Support for Linksys E2500 V4

vwnut8392 · March 2, 2020, 7:25am

I'll Move this here because im pretty confident that it should be pretty easy to add support for this router with my findings and research. What i discovered is this router uses the same 2 chips as the TOTOLINK LR1200 which is the MediaTek MT7628DAN CPU/2.4GHZ radio and MediaTek MT7612E 5GHZ radio. All files are hosted on my mega account, hope its not a huge deal.

To start this is the serial port and its pin out.
Serial Port Pinout Picture.

This is a dump of the stock firmware that got by reading the MX25L12805D flash with my GQ-4X4 programmer and an SOIC-8 clip.
E2500 V4 OEM Flash Dump

This is a dump from the router booting with its stock firmware.

[03060D08][03060D09][87870000][31315151][00313152]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 3
                                                                              0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    9118606 Bytes =  8.7 MB
   Load Address: 80000000
   Entry Point:  8000c150
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

怘▒▒▒▒ff▒fa▒~▒~f▒`▒▒▒▒怘▒怘▒f30f▒`▒
▒`▒▒f▒▒f▒▒▒怘▒f▒Ϙ▒▒▒▒f~▒▒3▒Linux version 2.6.36+ (zls@cybertan-team2) (gcc versi                                                                             on 4.6.3 (Buildroot 2012.11.1) ) #18 Wed Jun 26 16:06:41 CST 2019

 The CPU feqenuce set to 580 MHz

 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200n8 root=/dev/ram0 console=ttyS0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00047acb
Readback ErrCtl register=00047acb
Memory: 52600k/65536k available (3741k kernel code, 12864k reserved, 1031k data,                                                                              7312k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 54050404
RALINK_GPIOMODE = 54040404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab <bio-0> at 0
SCSI subsystem initialized
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x2020                                                                             0000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [                                                                             0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
fuse init (API version 7.15)
msgmni has been set to 102
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: c2, device id 20 18
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numer                                                                             aseregions = 0
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000000ff0000 : "Kernel"
0x000000ff0000-0x000001000000 : "CBTinfo"
rdm_major = 253
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocate                                                                             d, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24


=== pAd = c0105000, size = 1467448 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(63888)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
GACT probability NOT on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (821 buckets, 3284 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
matchsize=264
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Warning: unable to open an initial console.
Freeing unused kernel memory: 7312k freed
Algorithmics/MIPS FPU Emulator v1.5
Password for 'root' changed

##### disable 1st wireless interface #####

##### disable 2nd wireless interface #####

##### disable 3rd wireless interface #####
rmmod: rlt_wifi: No such file or directory
rmmod: mt_wifi: No such file or directory
ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: No such device or address
ipt_webstr: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
register rt2860


=== pAd = c0782000, size = 2114360 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0680000, csr_addr=0xc0680000!
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCt                                                                             rl=0x20a
RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=2
NVM is efuse and the information is too less to bring up the interface
Force to use Flash mode
NVM is FLASH mode (pAd->flash_offset = 0x8000)
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
insmod: mt_wifi.ko: module not found
TX_BCN DESC a26b3000 size = 320
RX[0] DESC a26b6000 size = 1024
RX[1] DESC a26b7000 size = 1024
E2pAccessMode=2
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_                                                                             SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
RTMPSetDefaultChannel() : default channel to 1
load fw image from fw_header_image
AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
FW Version:20151201
FW Build Date:20151201183641
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 32
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2940): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
CmdSlotTimeSet:(ret = 0)
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
[PMF]ap_pmf_init:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNI                                                                             E
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [c800] doReload bit7[0]
CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
MtAsicAddSharedKeyEntry(1343): Not support for HIF_MT yet!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
ap_ftkd> Initialize FT KDP Module...
Main bssid = 30:23:03:fe:cb:77
<==== rt28xx_init, Status=0
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f, EDCCA_Status=0
WiFi Startup Cost (ra0): 5.480s
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =
▒▒
patch version =

FW Version:0.0.00 Build:1
Build Time:201507311614____
fw for E3 IC
RX[0] DESC a22bb000 size = 4096
RX[1] DESC a22bc000 size = 4096
MAX_PACKETS_IN_QUEUE= 128
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
pAd->ed_chk = 1
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
1. Phy Mode = 49
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
drivers/net/wireless/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxP                                                                             ower[choffset].Channel == 42)failed
Country Region from e2p = ffff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slop                                                                             e=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slop                                                                             e=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound                                                                             =0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound                                                                             =0
mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0xffffff82,                                                                              ALNAGain1=0x0, ALNAGain2=0xffffff82
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
TX0 power compensation = 0x38
TX1 power compensation = 0x38
[PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=149, HT-CentCh=151, VHT-CentCh=155
APStartUp(): AP Set CentralFreq at 155(Prim=149, HT-CentCh=151, VHT-CentCh=155, BBP_BW=2)
mt76x2_calibration(channel = 155)
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
Main bssid = 30:23:03:fe:cb:78
mt76x2_reinit_agc_gain:original agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x58, agc_vga1 = 0x58
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x29, hi_lna1 = 0x29
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x29, hi_lna1 = 0x29
original vga value(chain0) = 58
original vga value(chain1) = 58
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=apclii
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
***iwpriv ra0 set IgmpSnEnable=1**
***iwpriv rai0 set IgmpSnEnable=1**
##### configVIF #####
30:23: 3:FFFFFFFE:FFFFFFCB:75
Raeth v3.1 (Tasklet)

phy_tx_ring = 0x01eec000, tx_ring = 0xa1eec000

phy_rx_ring0 = 0x01eee000, rx_ring0 = 0xa1eee000
GMAC1_MAC_ADRH -- : 0x00003023
GMAC1_MAC_ADRL -- : 0x03fecb75
RT305x_ESW: Link Status Changed
vconfig: ioctl error for rem: No such device
vconfig: ioctl error for rem: No such device
rmmod: 8021q: No such file or directory
device eth2 entered promiscuous mode
##### config Ralink ESW vlan partition (LLLLW) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
done.
device ra0 entered promiscuous mode
ifconfig: ioctl 0x8913 failed: No such device
device eth2.1 entered promiscuous mode
device rai0 entered promiscuous mode
brctl: bridge br0: Device or resource busy

