ZyXEL P8702N - Unbranding

Just to continue some of the topic 51212 from the archive

CFE> attr 192.168.1.100:ras.bin
Loading 192.168.1.100:ras.bin ...
Finished loading 30172767 bytes

Flashing root file system and kernel at 0xb8020000: .............................................................................................................................................

.
*** Image flash done *** !

Resetting board in 0 seconds...HELO
CPUI
L1CI
HELO
CPUI
L1CI
4.1602A-1.0.38-116.140
DRAM
----
PHYS
STRF
400H
PHYE
DDR3
NREF
SIZ4
SIZ3
SIZ2
DINT
USYN
LSYN
MFAS
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN


Base: 4.16_02A
CFE version 1.0.38-116.140 for BCM963268 (32bit,SP,BE)
Build Date: 11/28/2014 (mandy@i7)
Copyright (C) 2000-2013 Broadcom Corporation.

Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 134217728 bytes (128MB)
Boot Address: 0xb8000000

NAND flash device: Spansion S34ML01G1, id 0x01f1 block 128KB size 131072KB
Checking Reset button on EXT INTR 0 
Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host/tftp (f/h/c)  : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 3  
Default host ramdisk file name    :   
Default ramdisk store address     :   
Board Id (0-14)                   : 963168VX  
Number of MAC Addresses (1-32)    : 12  
Base MAC Address                  : a0:e4:cb:70:XX:XX  
PSI Size (1-128) KBytes           : 128  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Auxillary File System Size Percent: 0  
Main Thread Number [0|1]          : 0  
WLan Feature                      : 0x00  
Voice Board Configuration (0-18)  : SI32260  

External switch id = 53125 
External switch id = 700 
External switch id = 0 
mii_write,0x4,0x1800.
lucky~
*** Press any key to stop auto run (3 seconds) ***
Auto run second count down: 3
web info: Waiting for connection on socket 0.
CFE> 
Broadcom Packet Flow Cache flushing the flows
Broadcom Packet Flow Cache flushing the flows
Chain QoSWanDefRule already exists.
Chain QoSWanDefRule already exists.
Chain QoSWanDefTag already exists.
Chain QoSWanDefTag already exists.
iptables: Chain already exists.
iptables: Chain already exists.
Broadcom Packet Flow Cache flushing the flows
5b3 remove RC_Change_httpQos. don't need do again.CMS MDM lock is held by ssk (pid=379) for 55 seconds.
Lock acquired in function cmsMdm_initWithAcc
Currently in rcl handler function for oid 138
CMS MDM lock is held by ssk (pid=379) for 55 seconds.
......
Currently in rcl handler function for oid 3007
Stopping CMS smd...
smd received Terminate msg!!  Terminate all apps and then exit.
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
Sorry, rule does not exist.
wlctl: wl driver adapter not found
wlan is not finish, can't start tr69cSorry, rule does not exist.
Sorry, rule does not exist.

syslog received signal 11Sorry, rule does not exist.
General UPnP daemon is ready to run with NATT 1
Sorry, rule does not exist.
bootup received signal 15Sorry, rule does not exist.
Sorry, rule does not exist.
Sorry, rule does not exist.
Sorry, rule does not exist.
Unmounting filesystems...
umount: can't umount /var: Device or resource busy
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
Restarting systHELO

(bootloop). 

External switch id = 53125 
External switch id = 700 
External switch id = 0 
mii_write,0x4,0x1800.
lucky~
*** Press any key to stop auto run (3 seconds) ***
Auto run second count down: 1
web info: Waiting for connection on socket 0.
CFE> fwselect show
Version in first partition: 1.00(AAJX.8)
Get second partition fail.
*** command status = 0
CFE>

