找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
广告投放联系QQ68610888
查看: 68821|回复: 61

RG100A-AA刷机教程,以及使用说明(openwrt)

[复制链接]
本帖最后由 wujungod 于 2010-1-31 12:17 编辑

序言
刷坏了不要找我,没有动手能力的不要找我。。。有什么在帖子问吧我也不算高手,大家一起讨论,最近捡到一个RG100A-AA的路由器(不要喷我,的确没花一分钱朋友不喜欢送我的。。约等于捡到)于是上网找刷机教程翻遍整个互联网只有零星的一些资料,看到很多人问也没人说明白今天有空把我这几天的工作做个总结希望也能帮到大家。
准备工作
1.电烙铁一把,助焊剂一些(推荐松香),焊锡一些(尽量选硒多铅少的)
2.万用表一块(数字,模拟均可)
3. 25针公头一只,100欧姆电阻4只
4.传输线若干(可以选一些好线能屏蔽线)我自己好找不知道其他朋友们咋样
5.操作人一个(不要砸我啊)。。。
教程
首先我们来做JTAG线(愿意淘宝的自己淘宝。。。这东西我是不淘宝了的。。。DYI么呵呵)上线路图(用别人的自己懒的画了相机也不好)
必备的东西很容易做还是做个好吧
12针JTAG接口定义:(贝尔RG100A-AA)
1、nTRST     2、GND
3、TDI         4、GND
5、TDO        6、GND
7、TMS        8、GND
9、TCK        10、GND
11、nTRST   12、GND

JTAG线路图

JTAG连接线大家尽量短(按某大大的说法速度快稳定事实也是这样)
JTAG软件
本人CFE备份和JTAG软件
留个位置怕某些同志不会用这个软件(留以后上软件使用说明)
TTL线制作方法
这个线的做法很多地方都有但是对于大多数朋友来说还是比较麻烦(淘宝把。。)
我的做法是很早有一个8210数据线拆开以后芯片被打磨过不知道是什么型号但是通过看外围元件和手机原理可以知道这种东西一般就是MX232呵呵,在加个USB转SR232的口轻松搞定。上图图
RG100A-AA-TTL定义图(郁闷继续用别人的图)

TTL线和USB-SR232图图(继续郁闷等相继用= =!)











本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×
 楼主| | 显示全部楼层
本帖最后由 wujungod 于 2010-1-31 12:19 编辑

顺利连接上(O(∩_∩)O~)
Boot Address 0xbe000000
Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT|S29GL128-A, id 0x2201, size 16384KB
Flash Layout: Boot[0,0xbe000000] Kern[1,0xbe020000]
              AuxFS[93,0xbeba0000] Misc[125,0xbefa0000] PSI[127,0xbefe0000]
Flash RootFS Partition Length: 12058624
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80529860 (1214560)
Initialized Data:          0x8041E740 - 0x80421060 (10528)

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-8)                    : 96358VW2  
Number of MAC Addresses (1-32)    : 12  
Base MAC Address                  : 00:1f:a3:49:XX:XX  
PSI Size (1-64) KBytes            : 24  
Flash Block Size (1-128) in KBytes: 128  
Auxillary File System Size Percent: 25  
Main Thread Number [0|1]          : 0  

