Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| toh:zte:mf286r [2022/09/06 21:02] – [Hardware Highlights] pcislocked | toh:zte:mf286r [2024/11/04 10:22] (current) – [Basic configuration] andrewz | ||
|---|---|---|---|
| Line 5: | Line 5: | ||
| /* USE https:// | /* USE https:// | ||
| - | {{page> | + | ZTE MF286R is a wireless LTE router, capable of connecting to LTE networks at download speeds up to 300Mbps using carrier aggegation. It has 3x3 2.4GHz Wi-Fi 4 and 2x2 5GHz Wi-Fi 5 Wave 2 radios, four gigabit ethernet ports, one USB 2.0 port, two RJ-11 ports for connecting landline phones that lets you use the cellular network to make calls. It is commonly used by some European ISPs for FWA(Fixed Wireless Access) services, such as Windtre on Italy, Turkcell on Türkiye, and more. Some models of the MF286 family include battery or phone ports, as well as corresponding LEDs on the front. |
| - | ZTE MF286 is a wireless LTE router, capable of connecting to LTE networks at 300Mbps using carrier aggegation. It has tri-band 2.4GHz Wi-Fi 4 and dual-band 5GHz Wi-Fi 5 Wave 2 radios, four gigabit ethernet ports, one USB 2.0 port, two RJ-11 ports for connecting landline phones that lets you use the cellular network to make calls, and a battery slot on the back for a 3Ah battery. It is commonly used by some european ISPs for FWA(Fixed Wireless Access) services, by Windtre on Italy, Turkcell on Turkey, and more. Some models do not include battery or phone ports, as well as corresponding LEDs on the front. | + | {{media: |
| - | {{media:zte:mf286r-all-angles.jpg? | + | ===== Supported Versions ===== |
| + | <!-- ToH: { | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | } --> | ||
| - | <WRAP BOX> | + | /* If no unsupported functions known, comment out the following datatable or delete it. */ |
| - | FIXME | + | <!-- ToH: { |
| - | ===== Getting started with a new Device Page ===== | + | " |
| - | | + | " |
| - | | + | |
| - | | + | "shownColumns": [" |
| + | "filterColumns": | ||
| + | } --> | ||
| - | ===== Keep the articles modular | + | ===== Experimental Versions |
| - | * Please include only model specific information, | + | |
| - | * If you have no time to write certain stuff, link to [[docs: | + | |
| - | * [[docs: | + | |
| - | * DO NOT provide a complete howto here! Instead //groom// the [[docs: | + | |
| - | </ | + | |
| - | ===== Supported Versions | + | //None at this time.// |
| + | |||
| + | ===== Hardware Highlights | ||
| + | <!-- ToH: { | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | } --> | ||
| + | |||
| + | ===== Installation ===== | ||
| + | <!-- ToH: { | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | } --> | ||
| + | |||
| + | -> [[docs: | ||
| + | |||
| + | TL:DR; Get a serial adapter and connect to the serial(see [[: | ||
| + | If you don't have a serial adapter, you can use the known exploit to gain a root shell and move from there. | ||
| + | |||
| + | |||
| + | ====STEP 1: Gaining root shell==== | ||
| + | |||
| + | ===Method 1=== | ||
| + | Use a serial cable. It might seem inconvenient to tear apart the device and get a serial adapter for one job but it is way easier to do the install with it. Otherwise, feel free to follow the other methods mentioned below, which takes advantage of an URL RCE exploit within the Web UI. Some up-to-date firmwares patched this bug(such as T-Mobile.pl firmware.). Physical connections for serial are shown [[: | ||
| + | |||
| + | ===Method 2=== | ||
| + | This works if busybox has telnetd compiled in the binary. If this does not work, try method 3.. | ||
| + | |||
| + | Using well-known exploit to start telnetd on your router - works only if Busybox on stock firmware has telnetd included: | ||
| + | - Open stock firmware web interface | ||
| + | - Navigate to "URL filtering" | ||
| + | - Add an entry ending with < | ||
| + | - telnetd will immediately listen on port 4719. | ||
| + | - After connecting to telnetd use " | ||
| + | |||
| + | ===Method 3=== | ||
| + | This works if busybox does not have telnetd compiled in. Notably, this is the case in DNA.fi firmware. | ||
| + | |||
| + | - Set IP of your computer to 192.168.0.22/ | ||
| + | - Have a TFTP server running at that address | ||
| + | - Download MIPS build of busybox including telnetd, for example from [[https:// | ||
| + | - As previously, login to router' | ||
| + | - Using " | ||
| + | < | ||
| + | - Stay on the page - do not navigate anywhere | ||
| + | - Enter < | ||
| + | - Save the settings. This will download the telnetd binary over tftp and execute it. You should be able to log in at port 23, using " | ||
| + | |||
| + | ====STEP 2: Backing up original software==== | ||
| + | As the stock firmware may be customized by the carrier and is not officially available in the Internet, **IT IS IMPERATIVE** to back up the stock firmware, if you ever plan to returning to stock firmware. It is highly recommended to perform backup using both methods, to avoid hassle of reassembling firmware images in future, if a restore is needed. | ||
| + | |||
| + | ===Method 1 - After booting OpenWrt initramfs image via TFTP=== | ||
| + | PLEASE NOTE: YOU CANNOT DO THIS IF USING INTERMEDIATE FIRMWARE FOR INSTALLATION. | ||
| + | - Dump stock firmware located on stock kernel and ubi partitions and keep them in a safe place, should a restore be needed in future. | ||
| + | |||
| + | ssh root@192.168.1.1: | ||
| + | ssh root@192.168.1.1: | ||
| + | |||
| + | ===Method 2 - using stock firmware=== | ||
| + | - After booting into the stock frimware and connecting to the console either via serial or telnet, Connect an external USB drive formatted with FAT or ext4 to the USB port. | ||
| + | - The drive will be auto-mounted to / | ||
| + | - Check the flash layout of the device: | ||
| <WRAP BOX> | <WRAP BOX> | ||
| - | FIXME | + | cat /proc/mtd |
| - | - The tables below are automatically generated, **once the correct filters for Brand and Model are set.** | + | |
| - | - If the tables below show information for ''< | + | |
| - | - If the tables below contain " | + | |
| - | - the dataentry page for ZTE MF286R | + | |
| - | - filters are not set correctly. Most common reason for " | + | |
| - | - If the tables still contain " | + | |
| </ | </ | ||
| - | ---- datatable ---- | + | It should show the following: |
| - | cols | + | |
| - | headers : Brand, Model, Version, Current Release, OEM Info, Forum Search, Technical Data | + | |
| - | align : c, | + | |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | |
| - | /* If no unsupported functions known, comment out the following datatable or delete it. */ | + | mtd0: 000a0000 00010000 " |
| - | ---- datatable ---- | + | mtd1: 00020000 00010000 "u-boot-env" |
| - | cols | + | mtd2: 00140000 00010000 " |
| - | filter | + | mtd3: 000a0000 00020000 "fota-flag" |
| - | filter | + | mtd4: 00080000 00020000 " |
| - | ---- | + | |
| + | | ||
| + | mtd7: 00400000 00020000 "cfg-param" | ||
| + | mtd8: 00400000 00020000 " | ||
| + | mtd9: 000a0000 00020000 " | ||
| + | mtd10: 00500000 00020000 " | ||
| + | mtd11: 00800000 00020000 " | ||
| + | mtd12: 00300000 00020000 " | ||
| + | mtd13: 01a00000 00020000 " | ||
| + | mtd14: 01900000 00020000 " | ||
| + | mtd15: 03200000 00020000 " | ||
| + | mtd16: 01d00000 00020000 " | ||
| - | ===== Experimental Versions ===== | ||
| - | /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * | + | // |
| - | | + | - Copy over all MTD partitions, |
| - | * Use this space to describe any on-going efforts to create a newer version | + | |
| - | | + | |
| - | | + | |
| - | * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */ | + | |
| - | //None at this time.// | + | for i in 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do cat /dev/mtd$i > \ |
| + | | ||
| - | ===== Hardware Highlights ===== | + | " |
| - | ---- datatable ---- | + | |
| - | cols : Model, Versions, CPU, CPU MHz, CPU Cores_numcores, | + | |
| - | header | + | |
| - | align : c, | + | |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | |
| + | - If the count of MTD partitions is different, this might indicate that this is not a MF286R device, but one of its other variants. | ||
| + | - Unmount the filesystem | ||
| - | ===== Installation ===== | + | umount |
| - | /* stable release */ | + | |
| - | /* uncomment once stable release | + | - Store the files in safe place if you ever plan to return to stock firmware. **This is especially important, because stock firmware for this device is not available |
