OpenWrt Forum Archive

Topic: D-Link DWR 921 support

The content of this topic has been archived between 8 Apr 2018 and 6 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

There are any plans to support this model?
Anyone have any experience using these devices?
Thank!

I've been able to get a shell on B1 hw version running a 2.01b3 firmware on it.

I've been trying to provide some of the raw hw info. If you need more tell me.

# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24K V4.12
BogoMIPS                : 239.61
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available

# cat /proc/meminfo
MemTotal:        29352 kB
MemFree:          7060 kB
Buffers:          2188 kB
Cached:           7704 kB
SwapCached:          0 kB
Active:           6424 kB
Inactive:         5636 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               0 kB
Writeback:           0 kB
AnonPages:        2220 kB
Mapped:           1484 kB
Slab:             7088 kB
SReclaimable:      820 kB
SUnreclaim:       6268 kB
PageTables:        372 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:     14676 kB
Committed_AS:     7124 kB
VmallocTotal:  1048404 kB
VmallocUsed:      2576 kB
VmallocChunk:  1045040 kB

# cat /proc/interrupts
           CPU0       
  3:     122483       Surfboard  eth2
  4:    1106766       Surfboard  ra0
  5:    3995705       Surfboard  timer
  6:          0       Surfboard  ralink_gpio
  7:          0       Surfboard  Ralink_DMA
12:        288       Surfboard  serial
17:          4       Surfboard  Ralink_ESW
18:     723545       Surfboard  ohci_hcd:usb1, ehci_hcd:usb2

ERR:          0
#

# cat /proc/partitions
major minor  #blocks  name

  31     0       8192 mtdblock0
  31     1         64 mtdblock1
  31     2       1280 mtdblock2
  31     3       5888 mtdblock3
  31     4        895 mtdblock4
  31     5         64 mtdblock5
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00800000 00001000 "Whole"
mtd1: 00010000 00001000 "Bootloader"
mtd2: 00140000 00001000 "Kernel"
mtd3: 005c0000 00001000 "RootFS"
mtd4: 000dfff0 00001000 "UI"
mtd5: 00010000 00001000 "Config"
#

# cat ioports
b0000500-b000051f : serial
b0000c00-b0000c1f : serial
# cat iomem
00000000-01ffffff : System RAM
  00000000-00261d1f : Kernel code
  00261d20-002f00bf : Kernel data
101c0000-101c0fff : rt3xxx-ehci
  101c0000-101c0fff : ehci_hcd
101c1000-101c1fff : rt3xxx-ohci
  101c1000-101c1fff : ohci_hcd
#

# cat /proc/bus/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  1, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=0000 ProdID=0000 Rev= 2.06
S:  Manufacturer=Linux 2.6.21 ehci_hcd
S:  Product=Ralink EHCI Host Controller
S:  SerialNumber=rt3xxx
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480 MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1435 ProdID=0918 Rev= 2.32
S:  Manufacturer=Android
S:  Product=Android
S:  SerialNumber=0123456789ABCDEF
C:* #Ifs= 7 Cfg#= 1 Atr=80 MxPwr=500mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=(none)
E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=84(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=86(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=88(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 5 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=8a(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 6 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none)
E:  Ad=8b(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=07(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 1
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=0000 ProdID=0000 Rev= 2.06
S:  Manufacturer=Linux 2.6.21 ohci_hcd
S:  Product=RT3xxx OHCI Controller
S:  SerialNumber=rt3xxx-ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms
#
# dmesg
Linux version 2.6.21 (ahong@dot7) (gcc version 3.4.2) #1 Wed Sep 3 11:20:34 CST 2014

The CPU feqenuce set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
On node 0 totalpages: 8192
  DMA zone: 64 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 8128 pages, LIFO batch:0
  Normal zone: 0 pages used for memmap
Built 1 zonelists.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 40808000, status = 11000000
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 0015f900(1440000)
CPU frequency 360.00 MHz
Using 180.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29228k/32768k available (2439k kernel code, 3540k reserved, 568k data, 124k init, 0k highmem)
Calibrating delay loop... 239.61 BogoMIPS (lpj=479232)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
arch_mem_init check 0xb000001c: 00000000

