HG320 看来已变砖

lzy189

我的烽火HG320 看来真的变砖了.。

我在TT里升级时选错固件，刚点升按钮后5秒内关路由，重开路由时变成了电信的固件。现能进入电信设置页面，但只有两个选项且不全。


用TT线不能时系统。显示如下：
Decompressing...done

CFE version 5.60.120.9  based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 2011骞05鏈04鏃鏄熸湡涓15:32:36 CST (root@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
Found a 16MB ST compatible serial flash
[CFE][boot][ST Serial flash offset 00000000 size 128KB]
[CFE][trx][ST Serial flash offset 00020000 size 1KB]
[CFE][os][ST Serial flash offset 0002001C size 16224KB]
[CFE][nvram][ST Serial flash offset 00FF8000 size 32KB]
[CFE][boot][ST Serial flash offset 00000000 size 128KB]
[CFE][trx0][ST Serial flash offset 00020000 size 1KB]
[CFE][os0][ST Serial flash offset 0002001C size 8832KB]
[CFE][trx1][ST Serial flash offset 008C0000 size 1KB]
[CFE][os1][ST Serial flash offset 008C001C size 7392KB]
[CFE][nvram][ST Serial flash offset 00FF8000 size 32KB]
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.60.120.9
CPU type 0x19749: 500MHz
Tot mem: 65536 KBytes
CFE mem:    0x80700000 - 0x8079A7D0 (632784)
Data:       0x807306D0 - 0x80733850 (12672)
BSS:        0x80733850 - 0x807347D0 (3968)
Heap:       0x807347D0 - 0x807987D0 (409600)
Stack:      0x807987D0 - 0x8079A7D0 (8192)
Text:       0x80700000 - 0x807306C8 (198344)
Device eth0:  hwaddr 00-90-4C-21-60-01, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
cur=
buf=go;
Invalid boot block on disk
flash1.trx: Device not found
Big image is invalid !!
Boot from small image !!
Loader:raw Filesys:raw Dev:flash1.os1 File: Options:(null)
Loading: ..... 2256112 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.21.5 (root@localhost.localdomain) (gcc version 4.2.3) #30 Thu May 26 11:00:11 CST 2011
Found a 16MB ST compatible serial flash
Serial flash device: name SFLASH 16384 kB, id 0x0000 size 16384KB
prom init
CPU revision is: 00019749
######## NVRAM INFO ###########
backupPsi:0
wpsDevicePin:1234567
PsiSize:64
SyslogSize:48
ucAuxFSPercent:25
productClass:v1.0
wlSsid:Tomato24
wl_wpapsk:12345678
user_pass:1234
deviceId:0123456789
startFlag:0
factoryData:1
######## NVRAM INFO END ########
Total Flash size: 16384K with 256 sectors
Flash split 25 : AuxFS[4194304]
Blk# BlkOff Blks  MemLen Partition Name
255      0    1   32768 NVRAM
252      0    1   65536 Factory Data
   0      0    0   65536 Backup PSI
253      0    1   49152 Syslog
253  57344    1    8192 Scratch PAD
254      0    1   65536 PSI
188      0   64 4194304 JFFS_AUXFS
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
On node 0 totalpages: 16384
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 96 pages used for memmap
  Normal zone: 12192 pages, LIFO batch:1
Built 1 zonelists.  Total pages: 16256
Kernel command line: root=31:2 ro noinitrd console=ttyS0,115200
brcm mips: enabling icache and dcache...
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCM5357 rev 1 at 500 MHz
Using 250.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 61528k/65536k available (1772k kernel code, 3992k reserved, 323k data, 104k init, 0k highmem)
KLOB Pool 1 Initialized: 1048576 bytes <0x80c00000 ... 0x80d00000>
Calibrating delay loop... 498.68 BogoMIPS (lpj=249344)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
squashfs: version 3.4 (2008/08/26) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
NET: Registered protocol family 24
pflash: found no supported devices
cur_part=1, sAddr=9c020000, mAddr=9c8c0000
Found TRX Magic :0x31524448
sflash: squash filesystem with lzma found at block 9794
Creating 9 MTD partitions on "sflash":
0x00000000-0x008c0000 : "boot"
0x008c0000-0x00bc0000 : "linux"
0x00990900-0x00bc0000 : "rootfs"
0x00bc0000-0x00fc0000 : "auxfs"
0x00fc0000-0x00fd0000 : "log"
0x00fd0000-0x01000000 : "backpsi"
0x00fd0000-0x00fe0000 : "sp"
0x00fe0000-0x00ff0000 : "psi"
0x00ff0000-0x01000000 : "nvram"
brcmboard: brcm_board_init entry
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 104k freed
init started:  BusyBox v1.00 (2011.05.25-08:34+0000) multi-call binary
mount: Mounting sysfs o
BusyBox v1.00 (2011.05.25-08:34+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

