Hy
I have been using OpenWRT for years now. This is the best alternative firmware for routers!
But since ever I have been using devices that already support OpenWrt
We use wifi aps from Extreme Networks in my company (AP3805i)
I would like to know how I can check if that device supports OpenWRT
I have a USB TTL adapter, which I used before on my other routers.
How can I find out if J10 pins are for serial use?
I think this hardware is common on other vendors, because I have seen that exact AP on fortigate FortiAP 221E
I would be glad if someone can assist me
J10 is the UART port, the board seems to be very similar to the OCEDO Koala (except for 2T2R instead of 3T3R)
is that board supported?
Which pin is RX,TX,GND,VCC?
is that board supported?
Which pin is RX,TX,GND,VCC?
This board is supported, which does not mean you should flash it's
firmware on your Enterasys unit. However, it should provide you with a
good starting point.
Instructions for connecting to UART can be found here:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c493171
Best wishes
U-Boot 1.2.0.03 (Mar 28 2016 - 20:40:29)
ap135 - Scorpion 1.0DRAM:
sri
Scorpion 1.0
ath_ddr_initial_config(205): (32bit) ddr2 init
tap = 0x00000003
Tap (low, high) = (0x3, 0x1f)
Tap values = (0x11, 0x11, 0x11, 0x11)
256 MB
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x20
flash size 64MB, sector count = 256
Flash: 64 MB
In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
athrs_sgmii_res_cal: cal value = 0xe
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ----> S17 PHY *
TEST: FINAL REG VAL after TX Calibration - 0x00000000
TEST: FINAL XMII VAL after RX Calibration - 0x00000000
TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00000001
athrs17_reg_init: complete
: cfg1 0x80000000 cfg2 0x7135
eth0: d8:84:66:11:22:33
eth0 up
eth0
Setting 0x18116290 to 0x60c0214f
Hit 'd' for diagnostics, or any other key to stop autoboot: 2 1 0
## Executing script at 8ff6e160
check for watchdog, limit=3...
check for reset by watchdog...
no watchdog...
bSaveEnviron=0 image_order=1 0
ready to boot kernel...
## Booting image at a0280000 ...
Image Name: 10.41.08.0012
Created: 2018-06-22 0:50:36 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 8532062 Bytes = 8.1 MB
Load Address: 80002000
Entry Point: 801d3430
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
Booting QCA955x
e[15C
Linux version 2.6.31--10.41.08.0012 (root@ngap-fat6) (gcc version 4.9.2 (crosstool-NG 1.21.0) ) #2 Thu Jun 21 20:49:41 EDT 2018
flash_size passed from bootloader = 64
arg 1: mtdparts=ath-nor0:512K(BootBAK)ro,512K(BootPRI),256K(CFG1),256K(CFG2),256K(NVRAM4),256K(NVRAM3),256K(NVRAM2),256K(NVRAM1),16384K(PriImg),16384K(SecImg),29440K(FS);
arg 2: BOOT_BOOTROM="U-Boot 1.2.0.03 (Mar 28 2016 - 20:40:29)"
arg 3: BOOT_KERNEL=secondary
arg 4: console=ttyS0,115200n81
arg 5: mem=261632K
arg 6: panic=30
arg 7: ro
CPU revision is: 00019750 (MIPS 74Kc)
cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 0ff80000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0x00000000 -> 0x0000ff80
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x0000ff80
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 64897
Kernel command line: mtdparts=ath-nor0:512K(BootBAK)ro,512K(BootPRI),256K(CFG1),256K(CFG2),256K(NVRAM4),256K(NVRAM3),256K(NVRAM2),256K(NVRAM1),16384K(PriImg),16384K(SecImg),29440K(FS); BOOT_BOOTROM="U-Boot 1.2.0.03 (Mar 28 2016 - 20:40:29)" BOOT_KERNEL=secondary console=ttyS0,115200n81 mem=261632K panic=30 ro
