I'm trying to add support for the Tenda FL1201 that microcenter had on sale for 50 bucks. After reading a bunch of articles about adding a device, I'm hung up on the CFE boot loader as it is password protected(i have tried admin and password as well as a few other guesses). I'm under the understanding that you can flash a new one but I'm not quite sure how to go about it. I've soldered the some headers onto the serial port and can see the boot process but I can't get a prompt to do anything else because there is a password required for "system maintenance" any suggestions for a next step?
Thanks for any help you can give. I'm new at this but the best way to learn is to do, or so I'm told.
Here's the boot log.
ÿDecompressing...done
done
CFE version 6.37.14.9 (r409124) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Thu Jul 11 13:55:55 CST 2013 (ret0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.9 (r409124)
CPU type 0x19749: 500MHz
Tot mem: 65536 KBytes (4720)
Heap: 0x80E34950 - 0x80E98950 (409600)
Stack: 0x80E98950 - 0x80E9A950 (8192)
Text: 0x80E00000 - 0x8Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .... 4385244 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
000 (usable)
Built 1 zonelists. Total pages: 16256
Kernel command line: root=/dev/mtdblock3 console=ttyS0,115200 init=/sbin/2 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesiries: 256 (order: 8, 1024 bytes)
CPU: BCM5357 rev 2 at 500 MHz
Using 250.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 60080k/65536k available (3387k kernel code, 5400k reserved, 672k data, 220k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCPVFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.8)
io scheduler noop registered (default)
Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
loop: module loaded
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPPoL2TP kernel driver, V0.18.3
sflash: squash filesystem with lzma found at block 27
Creating 7 MTD partitions on "sflash":
0x00000000-0x00800000 : "All"
0x00000000-0x00040000 : "Bootloader"
0x00040000-0x00790000 : "KernelFS"
0x001b525c-0x00790000 : "rootfs"
0x00790000-0x007e0000 : "WebFS"
0x007e0000-0x007f0000 : "CFM"
0x007f0000-0x00800000 : "nvram"
nflash: found no supported devices
brcmnand: found no supported devices
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
create /proc/behavior/emailbcc SUCCESSFULLY.
netfilter smtp init successfully
Kernel:Init flow dev success.
IPv4 over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 220k freed
init started: BusyBox v1.13.0 (2013-04-28 11:06:03 CST
starting pid 610, tty '': '/etc/init.d/rcS
Algorithmics/MIPS FPU Emulator v1.5
starting pid 630, tty '': '/bin/cfm_check
pid = 630
cmds = echo 630 > /var/cfm_check
starting pid 632, tty '/dev/ttyS0': '/sbin/sulogin
Give root password for system maintenance
(or type Control-D for normal startup):
Yes:
****** WeLoveLinux ******
Welcome to ...
init server success.1..
ctf: no version for "struct_module" found: kernel tainted.
ctf: module license 'Proprietary' taints kernel.
et_module_init: passivemode set to 0x1
et_module_init: txworkq set to 0x0
et_module_init: et_txq_thresh set to 0x400
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.34 (r415984)
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/net/dpsta/dpsta.ko': unknown symbol in module, or unknown parameter
wl_module_init: passivemode set to 0x0
wl_module_init: txworkq set to 0x0
eth1: Broadcom BCM4347 802.11 Wireless Controller 6.37.14.34 (r415984 WLTEST)
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
wombo_reset set to gpio 23
ehci_hcd 0000:00:04.1: EHCI Host Controller
ehci_hcd 0000:00:04.1: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:04.1: EHCI Fastpath: New EHCI driver staehci_hcd 0000:00:04.1: irq 5, io mem 0x18004000
ehci_hcd 0000:00:04.1: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
Initializing USB Mass Storage driver...
usb 1-1: new high speed USB device using ehci_hcd and address 2
usb 1-1: configuration #1 chosen from 1 choice
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Symbol usb_register_driver is being used by a non-GPL module, which will not be allowed in the future
Please see the file DocuSymbol usb_deregister is being used by a non-GPL module, which will not be allowed in the future
Please see the file DocumentaEHCI Fastpath: bus 828af600
EHCI Fastpath: Hub 833e7800
ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the bypass device command i: EHCI Fastpath: Got the bypass callback command in EHCI c0461b84
EHCI Fastpath: usb_dev 833e7000
EHCI Fastpath: bus 828af600Fastpath: usb_dev 833e7000
EHCI Fastpath: bus 828af600
EHCI Fastpath: Hub 833e7800
ehci_hcd 0000:00:04.1: EHCI Fastpath: Got
ehci_hcd 0000:00:04.1: EHCI Fastpath: release native dummy qtd and alloc new one
ehci_hcd 0000:00:04.1: EHCI Fastpath: EP 831bcm_rpc_up: waiting to be connected
bcm_rpc_buf_recv_mgn_high: Recvd:3 Version: 0x6250e22
State: 3 Session:105
bcm_rpc_buf_recv_mgn_high: Reason: 0 Dongle Versioeth2: Broadcom BCMaa06 802.11 Wireless Controller 6.37.14.34 (r415984 WLTEST)
usbcore: registered new interface driver dbus_usbdev
eth0.1: Setting MAC address to c8 3a 35 06 68 a8.
