Hi
i got a Zisa OP151S SFP GPON . this SFP module is based on lantiq falcon gpon. How i can adapt the firmware and update it? the linux shell show Openwrt 12.09 version but i dont know how to update it because when i upload last version says that isnt valid.
i got the original firmware and im going to dump the gd25q64 chip.
anyone can help? we can support this module ?
here the cpu and flash layout from original firmware
oot@SFP:/# cat /proc/cpuinfo
system type : Falcon rev A22
machine : SFP - Lantiq Falcon SFP Stick
processor : 0
cpu model : MIPS 34Kc V5.6
BogoMIPS : 265.98
wait instruction : yes
microsecond timers : yes
tlb_entries : 16
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0000, 0x0e38, 0x0618, 0x0640]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : mips16 dsp mt
shadow register sets : 1
kscratch registers : 0
core : 0
VCED exceptions : not available
VCEI exceptions : not available
root@SFP:/# cat /proc/mtd
dev: size erasesize name
mtd0: 00060000 00010000 "Boot"
mtd1: 00010000 00010000 "Env"
mtd2: 00390000 00010000 "ImageA"
mtd3: 00390000 00010000 "ImageB"
mtd4: 00060000 00010000 "Config"
mtd5: 00010000 00010000 "SECTION_EGIS"
mtd6: 00250000 00010000 "rootfs"
mtd7: 00010000 00010000 "rootfs_data"
dmesg log
root@SFP:/# dmesg
[ 0.000000] Linux version 3.10.12 (luowenbin@dev10.sh.gj.com) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #2 Wed Jul 12 12:01:33 CST 2017
[ 0.000000] SoC: Falcon rev A22
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019556 (MIPS 34Kc)
[ 0.000000] MIPS: machine is SFP - Lantiq Falcon SFP Stick
[ 0.000000] e=memsize=64
[ 0.000000] e=initrd_start=0xA0000000
[ 0.000000] e=initrd_size=0x0
[ 0.000000] e=flash_start=0xB0000000
[ 0.000000] e=flash_size=0x44D4A31E
[ 0.000000] e=ethaddr=ac:9a:96:00:00:00
[ 0.000000] MEMSIZE = 67108864
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] debug: ignoring loglevel setting.
[ 0.000000] User-defined physical RAM map:
[ 0.000000] memory: 03f00000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x03efffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x03efffff]
[ 0.000000] On node 0 totalpages: 16128
[ 0.000000] free_area_init_node: node 0, pgdat 8030c5f0, node_mem_map 81003460
[ 0.000000] Normal zone: 126 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 16128 pages, LIFO batch:3
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16002
[ 0.000000] Kernel command line: rootfstype=squashfs,jffs2 ethaddr=8C:1A:6F:2B:73:F4 softMode=MANUFACTURE machtype=SFP ignore_loglevel vpe1_load_addr=0x81F00000 vpe1_mem=1M mem=63M ACTIVE=B mtdparts=sflash:384k(Boot),64k(Env),3648k(ImageA),3648k(ImageB),384k(Config),64k(SECTION_EGIS),2368k@5376k(rootfs) console=ttyLTQ0,115200 init=/etc/preinit
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=0007915b
[ 0.000000] Readback ErrCtl register=0007915b
[ 0.000000] Memory: 60212k/64512k available (2559k kernel code, 4300k reserved, 667k data, 220k init, 0k highmem)
[ 0.000000] NR_IRQS:328
[ 0.000000] Setting up vectored interrupts
[ 0.000000] CPU Clock: 400MHz
[ 0.032000] Calibrating delay loop... 265.98 BogoMIPS (lpj=531968)
[ 0.036000] pid_max: default: 32768 minimum: 301
[ 0.040000] Mount-cache hash table entries: 512
[ 0.048000] pinctrl core: initialized pinctrl subsystem
[ 0.052000] NET: Registered protocol family 16
[ 0.072000] pinctrl-falcon pinctrl.0: Init done
[ 0.076000] FALC(tm) ON clock driver
[ 0.080000] clockevent device FALCON_CLK_EVT with timer 4, irq 124
[ 0.100000] bio: create slab <bio-0> at 0
[ 0.104000] FALC(tm) ON GPIO Driver, (C) 2012 Lantiq Deutschland Gmbh
[ 0.112000] Switching to clocksource FALCON
[ 0.120000] NET: Registered protocol family 2
[ 0.124000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[ 0.132000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[ 0.136000] TCP: Hash tables configured (established 512 bind 512)
[ 0.144000] TCP: reno registered
[ 0.148000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.152000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.160000] NET: Registered protocol family 1
[ 0.164000] RPC: Registered named UNIX socket transport module.
