找回密码
 注册

QQ登录

只需一步,快速开始

楼主: wyliq

用PCTOOL刷上海贝尔Home Plus Plus 500 S6307MPW-II RouterTech固件

[复制链接]
 楼主| 发表于 2011-4-30 10:05:24 | 显示全部楼层
回复 ndir511 的帖子

还可以用firmware_tool输入TNETW ID来生成你的猫适用的ENV,把生成的env的无线rom部分用setenv写入env就可以了
 楼主| 发表于 2011-4-30 10:41:41 | 显示全部楼层
回复 ndir511 的帖子

登陆 modem 用system里面的system Diagnostics查看下System environment (/proc/ticfg/env)
字段里面WLAN_EEPROM8后面是什么内容,我估计应该是171F1711075901FC0502000036006D00A600E5000404441016004510F903185A

发表于 2011-4-30 20:37:42 | 显示全部楼层
回复 wyliq 的帖子

可否详细一点,在firmware_tool如何利用TNETW ID来生成猫适用的ENV?
发表于 2011-4-30 20:38:22 | 显示全部楼层
回复 wyliq 的帖子

WLAN_EEPROM8后面真的是:171F1711075901FC0502000036006D00A600E5000404441016004510F903185A
发表于 2011-4-30 20:40:55 | 显示全部楼层
本帖最后由 ndir511 于 2011-4-30 20:41 编辑

回复 wyliq 的帖子

我当时就是贝尔金刷OP成砖了,后来把别人的ENV写进去,但网卡的ROM不对,应该是MAC地址不对吧。。。。
发表于 2011-4-30 20:47:13 | 显示全部楼层
回复 wyliq 的帖子

BUILD_OPS       0x301
bootloaderVersion       1.4.0.4
ProductID       AR7WRD
HWRevision      Unknown
SerialNumber    none
MEMSZ           0x01000000
FLASHSZ         0x00800000
MODETTY0        9600,n,8,1,hw
MODETTY1        9600,n,8,1,hw
CPUFREQ         211968000
MIPSFREQ        211968000
SYSFREQ         105984000
PROMPT          (psbl)
mtd2            0x90000000,0x90010000
mtd3            0x90010000,0x90020000
HWA_RNDIS       00:E0:A6:66:41:E1
HWA_HRNDIs      00:E0:A6:66:41:E2
BOOTCFG         m:f:"mtd1"
MEMsZ           0x01000000
FLAsHsZ         0x00800000
DsL_BIT_TMODE   1
DsL_UPG_DONE    1
vcc_encaps0     0.0
vcc_encaps1     0.0
vcc_encaps2     0.0
vcc_encaps3     0.0
vcc_encaps4     0.0
vcc_encaps5     0.0
vcc_encaps6     0.0
vcc_encaps7     0.0
WLAN_EEPROM0    021156041B06001200000601095612000000010D56A9000000026D543D971906

WLAN_EEPROM1    73000000013984000100000101854C1068900105850600100001298507000000

WLAN_EEPROM2    01C1850000300001C585000000000111850000FFFF0115850000F0FF01A58500

WLAN_EEPROM3    8000000109850000800201010C03000000012184000000800181851D00030001

WLAN_EEPROM4    55090100000001E5580200000001F1580800000001D5581000000001B1580400

WLAN_EEPROM5    0000000000000000000C00C300FE0008011401260144014D014F0165019F01AF

WLAN_EEPROM6    01B70101390000110004010101000501060002010201021E000A000205020411

WLAN_EEPROM7    2244030610203031324004095449204143583130300507544920546573740108

WLAN_EEPROM9    4000145A1600020E0801E9000A01BA026400BB0176095000EF000A01D1026400

WLAN_EEPROM10   A10176090107100000400000010000050400010100000000FFFFFFFFFDFDFDFD

WLAN_EEPROM11   FBF4F4F4F40E0409090909090909090909090909090909090909090909090909

WLAN_EEPROM12   090909090909090909090909090909090909090909090909090909090909090E

WLAN_EEPROM13   0100000000000000000000000000000302A318A3180700012000000000000000

WLAN_EEPROM14   00000000000000000000000000000000000000000000000000
HWA_0           00:74:04:E6:57:7F
HWA_2           00:74:04:E6:57:80
HWA_3           00:74:04:E6:57:80
WLAN_HWADDR     00:74:04:E6:57:81
WLAN_EEPROM8    171F1711075901FC0502000037006F00A800E4000404441011004510DF03185A

