Zte mf287 boot loop

Installing and Using OpenWrt
1

I unsucesfully installed openwrt on my zte mf287. I started form 3 GUI to flash the sofware. Now is in bootloop. I can set a serial communication with minicom. This is the log: https://paste.debian.net/1300547/

and this is
(IPQ40xx) # printenv
baudrate=115200
bootcmd=bootipq
bootdelay=3
ethact=eth0
flash_type=0
ipaddr=192.168.0.1
lp=tftpboot 0x84000000 ${dir}norplusnand-system-partition-ipq40xx.bin&&sf probe&&sf erase 0x40000 +$filesize&&sf write $fileaddr 0x40000 e
lr=tftpboot 0x84000000 ${dir}root_uImage&&nand erase 0xb00000 0x2a00000&&nand write $fileaddr 0xb00000 $filesize
lrb=tftpboot 0x84000000 ${dir}delta.bin&&nand erase 0x3500000 0x1900000&&nand write $fileaddr 0x3500000 $filesize
lrs=tftpboot 0x84000000 ${dir}root_uImage_s&&nand erase 0x1300000 0x2200000&&nand write $fileaddr 0x1300000 $filesize
lu=tftpboot 0x84000000 ${dir}uboot.bin&&sf probe&&sf erase 0xf0000 +$filesize&&sf write $fileaddr 0xf0000 $filesize
lw=tftpboot 0x84000000 ${dir}web.img&&nand erase 0xb00000 0x800000&&nand write $fileaddr 0xb00000 $filesize
machid=8010100
serverip=192.168.0.22
stderr=serial
stdin=serial
stdout=serial

Environment size: 917/65532 bytes

How do I know which file are on the router, and how do i fix them to complete the bootloop?

thanks for any help

2

As already sent via E-Mail, try to tftpboot an initramfs image and flash from there via sysupgrade. If that doesn't work, your flash chip has too many bad blocks!

This is indicated by this line in your log:

ubi0 warning: ubi_eba_init: cannot reserve enough PEBs for bad PEB handling, reserved 2, need 20
3

thanks Andreas, i'm a bit confused because i don't know where to find the right file. It would be greatful if anybody can suggest me the file url and the right memory address to write throught tftp. thanks

4

https://firmware-selector.openwrt.org/
Kernel = initramfs

5

thanks. i did some progress. The router in not in bootloop anymore, bu I'm stuck on this stage:

(IPQ40xx) # tftpboot 0x84000000 initramfs-zImage.itb
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 up Speed :1000 Full duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.0.22; our IP address is 192.168.0.1
Filename 'initramfs-zImage.itb'.
Load address: 0x84000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
##############################################################
done
Bytes transferred = 6632804 (653564 hex)
(IPQ40xx) # bootm 0x84000000

Booting kernel from FIT Image at 84000000 ...

Using 'config@ap.dk01.1-c2' configuration
Trying 'kernel-1' kernel subimage
Description: ARM OpenWrt Linux-5.15.137
Type: Kernel Image
Compression: uncompressed
Data Start: 0x840000e4
Data Size: 6612704 Bytes = 6.3 MiB
Architecture: ARM
OS: Linux
Load Address: 0x80208000
Entry Point: 0x80208000
Hash algo: crc32
Hash value: 838ffac3
Hash algo: sha1
Hash value: 60f6c9c1abd236156152f3bcda8166857c762330
Verifying Hash Integrity ... crc32+ sha1+ OK

Flattened Device Tree from FIT Image at 84000000

Using 'config@ap.dk01.1-c2' configuration
Trying 'fdt-1' FDT blob subimage
Description: ARM OpenWrt zte_mf287 device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x8464e8f8
Data Size: 18206 Bytes = 17.8 KiB
Architecture: ARM
Hash algo: crc32
Hash value: 3bd8dc6f
Hash algo: sha1
Hash value: 4fd4350818c02a80ac8f1ba1014c5fb04d11298b
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x8464e8f8
Loading Kernel Image ... OK
OK
Loading Device Tree to 871e8000, end 871ef71d ... OK
ipq: fdt fixup unable to find compatible node
Using machid 0x8010100 from environment

Starting kernel ...

