OpenWrt Forum Archive

Topic: can i upload a openwrt firmware in the device ?

The content of this topic has been archived on 28 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi

i buy this  modem routuer via my ISP  club internet  its a dedicate box cant find manufacture

i open it  end plug  a serial cable   after he load his setting to acces  he ask me a username end password

any suggestion ? a way to change the password ?  thanks



CFE version 1.0.37-0.6 for BCM96348 (32bit,SP,BE)
Build Date: ¥|  3¤ë  3 18:53:59 CST 2005 (root@hp)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
Auto-negotiation timed-out
10 MB Half-Duplex (assumed)
CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz

Total memory used by CFE:  0x80401000 - 0x80522C60 (1186912)
Initialized Data:          0x8041ADB0 - 0x8041C600 (6224)
BSS Area:                  0x8041C600 - 0x80420C60 (18016)
Local Heap:                0x80420C60 - 0x80520C60 (1048576)
Stack Area:                0x80520C60 - 0x80522C60 (8192)
Text (code) segment:       0x80401000 - 0x8041ADB0 (105904)
Boot area (physical):      0x00523000 - 0x00563000
Relocation Factor:         I:00000000 - D:00000000

Board IP address                : 192.168.1.1:ffffff00
Host IP address                 : 192.168.1.100
Gateway IP address              :
Run from flash/host (f/h)       : f
Default host run file name      : vmlinux
Default host flash file name    : bcm963xx_fs_kernel
Boot delay (0-9 seconds)        : 1
Board Id Name                   :





Psi size in KB                  : 24
Number of MAC Addresses (1-32)  : 11
Base MAC Address                : 00:03:c9:9e:04:af
Ethernet PHY Type               : Internal
Memory size in MB               : 16

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Code Address: 0x80010000, Entry Address: 0x80188018
Decompression OK!
Entry at 0x80188018
Closing network.
Starting program at 0x80188018
Linux version 2.6.8.1 (root@hp) (gcc version 3.4.2) #1 Thu Dec 7 17:03:53 CST 20
06
Flash device ID:22a7
MXIC FLASH FAMILY
Total Flash size: 4096K with 71 sectors
***Board is not initialized****: Using the default PSI size: 24
96348GW prom init
CPU revision is: 00029107
mpi: No Card is in the PCMCIA slot
Determined physical RAM map:
memory: 00fa0000 @ 00000000 (usable)
On node 0 totalpages: 4000
  DMA zone: 4000 pages, LIFO batch:1
  Normal zone: 0 pages, LIFO batch:1
  HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd
brcm mips: enabling icache and dcache...
Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB 2-way, linesize 16 bytes.
PID hash table entries: 64 (order 6: 512 bytes)
Using 128.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 14112k/16000k available (1303k kernel code, 1868k reserved, 196k data, 7
2k init, 0k highmem)
Calibrating delay loop... 253.44 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction...  unavailable.
NET: Registered protocol family 16
Can't analyze prologue code at 801547cc
Software Watchdog Timer: 0.07 initialized. soft_noboot=0 soft_margin=1 sec (nowa
yout= 0)
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Using noop io scheduler
bcm963xx_mtd driver v1.0
brcmboard: brcm_board_init entry
bcm963xx_serial driver v2.0
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
NET: Registered protocol family 1
NET: Registered protocol family 17
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 72k freed
init started:  BusyBox v1.00 (2006.12.07-09:06+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5


BusyBox v1.00 (2006.12.07-09:06+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.


Loading drivers and kernel modules...

