OpenWrt Forum Archive

Topic: WRT350Nv1 flashed with Kamikaze 8.09_RC1,brcm47xx: no ethX

The content of this topic has been archived on 27 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
p0wah
11 Jan 2009, 15:49

Hi,

it seems i took the wrong image:
i flashed openwrt-wrt350n_v1-squashfs.bin from brcm47xx subdir into my WRT250Nv1 with my working dd-wrt mega firmware.

Everything worked fine, but i cannot get any ethernet connection working.

I enabeled a console (soldered a CMOS -> RS232 Converter) and i am on it via terminal.


Booting into CFE (ctrl+C) works:

CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Mon Oct 30 23:22:44 CST 2006 (root@linux)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing PCI. [normal]
PCI: Initializing host
PCI: Enabling CardBus
SB PCI init done

0x3c = 0x00000100
PCI bus 0 slot 0/0: vendor 0x14e4 product 0x0800 (flash memory, rev 0x02)
PCI bus 0 slot 1/0: vendor 0x14e4 product 0x471f (ethernet network, rev 0x02)
PCI bus 0 slot 2/0: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x10, rev 0x02)
PCI bus 0 slot 2/1: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x20, rev 0x02)
PCI bus 0 slot 3/0: vendor 0x14e4 product 0x471b (USB serial bus, rev 0x02)
PCI bus 0 slot 4/0: vendor 0x14e4 product 0x0804 (PCI bridge, rev 0x02)
PCI bus 0 slot 5/0: vendor 0x14e4 product 0x0816 (MIPS processor, rev 0x02)
PCI bus 0 slot 6/0: vendor 0x14e4 product 0x471d (IDE mass storage, rev 0x02)
PCI bus 0 slot 7/0: vendor 0x14e4 product 0x4718 (network/computing crypto, rev 0x02)
PCI bus 0 slot 8/0: vendor 0x14e4 product 0x080f (RAM memory, rev 0x02)
PCI bus 0 slot 9/0: vendor 0x14e4 product 0x471e (class 0xfe, subclass 0x00, rev 0x02)
PCI bus 1 slot 0/0: vendor 0x14e4 product 0x4785 (host bridge, rev 0x02)
Initializing Devices.

No DPN
This is a Parallel Flash
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 0004001B  (28)
os      #02   0004001C -> 007F7FFF  (8093668)
nvram   #03   007F8000 -> 007FFFFF  (32768)
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 007F7FFF  (8093696)
nvram   #02   007F8000 -> 007FFFFF  (32768)
PCI bus 0 slot 1/0: _pci_map_mem: attempt to map 64-bit region tag =0x800 @ addr=18010004
PCI bus 0 slot 1/0: _pci_map_mem: addr=0x18010004   pa=0x18010000   pci_mem_space_pci_base=0x40000000   pci_mem_space=0x8000000
  mcfg = 000810fe
ge0: BCM5750 Ethernet at 0x18010000
CPU type 0x2901A: 300MHz
Total memory: 32768 KBytes

Total memory used by CFE:  0x80300000 - 0x803A7AB0 (686768)
Initialized Data:          0x8033C900 - 0x8033FCB0 (13232)
BSS Area:                  0x8033FCB0 - 0x80341AB0 (7680)
Local Heap:                0x80341AB0 - 0x803A5AB0 (409600)
Stack Area:                0x803A5AB0 - 0x803A7AB0 (8192)
Text (code) segment:       0x80300000 - 0x8033C900 (248064)
Boot area (physical):      0x003A8000 - 0x003E8000
Relocation Factor:         I:00000000 - D:00000000

Boot version: v4.2
The boot is CFE

mac_init(): Find mac [00:1D:7E:4A:XX:XX] in location 0
Nothing...

eou_key_init(): Find key pair in location 4
The eou device id is same
The eou public key is same
The eou private key is same
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
bcm5700: no firmware rendevous
eth0: Link speed: 1000BaseT FDX
Device eth0:  hwaddr 00-1D-7E-4A-9A-E0, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Automatic startup canceled via Ctrl-C

Booting into wrt:

CMD: [go;]
Check CRC of image1
  Len:     0xBE400      (779264)        (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x90C        (2316)  (0xBC04090C)
  Offset2: 0xBE400      (779264)        (0xBC0FE400)
  Header CRC:    0x3B4A7DE8
  Calculate CRC: 0x3B4A7DE8
Image 1 is OK
Try to load image 1.
CMD: [boot -raw -z -addr=0x80001000 -max=0x3a0000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3768 bytes read
Entry at 0x80001000
Starting program at 0x80001000
Linux version 2.6.25.17 (nbd@baustelle) (gcc version 4.1.2) #2 Tue Nov 4 01:37:43 UTC 2008
console [early0] enabled
CPU revision is: 0002901a (Broadcom BCM3302)
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x0F, vendor 0x4243)
ssb: Core 1 found: GBit Ethernet (cc 0x81F, rev 0x00, vendor 0x4243)
ssb: Core 2 found: USB 2.0 Host (cc 0x819, rev 0x00, vendor 0x4243)
ssb: Core 3 found: USB 2.0 Device (cc 0x81A, rev 0x02, vendor 0x4243)
ssb: Core 4 found: PCI (cc 0x804, rev 0x0B, vendor 0x4243)
ssb: Core 5 found: MIPS 3302 (cc 0x816, rev 0x07, vendor 0x4243)
ssb: Core 6 found: PATA (cc 0x81D, rev 0x00, vendor 0x4243)
ssb: Core 7 found: IPSEC (cc 0x80B, rev 0x03, vendor 0x4243)
ssb: Core 8 found: MEMC SDRAM (cc 0x80F, rev 0x03, vendor 0x4243)
ssb: Core 9 found: SATA XOR-DMA (cc 0x81E, rev 0x00, vendor 0x4243)
ssb: Initializing MIPS core...
ssb: set_irq: core 0x081f, irq 3 => 2
ssb: set_irq: core 0x0819, irq 1 => 3
ssb: set_irq: core 0x0804, irq 4 => 4
ssb: Sonics Silicon Backplane found at address 0x18000000
Serial init done.
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal          0 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Synthesized clear page handler (26 instructions).
Synthesized copy page handler (46 instructions).
PID hash table entries: 128 (order: 7, 512 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29808k/32768k available (2082k kernel code, 2960k reserved, 315k data, 128k init, 0k highmem)
Mount-cache hash table entries: 512
net_namespace: 540 bytes
NET: Registered protocol family 16
ssb: PCIcore in host mode found
ssb: CardBus slot detected
Registering a PCI bus after boot
PCI: Fixing up bridge 0000:00:00.0
PCI: Fixing up device 0000:00:00.0
PCI: Fixing latency timer of device 0000:00:00.0 to 168
PCI: Device 0000:00:00.0 resourcecollisions detected. Ignoring...
PCI: Fixing up device 0000:00:00.0
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x12, vendor 0x4243)
ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x0B, vendor 0x4243)
ssb: Core 2 found: PCI-E (cc 0x820, rev 0x02, vendor 0x4243)
ssb: Core 3 found: PCI (cc 0x804, rev 0x0D, vendor 0x4243)
ssb: Core 4 found: USB 1.1 Host (cc 0x817, rev 0x04, vendor 0x4243)
ssb: Sonics Silicon Backplane found on PCI device 0000:00:00.0
Registering a PCI bus after boot
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
detected lzma initramfs
initramfs: LZMA lc=1,lp=2,pb=2,origSize=512
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY)  © 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x0 (irq = 2) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 2) is a 16550A
serial8250 serial8250.0: unable to register port at index 0 (IO0 MEMb8000300 IRQ2): -28
serial8250 serial8250.0: unable to register port at index 1 (IO0 MEMb8000400 IRQ2): -28
flash init: 0x1c000000 0x02000000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
Flash device: 0x800000 at 0x1fc00000
bootloader size: 262144
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x007e0000 : "linux"
0x000fe400-0x007e0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=280000, len=560000
0x00280000-0x007e0000 : "rootfs_data"
0x007e0000-0x00800000 : "nvram"
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 128k freed
Please be patient, while OpenWrt loads ...
Algorithmics/MIPS FPU Emulator v1.5
- preinit -
Press CTRL-C for failsafe
diag: Detected 'Linksys WRT350N'
roboswitch: Probing device eth0: No such device
roboswitch: Probing device eth1: No such device
roboswitch: Probing device eth2: No such device
roboswitch: Probing device eth3: No such device
switching to jffs2
mini_fo: using base directory: /
mini_fo: using storage directory: /jffs
- init -

Please press Enter to activate this console. roboswitch: Probing device eth0: No such device
roboswitch: Probing device eth1: No such device
roboswitch: Probing device eth2: No such device
roboswitch: Probing device eth3: No such device
b43-phy0: Broadcom 4321 WLAN found
Broadcom 43xx driver loaded [ Features: NLR, Firmware-ID: FW13 ]
PPP generic driver version 2.4.2
ip_tables: (C) 2000-2006 Netfilter Core Team
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
input: b43-phy0 as /devices/virtual/input/input0
b43-phy0: Loading firmware version 410.2160 (2007-05-26 15:32:10)
b43-phy0 ERROR: IEEE 802.11n devices are not supported, yet.
Registered led device: b43-phy0::radio
br-lan: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
b43-phy0: Radio hardware status changed to DISABLED
device wlan0 entered promiscuous mode



BusyBox v1.11.2 (2008-10-08 15:12:55 UTC) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
|       |.-----.-----.-----.|  |  |  |.----.|  |_
|   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
|_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
KAMIKAZE (8.09, r13118) ----------------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
---------------------------------------------------
root@OpenWrt:/#

How can i flash a working image to the Linksys ?