PID hash table entries: 1024 (order: 10, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 224452k/261632k available (1899k kernel code, 36868k reserved, 491k data, 32064k init, 0k highmem)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 359.42 BogoMIPS (lpj=179712)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
ath_pcibios_init: bus 0
ath_pcibios_init(250): PCI 0 CMD write: 0x356
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pcibios_map_irq: IRQ 75 for bus 0
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 5, 229376 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
msgmni has been set to 438
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
mtd: no mtd-id
11 cmdlinepart partitions found on MTD device ath-nor0
Creating 11 MTD partitions on "ath-nor0":
0x000000000000-0x000000080000 : "BootBAK"
0x000000080000-0x000000100000 : "BootPRI"
0x000000100000-0x000000140000 : "CFG1"
0x000000140000-0x000000180000 : "CFG2"
0x000000180000-0x0000001c0000 : "NVRAM4"
0x0000001c0000-0x000000200000 : "NVRAM3"
0x000000200000-0x000000240000 : "NVRAM2"
0x000000240000-0x000000280000 : "NVRAM1"
0x000000280000-0x000001280000 : "PriImg"
0x000001280000-0x000002280000 : "SecImg"
0x000002280000-0x000003f40000 : "FS"
nf_conntrack version 0.5.0 (4088 buckets, 16352 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
NET: Registered protocol family 17
JUMPSTART_GPIO: 17
athwdt_init: Skipping Registering WDT - handle ourselves
ath_otp_init: Registering OTP success
Freeing unused kernel memory: 32064k freed
init started: BusyBox v1.17.4 (2018-06-21 19:46:37 EDT)
starting pid 120, tty '': '/etc/rc.d/rcS'
data plane cores = 0
fast path cores = 0
rcS: watchdogDis 0 serNum 1234567890123450
Read/Write Crypto Section successfully !
eth0 hw addr: d8:84:66:11:22:33
cat: can't open '/home/config/previous.cfg': No such file or directory
update_compliance_file: /flash/v3_confData.bin up to date (Ver in Image AP3805i-72 Ver on AP AP3805i-72 format 129)
update_compliance_file:Imported Compliance Table V4.16 dated on 4/30/2018 (AP38XX_Power_Settings_V9.xlsx)
MODEL AP3805i
SERVICETYPE siemens
SERVICEATTRS ac_manager,ru_manager
AC_HOSTNAME Controller
VERSIONBASE 0
SERIALNUMBER 1234567890123450
AP_FLAG 0
AP_MODE 0
NUM_ANTENNAS 4
starting pid 488, tty '': '/sbi
(none) mips #2 Thu Jun 21 20:49:41 EDT 2018 (none)
(none) login: admin
Password:
BusyBox v1.17.4 (2018-06-21 19:46:37 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.
AP3805i 10.41.08.0012 interactive shell for service personnel only
AP3805i-123456789012345#
AP3805i-123456789012345#
AP3805i-123456789012345# ?
-sh: ?: not found
AP3805i-123456789012345# help
Built-in commands:
------------------
e[8C. : [ [[ alias bg break cd chdir continue echo eval exec exit
e[8Cexport false fg hash help jobs kill let local pwd read readonly
e[8Creturn set shift source test times trap true type ulimit umask
e[8Cunalias unset wait
AP3805i-123456789012345#
AP3805i-123456789012345#
AP3805i-123456789012345# cget ?
AP3805i-123456789012345# Invalid parameter: ?
Type command without parameters for a list of valid options.
ce[Kcget all
Invalid parameter: all
Type command without parameters for a list of valid options.
AP3805i-123456789012345# cget help
Invalid parameter: help
Type command without parameters for a list of valid options.
AP3805i-123456789012345#
I was able to get UART/serial working
and I captured the boot log of the device
I can interrupt the boot process and get to a shell
Boot (PRI)-> ?
