OpenWrt Forum Archive

Topic: Thomson TG605

The content of this topic has been archived on 2 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi to all! In the cellar/basement of my  fabric, i found a router, a Thomson TG605. I think is the same as Speedtouch 605. it has a very old and buggly firmware, with every type of security hole.
So i want to try to flash wrt on this router.
Has BDM6348 chip, 4 fast ethernet port, 1 adsl2+ annexA , 1 rs-232 minidin console serial port (pin 1 tx pin2 rx and pin 3 ground) and a PCMCIA slot (i think to add wifi or other devices).

Here the boot output of serial port:

http://www.pastebin.ca/2296082

i noticed also that pressing the back reset button at boot, the power led from red become orange, then tryes to load a firmware image trough BOOTP, i tryed to pass original firmwares and also openwrt BCM6348 bin firmware, but both fail to load/flash (i don't know what is the right functionof this procedure), the router reboots and tryes to load another firmware, then reboot, this loop continues infinitely. I think that the original bootloader expect a checksum or a parameter loading the firmware image.

now i try to grab the output of console when tryes to load remote firmware then i post it there.

Someone can drive me loading a bootloader compatible with wrt? Or directly the wrt firmware...

(Last edited by mescall2000 on 23 Dec 2012, 19:27)

i tryed to load via bootp alternative firmwares... here the results:

Welcome to minicom 2.6.1

OPTIONS: I18n
Compiled on May  1 2012, 13:36:18.
Port /dev/ttyS0

Press CTRL-A Z for help on special keys


Decompressing Bootloader............................

Speedtouch initialization sequence started.

BOOTP reason : BLFLAG_BUTTON_PUSH 

  phy_bcm6348.c : phy_init_bcm6348

phy_bcm6348.c - ETHD: external phy is used

  phy_bcm6348.c : phy_init_bcm6348 - OK

phy_bcm6348.c : Initialize the Ethernet Switch MIB registers

phy_bcm6348.c : disable ethernet MAC while updating its registers

phy_bcm6348.c : issue soft reset, wait for it to complete

phy_bcm6348.c : init mii clock, do soft reset of phy, default is 10Base-T

phy_bcm6348.c : Initialize emac registers
Ctrl: BOOTP initiated.
Ctrl: BOOTP Reply received!
*****   Own IP = 10.0.0.138 ()
*****   Server = 10.0.0.1 ()
*****   Mask = 255.255.255.0
*****   Filename = ZZRXAA7.417.bin
Ctrl: TFTP started (Rx:ZZRXAA7.417.bin).

[ERROR] : FIA code is not correct !!!
***Reseting the board***
Decompressing Bootloader............................

Speedtouch initialization sequence started.

Decompressing Bootloader............................

Speedtouch initialization sequence started.

BOOTP reason : BLFLAG_BUTTON_PUSH 

  phy_bcm6348.c : phy_init_bcm6348

phy_bcm6348.c - ETHD: external phy is used

  phy_bcm6348.c : phy_init_bcm6348 - OK

phy_bcm6348.c : Initialize the Ethernet Switch MIB registers

phy_bcm6348.c : disable ethernet MAC while updating its registers

phy_bcm6348.c : issue soft reset, wait for it to complete

phy_bcm6348.c : init mii clock, do soft reset of phy, default is 10Base-T

phy_bcm6348.c : Initialize emac registers
Ctrl: BOOTP initiated.
Ctrl: BOOTP Reply received!
*****   Own IP = 10.0.0.138 ()
*****   Server = 10.0.0.1 ()
*****   Mask = 255.255.255.0
*****   Filename = TG605s-R8265-UK-BC.bin
Ctrl: TFTP started (Rx:TG605s-R8265-UK-BC.bin).

[ERROR] : FIA code is not correct !!!
***Reseting the board***
Decompressing Bootloader............................

Speedtouch initialization sequence started.

CTRL-A Z for help |  9600 8N1 | NOR | Minicom 2.6.1  | VT102 |      Offline

The discussion might have continued from here.