kocoman
September 16, 2021, 7:55am
1
i have ZyXEL NBG6716 and want to use the ath79 current version 21
my flash size is
[ 0.923740] m25p80 spi0.0: found mx25l3205d, expected m25p80
[ 0.930023] m25p80 spi0.0: mx25l3205d (4096 Kbytes)
[ 0.971735] nand: device found, Manufacturer ID: 0xad, Chip ID: 0xf1
[ 0.978219] nand: Hynix NAND 128MiB 3,3V 8-bit
[ 0.982725] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
i look at below
ath79: add support for ZyXEL NBG6716
committed 09:30AM - 23 Oct 19 UTC
Attention: Kernel partition size has been enlarged to 4MB.
To switch, you must u… pdate to latest ar71xx-nand snapshort and flash the
sysupgrade-4M-Kernel.bin:
zcat openwrt-ath79-nand-zyxel_nbg6716-squashfs-sysupgrade-4M-Kernel.bin | mtd -r -e ubi write - firmware; reboot -f
You will end up with a fresh config if you do not inject config into the image.
The NBG6716 may come with 128MB or 256MB NAND. ar71xx was able to use all, but
ath79 can only use the first 128MB. Therefore the complete NAND needs to be
overwritten. If not, the old UBI may make problems and lead to reboot loop.
Access the real u-boot shell:
ZyXEL uses a proprietary loader/shell on top of u-boot: "ZyXEL zloader v2.02"
When the device is starting up, the user can enter the the loader shell
by simply pressing a key within the 3 seconds once the following string
appears on the serial console:
| Hit any key to stop autoboot: 3
The user is then dropped to a locked shell.
|NBG6716> HELP
|ATEN x[,y] set BootExtension Debug Flag (y=password)
|ATSE x show the seed of password generator
|ATSH dump manufacturer related data in ROM
|ATRT [x,y,z,u] RAM read/write test (x=level, y=start addr, z=end addr, u=iterations)
|ATGO boot up whole system
|ATUR x upgrade RAS image (filename)
|NBG6716>
In order to escape/unlock a password challenge has to be passed.
Note: the value is dynamic! you have to calculate your own!
First use ATSE $MODELNAME (MODELNAME is the hostname in u-boot env)
to get the challange value/seed.
|NBG6716> ATSE NBG6716
|012345678901
This seed/value can be converted to the password with the help of this
bash script (Thanks to http://www.adslayuda.com/Zyxel650-9.html authors):
- tool.sh -
ror32() {
echo $(( ($1 >> $2) | (($1 << (32 - $2) & (2**32-1)) ) ))
}
v="0x$1"
a="0x${v:2:6}"
b=$(( $a + 0x10F0A563))
c=$(( 0x${v:12:14} & 7 ))
p=$(( $(ror32 $b $c) ^ $a ))
printf "ATEN 1,%X\n" $p
- end of tool.sh -
|# bash ./tool.sh 012345678901
|
|ATEN 1,879C711
copy and paste the result into the shell to unlock zloader.
|NBG6716> ATEN 1,0046B0017430
If the entered code was correct the shell will change to
use the ATGU command to enter the real u-boot shell.
|NBG6716> ATGU
|NBG6716#
Signed-off-by: André Valentin <avalentin@marcant.net>
but it does not say what to do after i unlock the zloader into uboot
and the sysupgrade 4m is confusing too
any hints? thx
frollic
September 16, 2021, 8:03am
2
model generic install instruction https://openwrt.org/toh/zyxel/nbg6716
since the instruction doesn't appear to cover 21.02, install the 19, and upgrade.
kocoman
September 16, 2021, 8:24am
3
i am using 19, but thats from the ar71xx (support 19 only), now its using ath79 (support 21 only) and the flash layout is changed between them
see
Hi,
I have a Zyxel NBG6716 running 19.07.1 (ar71xx).
I am considering moving to Ath79 (no real reason or need)
What is the difference between the available images, and which one should I pick?
zyxel_nbg6716-squashfs-sysupgrade-4M-Kernel.bin
zyxel_nbg6716-squashfs-sysupgrade.tar
Also, my version has a Hynix NAND 256MiB onboard, on another post I read ath79 only supports 128MiB is this still correct? I'd hate to lose that extra space.
thanks!
ar71xx = no future support after 19.07.x ; no ar71xx images will be built with the next stable release (20.x)
ath79 = future support will be available even after 19.07.x
i cant reply/bump to that because its closed. but the user there didnt update, whereas i want to update
tmomas
September 16, 2021, 8:35am
4
kocoman
September 16, 2021, 6:57pm
5
ok thanks
is it possible to update some wiki here as to if 4mb spi flash with 128mb nand is support for v21 lede?