udp_send finished
No answer .auto boot ...
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Code Address: 0x80010000, Entry Address: 0x80010000
Decompression OK!
Entry at 0x80010000
Closing network.
Starting program at 0x80010000
Linux version 2.6.30.9 (yuzt@Ubuntu) (gcc version 4.3.3 (GCC) ) #3 Tue Nov 17 00:48:10 CST 2009
Detected Broadcom 0x6358 CPU revision a1
CPU frequency is 300000000 Hz
32MB of RAM installed
registering 40 GPIOs
board_bcm963xx: CFE version: 1.0.37-10.3
console [early0] enabled
CPU revision is: 0002a010 (Broadcom BCM6358)
board_bcm963xx: board name: 96358VW2
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes
NR_IRQS:128
PID hash table entries: 128 (order: 7, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29504k/32768k available (2079k kernel code, 3264k reserved, 429k data, 132k init, 0k highmem)
Calibrating delay loop... 299.00 BogoMIPS (lpj=598016)
Mount-cache hash table entries: 512
net_namespace: 532 bytes
NET: Registered protocol family 16
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
audit: initializing netlink socket (disabled)
type=2000 audit(0.310:1): initialized
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY)  漏 2001-2006 Red Hat, Inc.
msgmni has been set to 57
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered (default)
gpiodev: gpio device registered with major 254
gpiodev: gpio platform device registered with access mask FFFFFFFF
bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0100 (irq = 10) is a bcm63xx_uart
console handover: boot [early0] -> real [ttyS0]
bcm63xx_enet MII bus: probed
bcm963xx_flash: 0x02000000 at 0x1e000000
bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
bcm963xx: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
bcm963xx_flash: Read Signature value of CFE1CFE1
bcm963xx_flash: CFE bootloader detected
bcm963xx_flash: CFE boot tag found with version 6, board type 96358VW2, and tagid bc310.
bcm963xx_flash: Partition 0 is CFE offset 0 and length 20000
bcm963xx_flash: Partition 1 is kernel offset 20100 and length dff00
bcm963xx_flash: Partition 2 is rootfs offset 100000 and length ee0000
bcm963xx_flash: Partition 3 is nvram offset fe0000 and length 20000
bcm963xx_flash: Partition 4 is linux offset 20000 and length fc0000
bcm963xx_flash: Spare partition is 460000 offset and length b80000
Creating 5 MTD partitions on "bcm963xx":
0x000000000000-0x000000020000 : "CFE"
0x000000020100-0x000000100000 : "kernel"
mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
0x000000100000-0x000000fe0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=460000, len=B80000
0x000000460000-0x000000fe0000 : "rootfs_data"
0x000000fe0000-0x000001000000 : "nvram"
0x000000020000-0x000000fe0000 : "linux"
bcm63xx_wdt started, timer margin: 30 sec
Registered led device: adsl
Registered led device: ppp-fail
Registered led device: power
Registered led device: stop
Registered led device: <NULL>
TCP westwood registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 132k freed
Please be patient, while OpenWrt loads ...
回复

使用道具 举报

 楼主| | 显示全部楼层
本帖最后由 wujungod 于 2010-1-31 12:16 编辑

- preinit -
Press CTRL-C for failsafe
switching to jffs2
mini_fo: using base directory: /
mini_fo: using storage directory: /jffs
- init -

Please press Enter to activate this console. eth1: link forced UP - 100/full - flow control off/off
device eth1.0 entered promiscuous mode
device eth1 entered promiscuous mode
br-lan: port 1(eth1.0) entering forwarding state
cfg80211: Using static regulatory domain info
cfg80211: Regulatory domain: US
        (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
        (2402000 KHz - 2472000 KHz @ 40000 KHz), (600 mBi, 2700 mBm)
        (5170000 KHz - 5190000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
        (5190000 KHz - 5210000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
        (5210000 KHz - 5230000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
        (5230000 KHz - 5330000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
        (5735000 KHz - 5835000 KHz @ 40000 KHz), (600 mBi, 3000 mBm)
cfg80211: Calling CRDA for country: US
PPP generic driver version 2.4.2
NET: Registered protocol family 24
SCSI subsystem initialized
roboswitch: Probing device eth0: <3>roboswitch: [/media/router/routerLinux/openwrt/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:131] SIOCGETCPHYRD failed!
roboswitch: [/media/router/routerLinux/openwrt/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:131] SIOCGETCPHYRD failed!
No Robo switch in managed mode found, phy_id = 0xffffffff
roboswitch: Probing device eth1: found a 5325! It's a 5350.
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
b43-phy0: Broadcom 4318 WLAN found (core revision 9)
Registered led device: b43-phy0::tx
Registered led device: b43-phy0::rx
Registered led device: b43-phy0::radio
Broadcom 43xx driver loaded [ Features: PL, Firmware-ID: FW13 ]
NTFS driver 2.1.29 [Flags: R/O MODULE].
loop: module loaded
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ip_tables: (C) 2000-2006 Netfilter Core Team
Driver 'sd' needs updating - please use bus_type methods
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
bcm63xx_ehci bcm63xx_ehci.0: BCM63XX integrated EHCI controller
bcm63xx_ehci bcm63xx_ehci.0: new USB bus registered, assigned bus number 1
bcm63xx_ehci bcm63xx_ehci.0: irq 18, io mem 0xfffe1300
bcm63xx_ehci bcm63xx_ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
nf_conntrack version 0.5.0 (512 buckets, 2048 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
IMQ driver loaded successfully.
        Hooking IMQ before NAT on PREROUTING.
        Hooking IMQ after NAT on POSTROUTING.
xt_time: kernel timezone is -0000
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
arp_tables: (C) 2002 David S. Miller
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller
bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 2
bcm63xx_ohci bcm63xx_ohci.0: irq 13, io mem 0xfffe1400
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
uhci_hcd: USB Universal Host Controller Interface driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
fuse init (API version 7.11)
b43 ssb0:0: firmware: requesting b43/ucode5.fw
b43 ssb0:0: firmware: requesting b43/pcm5.fw
b43 ssb0:0: firmware: requesting b43/b0g0initvals5.fw
b43 ssb0:0: firmware: requesting b43/b0g0bsinitvals5.fw
b43-phy0: Loading firmware version 410.2160 (2007-05-26 15:32:10)
device wlan0 entered promiscuous mode
br-lan: port 2(wlan0) entering disabled state
b43-phy0: Loading firmware version 410.2160 (2007-05-26 15:32:10)
br-lan: port 2(wlan0) entering forwarding state
BusyBox v1.14.4 (2009-11-14 01:59:39 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
|       |.-----.-----.-----.|  |  |  |.----.|  |_
|   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
|_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
KAMIKAZE (bleeding edge, r18405) ------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
---------------------------------------------------
root@OpenWrt:/#
关于很多网友出现RG100A-AA老重启的解决方法
说来你不信就是固件问题引起的这个时候请用TTL 线连接后在上面红字处按回车速度要快啊进入CFE以后请用e a清楚掉芯片的所有内容有的大大说e n好些我认为e a是最可靠的呵呵个人想法不做评论
回复

