Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| toh:xiaomi:mir3c [2018/05/12 03:25] – [Detailed hardware] Add winbond spi flash tienthanh2509 | toh:xiaomi:mir3c [2021/11/17 21:44] – [U-Boot Stock Recovery] s.farid | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| [[https:// | [[https:// | ||
| + | |||
| + | ===== Supported Versions ===== | ||
| + | ---- datatable ---- | ||
| + | cols : Brand, Model, Versions, Supported Current Rel, OEM device homepage URL_url, Forum Search_search-forums, | ||
| + | headers : Brand, Model, Version, Current Release, OEM Info, Forum Search, Technical Data | ||
| + | align : c, | ||
| + | filter | ||
| + | ---- | ||
| + | |||
| + | |||
| + | ===== Hardware Highlights ===== | ||
| + | ---- datatable ---- | ||
| + | cols : Model, Versions, CPU, CPU MHz, Flash MB_mbflashs, | ||
| + | header | ||
| + | align : c, | ||
| + | filter | ||
| + | ---- | ||
| + | |||
| + | |||
| + | ===== Installation ===== | ||
| + | /* stable release */ | ||
| + | /* uncomment once stable release is available | ||
| + | ---- datatable ---- | ||
| + | cols : Model, Versions, Supported Current Rel, Firmware OpenWrt Install URL_url, Firmware OpenWrt Upgrade URL_url, Firmware OEM Stock URL_url | ||
| + | headers : Model, Version, Current Release, Firmware OpenWrt Install, Firmware OpenWrt Upgrade, Firmware OEM Stock | ||
| + | align : c,c,c | ||
| + | filter | ||
| + | ---- | ||
| + | */ | ||
| + | |||
| + | |||
| + | /* snapshot */ | ||
| + | /* delete once stable release is available */ | ||
| + | ---- datatable ---- | ||
| + | cols : Model, Versions, Supported Current Rel, Firmware OpenWrt snapshot Install URL_url, Firmware OpenWrt snapshot Upgrade URL_url, Firmware OEM Stock URL_url | ||
| + | headers : Model, Version, Current Release, Firmware OpenWrt snapshot Install, Firmware OpenWrt snapshot Upgrade, Firmware OEM Stock | ||
| + | align : c,c,c | ||
| + | filter | ||
| + | ---- | ||
| + | 1. Use OpenWRTInvasion method to gain telnet access. | ||
| + | https:// | ||
| + | (IP: 192.168.31.1 - Username: root - Password: root) | ||
| + | |||
| + | 2. Connect to router using telnet. | ||
| + | |||
| + | 3. Backup all partitions using command: | ||
| + | < | ||
| + | dd if=/ | ||
| + | </ | ||
| + | |||
| + | Copy /tmp/mtd0 to computer using ftp. | ||
| + | |||
| + | 4. Copy openwrt-ramips-mt76x8-xiaomi_miwifi-3c-squashfs-sysupgrade.bin | ||
| + | to /tmp in router using ftp. | ||
| + | |||
| + | 5. İnstall Openwrt to OS1 and free OS2. | ||
| + | |||
| + | < | ||
| + | mtd erase OS1 | ||
| + | |||
| + | mtd erase OS2 | ||
| + | |||
| + | mtd -r write / | ||
| + | </ | ||
| + | |||
| + | Limitations: | ||
| + | than 7733248 bits. | ||
| + | |||
| + | |||
| + | Commit page: | ||
| + | |||
| ===== Hardware ===== | ===== Hardware ===== | ||
| + | ==== Info ==== | ||
| + | ^ [[wp> | ||
| + | ^ Vendor | ||
| + | ^ [[docs: | ||
| + | ^ [[docs: | ||
| + | ^ [[docs: | ||
| + | ^ Flash size | 16MB NorFlash | | ||
| + | ^ Flash Chip | [[http:// | ||
| + | ^ RAM size | 64 MiB DDR2 @ 800 Mhz | | ||
| + | ^ RAM Chip | [[http:// | ||
| + | ^ Wireless No1 | SoC-integrated: | ||
| + | ^ [[docs: | ||
| + | ^ [[docs: | ||
| + | |||
| + | |||
| + | ==== Photos ==== | ||
| + | {{https:// | ||
| + | {{https:// | ||
| + | |||
| + | |||
| + | ==== Serial ==== | ||
| + | |||
| + | -> [[docs: | ||
| + | |||
| + | Attaching 3 pins to J1 and connecting with a USB to TTL (CP2102 module) on COM4 115200bps using Putty console | ||
| + | From the COM 4: | ||
| + | < | ||
| + | 1 —— VCC (3.3V) (DO NOT CONNECT!) | ||
| + | 2 —— RX | ||
| + | 3 —— GND | ||
| + | 4 —— TX | ||
