Now, where Bintec-Elmeg left the planet, any (planned) support for their devices?
Are there any working devices?
Latest Firmware are available here ... sadly no sources.
Unless somebody who owns a device, is familiar with hardware debugging and willing to write low level code to make that device work with OpenWRT the answer is almost certainly "no".
1 Like
I've got a retired be.IP plus v2 (aka Digitalisierungsbox) that I wanted to have a look inside for ages. I took your post as reason to do so:
This box is Lantiq-based, but I don't know yet which SoC as I didn't remove the heat sink. There is 1Gbit (=128MiB) of RAM (ESMT M14D1G1664A), 256Mbit (=32MiB) of NOR Flash (MX29GL256FHT2I) and a bunch of other ICs, most notably:
- Lattice DSP
- Cologne Chip ISDN controller
- 2x Lantiq Dual-SLIC (SLL7U)
- Lantiq SLLE2 (Line Driver?)
- Atheros WiFi (judging from the boot log)
There is a soldered header for the serial console - 115200 baud, pinout is Tx NC Rx NC GND from left to right with the LEDs facing to the front. While I could interact with the firmware, I'm unable to enter boot monitor mode.
Now the bad news:
- Not U-Boot-based, but some bintec bootloader
- Not Linux-based, but BOSS
- Probably no drivers for the telephony features, but the ISDN chip is supported by mISDN.
- Probably no or difficult support for the DSP
This is the end of my adventure with this device as I do not have much interest in tinkering with this uncommon hardware/software combo.
This is the boot log:
### be.IP_plus (Hardware-Rev. 1.0, Firmware-Rev. 1.9) ###
DDRAM Tune ... Quick ... Echo ... Write ... Read (RL:23 RU:23 WL:63 WU:64)
CPU Check ... passed (MIPS 34KEc [MT] @ 500/250.0 MHz)
SDRAM Check ... passed (128 MByte)
FLASH Check passed (32 MByte)
### Selftest passed ###
[No boottag for operation mode]
[Main Operation Mode: 2 PBX]
Press <sp> for boot monitor or any other key to boot system
Booting Image from Flash ROM
Checking image ... OK
Writing image to RAM (Release 10.2.9.103) ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. OK (24395496 bytes)
Booting BOSS...
boss image started at 0x2e300
[boottag found for operation mode: 2 / PBX]
[Operation Mode: 2 PBX]
BOSS MIPS kernel v2.0 (be.IP plus)
Copyright (c) 1996-2019 by bintec elmeg GmbH
Version V.10.2.9.103 IPv6, IPSec, PBX from 2021/06/30 00:00:00
The system is coming up.
Speed index... 332.80 MIPS
Collecting Entropy........................................
Installed modules:
Slot: BoardId SerialNo
Read Cmd MBX spurious wakup - no data.
0: SYS-PBX-V OK
1: GETH5 OK
2: ISDN2N OK
3: VDSL OK
4: FXS4 OK
6: USB2 OK
7: WLAN-ATH OK
InstallModules = 0x7
The system is ready.
AUTOEXEC:
1 date Fri May 16 11:42:43 2025 done
1 mountd background
1 configd SystemId: BE2CCN120010214 Cfg: /boot done
4 dslvrxd background
4 acctd done
5 sysconfigd background
5 usbd background
7 vfaxd background
9 comd background
10 isdnd background
10 stackd background
19 ethoad background
19 pppoad background
19 rpoad background
30 brd background
30 ipd background
51 telnetd background
51 alertd background
51 telnetd6 background
51 stfd background
51 snmpd background
52 httpd background
52 syslogd background
65 mps background
68 pppoed background
69 nilsd background
70 pppd background
70 radiusd background
70 l2tpd background
90 timed background
97 dnsd background
97 alived background
97 scheduled background
97 watchd background
99 updated background
99 vectoringd background
99 authd background
99 supplicantd background
99 vcapid background
99 efmoamd background
99 ddnsd background
99 bootpd background
BOOTP: config already set
99 resolvd background
99 serviced background
99 ldapd background
99 dhcp6d background
99 lispd background
99 ipsecd background
99 voipconvd background
99 mon4ged background
99 tapid background
99 amdaemon background
99 fwud background
99 sshd background
99 traced background
99 upnpd background
99 iwud background
99 vmd background
99 capwapd background
99 caad background
99 wtpd background
99 tr069d background
Welcome to be.IP plus version V.10.2.9.103 IPv6, IPSec, PBX from 2021/06/30 00:00:00
systemname is be.ip_plus, location
Login:
3 Likes
Ax access point is qualcommax with signed fw (not trusted boot), it is really a whole zoo to generalize on all their series.
@armSeb has got this far:
I've got a few sitting around, mainly rs123, rs120 and rs353 from some old leased line installations.
I've got them as my employer has been installing Bintec for over a decade before they were no more.
Issues we've had with hardware:
Dead ethernet
Corrupted nand
Other weird things.
If anyone is interested in bringing these up and stuff on Openwrt I'm happy to ship what I've got to another volunteer for helping bring these devices onboard.
2 Likes