Linksys E2500 V4 and TOTOLINK LR1200 the same?

vwnut8392 · March 1, 2020, 3:17am

Seen walmart is selling the linksys E2500 V4 so i started doing a little homework on it and discovered that it looks like anyway that this router is almost identical to the TOTOLINK LR1200. they both use the same MediaTek MT7628DAN CPU/2.4GHZ radio and MediaTek MT7612E 5GHZ radio. only difference i found so far is that the totolink has an LTE feature that the linksys does not.

I confirmed the hardware in the linksys from the FCC's web site. Have a look for yourself.
https://fccid.io/Q87-03418/Internal-Photos/Internal-Photos-4158731

i think im going to buy a linksys E2500 from walmart and try to put the totolink openWRT on it and see if it works. if it work i'll post up here that it does and see about getting it added to the support list, worst case i brick it i'll just return it lol.

vwnut8392 · March 1, 2020, 5:15am

went and bought 2 of the Linksys 2500's actually lol. Serial port is there as well and is in typical linksys fashion as per my little diagram. use a TTL 232R 3V3 cable with it too.

<--------front of router
Pin5=ground
Pin4=open
Pin3=RX
Pin2=TX
Pin1=Power
Back of router----------->

Here is a dump of the serial data during boot up.

[03060D08][03060D09][87870000][31315151][00313152]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 3
                                                                              0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    9118606 Bytes =  8.7 MB
   Load Address: 80000000
   Entry Point:  8000c150
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

怘▒▒▒▒ff▒fa▒~▒~f▒`▒▒▒▒怘▒怘▒f30f▒`▒
▒`▒▒f▒▒f▒▒▒怘▒f▒Ϙ▒▒▒▒f~▒▒3▒Linux version 2.6.36+ (zls@cybertan-team2) (gcc versi                                                                             on 4.6.3 (Buildroot 2012.11.1) ) #18 Wed Jun 26 16:06:41 CST 2019

 The CPU feqenuce set to 580 MHz

 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200n8 root=/dev/ram0 console=ttyS0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00047acb
Readback ErrCtl register=00047acb
Memory: 52600k/65536k available (3741k kernel code, 12864k reserved, 1031k data,                                                                              7312k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 54050404
RALINK_GPIOMODE = 54040404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab <bio-0> at 0
SCSI subsystem initialized
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x2020                                                                             0000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [                                                                             0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
fuse init (API version 7.15)
msgmni has been set to 102
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: c2, device id 20 18
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numer                                                                             aseregions = 0
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000000ff0000 : "Kernel"
0x000000ff0000-0x000001000000 : "CBTinfo"
rdm_major = 253
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocate                                                                             d, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24


=== pAd = c0105000, size = 1467448 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(63888)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
GACT probability NOT on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (821 buckets, 3284 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
matchsize=264
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Warning: unable to open an initial console.
Freeing unused kernel memory: 7312k freed
Algorithmics/MIPS FPU Emulator v1.5
Password for 'root' changed

##### disable 1st wireless interface #####

##### disable 2nd wireless interface #####

##### disable 3rd wireless interface #####
rmmod: rlt_wifi: No such file or directory
rmmod: mt_wifi: No such file or directory
ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: No such device or address
ipt_webstr: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
register rt2860


=== pAd = c0782000, size = 2114360 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0680000, csr_addr=0xc0680000!
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCt                                                                             rl=0x20a
RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=2
NVM is efuse and the information is too less to bring up the interface
Force to use Flash mode
NVM is FLASH mode (pAd->flash_offset = 0x8000)
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
insmod: mt_wifi.ko: module not found
TX_BCN DESC a26b3000 size = 320
RX[0] DESC a26b6000 size = 1024
RX[1] DESC a26b7000 size = 1024
E2pAccessMode=2
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_                                                                             SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
RTMPSetDefaultChannel() : default channel to 1
load fw image from fw_header_image
AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
FW Version:20151201
FW Build Date:20151201183641
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 32
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2940): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
CmdSlotTimeSet:(ret = 0)
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
[PMF]ap_pmf_init:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNI                                                                             E
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [c800] doReload bit7[0]
CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
MtAsicAddSharedKeyEntry(1343): Not support for HIF_MT yet!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
ap_ftkd> Initialize FT KDP Module...
Main bssid = 30:23:03:fe:cb:77
<==== rt28xx_init, Status=0
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f, EDCCA_Status=0
WiFi Startup Cost (ra0): 5.480s
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =
▒▒
patch version =

