Support bolt PL100 mt7621 + GDM7243

I hope someone can help me the correct guide , i have digging GitHub and forum but without luck.
this AP have 2 SoC mt7621 + GDM7243






WLAN is MediaTek MT7603E, MediaTek MT7612E
32MB 3v NOR SPI Flash (Macronix MX25L25635F ) with 128 RAM

I have very little basic programming so I'will not able to modify the source but i manage to flash the ap with firmware from https://openwrt.org/toh/zbt/zbt_wg3526 everything look good with some acceptable bug .
The big problem is the LTE modem will not boot if im using openwrt firmware
LTE Modem bootlog crash

U-Boot 2010.09 (Oct 11 2017 - 20:22:28)GCT GDM7243

Build Info:
  date: 2017/10/11-20:22:32
  user: root@ubuntu
  svnr: 
  src: /home/bbwang/work/test/BOLT_ODU/SDK/work_BOLT/uboot
  ver: 0.54s2m

DRAM:  128 MiB (wbd-p2) 1Gb
NAND:  Built-in ECC Nand
maf_id : 0x00000098, dev_id : 0x000000a1
Pagesize : 2Kbytes
Address cycle : 4
128 MiB
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
nand_read_bbt: Bad block at 0x000006000000
In:    serial
Out:   serial
Err:   serial
Net:    001cc910 Realtek8211  PHYCR1: 00002118-0000211c  Rx delay: 0x00802300 
  PHYCR2:0x0863->0x0842  mii0
Hit ENTER key to stop autoboot:  0 
00420000
---------------------
hdr chksum  : 0xb21207e0
magic       : 0xcafebabe
timstamp    : 0x0000021f
data chksum : 0xdec5c319
data size   : 0x0001ffdc
---------------------
00440000
---------------------
hdr chksum  : 0xb1d307dd
magic       : 0xcafebabe
timstamp    : 0x0000021c
data chksum : 0xdec5c319
data size   : 0x0001ffdc
---------------------
cmnnv current block is : 0
pesifwcheck=1

boot from part_idx: 2
do_check_partition() type:linux2, Data checksum is OK!!!(w:899d8e9a/r:899d8e9a)!!!
do_check_partition() type:rootfs2, Data checksum is OK!!!(w:3c1b4560/r:3c1b4560)!!!

---------------------
hdr chksum  : 0xaaf70763
magic       : 0xcafebabe
timstamp    : 0x00000003
data chksum : 0x74ecf979
data size   : 0x002555b0
---------------------
---------------------
hdr chksum  : 0xa2fa06fe
magic       : 0xcafebabe
timstamp    : 0x00000004
data chksum : 0x899d8e9a
data size   : 0x00254bd8
---------------------
select partition
part name : linux2
offset    : 0x00e00000
size      : 0x00400000
---------------------
hdr chksum  : 0x00000000
magic       : 0x00000000
timstamp    : 0x00000000
data chksum : 0x00000000
data size   : 0x00000000
---------------------
---------------------
hdr chksum  : 0x00000000
magic       : 0x00000000
timstamp    : 0x00000000
data chksum : 0x00000000
data size   : 0x00000000
---------------------
no valid header(2)
---------------------
hdr chksum  : 0x8d84057e
magic       : 0xcafebabe
timstamp    : 0x00000003
data chksum : 0xd4159d62
data size   : 0x012e0000
---------------------
---------------------
hdr chksum  : 0x7bf70495
magic       : 0xcafebabe
timstamp    : 0x00000004
data chksum : 0x3c1b4560
data size   : 0x01300000
---------------------
select partition
part name : rootfs2
offset    : 0x03000000
size      : 0x01e00000
---------------------
hdr chksum  : 0x00000000
magic       : 0x00000000
timstamp    : 0x00000000
data chksum : 0x00000000
data size   : 0x00000000
---------------------
---------------------
hdr chksum  : 0x00000000
magic       : 0x00000000
timstamp    : 0x00000000
data chksum : 0x00000000
data size   : 0x00000000
---------------------
no valid header(2)
bootdelay=5
bootargs (default)
## Booting kernel from Legacy Image at d05fffc0 ...
   Image Name:   Linux-3.10.0-uc0
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2444184 Bytes = 2.3 MiB
   Load Address: d0600000
   Entry Point:  d0600000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
TK: gipc-protocol addr(v2)=d4822800 magic=4054 ver=0105(0105)
TK: cpu lock_reg:
TK:   active=d4822894
TK:   free  =d4822898
TK: ipc config=00000014
TK:   router-device
TK: ipc init ch=0
TK:   peer-genirq=fc002c28(1)
TK:   s-ch_enabled=0x10010001
TK: ipc init ch=16
TK:   peer-genirq=fc002c28(1)
TK:   s-ch_enabled=0x10010001
TK: ipc init ch=28
TK:   peer-genirq=fc002c28(1)
TK:   s-ch_enabled=0x10010001
TK: ipc init ch=1
TK:   peer-genirq=fc002c28(1)
TK:   s-ch_enabled=0x1001000