Max_MACs        0
Route_Enabled   1
vlynq_polarity  low
cron_enable     1
mtd4            0x90020000,0x90400000
mtd5            0x90042000,0x90800000
DSL_BIT_TMODE   1
DSL_UPG_DONE    1
IPA             192.168.1.1
mac_ap          00:74:04:E6:57:82
configid        1
configed        13
mtd1            0x90020090,0x900a1000
mtd0            0x900a1000,0x90400000
MAC_PORT        0
NVS_TFTP_LOAD   1
发表于 2011-4-30 20:48:14 | 显示全部楼层
Booting...
Launching kernel LZMA decompressor.
Kernel decompressor was successful ... launching kernel.

LINUX started...
Config serial console: ttyS0,9600
Auto Detection OHIO chip
This SOC has MDIX cababilities on chip.
WLAN 1350 chip configured.
vlynq_polarity = low
Success in setting up the VLYNQ.
CPU revision is: 00018448
Primary instruction cache 16kb, linesize 16 bytes (4 ways)
Primary data cache 8kb, linesize 16 bytes (4 ways)
Number of TLB entries 16.
Linux version 2.4.17_mvl21-malta-mips_fp_le (developers at RouterTech dot Org) #
162 Mon Jan 3 01:50:03 GMT 2011
Determined physical RAM map:
memory: 14000000 @ 00000000 (reserved)
memory: 00020000 @ 14000000 (ROM data)
memory: 00fe0000 @ 14020000 (usable)
On node 0 totalpages: 4096
zone(0): 4096 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line:
calculating r4koff... 00102c00(1059840)
CPU frequency 211.97 MHz
Calibrating delay loop... 211.35 BogoMIPS
Freeing Adam2 reserved memory [0x14001000,0x0001f000]
Memory: 14108k/16384k available (1726k kernel code, 2276k reserved, 111k data, 6
4k init)
Dentry-cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode-cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
TI Optimizations: Allocating TI-Cached Memory Pool.
Warning: Number of buffers is not configured.Setting default to 120
Using 120 Buffers for TI-Cached Memory Pool.
DEBUG: Using Hybrid Mode.
NSP Optimizations: Succesfully allocated TI-Cached Memory Pool.
Initializing RT netlink socket
DEBUG: Starting ksoftirqd with ALWAYS_SOFTIRQ:0x3 NON ALWAYS SOFTIRQ:0xfffffffc.

DEBUG: Starting ksoftirqd with priority:0 policy:0 nice:19.
Starting kswapd
Disabling the Out Of Memory Killer
devfs: v1.7 (20011216) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.1 (2006/08/19) Phillip Lougher, lzma support by McMCC
pty: 32 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xa8610e00 (irq = 15) is a 16550A
Installed misc driver vlynq0: it handles vlynq bridge0 with 1 hop(s).
block: 64 slots per queue, batch=16
Initializing the TI QoS NSP Framework.
DEBUG: Initializing the Network Queue Manager Algorithms.
DEBUG: Initialization of the Translation Unit.
DEBUG: Initializing the LOCAL High Priority Database Module.
DEBUG: Initialization of the LOCAL High Priority Database Module successful..
Succesfully Initialized the TI QoS NSP Framework.
loop: loaded (max 8 devices)
Error getting CPMAC Configuration params for instance:0
Environment Variable:MACCFG_A not set in bootloader
Setting Default configuration params for CPMAC instance:0

MAC CFG : Tx Interrupts off , threshold : 20
Default Asymmetric MTU for eth0 1500
TI CPMAC Linux DDA version 1.9 - CPMAC DDC version 0.3
Cpmac: Installed 1 instances.
Cpmac driver is allocating buffer memory at init time.
PPP generic driver version 2.4.1
avalanche flash device: 0x400000 at 0x10000000.
Amd/Fujitsu Extended Query Table v1.3 at 0x0040
AMD/Spansion chip; checking for errata; Original Chip_ID=0x007E
AMD/Spansion chip; finished checking for errata; Revised Chip_ID=0x1000
RouterTech: AMD/Spansion chip; good chip with no errata; Restored Chip_ID=0x007E

Flash type: AMD; Manufacturer=AMD.
Manufacturer_ID=0x0001; Chip_ID=0x007E; Chip_Size=0x800000; Erase_Regions=0x0002