FW Version:0.0.00 Build:1
Build Time:201507311614____
fw for E3 IC
RX[0] DESC a22bb000 size = 4096
RX[1] DESC a22bc000 size = 4096
MAX_PACKETS_IN_QUEUE= 128
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
pAd->ed_chk = 1
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
1. Phy Mode = 49
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
drivers/net/wireless/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxP                                                                             ower[choffset].Channel == 42)failed
Country Region from e2p = ffff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slop                                                                             e=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slop                                                                             e=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound                                                                             =0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound                                                                             =0
mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0xffffff82,                                                                              ALNAGain1=0x0, ALNAGain2=0xffffff82
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
TX0 power compensation = 0x38
TX1 power compensation = 0x38
[PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=149, HT-CentCh=151, VHT-CentCh=155
APStartUp(): AP Set CentralFreq at 155(Prim=149, HT-CentCh=151, VHT-CentCh=155, BBP_BW=2)
mt76x2_calibration(channel = 155)
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
Main bssid = 30:23:03:fe:cb:78
mt76x2_reinit_agc_gain:original agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x29, hi_lna1 = 0x29
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x29, hi_lna1 = 0x29
original vga value(chain0) = 58
original vga value(chain1) = 58
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=apclii
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
***iwpriv ra0 set IgmpSnEnable=1**
***iwpriv rai0 set IgmpSnEnable=1**
##### configVIF #####
30:23: 3:FFFFFFFE:FFFFFFCB:75
Raeth v3.1 (Tasklet)

phy_tx_ring = 0x01eec000, tx_ring = 0xa1eec000

phy_rx_ring0 = 0x01eee000, rx_ring0 = 0xa1eee000
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
RT305x_ESW: Link Status Changed
vconfig: ioctl error for rem: No such device
vconfig: ioctl error for rem: No such device
rmmod: 8021q: No such file or directory
device eth2 entered promiscuous mode
##### config Ralink ESW vlan partition (LLLLW) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
device ra0 entered promiscuous mode
ifconfig: ioctl 0x8913 failed: No such device
device eth2.1 entered promiscuous mode
device rai0 entered promiscuous mode
brctl: bridge br0: Device or resource busy

