STORYLiNK SAP-G3200U3
STORYLiNK SAP-G3200U3 (called also Giga WiFi AP) is an AC1200 dual-band wireless router with 5-port gigabit switch and one USB 3.0 port. This device was designed in South Korea by SEMA (STORYLiNK seems to be a brand/branch of SEMA) and is manufactured by the same company in China. This router can be purchased (depends on availability and discounts, the price is around 30-50 EUR) for example on GMarket which offers almost global shipping.
Supported Versions
Hardware Highlights
Installation
Stock firmware web GUI checks image size (should be same as entire firmware file size) and image name (should be SAP-G3200) in uImage header for verification of the firmware file uploaded for update. Happily, the device contains recovery mode in U-Boot, which allows easy installation any kind of image using TFTP server.
Pressing and holding the Reset button during power up until the USB LEDs start blinking enables the TFTP recovery mode. The procedure can be used to transfer a firmware image (for OpenWrt use sysupgrade file):
- Setup your local network card with a static IP: 192.168.10.10 (the router uses 192.168.10.1)
- Connect your PC with one of the LAN ports in router
- Setup TFTP server on your PC with accessible firmware file, which name should be: root_uimage (without any extension!)
- Power up the router, press and hold the Reset button until the USB LEDs starts blinking
- Stop pressing the button and wait for router to download the file
- NOTE: when the upgrade process is done, the USB LED will turn off and you need to power cycle the router manually!
Stock firmware
Stock firmware uses very old, 2.6.36 kernel version with BusyBox v1.12.1, without () writable filesystem on FLASH and whole configuration stored in two NVRAM areas (FLASH offsets 0x32000h and 0x36000h).
English language is available since 1.0.5 version.
You can download all stock firmware versions here: http://update.gostorylink.com/SAP-G3200/
Available commands in stock firmware:
# [ add_ddns.sh affinity.sh arp arping arptables ash ated automount-unplug.sh automount.sh automount_boot.sh awk basename bcrelay brctl budhcpc.sh busarb busybox cat cfhttpd check_ddns.sh check_part.sh check_upnp checkwip chmod chown chpasswd chpasswd.sh cloudport config-dhcp-mib.sh config-dns.sh config-igmpproxy.sh config-pppoe-mib.sh config-udhcpd.sh config-vlan.sh config.sh cp curl cut date dd ddns.sh df dhcpd.sh diff dirname echo eth_mac eth_mac.sh ether-wake expr external-ip.sh fdisk find firewall.sh flash free getWanIP.sh global.sh goahead gostorylink_update.sh gpio grep gtd.sh gtp.sh halt hdparm hexdump hostname htpasswd ifconfig igmpproxy igmpproxy.sh inadyn init init_system insmod internet.sh ip ipaddr iplink iproute iprule iptables iptunnel iwconfig iwgetid iwpriv kill killall killbyname.sh lan.sh lighttpd lld2d ln logger login ls lsmod lspci mdev mem_usage mii_mgr minidlna minidlnaconf.sh miniupnpd miniupnpd.sh mkdir mkdosfs mknod mkswap monitor mount mount.ntfs-3g mountclean mpstat mtd_write mv nat.sh nmbd noip2 ntfs-3g ntp.sh ntp_check.sh ntpclient nvram_daemon nvram_get nvram_set pcie_enumerate_reboot.sh pciephy phyval pidof ping poweroff pppd pptpctrl pptpd printf proftpd proftpd.sh ps pwd qdma ralink_init rc reboot reg rm rmmod route rps.sh samba.sh samba_add_dir.sh sambahdd.sh schelper sd_rw_test.sh sed sema_autocal.sh semamount.sh seq setpci sh sha sleep smbd smbpasswd smp.sh start-stop-daemon storage.sh storage_pro_check.sh storylink.sh storylinkbcast super_dmz swapoff swapon switch sync telnetd test tftp time top touch tr transmission-daemon transmission.sh udhcpc udhcpc-discovery udhcpc.sh udhcpd udhcpd_superdmz.sh udpsvd umount uname upnpc-shared upnpc-static upnpreset uptime vconfig vpn-passthru.sh vpnpppd wan.sh wan_check.sh wan_down.sh wanduck wc web webdav.sh wget wifi_unload.sh
Root access
By default, telnet is available, use the following credentials to login as root (serial console access is also protected with password):
Login: admin
Password: smpw01072015
If the above credentials do not work for you, export settings from stock firmware using dedicated option in web GUI. Then open the file in any text editor and find Password=... line.
Hardware
Info
Instruction set | MIPS MIPS 1004Kc |
---|---|
Vendor | MediaTek |
bootloader | U-Boot |
System-On-Chip | MT7621 (MIPS) |
CPU/Speed | 880 MHz |
CPU cores | 2 |
FLASH chip | Macronix MX25L640BE |
FLASH size | 8192 KiB |
RAM chip | Nanya NT5CB64M16FP-DH docs |
RAM size | 128 MiB |
Wireless No1 | separate chip: MediaTek MT7602EN 2×2:2 MIMO for 2.4GHz 802.11b/g/n |
Wireless No2 | separate chip: MediaTek MT7612EN 2×2:2 MIMO for 5.0GHz 802.11a/c |
switch | MT7530 (inside SoC) |
USB | Yes, 1x 3.0 (inside SoC) |
Serial | Yes |
JTAG | No |
Internal photos
Serial
Serial console is available in the J4 connector.
It's an UART interface, with 3.3V logic, do not connect RS232 here!
