Telsey CPA-ZNTE60T

This device is NOT RECOMMENDED for future use with OpenWrt due to low flash/ram.
DO NOT BUY DEVICES WITH 4MB FLASH / 32MB RAM if you intend to flash an up-to-date and secure OpenWrt version onto it! See 4/32 warning for details.

1) This device does not have sufficient resources (flash and/or RAM) to provide secure and reliable operation.
This means that even setting a password or changing simple network settings might not be possible any more, rendering the device effectively useless. See OpenWrt on 4/32 devices what you can do now.

2) OpenWrt support for this device has ended in 2022.
19.07.10 was the last official build for 4/32 devices.

DSL will not work at all on devices with BCM63xx DSL chipset (due to unavailability of FLOSS driver for Broadcom chips). Consider this when choosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported.
See Broadcom DSL, Unsupported: DSL modem and Broadcom BCM63xx for details.

ADSL Wireless Voice Gateway, series CPVA642. Some Fastweb HAGs (italian broadband provider) have this hardware.

Install OpenWrt (generic explanation)

Initial installation can be done from the stock firmware web interface, or from the CFE web interface. Unfortunately installation via TFTP seems to have been disabled for this device.

One important note is that the CPVA642 models have a dual image setup. That means if an image fails to boot, the system will fall back to the other image installed, for the stock firmware. We don't actually want this, because it means that if you flash via the CFE web interface when there is already a good image, the image will not be written to the start of flash but to a point 4MB from the start (i.e. as if there were two 4MB images). This confuses OpenWrt.

That means if you have a successfully flash image and you want to flash via the CFE web interface, you need to erase everthing except the bootloader first.

Architecture MIPS
Vendor Broadcom
bootloader cfe
Board Id CPVA642
System-On-Chip BCM6358
CPU/Speed BMIPS4350 V1.0 / 300 MHz BMIPS Dual Core
Flash-Chip Macronix 29LV640D
Flash size 8 MiB
RAM size 32 MiB
Wireless Ralink RT2661T
Wireless standard 802.11b/g
Ethernet Broadcom BCM5325 w/ vlan support swconfig
Internet ADSL2+
USB 1×2.0H
Serial Yes

Model Number


Photo of front


Photo of back

Note: This will void your warranty!

  • To remove the top cover there are 3 screws hidden under the rubber feet
  • There are two screws holding the PCB to the bottom cover.

Main PCB

Photo of PCB (HW version: cpa-znte60fwb)

Serial port is marked in the picture: on the right of the switch chip BCM5325 find two soldered holes enclosed in squares. The left one, above R707 is Receive data, the right above R706 is Transmit. Level 3V. Gnd is the hole near c809, +3Vcc is the hole near C313

How to connect to JTAG interface, and how to reflash the device with JTAG tools

See port.jtag for more JTAG details.

If you forgot your password, broken one of the startup scripts, firewalled yourself or corrupted the JFFS2 partition, you can get back in by using OpenWrt's failsafe mode.

Boot into failsafe mode

  • Unplug the router's power cord.
  • Connect the router's LAN1 port directly to your PC.
  • Configure your PC with a static IP address between and E. g. (gateway and DNS is not required).
  • Plug the power in. The Power LED will light up
  • Wait for the Power LED to start flashing
  • As soon as the Power LED is flashing immediately press Reset and a few times .
  • If done right the Power LED will quickly flash 3 times every second.
  • You should be able to telnet to the router at now (no username and password)

What to do in failsafe mode?

NOTE: The root file system in failsafe mode is the SquashFS partition mounted in readonly mode. To switch to the normal writable root file system run mount_root and make any changes. Run mount_root now.

  1. Forgot/lost your password and you like to set a new one


  1. Forgot the routers IP address

uci get network.lan.ipaddr

  1. You accidentally run 'ipkg upgrade' or filled up the flash by installing to big packages (clean the JFFS2 partition and start over)

mtd -r erase rootfs_data If you are done with failsafe mode power cycle the router and boot in normal mode.

The CPA has two buttons. They are Reset and Wireless Setup. The buttons can be used with hotplug events. E. g. [#wifitoggle WiFi toggle].

Reset reset
Wireless Protected Setup wps
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2024/02/12 08:58
  • by