MINE 发表于 2015-3-3 17:24:19

华为部分光猫TTL无输出解决办法

朋友寄来一个单口华为光猫，说接上TTL数据线无法显示。根据他的经验，华为多种光猫的5针TTL接口的顺序都是一样的，所以排除接线错误，TTL数据线本身的问题也排除了。。
拆开外壳，仔细看了下主板，TTL同样是J8接口，只是同样没有杜邦插针，甚至焊锡都没有，空洞洞的。
再仔细看TTL焊点布线，发现了问题所在：

对应Tx的R229和对应Rx的R231这两个电阻没有焊上！

那么问题就好解决了，加电阻或者直接用焊锡连通即可，听说还有人用铅笔的……


接上SecureCRT，一次成功，启动信息如下：
HuaWei StartCode 2012.02 (R15C10 Oct 14 2014 - 22:49:58)

SPI:
startcode select the uboot to load
the high RAM is :8000103c
startcode uboot boot count:6422560
Boot load address :0x40000
Use the UbootA to load success


U-Boot 2010.03 (R15C10 Nov 20 2014 - 13:18:24)

DRAM:32 MB
Boot From SPI flash
Chip Type is SD5116S
SFC : cs0 unrecognized JEDEC id 00000000, extended id 00000000
SFC: extend id 0x300
SFC: cs1 s25sl12800 (16384 Kbytes)
SFC: Detected s25sl12800 with page size 256 K, total 16 MB
SFC: already protect ON !
SFC: sfc_read flash offset 0x80000, len 0x40000, memory buf 0x81ea0008
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
PHY power down !!!
::CRC:0xa3c1ca20, Magic1:0x0, Magic2:0x0, count:0, CommitedArea:0x0, Active:0x0, RunFlag:0x0
slave_paramA in flash, CRC:0xa3c1ca20, Magic1:0x0, Magic2:0x0, count:0, CommitedArea:0x0, Active:0x0, RunFlag:0x0
MAGIC1: 0x0, MAGIC2: 0x0, the magic is error!!!
Slave struct initializtion success!!
Start from main system(0x0)!
CRC:0xa3c1ca20, Magic1:0x5a5a5a5a, Magic2:0xa5a5a5a5, count:0, CommitedArea:0x0, Active:0x0, RunFlag:0xffffffff
Main area (A) is OK!
CRC:0xe33b8857, Magic1:0x5a5a5a5a, Magic2:0xa5a5a5a5, count:0, CommitedArea:0x0, Active:0x0, RunFlag:0xffffffff
Bootcmd:bootm 0x1c140054
BootArgs:noalign mem=31M console=ttyAMA1,115200 root=/dev/mtdblock8 mtdparts=hi_sfc:0x40000(startcode)ro,0x40000

(bootA)ro,0x40000(bootB)ro,0x40000(flashcfg)ro,0x40000(slave_param)ro,0x200000(kernelA)ro,0x200000(kernelB)

ro,0x480000(rootfsA)ro,0x480000(rootfsB)ro,0x180000(file_system),-(reserved) pcie1_sel=x1 maxcpus=0 user_debug=0x1f

panic=1 skb_priv=128
U-boot Start from NORMAL Mode!
## Booting kernel from Legacy Image at 1c140054 ...
   Image Name:   Linux-2.6.34.10_sd5115v100_wr4.3
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    717896 Bytes = 701.1 kB
   Load Address: 80e08000
   Entry Point:80e08001
   Memory Start: 80100000
SFC : cs0 unrecognized JEDEC id 00000000, extended id 00000000
SFC: extend id 0x300
SFC: cs1 s25sl12800 (16384 Kbytes)
SFC: Detected s25sl12800 with page size 256 K, total 16 MB
   Loading Kernel Image ... SFC: sfc_read flash offset 0x140094, len 0xaf448, memory buf 0x80108000
OK
OK
   kernel loaded at 0x80108000, end = 0x801b7448

Starting kernel ...