- VCC (3.3V output, do not connect 3.3V output here from your UART adapter)
- RX (connect it with TX on your UART adapter)
- TX (connect it with RX on your UART adapter)
- GND
Baud Rate: 57600
Data Bits: 8
Parity: No
Stop Bits: 1
WARNING:
GPIO11 (TXD2) which is used for UART TX signal on this board should not be pulled up during power up. If your UART adapter has internal pull-up resistors, you may need first power up the router and after that connect the UART adapter. Otherwise, the board may not start booting at all and you will not get any output on the console.
GPIO
MT7621 SoC provides up to 49 GPIOs. Some of them can be used in different mode (UART, I2C, JTAG, etc.), some are used by the router for status LEDs, buttons and other stuff. Because of the configuration process, which takes place at power up of the device, some of GPIOs are used for SoC setup, like selecting boot device (NOR/NAND), memory type (DDR2/DDR3) etc. and they are pulled-up or -down with resistors.
Except UART serial console header, there is another one, 4-pin header - J3, which contains 4 GPIOs:
- GPIO8
- GPIO7
- GPIO6
- GPIO5
Buttons
There are available and supported two buttons:
Name on enclosure | GPIO | Role in OpenWrt | Active in |
---|---|---|---|
Reset | GPIO16 | Reset | Low |
WPS/WiFi on-off | GPIO14 | RF kill | Low |
LEDs
Device contains 9 LEDs in total, but only one of them is controlled with GPIO.
Mark on enclosure | GPIO | Default behaviour | Color |
---|---|---|---|
Power | - | Power | Red |
Internet | - | WAN cable/traffic | Green |
1 | - | LAN1 cable/traffic | Green |
2 | - | LAN2 cable/traffic | Green |
3 | - | LAN3 cable/traffic | Green |
4 | - | LAN4 cable/traffic | Green |
2.4 | GPIO/LEDA on MT7602EN (not supported in mt76 driver? ) | 2.4 GHz radio | Green |
5.0 | GPIO/LEDA on MT7612EN (not supported in mt76 driver? ) | 5.0 GHz radio | Green |
USB | 13 (active low) | USB device (diag LED during booting in OpenWrt) | Green |
Bootlogs
OpenWrt
[ 0.000000] Linux version 3.18.18 (pepe2k@ubuntu1404vm) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46434) ) #5 SMP Mon Jul 20 19:17:44 CEST 2015 [ 0.000000] SoC Type: Mediatek MT7621 ver:1 eco:3 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc) [ 0.000000] MIPS: machine is STORYLiNK SAP-G3200U3 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x07ffffff] [ 0.000000] HighMem empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x07ffffff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x07ffffff] [ 0.000000] Detected 3 available secondary CPU(s) [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.000000] PERCPU: Embedded 9 pages/cpu @8110d000 s5696 r8192 d22976 u36864 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 [ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2 [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Writing ErrCtl register=00009041 [ 0.000000] Readback ErrCtl register=00009041 [ 0.000000] Memory: 125896K/131072K available (2701K kernel code, 146K rwdata, 520K rodata, 204K init, 228K bss, 5176K reserved, 0K highmem) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] NR_IRQS:256 [ 0.000000] gic: revision 3.0 [ 0.000000] CPU Clock: 880MHz [ 0.000000] Calibrating delay loop... 577.53 BogoMIPS (lpj=2887680) [ 0.060000] pid_max: default: 32768 minimum: 301 [ 0.070000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.080000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.090000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.090000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.090000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.090000] CPU1 revision is: 0001992f (MIPS 1004Kc) [ 0.190000] Synchronize counters for CPU 1: done. [ 0.190000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.190000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.190000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.190000] CPU2 revision is: 0001992f (MIPS 1004Kc) [ 0.280000] Synchronize counters for CPU 2: done. [ 0.290000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.290000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.290000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.290000] CPU3 revision is: 0001992f (MIPS 1004Kc) [ 0.390000] Synchronize counters for CPU 3: done. [ 0.390000] Brought up 4 CPUs [ 0.400000] pinctrl core: initialized pinctrl subsystem [ 0.410000] NET: Registered protocol family 16 [ 0.420000] pull PCIe RST: RALINK_RSTCTRL = 0 [ 0.720000] release PCIe RST: RALINK_RSTCTRL = 7000000 [ 0.730000] ***** Xtal 40MHz ***** [ 0.730000] release PCIe RST: RALINK_RSTCTRL = 7000000 [ 0.740000] Port 0 N_FTS = 1b102800 [ 0.740000] Port 1 N_FTS = 1b102800 [ 0.750000] Port 2 N_FTS = 1b102800 [ 1.880000] PCIE2 no card, disable it(RST&CLK) [ 1.890000] -> 21007f2 [ 1.890000] PCIE0 enabled [ 1.890000] PCIE1 enabled [ 1.900000] PCI host bridge /pcie@1e140000 ranges: [ 1.900000] MEM 0x0000000060000000..0x000000006fffffff [ 1.910000] IO 0x000000001e160000..0x000000001e16ffff [ 1.950000] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 1.960000] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 1.970000] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 1.980000] PCI host bridge to bus 0000:00 [ 1.980000] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff] [ 1.990000] pci_bus 0000:00: root bus resource [io 0xffffffff] [ 2.000000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 2.010000] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 