VLAN (eth0.1): Underlying device (eth0) has same MAC, not checking promisceth0.2: Setting MAC address to c8 3a 35 06 69 a9.
device eth0 entered promiscuous mode
VLAN (eth0.2): Setting underlying device (eth0) to promiscious mode.
br0: starting userspace STP failed, staring kernel STP
eth0.1: dev_set_promiscuity(master, 1)
device eth0.1 entered promiscuous mode
br0: port 1(eth0.1) entering listening state
br0: port 1(eth0.1) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0.1) entering forwarding state
br10: starting userspace STP failed, staring kernel STP
device eth1 entered promiscuous mode
device eth2 entered promiscuous mode
IPv4 FIB: Using LC-trie version 0.408
Sat Jan 1 00:00:00 UTC 2000
sh: can't create /proc/conn_max: nonexistent directory
sh: can't create /proc/sys/net/ipv4/udp_mem: nonexistent directory
sh: can't create /proc/sys/net/ipv4/udp_rmem_min: nonexistent directory
sh: can't create /proc/sys/net/ipv4/udp_wmem_min: nonexistent directory
sh: tc: not found
sh: tc: not found
sh: tc: not found
sh: tc: not found
sh: tc: not found
No need to start gpio thread.
killall: dnrd-guest: no process killed
Yes:
****** WeLoveLinux ******
Welcome to ...
logserver.c check network 192.168.1.1 success
main.c check network 192.168.1.1 success
sntp.c check network 192.168.1.1 success
main.c check network 192.168.1.1 success
Stop Ftp Sev......
open /proc/tdproc/lanip failed
Init tQoS dev success.
mac_filter_init.....
ipmacbind_init.....
groupip_init.....
client_filter_init.....
start url_filter_init...............sh: can't create /proc/br0_ip: nonexistent directory
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
=====>MAX_WIFI_SSID_NUM[2]
WIFI Trace [wireless_reset] ...
Usage: bcmgpio set/get gpio_pin 1/0
comprLen[3362]
#####CRC[a7842c5d]
Erasing 64 Kbyte @ 0 -- 100 % complete.
commit crc [a7842c5d]
sh: ebtables: not found
WIFI INFO : [load_wlinfo_from_mib] wl interface : eth1
WIFI INFO : [load_wlinfo_from_mib] wl interface : wl0.1
WIFI INFO : Wl_ifname wl0.1 disabled,[load_wlinfo_from_mib] break off!WIFI INFO : [load_wlinfo_from_mib] wl interface : wl1.1
WIFI INFO : Wl_ifname wl1.1 disabled,[load_wlinfo_from_mib] break off!WIFI Trace [set_wireless_filter] ...
Restart [multiWAN]....
killall: multiWAN: no process killed
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
WIFI Trace [set_wireless_security] ...
WIFI INFO : WPA_PSK
WIFI Trace [set_wireless_workmode] ...
WIFI Trace [set_wirelasic] ...
WIFI Trace [set_wl5g_an] ...
WIFI INFO : 5G actual set channel to:40/80
WIFI Trace [set_wireless_basic_vif] wlctl: wl driver adapter not found
[multiWAN]main.c check network 192.168.1.1 success
wlctl: wl driver adapter not found
WIFI Trace [set_wireless_security] ..ds] ...
WIFI Trace [set_lan_ifname] ...
WIFI Trace [wireless_restart] ...
WIFI Trace [stop_wl_services] ...
Restart [dhcps]....
killall: dhcps: no process killed
WIFI Trace [wireless_stop] ...
device eth1 left promiscuous mode
br0: port 2(eth1) entering disabled state
Invalid instance identifier br0
Invalid instance identifier br0
Command failed
interface wl0.1 does not exist!
interface wl1.1 does not exist!
WIFI Trace [wireless_start] ...
Restart [miniupnpd]....
killall: miniupnpd: no process killed
WIFI INFO : wl_probe vlan1 failed.
vlan1: WLC_GET_VAR(cap): No such device
interface vlan1 does not exist!
ifconfig eth1 up
miniupnpd.c,865,ver=1.0,osname=Wireless Router,osver=1.0,osurl=http://192.168.1.1,manuft=Tenda,descri=Wireless Router
killall: dnrd: no process killed
eth1: cmd=231: Invalid argument
eth1: WLC_SET_VAR(bsscfg:radio_pwrsave_enable): Operation not permitted
eth1: WLC_SET_VAR(chanspec): Invalid argument
killall: dnrd-guest: no process killed
multwan init ok.