------------------GPIO--------------------------
GPIOMODE:2df
SLIC INTR ==> gpio 1
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=2
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.7 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
net_speed proc file Create
MAC_ADRH -- : 0x00000000
MAC_ADRL -- : 0x00000000

eth2 mii.o query= phy_id:0, address:1 retval:7869
Ralink APSoC Ethernet Driver Initilization. v2.0  256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x0000000c
MAC_ADRL -- : 0x432880ce
PROC INIT OK!
=== 0xB0100004 = 00000000
Insmod eth_ping skb_diy module.
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.1
block2mtd: version $Revision: 1.1.1.1 $
deice id : c2 20 17 c2 20 (2017c220)
MX25L6405D(c2 2017c220) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00001000 (4K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x00000000-0x00800000 : "Whole"
0x00000000-0x00010000 : "Bootloader"
0x00010000-0x00150000 : "Kernel"
0x00150000-0x00710000 : "RootFS"
0x00710010-0x007f0000 : "UI"
mtd: partition "UI" doesn't start on an erase block boundary -- force read-only
0x007f0000-0x00800000 : "Config"
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
Register conntrack protocol helper for ESP...
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ipgre init: can't add protocol
ip_conntrack version 2.4 (256 buckets, 2048 max) - 184 bytes per conntrack
nf_sock overlap: 0-0/80-81 v 0-0/80-81
Unable to register netfilter socket option
Init IP_nat_proto_esp register.
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 124k freed
Algorithmics/MIPS FPU Emulator v1.5

phy_tx_ring = 0x01c68000, tx_ring = 0xa1c68000

phy_rx_ring0 = 0x01c69000, rx_ring0 = 0xa1c69000
phy 4, reg 0, val 0x3900
phy 0, reg 0, val 0x3900
phy 1, reg 0, val 0x3900
phy 2, reg 0, val 0x3900
phy 3, reg 0, val 0x3900
phy 4, reg 0, val 0x3300
phy 4, reg 0, val 0x3100
phy 0, reg 0, val 0x3100
phy 1, reg 0, val 0x3100
phy 2, reg 0, val 0x3100
phy 3, reg 0, val 0x3100
eth2.1: Setting MAC address to  78 54 2e 9f 4e ae.
device eth2 entered promiscuous mode
VLAN (eth2.1):  Setting underlying device (eth2) to promiscious mode.
eth2.1: add 33:33:00:00:00:01 mcast address to master interface
eth2.1: add 01:00:5e:00:00:01 mcast address to master interface
eth2.1: add 33:33:ff:9f:4e:ae mcast address to master interface

eth2 mii.o query= phy_id:1, address:4 retval:5e1

eth2 mii.o query= phy_id:1, address:0 retval:3100

eth2 mii.o query= phy_id:1, address:5 retval:0
eth2.1: dev_set_promiscuity(master, 1)
device eth2.1 entered promiscuous mode
eth2.2: Setting MAC address to  78 54 2e 9f 4e ad.
eth2.2: add 33:33:00:00:00:01 mcast address to master interface
eth2.2: add 01:00:5e:00:00:01 mcast address to master interface
eth2.2: add 33:33:ff:9f:4e:ad mcast address to master interface
br0: port 1(eth2.1) entering learning state
br0: topology change detected, propagating
br0: port 1(eth2.1) entering forwarding state
rt2860v2_ap: module license 'unspecified' taints kernel.
Length of MAC:6
mac:78:54:2e:9f:4e:ae:
----


=== pAd = c0077000, size = 620552 ===

RTMPAllocAdapterBlock, Status=0
RX DESC a19c5000  size = 2048
RTMPAllocTxRxRingMemory, Status=0
1. Phy Mode = 6
2. Phy Mode = 6
3. Phy Mode = 6
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff 00 00 00 01
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
Main bssid = 78:54:2e:9f:4e:ae
== rt28xx_init, Status=0
0x1300 = 00064380
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
eth2: no IPv6 routers present
br0: topology change detected, propagating
br0: port 2(ra0) entering forwarding state
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

Rcv Wcid(2) AddBAReq
Start Seq = 00000001
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

eth2.1: no IPv6 routers present
br0: no IPv6 routers present
Rcv Wcid(1) AddBAReq
Start Seq = 00000019
eth2.2: no IPv6 routers present
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

Rcv Wcid(3) AddBAReq
Start Seq = 00000032
ra0: no IPv6 routers present
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 1
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 2
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Rcv Wcid(5) AddBAReq
Start Seq = 00000000
usb 2-1: new high speed USB device using rt3xxx-ehci and address 2
usb 2-1: configuration #1 chosen from 1 choice
usbcore: registered new interface driver cdc_wdm
usbcore: registered new interface driver qmi_wwan
usbcore: registered new interface driver usbserial
drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
drivers/usb/serial/usb-serial.c: USB Serial Driver core

Hello

What is the procedure to connect shell ?

this is possible on the higher versions ( 2.02b9 )

thanks

Hi

Sorry to bring up an old topic, but this is the only one I could find about the D-Link DWR-921. Has anyone managed to get OpenWRT on this device??

I have a DWR 921 rev C. I'm not able to get telnet access with the password "amittima" !!

Any idea to get access on the router ?

