programmer]]Special thanks to **antares** for this CFE mod |
  
-Stuff for installing LEDE on the new SPI flash chip, or working on the NAND flash chip+-> [[docs:guide-user:installation:generic.flashing|Install OpenWrt (generic explanation)]] 
-^ Version ^ link ^ notes ^ + 
-| snapshot | http://downloads.lede-project.org/snapshots/targets/brcm63xx/generic/openwrt-brcm63xx-generic-AD1018-SPI_flash-squashfs-cfe.bin development versionmay have unknown bugs, web interface not installed | +==== OEM easy install ==== 
-| **SPI NOR MOD** | [[https://drive.google.com/uc?export=download&id=0B-EMoBe-_OdBZUJXb0NlTW5LZEU|AD1018-spimod-lede.zip]] | **stuff for installing LEDE/openwrt for the first time using the SPI flash mod** | +We'll need to get admin access to the OEM firmware web interface. Therefore if you don't know the admin password, first a factory reset to the default config is required, otherwise start at **step 4**. 
-| CFE-RAM | [[https://drive.google.com/uc?export=download&id=1xtG890A1ZrnFe-EPhge9qhqahAB-XCgY|AD1018-CFE_RAM.zip]] | CFE RAM version with SPI and NAND flash support. Useful for making NAND flash backup or writing to NAND flashSpecial thanks to //**antares**// for this CFE mod | +  - Power on the router and wait for the OEM firmware to load. 
-| OEM VFES_2.0.08 | [[https://drive.google.com/uc?export=download&id=18b0M4rMtyzezHPjk-CCaaMZv3tzyxCsQ|AD1018-firmware_OEM-VFES_2.0.08.img]] | Original firmware from Vodafone ISP | +  - Press the reset buttonhold it about 8 or more seconds until the PHONE LED starts blinking. Release the button. Now the router will restart. 
-| OEM-MOD VFES_3.0.11 | [[https://drive.google.com/uc?export=download&id=1MnZ1ghv6ep75r6eoJ4AY8UtWnujICgo1|AD1018-firmware_MOD-VFES_3.0.11.img]] | Original firmware (custom build) from Vodafone ISP | +  - Wait until the router restarted and access to its web interface
-<WRAP center round important 60%> +    * Address:  ''%%http://192.168.0.1%%'' 
-As with all Broadcom-based units, **internal ADSL is not supported**.+    * User:     ''admin'' 
 +    * Password: ''VF-ESad1018'' 
 +  - Go to ''Settings -> Firmware Update'', and select the Openwrt factory firmware (//sercomm_ad1018-squashfs-factory.img//)\\ {{:media:sercomm:ad1018:ad1018-oem_update.png?500|}} 
 +  Press the ''Update'' button and wait some minutes until the update process finish\\ {{:media:sercomm:ad1018:ad1018-oem_updating.png?500|}}\\ The router will restart. 
 +  - ssh to 192.168.1.1 and set a root passwordor browse to ''%%http://192.168.1.1%%'' if LuCI is installed. 
 + 
 + 
 + 
 +==== SPI flash MOD installation ==== 
 +Hardware modding for soldering a new SPI flash chip (> 8 MB) required. Access to the serial port on the router with an UART adapter (3.3V) also required. The specific stuff for this installation is into this file [[https://drive.google.com/uc?export=download&id=0B-EMoBe-_OdBZUJXb0NlTW5LZEU|AD1018-spimod-lede.zip]] 
 + 
 +  Solder a new flash chip to the test points as shown in the picture\\ {{media:sercomm:ad1018-spimod.jpg?direct&400|}}\\ don't desolder R228 yet\\ \\ 
 +  Connect the serial port at the router to your computer using an UART (3.3V) serial port adapter.\\  \\ 
 +  - Put the LEDE RAM firmware into TFTP server in your computerConect an ethernet cable from your computer to the router, and set a static IP address compatible with the router (i.e192.168.1.7).\\  \\ 
 +  - Power on the router, break into the CFE command line using the serial console.\\  \\ 
 +  Run the LEDE RAM firmware using the CFE serial console\\ ''r 192.168.1.7:ad1018-lede-ram.elf''\\ (//192.168.1.7// is an static IP on your computer and //ad1018-lede-ram.elf// is into the TFTP server's directory)\\ \\ 
 +  - Now with LEDE RAM firmware running, flash the new CFE into the SPI flash chipIn the LEDE command line execute:\\ ''mtd write CFE-AD1018-CUSTOM-SPI.bin cfe'' \\ \\ 
 +  - Flash the LEDE firmware into the SPI flash chip\\ ''mtd write ad1018-lede-r4696.bin linux''\\ \\ 
 +  - Power off the router, and remove the **R228** resistor\\ \\ 
 +  - Power on the router, the OpenWrt firmware will start up.\\  \\ 
 +  - Done 
 + 
 +<WRAP center round tip 90%> 
 +Recommended SPI flash chipsthey're cheap and should work with the custom bootloader: 
 +  ''Winbond W25Q64:   8 MB  (tested)'' 
 +  ''Winbond W25Q128: 16 MB  (tested)'' 
 +  ''Winbond W25Q256: 32 MB''
 </WRAP> </WRAP>
-<WRAP center round download 60%> + 
-OEM source code: [[https://mega.nz/#!nwo0VIIZ!qR_M-hy18v8FzqYTDH2VBDLU-4eJNrtBp9fdP-EsoJk|AD1018_3011_20170822.tgz]]+ 
 + 
 +===== Recovery ===== 
 +The bootloader (CFE) comes with a proprietary Sercomm module for recovering purposes. If for some reason the router is unable to boot due to a faulty firmware, you can recover the router by putting it into Sercomm Upgrade mode. Follow these steps: 
 + 
 +  - Power off the router 
 +  - Press the RESET button, don't release it yet! 
 +  - Power on the router 
 +  - Wait 8 seconds or more until the LEDs blink sequentially from left to right 
 +  - Release the RESET button 
 +  - Execute the sercomm-recovery utility as root in your OS-linux computer: <code bash>sercomm-recovery -v eth0 flash_burn.bin</code> If you have the serial console attached to the router, you'll se this output: <WRAP bootlog> 
 +<nowiki>CFE version 1.0.38-114.185 for BCM96328 (32bit,SP,BE)                                                                              
 +Build Date: 2013年 08月 21日 星期三 11:42:59 CST (root@localhost)                                                                  
 +Copyright (C) 2000-2011 Broadcom Corporation.                                                                                      
 +                                                                                                                                   
 +NAND flash device: name , id 0x92f1 block 128KB size 131072KB                                                                      
 +Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz                                                                         
 +Main Thread: TP0                                                                                                                   
 +Memory Test Passed                                                                                                                 
 +Total Memory: 134217728 bytes (128MB)                                                                                              
 +Boot Address: 0xb8000000                                                                                                           
 +                                                                                                                                   
 +find flag begin read flash map                                                                                                     
 +Board IP address                  : 192.168.1.1:ffffff00                                                                           
 +Host IP address                   : 192.168.1.100                                                                                  
 +Gateway IP address                :                                                                                                
 +Run from flash/host (f/h)         : f                                                                                              
 +Default host run file name        : vmlinux                                                                                        
 +Default host flash file name      : bcm963xx_fs_kernel                                                                             
 +Boot delay (0-9 seconds)          : 1                                                                                              
 +Board Id (0-10)                   : 96328avngr                                                                                     
 +Number of MAC Addresses (1-32)    : 16                                                                                             
 +Base MAC Address                  : d4:21:22:89:e4:e4                                                                              
 +PSI Size (1-64) KBytes            : 24                                                                                             
 +Enable Backup PSI [0|1]           : 0                                                                                              
 +System Log Size (0-256) KBytes    : 0                                                                                              
 +Auxillary File System Size Percent: 0                                                                                              
 +Main Thread Number [0|1]          : 0                                                                                              
 +Voice Board Configuration (0-7)   : SI32176                                                                                        
 +                                                                                                                                   
 +SC_DEBUG: Nand Partition Table Magic Found at 20000.                                                                               
 +*** Press any key to stop auto run (1 seconds) ***                                                                                 
 +Auto run second count down: 1                                                                                                      
 + Port 1 link UP                                                                                                                    
 +0                                                                                                                                  
 +                                                                                                                                   
 +***************************************************                                                                                
 +    Sercomm Boot Version 1.1.3.0                                                                                                   
 +                                                                                                                                   
 +***************************************************                                                                                
 +Reset Button is pressed!                                                                                                           
 +DEBUG_INF:===================================================                                                                      
 +DEBUG_INF:Sercomm Upgrade(Module Ver 2.01) Start!                                                                                  
 +DEBUG_INF:===================================================                                                                      
 +DEBUG_INF:event, get version                                                                                                       
 +DEBUG_INF:normal upgrade.                                                                                                          
 +DEBUG_INF:Erase Done.                                                                                                              
 +DEBUG_INF:Program Starting.                                                                                                        
 +DEBUG_INF:Verify Starting.                                                                                                         
 +DEBUG_ERR:stop timer                                                                                                               
 +DEBUG_INF:===================================================                                                                      
 +DEBUG_INF:Stats of this Sercomm Upgrade is as below:                                                                               
 +DEBUG_INF:===================================================                                                                      
 +DEBUG_INF:Partition cferom                                                                                                         
 +                                        with index 0, offset 0x00000000, length 0x00020000 NOT erased!                             
 +DEBUG_INF:Partition partition-map                                                                                                  
 +                                        with index 1, offset 0x00020000, length 0x000a0000 NOT erased!                             
 +DEBUG_INF:Partition cferam1                                                                                                        
 +                                        with index 2, offset 0x000c0000, length 0x00140000 NOT erased!                             
 +DEBUG_INF:Partition cferam2                                                                                                        
 +                                        with index 3, offset 0x00200000, length 0x00140000 NOT erased!                             
 +DEBUG_INF:Partition PCBASN                                                                                                         
 +                                        with index 4, offset 0x00340000, length 0x000a0000 NOT erased!                             
 +DEBUG_INF:Partition protect                                                                                                        
 +                                        with index 5, offset 0x003e0000, length 0x00140000 NOT erased!                             
 +DEBUG_INF:Partition xml_cfg                                                                                                        
 +                                        with index 12, offset 0x06ba0000, length 0x00280000 NOT erased!                            
 +DEBUG_INF:---------------------------------------------------                                                                      
 +DEBUG_INF:Partition kernel_fs1                                                                                                     
 +                                        with index 6, updated! (0000)bad, (0000)dropped!                                           
 +DEBUG_INF:Partition lib_1                                                                                                          
 +                                        with index 7, updated! (0000)bad, (0000)dropped!                                           
 +DEBUG_INF:Partition kernel_fs2                                                                                                     
 +                                        with index 8, updated! (0000)bad, (0000)dropped!                                           
 +DEBUG_INF:Partition lib_2                                                                                                          
 +                                        with index 9, updated! (0000)bad, (0000)dropped!                                           
 +DEBUG_INF:Partition boot_flag1                                                                                                     
 +                                        with index 10, updated! (0000)bad, (0000)dropped!                                          
 +DEBUG_INF:Partition boot_flag2                                                                                                     
 +                                        with index 11, updated! (0000)bad, (0000)dropped!                                          
 +DEBUG_INF:Partition app_data                                                                                                       
 +                                        with index 13, updated! (0000)bad, (0000)dropped!                                          
 +DEBUG_INF:===================================================                                                                      
 +DEBUG_INF:Reset.                                                                                                                   
 +Disabling Switch ports.                                                                                                            
 +Flushing Receive Buffers...                                                                                                        
 +0 buffers found.                                                                                                                   
 +Closing DMA Channels.                                                                                                              
 +                                                                                                                                   
 +Resetting board in 0 seconds...HELO        </nowiki> 
 +</WRAP>\\ 
 +  <WRAP center round download 60%> 
 +Recovery image: [[https://drive.google.com/uc?export=download&id=1ZdEOVFXbEn65BF2LZGt0p3qThjr-fxC7|ad1018-recovery-flash_burn.zip]] 
 + 
 +Sercomm recovery utility: https://github.com/danitool/sercomm-recovery
 </WRAP> </WRAP>
  
