|
|
本帖最后由 hwj180 于 2017-2-5 15:15 编辑
目前的情况是两个分区都是openwrt,都起不来，所以断电三次回原厂的固件方法行不通了，另外30 30 30大法也试了，行不通，于是自己买了个2303USB转TTL接口，接到路由器J5的3,5,6脚上（靠近灯的为1号脚），用PUTTY或者SECURCRT,或者Hyper terminal下都试过了，能完整显示启动时的信息没有乱码，但是按CTRL+C，TPL都中断不了，试过好几天了，用串口调试工具试过，USB转TTL收发没有问题，估计是UBOOT的中断热键不是这两种，或者按的时机不对，但是我一直按着的，请老鸟们指教。输出信息如下：
| \/ | __ _ _ ____ _____| | |
| |\/| |/ _` | '__\ \ / / _ \ | |
| | | | (_| | | \ V / __/ | |
|_| |_|\__,_|_| \_/ \___|_|_|
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|
** WNC BOARD: Viper R2.2 LE **
** For Development Only. Not For Demo **
U-Boot 1.1.4 (Sep 15 2011 - 15:46:36) Marvell version: 3.5.9
U-Boot code: 00600000 -> 0067FFF0 BSS: -> 006CFB20
Soc: 88F6282 A1CPU running @ 1200Mhz L2 running @ 400Mhz
SysClock = 400Mhz , TClock = 200Mhz
DRAM (DDR2) CAS Latency = 6 tRP = 6 tRAS = 18 tRCD=6
DRAM CS[0] base 0x00000000 size 128MB
DRAM Total size 128MB 16bit width
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done
NAND:128 MB
Updating boot_count ... done
Flash: 0 kB
CPU : Marvell Feroceon (Rev 1)
u_env Offset: 00080000
s_env Offset: 000a0000
Streaming disabled
Write allocate disabled
Module 0 is RGMII
USB 0: host mode
PEX 0: PCI Express Root Complex Interface
PEX interface detected Link X1
PEX 1: PCI Express Root Complex Interface
PEX interface detected Link X1
Net: egiga0 [PRIME], egiga1
Hit any key to stop autoboot: 0
NAND read: device 0 offset 0x200000, size 0x300000
Reading data from 0x4ff800 -- 100% complete.
3145728 bytes read: OK
## Booting image at 02000000 ...
Image Name: ARM OpenWrt Linux-4.4.14
Created: 2016-11-30 20:20:37 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1933696 Bytes = 1.8 MB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
OK
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 4.4.14 (openwrt@ecf51e8165e4) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 50015) ) #1 Tue Dec 6 03:04:29 UTC 2016
[ 0.000000] CPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=0005397f
[ 0.000000] CPU: VIVT data cache, VIVT instruction cache
[ 0.000000] Machine model: Linksys E4200v2 / EA4500
[ 0.000000] Memory policy: Data cache writeback
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: console=ttyS0,115200 mtdparts=nand_mtd:512k(uboot)ro,128k@512k(u_env),128k@640k(s_env),26m@2m(kernel),26m@2m(rootfs)fs,26m@28m(alt_kernel),26m@28m(alt_rootfs)fs,74m@54m(syscfg) root=/dev/mtdblock4 ro rootfstype=jffs2 serial_number=12A10602239293 uuid=6A03D92CF57446224AA04A09CBC9C4CA hw_version=RGWM-C4_0GA device_mac=20:AA:4B:6E:5F:13 factory_date=2012/02/20 wps_pin=66042198
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Memory: 123892K/131072K available (3970K kernel code, 136K rwdata, 1456K rodata, 164K init, 198K bss, 7180K reserved, 0K cma-reserved)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
[ 0.000000] vmalloc : 0xc8800000 - 0xff800000 ( 880 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xc8000000 ( 128 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0554dc4 (5428 kB)
[ 0.000000] .init : 0xc0555000 - 0xc057e000 ( 164 kB)
[ 0.000000] .data : 0xc057e000 - 0xc05a0184 ( 137 kB)
[ 0.000000] .bss : 0xc05a0184 - 0xc05d1ca8 ( 199 kB)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] clocksource: orion_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns
[ 0.000008] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns
[ 0.000081] Calibrating delay loop... 1196.85 BogoMIPS (lpj=5984256)
[ 0.090081] pid_max: default: 32768 minimum: 301
[ 0.090184] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.090203] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.090695] CPU: Testing write buffer coherency: ok
[ 0.091024] Setting up static identity map for 0x81e0 - 0x821c
[ 0.091295] mvebu-soc-id: MVEBU SoC ID=0x6282, Rev=0x1
[ 0.096158] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.096326] pinctrl core: initialized pinctrl subsystem
[ 0.097447] NET: Registered protocol family 16
[ 0.097885] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.098739] cpuidle: using governor ladder
[ 0.099161] Feroceon L2: Enabling L2
[ 0.099203] Feroceon L2: Cache support initialised.
