Adding OpenWrt support for Zyxel DX5401-B1

intraxit · July 13, 2024, 3:19pm

Hi OW-community,

I am trying to run OpenWrt or Zyxel stock fw on the TM-T54 (Zyxel DX5401-B1).

I have ser conn to the board, but TM has made a real effort to lock everything down so not much luck sofar, but not giving up ...
I have tried few metasploit modules to get a root shell, but v5.17 seems not vulnerable!
Have read the other threads about flashing other TM zyxel routers and found really interesting stuff.
Now I see someone has pushed source code for this board onto gitbub:

Looks promising... Anyone else here interested to take a look at this ?

brada4 · July 13, 2024, 3:25pm

If it is broadcom then totally no. At least look at chips, every broadcom means unsupportable function.

frollic · July 13, 2024, 3:26pm

Search is a cool feature...

intraxit · July 13, 2024, 3:40pm

Saw that one, but sems dead...
@mod: you can merge threads if necessary !

frollic · July 13, 2024, 3:42pm

Saw, but didn't read ?

No one here will touch a Broadcom device even with a 10 foot pole.

Bury this thread, like the old one.

intraxit · July 13, 2024, 5:01pm

Maybe you had little too much frollic ?

brada4 · July 13, 2024, 5:05pm

github.com

HandyMenny/DX5401_FW/blob/19148827d10065dc5bde49ff233a177113706f93/.config#L22


      
          CONFIG_ZYXEL_FIRMWARE_VERSION="V5.17(ABXA.4)C0"
          CONFIG_ZYXEL_FIRMWARE_VERSION_EXT=""
          CONFIG_ZYXEL_FIRMWARE_ID="ABXA"
          CONFIG_ZYXEL_GUI_PATCH_DIR="ZyXEL_Generic"
          
          #
          # Build system options
          #
          CONFIG_ZYXEL_OPENWRT_14=y
          CONFIG_IGNORE_OPENWRT_GEN_FILES=y
          CONFIG_CUSTOM_KCONFIG_PREFIX="bcmsdk-502L07P2-arm-ABYO-"
          CONFIG_CUSTOM_KPATCH_PREFIX="bcmsdk-502L07P2-"
          
          #
          # Default MRD information
          #
          CONFIG_MRD_PROVINCE_NAME="STD"
          CONFIG_MRD_VENDOR_NAME="Zyxel Communications Corp."
          CONFIG_MRD_PRODUCT_NAME="DX5401-B0"
          CONFIG_MRD_SERIAL_NO="S090Y00000000"
          CONFIG_MRD_MAIN_FEATURE_BIT=0

Looks very promising as in just promising forever.

intraxit · July 14, 2024, 10:36pm

So what ?

brada4 · July 14, 2024, 11:16pm

Any indications your router supports EFI?

saladin · October 31, 2024, 7:27pm

I got the router today, it is branded under Zyxel T54 which I thought it is EX5601, till I connected the serial and I realized that SOC = Broadcom

It is a dead-end , unfortunately,

The good thing is I can see CEF commands and I learned something new!
The bad news are: No hope from the router to run full OpenWrt, so I would put it beside its sisters and brothers of routers I have with Broadcom SOC.

Hope in the near future some miracle may happen and Broadcom get fully supported by OpenWrt !

intraxit · November 1, 2024, 5:27pm

Maybe you can help flashing stock firmware on this one ?

saladin · November 2, 2024, 2:32pm

I did not understand your question fully,
Can you clarify?

Do you need a NAND dump of flash stock firmware?

intraxit · November 2, 2024, 3:27pm

I would like to debrand and flash stock firmware.

The bootloader (cfe) is locked and I'm trying to flash through serial console.

No luck sofar!

psherman · November 4, 2024, 8:13pm

Since this device is not supported by OpenWrr, you will need to ask the vendor (or firmware maintainer) for help. We cannot offer support here since the device does not and cannot run not official OpenWrt.