atmapi: module license 'Proprietary' taints kernel.
blaadd: blaa_detect entry
adsl: adsl_init entry
Broadcom BCMPROCFS v1.0 initialized
Broadcom BCM6348A2 Ethernet Network Device v0.3 Dec  7 2006 17:02:47
Config Internal PHY Through MDIO
BCM63xx_ENET: Auto-negotiation timed-out
BCM63xx_ENET: 10 MB Half-Duplex (assumed)
eth0: MAC Address: 00:03:C9:9E:04:AF
Broadcom BCM6348A2 Ethernet Network Device v0.3 Dec  7 2006 17:02:47
Config External PHY Through MDIO
Correct Ext PHY address: 17
BCM63xx_ENET: Auto-negotiation timed-out
BCM63xx_ENET: 10 MB Half-Duplex (assumed)
eth1: MAC Address: 00:03:C9:9E:04:B0
Broadcom BCM6348A2 USB Network Device v0.4 Dec  7 2006 17:02:48
usb0: MAC Address: 00 03 C9 9E 04 B1
usb0: Host MAC Address: 00 03 C9 9E 04 B2
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
wl0: Broadcom BCM4318 802.11 Wireless Controller 3.91.23.0
Endpoint: endpoint_init entry
BOS: Enter bosInit
BOS: Enter bosAppInit
BOS: Exit bosAppInit
BOS: Exit bosInit
Endpoint: endpoint_init COMPLETED
BcmAdsl_Initialize=0xC00521C8, g_pFnNotifyCallback=0xC00665E4
AdslCoreHwReset: AdslOemDataAddr = 0xA0FFB2E4
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.1 (125 buckets, 0 max) - 368 bytes per conntrack

==>   Bcm963xx Software Version: AH4021.01.2.01.300L01.V44-08.mgcp.dspApp3341_fx
o.LE9500 A2pB019b11.d16m   <==

device usb0 entered promiscuous mode
br0: port 1(usb0) entering learning state
br0: topology change detected, propagating
br0: port 1(usb0) entering forwarding state
device eth0 entered promiscuous mode
br0: port 2(eth0) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0) entering forwarding state
device eth1 entered promiscuous mode
br0: port 3(eth1) entering learning state
br0: topology change detected, propagating
br0: port 3(eth1) entering forwarding state
Key Input : TECOM-AH4021-9E04AF
Key Output: 4F B7 76 46 9D 15 3B CC 08 31 DB BE 39 45 6B 6F DB B0 E9 32
Setting country code "FR"
channel selected 11
channel selected 11
device wl0 entered promiscuous mode
br0: port 4(wl0) entering learning state
br0: topology change detected, propagating
br0: port 4(wl0) entering forwarding state
br0: port 4(wl0) entering disabled state
br0: port 4(wl0) entering learning state
br0: topology change detected, propagating
br0: port 4(wl0) entering forwarding state
device usb0 left promiscuous mode
br0: port 1(usb0) entering disabled state
device usb0 entered promiscuous mode
br0: port 1(usb0) entering learning state
br0: topology change detected, propagating
br0: port 1(usb0) entering forwarding state
device eth0 left promiscuous mode
br0: port 2(eth0) entering disabled state
device eth0 entered promiscuous mode
br0: port 2(eth0) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0) entering forwarding state
device eth1 left promiscuous mode
br0: port 3(eth1) entering disabled state
device eth1 entered promiscuous mode
br0: port 3(eth1) entering learning state
br0: topology change detected, propagating
br0: port 3(eth1) entering forwarding state
device wl0 left promiscuous mode
br0: port 4(wl0) entering disabled state
device wl0 entered promiscuous mode
br0: port 4(wl0) entering learning state
br0: topology change detected, propagating
br0: port 4(wl0) entering forwarding state
Starting the MGCP application with the following parameters:

Call Agent IP address/FQDN: rtp.voip.club-internet.fr
Gateway name: ci10557432
Interface name: any
Preferred codec: auto
kernel::endpoint_open
kernel::endpoint_open COMPLETED
BOS: Enter bosInit
BOS: Enter bosAppInit
BOS: Exit bosAppInit
BOS: Exit bosInit
00:00:38 Calling callClient
try to probe the DNS server
app: /bin/dnsprobe &
00:00:38 ERROR resolving address rtp.voip.club-internet.fr by DNS Server.