  
 +===== OEM firmware =====
  
-===== OEM NAND flash layout =====+OEM firmware (3.0.11) highlights: 
 +  * Support for ADSL2+ 
 +  * Support for VoIP over the WAN port. It can reinject the voice through the ADSL port. 
 +  * One ethernet port can be configured as WAN (FIBRE port). 
 +  * No support for WEP WiFi encryption via web interface. 
 +  * **WDS** bridging cannot be configured via web interface, but can be configured via busybox command line.  
 +    * No encryption: tested OK. It should work with any router. 
 +    * WEP: tested OK with some Broadcom based wifi routers. Only 802.11b/g (54 Mbps) 
 +    * WPA2 AES: tested OK with a Comtrend AR-5315u (OEM firmware). Both routers must use the same SSID. 
 +  * The configuration file is associated with the MAC address. It cannot be interchangeable with other AD1018 routers. 
 +  * The ssh daemon isn't enabled by default. The only known way to enable it is to let the router be autoconfigured itself via TR-069 (made by the ISP). 
 +  * The default IP is ''192.168.0.1'' 
 +  * **dualImage_ctrl** is used to upgrade the image, example: ''dualImage_ctrl -dsrcu /tmp/var/firmware.img'' 
 +  * Command for entering into the Sercomm CLI: ''<nowiki>/bin/sc_cli -m SSH -p 127.0.0.1 -- support</nowiki>''
  
