Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| toh:sercomm:ad1018 [2021/01/08 13:45] – [Tags] danitool | toh:sercomm:ad1018 [2021/08/15 19:57] – [OEM NAND flash layout] danitool | ||
|---|---|---|---|
| Line 38: | Line 38: | ||
| sort : version | sort : version | ||
| ---- | ---- | ||
| - | |||
| - | ---- datatable ---- | ||
| - | headers : Model, Version, Current Release, Firmware OpenWrt snapshot Install, Firmware OpenWrt snapshot Upgrade | ||
| - | cols : Model, Version, Supported Current Rel, Firmware OpenWrt snapshot Install URL_url, Firmware OpenWrt snapshot Upgrade URL_url | ||
| - | align : c,c,c | ||
| - | filter | ||
| - | sort : version | ||
| - | ---- | ||
| - | |||
| - | |||
| <WRAP center round info 60%> | <WRAP center round info 60%> | ||
| Line 71: | Line 61: | ||
| - Press the '' | - Press the '' | ||
| - ssh to 192.168.1.1 and set a root password, or browse to '' | - ssh to 192.168.1.1 and set a root password, or browse to '' | ||
| - | |||
| - | |||
| - | ==== Installation via CFE web (http) server ==== | ||
| - | |||
| - | The RESET button only works in this router for sending an unkown Sercomm image via an unknown transfer procedure. | ||
| - | |||
| - | We will use the serial port TX-RX shortcircuit trick (or a serial TTL adapter) for entering into CFE's standard web interface recovery | ||
| - | |||
| - | - Set a **static IP** on your computer, use 192.168.1.35 (or any compatible), | ||
| - | - Unplug the router' | ||
| - | - Shortcircuit TX and RX [[# | ||
| - | - Plug the router' | ||
| - | - Remove the TX-RX shortcircuit. | ||
| - | - Browse to '' | ||
| - | - Send the new firmware and wait some minutes until the firmware upgrade finish. | ||
| - | - ssh to 192.168.1.1 and set a root password, or browse to '' | ||
| - | |||
| - | It's also possible to attach a [[docs: | ||
| - | |||
| - | |||
| Line 115: | Line 85: | ||
| </ | </ | ||
| + | |||
| + | |||
| + | ===== Recovery ===== | ||
| + | The bootloader (CFE) comes with a proprietary Sercomm module for recovering purposes. If for some reason the router is unable to boot due to a faulty firmware, you can recover the router by putting it into Sercomm Upgrade mode. Follow these steps: | ||
| + | |||
| + | - Power off the router | ||
| + | - Press the RESET button, don't release it yet! | ||
| + | - Power on the router | ||
| + | - Wait 8 seconds or more until the LEDs blink sequentially from left to right | ||
| + | - Release the RESET button | ||
| + | - Execute the sercomm-recovery utility as root in your OS-linux computer: <code bash> | ||
| + | < | ||
| + | Build Date: 2013年 08月 21日 星期三 11:42:59 CST (root@localhost) | ||
| + | Copyright (C) 2000-2011 Broadcom Corporation. | ||
| + | | ||
| + | NAND flash device: name , id 0x92f1 block 128KB size 131072KB | ||
| + | Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz | ||
| + | Main Thread: TP0 | ||
| + | Memory Test Passed | ||