##### enable 2nd wireless interface #####
Start WAN .....
wan stop ...
cmd=[killall radvd ]
killall: radvd: no process killed
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
delete tunnel 6rd failed: No such device
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
cmd=[killall dnsmasq ]
killall: dnsmasq: no process killed
cmd=[killall radvd ]
killall: radvd: no process killed
cmd=[killall dhcpd6 ]
killall: dhcpd6: no process killed
cmd=[ip6tables -F ]
/proc/sys/net/ctf/wan_mode: No such file or directory
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
sh: cannot create /proc/unblock_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
wan start boot ...
cmd=[touch /tmp/hosts ]
start_dhcpc:=====( wan_or_lan=wan )=====
dhclient -nw -cf /tmp/dhcpc-wan.conf -sf /bin/dhcpc -lf /tmp/dhcpc-wan.leases -pf /var/run/dhcpc-wan.pid eth2.2 &
cmd=[touch /tmp/hosts ]
br0: port 3(rai0) entering learning state
br0: port 3(rai0) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
lan stop ...
cmd=[killall -16 dhcpd ]
killall: dhcpd: no process killed
cmd=[killall -16 gn-dhcpd ]
killall: gn-dhcpd: no process killed
cmd=[killall gn-dhcpd ]
killall: gn-dhcpd: no process killed
Start dhcpd ...
lan start ...
br0 192.168.1.100
write_dhcpd_conf: file=/tmp/dhcpd-br0.conf, ifname=br0, lan_ip=lan_ipaddr lan_mask=lan_netmask
cmd=[dhcpd -cf /tmp/dhcpd-br0.conf -lf /tmp/dhcpd.leases -df /tmp/udhcpd.leases -pf /var/run/dhcpd.pid br0 ]
Internet Systems Consortium DHCP Server 4.1.1-P1
Copyright 2004-2010 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Wrote 0 leases to leases file.
Listening on Socket/br0/192.168.1.0/24
Sending on   Socket/br0/192.168.1.0/24
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
br0: port 3(rai0) entering forwarding state
br0: port 2(eth2.1) entering forwarding state
br0: port 1(ra0) entering forwarding state
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:34 miniupnpd[2024]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:34 miniupnpd[2027]: WPS listening on port 8888
iwpriv ra0 set IgmpSnEnable=1
iwpriv rai0 set IgmpSnEnable=1
killall: long_loop: no process killed
/sbin/internet.sh: line 816: nfchod: not found
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
route: ioctl 0x890c failed: No such process
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:35 miniupnpd[2688]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:35 miniupnpd[2691]: WPS listening on port 8888
killall: rt2860apd: no process killed
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:36 miniupnpd[3231]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:36 miniupnpd[3234]: WPS listening on port 8888
killall: rtinicapd: no process killed
Cannot find device "6rdtun"
0
webs: Listening for HTTP requests at address 192.168.1.1cmd=[cron ]
cron: can't open log file
/var/log/mess: No such file or directory
cron: can't write to log file
CRON (01/01-00:00:36-3252) STARTUP (fork ok)
[HTTPD Starting on /www]
cmd=[httpd ]
cmd=[route del -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
route: ioctl 0x890c failed: No such process
cmd=[route add -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
cmd=[cesmDNS -o /tmp/.mdns_host_info -d -h Linksys23392 -l 192.168.1.1 ]
cmd=[netbios /tmp/netbios.conf ]
cmd=[/bin/monitor_cable ]
init: can't log to /dev/tty5
starting pid 3300, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2019-06-20 18:14:21 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# cmd=[killall -1 nvram_daemon ]
start single service: unplug_wan_cable
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
cmd=[killall -9 waninfo ]
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
unplug_wan_cable:dhclient -r -6 -N -P -d -q -nw -cf /tmp/dhcp6c-wan.conf -sf /bin/client6 -lf /tmp/dhcp6c-wan.leases -pf /var/run/dhcp6c-wan.pid eth2.2

Hope this interests someone on here.

vwnut8392 · March 1, 2020, 6:11am

tried to flash the totolink openwrt image to it but it does not accept it fully. Here's the output i got from the router when i tried to flash it.

Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##########################################Got ARP REQUEST, return our IP
#######################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194582 (400116 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400116
Abort: image Code pattern is error !## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    9118606 Bytes =  8.7 MB
   Load Address: 80000000
   Entry Point:  8000c150
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

怘▒▒▒▒ff▒fa▒~▒~f▒`▒▒▒▒怘▒怘▒f30f▒`▒
▒`▒▒f▒▒f▒▒▒怘▒f▒Ϙ▒▒▒▒f~▒▒3▒Linux version 2.6.36+ (zls@cybertan-team2) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #18 Wed Jun 26 16:06:41 CST 2019

 The CPU feqenuce set to 580 MHz

 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200n8 root=/dev/ram0 console=ttyS0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00047bc0
Readback ErrCtl register=00047bc0
Memory: 52600k/65536k available (3741k kernel code, 12864k reserved, 1031k data, 7312k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 54050404
RALINK_GPIOMODE = 54040404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab <bio-0> at 0
SCSI subsystem initialized
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
fuse init (API version 7.15)
msgmni has been set to 102
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: c2, device id 20 18
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000000ff0000 : "Kernel"
0x000000ff0000-0x000001000000 : "CBTinfo"
rdm_major = 253
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocated, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24


=== pAd = c0105000, size = 1467448 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(63888)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
GACT probability NOT on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (821 buckets, 3284 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
matchsize=264
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Warning: unable to open an initial console.
Freeing unused kernel memory: 7312k freed
Algorithmics/MIPS FPU Emulator v1.5
Password for 'root' changed

##### disable 1st wireless interface #####

##### disable 2nd wireless interface #####

##### disable 3rd wireless interface #####
rmmod: rlt_wifi: No such file or directory
rmmod: mt_wifi: No such file or directory
ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: No such device or address
ipt_webstr: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
register rt2860