?e[7C- alias for 'help'
autoscr - run script from memory
basee[4C- print or set address offset
bdinfo - print Board Info structure
boote[4C- boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BootP/TFTP protocol
chenv - manipulate environment variables
cmpe[5C- memory compare
coninfo - print console devices and information
cpe[6C- memory copy
crc32 - checksum calculation
dhcpe[4C- invoke DHCP client to obtain IP/boot params
echoe[4C- echo args to console
erase - erase FLASH memory
exite[4C- exit script
flinfo - print FLASH memory information
fsinfo - print information about filesystems
fsload - load binary file from a filesystem image
goe[6C- start application at address 'addr'
helpe[4C- print online help
iminfo - print header information for application image
itest - return true/false on integer compare
loope[4C- infinite loop on address range
lse[6C- list files in a directory (default /)
mde[6C- memory display
md5sum - md5 calculation
miie[5C- MII utility commands
mme[6C- memory modify (auto-incrementing)
mtest - simple RAM test
mwe[6C- memory write (fill)
nfse[5C- boot image via network using NFS protocol
nme[6C- memory modify (constant address)
pcie[5C- list and access PCI Configuration Space
pinge[4C- send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
rune[5C- run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
sleep - delay execution for some time
teste[4C- minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
version - print monitor version
Boot (PRI)->
these are the environment variables and other info
Boot (PRI)-> pri
bootargs=console=ttyS0,115200n81 mtdparts=ath-nor0:512K(BootBAK)ro,512K(BootPRI),256K(CFG1),256K(CFG2),256K(NVRAM4),256K(NVRAM3),256K(NVRAM2),256K(NVRAM1),16384K(PriImg),16384K(SecImg),29440K(FS); BOOT_KERNEL=primary BOOT_BOOTROM=unknown mem=261632K panic=30
bootcmd=run boot_flash
bootdelay=2
baudrate=115200
ipaddr=192.168.1.1
serverip=192.168.1.10
ethact=eth0
WATCHDOG_COUNT=0
WATCHDOG_LIMIT=3
BOOT_KERNEL=primary
BOOT_BOOTROM=unknown
SERVICETYPE=siemens
SERVICEATTRS=ac_manager,ru_manager
AC_HOSTNAME=Controller
VERSIONBASE=0
REGION=NA
NUM_ANTENNAS=4
CRYPTO_FLAG=3
menucmd=run boot_diag
mtdparts=mtdparts=ath-nor0:512K(BootBAK)ro,512K(BootPRI),256K(CFG1),256K(CFG2),256K(NVRAM4),256K(NVRAM3),256K(NVRAM2),256K(NVRAM1),16384K(PriImg),16384K(SecImg),29440K(FS);
static_bootargs=console=ttyS0,115200n81 mem=261632K panic=30 ro
boot_diag=if fsload 0x89000000 diag.gz.uImage; then if imi 0x89000000; then bootm 0x89000000; exit; fi; fi;echo ERROR: Problem with diag image, dropping to interactive shell
boot_ram=setenv bootargs "$mtdparts BOOT_BOOTROM=\""$ver"\"" BOOT_KERNEL=vmlinux.gz.uImage.3805 $static_bootargs; tftpboot 0x89000000 vmlinux.gz.uImage.3805; bootm 0x89000000
boot_flash=autoscr boot_kernel
DEFAULT_SETTING=0
CURR_VER=U-Boot 1.2.0.03 (Mar 28 2016 - 20:40:29)
MODEL=AP3805i
SERIAL#=1234567890123450
ethaddr=D8:84:66:11:22:33
RADIOADDR0=D8:84:66:11:22:33
RADIOADDR1=D8:84:66:11:22:33
HW_RELEASE=511
AP_FLAG=0
AP_MODE=0
MOSTRECENTKERNEL=1
stdin=serial
stdout=serial
stderr=serial
mem=261632k
PriImg=9f280000
SecImg=a0280000
ver=U-Boot 1.2.0.03 (Mar 28 2016 - 20:40:29)
filesize=39
Environment size: 1595/65531 bytes
Boot (PRI)-> flinfo
Bank # 1: AMD M25P64 (64 Mbit, uniform sector size)
Bank: 0, Size: 65536 KB in 256 Sectors
