最近学习OPENWRT,潜水恩山和无线等论坛N久,论坛和博客的各种教程也看了无数,可华为HG522-C刷OPENWRT的资料还是不太全面,虽然HG522BBA VER.A都说可刷,但不少帖子和教程对闪存型号 有要求,都说S29闪存的好刷,AM29闪存有不少帖子说是换闪存,如此帖“华为HG522-C成功用编程器刷入rg100a-aa的CFE后()”。可我对自己的焊工没信心这样的事干不好,去救人换又不划算,本来刷此猫是本着学习和研究着的。所以我这次刷机可是费了不少周折,从今天中午开始搞到晚上快二十一点才真正测试好收工。其间由于配置VLAN错误造成有线无线都不通只能再次在CFE状态刷机N多次。对OPENWRT刷机有兴趣的朋友请看我慢慢道来,高手们请绕道不要见笑哈。
一、找到HG522C的RX、TX、地线,用TTL连接线及COM转USB线两次转换接到电脑
拆开HG522C还不错,RX、TX、地、VCC针都在板子上留着了不用再焊,不知华为后出的猫有这好不?原来刷中九的TTL线还有两根,均是自制的,一根是标准的COM线,另一根当时加了CD4069按有关电路制作,好像我也在这儿发过帖子现在一时找不到。RX、TX及地线位置网上有不少图片介绍,但我也发现图片标的RX、TX不同的人刚好相反,这个不要紧,只要地线没错,RX、TX错了终端连接时会没输出的,交换下就行,刷中九的经验吧。这个猫原来在这儿发过拆机图,见:http://bbs.mydigit.cn/read.php?tid=524691,为了看帖方便,我就移几张关键的图片过来不算重复吧。
接好两线后电脑上要安装COM转USB线的驱动,一般购买时会有相应的驱动,我现在用笔记本安装的WIN7 X64位,也造成今天开始问题多多,连个终端半天都没搞定。
终端连接乱码问题:开始用超级终端(WIN7本身没带自己下载去)或SecureCRTSecureFX_HH_x64_7.0.0.326的serial连接,很快确定了RX、TX及地的位置如上图所示,但终端显示全是乱码根本看不了,这可怎么办?万能的百度帮了我,可能是TTL线的原因所致。开始用的是标准的COM线,那就换我用CD4069自制TTL线连接,果然正常无乱码了。有关终端连接及TTL连接如下图片所示
连接成功后启动时,终端下的显示内容如下:
CFE version 1.0.37-102.6 for BCM96358 (32bit,SP,BE)
Build Date: Thu Jul 23 21:57:04 CST 2009 (root@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Parallel flash device: name AM29LV320MT, id 0x2201, size 16384KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)
Boot Address 0xbe000000
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host (f/h) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 3
Boot image (0=latest, 1=previous) : 0
Board Id (0-6) : HG522_B
Number of MAC Addresses (1-32) : 11
Base MAC Address : 02:10:18:01:00:01
PSI Size (1-64) KBytes : 0
Main Thread Number [0|1] : 0
*** Press any key to stop auto run (3 seconds) ***
Auto run second count down: 0
Support Double system.
Flash boot Flag:
Boot from main system!
Decompression OK!
Entry at 0x80269018
Closing network.
Closing DMA Channels.
Starting program at 0x80269018
Linux version 2.6.8.1 (root@localhost.localdomain) (gcc version 3.4.2) #130 Thu Jul 23 21:55:51 CST 2009
Flash 0 at 0xbe000000
Size : 16 MB
Regions : 1
0 : 0x00000000 - 0x00020000 * 128
CHIP96358 prom init
CPU revision is: 0002a010
Determined physical RAM map:
memory: 01fa0000 @ 00000000 (usable)
On node 0 totalpages: 8096
DMA zone: 4096 pages, LIFO batch:1
Normal zone: 4000 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd
Bootting from Main System.
brcm mips: enabling icache and dcache...
Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 16kB 2-way, linesize 16 bytes.