| - | ---- datatable ---- | + | |
| - | cols : Model, Versions, Supported Current Rel, Firmware OpenWrt Install URL_url, Firmware OpenWrt Upgrade URL_url, Firmware OEM Stock URL_url | + | |
| - | headers : Model, Version, Current Release, Firmware OpenWrt Install, Firmware OpenWrt Upgrade, Firmware OEM Stock | + | |
| - | align : c,c,c | + | |
| - | filter | + | |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | |
| - | */ | + | |
| - | /* snapshot */ | + | Alternatively, you can use the TFTP server you are already going to use for the openwrt initramfs image, as a storage for the MTD dumps, by using something similar to: (Thanks to cicibird at discord for this tip) |
| - | /* delete once stable release is available */ | + | |
| - | ---- datatable ---- | + | |
| - | cols : Model, Versions, Supported Current Rel, Firmware OpenWrt snapshot Install URL_url, Firmware OpenWrt snapshot Upgrade URL_url, Firmware OEM Stock URL_url | + | |
| - | headers : Model, Version, Current Release, Firmware OpenWrt snapshot Install, Firmware OpenWrt snapshot Upgrade, Firmware OEM Stock | + | |
| - | align : c,c,c | + | |
| - | filter | + | |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | |
| + | tftp -l /dev/mtd0ro -r mtd0ro_uboot.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd1ro -r mtd1ro_uenv.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd2ro -r mtd2ro_reseved1.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd3ro -r mtd3ro_foto-flag.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd4ro -r mtd4ro_art.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd5ro -r mtd5ro_mac.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd6ro -r mtd6ro_reserved2.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd7ro -r mtd7ro_cfg-param.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd8ro -r mtd8ro_log.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd9ro -r mtd9ro_oops.img -p 192.168.1.144 | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| - | -> [[docs: | + | Change the IP accordingly, |
| - | FIXME Please add the installation procedure here. | + | ====STEP 3: Booting initramfs image==== |
| - | ==== Flash Layout | + | ===Method 1: using serial console (RECOMMENDED): |
| - | <WRAP BOX> | + | - Have TFTP server running, exposing |
| - | FIXME // | + | - Connect the serial console if you haven' |
| + | - Interrupt boot sequence by pressing any key in U-boot when prompted "Hit any key to stop autoboot" | ||
| + | - Use the following commands to boot OpenWrt initramfs through TFTP: | ||
| + | setenv serverip 192.168.0.22 | ||
| + | setenv ipaddr 192.168.0.1 | ||
| + | tftpboot 0x82000000 openwrt-ath79-nand-zte_mf286a-initramfs-kernel.bin | ||
| + | bootm 0x82000000 | ||
| - | Please check out the article [[docs: | + | (Replace server IP and router IP as needed). |
| - | </ | + | |
| - | ==== OEM easy installation | + | There is no emergency TFTP boot sequence triggered by buttons, contrary to MF283+. |
| + | - When OpenWrt initramfs finishes booting, proceed to actual | ||
| - | <WRAP BOX> | + | ===Method 2: using initramfs image as temporary boot kernel=== |
| - | FIXME //The instructions below are for Broadcom devices | + | This exploits the fact, that kernel |
| - | **//Remove / modify them if they do not apply to this particular | + | - Download the initramfs-kernel.bin image |
| + | - After backing up the previous MTD contents, write the images | ||
| - | This section deals with | + | nandwrite -p / |
| - | | + | |
| - | * The steps required such as reset to factory defaults if the device has already been configured | + | |
| - | **Note:** Reset router to factory defaults if it has been previously configured. | + | - If the write fails with " |
| - | * Browse to ''< | + | |
| - | * Upload .bin file to router | + | |
| - | * Wait for it to reboot | + | |
| - | * Telnet to 192.168.1.1 and set a root password, or browse to ''< | + | |
| - | </ | + | |
| - | ==== OEM installation using the TFTP method ==== | + | cat / |
| + | |||
| + | Retry the write afterwards. | ||
| - | -> [[docs:guide-user: | + | - If write is OK, reboot the device, it will reboot to OpenWrt initramfs: |
| - | === Specific values needed for tftp === | + | reboot -f |
| - | <WRAP BOX> | + | - After rebooting, SSH into the device and use sysupgrade to perform proper installation. |
| - | FIXME Enter values for "FILL-IN" | + | ===Method 3: using built-in TFTP recovery (LAST RESORT)=== |
| + | - With that method, ensure you have complete backup of system' | ||
| + | - Download | ||
| + | - Prepare the recovery image by prepending 8MB of zeroes to the image, and name it root_uImage: | ||
| - | ^ Bootloader tftp server IPv4 address | + | |
| - | ^ Bootloader MAC address (special) | + | |
| - | ^ Firmware tftp image | [[: | + | |
| - | ^ TFTP transfer window | + | |
| - | ^ TFTP window start | approximately FILL-IN seconds after power on | | + | |
| - | ^ TFTP client required IP address | + | |
| - | </WRAP> | + | cat padding.bin openwrt-ath79-nand-zte_mf286a-initramfs-kernel.bin |
| + | root_uImage | ||
| - | ===== Upgrading OpenWrt ===== | + | - Set up a TFTP server at 192.0.0.1/ |
| - | -> [[docs: | + | - Put the previously generated " |
| + | - Deliberately erase " | ||
| + | |||
| + | flash_erase / | ||
| + | |||
| + | - If the erase fails with " | ||
| + | cat / | ||
| + | |||
| + | Retry erasing afterwards. | ||
| + | | ||
| + | Replace mtd12 with kernel partition if differrent. **THIS IS POINT OF NO RETURN.** | ||
| + | |||
| + | - Restart the device. U-boot will attempt flashing the recovery initramfs image, which will let you perform actual installation using sysupgrade. This might take a considerable time, sometimes the router doesn' | ||
| + | - After U-boot finishes flashing, the LEDs of switch ports will all light up. At this moment, perform power-on reset, and wait for OpenWrt initramfs to finish booting. Then proceed to actual installation. | ||
| + | |||
| + | ====STEP 4: Actual installation==== | ||
| + | - Set your computer IP to 192.168.1.22/ | ||
| + | - scp the sysupgrade image to the device: | ||
| + | |||
| + | scp openwrt-ath79-nand-zte_mf286a-squashfs-sysupgrade.bin \ | ||
| + | root@192.168.1.1:/ | ||
| + | |||
| + | - ssh into the device and execute sysupgrade: | ||
| + | |||
| + | sysupgrade -n / | ||
| + | |||
| + | - Wait for router to reboot to full OpenWrt. | ||
| + | |||
| + | ==== Flash Layout ==== | ||
| <WRAP BOX> | <WRAP BOX> | ||
| + | mtd0: 000a0000 00010000 " | ||
| + | mtd1: 00020000 00010000 " | ||
| + | mtd2: 00140000 00010000 " | ||
| + | mtd3: 000a0000 00020000 " | ||
| + | mtd4: 00080000 00020000 " | ||
| + | mtd5: 00080000 00020000 " | ||
| + | mtd6: 000c0000 00020000 " | ||
| + | mtd7: 00400000 00020000 " | ||
| + | mtd8: 00400000 00020000 " | ||
| + | mtd9: 000a0000 00020000 " | ||
| + | mtd10: 00500000 00020000 " | ||
| + | mtd11: 00800000 00020000 " | ||
| + | mtd12: 00300000 00020000 " | ||
| + | mtd13: 01a00000 00020000 " | ||
| + | mtd14: 01900000 00020000 " | ||
| + | mtd15: 03200000 00020000 " | ||
| + | mtd16: 01d00000 00020000 " | ||
| + | </ | ||
| - | FIXME These are generic | + | |
| + | ===== Upgrading OpenWrt ===== | ||
| + | -> [[docs: | ||
| ==== LuCI Web Upgrade Process ==== | ==== LuCI Web Upgrade Process ==== | ||
| Line 162: | Line 275: | ||
| If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. | If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. | ||
| - | There are two command line methods for upgrading: | + | Login as root via SSH on 192.168.1.1, or connect via serial, then enter the following commands, replacing the URL and filename with the latest sysupgrade image link. |
| - | + | ||
| - | * '' | + | |
| - | * '' | + | |
| - | + | ||
| - | Note: It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing. | + | |
| - | + | ||
| - | === sysupgrade === | + | |
| - | + | ||
| - | * Login as root via SSH on 192.168.1.1, | + | |
| < | < | ||
| Line 177: | Line 281: | ||
| wget http:// | wget http:// | ||
| sysupgrade / | sysupgrade / | ||
| - | </ | ||
| - | |||
| - | === mtd === | ||
| - | |||
| - | If '' | ||
| - | |||
| - | * Login as root via SSH on 192.168.1.1, | ||
| - | |||
| - | < | ||
| - | cd /tmp | ||
| - | wget http:// | ||
| - | mtd write / | ||
| </ | </ | ||
| Line 194: | Line 286: | ||
| ===== Debricking ===== | ===== Debricking ===== | ||
| - | -> [[docs: | + | See [[docs: |
| ===== Failsafe mode ===== | ===== Failsafe mode ===== | ||