Sector Start Addresses:
9F000000 9F040000 9F080000 9F0C0000 9F100000
9F140000 9F180000 9F1C0000 9F200000 9F240000 E
9F280000 9F2C0000 9F300000 9F340000 9F380000
9F3C0000 9F400000 9F440000 9F480000 9F4C0000
9F500000 9F540000 9F580000 9F5C0000 9F600000
9F640000 9F680000 9F6C0000 9F700000 9F740000
9F780000 9F7C0000 9F800000 9F840000 9F880000
9F8C0000 9F900000 9F940000 9F980000 9F9C0000
9FA00000 9FA40000 E 9FA80000 E 9FAC0000 E 9FB00000 E
9FB40000 E 9FB80000 E 9FBC0000 E 9FC00000 E 9FC40000 E
9FC80000 E 9FCC0000 E 9FD00000 E 9FD40000 E 9FD80000 E
9FDC0000 E 9FE00000 E 9FE40000 E 9FE80000 E 9FEC0000 E
9FF00000 E 9FF40000 E 9FF80000 E 9FFC0000 E A0000000 E
A0040000 E A0080000 E A00C0000 E A0100000 E A0140000 E
A0180000 E A01C0000 E A0200000 E A0240000 E A0280000
A02C0000 A0300000 A0340000 A0380000 A03C0000
A0400000 A0440000 A0480000 A04C0000 A0500000
A0540000 A0580000 A05C0000 A0600000 A0640000
A0680000 A06C0000 A0700000 A0740000 A0780000
A07C0000 A0800000 A0840000 A0880000 A08C0000
A0900000 A0940000 A0980000 A09C0000 A0A00000
A0A40000 A0A80000 A0AC0000 E A0B00000 E A0B40000 E
A0B80000 E A0BC0000 E A0C00000 E A0C40000 E A0C80000 E
A0CC0000 E A0D00000 E A0D40000 E A0D80000 E A0DC0000 E
A0E00000 E A0E40000 E A0E80000 E A0EC0000 E A0F00000 E
A0F40000 E A0F80000 E A0FC0000 E A1000000 E A1040000 E
A1080000 E A10C0000 E A1100000 E A1140000 E A1180000 E
A11C0000 E A1200000 E A1240000 E A1280000 A12C0000
A1300000 A1340000 A1380000 A13C0000 A1400000
A1440000 A1480000 A14C0000 A1500000 A1540000
A1580000 A15C0000 A1600000 A1640000 A1680000
A16C0000 A1700000 A1740000 A1780000 A17C0000
A1800000 A1840000 A1880000 A18C0000 A1900000
A1940000 A1980000 A19C0000 A1A00000 A1A40000
A1A80000 A1AC0000 A1B00000 A1B40000 A1B80000
A1BC0000 A1C00000 A1C40000 A1C80000 A1CC0000
A1D00000 A1D40000 A1D80000 A1DC0000 A1E00000
A1E40000 A1E80000 A1EC0000 A1F00000 A1F40000
A1F80000 A1FC0000 A2000000 A2040000 A2080000
A20C0000 A2100000 A2140000 A2180000 A21C0000
A2200000 A2240000 A2280000 A22C0000 A2300000
A2340000 A2380000 A23C0000 A2400000 A2440000
A2480000 A24C0000 A2500000 A2540000 A2580000
A25C0000 A2600000 A2640000 A2680000 A26C0000
A2700000 A2740000 A2780000 A27C0000 A2800000
A2840000 A2880000 A28C0000 A2900000 A2940000
A2980000 A29C0000 A2A00000 A2A40000 A2A80000
A2AC0000 A2B00000 A2B40000 A2B80000 A2BC0000
A2C00000 A2C40000 A2C80000 A2CC0000 A2D00000
A2D40000 A2D80000 A2DC0000 A2E00000 A2E40000
A2E80000 A2EC0000 A2F00000 A2F40000 E A2F80000
A2FC0000 E
Boot (PRI)->
Boot (PRI)-> fsinfo
### filesystem type is JFFS2
Compression: NONE
e[8Cfrag count: 24
e[8Ccompressed sum: 2201
e[8Cuncompressed sum: 2201
Compression: ZERO
e[8Cfrag count: 0
e[8Ccompressed sum: 0
e[8Cuncompressed sum: 0
Compression: RTIME
e[8Cfrag count: 0
e[8Ccompressed sum: 0
e[8Cuncompressed sum: 0
Compression: RUBINMIPS
e[8Cfrag count: 0
e[8Ccompressed sum: 0
e[8Cuncompressed sum: 0
Compression: COPY
e[8Cfrag count: 0
e[8Ccompressed sum: 0
e[8Cuncompressed sum: 0
Compression: DYNRUBIN
e[8Cfrag count: 0
e[8Ccompressed sum: 0
e[8Cuncompressed sum: 0
Compression: ZLIB
e[8Cfrag count: 5
e[8Ccompressed sum: 4626
e[8Cuncompressed sum: 9259
Boot (PRI)->
I was able to get the image file via tftp
I used "openwrt-19.07.3-ath79-generic-ocedo_koala-squashfs-sysupgrade.bin"
Using eth0 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename '0101A8C0.img'.
