OpenWrt Forum Archive

Topic: Another Siemens SE505 upgrade

The content of this topic has been archived between 29 Mar 2018 and 2 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

now iam connected
what to do next?
installing the  new funnel cfe ? or first take out the ram and put the new 2x 16 mb in?

what is about the r317 r314 ...... soldering the points together?



CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fri May 14 09:44:24 CST 2004 (denny@dnylinux)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.60.9.0
CPU type 0x29007: 200MHz
Total memory: 0x800000 bytes (8MB)

Total memory used by CFE:  0x80300000 - 0x80434F90 (1265552)
Initialized Data:          0x8032F0A0 - 0x803313D0 (9008)
BSS Area:                  0x803313D0 - 0x80332F90 (7104)
Local Heap:                0x80332F90 - 0x80432F90 (1048576)
Stack Area:                0x80432F90 - 0x80434F90 (8192)
Text (code) segment:       0x80300000 - 0x8032F0A0 (192672)
Boot area (physical):      0x00435000 - 0x00475000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-01-E3-0E-94-1C, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ..... 1433600 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029007
Primary instruction cache 8kb, linesize 16 bytes (2 ways)
Primary data cache 4kb, linesize 16 bytes (2 ways)
Linux version 2.4.20 (root@localhost.localdomain) (gcc version 3.2.3 with Broadc
om modifications) #17 Thu Jul 15 13:58:34 CST 2004
Determined physical RAM map:
memory: 00800000 @ 00000000 (usable)
On node 0 totalpages: 2048
zone(0): 2048 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
CPU: BCM4712 rev 1 at 200 MHz
Calibrating delay loop... 199.47 BogoMIPS
Memory: 6472k/8192k available (1206k kernel code, 1720k reserved, 108k data, 64k
init, 0k highmem)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bus 1
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI en
abled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
Amd/Fujitsu Extended Query Table v1.0 at 0x0040
Physically mapped flash: JEDEC Device ID is 0xCB. Assuming broken CFI table.
Physically mapped flash: Swapping erase regions for broken CFI table.
number of CFI chips: 1
Flash device: 0x400000 at 0x1c000000
Physically mapped flash: cramfs filesystem found at block 850
Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "pmon"
0x00040000-0x003c0000 : "linux"
0x000d4b34-0x003c0000 : "rootfs"
0x003c0000-0x003e0000 : "profile"
0x003e0000-0x00400000 : "nvram"
sflash: found no supported devices
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
ip_conntrack version 2.1 (64 buckets, 512 max) - 344 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_time loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (cramfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 64k freed
upgrade_wireless_nvram(): This firmware support WPA
setup_4712(): Enable VLAN

so freunde jetzt habe ich das mit dem jtag und gleich mal versucht -backup:cfe hat geklappt

ihr müsst mir nur noch schnell erklären wie das genau geht
set sdram_init=0x0002
sdram_config=0x0033
sdram_ncdl=0x0000 (don't forget to commit)

oder muss ich das so eingeben
-flash:nvram set sdram_init=0x0002   ?

will nichts kaputt mach wink

oder gleich die neue cfe druf machen?

Please stick to English in this Forum!

You can flash the CFE using JTAG right away. Use the normal shell, or CFE commands to set nvram variables ("nvram set xxx=yyy"). After setting the variables enter "nvram commit" to save the settings.

/T

Timo Beil wrote:

Use the normal shell, or CFE command

/T

That are you mine? After CFE.bin flash i have no accsess to the router. i use jtag and tftp under WinXP. What ist dous mine CFE command? Help.

sorry for english

Please try the following

1. power down SE505
2. press reset button and power on SE505 (hold button pressed all the time for at least 15 seconds)

Doing this CFE will reset NVRAM to default values. Normally your SE505 should run now.

Do you have a serial console connected?


Funnel

Funnel wrote:

Please try the following

1. power down SE505
2. press reset button and power on SE505 (hold button pressed all the time for at least 15 seconds)

Doing this CFE will reset NVRAM to default values. Normally your SE505 should run now.