Notice: caching turned off
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supp supported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operatu_rr_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth1: WLC
eth1: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(rx_amsdu_in_ampdu): Operation not supR(bg_rate): Operation not supported
eth1: WLC_SET_VAR(a_rate): Operation not supported
eth1: WLC_SET_VAR(bg_mrdevice eth1 entrabr0: port 2(eth1) entering learning state
tion not supported
eth1: WLC_SET_VAR(bg_mrate): Operation not supported
eth1: brted
eth1: WLC_SET_VAR(avg_dma_xfer_rate): Operation not supported
ifconfig eth2 up
eth2: cmd=231: Invalid argument
eth2: WLC_SET_VAR(bsscfg:radio_pwrsave_enable): Operation not permitted
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supp supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operatperation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_u_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(bg_rate): Operation not supported
et Operation not supported
eth2: WLC_SET_VAR(bg_mrate): Operation not supported
eth2: WLC_SET_VAR(a_mrate): Operation not suppoR(avg_dma_xfer_rate): Operation not supported
eth2: WLC_SET_VAR(nar): Operation not supported
eth2: WLC_SET_VAR(taf): Operati):br0: port 3(eth2) entering learning state
Operation not supported
eth2: cmd=64: Operatiobr0: topology change detected, pron not supported
eth2: WLC_SET_VAR(pspretend_retry_limit): Operation not supported
eth2: WLC_SET_VAR(pspretend_threshold): Opeion not supported
eth2: WLC_SET_VAR(wmf_igmpq_filter): Operation not supported
WIFI INFO : GetValue lan.macaddr() failed.
[start_wl_services] nas
[start_wl_services] ses -f
[start_wl_services] ses_cl -f
[start_wl_services] wps_monitor
[start_wl_services] acsd
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
iptables: No chain/target/match by that name
acsd: scan in progress ...
iptables v1.4.0: Couldn't find target `Xrate'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables v1.4.0: Couldn't find target `Xuprate'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables v1.4.0: Couldn't find target `Xmark'
Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0x1001
[start_wl_services] comad
WIFI Trace [set_wl_pwr_percent] ...
wlctl: Unsupported
kdz===>lan_ip = 192.168.1.1
open /dev/gsbmac failed.
ip: RTNETLINK answers: No such file or directory
set port 3 to AUTO
WIFI Trace [wireless_restart] ...
WIFI Trace [stop_wl_services] ...
WIFI Trace [wireless_stop] ...
br0: port 2(eth1) entering disabled state
device eth1 left promiscuous mode
br0: port 2(eth1) entering disabled state
br0: port 3(eth2) entering disabled state
device eth2 left promiscuous mode
br0: port 3(eth2) entering disabled state
Invalid instance identifier br0
Invalid instance identifier br0
Command failed
Invalid instance identifier br0
interface wl0.1 does not exist!
interface wl1.1 does not exist!
WIFI Trace [wireless_start] ...
WIFI INFO : wl_probe vlan1 failed.
vlan1: WLC_GET_VAR(cap): No such device
interface vlan1 does not exist!
ifconfig eth1 up
eth1: cmd=231: Invalid argument
eth1: WLC_SET_VAR(bsscfg:radio_pwrsave_enable): Operation not permitted
eth1: WLC_SET_VAR(bsscfg:radio_pwrsave_level): Invalid: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supporteported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_retry_limit_tid): Operation eration not supported
eth1: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth1: WLC_SET_VAR(ampdu_rr_retry_ldevice eth1 entered promiscuous mode
_rr_retry_limit_br0: port 2(eth1) entering listening state
tid): Operation br0: port 2(eid): Operbr0: port 2(eth1) entering forwarding state
ation not supported
eth1: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operatiration not supported
eth1: WLC_SET_VAR(bg_rate): Operation not supported
eth1: WLC_SET_VAR(a_rate): Operation not supported
te): Operation not supported
eth1: WLC_SET_VAR(a_mrate): Operation not supported
eth1: WLC_SET_VAR(bg_mrate): Operation not sonfig eth2 up
eth2: cmd=231: Invalid argument
eth2: WLC_SET_VAR(bsscfg:radio_pwrsave_enable): Operation not permitted
eth2: WLC_SET_VAR(bsscfg:radio_pwrsave_level): Invalid not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Op): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_lirr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_Seth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation noorted
eth2: WLC_SET_VAR(a_rate): Operation not supported
eth2: WLC_SET_VAR(bg_rate): Operation not supported
eth2: WLC_SET_Vnot supported
eth2: WLC_SET_VAR(bg_mrate): Operation not supported
eth2: WLC_SET_VAR(a_mrate): Operation not supported
eth2: eth2 entered promiscuous mode
R(taf): Operatiobr0: port 3(eth2) entering listening state
n not supported
eth2: WLC_SET_VAR(ebos_enable):br0: port 3(eth2) eg
eth2: WLC_SET_Vbr0: port 3(eth2) entering forwarding state
AR(bsscfg:pspretend_retry_limit): Operation not supported
eth2th2: WLC_SET_VAR(wmf_ucast_igmp_query): Operation not supported
eth2: WLC_SET_VAR(wmf_ucast_upnp): Operation not supported
etervices] ...
[start_wl_services] eapd
[start_wl_services] nas
[start_wl_services] ses_cl -f
[start_wl_services] wps_monitor
[start_wl_services] acsd
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0x1001
[start_wl_services] comad
httpd listen ip = 192.168.1.1 port = 80
webs: Listening for HTTP requests at address 192.168.1.1