使用道具 举报

 楼主| | 显示全部楼层
本帖最后由 wujungod 于 2010-1-31 12:27 编辑

硬件部分大致和上面差不多等细化吧
软件部分
根据个人这几天的经验刷新固件比较好的CFE还是RG100A-AA自带的好其他我也试过一些都有问题所以经验啊还是原机CFE吧,在有看到很多朋友说CFE的密码不对提供几个基本都是他们,1:USER=telecomadmin pass=telecomadmin 2:user=telecomadmin pass=nE7jA%5m 3:user=bjcnchgw pass=8mCnC@bj
回复

使用道具 举报

第一排就坐!
回复

使用道具 举报

第二排就坐!等听讲座
回复

使用道具 举报

FLASH芯片是什么说说下....这个很关键...
回复

使用道具 举报

真是高手呀
回复

使用道具 举报

谢谢分享呵呵
回复

使用道具 举报

今天刚刷好OpenWrt LuCI中文版,VLAN还不知道怎么设置,原来刷机挺容易的,只要有TTL线,不刷代CFE的固件就好,基本刷不死,刷之前E A一下,要不刷不上.
回复

使用道具 举报

为什么从2楼起全部英文,没有解释,难道中间的过程是全自动的吗
准备刷机,想在刷机之前了解一下做个准备
恳请赐教,不胜感激
回复

使用道具 举报

斑竹在吗,在线等
Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom BCM6358 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done

Probing Flash at (Flash Window: 0x1e000000) ... Done

Flash Vendor ID: 00000000000000000000000000100000 (00000020)
Flash Device ID: 00000000000000000010001000000001 (00002201)
*** Found a ST CFI Flash Flash Chip ***

    - Flash Chip Window Start .... : 1e000000
    - Flash Chip Window Length ... : 01000000
    - Selected Area Start ........ : 1e000000
    - Selected Area Length ....... : 00020000

*** You Selected to Backup the CFE128.BIN ***

=========================
Backup Routine Started
=========================

Saving CFE128.BIN.SAVED_20100319_213832 to Disk...
100%   bytes = 131072
Done  (CFE128.BIN.SAVED_20100319_213832 saved to Disk OK)

bytes written: 131072
=========================
Backup Routine Complete
=========================
elapsed time: 81 seconds


*** REQUESTED OPERATION IS COMPLETE ***

rg100a已经刷入新的flash,CFE128.bin   并且可以把flash备份出来,但是为什么还是不能开机
回复

使用道具 举报

准备搞一个来折腾
回复

使用道具 举报

不错,讲解的非常详细。
回复

使用道具 举报

好东西啊~~,终于找到了晚上回去折腾~~
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

关闭

欢迎大家光临恩山无线论坛上一条 /1 下一条

有疑问请添加管理员QQ86788181|手机版|小黑屋|Archiver|恩山无线论坛(常州市恩山计算机开发有限公司版权所有) ( 苏ICP备05084872号 )

GMT+8, 2024-5-17 06:05

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

| 江苏省互联网有害信息举报中心 举报信箱:js12377 | @jischina.com.cn 举报电话:025-88802724 本站不良内容举报信箱:68610888@qq.com 举报电话:0519-86695797

快速回复 返回顶部 返回列表