Hello
I have wireless router and wireles ap with same hardware. The brands are different but the manufacturer is the same. Can I copy for example the APs firmware to the router? Will JTAG work for this purpose?
I will post the serial port outputs of both router and AP at the end of my message.
Here is some more information on this devices.
http://www.arcadyan.com/english/product … D=00000007
http://wiki.openwrt.org/usr5463
https://fjallfoss.fcc.gov/oetcf/eas/rep … mp;fcc_id=
Thanks for your time and support
*******************************************************************************************************
AP's serial output:
*******************************************************************************************************
RedBoot> fis load -l vmlinux
ÿ÷÷UÂ!€+Ethernet eth0: MAC address 00:1a:2a:df:65:f6
IP: 192.168.2.254, Default server: 0.0.0.0
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Customized by AirTies Wireless Networks
Non-certified release, version UNKNOWN - built 18:11:54, May 15 2007
Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Board: ap61
RAM: 0x80000000-0x80800000, [0x800341c0-0x807ed000] available
FLASH: 0xbfc00000 - 0xbfdf0000, 32 blocks of 0x00010000 bytes each.
== Executing boot script in 3.000 seconds - enter ^C to abort
RedBoot> fis load -l vmlinux
Image loaded from 0x80041000-0x80195000
RedBoot> exec
Now booting linux kernel:
Base address 0x80030000 Entry 0x80041040
Cmdline :
CPU revision is: 00019064
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB 4-way, linesize 16 bytes.
Linux version 2.4.25-LSDK-5.0.2.28 (mustafakuscu@debian) (gcc version 3.3.3) #1
Thu Aug 16 11:05:03 EEST 2007
Determined physical RAM map:
memory: 00800000 @ 00000000 (usable)
On node 0 totalpages: 2048
zone(0): 2048 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: console=ttyS0,115200
Using 92.000 MHz high precision timer.
Calibrating delay loop... 183.50 BogoMIPS
Memory: 6300k/8192k available (1193k kernel code, 1892k reserved, 80k data, 64k
init, 0k highmem)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
Checking for 'wait' instruction... unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
squashfs: version 3.1(lzma) (2006/08/19) Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xb1100003 (irq = 37) is a 16550A
Generic MIPS RTC Driver v1.0
GPIO Driver is registered...
MTD driver for SPI flash.
spiflash: Probing for Serial flash ...
spiflash: Found SPI serial Flash.
2097152: size
Creating 6 MTD partitions on "spiflash":
0x00000000-0x00020000 : "RedBoot"
0x00020000-0x00160000 : "rootfs"
0x00160000-0x00170000 : "cfg"
0x00170000-0x001f0000 : "vmlinux"
0x001f3000-0x001ff000 : "FIS directory"
mtd: partition "FIS directory" doesn't start on an erase block boundary -- force
read-only
0x001ff000-0x00200000 : "RedBoot config"
mtd: partition "RedBoot config" doesn't start on an erase block boundary -- forc
e read-only
Initializing Cryptographic API
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 64k freed
Algorithmics/MIPS FPU Emulator v1.5
Using /lib/modules/2.4.25-LSDK-5.0.2.28/net/ae531x.o
Warning: loading ae531x will taint the kernel: non-GPL license - Atheros
See http://www.tux.org/lkml/#export-tainted for information about tainted modu
les
ae531x.o: loaded with multi port support
Using /lib/modules/2.4.25-LSDK-5.0.2.28/misc/ar531x-wdt.o
Warning: loading ar531x-wdt will taint the kernel: non-GPL license - Atheros
See http://www.tux.org/lkml/#export-tainted for information about tainted modu
les
MOUNTING /dev/mtdblock2 IS OK
Decompressing configuration directory...
flash
flash/config.xml
UNMOUNTING /dev/mtdblock2 IS OK
INIT_SCRIPTS RUNNING
Initializing LAN....