| - | -> [[docs: | + | See [[docs: |
| ===== Basic configuration ===== | ===== Basic configuration ===== | ||
| - | -> [[docs: | + | Since the router is equipped with LTE modem as its main WAN interface, it might be useful to connect to the Internet right away after installation. To do so over Luci, you'd need to connect to Internet via other means (Ethernet or Wi-Fi STA) and then install '' |
| - | Set up your Internet connection, configure wireless, configure USB port, etc. | + | |
| - | ===== Specific Configuration ===== | + | You can also add the necessary packages when building a new image with [[https:// |
| + | As of this writing, the package and its dependencies can be found from the following page (check and update the version accordingly): | ||
| + | * https:// | ||
| + | * https:// | ||
| + | * https:// | ||
| - | <WRAP BOX> | + | If you can't access the Internet via other means or you want to set it up via console or SSH, you can put the following entries |
| - | FIXME Please fill in real values for this device, then remove | + | |
| - | ==== Network interfaces ==== | + | < |
| - | The default network configuration is: | + | config interface ' |
| - | ^ Interface Name ^ Description | + | |
| - | | br-lan | + | |
| - | | vlan0 (eth0.0) | + | |
| - | | vlan1 (eth0.1) | + | |
| - | | wl0 | EXAMPLE WiFi | EXAMPLE Disabled | + | </ |
| - | </WRAP> | + | Please refer to [[: |
| + | |||
| + | After configuring your LTE modem, you can follow [[docs: | ||
| + | |||
| + | ===== Specific Configuration ===== | ||
| + | |||
| + | Other than LTE modem configuration mentioned above, no specific configuration is required. You might want to install < | ||
| ==== Switch Ports (for VLANs) ==== | ==== Switch Ports (for VLANs) ==== | ||
| <WRAP BOX> | <WRAP BOX> | ||
| - | FIXME Please | + | FIXME **Please |
| + | /*I didn't understand | ||
| + | /*Also, I just discovered how to make subfolders on the media manager. If you want to move all the images to the corresponding folder, I can fix the old photos on this wiki after that. */ | ||
| + | /*I'll upload new images to the right folder. */ | ||
| + | </ | ||
| Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on. | Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on. | ||
| Line 233: | Line 337: | ||
| ==== Buttons ==== | ==== Buttons ==== | ||
| - | -> [[docs: | ||
| - | Here, we merely name the buttons, so we can use them in the above Howto. | ||
| - | |||
| - | <WRAP BOX> | ||
| - | FIXME Please fill in real values for this device, then remove the EXAMPLEs | ||
| The ZTE MF286R has the following buttons: | The ZTE MF286R has the following buttons: | ||
| ^ BUTTON | ^ BUTTON | ||
| - | | EXAMPLE | + | | Reset Button |
| - | | EXAMPLE Secure Easy Setup | + | | WPS Button |
| - | | EXAMPLE No buttons at all. | - | | + | | Wi-Fi ON/OFF button |
| + | | Power switch | ||
| </ | </ | ||
| Line 250: | Line 350: | ||
| ===== Hardware ===== | ===== Hardware ===== | ||
| ==== Info ==== | ==== Info ==== | ||
| - | <WRAP BOX> | + | <!-- ToH: { |
| - | FIXME | + | "source": |
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | " |
| - | | + | |
| - | </ | + | } --> |
| - | + | ||
| - | ---- datatemplatelist dttpllist ---- | + | |
| - | template: meta:template_datatemplatelist | + | |
| - | cols : Brand, Model, Versions, Device Type, Availability, Supported Since Commit_git, Supported since Rel, Supported current Rel, Unsupported, Bootloader, CPU, Target, CPU MHz, Flash MBs, RAM MB, Switch, Ethernet 100M ports_, Ethernet Gbit ports_, Comments network ports_, Modem, VLAN, WLAN 2.4GHz, WLAN 5.0GHz, WLAN Hardwares, WLAN Comments_, Detachable Antennas_, USB ports_, SATA ports_, Comments USB SATA ports_, Serial, JTAG, LED count, Button count, Power supply, Device Techdata_pageid, Forum topic URL_url, wikidevi URL_url, OEM Device Homepage URL_url, Firmware OEM Stock URL_url, Firmware OpenWrt Install URL_url, Firmware OpenWrt Upgrade URL_url, Comments_ | + | |
| - | filter | + | |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | |
| ==== Photos ==== | ==== Photos ==== | ||
| - | /* =====>>>>> | ||
| - | /* When uploading photos, **name them** intelligently. Nobody knows what 20100930_000602.jpg is! */ | ||
| - | /* e.g. {{: | ||
| - | /* Thanks, your wiki administration - Oct. 2015 */ | ||
| // | // | ||
| - | **Insert photo of front of the casing** | + | {{media: |
| + | {{: | ||
| //Back://\\ | //Back://\\ | ||
| - | **Insert photo of back of the casing** | + | {{media: |
| + | {{: | ||
| - | //Backside label://\\ | + | //Top://\\ |
| - | **Insert photo of backside | + | {{: |
| + | |||
| + | // | ||
| + | {{: | ||
| + | |||
| + | //Under device | ||
| + | {{: | ||
| + | |||
| + | // | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| ==== Opening the case ==== | ==== Opening the case ==== | ||
| Line 286: | Line 388: | ||
| **Note:** This will void your warranty! | **Note:** This will void your warranty! | ||
| - | <WRAP BOX> | + | - Take of battery lid (no battery support for this model, battery cage is dummy). |
| - | FIXME //Describe what needs to be done to open the device, e.g. remove rubber feet, adhesive labels, | + | - Unscrew screw placed behind battery lid. |
| - | | + | - Take off back cover. It attached with multiple plastic clamps. |
| - | </ | + | - Unscrew four more screws |
| + | - Remove front panel from blue chassis. There are more plastic | ||
| + | | ||
| + | | ||
| + | - Extract board from blue chassis. | ||
| //Main PCB://\\ | //Main PCB://\\ | ||
| - | **Insert photo of PCB** | + | {{: |
| + | {{: | ||
| + | |||
| + | //PCB Board Details and modem photo:// | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| + | {{: | ||
| ==== Serial ==== | ==== Serial ==== | ||
| -> [[docs: | -> [[docs: | ||
| - | How to connect | + | The serial console connections are identical |
| - | **Insert photo of PCB with markings for serial port** | + | |
| - | <WRAP BOX> | + | {{: |
| - | FIXME //Replace EXAMPLE by real values.// | + | |
| - | </ | + | It was observed, that CH340-based USB-UART converters output garbage during U-boot phase of system boot. At least CP2102 is known to work properly, which is widely available in this form: |
| + | |||
| + | {{: | ||
| - | ^ Serial connection parameters\\ for ZTE MF286R | + | ^ Serial connection parameters\\ for ZTE MF286R |
| ==== JTAG ==== | ==== JTAG ==== | ||
| -> [[docs: | -> [[docs: | ||
| - | How to connect to the JTAG Port of this specific device:\\ | + | There is no JTAG functionality. |
| - | **Insert photo of PCB with markings for JTAG port** | + | |
| ===== Bootloader mods ===== | ===== Bootloader mods ===== | ||
| - | -> [[docs: | + | None so far. |
| ===== Hardware mods ===== | ===== Hardware mods ===== | ||
| Line 323: | Line 443: | ||
| ==== OEM bootlog ==== | ==== OEM bootlog ==== | ||
| <WRAP bootlog> | <WRAP bootlog> | ||
| - | <nowiki>COPY HERE THE BOOTLOG WITH THE ORIGINAL FIRMWARE</nowiki> | + | WARNING: This boot log is taken from a Turkcell MF286R, which does not have FXS functionality as well as a battery, so logs related to these functions might be faulty or might not exist. |
| + | Also some IPs belonging to Turkcell Superonline as well as some TR069 configs might be visible in the log. | ||
| + | <code> | ||
| + | U-Boot 1.1.4 (May 13 2021 - 05:37:00) | ||
| + | |||
| + | ap152 - Dragonfly 1.0DRAM: | ||
| + | sri | ||
| + | ath_ddr_initial_config(278): | ||
| + | ath_sys_frequency: | ||
| + | Tap values = (0x10, 0x10, 0x10, 0x10) | ||
| + | 128 MB | ||
| + | Top of RAM usable for U-Boot at: 88000000 | ||
| + | Reserving 659k for U-Boot at: 87f58000 | ||
| + | Reserving 192k for malloc() at: 87f28000 | ||
| + | Reserving 44 Bytes for Board Info at: 87f27fd4 | ||
| + | Reserving 36 Bytes for Global Data at: 87f27fb0 | ||
| + | Reserving 128k for boot params() at: 87f07fb0 | ||
| + | Stack Pointer at: 87f07f98 | ||
| + | Now running in RAM - U-Boot at: 87f58000 | ||
| + | Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x15 | ||
| + | flash size 2MB, sector count = 32 | ||
| + | Flash: | ||
| + | *** Warning - bad CRC, using default environment | ||
| + | |||
| + | Power up PLL with outdiv = 0 then switch to 3 | ||
| + | In: serial | ||
| + | Out: | ||
| + | Err: | ||
| + | Net: | ||
| + | No valid address in Flash. Using fixed address | ||
| + | ath_gmac_enet_initialize: | ||
| + | athr_mgmt_init (MDC/MDIO config):: | ||
| + | Dragonfly | ||
| + | athrs17_reg_init: | ||
| + | Max resets limit reached exiting... | ||
| + | athr_gmac_sgmii_setup SGMII done | ||