[ 0.099470] [Firmware Info]: /ocp@f1000000/ethernet-controller@72000/ethernet0-port@0: local-mac-address is not set
[ 0.099565] [Firmware Info]: /ocp@f1000000/ethernet-controller@76000/ethernet1-port@0: local-mac-address is not set
[ 0.115751] SCSI subsystem initialized
[ 0.116080] usbcore: registered new interface driver usbfs
[ 0.116165] usbcore: registered new interface driver hub
[ 0.116226] usbcore: registered new device driver usb
[ 0.117246] clocksource: Switched to clocksource orion_clocksource
[ 0.118212] NET: Registered protocol family 2
[ 0.118800] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.118824] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.118843] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.118896] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.118921] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.119071] NET: Registered protocol family 1
[ 0.119971] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.134919] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.134940] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.137292] io scheduler noop registered
[ 0.137312] io scheduler deadline registered (default)
[ 0.138482] kirkwood-pinctrl f1010000.pin-controller: registered pinctrl driver
[ 0.139059] irq: Cannot allocate irq_descs @ IRQ31, assuming pre-allocated
[ 0.139408] irq: Cannot allocate irq_descs @ IRQ63, assuming pre-allocated
[ 0.140029] mvebu-pcie mbus:pcie-controller: PCI host bridge to bus 0000:00
[ 0.140048] pci_bus 0000:00: root bus resource [io 0x1000-0xfffff]
[ 0.140060] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xefffffff]
[ 0.140072] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.140575] PCI: bus0: Fast back to back transfers disabled
[ 0.140590] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 0.140605] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 0.141100] PCI: bus1: Fast back to back transfers disabled
[ 0.141610] PCI: bus2: Fast back to back transfers disabled
[ 0.141735] pci 0000:00:01.0: BAR 8: assigned [mem 0xe0000000-0xe00fffff]
[ 0.141752] pci 0000:00:02.0: BAR 8: assigned [mem 0xe0100000-0xe01fffff]
[ 0.141769] pci 0000:01:00.0: BAR 0: assigned [mem 0xe0000000-0xe000ffff 64bit]
[ 0.141793] pci 0000:01:00.0: BAR 2: assigned [mem 0xe0010000-0xe001ffff 64bit]
[ 0.141813] pci 0000:00:01.0: PCI bridge to [bus 01]
[ 0.141826] pci 0000:00:01.0: bridge window [mem 0xe0000000-0xe00fffff]
[ 0.141844] pci 0000:02:00.0: BAR 0: assigned [mem 0xe0100000-0xe010ffff 64bit]
[ 0.141866] pci 0000:02:00.0: BAR 2: assigned [mem 0xe0110000-0xe011ffff 64bit]
[ 0.141886] pci 0000:00:02.0: PCI bridge to [bus 02]
[ 0.141898] pci 0000:00:02.0: bridge window [mem 0xe0100000-0xe01fffff]
[ 0.173139] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.175981] console [ttyS0] disabled
[ 0.176056] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 25, base_baud = 12500000) is a 16550A