##### enable 2nd wireless interface #####
Start WAN .....
wan stop ...
cmd=[killall radvd ]
killall: radvd: no process killed
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
delete tunnel 6rd failed: No such device
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
cmd=[killall dnsmasq ]
killall: dnsmasq: no process killed
cmd=[killall radvd ]
killall: radvd: no process killed
cmd=[killall dhcpd6 ]
killall: dhcpd6: no process killed
cmd=[ip6tables -F ]
/proc/sys/net/ctf/wan_mode: No such file or directory
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
sh: cannot create /proc/unblock_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
sh: cannot create /proc/hnd_proc: nonexistent directory
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
wan start boot ...
cmd=[touch /tmp/hosts ]
start_dhcpc:=====( wan_or_lan=wan )=====
dhclient -nw -cf /tmp/dhcpc-wan.conf -sf /bin/dhcpc -lf /tmp/dhcpc-wan.leases -pf /var/run/dhcpc-wan.pid eth2.2 &
cmd=[touch /tmp/hosts ]
br0: port 3(rai0) entering learning state
br0: port 3(rai0) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
lan stop ...
cmd=[killall -16 dhcpd ]
killall: dhcpd: no process killed
cmd=[killall -16 gn-dhcpd ]
killall: gn-dhcpd: no process killed
cmd=[killall gn-dhcpd ]
killall: gn-dhcpd: no process killed
Start dhcpd ...
lan start ...
br0 192.168.1.100
write_dhcpd_conf: file=/tmp/dhcpd-br0.conf, ifname=br0, lan_ip=lan_ipaddr lan_mask=lan_netmask
cmd=[dhcpd -cf /tmp/dhcpd-br0.conf -lf /tmp/dhcpd.leases -df /tmp/udhcpd.leases -pf /var/run/dhcpd.pid br0 ]
Internet Systems Consortium DHCP Server 4.1.1-P1
Copyright 2004-2010 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Wrote 0 leases to leases file.
Listening on Socket/br0/192.168.1.0/24
Sending on   Socket/br0/192.168.1.0/24
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
br0: port 3(rai0) entering forwarding state
br0: port 2(eth2.1) entering forwarding state
br0: port 1(ra0) entering forwarding state
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:34 miniupnpd[2024]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:34 miniupnpd[2027]: WPS listening on port 8888
iwpriv ra0 set IgmpSnEnable=1
iwpriv rai0 set IgmpSnEnable=1
killall: long_loop: no process killed
/sbin/internet.sh: line 816: nfchod: not found
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
route: ioctl 0x890c failed: No such process
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:35 miniupnpd[2688]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:35 miniupnpd[2691]: WPS listening on port 8888
killall: rt2860apd: no process killed
wireless.c:restart_wps:3136:[restart_wps]wps_restart.wsc_enable=7
Unknown option: -I
Unknown option: ra0
Jan  1 00:00:36 miniupnpd[3231]: WPS listening on port 7777
Unknown option: -I
Unknown option: rai0
Jan  1 00:00:36 miniupnpd[3234]: WPS listening on port 8888
killall: rtinicapd: no process killed
Cannot find device "6rdtun"
0
webs: Listening for HTTP requests at address 192.168.1.1cmd=[cron ]
cron: can't open log file
/var/log/mess: No such file or directory
cron: can't write to log file
CRON (01/01-00:00:36-3252) STARTUP (fork ok)
[HTTPD Starting on /www]
cmd=[httpd ]
cmd=[route del -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
route: ioctl 0x890c failed: No such process
cmd=[route add -net 224.0.0.0 netmask 240.0.0.0 dev br0 ]
cmd=[cesmDNS -o /tmp/.mdns_host_info -d -h Linksys23392 -l 192.168.1.1 ]
cmd=[netbios /tmp/netbios.conf ]
cmd=[/bin/monitor_cable ]
init: can't log to /dev/tty5
starting pid 3300, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2019-06-20 18:14:21 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# cmd=[killall -1 nvram_daemon ]
start single service: unplug_wan_cable
stop_dhcp6c
cmd=[ip6tables -t filter -F ]
cmd=[ip6tables -t filter -Z ]
cmd=[ip6tables -t mangle -F ]
cmd=[ip6tables -t mangle -Z ]
Set 0 to /proc/sys/net/ipv6/conf/all/forwarding ...
cmd=[killall -9 waninfo ]
cmd=[killall -9 nlinkd ]
killall: nlinkd: no process killed
cmd=[rmmod dnshook ]
rmmod: dnshook: No such file or directory
cmd=[killall -9 qos_bw_detect ]
killall: qos_bw_detect: no process killed
cmd=[killall igmprt ]
killall: igmprt: no process killed
cmd=[killall -9 igmprt ]
killall: igmprt: no process killed
cmd=[killall pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall ip-up ]
killall: ip-up: no process killed
cmd=[killall ip-down ]
killall: ip-down: no process killed
cmd=[killall -15 pppd ]
killall: pppd: no process killed
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -15 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 l2tpd ]
killall: l2tpd: no process killed
cmd=[killall -9 listen ]
killall: listen: no process killed
cmd=[killall -9 waninfo ]
killall: waninfo: no process killed
stop_dhcpc
cmd=[killall -9 pppd ]
killall: pppd: no process killed
cmd=[killall -9 ntpclient ]
killall: ntpclient: no process killed
cmd=[killall -9 ntp ]
killall: ntp: no process killed
cmd=[killall -9 redial ]
killall: redial: no process killed
cmd=[killall wan_auto_detect ]
killall: wan_auto_detect: no process killed
unplug_wan_cable:dhclient -r -6 -N -P -d -q -nw -cf /tmp/dhcp6c-wan.conf -sf /bin/client6 -lf /tmp/dhcp6c-wan.leases -pf /var/run/dhcp6c-wan.pid eth2.2