| + | : cfg1 0x80000000 cfg2 0x7114 | ||
| + | eth0: 00: | ||
| + | ath_gmac_phy_setup | ||
| + | eth0 up | ||
| + | eth0 | ||
| + | Qualcomm Atheros SPI NAND Driver, Version 0.1 (c) 2014 Qualcomm Atheros Inc. | ||
| + | ath_spi_nand_ecc: | ||
| + | ath_spi_nand_ecc: | ||
| + | zte ath_spi_nand_read_id 0xc8d1 | ||
| + | zte ath_spi_nand_read_id 0xc8d1c8 | ||
| + | zte debug gd 128 oob | ||
| + | ====== NAND Parameters ====== | ||
| + | sc addr = 0x87fa6d10 page(write size) = 0x800 (erase size) block = 0x20000 | ||
| + | Setting 0x181162c0 to 0x4b962100 | ||
| + | Uaztemain: enter into ! | ||
| + | ZTE_InitFotaFlashPara: | ||
| + | zte_getHandOffState: | ||
| + | Hit any key to stop autoboot: | ||
| + | |||
| + | Loading from device 0: ath-spi-nand (offset 0x1800000) | ||
| + | Image Name: MIPS OpenWrt Linux-3.3.8 | ||
| + | | ||
| + | Image Type: MIPS Linux Multi-File Image (lzma compressed) | ||
| + | Data Size: 1210407 Bytes = 1.2 MB | ||
| + | Load Address: 80060000 | ||
| + | Entry Point: | ||
| + | | ||
| + | Image 0: 1210399 Bytes = 1.2 MB | ||
| + | ## Booting image at 81000000 ... | ||
| + | Image Name: MIPS OpenWrt Linux-3.3.8 | ||
| + | | ||
| + | Image Type: MIPS Linux Multi-File Image (lzma compressed) | ||
| + | Data Size: 1210407 Bytes = 1.2 MB | ||
| + | Load Address: 80060000 | ||
| + | Entry Point: | ||
| + | | ||
| + | Image 0: 1210399 Bytes = 1.2 MB | ||
| + | | ||
| + | | ||
| + | No initrd | ||
| + | ## Transferring control to Linux (at address 80060000) ... | ||
| + | ## Giving linux memsize in bytes, 134217728 | ||
| + | |||
| + | Starting kernel ... | ||
| + | |||
| + | [ 0.000000] Linux version 3.3.8 (scl@scl_xa243_241) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Wed Jul 31 14:52:17 CST 2019 | ||
| + | [ 0.000000] bootconsole [early0] enabled | ||
| + | [ 0.000000] CPU revision is: 00019750 (MIPS 74Kc) | ||
| + | [ 0.000000] SoC: Qualcomm Atheros QCA956X rev 0 | ||
| + | [ 0.000000] Clocks: CPU: | ||
| + | [ 0.000000] Determined physical RAM map: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] User-defined physical RAM map: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Initrd not found or empty - disabling initrd | ||
| + | [ 0.000000] Zone PFN ranges: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Movable zone start PFN for each node | ||
| + | [ 0.000000] Early memory PFN ranges | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 | ||
| + | [ 0.000000] Kernel command line: board=AP152 console=ttyS0, | ||
| + | [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) | ||
| + | [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) | ||
| + | [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) | ||
| + | [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. | ||
| + | [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes | ||
| + | [ 0.000000] Writing ErrCtl register=00000000 | ||
| + | [ 0.000000] Readback ErrCtl register=00000000 | ||
| + | [ 0.000000] Memory: 125784k/ | ||
| + | [ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, | ||
| + | [ 0.000000] NR_IRQS: | ||
| + | [ 0.000000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) | ||
| + | [ 0.060000] pid_max: default: 32768 minimum: 301 | ||
| + | [ 0.060000] Mount-cache hash table entries: 512 | ||
| + | [ 0.060000] Performance counters: mips/74K PMU enabled, 4 32-bit counters available to each CPU, irq 13 | ||
| + | [ 0.070000] NET: Registered protocol family 16 | ||
| + | [ 0.080000] gpiochip_add: | ||
| + | [ 0.080000] MIPS: machine is Qualcomm Atheros AP152 reference board | ||
| + | [ 0.090000] | ||
| + | [ 0.090000] WLAN firmware dump buffer allocation of 2097152 bytes @ address 0x87a00000- SUCCESS !!! | ||
| + | [ 0.100000] registering PCI controller with io_map_base unset | ||
| + | [ 0.310000] bio: create slab < | ||
| + | [ 0.310000] PCI host bridge to bus 0000:00 | ||
| + | [ 0.320000] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff] | ||
| + | [ 0.320000] pci_bus 0000:00: root bus resource [io 0x0001] | ||
| + | [ 0.330000] pci 0000: | ||
| + | [ 0.330000] pci 0000: | ||
| + | [ 0.340000] Switching to clocksource MIPS | ||
| + | [ 0.340000] NET: Registered protocol family 2 | ||
| + | [ 0.350000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) | ||
| + | [ 0.350000] TCP established hash table entries: 4096 (order: 3, 32768 bytes) | ||
| + | [ 0.360000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes) | ||
| + | [ 0.360000] TCP: Hash tables configured (established 4096 bind 4096) | ||
| + | [ 0.370000] TCP reno registered | ||
| + | [ 0.370000] UDP hash table entries: 256 (order: 0, 4096 bytes) | ||
| + | [ 0.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) | ||
| + | [ 0.380000] NET: Registered protocol family 1 | ||
| + | [ 0.400000] squashfs: version 4.0 (2009/ | ||
| + | [ 0.400000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. | ||
| + | [ 0.410000] msgmni has been set to 245 | ||
| + | [ 0.420000] io scheduler noop registered | ||
| + | [ 0.420000] io scheduler deadline registered (default) | ||
| + | [ 0.430000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled | ||
| + | [ 0.450000] serial8250.0: | ||
| + | [ 0.460000] console [ttyS0] enabled, bootconsole disabled | ||
| + | [ 0.460000] console [ttyS0] enabled, bootconsole disabled | ||
| + | [ 0.470000] m25p80 spi0.0: found gd25q16csig, | ||
| + | [ 0.480000] m25p80 spi0.0: gd25q16csig (2048 Kbytes) | ||
| + | [ 0.490000] 3 cmdlinepart partitions found on MTD device spi0.0 | ||
| + | [ 0.490000] Creating 3 MTD partitions on " | ||
| + | [ 0.500000] 0x000000000000-0x0000000a0000 : " | ||
| + | [ 0.500000] 0x0000000a0000-0x0000000c0000 : " | ||
| + | [ 0.510000] 0x0000000c0000-0x000000200000 : " | ||
| + | [ 0.520000] ath79_spinand_read_id: | ||
| + | [ 0.520000] ath79_spinand_read_id: | ||
| + | [ 0.530000] ath79_spinand_read_id: | ||
| + | [ 0.540000] ath79_spinand_read_id: | ||
| + | [ 0.540000] zte gd nand | ||
| + | [ 0.540000] NAND device: Manufacturer ID: 0xc8, Chip ID: 0xd1 (Giga Device NAND 128MiB 3,3V 8-bit) | ||
| + | [ 0.550000] Scanning device for bad blocks | ||
| + | [ 0.580000] Bad eraseblock 127 at 0x000000fe0000 | ||
| + | [ 0.770000] Bad eraseblock 1023 at 0x000007fe0000 | ||
| + | [ 0.770000] 14 cmdlinepart partitions found on MTD device spi0.1 | ||
| + | [ 0.780000] Creating 14 MTD partitions on " | ||
| + | [ 0.790000] 0x000000000000-0x0000000a0000 : " | ||
| + | [ 0.790000] 0x0000000a0000-0x000000120000 : " | ||
| + | [ 0.800000] 0x000000120000-0x0000001a0000 : " | ||
| + | [ 0.800000] 0x0000001a0000-0x000000260000 : " | ||
| + | [ 0.810000] 0x000000260000-0x000000660000 : " | ||
| + | [ 0.820000] 0x000000660000-0x000000a60000 : " | ||
| + | [ 0.820000] 0x000000a60000-0x000000b00000 : " | ||
| + | [ 0.830000] 0x000000b00000-0x000001000000 : " | ||
| + | [ 0.840000] 0x000001000000-0x000001800000 : " | ||
| + | [ 0.840000] part[web]: logic[0]=phys[0] | ||
| + | [ 0.850000] part[web]: logic[1]=phys[1] | ||
| + | [ 0.850000] part[web]: logic[2]=phys[2] | ||
| + | [ 0.850000] part[web]: logic[3]=phys[3] | ||
| + | [ 0.860000] part[web]: logic[4]=phys[4] | ||
| + | [ 0.860000] part[web]: logic[5]=phys[5] | ||
| + | [ 0.870000] part[web]: logic[6]=phys[6] | ||
| + | [ 0.870000] part[web]: logic[7]=phys[7] | ||
| + | [ 0.870000] part[web]: logic[8]=phys[8] | ||
| + | [ 0.880000] part[web]: logic[9]=phys[9] | ||
| + | [ 0.880000] part[web]: logic[10]=phys[10] | ||
| + | [ 0.890000] part[web]: logic[11]=phys[11] | ||
| + | [ 0.890000] part[web]: logic[12]=phys[12] | ||
| + | [ 0.890000] part[web]: logic[13]=phys[13] | ||
| + | [ 0.900000] part[web]: logic[14]=phys[14] | ||
| + | [ 0.900000] part[web]: logic[15]=phys[15] | ||
| + | [ 0.910000] part[web]: logic[16]=phys[16] | ||
| + | [ 0.910000] part[web]: logic[17]=phys[17] | ||
| + | [ 0.910000] part[web]: logic[18]=phys[18] | ||
| + | [ 0.920000] part[web]: logic[19]=phys[19] | ||
| + | [ 0.920000] part[web]: logic[20]=phys[20] | ||
| + | [ 0.930000] part[web]: logic[21]=phys[21] | ||
| + | [ 0.930000] part[web]: logic[22]=phys[22] | ||
| + | [ 0.940000] part[web]: logic[23]=phys[23] | ||
| + | [ 0.940000] part[web]: logic[24]=phys[24] | ||
| + | [ 0.940000] part[web]: logic[25]=phys[25] | ||
| + | [ 0.950000] part[web]: logic[26]=phys[26] | ||
| + | [ 0.950000] part[web]: logic[27]=phys[27] | ||
| + | [ 0.960000] part[web]: logic[28]=phys[28] | ||
| + | [ 0.960000] part[web]: logic[29]=phys[29] | ||
| + | [ 0.960000] part[web]: logic[30]=phys[30] | ||
