Hello fellow users,
My shiny FGS202 arrived from France today. It was really cheap comparing how much they want for Zisa.
How can I run OpenWRT on it?
I scoured the Internet and here's what I found
Hardware:
Flash Macronix MX25L6435E 8 MiB (8 388 608 bytes) 0x800000
Intel(Lantiq) PEB98036 FALCON-SR GPON Chipset
DRAM 1 MiB (Internal)
Flash dumps
Used
https://mega.nz/#!DVQFwSbJ!WBoJAYjGIX4UZAFIL_UYiHC6VZdSJWJkXP-Q5fWq8ic
Virgin
https://mega.nz/#!ed4XUBrS!DgIX60oUBPvt-Sa1sEvFNJtAstHsNlz2-zYY-gZUzOA
WAN telnet login
Sercomm SFP ONU CLI - SCOMFGS202112 (compiled on Apr 2 2016 02:34:38)
user:admin
password:admin
FGS202:/# help
<==================== =-CLI COMMANDS-========================>
show onu_stats :Display egress queue,port and TCONT counter.
show device :Display general device information.
show fw :Display firmware information.
show me [clas_id][ins_id] :Display general ME information.
show data_path :Display the forwarding table.
show lan :Display LAN information.
show gpon :Display GPON information.
show optic :Display optic information.
show gtc :Display GTC counter information.
show igmp :Display IGMP information.
show omci :Display omci log dynamically and sostenuto.
show omci_path :Display bridge port,vlan,pbit,gem port,tcont relation.
show omci_history :Display history omci log information.
show sys_log :Display system log information.
show ram :Display RAM information.
show i2c :Display I2C information.
show crash_log :Display crash log information.
reset sys_log :Clear system log information.
reset factory :Restore factory setting.
reset crash_log :Clear crash log information.
set gpon_password PASSWORD :Set GPON password.
set password PASSWORD :Set user password.
set time time_date :Set time for system,in this format year:month:day:hour:minute:second.
set telnet enable/disable :Enable/disbale telnet function
set mapper_gem_queue :Mapper gem port to egress queue
set qos_config :Set egress port or queue param
tftp <server_ip><file_name> :Download file_name from tftp server(ip)
omci_net_trace <TFTP-server-ip> :Start uploading real-time omci trace to tftp server
omci_net_trace stop :Stop uploading real-time omci trace to tftp server
optical prbs23/prbs32 :Change optical to PRBS23/PRBS32
omci_trace start :Start omci packet trace
omci_trace stop :Stop omci packet trace.
omci_trace upload <TFTP-server-ip> :Upload ocmi packet trace to tftp server
sys_log upload <TFTP-server-ip> :Upload system log to tftp server
diag [detail]
nmap scan from 192.168.2.0/24 reveals 2 open ports: 23 and 9000
It confirms other FGS202 user's findings
FGS202:/# show device
GPON Netif 192.168.100.53/255.255.255.0
GW 192.168.100.2
MAC b4:a5:ef:c8:44:a7
Conuter:
tx:104 tx_err:0 rx:96 rx_err:0
dhcp_discover:3 dhcp_offer:1 dhcp_req:1 dhcp_ack:1
LAN Netif 192.168.2.200/255.255.255.0
MAC b4:a5:ef:c8:44:a8
ONU serial number SCOM2102b9be
Date code 161129
Bosa type 000000
Pcbasn R.BNN4CI14DE
Running image 0
Image 0 version SCOMFGS202112
Image 1 version SCOMFGS202112
Bootloader version 2.0.2.0
Last reboot cause Power-On Reset
SYS running time 0:04:50
SFP has an active serial TX line on SFP golden pin 6.
Serial output from putty screen
ROM: V1.1.4
ROM: CFG 0x00000006
ROM: SFLASH-4
hw fuse format 1
U-Boot 2011.12-lantiq-gpon-1.2.20.1-svn20 (Aug 10 2015 - 13:49:58), Build: falcon_sfp
Board: SFP
DRAM: internal: 1 MiB
Now running in RAM - U-Boot at: 9f2c4000
SF: Detected MX25L6405D with page size 64 KiB, total 8 MiB
Chip: FALCON-SR (A22)
Bootmode: 0x06
Reset cause: Power-On Reset
CPU Clock: 400 MHz
Done!
Net: SGMII, SERDES [PRIME]
Type run flash_nfs to mount root filesystem over NFS
SF: Detected MX25L6405D with page size 64 KiB, total 8 MiB
SF: Detected MX25L6405D with page size 64 KiB, total 8 MiB
SF: Detected MX25L6405D with page size 64 KiB, total 8 MiB
active_img 0, committed_img 1
pid_addr 0x2a0ce8
dbSign Addr: 0x9f200208
imgNum: 1
img 0: start addr: 0x100000, length: 0x1a0ce8
checksum: 0xa39a73eb
crc32 result: 0xa39a73eb
check sum OK
name c_img
value 1
name activate_image
value 0
Erasing SPI flash...Writing to SPI flash...done
SF: Detected MX25L6405D with page size 64 KiB, total 8 MiB
***************************************************
Sercomm Boot Version 2.0.2.0
***************************************************
No sc dl flag.
gpio_id:8 no found
Entering Firmware : Everything is OK.
No sc dl flag.
## Starting application at 0x10000000 ...
Overall used memory: 150616
Available packet buffer: 769984 (llt min 6401, llt max 18432)
Init flash support
M25PXX : Init device 'Macronix 64 Mbit' with JEDEC ID 0xC22017/0x0000.
Found flash at 0x00000000-0x007fffff
Flash bank with 128 sectors, sector size is 65536 bytes
Find valid uboot environment in env_off and env_end_off
Machine: Falcon SFP Stick (SFP)
Set image#0 version: SCOMFGS202112
Set image#1 version: SCOMFGS202112
Successfully stored environment to 0x7f0000
Successfully stored environment to 0x60000
Image start address: 0xb0100000
Image 0: 0xB0100000 - valid
Image 1: 0xB0480000 - valid
ONT Boot up #1 image
FALC(tm) ON Optic Driver, version 7.4.0.0 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG
FALC(tm) ON Base Driver, Version 7.3.3.0 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG