OpenWrt Forum Archive

Topic: ZTE ZXA10 F660 GPON Wifi router

The content of this topic has been archived on 12 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
MAD_GooZe
8 Jan 2014, 00:26

Hello! I am not quite sure that this forum is the right place for this question, but anyway. I own a GPON router ZTE ZXA10 F660. It is linux based and I want to make some software modificstions with it. This router has USB host port, where I would like to plug ext2 formatted flash card. The problem is that this device does not have ext2 kernel module, so ext2 partiotins do not mount. I've tried to insmod kernel modules from different devices, but it fails (dmesg shows that it nedds different version magic). How can I compile this modules myself, or change version magic in pre-compiled modules? The firmware source seems to be not published.

Here is some useful information, extracted from the device: 

/ # cat /proc/cpuinfo 
system type             : 
processor               : 0
cpu model               : Broadcom4350 V7.0
BogoMIPS                : 359.42
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
ASEs implemented        :
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

unaligned exceptions            : 631217
/ # mount
mtd:rootfs2 on / type jffs2 (ro,relatime)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600,ptmxmode=000)
/dev/mtdblock3 on /data type jffs2 (rw,relatime)
/dev/mtdblock4 on /userconfig type jffs2 (rw,relatime)
tmpfs on /var type tmpfs (rw,relatime,size=8192k)
none on /mnt type ramfs (rw,noatime,nodiratime)
/ # df
Filesystem           1k-blocks      Used Available Use% Mounted on
mtd:rootfs2              14320     12712      1608  89% /
/dev/mtdblock3            1024        68       956   7% /data
/dev/mtdblock4            2048       156      1892   8% /userconfig
# cat /proc/filesystems 
nodev   sysfs
nodev   rootfs
nodev   bdev
nodev   proc
nodev   sockfs
nodev   usbfs
nodev   pipefs
nodev   tmpfs
nodev   devpts
nodev   ramfs
        vfat
        ntfs
nodev   jffs2
nodev   fuse
        fuseblk
nodev   fusectl

Thanks!

Post #3
MAD_GooZe
8 Jan 2014, 01:31
FriedZombie wrote:

http://linux.die.net/lkmpg/x380.html

I have seen tis article before, but there is no /boot folder in root, so i can not fetch config file.

Post #4
stefan.pandele
13 Oct 2014, 10:25

I bought f660 zte routers two times from a network equipment supplier and he told me that this f660 model have 1x1000mbps port and 3x 100mbps ports. these days I realised that the supplier sent me in the first trance all the f660 routers with the V2.30.20P4T3S software version and in the second trance with the software version V2.30.20P6XXX. all the routers with the software version with "P4" have LAN1 port at 1000mpbs and LAN2,3and 4 have 100mbps and all the routers with software version with "P6" have all lan ports at 100mbps.

do you have any ideea how can I save the software firmware with P4 to my computer and to upgrade the ones with "P6" with the P4 firmware from my pc?

thanks

(Last edited by stefan.pandele on 13 Oct 2014, 10:46)

Post #5
EDPR
15 Nov 2015, 09:19

How did you get into the shell? 

There are empty header points (at the right middle of the PCB under the big blue capacitator under the red power knob)
I tried to JTAG them but didn't get any result.

Post #6
EDPR
15 Nov 2015, 14:45

I have a bunch of F660's with broken optical modules.

I managed to get in via telnet.  I'm happy, it's what I was looking for.

Seems mine is a ARM version.

FWIW:

BusyBox v1.01 (2013.06.05-06:24+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

/ # cat /proc/cpuinfo 
Processor       : ARM926EJ-S rev 1 (v5l)
BogoMIPS        : 996.14
Features        : swp half thumb fastmult edsp 
CPU implementer : 0x56
CPU architecture: 5TE
CPU variant     : 0x2
CPU part        : 0x131
CPU revision    : 1
Cache type      : write-back
Cache clean     : cp15 c7 ops
Cache lockdown  : format C
Cache format    : Harvard
I size          : 16384
I assoc         : 4
I line length   : 32
I sets          : 128
D size          : 16384
D assoc         : 4
D line length   : 32
D sets          : 128

Hardware        : Feroceon-KW2
Revision        : 0000
Serial          : 0000000000000000
/ # mount
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw)
/dev/mtdblock2 on /tagparam type jffs2 (rw)
tmpfs on /var type tmpfs (rw)
/dev/mtdblock5 on /userconfig type jffs2 (rw)
none on /proc/bus/usb type usbfs (rw)
/ # df
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/mtdblock2            4096       432      3664  11% /tagparam
tmpfs                    15360        88     15272   1% /var
/dev/mtdblock5            8192       624      7568   8% /userconfig
/ # cat /proc/filesystems 
nodev   sysfs
nodev   rootfs
nodev   bdev
nodev   proc
nodev   sockfs
nodev   pipefs
nodev   futexfs
nodev   tmpfs
nodev   inotifyfs
nodev   eventpollfs
nodev   devpts
nodev   ramfs
        vfat
        ntfs
        jffs2
nodev   fuse
        fuseblk
nodev   fusectl
nodev   usbfs
/ #
Post #7
GBRR
19 Feb 2017, 18:00

i see no progress over those years ..

i have same router with strange firmware,

i was able to connect with Telnet and use some firmware bugs to go directly config save and backup / restore option but do not have ability to make changes yet.

i have problem with z-LIB extraction.

The discussion might have continued from here.