[ 0.168000] RPC: Registered udp transport module.
[ 0.176000] RPC: Registered tcp transport module.
[ 0.180000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.188000] EASY98000 LED driver, Version 1.0.1 (c) Copyright 2013, Lantiq Deutschland GmbH
[ 0.200000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.204000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.216000] msgmni has been set to 117
[ 0.220000] io scheduler noop registered
[ 0.224000] io scheduler deadline registered (default)
[ 0.232000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 104) is a lantiq,asc
[ 0.236000] console [ttyLTQ0] enabled, bootconsole disabled
[ 0.256000] m25p80 spi32766.0: found gd25q64, expected s25fl129p0
[ 0.260000] m25p80 spi32766.0: gd25q64 (8192 Kbytes)
[ 0.264000] 7 cmdlinepart partitions found on MTD device sflash
[ 0.272000] Creating 7 MTD partitions on "sflash":
[ 0.276000] 0x000000000000-0x000000060000 : "Boot"
[ 0.284000] 0x000000060000-0x000000070000 : "Env"
[ 0.288000] 0x000000070000-0x000000400000 : "ImageA"
[ 0.296000] 0x000000400000-0x000000790000 : "ImageB"
[ 0.300000] 0x000000790000-0x0000007f0000 : "Config"
[ 0.304000] 0x0000007f0000-0x000000800000 : "SECTION_EGIS"
[ 0.312000] 0x000000540000-0x000000790000 : "rootfs"
[ 0.316000] mtd: partition "rootfs" set to be root filesystem
[ 0.324000] mtd: partition "rootfs_data" created automatically, ofs=0x780000, len=0x10000
[ 0.332000] 0x000000780000-0x000000790000 : "rootfs_data"
[ 0.340000] wdt 1f8803f0.watchdog: Init done
[ 0.348000] TCP: cubic registered
[ 0.348000] NET: Registered protocol family 17
[ 0.352000] 8021q: 802.1Q VLAN Support v1.8
[ 0.372000] VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
[ 0.376000] Freeing unused kernel memory: 220K (80329000 - 80360000)
[ 7.232000] Egis Driver, (C) 2012 T&W Co., Ltd.
[ 7.540000] jffs2: notice: (426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 8.680000] IFXOS, Version 1.5.19 (c) Copyright 2009, Lantiq Deutschland GmbH
[ 8.728000] GPON SFP I2C Slave Driver, Version 1.5.0 (c) Copyright 2013, Lantiq Deutschland GmbH
[ 8.736000] [sfp_i2c] I2C-module id=87 revision=2
[ 9.028000] FALC(tm) ON Optic Driver, version 6.4.1 (c) Copyright 2013, Lantiq Deutschland GmbH
[ 9.704000] FALC(tm) ON Base Driver, Version 6.4.2.0 Copyright (c) 2013, Lantiq Deutschland GmbH
[ 9.712000] [onu] gpe_table[39] FIO_GPE_SCE_CONSTANTS_GET - cmd 0xc0540527 - write size 0
[ 9.736000] FALC(tm) ON Ethernet Driver, Version 0.7.0 Copyright (c) 2013, Lantiq Deutschland GmbH
[ 9.784000] Watchdog init OK!
