zhjook 发表于 2014-1-10 11:06
固件去 点螃蟹专区，就有， 不过我不确定76s 能不能刷，还没玩过
对比了2个固件的16进制文件，发现不同，，，，，系统文件点的起止位置都不对，，，，不敢用。。。看来，只有吹下，硬读了。哎，，
要是一样就奇怪了
本帖最后由 hanyun0105 于 2014-1-24 21:03 编辑
终于有了个空，看看该死的路由猫。。。先读了，后面再继续试验。。
中兴 h108la v2.4 ，，，
用编程器读了flash，固件为8M，属于编程器固件。。大家给看下这个超级账号和 密码是多少呢？？我找了下好似没有发现，，倒是默认的普通用户和密码看的了。。。默认的无线名称和密码也有。。就是看不出超级密码，，，
Flash是: 兆易GD25Q64BSIG ， 8M
Cpu: RTL8676s
后面传上附件
我上去了，用户名cuadmin，密码cuadmin，登陆网址是http://192.168.1.1/cu.html
silver666 发表于 2014-1-29 19:23
我上去了，用户名cuadmin，密码cuadmin，登陆网址是http://192.168.1.1/cu.html
o ,,,,我的就是不行，，，被该了，我又无法找。。。。。试试了很多组用户和密码。
我用编程器刷了其他的 dsl2650、tp 的 89741的固件后，开机点反应都没有，灯没有反应，像没有启动一样。。。。。只是加电时有几个灯闪了一下，就没反应了。。。。。。。。
hanyun0105 发表于 2014-2-11 20:20
我用编程器刷了其他的 dsl2650、tp 的 89741的固件后，开机点反应都没有，灯没有反应，像没有启动一样。。 ...
这个是多大内存的？没看到内存颗粒。。。
本帖最后由 hanyun0105 于 2014-2-22 15:37 编辑
zhizhe 发表于 2014-2-18 23:13
这个是多大内存的？没看到内存颗粒。。。
就是奇怪啊，好像没有看到内存片哦，难道是集成了？？？？
这是启动的部分信息：
ttl 里的
---------------------------
BootingPress '1' to enter BOOT console...Press '2' to enter DEBUG mode......Ext. phy is not found. To read reset key,if on,to update the romfsaddr address is 9d1e0000Found image at 0xbd060000Found image at 0xbd750000Flash owned validImgNum: 2boot from csp imagepara->BootParaCksum= 948ok!Linux version 2.6.30.9(xia@njzd) (gcc version 4.4.7 (Realtek RSDK-1.5.8p1 Build 1050) ) #2 Mon Oct 2814:04:17 CST 2013Check boot para cksum...boot para cksum OK!cq,0x60000,img=1bootPara.runmode=3CPU revision is: 0000dc01Determined physical RAM map: memory: 02000000 @ 00000000 (usable)User-defined physical RAM map: memory: 02000000 @ 00000000 (usable)Zone PFN ranges: Normal 0x00000000 ->0x00002000Movable zone start PFN for each nodeearly_node_map active PFN ranges 0: 0x00000000 -> 0x00002000Built 1 zonelists in Zone order, mobilitygrouping on.Total pages: 8128Kernel command line: console=ttyS0,115200mem=32M root=31:4root_dev_setup line 170 root: 31:4icache: 16kB/32B, dcache: 8kB/32B, scache:0kB/0BNR_IRQS:128PID hash table entries: 128 (order: 7, 512bytes)Timer: Div=1000, Data=2000console enabledDentry cache hash table entries: 4096(order: 2, 16384 bytes)Inode-cache hash table entries: 2048(order: 1, 8192 bytes)Memory: 26696k/32768k available (3320kkernel code, 6072k reserved, 861k data, 116k init, 0k highmem)Calibrating delay loop... 448.92 BogoMIPS(lpj=2244608)Mount-cache hash table entries: 512IMEM section size = 0x6eccpdt_cspkernel_initNET: Registered protocol family 1611930:22:53 [(1657)LogCtlInit] LogCtlInit begin11930:22:53 [(1396)AddLogtab] AddLogtab: pLogTab=80414910,wLogTabNum=64,dwLogTabIDBase =0X0000000011930:22:53 [(1463)AddLogOutModule] AddLogOutModule:OutputMode=0X00000200,ptLogProcSet=81c17b7011930:22:53 [(1080)LogStdioProcInit] LogStdioProcInit 11930:22:53 [(1463)AddLogOutModule]AddLogOutModule:OutputMode=0X00000100,ptLogProcSet=81c17b7011930:22:53 [(2924)LogFileProcInit] LogFileProcInit 11930:22:53 [(2936)LogFileProcInit] g_dwUptime is 0 11930:22:53 [(1396)AddLogtab] AddLogtab: pLogTab=80415e70,wLogTabNum=2,dwLogTabIDBase =0X0008000011930:22:53 [(1512)SetLogOutputMode] SetLogOutputMode:bType=1,OutputMode=0X0000070011930:22:53 [(1590)SetLogConf] SetLogConf OutputMode=0X00000100,pBuf=81c179c0,iLen=8811930:22:53 [(2743)ProcLogConf] Set LOG_FILE_CONF_SET_PDTCONF 11930:22:53 [(2831)ProcLogConf] Set LogFileFormatTimestamp11930:22:53 [(1723)LogCtlInit] LogCtlInit end11930:22:53 System start!11930:22:53 [(475)InitLogSaveBuff]InitLogSaveBuff11930:22:53 cspmonitorinit... !bio: create slab <bio-0> at 011930:22:53 CspMirrorstart init ...11930:22:53 Qos module initNET: Registered protocol family 8NET: Registered protocol family 20NET: Registered protocol family 2ip_rt_init() start callCSP_alloc_large_system_hash <6>IP route cache hash table entries:1024 (order: 0, 4096 bytes)ip_rt_init() callCSP_alloc_large_system_hash end <6>TCP established hash table entries:1024 (order: 0, 4096 bytes)TCP bind hash table entries: 512 (order:-1, 2048 bytes)TCP: Hash tables configured (established1024 bind 512)TCP renoregisterednetlog: listening on port 4660squashfs: version 4.0 (2009/01/31)Phillip LougherJFFS2 version 2.2. © 2001-2006 Red Hat,Inc.msgmni has been set to 52io scheduler noop registeredio scheduler deadline registeredio scheduler cfq registered (default)Serial: 8250/16550 driver, 1 ports, IRQsharing disabledserial8250: ttyS0 at MMIO 0x0 (irq = 13) isa 16550ARTL8188ER driver version 1.5 (2012-07-24/2013-02-19)vendor_deivce_id=817910echwaddr=00:E0:4C:81:86:86,p=00:E0:4C:81:86:86<rtl8192cd_init_one>LZQ: before readtmpReg<rtl8192cd_init_one>LZQ: after readtmpReghwaddr=00:E0:4C:81:86:86,p=00:E0:4C:81:86:86<rtl8192cd_init_one>LZQ: before readtmpReg<rtl8192cd_init_one>LZQ: after readtmpReghwaddr=00:E0:4C:81:86:86,p=00:E0:4C:81:86:86<rtl8192cd_init_one>LZQ: before readtmpReg<rtl8192cd_init_one>LZQ: after readtmpReg hwaddr=00:E0:4C:81:86:86,p=00:E0:4C:81:86:86<rtl8192cd_init_one>LZQ: before readtmpReg<rtl8192cd_init_one>LZQ: after readtmpRegflash device: 0x800000 at 0xbd000000spi probe...SFCR:0xb8001200 SFCSR:0xb8001208SFDR:0xb800120ccan not get SPI chip driver!can not get SPI chip driver!can not get SPI chip driver!can not get SPI chip driver!can not get SPI chip driver!…………………………………….……………………………………….……………………………………….GD25Q64B matched!!兆易GD25Q64BSIGget SPI chip driver!Physically mapped flash: Found an alies0x800000 for the chip at 0x0, GD25Q64B device detect.Creating 7 MTD partitions on"Physically mapped flash":0x000000000000-0x000000800000 :"whole_flash"0x000000000000-0x000000020000 : "bootloader"0x000000020000-0x000000060000 :"userconfig"0x000000060000-0x0000001e0000 :"kernel1"0x0000001e0000-0x000000560000 :"filesystem1"0x000000560000-0x000000750000 :"ct-jffs"0x000000750000-0x000000800000 :"rtos"Enable 8671G 1 functionEnable 8671 0 functionEnable 8672 functionratm: Realtek SAR v1.02 (Feb 17, 2009)u32 classifier OLD policer onnf_conntrack version 0.5.0(256 buckets, 2048 max)ip_tables: (C) 2000-2006 Netfilter CoreTeamnetfilter PSD loaded - (c) astaro AGNET: Registered protocol family 1NET: Registered protocol family 106WIND/LSIIT IPv6 multicast forwarding 