Generic China "on-wall" router YTXC-958K 7628N

Thank's for your information ...

..then try to press or hold RESET or any other button randomly on powerup cycle...
.. to clear nvram ..

Hello, I have the same as artas26, nothing helps to press the buttons when turning on the power, how to upload this soft via serial cable or blutooth YTXC958
can this one be usb serial

PL2303HX chip,
LEDs: Power, TX, RX
pins TX, RX, 3.3V, 5V, GND,
works perfectly with our Arduino PRO MINI modules
PRODUCT CODE 0081

Yes, this converter can be used.
You must connect GND RX and TX to the router board.

Here is the picture:

The 3 pins on up - right corner on main board is serial port.
set serial port speed 115200,n,8

Would you can send output from your console ..??

hi sorry
router 3 pins RX0+ RX0- TX0+ TX0- GND a usb GND = GND RXD = TX0+ TXD = RX0+ yes?

No ...
Three free unsoldered pins ..

http://195.28.90.62/dohc/ostatne/YTXC-985K/DSCN4976.JPG
http://195.28.90.62/dohc/ostatne/YTXC-985K/DSCN5223.JPG

ok and I connected with other pins

I connected and it gets only the bushes through the hyperterminal

IMG_20201013_210615

So, it's alive ...

try to use putty ...
and try different serial port speed

I have no Windows ... can't help with it ..

ok serial speed 57600

[04020C0A][04020C0D]
DDR Calibration DQS reg = 00008786


U-Boot 1.1.3 (Dec 25 2017 - 22:59:38)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Dec 25 2017  Time:22:59:38
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 3
                                                                              0