Initializing VLAN
device wan0 entered promiscuous mode
br0: port 1(wan0) entering learning state
br0: port 1(wan0) entering forwarding state
br0: topology change detected, propagating
device lan1 entered promiscuous mode
lan1: attempt to add interface with same source address.
br0: port 2(lan1) entering learning state
br0: port 2(lan1) entering forwarding state
br0: topology change detected, propagating
device lan2 entered promiscuous mode
lan2: attempt to add interface with same source address.
br0: port 3(lan2) entering learning state
br0: port 3(lan2) entering forwarding state
br0: topology change detected, propagating
device lan3 entered promiscuous mode
lan3: attempt to add interface with same source address.
br0: port 4(lan3) entering learning state
br0: port 4(lan3) entering forwarding state
br0: topology change detected, propagating
device lan4 entered promiscuous mode
lan4: attempt to add interface with same source address.
br0: port 5(lan4) entering learning state
br0: port 5(lan4) entering forwarding state
br0: topology change detected, propagating
interface wds1 does not exist!
Bridge0 created...
LAN is initialized....
Extracting DHCPD conf
DHCPD conf extracted...
Initializing Wireless....
INIT OK.
BusyBox v1.00-pre10 (2007.08.16-08:06+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
wlan[0,0]-> ath_hal: 0.9.17.1 (AR5212, AR5312, RF5111, RF5112, RF2413, RF5413, R
F2317)
hwlan: 0.8.4.2-mutant (Atheros/multi-bss)
ath_rate_atheros: Version 2.0.1
Copyright (c) 2001-2004 Atheros Communications, Inc, All Rights Reserved
eath_ahb: 0.9.4.5-mutant (Atheros/multi-bss)
DiversityControl is set to 2
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36
Mbps 48Mbps 54Mbps
wifi0: mac 11.0 phy 4.8 radio 8.6
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 2317 WiSoC: mem=0xb0000000, irq=3
lp
Built-in commands:
-------------------
. : add alias bg break cd chdir commit config continue del eval
exec exit export false fg get getopts hash help jobs kill let
local pwd read readonly return set shift times trap true type
ulimit umask unalias unset wait
wlan[0,0]-> wlan: mac acl policy registered
NETDEV WATCHDOG IFreset is registered...
wds1: Added WDS MAC: 00:1a:2a:a7:16:ab
device wds1 entered promiscuous mode
br0: port 6(wds1) entering learning state
br0: port 6(wds1) entering disabled state
br0: port 5(lan4) entering disabled state
br0: port 4(lan3) entering disabled state
br0: port 3(lan2) entering disabled state
br0: port 2(lan1) entering disabled state
br0: port 1(wan0) entering disabled state
br0: port 6(wds1) entering disabled state
device wds1 left promiscuous mode
br0: port 5(lan4) entering disabled state
device lan4 left promiscuous mode
br0: port 4(lan3) entering disabled state
device lan3 left promiscuous mode
br0: port 3(lan2) entering disabled state
device lan2 left promiscuous mode
br0: port 2(lan1) entering disabled state
device lan1 left promiscuous mode
br0: port 1(wan0) entering disabled state
device wan0 left promiscuous mode
device wan0 entered promiscuous mode
br0: port 1(wan0) entering learning state
br0: port 1(wan0) entering forwarding state
br0: topology change detected, propagating
device lan1 entered promiscuous mode
lan1: attempt to add interface with same source address.
br0: port 2(lan1) entering learning state
br0: port 2(lan1) entering forwarding state
br0: topology change detected, propagating
device lan2 entered promiscuous mode
lan2: attempt to add interface with same source address.
br0: port 3(lan2) entering learning state
br0: port 3(lan2) entering forwarding state
br0: topology change detected, propagating
device lan3 entered promiscuous mode
lan3: attempt to add interface with same source address.
br0: port 4(lan3) entering learning state
br0: port 4(lan3) entering forwarding state
br0: topology change detected, propagating
device lan4 entered promiscuous mode
lan4: attempt to add interface with same source address.
br0: port 5(lan4) entering learning state
br0: port 5(lan4) entering forwarding state
br0: topology change detected, propagating
device ath0 entered promiscuous mode
br0: port 6(ath0) entering learning state
br0: port 6(ath0) entering forwarding state
br0: topology change detected, propagating
device wds1 entered promiscuous mode
wds1: attempt to add interface with same source address.
br0: port 7(wds1) entering learning state
br0: port 7(wds1) entering forwarding state
br0: topology change detected, propagating
help
Built-in commands:
-------------------
. : add alias bg break cd chdir commit config continue del eval
exec exit export false fg get getopts hash help jobs kill let
local pwd read readonly return set shift times trap true type
ulimit umask unalias unset wait
wlan[0,0]->
*******************************************************************************************************
router's serial output:
*******************************************************************************************************
ar531xPlus rev 0x00000090 boot loader startup...