=== pAd = c0782000, size = 2114360 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0680000, csr_addr=0xc0680000!
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=2
NVM is efuse and the information is too less to bring up the interface
Force to use Flash mode
NVM is FLASH mode (pAd->flash_offset = 0x8000)
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
insmod: mt_wifi.ko: module not found
TX_BCN DESC a26b3000 size = 320
RX[0] DESC a26b6000 size = 1024
RX[1] DESC a26b7000 size = 1024
E2pAccessMode=2
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
RTMPSetDefaultChannel() : default channel to 1
load fw image from fw_header_image
AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
FW Version:20151201
FW Build Date:20151201183641
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 32
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2940): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
CmdSlotTimeSet:(ret = 0)
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
[PMF]ap_pmf_init:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [c800] doReload bit7[0]
CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
MtAsicAddSharedKeyEntry(1343): Not support for HIF_MT yet!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
ap_ftkd> Initialize FT KDP Module...
Main bssid = 30:23:03:fe:cb:77
<==== rt28xx_init, Status=0
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f, EDCCA_Status=0
WiFi Startup Cost (ra0): 5.476s
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =
▒▒
patch version =

FW Version:0.0.00 Build:1
Build Time:201507311614____
fw for E3 IC
RX[0] DESC a22da000 size = 4096
RX[1] DESC a22db000 size = 4096
MAX_PACKETS_IN_QUEUE= 128
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
pAd->ed_chk = 1
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
1. Phy Mode = 49
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
drivers/net/wireless/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxPower[choffset].Channel == 42)failed
Country Region from e2p = ffff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0xffffff82, ALNAGain1=0x0, ALNAGain2=0xffffff82
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
TX0 power compensation = 0x38
TX1 power compensation = 0x38
[PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=149, HT-CentCh=151, VHT-CentCh=155
APStartUp(): AP Set CentralFreq at 155(Prim=149, HT-CentCh=151, VHT-CentCh=155, BBP_BW=2)
mt76x2_calibration(channel = 155)
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
Main bssid = 30:23:03:fe:cb:78
mt76x2_reinit_agc_gain:original agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x29, hi_lna1 = 0x29
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x29, hi_lna1 = 0x29
original vga value(chain0) = 58
original vga value(chain1) = 58
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=apclii
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
***iwpriv ra0 set IgmpSnEnable=1**
***iwpriv rai0 set IgmpSnEnable=1**
##### configVIF #####
30:23: 3:FFFFFFFE:FFFFFFCB:75
Raeth v3.1 (Tasklet)

phy_tx_ring = 0x01ef2000, tx_ring = 0xa1ef2000

phy_rx_ring0 = 0x01ef4000, rx_ring0 = 0xa1ef4000
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
RT305x_ESW: Link Status Changed
vconfig: ioctl error for rem: No such device
vconfig: ioctl error for rem: No such device
rmmod: 8021q: No such file or directory
device eth2 entered promiscuous mode
##### config Ralink ESW vlan partition (LLLLW) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
device ra0 entered promiscuous mode
ifconfig: ioctl 0x8913 failed: No such device
device eth2.1 entered promiscuous mode
device rai0 entered promiscuous mode
brctl: bridge br0: Device or resource busy