Load address: 0x89000000
Loading: *#################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #############
done
Bytes transferred = 4391190 (430116 hex)
I don't know how to flash it?
Can anybody tell me if the image from "ocedo_koala" is ok with my hardware "Extreme Networks AP3805i" as it is the same board?
Boot (PRI)-> run lfw
Error: "lfw" not defined
Boot (PRI)->
No, this has the potential of destroying you unit.
If you have a closer look, you can see that there's another flash chip used in your unit and the partition map differs.
Ok
I am glad that i was not able to flash it
Is any developer able/willing to help here?
If necessary I can send a unit. Please PN
hy, please help me to get that device running.
this is the flash layout from original operating system:
AP3805i-123456789012345# cat /proc/mtd
dev: size erasesize name
mtd0: 00080000 00040000 "BootBAK"
mtd1: 00080000 00040000 "BootPRI"
mtd2: 00040000 00040000 "CFG1"
mtd3: 00040000 00040000 "CFG2"
mtd4: 00040000 00040000 "NVRAM4"
mtd5: 00040000 00040000 "NVRAM3"
mtd6: 00040000 00040000 "NVRAM2"
mtd7: 00040000 00040000 "NVRAM1"
mtd8: 01000000 00040000 "PriImg"
mtd9: 01000000 00040000 "SecImg"
mtd10: 01cc0000 00040000 "FS"
AP3805i-123456789012345#
I tried to boot openwrt image "openwrt-19.07.3-ath79-generic-ocedo_koala-squashfs-sysupgrade.bin"
Boot (PRI)-> tftp 0x89000000
*** Warning: no boot file name; using '0101A8C0.img'
Using eth0 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename '0101A8C0.img'.
Load address: 0x89000000
Loading: *#################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #############
done
Bytes transferred = 4391190 (430116 hex)
Boot (PRI)-> bootm
## Booting image at 89000000 ...
Image Name: MIPS OpenWrt Linux-4.14.180
Created: 2020-05-16 18:32:20 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1596113 Bytes = 1.5 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
[ 0.000000] Linux version 4.14.180 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r11063-85e04e9f46)) #0 Sat May 16 18:32:20 2020
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[ 0.000000] MIPS: machine is OCEDO Koala
[ 0.000000] SoC: Qualcomm Atheros QCA9558 ver 1 rev 0
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 10000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] random: get_random_bytes called from 0x804ff740 with crng_init=0
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 65024
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 253252K/262144K available (4030K kernel code, 162K rwdata, 532K rodata, 1220K init, 212K bss, 8892K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 51
[ 0.000000] CPU clock: 720.000 MHz
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5309056796 ns
[ 0.000007] sched_clock: 32 bits at 360MHz, resolution 2ns, wraps every 5965232126ns
[ 0.008295] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048)
[ 0.074984] pid_max: default: 32768 minimum: 301
[ 0.080065] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.087103] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.098068] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.108568] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.115119] pinctrl core: initialized pinctrl subsystem
[ 0.122548] NET: Registered protocol family 16
[ 0.129771] PCI host bridge /ahb/pcie-controller@180c0000 ranges:
[ 0.136304] MEM 0x0000000010000000..0x0000000011ffffff
[ 0.141860] IO 0x0000000000000000..0x0000000000000000
[ 0.160502] PCI host bridge to bus 0000:00
[ 0.164866] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[ 0.172214] pci_bus 0000:00: root bus resource [io 0x0000]
[ 0.178141] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[ 0.185367] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 0.194213] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
[ 0.202037] pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref]
[ 0.212074] clocksource: Switched to clocksource MIPS
[ 0.218278] NET: Registered protocol family 2
[ 0.223658] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.231098] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.237920] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.244803] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.251028] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.257927] NET: Registered protocol family 1