I have explore to solution without success, modifying firmware but I'm not capable to rebuild firmware after extract. And build a custom firmware with source, but I was not able to correct all the compilation problems that presented themselves.

fufuu wrote:

I have a DWR 921 rev C. I'm not able to get telnet access with the password "amittima" !!

Confirmed. rev C password isn't amittima :-(

Good time of day, comrades.
I'm trying to port openwrt on DWR-921 hw C1 (and WW_3.01 fw).
Some system information:

bootlog

CTG561DL_0T3 Jboot B923
JRecovery Version R1.2 2014/11/07 14:39
spi device id: ef 40 18 0 0 (40180000)
SPI FLASH: W25Q128FV 16M
.
MAC 00:50:18:00:0F:FE
...................
Starting kernel @80000000...

LINUX started...

 THIS IS ASIC
Linux version 2.6.36 (jay@RD1) (gcc version 4.3.5 (Buildroot 2011.05) ) #6 Wed Mar 4 14:32:25 CST 2015
CMD_LINE:console=ttyS1,57600n8 root=/dev/mtdblock3

 The CPU feqenuce set to 580 MHz
 PCIE: bypass PCIe DLL.
 PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
 disable all power about PCIe
 PCIE: PLL power down for MT7620N
CPU revision is: 00019650 (MIPS 24Kc)
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0005ffeb
Readback ErrCtl register=0005ffeb
Memory: 61164k/65536k available (2837k kernel code, 4372k reserved, 683k data, 168k init, 0k highmem)
Hierarchical RCU implementation.
        RCU debugfs-based tracing is enabled.
        Verbose stalled-CPUs detection is disabled.
NR_IRQS:128
Console: colour dummy device 80x25
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 119
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=3
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
brd: module loaded
deice id : ef 40 18 0 0 (40180000)
W25Q128BV(ef 40180000) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 4096
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "Whole"
0x000000000000-0x000000010000 : "Bootloader"
0x000000010000-0x000000150000 : "Kernel"
0x000000180000-0x000000f10000 : "RootFS"
0x000000f10010-0x000000ff0000 : "UI"
mtd: partition "UI" doesn't start on an erase block boundary -- force read-only
0x000000ff0000-0x000001000000 : "Config"
rdm_major = 253
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880e1
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, Tx Ring = 256, Rx Ring = 256
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288064
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (955 buckets, 3820 max)
xt_time: kernel timezone is -0000
IPv4 over IPv4 tunneling driver
GRE over IPv4 demultiplexor driver
gre: can't add protocol
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 168k freed
Inter-|   Receive    Raeth v3.0 (  NAPI
  ,SkbRecycle  )

phy_tx_ring = 0x03faf000, tx_ring = 0xa3faf000

phy_rx_ring0 = 0x03fb0000, rx_ring0 = 0xa3fb0000
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288064
  CDMA_CSG_CFG = 81000000
  GDMA1_FWD_CFG = 20710000
                             |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
    lo:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
  eth2:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
 tunl0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
  gre0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
  sit0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
 flash_open: flash_fd=3
Mount D Section.
mount: /dev/mtdblock4 is write-protected, mounting read-only
addrconf_dad_completed 7
 flash_open: flash_fd=10
switch register base addr to system register 0xb0000000
write offset 0x60, value 0x80dd
Tue Jan  1 00:00:00 UTC 2013
timezone:0
dsttime:0
switch reg write offset=2004, value=ff0003
switch reg write offset=2104, value=ff0003
switch reg write offset=2204, value=ff0003
switch reg write offset=2304, value=ff0003
switch reg write offset=2404, value=ff0003
switch reg write offset=2504, value=ff0003
switch reg write offset=2010, value=810000c0
switch reg write offset=2110, value=810000c0
switch reg write offset=2210, value=810000c0
switch reg write offset=2310, value=810000c0
switch reg write offset=2410, value=810000c0
switch reg write offset=2510, value=810000c0
switch reg write offset=2610, value=81000000
switch reg write offset=2710, value=81000000
switch reg write offset=2604, value=20ff0003
switch reg write offset=2704, value=20ff0003
switch reg write offset=2014, value=10001
switch reg write offset=2114, value=10001
switch reg write offset=2214, value=10001
switch reg write offset=2314, value=10001
switch reg write offset=2414, value=10002
switch reg write offset=2514, value=10001
sh: ebtables: not found
sh: ebtables: not found
sh: ebtables: not found
sh: ebtables: not found
vconfig: ioctl error for add: File exists
Set port eth2.1.0
vconfig: ioctl error for add: File exists
device eth2 entered promiscuous mode
set hello timer failed: Invalid argument
device eth2.1 entered promiscuous mode
sh: ebtables: not found
br0: port 1(eth2.1) entering forwarding state
br0: port 1(eth2.1) entering forwarding state
Set port eth2.2.0
vconfig: ioctl error for add: File exists
, Enable: 1
phy 0, reg 0, val 0x800
Set: phy[0].reg[0] = 0800
phy 1, reg 0, val 0x800
Set: phy[1].reg[0] = 0800
phy 2, reg 0, val 0x800
Set: phy[2].reg[0] = 0800
phy 3, reg 0, val 0x800
Set: phy[3].reg[0] = 0800
phy 4, reg 0, val 0x800
Set: phy[4].reg[0] = 0800
phy 5, reg 0, val 0x800
Set: phy[5].reg[0] = 0800
sh: ebtables: not found
sh: ebtables: not found
sh: ebtables: not found
 framtd_erase: addr:ff0000 len:0
lash_open: flash_fd=10
ramtd_write: to:ff0000 len:10
ramtd_write: to:ff0010 len:624
ramtd_write: to:ff0000 len:1
phy 0, reg 0, val 0x3300
Set: phy[0].reg[0] = 3300
phy 1, reg 0, val 0x3300
Set: phy[1].reg[0] = 3300
addrconf_dad_completed 7
addrconf_dad_completed 7
phy 2, reg 0, val 0x3300
Set: phy[2].reg[0] = 3300
phy 3, reg 0, val 0x3300
Set: phy[3].reg[0] = 3300
addrconf_dad_completed 7
phy 4, reg 0, val 0x3300
Set: phy[4].reg[0] = 3300
phy 5, reg 0, val 0x3300
Set: phy[5].reg[0] = 3300
init sys
init vlan
init lan
init stp
init wan
init ondemand
init multiwan
init multi_ondemand
init load_balance
init routing
init nat
nat initial
init dhcpsrv
==== NAT START (WAN:ALL Func:ALL) ====
cat: /var/nat/nat.wan: No such file or directory
addrconf_dad_completed 7
server_config.pool_check = 1