0.1plus PIM-SM/SSM with *BSD APIip6_tables: (C) 2000-2006 Netfilter CoreTeamNET: Registered protocol family 17af_packet.c packet_init call register_netdevice_notifierBridge firewalling registeredbr_init call register_netdevice_notifierEbtables v2.0 registeredNET: Registered protocol family 24PPP Deflate Compression module registered11930:22:53 Ledkey_mod Driver Version 0.0.1.11930:22:53 watchdog enable!watchdog started11930:22:53 Tagaram module Driver Version 0.0.1.11930:22:54 parse tag param success11930:22:54 ver_info_init________________CspGetVerInfo____________________bootPara.bootWhichImg=1bootPara.img_info_tbl.flashOffset=0x 60000g_MaxNumOfFirmWare =2sHardVersion=V2.411930:22:54 ver_info_init11930:22:54 ver_info_init11930:22:54 wFirmwareForm is:0x211930:22:54 Initializing CSP IFinfo...11930:22:54 No IFinfo in flash!11930:22:54 SWÐ HAL driver initing!11930:22:54 Create SW & ETH objects11930:22:54 nEmac = 1, nSw = 0, nEth=4.11930:22:54 ETH obj0: PhyType = 1, Is_assoc_sw = 0, Emac= 0, Phy = 311930:22:54 ETH obj1: PhyType = 1, Is_assoc_sw = 0, Emac= 0, Phy = 211930:22:54 ETH obj2: PhyType = 1, Is_assoc_sw = 0, Emac= 0, Phy = 111930:22:54 ETH obj3: PhyType = 1, Is_assoc_sw = 0, Emac= 0, Phy = 0 …………………………………..………………………………….. Probing RTL8186 10/100 NIC-kenel stack sizeorder...chip name: 8196B, chip revid: 0NOT YETSet threshould idx 0Set threshould idx 1i:0 dev->name:eth%deth0 added. vid=9 Member port 0x8...11930:22:54 ETH obj 0 is already associated with deviceeth0 !i:1 dev->name:eth%deth1 added. vid=9 Member port 0x4...11930:22:54 ETH obj 1 is already associated with deviceeth1 !i:2 dev->name:eth%deth2 added. vid=9 Member port 0x2...11930:22:54 ETH obj 2 is already associated with device eth2 !i:3 dev->name:eth%deth3 added. vid=9 Member port 0x1...11930:22:54 ETH obj 3 is already associated with deviceeth3 !11930:22:54 Register reltk EMAC driver11930:22:54 Register EMAC driver11930:22:54 Initialise SW & ETH objects11930:22:54 Driver do not support set MAC address!eth0 set netif mac to: cc:7b:35:28:9f:c011930:22:54 Driver do not support set MAC address!eth1 set netif mac to: cc:7b:35:28:9f:c011930:22:54 Driver do not support set MAC address!eth2 set netif mac to: cc:7b:35:28:9f:c011930:22:54 Driver do not support set MAC address!eth3 set netif mac to: cc:7b:35:28:9f:c011930:22:54 CSP_FF_L2_DEL_HOOK register ok.11930:22:54 CSP_FF_L2_AGE_HOOK register ok.11930:22:54 CSP_FF_L2_CLR_HOOK register ok.11930:22:54 CSP_FF_L3_DEL_HOOK register ok.11930:22:54 CSP_FF_L3_AGE_HOOK register ok.11930:22:54 CSP_FF_L3_CLR_HOOK register ok.VFS: Mounted root (squashfs filesystem)readonly on device 31:4.Freeing unused kernel memory: 116k freedinit started:BusyBox v1.01 (2013.10.28-05:50+0000)multi-call binaryStarting pid 18, console /dev/ttyS0:'/etc/rc'=============init normalmode================!!!11930:22:56 copy /etc/db_default_3g_cfg.xml to/proc/cfg/db_default_3g_cfg.xml11930:22:56 open file: /proc/cfg/logconf11930:22:56 close file: /proc/cfg/logconf11930:22:56 open file: /proc/cfg/log11930:22:56 