[ 0.264946] Crashlog allocated RAM at address 0x3f00000
[ 0.271545] workingset: timestamp_bits=30 max_order=16 bucket_order=0
[ 0.282564] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.288764] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.306843] io scheduler noop registered
[ 0.311016] io scheduler deadline registered (default)
[ 0.318351] pinctrl-single 1804002c.pinmux: 544 pins at pa b804002c size 68
[ 0.326653] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.335387] console [ttyS0] disabled
[ 0.339222] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 2500000) is a 16550A
[ 0.348436] console [ttyS0] enabled
[ 0.348436] console [ttyS0] enabled
[ 0.355866] bootconsole [early0] disabled
[ 0.355866] bootconsole [early0] disabled
[ 0.371378] m25p80 spi0.0: s25fl512s (65536 Kbytes)
[ 0.376411] 7 fixed-partitions partitions found on MTD device spi0.0
[ 0.382874] Creating 7 MTD partitions on "spi0.0":
[ 0.387740] 0x000000000000-0x000000040000 : "u-boot"
[ 0.393438] 0x000000040000-0x000000050000 : "u-boot-env"
[ 0.399412] 0x000000050000-0x000000790000 : "firmware"
[ 0.410399] 0x000000790000-0x000000ed0000 : "vendor"
[ 0.416111] 0x000000ed0000-0x000000fe0000 : "data"
[ 0.421556] 0x000000fe0000-0x000000ff0000 : "id"
[ 0.426919] 0x000000ff0000-0x000001000000 : "art"
[ 0.433212] libphy: Fixed MDIO Bus: probed
[ 0.447815] ag71xx 19000000.eth: invalid MAC address, using random address
[ 0.793754] libphy: ag71xx_mdio: probed
[ 0.892694] ag71xx 19000000.eth: connected to PHY at mdio-bus.0:05 [uid=004dd072, driver=Atheros 8035 ethernet]
[ 0.903449] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: rgmii-rxid
[ 0.912043] NET: Registered protocol family 10
[ 0.920451] Segment Routing with IPv6
[ 0.924295] NET: Registered protocol family 17
[ 0.928836] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 0.941993] 8021q: 802.1Q VLAN Support v1.8
[ 0.947532] hctosys: unable to open rtc device (rtc0)
[ 0.953504] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[ 0.961096] Please append a correct "root=" boot option; here are the available partitions:
[ 0.969607] 1f00 256 mtdblock0
[ 0.969612] (driver?)
[ 0.976263] 1f01 64 mtdblock1
[ 0.976267] (driver?)
[ 0.982912] 1f02 7424 mtdblock2
[ 0.982915] (driver?)
[ 0.989542] 1f03 7424 mtdblock3
[ 0.989545] (driver?)
[ 0.996186] 1f04 1088 mtdblock4
[ 0.996189] (driver?)
[ 1.002834] 1f05 64 mtdblock5
[ 1.002837] (driver?)
[ 1.009465] 1f06 64 mtdblock6
[ 1.009468] (driver?)
[ 1.016109] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 1.025214] Rebooting in 1 seconds..
there is a kernel panic. how to get that working?
I expect that kernel panic is due to the flash partitions for the koala not matching your device. To add support you will probably need to at least setup your own flash partitions. From a quick search I couldn't find much for specs on that device. I would start by checking for the main hardware differences between it and the Koala. If it is the same or similar hardware you might be able to start with the koala code in openwrt. It is DTS based. You will of course at least need to change the partitioning. This is a good starting point for how to add a device https://openwrt.org/docs/guide-developer/adding_new_device.
1 Like
thank you for your reply
I am beginning to understand a little bit better now
I build a initramfs image von oceda-koala and try to boot it, but its also not running
https://pastebin.com/Gfy2LKA0
regarding your link, I tried to collect every output from relevant data
https://pastebin.com/wFWg5fcQ
I try to alter the file target/linux/ath79/dts/qca9558_ocedo_koala.dts on my local source but I don't know much about flash layout/partitions
this is stock layout
AP3805i-123456789012345# cat /proc/mtd
dev: size erasesize name
mtd0: 00080000 00040000 "BootBAK"
mtd1: 00080000 00040000 "BootPRI"
mtd2: 00040000 00040000 "CFG1"
mtd3: 00040000 00040000 "CFG2"
mtd4: 00040000 00040000 "NVRAM4"
mtd5: 00040000 00040000 "NVRAM3"
mtd6: 00040000 00040000 "NVRAM2"
mtd7: 00040000 00040000 "NVRAM1"
mtd8: 01000000 00040000 "PriImg"
mtd9: 01000000 00040000 "SecImg"
mtd10: 01cc0000 00040000 "FS"
AP3805i-123456789012345#
if the initramfs form oceda-koala is not working on my board, is the hardware between the two boards too different?