| + | </ | ||
| + | |||
| + | Serial port works in one-way only (no input going through pin4). | ||
| + | |||
| + | ^ Serial connection parameters\\ for Xiaomi Mi WiFi 3C | 115200, 8N1 | | ||
| + | |||
| + | ===== Unbrick ===== | ||
| + | ==== U-Boot Stock Recovery ==== | ||
| + | Recovery mode only works with offical Xiaomi firmware' | ||
| + | |||
| + | - Download stock firmware: http:// | ||
| + | - Config static ip on your computer: | ||
| + | < | ||
| + | IP address: 192.168.31.2 | ||
| + | Subnet mask: 255.255.255.0 | ||
| + | Default gateway: 192.168.31.1 | ||
| + | </ | ||
| + | - Remove power cable from router. | ||
| + | - Connect ethernet cable on Computer and Wan port (Blue Port). | ||
| + | - Press continuously reset button and re-connect power cable. | ||
| + | - Continue to hold down the Reset button until the front LED colour changes from static orange to blinking orange. | ||
| + | - Open browser and enter http:// | ||
| + | - Select firmware file and click on upload button. | ||
| + | - Wait until router restart (5 minutes). | ||
| + | |||
| + | More info and credits: https:// | ||
| + | |||
| + | ==== SPI Programmer ==== | ||
| + | |||
| + | On step 3 of installation of Openwrt, gets file mtd0 with contains all flash backup. | ||
| + | Write this file directly to flash. | ||
| + | |||
| + | ===== Bootlogs ===== | ||
| + | ==== OEM bootlog ==== | ||
| + | |||
| + | <WRAP bootlog> | ||
| + | < | ||
| + | [04050C09][04050C0B] | ||
| + | DDR Calibration DQS reg = 00008887 | ||
| + | |||
| + | |||
| + | U-Boot 1.1.3 (Sep 6 2018 - 11:44:39) | ||
| + | |||
| + | Board: Ralink APSoC DRAM: 64 MB | ||
| + | Power on memory test. Memory size= 64 MB...OK! | ||
| + | relocate_code Pointer at: 83fa8000 | ||
| + | RT2880_RSTSTAT_REG 0xc0030000 | ||
| + | *************************** | ||
| + | Board power on Occurred | ||
| + | *************************** | ||
| + | flash manufacture id: c8, device id 40 18 | ||
| + | find flash: GD25Q128C | ||
| + | env is right! | ||
| + | ============================================ | ||
| + | Ralink UBoot Version: 4.3.0.0 | ||
| + | -------------------------------------------- | ||
| + | ASIC 7628_MP (Port5< | ||
| + | DRAM component: 512 Mbits DDR, width 16 | ||
| + | DRAM bus: 16 bit | ||
| + | Total memory: 64 MBytes | ||
| + | Flash component: SPI Flash | ||
| + | Date: | ||
| + | ============================================ | ||
| + | icache: sets:512, ways:4, linesz:32 , | ||
| + | dcache: sets:256, ways:4, linesz:32 , | ||
| + | |||
| + | ##### The CPU freq = 575 MHZ #### | ||
| + | | ||
| + | RESET MT7628 PHY!!!!!! | ||
| + | Please choose the operation: | ||
| + | 1: Load system code to SDRAM via TFTP. | ||
| + | 2: Load system code then write to Flash via TFTP. | ||
| + | 3: Boot system code via Flash (default). | ||
| + | 4: Entr boot command line interface. | ||
| + | 5: Load system2 code then write to Flash via TFTP. | ||
| + | 7: Load system code via web. | ||
| + | 9: Load Boot Loader code then write to Flash via TFTP. | ||
| + | |||
| + | n3: System Boot system code via Flash. | ||
| + | Booting System 2 | ||
| + | Erasing SPI Flash... | ||
| + | raspi_erase: | ||
| + | . | ||
| + | Writing to SPI Flash... | ||
| + | . | ||
| + | done | ||
| + | ## Booting image at bc8a0000 ... | ||
| + | Image Name: MIPS OpenWrt Linux-3.10.14 | ||
| + | Image Type: MIPS Linux Kernel Image (lzma compressed) | ||
| + | Data Size: 1323887 Bytes = 1.3 MB | ||
| + | Load Address: 80000000 | ||
| + | Entry Point: | ||
| + | | ||
| + | | ||
| + | commandline uart_en=0 factory_mode=0 mem=64m root=/ | ||