| + | Total Memory: 134217728 bytes (128MB) | ||
| + | Boot Address: 0xb8000000 | ||
| + | | ||
| + | find flag begin read flash map | ||
| + | Board IP address | ||
| + | Host IP address | ||
| + | Gateway IP address | ||
| + | Run from flash/host (f/h) : f | ||
| + | Default host run file name : vmlinux | ||
| + | Default host flash file name : bcm963xx_fs_kernel | ||
| + | Boot delay (0-9 seconds) | ||
| + | Board Id (0-10) | ||
| + | Number of MAC Addresses (1-32) | ||
| + | Base MAC Address | ||
| + | PSI Size (1-64) KBytes | ||
| + | Enable Backup PSI [0|1] : 0 | ||
| + | System Log Size (0-256) KBytes | ||
| + | Auxillary File System Size Percent: 0 | ||
| + | Main Thread Number [0|1] : 0 | ||
| + | Voice Board Configuration (0-7) : SI32176 | ||
| + | | ||
| + | SC_DEBUG: Nand Partition Table Magic Found at 20000. | ||
| + | *** Press any key to stop auto run (1 seconds) *** | ||
| + | Auto run second count down: 1 | ||
| + | Port 1 link UP | ||
| + | 0 | ||
| + | | ||
| + | *************************************************** | ||
| + | Sercomm Boot Version 1.1.3.0 | ||
| + | | ||
| + | *************************************************** | ||
| + | Reset Button is pressed! | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_ERR: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | with index 0, offset 0x00000000, length 0x00020000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 1, offset 0x00020000, length 0x000a0000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 2, offset 0x000c0000, length 0x00140000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 3, offset 0x00200000, length 0x00140000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 4, offset 0x00340000, length 0x000a0000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 5, offset 0x003e0000, length 0x00140000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | with index 12, offset 0x06ba0000, length 0x00280000 NOT erased! | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | with index 6, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 7, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 8, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 9, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 10, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 11, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | with index 13, updated! (0000)bad, (0000)dropped! | ||
| + | DEBUG_INF: | ||
| + | DEBUG_INF: | ||
| + | Disabling Switch ports. | ||
| + | Flushing Receive Buffers... | ||
| + | 0 buffers found. | ||
| + | Closing DMA Channels. | ||
| + | | ||
| + | Resetting board in 0 seconds...HELO | ||
| + | </ | ||
| + | <WRAP center round download 60%> | ||
| + | Recovery image: [[https:// | ||
| + | |||
| + | Sercomm recovery utility: https:// | ||
| + | </ | ||
| Line 168: | Line 244: | ||
| ==== NAND flash chip specs ==== | ==== NAND flash chip specs ==== | ||
| - | '' | + | < |
| Manufacturer | Manufacturer | ||