# bootloop, but then dash some keys gives a shell

Sorry, rule does not exist.
wlctl: wl driver adapter not found
Sorry, rule does not exist.
Sorry, rule does not exist.......
Enter user spacewatchdog: invalid option -- m
cp: can't stat '/etc/ppp/chat/*': No such file or directory
mkdir: can't create directory '/var/etc': File exists
Starting celld daemon......
wlctl: wl driver adapter not found
sh: can't create dev/null: nonexistent directory
Sorry, rule does not exist.
sh: can't create dev/null: nonexistent directory.......
cpoy cms-data-model.xml for reference...
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
power up etherWAN port eth4
Powered up 
Success 
~ # yighjghgjggjghhkhgjghhkkgjhghhkjkghkkgkghkgjhgkhhkhkghghghjjghhgghkgjgkh
~ # env
USER=root
LD_LIBRARY_PATH=/lib/public:/lib/private:/lib/gpl:/lib
HOME=/
TERM=vt102
PATH=/home/bin:/home/scripts:/opt/bin:/bin:/sbin:/usr/bin:/usr/local/jamvm/bin:/opt/scripts
SHELL=/bin/sh
PWD=/
~ #
~ # cat /proc/cmdline 
root=mtd:rootfs ro rootfstype=jffs2  irqaffinity=0
~ # cat /proc/mtd 
dev:    size   erasesize  name
mtd0: 01ca0000 00020000 "rootfs"
mtd1: 00400000 00020000 "data"
mtd2: 00020000 00020000 "nvram"
mtd3: 00f00000 00020000 "customer"
~ #

~ # mtd_debug 
usage: mtd_debug info <device>
       mtd_debug read <device> <offset> <len> <dest-filename>
       mtd_debug write <device> <offset> <len> <source-filename>
       mtd_debug erase <device> <offset> <len>
~ # 
~ # mount
rootfs on / type rootfs (rw)
mtd:rootfs on / type jffs2 (ro,relatime)
proc on /proc type proc (rw,relatime)
tmpfs on /var type tmpfs (rw,relatime,size=420k)
tmpfs on /mnt type tmpfs (rw,relatime,size=16k)
sysfs on /sys type sysfs (rw,relatime)
tmpfs on /log type tmpfs (rw,relatime,size=0k)
tmpfs on /home type tmpfs (rw,relatime,size=0k)
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
mtd:data on /data type jffs2 (rw,relatime)
mtd:customer on /customer type jffs2 (rw,relatime)
usbfs on /proc/bus/usb type usbfs (rw,relatime)
~ #

~ # ps ax
ps: invalid option -- a
BusyBox v1.17.2 (2020-03-31 07:43:26 UTC) multi-call binary.

