ZLMnet MiFi F1

The device has 4MB Flash and 32MB SDRAM

Device is same/similar or OEM of Hame MPR-A1

(The MPR-A1 image might work, not sure if it will detect 16MB or 32MB of ram - depends on beeing hardcoded or bootstrap detected).

To be safe first flash the initramfs image (as per the MPR-A2 wiki page) and then the sysupgrade image.

An MPR-A1 trunk build as of Nov 23, 2013 (r38896) did detect 32 MB of RAM. However the ethernet port was mapped to WAN and it was set up to get an address for a DHCP server. So to access the device connect the ethernet to the LAN port of another router and access through that. Once you get to the device - you can modify /etc/config/network to map all the enabled ports (0,1,2,3,4) to LAN. As it turns out port 4 is the port for the physical ethernet and so that needs to be part of the LAN VLAN. To do a permanent fix - edit target/linux/ramips/base-files/etc/uci-defaults/02_network by inserting comments as follows and then rebuild. This ensures that all the ports in the VLAN get assigned to the LAN.

#		if [ `swconfig dev rt305x port $port get lan` = "0" ]; then \\
#			wanports="$port $wanports" \\
#		else \\
                      lanports="$port $lanports" \\

#		fi \\

mifi-f1-case01.jpg mifi-f1-case02.jpg mifi-f1-case03.jpg

Here two pictures from the front and the backside of the PCB (the wires are for the serial console port - the blue wire is Tx
the middle wire is Rx, and the other wire is Ground
Serial settings are 57600/ N 8 1