vwnut8392 · March 2, 2020, 10:27am

Not sure if these are helpful or not but here is the wireless card drivers i extracted from the flash dump.
MT7612E and MT7628

123serge123 · March 2, 2020, 11:19am

You can test this openwrt 19.07.2 image:

BTW You said nothing of buttons (reset, wps) and leds (status, wifi, lan/wan).

vwnut8392 · March 2, 2020, 9:30pm

It has reset button, WPS button, LED's for all 5 ports and an LED for the WPS button. tried your file and this is what it gave me back over serial.

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 2
                                                                                                                                                           0


2: System Load Linux Kernel then write to Flash via TFTP.

2: System Load Linux kernel then write to Flash via TFTP.
 Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:10.10.10.123
        Input server IP (10.10.10.3) ==:10.10.10.3
        Input Linux Kernel filename (test.bin) ==:test.bin

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         ###################################checksum bad
#checksum bad
#############################
         ##################################checksum bad
###############################
         #################################################################
         #########################################checksum bad
#checksum bad
#######################
         #####################checksum bad
############################################
         #################################################################
         ##########################Got ARP REQUEST, return our IP
##checksum bad
#####################################
         #######checksum bad
##########################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194561 (400101 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400101
Abort: image Code pattern is error !## Booting image at bc050000 ...

Than i tried option 1 as well. no luck there either.

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 1
                                                                                                                                                           0


1: System Load Linux to SDRAM via TFTP.
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:10.10.10.123
        Input server IP (10.10.10.3) ==:10.10.10.3
        Input Linux Kernel filename (test.bin) ==:test.bin

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##########################################Got ARP REQUEST, return our IP
#######################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194561 (400101 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400101
Automatic boot of image at addr 0x82000000 ...
## Booting image at 82000000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.171
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1566351 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is Linksys E2500 v4
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80483740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=000460cb
[    0.000000] Readback ErrCtl register=000460cb
[    0.000000] Memory: 58820K/65536K available (3922K kernel code, 186K rwdata, 504K rodata, 1204K init, 208K bss, 6716K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007546] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073524] pid_max: default: 32768 minimum: 301
[    0.078211] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084574] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097176] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.106672] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.112614] pinctrl core: initialized pinctrl subsystem
[    0.120241] NET: Registered protocol family 16
[    0.229263] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.384610] PCI host bridge /pcie@10140000 ranges:
[    0.389198]  MEM 0x0000000020000000..0x000000002fffffff
[    0.394214]   IO 0x0000000010160000..0x000000001016ffff
[    0.416255] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.421906] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.427430] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.433812] PCI host bridge to bus 0000:00
[    0.437723] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.444405] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.450065] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.456635] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.464744] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.473230] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.479565] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.486341] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.492844] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.499835] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.506375] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.513459] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.520394] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.525204] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.531735] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.543612] clocksource: Switched to clocksource MIPS
[    0.549687] NET: Registered protocol family 2
[    0.554882] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.561573] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.567763] TCP: Hash tables configured (established 1024 bind 1024)
[    0.574016] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.579616] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.585966] NET: Registered protocol family 1
[    0.593517] Crashlog allocated RAM at address 0x3f00000
[    0.600231] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.612393] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.618025] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.638013] io scheduler noop registered
[    0.641745] io scheduler deadline registered (default)
[    0.647687] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.656627] console [ttyS0] disabled
[    0.660068] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.668846] console [ttyS0] enabled
[    0.668846] console [ttyS0] enabled
[    0.675852] bootconsole [early0] disabled
[    0.675852] bootconsole [early0] disabled
[    0.685410] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.698003] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.703179] 5 fixed-partitions partitions found on MTD device spi0.0
[    0.709687] Creating 5 MTD partitions on "spi0.0":
[    0.714575] 0x000000000000-0x000000030000 : "u-boot"
[    0.720539] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.726884] 0x000000040000-0x000000050000 : "factory"
[    0.732859] 0x000000050000-0x000000ff0000 : "firmware"
[    0.743074] 0x000000ff0000-0x000001000000 : "cbtinfo"
[    0.749922] libphy: Fixed MDIO Bus: probed
[    0.764914] rt3050-esw 10110000.esw: link changed 0x00
[    0.771757] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.782025] NET: Registered protocol family 10
[    0.790822] Segment Routing with IPv6
[    0.794745] NET: Registered protocol family 17
[    0.799310] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.812480] 8021q: 802.1Q VLAN Support v1.8
[    0.819704] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    0.827369] Please append a correct "root=" boot option; here are the available partitions:
[    0.835862] 1f00             192 mtdblock0
[    0.835868]  (driver?)
[    0.842496] 1f01              64 mtdblock1
[    0.842500]  (driver?)
[    0.849147] 1f02              64 mtdblock2
[    0.849152]  (driver?)
[    0.855793] 1f03           16000 mtdblock3
[    0.855798]  (driver?)
[    0.862426] 1f04              64 mtdblock4
[    0.862430]  (driver?)
[    0.869076] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    0.878666] Rebooting in 1 seconds..