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 5.15.137 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 12.3.0 r23630-842932a63d) 12.3.0, GNU ld (GNU Binu3
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[ 0.000000] CPU: div instructions available: patching division code
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] OF: fdt: Machine model: ZTE MF287
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000080000000-0x000000008fffffff]
[ 0.000000] HighMem empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000080000000-0x0000000087dfffff]
[ 0.000000] node 0: [mem 0x0000000087e00000-0x0000000087ffffff]
[ 0.000000] node 0: [mem 0x0000000088000000-0x000000008fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000008fffffff]
[ 0.000000] percpu: Embedded 12 pages/cpu s16588 r8192 d24372 u49152
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64960
[ 0.000000] Kernel command line: root=/dev/ubiblock0_1
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 234916K/262144K available (6746K kernel code, 610K rwdata, 1020K rodata, 13312K init, 247K bss, 27228K reserved, 0K cma-reserved, 0K )
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[ 0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[ 0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[ 0.000023] Switching to timer-based delay loop, resolution 20ns
[ 0.000319] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[ 0.000349] CPU: Testing write buffer coherency: ok
[ 0.000407] pid_max: default: 32768 minimum: 301
[ 0.001267] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.001296] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[ 0.003304] qcom_scm: convention: smc legacy
[ 0.004534] Setting up static identity map for 0x80300000 - 0x8030003c
[ 0.004709] rcu: Hierarchical SRCU implementation.
[ 0.005303] smp: Bringing up secondary CPUs ...
[ 0.008825] smp: Brought up 1 node, 4 CPUs
[ 0.008863] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[ 0.008879] CPU: All CPU(s) started in SVC mode.
[ 0.015100] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[ 0.015300] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.015336] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.015724] pinctrl core: initialized pinctrl subsystem
[ 0.017748] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.018097] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.019458] thermal_sys: Registered thermal governor 'step_wise'
[ 0.019947] cpuidle: using governor ladder
[ 0.020014] cpuidle: using governor menu
[ 0.048164] cryptd: max_cpu_qlen set to 1000
[ 0.053001] usbcore: registered new interface driver usbfs
[ 0.053084] usbcore: registered new interface driver hub
[ 0.053146] usbcore: registered new device driver usb
[ 0.053224] pps_core: LinuxPPS API ver. 1 registered
[ 0.053240] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it
[ 0.053274] PTP clock support registered
[ 0.055488] clocksource: Switched to clocksource arch_sys_counter
[ 0.056913] NET: Registered PF_INET protocol family
[ 0.057164] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.058165] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[ 0.058223] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.058250] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear)
[ 0.058292] TCP bind hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.058347] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.058499] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.058576] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.058925] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.058983] PCI: CLS 0 bytes, default 64
[ 0.062819] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[ 0.069300] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.069341] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.203071] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[ 0.206297] gpio-export gpio_export: 1 gpio(s) exported
[ 0.208644] bam-dma-engine 8e04000.dma: num-channels unspecified in dt
[ 0.208679] bam-dma-engine 8e04000.dma: num-ees unspecified in dt
[ 0.210269] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[ 0.210413] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[ 0.210513] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[ 0.210605] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[ 0.210937] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.213068] msm_serial 78af000.serial: msm_serial: detected port #0
[ 0.213126] msm_serial 78af000.serial: uartclk = 1843200
[ 0.213186] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 33, base_baud = 115200) is a MSM