3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.167
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1565970 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.167 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10911-c155900f66)) #0 Wed Jan 29 16:05:35 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is YTXC-958 Mediatek MT7628NN OnWall Router
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80481740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00040007
[    0.000000] Readback ErrCtl register=00040007
[    0.000000] Memory: 58820K/65536K available (3921K kernel code, 182K rwdata, 500K rodata, 1212K init, 208K bss, 6716K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000011] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.015379] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.087613] pid_max: default: 32768 minimum: 301
[    0.096966] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.109935] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.129493] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.148873] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.160980] pinctrl core: initialized pinctrl subsystem
[    0.173812] NET: Registered protocol family 16
[    0.203508] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.214727] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.225854] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.241864] clocksource: Switched to clocksource MIPS
[    0.252994] NET: Registered protocol family 2
[    0.262531] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.276237] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.288755] TCP: Hash tables configured (established 1024 bind 1024)
[    0.301452] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.312922] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.325536] NET: Registered protocol family 1
[    0.337433] Crashlog allocated RAM at address 0x3f00000
[    0.349309] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.367990] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.379433] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.409301] io scheduler noop registered
[    0.416975] io scheduler deadline registered (default)
[    0.428004] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.443425] console [ttyS0] disabled
[    0.450394] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.468325] console [ttyS0] enabled
[    0.468325] console [ttyS0] enabled
[    0.482019] bootconsole [early0] disabled
[    0.482019] bootconsole [early0] disabled
[    0.499303] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.525903] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.535460] 4 fixed-partitions partitions found on MTD device spi0.0
[    0.548050] Creating 4 MTD partitions on "spi0.0":
[    0.557554] 0x000000000000-0x000000030000 : "u-boot"
[    0.568339] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.579777] 0x000000040000-0x000000050000 : "factory"
[    0.590762] 0x000000050000-0x000000800000 : "firmware"
[    0.604714] 2 uimage-fw partitions found on MTD device firmware
[    0.616500] Creating 2 MTD partitions on "firmware":
[    0.626366] 0x000000000000-0x00000017e552 : "kernel"
[    0.637150] 0x00000017e552-0x0000007b0000 : "rootfs"
[    0.647852] mtd: device 5 (rootfs) set to be root filesystem
[    0.660602] 1 squashfs-split partitions found on MTD device rootfs
[    0.672918] 0x000000600000-0x0000007b0000 : "rootfs_data"
[    0.685255] libphy: Fixed MDIO Bus: probed
[    0.704536] rt3050-esw 10110000.esw: link changed 0x00
[    0.715587] mtk_soc_eth 10100000.ethernet: generated random MAC address ba:ac:c3:69:80:3d
[    0.732570] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.750780] NET: Registered protocol family 10
[    0.764015] Segment Routing with IPv6
[    0.771375] NET: Registered protocol family 17
[    0.780294] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.805975] 8021q: 802.1Q VLAN Support v1.8
[    0.823219] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    0.843849] Freeing unused kernel memory: 1212K
[    0.852845] This architecture does not have kernel memory protection.
[    1.986194] init: Console is alive
[    1.993261] init: - watchdog -
[    2.451879] random: fast init done
[    5.038944] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    5.186416] usbcore: registered new interface driver usbfs
[    5.197461] usbcore: registered new interface driver hub
[    5.208125] usbcore: registered new device driver usb
[    5.223873] exFAT: Version 1.2.9
[    5.261710] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.283478] SCSI subsystem initialized
[    5.296249] ehci-platform: EHCI generic platform driver
[    5.316981] phy phy-10120000.usbphy.0: remote usb device wakeup disabled
[    5.330276] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz
[    5.340651] ehci-platform 101c0000.ehci: EHCI Host Controller
[    5.352081] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    5.367896] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    5.401914] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    5.415398] hub 1-0:1.0: USB hub found
[    5.423276] hub 1-0:1.0: 1 port detected
[    5.434536] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.448521] ohci-platform: OHCI generic platform driver
[    5.459203] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[    5.472734] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[    5.488522] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[    5.566854] hub 2-0:1.0: USB hub found
[    5.574788] hub 2-0:1.0: 1 port detected
[    5.589459] usbcore: registered new interface driver usb-storage
[    5.602253] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.627120] init: - preinit -
[    6.792212] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.048473] mount_root: loading kmods from internal overlay
[   10.102946] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[   10.118245] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[   11.304912] jffs2: notice: (417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 142 of xdatum (0 unchecked, 140 orphan) and 229 of xref (143 dead, 74 orphan) found.
[   11.337783] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[   11.358010] block: extroot: not configured
[   11.516302] jffs2: notice: (415) jffs2_build_xattr_subsystem: complete building xattr subsystem, 142 of xdatum (0 unchecked, 140 orphan) and 229 of xref (143 dead, 74 orphan) found.
[   12.242152] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[   12.262400] block: extroot: not configured
[   12.271785] mount_root: switching to jffs2 overlay
[   12.321803] overlayfs: upper fs does not support tmpfile.
[   12.338652] urandom-seed: Seeding with /etc/urandom.seed
[   12.470229] procd: - early -
[   12.476898] procd: - watchdog -
[   13.226360] procd: - watchdog -
[   13.232997] procd: - ubus -
[   13.413643] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.506606] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.519810] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.533587] procd: - init -
Please press Enter to activate this console.
[   14.397239] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.617356] device-mapper: ioctl: 4.37.0-ioctl (2017-09-20) initialised: dm-devel@redhat.com
[   14.683231] Key type dns_resolver registered
[   14.742279] RPC: Registered named UNIX socket transport module.
[   14.754062] RPC: Registered udp transport module.
[   14.763384] RPC: Registered tcp transport module.
[   14.772704] RPC: Registered tcp NFSv4.1 backchannel transport module.
[   14.837773] ntfs: driver 2.1.32 [Flags: R/O MODULE].
[   14.917628] urngd: v1.0.2 started.
[   14.937767] Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
[   14.991083] NFS: Registering the id_resolver key type
[   15.001188] Key type id_resolver registered
[   15.009491] Key type id_legacy registered
[   15.060589] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   15.114029] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[   15.129089] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[   15.174891] ip_tables: (C) 2000-2006 Netfilter Core Team
[   15.213094] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[   15.343102] random: crng init done
[   15.349842] random: 7 urandom warning(s) missed due to ratelimiting
[   15.372598] usbcore: registered new interface driver usblp
[   15.424223] xt_time: kernel timezone is -0000
[   15.584990] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[   16.633954] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   16.645767] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   16.691919] mt76_wmac 10300000.wmac: firmware init done
[   16.887799] PPP generic driver version 2.4.2
[   16.909539] NET: Registered protocol family 24
[   16.934098] kmodloader: done loading kernel modules from /etc/modules.d/*
[   29.195893] device eth0 entered promiscuous mode
[   29.226390] br-lan: port 1(eth0.1) entered blocking state
[   29.237160] br-lan: port 1(eth0.1) entered disabled state
[   29.248261] device eth0.1 entered promiscuous mode
[   29.358357] br-lan: port 1(eth0.1) entered blocking state
[   29.369122] br-lan: port 1(eth0.1) entered forwarding state
[   29.380412] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   30.269376] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   33.857992] NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
[   33.873630] NFSD: starting 10-second grace period (net 80477168)


:slight_smile: hmm and how to install soft from you now?

maybe that way

https://www.youtube.com/watch?v=V-ltOlzC0Hw

what ip static?