server_config.pool_check = 1

 start = 192.168.0.50, end = 192.168.0.199, lan_ip = 192.168.0.1, interface=br0, ifindex=0

 start = 192.168.0.50, end = 192.168.0.199, lan_ip = 192.168.0.1, interface=br0, ifindex=0

0

Unable to open /var/run/udhcpd.leases for reading
udhcpd (v0.9.9-pre) started
Unable to open /var/run/udhcpd.leases for reading
init dnsrelay
init spap
init ddns
init snmp
init route_protocol
rm: cannot remove '/etc/ripd.conf': No such file or directory
cat: /var/run/ripd.pid: No such file or directory
BusyBox v1.3.2 (2015-01-26 17:23:24 CST) multi-call binary

Usage: kill [-l] [-signal] process-id [process-id ...]

cat: /var/run/zebra.pid: No such file or directory
BusyBox v1.3.2 (2015-01-26 17:23:24 CST) multi-call binary

Usage: kill [-l] [-signal] process-id [process-id ...]

init half_bridge
init time
timezone:-180
dsttime:0
init rbydom
init rbyip
init qos
init keepalive
init user
/var/nat/nat-draft.uyg: /var/nat/nat-draft.uyg: 131: cannot create /proc/sys/net/ipv4/route/secret_interval: Directory nonexistent
init ftp_alg
init rtsp_alg
init schedule
init mupnpd
init watchdog
init reboot
init wireless_mode
SINGLE DMZ start
gre_post
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
modprobe: module ip6_tables not found
modprobe: failed to load module ip6_tables
ip6tables v1.4.10: can't initialize ip6tables table `filter': iptables who? (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
server_config.pool_check = 1

server_config.pool_check = 1

 start = 192.168.0.50, end = 192.168.0.199, lan_ip = 192.168.0.1, interface=br0, ifindex=0

 start = 192.168.0.50, end = 192.168.0.199, lan_ip = 192.168.0.1, interface=br0, ifindex=0

0

udhcpd (v0.9.9-pre) started
init wlanap
init wps_status
init wps_btn
init wpa
init pwd
init ipv6
init v6filter
modprobe: module ip6_tables not found
modprobe: failed to load module ip6_tables
modprobe: module ip6table_filter not found
modprobe: failed to load module ip6table_filter
modprobe: module ip6table_mangle not found
modprobe: failed to load module ip6table_mangle
modprobe: module ip6t_rt not found
modprobe: failed to load module ip6t_rt
modprobe: module ip6t_REJECT not found
modprobe: failed to load module ip6t_REJECT
init ddnsv6
init tr069
init failover
init 3g_status
init 3g_setting
init wan_alias
init sip_alg
init igmp
init reset_btn
init ate
killall: ated: no process killed
init wan_led
init recent
init iom
/usr/bin/ataskset: /usr/bin/ataskset: 6: taskset: not found
 flash_open: flash_fd=4
 flash_open: flash_fd=4
# rt2860v2_ap: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
Ralink APSoC Hardware Watchdog Timer
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
Length of MAC:6
 mac:1c:5f:2b:c9:9c:8a:
----