close file: /proc/cfg/logLoading drivers and kernel modules...lo upeth0 set netif mac to:0:d0:d0: 0: 0: 1eth1 set netif mac to:0:d0:d0: 0: 0: 1eth2 set netif mac to:0:d0:d0: 0: 0: 1eth3 set netif mac to:0:d0:d0: 0: 0: 1ADDRCONF(NETDEV_UP): eth0: link is notreadyeth0 upADDRCONF(NETDEV_UP): eth1: link is notreadyeth1 upADDRCONF(NETDEV_UP): eth2: link is notreadyeth2 upADDRCONF(NETDEV_UP): eth3: link is notreadyeth3 upStarting pid 57, console /dev/ttyS0:'/sbin/getty'11930:22:57 iShmId:011930:22:57 pShmBuf:60000000 ZXV10 H108LLogin: 11930:22:58 module init success!11930:22:59 module initsuccess!dhcp server11930:22:59 (dbViewMgrInit) end, use1 tick11930:22:59 dbCreateProInfoCfgTbl !!!!!!!11930:22:59 (dbTblMgrInit) end, use1 tick11930:22:59 not finddomain table(IGMPProxy) domain(tEnable) 11930:22:59 not find domain table(IGMPProxy)domain(tWanCID) 11930:22:59 not find domain table(IGMPProxy)domain(tIgmpVersion) 11930:22:59 not find domaintable(IGMPProxy) domain(tIgmpQueryVersion)11930:22:59 key domainerror table(MultiWD) domain(ViewName) 11930:22:59 not find domain table(MldProxyCfg) domain(tMldVersion) 11930:22:59 key domain error table(EthLinkConf)domain(ViewName) 11930:22:59 here! 11930:22:59 monitor init success11930:22:59 moduleinit success!(BrGrp mgr) 11930:22:59 module init success!11930:22:59 not finddomain table(WLANBase) domain(WlanTagParamAutoGenMode)11930:22:59 here!11930:22:59 here!11930:22:59 not findrow RowNo(1) table(DDNSService)11930:22:59 not findrow RowNo(1) table(DDNSService)11930:22:59 not findrow RowNo(1) table(DDNSService)11930:22:59 not findrow RowNo(1) table(DDNSService) 11930:22:59 not find row RowNo(1) table(DDNSService) 11930:22:59 not find row RowNo(1)table(DDNSService) 11930:22:59 not find row RowNo(1) table(DDNSService)11930:22:59 not findrow RowNo(1) table(DDNSService) 11930:22:59 not find row RowNo(2) table(DDNSService)11930:22:59 not findrow RowNo(2) table(DDNSService) 11930:22:59 not find row RowNo(2) table(DDNSService) 11930:22:59 not find row RowNo(2) table(DDNSService) 11930:22:59 not findrow RowNo(2) table(DDNSService) 11930:22:59 not findrow RowNo(2) table(DDNSService) 11930:22:59 not findrow RowNo(2) table(DDNSService) 11930:22:59 not find row RowNo(2)table(DDNSService) 11930:22:59 not findrow RowNo(3) table(DDNSService) 11930:22:59 not find row RowNo(3)table(DDNSService) 11930:22:59 not find row RowNo(3) table(DDNSService) 11930:22:59 not findrow RowNo(3) table(DDNSService) 11930:22:59 not find row RowNo(3) table(DDNSService) 11930:22:59 not findrow RowNo(3) table(DDNSService) 11930:22:59 not find row RowNo(3)table(DDNSService) 11930:22:59 not findrow RowNo(3) table(DDNSService) 11930:22:59 not finddomain table(DDNSHostname) domain(tStatus) 11930:22:59 not find domain table(RaCfg)domain(ViewName) 11930:22:59 not finddomain table(RaCfg) domain(Type) 11930:22:59 not find domain table(RaCfg)domain(Enable) 11930:22:59 not find domain table(RaCfg) domain(Username) 11930:22:59 not finddomain table(RaCfg) domain(Password) 11930:22:59 not