| + | [ 0.970000] part[web]: logic[31]=phys[31] | ||
| + | [ 0.970000] part[web]: logic[32]=phys[32] | ||
| + | [ 0.980000] part[web]: logic[33]=phys[33] | ||
| + | [ 0.980000] part[web]: logic[34]=phys[34] | ||
| + | [ 0.980000] part[web]: logic[35]=phys[35] | ||
| + | [ 0.990000] part[web]: logic[36]=phys[36] | ||
| + | [ 0.990000] part[web]: logic[37]=phys[37] | ||
| + | [ 1.000000] part[web]: logic[38]=phys[38] | ||
| + | [ 1.000000] part[web]: logic[39]=phys[39] | ||
| + | [ 1.010000] part[web]: logic[40]=phys[40] | ||
| + | [ 1.010000] part[web]: logic[41]=phys[41] | ||
| + | [ 1.010000] part[web]: logic[42]=phys[42] | ||
| + | [ 1.020000] part[web]: logic[43]=phys[43] | ||
| + | [ 1.020000] part[web]: logic[44]=phys[44] | ||
| + | [ 1.030000] part[web]: logic[45]=phys[45] | ||
| + | [ 1.030000] part[web]: logic[46]=phys[46] | ||
| + | [ 1.030000] part[web]: logic[47]=phys[47] | ||
| + | [ 1.040000] part[web]: logic[48]=phys[48] | ||
| + | [ 1.040000] part[web]: logic[49]=phys[49] | ||
| + | [ 1.050000] part[web]: logic[50]=phys[50] | ||
| + | [ 1.050000] part[web]: logic[51]=phys[51] | ||
| + | [ 1.060000] part[web]: logic[52]=phys[52] | ||
| + | [ 1.060000] part[web]: logic[53]=phys[53] | ||
| + | [ 1.060000] part[web]: logic[54]=phys[54] | ||
| + | [ 1.070000] part[web]: logic[55]=phys[55] | ||
| + | [ 1.070000] part[web]: logic[56]=phys[56] | ||
| + | [ 1.080000] part[web]: logic[57]=phys[57] | ||
| + | [ 1.080000] part[web]: logic[58]=phys[58] | ||
| + | [ 1.080000] part[web]: logic[59]=phys[59] | ||
| + | [ 1.090000] part[web]: logic[60]=phys[60] | ||
| + | [ 1.090000] part[web]: logic[61]=phys[61] | ||
| + | [ 1.100000] part[web]: logic[62]=phys[62] | ||
| + | [ 1.100000] part[web]: logic[63]=phys[63] | ||
| + | [ 1.100000] 0x000001800000-0x000001b00000 : " | ||
| + | [ 1.110000] part[kernel]: | ||
| + | [ 1.120000] part[kernel]: | ||
| + | [ 1.120000] part[kernel]: | ||
| + | [ 1.120000] part[kernel]: | ||
| + | [ 1.130000] part[kernel]: | ||
| + | [ 1.130000] part[kernel]: | ||
| + | [ 1.140000] part[kernel]: | ||
| + | [ 1.140000] part[kernel]: | ||
| + | [ 1.140000] part[kernel]: | ||
| + | [ 1.150000] part[kernel]: | ||
| + | [ 1.150000] part[kernel]: | ||
| + | [ 1.160000] part[kernel]: | ||
| + | [ 1.160000] part[kernel]: | ||
| + | [ 1.170000] part[kernel]: | ||
| + | [ 1.170000] part[kernel]: | ||
| + | [ 1.180000] part[kernel]: | ||
| + | [ 1.180000] part[kernel]: | ||
| + | [ 1.180000] part[kernel]: | ||
| + | [ 1.190000] part[kernel]: | ||
| + | [ 1.190000] part[kernel]: | ||
| + | [ 1.200000] part[kernel]: | ||
| + | [ 1.200000] part[kernel]: | ||
| + | [ 1.210000] part[kernel]: | ||
| + | [ 1.210000] part[kernel]: | ||
| + | [ 1.220000] 0x000001b00000-0x000003500000 : " | ||
| + | [ 1.220000] part[rootfs]: | ||
| + | [ 1.230000] part[rootfs]: | ||
| + | [ 1.230000] part[rootfs]: | ||
| + | [ 1.230000] part[rootfs]: | ||
| + | [ 1.240000] part[rootfs]: | ||
| + | [ 1.240000] part[rootfs]: | ||
| + | [ 1.250000] part[rootfs]: | ||
| + | [ 1.250000] part[rootfs]: | ||
| + | [ 1.260000] part[rootfs]: | ||
| + | [ 1.260000] part[rootfs]: | ||
| + | [ 1.260000] part[rootfs]: | ||
| + | [ 1.270000] part[rootfs]: | ||
| + | [ 1.270000] part[rootfs]: | ||
| + | [ 1.280000] part[rootfs]: | ||
| + | [ 1.280000] part[rootfs]: | ||
| + | [ 1.290000] part[rootfs]: | ||
| + | [ 1.290000] part[rootfs]: | ||
| + | [ 1.290000] part[rootfs]: | ||
| + | [ 1.300000] part[rootfs]: | ||
| + | [ 1.300000] part[rootfs]: | ||
| + | [ 1.310000] part[rootfs]: | ||
| + | [ 1.310000] part[rootfs]: | ||
| + | [ 1.320000] part[rootfs]: | ||
| + | [ 1.320000] part[rootfs]: | ||
| + | [ 1.330000] part[rootfs]: | ||
| + | [ 1.330000] part[rootfs]: | ||
| + | [ 1.330000] part[rootfs]: | ||
| + | [ 1.340000] part[rootfs]: | ||
| + | [ 1.340000] part[rootfs]: | ||
| + | [ 1.350000] part[rootfs]: | ||
| + | [ 1.350000] part[rootfs]: | ||
| + | [ 1.360000] part[rootfs]: | ||
| + | [ 1.360000] part[rootfs]: | ||
| + | [ 1.370000] part[rootfs]: | ||
| + | [ 1.370000] part[rootfs]: | ||
| + | [ 1.370000] part[rootfs]: | ||
| + | [ 1.380000] part[rootfs]: | ||
| + | [ 1.380000] part[rootfs]: | ||
| + | [ 1.390000] part[rootfs]: | ||
| + | [ 1.390000] part[rootfs]: | ||
| + | [ 1.400000] part[rootfs]: | ||
| + | [ 1.400000] part[rootfs]: | ||
| + | [ 1.400000] part[rootfs]: | ||
| + | [ 1.410000] part[rootfs]: | ||
| + | [ 1.410000] part[rootfs]: | ||
| + | [ 1.420000] part[rootfs]: | ||
| + | [ 1.420000] part[rootfs]: | ||
| + | [ 1.430000] part[rootfs]: | ||
| + | [ 1.430000] part[rootfs]: | ||
| + | [ 1.440000] part[rootfs]: | ||
| + | [ 1.440000] part[rootfs]: | ||
| + | [ 1.440000] part[rootfs]: | ||
| + | [ 1.450000] part[rootfs]: | ||
| + | [ 1.450000] part[rootfs]: | ||
| + | [ 1.460000] part[rootfs]: | ||
| + | [ 1.460000] part[rootfs]: | ||
| + | [ 1.470000] part[rootfs]: | ||
| + | [ 1.470000] part[rootfs]: | ||
| + | [ 1.480000] part[rootfs]: | ||
| + | [ 1.480000] part[rootfs]: | ||
| + | [ 1.480000] part[rootfs]: | ||
| + | [ 1.490000] part[rootfs]: | ||
| + | [ 1.490000] part[rootfs]: | ||
| + | [ 1.500000] part[rootfs]: | ||
| + | [ 1.500000] part[rootfs]: | ||
| + | [ 1.510000] part[rootfs]: | ||
| + | [ 1.510000] part[rootfs]: | ||
| + | [ 1.510000] part[rootfs]: | ||
| + | [ 1.520000] part[rootfs]: | ||
| + | [ 1.520000] part[rootfs]: | ||
| + | [ 1.530000] part[rootfs]: | ||
| + | [ 1.530000] part[rootfs]: | ||
| + | [ 1.540000] part[rootfs]: | ||
| + | [ 1.540000] part[rootfs]: | ||
| + | [ 1.550000] part[rootfs]: | ||
| + | [ 1.550000] part[rootfs]: | ||
| + | [ 1.550000] part[rootfs]: | ||
| + | [ 1.560000] part[rootfs]: | ||
| + | [ 1.560000] part[rootfs]: | ||
| + | [ 1.570000] part[rootfs]: | ||
| + | [ 1.570000] part[rootfs]: | ||
| + | [ 1.580000] part[rootfs]: | ||
| + | [ 1.580000] part[rootfs]: | ||
| + | [ 1.590000] part[rootfs]: | ||
| + | [ 1.590000] part[rootfs]: | ||
| + | [ 1.590000] part[rootfs]: | ||
| + | [ 1.600000] part[rootfs]: | ||
| + | [ 1.600000] part[rootfs]: | ||
| + | [ 1.610000] part[rootfs]: | ||
| + | [ 1.610000] part[rootfs]: | ||
| + | [ 1.620000] part[rootfs]: | ||
| + | [ 1.620000] part[rootfs]: | ||
| + | [ 1.630000] part[rootfs]: | ||
| + | [ 1.630000] part[rootfs]: | ||
| + | [ 1.630000] part[rootfs]: | ||
| + | [ 1.640000] part[rootfs]: | ||
| + | [ 1.640000] part[rootfs]: | ||
| + | [ 1.650000] part[rootfs]: | ||
| + | [ 1.650000] part[rootfs]: | ||
| + | [ 1.660000] part[rootfs]: | ||
| + | [ 1.660000] part[rootfs]: | ||
| + | [ 1.660000] part[rootfs]: | ||
| + | [ 1.670000] part[rootfs]: | ||
| + | [ 1.670000] part[rootfs]: | ||
| + | [ 1.680000] part[rootfs]: | ||
| + | [ 1.680000] part[rootfs]: | ||
| + | [ 1.690000] part[rootfs]: | ||
| + | [ 1.690000] part[rootfs]: | ||
| + | [ 1.700000] part[rootfs]: | ||
| + | [ 1.700000] part[rootfs]: | ||
| + | [ 1.710000] part[rootfs]: | ||
| + | [ 1.710000] part[rootfs]: | ||
| + | [ 1.720000] part[rootfs]: | ||
| + | [ 1.720000] part[rootfs]: | ||
| + | [ 1.720000] part[rootfs]: | ||
| + | [ 1.730000] part[rootfs]: | ||
| + | [ 1.730000] part[rootfs]: | ||
| + | [ 1.740000] part[rootfs]: | ||
| + | [ 1.740000] part[rootfs]: | ||
| + | [ 1.750000] part[rootfs]: | ||
| + | [ 1.750000] part[rootfs]: | ||
| + | [ 1.760000] part[rootfs]: | ||
| + | [ 1.760000] part[rootfs]: | ||
| + | [ 1.770000] part[rootfs]: | ||
| + | [ 1.770000] part[rootfs]: | ||
| + | [ 1.780000] part[rootfs]: | ||
| + | [ 1.780000] part[rootfs]: | ||
| + | [ 1.780000] part[rootfs]: | ||
| + | [ 1.790000] part[rootfs]: | ||
| + | [ 1.790000] part[rootfs]: | ||
| + | [ 1.800000] part[rootfs]: | ||
| + | [ 1.800000] part[rootfs]: | ||
| + | [ 1.810000] part[rootfs]: | ||
| + | [ 1.810000] part[rootfs]: | ||
| + | [ 1.820000] part[rootfs]: | ||
| + | [ 1.820000] part[rootfs]: | ||
| + | [ 1.830000] part[rootfs]: | ||
| + | [ 1.830000] part[rootfs]: | ||
| + | [ 1.830000] part[rootfs]: | ||
| + | [ 1.840000] part[rootfs]: | ||
| + | [ 1.840000] part[rootfs]: | ||
| + | [ 1.850000] part[rootfs]: | ||
| + | [ 1.850000] part[rootfs]: | ||
| + | [ 1.860000] part[rootfs]: | ||
| + | [ 1.860000] part[rootfs]: | ||
| + | [ 1.870000] part[rootfs]: | ||
| + | [ 1.870000] part[rootfs]: | ||
| + | [ 1.880000] part[rootfs]: | ||
| + | [ 1.880000] part[rootfs]: | ||
| + | [ 1.890000] part[rootfs]: | ||
| + | [ 1.890000] part[rootfs]: | ||
| + | [ 1.890000] part[rootfs]: | ||
| + | [ 1.900000] part[rootfs]: | ||
| + | [ 1.900000] part[rootfs]: | ||
| + | [ 1.910000] part[rootfs]: | ||