[ 0.778130] console [ttyS0] enabled
[ 0.783019] nand: device found, Manufacturer ID: 0xad, Chip ID: 0xf1
[ 0.789434] nand: Hynix H27U1G8F2BTR-BC
[ 0.793294] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.800920] Scanning device for bad blocks
[ 0.871277] mtd: bad character after partition (f)
[ 0.876113] 8 ofpart partitions found on MTD device orion_nand
[ 0.881990] Creating 8 MTD partitions on "orion_nand":
[ 0.887159] 0x000000000000-0x000000080000 : "u-boot"
[ 0.893772] 0x000000080000-0x0000000a0000 : "u_env"
[ 0.899787] 0x0000000a0000-0x0000000c0000 : "s_env"
[ 0.905740] 0x000000200000-0x000001c00000 : "kernel1"
[ 0.911952] 0x0000004a0000-0x000001c00000 : "ubi"
[ 0.917823] 0x000001c00000-0x000003600000 : "kernel2"
[ 0.924024] 0x000001ea0000-0x000003600000 : "rootfs2"
[ 0.930268] 0x000003600000-0x000008000000 : "syscfg"
[ 0.936964] libphy: orion_mdio_bus: probed
[ 0.941261] mv643xx_eth: MV-643xx 10/100/1000 ethernet driver version 1.4
[ 0.949367] mv643xx_eth_port mv643xx_eth_port.0 eth0: port 0 with MAC address 20:aa:4b:6e:5f:13
[ 0.958704] mv643xx_eth_port mv643xx_eth_port.1 eth1: port 0 with MAC address 20:aa:4b:6e:5f:14
[ 0.967514] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 0.974079] ehci-pci: EHCI PCI platform driver
[ 0.978632] ehci-platform: EHCI generic platform driver
[ 0.984015] ehci-orion: EHCI orion driver
[ 0.988209] orion-ehci f1050000.ehci: EHCI Host Controller
[ 0.993746] orion-ehci f1050000.ehci: new USB bus registered, assigned bus number 1
[ 1.001578] orion-ehci f1050000.ehci: irq 29, io mem 0xf1050000
[ 1.027268] orion-ehci f1050000.ehci: USB 2.0 started, EHCI 1.00
[ 1.033960] hub 1-0:1.0: USB hub found
[ 1.037941] hub 1-0:1.0: 1 port detected
[ 1.042314] usbcore: registered new interface driver usb-storage
[ 1.050194] NET: Registered protocol family 10
[ 1.057340] NET: Registered protocol family 17
[ 1.061861] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 1.074575] Bridge firewalling registered
[ 1.078625] 8021q: 802.1Q VLAN Support v1.8
[ 1.084869] UBI: auto-attach mtd4
[ 1.088065] ubi0: attaching mtd4
[ 1.115688] ubi0: scanning is finished
[ 1.125943] ubi0: attached mtd4 (name "ubi", size 23 MiB)
[ 1.131397] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 129024 bytes
[ 1.138317] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 512
[ 1.145047] ubi0: VID header offset: 512 (aligned 512), data offset: 2048
[ 1.151880] ubi0: good PEBs: 187, bad PEBs: 0, corrupted PEBs: 0
[ 1.157923] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[ 1.165174] ubi0: max/mean erase counter: 5/2, WL threshold: 4096, image sequence number: 868198611
[ 1.174273] ubi0: available PEBs: 0, total reserved PEBs: 187, PEBs reserved for bad PEB handling: 20
[ 1.183887] ubi0: background thread "ubi_bgt0d" started, PID 884
[ 1.190619] block ubiblock0_0: created from ubi0:0(rootfs)