| + | No initrd | ||
| + | ## Transferring control to Linux (at address 80000000) ... | ||
| + | ## Giving linux memsize in MB, 64 | ||
| + | |||
| + | Starting kernel ... | ||
| + | |||
| + | |||
| + | LINUX started... | ||
| + | |||
| + | THIS IS ASIC | ||
| + | [ 0.000000] Linux version 3.10.14 (jenkins@521a7855145a) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Thu Sep 6 11:52:12 UTC 2018 | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) | ||
| + | [ 0.000000] Software DMA cache coherency | ||
| + | [ 0.000000] Determined physical RAM map: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] User-defined physical RAM map: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Zone ranges: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Movable zone start for each node | ||
| + | [ 0.000000] Early memory node ranges | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes. | ||
| + | [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes | ||
| + | [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 | ||
| + | [ 0.000000] Kernel command line: console=ttyS1, | ||
| + | [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) | ||
| + | [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) | ||
| + | [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) | ||
| + | [ 0.000000] Writing ErrCtl register=00057ff9 | ||
| + | [ 0.000000] Readback ErrCtl register=00057ff9 | ||
| + | [ 0.000000] Memory: 61016k/ | ||
| + | [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, | ||
| + | [ 0.000000] NR_IRQS:128 | ||
| + | [ 0.000000] console [ttyS1] enabled | ||
| + | [ 0.120000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) | ||
| + | [ 0.180000] pid_max: default: 32768 minimum: 301 | ||
| + | [ 0.180000] Mount-cache hash table entries: 512 | ||
| + | [ 0.190000] NET: Registered protocol family 16 | ||
| + | [ 0.190000] RALINK_GPIOMODE = 54054404 | ||
| + | [ 0.200000] RALINK_GPIOMODE = 54044404 | ||
| + | [ 0.300000] ***** Xtal 40MHz ***** | ||
| + | [ 0.300000] start PCIe register access | ||
| + | [ 0.800000] RALINK_RSTCTRL = 2400000 | ||
| + | [ 0.810000] RALINK_CLKCFG1 = fdbfffc0 | ||
| + | [ 0.810000] | ||
| + | [ 0.810000] *************** MT7628 PCIe RC mode ************* | ||
| + | [ 1.310000] PCIE0 no card, disable it(RST& | ||
| + | [ 1.340000] bio: create slab < | ||
| + | [ 1.340000] cfg80211: Calling CRDA to update world regulatory domain | ||
| + | [ 1.350000] Switching to clocksource Ralink Systick timer | ||
| + | [ 1.350000] NET: Registered protocol family 2 | ||
| + | [ 1.360000] TCP established hash table entries: 512 (order: 0, 4096 bytes) | ||
| + | [ 1.360000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) | ||
| + | [ 1.370000] TCP: Hash tables configured (established 512 bind 512) | ||
| + | [ 1.370000] TCP: reno registered | ||
| + | [ 1.380000] UDP hash table entries: 256 (order: 0, 4096 bytes) | ||
| + | [ 1.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) | ||
| + | [ 1.390000] NET: Registered protocol family 1 | ||
| + | [ 1.390000] Load Kernel WDG Timer Module | ||
| + | [ 1.410000] squashfs: version 4.0 (2009/ | ||
| + | [ 1.420000] jffs2: version 2.2. (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. | ||
| + | [ 1.430000] msgmni has been set to 119 | ||
| + | [ 1.430000] io scheduler noop registered | ||
| + | [ 1.430000] io scheduler deadline registered (default) | ||
| + | [ 1.440000] MIWIFI panic notifier registered | ||
| + | [ 1.450000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled | ||
| + | [ 1.450000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A | ||