mifi-f1_pcb_front.jpg mifi-f1_pcb_back.jpg

Boot-Log

U-Boot 1.1.3 (Jul 8 2013 - 10:59:04) Board: Ralink APSoC DRAM: 32 MB relocate_code Pointer at: 81fb4000 spi_wait_nsec: 42 spi device id: c2 20 16 c2 20 (2016c220) find flash: MX25L3205D raspi_read: from:30000 len:1000 .*** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 3.6.0.0 -------------------------------------------- ASIC 5350_MP (Port5<->None) DRAM_CONF_FROM: Boot-Strapping DRAM_TYPE: SDRAM DRAM_SIZE: 256 Mbits DRAM_WIDTH: 16 bits DRAM_TOTAL_WIDTH: 16 bits TOTAL_MEMORY_SIZE: 32 MBytes Flash component: SPI Flash Date:Jul 8 2013 Time:10:59:04 ============================================ icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:128, ways:4, linesz:32 ,total:16384 ##### The CPU freq = 360 MHZ #### estimate memory size =32 Mbytes Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. unenter reset button... 0 3: System Boot system code via Flash. ## Booting image at bc050000 ... raspi_read: from:50000 len:40 . Image Name: ZLMnet?MIFIF10N? Created: 2013-07-16 11:09:46 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 3811199 Bytes = 3.6 MB Load Address: 80000000 Entry Point: 803ae000 raspi_read: from:50040 len:3a2770 ...........................................................OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 803ae000) ... ## Giving linux memsize in MB, 32 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.21 (root@lamon) (gcc version 3.4.2) #157 Tue Jul 16 19:09:32 CST 2013 The CPU frequency set to 360 MHz CPU revision is: 0001964c Determined physical RAM map: memory: 02000000 @ 00000000 (usable) Initrd not found or empty - disabling initrd Built 1 zonelists. Total pages: 8128 Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 16kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). Cache parity protection disabled cause = c0808030, status = 11000000 PID hash table entries: 128 (order: 7, 512 bytes) calculating r4koff... 0015f900(1440000) CPU frequency 360.00 MHz Using 180.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 25988k/32768k available (3019k kernel code, 6780k reserved, 744k data, 2628k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb NET: Registered protocol family 2 Time: MIPS clocksource has been installed. IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered detected lzma initramfs detected lzma initramfs initramfs: LZMA lc=3,lp=0,pb=2,dictSize=1048576,origSize=10702848 LZMA initramfs by Ming-Ching Tiew <mctiew@yahoo.com>....................................................................................................................................................................deice id : c2 20 16 c2 20 (2016c220) MX25L3205D(c2 2016c220) (4096 Kbytes) mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 Creating 5 MTD partitions on "raspi": 0x00000000-0x00400000 : "ALL" 0x00000000-0x00030000 : "Bootloader" 0x00030000-0x00040000 : "Config" 0x00040000-0x00050000 : "Factory" 0x00050000-0x01000000 : "Kernel" mtd: partition "Kernel" extends beyond the end of device "raspi" -- size truncated to 0x3b0000 RT3xxx EHCI/OHCI init. squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro NTFS driver 2.1.28 [Flags: R/W]. fuse init (API version 7.8) io scheduler noop registered (default) Ralink gpio driver initialized HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.8 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A RAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksize loop: loaded (max 8 devices) rdm_major = 253 eth2 mii.o query= phy_id:0, address:1 retval:7849 Ralink APSoC Ethernet Driver Initilization. v2.1 256 rx/tx descriptors allocated, mtu = 1500! MAC_ADRH -- : 0x00002c67 MAC_ADRL -- : 0xfb5d106a PROC INIT OK! PPP generic driver version 2.4.2 PPP BSD Compression module registered NET: Registered protocol family 24 PPPoL2TP kernel driver, V0.17 PPTP driver version 0.8.1 === pAd = c0019000, size = 647784 === <-- RTMPAllocAdapterBlock, Status=0 block2mtd: version $Revision: 1.1.1.1 $ usbcore: registered new interface driver cdc_acm drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. nf_conntrack version 0.5.0 (256 buckets, 2048 max) ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Freeing unused kernel memory: 2628k freed init started: BusyBox v1.12.1 (2012-08-27 10:10:44 CST) startAlgorithmics/MIPS FPU Emulator v1.5 ing pid 620, tty '': '/etc_ro/rcS' devpts: called with bogus options rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 1 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 2 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected starting pid 645, tty '/dev/ttyS1': '/bin/sh' BusyBox v1.12.1 (2012-08-27 10:10:44 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. starting pid 646, tty '': '/bin/goahead' echo 8196 > /proc/sys/net/netfilter/nf_conntrack_max starting pid 648, tty '': '/bin/syslogc' |20000101000005.info.mesg:648|/sbin/syslogd -C -n|syslog/syslog.c:108 killall umodem killall: umodem: no process killed ntp-init.sh internet.sh Password for 'admin' changed Password for 'root' changed insmod: bridge.ko: module not found insmod: mii.ko: module not found insmod: raeth.ko: module not found phy_tx_ring = 0x00488000, tx_ring = 0xa0488000 phy_rx_ring0 = 0x00489000, rx_ring0 = 