| Device | Device | ||
| Line 182: | Line 258: | ||
| Organization | Organization | ||
| Serial access time : 25 ns | Serial access time : 25 ns | ||
| - | OOB size : 64 bytes'' | + | OOB size : 64 bytes</ |
| ==== OEM NAND flash layout ==== | ==== OEM NAND flash layout ==== | ||
| ^ Index ^ Partition ^ Name ^ filesystem ^ description | ^ Index ^ Partition ^ Name ^ filesystem ^ description | ||
| | 00 | mtd0 | cferom | | 00 | mtd0 | cferom | ||
| - | | 01 | mtd3 | mmap | + | | 01 | mtd3 | partition-map |
| | 02 | mtd1 | cferam1 | | 02 | mtd1 | cferam1 | ||
| | 03 | mtd2 | cferam2 | | 03 | mtd2 | cferam2 | ||
| - | | 04 | mtd4 | pcba-sn | + | | 04 | mtd4 | PCBASN |
| - | | 05 | mtd5 | protect_data | + | | 05 | mtd5 | protect |
| - | | 06 | mtd6 | kernel_fs1 | + | | 06 | mtd6 | kernel_fs1 |
| - | | 07 | mtd12 | lib_1 | jffs2 (ro) | Linux root libraries 1 | 281 | '' | + | | 07 | mtd12 | lib_1 | jffs2 (ro) | Linux root libraries 1 |
| - | | 08 | mtd7 | kernel_fs2 | jffs2 (ro) | Linux root 2 | + | | 08 | mtd7 | kernel_fs2 | jffs2 (ro) | Linux root 2 |
| - | | 09 | mtd13 | lib_2 | jffs2 (ro) | Linux root libraries 2 | 681 | '' | + | | 09 | mtd13 | lib_2 | jffs2 (ro) | Linux root libraries 2 |
| | 10 | mtd8 | bootflag1 | n/a | boot select | | 10 | mtd8 | bootflag1 | n/a | boot select | ||
| | 11 | mtd9 | bootflag2 | n/a | boot select | | 11 | mtd9 | bootflag2 | n/a | boot select | ||
| | 12 | mtd10 | xml_cfg | | 12 | mtd10 | xml_cfg | ||
| - | | 13 | mtd11 | + | | 13 | mtd11 |
| <WRAP center round download 60%> | <WRAP center round download 60%> | ||
| Line 256: | Line 332: | ||
| In OpenWrt the **kmod-b43** driver should be used, therefore **N mode isn't available**. kmod-bcmsmac could support N mode but isn't still supported for the BCM43217 wifi. | In OpenWrt the **kmod-b43** driver should be used, therefore **N mode isn't available**. kmod-bcmsmac could support N mode but isn't still supported for the BCM43217 wifi. | ||
| + | OEM wifi dumps: | ||
| + | <WRAP bootlog> | ||
| + | < | ||
| + | vendorid 0x14e4 | ||
| + | deviceid 0x43a9 | ||
| + | radiorev 0xe2057000 | ||
| + | chipnum 0xa8d1 | ||
| + | chiprev 0x1 | ||
| + | chippackage 0x9 | ||
| + | corerev 0x1e | ||
| + | boardid 0x5e9 | ||
| + | boardvendor 0x14e4 | ||
| + | boardrev P256 | ||
| + | driverrev 0x61e6607 | ||
| + | ucoderev 0x3100002 | ||
| + | bus 0x1 | ||
| + | phytype 0x4 | ||
| + | phyrev 0x11 | ||
| + | anarev 0x0 | ||
| + | ~ # wlctl srdump | ||
| + | |||
| + | srom[000]: | ||
| + | srom[008]: | ||
| + | srom[016]: | ||
| + | srom[024]: | ||
| + | srom[032]: | ||
| + | srom[040]: | ||
| + | srom[048]: | ||
| + | srom[056]: | ||
| + | srom[064]: | ||
| + | srom[072]: | ||
| + | srom[080]: | ||
| + | srom[088]: | ||
| + | srom[096]: | ||
| + | srom[104]: | ||
| + | srom[112]: | ||
| + | srom[120]: | ||
| + | srom[128]: | ||
| + | srom[136]: | ||
| + | srom[144]: | ||
| + | srom[152]: | ||
| + | srom[160]: | ||