-NAND flash chip specs:\\ +For configuring the device there are three available users in the Vodafone-ES stock firmware: 
-''ID code                          : 92f18095+^ User ^ Default password ^ Notes ^ 
 +| ''vodafone'' | ''vodafone''    | Limited access | 
 +| ''admin''    | ''VF-ESad1018'' | Full access (root) | 
 +| ''support''  | ''support''     | Full access (root). Only works when accessing through the WAN port | 
 + 
 +^ OEM firmware ^^^ 
 +| MOD VFES_3.0.11 | [[https://drive.google.com/uc?export=download&id=1MnZ1ghv6ep75r6eoJ4AY8UtWnujICgo1|AD1018-firmware_MOD-VFES_3011.img]] | Custom build from Sercomm GPL sourcecode, nand utils included | 
 +| OEM VFES_2.0.08 | [[https://drive.google.com/uc?export=download&id=18b0M4rMtyzezHPjk-CCaaMZv3tzyxCsQ|AD1018-firmware_OEM-VFES_2008.img]] | Original firmware from Vodafone ISP | 
 +| OEM VFES_3.0.11 | [[https://drive.google.com/uc?export=download&id=17jVOhYaXrTxrFokEZKZtK6v0OOl-LQ6a|AD1018-firmware_OEM-VFES_3011-telnetd.img]] | Original firmware from Vodafone ISP, telnetd (port 2323) added | 
 +| OEM VFES_3.0.13 | [[https://drive.google.com/uc?export=download&id=1P-5qxCvNBLQyu2AkVaEjBLCvOjZ-Nk8W|AD1018-firmware_OEM-VFES_3013.img]] | Original firmware from Vodafone ISP, telnetd (port 2323) added | 
 +| OEM source code | [[https://mega.nz/#!nwo0VIIZ!qR_M-hy18v8FzqYTDH2VBDLU-4eJNrtBp9fdP-EsoJk|AD1018_3011_20170822.tgz]] | Sercomm GPL sourcecode, some bits may be missing | 
 + 
 +==== Dual image ==== 
 +There are two firmware images. The device decides to boot one or another depending on a special flag stored in the bootflag partitions. Example: 
 +  * bootflag1 partition: ''eRcOmM.004'' 
 +  * bootflag2 partition: ''eRcOmM.003'' 
 +In this case the device will boot the 1st firmware because its bootflag has the highest number. In the case both bootflags are equal it will boot the 1st firmware. 
 + 
 +Every time a firmware is flashed via stock firmware, it is made over the non booted firmware partitions, and its bootflag is increased. The device will boot from it on the next restart. 
 + 
 +<WRAP center round tip 60%> 
 +We can change the firmware to boot from by manually setting the bootflag. This can be done from the busybox CLI. Example for booting from the 2nd firmware: 
 +<code bash>flash_eraseall /dev/mtd8 
 +flash_eraseall /dev/mtd9 
 +echo -n "eRcOmM.000" | dd of=/dev/mtdblock8 
 +echo -n "eRcOmM.001" | dd of=/dev/mtdblock9 
 +</code> 
 +</WRAP> 
 + 
 + 
 + 
 + 
 +==== NAND flash chip specs ====  
 +<code>ID code                          : 92f18095
 Manufacturer                     : EON Manufacturer                     : EON
 Device                           : NAND 128MiB 3,3V 8-bit Device                           : NAND 128MiB 3,3V 8-bit
Line 49: Line 258:
 Organization                     : X16 Organization                     : X16
 Serial access time               : 25 ns Serial access time               : 25 ns
-OOB size                         : 64 bytes''+OOB size                         : 64 bytes</code>
  
- +==== OEM NAND flash layout ==== 
-^ Partition ^ Offsets ^ Block ^ Name description +^ Index ^ Partition ^ Name        ^ filesystem ^ description                 ^ Block ^ Offset         Size ^  Size (KiB)  
-| mtd0 | 0x0000000-0x0020000 | 0 | "cferom| rom bootloader +| 00    | mtd0      | cferom    | n/a        | rom bootloader              | 0      | ''0x0000000'' | 0x0020000 |  128 
-mtd1 0x0020000-0x00c0000 | 1 | "mmap" | ram bootloader 1 | +01    mtd3      | partition-map | n/a    | partition table             | 1      ''0x0020000'' | 0x00a0000 |  640 | 
-| mtd2 | 0x00c0000-0x0200000  "cferam1" | ram bootloader 2 | +| 02    | mtd1      | cferam1   | jffs2      | ram bootloader 1            5      ''0x00c0000'' | 0x0140000 |  1280 | 
-| mtd3 | 0x0200000-0x0340000 16 | "cferam2" | | +| 03    | mtd2      | cferam2   | jffs2      | ram bootloader 2            16     ''0x0200000'' 0x0140000  1280 
-| mtd4 | 0x0340000-0x03e0000 26 "serial| | +| 04    | mtd4      PCBASN    n/a        | serial number               26     | ''0x0340000'' | 0x00a0000 |  640 
-| mtd5 | 0x03e0000-0x0520000 | 31 | "protect" | | +| 05    | mtd5      protect   | jffs2 (rw) | csn, hw_id, pin_code, wlan_ssid, wlan_wpa2_key | 31 | ''0x03e0000'' 0x0140000 |  1280 
-| mtd6 | 0x0520000-0x2320000 41 | "rootfs" | Linux root (jffs2) +| 06    | mtd6      kernel_fs1   jffs2 (ro) | Linux root 1             | 41     | ''0x0520000'' | 0x1e00000 |  30720 
-| mtd12 | 0x2320000-0x3720000 281 | "kfs1_lib" | Linux root libraries (jffs2) +| 07    | mtd12     lib_1  jffs2 (ro) | Linux root libraries 1         | 281    | ''0x2320000'' | 0x1400000 |  20480 
-| mtd7 | 0x3720000-0x5520000 441 | "rootfs_inactive" | Linux root backup (jffs2) | +| 08    | mtd7      kernel_fs2 jffs2 (ro) | Linux root 2               441    ''0x3720000'' 0x1e00000  30720 | 
-mtd13 0x5520000-0x6920000 681 "kfs2_lib"  | Linux root backup libraries (jffs2) +| 09    | mtd13     | lib_2  | jffs2 (ro) | Linux root libraries 2         | 681    | ''0x5520000'' | 0x1400000 |  20480 
-| mtd8 | 0x6920000-0x6a60000 | 841 | "bootflag1" | | +| 10    | mtd8      bootflag1 | n/a        | boot select                 | 841    ''0x6920000'' 0x0140000 |  1280 
-| mtd9 | 0x6a60000-0x6ba0000 | 851 | "bootflag2" | | +| 11    | mtd9      bootflag2 | n/a        | boot select                 | 851    ''0x6a60000'' 0x0140000 |  1280 
-| mtd10 | 0x6ba0000-0x6e20000 | 861 | "xml_cfg" | | +| 12    | mtd10     xml_cfg   | jffs2 (rw) | configuration               | 861    ''0x6ba0000'' 0x0280000 |  2560 
-| mtd11 | 0x6e20000-0x70a0000 | 881 | "app_dat" | |+| 13    | mtd11     app_data  | jffs2 (rw) | logs                        | 881    ''0x6e20000'' 0x0280000 |  2560 |
  
 <WRAP center round download 60%> <WRAP center round download 60%>
Line 72: Line 281:
 </WRAP> </WRAP>
    
-===== Installation ===== 
-Hardware modding for soldering a new SPI flash chip (> 8 MB) required. Access to the serial port on the router with an UART adapter (3.3V) also required. 
- 
-  - Solder a new flash chip to the test points as shown in the picture\\ {{media:sercomm:ad1018-spimod.jpg?direct&400|}}\\ don't desolder R228 yet\\ \\ 
-  - Run the LEDE RAM firmware using the CFE serial console\\ ''r 192.168.1.7:ad1018-lede-ram.elf''\\ (//192.168.1.7// is an static IP on your computer and //ad1018-lede-ram.elf// is into the TFTP server's directory)\\ \\ 
-  - Now with LEDE RAM firmware running, flash the new CFE into the SPI flash chip. In the LEDE command line execute:\\ ''mtd write CFE-AD1018-CUSTOM-SPI.bin cfe'' \\ \\ 
-  - Flash the LEDE firmware into the SPI flash chip\\ ''mtd write ad1018-lede-r4696.bin'' linux\\ \\ 
-  - Power off the router, and remove the **R228** resistor\\ \\ 
-  - Done 
- 
-<WRAP center round tip 90%> 
-Recommended SPI flash chips, they're cheap and should work with the custom bootloader: 
-  * ''Winbond W25Q64:   8 MB  (tested)'' 
-  * ''Winbond W25Q128: 16 MB  (tested)'' 
-  * ''Winbond W25Q256: 32 MB'' 
-</WRAP> 
- 
  
  
Line 95: Line 287:
  