[ 21.208000] [onu] GPHY Firmware loaded into RAM (phy11g.bin)
[ 21.424000] [onu] PE[255] firmware loaded v9.45.0.2
[ 25.592000] tardev register successful!
[ 52.988000] device exc entered promiscuous mode
i got a backup from all mtd parts . i can flash imageA via telnet
Photos from module board Code TW236H-CDEL
the module looks like as same Zyxel PMG3000-D20B (same external cage and same location for several IC.)
anybody can help to me o create a image to support it?
Hi
Did you find a way to update the firmware?
There is an interesting project on Github. It shows step by step how to make changes and calculate checksums on Zisa OP151S
All available SFP GPON sticks on the market (Lantiq PEF/PEB 98035) including Zisa OP151S run on two OpenWRT versions
OpenWrt Attitude Adjustment 12.09
Linux version 3.10.12
http://archive.openwrt.org/attitude_adjustment/12.09/lantiq/falcon/
Openwrt Barrier Breaker 14.07
Linux version 3.10.49
http://archive.openwrt.org/barrier_breaker/14.07/lantiq/
Where is the falcon?
FALC-ON is back in 17.01 but it will be hard to find any prioprietary files for it.
http://archive.openwrt.org/releases/17.01.5/targets/lantiq/falcon/
Same for 18.06
http://archive.openwrt.org/releases/18.06.3/targets/lantiq/falcon/
after a busy end year. im going to try to build from 12.09 firmware with openwrt web to modify all things . if i have some progress i tell you
All clones of the TW2362H-CDEL including OP151S can be easily restored. Just connect the UART cable. The process is similar to other modules based on Intel/Lantiq GPON chipset.
For those interested, a complete image (including the bootloader) has been posted on the Mikrotik forum.
https://www.dropbox.com/s/v1sxo2js25t0csv/zisa_fw_for_g-010s-p.7z?dl=1
系统
|主机名|Nokia|
|主机型号|Lantiq Falcon SFP Stick|
|固件版本|OpenWrt SFP 7.5.13 / LuCI Trunk (0.12+git-4623707)|
|内核版本|3.10.49|
|本地时间|Thu Dec 23 19:35:33 2021|
|运行时间|0h 27m 22s|
|平均负载|0.53, 0.52, 0.46|
|GPON 注册状态|1|
|接收光功率|0.00uW -infdBm|
|发送光功率|1.64mW 2.15dBm|
|光芯片温度|68 ℃|
|激光器温度|51 ℃|
[ 0.000000] Linux version 3.10.49 (jyeom@sw2) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 14.07_ltq) ) #1 Wed Jun 27 11:14:59 KST 2018
[ 0.000000] SoC: Falcon rev A22
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019556 (MIPS 34Kc)
[ 0.000000] MIPS: machine is SFP - Lantiq Falcon SFP Stick
[ 0.000000] e=memsize=64
[ 0.000000] e=initrd_start=0xA0000000
[ 0.000000] e=initrd_size=0x0
[ 0.000000] e=flash_start=0x00000000
[ 0.000000] e=flash_size=0x0
[ 0.000000] e=ethaddr=ac:9a:96:00:00:00
[ 0.000000] MEMSIZE = 67108864
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] User-defined physical RAM map:
[ 0.000000] memory: 03f00000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x03efffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x03efffff]
[ 0.000000] On node 0 totalpages: 16128
[ 0.000000] free_area_init_node: node 0, pgdat 80314610, node_mem_map 81003ec0
[ 0.000000] Normal zone: 126 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 16128 pages, LIFO batch:3
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16002
[ 0.000000] Kernel command line: rootfstype=squashfs,jffs2 ip=192.168.1.10:192.168.1.100:192.168.2.1::::off ethaddr=ac:9a:96:00:00:00 machtype=SFP vpe1_load_addr=0x83f00000 vpe1_mem=1M mem=63M mtdparts=sflash:256k(uboot)ro,512k(uboot_env),6144k(linux),6144k(image1),1024k(configfs),2112k(logfs),64k(ri),64k(sfp),64k(ribackup) quiet console=ttyLTQ0,115200 init=/etc/preinit
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=00000411