[ 1.196131] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[ 1.203837] mvsw61xx 10.mvsw61xx: Found MV88E6171 at f1072004.mdio-bu:10
[ 1.210595] mvsw61xx 10.mvsw61xx: Using indirect addressing
[ 1.216275] hctosys: unable to open rtc device (rtc0)
[ 1.222958] UBIFS error (ubi0:0 pid 1): init_constants_early: too few LEBs (16), min. is 17
[ 1.234745] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[ 1.242431] Freeing unused kernel memory: 164K (c0555000 - c057e000)
[ 1.735811] init: Console is alive
[ 2.125860] init: - preinit -
[ 2.353290] random: procd urandom read with 3 bits of entropy available
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 4.465771] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 933
[ 4.487239] UBIFS (ubi0:1): recovery needed
[ 4.582983] UBIFS (ubi0:1): recovery completed
[ 4.587537] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[ 4.595406] UBIFS (ubi0:1): LEB size: 129024 bytes (126 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 4.605384] UBIFS (ubi0:1): FS size: 17676288 bytes (16 MiB, 137 LEBs), journal size 1032193 bytes (0 MiB, 7 LEBs)
[ 4.615787] UBIFS (ubi0:1): reserved for root: 834894 bytes (815 KiB)
[ 4.622271] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID 40FDB47F-8CEF-4354-B008-1FB42D00E00E, small LPT model
[ 4.637419] mount_root: switching to jffs2 overlay
[ 4.651352] procd: - early -
[ 5.552175] procd: - ubus -
[ 5.606602] procd: - init -
Please press Enter to activate this console.
[ 6.079106] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 6.090839] i2c /dev entries driver
[ 6.098198] Loading modules backported from Linux version wt-2016-05-12-0-g7a54796
[ 6.105802] Backport generated by backports.git backports-20160216-0-ge3c56e4
[ 6.115954] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 6.127144] nf_conntrack version 0.5.0 (1938 buckets, 7752 max)
[ 6.157688] xt_time: kernel timezone is -0000
[ 6.192251] Marvell TOPDOG(R) 802.11 Wireless Network Driver version 0.13
[ 6.199130] pci 0000:00:01.0: enabling device (0140 -> 0142)
[ 6.893774] ieee80211 phy0: Command RF_ANTENNA error 0x2
[ 6.899145] ieee80211 phy0: failed to set # of RX antennas
[ 6.904685] ieee80211 phy0: Command RF_ANTENNA error 0x2
[ 6.910041] ieee80211 phy0: failed to set # of TX antennas
[ 6.915563] ieee80211 phy0: 88w8366 v48, 20aa4b6e5f15, STA firmware 4.1.0.3
[ 6.925539] pci 0000:00:02.0: enabling device (0140 -> 0142)
[ 7.625209] ieee80211 phy1: Command RF_ANTENNA error 0x2
[ 7.630589] ieee80211 phy1: failed to set # of RX antennas
[ 7.636126] ieee80211 phy1: Command RF_ANTENNA error 0x2
[ 7.641484] ieee80211 phy1: failed to set # of TX antennas
[ 7.647006] ieee80211 phy1: 88w8366 v48, 20aa4b6e5f17, STA firmware 4.1.0.3
[ 7.661990] PPP generic driver version 2.4.2
[ 7.667092] NET: Registered protocol family 24