Also tried this method for installing the file and the end result was the same as option 2.

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 4
                                                                                                                                                           0


4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)
MT7628 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
httpd   - start webserver
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version
MT7628 # tftpboot

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #####################################Got ARP REQUEST, return our IP
############################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194561 (400101 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400101
MT7628 # bootm
## Booting image at 82000000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.171
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1566351 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is Linksys E2500 v4
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80483740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00047dcb
[    0.000000] Readback ErrCtl register=00047dcb
[    0.000000] Memory: 58820K/65536K available (3922K kernel code, 186K rwdata, 504K rodata, 1204K init, 208K bss, 6716K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007546] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073524] pid_max: default: 32768 minimum: 301
[    0.078211] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084573] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097175] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.106672] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.112614] pinctrl core: initialized pinctrl subsystem
[    0.120241] NET: Registered protocol family 16
[    0.229263] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.384610] PCI host bridge /pcie@10140000 ranges:
[    0.389197]  MEM 0x0000000020000000..0x000000002fffffff
[    0.394214]   IO 0x0000000010160000..0x000000001016ffff
[    0.416255] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.421906] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.427431] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.433812] PCI host bridge to bus 0000:00
[    0.437723] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.444406] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.450066] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.456636] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.464744] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.473231] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.479566] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.486342] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.492845] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.499836] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.506376] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.513460] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.520395] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.525205] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.531736] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.543613] clocksource: Switched to clocksource MIPS
[    0.549687] NET: Registered protocol family 2
[    0.554882] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.561573] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.567763] TCP: Hash tables configured (established 1024 bind 1024)
[    0.574017] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.579617] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.585966] NET: Registered protocol family 1
[    0.593517] Crashlog allocated RAM at address 0x3f00000
[    0.600231] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.612393] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.618025] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.638011] io scheduler noop registered
[    0.641743] io scheduler deadline registered (default)
[    0.647686] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.656625] console [ttyS0] disabled
[    0.660066] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.668845] console [ttyS0] enabled
[    0.668845] console [ttyS0] enabled
[    0.675851] bootconsole [early0] disabled
[    0.675851] bootconsole [early0] disabled
[    0.685408] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.697998] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.703175] 5 fixed-partitions partitions found on MTD device spi0.0
[    0.709683] Creating 5 MTD partitions on "spi0.0":
[    0.714570] 0x000000000000-0x000000030000 : "u-boot"
[    0.720534] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.726879] 0x000000040000-0x000000050000 : "factory"
[    0.732853] 0x000000050000-0x000000ff0000 : "firmware"
[    0.743069] 0x000000ff0000-0x000001000000 : "cbtinfo"
[    0.749916] libphy: Fixed MDIO Bus: probed
[    0.765302] rt3050-esw 10110000.esw: link changed 0x00
[    0.772145] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.782413] NET: Registered protocol family 10
[    0.791210] Segment Routing with IPv6
[    0.795132] NET: Registered protocol family 17
[    0.799698] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.812867] 8021q: 802.1Q VLAN Support v1.8
[    0.820099] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    0.827763] Please append a correct "root=" boot option; here are the available partitions:
[    0.836258] 1f00             192 mtdblock0
[    0.836263]  (driver?)
[    0.842891] 1f01              64 mtdblock1
[    0.842896]  (driver?)
[    0.849542] 1f02              64 mtdblock2
[    0.849547]  (driver?)
[    0.856194] 1f03           16000 mtdblock3
[    0.856198]  (driver?)
[    0.862824] 1f04              64 mtdblock4
[    0.862828]  (driver?)
[    0.869474] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    0.879063] Rebooting in 1 seconds..

123serge123 · March 2, 2020, 10:20pm

First log show that firmware need additional header so uboot check failed.
Test image isn't for loading from memory so next 2 fail logs.
Can you force burning test image by hand? Next commands may help:

tftpboot 82000000 test.bin
erase.linux
cp.linux 82000000
reset

vwnut8392 · March 3, 2020, 2:15am

This is what happened after i ran it the way you suggested. After reset command was issued it hung at that http start for a very long time.

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 4
                                                                                                                                                           0


4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)
MT7628 # tftpboot 82000000 test.bin

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it

TFTP error: 'File not found' (1)
Starting again

Got ARP REQUEST, return our IP
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it

TFTP error: 'File not found' (1)
Starting again

TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x82000000
Loading: Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###########################################################checksum bad
#checksum bad
#####
         ##########checksum bad
############checksum bad
checksum bad
#################################checksum bad
##########
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194561 (400101 hex)
LoadAddr=82000000 NetBootFileXferSize= 00400101
MT7628 # erase.linux
Usage:
erase   - erase SPI FLASH memory

MT7628 # cp.linux 82000000

 Copy linux image[4194561 byte] to SPI Flash[0x00050000]....
................................................................
MT7628 # reset

[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3                                                                                                                                                 0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
Bad Header Checksum!