Get SD511x chip id...5116S...
Uncompressing Linux... done, booting the kernel.
Kernel Early-Debug on Level 0
V: 0xF8100000 P: 0x00010100 S: 0x00300000 T: 0
V: 0xF8400000 P: 0x00010400 S: 0x00200000 T: 12
V: 0xF8A00000 P: 0x00010A00 S: 0x00080000 T: 0
V: 0xF9000000 P: 0x00011000 S: 0x05000000 T: 0
early_init      72      
sd511x_map_io   231   
sd511x_gic_init_irq   88      
sd511x_timer_init       482   
sd511x_timer_init       502   
hi_kernel_wdt_init      209   
sd511x_init   318   
sd511x_init   327   
sd511x_init   327   
sd511x_init   332   
sd511x_init   335   
sd511x_init   347   
Linux version 2.6.34.10_sd5115v100_wr4.3 (root@wuhci2lslx00717) (gcc version 4.4.6 (GCC) ) #1 Thu Nov 20 13:18:10

CST 2014
PHYS_OFFSET = 80100000.
CPU: ARMv7 Processor revision 1 (ARMv7), cr=50c53c7f
CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Machine: sd511x
Memory policy: ECC disabled, Data cache writeback
SD511x chip id:0x51161110
apb bus clk is 100000000
Built 1 zonelists in Zone order, mobility grouping on.Total pages: 7874
Kernel command line: noalign mem=31M console=ttyAMA1,115200 root=/dev/mtdblock8 mtdparts=hi_sfc:0x40000(startcode)

ro,0x40000(bootA)ro,0x40000(bootB)ro,0x40000(flashcfg)ro,0x40000(slave_param)ro,0x200000(kernelA)ro,0x200000

(kernelB)ro,0x480000(rootfsA)ro,0x480000(rootfsB)ro,0x180000(file_system),-(reserved) pcie1_sel=x1 maxcpus=0

user_debug=0x1f panic=1 skb_priv=128
PID hash table entries: 128 (order: -3, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 31MB = 31MB total
Memory: 30024k/30024k available, 1720k reserved, 0K highmem
Virtual kernel memory layout:
    vector: 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap: 0xfff00000 - 0xfffe0000   ( 896 kB)
    DMA   : 0xffc00000 - 0xffe00000   (   2 MB)
    vmalloc : 0xc2000000 - 0xf8000000   ( 864 MB)
    lowmem: 0xc0000000 - 0xc1f00000   (31 MB)
    modules : 0xbf800000 - 0xc0000000   (   8 MB)
      .init : 0xc0008000 - 0xc0019000   (68 kB)
      .text : 0xc0019000 - 0xc013b000   (1160 kB)
      .data : 0xc0148000 - 0xc015a3c0   (73 kB)
SLUB: Genslabs=11, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:160
Calibrating delay loop... 663.55 BogoMIPS (lpj=3317760)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
Init trace_clock_cyc2ns: precalc_mult = 312500, precalc_shift = 8
hi_wdt: User-Mode!
hi_wdt: Init sucessfull!
NET: Registered protocol family 16
check_res_of_trace_clock: sched_clock() high resolution
Serial: dwuart driver
uart:0: ttyAMA0 at MMIO 0x1010e000 (irq = 77) is a AMBA/DW
uart:1: ttyAMA1 at MMIO 0x1010f000 (irq = 78) is a AMBA/DW
console enabled
bio: create slab <bio-0> at 0
Switching to clocksource timer1
NET: Registered protocol family 2
IP route cache hash table entries: 128 (order: -3, 512 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2. (NAND) 漏 2001-2006 Red Hat, Inc.
msgmni has been set to 58
io scheduler noop registered (default)
brd: module loaded
Spi id table Version 1.22
Spi Flash Controller V300 Device Driver, Version 1.10
Spi(cs1) ID: 0x01 0x20 0x18 0x03 0x00 0x00
Spi(cs1): Block:256KB Chip:16MB (Name:S25FL128P-0)
Lock Spi Flash(cs1)!
Hisilicon flash: registering whole flash at once as master MTD
11 cmdlinepart partitions found on MTD device hi_sfc
Creating 11 MTD partitions on "hi_sfc":
0x000000000000-0x000000040000 : "startcode"
0x000000040000-0x000000080000 : "bootA"
0x000000080000-0x0000000c0000 : "bootB"
0x0000000c0000-0x000000100000 : "flashcfg"
0x000000100000-0x000000140000 : "slave_param"
0x000000140000-0x000000340000 : "kernelA"
0x000000340000-0x000000540000 : "kernelB"
0x000000540000-0x0000009c0000 : "rootfsA"
0x0000009c0000-0x000000e40000 : "rootfsB"
0x000000e40000-0x000000fc0000 : "file_system"
0x000000fc0000-0x000001000000 : "reserved"
Special nand id table Version 1.33
SD5116s cannot load Nand Flash Controller
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
TCP cubic registered
NET: Registered protocol family 17
ThumbEE CPU extension supported.
VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
Freeing init memory: 68K
init started: BusyBox v1.18.4 (2014-11-11 17:22:43 CST)
starting pid 30, tty '': '/etc/rc.d/rc.sysinit'
mount file system
====system used 0====
fenghe.linux4.3
Setting hostname:
Setting up interface lo:
==== system mount used , system total , free ====
Running local startup scripts.