Usage: ps 

Show list of processes

Options:
        w       Wide output

~ # ps w
  PID USER       VSZ STAT COMMAND
    1 root      2444 S    init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    4 root         0 SW   [kworker/0:0]
    5 root         0 SW   [kworker/u:0]
    6 root         0 SW   [migration/0]
    7 root         0 SW   [migration/1]
    8 root         0 SW   [kworker/1:0]
    9 root         0 SW   [ksoftirqd/1]
   10 root         0 SW   [kworker/0:1]
   11 root         0 SW<  [khelper]
   12 root         0 SW   [kworker/u:1]
   74 root         0 SW   [sync_supers]
   76 root         0 SW   [bdi-default]
   78 root         0 SW<  [kblockd]
   86 root         0 SW   [khubd]
  105 root         0 SW   [skbFreeTask]
  106 root         0 SW<  [bpm]
  124 root         0 SWN  [kswapd0]
  125 root         0 SW   [fsnotify_mark]
  127 root         0 SW<  [crypto]
  189 root         0 SW   [mtdblock0]
  194 root         0 SW   [mtdblock1]
  199 root         0 SW   [mtdblock2]
  204 root         0 SW   [mtdblock3]
  225 root         0 SW   [watchdog_thread]
  226 root         0 SW   [kworker/1:1]
  229 root         0 SW<  [linkwatch]
  239 root         0 SW<  [deferwq]
  245 root         0 SWN  [jffs2_gcd_mtd1]
  246 root         0 SWN  [jffs2_gcd_mtd3]
  270 root         0 SW   [bcmFlwStatsTask]
  275 root         0 SW   [fapGsoLoopBk]
  276 root         0 SW   [kpAliveWatchdog]
  286 root         0 SW   [bcmsw_rx]
  308 root         0 SW   [bcmsw_timer]
  309 root         0 SW   [bcmsw]
  317 root         0 SW   [wfd]
  329 root         0 SW   [wl0-kthrd]
  350 root      1096 S    /bin/set_iptables
  356 root      1096 S    /bin/set_iptables
  357 root      1096 S    /bin/set_iptables
  358 root      2028 S    /bin/swmdk
  359 root      2028 S    /bin/swmdk
  360 root      2028 S    /bin/swmdk
  361 root      2028 S    /bin/swmdk
  362 root      2028 S    /bin/swmdk
  370 root      5348 S    /bin/smd
  379 root      6156 S    ssk
  733 root      2500 S    syslogd -n -L -l 7 -R (null):514 -r 7 -s 34 -b 5 -a 80
  734 root      2492 S    klogd -n
  758 root      1432 S    sntp -s (null) -s ntp1.tummy.com -t CET-1CEST,M3.5.0/1:0,M10.5.0/1:0
  771 root      8180 S    mcpd -m 0
  780 root      1812 S    dhcpd
  858 root      1472 S    rastatus6
  860 nobody    1080 S    dnsmasq
 1434 root         0 SW   [dsl0]
 1497 root      6048 S    bootup -m 0
 1498 root      8160 S    vcautohunt -m 0
 1516 root      8160 S    vcautohunt -m 0
 1517 root      8160 S    vcautohunt -m 0
 2055 root      6624 S    wlmngr -m 0
 2056 root      1420 S    link_updown
 2057 root      7820 S    celld -m 0
 2058 root      5904 S    watchdog -m 0
 2059 root      5944 S    linkstatus
 2220 root      2456 S    -/bin/sh
 2229 root      2456 S    sh
 2231 root      7820 S    celld -m 0
 2542 root         0 Z    [smd]
 2553 root      2444 R    ps w
~ # [ssk_main][521]there are something wrong in WLAN, still start tr69c
got SYSTEM_BOOT, adding eIEBoot to informEvList

~ # killall sntp
~ # killall vcautohunt
killall: vcautohunt: no process killed
~ # killall dhcpd
~ # killall rastatus6
~ # killall wlmngr
~ # brctl 
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        enableportsnooping      <bridge> <value>        0-disable 1-standard 2-blocking
        enableproxymode <bridge> <value>        To enable 1 or disable 0
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        addmacs         <bridge> <ifname> <mac>         add mac addresses to the bridge table
        delmacs         <bridge> <ifname> <mac>         remove mac addresses from the bridge table
        deldynmacs      <bridge> <ifname>               remove all dynamic mac address from the bridge table
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
        mldenableportsnooping   <bridge> <value>        0-disable 1-standard 2-blocking
        mldenableproxymode      <bridge> <value>        To enable 1 or disable 0
        enableigmplan2lan       <bridge> <value>        0-disable 1-enable
        enablemldlan2lan        <bridge> <value>        0-disable 1-enable
        flows           <bridge> <rxif> <txif>  To setup layer 2 flows to the path (rxif->txif)
        enableigmpratelimit     <bridge> <value>        0-disable, 1..500-packet rate
        eponuniunictrl  <bridge> <value>        0-disable 1-enable
~ # brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.a0e4cb703700       no              eth0.0
                                                        eth1.0
                                                        eth2.0
                                                        eth3.0
~ #

ras.bin:


in case you need password generator:

If for some reason you want AAJX.10
CFE: http://192.168.1.1 upload (md5sum 9d5a9149e190d34272c36ae4f1c6f5e8 (same file as mega nz link) P8702_Firmware_OEM_Stock_Url/100AAJX10D0.bin) https://drive.google.com/file/d/1Wrw5G9vwSAMzUMHPzWiaGZo6rvRDwszT/view?usp=sharing