The Chief's FLASH extensions (www.RouterTech.Org): code loaded.
number of CFI chips: 1
Avalanche: No single image format found. Using mtd env variables
Looking for mtd device :mtd0:
Avalanche: Adding a mtd0 image (0xa1000), with size (0x35f000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x000a1000-0x00400000 : "mtd0"
mtd: partition "mtd0" doesn't start on an erase block boundary -- force read-onl
y
Avalanche:      linking partition mtd0: mtd0 -> ../../mtdblock/0
Looking for mtd device :mtd1:
Avalanche: Adding a mtd1 image (0x20090), with size (0x80f70).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00020090-0x000a1000 : "mtd1"
mtd: partition "mtd1" doesn't start on an erase block boundary -- force read-onl
y
Avalanche:      linking partition mtd1: mtd1 -> ../../mtdblock/1
Looking for mtd device :mtd2:
Avalanche: Adding a mtd2 image (0x0), with size (0x10000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00000000-0x00010000 : "mtd2"
Avalanche:      linking partition mtd2: mtd2 -> ../../mtdblock/2
Looking for mtd device :mtd3:
Avalanche: Adding a mtd3 image (0x10000), with size (0x10000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00010000-0x00020000 : "mtd3"
Avalanche:      linking partition mtd3: mtd3 -> ../../mtdblock/3
Looking for mtd device :mtd4:
Avalanche: Adding a mtd4 image (0x20000), with size (0x3e0000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00020000-0x00400000 : "mtd4"
Avalanche:      linking partition mtd4: mtd4 -> ../../mtdblock/4
Looking for mtd device :mtd5:
Looking for mtd device :mtd6:
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 1024)
GRE over IPv4 tunneling driver
Default Asymmetric MTU for gre0 1476
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.0 (512 buckets, 4096 max) - 400 bytes per conntrack
ip_conntrack_pptp version 1.9 loaded
ip_nat_pptp version 1.5 loaded
ip_tables: (C) 2000-2002 Netfilter core team
netfilter PSD loaded - (c) astaro AG
ipt_account 0.1.6 : Piotr Gasid硂 <quaker@barbara.eu.org>, http://www.barbara.eu
.org/~quaker/ipt_account/
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
Initializing the WAN Bridge.
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 64k freed
Algorithmics/MIPS FPU Emulator v1.5
Mon Jan  3 01:54:00 UTC 2011
ledcfg: reading Standard Configuration File /etc/led.conf
ledcfg: configured 19 states
registered device TI Avalanche SAR
Ohio250(7200/7100A2) detected
DSP binary filesize = 374282 bytes
tn7dsl_init : env var DSL_BIT_TMODE is set
ERROR DSL: Unable to register with LED module
Texas Instruments ATM driver: version:[7.01.00.10]
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
resolver: configuration tree:
Jan  3 01:54:16 cfgmgr(sar):  Could not get oam_ping_interval from boot loader e
nv
Jan  3 01:54:16 cfgmgr(sar):  Trying to retreive the value from Configuration
Jan  3 01:54:16 cfgmgr(sar): oamPingInterval(20)(20)
Jan  3 01:54:16 cfgmgr(ap): AP Acquiring Lock
PVC dB
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
Jan  3 01:54:16 cfgmgr(pppoa-109): Valid Configuration Tree
PVC dB
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
vpi = -1 vci = -1 in_use = 0
Doing BRCTL ...
addbr br0
Doing BRCTL ...
addbr br1
Doing BRCTL ...
adDefault Asymmetric MTU for br0 1500
dbr br2
Doing BRCTL ...
addbr br3

Please press Enter to activate this console. Jan  3 01:54:17 cfgmgr(resolver): s
tat successfull for /etc/resolv.conf.
Jan  3 01:54:17 cfgmgr(resolver): Resolver Polling Timer Started succesfully.
Jan  3 01:54:17 cfgmgr(sntp): NTP Polling Timer for DHCP Started succesfully.
Jan  3 01:54:17 cfgmgr(sar): DSL Polling Timer Started succesfully.
Jan  3 01:54:17 cfgmgr(fdb): Firewall NAT service started
Jan  3 01:54:17 cfgmgr(ap): AP REPORT LOCK ACQUIRED
Jan Default Asymmetric MTU for br1 1500
3 01:54:17 cfgmgr(ap): wlan_handle_load_event - Acquired Lock
Jan  3 01:54:17 cfgmgr(ap): MAC address is : 00:74:04:e6:57:81
Default Asymmetric MTU for br2 1500
Default Asymmetric MTU for br3 1500
root: USB is disabled