OEM Bootlog AP


===================================================================
                MT7621   stage1 code Mar 12 2015 14:43:30 (ASIC)
                CPU=500000000 HZ BUS=166666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11000000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0x11, 1/0 = 566/458 45000000
PLL4 FB_DL: 0x1a, 1/0 = 761/263 69000000
MEMPLL 3PLL mode calibration fail
do DDR setting..[01F40000]
Apply DDR3 Setting...(use default AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120

DRAMC_DQSCTL1[0e0]=13000000
DRAMC_DQSGCTL[124]=80000033
rank 0 coarse = 15
rank 0 fine = 72
B:|    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0    0
opt_dle value:10
DRAMC_DDR2CTL[07c]=C287222D
DRAMC_PADCTL4[0e4]=000022B3
DRAMC_DQIDLY1[210]=0C0B090C
DRAMC_DQIDLY2[214]=070C090B
DRAMC_DQIDLY3[218]=0C090906
DRAMC_DQIDLY4[21c]=0A090B09
DRAMC_R0DELDLY[018]=00001F21
==================================================================
                RX      DQS perbit delay software calibration 
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    11 7 9 11 9 9 10 7 6 9 
10 |    9 10 9 11 9 10 
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center 
y=0-7bit DQ of every group
input delay:DQS0 =33 DQS1 = 31
==================================================================
bit     DQS0     bit      DQS1
0  (2~62)32  8  (1~61)31
1  (1~61)31  9  (1~61)31
2  (1~61)31  10  (1~62)31
3  (2~62)32  11  (1~58)29
4  (1~62)31  12  (1~61)31
5  (1~65)33  13  (1~61)31
6  (1~62)31  14  (1~62)31
7  (2~64)33  15  (1~61)31
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    12 9 11 12 11 9 12 7 6 9 
10 |    9 12 9 11 9 10 
==================================================================
==================================================================
     TX  perbyte calibration 
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000 
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
DQ loop=15, cmp_err_1 = ffff0080
dqs_perbyte_dly.last_dqdly_pass[1]=15,  finish count=1 
DQ loop=14, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=14,  finish count=2 
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
DRAMC_DQODLY1[200]=88888888
DRAMC_DQODLY2[204]=88888888
20,data:88
[EMI] DRAMC calibration passed

===================================================================
                MT7621   stage1 code done 
                CPU=500000000 HZ BUS=166666666 HZ
===================================================================


U-Boot 1.1.3 (Dec  4 2017 - 15:34:54)

Board: Ralink APSoC DRAM:  128 MB
relocate_code Pointer at: 87fb8000

Config XHCI 40M PLL 
flash manufacture id: c2, device id 20 19
find flash: MX25L25635E
*** Warning - bad CRC, using default environment

============================================ 
Ralink UBoot Version: 4.3.0.6
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=5 OCP Ratio=1/3
Flash component: SPI Flash
Date:Dec  4 2017  Time:15:34:54
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN WLLLL

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
 0 
   
3: System Boot system code via Flash[1st image].
## Booting image at bc050000 ...
Skip checking image magic number
   Image Name:   
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    10088374 Bytes =  9.6 MB
   Load Address: 80001000
   Entry Point:  8000d210
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000d210) ...
## Giving linux memsize in MB, 128