2.020000] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 2.030000] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000] [ 2.040000] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000] [ 2.050000] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000] [ 2.060000] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000] [ 2.070000] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff] [ 2.080000] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x601fffff pref] [ 2.090000] pci 0000:00:01.0: BAR 8: assigned [mem 0x60200000-0x602fffff] [ 2.100000] pci 0000:00:01.0: BAR 9: assigned [mem 0x60300000-0x603fffff pref] [ 2.110000] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff] [ 2.120000] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff] [ 2.130000] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit] [ 2.140000] pci 0000:01:00.0: BAR 6: assigned [mem 0x60100000-0x6010ffff pref] [ 2.150000] pci 0000:00:00.0: PCI bridge to [bus 01] [ 2.150000] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff] [ 2.160000] pci 0000:00:00.0: bridge window [mem 0x60100000-0x601fffff pref] [ 2.170000] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff 64bit] [ 2.180000] pci 0000:02:00.0: BAR 6: assigned [mem 0x60300000-0x6030ffff pref] [ 2.190000] pci 0000:00:01.0: PCI bridge to [bus 02] [ 2.190000] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff] [ 2.200000] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff pref] [ 2.210000] BAR0 at slot 0 = 0 [ 2.210000] bus=0x0, slot = 0x0 [ 2.220000] BAR0 at slot 1 = 0 [ 2.220000] bus=0x0, slot = 0x1 [ 2.230000] bus=0x1, slot = 0x0, irq=0xff [ 2.230000] bus=0x2, slot = 0x1, irq=0xff [ 2.240000] Switched to clocksource MIPS [ 2.240000] NET: Registered protocol family 2 [ 2.260000] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 2.270000] TCP bind hash table entries: 1024 (order: 1, 8192 bytes) [ 2.290000] TCP: Hash tables configured (established 1024 bind 1024) [ 2.300000] TCP: reno registered [ 2.300000] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 2.310000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 2.330000] NET: Registered protocol family 1 [ 2.330000] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 2.350000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 2.360000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 2.380000] msgmni has been set to 245 [ 2.390000] io scheduler noop registered [ 2.400000] io scheduler deadline registered (default) [ 2.410000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 2.420000] console [ttyS0] disabled [ 2.420000] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 34, base_baud = 3125000) is a 16550A [ 2.440000] console [ttyS0] enabled [ 2.440000] console [ttyS0] enabled [ 2.450000] bootconsole [early0] disabled [ 2.450000] bootconsole [early0] disabled [ 2.470000] m25p80 spi32766.0: mx25l6405d (8192 Kbytes) [ 2.480000] m25p80 spi32766.0: using chunked io [ 2.490000] 5 ofpart partitions found on MTD device spi32766.0 [ 2.500000] Creating 5 MTD partitions on "spi32766.0": [ 2.510000] 0x000000000000-0x000000030000 : "u-boot" [ 2.520000] 0x000000030000-0x000000031000 : "u-boot-env" [ 2.530000] 0x000000031000-0x000000040000 : "config" [ 2.540000] 0x000000040000-0x000000050000 : "factory" [ 2.550000] 0x000000050000-0x000000800000 : "firmware" [ 2.610000] 2 uimage-fw partitions found on MTD device firmware [ 2.620000] 0x000000050000-0x000000174e22 : "kernel" [ 2.630000] 0x000000174e22-0x000000800000 : "rootfs" [ 2.640000] mtd: device 6 (rootfs) set to be root filesystem [ 2.650000] 1 squashfs-split partitions found on MTD device rootfs [ 2.660000] 0x000000380000-0x000000800000 : "rootfs_data" [ 2.670000] netif_napi_add() called with weight 128 on device eth%d [ 2.690000] change HW-TRAP to 0x17ccf [ 2.700000] libphy: mdio: probed [ 2.720000] ralink_soc_eth 1e100000.ethernet: loaded mt7530 driver [ 2.730000] ralink_soc_eth 1e100000.ethernet eth0: ralink at 0xbe100000, irq 11 [ 2.740000] mt7621_wdt 1e000100.wdt: Initialized [ 2.750000] TCP: cubic registered [ 2.760000] NET: Registered protocol family 17 [ 2.770000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 2.790000] 8021q: 802.1Q VLAN Support v1.8 [ 2.810000] VFS: Mounted root (squashfs filesystem) readonly on device 31:6. [ 2.830000] Freeing unused kernel memory: 204K (8034d000 - 80380000) [ 2.880000] random: nonblocking pool is initialized [ 4.860000] init: Console is alive [ 4.870000] init: - watchdog - [ 5.670000] ralink_soc_eth 1e100000.ethernet eth0: port 4 link up [ 6.760000] usbcore: registered new interface driver usbfs [ 6.770000] usbcore: registered new interface driver hub [ 6.780000] usbcore: registered new device driver usb [ 6.820000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.840000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.860000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.880000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.900000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.920000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.940000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.960000] FM_OUT value: u4FmOut = 0(0x00000000) [ 