~ # ls -la /sys/devices/platform/
drwxr-xr-x    6 root     root             0 Jan  4 15:59 .
drwxr-xr-x    7 root     root             0 Jan  4 15:55 ..
drwxr-xr-x    2 root     root             0 Jan  4 15:59 alarmtimer
drwxr-xr-x    3 root     root             0 Jan  4 15:59 bcmhs_spi.1
drwxr-xr-x    3 root     root             0 Jan  4 15:59 bcmleg_spi.0
drwxr-xr-x    2 root     root             0 Jan  4 15:59 brcmnand.0
-rw-r--r--    1 root     root          4096 Jan  4 15:59 uevent

~ # cat /proc/cpuinfo 
system type             : 963168VX
processor               : 0
cpu model               : Broadcom BMIPS4350 V8.0
BogoMIPS                : 397.31
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

processor               : 1
cpu model               : Broadcom BMIPS4350 V8.0
BogoMIPS                : 409.60
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

~ # cat /proc/devices 
Character devices:
  1 mem
  2 pty
  3 ttyp
  4 ttyS
  5 /dev/tty
  5 /dev/console
  5 /dev/ptmx
 10 misc
 90 mtd
108 ppp
128 ptm
136 pts
180 usb
189 usb_device
206 brcmboard
208 adsl
209 endpoint
227 p8021ag
228 bcmxtmcfg
238 bcmvlan
240 pwrmngt
241 bcmfap
242 fcache
243 ingqos
244 bpm
246 chipinfo
249 gmac
250 tms

Block devices:
259 blkext
  8 sd
 31 mtdblock
 65 sd
 66 sd
 67 sd
 68 sd
 69 sd
 70 sd
 71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd

~ # ifconfig -a
bcmsw     Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:174 multicast:0 unicast:174 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:131 multicast:0 unicast:131 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:44900 (43.8 KiB) TX bytes:11698 (11.4 KiB)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          Base address:0xda00 

br0       Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          inet addr:10.0.0.138  Bcast:10.0.0.255  Mask:255.255.255.0
          inet6 addr: fe80::a2e4:cbff:fe70:0000/64 Scope:Link
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:437 multicast:57 unicast:273 broadcast:107
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:50 multicast:0 unicast:50 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:0
          RX bytes:80544 (78.6 KiB) TX bytes:3390 (3.3 KiB)
          RX multicast bytes:4080 (3.9 KiB) TX multicast bytes:0 (0.0 B)

dsl0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          [NO FLAGS]  MTU:0  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:0 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth0      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          inet6 addr: fe80::a2e4:cbff:fe70:0000/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:236 multicast:77 unicast:19 broadcast:140
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:82 multicast:48 unicast:17 broadcast:17
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:58518 (57.1 KiB) TX bytes:7708 (7.5 KiB)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          

eth0.0    Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:158 multicast:51 unicast:1 broadcast:106
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:47 multicast:2 unicast:45 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:0
          RX bytes:38784 (37.8 KiB) TX bytes:3582 (3.4 KiB)
          RX multicast bytes:3516 (3.4 KiB) TX multicast bytes:408 (408.0 B)

eth1      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 multicast:0 unicast:0 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          

eth1.0    Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:81 multicast:47 unicast:34 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:0
          RX bytes:0 (0.0 B) TX bytes:6656 (6.5 KiB)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:4278 (4.1 KiB)

eth2      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 multicast:0 unicast:0 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          

eth2.0    Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:79 multicast:47 unicast:32 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:0
          RX bytes:0 (0.0 B) TX bytes:6518 (6.3 KiB)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:4278 (4.1 KiB)

eth3      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          inet6 addr: fe80::a2e4:cbff:fe70:0000/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:46 multicast:21 unicast:21 broadcast:4
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:262 multicast:93 unicast:19 broadcast:150
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:4968 (4.8 KiB) TX bytes:60184 (58.7 KiB)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          