 The default network configuration is: The default network configuration is:
-^ Interface Name ^ Description ^ Default configuration ^ +<color #508CAA>Interface Name</color>   <color #647D00>Description</color>          <color #647D00>Default configuration</color>   
-br-lan | LAN & WiFi | 192.168.1.1/24 |  +^ <color #508CAA>br-lan</color>           | LAN & WiFi           | 192.168.1.1/24          
-| eth0 | LAN ports (0 to 3) | bridged | +^ <color #508CAA>eth0</color>             switch               | vlan1, vlan2            | 
-| wlan0 | WiFi | bridged (disabled) |  +^ <color #508CAA>eth0.1</color>           vlan1: LAN1, LAN2, LAN3 | bridged              
 +^ <color #508CAA>eth0.2</color>           vlan2: FIBRE         | WAN, dhcp              | 
 +^ <color #508CAA>wlan0</color>            | WiFi                 | bridged (disabled)      |
  
  
Line 105: Line 298:
 ===== Hardware ===== ===== Hardware =====
 ==== Info ==== ==== Info ====
-| **[[wp>Instruction set|Instruction set]]:**  | [[wp>MIPS architecture|MIPS]] | +[[wp>Instruction set|Instruction set]]  | [[wp>MIPS architecture|MIPS]] | 
-| **Vendor:**                      | [[wp>Broadcom]] | +Vendor                       | [[wp>Broadcom]] | 
-| **[[docs:techref:bootloader]]:**  | [[docs:techref:bootloader:cfe]] | +[[docs:techref:bootloader]]  | [[docs:techref:bootloader:cfe|CFE]] | 
-| **Board ID:**                    | 96328avngr | +Board ID                     | 96328avngr | 
-| **[[docs:hardware:soc|System-On-Chip]]:**  | Broadcom BCM6328 | +[[docs:techref:hardware:soc|System-On-Chip]]  | Broadcom {{ :media:datasheets:bcm6328_3kfbg_pinout.png?linkonly |BCM6328 3KFBG}} 
-| **[[docs:hardware:cpu|CPU]] @Frq**         | BMIPS4350 V7.5 @320 MHz | +[[docs:techref:hardware:cpu|CPU]] @Frq        | BMIPS4350 V7.5 @320 MHz | 
-| **Flash-Chip:**  | F59L1G81A-25T / TSOP48 **NAND** | +Flash-Chip  | F59L1G81A-25T / TSOP48 **NAND** | 
-| **Flash size**   | 128 MiB  | +Flash size  | 128 MiB  | 
-| **RAM-Chip**     | EtronTech EM68C16CWQE-25H / DDR2-800 | +RAM-Chip    | EtronTech EM68C16CWQE-25H / DDR2-800 | 
-| **RAM size**     | 128 MiB | +RAM size    | 128 MiB | 
-| **Wireless**     | BCM43217 802.11b/g/n (onboard) | +Wireless    | BCM43217 802.11b/g/n (onboard) | 
-| **Ethernet:**    | Internal BRCM6328 Switch, 4x 100M + ADSL2+ | +Ethernet    | Internal BRCM6328 Switch, 4x 100M + ADSL2+ | 
-| **USB**          | 1x 2.0 (not soldered) +USB         | 1x 2.0 [[#usb_mod|mod]]
-| **FXS VoIP **          | Silicon Labs Si32177-FM1 | +FXS VoIP    | [[#fxsvoip|Silicon Labs Si32177-FM1]] 
-**[[docs:hardware:port.serial|Serial]]:**   | [[#Serial|Yes]]   | +^ PSU    12V DC 1.5A / I.T.E MU18-R120150-C5| 
-| **[[docs:hardware:port.jtag|JTAG]]:**       | [[#JTAG|Yes]]       |+[[docs:techref:hardware:port.serial|Serial]]   | [[#Serial|Yes]]   | 
 +[[docs:techref:hardware:port.jtag|JTAG]]       | [[#JTAG|Yes]]     |
  
 ==== Photos ==== ==== Photos ====
Line 138: Line 332:
 In OpenWrt the **kmod-b43** driver should be used, therefore **N mode isn't available**. kmod-bcmsmac could support N mode but isn't still supported for the BCM43217 wifi. In OpenWrt the **kmod-b43** driver should be used, therefore **N mode isn't available**. kmod-bcmsmac could support N mode but isn't still supported for the BCM43217 wifi.
  
