1 (edited by vavasik 2010-09-06 12:19:10)

Topic: Memory mod on Dlink DIR-825

Hello everybody!
Yesterday I resolder two memory chip on my D-link DIR-825. The chips which I used are Samsung K4H511638D-UCB3 from Samsung DDR SODIMM 512MB.
http://images.4m.net.ua/images/43227162731589091754.jpg

Old chips was MOSEL VITELIC V58C2256164SC15.
http://images.4m.net.ua/images/40186886087248680668.jpg

Router booting U-Boot and shows 128 MB RAM. 
But linux kernel not starting without any error messages! 
Have you any ideas about starting linux kernel, what reason of this U-Boot or/and Firmware (DD-WRT, OPENWRT, Original firmware)?
This mod will be very intrested for many users who want to get small and fast home server.

Below U-boot logs with 128M and 64M:

U-Boout log with 128M:
---------------------------

U-Boot 1.1.4 (Apr 9 2009 - 12:01:01)

AP94 (ar7100) U-boot 0.0.12
HTTP-UID AP94: DRAM: b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 214k for U-Boot at: 87fc8000
Reserving 192k for malloc() at: 87f98000
Reserving 44 Bytes for Board Info at: 87f97fd4
Reserving 36 Bytes for Global Data at: 87f97fb0
Reserving 128k for boot params() at: 87f77fb0
Stack Pointer at: 87f77f98
Now running in RAM - U-Boot at: 87fc8000
ar7100 flash_init: start
ar7100_spi_flash_unblock: start
ar7100_flash: id read: start
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: eth_initialize: ag7100_enet_initialize
rtl8366sr_phy_setup ethUnit=0
ar7100.c: eth0 using default MAC: 00:26:5a:c7:71:2c
eth0 up
ar7100.c: eth1 using default MAC: 00:26:5a:c7:71:2d
eth1 up
eth0, eth1
### main_loop entered: bootdelay=1

### main_loop: bootcmd="bootm 0xbf050000"
Hit any key to stop autoboot: 0
### main_loop: no key string, allow autoboot
### main_loop: abortboot


Original U-Boot log with 64M:
---------------------------------
U-Boot 1.1.4 (Apr 9 2009 - 12:01:01)

AP94 (ar7100) U-boot 0.0.12
HTTP-UID AP94: DRAM: b8050000: 0xc0140180
64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 214k for U-Boot at: 83fc8000
Reserving 192k for malloc() at: 83f98000
Reserving 44 Bytes for Board Info at: 83f97fd4
Reserving 36 Bytes for Global Data at: 83f97fb0
Reserving 128k for boot params() at: 83f77fb0
Stack Pointer at: 83f77f98
Now running in RAM - U-Boot at: 83fc8000
ar7100 flash_init: start
ar7100_spi_flash_unblock: start
ar7100_flash: id read: start
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: eth_initialize: ag7100_enet_initialize
rtl8366sr_phy_setup ethUnit=0
ar7100.c: eth0 using default MAC: 00:26:5a:c7:71:2c
eth0 up
ar7100.c: eth1 using default MAC: 00:26:5a:c7:71:2d
eth1 up
eth0, eth1
### main_loop entered: bootdelay=1

### main_loop: bootcmd="bootm 0xbf050000"
Hit any key to stop autoboot: 1  0
### main_loop: no key string, allow autoboot
### main_loop: abortboot
## Booting image at bf050000 ...
checksum:84d8de18
Image Name: MIPS OpenWrt Linux-2.6.32.10
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 883790 Bytes = 863.1 kB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum ... OK
LZMA Umcompressing Kernel Image ... Image loaded from 80060000-802f6a88
OK
Boot image os 5=IH_OS_LINUX
## do_bootm_linux start....
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 67108864

Starting kernel ...

Re: Memory mod on Dlink DIR-825

Hi!

Sorry for the question, but how have you soldered the second USB? Need some resistors too? And work OK?

3 (edited by vavasik 2010-09-06 13:40:52)

Re: Memory mod on Dlink DIR-825

vargalex wrote:

Hi!

Sorry for the question, but how have you soldered the second USB? Need some resistors too? And work OK?

Hi!

Resistors not needed. You just short 2 contacts fields as on foto below

This foto from my router all working fine

http://images.4m.net.ua/images/85919404236736847070.jpg

More fotos here:
https://forum.openwrt.org/viewtopic.php?pid=116224#p116224

Re: Memory mod on Dlink DIR-825

vavasik wrote:
vargalex wrote:

Hi!