eth3.0    Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:10 multicast:6 unicast:3 broadcast:1
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:75 multicast:45 unicast:30 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:0
          RX bytes:858 (858.0 B) TX bytes:5972 (5.8 KiB)
          RX multicast bytes:564 (564.0 B) TX multicast bytes:3870 (3.7 KiB)

eth4      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:03  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 multicast:0 unicast:0 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          

eth5      Link encap:Ethernet  HWaddr A0:E4:CB:70:00:00  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 multicast:0 unicast:0 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          
wl0       Link encap:Ethernet  HWaddr A0:E4:CB:70:00:01  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:7 overruns:0 frame:0
          TX packets:167 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:40956 (39.9 KiB)

wl0.1     Link encap:Ethernet  HWaddr 6A:E4:CB:70:00:02  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

wl0.2     Link encap:Ethernet  HWaddr 6A:E4:CB:70:00:03  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

wl0.3     Link encap:Ethernet  HWaddr 6A:E4:CB:70:00:00  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

wl1       Link encap:Ethernet  HWaddr A0:E4:CB:70:00:02  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 multicast:0 unicast:0 broadcast:0
          RX errors:0 dropped:0 overruns:0 frame:475
          TX packets:0 multicast:0 unicast:0 broadcast:0
          TX errors:0 dropped:0 overruns:0 carrier:0 collisions:0
          txqueuelen:1000
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
          RX multicast bytes:0 (0.0 B) TX multicast bytes:0 (0.0 B)
          Interrupt:15 Base address:0x4000 

wl1.1     Link encap:Ethernet  HWaddr 72:E4:CB:70:00:03  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:475
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

wl1.2     Link encap:Ethernet  HWaddr 72:E4:CB:70:00:00  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:475
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

wl1.3     Link encap:Ethernet  HWaddr 72:E4:CB:70:00:01  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:475
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0           txqueuelen:1000 
          RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
~ # lsmod
Module                  Size  Used by    Tainted: P  
xt_policer              1721  0 
xt_ether                 999  0 
xt_multiport            1446  0 
xt_DSCP                 1819  0 
xt_dscp                 1187  0 
ip6t_REJECT             3260  0 
nf_conntrack_ipv6       5116  0 
nf_defrag_ipv6          5893  1 nf_conntrack_ipv6
ip6table_mangle         1203  0 
ip6table_filter          803  1 
ip6_tables             12401  2 ip6table_mangle,ip6table_filter
xt_connlimit            3502  0 
nf_nat_tftp              582  0 
nf_nat_irc              1102  0 
nf_nat_rtsp             8619  0 
nf_nat_h323             6015  0 
nf_nat_ftp              1284  0 
nf_conntrack_tftp       2657  1 nf_nat_tftp
nf_conntrack_irc        3259  1 nf_nat_irc
nf_conntrack_rtsp      12472  1 nf_nat_rtsp
nf_conntrack_ftp        5740  1 nf_nat_ftp
nf_conntrack_h323      37932  1 nf_nat_h323
nf_nat_pptp             1754  0 
nf_conntrack_pptp       3996  1 nf_nat_pptp
nf_nat_proto_gre        1173  1 nf_nat_pptp
nf_conntrack_proto_gre     3782  1 nf_conntrack_pptp
nfnetlink_queue         7498  0 
iptable_mangle          1168  1 
xt_AUTOMAP              1209  0 
xt_mark                 1357  8 
xt_iprange              1144  0 
xt_pkttype               827  0 
xt_recent               8007  0 
xt_string                987  2 
xt_time                 1811  0 
xt_length                868  0 
xt_helper               1083  0 
xt_mac                   739  0 
ipt_REJECT              2489  0 
xt_LOG                 11639  0 
xt_limit                1703  0 
xt_state                 951  0 
xt_conntrack            2633  0 
ipt_REDIRECT             959  0 
ipt_MASQUERADE          2718  0 
iptable_nat             3339  1 
nf_nat                 13692 10 nf_nat_tftp,nf_nat_irc,nf_nat_rtsp,nf_nat_h323,nf_nat_ftp,nf_nat_pptp,nf_nat_proto_gre,ipt_REDIRECT,ipt_MASQUERADE,iptable_nat
nf_conntrack_ipv4      10069  3 iptable_nat,nf_nat
nf_defrag_ipv4           971  1 nf_conntrack_ipv4
nf_conntrack           62025 22 nf_conntrack_ipv6,xt_connlimit,nf_nat_tftp,nf_nat_irc,nf_nat_rtsp,nf_nat_h323,nf_nat_ftp,nf_conntrack_tftp,nf_conntrack_irc,nf_conntrack_rtsp,nf_conntrack_ftp,n4
nfnetlink               2751  1 nfnetlink_queue
xt_SKIPLOG               635  0 
xt_TCPMSS               3375  0 
iptable_filter           848  1 
ip_tables              11528  3 iptable_mangle,iptable_nat,iptable_filter
pwrmngtd                8147  0 
bcmvlan                93942  0 
p8021ag                 5891  0 
endpointdd           3883494  0 
pcmshim                 1354  0 
wl                   6194215  0 
dhd                   335542  0 
wlemf                  40466  2 wl,dhd
wlcsm                   4195  5 
wfd                     8401  2 wl,dhd
usb_storage            38858  0 
nciTMSkmod            306764  0 
bcm_enet              225348  2 pwrmngtd,wl
adsldd                354373  0 
bcmxtmcfg              89502  1 adsldd
bcmfap                188157  2 wfd,bcm_enet
pktflow                91046  2 bcm_enet,bcmfap
bcm_bpm                10195  0 [permanent]
bcm_ingqos              8348  0 
bcmxtmrtdrv            36934  2 bcmxtmcfg,pktflow
chipinfo                1325  0