 +OEM wifi dumps:
 +<WRAP bootlog>
 +<nowiki>~ # wlctl revinfo
 +vendorid 0x14e4
 +deviceid 0x43a9
 +radiorev 0xe2057000
 +chipnum 0xa8d1
 +chiprev 0x1
 +chippackage 0x9
 +corerev 0x1e
 +boardid 0x5e9
 +boardvendor 0x14e4
 +boardrev P256
 +driverrev 0x61e6607
 +ucoderev 0x3100002
 +bus 0x1
 +phytype 0x4
 +phyrev 0x11
 +anarev 0x0
 +~ # wlctl srdump 
 +
 +  srom[000]:  0x2801  0x0000  0x05e9  0x14e4  0x0070  0xedbe  0x1c00  0x2bc4  
 +  srom[008]:  0x2a64  0x2964  0x2c64  0x3ce7  0x46ff  0x47ff  0x0c00  0x0820  
 +  srom[016]:  0x0030  0x1002  0x9f28  0x5d44  0x8080  0x1d8f  0x0032  0x0100  
 +  srom[024]:  0xdf00  0x71f5  0x8400  0x0083  0x8500  0x2010  0x0001  0x0000  
 +  srom[032]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[040]:  0x0000  0x0000  0x1008  0x0305  0x0000  0x0000  0x0000  0x0000  
 +  srom[048]:  0x43a9  0x8000  0x0002  0x0000  0x1f30  0x1800  0x0000  0x0000  
 +  srom[056]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[064]:  0x5372  0x1256  0x0200  0x0000  0x9800  0x0000  0x0000  0x0000  
 +  srom[072]:  0x0000  0x0000  0x0003  0xffff  0x88ff  0xffff  0x0003  0x0202  
 +  srom[080]:  0xffff  0x0033  0x0000  0x0000  0x0000  0x0000  0x0000  0x0415  
 +  srom[088]:  0x0000  0x7800  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[096]:  0x2046  0xfe69  0x1726  0xfa5c  0x0000  0x0000  0x0000  0x0000  
 +  srom[104]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[112]:  0x2046  0xfea8  0x1978  0xfa26  0x0000  0x0000  0x0000  0x0000  
 +  srom[120]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[128]:  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  
 +  srom[136]:  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  
 +  srom[144]:  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  
 +  srom[152]:  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  
 +  srom[160]:  0x0000  0x2222  0x4444  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[168]:  0x0000  0x2222  0x4444  0x2222  0x4444  0x2222  0x4444  0x2222  
 +  srom[176]:  0x4444  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[184]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[192]:  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  0x0000  
 +  srom[200]:  0x0000  0x0000  0x0000  0x0000  0x0000  0xffff  0xffff  0xffff  
 +  srom[208]:  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  0xffff  
 +  srom[216]:  0xffff  0xffff  0xffff  0x7a08  
 +~ # wlctl nvram_dump
 +sromrev=8
 +boardrev=0x1256
 +boardflags=0x200
 +boardflags2=0x9800
 +boardtype=0x5e9
 +subvid=0x14e4
 +boardnum=0
 +regrev=3
 +ledbh3=136
 +pa0b0=0xfe69
 +pa0b1=0x1726
 +pa0b2=0xfa5c
 +pa0itssit=32
 +pa0maxpwr=70
 +opo=34
 +aa2g=3
 +aa5g=0
 +ag0=2
 +ag1=2
 +ag2=255
 +ag3=255
 +pa1b0=0x0
 +pa1b1=0x0
 +pa1b2=0x0
 +pa1lob0=0x0
 +pa1lob1=0x0
 +pa1lob2=0x0
 +pa1hib0=0x0
 +pa1hib1=0x0
 +pa1hib2=0x0
 +pa1itssit=0
 +pa1maxpwr=0
 +pa1lomaxpwr=0
 +pa1himaxpwr=0
 +bxa2g=0
 +rssisav2g=0
 +rssismc2g=0
 +rssismf2g=0
 +bxa5g=0
 +rssisav5g=0
 +rssismc5g=0
 +rssismf5g=0
 +tri2g=0
 +tri5g=0
 +tri5gl=0
 +tri5gh=0
 +rxpo2g=0
 +rxpo5g=0
 +txchain=3
 +rxchain=3
 +antswitch=0
 +tssipos2g=1
 +extpagain2g=2
 +pdetrange2g=2
 +triso2g=4
 +antswctl2g=0
 +tssipos5g=0
 +extpagain5g=0
 +pdetrange5g=0
 +triso5g=0
 +antswctl5g=0
 +ccode=
 +macaddr=94:4a:0c:8c:54:5b
 +tempthresh=120
 +tempoffset=0
 +rawtempsense=0x0
 +measpower=0x0
 +tempsense_slope=0x0
 +tempcorrx=0x0
 +tempsense_option=0x0
 +freqoffset_corr=0x0
 +iqcal_swp_dis=0x0
 +hw_iqcal_en=0x0
 +elna2g=0
 +elna5g=0
 +phycal_tempdelta=0
 +temps_period=0
 +temps_hysteresis=0
 +measpower1=0x0
 +measpower2=0x0
 +cck2gpo=0
 +ofdm2gpo=1145315874
 +ofdm5gpo=0
 +ofdm5glpo=0
 +ofdm5ghpo=0
 +mcs2gpo0=8738
 +mcs2gpo1=17476
 +mcs2gpo2=8738
 +mcs2gpo3=17476
 +mcs2gpo4=8738
 +mcs2gpo5=17476
 +mcs2gpo6=8738
 +mcs2gpo7=17476
 +mcs5gpo0=0
 +mcs5gpo1=0
 +mcs5gpo2=0
 +mcs5gpo3=0
 +mcs5gpo4=0
 +mcs5gpo5=0
 +mcs5gpo6=0
 +mcs5gpo7=0
 +mcs5glpo0=0
 +mcs5glpo1=0
 +mcs5glpo2=0
 +mcs5glpo3=0
 +mcs5glpo4=0
 +mcs5glpo5=0
 +mcs5glpo6=0
 +mcs5glpo7=0
 +mcs5ghpo0=0
 +mcs5ghpo1=0
 +mcs5ghpo2=0
 +mcs5ghpo3=0
 +mcs5ghpo4=0
 +mcs5ghpo5=0
 +mcs5ghpo6=0
 +mcs5ghpo7=0
 +cddpo=0
 +stbcpo=0
 +bw40po=0
 +bwduppo=0
 +pcieingress_war=15
 +rxgainerr2ga0=63
 +rxgainerr2ga1=31
 +rxgainerr2ga2=31
 +rxgainerr5gla0=63
 +rxgainerr5gla1=31
 +rxgainerr5gla2=31
 +rxgainerr5gma0=63
 +rxgainerr5gma1=31
 +rxgainerr5gma2=31
 +rxgainerr5gha0=63
 +rxgainerr5gha1=31
 +rxgainerr5gha2=31
 +rxgainerr5gua0=63
 +rxgainerr5gua1=31
 +rxgainerr5gua2=31
 +noiselvl2ga0=31
 +noiselvl2ga1=31
 +noiselvl2ga2=31
 +noiselvl5gla0=31
 +noiselvl5gla1=31
 +noiselvl5gla2=31
 +noiselvl5gma0=31
 +noiselvl5gma1=31
 +noiselvl5gma2=31
 +noiselvl5gha0=31
 +noiselvl5gha1=31
 +noiselvl5gha2=31
 +noiselvl5gua0=31
 +noiselvl5gua1=31
 +noiselvl5gua2=31
 +subband5gver=7
 +maxp2ga0=70
 +itt2ga0=32
 +itt5ga0=0
 +pa2gw0a0=0xfe69
 +pa2gw1a0=0x1726
 +pa2gw2a0=0xfa5c
 +maxp5ga0=0
 +maxp5gha0=0
 +maxp5gla0=0
 +pa5gw0a0=0x0
 +pa5gw1a0=0x0
 +pa5gw2a0=0x0
 +pa5glw0a0=0x0
 +pa5glw1a0=0x0
 +pa5glw2a0=0x0
 +pa5ghw0a0=0x0
 +pa5ghw1a0=0x0
 +pa5ghw2a0=0x0
 +maxp2ga1=70
 +itt2ga1=32
 +itt5ga1=0
 +pa2gw0a1=0xfea8
 +pa2gw1a1=0x1978
 +pa2gw2a1=0xfa26
 +maxp5ga1=0
 +maxp5gha1=0
 +maxp5gla1=0
 +pa5gw0a1=0x0
 +pa5gw1a1=0x0
 +pa5gw2a1=0x0
 +pa5glw0a1=0x0
 +pa5glw1a1=0x0
 +pa5glw2a1=0x0
 +pa5ghw0a1=0x0
 +pa5ghw1a1=0x0
 +pa5ghw2a1=0x0
 +maxp2ga2=255
 +itt2ga2=255
 +itt5ga2=255
 +pa2gw0a2=0xffff
 +pa2gw1a2=0xffff
 +pa2gw2a2=0xffff
 +maxp5ga2=255
 +maxp5gha2=255
 +maxp5gla2=255
 +pa5gw0a2=0xffff
 +pa5gw1a2=0xffff
 +pa5gw2a2=0xffff
 +pa5glw0a2=0xffff
 +pa5glw1a2=0xffff
 +pa5glw2a2=0xffff
 +pa5ghw0a2=0xffff
 +pa5ghw1a2=0xffff
 +pa5ghw2a2=0xffff
 +maxp2ga3=255
 +itt2ga3=255
 +itt5ga3=255
 +pa2gw0a3=0xffff
 +pa2gw1a3=0xffff
 +pa2gw2a3=0xffff
 +maxp5ga3=255
 +maxp5gha3=255
 +maxp5gla3=255
 +pa5gw0a3=0xffff
 +pa5gw1a3=0xffff
 +pa5gw2a3=0xffff
 +pa5glw0a3=0xffff
 +pa5glw1a3=0xffff
 +pa5glw2a3=0xffff
 +pa5ghw0a3=0xffff
 +pa5ghw1a3=0xffff
 +pa5ghw2a3=0xffff
 +devid=0x43a9
 +watchdog=60000
 +</nowiki>
 +</WRAP>\\
 ==== JTAG ==== ==== JTAG ====
--> [[docs:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.+-> [[docs:techref:hardware:port.jtag]] general information about the JTAG port, JTAG cable, etc.
  
 ''TP17 = TCK ''TP17 = TCK
Line 150: Line 623:
  
 ==== Serial ==== ==== Serial ====
--> [[docs:hardware:port.serial]] general information about the serial port, serial port cable, etc.+-> [[docs:techref:hardware:port.serial]] general information about the serial port, serial port cable, etc.
  