finddomain table(RaCfg) domain(Right) 11930:22:59 not findrow RowNo(1) table(RaCfg) 11930:22:59 not find row RowNo(1)table(RaCfg) 11930:22:59 not findrow RowNo(1) table(RaCfg) 11930:22:59 not find row RowNo(1)table(RaCfg) 11930:22:59 not findrow RowNo(1) table(RaCfg) 11930:22:59 not find row RowNo(1) table(RaCfg) 11930:22:59 key domain errortable(ProInfoCfg) domain(SSID2EnableDisplay) 11930:22:59 key domainerror table(ProInfoCfg) domain(BindModeDisplay) 11930:22:59 key domain errortable(ProInfoCfg) domain(Tr069WebConfigEnable) 11930:23:00 dbDefWDInfostart 11930:23:00 here! 11930:23:00 (dbDefMgrInit) end, use57 tick 11930:23:00 GetDefCfgId return 0 11930:23:00 (dbInitPdtConfig) end,use 0 tick 11930:23:00 get Lan IPfrom flash failed ! 11930:23:00 DB get MACfrom flash success 11930:23:00 getparameter from Flash failed!userssid2 11930:23:00 get parameter from Flash failed!userssid3 11930:23:00 get parameter from Flashfailed!userssid4 11930:23:00 getparameter from Flash failed!KeyPassphrase2 11930:23:00 getparameter from Flash failed!KeyPassphrase3 11930:23:00 getparameter from Flash failed!KeyPassphrase4 11930:23:00 get parameter from Flashfailed!wlan0:sUserKey1 11930:23:00 get parameter from Flashfailed!wlan0:sUserKey2 11930:23:00 get parameter from Flashfailed!wlan0:sUserKey3 11930:23:00 getparameter from Flash failed!wlan0:sUserKey4 11930:22:59 module init success! 11930:23:00 module initsuccess!(WANC mgr) 11930:23:00 module initsuccess!(WAND mgr) 11930:23:00 module initsuccess!(WANCD mgr) 11930:23:00 module initsuccess!ethernet mgr 11930:23:00 wEvent=0x1100, lpMsg=(null),wMsgLen=0, wState=0! 11930:23:00 wEvent=0x1100, lpMsg=(null), wMsgLen=0, wState=0! 11930:23:00 ok 11930:23:00 start to getservice info......... 11930:23:00 enable 2services! 11930:23:00 enablepppoeproxy services! 11930:23:00 enablelanbindwan services! 11930:23:00 module initsuccess!route mgr 11930:23:00 Func Begin: QoSMain,wState 0, wMsgtype 1, wEvent 1100 11930:23:00 Func Begin: QoSInit 11930:23:00 Func End: QoSInit 11930:23:00 Func End: QoSMain 11930:23:00 module initsuccess!Enter FmServer Init! 11930:23:00 module init success!fm mgr 11930:23:00 module init success!l2b mgr 11930:23:00 module initsuccess!cltlmit mgr 11930:23:00 module initsuccess!(PTry mgr) 11930:23:00 getparameter from Flash failed!wlan1:sUserKey1 11930:23:00 get parameter from Flashfailed!wlan1:sUserKey2 11930:23:00 get parameter from Flashfailed!wlan1:sUserKey3 11930:23:00 getparameter fr11930:23:00 openfile: /proc/cfg/db_default_cfg.xmlom Flash failed!wlan1:sUserKey4 11930:23:00 close file: /proc/cfg/db_default_cfg.xml6)dbPersonInitWEP] get parameter from Flashfailed!wlan2:sUserKey1 11930:23:00 getparameter from Flash failed!wlan2:sUserKey2 11930:23:00 get parameter from Flashfailed!wlan2:sUserKey3 11930:23:00 module init success!SNTP mgr 11930:23:00 module initsuccess!ddns mgr 11930:23:00 module init success!tracertmgr 11930:23:00 getparameter from Flash failed!wlan2:sUserKey4 11930:23:00 get parameter from Flashfailed!wlan3:sUserKey1 