| + | srom[168]: | ||
| + | srom[176]: | ||
| + | srom[184]: | ||
| + | srom[192]: | ||
| + | srom[200]: | ||
| + | srom[208]: | ||
| + | srom[216]: | ||
| + | ~ # wlctl nvram_dump | ||
| + | sromrev=8 | ||
| + | boardrev=0x1256 | ||
| + | boardflags=0x200 | ||
| + | boardflags2=0x9800 | ||
| + | boardtype=0x5e9 | ||
| + | subvid=0x14e4 | ||
| + | boardnum=0 | ||
| + | regrev=3 | ||
| + | ledbh3=136 | ||
| + | pa0b0=0xfe69 | ||
| + | pa0b1=0x1726 | ||
| + | pa0b2=0xfa5c | ||
| + | pa0itssit=32 | ||
| + | pa0maxpwr=70 | ||
| + | opo=34 | ||
| + | aa2g=3 | ||
| + | aa5g=0 | ||
| + | ag0=2 | ||
| + | ag1=2 | ||
| + | ag2=255 | ||
| + | ag3=255 | ||
| + | pa1b0=0x0 | ||
| + | pa1b1=0x0 | ||
| + | pa1b2=0x0 | ||
| + | pa1lob0=0x0 | ||
| + | pa1lob1=0x0 | ||
| + | pa1lob2=0x0 | ||
| + | pa1hib0=0x0 | ||
| + | pa1hib1=0x0 | ||
| + | pa1hib2=0x0 | ||
| + | pa1itssit=0 | ||
| + | pa1maxpwr=0 | ||
| + | pa1lomaxpwr=0 | ||
| + | pa1himaxpwr=0 | ||
| + | bxa2g=0 | ||
| + | rssisav2g=0 | ||
| + | rssismc2g=0 | ||
| + | rssismf2g=0 | ||
| + | bxa5g=0 | ||
| + | rssisav5g=0 | ||
| + | rssismc5g=0 | ||
| + | rssismf5g=0 | ||
| + | tri2g=0 | ||
| + | tri5g=0 | ||
| + | tri5gl=0 | ||
| + | tri5gh=0 | ||
| + | rxpo2g=0 | ||
| + | rxpo5g=0 | ||
| + | txchain=3 | ||
| + | rxchain=3 | ||
| + | antswitch=0 | ||
| + | tssipos2g=1 | ||
| + | extpagain2g=2 | ||
| + | pdetrange2g=2 | ||
| + | triso2g=4 | ||
| + | antswctl2g=0 | ||
| + | tssipos5g=0 | ||
| + | extpagain5g=0 | ||
| + | pdetrange5g=0 | ||
| + | triso5g=0 | ||
| + | antswctl5g=0 | ||
| + | ccode= | ||
| + | macaddr=94: | ||
| + | tempthresh=120 | ||
| + | tempoffset=0 | ||
| + | rawtempsense=0x0 | ||
| + | measpower=0x0 | ||
| + | tempsense_slope=0x0 | ||
| + | tempcorrx=0x0 | ||
| + | tempsense_option=0x0 | ||
| + | freqoffset_corr=0x0 | ||
| + | iqcal_swp_dis=0x0 | ||
| + | hw_iqcal_en=0x0 | ||
| + | elna2g=0 | ||
| + | elna5g=0 | ||
| + | phycal_tempdelta=0 | ||
| + | temps_period=0 | ||
| + | temps_hysteresis=0 | ||
| + | measpower1=0x0 | ||
| + | measpower2=0x0 | ||
| + | cck2gpo=0 | ||
| + | ofdm2gpo=1145315874 | ||
| + | ofdm5gpo=0 | ||
| + | ofdm5glpo=0 | ||
| + | ofdm5ghpo=0 | ||
| + | mcs2gpo0=8738 | ||
| + | mcs2gpo1=17476 | ||
| + | mcs2gpo2=8738 | ||
| + | mcs2gpo3=17476 | ||
| + | mcs2gpo4=8738 | ||
| + | mcs2gpo5=17476 | ||
| + | mcs2gpo6=8738 | ||
| + | mcs2gpo7=17476 | ||
| + | mcs5gpo0=0 | ||
| + | mcs5gpo1=0 | ||
| + | mcs5gpo2=0 | ||
| + | mcs5gpo3=0 | ||
| + | mcs5gpo4=0 | ||
| + | mcs5gpo5=0 | ||
| + | mcs5gpo6=0 | ||
| + | mcs5gpo7=0 | ||
| + | mcs5glpo0=0 | ||
| + | mcs5glpo1=0 | ||
| + | mcs5glpo2=0 | ||
| + | mcs5glpo3=0 | ||
| + | mcs5glpo4=0 | ||
| + | mcs5glpo5=0 | ||
| + | mcs5glpo6=0 | ||
| + | mcs5glpo7=0 | ||
| + | mcs5ghpo0=0 | ||
| + | mcs5ghpo1=0 | ||
| + | mcs5ghpo2=0 | ||
| + | mcs5ghpo3=0 | ||
| + | mcs5ghpo4=0 | ||
| + | mcs5ghpo5=0 | ||
| + | mcs5ghpo6=0 | ||
| + | mcs5ghpo7=0 | ||
| + | cddpo=0 | ||