*******************************************
--==      Welcome To IAS WAP         ==--
--==   Huawei Technologies Co., Ltd.   ==--
*******************************************
IAS WAP Ver:V800R015C10SPC090B102
IAS WAP Timestamp:2014/11/11 17:25:10
*******************************************

==== system wap used , system total , free ====
hw_ssp_basic: module license 'Huawei Tech. Co., Ltd.' taints kernel.
Disabling lock debugging due to kernel taint
soft lockup args:snap=150; release=50; dump flag=1;
hw_dm_init successfully...
Soc himem config loaded /etc/wap/wap_ssp_basic.5116s.cfg
Lastword meminfo:0x80002000;0x000fe000;1;
current lastword info:Add=0xc2201000;max_num=300;Add1=0xc2201000;Add2=0xc2206000;Add3=0xc220b000;
proc_dbg_log_get_last_logbuffer:get last buffer.
==== ssmp wap used , ssmp total , free ====
/etc/rc.d/rc.sysinit: /etc/rc.d/rc.start/0.wap_init.sh: line 81: chown: not found
reload log OK!
/sbin/Reloadlog: line 4: can't create /proc/wap_proc/wap_debug_log: nonexistent directory
/sbin/Reloadlog: line 5: can't create /proc/wap_proc/flow_log: nonexistent directory
/sbin/Reloadlog: line 6: can't create /proc/wap_proc/dhcpd_log: nonexistent directory
/sbin/Reloadlog: line 7: can't create /proc/wap_proc/dhcpd_log: nonexistent directory
Get kernel version:2.6.34
Rootfs time stamp:2014-11-20_13:19:03
SVN label(ont):User init start......
Loading the SD5115V100 modules:

SYSCTL module is installed

PIE module is installed

FUNC = hi_kernel_gpio_init:1370
5116 (0x4) can't insmod 5115 mod


GPIO module is installed

I2C module is installed

TIMER module is installed

SPI module is installed

FUNC = hi_kernel_dp_init:156
5116/5118 (0x4) can't insmod 5115 mod


fail to install BRIDGE module

BRIDGE module is installed

GPON module is installed

EPON module is installed

OAM module is installed
ifconfig eth0 hw ether C0:70:09:E0:E8:26
Loading the EchoLife WAP modules: LDSP
COMMON For LDSP Install Successfully...
GPIO For LDSP Install Successfully...