I got a snapshot initramfs running but how to get it onto the NAND flash ?

[    0.000000] MIPS: machine is Broadcom BCM963268BU_P300 reference board
[    0.179052] unsupported NAND flash detected

When you get tired of having to type pass all the time

CFE> atbt 1

OK
*** command status = 0
CFE> ATWZ A0E4CB7000, F5, 01, 00, 0C
MAC address  : A0:E4:CB:70:00:00
Country Code : F5
EngDebugFlag : 01
FeatureBit   : 00
MAC Number   : 0C
*** command status = 0
CFE>

Rooted flashable image oldversion AAJX8 with filesystem.tgz included

BCM53124 eth chip, any hopes to get that supported since the bcmenet drivers are opensource ?

I would like to help, but I'm a complete noob and cant seem to understand the timeline of this project. Is there anyone experienced who could compile the information discussed in the different threads and how we might be able to help? :slight_smile:

@u5uyhystr hello Juan,
I need an emergency help.
as a new user, with a new modem Zyxel P8702N, I was looking for a new firmware for the modem, I ended up with your messages, I got the file you posted
switchP8702N.zip
, and I tried to upgrade the modem firmware, suddenly after a reset, the modem died, and I no longer can use it. the power light blinks and I don't know how to restore the firmware it had. Would you please help me?

Best,
Vahid

Hello, are you able to fix my problem? I posted it in the previous post.

Hello. Sorry if you bricked that (old!) router. I cant help because I dont have the unit anymore. I don't recommend to use that if you don't know what you are doing. It's old version for use only as a switch, no modem/wifi functions. Just get a newer better one e.g. the WSM20 (Multy M1) that shoudl work with openwrt

Thanks for fast replying,
I no longer plan to use it, but at least I want to have it back to what it was.
I already found the original firmwares, However I still don't know how can I recover it, is it a way to recover it? or there is nothing I can do?
I also tried Tftpd32/Tftpd64 , seems like nothing happens in there, maybe the IP I should select in adapter settings is not right? the modem setting itself was accessible through 10.0.0.138.
Please guide me if you can, I'm in shocked. and so sad about what happened.