 How to connect to the Serial Port of this specific device: How to connect to the Serial Port of this specific device:
Line 217: Line 690:
  
 ===== Hardware mods ===== ===== Hardware mods =====
- -> as a beginner, you really should inform yourself about [[docs:hardware:soldering]] in general and then obtain some practical experience!+ -> as a beginner, you really should inform yourself about [[docs:techref:hardware:soldering]] in general and then obtain some practical experience!
  
 ==== NAND flash programmer ==== ==== NAND flash programmer ====
Line 223: Line 696:
 Once you have properly working the SPI flash chip as described in [[#installation|Installation]], it's possible to use the router as a NAND flash programmer. You need to desolder the original NAND flash chip and solder a TSOP48 socket wired to the naked NAND pads. See pics Once you have properly working the SPI flash chip as described in [[#installation|Installation]], it's possible to use the router as a NAND flash programmer. You need to desolder the original NAND flash chip and solder a TSOP48 socket wired to the naked NAND pads. See pics
  
-{{:media:sercomm:ad1018-nand_programmer-mod-internal.jpg?direct&300|}} {{:media:sercomm:ad1018-nand_programmer-mod-external.jpg?direct&300|}} +{{:media:sercomm:ad1018-nand_programmer-mod-internal.jpg?direct&0x200|}} {{:media:sercomm:ad1018-nand_programmer-mod-external.jpg?direct&0x200|}} {{:media:sercomm:ad1018-nand_programmer_pads-mod.jpg?direct&0x200|}} 
  
 Download the CFE RAM version with support for both SPI/NAND flash chips Download the CFE RAM version with support for both SPI/NAND flash chips
Line 257: Line 730:
 *** command status = 0 *** command status = 0
 CFE> writeflash 192.168.1.7:dumpnand.bin CFE> writeflash 192.168.1.7:dumpnand.bin
-arg0: 192.168.1.7:ad1018-flash_backup.bin, arg1: (null), Block: 0+arg0: 192.168.1.7:dumpnand.bin, arg1: (null), Block: 0
 Reading FILE... Reading FILE...
 .......................................................................................................................................................... ..........................................................................................................................................................
Line 282: Line 755:
  
  
 +==== USB mod ====
 +The board is ready to support an USB host port. We only need to solder a few components
 +  * ''F1:       0 ohm resistor''
 +  * ''R166:     0 ohm resistor ''
 +  * ''R15, R13: 0 ~ 120 ohm resistor. Recommended: 22 ohm ''
 +  * Optional: C163, C155, C125, C118: ceramic capacitors with high capacity.
  
 +{{:media:sercomm:ad1018-usb_mod.jpg?directt&400|}}
 +
 +==== System Reset mod ====
 +
 +{{:media:sercomm:ad1018:ad1018-sys_reset_mod.jpg?directt&400|}}
 ===== Bootlogs ===== ===== Bootlogs =====
 ==== OEM Bootlog ==== ==== OEM Bootlog ====
Line 702: Line 1186:
 </WRAP>\\ </WRAP>\\
  