| + | [ 1.910000] part[rootfs]: | ||
| + | [ 1.920000] part[rootfs]: | ||
| + | [ 1.920000] part[rootfs]: | ||
| + | [ 1.930000] part[rootfs]: | ||
| + | [ 1.930000] part[rootfs]: | ||
| + | [ 1.940000] part[rootfs]: | ||
| + | [ 1.940000] part[rootfs]: | ||
| + | [ 1.940000] part[rootfs]: | ||
| + | [ 1.950000] part[rootfs]: | ||
| + | [ 1.950000] part[rootfs]: | ||
| + | [ 1.960000] part[rootfs]: | ||
| + | [ 1.960000] part[rootfs]: | ||
| + | [ 1.970000] part[rootfs]: | ||
| + | [ 1.970000] part[rootfs]: | ||
| + | [ 1.980000] part[rootfs]: | ||
| + | [ 1.980000] part[rootfs]: | ||
| + | [ 1.990000] part[rootfs]: | ||
| + | [ 1.990000] part[rootfs]: | ||
| + | [ 2.000000] part[rootfs]: | ||
| + | [ 2.000000] part[rootfs]: | ||
| + | [ 2.000000] part[rootfs]: | ||
| + | [ 2.010000] part[rootfs]: | ||
| + | [ 2.010000] part[rootfs]: | ||
| + | [ 2.020000] part[rootfs]: | ||
| + | [ 2.020000] part[rootfs]: | ||
| + | [ 2.030000] part[rootfs]: | ||
| + | [ 2.030000] part[rootfs]: | ||
| + | [ 2.040000] part[rootfs]: | ||
| + | [ 2.040000] part[rootfs]: | ||
| + | [ 2.050000] part[rootfs]: | ||
| + | [ 2.050000] part[rootfs]: | ||
| + | [ 2.050000] part[rootfs]: | ||
| + | [ 2.060000] part[rootfs]: | ||
| + | [ 2.060000] part[rootfs]: | ||
| + | [ 2.070000] part[rootfs]: | ||
| + | [ 2.070000] part[rootfs]: | ||
| + | [ 2.080000] part[rootfs]: | ||
| + | [ 2.080000] part[rootfs]: | ||
| + | [ 2.090000] part[rootfs]: | ||
| + | [ 2.090000] part[rootfs]: | ||
| + | [ 2.100000] part[rootfs]: | ||
| + | [ 2.100000] part[rootfs]: | ||
| + | [ 2.110000] part[rootfs]: | ||
| + | [ 2.110000] part[rootfs]: | ||
| + | [ 2.110000] part[rootfs]: | ||
| + | [ 2.120000] part[rootfs]: | ||
| + | [ 2.120000] part[rootfs]: | ||
| + | [ 2.130000] part[rootfs]: | ||
| + | [ 2.130000] part[rootfs]: | ||
| + | [ 2.140000] part[rootfs]: | ||
| + | [ 2.140000] part[rootfs]: | ||
| + | [ 2.150000] part[rootfs]: | ||
| + | [ 2.150000] part[rootfs]: | ||
| + | [ 2.160000] mtd: partition " | ||
| + | [ 2.160000] 0x000003500000-0x000004e00000 : " | ||
| + | [ 2.170000] 0x000004e00000-0x000008000000 : " | ||
| + | [ 2.170000] 0x000001800000-0x000003500000 : " | ||
| + | [ 2.320000] ag71xx_mdio: | ||
| + | [ 2.320000] zte_nand_local_read(): | ||
| + | [ 2.330000] *********************************************** | ||
| + | [ 2.340000] AG71XX using MAC@ - using d4: | ||
| + | [ 2.350000] *********************************************** | ||
| + | [ 2.350000] eth0: Atheros AG71xx at 0xb9000000, irq 4 | ||
| + | [ 2.930000] eth0: Atheros AR8327 switch driver attached. | ||
| + | [ 5.830000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0: | ||
| + | [ 5.840000] *************tian.zb test err=0*********************** | ||
| + | [ 5.850000] input: gpio-keys-polled as / | ||
| + | [ 5.860000] zte gpio_keys_polled_check_state: | ||
| + | [ 5.860000] zte gpio_keys_polled_check_state: | ||
| + | [ 5.870000] zte gpio_keys_polled_check_state: | ||
| + | [ 5.880000] netem: version 1.3 | ||
| + | [ 5.880000] u32 classifier | ||
| + | [ 5.880000] | ||
| + | [ 5.890000] | ||
| + | [ 5.890000] | ||
| + | [ 5.890000] TCP cubic registered | ||
| + | [ 5.900000] NET: Registered protocol family 17 | ||
| + | [ 5.900000] 8021q: 802.1Q VLAN Support v1.8 | ||
| + | [ 5.910000] ### of_selftest(): | ||
| + | [ 5.940000] VFS: Mounted root (squashfs filesystem) readonly on device 31:13. | ||
| + | [ 5.950000] Freeing unused kernel memory: 228k freed | ||
| + | |||
| + | init started: BusyBox v1.19.4 (2019-07-31 13:16:27 CST) | ||
| + | *****************ZTE rcS******************** | ||
| + | call startup scripts here\n | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | rm: can't remove '/ | ||
| + | SOS: FLAG is mtdblock7 | ||
| + | SOS: / | ||
| + | rtiton_flag has [ | ||
| + | content | ||
| + | space usage of / | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | SOS: / | ||
| + | rm: can't remove '/ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | mkdir: can't create directory '/ | ||
| + | mknod: dev/ | ||
| + | killall: syslogd: no process killed | ||
| + | *************ZTE Init Script************* | ||
| + | insmod: can't insert '/ | ||
| + | rmmod: can't unload ' | ||
| + | [ | ||
| + | enter is_fota_update_successed. | ||
| + | find a good block. | ||
| + | last find blk_num = 0 | ||
| + | ****fota_update_flag in /dev/mtd3 is **** | ||
| + | Unable to open pidfile / | ||
| + | ussd is disabled | ||
| + | reboot_schedule is disabled | ||
| + | Create bridge br0.......... | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | |||
| + | SSDK Init OK! | ||
| + | operate done. | ||
| + | |||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | CURRENT WAN MODE:PPP | ||
| + | | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | zte_wifi_dfs_status_process: | ||
| + | goahead initWebs info: webdir is / | ||
| + | webs: Listening for HTTP requests at address 192.168.1.1 | ||
| + | internet.sh is called, the argument is [] | ||
| + | killall: pppoecd: no process killed | ||
| + | killall: udhcpc: no process killed | ||
| + | killall: zte_router: no process killed | ||
| + | killall: udhcpd: no process killed | ||
| + | killall: dnsmasq: no process killed | ||
| + | killall: miniupnpd: no process killed | ||
| + | * daemon not running. starting it now on port 5037 * | ||
| + | enter launch_server server_port is 5037 | ||
| + | launch_server pipe path & pid: / | ||
| + | launch_server pipe path & pid: / | ||
| + | pid=0 and server_port is : 5037 | ||
| + | launch_server temp value: O,K, | ||
| + | |||
| + | * daemon started successfully * | ||
| + | passwd: no record of admin in / | ||
| + | Changing password for admin | ||
| + | New password: | ||
| + | Retype password: | ||
| + | Password for admin changed by admin | ||
| + | call setPortAsAllLAN............ | ||
| + | lan_ip: 192.168.1.1, | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | opms_wan_ifname=usb0 | ||
| + | [ | ||
| + | [ | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | killall: udhcpd: no process killed | ||
| + | killall: dnsmasq: no process killed | ||
| + | begin | ||
| + | middle | ||
| + | else section | ||
| + | mang_num: -1 | ||
| + | list_first_item: | ||
| + | one_num: -1 | ||
| + | ###the format of mac_ip_list is valid### | ||
| + | begin | ||
| + | middle | ||
| + | else section | ||
| + | mang_num: -1 | ||
| + | list_first_item: | ||
| + | one_num: -1 | ||
| + | ###the format of mac_ip_list is valid### | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | ####### | ||
| + | #######end the mtu_set.sh########## | ||
| + | 192.168.1.1255.255.255.0init_dns_ip: | ||
| + | init_dns_ip: | ||
| + | init_dns_ip: | ||
| + | init_dns_ip: | ||
| + | iptables: Index of deletion too big. | ||
| + | enter setVoipPortAsLAN()... | ||
| + | zte_port_status_monitor_create_msg_queue(): | ||
| + | 3 KB/s (146 bytes in 0.041s) | ||
| + | /bin/sh: zte_user_connect: | ||
| + | |||
| + | Sat Jan 1 00:00:00 UTC 2000 | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | adb shell date | ||
| + | Sat Jan 1 00:00:00 CST 2000 | ||
| + | |||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | startsmbfilepwent_internal: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | account_policy_get: | ||
| + | Added user admin. | ||
| + | [ | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | monitor: | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | normal mode! | ||
| + | Please press Enter to activate this console. / | ||
| + | mtdblock15 already mounted! | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | killall: miniupnpd: no process killed | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | killall: miniupnpd: no process killed | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | ************start dos_attack_defender.sh***************** | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | ************end dos_attack_defender.sh***************** | ||
| + | insmod: can't insert '/ | ||
| + | insmod: can't insert '/ | ||
| + | insmod: can't insert '/ | ||
| + | insmod: can't insert '/ | ||
| + | insmod: can't insert '/ | ||
| + | insmod: can't insert '/ | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | iptables: No chain/ | ||
| + | iptables: Chain already exists. | ||
| + | ip6tables: Chain already exists. | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | killall: miniupnpd: no process killed | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | killall: miniupnpd: no process killed | ||