OK .. "my" software is inside ... and working ...

[    0.000000] MIPS: machine is YTXC-958 Mediatek MT7628NN OnWall Router

Now you must try to log in ..
press ENTER or something else ..
nd try default username and password ... root / root
(I'm not sure, look at openwrt documentation)

and then try ifconfig command

nothing can be written, it just takes what I sent and that's it

You use hyperterm or putty ..??

If you have connected serial port correctly,
then you can "type" any command into your router .. (via serial link) ..
It is the same as command prompt on your PC ..

Your router waiting for "ENTER" ...

OK ..

I'm connect my router, reset it to defaults..
(hold RESET button 5sec or more, for factory reset)

Default IP is 192.168.1.1 ..
connect TP cable, set fixed IP on your PC 192.168.1.100 netmask 255.255.255.0
and try web-browser ....

WIFI is disabled as default ..!!!

Stops at and nothing else can be entered

[   72.655990] NFSD: starting 10-second grace period (net 80477168)

does not go through the browser either

at the beginning I uploaded soft from you through the browser but it was different and now there is a change of reset-wifi and wifi-reset buttons and then I could not connect

as I see ...
you have WPS RESET WIFI version .. on cover ..

then try to connect serial cable ...
and after "start" ..
try to hold WIFI button ..


root@OpenWrt:/# FACTORY RESET
[  509.413282] nfsd: last server has exited, flushing export cache
[  509.804388] br-lan: port 1(eth0.1) entered disabled state
[  509.833639] device eth0.1 left promiscuous mode
[  509.842854] br-lan: port 1(eth0.1) entered disabled state
[  509.868655] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
[  510.249723] device eth0 left promiscuous mode
[  514.277816] reboot: Restarting system
[04020C0B][04020C0A]
DDR Calibration DQS reg = 00008686


U-Boot 1.1.3 (Dec 25 2017 - 22:59:38)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
============================================ 
Ralink UBoot Version: 4.3.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Dec 25 2017  Time:22:59:38
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3
 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.167
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1565970 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.188833] random: procd: uninitialized urandom read (4 bytes read)
- failsafe button reset was pressed -
- failsafe -
[   10.169586] random: dropbearkey: uninitialized urandom read (32 bytes read)
Generating 1024 [   10.185061] random: dropbearkey: uninitialized urandom read (32 bytes read)
bit rsa key, this may take a while...
[   10.933898] random: dropbearkey: uninitialized urandom read (32 bytes read)
Public key portion is:
ssh-rsa [   10.955756] random: dropbear: uninitialized urandom read (32 bytes read)
AAAAB3NzaC1yc2EAAAADAQABAAAAgQCXONQ4bM50Lo4ESzbSVBQ8/2vFpQ/hPJN7YzCBH3JYo0M1k46kSXwSATHEDd3SFwvDg/IE0c7KMkQQRvyCkdAye/DQjv+VA2/DhXdRJM/Av5VEiFBv0ICKc7SFxklq4yu0SNmy0rzWch/8CEx4s26kcdBottAq5VOXKmYRQBT0wQ== root@(none)
Fingerprint: sha1!! 9d:d1:d6:3e:d4:1b:63:ca:fb:3c:60:3b:df:9d:d9:1c:60:2e:04:30


BusyBox v1.30.1 () built-in shell (ash)

ash: can't access tty; job control turned off
  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.1, r10911-c155900f66
 -----------------------------------------------------
================= FAILSAFE MODE active ================
special commands:
* firstboot          reset settings to factory defaults
* mount_root     mount root-partition with config files

after mount_root:
* passwd                         change root's password
* /etc/config               directory with config files

for more help see:
https://openwrt.org/docs/guide-user/troubleshooting/
- failsafe_and_factory_reset
- root_password_reset
=======================================================

root@(none):/#

after holding the reset, I have something like this, but I do not mopge anything

You can't type anything ..??

Please check serial connection ..

try to use firstboot command to reset it to defaults ....

Well, I can't enter anything

then try check serial conection ..
PIN3 is GND ..

how to check ?