Sorry for the question, but how have you soldered the second USB? Need some resistors too? And work OK?

Hi!

Resistors not needed. You just short 2 contacts fields as on foto below

This foto from my router all working fine

http://images.4m.net.ua/images/85919404236736847070.jpg

More fotos here:
https://forum.openwrt.org/viewtopic.php?pid=116224#p116224

Hi!

Thanks for your help!

vargalex

Re: Memory mod on Dlink DIR-825

vavasik, have you solved?

Re: Memory mod on Dlink DIR-825

tournet1 wrote:

vavasik, have you solved?

Hi, I'm in progress and working on it in my free time.
One of the main problem to find U-boot source for DIR-825 B1 because
on vendor site U-boot source is unavailable just only Linux source, not U-boot.
And main problem with U-boot, I think I need to recompile it with new memory settings.

Recently I receive from good people link for U-boot source and binary file for
Netgear WNDR3700 which use the same hardware (flash, ram, CPU, etc...)

Now I trying do something with it.

Re: Memory mod on Dlink DIR-825

Here is full flash image of DIR-825 B1, (bootloader is working with WEB rescue console),  http://upload.com.ua/get/901919492/
Made with SPIPGM http://rayer.ic.cz/programm/programm.htm#SPIPGM
Interface via LPT here http://rayer.ic.cz/elektro/spipgm.htm

8 (edited by vavasik 2010-09-23 08:04:42)

Re: Memory mod on Dlink DIR-825

FINISHED!!!
Memory mod is working....It was U-boot problem, I replace Standart U-boot from D-link on U-boot from Netgear WNDR3700 and recover Caldata partition, after this all working OK, but my DIR-825 now is WNDR3700 from Netgear ;-)

Here is FullFlash Netgear WNDR3700 http://upload.com.ua/get/901949950/128M-dir-825-to-Netgear-WNDR3700.zip

Just only resolder memory chips and flash Fullflash firmware from WNDR3700 in to DIR-825

Re: Memory mod on Dlink DIR-825

Good work vavasik!
With the netgear uboot, does the serial input works?

I'm not able to download it from http://upload.com.ua/
Can you upload it to an other service?

Thank you

DWL-2100AP Ramponis Homepage
http://xoomer.alice.it/ramponis/

Re: Memory mod on Dlink DIR-825

ramponis wrote:

Good work vavasik!
With the netgear uboot, does the serial input works?

Yes, serial console input is working in U-boot from WNDR3700 flashed into DIR-825

Other Link on full flash http://rapidshare.com/files/423899949/128M-dir-825-Netgear-WNDR3700-caldata.rar

Re: Memory mod on Dlink DIR-825

Hi, Vavasik!
Will you pls give a detail tutorial with pics when you are free,
that be greatly appreciated by all the dir-825 users.

Re: Memory mod on Dlink DIR-825

xiaoxiaoca wrote:

Will you pls give a detail tutorial with pics when you are free,
that be greatly appreciated by all the dir-825 users.

WELCOME

Sorry for my bad English ;-(

Objective: Increase the amount of RAM from 64 MB to 128 MB by soldering memory chips in a router.
Reason: I'm using a router as a small NAS server with P2P download/upload station. I have internet connection at my home via twisted pair with static addressing at 100 Mbps rate.
Router was flashed under OpenWRT, installed Transmission Daemon, Samba 3.
At speeds under 100Mbit and 64MB of RAM on the router speed of download/upload of Transmission varies from 512K to 4MB, and I can see that the router does not have enough memory and it starts to swap to an USB stick which mounted as swap partition.

Attention: If you want this mod you necessary open a router that has a loss of warranty!
If you want make this mod yourself you must have good soldering skills!
Whatever you do with the router, YOU DO AT YOUR OWN RISK!


This article - a compilation of my posts from the IXBT forum (http://forum.ixbt.com/topic.cgi?id=14:49819) with some modifications.

Main steps:
1. Flashing full flash from a router Netgear WNDR3700 to a DIR-825 Rev:B2. Because standard DIR-825 U-boot can’t load Linux kernel of the firmware and abort firmware loading process without any error messages when 128MB RAM installed.
2. Soldering ICs.

Flashing
Re-flash I performed by the method of direct programming SPI Flash via LPT port.