I tried getting a connection to ethX in CFE mode: but my managed GBitSwitch doesn`t shows a connection. My Laptop with WinXP and 1000pro Intel IF doesn`t shows one either.

My GBitSwitch sees the Ethernet connection, when the linksys boots into open-wrt. But i get no connection there too (no ping).

I tried to setup the Wlan interface, but the driver doesn`t support N Standard:

uci set wireless.@wifi-device[0].disabled=0; uci commit wireless; wifi
ifconfig wlan0 down; iwconfig wlan0 mode managed channel 1 essid foo; ifconfig wlan0 up;
iwlist scan
udhcpc -i br-lan

I set the parameters in nvram (like hier http://wiki.openwrt.org/OpenWrtDocs/Har … s/WRT350N) but nothing helped: i couldn`t ping 192.168.1.1. How can i get it back working ? is there a console transfer possible ? No USB driver is included, so i cannot use the usb port.


PS: why is the image called "openwrt-wrt350n_v1-squashfs.bin"  when its not working on a 350N v1 ? are there even differences between v1 models ? My Type is CNQ01... 


Kind regards,

p0wah

(Last edited by p0wah on 11 Jan 2009, 16:50)

Post #2
p0wah
12 Jan 2009, 23:05

[SOLVED]  IRC helped alot....  thx for helping me.

My main Problem was: i disabled boot_wait.
After it was enabled i had my ethernet IF up (port 3 on router-switch).

That solved my Problem: get a *.trx file (i switched back to dd-wrt...)


BUT YOU NEED A CONSOLE CONNECTION (http://wiki.openwrt.org/OpenWrtDocs/Cus … al_Console)

#1
boot router into CFE (press several times CTRL+C during booting)

#2
start on Linux PC a firmware transmission via tftp:

tftp 192.168.1.1
tftp>binary
tftp>rexmt 1
tftp>timeout 60
tftp>trace
tftp>put <YOUR-FIRMWARE>.trx


#3 enter on router (do not change flash1.trx)
CFE> flash -noheader : flash1.trx

you can see in the log:
CMD: [flash -noheader : flash1.trx]
Reading :: Done. XXXXXXX bytes read
fname=flash1.trx
Programming...done. XXXXXX bytes written
*** command status = 0

#4 reboot the device after successful programming....  should work now, if you choosed the correct image.


BTW:
cutting off the header this way didn`t work for me (no boot sector found in flash) - i had to find a *.trx file for my router:
dd if=dd-wrt.v24-11296_NEWD_mini.bin of=dd-wrt.v24-11296_NEWD_mini.trx bs=32 skip=1


C U

p0wah

(Last edited by p0wah on 12 Jan 2009, 23:06)

Post #3
yasha
1 Mar 2009, 11:36

Easiest recovery method, which I've done each time I've tried to use openwrt for the WRT350N as it's still a WIP, is essentially what you state, however...

Once in CFE using the serial console, flashing twice the stock linksys image bin file to get back a functioning 350N:

1. Have the tfp command ready to go in windows/linux command prompt.
2. In the console window at CFE prompt, do: flash -noheader : flash1.trx
    then quickly switch back to the tftp command line and execute it before the other times out.
3. This will flash the image with an error being repeated, but putting it into automatic recovery mode allowing you to do the tftp upload again,
    this time with it being stated as valid, and going through the whole recovery with no need for further interaction, only patience.


It'd be nice for the default image that's listed in the downloads section to fully function for the WRT350N and/or the WRT600N that I have, but I only really need this kind of extra functionality on my older G (buffalo WHR-HP-G54) router which of course still works great with the 2.4 kernel.

(Last edited by yasha on 1 Mar 2009, 11:42)

Post #4
guiambros
21 Jun 2010, 00:54

Thanks a lot Yasha! Worked like a charm. I was stuck trying to re-flash a bricked WRT350N over a serial console, and your trick did it.

The discussion might have continued from here.