Loading drivers and kernel modules...
mknod: not found
chmod: /var/fuse: No such file or directory
bcmprocfs: module license 'Proprietary' taints kernel.
Broadcom BCMPROCFS v1.0 initialized
PCI: Setting latency timer of device 0000:00:02.0 to 64
bcmsw: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.60.120.9
eth0: MAC Address: 00:90:4C:21:60:01
eth1: MAC Address: 00:90:4C:21:60:01
eth2: MAC Address: 00:90:4C:21:60:01
eth3: MAC Address: 00:90:4C:21:60:01
eth4: MAC Address: 00:90:4C:21:60:01
===== Release Version 4.02L.03.wp1 (build timestamp 110526_1100) =====
eth4 Link UP 100 mbps full duplex
######### Load /etc/factory.cfg #########
ip_tables: (C) 2000-2006 Netfilter Core Team
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
device eth1 is not a slave of br0
device eth1 entered promiscuous mode
br0: port 1(eth1) entering learning state
br0: topology change detected, propagating
br0: port 1(eth1) entering forwarding state
device eth2 is not a slave of br0
device eth2 entered promiscuous mode
br0: port 2(eth2) entering learning state
br0: topology change detected, propagating
br0: port 2(eth2) entering forwarding state
device eth3 is not a slave of br0
device eth3 entered promiscuous mode
br0: port 3(eth3) entering learning state
br0: topology change detected, propagating
br0: port 3(eth3) entering forwarding state
device eth4 is not a slave of br0
device eth4 entered promiscuous mode
br0: port 4(eth4) entering learning state
br0: topology change detected, propagating
br0: port 4(eth4) entering forwarding state
br0: port 1(eth1) entering disabled state
br0: port 2(eth2) entering disabled state
br0: port 3(eth3) entering disabled state
Read Saved Download Info :
-------------------------
URL      =
User     =
Pwd      =
ssk:error:7.758:mdm_validateParamNodeString:4771:param name=X_BROADCOM_COM_VlanMuxID, error=9007

lzy189

在TT窗口中回车后如下，怎么办？

BCM95357 xDSL Router
Login:
Password:
Login incorrect. Try again.
Login:
Password:
Login incorrect. Try again.
Login:

TMDOK

没事 TFTP继续刷DD试试  比我的情况要好


顺便搭车求助:

在对比了HG320原版的CFE后 发现et0macaddr和macaddr都多了2位数字即3个字节(如et0macaddr=00:90:4c:01:60:01:57)于是学着改成了自己的  刷了后还是能继续如常进入界面 但是MAC却不对我改的MAC地址(结果发现界面的MAC还是不是我的机器本身的MAC地址)

为了掌握换改成自己机器的MAC的换算技巧,于是就随便换成了打包的CFE上面的地址了(et0macaddr=11:11:11:11:11:11:00  macaddr=22:22:22:22:22:22:11  目的是为了好根据结果计算差值
结果就这样了  接网线连电脑还是通的灯能亮能闪  就是无法获取IP地址   连无线也一样能看到我需要的DD-WRT路由器的MAC地址 无线连接也一样无法获取IP地址和网关 第一次改的时候还是可以无线连接到路由器获取到IP和网关进入的.接着刷et0macaddr=11:11:11:11:11:11:00  macaddr=22:22:22:22:22:22:11的CFE  就进入不了了.通过路由器上电 灯的全亮到灭到亮再灭 语音灯亮 无线灯再亮  语音灯灭 最后无线灯一直亮 一系列过程我知道路由器在工作 无线搜寻也能找到这个路由器 就是无法登陆连接上 (原来用另一台刷TTDW或DD能连上 改刷成上面的CFE后就不行连不上了)

改刷换成et0macaddr=11:11:11:11:11:11:00  macaddr=22:22:22:22:22:22:11的CFE (而且只改了这两处MAC) 不知还有没有办法连通 初步判定或许是无线mac和et0无法进行连接导致的

lzy189

现在用在TT到这里就不知该怎么做了，可输入用户名，但密码不能输入。
BCM95357 xDSL Router
Login:
Password:

现在不能刷机了。怎么办？

chmjiong

能够进电信的隐藏升级界面么？？？能进的话直接进去刷回电信原版

lzy189

chmjiong 发表于 2012-8-4 09:21
能够进电信的隐藏升级界面么？？？能进的话直接进去刷回电信原版

不能进入到电信升级界面, 现在在电信设置界面只有两个选项, 但这两个选里还有其他选项都没有了,现在用TTL线刷机也不行, 或者说我不会, 就是到登陆系统时密码不能输出入, 就是出现如下英文:

Login:
Password:

Password:  现这里不能输入密码.

lin24

Login:这是输入用户名.有显示
Password:这输入密码.没有显示的输入正确回车就行
都刷了电信的固件.你可以复位看看.或换个浏览器试试.有时在IE不行在FF下可以.

stoney

lzy189 发表于 2012-8-4 09:11
现在用在TT到这里就不知该怎么做了，可输入用户名，但密码不能输入。
BCM95357 xDSL Router
Login:

320有jtag针脚的，自己焊，然后换sady的cfe。带miniweb，就是刷不死的，mac的地址没改过，据我所知mac地址是在cfe里固化的，也就是说你要把整个cfe format后在刷该mac的cfe才有效的。具体怎么改没试过，但不难，只要改一个就行，后面的会cfe自己加一位的，一个是eth0 一个是wan 一个是wlan，所以说你如果ttl要改mac地址不太可行，刷cfe也可以再dd-wrt下替换的，也可以用jtag线刷。
你在ttl可以输密码，可以看见，密码也可以输，是不可见，如果密码对回车就可以了！

YES东

https://www.chinadsl.net/thread-74888-1-1.html

lzy189

stoney 发表于 2012-8-4 10:01
320有jtag针脚的，自己焊，然后换sady的cfe。带miniweb，就是刷不死的，mac的地址没改过，据我所知mac地址 ...

jtag不会，不知道这针脚的位置在哪，现在是没撒了，准备放弃了。