------ SOC is 5116 S PILOT ------
<ldsp>board version is 5023
<ldsp>pcb version is 0
<ldsp>orig board version is 2

FUNC = hi_kernel_dp_pdu_trans_table_item_check:364
the input parameter em_type(0x29), em_act(0x5)is error (out of range)

CHIPADP-SD5115 BASIC For LDSP Install Successfully...
I2C For LDSP Install Successfully...
LSW L2 For LDSP Install Successfully...
DEV For LDSP Install Successfully...
:board_ver=5023,pcb_ver=0
hw_dm_init_data successfully...
WARNING: Spec SSMP_SPEC_ARPPING_PERIOD valueis error, and discarded.
pots_num=0
ssid_num=0
usb_num=0
hw_route=1
   l3_ex=1
    ipv6=0
OPTIC For LDSP Install Successfully...
KEY For LDSP Install Successfully...
LED For LDSP Install Successfully...
insmod: can't insert '/lib/modules/wap/hw_module_rf.ko': No such file or directory
Loading BBSP L2 modules:
insmod: can't insert '/lib/modules/wap/l2ffwd.ko': No such file or directory
PTP For BBSP Install Successfully...
hw_igmp_module_init ui_totalnum:7
hw_igmp_kernel Install Successfully...

dhcp_module_init load success !

pppoe_module_init load success !
hw_ringchk_kernel Install Successfully...
hw_portchk_kernel Install Successfully...

hw_socket_l2info_init load success !

hw_neigbour_init load success !
l2base For BBSP Install Successfully...
vbr_unicast_car:50
vbr_unicast_car:50
vbr_unicast_car:50

for bbsp Install Successfully...
xpon_mode:1
PLOAM For LDSP Install Successfully...
GMAC For LDSP Install Successfully...
=======memory used: system:4624 ssmp:227 amp:0 bbsp:0 ldsp:0 sdk:0======
Start ldsp_user...0
<LDSP> system has no slave space for bob
<LDSP_CFG> Set uiUpMode=1
read data is over time

SD511X test self OK
Extern Lsw test self NoCheck
Optic test self ERROR
WIFI test self NoCheck
PHY test self OK
PHY test self OK
PHY test self OK
PHY test self OK
PHY test self NoCheck
PHY test self NoCheck

<LDSP> 5171 optic
FILE =

/usr1/code/ONT_V300R015C80_DailyCompile/code/current/ONT_V300R015C00/CI/Make/../../Source/ldsp/driver/optic/hw_ker_

drv_optic.c
LINE =5412, FUNC = hw_drv_optic_cal_sw_ver_set
<LDSP> read cal version file error
1

<LDSP> bob optic was calibrated
2
read data is over time

read data is over time

<LDSP> optic firmware load success!
GPON init success !
ssmp bbsp igmp amp omci
Start start pid=184; uiProcNum=5;
starting pid 198, tty '/dev/ttyAMA1': '-/bin/"console.sh"'
profile close core dump
InitFrame omci; PID=188; state=0; 20.951;
InitFrame omci; PID=188; in state=0; 21.004;
InitFrame omci; PID=188; out state=0; 21.004;
InitFrame igmp; PID=189; state=0; 21.217;
InitFrame igmp; PID=189; in state=0; 21.218;
InitFrame igmp; PID=189; out state=0; 21.219;
InitFrame amp; PID=187; state=0; 21.317;
InitFrame amp; PID=187; in state=0; 21.317;
InitFrame amp; PID=187; out state=0; 21.319;
InitFrame bbsp; PID=186; state=0; 21.490;
InitFrame bbsp; PID=186; in state=0; 21.490;
InitFrame bbsp; PID=186; out state=0; 21.506;
InitFrame ssmp; PID=185; state=0; 21.822;
InitFrame ssmp; PID=185; in state=0; 21.822;
HW_SWM_GetAddrFromMtdName SUCCESS, uiOffsetAddr = 0xc0000==
DBCTree Init Ok!
Unlock Spi Flash(cs1)!
InitFrame ssmp; PID=185; out state=0; 23.012;

::uiStartPhase: 0, uiEndPhase: 1, Seconds: 4
InitFrame igmp; PID=189; in state=1; 23.014;
InitFrame amp; PID=187; in state=1; 23.023;
InitFrame bbsp; PID=186; in state=1; 23.024;
InitFrame ssmp; PID=185; in state=1; 23.025;
InitFrame ssmp; PID=185; out state=1; 23.025;