Steps:
1. Disassemble router

2. Install and solder in the empty holes JP1 connector pins for Serial console (you can use the pins from the old motherboard, etc.), in order to monitor the boot process after flashing full flash.
Pinout connector JP1 is: PIN1-> 3.3V; PIN2-> RX; PIN3-> TX; PIN4-> GND.

3. Use a serial cable on MAX232 to connect to serial console, or another cable which can be made from old cable for mobile phone, I used a USB cable from an old mobile phone Siemens M55 assembled on the PL-2303 chip.
4. Check the work of serial console. Connect cable to your PC and router and run terminal client, I used PuTTy http://www.chiark.greenend.org.uk/~sgtatham/putty/ 
COM port settings: 115200/8/1/0/none

After turning on the router with connected serial cable you should see a messages in terminal client during boot the router like this:

U-Boot 1.1.4 (Apr September 2009 - 12:01:01)

AP94 (ar7100) U-boot 0.0.12
HTTP-UID AP94: DRAM: b8050000: 0xc0140180
64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 214k for U-Boot at: 83fc8000
Reserving 192k for malloc () at: 83f98000
********

If you do not see these messages, then something is wrong with your cable, port, etc .... locate the errors and correct it.

5. Find a IC  SPI Flash Spansion S25FL064A (Package SO3 016 wide), it is located on the backside of the router PCB.
Datasheet for flash chip here: http://www.spansion.com/Support/Datasheets/S25FL064A_00_C4_e.pdf

6. You can use various ways to flashing SPI chip, I use self-made simple LPT adapter.
Make adapter for LPT port, the circuit here http://rayer.ic.cz/elektro/spipgm.htm , but these article for another type of chip (thanks for the links user lprot from IXBT forum).
In our case, pins connections are follows:
DB25 # PIN         IC S25FL064A # PIN
7 -----------[ 150R ]----------- 7
10--------- [150R ]----------- 8
8 -----------[ 150R ]---------- 16
9 -----------[ 150R ]---------- 15
18----------- ----------------- 10 GND or "GND" on JTAG pads.

I used a ribbon cable with stranded wire from the old 40 pin ATA cable, alternating signal wires with the ground for better noise immunity and DB25 connector from standard LPT cable.
It should be noted that the cable should be as short as possible, I got about 10-12 cm
Photos of the cable: http://images.4m.net.ua/images/86098268307367770773.jpg

7. Connection to the flash chip:
If there is no external power supply for +3,3 V then necessary carefully lift the IC’s pins listed above over PCB.
WARNING: Beware of lifting the pins of flash IC, they are very fragile and are more likely to snap off at the body.

In order not to break off IC’s pins, I made an external power supply for +3,3 V, using the integrated voltage regulator for +3,3 V from the old motherboard and power supply from the external HDD with +5V and +12V. «+3,3V» power supply should be connected to the pin “2” of IC S25FL064A. Perhaps you can use two large size batteries type «D» 1,5V instead of the power supply, but with the batteries I have not tried ...

9. Connect the LPT adapter to the chip and computer and connect +3,3V external power supply, or batteries you must see light of some LEDs on the board.
10. So, if everything is done properly download the program software from the link http://rayer.ic.cz/programm/programm.htm#SPIPGM

Run DOS session, I use a FAR manager under Win XP SP3 and try determine the chip with the key “i”
SPIPGMW.EXE /i

Program should show:
SPI connected to LPT port at I / O base address: 378h, SCK pulse width: t 0us FlashROM JEDEC ID, type: 010216h Spansion S25FL064A (8MB)

If you see “unknown chip” there is a problem with LPT cable connection, check connections and try again.

Dump content of the chip twice in to files and compare it between each other.
(for example: fc / b test_1 test_2) if no differences, then you can read/write the chip’s content without errors. If you see differences then shorten the LPT cable.