6.980000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.000000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.060000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.080000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.100000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.120000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.140000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.160000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.180000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.200000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.220000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.240000] FM_OUT value: u4FmOut = 0(0x00000000) [ 7.390000] xhci-hcd xhci-hcd: xHCI Host Controller [ 7.400000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 1 [ 7.410000] xhci-hcd xhci-hcd: irq 30, io mem 0x1e1c0000 [ 7.420000] hub 1-0:1.0: USB hub found [ 7.430000] hub 1-0:1.0: 2 ports detected [ 7.440000] xhci-hcd xhci-hcd: xHCI Host Controller [ 7.440000] xhci-hcd xhci-hcd: new USB bus registered, assigned bus number 2 [ 7.460000] hub 2-0:1.0: USB hub found [ 7.460000] hub 2-0:1.0: 1 port detected [ 7.870000] init: - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 11.310000] mount_root: jffs2 not ready yet, using temporary tmpfs overlay [ 11.340000] procd: - early - [ 11.350000] procd: - watchdog - [ 12.200000] procd: - ubus - [ 13.210000] procd: - init - Please press Enter to activate this console. [ 13.800000] NET: Registered protocol family 10 [ 13.820000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 13.830000] Loading modules backported from Linux version master-2015-06-22-0-g4732c92 [ 13.850000] Backport generated by backports.git backports-20150626-0-gc1a4168 [ 13.890000] cfg80211: Calling CRDA to update world regulatory domain [ 13.900000] cfg80211: World regulatory domain updated: [ 13.910000] cfg80211: DFS Master region: unset [ 13.910000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 13.930000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 13.950000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 13.960000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 13.980000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 13.990000] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 14.010000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 14.020000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 14.040000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 14.060000] ASIC revision: 76120033 [ 14.080000] ROM patch already applied [ 14.080000] Firmware Version: 0.0.00 [ 14.090000] Build: 1 [ 14.090000] Build Time: 201410061140____ [ 14.130000] Firmware running! [ 14.130000] pci device driver attached [ 14.140000] ASIC revision: 76020033 [ 14.170000] ROM patch already applied [ 14.170000] Firmware Version: 0.0.00 [ 14.180000] Build: 1 [ 14.180000] Build Time: 201410061140____ [ 14.210000] Firmware running! [ 14.210000] pci device driver attached [ 14.230000] hidraw: raw HID events driver (C) Jiri Kosina [ 14.250000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 14.270000] nf_conntrack version 0.5.0 (1970 buckets, 7880 max) [ 14.370000] usbcore: registered new interface driver usbhid [ 14.380000] usbhid: USB HID core driver [ 14.400000] xt_time: kernel timezone is -0000 [ 14.410000] PPP generic driver version 2.4.2 [ 14.420000] NET: Registered protocol family 24 [ 18.490000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 18.500000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 18.520000] jffs2_build_filesystem(): erasing all blocks after the end marker... [ 19.210000] device eth0.1 entered promiscuous mode [ 19.220000] device eth0 entered promiscuous mode [ 19.230000] br-lan: port 1(eth0.1) entered forwarding state [ 19.240000] br-lan: port 1(eth0.1) entered forwarding state [ 21.240000] br-lan: port 1(eth0.1) entered forwarding state [ 54.630000] done. [ 54.640000] jffs2: notice: (928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. BusyBox v1.23.2 (2015-07-20 16:25:21 CEST) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- CHAOS CALMER (Bleeding Edge, r46434) ----------------------------------------------------- * 1 1/2 oz Gin Shake with a glassful * 1/4 oz Triple Sec of broken ice and pour * 3/4 oz Lime Juice unstrained into a goblet. * 1 1/2 oz Orange Juice * 1 tsp. Grenadine Syrup -----------------------------------------------------
Stock firmware
=================================================================== MT7621 stage1 code 13:14:00 (ASIC) CPU=50000000 HZ BUS=16666666 HZ ================================================================== Change MPLL source from XTAL to CR... do MEMPLL setting.. MEMPLL Config : 0x31000000 3PLL mode + External loopback === XTAL-40Mhz === DDR-800Mhz === PLL3 FB_DL: 0xe, 1/0 = 684/340 39000000 PLL2 FB_DL: 0x11, 1/0 = 599/425 45000000 PLL4 FB_DL: 0x15, 1/0 = 578/446 55000000 do DDR setting..[00320000] Apply DDR3 Setting...(use default AC) 0 8 16 24 32 40 48 56 64 72 80 88 96 104 112 120 -------------------------------------------------------------------------------- 0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 000F:| 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0010:| 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0011:| 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 rank 0 coarse = 16 rank 0 fine = 48 B:| 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 opt_dle value:10 DRAMC_R0DELDLY[018]=00002A2C ================================================================== RXDQS perbit delay software calibration ================================================================== 1.0-15 bit dq delay value ================================================================== bit| 0 1 2 3 4 5 6 7 8 9 -------------------------------------- 0 | 12 10 13 12 11 10 10 10 8 8 10 | 11 12 11 13 10 13 -------------------------------------- ================================================================== 2.dqs window x=pass dqs delay value (min~max)center y=0-7bit DQ of every group input delay:DQS0 =44 DQS1 = 42 ================================================================== bitDQS0 bit DQS1 0 (2~86)44 8 (1~81)41 1 (1~84)42 9 (1~83)42 2 (2~82)42 10 (3~81)42 3 (1~84)42 11 (1~79)40 4 (1~85)43 12 (1~80)40 5 (1~85)43 13 (1~82)41 6 (1~84)42 14 (1~84)42 7 (1~85)43 15 (1~83)42 ================================================================== 3.dq delay value last ================================================================== bit| 0 1 2 3 4 5 6 7 8 9 -------------------------------------- 0 | 12 12 15 14 12 11 12 11 9 8 10 | 11 14 13 14 10 13 ================================================================== ================================================================== TX perbyte calibration ================================================================== DQS loop = 15, cmp_err_1 = ffff0000 dqs_perbyte_dly.last_dqsdly_pass[0]=15, finish count=1 dqs_perbyte_dly.last_dqsdly_pass[1]=15, finish count=2 DQ loop=15, cmp_err_1 = ffff0000 dqs_perbyte_dly.last_dqdly_pass[0]=15, finish count=1 dqs_perbyte_dly.last_dqdly_pass[1]=15, finish count=2 byte:0, (DQS,DQ)=(8,8) byte:1, (DQS,DQ)=(8,8) 20,data:88 [EMI] DRAMC calibration passed =================================================================== MT7621 stage1 code done CPU=50000000 HZ BUS=16666666 HZ =================================================================== U-Boot 1.1.3 (Oct 13 2014 - 15:37:59) Board: Ralink APSoC DRAM: 128 MB relocate_code Pointer at: 87fb8000 Bootloader Operation Mode : PHYS_FLASH_START : BFC00000 PHYS_FLASH_1 : BFC00000 CFG_BOOTLOADER_SIZE: 30000 CFG_CONFIG_SIZE : 10000 CFG_FACTORY_SIZE : 10000 CFG_ENV_ADDR : BFC30000 CFG_FACTORY_ADDR : BFC40000 CFG_KERN_ADDR : BFC50000 CFG_ENV_SIZE : 1000 Config XHCI 40M PLL flash manufacture id: c2, device id 20 17 find flash: MX25L6405D *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 4.2.1.0 -------------------------------------------- ASIC 7621_MP (MAC to MT7530 Mode) DRAM_CONF_FROM: Auto-Detection DRAM_TYPE: DDR3 DRAM bus: 16 bit Xtal Mode=3 OCP Ratio=1/3 Flash component: SPI Flash Date:Oct 13 2014 Time:15:37:59 ============================================ icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 800 MHZ #### estimate memory size =128 Mbytes #Reset_MT7530 Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. 3: System Boot system code via Flash. ## Booting image at bfc50000 ... Image Name: SAP-G3200 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 7417912 Bytes = 7.1 MB Load Address: 80001000 Entry Point: 8000f500 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8000f500) ... ## Giving linux memsize in MB, 128 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.36 (root@localhost.localdomain) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1075 SMP Wed Mar 11 10:56:43 CST 2015 The CPU feqenuce set to 800 MHz GCMP present CPU revision is: 0001992f (MIPS 1004Kc) Software DMA cache coherency Determined physical RAM map: memory: 08000000 @ 00000000 (usable) Initrd not found or empty - disabling initrd Zone PFN ranges: Normal 0x00000000 -> 0x00008000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00008000 Detected 3 available secondary CPU(s) PERCPU: Embedded 7 pages/cpu @81103000 s6848 r8192 d13632 u65536 pcpu-alloc: s6848 r8192 d13632 u65536 alloc=16*4096 pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 console=ttyS1,57600 root=/dev/ram0 rootfstype=squashfs,jffs2 PID hash table entries: 512 (order: -1, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes MIPS secondary cache 256kB, 8-way, linesize 32 bytes. Writing ErrCtl register=00009250 Readback ErrCtl register=00009250 Memory: 118920k/131072k available (3745k kernel code, 12152k reserved, 1179k data, 5640k init, 0k highmem) Hierarchical RCU implementation. Verbose stalled-CPUs detection is disabled. NR_IRQS:128 Trying to install interrupt handler for IRQ24 Trying to install interrupt handler for IRQ25 Trying to install interrupt handler for IRQ22 Trying to install interrupt handler for IRQ9 Trying to install interrupt handler for IRQ10 Trying to install interrupt handler for IRQ11 Trying to install interrupt handler for IRQ12 Trying to install interrupt handler for IRQ13 Trying to install interrupt handler for IRQ14 Trying to install interrupt handler for IRQ16 Trying to install interrupt handler for IRQ17 Trying to install interrupt handler for IRQ18 Trying to install interrupt handler for IRQ19 Trying to install interrupt handler for IRQ20 Trying to install interrupt handler for IRQ21 Trying to install interrupt handler for IRQ23 Trying to install interrupt handler for IRQ26 Trying to install interrupt handler for IRQ27 Trying to install interrupt handler for IRQ28 Trying to install interrupt handler for IRQ15 Trying to install interrupt handler for IRQ8 Trying to install interrupt handler for IRQ29 Trying to install interrupt handler for IRQ30 Trying to install interrupt handler for IRQ31 CPU0: status register was 11000000 CPU0: status register now 11000000 CPU0: status register frc 11001800 console [ttyS1] enabled Calibrating delay loop... 526.33 BogoMIPS (lpj=1052672) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 launch: starting cpu1 launch: cpu1 gone! CPU revision is: 