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
ethaddr 0:0:aa:bb:cc:dd
gatewayip 0
SubnetMask 0
starting httpd server at 192.168.1.1
http start

Abort
   Image Name:   LI@Q
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    205454 Bytes = 200.6 kB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... Bad Data CRC: ntohl(hdr->ih_dcrc)!

 NetTxPacket = 0x83FF5FC0

 Packet Buffer is empty !

mk24 · March 3, 2020, 2:45am

This is a bad flash because erase.flash is not supported on your u-boot, so the flash was not erased. I think the command would be erase 0xbc050000 0x410000 instead. That would erase enough space for the firmware (length 0x400101) starting at bc050000.

vwnut8392 · March 3, 2020, 2:53am

Same end result.

[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3

You choosed 4
                                                                                                                                                           0


4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)
MT7628 # tftpboot bc050000 test.bin

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0xbc050000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
Got ARP REPLY, set server/gtwy eth addr (38:60:77:b8:17:36)
Got it
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##############Got ARP REQUEST, return our IP
###################################################
         #################################################################
         #################################################################
         #################################################################
         ########################################
done
Bytes transferred = 4194561 (400101 hex)
LoadAddr=bc050000 NetBootFileXferSize= 00400101
MT7628 # erase.linux bf050000 410000
Usage:
erase   - erase SPI FLASH memory

MT7628 # cp.linux bc050000

 Copy linux image[4194561 byte] to SPI Flash[0x00050000]....
................................................................
MT7628 # reset

[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3                                                                                                                                                 0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
Bad Header Checksum!

 NetTxPacket = 0x83FE39C0

 KSEG1ADDR(NetTxPacket) = 0xA3FE39C0
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 ETH_STATE_ACTIVE!!
ethaddr 0:0:aa:bb:cc:dd
gatewayip 0
SubnetMask 0
starting httpd server at 192.168.1.1
http start

Abort
   Image Name:   LI@Q
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    205454 Bytes = 200.6 kB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... Bad Data CRC: ntohl(hdr->ih_dcrc)!

 NetTxPacket = 0x83FF5FC0

 Packet Buffer is empty !

123serge123 · March 3, 2020, 2:59am

I've forgot to say that you must rename test firmware file into test.bin before manupulations.
If your uboot do not support erase.linux command you can try

spi erase 50000 410000

or as mk24 say:

erase bc050000 410000

If command cp.linux isn't supported than try

cp.b 82000000 bc050000

vwnut8392 · March 3, 2020, 3:05am

all of the commands are start to confuse me. can we get a list of commands that i need to run? so far the router is brick. More so than anything the addresses between both people helping are confusing me. this is what my notepad currently looks like. Also the spi erase command appears to have worked.

which out of these is wrong and which out of these is right?

bc050000



tftpboot bc050000 test.bin
erase.linux
cp.linux bf050000
reset





tftpboot 82000000 test.bin
erase.linux
cp.linux 82000000
reset


cp 82000000
cp.82000000


erase.linux bf050000 410000
cp.linux bf050000 410000
erase.linux 410000

vwnut8392 · March 3, 2020, 3:11am

I got it to do something! these are the commands i sent to it.

tftpboot 82000000 test.bin
spi erase 50000 410000
cp.linux 82000000
reset

123serge123 · March 3, 2020, 3:12am

Step by step

Hit "4" to enter uboot comand line.
Load test firmware file test.bin with command:
tftpboot 82000000 test.bin
Erase part of flash which contain firmware:
spi erase 50000 410000
or (if not supported)
erase bc050000 410000
(flash is mapped at bc000000 in memory)
Copy firmware from memoty at 82000000 to flash 50000
cp.linuix 82000000
or (if unsupported)
cp.b 82000000 bc050000
Reset device with
reset

vwnut8392 · March 3, 2020, 3:13am

Good news! We're in!
This is the current output and where im at over serial connection.