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.36 (root@jglv) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 SMP PREEMPT Thu May 10 12:58:53 CST 2018

 The CPU feqenuce set to 880 MHz
GCMP present
CPU revision is: 0001992f (MIPS 1004Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 08000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00008000
Detected 3 available secondary CPU(s)
PERCPU: Embedded 7 pages/cpu @81103000 s7552 r8192 d12928 u65536
pcpu-alloc: s7552 r8192 d12928 u65536 alloc=16*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 console=ttyS1,57600 root=/dev/ram0 rootfstype=squashfs,jffs2 isolcpus=1
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Writing ErrCtl register=00063070
Readback ErrCtl register=00063070
Memory: 115660k/131072k available (4293k kernel code, 15412k reserved, 1470k data, 8008k init, 0k highmem)
Preemptable hierarchical RCU implementation.
        RCU debugfs-based tracing is enabled.
NR_IRQS:128
Trying to install interrupt handler for IRQ24
Trying to install interrupt handler for IRQ25
Trying to install interrupt handler for IRQ22
Trying to install interrupt handler for IRQ9
Trying to install interrupt handler for IRQ10
Trying to install interrupt handler for IRQ11
Trying to install interrupt handler for IRQ12
Trying to install interrupt handler for IRQ13
Trying to install interrupt handler for IRQ14
Trying to install interrupt handler for IRQ16
Trying to install interrupt handler for IRQ17
Trying to install interrupt handler for IRQ18
Trying to install interrupt handler for IRQ19
Trying to install interrupt handler for IRQ20
Trying to install interrupt handler for IRQ21
Trying to install interrupt handler for IRQ23
Trying to install interrupt handler for IRQ26
Trying to install interrupt handler for IRQ27
Trying to install interrupt handler for IRQ28
Trying to install interrupt handler for IRQ15
Trying to install interrupt handler for IRQ8
Trying to install interrupt handler for IRQ29
Trying to install interrupt handler for IRQ30
Trying to install interrupt handler for IRQ31
console [ttyS1] enabled
Calibrating delay loop... 577.53 BogoMIPS (lpj=1155072)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
launch: starting cpu1
launch: cpu1 gone!
CPU revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
launch: starting cpu2
launch: cpu2 gone!
CPU revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
launch: starting cpu3
launch: cpu3 gone!
CPU revision is: 0001992f (MIPS 1004Kc)
Primary instruction cache 32kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
Brought up 4 CPUs
Synchronize counters across 4 CPUs: done.
NET: Registered protocol family 16
release PCIe RST: RALINK_RSTCTRL = 7000000
PCIE PHY initialize
***** Xtal 40MHz *****
start MT7621 PCIe register access
RALINK_RSTCTRL = 7000000
RALINK_CLKCFG1 = 77ffeff8

*************** MT7621 PCIe RC mode *************
PCIE2 no card, disable it(RST&CLK)
pcie_link status = 0x3
RALINK_RSTCTRL= 3000000
*** Configure Device number setting of Virtual PCI-PCI bridge ***
RALINK_PCI_PCICFG_ADDR = 21007f2 -> 21007f2
PCIE0 enabled
PCIE1 enabled
interrupt enable status: 300000
Port 1 N_FTS = 1b105000
Port 0 N_FTS = 1b105000
config reg done
init_rt2880pci done
bio: create slab <bio-0> at 0
vgaarb: loaded
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
pci 0000:00:01.0: PCI bridge to [bus 02-02]
pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
PCI: Enabling device 0000:00:00.0 (0004 -> 0006)
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
BAR0 at slot 1 = 0
bus=0x0, slot = 0x1
bus=0x1, slot = 0x0, irq=0x4
bus=0x2, slot = 0x1, irq=0x18
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1
4 CPUs re-calibrate udelay(lpj = 1167360)
Load Ralink Timer0 Module
Load Ralink Timer1 Module
Load Ralink Timer2 Module
fuse init (API version 7.15)
msgmni has been set to 225
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
pcieport 0000:00:00.0: device [0e8d:0801] has invalid IRQ; check vendor BIOS
pcieport 0000:00:01.0: device [0e8d:0801] has invalid IRQ; check vendor BIOS
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x1e000d00 (irq = 27) is a 16550A
serial8250: ttyS1 at MMIO 0x1e000c00 (irq = 26) is a 16550A
brd: module loaded
flash manufacture id: c2, device id 20 19
MX25L25635E(c2 2019c220) (32768 Kbytes)
mtd .name = raspi, .size = 0x02000000 (32M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 5 MTD partitions on "raspi":
0x000000000000-0x000002000000 : "ALL"
0x000000000000-0x000000020000 : "Bootloader"
0x000000020000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000001000000 : "Kernel"
rdm_major = 253
GMAC1_MAC_ADRH -- : 0x0000d4c8
GMAC1_MAC_ADRL -- : 0xb04607af
Ralink APSoC Ethernet Driver Initilization. v3.1  1024 rx/tx descriptors allocated, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x0000d4c8
GMAC1_MAC_ADRL -- : 0xb04607af
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24