CALL HW_IGMP_LoadLibryAndInit!!
CALL GPON init!!InitFrame omci; PID=188; in state=1; 23.033;

CALL libbtvgpon_init!!
CALL HW_IGMP_GPON_RPCInit !!
CALL HW_IGMP_WANMODE_RPCInit !!InitFrame igmp; PID=189; out state=1; 23.362;
InitFrame omci; PID=188; out state=1; 23.423;
Start ProcMonitor without vspa ...
BBSP CMDAgent_Init msg init....
InitFrame amp; PID=187; out state=1; 23.823;
Set CPUSpeed Car
InitFrame bbsp; PID=186; out state=1; 23.845;

::uiStartPhase: 1, uiEndPhase: 2, Seconds: 0
InitFrame igmp; PID=189; in state=2; 23.862;
InitFrame igmp; PID=189; out state=2; 23.862;
InitFrame omci; PID=18
FUNC = hi_kernel_dp_pdu_trans_table_item_check:364
8; in st the input parameter em_type(0x2a), em_act(0x8)is error (out of range)

ate=2; 23.862;
InitFraLock Spi Flash(cs1)!
me ssmp; PID=185; in state=2; 23.871;
InitFrame ssmp; PID=185; out state=2; 23.873;
InitFrame amp; PID=187; in state=2; 23.874;
InitFrame amp; PID=187; out state=2; 23.874;
InitFrame bbsp; PID=186; in state=2; 23.874;
Press any key to get started
: Start ProcMonitor Successfully!
/bin/sh: iptables: not found
/bin/sh: iptables: not found

----EthLink Up Index = 0x30000001----

----IPv4If Up Index = 0x30000001----
InitFrame omci; PID=188; out state=2; 24.581;
InitFrame bbsp; PID=186; out state=2; 24.634;

::uiStartPhase: 2, uiEndPhase: 3, Seconds: 1
InitFrame omci; PID=188; in state=3; 24.651;
InitFrame omci; PID=188; out state=3; 24.652;
InitFrame bbsp; PID=186; in state=3; 24.652;
InitFrame igmp; PID=189; in state=3; 24.661;
InitFrame ssmp; PID=185; in state=3; 24.671;
InitFrame ssmp; PID=185; out state=3; 24.671;
InitFrame amp; PID=187; in state=3; 24.671;

ucQueuePerTcont:8

ucQueuePerPort:8
BBSP CMDAgent_Init msg init....
l2 mode is HW_IGMP_SPEC_MAC

enter HW_RINGCHK_EffectRuleWhenInitEponRingCheckSwitch:1, GponRingCheckSwitch:1, DefaultSpecifidVlan:,EthType:8300,

PkgPerSec:5, RingPortReCheckInterval :300
CFM begin::AppName
CFM end::AppName uiRet Spendms
BBSP status:1
emIPVersion = 2 uiAct = 0
InitFrame bbsp; PID=186; out state=3; 24.886;
:uiPortNum=2 uiSsidNum=0
:IGMP StbMac Switch is off
InitFrame igmp; PID=189; out state=3; 24.894;
emIPVersion = 0 uiAct = 0
emIPVersion = 1 uiAct = 0
InitFrame amp; PID=187; out state=3; 24.959;

::uiStartPhase: 3, uiEndPhase: 4, Seconds: 0
InitFrame omci; PID=188; in state=4; 24.980;
InitFrame amp; PID=187; in state=4; 24.988;
: Eth up at phase 0x4!
Init success.
InitFrame ssmp; PID=185; in state=4; 24.992;
InitFrame amp; PID=187; out state=4; 25.046;
InitFrame ssmp; PID=185; out state=4; 25.066;
The same port, do not deal!
HW_MSG_ProcByMidInfo iTaskID changed from 273 to 186
:Not Find in Ttree:CMO=2e296400
WEB regist LAN IP change event success.
notify http port Innerport: 80 OutPort: 80
The same port, do not deal!
: MIB Rebuild Done!
Init Access Mode To GPON .................ONUID(0): O1 => O1