-==== OpenWrt Bootlog ====+==== OpenWrt Bootlog (NAND boot) ==== 
 +<WRAP bootlog> 
 +<nowiki> 
 +HELO 
 +CPUI 
 +L1CI 
 +DRAM 
 +---- 
 +PHYS 
 +ZQDN 
 +300H 
 +PHYE 
 +DINT 
 +LSYN 
 +USYN 
 +MSYN 
 +LMBE 
 +RACE 
 +PASS 
 +---- 
 +ZBSS 
 +CODE 
 +DATA 
 +L12F 
 +MAIN 
 +RO08 
 +SUN2 
 +find 
 +flag 
 +find 
 +flag 
 +SUN6 
 +001 
 +001 
 +000 
 +000 
 +RAM1 
 +NAN3 
 +RFS0 
 +NAN5 
 + 
 + 
 +CFE version 1.0.38-114.185 for BCM96328 (32bit,SP,BE) 
 +Build Date: 2013年 08月 21日 星期三 11:42:59 CST (root@localhost) 
 +Copyright (C) 2000-2011 Broadcom Corporation. 
 + 
 +NAND flash device: name , id 0x92f1 block 128KB size 131072KB 
 +Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz 
 +Main Thread: TP0 
 +Memory Test Passed 
 +Total Memory: 67108864 bytes (64MB) 
 +Boot Address: 0xb8000000 
 + 
 +find flag begin read flash map 
 +Correctable ECC Error detected: addr=0x000e0a00, intrCtrl=0x00000090, accessCtrl=0xF3000000 
 +Board IP address                  : 192.168.1.4:ffffff00   
 +Host IP address                   : 192.168.1.8   
 +Gateway IP address                : 192.168.1.1   
 +Run from flash/host (f/h)         : f   
 +Default host run file name        : ad1018.elf   
 +Default host flash file name      : bcm963xx_fs_kernel   
 +Boot delay (0-9 seconds)          : 1   
 +Board Id (0-10)                   : 96328avngr   
 +Number of MAC Addresses (1-32)    : 16   
 +Base MAC Address                  : d4:21:22:18:db:a2   
 +PSI Size (1-64) KBytes            : 24   
 +Enable Backup PSI [0|1]           : 0   
 +System Log Size (0-256) KBytes    : 0   
 +Auxillary File System Size Percent: 0   
 +Main Thread Number [0|1]          : 0   
 +Voice Board Configuration (0-7)   : SI32176   
 + 
 +SC_DEBUG: Nand Partition Table Magic Found at 20000. 
 +*** Press any key to stop auto run (1 seconds) *** 
 +Auto run second count down: 1 
 + Port 2 link UP 
 +10 
 + 
 +*************************************************** 
 +    Sercomm Boot Version 1.1.3.0 
 + 
 +*************************************************** 
 +Entering Firmware : Everything is OK. 
 +begin check sum 
 +safe value is 255 
 +check sum ok  
 +Booting from First image (0xb8520000) ... 
 +Decompression OK! 
 +Entry at 0x80a00000 
 +Closing network. 
 +Disabling Switch ports. 
 +Flushing Receive Buffers... 
 +69 buffers found. 
 +Closing DMA Channels. 
 +Starting program at 0x80a00000 
 +[    0.000000] Linux version 5.4.43 (noltari@skynet) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r12787-af5ccfbac7)) #0 SMP Wed Jun 3 07:00:09 2020 
 +[    0.000000] Detected Broadcom 0x6328 CPU revision b0 
 +[    0.000000] CPU frequency is 320 MHz 
 +[    0.000000] 64MB of RAM installed 
 +[    0.000000] board_bcm963xx: Boot address 0xb8000000 
 +[    0.000000] board_bcm963xx: CFE version: 1.0.38-114.185 
 +[    0.000000] printk: bootconsole [early0] enabled 
 +[    0.000000] CPU0 revision is: 0002a075 (Broadcom BMIPS4350) 
 +[    0.000000] board: board name: 96328avngr 
 +[    0.000000] MIPS: machine is Sercomm AD1018 
 +[    0.000000] Initrd not found or empty - disabling initrd 
 +[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes. 
 +[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes 
 +[    0.000000] Zone ranges: 
 +[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff] 
 +[    0.000000] Movable zone start for each node 
 +[    0.000000] Early memory node ranges 
 +[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff] 
 +[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] 
 +[    0.000000] percpu: Embedded 14 pages/cpu s26048 r8192 d23104 u57344 
 +[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240 
 +[    0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 
 +[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) 
 +[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) 
 +[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off 
 +[    0.000000] Memory: 56164K/65536K available (5692K kernel code, 216K rwdata, 1216K rodata, 1316K init, 206K bss, 9372K reserved, 0K cma-reserved) 
 +[    0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 
 +[    0.000000] rcu: Hierarchical RCU implementation. 
 +[    0.000000] rcu: RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1. 
 +[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. 
 +[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 
 +[    0.000000] NR_IRQS: 256 
 +[    0.000000] random: get_random_bytes called from start_kernel+0x338/0x564 with crng_init=0 
 +[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11945377789 ns 
 +[    0.000020] sched_clock: 32 bits at 160MHz, resolution 6ns, wraps every 13421772796ns 
 +[    0.008155] Calibrating delay loop... 319.74 BogoMIPS (lpj=639488) 
 +[    0.050564] pid_max: default: 32768 minimum: 301 
 +[    0.055742] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    0.063338] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    0.078276] rcu: Hierarchical SRCU implementation. 
 +[    0.084614] smp: Bringing up secondary CPUs ... 
 +[    0.089351] smp: Brought up 1 node, 1 CPU 
 +[    0.103934] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns 
 +[    0.114050] futex hash table entries: 256 (order: 0, 4096 bytes, linear) 
 +[    0.121266] pinctrl core: initialized pinctrl subsystem 
 +[    0.128029] NET: Registered protocol family 16 
 +[    0.380734] registering PCI controller with io_map_base unset 
 +[    0.491195] PCI host bridge to bus 0000:00 
 +[    0.495635] pci_bus 0000:00: root bus resource [mem 0x10f00000-0x10ffffff] 
 +[    0.502746] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] 
 +[    0.509740] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] 
 +[    0.516724] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] 
 +[    0.524937] pci 0000:00:00.0: [14e4:6328] type 01 class 0x060400 
 +[    0.531283] pci 0000:00:00.0: PME# supported from D0 D3hot 
 +[    0.538771] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring 
 +[    0.547417] pci 0000:01:00.0: [14e4:a8db] type 00 class 0x028000 
 +[    0.553704] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit] 
 +[    0.560767] pci 0000:01:00.0: enabling Extended Tags 
 +[    0.566040] pci 0000:01:00.0: supports D1 D2 
 +[    0.572197] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 
 +[    0.579069] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 
 +[    0.585913] pci 0000:00:00.0: BAR 8: assigned [mem 0x10f00000-0x10ffffff] 
 +[    0.592929] pci 0000:01:00.0: BAR 0: assigned [mem 0x10f00000-0x10f07fff 64bit] 
 +[    0.600482] pci 0000:00:00.0: PCI bridge to [bus 01] 
 +[    0.605599] pci 0000:00:00.0:   bridge window [mem 0x10f00000-0x10ffffff] 
 +[    0.624628] clocksource: Switched to clocksource MIPS 
 +[    0.633470] NET: Registered protocol family 2 
 +[    0.639840] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) 
 +[    0.648651] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) 
 +[    0.656644] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear) 
 +[    0.664044] TCP: Hash tables configured (established 1024 bind 1024) 
 +[    0.671216] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) 
 +[    0.678143] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) 
 +[    0.686089] NET: Registered protocol family 1 
 +[    0.690793] PCI: CLS 0 bytes, default 16 
 +[    0.709617] workingset: timestamp_bits=14 max_order=14 bucket_order=0 
 +[    0.735182] squashfs: version 4.0 (2009/01/31) Phillip Lougher 
 +[    0.741254] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. 
 +[    0.803319] bcm6328-pinctrl 10000080.pin-controller: registered at mmio (ptrval) 
 +[    0.812769] pcieport 0000:00:00.0: enabling device (0000 -> 0002) 
 +[    0.820384] 10000100.serial: ttyS0 at MMIO 0x10000100 (irq = 36, base_baud = 1562500) is a bcm63xx_uart 
 +[    0.830142] printk: console [ttyS0] enabled 
 +[    0.830142] printk: console [ttyS0] enabled 
 +[    0.838764] printk: bootconsole [early0] disabled 
 +[    0.838764] printk: bootconsole [early0] disabled 
 +[    0.865678] nand: device found, Manufacturer ID: 0x92, Chip ID: 0xf1 
 +[    0.872316] nand: Eon NAND 128MiB 3,3V 8-bit 
 +[    0.876751] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 
 +[    0.884609] bcm6368_nand 10000200.nand: detected 128MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, Hamming ECC 
 +[    0.898229] Bad block table found at page 65472, version 0x01 
 +[    0.905100] Bad block table found at page 65408, version 0x01 
 +[    0.913105] 11 fixed-partitions partitions found on MTD device brcmnand.0 
 +[    0.920244] Creating 11 MTD partitions on "brcmnand.0": 
 +[    0.925656] 0x000000000000-0x000000020000 : "cferom" 
 +[    0.933295] 0x000000020000-0x0000000c0000 : "mmap" 
 +[    0.940793] 0x0000000c0000-0x000000200000 : "cferam1" 
 +[    0.948641] 0x000000200000-0x000000340000 : "cferam2" 
 +[    0.956411] 0x000000340000-0x0000003e0000 : "serial" 
 +[    0.963922] 0x0000003e0000-0x000000520000 : "protect" 
 +[    0.971526] 0x000006920000-0x000006a60000 : "bootflag1" 
 +[    0.979378] 0x000006a60000-0x000006ba0000 : "bootflag2" 