=== pAd = c0282000, size = 1234208 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
device_id =0x7603
RtmpChipOpsHook(558): Not support for HIF_MT yet!
check WiFi led...
mt7603_init()-->
mt_bcn_buf_init(224): Not support for HIF_MT yet!
<--mt7603_init()
Ralink APSoC Hardware Watchdog Timer
Netfilter messages via NETLINK v0.30.
[pbi]get NAT type fail!, use default:NAT_SYMMETRIC
nf_conntrack version 0.5.0 (1807 buckets, 7228 max)
ctnetlink v0.93: registering with nfnetlink.
matchsize=264
IPVS: Registered protocols ()
IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
IPVS: ipvs loaded.
GRE over IPv4 demultiplexor driver
GRE over IPv4 tunneling driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team, [pbi]get NAT type fail!, use default:NAT_SYMMETRIC
Type=Linux
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Warning: unable to open an initial console.
Freeing unused kernel memory: 8008k freed
Welcome to
     __   ___  _____  _____   _  _______ ______  _____  _   ___
    |  \ /   ||  ___||  __ \ | ||  __  ||__  __||  ___|| | /  /
    |   ^    || |__  | |  \ \| || |  | |  | |   | |__  | |/  /
    |  | |   ||  ___|| |  | || || |__| |  | |   |  ___||    \
    |  | |   || |___ | |__/ /| ||  __  |  | |   | |___ | |\  \
    |__| |___||_____||_____/ |_||_|  |_|  |_|   |_____||_| \__\

                        = Everyday Genius =
                            
~~~~~~~~~~ restore customize config start ~~~~~~~~~~ 
COUNT_ODMC=19
COUNT_CSTM=19
~~~~~~~~~~ restore customize config end ~~~~~~~~~~ 
[pbi] check config key....
vm.panic_on_oom = 1
kernel.panic = 10
net.ipv4.conf.default.arp_ignore = 1
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0
net.netfilter.nf_conntrack_checksum = 0
net.netfilter.nf_conntrack_max = 16384
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
net.ipv4.tcp_max_tw_buckets = 8192
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.core.rmem_max = 124928
net.core.wmem_max = 124928
net.ipv4.tcp_rmem = 4096 87380 186624
net.ipv4.tcp_wmem = 4096 87380 186624
net.ipv4.tcp_mem = 4374 5832 8748
net.core.netdev_max_backlog = 1000
Password for 'admin' changed
FFFFFFD4:FFFFFFC8:FFFFFFB0:46: 7:FFFFFFAF
Raeth v3.1 (Tasklet)
phy_free_head is 0x5b2c000!!!
phy_free_tail_phy is 0x5b2dff0!!!
txd_pool=a5b30000 phy_txd_pool=05B30000
ei_local->skb_free start address is 0x87dc24fc.
free_txd: 05b30010, ei_local->cpu_ptr: 05B30000
 POOL  HEAD_PTR | DMA_PTR | CPU_PTR 
----------------+---------+--------
     0xa5b30000 0x05B30000 0x05B30000

