The ZTE ZXHN H368N is supplied to customers in The Netherlands using ADSL2+ or VDSL2 (optionally with bonding) from the KPN ISP. Their marketing-friendly name is “Experia Box V9”, as is printed on the front of the device. It seems to be a generic hardware design by ZTE with minor modifications and a unique series (In this case it's H368N V1.0 as printed on the PCB), as to make it look like it was purposely made for one customer. It's much like the F660 and H201L models.
Further research indicates that ZTE internally sees the H368N as the H168M, or simply have one model with two names.
Please note that this is a work in progress. The targets to support OpenWrt on this device are as follows:
Not supported.
Describe if there are any ongoing activities that might lead to OpenWrt support.
SoC | Ram | Flash | Network | USB | Serial | JTag |
---|---|---|---|---|---|---|
Broadcom BCM63168@400MHz | 128MiB | 2x16MiB | 5 x 1000 | Yes | Yes | No |
This device contains support for VoIP, POTS failover, ADSL2+, VDSL2 and pair bonding. Chips involved:
Find out flash layout, then add the flash layout table here. Flash dumps have been made but not analysed yet.
Please check out the article Flash layout. It contains examples and explanations that describe how to document the flash layout.
ZTE ZXHN H368N Flash Layout | |||||
---|---|---|---|---|---|
Layer0 | spi0.0: MX25L12845E 16384KiB |
This device has no standard firmware upgrade capabilities out of the box as the ISP that supplies them removed the option from the firmware.
A CFE recovery page via HTTP is usable in recovery mode. Serial or TFTP uploads not possible at this point, JTAG will never be possible.
Note: Reset router to factory defaults if it has been previously configured.
This device has a HTTP server built in to the CFE. Press and hold the reset button on the back and power on. Once the power LED goes from green to red, you are in recovery mode. At this point, no serial console for CFE is known to work, so if you mess up the CFE as well, you'll have to desolder the flash chips and program the chips using a SPI interface. JTAG is not possible on this device, no pads or traces for JTAG can be found on the PCB.
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Please fill in real values for this device, then remove the EXAMPLEs
The default network configuration is:
Interface Name | Description | Default configuration |
---|---|---|
br-lan | EXAMPLE LAN & WiFi | EXAMPLE 192.168.1.1/24 |
vlan0 (eth0.0) | EXAMPLE LAN ports (1 to 4) | EXAMPLE None |
vlan1 (eth0.1) | EXAMPLE WAN port | EXAMPLE DHCP |
wl0 | EXAMPLE WiFi | EXAMPLE Disabled |
Please fill in real values for this device, then remove the EXAMPLEs
Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on.
Port | Switch port |
---|---|
Internet (WAN) | EXAMPLE 4 |
LAN 1 | EXAMPLE 3 |
LAN 2 | EXAMPLE 2 |
LAN 3 | EXAMPLE 1 |
LAN 4 | EXAMPLE 0 |
→ hardware.button on howto use and configure the hardware button(s).
The ZTE ZXHN H368N has the following buttons:
BUTTON | Event |
---|---|
Reset | reset |
Eco mode | - |
Wireless on/off. | - |
WPS. | - |
Instruction set | MIPS |
---|---|
Vendor | ZTE |
bootloader | cfe |
System-On-Chip | BCM63168 family |
CPU @Frq | MIPS @400MHz |
Flash size | 16 MiB per chip (has two) |
Flash Chip | both: MX25L12845E SPI Flash |
RAM size | 1x 128 MiB |
RAM Chip | Micron D9LHT, DDR2-800 |
Wireless No1 | SoC-integrated 802.11b/g/n |
switch | Realtek RTL8367RB |
Modem | VDSL2 and ADSL2+ |
USB | 1 x 2.0 |
Serial | Yes |
JTAG | No |
Front:
Insert photo of front of the casing
Back:
Insert photo of back of the casing
Backside label:
Insert photo of backside label
Note: This will void your warranty!
Main PCB:
Insert photo of PCB
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device:
Insert photo of PCB with markings for serial port
The serial port is located between the DRAM and the 802.11 antenna next to the main SoC. The pin closest to the CPU is +3v3, the two pins closest to the edge are ground. Pin one is marked on the PCB with a nice “1”.
Serial connection parameters for ZTE ZXHN H368N | 115200, 8N1 |
---|
This device has no JTAG exposed!
HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS STRF 400H PHYE DDR2 SIZ4 SIZ3 SIZ2 DINT USYN LSYN MFAS LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN ++++ HEAD HEAD FIND MGIC LOAD
COPY HERE THE BOOTLOG ONCE OpenWrt IS INSTALLED AND RUNNING