##### enable 2nd wireless interface #####
Start WAN .....
wan stop ...
cmd=[killall radvd ]
killall: radvd: no process killed
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
delete tunnel 6rd failed: No such device
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
cmd=[killall dnsmasq ]
killall: dnsmasq: no process killed
cmd=[killall radvd ]
killall: radvd: no process killed
cmd=[killall dhcpd6 ]
killall: dhcpd6: no process killed
cmd=[ip6tables -F ]
/proc/sys/net/ctf/wan_mode: No such file or directory
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
sh: cannot create /proc/unblock_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
RT305x_ESW: Link Status Changed
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
wan start boot ...
cmd=[touch /tmp/hosts ]
start_dhcpc:=====( wan_or_lan=wan )=====
dhclient -nw -cf /tmp/dhcpc-wan.conf -sf /bin/dhcpc -lf /tmp/dhcpc-wan.leases -pf /var/run/dhcpc-wan.pid eth2.2 &
cmd=[touch /tmp/hosts ]
br0: port 3(rai0) entering learning state
br0: port 3(rai0) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
lan stop ...
cmd=[killall -16 dhcpd ]
killall: dhcpd: no process killed
cmd=[killall -16 gn-dhcpd ]
killall: gn-dhcpd: no process killed
cmd=[killall gn-dhcpd ]
killall: gn-dhcpd: no process killed
Start dhcpd ...
lan start ...
br0 192.168.1.100
write_dhcpd_conf: file=/tmp/dhcpd-br0.conf, ifname=br0, lan_ip=lan_ipaddr lan_mask=lan_netmask
cmd=[dhcpd -cf /tmp/dhcpd-br0.conf -lf /tmp/dhcpd.leases -df /tmp/udhcpd.leases -pf /var/run/dhcpd.pid br0 ]
Internet Systems Consortium DHCP Server 4.1.1-P1
Copyright 2004-2010 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Wrote 0 leases to leases file.
Listening on Socket/br0/192.168.1.0/24
Sending on   Socket/br0/192.168.1.0/24
Set: phy[0].reg[RT305x_ESW: Link Status Changed
0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
br0: port 3(rai0) entering forwarding state
br0: port 2(eth2.1) entering forwarding state
br0: port 1(ra0) entering forwarding state
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:34 miniupnpd[2024]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:34 miniupnpd[2027]: WPS listening on port 8888
iwpriv ra0 set IgmpSnEnable=1
iwpriv rai0 set IgmpSnEnable=1
killall: long_loop: no process killed
/sbin/internet.sh: line 816: nfchod: not found
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
route: ioctl 0x890c failed: No such process
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:35 miniupnpd[2688]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:35 miniupnpd[2691]: WPS listening on port 8888
killall: rt2860apd: no process killed
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
RT305x_ESW: Link Status Changed
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:36 miniupnpd[3231]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:36 miniupnpd[3234]: WPS listening on port 8888
killall: rtinicapd: no process killed
Cannot find device "6rdtun"
0
webs: Listening for HTTP requests at address 192.168.1.1cmd=[cron ]
cron: can't open log file
/var/log/mess: No such file or directory
cron: can't write to log file
CRON (01/01-00:00:36-3252) STARTUP (fork ok)
[HTTPD Starting on /www]
cmd=[httpd ]
Jan  1 00:00:37 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:37 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[route del -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
route: ioctl 0x890c failed: No such process
Jan  1 00:00:38 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:38 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:38 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:38 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:38 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:38 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[route add -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
cmd=[cesmDNS -o /tmp/.mdns_host_info -d -h Linksys23392 -l 192.168.1.1 ]
cmd=[netbios /tmp/netbios.conf ]
cmd=[/bin/monitor_cable ]
init: can't log to /dev/tty5
starting pid 3300, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2019-06-20 18:14:21 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# Jan  1 00:00:39 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:39 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:40 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:40 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -1 nvram_daemon ]
start single service: unplug_wan_cable
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
cmd=[killall -9 waninfo ]
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
Jan  1 00:00:40 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:40 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:41 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:42 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:42 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
Jan  1 00:00:42 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:42 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
Jan  1 00:00:43 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:43 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:43 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:43 miniupnpd[3231]: Can't find in which sub network the client is
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
unplug_wan_cable:dhclient -r -6 -N -P -d -q -nw -cf /tmp/dhcp6c-wan.conf -sf /bin/client6 -lf /tmp/dhcp6c-wan.leases -pf /var/run/dhcp6c-wan.pid eth2.2
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:44 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:45 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:45 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:47 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:47 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:48 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:48 miniupnpd[3231]: Can't find in which sub network the client is
Jan  1 00:00:50 miniupnpd[3234]: Can't find in which sub network the client is
Jan  1 00:00:50 miniupnpd[3231]: Can't find in which sub network the client is

how i got it that far was to pick to load the image via TFTP by pressing 2 quickly when it booted. after that it gave me instructions to set TFTP server to 10.10.10.123 and set the PC to 10.10.10.3. than it said the file had to be called test.bin to acccept it. thats it. not sure what the next move is here.

mk24 · March 1, 2020, 2:27pm

It refused to flash that firmware and so booted the stock firmware again.