Do you have a serial console connected?


Funnel

I am so sorry. It is not your error. it is my. i have dd-wrt installed. and this not good for your CFE. Router have restarted every 2 seconds. Look at this(if it help)

Decompressing(gunzip)...........done

Here we try to capture the default reset button: Not Pressed


CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fr Feb 23 20:55:54 CET 2007 (funnel@cyriax)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.60.13.0
CPU type 0x29007: 200MHz
Total memory: 0x4000000 bytes (64MB)

Total memory used by CFE:  0x80300000 - 0x8043CE00 (1297920)
Initialized Data:          0x80335B20 - 0x80339630 (15120)
BSS Area:                  0x80339630 - 0x8033AE00 (6096)
Local Heap:                0x8033AE00 - 0x8043AE00 (1048576)
Stack Area:                0x8043AE00 - 0x8043CE00 (8192)
Text (code) segment:       0x80300000 - 0x80335B20 (219936)
Boot area (physical):      0x0043D000 - 0x0047D000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr xxxxxxxxxxxxxxxxx, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3732 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029007
Linux version 2.4.34-pre2 (root@linux) (gcc version 3.4.6 (OpenWrt-2.0)) #177 Fr
i Sep 15 21:38:21 CEST 2006
Setting the PFC value as 0x15
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
On node 0 totalpages: 16384
zone(0): 16384 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd cons
ole=ttyS0,115200
CPU: BCM4712 rev 1 at 200 MHz
Using 100.000 MHz high precision timer.
Calibrating delay loop... 199.47 BogoMIPS
Page-cache hash table entries: 16384 (order: 4, 65536 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bus 1
Initializing RT netlink socket
Starting kswapd
pty: 256 Unix98 ptys configured
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-o
nly
ip_conntrack version 2.1 (512 buckets, 4096 max) - 336 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_random match loaded
netfilter PSD loaded - (c) astaro AG
ipt_IPV4OPTSSTRIP loaded
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
VFS: Mounted root (squashfs filesystem) readonly.
boardflags are 0x0388
eth1: Broadcom BCM4320 802.11 Wireless Controller 3.90.39.0
nvram_commit(): end
br0: No such file or directory
br0: No such file or directory
eth1: Argument list too long
Write wireless mac fail : : Device or resource busy
eth2: No such device
eth3: No such device

but new CFE work and you are ROCK!!! i have Openwrt installed and it is work perfekt.

i installed this chips MT48LC16M8A2  -75 E  (16mb)

but they did not registered

i tryed an 8 mb chip from an old sinus 1054 and it worked good
now i have 16 mb

Hi run in some probs after upgrading the RAM.
I used one Hynix HY57V561620BT-H (4x4Mx16bit, from datasheet) to replace the original SDRAM chip.
After booting I just get 16MByte RAM.
Has anyone an idea?

i manage to flash cfe using instructions on http://myantihero.net/openwrt/cfe.php cos standard HairyDairyMaid4.8 for win32 dont do the job ...
but fallowing the guide there was md5sum checksum error on my device ... i think it flash wrong (256kb wrt54g cfe vs. 128kb se505 cfe)
but wait ... connect your console and press reset and plug power cord and u will see (i hope:) )

Here we try to capture the default reset button: Pressed


CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fr Feb 23 20:55:54 CET 2007 (funnel@cyriax)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
CPU type 0x29007: 192MHz
Total memory: 0x800000 bytes (8MB)

now need figure it out how to boot my se505v2 without reset button... any clue?
maybe some environment variable was lost

CFE> printenv
Variable Name        Value
-------------------- --------------------------------------------------
BOOT_CONSOLE         uart0
CFE_VERSION          1.0.37
CFE_BOARDNAME        BCM947XX
CFE_MEMORYSIZE       8
STARTUP              go;
*** command status = 0
CFE>

my jtag works fine right now .Now need flash content :] any one have it ? e-mail me