=== pAd = c0dd6000, size = 1221088 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
AP Driver version-2.7.1.6
RX DESC a35f1000  size = 2048
RTMP_TimerListAdd: add timer obj c0e80000!
RTMP_TimerListAdd: add timer obj c0e39730!
RTMP_TimerListAdd: add timer obj c0e39704!
RTMP_TimerListAdd: add timer obj c0e396d8!
RTMP_TimerListAdd: add timer obj c0dde2dc!
RTMP_TimerListAdd: add timer obj c0ddded0!
RTMP_TimerListAdd: add timer obj c0dde2ac!
RTMP_TimerListAdd: add timer obj c0dde654!
RTMP_TimerListAdd: add timer obj c0dde3a4!
RTMP_TimerListAdd: add timer obj c0dde3d4!
RTMP_TimerListAdd: add timer obj c0dde594!
RTMP_TimerListAdd: add timer obj c0dde5c4!
RTMP_TimerListAdd: add timer obj c0de1784!
RTMP_TimerListAdd: add timer obj c0de1378!
RTMP_TimerListAdd: add timer obj c0de1754!
RTMP_TimerListAdd: add timer obj c0de1afc!
RTMP_TimerListAdd: add timer obj c0de184c!
RTMP_TimerListAdd: add timer obj c0de187c!
RTMP_TimerListAdd: add timer obj c0de1a3c!
RTMP_TimerListAdd: add timer obj c0de1a6c!
RTMP_TimerListAdd: add timer obj c0de4c2c!
RTMP_TimerListAdd: add timer obj c0de4820!
RTMP_TimerListAdd: add timer obj c0de4bfc!
RTMP_TimerListAdd: add timer obj c0de4fa4!
RTMP_TimerListAdd: add timer obj c0de4cf4!
RTMP_TimerListAdd: add timer obj c0de4d24!
RTMP_TimerListAdd: add timer obj c0de4ee4!
RTMP_TimerListAdd: add timer obj c0de4f14!
RTMP_TimerListAdd: add timer obj c0de80d4!
RTMP_TimerListAdd: add timer obj c0de7cc8!
RTMP_TimerListAdd: add timer obj c0de80a4!
RTMP_TimerListAdd: add timer obj c0de844c!
RTMP_TimerListAdd: add timer obj c0de819c!
RTMP_TimerListAdd: add timer obj c0de81cc!
RTMP_TimerListAdd: add timer obj c0de838c!
RTMP_TimerListAdd: add timer obj c0de83bc!
RTMP_TimerListAdd: add timer obj c0deb57c!
RTMP_TimerListAdd: add timer obj c0deb170!
RTMP_TimerListAdd: add timer obj c0deb54c!
RTMP_TimerListAdd: add timer obj c0deb8f4!
RTMP_TimerListAdd: add timer obj c0deb644!
RTMP_TimerListAdd: add timer obj c0deb674!
RTMP_TimerListAdd: add timer obj c0deb834!
RTMP_TimerListAdd: add timer obj c0deb864!
RTMP_TimerListAdd: add timer obj c0deea24!
RTMP_TimerListAdd: add timer obj c0dee618!
RTMP_TimerListAdd: add timer obj c0dee9f4!
RTMP_TimerListAdd: add timer obj c0deed9c!
RTMP_TimerListAdd: add timer obj c0deeaec!
RTMP_TimerListAdd: add timer obj c0deeb1c!
RTMP_TimerListAdd: add timer obj c0deecdc!
RTMP_TimerListAdd: add timer obj c0deed0c!
RTMP_TimerListAdd: add timer obj c0df1ecc!
RTMP_TimerListAdd: add timer obj c0df1ac0!
RTMP_TimerListAdd: add timer obj c0df1e9c!
RTMP_TimerListAdd: add timer obj c0df2244!
RTMP_TimerListAdd: add timer obj c0df1f94!
RTMP_TimerListAdd: add timer obj c0df1fc4!
RTMP_TimerListAdd: add timer obj c0df2184!
RTMP_TimerListAdd: add timer obj c0df21b4!
RTMP_TimerListAdd: add timer obj c0df5374!
RTMP_TimerListAdd: add timer obj c0df4f68!
RTMP_TimerListAdd: add timer obj c0df5344!
RTMP_TimerListAdd: add timer obj c0df56ec!
RTMP_TimerListAdd: add timer obj c0df543c!
RTMP_TimerListAdd: add timer obj c0df546c!
RTMP_TimerListAdd: add timer obj c0df562c!
RTMP_TimerListAdd: add timer obj c0df565c!
RTMP_TimerListAdd: add timer obj c0e3bb34!
RTMP_TimerListAdd: add timer obj c0e3b728!
RTMP_TimerListAdd: add timer obj c0e3bb04!
RTMP_TimerListAdd: add timer obj c0e3beac!
RTMP_TimerListAdd: add timer obj c0e3bbfc!
RTMP_TimerListAdd: add timer obj c0e3bc2c!
RTMP_TimerListAdd: add timer obj c0e3bb64!
RTMP_TimerListAdd: add timer obj c0e3bb94!
RTMP_TimerListAdd: add timer obj c0e3bbc4!
RTMP_TimerListAdd: add timer obj c0e5696c!
RTMP_TimerListAdd: add timer obj c0e56a88!
RTMP_TimerListAdd: add timer obj c0e56998!
RTMP_TimerListAdd: add timer obj c0e3c254!
RTMP_TimerListAdd: add timer obj c0ddb56c!
RTMP_TimerListAdd: add timer obj c0ddea14!
RTMP_TimerListAdd: add timer obj c0de1ebc!
RTMP_TimerListAdd: add timer obj c0de5364!
RTMP_TimerListAdd: add timer obj c0de880c!
RTMP_TimerListAdd: add timer obj c0debcb4!
RTMP_TimerListAdd: add timer obj c0def15c!
RTMP_TimerListAdd: add timer obj c0df2604!
RTMP_TimerListAdd: add timer obj c0e3bf68!
RTMP_TimerListAdd: add timer obj c0e3c2bc!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
2a:55:44:e4:05:1a:cb:eb:01:93:83:88:b2:c3:4f:8f:
50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97:

1. Phy Mode = 9
2. Phy Mode = 9
E2PROM: D0 target power=0xff20
E2PROM: 40 MW Power Delta= 0
3. Phy Mode = 9
RTMP_TimerListAdd: add timer obj c0ddb12c!
AntCfgInit: primary/secondary ant 0/1
Initialize RF Central Registers for E2 !!!
Initialize RF Central Registers for E3 !!!
Initialize RF Channel Registers for E2 !!!
Initialize RF Channel Registers for E3 !!!
Initialize RF DCCal Registers for E2 !!!
Initialize RF DCCal Registers for E3 !!!
D1 = 0, D2 = 1, CalCode = 2 !!!
RT6352_Temperature_Init : BBPR49 = 0x0
RT6352_Temperature_Init : TemperatureRef25C = 0xfffffff6
Current Temperature from BBP_R49=0xfffffff1
 TX BW Filter Calibration !!!
 RX BW Filter Calibration !!!
LOFT Calibration Done!
IQCalibration Start!
IQCalibration Done! CH = 0, (gain= d, phase= 1)
IQCalibration Start!
IQCalibration Done! CH = 1, (gain= d, phase=3d)
TX IQ Calibration Done!
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
RTMP_TimerListAdd: add timer obj c0e3c864!
Main bssid = 1c:5f:2b:c9:9c:8a
<==== rt28xx_init, Status=0
0x1300 = 00064380
device ra0 entered promiscuous mode
br0: port 2(ra0) entering forwarding state
br0: port 2(ra0) entering forwarding state
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
qmi_wwan 1-1:1.3: usbnet0: register 'qmi_wwan' at usb-rt3xxx-1, WWAN/QMI device/v3.9r3e, 76:21:be:a2:61:b0
qmi_wwan 1-1:1.4: usbnet1: register 'qmi_wwan' at usb-rt3xxx-1, WWAN/QMI device/v3.9r3e, 56:43:28:f0:3b:49
qmi_wwan 1-1:1.5: usbnet2: register 'qmi_wwan' at usb-rt3xxx-1, WWAN/QMI device/v3.9r3e, 3e:97:00:ed:6d:a0
usbcore: registered new interface driver qmi_wwan
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
USB Serial support registered for GSM modem (1-port)
option 1-1:1.0: GSM modem (1-port) converter detected
usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
option 1-1:1.2: GSM modem (1-port) converter detected
usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
usbcore: registered new interface driver option
option: v0.7.2:USB Driver for GSM modems
Algorithmics/MIPS FPU Emulator v1.5
#

cpuinfo

# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24Kc V5.0
BogoMIPS                : 386.04
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0ff8, 0x0e98, 0x0658]
ASEs implemented        : mips16 dsp
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