PID hash table entries: 128 (order 7: 1024 bytes)
Using 150.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Allocating memory for DSP module core and initialization code
Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0
Memory: 29348k/32384k available (1893k kernel code, 2992k reserved, 506k data, 76k init, 0k highmem)
Calibrating delay loop... 299.82 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction... unavailable.
NET: Registered protocol family 16
Can't analyze prologue code at 801e7c54
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
Initializing Cryptographic API
PPP generic driver version 2.4.2
NET: Registered protocol family 24
IMQ starting with 2 devices...
IMQ driver loaded successfully.
Hooking IMQ before NAT on PREROUTING.
Hooking IMQ after NAT on POSTROUTING.
netconsole: not configured, aborting
Using noop io scheduler
atp_mtd driver v1.0
Atp Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
Atp Physically mapped flash: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
l63336:Init Partition drivers/mtd_02/maps/atpbcm963xx-flash.c 101
0 block: 0x00020100 ---0x00452000
1 block: 0x005a0000 ---0x00080000
2 block: 0x00620000 ---0x00400000
3 block: 0x00a20100 ---0x00452000
drivers/mtd_02/maps/atpbcm963xx-flash.c 119 i=4
Creating 4 MTD partitions on "Atp Physically mapped flash":
0x00020100-0x00472100 : "mainlinux"
mtd: partition "mainlinux" doesn't start on an erase block boundary -- force read-only
0x005a0000-0x00620000 : "defaultcfg"
0x00620000-0x00a20000 : "middware"
0x00a20100-0x00e72100 : "slavelinux"
mtd: partition "slavelinux" doesn't start on an erase block boundary -- force read-only
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: EHCI Host Controller
PCI: Setting latency timer of device 0000:00:0a.0 to 64
ehci_hcd 0000:00:0a.0: irq 18, pci mem c0050300
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
PCI: cache line size of 32 is not supported by device 0000:00:0a.0
ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI)
ohci_hcd: block sizes: ed 64 td 64
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: OHCI Host Controller
PCI: Setting latency timer of device 0000:00:09.0 to 64
ohci_hcd 0000:00:09.0: irq 13, pci mem c0052400
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new driver usblp
drivers/usb_02/class/usblp.c: v0.13: USB Printer Device Class driver
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
drivers/usb_02/serial/usb-serial.c: USB Serial support registered for Generic
usbcore: registered new driver usbserial_generic
usbcore: registered new driver usbserial
drivers/usb_02/serial/usb-serial.c: USB Serial Driver core v2.0
bhal: bhal_init entry
** support LED GPIO mode. **
SES: Button GPIO 0x8023 is enabled
SES: LED GPIO 0x8023 is enabled
bcm963xx_serial driver v2.0
u32 classifier
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 76k freed
init started: BusyBox v1.9.1 (2009-07-23 21:56:18 CST)
starting pid 71, tty '': '/etc/init.d/rcS'
Algorithmics/MIPS FPU Emulator v1.5
RCS DONE
starting pid 131, tty '': '/bin/sh'
BusyBox v1.9.1 (2009-07-23 21:56:18 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
-/bin/sh: can't access tty; job control turned off
Loading drivers and kernel modules...
atmapi: module license 'Proprietary' taints kernel.
blaadd: blaa_detect entry
adsl: adsl_init entry
Broadcom BCM6358A1 Ethernet Network Device v0.3 Jul 23 2009 21:55:01
Config Ethernet Switch Through MDIO Pseudo PHY Interface
eth0: MAC Address: 00:25:68:5B:7E:21
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
wl: srom not detected, using main memory mapped srom info (wombo board)
wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000
wl0: MAC Address: 00:25:68:5B:7E:22
wl0: Broadcom BCM4318 802.11 Wireless Controller 4.150.10.15.cpe2.2
fuse init (API version 7.8)
fuse distribution version: 2.7.3
Daemon: 251
Waiting for cli start!| enter the msg
===enter the log
/TSP_DBGetPara ok ulPort = 23
\
============Start vendor config deal.============
CWMP app version: V100R002C05B018 cwmp app V1.2.3.0.0
CWMP stk version: V100R002C05B018 cwmp stk V1.2.3.0.0
bootok
Welcome Visiting Huawei Home Gateway
Copyright by Huawei Technologies Co., Ltd.