| + | opms_wan_ifname=usb0 | ||
| + | LanIfName=br0 | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). | ||
| + | iptables v1.4.10: Couldn' | ||
| + | |||
| + | Try `iptables -h' or ' | ||
| + | iptables: No chain/ | ||
| + | ************start dos_attack_defender.sh***************** | ||
| + | iptables: No chain/ | ||
| + | ************end dos_attack_defender.sh***************** | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | 00:00:12 UP>> | ||
| + | 00:00:12 UP>> | ||
| + | 2 KB/s (150 bytes in 0.060s) | ||
| + | 3 KB/s (150 bytes in 0.042s) | ||
| + | 3 KB/s (150 bytes in 0.042s) | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | NTFS signature is missing. | ||
| + | Failed to mount '/ | ||
| + | The device '/ | ||
| + | Maybe the wrong device is used? Or the whole disk instead of a | ||
| + | partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around? | ||
| + | /bin/sh: samba_mod_conf.sh: | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | iptables: Bad rule (does a matching rule exist in that chain?). | ||
| + | whitelist=[85.29.0.1+85.29.63.254; | ||
| + | enter add_remote_mgr_fw_items() | ||
| + | add remote manager whitelist done. | ||
| + | remotemr_port_white=[80], | ||
| + | nat wan port for http | ||
| + | add remote manager done. | ||
| + | goto run ping_add_whitelist | ||
| + | ip6tables v1.4.10: iprange: Bad value for " | ||
| + | Try `ip6tables -h' or ' | ||
| + | ip6tables v1.4.10: iprange: Bad value for " | ||
| + | Try `ip6tables -h' or ' | ||
| + | add remote manager whitelist done. | ||
| + | enter add_telnet() | ||
| + | disable telnetd on lan side | ||
| + | open port = [7547], | ||
| + | open port = [7547], | ||
| + | firewall_sys_fw done | ||
| + | insmod: can't insert '/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | iptables v1.4.10: can't initialize iptables table `filter': | ||
| + | Perhaps iptables or your kernel needs to be upgraded. | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | ip6tables: No chain/ | ||
| + | speed limit is disabled, so we need to enable SFE,clear iptable and tc rules | ||
| + | iptables: No chain/ | ||
| + | iptables: No chain/ | ||
| + | RTNETLINK answers: Invalid argument | ||
| + | RTNETLINK answers: Invalid argument | ||
| + | </code> | ||
| </ | </ | ||
| ==== OpenWrt bootlog ==== | ==== OpenWrt bootlog ==== | ||
| <WRAP bootlog> | <WRAP bootlog> | ||
| - | <nowiki> | + | <code> |
| - | </ | + | U-Boot 1.1.4 (May 13 2021 - 05:37:00) |
| - | ===== Notes ===== | + | ap152 - Dragonfly 1.0DRAM: |
| - | //Space for additional notes, links to forum threads | + | sri |
| + | ath_ddr_initial_config(278): | ||
| + | ath_sys_frequency: | ||
| + | Tap values | ||
| + | 128 MB | ||
| + | Top of RAM usable for U-Boot at: 88000000 | ||
| + | Reserving 659k for U-Boot at: 87f58000 | ||
| + | Reserving 192k for malloc() at: 87f28000 | ||
| + | Reserving 44 Bytes for Board Info at: 87f27fd4 | ||
| + | Reserving 36 Bytes for Global Data at: 87f27fb0 | ||
| + | Reserving 128k for boot params() at: 87f07fb0 | ||
| + | Stack Pointer at: 87f07f98 | ||
| + | Now running in RAM - U-Boot at: 87f58000 | ||
| + | Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x15 | ||
| + | flash size 2MB, sector count = 32 | ||
| + | Flash: | ||
| + | *** Warning - bad CRC, using default environment | ||
| + | |||
| + | Power up PLL with outdiv | ||
| + | In: serial | ||
| + | Out: | ||
| + | Err: | ||
| + | Net: | ||
| + | No valid address in Flash. Using fixed address | ||
| + | ath_gmac_enet_initialize: | ||
| + | athr_mgmt_init (MDC/MDIO config):: | ||
| + | Dragonfly | ||
| + | athrs17_reg_init: | ||
| + | Max resets limit reached exiting... | ||
| + | athr_gmac_sgmii_setup SGMII done | ||
| + | : cfg1 0x80000000 cfg2 0x7114 | ||
| + | eth0: 00: | ||
| + | ath_gmac_phy_setup | ||
| + | eth0 up | ||
| + | eth0 | ||
| + | Qualcomm Atheros SPI NAND Driver, Version 0.1 (c) 2014 Qualcomm Atheros Inc. | ||
| + | ath_spi_nand_ecc: | ||
| + | ath_spi_nand_ecc: | ||
| + | zte ath_spi_nand_read_id 0xc8d1 | ||
| + | zte ath_spi_nand_read_id 0xc8d1c8 | ||
| + | zte debug gd 128 oob | ||
| + | ====== NAND Parameters | ||
| + | sc addr = 0x87fa6d10 page(write size) = 0x800 (erase size) block = 0x20000 | ||
| + | Setting 0x181162c0 to 0x4b962100 | ||
| + | Uaztemain: enter into ! | ||
| + | ZTE_InitFotaFlashPara: | ||
| + | zte_getHandOffState: | ||
| + | Hit any key to stop autoboot: | ||
| + | |||
| + | Loading from device 0: ath-spi-nand (offset 0x1800000) | ||
| + | Image Name: MIPS OpenWrt Linux-5.10.138 | ||
| + | | ||
| + | Image Type: MIPS Linux Kernel Image (lzma compressed) | ||
| + | Data Size: 2435565 Bytes = 2.3 MB | ||
| + | Load Address: 80060000 | ||
| + | Entry Point: | ||
| + | ath_spi_nand_page_read : | ||
| + | ## Booting image at 81000000 ... | ||
| + | Image Name: MIPS OpenWrt Linux-5.10.138 | ||
| + | | ||
| + | Image Type: MIPS Linux Kernel Image (lzma compressed) | ||
| + | Data Size: 2435565 Bytes = 2.3 MB | ||
| + | Load Address: 80060000 | ||
| + | Entry Point: | ||
| + | | ||
| + | | ||
| + | No initrd | ||
| + | ## Transferring control to Linux (at address 80060000) ... | ||
| + | ## Giving linux memsize in bytes, 134217728 | ||
| + | |||
| + | Starting kernel ... | ||
| + | |||
| + | [ 0.000000] Linux version 5.10.138 (builder@buildhost) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19685-512e76967f) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 Sat Sep 3 02:55:34 2022 | ||
| + | [ 0.000000] printk: bootconsole [early0] enabled | ||
| + | [ 0.000000] CPU0 revision is: 00019750 (MIPS 74Kc) | ||
| + | [ 0.000000] MIPS: machine is ZTE MF286R | ||
| + | [ 0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0 | ||
| + | [ 0.000000] Initrd not found or empty - disabling initrd | ||
| + | [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. | ||
| + | [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes | ||
| + | [ 0.000000] Zone ranges: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Movable zone start for each node | ||
| + | [ 0.000000] Early memory node ranges | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] | ||
| + | [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480 | ||
| + | [ 0.000000] Kernel command line: console=ttyS0, | ||
| + | [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear) | ||
| + | [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear) | ||
| + | [ 0.000000] Writing ErrCtl register=00000000 | ||
| + | [ 0.000000] Readback ErrCtl register=00000000 | ||
| + | [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off | ||
| + | [ 0.000000] Memory: 120572K/131072K available (6346K kernel code, 599K rwdata, 784K rodata, 1220K init, 214K bss, 10500K reserved, 0K cma-reserved) | ||
| + | [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, | ||
| + | [ 0.000000] NR_IRQS: 51 | ||
| + | [ 0.000000] CPU clock: 775.000 MHz | ||
| + | [ 0.000000] clocksource: | ||
| + | [ 0.000008] sched_clock: | ||
| + | [ 0.008282] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) | ||
| + | [ 0.074810] pid_max: default: 32768 minimum: 301 | ||
| + | [ 0.079805] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.087520] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.097694] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build | ||
| + | [ 0.108427] clocksource: | ||
| + | [ 0.118833] futex hash table entries: 256 (order: -1, 3072 bytes, linear) | ||
| + | [ 0.126103] pinctrl core: initialized pinctrl subsystem | ||
| + | [ 0.135610] NET: Registered protocol family 16 | ||
| + | [ 0.140935] thermal_sys: | ||
| + | [ 0.192114] clocksource: | ||
| + | [ 0.204961] NET: Registered protocol family 2 | ||
| + | [ 0.209762] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) | ||
| + | [ 0.218153] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.227070] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.235171] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.242614] TCP: Hash tables configured (established 1024 bind 1024) | ||
| + | [ 0.249435] UDP hash table entries: 256 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.256373] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear) | ||
| + | [ 0.264013] NET: Registered protocol family 1 | ||
| + | [ 0.268632] PCI: CLS 0 bytes, default 32 | ||
| + | [ 0.278586] workingset: timestamp_bits=14 max_order=15 bucket_order=1 | ||
| + | [ 0.289034] squashfs: version 4.0 (2009/01/31) Phillip Lougher | ||
| + | [ 0.295234] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. | ||