meminfo

# cat /proc/meminfo
MemTotal:          61332 kB
MemFree:           27036 kB
Buffers:            4104 kB
Cached:            15496 kB
SwapCached:            0 kB
Active:             6652 kB
Inactive:          15404 kB
Active(anon):       2944 kB
Inactive(anon):     2904 kB
Active(file):       3708 kB
Inactive(file):    12500 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2456 kB
Mapped:             3040 kB
Shmem:              3392 kB
Slab:               8092 kB
SReclaimable:        812 kB
SUnreclaim:         7280 kB
KernelStack:         528 kB
PageTables:          392 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       30664 kB
Committed_AS:      12224 kB
VmallocTotal:    1048372 kB
VmallocUsed:        3460 kB
VmallocChunk:    1031132 kB

interrupts

# cat /proc/interrupts
           CPU0
  3:         32          Ralink  eth2
  4:       6686          Ralink  ra0
  5:      92054          Ralink  timer
  6:          0          Ralink  ralink_gpio
  7:          0          Ralink  Ralink_DMA
 12:      13453          Ralink  serial
 17:          0          Ralink  Ralink_ESW
 18:        336          Ralink  ehci_hcd:usb1, ohci_hcd:usb2

ERR:          0

partitions

# cat /proc/partitions
major minor  #blocks  name

  31        0      16384 mtdblock0
  31        1         64 mtdblock1
  31        2       1280 mtdblock2
  31        3      13888 mtdblock3
  31        4        895 mtdblock4
  31        5         64 mtdblock5

mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 01000000 00001000 "Whole"
mtd1: 00010000 00001000 "Bootloader"
mtd2: 00140000 00001000 "Kernel"
mtd3: 00d90000 00001000 "RootFS"
mtd4: 000dfff0 00001000 "UI"
mtd5: 00010000 00001000 "Config"

iomem

# cat /proc/iomem
00000000-03ffffff : System RAM
  00000000-002c5567 : Kernel code
  002c5568-0037055f : Kernel data
101c0000-101c0fff : rt3xxx-ehci
  101c0000-101c0fff : ehci_hcd
101c1000-101c1fff : rt3xxx-ohci
  101c1000-101c1fff : ohci_hcd

devices

# cat /proc/bus/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 1
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0001 Rev= 2.06
S:  Manufacturer=Linux 2.6.36 ohci_hcd
S:  Product=RT3xxx OHCI Controller
S:  SerialNumber=rt3xxx-ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  4, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 2.06
S:  Manufacturer=Linux 2.6.36 ehci_hcd
S:  Product=Ralink EHCI Host Controller
S:  SerialNumber=rt3xxx
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480 MxCh= 0
D:  Ver= 2.01 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1435 ProdID=d181 Rev= 2.28
S:  Manufacturer=Android
S:  Product=Android
S:  SerialNumber=0123456789ABCDEF
C:* #Ifs= 7 Cfg#= 1 Atr=80 MxPwr=500mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=(none)
E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=84(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=86(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=88(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 5 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=8a(I) Atr=03(Int.) MxPS=  64 Ivl=32ms
E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 6 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none)
E:  Ad=8b(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=07(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

Related information about jboot problem:
- D-LINK DIR-510L openwrt forum thread (ttps://forum.openwrt.org/viewtopic.php?id=58921) - flashing with jboot via web or tftp, stop booting with reset button, basic info;
- D-Link DWR-512 B openwrt page (ttps://wiki.openwrt.org/inbox/d-link/d-link_dwr-512_b) with enough information about problem and workaround;

fidodido wrote:

The DWR 921 appears the same HW of the DWR 512 but with 4G modem.
I'm currently working on the DWR 512.
Currently I'm able to complete the boot and have the device operative.
I need to enable the 3G modem and crack the dlink header to generate a factory image.

You can try the same patch and help me for the next steps (in particular cracking the header).

ttp://lists.infradead.org/pipermail/lede-dev/2016-October/003359.html
ttps://wiki.openwrt.org/inbox/d-link/d-link_dwr-512_b

- thread on Polish forum about DWR-921 (ttp://openrouter.info/forum/viewtopic.php?f=16&t=2683&start=60) - binboy usage for signing firmware

kordirko wrote:

I teraz:
ze skompilowanych binarek wziąłem pliki:
- openwrt-ramips-rt305x-vmlinux.bin --> zmieniamy nazwę na: zImage
- openwrt-ramips-rt305x-root.squashfs --> zmieniamy nazwę na: squashfs.o
Wykonujemy kolejno komendy:

# lzma zImage
# ./binboy @linux
# ./binboy @rootfs
# ./binboy @all

Powinien powstać plik firmware.bin, który wgrywamy do routera.

Now I brick router with binboy-prepared firmware (jboot work, but hangs before kernel loading), so be careful

Let us know how you get on with it,  I've a spare router for testing if you need anything done..