phy_qrx_ring = 0x05b26000, qrx_ring = 0xa5b26000

phy_rx_ring0 = 0x05b34000, rx_ring0 = 0xa5b34000
MT7530 Reset Completed!!
change HW-TRAP to 0x17ccf
set LAN/WAN WLLLL
GMAC1_MAC_ADRH -- : 0x0000d4c8
GMAC1_MAC_ADRL -- : 0xb04607af
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
@@@ create necessary device nodes for voIP
mknod: /dev/vdsp: File exists
mknod: /dev/slic: File exists
Password for 'admin' changed
switch reg write offset=2004, value=ff0003
switch reg write offset=2104, value=ff0003
switch reg write offset=2204, value=ff0003
switch reg write offset=2304, value=ff0003
switch reg write offset=2404, value=ff0003
switch reg write offset=2504, value=ff0003
switch reg write offset=2010, value=81000000
switch reg write offset=2110, value=810000c0
switch reg write offset=2210, value=810000c0
switch reg write offset=2310, value=810000c0
switch reg write offset=2410, value=810000c0
switch reg write offset=2510, value=810000c0
switch reg write offset=2610, value=81000000
switch reg write offset=2710, value=81000000
switch reg write offset=2004, value=20ff0003
switch reg write offset=2604, value=20ff0003
switch reg write offset=2704, value=20ff0003
Special Tag Disabled
switch reg write offset=2610, value=81000000
switch reg write offset=2014, value=10001
switch reg write offset=2114, value=10002
switch reg write offset=2214, value=10001
switch reg write offset=2314, value=10001
switch reg write offset=2414, value=10001
switch reg write offset=2514, value=10001
ifconfig eth_om 169.254.0.2 netmask 255.255.255.252 up route add -host 169.254.0.1 dev eth_om
REG_ESW_WT_MAC_ATC is 0x7ff0002
done.
REG_ESW_WT_MAC_ATA1 is 0xd4c8b046
REG_ESW_WT_MAC_ATA2 is 0x7af8067
REG_ESW_WT_MAC_ATWD is 0xff00041c
done.
net.ipv4.ip_forward = 1
[cpe_wd] cpe_wd started.
set comm_log_level:1
set comm_log_level:1
[00:00:14.569400][COMMCUDP]: comm commcrtl_cudp_initSocket OK.
[00:00:14.570080][COMMCUDP]: comm commctrl_cudp_initThread OK.
[00:00:14.570600][COMMCUDP]: cudp comm_udp_clientsock:16 
[00:00:14.574180][COMMCUDP]: listen socket creat success!c_cUdpSocket:[4]
Interface doesn't accept private ioctl...
set (8BE2): Network is down
rai0      no private ioctls.

ESW: Link Status Changed - Port0 Link UP
do sysRegWrite cmd set gpio on/off
[00:00:15.149220][COMM]: [comm]:unknow msg type(8).
[00:00:15.149960][COMMCTCP]: comm detect odu power up.
[00:00:15.178260][COMMCTCP]: Connect OK [4]!
[00:00:15.180280][COMMLTCP]: Accept new socket 17!
[00:00:15.184140][LCM]: lcm recv socket channel ready msg.
[00:00:15.188140][LCM]: lcm_simLedCtrl:state 3 .
[00:00:15.192140][LCM]: stMsg.homePlmn 51010.
[00:00:15.560860][CCM]: IDU detect ethernet interface up.
[00:00:15.561280][CCM]: ccm recv socket channel ready msg.
[00:00:15.562520][CCM]: socket channel ready.
[00:00:15.620120][LCM]: lcm_simLedCtrl:state 3 .
[00:00:16.284960][LCM]: sysinfo timeout.
[00:00:16.354060][LCM]: init connect status data:1 (1)
[00:00:16.356040][LCM]: init connect status voip:1 (1)
[00:00:16.360060][LCM]: init connect status all :1 (1)
[00:00:16.364140][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
device eth2.1 entered promiscuous mode
device eth2 entered promiscuous mode
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering forwarding state