| + | [ 1.460000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A | ||
| + | [ 1.470000] led=44, on=4000, off=1, blinks,=1, reset=1, time=4000 | ||
| + | [ 1.480000] Ralink gpio driver initialized | ||
| + | [ 1.480000] flash manufacture id: c8, device id 40 18 | ||
| + | [ 1.490000] GD25Q128C(c8 40180000) (16384 Kbytes) | ||
| + | [ 1.490000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 | ||
| + | [ 1.500000] Creating 10 MTD partitions on " | ||
| + | [ 1.510000] 0x000000000000-0x000001000000 : " | ||
| + | [ 1.510000] 0x000000000000-0x000000030000 : " | ||
| + | [ 1.520000] 0x000000030000-0x000000040000 : " | ||
| + | [ 1.530000] 0x000000040000-0x000000050000 : " | ||
| + | [ 1.530000] 0x000000050000-0x000000060000 : " | ||
| + | [ 1.540000] 0x000000060000-0x000000070000 : " | ||
| + | [ 1.540000] 0x000000070000-0x000000080000 : " | ||
| + | [ 1.550000] 0x000000080000-0x000000140000 : " | ||
| + | [ 1.560000] 0x000000140000-0x0000008a0000 : " | ||
| + | [ 1.560000] 0x0000008a0000-0x000001000000 : " | ||
| + | [ 1.570000] mtd: try split OS2 partition | ||
| + | [ 1.570000] mtd: split_firmware | ||
| + | [ 1.580000] mtd: firmware_partition-> | ||
| + | [ 1.580000] mtd: firmware_partition-> | ||
| + | [ 1.590000] mtd: uimage_len 1323951 | ||
| + | [ 1.590000] mtd: uimage_len 1376256 | ||
| + | [ 1.590000] mtd: rootfs_partition-> | ||
| + | [ 1.600000] mtd: rootfs_partition-> | ||
| + | [ 1.600000] mtd: partition " | ||
| + | [ 1.610000] 0x0000009f0000-0x000001000000 : " | ||
| + | [ 1.620000] PPP generic driver version 2.4.2 | ||
| + | [ 1.620000] PPP MPPE Compression module registered | ||
| + | [ 1.630000] NET: Registered protocol family 24 | ||
| + | [ 1.630000] PPTP driver version 0.8.5 | ||
| + | [ 1.640000] GMAC1_MAC_ADRH -- : 0x00007811 | ||
| + | [ 1.640000] GMAC1_MAC_ADRL -- : 0xdc11c7c3 | ||
| + | [ 1.650000] Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500! | ||
| + | [ 1.660000] GMAC1_MAC_ADRH -- : 0x00007811 | ||
| + | [ 1.660000] GMAC1_MAC_ADRL -- : 0xdc11c7c3 | ||
| + | [ 1.670000] PROC INIT OK! | ||
| + | [ 1.670000] Mirror/ | ||
| + | [ 1.670000] u32 classifier | ||
| + | [ 1.670000] | ||
| + | [ 1.680000] | ||
| + | [ 1.680000] Netfilter messages via NETLINK v0.30. | ||
| + | [ 1.690000] nfnl_acct: registering with nfnetlink. | ||
| + | [ 1.690000] nf_conntrack version 0.5.0 (953 buckets, 3812 max) | ||
| + | [ 1.700000] ipip: IPv4 over IPv4 tunneling driver | ||
| + | [ 1.700000] gre: GRE over IPv4 demultiplexor driver | ||
| + | [ 1.710000] ip_tables: (C) 2000-2006 Netfilter Core Team | ||
| + | [ 1.710000] Type=Restricted Cone | ||
| + | [ 1.720000] TCP: cubic registered | ||
| + | [ 1.720000] NET: Registered protocol family 17 | ||
| + | [ 1.730000] l2tp_core: L2TP core driver, V2.0 | ||
| + | [ 1.730000] l2tp_ppp: PPPoL2TP kernel driver, V2.0 | ||
| + | [ 1.740000] 8021q: 802.1Q VLAN Support v1.8 | ||
| + | [ 1.760000] VFS: Mounted root (squashfs filesystem) readonly on device 31:10. | ||
| + | [ 1.770000] Freeing unused kernel memory: 224K (80378000 - 803b0000) | ||
| + | config core ' | ||
| + | # ROM ver | ||
| + | option ROM ' | ||
| + | # channel | ||
| + | option CHANNEL ' | ||
| + | # hardware platform R1AC or R1N etc. | ||
| + | option HARDWARE ' | ||
| + | # CFE ver | ||
| + | option UBOOT ' | ||
| + | # Linux Kernel ver | ||
| + | option LINUX ' | ||
| + | # RAMFS ver | ||
| + | option RAMFS ' | ||
| + | # SQUASHFS ver | ||
| + | option SQAFS ' | ||
| + | # ROOTFS ver | ||
| + | option ROOTFS ' | ||
| + | #build time | ||
| + | option BUILDTIME 'Thu, 06 Sep 2018 11:43:43 +0000' | ||
| + | #build timestamp | ||