Login:ConfigDefaultSsl return: 0
atmapi: prioritize receive packets
ATM proc init !!!
atmcmd:atmcmd available
pin_string= PIN=0
accum=0
stop wsc iWsc = 0 iLltd = 0 wps_btn = 0
WIRELESS is off
port_no -1 not surported, br:br0, port:wl0
device wl0 is not a slave of br0
port_no -1 not surported, br:br0, port:wl0.1
interface wl0.1 does not exist!
port_no -1 not surported, br:br0, port:wl0.2
interface wl0.2 does not exist!
port_no -1 not surported, br:br0, port:wl0.3
interface wl0.3 does not exist!
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCSIFHWADDR: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCSIFHWADDR: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCSIFHWADDR: No such device
wlancmd: wlan driver adapter not found
wlancmd: wlan driver adapter not found
wlancmd: wlan driver adapter not found
wlancmd: wlan driver adapter not found
set wlan assoc device is 32.
set wlan assoc device is 32.
set wlan assoc device is 32.
set wlan assoc device is 32.
WIRELESS is on
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
device wl0 entered promiscuous mode
br0: port 1(wl0) entering learning state
br0: topology change detected, propagating
br0: port 1(wl0) entering forwarding state
wlan wps enabled
wps pbc mode
FILE: midmsg.c, LINE: 703
now I don't init midcom, just boot tr069
cmd wps mode = client-pbc
wlan_wpswsc@4412 cfg_state=[1] wsc_mode=enabled
WlMngr::startWsc: client-pbc mode
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.0.5, November 19 2006
*********************************************
Created @ Apr 2 2008 18:07:39
Initializing stack...button monitor start...!
OK
Now starting stack
get mac = 00 25 68 5B 7E 22
Error, ETHCMD_ETHCONTROLPORT cannot enter ioctl
eth0.2: MAC Address: 00:25:68:5B:7E:21
eth0.3: MAC Address: 00:25:68:5B:7E:21
eth0.4: MAC Address: 00:25:68:5B:7E:21
eth0.5: MAC Address: 00:25:68:5B:7E:21
device eth0.2 entered promiscuous mode
device eth0.3 entered promiscuous mode
device eth0.4 entered promiscuous mode
device eth0.5 entered promiscuous mode
device eth0 is not a slave of br0
pvc2684d: Interface "nas_0_8_81" created sucessfully
br2684_attachvcc brvcc->vlan_id 10000, brvcc->vlan_id_wan fff
pvc2684d: Communicating over ATM 0.8.81, encapsulation: LLC
NO UPnP @Configed Mode
******* MODE: AP with built-in Registrar and UPnP Proxy *******
WSC: Build-in Registrar, wait for start command....
WSC: Build-in Registrar, wait for start command....
PPPC version: V100R002C05B020 pppc V1.2.3.0.2
atp: cur kernel version:[2.6.8.1]
ip_conntrack version 2.1 (125 buckets, 1000 max) - 352 bytes per conntrack
atp: Gre conn Register OK.
atp: Gre nat Register OK.
ip_conntrack_pptp version 2.1 loaded
atp: ip_conntrack_rtsp v0.01 loading
atp: ip_nat_rtsp v0.01 loading
DNS Server version: V100R002C05B019 dns server V1.2.5.0.1
g_ulMacFltEnable[1]
SNTP version: V100R002C05B020 sntp V1.2.3.0.0.
Current sntp process is 1107!
Dropbear sshd starting 2 /etc/handy_dss_key...
[1129] Jan 01 00:00:56 Running in background
blaa_dd: port mirroring config.
blaa_dd: port mirroring config.
Stop mirror atm package to eth0.5
Read upnp enable return: 1.
Start upnp now ...
===bUsbconf=1====!
temp=0==CfgFilePath=
LAN IP: 169.254.100.156
SSDP server socket OK!
ATP_UPnP_Start Now...!
[ 此帖被hfsp在2014-10-09 21:49重新编辑 ]