=== pAd = c0902000, size = 2182904 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
chip_id1=7603e, chip_id2=7612e, pAd->MACVersion=0x76623000
chip_id1=0x7603e, chip_id2=0x7612e, pAd->MACVersion=0x76623000
RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=2
NVM is efuse and the information is too less to bring up the interface
Force to use Flash mode
NVM is FLASH mode (pAd->flash_offset = 0x48000)
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
dns_pesi.sh read nv start
dns_pesi.sh read nv stop
dns_pesi.sh rm start
dns_pesi.sh rm stop
Ethernet_DNS
LTE_DNS
killall: dnsmasq: no process killed
dns_pesi.sh all stop
[LAN_DBG]do update lan route config...
[/sbin/allnetconfig.sh]data pdn disconnected
[/sbin/allnetconfig.sh]voice pdn disconnected
Stop Static Route ...
net.ipv4.ip_forward = 1
[00:00:21.285000][LCM]: sysinfo timeout.
[00:00:21.352060][LCM]: init connect status data:1 (1)
[00:00:21.356060][LCM]: init connect status voip:1 (1)
[00:00:21.360060][LCM]: init connect status all :1 (1)
[00:00:21.364140][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
Start Static Route ...
static route list =
net.ipv4.ip_forward = 1
conntrack v1.4.2 (conntrack-tools): 0 flow entries have been deleted.
conntrack v1.4.2 (conntrack-tools): 0 flow entries have been deleted.
Static Route restart ok
Config system network route_update ok

argument2 is null.
[00:00:23.284940][LCM]: Protect Attach Status Timer Out.
[00:00:23.288160][LCM]: [attachmode]operateFlg:[0] attachStatusFlg:[0] mode:[0] manual:[0].
killall: udhcpd: no process killed
linkdown port 2
Set: phy[2].reg[0] = 3900
linkup port 2
Set: phy[2].reg[0] = 3100
net.ipv6.conf.all.forwarding = 1
hw_nat: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Ralink HW NAT Module Enabled
apcli0    no private ioctls.

ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: Invalid argument
brctl: iface ra1: No such device
brctl: iface ra2: No such device
brctl: iface ra3: No such device
brctl: iface wds0: No such device
brctl: iface wds1: No such device
brctl: iface wds2: No such device
brctl: iface wds3: No such device
TX_BCN DESC a5f12000 size = 320
RX[0] DESC a5f1c000 size = 2048
RX[1] DESC a5f1d000 size = 2048
E2pAccessMode=0
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
[00:00:26.285020][LCM]: sysinfo timeout.
[00:00:26.288060][LCM]: get pin Enable timout.
[00:00:26.354040][LCM]: init connect status data:1 (1)
[00:00:26.356040][LCM]: init connect status voip:1 (1)
[00:00:26.360040][LCM]: init connect status all :1 (1)
[00:00:26.364220][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
FW Version:ap_pcie
FW Build Date:20160107100755
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
[00:00:26.661240][AsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
LCM]: lcm_simLedefuse_probe: efuse = 10000002
Ctrl:state 3 .
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=1
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 1
NVM is FLASH mode, flash_offset = 0x40000
1. Phy Mode = 14
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 27
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(14): Not support for HIF_MT yet!
NICInitializeAsic(584): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
mt7603_init_mac_cr()-->
AsicSetMacMaxLen(1826): Set the Max RxPktLen=1024!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2567): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
AsicSetRalinkBurstMode(4148): Not support for HIF_MT yet!
RTMPSetPiggyBack(876): Not support for HIF_MT yet!
AsicSetTxPreamble(4135): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xa0
Main bssid = d4:c8:b0:46:07:b0
<==== rt28xx_init, Status=0
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
==>Set_RadioOn_Proc (ON)
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
br0: port 2(ra0) entering learning state
=============WIFI 2.4G AP PIN CHK==============
Have AP_PIN
apclii0   no private ioctls.

ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: Invalid argument
brctl: iface rai1: No such device
brctl: iface rai2: No such device
brctl: iface rai3: No such device
brctl: iface wdsi0: No such device
brctl: iface wdsi1: No such device
brctl: iface wdsi2: No such device
brctl: iface wdsi3: No such device
br0: port 2(ra0) entering forwarding state
build time = 
20141115060606a
rom patch for E3 IC

platform = 
ALPS
hw/sw version = 


 patch version = 

FW Version:0.0.00 Build:1
Build Time:201607111443____
fw for E3 IC
RX[0] DESC a0ab5000 size = 4096
RX[1] DESC a0ab6000 size = 4096
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
[00:00:31.285000][LCM]: sysinfo timeout.
[00:00:31.350020][LCM]: init connect status data:1 (1)
[00:00:31.352060][LCM]: init connect status voip:1 (1)
[00:00:31.356040][LCM]: init connect status all :1 (1)
[00:00:31.360140][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
1. Phy Mode = 49
drivers/net/wireless/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2901 assert (ad->TxPower[choffset].Channel == 42)failed
Country Region from e2p = ffff
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
MCS Set = ff ff 00 00 01
TX0 power compensation = 0x38
TX1 power compensation = 0x38
mt76x2_bbp_adjust():rf_bw=2, ext_ch=3, PrimCh=153, HT-CentCh=151, VHT-CentCh=155
APStartUp(): AP Set CentralFreq at 155(Prim=153, HT-CentCh=151, VHT-CentCh=155, BBP_BW=2)
mt76x2_calibration(channel = 155)
Main bssid = d4:c8:b0:46:07:b1
mt76x2_reinit_agc_gain:original agc_vga0 = 0x5c, agc_vga1 = 0x5c
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x5c, agc_vga1 = 0x5c
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x27, hi_lna1 = 0x27
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x27, hi_lna1 = 0x27
original vga value(chain0) = 5c
original vga value(chain1) = 5c
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=apclii
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
===========WIFI 5G AP PIN CHK==============
Have AP_PIN
device rai0 entered promiscuous mode
br0: port 3(rai0) entering learning state
br0: port 3(rai0) entering learning state
sc load_ko in rcS
[00:00:35.099060][WEBSERVER]: Init Procress PID=1068 wp=(nil) mode=0[00:00:35.099740][WEBSERVER]: [firewall_init] init_opt:11
++++++rcS done++++++
init: can't log to /dev/tty5
starting pid 1073, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2018-05-10 12:49:11 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# [00:00:35.187840][WEBSERVER]: FIREWALL_CHAIN: arp.rule_nums=1eth_wan_dhcp_connected=
eth_wan_pppoe_connected=
PrimaryWan=1
lte_data_state=1
APCLI_24G_STATUS=
[00:00:35.239260][WEBSERVER]: FIREWALL_CHAIN: arp_forward.rule_nums=1APCLI_5G_STATUS=
lte_emm_state=0
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
[00:00:35.285000][LCM]: Protect Attach Status Timer Out.
[00:00:35.288120][LCM]: [attachmode]operateFlg:[0] attachStatusFlg:[0] mode:[0] manual:[0].
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
[00:00:35.338120][LCM]: init connect status data:1 (1)
[00:00:35.340180][LCM]: init connect status voip:1 (1)
[00:00:35.344140][LCM]: init connect status all :1 (1)
[00:00:35.348160][LCM]: detach rsp is too late.Manual Attach is Idle.
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_max_syn_backlog = 128
net.ipv4.tcp_syn_retries = 5
[00:00:35.440280][LCM]: init connect status data:1 (1)
[SC] SIP Load Kernel Modules... 
[00:00:35.444100][LCM]: init connect status voip:1 (1)
[00:00:35.448140][LCM]: init connect status all :1 (1)
[00:00:35.452140][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
[SC] sc_load_ko insert modules
[SC] sc_load_modules insosal_module.c:39 OSAL module_init OK

ert modules(without ralink ko) ...
net.ipv4.tcp_synack_retries = 5
[00:00:35.4br0: port 3(rai0) entering forwarding state
80120][WEBSERVER]: FIREWALL_CHAIN: malicious_filter.rule_nums=1net.ipv4.tcp_syncookies = 1
lkm.c 178: devname /dev/d2vtspr

/dev/d2vtspr registered successfuly @ 250.