| + | option BUILDTS ' | ||
| + | #build git tag | ||
| + | option GTAG ' | ||
| + | / | ||
| + | [ 3.880000] Raeth v3.1 (Tasklet, | ||
| + | [ 3.880000] | ||
| + | [ 3.880000] phy_tx_ring = 0x03fda000, tx_ring = 0xa3fda000 | ||
| + | [ 3.890000] | ||
| + | [ 3.890000] phy_rx_ring0 = 0x03fdb000, rx_ring0 = 0xa3fdb000 | ||
| + | [ 3.910000] config 7628 esw as WLLLL | ||
| + | [ 3.980000] GMAC1_MAC_ADRH -- : 0x00007811 | ||
| + | [ 3.990000] GMAC1_MAC_ADRL -- : 0xdc11c7c3 | ||
| + | [ 3.990000] RT305x_ESW: Link Status Changed | ||
| + | - preinit - | ||
| + | Thu Sep 6 11:52:12 UTC 2018 | ||
| + | [ 4.120000] beginning erase nvram region! | ||
| + | [ 4.340000] end erase nvram region! | ||
| + | - regular preinit - | ||
| + | mount: mounting /tmp/mnt on /extdisks failed: No such file or directory | ||
| + | jffs2 not ready yet; using ramdisk | ||
| + | - init - | ||
| + | [ 5.480000] ra2880stop()...Done | ||
| + | [ 5.490000] Free TX/RX Ring Memory! | ||
| + | init started: BusyBox v1.19.4 (2018-09-06 11:41:48 UTC) | ||
| + | |||
| + | Please press Enter to activate this console. rcS S boot: INFO: rc script run time limit to 65 seconds. | ||
| + | [ 7.870000] ip_gre: GRE over IPv4 tunneling driver | ||
| + | [ 7.910000] xt_time: kernel timezone is +0800 | ||
| + | [ 7.990000] ip_set: protocol 6 | ||
| + | [ 8.040000] dev_redirect load success. | ||
| + | [ 9.150000] | ||
| + | [ 9.150000] | ||
| + | [ 9.150000] === pAd = c05a7000, size = 1759856 === | ||
| + | [ 9.150000] | ||
| + | [ 9.160000] <-- RTMPAllocTxRxRingMemory, | ||
| + | [ 9.170000] <-- RTMPAllocAdapterBlock, | ||
| + | [ 9.170000] RtmpChipOpsHook(492): | ||
| + | [ 9.180000] mt7628_init()--> | ||
| + | [ 9.180000] mt7628_init(FW(8a00), | ||
| + | [ 9.180000] e2.bin mt7628_init(1117):: | ||
| + | [ 9.190000] mt_bcn_buf_init(218): | ||
| + | [ 9.200000] < | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | Thu Sep 6 11:52:17 UTC 2018 netconfig[608]: | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | Thu Sep 6 11:52:35 UTC 2018 boot_check[2079]: | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | rcS S boot: INFO: rcS S boot timing 29 seconds. | ||
| + | Thu Sep 6 11:52:45 UTC 2018 INFO: rcS S boot timing 29 seconds. | ||
| + | rcS S boot: system type(R3L/ | ||
| + | Thu Sep 6 11:52:45 UTC 2018 system type(R3L/ | ||
| + | rcS S boot: ROOTFS: /dev/root on / type squashfs (ro, | ||
| + | Thu Sep 6 11:52:45 UTC 2018 ROOTFS: /dev/root on / type squashfs (ro, | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | mknod: /dev/gpio: File exists | ||
| + | [ | ||
| + | Unlocking cfg_bak ... | ||
| + | Erasing cfg_bak ... | ||
| + | Unlocking cfg_bak ... | ||
| + | |||
| + | Writing from / | ||
| + | Thu Sep 6 11:52:47 UTC 2018 boot_check[3473]: | ||
| + | </ | ||
| + | </ | ||
| + | |||
| + | ==== Openwrt Log ==== | ||
| + | |||
| + | <WRAP bootlog> | ||
| + | < | ||
| + | [04050C0A][04050C0C] | ||
| + | DDR Calibration DQS reg = 00008887 | ||
| + | |||
| + | |||
| + | U-Boot 1.1.3 (Sep 6 2018 - 11:44:39) | ||
| + | |||
| + | Board: Ralink APSoC DRAM: 64 MB | ||
| + | Power on memory test. Memory size= 64 MB...OK! | ||
| + | relocate_code Pointer at: 83fa8000 | ||
| + | RT2880_RSTSTAT_REG 0xc0030000 | ||
| + | *************************** | ||
| + | Board power on Occurred | ||
| + | *************************** | ||
| + | flash manufacture id: c8, device id 40 18 | ||
| + | find flash: GD25Q128C | ||
| + | env is right! | ||
| + | ============================================ | ||
| + | Ralink UBoot Version: 4.3.0.0 | ||
| + | -------------------------------------------- | ||