Flash initialized
SDRAM initialized
Cache initialized
Copy program from 0xbfc00000 to 0x80520000, length 0x0000cf04 bytes ... done
Jump to SDRAM 0x80520cb4 [0x10000008, 0x00000000, 0x00000000]
Clear BSS section ... done
Stack: 0x8053ed20
Heap: 0x8053ed30
=========================================================================
Wireless Gateway WG4005G-LF-IP Loader 0.01 build Nov 15 2006 19:21:48
Arcadyan Technology Corporation
=========================================================================
Flash Found. It is 2MB Flash....
Copying boot params.....DONE
cpuFreq=240000000 sysFreq=60000000 cntFreq=120000000
Press any key to enter command mode ...
Checking Valid Image in Flash... Passed.
failed(4)
Try to find image for running...
Valid Code found in the Flash
................................................................................
................................................................................
................................................................................
........................................done
Uncompressed size = 2129788
I am going to run the Code image from 80001000
firmware startup...
Stack: 0x807aed20
Heap: 0x807aed30
F:/TTF2004AP51/GW_AP_Ath_AP51/ttf2004/source/firmware/project/ip/wg4005g-lf-ip/a
r5315/gpio.c: feed_watchdog is called??
F:/TTF2004AP51/GW_AP_Ath_AP51/ttf2004/source/firmware/project/ip/wg4005g-lf-ip/a
r5315/gpio.c: setGpio is called??
##### _ftext = 0x80001000
##### _fdata = 0x801CDE20
##### __bss_start = 0x80208F7C
##### end = 0x8079ED20
##### Backup Data from 0x801CDE20 to 0x807AED20 length=0003B15C
[CGI] Web SDRAM area is from 0XBFC40000H
install_exception
Installing TLB Refill exception handler from 8000A110 to 80000000, size=184
Installing General exception handler from 8000A1C8 to 80000180, size=216
Installing Interrupt exception handler from 8000A2A0 to 80000200, size=160
misc_int_init
mips_int_enable : 0x00000400
Connect the AHB interrupt
sysBoardDataInit
Init the GPIOs !!!
Enable arbitration for SOC devices !!!
cpuFreq=184000000 sysFreq=40000000 cntFreq=92000000
AR531X_TIMER=00061A6A
AR531X_RELOAD=00061A80
AR531X_IMR=00000028
mips_cp0_status=10000401
mips_cp0_cause=30800000
[INIT] MTinitialize ..
Runtime code version: V0.94
System startup...
[INIT] MTmeminit ..
[INIT] check COLOR 0 ..
[INIT] soho initialize COLOR1 : 448512
[INIT] soho initialize COLOR2 : 382976
F:/TTF2004AP51/GW_AP_Ath_AP51/ttf2004/source/firmware/project/ip/wg4005g-lf-ip/a
r5315/gpio.c: feed_watchdog is called??
Flash Found. It is 2MB Flash....
Set flash memory layout to Runcode version: V0.94
Runcode date: Jan 14 2007 00:01:35
Bootcode version: 0.01
Serial number: J706366468
Hardware version: 01
sizeof(struct III_Config_t) is 91500
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=48 BUF_ALIGN_SZ=8 BUFFER_OFFSET=112
BUF_BUFSZ0=384 BUF_BUFSZ1=1776
NUM_OF_B0=0 NUM_OF_B1=600
BUF_POOL0_SZ=0 BUF_POOL1_SZ=1094400
sizeof(BUFFER0)=432,sizeof(BUFFER1)=1824
*BUF0=0x805c6e74 *BUF1=0x804bbb64
Altgn *BUF0=0x805c6e80 *BUF1=0x804bbb70
End at BUF0:0x805c6e80, BUF1:0x805c6e70
buffer0 pointer init OK!