=====================================================
Broadcom Canada, E-MTA CallClient.
        Version: 1.1.
        Build Date: Dec  7 2006 17:05:31.
=====================================================

00:00:39 GWCONFIG Data:
00:00:39        CA_#1 Name  - ca@rtp.voip.club-internet.fr
00:00:39        CA_#2 Name  - ca@rtp.voip.club-internet.fr
00:00:39        CA_#3 Name  - ca@rtp.voip.club-internet.fr
00:00:39        GW Name     - ci10557432
00:00:39        Interface name  - any
00:00:39        Preferred Codec  - auto
00:00:39        Country  - FRA
00:00:39        AALN  - 1
00:00:39        CA Port  - 2427
00:00:39        MGC Port  - 2427
00:00:39        TX Gain  - 0
00:00:39        RX Gain  - 0
00:00:39        PSTN Access Code  - ##
00:00:39        Heartbeat Timer  - 60
00:00:39        Emergency List  -
Created queue HDSP
dnsprobe: Can not open /etc/resolv.conf
00:00:39 CALLCLIENT: Initializing endpoints
app: echo 0 > /var/telephone0_status
app: echo 0 > /var/telephone1_status
app: echo 0 > /var/mgcpstats
00:00:39 CALLCLIENT: Initializing endpoints
00:00:39 Endpoint will be initialized for country FRA (country code = 5)

00:00:39 Endpoint will be initialized for TX Gain: 0 dB, RX Gain: 0 dB

00:00:39 Endpoint Event task started with pid 518...

BOS: Created task eptEvent
00:00:39 Endpoint Packet task started with pid 519 ...

BOS: Created task eptPacket
BOS: Enter bosStartApp


BOS: bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)...

BOS: Enter TaskCreate aoAP
BOS: TaskCreate - spawn new task aoAP
bcmOsTaskCreate:
TASK NAME      = aoAP
TASK_PRIORITY  = 1
BOS: Exit TaskCreate
BOS: AppResetDetectionEnable() - Enabled reset detection.
bcmOsTaskCreate:
TASK NAME      = aoRT
TASK_PRIORITY  = 1
BOS: Exit bosStartApp
Reseting the 3341
voipResetGpio = 6
PASS: mmr
PASS: chipCtl
PASS: mspi
PASS: scratchSram
PASS: apmregs
PASS: apm0
PASS: apm1
PASS: hvg
PASS: slic
PASS: vpm
PASS: mbox
3341 diagnostics passed!
Reseting the 3341
voipResetGpio = 6
Initializing 3341 drivers
-------------- TDM DMA setup strt --------------
SAMPLESIZE = 8
DESCRIPTORP = 0xb7fe6300 INGRESSP = 0xb7fe6310 EGRESSP = 0xb7fe6330
Initializing Memory: 8 (16-bit locations)
Priming TX FIFO....
Completed TDM3341 init!!!!
MSPI driver init SUCCESSFUL
MSPI driver registers update SUCCESSFUL
BOARDHAL Enabling relays
Loading 3341 Zsp with Hausware app.
BOS: Enter TaskCreate 3341_ASSERT_IST
BOS: TaskCreate - spawn new task 3341_ASSERT_IST
bcmOsTaskCreate:
TASK NAME      = 3341_ASSERT_IST
TASK_PRIORITY  = 1
BOS: Exit TaskCreate
DSP Handshake.  Hausware ZSP app initialized properly.
bosMsgQCreate: Created message queue VRGEVQ at address 0x8001
BOS: Enter TaskCreate VRGEVPR
BOS: TaskCreate - spawn new task VRGEVPR
bcmOsTaskCreate:
TASK NAME      = VRGEVPR
TASK_PRIORITY  = 1
BOS: Exit TaskCreate
BOS: Enter TaskCreate HCAS
BOS: TaskCreate - spawn new task HCAS
bcmOsTaskCreate:
TASK NAME      = HCAS
TASK_PRIORITY  = 1
BOS: Exit TaskCreate
ENDPT: Creating hausware task
BOS: Enter TaskCreate HTSK
BOS: TaskCreate - spawn new task HTSK
bcmOsTaskCreate:
TASK NAME      = HTSK
TASK_PRIORITY  = 1
BOS: Exit TaskCreate
DAA DBG: MSPI Hdl = 0x500
DAA DBG: GPIO Hdl = 0xb
     DAA DBG: Successful READ!!!! count = 0
DAA DBG: ISOCAP lock count = 0
Si3050 SLAC Initialised, Line side device = Si: 3018 (0x1)
System dev rev: 0x4, Line dev rev: 0x3
Line dev status: FDT:0x1, LCS: 0x0