| + | ASIC 7628_MP (Port5< | ||
| + | DRAM component: 512 Mbits DDR, width 16 | ||
| + | DRAM bus: 16 bit | ||
| + | Total memory: 64 MBytes | ||
| + | Flash component: SPI Flash | ||
| + | Date: | ||
| + | ============================================ | ||
| + | icache: sets:512, ways:4, linesz:32 , | ||
| + | dcache: sets:256, ways:4, linesz:32 , | ||
| + | |||
| + | ##### The CPU freq = 575 MHZ #### | ||
| + | | ||
| + | RESET MT7628 PHY!!!!!! | ||
| + | Please choose the operation: | ||
| + | 1: Load system code to SDRAM via TFTP. | ||
| + | 2: Load system code then write to Flash via TFTP. | ||
| + | 3: Boot system code via Flash (default). | ||
| + | 4: Entr boot command line interface. | ||
| + | 5: Load system2 code then write to Flash via TFTP. | ||
| + | 7: Load system code via web. | ||
| + | 9: Load Boot Loader code then write to Flash via TFTP. | ||
| + | | ||
| + | n3: System Boot system code via Flash. | ||
| + | Booting System 1 | ||
| + | Erasing SPI Flash... | ||
| + | raspi_erase: | ||
| + | . | ||
| + | Writing to SPI Flash... | ||
| + | . | ||
| + | done | ||
| + | ## Booting image at bc140000 ... | ||
| + | Image Name: MIPS OpenWrt Linux-5.4.155 | ||
| + | Image Type: MIPS Linux Kernel Image (lzma compressed) | ||
| + | Data Size: 2145791 Bytes = 2 MB | ||
| + | Load Address: 80000000 | ||
| + | Entry Point: | ||
| + | | ||
| + | | ||
| + | commandline uart_en=1 factory_mode=0 mem=64m root=/ | ||
| + | No initrd | ||
| + | ## Transferring control to Linux (at address 80000000) ... | ||
| + | ## Giving linux memsize in MB, 64 | ||
| + | |||
| + | Starting kernel ... | ||
| + | |||
| + | [ 0.000000] Linux version 5.4.155 (builder@buildhost) (gcc version 11.2.0 (OpenWrt GCC 11.2.0 r18014-15e55a2190)) #0 Sat Nov 6 05:18:48 2021 | ||
| + | [ 0.000000] Board has DDR2 | ||
| + | [ 0.000000] Analog PMU set to hw control | ||
| + | [ 0.000000] Digital PMU set to hw control | ||
| + | [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2 | ||
| + | [ 0.000000] printk: bootconsole [early0] enabled | ||
| + | [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) | ||
| + | [ 0.000000] MIPS: machine is Xiaomi MiWiFi 3C | ||
| + | [ 0.000000] Initrd not found or empty - disabling initrd | ||
| + | [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. | ||
| + | [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes | ||
| + | [ 0.000000] Zone ranges: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Movable zone start for each node | ||
| + | [ 0.000000] Early memory node ranges | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] | ||
| + | [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16240 | ||
| + | [ 0.000000] Kernel command line: console=ttyS0, | ||
| + | [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) | ||
| + | [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) | ||
| + | [ 0.000000] Writing ErrCtl register=00057ff9 | ||
| + | [ 0.000000] Readback ErrCtl register=00057ff9 | ||
| + | [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off | ||
| + | [ 0.000000] Memory: 56932K/ | ||
| + | [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, | ||
| + | [ 0.000000] NR_IRQS: 256 | ||
| + | [ 0.000000] intc: using register map from devicetree | ||
| + | [ 0.000000] random: get_random_bytes called from start_kernel+0x354/ | ||
| + | [ 0.000000] CPU Clock: 580MHz | ||
| + | [ 0.000000] timer_probe: | ||
| + | [ 0.000000] clocksource: | ||
| + | [ 0.000009] sched_clock: | ||
| + | [ 0.007569] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) | ||
| + | [ 0.073494] pid_max: default: 32768 minimum: 301 | ||