11. Download and save the full flash Netgear WNDR3700 from here: http://upload.com.ua/get/901949950/128M-dir-825-to-N ... gear-WNDR3700.zip
or http://rapidshare.com/files/423899949/128M-dir-825-Netgear-WNDR3700-caldata.rar
This is a firmware with bootloader from Netgear WNDR3700 with default password.
12. Before flashing the firmware allow record in chip with the key “u”
SPIPGMW.EXE /u
13. Erase chip with the key “e”
SPIPGMW.EXE /e
14. Program chip with key “p”
SPIPGMW.EXE /p file_name
15. Dump chip content to a file with key file “d”
SPIPGMW.EXE /d filename_1
16. Check the programming, by comparing recorded file and recently dumped file
fc / b filename_1 filename_2.
Files must be equal.
17. Disconnect LPT cable and external power supply, try to boot. Look at the serial console terminal program you will see a standard boot log of Netgear WNDR3700

(Below is the log with the already soldered 128MB memory)

U-Boot 1.1.4DNI1.6 (May 22 2009 - 16:37:44)

WNDR3700U (ar7100) U-boot 0.0.12
DRAM: b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 315k for U-Boot at: 87fb0000
Reserving 192k for malloc () at: 87f80000
Reserving 44 Bytes for Board Info at: 87f7ffd4
Reserving 36 Bytes for Global Data at: 87f7ffb0
Reserving 128k for boot params () at: 87f5ffb0
Stack Pointer at: 87f5ff98
Now running in RAM - U-Boot at: 87fb0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
*** Warning - bad CRC, using default environment

In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize ...
CHH: mac: 0 if: 2
CHH: mac: verify: 0 if: 00,000,002
: Cfg1 0xf cfg2 0x7014
eth0: c0: 3f: 0e: 7f: 26:1 f
eth0 up
CHH: mac: 1 if: 1
CHH: mac: verify: 1 if: 00,000,001
: Cfg1 0xf cfg2 0x7014
eth1: c0: 3f: 0e: 7f: 26:20
eth1 up
eth0, eth1
Trying eth0
: Unit 0 phy is up ... RGMii 1000Mbps full duplex
# 259: ag7100_set_mac_from_link
: Pll reg 0x18050010: 0x11110000
: Cfg_1: 0x1ff0000
: Cfg_2: 0x3ff
: Cfg_3: 0x8001ff
: Cfg_4: 0xffff
: Cfg_5: 0xfffef
: Done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

Client starts ... [Listening] for ADVERTISE ... TTT
Retry count exceeded; boot the image as usual

nmrp server is stopped or failed!
Hit any key to stop autoboot: 1 0
   Verifying Checksum ... OK
# # # SQUASHFS loading 'image / uImage' to 0x80800000
# # # SQUASHFS load complete: 886690 bytes loaded to 0x80800000
# # Booting image at 80800000 ...
   Image Name: MIPS OpenWrt Linux-2.6.32.16
   Created: 2010-08-25 22:27:19 UTC
   Image Type: MIPS Linux Kernel Image (lzma compressed)
   Data Size: 886626 Bytes = 865.8 kB
   Load Address: 80060000
   Entry Point: 80060000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
# # Transferring control to Linux (at address 80060000) ...
# # Giving linux memsize in bytes, 134217728

At this stage we have received from the WNDR3700 Netgear instead of DIR-825.

Then you can start resoldering memory chips if you have a good soldering skills:

In the DIR-825 rev.: B2 uses two DDR chips in TSOP 66 with 16Mx16 organization for a total of 64MB, MOSEL VITELIC V58C2256164SC15 Datasheet for them here: http://pdf1.alldatasheet.net/datasheet-pdf/view/2414/MOSEL/V58C2256164S.html

Original memory chip on the PCB DIR-825
http://images.4m.net.ua/images/40186886087248680668.jpg

I used for mod chips from the Samsung DDR SO-DIMM 512MB with 32Mx16 organization IC type K4H511638D-UCB3 photo: http://images.4m.net.ua/images/43227162731589091754.jpg

Possible to use chips from other manufacturers only organization must be 32Mx16, chips with another organization, such as 64Mx8 not suitable.

If both chips normally resolder the router must wake up as the Netgear WNDR3700 with 128MB of memory, You need only install OpenWRT in order to use all 128MB.
TIP: Firmware from Netgear cannot use 128MB, just only 64M.

Re: Memory mod on Dlink DIR-825

Hi!

And what are the dowload/upload speeds in transmission with 128MB RAM?

vargalex

14 (edited by ramponis 2010-10-13 16:39:44)

Re: Memory mod on Dlink DIR-825

Good guide vavasik.

Can you tell me the correct serial pin-out?
and the serial settings?