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3                                                                                                                                                 0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.171
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1566351 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is Linksys E2500 v4
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80483740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00047ec0
[    0.000000] Readback ErrCtl register=00047ec0
[    0.000000] Memory: 58820K/65536K available (3922K kernel code, 186K rwdata, 504K rodata, 1204K init, 208K bss, 6716K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007546] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073524] pid_max: default: 32768 minimum: 301
[    0.078211] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084573] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097175] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.106672] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.112614] pinctrl core: initialized pinctrl subsystem
[    0.120241] NET: Registered protocol family 16
[    0.229263] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.384610] PCI host bridge /pcie@10140000 ranges:
[    0.389198]  MEM 0x0000000020000000..0x000000002fffffff
[    0.394214]   IO 0x0000000010160000..0x000000001016ffff
[    0.416254] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.421905] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.427430] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.433811] PCI host bridge to bus 0000:00
[    0.437723] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.444405] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.450065] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.456635] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.464744] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.473231] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.479566] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.486343] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.492845] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.499836] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.506376] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.513461] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.520395] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.525205] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.531736] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.543611] clocksource: Switched to clocksource MIPS
[    0.549686] NET: Registered protocol family 2
[    0.554880] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.561572] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.567762] TCP: Hash tables configured (established 1024 bind 1024)
[    0.574016] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.579616] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.585965] NET: Registered protocol family 1
[    0.593518] Crashlog allocated RAM at address 0x3f00000
[    0.600233] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.612395] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.618027] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.638015] io scheduler noop registered
[    0.641747] io scheduler deadline registered (default)
[    0.647689] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.656629] console [ttyS0] disabled
[    0.660069] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.668848] console [ttyS0] enabled
[    0.668848] console [ttyS0] enabled
[    0.675854] bootconsole [early0] disabled
[    0.675854] bootconsole [early0] disabled
[    0.685411] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.698005] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.703182] 5 fixed-partitions partitions found on MTD device spi0.0
[    0.709690] Creating 5 MTD partitions on "spi0.0":
[    0.714577] 0x000000000000-0x000000030000 : "u-boot"
[    0.720541] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.726886] 0x000000040000-0x000000050000 : "factory"
[    0.732861] 0x000000050000-0x000000ff0000 : "firmware"
[    0.741795] 2 uimage-fw partitions found on MTD device firmware
[    0.747873] Creating 2 MTD partitions on "firmware":
[    0.752921] 0x000000000000-0x00000017e6cf : "kernel"
[    0.758883] 0x00000017e6cf-0x000000fa0000 : "rootfs"
[    0.764794] mtd: device 5 (rootfs) set to be root filesystem
[    0.772016] 1 squashfs-split partitions found on MTD device rootfs
[    0.778370] 0x0000003e0000-0x000000fa0000 : "rootfs_data"
[    0.784815] 0x000000ff0000-0x000001000000 : "cbtinfo"
[    0.791503] libphy: Fixed MDIO Bus: probed
[    0.807215] rt3050-esw 10110000.esw: link changed 0x00
[    0.814124] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.824388] NET: Registered protocol family 10
[    0.833082] Segment Routing with IPv6
[    0.837001] NET: Registered protocol family 17
[    0.841570] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.854744] 8021q: 802.1Q VLAN Support v1.8
[    0.866082] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    0.879835] Freeing unused kernel memory: 1204K
[    0.884464] This architecture does not have kernel memory protection.
[    1.572332] init: Console is alive
[    1.576125] init: - watchdog -
[    2.306671] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.313646] random: fast init done
[    2.442736] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.460640] init: - preinit -
[    3.547069] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    3.727363] random: procd: uninitialized urandom read (4 bytes read)
[    6.954617] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    6.988619] urandom-seed: Seed file not found (/etc/urandom.seed)
[    7.120791] procd: - early -
[    7.124684] procd: - watchdog -
[    7.641379] rt3050-esw 10110000.esw: link changed 0x01
[    7.791415] procd: - watchdog -
[    7.795021] procd: - ubus -
[    7.948950] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.045130] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.052142] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.059704] procd: - init -
Please press Enter to activate this console.
[    9.147956] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.349922] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    9.376954] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[    9.384710] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[    9.416218] ip_tables: (C) 2000-2006 Netfilter Core Team
[    9.440842] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[    9.561577] xt_time: kernel timezone is -0000
[    9.766876] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[    9.872601] urngd: v1.0.2 started.
[   10.077393] random: crng init done
[   10.080851] random: 6 urandom warning(s) missed due to ratelimiting
[   10.805895] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   10.811918] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   10.853626] mt76_wmac 10300000.wmac: firmware init done
[   11.137917] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[   11.144489] mt76x2e 0000:01:00.0: ASIC revision: 76120044
[   12.192561] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a
[   12.208370] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00
[   12.214026] mt76x2e 0000:01:00.0: Build: 1
[   12.218183] mt76x2e 0000:01:00.0: Build Time: 201507311614____
[   12.243624] mt76x2e 0000:01:00.0: Firmware running!
[   12.276526] PPP generic driver version 2.4.2
[   12.288698] NET: Registered protocol family 24
[   12.302265] kmodloader: done loading kernel modules from /etc/modules.d/*
[   40.461338] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   40.483759] jffs2_build_filesystem(): unlocking the mtd device...
[   40.483774] done.
[   40.491994] jffs2_build_filesystem(): erasing all blocks after the end marker...
[   41.420566] br-lan: port 1(eth0.1) entered blocking state
[   41.433925] br-lan: port 1(eth0.1) entered disabled state
[   41.439757] device eth0.1 entered promiscuous mode
[   41.444672] device eth0 entered promiscuous mode
[   41.510257] br-lan: port 1(eth0.1) entered blocking state
[   41.515816] br-lan: port 1(eth0.1) entered forwarding state
[   41.521711] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   42.500715] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   89.051651] done.
[   89.053693] jffs2: notice: (1205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   89.266584] overlayfs: upper fs does not support tmpfile.



BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.2, r10947-65030d81f3
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

vwnut8392 · March 3, 2020, 3:22am

so i guess the next step is to get the WAN port online so i can start getting packages and install LUCI right?

123serge123 · March 3, 2020, 3:25am

I've install luci into firmware.
Next step is check/find all buttons and leds. I've configure reset button with most popular value but only you can test it. SHot hit of reset must reboot router.

vwnut8392 · March 3, 2020, 3:33am

well as of right now its not assigning an IP address to the PC so no access to LUCI. not sure if there is a way to test LED's over the command line.

This is where i currently am with it booting.


