Ok, we have us an interesting router! All 3 models are the same, 550N and 550NH sold in USA, the 460N sold elsewhere. The NH is same as N but comes with three cool external antennas on cables.
Review and internal photos here:
http://en.network01.net/modules/newbb/v … mp;forum=2
This is an Atheros AP81 platform router. Gigabit Ethernet ports! And it has pad on the motherboard to add a USB port, they even have a pad on the front for an LED to be added labeled USB. Very impressive hardware specifications:
-- Gigabit LAN Ports (rtl8366sr chip)
-- ar9103 3x3 MIMO radio chip
-- same 32MB of RAM and 4MB of flash that most other AP81 have
I found a serial port with 5 pins and #4 pin missing matching this information:
http://zyxel.nas-central.org/wiki/FieldReport
I can not find a JTAG port, I look on the backside of the board like on some other Zyxel. Printed on backside of board:
RU E89382
HannStar K MV-4
94V-O
0835
Front of board
Made in Taiwan
45-401-000764
CHAIN2
Serial of boot is 9600:
Bootbase Version: V1.04 | 12/28/2007 13:20:00
RAM: Size = 32768 Kbytes
DRAM POST: Testing: 32768K
OK
ST32M *1
ZyNOS Version: V3.60(BFD.1) | 08/20/2008 09:55:00
Press any key to enter debug mode within 3 seconds.
............................................................
Then I enter command "ATHE" and "ATSH":
ATHE
======= Debug Command Listing =======
AT just answer OK
ATHE print help
ATBAx change baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k
ATENx,(y) set BootExtension Debug Flag (y=password)
ATSE show the seed of password generator
ATTI(h,m,s) change system time to hour:min:sec or show current time
ATDA(y,m,d) change system date to year/month/day or show current date
ATDS dump RAS stack
ATDT dump Boot Module Common Area
ATDUx,y dump memory contents from address x for length y
ATRBx display the 8-bit value of address x
ATRWx display the 16-bit value of address x
ATRLx display the 32-bit value of address x
ATGO(x) run program at addr x or boot router
ATGR boot router
ATGT run Hardware Test Program
ATRTw,x,y(,z) RAM test level w, from address x to y (z iterations)
ATSH dump manufacturer related data in ROM
ATTD download router configuration to PC via XMODEM
ATUR upload router firmware to flash ROM
ATLC upload router configuration file to flash ROM
< press any key to continue >
ATLD upload router default configuration file to flash ROM
ATXSx xmodem select: x=0: CRC mode(default); x=1: checksum mode
ATSR system reboot
ATSP send packet
ATEUx Upgrate image by Ethernet, 0:bootbase,1:romfile,2:RAS
ATMU print Multiboot client version
ATLTx LED on/off test
OK
ATSH
ZyNOS Version : V3.60(BFD.1) | 08/20/2008 09:55:00
Bootbase Version : V1.04 | 12/28/2007 13:20:00
Vendor Name : ZyXEL Communications Corp.
Product Model : X550N
ZyNOS ROM address : bfc40000
System Type : 7
MAC Address : 0019CBC4E3DE
Default Country Code : FF
Boot Module Debug Flag : 00
RomFile Version : BB
RomFile Checksum : a369
ZyNOS Checksum : a50e
Core Checksum : c67f
SNMP MIB level & OID : 060102030405060708091011121314151617181920
Main Feature Bits : C0
Other Feature Bits :
01 F0 00 00 00 00 00 00-00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00-06 41 13 00 00 00
OK
ATMU
MultiBoot Client version 2.2
No JTAG that I can see, I even lifted the large metal cover (center of board) and it houses the ar9132 CPU and the Realtek rtl8366sr switch. But no JTAG there either. So once I put OpenWRT, no way to flash back ZynOS?
keywordz: NBG460N NBG-460N 460 ZyOS
(Last edited by RoundSparrow on 29 Jan 2009, 00:51)