Is it possible to flash the firmware without remove the flash from the device.
Can i make some connection from the lpt to the flash with the device turned off?
I don't wont to remove the flash from device because i'm not sure to do this without break the device

Thank you

DWL-2100AP Ramponis Homepage
http://xoomer.alice.it/ramponis/

15 (edited by vavasik 2010-10-13 16:50:34)

Re: Memory mod on Dlink DIR-825

vargalex wrote:

Hi!

And what are the dowload/upload speeds in transmission with 128MB RAM?

vargalex

approximately dowload/upload is 4-5MB/sec on USB HDD drive connected to DIR-825 with EXT3

Samba3 speed rate on big non fragmented MKV 13GB file size is 160Mbit/sec

16 (edited by vavasik 2010-10-13 16:48:00)

Re: Memory mod on Dlink DIR-825

ramponis wrote:

Good guide vavasik.

Can you tell me the correct serial pin-out?
and the serial settings?

Is it possible to flash the firmware without remove the flash from the device.
Can i make some connection from the lpt to the flash with the device off?
I don't wont to remove the flash from device because i'm not sure to do this without break the device

Thank you

Hello, you can find serial pinout in my post above and here http://wiki.openwrt.org/toh/d-link/dir-825#serial
Serial settings are: Speed - 115200 other by default ;-)

Yes, it's possible. If you don't want remove chip and lift up chip pins over PCB you need use external power supply +3.3V directly connected to SPI flash chip. For chip programming I disconnect original power supply unit, soldered wires to chip, connect LPT self-made interface to my old notebook, connect  +3.3V external power to chip and programming chip as I describe above.

Re: Memory mod on Dlink DIR-825

Thank you vavasik

But wich is the first pin of the serial interface?

DWL-2100AP Ramponis Homepage
http://xoomer.alice.it/ramponis/

18 (edited by vavasik 2010-10-13 18:24:27)

Re: Memory mod on Dlink DIR-825

ramponis wrote:

Thank you vavasik

But wich is the first pin of the serial interface?

first pin is closest to RAM chip and the labeled as square box

Foto of my serial cable wich was made from old Siemens M55 USB cable
http://images.4m.net.ua/images/88583142651379753991.jpg

My COM port settings
Speed:115200, Data bits:8, Stop bits:1, Parity:none, Flow control:none

Re: Memory mod on Dlink DIR-825

ok!

Thank you vavasik

DWL-2100AP Ramponis Homepage
http://xoomer.alice.it/ramponis/

Re: Memory mod on Dlink DIR-825

Great!

a great job!

thanks a million!

Re: Memory mod on Dlink DIR-825

hi,vavasik. good job!
thank you.

i upgrade ram to 128MB.

flash your  bin. ( FullFlash)
but can't boot.

i think your hardware flash is S25FL064A, but my flash is ST25P64V6P.
so can't boot. (can't display any information )



can your tell me how to Modify 128 MB code? (WNDR3700_bootloader_v1.6_uBoot_v1.1.4.tar.bz2)

DDNAS Trac site: trac.rtnas.com    It is Marvell 88F6710 (Armada370+ 88E6171R). sale: $69.99
DDNAS info site: www.rtnas.com

Re: Memory mod on Dlink DIR-825

linuxpro wrote:

hi,vavasik. good job!
thank you.

i upgrade ram to 128MB.

flash your  bin. ( FullFlash)
but can't boot.

i think your hardware flash is S25FL064A, but my flash is ST25P64V6P.
so can't boot. (can't display any information )



can your tell me how to Modify 128 MB code? (WNDR3700_bootloader_v1.6_uBoot_v1.1.4.tar.bz2)

Hi,
First reason it's incorrect RAM organisation or soldering problem with memory RAM chips.

I don't recompile bootloader source code from wndr3700 I just flash binary image to chip

Re: Memory mod on Dlink DIR-825

vavasik wrote:
linuxpro wrote:

hi,vavasik. good job!
thank you.

i upgrade ram to 128MB.

flash your  bin. ( FullFlash)
but can't boot.

i think your hardware flash is S25FL064A, but my flash is ST25P64V6P.
so can't boot. (can't display any information )



can your tell me how to Modify 128 MB code? (WNDR3700_bootloader_v1.6_uBoot_v1.1.4.tar.bz2)

Hi,
First reason it's incorrect RAM organisation or soldering problem with memory RAM chips.

I don't recompile bootloader source code from wndr3700 I just flash binary image to chip

i reflash D-LINK fullflash.bin to my 825.

i see my ram is 128MB....

thanks you.