[03050D09][03050D0A][87870000][31315252][00313153]
DU Setting Cal Done


U-Boot 1.1.3 (Jun 26 2019 - 16:03:40)

CBT: 0.1.1
Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash manufacture id: c2, device id 20 18
find flash: MX25L12805D
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jun 26 2019  Time:16:03:40
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
 mdio.w addr[0x00000007]  value[0x00077070]

 mdio.w addr[0x0000000D]  value[0x0000001F]

 mdio.w addr[0x0000000E]  value[0x00000024]

 mdio.w addr[0x0000000D]  value[0x0000401F]

 mdio.w addr[0x0000000E]  value[0x00000000]

This verison of Uboot support Httpd Server 0.9

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
default: 3                                                                   0

3: System Boot system code via Flash.
ethernet init

## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.171
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1566351 Bytes =  1.5 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is Linksys E2500 v4
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from 0x80483740 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00047acb
[    0.000000] Readback ErrCtl register=00047acb
[    0.000000] Memory: 58820K/65536K available (3922K kernel code, 186K rwdata, 504K rodata, 1204K init, 208K bss, 6716K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007546] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073524] pid_max: default: 32768 minimum: 301
[    0.078211] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.084573] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.097175] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.106671] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.112614] pinctrl core: initialized pinctrl subsystem
[    0.120241] NET: Registered protocol family 16
[    0.229263] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.384609] PCI host bridge /pcie@10140000 ranges:
[    0.389197]  MEM 0x0000000020000000..0x000000002fffffff
[    0.394214]   IO 0x0000000010160000..0x000000001016ffff
[    0.416255] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.421906] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.427431] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.433812] PCI host bridge to bus 0000:00
[    0.437723] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.444406] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.450066] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.456636] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.464744] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.473230] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.479565] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.486342] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.492844] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.499835] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.506375] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.513460] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.520395] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.525205] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.531735] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.543611] clocksource: Switched to clocksource MIPS
[    0.549685] NET: Registered protocol family 2
[    0.554880] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.561572] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.567762] TCP: Hash tables configured (established 1024 bind 1024)
[    0.574016] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.579616] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.585965] NET: Registered protocol family 1
[    0.593518] Crashlog allocated RAM at address 0x3f00000
[    0.600233] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.612395] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.618027] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.638013] io scheduler noop registered
[    0.641745] io scheduler deadline registered (default)
[    0.647687] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.656627] console [ttyS0] disabled
[    0.660068] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.668846] console [ttyS0] enabled
[    0.668846] console [ttyS0] enabled
[    0.675852] bootconsole [early0] disabled
[    0.675852] bootconsole [early0] disabled
[    0.685410] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.698002] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.703178] 5 fixed-partitions partitions found on MTD device spi0.0
[    0.709686] Creating 5 MTD partitions on "spi0.0":
[    0.714574] 0x000000000000-0x000000030000 : "u-boot"
[    0.720538] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.726883] 0x000000040000-0x000000050000 : "factory"
[    0.732858] 0x000000050000-0x000000ff0000 : "firmware"
[    0.741792] 2 uimage-fw partitions found on MTD device firmware
[    0.747870] Creating 2 MTD partitions on "firmware":
[    0.752918] 0x000000000000-0x00000017e6cf : "kernel"
[    0.758880] 0x00000017e6cf-0x000000fa0000 : "rootfs"
[    0.764790] mtd: device 5 (rootfs) set to be root filesystem
[    0.772013] 1 squashfs-split partitions found on MTD device rootfs
[    0.778367] 0x0000003e0000-0x000000fa0000 : "rootfs_data"
[    0.784811] 0x000000ff0000-0x000001000000 : "cbtinfo"
[    0.791499] libphy: Fixed MDIO Bus: probed
[    0.807216] rt3050-esw 10110000.esw: link changed 0x00
[    0.814124] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.824388] NET: Registered protocol family 10
[    0.833083] Segment Routing with IPv6
[    0.837002] NET: Registered protocol family 17
[    0.841571] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.854745] 8021q: 802.1Q VLAN Support v1.8
[    0.866091] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    0.879848] Freeing unused kernel memory: 1204K
[    0.884477] This architecture does not have kernel memory protection.
[    1.572334] init: Console is alive
[    1.576126] init: - watchdog -
[    2.306587] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.313523] random: fast init done
[    2.442648] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.460552] init: - preinit -
[    3.547332] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    3.727368] random: procd: uninitialized urandom read (4 bytes read)
[    6.982725] jffs2: notice: (378) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (1 dead, 0 orphan) found.
[    6.999837] mount_root: switching to jffs2 overlay
[    7.030075] overlayfs: upper fs does not support tmpfile.
[    7.041050] urandom-seed: Seeding with /etc/urandom.seed
[    7.181626] procd: - early -
[    7.185534] procd: - watchdog -
[    7.641891] rt3050-esw 10110000.esw: link changed 0x01
[    7.854285] procd: - watchdog -
[    7.857833] procd: - ubus -
[    8.011205] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.107835] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.114889] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.122373] procd: - init -
Please press Enter to activate this console.
[    9.229643] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.429936] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    9.452693] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[    9.460448] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[    9.496223] ip_tables: (C) 2000-2006 Netfilter Core Team
[    9.519448] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[    9.640211] xt_time: kernel timezone is -0000
[    9.846874] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[    9.941095] urngd: v1.0.2 started.
[   10.140043] random: crng init done
[   10.143501] random: 6 urandom warning(s) missed due to ratelimiting
[   10.885913] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   10.891935] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   10.933628] mt76_wmac 10300000.wmac: firmware init done
[   11.215490] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[   11.221973] mt76x2e 0000:01:00.0: ASIC revision: 76120044
[   12.162233] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a
[   12.174403] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00
[   12.179979] mt76x2e 0000:01:00.0: Build: 1
[   12.184189] mt76x2e 0000:01:00.0: Build Time: 201507311614____
[   12.203627] mt76x2e 0000:01:00.0: Firmware running!
[   12.236560] PPP generic driver version 2.4.2
[   12.248792] NET: Registered protocol family 24
[   12.262407] kmodloader: done loading kernel modules from /etc/modules.d/*
[   23.854662] br-lan: port 1(eth0.1) entered blocking state
[   23.860153] br-lan: port 1(eth0.1) entered disabled state
[   23.866232] device eth0.1 entered promiscuous mode
[   23.871102] device eth0 entered promiscuous mode
[   23.933766] br-lan: port 1(eth0.1) entered blocking state
[   23.939260] br-lan: port 1(eth0.1) entered forwarding state
[   23.945197] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   24.869488] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