(Last edited by nicefile on 9 Oct 2008, 18:07)

I just soldered two Infineon HYB39S256160DT-8 / 16x16MB SDRAM chips to my SE505 and installed funnels CFE.
Works like a charm ...

sdram_config=0x0033
sdram_refresh=0x8040
sdram_ncdl=0x20541
sdram_init=0x0008

(Last edited by spirit on 11 Jan 2009, 11:59)

Welcome
Can someone help my?
I have chcip Hynix HY57V641620HG I want to add/replace this chip in siemens se505 v2?
It is possible?
What parameters (sdram_init, sdram_config sdram_ncdl=0) I must write to cfe?

Sorry for my English.

(Last edited by CoMrAt on 17 Jul 2009, 17:51)

how can i modify your cfe's MAC address to my router MAC

(Last edited by muziling on 28 Jul 2009, 16:18)

Funnel wrote:

Hi axc27,

since yesterday evening my SE505 is running stable with 64MB RAM. Let me do some final testing and code cleanup then I will release a new CFE version somewhen this weekend. If it's reported to work reliable I will release the sources as a patch against the original Siemens code.

Regards
Funnel

Hi Funnel!

may i remind you of your promise? :-) I'd like to adapt the default nvram-values to my devices, so i will have to compile my own CFE. with the kernel 2.6 rising in openwrt, a reset to default values forces me to flash an old openwrt first to have nvram tools.

I would like to make a custom CFE for all of my se's, to have the maximum ammount of RAM an the right MAC-addresses hardcoded in the default nvram values...

axc27

hi
i have 2x m-tec tts7616b8e-6 from 4chip 128Mb TwinMOS SDR on my SE505v2 and i have problem getting it work @ 64Mb.Memory seems to be 16Mx16bit and i use funnel CFE
I dont have datasheet for this chip .Still i manage to get them working by using sdram_init=0x000A @ 32Mb
when i set sdram_init=0x0008 ,router wont boot.At sdram_init=0x0002 (funnel's default in CFE) i have 16Mb so seems it use both chips .Any clue? bad soldering (only single chip working) ? wrong memory organization ?
rgds
nicefile

the answer is : (my) Bad soldering (skills) ,and only one chip worked ... now i have 64Mb
rgds go to funnel  for his CFE and inspiration for this mod

(Last edited by nicefile on 29 Aug 2009, 14:21)

Hi axc27 and all the others,

I haven't visited this forum for a long long time (my SE505 is just running and running, no need for any kind of maintenance). From now on you can find my CFE patch here:

ftp://ftp.funnel.homelinux.net/se505/cf … _patch.tgz

I hope it's useful for you.

Regards
Funnel

Thaks for wyour work Funnel!

same applies to me: long time didn't modify my router, they are working like charm.
one is mounted on the roof of my house in an outdoor case giving me my internet connection with a 24dB Grid (32MB RAM),
one is playing lastfm streams allmost everytime i am at home (32MB RAM, USB audio and old 128MB USB storage as /, mpd and lastfm proxy)
and one did my my NAT-router (64MB RAM, old 128MB USB storage as /, usb-parallel serving my old laserjet and esniper with esf frontend) (exchanged two weeks ago with a WGT634U to have an atheros WLAN with multiSSID).
two of the running 24/7 without problems!

A few weeks ago i started playing with the se505 again and thought of building an individual cfe for them with the right default parameters.

I tried your diff against the siemens sources, but i get several rejects i cannot resolve myself... i took Release 3.02.03 and Release 3.01.05 (the content of 6the cfe folder is identical)
http://download.gigaset.com/repository/ … _02_03.tgz
http://gigaset.com/repository/1221/1221 … .01.05.zip
summarized on this site:
http://gigaset.com/shc/0,1935,hq_en_0_1 … rN,00.html

could it be that you made a diff aginst an laredy modified version?
I do not have a file cfe/cfe/include/nvram_default.h wich should be changed.
and in cfe/cfe/main/cfe_main.c i cannot find the position for the Hunks #1 to #3 witch fail... (actually i couldn't find the unmodified line " xprintf("Resetting NVRAM to default\n"); " in any file in the source...)
file shared/sbsdram.S also gives problems in Hunk #4, #5 and #7.

could you give me a link to the originalsource you made the diff against or make the diff against a fresh siemens source (link above)?