| + | [ 0.307254] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252) | ||
| + | [ 0.317547] pinctrl-single 1804002c.pinmux: | ||
| + | [ 0.324676] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled | ||
| + | [ 0.333519] printk: console [ttyS0] disabled | ||
| + | [ 0.338085] 18020000.uart: | ||
| + | [ 0.347228] printk: console [ttyS0] enabled | ||
| + | [ 0.347228] printk: console [ttyS0] enabled | ||
| + | [ 0.356294] printk: bootconsole [early0] disabled | ||
| + | [ 0.356294] printk: bootconsole [early0] disabled | ||
| + | [ 0.382759] spi-nand spi0.1: GigaDevice SPI NAND was found. | ||
| + | [ 0.388533] spi-nand spi0.1: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 128 | ||
| + | [ 0.399376] 6 fixed-partitions partitions found on MTD device (null) | ||
| + | [ 0.405988] Creating 6 MTD partitions on " | ||
| + | [ 0.410944] 0x000000000000-0x0000000a0000 : " | ||
| + | [ 0.418233] 0x0000000a0000-0x000000120000 : " | ||
| + | [ 0.425556] 0x000000120000-0x0000001a0000 : " | ||
| + | [ 0.432901] 0x0000001a0000-0x000001800000 : " | ||
| + | [ 0.469314] 0x000001800000-0x000001c00000 : " | ||
| + | [ 0.481371] 0x000001c00000-0x000008000000 : " | ||
| + | [ 0.627165] spi-nor spi0.0: gd25q16 (2048 Kbytes) | ||
| + | [ 0.632074] 3 fixed-partitions partitions found on MTD device spi0.0 | ||
| + | [ 0.638669] Creating 3 MTD partitions on " | ||
| + | [ 0.643646] 0x000000000000-0x0000000a0000 : " | ||
| + | [ 0.650519] 0x0000000a0000-0x0000000c0000 : " | ||
| + | [ 0.657012] 0x0000000c0000-0x000000200000 : " | ||
| + | [ 0.666148] Concatenating MTD devices: | ||
| + | [ 0.670033] (0): " | ||
| + | [ 0.673143] (1): " | ||
| + | [ 0.676202] into device " | ||
| + | [ 0.679918] 1 fixed-partitions partitions found on MTD device ubi-concat | ||
| + | [ 0.686856] Creating 1 MTD partitions on " | ||
| + | [ 0.692187] 0x000000000000-0x000007a60000 : " | ||
| + | [ 1.386364] switch0: Atheros AR8337 rev. 2 switch registered on mdio.0 | ||
| + | [ 2.043633] ag71xx 19000000.eth: | ||
| + | [ 2.054918] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii | ||
| + | [ 2.063482] NET: Registered protocol family 10 | ||
| + | [ 2.075060] Segment Routing with IPv6 | ||
| + | [ 2.078954] NET: Registered protocol family 17 | ||
| + | [ 2.083694] bridge: filtering via arp/ | ||
| + | [ 2.097085] 8021q: 802.1Q VLAN Support v1.8 | ||
| + | [ 2.105380] PCI host bridge / | ||
| + | [ 2.111703] | ||
| + | [ 2.117152] | ||
| + | [ 2.122733] PCI host bridge to bus 0000:00 | ||
| + | [ 2.126974] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff] | ||
| + | [ 2.134102] pci_bus 0000:00: root bus resource [io 0x0000] | ||
| + | [ 2.139859] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] | ||
| + | [ 2.146878] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] | ||
| + | [ 2.155118] pci 0000: | ||
| + | [ 2.161352] pci 0000: | ||
| + | [ 2.168500] pci 0000: | ||
| + | [ 2.175356] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated | ||
| + | [ 2.182255] pci 0000: | ||
| + | [ 2.193512] UBI: auto-attach mtd9 | ||
| + | [ 2.196962] ubi0: attaching mtd9 | ||
| + | [ 4.974978] ubi0: scanning is finished | ||
| + | [ 5.013862] ubi0: attached mtd9 (name " | ||
| + | [ 5.019542] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes | ||
| + | [ 5.026680] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 | ||
| + | [ 5.033707] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 | ||
| + | [ 5.040890] ubi0: good PEBs: 977, bad PEBs: 2, corrupted PEBs: 0 | ||
| + | [ 5.047100] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128 | ||
| + | [ 5.054571] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1798954104 | ||
| + | [ 5.064007] ubi0: available PEBs: 0, total reserved PEBs: 977, PEBs reserved for bad PEB handling: 18 | ||
| + | [ 5.073630] ubi0: background thread " | ||
| + | [ 5.082803] block ubiblock0_0: | ||
| + | [ 5.088480] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem | ||
| + | [ 5.119195] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. | ||
| + | [ 5.133277] Freeing unused kernel memory: 1220K | ||
| + | [ 5.137954] This architecture does not have kernel memory protection. | ||
| + | [ 5.144638] Run /sbin/init as init process | ||
| + | [ 5.964212] init: Console is alive | ||
| + | [ 5.968162] init: - watchdog - | ||
| + | [ 7.605099] kmodloader: loading kernel modules from / | ||
| + | [ 7.746631] usbcore: registered new interface driver usbfs | ||
| + | [ 7.752430] usbcore: registered new interface driver hub | ||
| + | [ 7.758003] usbcore: registered new device driver usb | ||
| + | [ 7.772889] ehci_hcd: USB 2.0 ' | ||
| + | [ 7.782348] ehci-fsl: Freescale EHCI Host controller driver | ||
| + | [ 7.789628] ehci-platform: | ||
| + | [ 7.795421] ehci-platform 1b000000.usb: | ||
| + | [ 7.801308] ehci-platform 1b000000.usb: | ||
| + | [ 7.809577] ehci-platform 1b000000.usb: | ||
| + | [ 7.842154] ehci-platform 1b000000.usb: | ||
| + | [ 7.849386] hub 1-0:1.0: USB hub found | ||
| + | [ 7.854045] hub 1-0:1.0: 1 port detected | ||
| + | [ 7.858929] ehci-platform 1b400000.usb: | ||
| + | [ 7.864842] ehci-platform 1b400000.usb: | ||
| + | [ 7.873069] ehci-platform 1b400000.usb: | ||
| + | [ 7.902136] ehci-platform 1b400000.usb: | ||
| + | [ 7.909335] hub 2-0:1.0: USB hub found | ||
| + | [ 7.914033] hub 2-0:1.0: 1 port detected | ||
| + | [ 7.921445] kmodloader: done loading kernel modules from / | ||
| + | [ 7.939391] init: - preinit - | ||
| + | [ 8.489622] usb 1-1: new high-speed USB device number 2 using ehci-platform | ||
| + | [ 8.962381] random: procd: uninitialized urandom read (4 bytes read) | ||
| + | [ 9.383690] random: jshn: uninitialized urandom read (4 bytes read) | ||
| + | [ 9.465312] random: jshn: uninitialized urandom read (4 bytes read) | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | Press the [f] key and hit [enter] to enter failsafe mode | ||
| + | Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | Please press Enter to activate this console. | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | </ | ||
| + | </WRAP>\\ | ||
| - | * ... | ||
| ===== Quirks and known issues ===== | ===== Quirks and known issues ===== | ||
| - | - It was observed, that CH340-based USB-UART converters output garbage | + | - It was observed, that CH340-based USB-UART converters output garbage during U-boot phase of system boot. At least CP2102 is known to work properly. |
| - | | + | |
| - | | + | - Kernel partition size is increased to 4MB compared to stock 3MB, to accomodate future kernel updates, at this moment OpenWrt 5.10 kernel image is at 2.5MB which is dangerously close to the limit. This has no effect on booting the system - but keep that in mind when reassembling an image to restore stock firmware. |
| - | - Kernel partition size is increased to 4MB compared to stock 3MB, to | + | |
| - | | + | - uqmi seems to be unable to change APN manually, so please use the one you used before in stock firmware first. If you need to change it, please use protocok ' |
| - | | + | |
| - | | + | |
| - | | + | |
| - | - uqmi seems to be unable to change APN manually, so please use the one | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| echo -ne ' | echo -ne ' | ||
| - | - The only usable LED as a " | + | |
| - | | + | - The only usable LED as a " |
| - | | + | |
| - | - Wi-Fi LED currently doesn' | + | - Wi-Fi LED currently doesn' |
| - | | + | |
| - | | + | - GPIO5 used for modem reset is a suicide switch, causing a hardware reset of whole board, not only the modem. It is attached to gpio-restart driver, to restart the modem on reboot as well, to ensure |
| - | | + | |
| - | | + | - Modem, as in MF283+, exposes root shell over ADB - while not needed for OpenWrt operation at all - have fun lurking around. The same modem module is used as in older MF286. |
| - | | + | |
| - | - GPIO5 used for modem reset is a suicide switch, causing a hardware | + | |
| - | | + | |
| - | | + | |
| - | QMI connectivity after reboot, which tends to fail otherwise. | + | |
| - | - Modem, as in MF283+, exposes root shell over ADB - while not needed | + | |
| - | | + | |
| - | | + | |
| | | ||
| ===== Tags ===== | ===== Tags ===== | ||
| <WRAP BOX> | <WRAP BOX> | ||
| - | FIXME //Add tags below, then remove this fixme.// | + | FIXME //Add tags below, then remove this fixme. I don't know which tags are applicable, so pls help thx.// |
| </ | </ | ||
| [[meta: | [[meta: | ||
| {{tag> | {{tag> | ||