[ 0.000000] Readback ErrCtl register=00000411
[ 0.000000] Memory: 60204k/64512k available (2596k kernel code, 4308k reserved, 663k data, 184k init, 0k highmem)
[ 0.000000] NR_IRQS:328
[ 0.000000] Setting up vectored interrupts
[ 0.000000] CPU Clock: 400MHz
[ 0.032000] Calibrating delay loop... 265.98 BogoMIPS (lpj=531968)
[ 0.036000] pid_max: default: 32768 minimum: 301
[ 0.036000] Mount-cache hash table entries: 512
[ 0.040000] pinctrl core: initialized pinctrl subsystem
[ 0.040000] NET: Registered protocol family 16
[ 0.060000] pinctrl-falcon pinctrl.4: Init done
[ 0.080000] bio: create slab <bio-0> at 0
[ 0.080000] FALC(tm) ON GPIO Driver, (C) 2012 Lantiq Deutschland Gmbh
[ 0.088000] Switching to clocksource MIPS
[ 0.092000] NET: Registered protocol family 2
[ 0.092000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[ 0.092000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[ 0.092000] TCP: Hash tables configured (established 512 bind 512)
[ 0.092000] TCP: reno registered
[ 0.092000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.092000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.092000] NET: Registered protocol family 1
[ 0.092000] RPC: Registered named UNIX socket transport module.
[ 0.092000] RPC: Registered udp transport module.
[ 0.092000] RPC: Registered tcp transport module.
[ 0.092000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.096000] EASY98000 LED driver, Version 1.0.1 (c) Copyright 2013, Lantiq Deutschland GmbH
[ 0.096000] Wired TLB entries for Linux read_c0_wired() = 0
[ 0.096000] config3 0x2425 MT 1
[ 0.096000] MVPControl 0x2, STLB 0 VPC 1 EVP 0
[ 0.096000] mvpconf0 0xb8008403, PVPE 1 PTC 3 M 1
[ 0.100000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.100000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.100000] msgmni has been set to 117
[ 0.100000] io scheduler noop registered
[ 0.100000] io scheduler deadline registered (default)
[ 0.104000] 1e100c00.serial: ttyLTQ0 at MMIO 0x1e100c00 (irq = 104) is a lantiq,asc
[ 0.104000] console [ttyLTQ0] enabled, bootconsole disabled
[ 0.108000] m25p80 spi0.0: found mx25l12805d, expected s25fl129p0
[ 0.108000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[ 0.108000] 9 cmdlinepart partitions found on MTD device sflash
[ 0.108000] Creating 9 MTD partitions on "sflash":
[ 0.108000] 0x000000000000-0x000000040000 : "uboot"
[ 0.112000] 0x000000040000-0x0000000c0000 : "uboot_env"
[ 0.116000] 0x0000000c0000-0x0000006c0000 : "linux"
[ 0.116000] 0x0000001e7cde-0x0000006c0000 : "rootfs"
[ 0.116000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.120000] mtd: device 3 (rootfs) set to be root filesystem
[ 0.120000] mtd: partition "rootfs_data" created automatically, ofs=0x3f0000, len=0x2d0000
[ 0.120000] 0x0000003f0000-0x0000006c0000 : "rootfs_data"
[ 0.120000] 0x0000006c0000-0x000000cc0000 : "image1"
[ 0.124000] 0x000000cc0000-0x000000dc0000 : "configfs"
[ 0.124000] 0x000000dc0000-0x000000fd0000 : "logfs"
[ 0.128000] 0x000000fd0000-0x000000fe0000 : "ri"
[ 0.132000] 0x000000fe0000-0x000000ff0000 : "sfp"
[ 0.132000] 0x000000ff0000-0x000001000000 : "ribackup"
[ 0.136000] wdt 1f8803f0.watchdog: Init done
[ 0.140000] TCP: cubic registered
[ 0.140000] NET: Registered protocol family 17
[ 0.140000] 8021q: 802.1Q VLAN Support v1.8
[ 12.196000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[ 12.196000] Freeing unused kernel memory: 184K (80332000 - 80360000)
[ 18.896000] jffs2: notice: (292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found.