 +[    0.987200] 0x000000520000-0x000006920000 : "wfi" 
 +[    1.023395] sercomm: bootflag1=1 
 +[    1.027916] sercomm: bootflag2=0 
 +[    1.034400] random: fast init done 
 +[    1.098114] 4 ser-wfi-fw partitions found on MTD device wfi 
 +[    1.103881] Creating 4 MTD partitions on "wfi": 
 +[    1.108571] 0x000000000000-0x000003200000 : "firmware" 
 +[    1.117011] 0x000000000000-0x000000500000 : "kernel" 
 +[    1.124649] 0x000000500000-0x000003200000 : "ubi" 
 +[    1.132448] 0x000003200000-0x000006400000 : "img2" 
 +[    1.140393] 0x000006ba0000-0x000006e20000 : "xml_cfg" 
 +[    1.148017] 0x000006e20000-0x0000070a0000 : "app_dat" 
 +[    1.179493] libphy: Fixed MDIO Bus: probed 
 +[    1.184689] bcm63xx_enetsw bcm63xx_enetsw.0: IRQ index 1 not found 
 +[    1.233686] b53_common: found switch: BCM63xx, rev 0 
 +[    1.239605] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec 
 +[    1.249839] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) 
 +[    1.257096] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) 
 +[    1.264294] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) 
 +[    1.271485] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) 
 +[    1.278680] leds-gpio leds-gpio.0: Skipping unavailable LED gpio 0 ((null)) 
 +[    1.286284] bcma-pci-bridge 0000:01:00.0: enabling device (0000 -> 0002) 
 +[    1.293306] bcma-pci-bridge 0000:01:00.0: bus0: Found chip with id 43217, rev 0x01 and package 0x09 
 +[    1.302714] bcma-pci-bridge 0000:01:00.0: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x27, class 0x0) 
 +[    1.313718] bcma-pci-bridge 0000:01:00.0: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1E, class 0x0) 
 +[    1.324828] bcma-pci-bridge 0000:01:00.0: bus0: Core 2 found: PCIe (manuf 0x4BF, id 0x820, rev 0x14, class 0x0) 
 +[    1.356656] bcma-pci-bridge 0000:01:00.0: bus0: Bus registered 
 +[    1.365826] NET: Registered protocol family 10 
 +[    1.380906] Segment Routing with IPv6 
 +[    1.384958] NET: Registered protocol family 17 
 +[    1.389692] 8021q: 802.1Q VLAN Support v1.8 
 +[    1.424528] UBI: auto-attach mtd11 
 +[    1.428038] ubi0: attaching mtd11 
 +[    1.872927] ubi0: scanning is finished 
 +[    1.899004] ubi0: attached mtd11 (name "ubi", size 45 MiB) 
 +[    1.904772] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes 
 +[    1.911869] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 
 +[    1.918864] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 
 +[    1.926046] ubi0: good PEBs: 360, bad PEBs: 0, corrupted PEBs: 0 
 +[    1.932233] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 
 +[    1.939678] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1591115144 
 +[    1.949095] ubi0: available PEBs: 0, total reserved PEBs: 360, PEBs reserved for bad PEB handling: 20 
 +[    1.958836] ubi0: background thread "ubi_bgt0d" started, PID 448 
 +[    1.969837] block ubiblock0_0: created from ubi0:0(rootfs) 
 +[    1.975563] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem 
 +[    1.999277] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. 
 +[    2.025058] Freeing unused kernel memory: 1316K 
 +[    2.029761] This architecture does not have kernel memory protection. 
 +[    2.036385] Run /sbin/init as init process 
 +[    3.078410] init: Console is alive 
 +[    3.082534] init: - watchdog - 
 +[    4.958743] kmodloader: loading kernel modules from /etc/modules-boot.d/
 +[    5.143831] usbcore: registered new interface driver usbfs 
 +[    5.149786] usbcore: registered new interface driver hub 
 +[    5.155567] usbcore: registered new device driver usb 
 +[    5.180651] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver 
 +[    5.190933] ehci-fsl: Freescale EHCI Host controller driver 
 +[    5.200897] ehci-platform: EHCI generic platform driver 
 +[    5.312293] ehci-platform ehci-platform: EHCI Host Controller 
 +[    5.318332] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 
 +[    5.326952] ehci-platform ehci-platform: irq 50, io mem 0xb0002500 
 +[    5.348238] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored 
 +[    5.358866] hub 1-0:1.0: USB hub found 
 +[    5.363697] hub 1-0:1.0: 1 port detected 
 +[    5.383527] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver 
 +[    5.393280] ohci-platform: OHCI generic platform driver 
 +[    5.398999] ohci-platform ohci-platform: Generic Platform OHCI controller 
 +[    5.406111] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2 
 +[    5.414503] ohci-platform ohci-platform: irq 49, io mem 0xb0002600 
 +[    5.486482] hub 2-0:1.0: USB hub found 
 +[    5.491306] hub 2-0:1.0: 1 port detected 
 +[    5.498777] kmodloader: done loading kernel modules from /etc/modules-boot.d/
 +[    5.517139] init: - preinit - 
 +[    7.354558] random: jshn: uninitialized urandom read (4 bytes read) 
 +[    7.447424] random: jshn: uninitialized urandom read (4 bytes read) 
 +[    7.810052] random: jshn: uninitialized urandom read (4 bytes read) 
 +[    8.836714] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN2, 100Mbps, full-duplex 
 +[    8.846745] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready 
 +Press the [f] key and hit [enter] to enter failsafe mode 
 +Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level 
 +[    8.996820] urandom_read: 2 callbacks suppressed 
 +[    8.996836] random: procd: uninitialized urandom read (4 bytes read) 
 +[    9.828243] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready 
 +[   13.450412] UBIFS (ubi0:1): Mounting in unauthenticated mode 
 +[   13.457022] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 570 
 +[   13.547777] UBIFS (ubi0:1): recovery needed 
 +[   13.835560] UBIFS (ubi0:1): recovery completed 
 +[   13.840605] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data" 
 +[   13.848722] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes 
 +[   13.858945] UBIFS (ubi0:1): FS size: 38473728 bytes (36 MiB, 303 LEBs), journal size 1904640 bytes (1 MiB, 15 LEBs) 
 +[   13.869703] UBIFS (ubi0:1): reserved for root: 1817208 bytes (1774 KiB) 
 +[   13.876523] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 153D57F7-D456-469D-B3E8-D94FDDAC968B, small LPT model 
 +[   13.898879] mount_root: switching to ubifs overlay 
 +[   13.948896] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 
 +[   13.970230] urandom-seed: Seeding with /etc/urandom.seed 
 +[   14.246220] procd: - early - 
 +[   14.249552] procd: - watchdog - 
 +[   15.103676] procd: - watchdog - 
 +[   15.107698] procd: - ubus - 
 +[   15.252747] random: ubusd: uninitialized urandom read (4 bytes read) 
 +[   15.265572] random: ubusd: uninitialized urandom read (4 bytes read) 
 +[   15.273260] random: ubusd: uninitialized urandom read (4 bytes read) 
 +[   15.282880] procd: - init - 
 +Please press Enter to activate this console. 
 +[   17.004366] random: crng init done 
 +[   17.007819] random: 1 urandom warning(s) missed due to ratelimiting 
 +[   17.049937] kmodloader: loading kernel modules from /etc/modules.d/
 +[   17.391996] Loading modules backported from Linux version v5.7-rc3-0-g6a8b55ed4056 
 +[   17.399976] Backport generated by backports.git v5.7-rc3-1-0-gc0c7d2bb 
 +[   17.534604] xt_time: kernel timezone is -0000 
 +[   18.031568] PPP generic driver version 2.4.2 
 +[   18.054673] NET: Registered protocol family 24 
 +[   18.155339] urngd: v1.0.2 started. 
 +[   18.197348] b43-phy0: Broadcom 43217 WLAN found (core revision 30) 
 +[   18.236288] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 17 
 +[   18.242688] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2057, Revision 14, Version 0 
 +[   18.264934] Broadcom 43xx driver loaded [ Features: PNL ] 
 +[   18.444666] kmodloader: done loading kernel modules from /etc/modules.d/
 +[   44.420708] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on LAN2, 100Mbps, full-duplex 
 +[   44.457542] br-lan: port 1(eth0.1) entered blocking state 
 +[   44.463199] br-lan: port 1(eth0.1) entered disabled state 
 +[   44.469495] device eth0.1 entered promiscuous mode 
 +[   44.474478] device eth0 entered promiscuous mode 
 +[   44.539895] br-lan: port 1(eth0.1) entered blocking state 
 +[   44.545523] br-lan: port 1(eth0.1) entered forwarding state 
 +[   45.241044] br-lan: port 2(eth0.2) entered blocking state 
 +[   45.246697] br-lan: port 2(eth0.2) entered disabled state 
 +[   45.253162] device eth0.2 entered promiscuous mode 
 +[   45.258473] br-lan: port 2(eth0.2) entered blocking state 
 +[   45.264078] br-lan: port 2(eth0.2) entered forwarding state 
 +[   45.413272] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready 
 +</nowiki> 
 +</WRAP>\\ 
 + 
 +==== OpenWrt Bootlog (SPI mod) ====
 <WRAP bootlog> <WRAP bootlog>
 <nowiki>HELO <nowiki>HELO
Line 956: Line 1770:
 ===== Tags ===== ===== Tags =====
 [[meta:tags|How to add tags]] [[meta:tags|How to add tags]]
-{{tag>bcm63xx bcm6328 128flash 128ram}}+{{tag>bcm63xx bcm6328 128NAND 128RAM 4port FastEthernet 802.11bgn b43 USBmod ADSL2+ dual_firmware}}
  • Last modified: 2024/02/12 08:58
  • by 127.0.0.1