[ 0.213226] msm_serial: console setup on port #0
[ 0.764198] printk: console [ttyMSM0] enabled
[ 0.769520] msm_serial: driver initialized
[ 0.779225] loop: module loaded
[ 0.780482] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[ 0.782820] spi-nor spi0.0: gd25q16 (2048 Kbytes)
[ 0.788586] 8 fixed-partitions partitions found on MTD device spi0.0
[ 0.793086] Creating 8 MTD partitions on "spi0.0":
[ 0.799526] 0x000000000000-0x000000040000 : "0:SBL1"
[ 0.804731] 0x000000040000-0x000000060000 : "0:MIBIB"
[ 0.809870] 0x000000060000-0x0000000c0000 : "0:QSEE"
[ 0.814848] 0x0000000c0000-0x0000000d0000 : "0:CDT"
[ 0.819816] 0x0000000d0000-0x0000000e0000 : "0:DDRPARAMS"
[ 0.824323] 0x0000000e0000-0x0000000f0000 : "0:APPSBLENV"
[ 0.830052] 0x0000000f0000-0x0000001b0000 : "0:APPSBL"
[ 0.835339] 0x0000001b0000-0x000000200000 : "0:reserved1"
[ 0.844272] spi-nand spi0.1: GigaDevice SPI NAND was found.
[ 0.845253] spi-nand spi0.1: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 128
[ 0.851008] 9 fixed-partitions partitions found on MTD device spi0.1
[ 0.859020] OF: Bad cell count for /soc/spi@78b5000/spi-nand@1/partitions
[ 0.865409] OF: Bad cell count for /soc/spi@78b5000/spi-nand@1/partitions
[ 0.872508] OF: Bad cell count for /soc/spi@78b5000/spi-nand@1/partitions
[ 0.878894] OF: Bad cell count for /soc/spi@78b5000/spi-nand@1/partitions
[ 0.886094] Creating 9 MTD partitions on "spi0.1":
[ 0.892385] 0x000000000000-0x000000140000 : "fota-flag"
[ 0.901715] 0x000000140000-0x000000280000 : "ART"
[ 0.906800] 0x000000280000-0x0000003c0000 : "mac"
[ 0.911684] 0x0000003c0000-0x0000009c0000 : "cfg-param"
[ 0.930968] 0x0000009c0000-0x000000b00000 : "oops"
[ 0.935560] 0x000000b00000-0x000001300000 : "web"
[ 0.960870] 0x000001300000-0x000003500000 : "rootfs"
[ 1.066028] mtd: setting mtd14 (rootfs) as root device
[ 1.067390] mtdsplit: no squashfs found in "rootfs"
[ 1.070093] 0x000003500000-0x000004e00000 : "data"
[ 1.152421] 0x000004e00000-0x000008000000 : "fota"
[ 1.414579] i2c_dev: i2c /dev entries driver
[ 1.416626] sdhci: Secure Digital Host Controller Interface driver
[ 1.417931] sdhci: Copyright(c) Pierre Ossman
[ 1.423932] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.432115] NET: Registered PF_INET6 protocol family
[ 1.435647] Segment Routing with IPv6
[ 1.439056] In-situ OAM (IOAM) with IPv6
[ 1.442688] NET: Registered PF_PACKET protocol family
[ 1.446707] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.451848] 8021q: 802.1Q VLAN Support v1.8
[ 1.464661] Registering SWP/SWPB emulation handler
[ 1.498659] qca8k-ipq4019 c000000.switch: configuring for fixed/internal link mode
[ 1.498925] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[ 1.588831] qca8k-ipq4019 c000000.switch lan1 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm QCA8075] (irq=POLL)
[ 1.668683] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm QCA8075] (irq=POLL)
[ 1.748724] qca8k-ipq4019 c000000.switch lan3 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8075] (irq=POLL)
[ 1.830153] qca8k-ipq4019 c000000.switch lan4 (uninitialized): PHY [90000.mdio-1:04] driver [Qualcomm QCA8075] (irq=POLL)
[ 1.831083] DSA: tree 0 setup
[�[ 1.867590] Freeing unused kernel image (initmem) memory: 13312K
[ 1.885729] Run /init as init process
[ 2.339930] init: Console is alive
[ 2.340273] init: - watchdog -
[ 2.352159] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 2.724072] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[ 2.724178] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[ 2.728813] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000000002010010
[ 2.736125] xhci-hcd xhci-hcd.0.auto: irq 104, io mem 0x08a00000
[ 2.745624] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[ 2.751667] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[ 2.756986] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[ 2.765362] hub 1-0:1.0: USB hub found
[ 2.771178] hub 1-0:1.0: 1 port detected
[ 2.775275] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 2.779557] hub 2-0:1.0: USB hub found
[ 2.787052] hub 2-0:1.0: 1 port detected
[ 2.791066] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 2.794644] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[ 2.800214] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000000002010010
[ 2.807574] xhci-hcd xhci-hcd.1.auto: irq 105, io mem 0x06000000
[ 2.817049] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[ 2.823106] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[ 2.828422] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[ 2.840653] hub 3-0:1.0: USB hub found
[ 2.842582] hub 3-0:1.0: 1 port detected