Jan  3 01:54:19 cfgmgr(ap): WPA Authenticator Started
Jan  3 01:54:19 cfgmgr(lanbridge0): Bridge Created: br0
Bridge Multicasting for br0 is now Enabled.
Doing BRCTL ...
addif br0 eth0
Jan  3 01:54:21 cfgmgr(lanbridge1): Bridge Created: br1
Bridge Multicasting for br1 is now Enabled.
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
Jan  3 01:54:23 cfgmgr(lanbridge2): Bridge Created: br2
Bridge Multicasting for br2 is now Enabled.
Default Asymmetric MTU for wlan0 1500
Default Asymmetric MTU for wdsup0 1500
Default Asymmetric MTU for wdsdw0 1500
Default Asymmetric MTU for wdsdw1 1500
Default Asymmetric MTU for wdsdw2 1500
Default Asymmetric MTU for wdsdw3 1500
Jan  3 01:54:24 cfgmgr(lanbridge3): Bridge Created: br3
Bridge Multicasting for br3 is now Enabled.
Doing BRCTL ...
stp br0 off
Jan  3 01:54:26 cfgmgr(lanbridgbr0: port 1(eth0) entering forwarding state
e0): Bridge Intebr0: topology change detectedrface Added: eth, propagating0

Doing BRCTL ...
stp br1 off
Jan  3 01:54:28 initTnetwAddr: MemAddr=0xa4000000, RegAddr=0xa4080000
cfgmgr(ap): EEPROM len 473
Jan  3 01:54:28 cfgmgr(ap): ERROR: DIE ID Mismatch eeprom ID: fc015907 11171f17
TNETW ID: b80158d1 820d0a24
Jan  3 01:54:28 cfgmgr(ap): ERROR: Validate EEPROM Imdda: starting cleanup:
age failed
Jandda: cleanup finish succesfully, good-bye.
  3 01:54:28 cfgmgr(ap): Error: Failed to get a valid EEPROM Image. AP is DOWN
Jan  3 01:54:28 cfgmgr(ap): NVS_TFTP_LOAD is enabled to download the correct EEP
ROM image                             during next boot.
    Set TFTP Server Address using IPA_SVR env variable
Jan  3 01:54:28 cfgmgr(ap): Setting bootloader env NVS_TFTP_LOAD to 1
Jan  3 01:54:28 cfgmgr(ap): AP Releasing Lock
Doing BRCTL ...
stp br2 off
Doing BRCTL ...
stp br3 off
Jan  3 01:54:28 root: USB is disabled
Jan  3 01:54:28 cfgmgr(sar): DSL Carrier is down
Jan  3 01:54:28 cfgmgr(pppoa-109): del_iptable_rules : ppp_name not intact



BusyBox v1.18.1 (2011-01-03 01:52:40 GMT) built-in shell (ash)
Enter 'help' for a list of built-in commands.
 楼主| 发表于 2011-5-1 00:50:02 | 显示全部楼层
回复 ndir511 的帖子

是就容易了,在system里面的run command里面输入如下两条命令,应该就可以搞定
unsetenv WLAN_EEPROM8
setenv WLAN_EEPROM8 240A0D82D15801B80502000036006D00A600E5000404441016004510F903185A
 楼主| 发表于 2011-5-1 00:51:16 | 显示全部楼层
注意命令之间只能是半角空格,直接复制要删除多余的空格
 楼主| 发表于 2011-5-1 00:56:54 | 显示全部楼层
本帖最后由 wyliq 于 2011-5-1 01:04 编辑

是TNETW ID不同,导致ROM存放的地址不同,MAC地址是放在WLAN_EEPROM0的最后到WLAN_EEPROM1的开头的,不改也没关系,后面还有WLAN_HWADDR     00:74:04:E6:57:81来修改
*滑块验证:
您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|小黑屋|宽带技术网 |网站地图

粤公网安备 44152102000001号

GMT+8, 2024-5-9 05:30 , Processed in 0.024311 second(s), 3 queries , Redis On.

Powered by Discuz! X3.5 Licensed

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表