It seems that the router has no JTAG. Fail.
Wikidevi says that MT7620 "JTAG is muxed with GPIO". MT7620 datasheet says

10/100 PHY Port #1 activity LED, JTAG_TDI
10/100 PHY Port #2 activity LED, JTAG_TMS
10/100 PHY Port #3 activity LED, JTAG_CLK
10/100 PHY Port #4 activity LED, JTAG_TRST_N

but rev. C1 does not have separate LEDs

Any ideas?

Minad,
you cannot use the openwrt-ramips-rt305x-vmlinux.bin, openwrt-ramips-rt305x-root.squashfs image. These are "generic" images for the RT305x like targets.
You shall prepare a proper device tree file and image build scripts for the DWR 921.
Try to study the code for some similar board, you can find it in:

target/linux/ramips/image/mt7620.mk
target/linux/ramips/dts/*
target/linux/ramips/dts/mt7620a.dtsi
target/linux/ramips/dts/mt7620n.dtsi

then add proper definitions in:
target/linux/ramips/base-files/etc/diag.sh
target/linux/ramips/base-files/lib/ramips.sh
target/linux/ramips/base-files/lib/upgrade/platform.sh

at the end you can compile and generate the target image.

In any case using the oem bootloader (if it is similar to the dwr 512) you also need to keep separate the kernel and the rootfs and this is not "standard" in lede.

Bye.

fidodido, of course I used special image, not generic. Asus RT-N14U has same hardware as DWR-921_C1, so I change partition mapping in rt-n14u.dts and rebuild the image. But something went wrong.
Can you explain how to prepare openwrt image for using with binboy? IMHO if I set read-write mode of bootloader partition in .dts, I can flash uboot.

Hi Minad,
I can support you on lede. Unfortunately I do not logged all the step and we need to proceed step by step.
In principle you need to compile the image starting from the source to get the separate kernel and rootfs image. Then you need to manually allign the partition offset.
In order to record the process I need to ask you to move this discussion on the lede mailing list (https://lists.infradead.org/mailman/listinfo/lede-dev).
I will suppor you there.

Bye.

(Last edited by fidodido on 24 Feb 2017, 18:13)

Minad,
thanks for the wiki page. Very interesting for me the exposed PCM interface.
Do you know if it is exposed also the spi?
IMHO is better to have only one generic dwr-921 page covering all the hw revision.
I prepared a branch in my Github to support the dwr-921:
https://github.com/fid0did0/source/tree/dwr-921

If someone is interested can:

  • clone the repository

  • configure the build with make menuconfig

  • select the MediaTek Ralink MIPS target

  • select the MT7620 subtarget

  • select the D-Link DWR-921 target profile

  • save the configuration

  • build the image with make

At the end you will find the preliminary kernel-image here:
bin/targets/ramips/mt7620/lede-ramips-mt7620-dwr-921-squashfs-factory.bin

and the rootfs here:
build_dir/target-mipsel_24kc_musl/linux-ramips_mt7620/root.squashfs

copy these files in one folder toghether with the binboy and:

  • rename the kernel-image in zImage.lzma

  • rename the rootfs in squashfs.o

  • run binboy @linux

  • run binboy @rootfs

  • run binboy @all

At this point please report here the binboy output to see how to proceed.
Bye.

I have cloned your rep and there is no Dlink DWR-921 under target profile in menuconfig. The only available Dlinks are DCH-M225 and DIR-810L. There is DWR-921.dts config file missing in ../target/linux/ramips/dts. Error in configs?

(Last edited by Winylek on 9 Apr 2017, 09:59)

Are you sure you are in the dwr-921 branch?
Please check with "git branch".
In case use "git checkout dwr-921" to switch the proper branch.

Bye.

Please be aware that the repository I created shall be valid for the HW rev C only (the one using the MT7620N).

Bye.

Hi fidodido,

Thanks for sharing this solution.

I have a DWR922B C1 from Claro provider thats have the same hardware from DWR921, except the ethernet ports ( 922 have only 1) and telephone port.

I've downloaded the code and compiled with success, tomorrow I'll make the binboy steps and program the router. I make a flash dump from original fw using the mtd debug read and extracted from the router using web access.

I'll post the results here.

(Last edited by comdek on 19 Jul 2017, 05:10)

Hi comdek,
At the end I was able to buy on ebay a dwr 921 C1.
So with a little of patience I will work on it.
In any case I'm looking forward to see your test results.

Stay tuned.
Bye.

The DWR-922 is a great router, but with the provider's firmware (Claro) is very limited. It is already unlocked from the factory and I use it on another provider (Vivo), however the IPv6 does not work and I needed it.
My provider gives a IPv6 address, I already tested it with Huawei E5172 and works, but with DWR-922 the IPv6 gets all messed up.