FUNC = hi_kernel_dp_pdu_trans_table_item_check:364
the input parameter em_type(0x2a), em_act(0x8)is error (out of range)

InitFrame omci; PID=188; out state=4; 26.830;

::uiStartPhase: 4, uiEndPhase: 5, Seconds: 2

::uiStartPhase: 0, uiEndPhase: 5, Seconds: 7
: Init OMCI Successful...
: omci Register Successfully!

HW_Init_Frame SSMP Success
: Init Amp Successful...
<hw_xml_basic_dbmain.c:2471>pcCPath:InternetGatewayDevice.UserInterface.X_HW_WebSslInfo

Unlock Spi Flash(cs1)!
Lock Spi Flash(cs1)!
,,,,
Unlock Spi Flash(cs1)!
Lock Spi Flash(cs1)!
Unlock Spi Flash(cs1)!
Lock Spi Flash(cs1)!

ui_esdtotal_flag open:ui_esdtotal_flag of ETH1 is =1, uni_phy
Dropped the page cache.
HW_Init_Frame MU Successful.

telnet port:23
<hw_xml_basic_dbmain.c:2471>pcCPath:InternetGatewayDevice.UserInterface.X_HW_WebSslInfo

Unlock Spi Flash(cs1)!
Open device /dev/pts/2 OK!

Entering character mode
Escape character is '^]'.


Welcome Visiting Huawei Home Gateway
Copyright by Huawei Technologies Co., Ltd.

Login:received netlink trace message. src pid:347;
Set kmsgread process pid to:348;
Lock Spi Flash(cs1)!

User name is wrong, please try it again!
Login:root


johnsonchou 发表于 2015-3-3 23:44:09

wka 发表于 2015-3-4 10:09:06

2015 年迷你款 8010、8310

zhjook 发表于 2015-3-4 23:47:25

直接短接没问题，这个地方就是个0om的上啦电阻

yeezhang 发表于 2015-4-26 22:09:44

楼主，搭楼请教一个问题：
我的光猫是华为8120C，想进入命令行去修改一些配置。但是接好ttl后，用secureCRT可以看见console的启动信息，也看见了login:提示符。但是输入root没有提示和其他反馈，很奇怪！
我的串口设置也应该没有问题，输入的root也能在secureCRT上回显。不知道你碰见过没有？

MINE 发表于 2015-4-27 06:12:26

yeezhang 发表于 2015-4-26 22:09
楼主，搭楼请教一个问题：
我的光猫是华为8120C，想进入命令行去修改一些配置。但是接好ttl后，用secureCR ...

有的华为光猫就是这样 只有输出不能输入

yeezhang 发表于 2015-4-27 08:58:56

MINE 发表于 2015-4-27 06:12
有的华为光猫就是这样 只有输出不能输入

找到原因了，GND没有接好。。。。。
不过，登陆后权限还是不足，没有shell，su的验证码也不知道怎么生成

aiening 发表于 2015-4-27 23:02:24

暂时还没有遇到过过，感谢楼主的分享精神！

MINE 发表于 2015-5-1 15:53:16

yeezhang 发表于 2015-4-27 08:58
找到原因了，GND没有接好。。。。。
不过，登陆后权限还是不足，没有shell，su的验证码也不知道怎么生成

我有SU破译工具，但只能在线帮你弄，你我都在线的时候。五一出去玩，下周约个时间（最好上午）。

yeezhang 发表于 2015-5-6 09:08:57

MINE 发表于 2015-5-1 15:53
我有SU破译工具，但只能在线帮你弄，你我都在线的时候。五一出去玩，下周约个时间（最好上午）。

su破解后，具有的权限能否打开telnet或者修改config文件？
页: [1] 2
查看完整版本: 华为部分光猫TTL无输出解决办法