| + | [ 0.078119] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.085137] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.098318] clocksource: | ||
| + | [ 0.107820] futex hash table entries: 256 (order: -1, 3072 bytes, linear) | ||
| + | [ 0.114459] pinctrl core: initialized pinctrl subsystem | ||
| + | [ 0.122397] NET: Registered protocol family 16 | ||
| + | [ 0.156468] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512 | ||
| + | [ 0.169652] clocksource: | ||
| + | [ 0.175498] thermal_sys: | ||
| + | [ 0.175962] NET: Registered protocol family 2 | ||
| + | [ 0.186084] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) | ||
| + | [ 0.193868] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.201979] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.209330] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.216152] TCP: Hash tables configured (established 1024 bind 1024) | ||
| + | [ 0.222419] UDP hash table entries: 256 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.228691] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.235775] NET: Registered protocol family 1 | ||
| + | [ 0.240018] PCI: CLS 0 bytes, default 32 | ||
| + | [ 0.248559] workingset: timestamp_bits=14 max_order=14 bucket_order=0 | ||
| + | [ 0.262677] squashfs: version 4.0 (2009/ | ||
| + | [ 0.268252] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. | ||
| + | [ 0.293111] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252) | ||
| + | [ 0.303509] mt7621_gpio 10000600.gpio: | ||
| + | [ 0.309098] mt7621_gpio 10000600.gpio: | ||
| + | [ 0.314755] mt7621_gpio 10000600.gpio: | ||
| + | [ 0.320420] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled | ||
| + | [ 0.329111] printk: console [ttyS0] disabled | ||
| + | [ 0.333308] 10000c00.uartlite: | ||
| + | [ 0.342028] printk: console [ttyS0] enabled | ||
| + | [ 0.342028] printk: console [ttyS0] enabled | ||
| + | [ 0.350442] printk: bootconsole [early0] disabled | ||
| + | [ 0.350442] printk: bootconsole [early0] disabled | ||
| + | [ 0.361272] spi-mt7621 10000b00.spi: | ||
| + | [ 0.377728] spi-nor spi0.0: gd25q128 (16384 Kbytes) | ||
| + | [ 0.382810] 8 fixed-partitions partitions found on MTD device spi0.0 | ||
| + | [ 0.389248] Creating 8 MTD partitions on " | ||
| + | [ 0.394142] 0x000000000000-0x000000030000 : " | ||
| + | [ 0.400650] 0x000000030000-0x000000040000 : " | ||
| + | [ 0.406655] 0x000000040000-0x000000050000 : " | ||
| + | [ 0.412727] 0x000000050000-0x000000060000 : " | ||
| + | [ 0.418862] 0x000000060000-0x000000070000 : " | ||
| + | [ 0.424896] 0x000000070000-0x000000080000 : " | ||
| + | [ 0.431151] 0x000000080000-0x000000140000 : " | ||
| + | [ 0.437279] 0x000000140000-0x000001000000 : " | ||
| + | [ 0.451083] 2 uimage-fw partitions found on MTD device firmware | ||
| + | [ 0.457094] Creating 2 MTD partitions on " | ||
| + | [ 0.462201] 0x000000000000-0x00000020be3f : " | ||
| + | [ 0.468283] 0x00000020be3f-0x000000ec0000 : " | ||
| + | [ 0.474402] mtd: device 9 (rootfs) set to be root filesystem | ||
| + | [ 0.482303] 1 squashfs-split partitions found on MTD device rootfs | ||
| + | [ 0.488594] 0x0000004c0000-0x000000ec0000 : " | ||
| + | [ 0.495912] libphy: Fixed MDIO Bus: probed | ||
| + | [ 0.538220] rt3050-esw 10110000.esw: | ||
| + | [ 0.546828] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 | ||
| + | [ 0.557234] NET: Registered protocol family 10 | ||
| + | [ 0.566108] Segment Routing with IPv6 | ||
| + | [ 0.570021] NET: Registered protocol family 17 | ||
| + | [ 0.574590] bridge: filtering via arp/ | ||
| + | [ 0.587754] 8021q: 802.1Q VLAN Support v1.8 | ||