I try to learn how to get that done, but I am not sure if I can do that on my own
Hard to tell at this point. It is definitely not exactly right for your board, but that it gets that far in boot is a sign it is close.
Does your pastebin have your full OpenWrt bootlog? I expected to see it kernel panic again unless you made changes. I would look through the full openwrt bootlog for errors. They will be clues on differences between your board and the Koala. Another thing you could do is look at the main hardware specs for the Koala here https://openwrt.org/toh/hwdata/ocedo/ocedo_koala. Then find the specs for your board. Most may be able to find most of your board specs in your second pastebin from the stock run. If you find a lot of differences, I'd look at other DTS in target/linux/ath79/dts/qca955* to see if you can find something with more similar hardware. Also, initframfs is a good plan at this point. It runs from memory without writing to flash avoiding catastrophes like overwriting the bootloader.
For the partitions. This is a good overview https://openwrt.org/docs/techref/flash.layout. You will want to double check this, but to me it looks like you have dual flash layout meaning there is a primary and a "backup".
that is the full openwrt bootlog of openwrt-19.07.3-ath79-generic-ocedo_koala-initramfs-kernel.bin
https://pastebin.com/xZWbzVa9
this is the full openwrt bootlog of openwrt-19.07.3-ath79-generic-buffalo_bhr-4grv2-initramfs-kernel.bin
https://pastebin.com/VWyBBJp8
this is the full openwrt bootlog of openwrt-19.07.3-ath79-generic-openmesh_om5p-ac-v2-initramfs-kernel.bin
https://pastebin.com/ifU3Nwv2
they fully boot what I can say, but then the device suddenly reboots for what reason?
I tried to boot all other QCA9558 images but I only get that error
Boot (PRI)-> bootm
Booting image at 89000000 ...
Bad Magic Number
Boot (PRI)->
Any idea why the initramfs images reboot/reset?
anything from stock at;
cat /sys/kernel/debug/gpio
This board is oem from senao/engenius, they sell it as standalone access point with model EAP1200H in 2015 and about 2017 they use same design again and sell it as EWS350AP with mesh capability. You can use their firmware to unlock from controller.
1 Like
Sorry, there is no output at the stock firmware.
May because of the old kernel? is there another command I can try?
AP# cat /sys/kernel/debug/gpio
cat: can't open '/sys/kernel/debug/gpio': No such file or directory
AP#
AP# uname -a
Linux (none) 2.6.31--10.41.08.0012 #2 Thu Jun 21 20:49:41 EDT 2018 mips GNU/Linux
AP#
tftp 0x89000000 openwrt-19.07.3-ipq40xx-generic-engenius_eap1300-initramfs-fit-uImage.itb
Using eth0 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'openwrt-19.07.3-ipq40xx-generic-engenius_eap1300-initramfs-fit-uImage.itb'.
Load address: 0x89000000
Loading: *#################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C #################################################################
e[8C ########################################################
done
Bytes transferred = 6607568 (64d2d0 hex)
Boot (PRI)-> tftp 0x89000000 openwrt-19.07.3-ipq40xx-generic-engenius_eap1300-initramfs-fit-uImage.itbe[23;80H e[23;80Hclear cls bootm
## Booting image at 89000000 ...
Bad Magic Number
Boot (PRI)->
## Booting image at 89000000 ...
Bad Magic Number
Boot (PRI)->
the initramfs image from engenius_eap1300 does not boot? any idea why?
the devices look very similar
eap1300 have different soc and different board, your board have the same design with eap1200h
you can use failsafe partition as initramfs from eap1200h or ews350ap to boot this board and move the art to last partition.