11930:23:00 get parameter from Flashfailed!wlan3:sUserKey211930:23:00 getparameter from Flash failed!wlan3:sUserKey3 11930:23:00 open file: /proc/cfg/db_user_cfg.xmlnInitWEP] ge11930:23:00 close file: /proc/cfg/db_user_cfg.xmlt paramet11930:23:00 open file: /proc/cfg/db_user_cfg.xmler from Flash failed!wlan3:sUserKey4 11930:23:00 close file: /proc/cfg/db_user_cfg.xmlEndTm] (Csp11930:23:00 open file: /proc/cfg/db_user_cfg.xmlDBInitProductPersonCfg) end, use 42 tick 11930:23:00 FileIsEncry return 0 11930:23:00 closefile: /proc/cfg/db_user_cfg.xml11930:23:00 FileDecry return 0 11930:23:00 DB Decry cfgend (iRet: 0) 11930:23:00 find file/var/tmp/db_Decry_cfg.xml 11930:2311930:23:01 open file:/proc/cfg/db_backup_cfg.xml:01 close file: /proc/cfg/db_backup_cfg.xmlo] DBload cfg end ! (iRet: 0) 11930:23:01 open file:/proc/cfg/db_backup_cfg.xml11930:23:01 close file: /proc/cfg/db_backup_cfg.xml1193011930:23:01 open file: /proc/cfg/db_backup_cfg.xml:23:01 FileIsEncry return 0 11930:23:01 closefile: /proc/cfg/db_backup_cfg.xml11930:23:01 FileD11930:23:01 -843-- EnvHandler, OpFlag = 2ecry return11930:23:01 --- KGetBlockByName, iRet = -61,LINE:0 011930:23:01 DB Decry cfg end (iRet: 0) 11930:23:01 find file/var/tmp/db_backup_cfg.xml 11930:23:01 FIND</DB>! 11930:23:01 find file/proc/cfg/db_backup_cfg.xml,and simp chk ok! 11930:23:01 (dbFileLoadCfg) end, use100 tick 11930:23:01 GetDefCfgId return 0 11930:23:01 (dbIFInfoInit) end, use 0 tick 11930:23:01 default val error {Get Mode And Prefix} 11930:23:01 GetEnvPara:ParaName=DB_FLAG, ParaSize = 4, RealLen = 0, iRet = -1 11930:23:01 (ALL) end, use 204 tick 11930:23:01 RunProcess process EventdwUsedTicks 11930:23:03 RunProcess process EventdwUsedTicks 11930:23:03 Init Integrate_Mgr Success! 11930:23:03 Common Info: rip_mgrcall init 11911930:23:03 [(2512)ProcLogConf] Set SaveEnable=130:23:03 module init success! 11930:23:03 entry ctUserInfoMain 11930:23:03 WANCD Moudle register msgstart,with regPID(65807), WAND_TYPE(0) 11930:23:03 AddModule(65795) attention WAND_ID() and WAND_Type(-1) 11930:23:03 traversalWDListToNotify(65795) attention WAND_ID() and WAND_Type(-1) 11930:23:03 AddModule(65814) attention WAND_ID() and WAND_Type(-1) 11930:23:03 traversalWDListToNotify(65814) attention WAND_ID() and WAND_Type(-1) 11930:23:03 record notfind,findDHCPSInst,viewname=IGD.LD1.HostCfg 11930:23:03 module start success!log mgr 11930:23:0br0 up3 parameter is invalid!tWanName11930:23:03 module initsuccess!use SRM_DBVIEW data 11930:23:03 module start success! 11930:23:03 MAC has beengotten!cc:7b:35:28:9f:c0 for TYPE: 4 11930:23:03 strCmd is:IPConfSetCmd :ifconfig br0 add fe80::1/64 11930:23:03 strCmdis: ip route add 192.168.1.0/24 dev br0 table 1 11930:23:03 strCmd is: ip route add192.168.1.0/24 dev br0 table 10 11930:23:03 strCmd is: ip route adddefault via 192.168.1.1 dev br0 table 10 11930:23:03 set igmpsnooping 1 for br011930:23:03 set igmp MtoU 1 for br011930:23:04 set send_IGMP_Query 1 for br011930:23:04 igmp_snp: set ifsend_wan 0 for br011930:23:04 igmp_snp: set fwd_mode 0 for br011930:23:04 igmp_snp: set agetiming 360 for br011930:23:04 set igmp leave mode 1 for br011930:23:04 set igmp query version 2 for br011930:23:04 set mld snooping 1 for br011930:11930:23:04 start rereport netinfo.211930:23:04 end rereport netinfo.3:04 module start success!