0001992f (MIPS 1004Kc) Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes MIPS secondary cache 256kB, 8-way, linesize 32 bytes. launch: starting cpu2 launch: cpu2 gone! CPU revision is: 0001992f (MIPS 1004Kc) Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes MIPS secondary cache 256kB, 8-way, linesize 32 bytes. launch: starting cpu3 launch: cpu3 gone! CPU revision is: 0001992f (MIPS 1004Kc) Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes MIPS secondary cache 256kB, 8-way, linesize 32 bytes. Brought up 4 CPUs Synchronize counters across 4 CPUs: done. NET: Registered protocol family 16 release PCIe RST: RALINK_RSTCTRL = 7000000 PCIE PHY initialize ***** Xtal 40MHz ***** start MT7621 PCIe register access RALINK_RSTCTRL = 7000000 RALINK_CLKCFG1 = 77ffeff8 *************** MT7621 PCIe RC mode ************* PCIE2 no card, disable it(RST&CLK) pcie_link status = 0x3 RALINK_RSTCTRL= 3000000 *** Configure Device number setting of Virtual PCI-PCI bridge *** RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2 PCIE0 enabled PCIE1 enabled interrupt enable status: 300000 Port 1 N_FTS = 1b105000 Port 0 N_FTS = 1b105000 config reg done init_rt2880pci done bio: create slab <bio-0> at 0 vgaarb: loaded SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000) pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000) pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x601fffff pref] pci 0000:00:01.0: BAR 8: assigned [mem 0x60200000-0x602fffff] pci 0000:00:01.0: BAR 9: assigned [mem 0x60300000-0x603fffff pref] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff] pci 0000:00:00.0: BAR 1: set to [mem 0x60400000-0x6040ffff] (PCI address [0x60400000-0x6040ffff] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff] pci 0000:00:01.0: BAR 1: set to [mem 0x60410000-0x6041ffff] (PCI address [0x60410000-0x6041ffff] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit] pci 0000:01:00.0: BAR 0: set to [mem 0x60000000-0x600fffff 64bit] (PCI address [0x60000000-0x600fffff] pci 0000:01:00.0: BAR 6: assigned [mem 0x60100000-0x6010ffff pref] pci 0000:00:00.0: PCI bridge to [bus 01-01] pci 0000:00:00.0: bridge window [io disabled] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff] pci 0000:00:00.0: bridge window [mem 0x60100000-0x601fffff pref] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff 64bit] pci 0000:02:00.0: BAR 0: set to [mem 0x60200000-0x602fffff 64bit] (PCI address [0x60200000-0x602fffff] pci 0000:02:00.0: BAR 6: assigned [mem 0x60300000-0x6030ffff pref] pci 0000:00:01.0: PCI bridge to [bus 02-02] pci 0000:00:01.0: bridge window [io disabled] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff pref] PCI: Enabling device 0000:00:00.0 (0004 -> 0006) PCI: Enabling device 0000:00:01.0 (0004 -> 0006) BAR0 at slot 0 = 0 bus=0x0, slot = 0x0 res[0]->start = 0 res[0]->end = 0 res[1]->start = 60400000 res[1]->end = 6040ffff res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 BAR0 at slot 1 = 0 bus=0x0, slot = 0x1 res[0]->start = 0 res[0]->end = 0 res[1]->start = 60410000 res[1]->end = 6041ffff res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=0x1, slot = 0x0, irq=0x4 res[0]->start = 60000000 res[0]->end = 600fffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=0x2, slot = 0x1, irq=0x18 res[0]->start = 60200000 res[0]->end = 602fffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 Switching to clocksource Ralink Systick timer NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 3, 32768 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered UDP hash table entries: 128 (order: 0, 4096 bytes) UDP-Lite hash table entries: 128 (order: 0, 4096 bytes) NET: Registered protocol family 1 4 CPUs re-calibrate udelay(lpj = 1060864) Load Ralink Timer0 Module Load Ralink Timer1 Module Load Ralink Timer2 Module fuse init (API version 7.15) msgmni has been set to 232 Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) io scheduler noop registered (default) exFAT: Core Version 1.2.4 exFAT: FS Version 1.2.4 Ralink gpio driver initialized Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A brd: module loaded flash manufacture id: c2, device id 20 17 MX25L6405D(c2 2017c220) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 Creating 5 MTD partitions on "raspi": 0x000000000000-0x000000800000 : "ALL" 0x000000000000-0x000000030000 : "Bootloader" 0x000000030000-0x000000040000 : "Config" 0x000000040000-0x000000050000 : "Factory" 0x000000050000-0x000001000000 : "Kernel" mtd: partition "Kernel" extends beyond the end of device "raspi" -- size truncated to 0x7b0000 rdm_major = 253 GMAC1_MAC_ADRH -- : 0x0000b4fc GMAC1_MAC_ADRL -- : 0x7512652c Ralink APSoC Ethernet Driver Initilization. v3.1 512 rx/tx descriptors allocated, mtu = 1500! GMAC1_MAC_ADRH -- : 0x0000b4fc GMAC1_MAC_ADRL -- : 0x7512652c PROC INIT OK! PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered PPP MPPE Compression module registered NET: Registered protocol family 24 PPTP driver version 0.8.5 Generic UIO driver for PCI 2.3 devices version: 0.01.0 FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) FM_OUT value: u4FmOut = 0(0x00000000) xhc_mtk xhc_mtk: xHCI Host Controller xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 1 xhc_mtk xhc_mtk: irq 22, io mem 0x1e1c0000 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected xhc_mtk xhc_mtk: xHCI Host Controller xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 2 hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1858 buckets, 7432 max) matchsize=264 