[ 12.287467] mv643xx_eth_port mv643xx_eth_port.0 eth0: link up, 1000 Mb/s, full duplex, flow control disabled
[ 12.308427] device eth0 entered promiscuous mode
[ 12.318232] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 12.360089] mv643xx_eth_port mv643xx_eth_port.1 eth1: link up, 1000 Mb/s, full duplex, flow control disabled
[ 13.277340] br-lan: port 1(eth0) entered forwarding state
[ 13.282833] br-lan: port 1(eth0) entered forwarding state
[ 13.307908] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 14.307389] ieee80211 phy1: 88w8366 v7, 20aa4b6e5f17, AP firmware 5.2.8.17
[ 14.368946] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 14.430074] 0000:01:00.0: unable to load firmware helper image
[ 14.435949] ieee80211 phy0: Cannot start firmware
[ 14.440759] ieee80211 phy0: Trying to reload the firmware again
[ 14.907521] ieee80211 phy0: 88w8366 v7, 20aa4b6e5f15, AP firmware 5.2.8.17
[ 14.961522] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 14.970797] device wlan1 entered promiscuous mode
[ 14.981963] device wlan0 entered promiscuous mode
[ 14.990962] device wlan0 left promiscuous mode
[ 14.995505] br-lan: port 3(wlan0) entered disabled state
[ 15.277254] br-lan: port 1(eth0) entered forwarding state
[ 18.142849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 18.149379] br-lan: port 2(wlan1) entered forwarding state
[ 18.154930] br-lan: port 2(wlan1) entered forwarding state
[ 20.147254] br-lan: port 2(wlan1) entered forwarding state
[ 59.827276] random: nonblocking pool is initialized----------------------------------------------------------------------------
1.以为是之前的2303的USB转TTL模块的问题，又在淘宝买了条232的USB转TTL，还是一样的结果。
2.看到网上有其他的方法，比如UBUNTU下UART启动路由器刷机，但是本人装的是DEEPIN，linux技术也不行，所以试了下不成功就放弃了，另外有看到用短接flash引脚的方法，但是不是这个型号的路由器，就看了下，他短接的是8个数据引脚中的两个，于是就找了下这个型号海力士（H27U1G8F2BTR BC）的NAND FLASH的资料，发现29-32,41-44对应的是数据引脚，于是短接了其中两个，然后居然起作用了，电脑插网线能获取到IP地址，能ping 通192.168.1.1，于是试了下winscp，居然能登陆进去SCP协议登陆到路由器，发现里面的目录结构就是openwrt的目录结构，指示www文件夹下是空的，这也就是为什么web进不了管理页面的原因，赶紧把原厂固件xxx.img和openwrt的固件&&&.bin都传到tmp目录，按照其他教程输入mtd -r write xxx.img firmware，提示找不到firmware,又试了下mtd -r write xxx.img linux，也不行，于是cat /proc/mtd，发现确实没有firmware分区，只有kernal2和kernal2分区，估计就是对应EA4500的A,B两个分区，于是把firmware换成kernal1，居然有反馈，提示正在解压xxx.img，，，，rebooting。。。。
3.但是接下来又变成无法获取IP地址了，于是来回折腾，捅屁眼，三次不成功启动方法（上电到灯闪烁拔电，为一次），然后居然有一次发现能后去IP地址了（具体的怎么弄的确实不记得了，就是折腾），而且进的是官方固件，所以之前的mtd命令应该是起作用了，因为最开始两个分区都是openwrt，现在有了原厂肯定不是凭空来的，好了，赶紧进原厂网页管理，输入admin初始密码，进connectivy，升级固件，选择openwrt的固件（网上有很多），start，之后就是等待，路由器自动重启之后就能进入了openwrt的管理页面，为了稳妥起见，又在openwrt里面升级了官方固件，也就是重新刷写了一次官方固件，即在官方固件（A分区）WEB升级的时候刷写的其实是B分区，将B分区里刷成OPENWRT固件，在OPENWRT管理页面（B分区）刷写的factory固件（不是update固件），刷写的是A分区。
总结一下，短接引脚可能有意想不到的效果，能ping通路由器其实就成功了一大半，可能我之后的步骤都是错误的，希望大家补充，之前在论坛上看帖，跟我同样情况的没有成功的经验，所以发出来跟大家分享一下，附件是FLASH的DATASHEET，参考一下。
|
本帖子中包含更多资源
您需要 登录 才可以下载或查看，没有账号？立即注册
×
|
简体中文
繁體中文
English
日本語
Deutsch
한국 사람
بالعربية
TÜRKÇE
português
คนไทย
IP卡
狗仔卡
置顶卡
沉默卡
喧嚣卡
顶贴卡
显身卡