(BrGrp mgr) 11930:23:04 modulestart success!(Adev mgr) 11930:23:04 module start success! 11930:23:04 the operationt for table isfaied:full! 11930:23:04 MAC has beengotten!cc:7b:35:28:9f:c0 for TYPE: 2 11930:23:04 ReceiveEvent!IGD.WD1.WCD1.WCIP1: EV_WANC_ENABLE occurred on INIT 11930:23:04 StateCha11930:23:04 -843--EnvHandler, OpFlag = 2nged!IGD.WD11930:23:04 --- KGetBlockByName, iRet = -61,LINE:01.WCD1.WCIP1: INIT to WAIT_WANCD 11930:23:04 the operationt for table is faied:full! 11930:23:04 Driver do not support set MAC address!nc_eth0 downmgeth0 set netif mac to: cc:7b:35:28:9f:c0r]feth0 upo] MAC hasbeen gotten!cc:7b:35:28:9f:c1 for TYPE: 2 11930:23:04 Receive Event!IGD.WD1.WCD2.WCPPP1:E11930:23:04 Driver intffunction 129 is not exist!V11930:23:04 Failed to call func 129!_WANC_ENABLE occurred on INIT 11930:23:04 StateChanged!IGD.WD1.WCD2.WCPPP1: INIT to WAIT_WANCD 11930:23:04 theoperationt for table is faied:full! 11930:23:04 MAC hasbeen gotten!cc:7b:35:28:9f:c0 for TYPE: 1 11930:23:04 MAC has beengotten!cc:7b:35:28:9f:c2 for TYPE: 2 11930:23:04 ReceiveEvent!IGD.WD1.WCD3.WCPPP1: EV_WANC_ENABLE occurred on INIT 11930:23:04 StateChanged!IGD.WD1.WCD3.WCPPP1: INIT to WAIT_WANCD 11930:23:04 ReceiveEvent!IGD.WD1.WCD4.WCPPP1: EV_WANC_ENABLE occurred on INIT 11930:23:04 StateChanged!IGD.WD1.WCD4.WCPPP1: INIT to WAIT_WANCD 11930:23:04 modulestart success!(WANC mgr) 11930:23:04 module startsuccess!(WAND mgr) 11930:23:04 c(729)addStateMachine]WANCD_ID(IGD.WD1.WCD1),ifname(),enable(1) 11930:23:04 EV_WANCD_ENABLE occurred on WANCD_STATE_INIT 11930:23:04 WANCD_ID(IGD.WD1.WCD1), OldState(0)->NewState(1) 11930:23:04 WANCD_ID(IGD.WD1.WCD2),ifname(),enable(1) 11930:23:04 setifdevicetype parameter BRBIT!cd_mgr.c(503)logEventOn11930:23:05 Driver do not support setMAC address!Staeth1 downteeth1 set netif mac to: cc:7b:35:28:9f:c0] EVADDRCONF(NETDEV_UP): eth1: link is notready_eth1 upWANCD_ENABLE occurred on WANCD_STATE_INIT 11930:23:04 WANCD_ID(IGD.WD1.WCD2), OldState(0)->NewState(1) 11930:23:04 Driver intf function 129 is not exist!(11930:23:05 Failed to call func 129!729)addStateMachine]WANCD_ID(IGD.WD1.WCD3),ifname(),enable(1) 11930:23:04 EV_WANCD_ENABLE occurred on WANCD_STATE_INIT 11930:23:04 WANCD_ID(IGD.WD1.WCD3), OldState(0)->NewState(1) 11930:23:04 WANCD_ID(IGD.WD1.WCD4),ifname(),enable(1) 11930:23:04 EV_WANCD_ENABLE occurred onWANCD_STATE_INIT 11930:23:04 WANCD_ID(IGD.WD1.WCD4), OldState(0)->NewState(1) 11930:23:04 module start success!