Si3050 Registers Values

        Reg 0x1. Control 1  - 0x0 (Res 0xba)
        Reg 0x2. Control 2  - 0x7 (Res 0xdf)
        Reg 0x3. Int Mask   - 0x0 (Res 0xff)
        Reg 0x4. Int Source - 0x28 (Res 0xff)
        Reg 0x5. DAA Ctrl 1 - 0x0 (Res 0x6d)
        Reg 0x6. DAA Ctrl 2 - 0x0 (Res 0x18)
        Reg 0x7. Smp Rate   - 0x0 (Res 0x8)
        Reg 0x8. Reserved   - 0x0 (Res 0x0)
        Reg 0x9. Reserved   - 0x0 (Res 0x0)
        Reg 0xa. DAA Ctrl 3 - 0x0 (Res 0x1)
        Reg 0xb. S/LSD Rev  - 0x14 (Res 0xff)
        Reg 0xc. LSD Status - 0x40 (Res 0x5f)
        Reg 0xd. LSD Rev    - 0x4c (Res 0x3c)
        Reg 0xe. DAA Ctrl 4 - 0x0 (Res 0x2)
        Reg 0xf. T/R Gain 1 - 0x0 (Res 0x88)
        Reg 0x10. Int Ctrl 1 - 0x0 (Res 0x53)
        Reg 0x11. Int Ctrl 2 - 0x0 (Res 0xff)
        Reg 0x12. Int Ctrl 3 - 0x0 (Res 0x2)
        Reg 0x13. Int Ctrl 4 - 0x2 (Res 0x7)
        Reg 0x14. CP Rx Atte - 0x0 (Res 0xff)
        Reg 0x15. CP Tx Atte - 0x0 (Res 0xff)
        Reg 0x16. Rg Ctrl 1  - 0x16 (Res 0xff)
        Reg 0x17. Rg Ctrl 2  - 0x12 (Res 0xff)
        Reg 0x18. Rg Ctrl 3  - 0x99 (Res 0xbf)
        Reg 0x19. Res Calib  - 0xe (Res 0xef)
        Reg 0x1a. DC Ctrl    - 0xc0 (Res 0xf3)
        Reg 0x1b. Reserved   - 0x7 (Res 0x0)
        Reg 0x1c. Loop Sta   - 0x0 (Res 0xff)
        Reg 0x1d. Line V Sta - 0x0 (Res 0xff)
        Reg 0x1e. AC Ctrl    - 0x0 (Res 0xf)
        Reg 0x1f. DAA Ctrl 5 - 0x20 (Res 0xeb)
        Reg 0x20. Gd Sta Ctl - 0x3 (Res 0x7)
        Reg 0x21. PCM/SPI Md - 0x38 (Res 0xfb)
        Reg 0x22. PCM T St L - 0x0 (Res 0xff)
        Reg 0x23. PCM T St H - 0x0 (Res 0x3)
        Reg 0x24. PCM R St L - 0x0 (Res 0xff)
        Reg 0x25. PCM R St H - 0x0 (Res 0x3)
        Reg 0x26. T Gain 2   - 0x5 (Res 0x1f)
        Reg 0x27. R Gain 2   - 0x3 (Res 0x1f)
        Reg 0x28. T Gain 3   - 0x0 (Res 0x1f)
        Reg 0x29. R Gain 3   - 0x0 (Res 0x1f)
        Reg 0x2a. GCI Ctrl   - 0x0 (Res 0xf)
        Reg 0x2b. LV T Int   - 0x0 (Res 0xff)
        Reg 0x2c. LV T IntC  - 0x0 (Res 0xf)
        Reg 0x2d. Prg Hyb 1  - 0x0 (Res 0xff)
        Reg 0x2e. Prg Hyb 2  - 0x0 (Res 0xff)
        Reg 0x2f. Prg Hyb 3  - 0x0 (Res 0xff)
        Reg 0x30. Prg Hyb 4  - 0x0 (Res 0xff)
        Reg 0x31. Prg Hyb 5  - 0x0 (Res 0xff)
        Reg 0x32. Prg Hyb 6  - 0x0 (Res 0xff)
        Reg 0x33. Prg Hyb 7  - 0x0 (Res 0xff)
        Reg 0x34. Prg Hyb 8  - 0x0 (Res 0xff)
        Reg 0x35. Reserved   - 0x0 (Res 0x0)
        Reg 0x36. Reserved   - 0x0 (Res 0x0)
        Reg 0x37. Reserved   - 0x0 (Res 0x0)
        Reg 0x38. Reserved   - 0xf (Res 0x0)
        Reg 0x39. Reserved   - 0x0 (Res 0x0)
        Reg 0x3a. Reserved   - 0x0 (Res 0x0)
        Reg 0x3b. SQC        - 0x0 (Res 0x50)