[ 2.846749] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[ 2.850926] hub 4-0:1.0: USB hub found
[ 2.858486] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19)
[ 2.864205] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 2.877566] init: - preinit -
[ 3.056160] random: jshn: uninitialized urandom read (4 bytes read)
[ 3.095568] usb 1-1: new high-speed USB device number 2 using xhci-hcd
[ 3.101817] random: jshn: uninitialized urandom read (4 bytes read)
[ 3.130344] random: jshn: uninitialized urandom read (4 bytes read)
[ 3.337413] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[ 3.338173] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[ 3.344347] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[ 4.876462] qca8k-ipq4019 c000000.switch: PSGMII work was stabilized after 1 calibration retries !
[ 4.877123] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 6.998138] procd: - early -
[ 6.998362] procd: - watchdog -
[ 7.557377] procd: - watchdog -
[ 7.557774] procd: - ubus -
[ 7.565436] random: ubusd: uninitialized urandom read (4 bytes read)
[ 7.609920] random: ubusd: uninitialized urandom read (4 bytes read)
[ 7.610310] random: ubusd: uninitialized urandom read (4 bytes read)
[ 7.617861] procd: - init -
Please press Enter to activate this console.
[ 7.925039] kmodloader: loading kernel modules from /etc/modules.d/*
[ 7.934279] Loading modules backported from Linux version v6.1.24-0-g0102425ac76b
[ 7.934333] Backport generated by backports.git v5.15.92-1-44-gd6ea70fafd36
[ 8.035538] PPP generic driver version 2.4.2
[ 8.037349] NET: Registered PF_PPPOX protocol family
[ 8.755570] urngd: v1.0.2 started.
[ 8.842054] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[ 8.842130] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[ 8.853983] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,b
[ 8.921104] ath10k_ahb a000000.wifi: Loading BDF type 0
[ 8.925763] ath10k_ahb a000000.wifi: failed to fetch board data for bus=ahb,bmi-chip-id=0,bmi-board-id=24,variant=zte,mf287 from ath10k/QCA4019/hw1.0/boan
[ 9.105244] ath10k_ahb a000000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[ 9.105327] ath10k_ahb a000000.wifi: failed to fetch board file: -12
[ 9.113722] ath10k_ahb a000000.wifi: could not probe fw (-12)
[ 9.298809] random: crng init done
[ 9.298859] random: 30 urandom warning(s) missed due to ratelimiting
[ 9.907095] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[ 9.907203] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[ 9.919094] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,b
[ 9.978782] ath10k_ahb a800000.wifi: Loading BDF type 0
[ 9.983395] ath10k_ahb a800000.wifi: failed to fetch board data for bus=ahb,bmi-chip-id=0,bmi-board-id=25,variant=zte,mf287 from ath10k/QCA4019/hw1.0/boan
[ 10.148743] ath10k_ahb a800000.wifi: failed to fetch board-2.bin or board.bin from ath10k/QCA4019/hw1.0
[ 10.148828] ath10k_ahb a800000.wifi: failed to fetch board file: -12
[ 10.157262] ath10k_ahb a800000.wifi: could not probe fw (-12)
[ 10.170812] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 24.033141] ipqess-edma c080000.ethernet eth0: Link is Down
[ 24.040357] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[ 24.040771] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[ 24.048581] qca8k-ipq4019 c000000.switch lan1: configuring for phy/psgmii link mode
[ 24.056418] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 24.063660] br-lan: port 1(lan1) entered blocking state
[ 24.069640] br-lan: port 1(lan1) entered disabled state
[ 24.075179] device lan1 entered promiscuous mode
[ 24.079949] device eth0 entered promiscuous mode
[ 24.111594] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[ 24.113899] br-lan: port 2(lan2) entered blocking state
[ 24.118248] br-lan: port 2(lan2) entered disabled state
[ 24.123887] device lan2 entered promiscuous mode
[ 24.139749] qca8k-ipq4019 c000000.switch lan3: configuring for phy/psgmii link mode
[ 24.140854] br-lan: port 3(lan3) entered blocking state
[ 24.146474] br-lan: port 3(lan3) entered disabled state
[ 24.152089] device lan3 entered promiscuous mode
[ 24.168527] qca8k-ipq4019 c000000.switch lan4: configuring for phy/psgmii link mode
[ 24.169625] br-lan: port 4(lan4) entered blocking state
[ 24.175034] br-lan: port 4(lan4) entered disabled state
[ 24.181140] device lan4 entered promiscuous mode
[ 27.197467] qca8k-ipq4019 c000000.switch lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[ 27.197565] br-lan: port 1(lan1) entered blocking state
[ 27.204655] br-lan: port 1(lan1) entered forwarding state
[ 27.210615] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