DDNAS Trac site: trac.rtnas.com    It is Marvell 88F6710 (Armada370+ 88E6171R). sale: $69.99
DDNAS info site: www.rtnas.com

24 (edited by linuxpro 2010-10-20 07:57:07)

Re: Memory mod on Dlink DIR-825

i recompile 3700 u-boot.
but display stop over here.

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Abort

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
ar7100> help
?

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Bad Magic Number
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

The Router is in TFTP Server Firmware Recovery mode NOW!
Listening on Port : 69, IP Address: 192.168.1.1...
checksum bad
checksum bad
?

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Bad Magic Number
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

The Router is in TFTP Server Firmware Recovery mode NOW!
Listening on Port : 69, IP Address: 192.168.1.1...
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad

Rcv:
        .................................................................
        .................................................................
        .................................................................
        .................................................................
        .................................................................
        .................................................................
        .................................................................
        ...................
Done!
Bytes transferred = 2424965 (250085 hex)
Erase 7 - 120 sectors...
First 0x7 last 0x78 sector size 0x10000                                      120
Copy image to Flash... write addr: bf070000
Done
Rebooting...

Resetting...?

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Verifying Checksum ... OK
?

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Verifying Checksum ... OK
?

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 253k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476787404
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1476786924
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...
Abort

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
ar7100> <INTERRUPT>
ar7100> <INTERRUPT>
ar7100> memtest

input any command, No response.
use D-LINK U-BOOT, is same.

all on the 128RAM.

i think i must test 64M RAM work status.

DDNAS Trac site: trac.rtnas.com    It is Marvell 88F6710 (Armada370+ 88E6171R). sale: $69.99
DDNAS info site: www.rtnas.com

Re: Memory mod on Dlink DIR-825

i confirm. my memory problem

U-Boot 1.1.4 (Oct 20 2010 - 14:16:41)

WNDR3700U (ar7100) U-boot 0.0.12 dni6 V1.7
DRAM:  b8050000: 0xc0140180
64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 253k for U-Boot at: 83fc0000
Reserving 192k for malloc() at: 83f90000
Reserving 44 Bytes for Board Info at: 83f8ffd4
Reserving 36 Bytes for Global Data at: 83f8ffb0
Reserving 128k for boot params() at: 83f6ffb0
Stack Pointer at: 83f6ff98
Now running in RAM - U-Boot at: 83fc0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

BOARD IS NOT CALIBRATED!!!
In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1543896268
after rtl8366s_initChip ret=0
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
in rtl8366s_phy_setup mac=-1543895788
eth1: 00:03:7f:09:0b:ad
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...T
Abort

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
ar7100> help
autoscr - run script from memory
?       - alias for 'help'
base    - print or set address offset
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dnishow - display dni write info include mac address,wpspin and serial number
echo    - echo args to console
erase   - erase FLASH memory
exit    - exit script
flinfo  - print FLASH memory information
fsinfo  - print information about filesystems
fsload  - load binary file from a filesystem image
go      - start application at address 'addr'
help    - print online help
iminfo  - print header information for application image
imls    - list all images found in flash
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
ls      - list files in a directory (default /)
macset - Set ethernet MAC address
macshow - Show ethernet MAC addresses
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
progmac - Set ethernet MAC addresses
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sleep   - delay execution for some time
snset   - set serial number
test    - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
version - print monitor version
wpspinset - set wpspin number
ar7100> boot
### SQUASHFS loading 'image/uImage' to 0x80800000
### SQUASHFS load complete: 883658 bytes loaded to 0x80800000
## Booting image at 80800000 ...
   Image Name:   MIPS OpenWrt Linux-2.6.32.10
   Created:      2010-04-06  13:03:37 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    883594 Bytes = 862.9 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 67108864

Starting kernel ...

Linux version 2.6.32.10 (openwrt@wrt1.marcant.net) (gcc version 4.3.3 (GCC) ) #20 Tue Apr 6 15:01:26 CEST 2010
bootconsole [early0] enabled
CPU revision is: 00019374 (MIPS 24Kc)
Atheros AR7161 rev 2, CPU:680.000 MHz, AHB:170.000 MHz, DDR:340.000 MHz
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobil
...............
DDNAS Trac site: trac.rtnas.com    It is Marvell 88F6710 (Armada370+ 88E6171R). sale: $69.99
DDNAS info site: www.rtnas.com