xt_time: kernel timezone is -0000 IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) IPVS: Connection hash table configured (size=4096, memory=32Kbytes) IPVS: ipvs loaded. IPVS: [rr] scheduler registered. IPVS: [wrr] scheduler registered. IPVS: [lc] scheduler registered. IPVS: [wlc] scheduler registered. IPVS: [lblc] scheduler registered. IPVS: [lblcr] scheduler registered. IPVS: [dh] scheduler registered. IPVS: [sh] scheduler registered. IPVS: [sed] scheduler registered. IPVS: [nq] scheduler registered. IPVS: ftp: loaded support on port[0] = 21 IPv4 over IPv4 tunneling driver GRE over IPv4 demultiplexor driver gre: can't add protocol GRE over IPv4 tunneling driver ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 17 Bridge firewalling registered Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Freeing unused kernel memory: 5640k freed init started: BusyBoxAlgorithmics/MIPS FPU Emulator v1.5 v1.12.1 (2015-03-11 09:48:devpts: called with bogus options 42 CST) starting pid 51, tty '': '/etc_ro/rcS' goahead: waiting for nvram_daemon switch register base addr to 0xbe000000 The World Best ______ ______ __ __ _______ | ____| | ___| | \ / | | __ | | |____ | |___ | \ / | | |__| | |____ | | ___| | |\ \/ /| | | _ | ____| | | |___ | | \ / | | | | | | |______| |______| |_| \/ |_| |__| |__| =System Network Team - LHI= cp: cannot stat '/etc_ro/php.ini': No such file or directory starting pid 68, tty '/dev/ttyS1': '/bin/login' (none) login: monitor - start proc rmmod: hw_nat: No such file or directory Password for 'admin' changed rmmod: hw_nat: No such file or directory ##### disable 1st wireless interface ##### ##### disable 2nd wireless interface ##### rmmod: rlt_wifi: No such file or directory register rt2860 === pAd = c0682000, size = 1616056 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc0580000, csr_addr=0xc0580000! device_id =0x7662 ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5 RtmpEepromGetDefault::e2p_dafault=2 NVM is FLASH mode === pAd = c0982000, size = 1616056 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc0880000, csr_addr=0xc0880000! device_id =0x7662 ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5 RtmpEepromGetDefault::e2p_dafault=2 NVM is FLASH mode build time = 20140408060640a rom patch for E3 IC Platform = STORYLiNK WiFi SMARTeHDD ALPS Company = SEMA Electronics Developer = LHI FW Version:0.0.00 Build:1 Build Time:201411280941____ fw for E3 IC rtmp_ee_init(): Use Externeal LNA patch RX[0] DESC a5c99000 size = 4096 RX[1] DESC a5c9a000 size = 4096 E2pAccessMode=2 cfg_mode=9 cfg_mode=9 wmode_band_equal(): Band Equal! APSDCapable[0]=0 APSDCapable[1]=0 APSDCapable[2]=0 APSDCapable[3]=0 APSDCapable[4]=0 APSDCapable[5]=0 APSDCapable[6]=0 APSDCapable[7]=0 APSDCapable[8]=0 APSDCapable[9]=0 APSDCapable[10]=0 APSDCapable[11]=0 APSDCapable[12]=0 APSDCapable[13]=0 APSDCapable[14]=0 APSDCapable[15]=0 default ApCliAPSDCapable[0]=0 Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 14 rtmp_ee_init(): Use Externeal LNA patch get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (173) get_chl_grp:illegal channel (173) Country Region from e2p = ffff mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0 mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0x0, ALNAGain2=0x0 2. Phy Mode = 14 3. Phy Mode = 14 andes_pci_fw_init 0x1300 = 00073200 AntCfgInit: primary/secondary ant 0/1 andes_load_cr:cr_type(2) ChipStructAssign(): MT76x2 hook ! RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff 00 00 01 TX0 power compensation = 0x38 TX1 power compensation = 0x38 [PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 [PMF]APStartUp:: apidx=1, MFPC=0, MFPR=0, SHA256=0 mt76x2_bbp_adjust():rf_bw=1, ext_ch=3, PrimCh=10, HT-CentCh=8, VHT-CentCh=0 APStartUp(): AP Set CentralFreq at 8(Prim=10, HT-CentCh=8, VHT-CentCh=0, BBP_BW=1) mt76x2_calibration(channel = 8) The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4 Main bssid = b4:fc:75:12:65:2d mt76x2_reinit_agc_gain:original agc_vga0 = 0x44, agc_vga1 = 0x44 mt76x2_reinit_agc_gain:updated agc_vga0 = 0x44, agc_vga1 = 0x44 mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33 mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33 original vga value(chain0) = 44 original vga value(chain1) = 44 <==== rt28xx_init, Status=0 RTMPDrvOpen(1):Check if PDMA is idle! RTMPDrvOpen(2):Check if PDMA is idle! build time = 20140408060640a rom patch for E3 IC Platform = STORYLiNK WiFi SMARTeHDD ALPS Company = SEMA Electronics Developer = LHI FW Version:0.0.00 Build:1 Build Time:201411280941____ fw for E3 IC rtmp_ee_init(): Use Externeal LNA patch RX[0] DESC a0fb8000 size = 4096 RX[1] DESC a0fb9000 size = 4096 E2pAccessMode=2 cfg_mode=14 cfg_mode=14 wmode_band_equal(): Band Not Equal! APSDCapable[0]=0 APSDCapable[1]=0 APSDCapable[2]=0 APSDCapable[3]=0 APSDCapable[4]=0 APSDCapable[5]=0 APSDCapable[6]=0 APSDCapable[7]=0 APSDCapable[8]=0 APSDCapable[9]=0 APSDCapable[10]=0 APSDCapable[11]=0 APSDCapable[12]=0 APSDCapable[13]=0 APSDCapable[14]=0 APSDCapable[15]=0 default ApCliAPSDCapable[0]=0 Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 49 rtmp_ee_init(): Use Externeal LNA patch get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (173) get_chl_grp:illegal channel (173) Country Region from e2p = ffff mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0 mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0x0, ALNAGain2=0xffffff8c 2. Phy Mode = 49 3. Phy Mode = 49 andes_pci_fw_init 0x1300 = 00073200 AntCfgInit: primary/secondary ant 0/1 andes_load_cr:cr_type(2) ChipStructAssign(): MT76x2 hook ! MCS Set = ff ff 00 00 01 [PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=149, HT-CentCh=151, VHT-CentCh=155 TX0 power compensation = 0x38 TX1 power compensation = 0x38 APStartUp(): AP Set CentralFreq at 155(Prim=149, HT-CentCh=151, VHT-CentCh=155, BBP_BW=2) mt76x2_calibration(channel = 155) Main bssid = b4:fc:75:12:65:2e mt76x2_reinit_agc_gain:original agc_vga0 = 0x44, agc_vga1 = 0x44 mt76x2_reinit_agc_gain:updated agc_vga0 = 0x44, agc_vga1 = 0x44 mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33 mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33 original vga value(chain0) = 44 original vga value(chain1) = 44 <==== rt28xx_init, Status=0 RTMPDrvOpen(1):Check if PDMA is idle! RTMPDrvOpen(2):Check if PDMA is idle! ifconfig: ioctl 0x8913 failed: No such device brctl: bridge br0: No such device or address Raeth v3.1 (Tasklet,SkbRecycle) free_head_phy is 0x568e000!!! free_tail_phy is 0x568fff0!!! txd_pool=a5690000 phy_txd_pool=05690000 ei_local->skb_free start address is 0x87d2547c. free_txd: a5690010, ei_local->cpu_ptr: 05690000 POOL HEAD_PTR | DMA_PTR | CPU_PTR ----------------+---------+-------- 0xa5690000 0x05690000 0x05690000 phy_rx_ring0 = 0x05689000, rx_ring0 = 0xa5689000 phy_rx_ring0 = 0x05692000, rx_ring0 = 0xa5692000 change HW-TRAP to 0x17ccf!!!!!!!!!!!!GMAC1_MAC_ADRH -- : 0x0000b4fc GMAC1_MAC_ADRL -- : 0x7512652c CDMA_CSG_CFG = 81000000 GDMA1_FWD_CFG = 20710000 vconfig: ioctl error for rem: No such device vconfig: ioctl error for rem: No such device rmmod: 8021q: No such file or directory device eth2 entered promiscuous mode ##### config Ralink ESW vlan partition (LLLLW) ##### switch reg write offset=2004, value=ff0003 switch reg write offset=2104, value=ff0003 switch reg write offset=2204, value=ff0003 switch reg write offset=2304, value=ff0003 switch reg write offset=2404, value=ff0003 switch reg write offset=2504, value=ff0003 switch reg write offset=2010, value=810000c0 switch reg write offset=2110, value=810000c0 switch reg write offset=2210, value=810000c0 switch reg write offset=2310, value=810000c0 switch reg write offset=2410, value=810000c0 switch reg write offset=2510, value=810000c0 switch reg write offset=2610, value=81000000 switch reg write offset=2710, value=81000000 switch reg write offset=2604, value=20ff0003 switch reg write offset=2704, value=20ff0003 Special Tag Disabled switch reg write offset=2610, value=81000000 switch reg write offset=2014, value=10001 switch reg write offset=2114, value=10001 switch reg write offset=2214, value=10001 switch reg write offset=2314, value=10001 switch reg write offset=2414, value=10002 switch reg write offset=2514, value=10001 REG_ESW_WT_MAC_ATC is 0x7ff0002 done. Set: phy[0].reg[0] = 1140device ra0 entered promiscuous mode Set: phy[1].reg[0] = 1140 Set: phy[2].reg[0]The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4 = 1140 Set: phy[3].reg[0] =device ra1 entered promiscuous mode 1140 Set: phy[4].reg[0] = 1140 device eth2.1 entered promiscuous mode device rai0 entered promiscuous mode ##### enable 2nd wireless interface ##### br0: port 4(rai0) entering learning state br0: port 4(rai0) entering learning state br0: port 3(eth2.1) entering learning state br0: port 3(eth2.1) entering learning state br0: port 2(ra1) entering learning state br0: port 2(ra1) entering learning state br0: port 1(ra0) entering learning state br0: port 1(ra0) entering learning state ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8914 failed: Cannot assign requested address br0: port 4(rai0) entering forwarding state br0: port 3(eth2.1) entering forwarding state br0: port 2(ra1) entering forwarding state br0: port 1(ra0) entering forwarding state killall: udhcpd: no process killed Set: phy[0].reg[0] = 1940 Set: phy[1].reg[0] = 1940 Set: phy[2].reg[0] = 1940 Set: phy[3].reg[0] = 1940 Wait.Bcast Msg. Set: phy[0].reg[0] = 1340 Set: phy[1].reg[0] = 1340 Set: phy[2].reg[0] = 1340 Set: phy[3].reg[0] = 1340 Jan 1 00:00:29 miniupnpd[1864]: WPS listening on port 8888 Jan 1 00:00:29 miniupnpd[1864]: HTTP listening on port 6352 Add IP Contrack..... internet: 0 Hardware NAT is... rmmod: hw_nat: No such file or directory ==>Set_Debug_Proc() <==Set_Debug_Proc(RTDebugLevel = 0) ==>Set_Debug_Proc() <==Set_Debug_Proc(RTDebugLevel = 0) firewall_init Remote Management is disabled.. UPNP Reset SHM Set 1 Start VPN Server Stop VPN Server webs: Listening for HTTP requests at address 192.168.10.1
Bootloader
U-Boot 1.1.3 (Oct 13 2014 - 15:37:59) MT7621 # ? ? - alias for 'help' bootm - boot application image from memory cp - memory copy erase - erase SPI FLASH memory go - start application at address 'addr' help - print online help loadb - load binary file over serial line (kermit mode) md - memory display mdio - Ralink PHY register R/W command !! mm - memory modify (auto-incrementing) nm - memory modify (constant address) printenv- print environment variables racfg - standby RA configuration packet reset - Perform RESET of the CPU rf - read/write rf register saveenv - save environment variables to persistent storage setenv - set environment variables spi- spi command tftpboot- boot image via network using TFTP protocol version - print monitor version MT7621 # printenv bootcmd=tftp bootdelay=5 baudrate=57600 ethaddr="00:AA:BB:CC:DD:10" ipaddr=192.168.10.1 serverip=192.168.10.10 bootfile=uboot.bin stdin=serial stdout=serial stderr=serial Environment size: 171/4092 bytes