buffer1 pointer init OK!
time = 08/01/2003, 00:00:00
Interface 0 ip = 127.0.0.1
ar531xmac_init: ifno=1, initstr=UNIT=0 VLAN=1
F:/TTF2004AP51/GW_AP_Ath_AP51/ttf2004/source/firmware/hardware/ar5312/ar531xbsp.
c:sysEnetInit is called
ae531xEndLoad: loading device ...
ae531xEndLoad: unit=0, pDmaBuf=0xa03678d0, dmaBufSize=8976, txDescCount=192, rxD
escCount=256, clCount=512
ae531xEndLoad: System param: mac=b0500000, dma=b0501000, ivec=4, ilev=1000
ae531xEndLoad: Flash ea = 00:1a:2a:62:32:71
ae0 qt = 1, buf begin = 80000000, buf end = 80000000
ae0 qt = 1, drsc begin = a03678e0, desc end = a03687cc
Tx Queue b=0xa03678e0, e=0xa03687cc, c=0xa03678e0, s@c=0x 0
ae0 qt = 2, buf begin = 804bbbe2, buf end = 8052d4c2
ae0 qt = 2, drsc begin = a03687e0, desc end = a0369bcc
Rx Queue b=0xa03687e0, e=0xa0369bcc, c=0xa03687e0, s@c=0x80000000
ae531xMemInit: Memory setup complete.
Found PHY enet0 port0: model 0x18 revision 0x0
Found PHY enet0 port1: model 0x18 revision 0x0
Found PHY enet0 port2: model 0x18 revision 0x0
Found PHY enet0 port3: model 0x18 revision 0x0
Found PHY enet0 port4: model 0x18 revision 0x0
Port 0, Negogiation timeout
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
ip_VLANInit> WAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
Smart Router : 189
ae0 Phy Setup Failed
Please check the ethernet cable on port 0!
eth0: duplex 0, link 0
ae_SetMacFromPhy: enet0 as half duplex, 10Mbps
ae0: setting TXDP=0xa03678e0 RXDP=0xa03687e0
ae0 Verify MAC address 622A1A00 00007132
sb = 00 1A 2A 62 32 71
ae531xRxFilterConfig: MacControl = 1084000C
ae531xEndLoad: Done loading, pDrvCtrl=803676C8 txQ=803676F4 rxQ=80367708
ar531xmac_init: enet0 set to VLAN mode
ar531xmac_init: enet0 interface 1 registered to VLAN 1
DmaStatus = 0x 0
DmaBusMode = 0x 2084
DmaRxBase = 0x 3687e0
DmaTxBase = 0x 3678e0
DmaControl = 0x 200000
DmaIntr = 0x 0
MacControl = 0x1084000c
MacAddrHi = 0x 7132
MacAddrLo = 0x622a1a00
MacVlan1 = 0x 8100
MacVlan2 = 0x 0
Rx Queue b=0xa03687e0, e=0xa0369bcc, c=0xa03687e0, s@c=0x80000000
Current Rx buffer = 0x 0
Tx Queue b=0xa03678e0, e=0xa03687cc, c=0xa03678e0, s@c=0x 0
Current Tx buffer = 0x 0
time = 08/01/2003, 00:00:00
ae531xRxFilterConfig: MacControl = 1084000C
Interface 1 ip = 192.168.3.1
ae531xRxFilterConfig: MacControl = 1084000C
ether_init : Set WAN MTU = 1500
ar531xmac_init: ifno=2, initstr=UNIT=0 VLAN=2
ar531xmac_init: driver already loaded, number of instances is 2
ar531xmac_init: enet0 set to VLAN mode
ar531xmac_init: enet0 interface 2 registered to VLAN 2
DmaStatus = 0x 0
DmaBusMode = 0x 2084
DmaRxBase = 0x 3687e0
DmaTxBase = 0x 3678e0
DmaControl = 0x 200000
DmaIntr = 0x 0
MacControl = 0x1084000c
MacAddrHi = 0x 7132
MacAddrLo = 0x622a1a00
MacVlan1 = 0x 8100
MacVlan2 = 0x 0
Rx Queue b=0xa03687e0, e=0xa0369bcc, c=0xa03687e0, s@c=0x80000000
Current Rx buffer = 0x 0
Tx Queue b=0xa03678e0, e=0xa03687cc, c=0xa03678e0, s@c=0x 0
Current Tx buffer = 0x 0
time = 08/01/2003, 00:00:00
iput_IpLinkUp(ifno=2)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
iput_IpLinkUp(ifno=2): set ddns_update to 1
Interface 2 ip = 0.0.0.0
[HWLAN] ifno=3 irno=7 port=0x00000000
[HWLAN] semBCreate return 1 8034fc60, count 1
[HWLAN] pRadio->abolt = 00000000
[HWLAN] pRadio->abolt = 00000000
[HWLAN] gSetting.BasicRate=f
apInit: Initialize Access Point.