0xa0489000 MAC_ADRH -- : 0x00002c67 MAC_ADRL -- : 0xfb5d106a RT305x_ESW: Link Status Changed rmmod: rt2860v2_ap: No such file or directory rmmod: rt2860v2_sta: No such file or directory insmod: rt2860v2_ap.ko: module not found rmmod: nf_nat_pptp: No such file or directory rmmod: nf_conntrack_pptp: No such file or directory rmmod: nf_nat_proto_gre: No such file or directory rmmod: nf_conntrack_proto_gre: No such file or directory rmmod: nf_conntrack_sip: No such file or directory rmmod: nf_conntrack_sip: No such file or directory rmmod: nf_nat_sip: No such file or directory rmmod: nf_conntrack_h323: No such file or directory rmmod: nf_conntrack_h323: No such file or directory rmmod: nf_nat_h323: No such file or directory RX DESC a04cb000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 pAd->TxPowerCtrl.bInternalTxALC == FALSE ! RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff 00 00 00 01 SYNC - BBP R4 to 20MHz.l Main bssid = 2c:67:fb:5d:10:68 <==== rt28xx_init, Status=0 0x1300 = 00064380 insmod: 8021q.ko: module not found eth2.2: Setting MAC address to 2c 67 fb 5d 10 6b. device eth2 entered promiscuous mode VLAN (eth2.2): Setting underlying device (eth2) to promiscious mode. ifconfig: ioctl 0x8913 failed: No such device brctl: bridge br0: No such device or address ##### config RT3050 TWO LAN (WLLLL) ##### switch reg write offset=14, value=405555 switch reg write offset=50, value=2001 switch reg write offset=98, value=7f3f switch reg write offset=e4, value=3f switch reg write offset=40, value=1002 switch reg write offset=44, value=1001 switch reg write offset=48, value=1001 switch reg write offset=70, value=ffff417e device ra0 entered promiscuous mode eth2 mii.o query= phy_id:1, address:4 retval:5e1 eth2 mii.o query= phy_id:1, address:0 retval:3900 eth2 mii.o query= phy_id:1, address:5 retval:0 eth2.1: dev_set_promiscuity(master, 1) device eth2.1 entered promiscuous mode br0: port 2(eth2.1) entering learning state br0: port 1(ra0) entering learning state ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8914 failed: Cannot assign requested address killall: dhcpd-reset.sh: no process killed killall: udhcpd: no process killed rm: cannot remove '/etc/udhcpd.conf': No such file or directory br0: topology change detected, propagating br0: port 2(eth2.1) entering forwarding state br0: topology change detected, propagating br0: port 1(ra0) entering forwarding state ifconfig: ioctl 0x8913 failed: No such device killall rt2860apd 1>/dev/null 2>&1 iptables -F -t filter 1>/dev/null 2>&1 iptables -D FORWARD -j PORTSCAN 1>/dev/null 2>&1 iptables -D INPUT -j PORTSCAN 1>/dev/null 2>&1 iptables -F PORTSCAN 1>/dev/null 2>&1 iptables -D FORWARD -j PSD 1>/dev/null 2>&1 iptables -D INPUT -j PSD 1>/dev/null 2>&1 iptables -F PSD 1>/dev/null 2>&1 iptables -D FORWARD -j SHORT 1>/dev/null 2>&1 iptables -D INPUT -j SHORT 1>/dev/null 2>&1 iptables -F SHORT 1>/dev/null 2>&1 iptables -D FORWARD -j icmp_flood 1>/dev/null 2>&1 iptables -D INPUT -j icmp_flood 1>/dev/null 2>&1 iptables -F icmp_flood 1>/dev/null 2>&1 iptables -D FORWARD -j udp_flood 1>/dev/null 2>&1 iptables -D INPUT -j udp_flood 1>/dev/null 2>&1 iptables -F udp_flood 1>/dev/null 2>&1 iptables -D FORWARD -j syn_flood 1>/dev/null 2>&1 iptables -D INPUT -j syn_flood 1>/dev/null 2>&1 iptables -F syn_flood 1>/dev/null 2>&1 iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -F macipport_filter 1>/dev/null 2>&1 iptables -D FORWARD -j web_filter 1>/dev/null 2>&1 iptables -F web_filter 1>/dev/null 2>&1 iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT iptables -A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 80 -j DROP iptables -A INPUT -i ppp0 -p tcp --dport 23 -j DROP iptables -A FORWARD -p udp --dport 1701 -j DROP iptables -A FORWARD -p tcp --dport 1723 -j DROP iptables -t filter -N web_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1 echo "127.0.0.1 3Groute" > /etc/hosts killall dnsmasq dnsmasq -r /etc/resolv.conf& iptables -t filter -N ipport_trigger 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j ipport_trigger 1>/dev/null 2>&1 iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1 iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forward 1>/dev/null 2>&1 iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1 iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&1 iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1 iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1 iptables -t nat -N port_trigger 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j port_trigger 1>/dev/null 2>&1 greenap.sh init route delete 239.255.255.250 1>/dev/null 2>&1 killall wscd 1>/dev/null 2>&1 killall -9 wscd 1>/dev/null 2>&1 iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1 iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1 killall -q zebra killall -q ripd ##### USB init ##### MIC Different in pairwise msg 2 of 4-way handshake! storage.sh sambaMIC Different in pairwise msg 2 of 4-way handshake! 1st partition does not exist goahead pid is 646.... webs: Listening for HTTP requests at address 192.168.100.1 MIC Different in pairwise msg 2 of 4-way handshake! MIC Different in pairwise msg 2 of 4-way handshake!


This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2019/10/17 13:27
  • by tmomas