| + | [ 0.598251] VFS: Mounted root (squashfs filesystem) readonly on device 31:9. | ||
| + | [ 0.612257] Freeing unused kernel memory: 1204K | ||
| + | [ 0.616850] This architecture does not have kernel memory protection. | ||
| + | [ 0.623408] Run /sbin/init as init process | ||
| + | [ 1.298370] init: Console is alive | ||
| + | [ 1.302501] init: - watchdog - | ||
| + | [ 2.161888] kmodloader: loading kernel modules from / | ||
| + | [ 2.239664] random: fast init done | ||
| + | [ 2.318149] kmodloader: done loading kernel modules from / | ||
| + | [ 2.336152] init: - preinit - | ||
| + | [ 3.435443] random: jshn: uninitialized urandom read (4 bytes read) | ||
| + | [ 3.543589] random: jshn: uninitialized urandom read (4 bytes read) | ||
| + | [ 3.686252] random: jshn: uninitialized urandom read (4 bytes read) | ||
| + | Press the [f] key and hit [enter] to enter failsafe mode | ||
| + | Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level | ||
| + | [ 7.937994] rt3050-esw 10110000.esw: | ||
| + | [ 7.943018] IPv6: ADDRCONF(NETDEV_CHANGE): | ||
| + | [ 7.949970] IPv6: ADDRCONF(NETDEV_CHANGE): | ||
| + | [ 8.613426] jffs2: notice: (463) jffs2_build_xattr_subsystem: | ||
| + | [ 8.631098] mount_root: switching to jffs2 overlay | ||
| + | [ 8.638872] overlayfs: upper fs does not support tmpfile. | ||
| + | [ 8.650243] urandom-seed: | ||
| + | [ 8.722891] rt3050-esw 10110000.esw: | ||
| + | [ 8.806715] procd: - early - | ||
| + | [ 8.810485] procd: - watchdog - | ||
| + | [ 9.581379] procd: - watchdog - | ||
| + | [ 9.585253] procd: - ubus - | ||
| + | [ 9.621658] urandom_read: | ||
| + | [ 9.621667] random: ubusd: uninitialized urandom read (4 bytes read) | ||
| + | [ 9.640475] random: ubusd: uninitialized urandom read (4 bytes read) | ||
| + | [ 9.647610] random: ubusd: uninitialized urandom read (4 bytes read) | ||
| + | [ 9.660144] procd: - init - | ||
| + | Please press Enter to activate this console. | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | </ | ||
| + | </ | ||
| + | |||
| + | ===== Software Mods ===== | ||
| + | ==== How to acquire SSH access ==== | ||
| + | |||
| + | SSH access can be gained via the instructions found at the following repository without opening the case of the router: | ||
| + | |||
| + | https:// | ||
| + | |||
| + | ==== Alternative Bootloader (BREED) ==== | ||
| + | |||
| + | Instead of the stock bootloader BREED can be used: | ||
| + | |||
| + | https:// | ||
| + | |||
| + | The bootloader of the MT7688 is compatible to MT7628. | ||
| + | The bootloader mentioned above offers a reset functionality, | ||
| + | Therefore it is advised to use the bootloader listed above to be able to reset among flashing different firmware to the router. | ||
| + | |||
| + | |||
| + | **Installation instructions via SSH:** | ||
| + | < | ||
| + | wget -P /tmp https:// | ||
| - | ==== Detailed hardware ==== | + | mtd_write write /tmp/breed-mt7688-reset38.bin Bootloader |
| - | | **[[wp> | + | </code> |
| - | | **Vendor: | + | |
| - | | **[[docs: | + | |
| - | | **[[docs: | + | |
| - | | **[[docs: | + | |
| - | | **Flash size: | + | |
| - | | **Flash Chip: | + | |
| - | | **RAM size: | + | |
| - | | **RAM Chip: | + | |
| - | | **Wireless No1: | + | |
| - | | **[[docs: | + | |
| - | | **USB: | + | |
| - | | **[[docs: | + | |
| - | ==== Video: Xiaomi Mi WiFi 3C Router Unboxing and Teardown ==== | + | djStolen: Unfortunatelly, |
| - | ===== Outside links ===== | ||
| - | [[https:// | ||
| - | ==== Reviews: ==== | ||
| - | {{tag>xiaomi MT7628N mediatek | + | ===== Tags ===== |
| + | [[meta: | ||
| + | {{tag> | ||