123serge123 · March 3, 2020, 3:35am

Pls show output of commands:
ifconfig -a
swconfig dev switch0 show

vwnut8392 · March 3, 2020, 3:38am

ifconfig -a

BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.2, r10947-65030d81f3
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ifconfig -a
br-lan    Link encap:Ethernet  HWaddr 30:23:03:FE:CB:75
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::3223:3ff:fefe:cb75/64 Scope:Link
          inet6 addr: fdf6:d368:15ac::1/60 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1784 (1.7 KiB)

eth0      Link encap:Ethernet  HWaddr 30:23:03:FE:CB:75
          inet6 addr: fe80::3223:3ff:fefe:cb75/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:222 errors:0 dropped:0 overruns:0 frame:0
          TX packets:65 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:30810 (30.0 KiB)  TX bytes:14109 (13.7 KiB)
          Interrupt:5

eth0.1    Link encap:Ethernet  HWaddr 30:23:03:FE:CB:75
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1784 (1.7 KiB)

eth0.2    Link encap:Ethernet  HWaddr 30:23:03:FE:CB:76
          inet6 addr: fe80::3223:3ff:fefe:cb76/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:39 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:9736 (9.5 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:88 errors:0 dropped:0 overruns:0 frame:0
          TX packets:88 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:5984 (5.8 KiB)  TX bytes:5984 (5.8 KiB)

wlan0     Link encap:Ethernet  HWaddr 00:11:22:00:00:30
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wlan1     Link encap:Ethernet  HWaddr 00:00:00:00:00:10
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

swconfig dev switch0 show

root@OpenWrt:/# swconfig dev switch0 show
Global attributes:
        enable_vlan: 0
        alternate_vlan_disable: 0
        bc_storm_protect: 0
        led_frequency: 0
Port 0:
        disable: 0
        doubletag: 1
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 286
        tr_bad: 0
        tr_good: 79
        pvid: 0
        link: port:0 link:up speed:100baseT full-duplex
Port 1:
        disable: 0
        doubletag: 1
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:1 link:down
Port 2:
        disable: 0
        doubletag: 1
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:2 link:down
Port 3:
        disable: 0
        doubletag: 1
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:3 link:down
Port 4:
        disable: 0
        doubletag: 1
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:4 link:down
Port 5:
        disable: 1
        doubletag: 1
        untag: 1
        led: ???
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:5 link:down
Port 6:
        disable: 0
        doubletag: 1
        untag: 1
        led: ???
        lan: ???
        recv_bad: ???
        recv_good: ???
        tr_bad: ???
        tr_good: ???
        pvid: 0
        link: port:6 link:up speed:1000baseT full-duplex
VLAN 0:
        ports: 0 1 2 3 4 5 6

123serge123 · March 3, 2020, 3:43am

Wrong config of internal switch. Run next commands:

swconfig dev switch0 set reset 1
swconfig dev switch0 set enable_vlan 1
swconfig dev switch0 vlan 1 set ports '0 1 2 3 6t'
swconfig dev switch0 vlan 2 set ports '4 6t'
swconfig dev switch0 set apply 1

And show again
swconfig dev switch0 show

vwnut8392 · March 3, 2020, 3:49am

Heres the results

root@OpenWrt:/# swconfig dev switch0 set reset 1
[   30.323372] rt3050-esw 10110000.esw: link changed 0x00
root@OpenWrt:/# [   34.496582] rt3050-esw 10110000.esw: link changed 0x01
swconfig dev switch0 set enable_vlan 1
root@OpenWrt:/# swconfig dev switch0 set enable_vlan 1
root@OpenWrt:/# swconfig dev switch0 vlan 1 set ports '0 1 2 3 6t'
root@OpenWrt:/# swconfig dev switch0 vlan 2 set ports '4 6t'
root@OpenWrt:/# swconfig dev switch0 set apply 1
root@OpenWrt:/# swconfig dev switch0 show
Global attributes:
        enable_vlan: 1
        alternate_vlan_disable: 0
        bc_storm_protect: 0
        led_frequency: 0
Port 0:
        disable: 0
        doubletag: 0
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 329
        tr_bad: 0
        tr_good: 53
        pvid: 1
        link: port:0 link:up speed:100baseT full-duplex
Port 1:
        disable: 0
        doubletag: 0
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 1
        link: port:1 link:down
Port 2:
        disable: 0
        doubletag: 0
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 1
        link: port:2 link:down
Port 3:
        disable: 0
        doubletag: 0
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 1
        link: port:3 link:down
Port 4:
        disable: 0
        doubletag: 0
        untag: 1
        led: 5
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 2
        link: port:4 link:down
Port 5:
        disable: 1
        doubletag: 0
        untag: 0
        led: ???
        lan: 1
        recv_bad: 0
        recv_good: 0
        tr_bad: 0
        tr_good: 0
        pvid: 0
        link: port:5 link:down
Port 6:
        disable: 0
        doubletag: 0
        untag: 0
        led: ???
        lan: ???
        recv_bad: ???
        recv_good: ???
        tr_bad: ???
        tr_good: ???
        pvid: 0
        link: port:6 link:up speed:1000baseT full-duplex
VLAN 1:
        ports: 0 1 2 3 6t
VLAN 2:
        ports: 4 6t