6

wait! i can see:

BusyBox v1.36.1 (2023-11-14 13:38:11 UTC) built-in shell (ash)
OpenWrt 23.05.2, r23630-842932a63d
There is no root password defined on this device!
Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins.

root@OpenWrt:/#

but now, what I have to do?

8

Install the sysupgrade image.

10

woooww I did!!! thank you very much!!!!
here is what i did to solve the bootloop issue

zte_mf287 3_neo_austria
CR_H3GATMF287V1.0.0B17

3Neo = MF287 tested
(DreiNeo = MF287+)
(DreiNeo Pro = MF287Pro)

ref openwrt.org/toh/zte/mf287
ref aboehler.at/doku/doku.php/projects:zte_mf28x
ref github.com/andyboeh/openwrt/tree/zte_mf287plus

Step by step guide

  1. Set tftp on linux machine (debian trixie)
    sudo apt install tftpd-hpa
    sudo nano /etc/default/tftpd-hpa
    sudo mkdir /srv/tftp
    sudo chown tftp:tftp /srv/tftp
    sudo /etc/init.d/tftpd-hpa restart
    sudo service tftpd-hpa status

  2. Download https://downloads.openwrt.org/releases/23.05.2/targets/ipq40xx/generic/openwrt-23.05.2-ipq40xx-generic-zte_mf287-initramfs-zImage.itb

  3. Save it into /srv/tftp

  4. Set manual ip address on linux machine
    192.168.0.22 (machine)
    192.162.0.1 (router)

  5. Disassemble routerbox
    Wire USBserial adapter to main board holes
    (viewed from ethernet slots)
    [vcc]no! [Tx] [Rx] [Gnd]

  6. Connect ethernet cable linux machine-router

  7. Set serial communication from linux terminal:
    ls /dev/ttyUSB*
    sudo minicom -b 115200 -D /dev/ttyUSB0

  8. Power up the router and wait until autoboot timer

  9. Break the autoboot pressing any key

  10. Upload file from /serv/tftp to router
    tftpboot 0x84000000 initramfs-zImage.itb
    bootm 0x84000000

  11. Press twice ENTER button (i don't know why), and the router boot in "safe mode".

  12. Change linux machine to new ip 192.168.1.xx

  13. Browse and login to http://192.168.1.1

  14. Go to http://192.168.1.1/cgi-bin/luci/admin/system/flash

  15. Download file https://downloads.openwrt.org/releases/23.05.2/targets/ipq40xx/generic/openwrt-23.05.2-ipq40xx-generic-zte_mf287-squashfs-sysupgrade.bin

  16. Press "Flash image" and select the file yuo just downloaded

.... After autoreboot the router is FIXED!!!

11

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.