求助改成4M/32M的网件614通过jtag刷cfe时出现的问题

kingb***

把原来的网件614改成4M的闪存（MX的29LV320ABTC-90）和32M的内存（hy的HY57V561620BT-H），用jtag读取信息，显示：

没出现flash的型号，是不是不能认？
但是能执行erase和flash命令，刷入cfe以后，重新上电，无法连接路由，无法ping通192.168.1.1

请教应该怎么办？

kingb***

具体有：

c:\JTAG>brjtag -flash:cfe

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix

    - Flash Chip Window Start .... : 1FC00000
    - Flash Chip Window Length ... : 00400000
    - Selected Area Start ........ : 1FC00000
    - Selected Area Length ....... : 00040000

*** You Selected to Flash the CFE.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 11

Erasing block: 1 (addr = 1fc00000)...Done
Erasing block: 2 (addr = 1fc02000)...Done
Erasing block: 3 (addr = 1fc04000)...Done
Erasing block: 4 (addr = 1fc06000)...Done
Erasing block: 5 (addr = 1fc08000)...Done
Erasing block: 6 (addr = 1fc0a000)...Done
Erasing block: 7 (addr = 1fc0c000)...Done
Erasing block: 8 (addr = 1fc0e000)...Done
Erasing block: 9 (addr = 1fc10000)...Done
Erasing block: 10 (addr = 1fc20000)...Done
Erasing block: 11 (addr = 1fc30000)...Done

Loading CFE.BIN to Flash Memory...
Done  (CFE.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 712 seconds


*** REQUESTED OPERATION IS COMPLETE ***





c:\JTAG>brjtag -erase:nvram

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix

    - Flash Chip Window Start .... : 1FC00000
    - Flash Chip Window Length ... : 00400000
    - Selected Area Start ........ : 1FFF0000
    - Selected Area Length ....... : 00010000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 1

Erasing block: 71 (addr = 1fff0000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 1 seconds


*** REQUESTED OPERATION IS COMPLETE ***

c:\JTAG>brjtag -probeonly

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix



*** REQUESTED OPERATION IS COMPLETE ***

kingb***

顶上，有高手么？

chka***

你的jtag是没问题的，可以正常识别出闪存
操作也都没问题。。
如果不能启动，请核实cfe是不是对应这个机器的，或者内存大小是否对应。
再不行就用jtag写完cfe后，再读出来，看看和原文件比较一下有没有不同

kingb***

chkai1981 发表于 2012-7-23 16:00
你的jtag是没问题的，可以正常识别出闪存
操作也都没问题。。
如果不能启动，请核实cfe是不是对应这个机器 ...

好像闪存型号没出来，只看到识别到MX的。
cfe是对应的。你看看闪存型号和内存型号已经写出来了，应该是可用的吧？

bamb***

换个jtag软件试下
我的好像可以直接cpu5352

kingb***

bamboolee 发表于 2012-7-24 09:38
换个jtag软件试下
我的好像可以直接cpu5352

换成brjtag_2.05，能显示flash是4M和厂家，依然看不到型号。jtag完重新上电依旧没法识别路由，无法获取ip地址，无法ping通192.168.1.1

bamb***

你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的 刷过CFE貌似无法自动分配IP 要手动IP 再tftp上传的  你刷过后灯是全亮还是正常亮

kingb***

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的 刷过CFE貌似无法自动分配IP 要手动IP ...

刷完后灯先全亮，然后就剩sys的灯亮，其他灭，插上网线，对应的lan灯会亮。

kingb***

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的 刷过CFE貌似无法自动分配IP 要手动IP ...

手动分配ip为192.168.1.3，能ping上192.168.1.1了，用tftp刷固件能显示刷固件完成。灯的状况依旧，上电，灯全亮，然后剩下sys的灯长亮，插上网线，对应lan灯亮。
但上电后，
1. ip改成自动获取，又变成无法自动分配ip，网页输入192.168.1.1，无法打开设置页面。
2. 手动分配ip为192.168.1.3，能ping上192.168.1.1，但网页输入192.168.1.1，无法打开设置页面。

kingb***

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的 刷过CFE貌似无法自动分配IP 要手动IP ...

不知道路由上ttl针的定义，试着接了下（有信息应该是接对了ttl针）：

?or BCM947XX (32bit,SP,LE)
Build Date: Mon Apr 16 14:41:05 CST 2007 (root@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing Devices.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.130.23.0
CPU type 0x29008: 200MHz
Total memory: 32768 KBytes

Total memory used by CFE:  0x80400000 - 0x8049A790 (632720)
Initialized Data:          0x80430720 - 0x80432D10 (9712)
BSS Area:                  0x80432D10 - 0x80434790 (6784)
Local Heap:                0x80434790 - 0x80498790 (409600)
Stack Area:                0x80498790 - 0x8049A790 (8192)
Text (code) segment:       0x80400000 - 0x80430720 (198432)
Boot area (physical):      0x0049B000 - 0x004DB000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-03-78-15-91-26, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
Boot program checksum is invalid
Hello!! Enter Rescue Mode: (Check error)

Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.

bamb***

加 q32195958说吧

kingb***

bamboolee 发表于 2012-7-24 16:16
加 q32195958说吧

感谢兄弟，最后通过ttl显示发现原来是固件没有完全刷上，tftp刷固件软件显示已经完成，其实还要等待一段时间，被它误导了。

bamb***

kingbird41 发表于 2012-7-29 11:55
感谢兄弟，最后通过ttl显示发现原来是固件没有完全刷上，tftp刷固件软件显示已经完成，其实还要等待一段时 ...

哈哈 好了就行