[HWLAN] ar5hwcCreatePhy : ifno:3 pdevInfo=803da2ac, devno=1
[HWLAN] devno 1 pdevInfo 803da2ac
[HWLAN] Base address = b0000000, irq 3
Attach AR5212 0x13 0x803da2ac
[HWLAN] DOMAIN 00008210
[HWLAN] Set HWLAN MAC as LAN MAC ..
[HWLAN] MAC Address=00-1A-2A=62-32-73
[HWLAN] wlan1 revisions: mac 11.0 phy 4.8 analog 8.6 eeprom 5.3
### MAX ### Sending Power Strength = 30 dBm
[HWLAN] phwChannel 2437, channelFlags 00005400
[HWLAN] size of ATHEROS_DESC hardware part 32
[HWLAN] CACHE_LINE_SIZE 16, AR_DESC_SIZE 128
[HWLAN] AR_HEADER_SIZE 96, AR_BUF_SIZE 1696numDescriptors = 704
[HWLAN] wlan1: pDmaBuf=A0209C40
[HWLAN] pMemBuf a0209c40 pdevInfo->pDmaBuf a0209c40
[HWLAN] semBCreate return 2 8034fc70, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 8034fc70
[HWLAN] semBCreate return 3 8034fc80, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 8034fc80
[HWLAN] semBCreate return 4 8034fc90, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 8034fc90
[HWLAN] semBCreate return 5 8034fca0, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 8034fca0
[HWLAN] pMemBuf a0225c40, pdevInfo->pDmaBuf + pdevInfo->dmaBufSize a0240460
[HWLAN] muxDevLoad is called for vportNum 10000, loadfn 8008e710, vportStr 16: 0
: 1
[HWLAN] semBCreate return 6 8034fcb0, count 1
[HWLAN] semBCreate return 7 8034fcc0, count 1
ar5212Reset: maxCalCount 10
[HWLAN] ioctl CMD=0xb
mips_int_connect: ivec 3 ar5hwcInt 800726ac pdevInfo 803da2ac
mips_int_enable : 0x00000C00
[HWLAN] bridgePortAdd : vp, 10000
[HWLAN] bridgePortAdd (base BSS) succeeded for vp1
[HWLAN] semBCreate return 8 8034fcd0, count 0
[HWLAN] semBCreate return 9 8034fce0, count 0
[HWLAN] semBCreate return 10 8034fcf0, count 1
[HWLAN] semBCreate return 11 8034fd00, count 1
[HWLAN] semBCreate return 12 8034fd10, count 0
[HWLAN] semBCreate return 13 8034fd20, count 1
[HWLAN] semBCreate return 14 8034fd30, count 1
[HWLAN] semBCreate return 15 8034fd40, count 0
[HWLAN] semBCreate return 16 8034fd50, count 1
[HWLAN] semBCreate return 17 8034fd60, count 1
[HWLAN] semBCreate return 18 8034fd70, count 0
[HWLAN] semBCreate return 19 8034fd80, count 1
wlan1 added STA: 00:1a:2a:62:32:73 (850)
[H