Try running initramfs builds from RAM (option 1, or use the bootloader CLI) to see if it really is similar enough to run.

Know the partition scheme and try to make a backup of the whole flash (especially the factory partition that contains the radio calibration) before actually flashing anything.

vwnut8392 · March 2, 2020, 12:59am

tried option 1 with no luck. i have not figured out how to access the U-boot in the stock boot loader as of yet. Here is the output from option 1. It looks like it tried to run the totolink firmware but failed.

[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 1
                                                                                                                                                                     0


1: System Load Linux to SDRAM via TFTP.
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:10.10.10.123
        Input server IP (10.10.10.3) ==:10.10.10.3
        Input Linux Kernel filename (test.bin) ==:test.bin

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###########Got ARP REQUEST, return our IP
######################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194582 (400116 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400116
Automatic boot of image at addr 0x82000000 ...
## Booting image at 82000000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.167
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1566202 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.167 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10911-c155900f66)) #0 Wed Jan 29 16:05:35 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is TOTOLINK LR1200
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80481740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=000662cb
[    0.000000] Readback ErrCtl register=000662cb
[    0.000000] Memory: 58816K/65536K available (3921K kernel code, 182K rwdata, 500K rodata, 1212K init, 208K bss, 6720K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007546] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073523] pid_max: default: 32768 minimum: 301
[    0.078212] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084572] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097343] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.106841] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.112788] pinctrl core: initialized pinctrl subsystem
[    0.120420] NET: Registered protocol family 16
[    0.229433] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.384786] PCI host bridge /pcie@10140000 ranges:
[    0.389376]  MEM 0x0000000020000000..0x000000002fffffff
[    0.394391]   IO 0x0000000010160000..0x000000001016ffff
[    0.416281] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.421932] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.427309] GPIO line 45 (modem-reset) hogged as output/high
[    0.432953] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.439299] PCI host bridge to bus 0000:00
[    0.443265] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.449847] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.455578] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.462113] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.470244] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.478647] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.485032] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.491702] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.498271] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.505224] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.511802] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.518848] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.525823] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.530595] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.537162] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.549043] clocksource: Switched to clocksource MIPS