net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.tcp_syn_retries = 3
net.ipv4.tcp_synack_retries = 2
[00:00:35.871280][WEBSERVER]: FIREWALL_CHAIN: input_pre.rule_nums=1[00:00:35.991080][WEBSERVER]: FIREWALL_CHAIN: forward_passthrough.rule_nums=1[00:00:36.005460][WEBSERVER]: FIREWALL_CHAIN: forward_pre.rule_nums=1[00:00:36.114860][WEBSERVER]: FIREWALL_CHAIN: input_post.rule_nums=1[00:00:36.285000][LCM]: sysinfo timeout.
[00:00:36.353140][LCM]: init connect status data:1 (1)
[00:00:36.356140][LCM]: init connect status voip:1 (1)
[00:00:36.360120][LCM]: init connect status all :1 (1)
[00:00:36.364140][LCM]: [attachmode]operate:[0],emm:[0],old:[0],attachmode:[0],searchmode:[2].
[00:00:36.475460][WEBSERVER]: FIREWALL_CHAIN: alg.rule_nums=1[00:00:36.476980][WEBSERVER]: [alg] run
[00:00:36.504940][WEBSERVER]: FIREWALL_CHAIN: output.rule_nums=1Enter _VHW_pcmOpen

_VHW_pcmOpen exit

_VHW_wdtTask is running

switch register base addr to system register 0xbe000000
write offset 0x2030, value 0x28000000
write offset 0x2060, value 0x8181
[SC] sc_load_modules insert modules done...
[00:00:36.681560][WEBSERVER]: FIREWALL_CHAIN: mark.rule_nums=1net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30
net.ipv4.netfilter.ip_conntrack_udp_timeout = 180
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 180
Write correct !

Channel 0: Revision Id 0xA2(0x18:0x2)

_TIC_initHw 1007 - Read data in register 14: aa

Si3217x: Channel 0 : Type = PROSLIC
si3217x : Channel 0 : Type = 24
si3217x : Channel 0 : Rev  = 2
Si3217x: loading patch: 06182014
Si3217x: Channel 0 : VBAT Up = 58.730 v
pppoe_addr : 
dhcp_addr : 
eth_wan_if_addr : 
is_wan_port_up : 
[nat_postrouting_pesi.sh] wifi_ap_client : 0
[nat_postrouting_pesi.sh] wifi_band : 0
Bad argument `MASQUERADE'
Try `iptables -h' or 'iptables --help' for more information.
iptables -t nat -A POSTROUTING -o eth_data -j MASQUERADE
#               iptables -t nat -A POSTROUTING -o eth_voip -j MASQUERADE
[00:00:37.999180][WEBSERVER]: FIREWALL_CHAIN: malicious6_filter.rule_nums=1Si3217x: PCMStart
[00:00:38.263860][WEBSERVER]: FIREWALL_CHAIN: forward_pre.rule_nums=1_TIC_fxsSetLineState[1111]: Error! REG30 = 1, it should be 0x11

[00:00:38.386000][WEBSERVER]: FIREWALL_CHAIN: input6_pre.rule_nums=1_TIC_fxsSetLineState[1122]: 11

[00:00:38.553380][WEBSERVER]: FIREWALL_CHAIN: input6_post.rule_nums=1[00:00:39.005900][WEBSERVER]: FIREWALL_CHAIN: mark6.rule_nums=1Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
Interface doesn't accept private ioctl...
set (8BE2): Invalid argument
net.ipv4.ip_forward = 1
Ralink HW NAT Module Disabled
conntrack v1.4.2 (conntrack-tools): connection tracking table has been emptied.
net.ipv4.ip_forward = 1

need to implement this to dts and network config.
diagram
/target/linux/ramips/dts/mt7621_bolt_arion.dts

 &switch0 {
         ports {
                 port@0 {
                         status = "okay";
                         label = "lan1";
                 };
                 wan: port@1{
                         status = "okay";
                         label = "wan";
                         nvmem-cells = <&macaddr_factory_4000;
                         nvmem-cell-names = "mac-address";
                 };
 
                 port@2 {
                         status = "okay";
                         label = "lan2";
                 };
         };
 };

How to set interface lan1.4094 and lan1.103 ?
target/linux/ramips/base-files/etc/board.d/02_network