[ 21.296000] IFXOS, Version 1.6.6 (c) Copyright 2009, Lantiq Deutschland GmbH
[ 21.364000] NET: Registered protocol family 10
[ 21.372000] GPON SFP I2C Slave Driver, Version 2.2.1 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG
[ 21.380000] [sfp_i2c] vpe code <sfp_i2c_vpe.bin> with size <3240 bytes> loaded!
[ 21.380000] VPE loader: VPE1 running successfully
[ 21.456000] FALC(tm) ON Optic Driver, version 7.5.1.0 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG
[ 21.828000] FALC(tm) ON Base Driver, Version 7.5.1.0 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG
[ 21.856000] FALC(tm) ON Ethernet Driver, Version 7.5.1.0 (c) Copyright 2015, Lantiq Beteiligungs-GmbH & Co. KG
[ 34.272000] [onu] GPHY Firmware loaded into RAM (phy11g.bin)
[ 34.536000] [onu] PE[255] firmware loaded v9.90.6.1
[ 59.620000] libphy: Falcon MDIO: probed
[ 59.640000] IPv6: ADDRCONF(NETDEV_UP): host: link is not ready
[ 59.712000] IPv6: ADDRCONF(NETDEV_UP): lct0: link is not ready
[ 60.832000] IPv6: ADDRCONF(NETDEV_UP): lct0: link is not ready
[ 67.860000] IPv6: ADDRCONF(NETDEV_UP): host: link is not ready
[ 68.556000] device exc entered promiscuous mode
[ 68.900000] IPv6: ADDRCONF(NETDEV_CHANGE): lct0: link becomes ready
Hello all involved on the topic!
I just installed OpenWRT for Lantiq Falcon 17.01.5 in my Zyxel PMG3000.
Using on the linuxshell: mtd -r write /tmp/"firmware_name" ImageA
flashed fine and after rebooting changed the IP address from 10.10.1.1 to 192.168.2.1
I tried Telnet, SSH, WEB and in any of those my credentials worked. even that I tried the default ones from all the compatible firmwares (DLINK DPN-100, Zisa OP161S, Zyxel ones etc..) no ones work.
default credentials for OpenWRT i found on web (root/"no password") neither worked.
web, telnet, ssh ask me for the credentials but no one worked for me.
could anyone help me on that ?
many thanks in advance
What image have you flashed?
have you tried the old password from PGM3000?
I was with the default credentials. I tried every option in hack-gpon.org are for this model and the compatible ones. Also root/“no passw”. (From openwrt.)
The firmware was:
https://archive.openwrt.org/releases/17.01.5/targets/lantiq/falcon/lede-17.01.5-lantiq-falcon-FALCON-SFP-squashfs-sysupgrade.bin
After that the IP address changed to 192.168.2.1 and no success to login since then. Different web browsers, cache cleared, telnet, SSH.
My question would be:
I used wrong command for the upgrade? Wrong partition?
I used command:
mtd -r write /tmp/"File_Name.bin" ImageA
before I tried with the command:
sysupgrade -v /tmp/"File_Name.bin" firmware (without success)
Looks the device is alive with ICMP requests and asking for a password.
@BackON did you manage to progress on newer firmware?
I am using HALNy HL-GSFP same chipset, same openwrt 14.07.
My approach (after I get SFP breakout) would be to make backups and try to extract some vendor blobs. First try 19.07 (as its the latest already build) and then newest stable. Since there is also imageA and imageB should be easy to go back with changing U-Boot variable.
Edit: the problem is that with this change:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=patch;h=c65faa62be94f3c693af0bca621d199e74b8dd1c
You have to build from source not even firmware selector works and there is no openwrt-sdk docker images newer than 19.07 so lot of manual work. But still I will try I guess.