[    0.555076] NET: Registered protocol family 2
[    0.560303] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.566997] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.573185] TCP: Hash tables configured (established 1024 bind 1024)
[    0.579443] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.585043] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.591395] NET: Registered protocol family 1
[    0.598946] Crashlog allocated RAM at address 0x3f00000
[    0.605621] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.617928] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.623556] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.643425] io scheduler noop registered
[    0.647157] io scheduler deadline registered (default)
[    0.653093] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.662096] console [ttyS0] disabled
[    0.665537] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
▒faaaa▒▒x▒`▒xf▒▒▒~`▒▒▒▒▒▒f▒▒▒~`f▒▒x▒?`▒Æ▒▒▒▒f▒`▒怘▒▒faa0▒▒x▒`▒xf▒▒▒~`▒▒▒▒▒▒f▒▒▒~`f▒▒x▒?`▒Æ▒▒▒▒f▒`▒怘▒▒faaa1▒▒▒▒▒▒~`
▒▒▒▒`▒▒▒▒▒▒f▒▒▒fx▒▒▒x▒?`
▒f▒▒▒f▒▒▒f▒`▒怘▒▒faaa1▒▒x▒▒▒~`
▒▒▒▒`▒▒▒▒▒▒f▒▒▒fx▒▒▒x▒?`
▒f▒▒▒f▒▒▒f▒`▒怘▒▒faaa▒▒~▒▒x▒▒▒~`▒▒▒f▒f▒▒`▒xxf▒
▒▒▒▒▒▒▒▒x
▒▒▒f▒~▒▒▒f▒▒▒▒f▒
fx▒~▒▒▒▒x▒x▒x▒x▒x▒x▒xf
▒▒faaa▒▒~x▒x▒
▒xf?`▒φxf▒
▒~
▒▒▒▒▒f▒x
▒~▒̞▒▒xf▒
▒fx
x▒
▒▒▒`
▒▒▒▒▒▒▒▒f▒~f▒ff▒▒▒faa▒▒▒~▒x▒xf▒▒▒xf?`
▒▒x▒▒▒fx`▒▒f▒▒~▒▒`f▒▒▒`
▒f▒▒~▒▒`f▒▒▒`
x▒▒f▒▒`▒▒▒▒▒f`▒▒fxxf▒▒▒fx▒▒▒f▒x
▒▒3▒faaa▒▒~▒▒▒▒▒~`̀▒▒fx▒~▒▒▒~▒▒▒▒f`▒▒f▒▒~▒▒`f▒▒▒`̞▒`▒▒▒f▒x
▒`▒~f
▒▒faa▒▒▒~▒▒▒▒▒~`
▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒▒x
▒▒▒▒▒▒x▒
▒▒▒▒~▒
`f▒f▒▒▒▒▒▒`▒`f
▒▒faaa▒▒~f▒x▒▒~`
▒▒x
▒▒▒▒▒▒x▒
▒▒▒▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒~▒
`f▒f▒▒▒▒▒▒`f▒f▒▒x▒`f
▒▒faa▒▒▒~▒~▒x▒
▒fa▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒~▒
`▒x▒▒`▒f▒▒`f
▒▒faaa▒▒~▒▒x▒▒~`
▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒▒x
▒▒▒▒▒▒▒▒▒▒▒▒~▒
`▒x▒▒f▒~f▒▒fx▒怘▒▒faaa▒▒▒▒▒▒~▒f▒▒▒▒f▒▒~▒
`▒▒▒fx`▒▒`▒▒▒▒▒f~▒~▒
▒▒▒▒f▒`▒怘▒▒faaa▒▒▒xf▒▒▒▒▒~▒▒▒x▒▒▒▒▒▒▒▒▒~▒▒▒▒▒▒▒▒▒▒f▒▒~▒▒▒f憞▒▒▒▒▒f▒~▒f▒`▒▒▒x
▒3▒faa1▒▒▒▒x▒~▒▒xf?`▒▒~▒▒▒f▒▒▒▒f▒~▒▒▒▒▒▒▒▒▒▒▒▒f▒`▒fx▒▒f▒``▒▒~▒▒~▒̞fx`▒▒▒▒`fx▒▒xf▒f▒f▒▒▒▒▒~▒▒▒▒f▒▒▒~▒▒▒p▒▒▒▒▒▒▒▒▒▒▒▒▒f▒`▒▒3▒faaaa▒▒▒▒▒x▒▒fa~▒3▒`f▒▒▒fx~▒▒▒~f▒fx`▒▒▒▒`▒▒▒▒▒x▒枆▒▒`▒▒▒3▒faaa▒▒▒▒x▒▒xf?`̘fx~▒▒f▒▒``
▒▒f~▒▒▒~▒▒~▒▒`▒`▒
▒▒~x▒3▒faaa▒▒▒▒x▒▒x▒~`
▒f▒`f▒▒▒fx~▒▒▒~f▒fx`▒▒▒▒`▒▒▒▒▒x▒枆▒▒`▒▒怘▒▒faa0▒▒▒▒▒▒▒▒fa▒
f▒x~▒f▒▒▒x▒▒▒`fxf憞~▒~▒▒▒▒▒▒▒▒憆▒憆▒▒`f▒▒▒f▒`▒▒▒▒`
▒▒▒▒▒▒~▒f▒`▒▒~▒▒▒▒▒▒▒f▒▒f▒`
▒fxx▒▒f▒`▒▒▒f▒x▒`fx▒▒▒f▒▒`▒▒▒▒▒f▒▒~`
▒▒▒▒▒`▒▒▒▒f~▒3▒`▒x▒▒▒`fx`▒̆x▒▒▒f`
▒f▒f▒`▒▒▒f▒▒▒怘▒▒faaa▒▒▒▒▒▒▒x▒▒fa▒▒xf▒▒▒~▒
▒▒x▒▒▒``
f▒▒▒▒▒f~▒▒~~▒▒▒3▒faa1▒▒▒x▒x▒
xf▒▒~`
fx▒f▒▒▒▒f▒▒▒▒``̞fx▒▒▒▒▒``
▒fxxf▒▒▒fx`▒
▒f▒▒▒▒▒▒`▒󆞞▒▒▒▒~▒▒▒▒▒▒▒▒▒▒▒▒▒▒~▒̆▒▒▒▒`▒▒怘▒▒faaaa▒▒▒▒x▒▒▒▒fa▒fx▒3▒▒fx▒▒▒▒fx▒`▒▒▒`▒▒▒▒▒fx▒``
`▒▒▒▒▒`f`▒
▒▒▒▒``̞~▒▒▒▒▒▒▒fxfx▒▒▒▒fx▒▒fx▒▒▒~▒▒▒▒▒▒▒f▒▒f▒▒~▒▒`f▒▒▒▒~f
▒▒faaaa▒▒▒▒▒x▒▒▒▒~`▒▒x▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒x▒̞~`▒▒▒▒▒▒▒▒▒▒3▒faa!▒▒▒▒▒x▒
▒▒~`
▒▒▒▒▒f▒~f▒昘▒3▒faa!▒▒▒x▒x▒▒fa▒▒x▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒`▒▒▒▒x▒▒▒▒▒▒▒▒▒3▒faa!▒▒▒x▒▒▒~`
▒▒▒▒▒f▒~f▒昘▒3▒faa!▒▒▒▒▒▒▒▒~`▒▒xx▒
▒▒▒▒▒▒▒▒▒▒▒▒▒`▒▒▒~`▒▒▒▒▒▒▒▒▒▒3p▒`
▒▒▒▒▒▒▒▒▒▒▒~`
▒▒▒▒▒f▒~f▒昘▒3▒faaa▒▒▒▒▒x▒f▒~`▒▒x▒x▒
▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒~`▒▒▒▒▒▒▒▒▒▒3▒faaa▒▒▒▒▒x▒f▒▒~`
▒▒▒▒▒f▒~f▒昘▒3▒faa!▒▒▒▒▒▒~`̆fx▒▒f▒▒▒f▒▒▒▒▒▒▒▒▒▒``▒▒f▒▒▒▒▒▒▒~▒▒▒fx▒f▒▒▒f▒▒▒▒▒f▒▒▒▒▒▒f▒▒``
▒▒▒▒``
x`̞▒▒憞▒▒▒▒▒~▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒3▒faaa1▒▒x▒x▒x▒`▒~`
▒fx▒▒▒▒▒`f憞~▒▒▒▒▒▒▒▒▒▒fx▒▒▒▒`▒▒▒▒怘▒
[03060D09][03060D0A][88870000][31315251][00313152]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3                                                                                                                                                           0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    9118606 Bytes =  8.7 MB
   Load Address: 80000000
   Entry Point:  8000c150
   Verifying Checksum ...

