求助改成4M/32M的网件614通过jtag刷cfe时出现的问题

kingbird41 · 发表于 2012-7-23 01:29

把原来的网件614改成4M的闪存（MX的29LV320ABTC-90）和32M的内存（hy的HY57V561620BT-H），用jtag读取信息，显示：

没出现flash的型号，是不是不能认？
但是能执行erase和flash命令，刷入cfe以后，重新上电，无法连接路由，无法ping通192.168.1.1

请教应该怎么办？

kingbird41 · 发表于 2012-7-23 01:34

具体有：

c:\JTAG>brjtag -flash:cfe

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <

rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID

evID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix

- Flash Chip Window Start .... : 1FC00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1FC00000
- Selected Area Length ....... : 00040000

*** You Selected to Flash the CFE.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 11

Erasing block: 1 (addr = 1fc00000)...Done
Erasing block: 2 (addr = 1fc02000)...Done
Erasing block: 3 (addr = 1fc04000)...Done
Erasing block: 4 (addr = 1fc06000)...Done
Erasing block: 5 (addr = 1fc08000)...Done
Erasing block: 6 (addr = 1fc0a000)...Done
Erasing block: 7 (addr = 1fc0c000)...Done
Erasing block: 8 (addr = 1fc0e000)...Done
Erasing block: 9 (addr = 1fc10000)...Done
Erasing block: 10 (addr = 1fc20000)...Done
Erasing block: 11 (addr = 1fc30000)...Done

Loading CFE.BIN to Flash Memory...
Done (CFE.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 712 seconds

*** REQUESTED OPERATION IS COMPLETE ***

c:\JTAG>brjtag -erase:nvram

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <

rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID

evID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix

- Flash Chip Window Start .... : 1FC00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1FFF0000
- Selected Area Length ....... : 00010000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 1

Erasing block: 71 (addr = 1fff0000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 1 seconds

*** REQUESTED OPERATION IS COMPLETE ***

c:\JTAG>brjtag -probeonly

===============================================
Broadcom EJTAG Debrick Utility v1.8b-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU running under LITTLE endian

CPU Chip ID: 00000101001101010000000101111111 (0535017F)
*** Found a Broadcom BCM5350 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <

rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID

evID = 00C2 : 22A8)
*** Found a CFI Compatiable Flash Flash Chip from Macronix

*** REQUESTED OPERATION IS COMPLETE ***

kingbird41 · 发表于 2012-7-23 15:24

顶上，有高手么？

chkai1981 · 发表于 2012-7-23 16:00

你的jtag是没问题的，可以正常识别出闪存
操作也都没问题。。
如果不能启动，请核实cfe是不是对应这个机器的，或者内存大小是否对应。
再不行就用jtag写完cfe后，再读出来，看看和原文件比较一下有没有不同

kingbird41 · 发表于 2012-7-23 16:38

chkai1981 发表于 2012-7-23 16:00
你的jtag是没问题的，可以正常识别出闪存
操作也都没问题。。
如果不能启动，请核实cfe是不是对应这个机器 ...

好像闪存型号没出来，只看到识别到MX的。
cfe是对应的。你看看闪存型号和内存型号已经写出来了，应该是可用的吧？

bamboolee · 发表于 2012-7-24 09:38

换个jtag软件试下
我的好像可以直接cpu5352

kingbird41 · 发表于 2012-7-24 11:46

bamboolee 发表于 2012-7-24 09:38
换个jtag软件试下
我的好像可以直接cpu5352

换成brjtag_2.05，能显示flash是4M和厂家，依然看不到型号。jtag完重新上电依旧没法识别路由，无法获取ip地址，无法ping通192.168.1.1

bamboolee · 发表于 2012-7-24 12:06

你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的刷过CFE貌似无法自动分配IP 要手动IP 再tftp上传的你刷过后灯是全亮还是正常亮

kingbird41 · 发表于 2012-7-24 13:36

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的刷过CFE貌似无法自动分配IP 要手动IP ...

刷完后灯先全亮，然后就剩sys的灯亮，其他灭，插上网线，对应的lan灯会亮。

kingbird41 · 发表于 2012-7-24 14:37

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的刷过CFE貌似无法自动分配IP 要手动IP ...

手动分配ip为192.168.1.3，能ping上192.168.1.1了，用tftp刷固件能显示刷固件完成。灯的状况依旧，上电，灯全亮，然后剩下sys的灯长亮，插上网线，对应lan灯亮。
但上电后，
1. ip改成自动获取，又变成无法自动分配ip，网页输入192.168.1.1，无法打开设置页面。
2. 手动分配ip为192.168.1.3，能ping上192.168.1.1，但网页输入192.168.1.1，无法打开设置页面。

kingbird41 · 发表于 2012-7-24 15:26

bamboolee 发表于 2012-7-24 12:06
你先brjtag.exe -erase:wholeflash
brjtag.exe -flash:cfe这个是对的刷过CFE貌似无法自动分配IP 要手动IP ...

不知道路由上ttl针的定义，试着接了下（有信息应该是接对了ttl针）：

?or BCM947XX (32bit,SP,LE)
Build Date: Mon Apr 16 14:41:05 CST 2007 (root@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing Devices.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.130.23.0
CPU type 0x29008: 200MHz
Total memory: 32768 KBytes

Total memory used by CFE:  0x80400000 - 0x8049A790 (632720)
Initialized Data:       0x80430720 - 0x80432D10 (9712)
BSS Area:                0x80432D10 - 0x80434790 (6784)
Local Heap:             0x80434790 - 0x80498790 (409600)
Stack Area:             0x80498790 - 0x8049A790 (8192)
Text (code) segment:    0x80400000 - 0x80430720 (198432)
Boot area (physical):    0x0049B000 - 0x004DB000
Relocation Factor:       I:00000000 - D:00000000

Device eth0:  hwaddr 00-03-78-15-91-26, ipaddr 192.168.1.1, mask 255.255.255.0
      gateway not set, nameserver not set
Null Rescue Flag.
Boot program checksum is invalid
Hello!! Enter Rescue Mode: (Check error)

Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.
Failed.: Timeout occured
Reading :: TFTP Server.

bamboolee · 发表于 2012-7-24 16:16

加 q32195958说吧

kingbird41 · 发表于 2012-7-29 11:55

bamboolee 发表于 2012-7-24 16:16
加 q32195958说吧

感谢兄弟，最后通过ttl显示发现原来是固件没有完全刷上，tftp刷固件软件显示已经完成，其实还要等待一段时间，被它误导了。

bamboolee · 发表于 2012-7-30 13:37

kingbird41 发表于 2012-7-29 11:55
感谢兄弟，最后通过ttl显示发现原来是固件没有完全刷上，tftp刷固件软件显示已经完成，其实还要等待一段时 ...

哈哈好了就行

账号		自动登录	找回密码
密码			立即注册

求助改成4M/32M的网件614通过jtag刷cfe时出现的问题

本帖子中包含更多资源