Thanks,

axc27

(Last edited by axc27 on 19 Sep 2009, 12:27)

Thank you very much, Funnel!

this one works perfectly, i just flashed my customized CFE!

now i do not have to reenter the macs after nvram reset.

axc27

hi funnel and axc27,
I tried 4 differents cfe's for my SE505's: the original one, the funnel one and others two (belkinFD7230-4 and BCRM947xx).
All the three originals ones detect 8M or 16M (8M+8M) and the yours only 8Mb every time.
I installed on board 32Mb as 16M+16M, and to see all 32Mb, I have to set "sdram_init=0x0008".  Every others wrong values I try to insert, they make the router booting with 8Mb of ram value.

Could it be possible to autodetect the RAM value?
I think about the situation when 2 months far from now or more I'll need to reset the router/routers and I'll have to mount the serial cable for change the sdram_init value (if I'll remember how to do it!!!) because with 8Mb the router won't boot with the most firmwares that I could install and I won't be able to set that value throught telnet or via command using the firmware pages because the firmware won't boot.

about funnel CFE:
I like very mutch the memtest command so I can be sure the RAM mod is working properly, but I don't like that it lacks of the tftp server so if I need to change the firmware because it can't boot I won't be able doing it (if the firmware don't boot for example);
the tftp server was very usefull in those situation and I really love it because the only thing I really need to be working, is the bootloader.
I'm speaking about a situation when I've not all instruments in my hands to repair it, so not serial cable, not jtag...and having the tftp working right, should be the best and simple way to repair a disaster.

I read about the patch but I don't understand how can I use it. Is it a patch to apply to the bootloader? Is it a patch to apply to the souce code? How Can I apply it? For people that don't know or isn't able to compile it, could it be possible that anyone of you, would do this for me/the comunity?

Hope to heard about you hearly, and hope not to have bottered you, asking you for support without say thanks to you before for your job: should be the first thing ever, also if I focused about the post about my trouble.
thanks for your attention.

(Last edited by desigabri on 6 Oct 2009, 14:18)

hello funnel

I compile out file cfez.bin ,size is 116,407 bytes
but  funnel's cfe which download from ftp is 129,171 bytes

Am the reason is difference hndtools-mipsel lib ? I use version 3.2.3.

Hi muziling,

if you use a different toolchain than I'm doing you will most probably get a bin with different size. Just test it and see if it works.

Regards
Funnel

Could you please tell me, can I use J2 (TTL?) interface instead of J7 (JTAG) in order to upload CFE?
I overclocked CPU and it was epic fail for my unit. Now I can't boot. I don't have JTAG cable, but I can buy TTL-COM converter (based on MAX232 chip).
Siemens SE505 V2.
Thanks.

(Last edited by Dissident on 2 Jan 2010, 21:28)

If you can't boot at all JTAG is your last chance. For me a unbuffered cable at parallel port works fine, all you need are 4 resistors.

Ok, tjtag utility now recognize Broadcom chip.
Could you please help me? What should I do next?

I downloaded original SE505 V2 CFE, but trying to backup mine at first.

C:\Windows32>tjtag3 -backup:cfe /nocwd /noemw

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00010100011100010010000101111111 (1471217F)
*** Found a Broadcom BCM4712 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Skipped

Probing Flash at (Flash Window: 0x1fc00000) ...

And then stuck.
Is it normal that "Processor did NOT enter Debug Mode!"?
Or should I start -flash:cfe without backup?

(Last edited by Dissident on 8 Jan 2010, 20:41)

The discussion might have continued from here.