(WANCDmgr) 11930:23:04 GetEnvPara: ParaName=BCKUP_TIME, ParaSize = 8, RealLen = 0, iRet = -1 11930:23:04 Call functionfailed!GetEnvPara 11930:23:04 lh,ChainBckupStart,WDType:-BackupWDType:-MultiWDMode: 11930:23:04 MAC has beengotten!cc:7b:35:28:9f:c0 for TYPE: 8 11930:23deviceeth1 entered promiscuous mode:04 Ioctl failed!eth 11930:23:05 Ioctlfailed!eth 11930:23:05 setifdevicetype parameter BRBIT!11930:23:05 Driver do not support set MAC address!eth2 downeth2 set netif mac to: cc:7b:35:28:9f:c0ADDRCONF(NETDEV_UP): eth2: link is notreadyeth2 up11930:23:05 Driver intf function 129 is not exist!11930:23:05 Failed to call func 129!11930:23:05 Ioctl failed!eth device eth2 entered promiscuous mode11930:23:05 setifdevicetype parameter BRBIT!11930:23:05 Driver do not support set MAC address!eth3 downeth3 set netif mac to: cc:7b:35:28:9f:c0ADDRCONF(NETDEV_UP): eth3: link is notreadyeth3 up11930:23:05 Driver intf function 129 is not exist!11930:23:05 Failed to call func 129!11930:23:05 Ioctl failed!eth device eth3 entered promiscuous mode11930:23:05 setifdevicetype parameter BRBIT!11930:23:05 gSocObcIntBit=2463330000]remove REG32(0xb8000114)=0x1400[InitAdslMode....IInitAdslnfo] module startsuccess!ethernet mgr 11930:23:05 wEvent=0x1103, lpMsg=(null),wMsgLen=0, wState=1! inter_system.sachemIntSource=7gSocId=0x63330000867x ver = Q, (0412 ver)=0x63330000,(ver)=0x3200time_out_flag = 1time_out_force = 30000Time_elapse = 1010hwaddr=CC:7B:35:28:9F:C0,p=CC:7B:35:28:9F:C0hwaddr=CC:7B:35:28:9F:C1,p=CC:7B:35:28:9F:C1hwaddr=CC:7B:35:28:9F:C2,p=CC:7B:35:28:9F:C2hwaddr=CC:7B:35:28:9F:C3,p=CC:7B:35:28:9F:C3ssid set 0Time_elapse = 3010hwaddr=CC:7B:35:28:9F:C0,bssid=CC:7B:35:28:9F:C011930:23:10 RunProcess process Event dwUsedTicks 11930:23:10 wEvent=0x1103, lpMsg=(null),wMsgLen=0, wState=1! 11930:23:10 WandId=IGD.WD1 11930:23:10 pInstName=IGD.WD1.WCD1! 11930:23:10 strCmd is: br2684ctl -b -c1 -e 0 -p 0 -q ubr,aal5:max_pcr=0,pcr=0,scr=0,min_pcr=0,cdv=0,mbs=0 -a 88.88 -s32767 wlan0 up11930:23:10 itfnum=1, encap=1, sndbuf=32767, payload=1, astr=88.88 ratm(itf 0): open 88.88set 0xb8300100 to 0x4137set 0xb8300000 to 0x180003e8create: ch0 (88/88) 7679,0set_atm_data_modeEnable 8671G 1 functionEnable 8671 0 functionEnable 8672 functionset 0xb8300100 to 0x4137set 0xb8300000 to 0x180003e8create: ch0 (88/88) 7679,0applying workaround...donebr2684_regvcc vcc=81506000, encaps=1,brvcc=814dfc8011930:23:10 WAN Bridge succesfully created on nas111930:23:10 setifdevicetype parameter WCDBIT!11930:23:10 setifdevicetype parameter LT_EOA_BIT!11930:23:10 MAC has been gotten!cc:7b:35:28:9f:c0 for TYPE: 16 11930:23:10 pInstName=IGD.WD1.WCD2! 11930:23:10 strCmd is: br2684ctl -b -c2 -e 0 -p 0 -q ubr,aal5:max_pcr=0,pcr=0,scr=0,min_pcr=0,cdv=0,mbs=0 -a 0.35 -s32767 11930:23:10 itfnum=2, encap=1, sndbuf=32767, payload=1, astr=0.35 ratm(itf 0): open 0.35set 0xb8300110 to 0x4137set 0xb8300010 to 0x3e8create: ch1 (0/35) 7679,0set_atm_data_modeEnable 8671G 1 functionEnable 8671 0 functionEnable 8672 functionset 0xb8300100 to 0x4137set 0xb8300000 to 0x180003e8create: ch0 (88/88) 7679,0set 0xb8300110 to 0x4137set 0xb8300010 to 0x3e8create: ch1 (0/35) 7679,0[align=le
楼主后来超密解决了没有。H118na也是这个板子，但没有dsl,其它基本都一样。
zte的自带的固件的boot 有crc认证，你刷第三方可能进不去，如果可以刷rg100a-tb之类的8676编程器固件，你可以在那个基础上升级成dlink2750e