Here is something interesting when i select option 4

[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 4
                                                                                                                                                                     0


4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)
MT7628 # ls
Unknown command 'ls' - try 'help'
MT7628 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
httpd   - start webserver
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version
MT7628 #
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
httpd   - start webserver
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version
MT7628 #

vwnut8392 · March 2, 2020, 6:46am

Here is more to the equation. This is an actual flash dump of the MX25L12805D flash chip. I used my GQ-4X4 programmer and the SOIC-8 clip adapter to read it.

Here is a link to the BIN dump on my mega drive.
E2500 Firmware Dump

mk24 · March 2, 2020, 1:44pm

This new model was mildly interesting to me until I see there is no USB port. No GbE and no USB even though only $30 is not something to buy.

Good that you have a backup now. The stock bootlog shows the partition scheme, and that the firmware needs to be installed to offset 0x050000 (64k block 5). "Factory" is usually the only one that OpenWrt reads from.

Option 4 looks like a standard Ralinik u-boot CLI, you have tftpboot to load an initramfs kernel from your TFTP server to RAM and bootm or go to launch it. printenv will show useful information like default IP addresses.

This is all beginner level stuff that should not need explanation if you're familiar with the development process.

vwnut8392 · March 2, 2020, 9:48pm

unfortunately i am new to this. i have only ever messed with this once before on a wavlink router that someone had already built a snapshot for and i figured out how to get LUCI and everything else running on that. As for getting the linksys to run on a snapshot i have no idea where to start or how to do it.

I have tried your suggested method of installation with a file that was made from another member on here but unfortunately it did not work.