DAA Device Init completed
DAA init successful
bosMsgQCreate: Created message queue PSTN_CTL_EVQ at address 0x10002
BOS: Enter TaskCreate PSTN
BOS: TaskCreate - spawn new task PSTN
bcmOsTaskCreate:
TASK NAME      = PSTN
TASK_PRIORITY  = 0
BOS: Exit TaskCreate
pstnCtlInit successful
vrgendptCreate: capabilities.endptType = 0
ENDPT: 'HAPI_RM_OPEN_VHD_EVT' (0x80c1), hdl:0x30, op1:0x50, op2:0x1

ENDPT: hdspVhdOpen Primary Connection VHD success. VHD (0x50) of type: 0x0
ENDPT: 'HAPI_RM_OPEN_VHD_EVT' (0x80c1), hdl:0x30, op1:0x51, op2:0x1

ENDPT: hdspVhdOpen Endpt VHD success. VHD (0x51) of type: 0x2
ENDPT: TX Gain set to 1000
ENDPT: RX Gain set to 1000
ENDPT: 'HAPI_ECAN_STATE_EVT' (0x3ac0), hdl:0x0, op1:0x7, op2:0x0
boardHalCasGetDriver: chan = 0
Default value for provItemId '41' did not exist
ENDPT: Initialization completed successfully for endpt 0

vrgendptCreate: capabilities.endptType = 0
ENDPT: 'HAPI_RM_OPEN_VHD_EVT' (0x80c1), hdl:0x30, op1:0x52, op2:0x1

ENDPT: hdspVhdOpen Primary Connection VHD success. VHD (0x52) of type: 0x0
ENDPT: 'HAPI_RM_OPEN_VHD_EVT' (0x80c1), hdl:0x30, op1:0x53, op2:0x1

ENDPT: hdspVhdOpen Endpt VHD success. VHD (0x53) of type: 0x2
ENDPT: TX Gain set to 1000
ENDPT: RX Gain set to 1000
ENDPT: 'HAPI_ECAN_STATE_EVT' (0x3ac0), hdl:0x1, op1:0x7, op2:0x0
boardHalCasGetDriver: chan = 1
Default value for provItemId '41' did not exist
ENDPT: Initialization completed successfully for endpt 1

vrgendptCreate: capabilities.endptType = 1
ENDPT: 'HAPI_RM_OPEN_VHD_EVT' (0x80c1), hdl:0x30, op1:0x54, op2:0x1

ENDPT: hdspVhdOpen PSTN VHD success. VHD (0x54) of type: 0x6
ENDPT: TX Gain set to 1000
ENDPT: RX Gain set to 1000
ENDPT: 'HAPI_ECAN_STATE_EVT' (0x3ac0), hdl:0x2, op1:0x7, op2:0x0
Default value for provItemId '41' did not exist
ENDPT: Initialization completed successfully for endpt 2

00:00:44 Waiting for interface any to go up before proceeding with voice app...
DAA: Going OnHook
DAA: Going OnHook
00:00:44 EVENT: endpt 2, event ONHOOK, cnxid -1
app: echo 0 > /var/telephone2_status
br0: port 2(eth0) entering disabled state
br0: port 3(eth1) entering disabled state
br0: port 1(usb0) entering disabled state

Puyo:

You can upload one of the brcm63xx images from the CFE. I would suggest you look in the forums for a list of these images. The one corresponding to 6348GW or 6348GW-10 would be the likely image.

However, you will not have support for either the 3341 DSP or the SiLabs SLICs for VoIP. You could run either Asterisk, Freeswitch, or OpenSER but not with the PSTN ports on your box.

marc.

Before you update your firmware, please do backup of current firmware. Ask your ISP for firmware, or try to copy from flash.

The discussion might have continued from here.