| + | stbcpo=0 | ||
| + | bw40po=0 | ||
| + | bwduppo=0 | ||
| + | pcieingress_war=15 | ||
| + | rxgainerr2ga0=63 | ||
| + | rxgainerr2ga1=31 | ||
| + | rxgainerr2ga2=31 | ||
| + | rxgainerr5gla0=63 | ||
| + | rxgainerr5gla1=31 | ||
| + | rxgainerr5gla2=31 | ||
| + | rxgainerr5gma0=63 | ||
| + | rxgainerr5gma1=31 | ||
| + | rxgainerr5gma2=31 | ||
| + | rxgainerr5gha0=63 | ||
| + | rxgainerr5gha1=31 | ||
| + | rxgainerr5gha2=31 | ||
| + | rxgainerr5gua0=63 | ||
| + | rxgainerr5gua1=31 | ||
| + | rxgainerr5gua2=31 | ||
| + | noiselvl2ga0=31 | ||
| + | noiselvl2ga1=31 | ||
| + | noiselvl2ga2=31 | ||
| + | noiselvl5gla0=31 | ||
| + | noiselvl5gla1=31 | ||
| + | noiselvl5gla2=31 | ||
| + | noiselvl5gma0=31 | ||
| + | noiselvl5gma1=31 | ||
| + | noiselvl5gma2=31 | ||
| + | noiselvl5gha0=31 | ||
| + | noiselvl5gha1=31 | ||
| + | noiselvl5gha2=31 | ||
| + | noiselvl5gua0=31 | ||
| + | noiselvl5gua1=31 | ||
| + | noiselvl5gua2=31 | ||
| + | subband5gver=7 | ||
| + | maxp2ga0=70 | ||
| + | itt2ga0=32 | ||
| + | itt5ga0=0 | ||
| + | pa2gw0a0=0xfe69 | ||
| + | pa2gw1a0=0x1726 | ||
| + | pa2gw2a0=0xfa5c | ||
| + | maxp5ga0=0 | ||
| + | maxp5gha0=0 | ||
| + | maxp5gla0=0 | ||
| + | pa5gw0a0=0x0 | ||
| + | pa5gw1a0=0x0 | ||
| + | pa5gw2a0=0x0 | ||
| + | pa5glw0a0=0x0 | ||
| + | pa5glw1a0=0x0 | ||
| + | pa5glw2a0=0x0 | ||
| + | pa5ghw0a0=0x0 | ||
| + | pa5ghw1a0=0x0 | ||
| + | pa5ghw2a0=0x0 | ||
| + | maxp2ga1=70 | ||
| + | itt2ga1=32 | ||
| + | itt5ga1=0 | ||
| + | pa2gw0a1=0xfea8 | ||
| + | pa2gw1a1=0x1978 | ||
| + | pa2gw2a1=0xfa26 | ||
| + | maxp5ga1=0 | ||
| + | maxp5gha1=0 | ||
| + | maxp5gla1=0 | ||
| + | pa5gw0a1=0x0 | ||
| + | pa5gw1a1=0x0 | ||
| + | pa5gw2a1=0x0 | ||
| + | pa5glw0a1=0x0 | ||
| + | pa5glw1a1=0x0 | ||
| + | pa5glw2a1=0x0 | ||
| + | pa5ghw0a1=0x0 | ||
| + | pa5ghw1a1=0x0 | ||
| + | pa5ghw2a1=0x0 | ||
| + | maxp2ga2=255 | ||
| + | itt2ga2=255 | ||
| + | itt5ga2=255 | ||
| + | pa2gw0a2=0xffff | ||
| + | pa2gw1a2=0xffff | ||
| + | pa2gw2a2=0xffff | ||
| + | maxp5ga2=255 | ||
| + | maxp5gha2=255 | ||
| + | maxp5gla2=255 | ||
| + | pa5gw0a2=0xffff | ||
| + | pa5gw1a2=0xffff | ||
| + | pa5gw2a2=0xffff | ||
| + | pa5glw0a2=0xffff | ||
| + | pa5glw1a2=0xffff | ||
| + | pa5glw2a2=0xffff | ||
| + | pa5ghw0a2=0xffff | ||
| + | pa5ghw1a2=0xffff | ||
| + | pa5ghw2a2=0xffff | ||
| + | maxp2ga3=255 | ||
| + | itt2ga3=255 | ||
| + | itt5ga3=255 | ||
| + | pa2gw0a3=0xffff | ||
| + | pa2gw1a3=0xffff | ||
| + | pa2gw2a3=0xffff | ||
| + | maxp5ga3=255 | ||
| + | maxp5gha3=255 | ||
| + | maxp5gla3=255 | ||
| + | pa5gw0a3=0xffff | ||
| + | pa5gw1a3=0xffff | ||
| + | pa5gw2a3=0xffff | ||
| + | pa5glw0a3=0xffff | ||
| + | pa5glw1a3=0xffff | ||
| + | pa5glw2a3=0xffff | ||
| + | pa5ghw0a3=0xffff | ||
| + | pa5ghw1a3=0xffff | ||
| + | pa5ghw2a3=0xffff | ||
| + | devid=0x43a9 | ||
| + | watchdog=60000 | ||
| + | </ | ||
| + | </ | ||
| ==== JTAG ==== | ==== JTAG ==== | ||
| -> [[docs: | -> [[docs: | ||