找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
广告投放联系QQ68610888
查看: 32955|回复: 47

智达康ZN-7200-C 拆解和TTL刷回原厂固件

[复制链接]
发表于 2015-6-10 14:54 | 显示全部楼层 |阅读模式
本帖最后由 vic-dou 于 2016-1-11 10:08 编辑

刷机在二楼

原机U-boot和ART。

U-boot和ART备份下载 http://www.vdisk.cn/down/index/19506832

固件下载(2楼下载链接已失效):
http://www.vdisk.cn/down/index/19506831


  1. File: E:\Router\ZN-7200-C\Firmware\ZN-7200-C_F2.0.90(ZDC)6_LN1_20131218.img
  2. Size: 5871084 bytes
  3. Modified: 2015年6月9日, 9:21:25
  4. MD5: EB35306560E3C4FBEBDDEA80D587FA78
  5. SHA1: 0FDBC928886D2FBF529CEE11EB257880187B067B
  6. CRC32: A793D22A

  7. File: E:\Router\ZN-7200-C\Firmware\zn7200c_factory.img
  8. Size: 3567451 bytes
  9. Modified: 2014年12月2日, 14:11:46
  10. MD5: BFBFBFEFDD92DC7077FB0808EA480240
  11. SHA1: F6596CB7B3AEF9B37EB2A0D8F6895881ECC2FB6B
  12. CRC32: 7A6F9C38

  13. File: E:\Router\ZN-7200-C\Firmware\1ZN_7200_C.img
  14. Size: 5560426 bytes
  15. Modified: 2014年12月2日, 14:12:01
  16. MD5: 59AC161EB4F6C7A3783182557F3C67C1
  17. SHA1: 36DE63B05CE2C71E137EC45756A77E3AB65726C4
  18. CRC32: 83F00FF3

  19. File: E:\Router\ZN-7200-C\Firmware\2-ap内部中文版本(密).img
  20. Size: 6702376 bytes
  21. Modified: 2014年12月2日, 14:12:09
  22. MD5: 5600AA2CF341BF36BF5B37A79A571359
  23. SHA1: E12C07C4E674E3086FA65A3DFBC7B72A82BD466A
  24. CRC32: 957F5E92

  25. File: E:\Router\ZN-7200-C\Firmware\ap.img
  26. Size: 5805620 bytes
  27. Modified: 2014年12月2日, 14:12:13
  28. MD5: B0F4464E592CD8228E9FB05E8ADCBC4E
  29. SHA1: F27B064717D547DB4C772EB7A15B92618B561E4B
  30. CRC32: BAEE6B76

  31. File: E:\Router\ZN-7200-C\mtd\u-boot.bin
  32. Size: 262144 bytes
  33. Modified: 2015年6月6日, 3:58:35
  34. MD5: B347E3485EB4E287E87F2EE0784F7111
  35. SHA1: 18D4F1DB4D1B00950803C3B329C42D7C93977064
  36. CRC32: C1FE7679

  37. File: E:\Router\ZN-7200-C\mtd\art.bin
  38. Size: 65536 bytes
  39. Modified: 2015年6月6日, 3:59:05
  40. MD5: AB05E8A858B0A29ACAB54AAECECB4255
  41. SHA1: FC10C5AF74121BBE49572AE164FC04060FCCBDBD
  42. CRC32: E2F166BB


复制代码



坛友的讨论和拆解
https://www.right.com.cn/forum/thread-115397-1-1.html
https://www.right.com.cn/forum/thread-115112-1-1.html

http://www.zcom.com.cn/产--品/运营商产品系列/无线客户端系列/ZN-7200-C

拆解:

POE 12V/1A(15V/0.8A)供电



AR7420+AR9285



AR9285+SiGe 2576L*2


内置8DB天线



功放下的散热


双功放右上角是JP1








本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2015-6-12 15:05 | 显示全部楼层
本帖最后由 vic-dou 于 2015-6-14 11:03 编辑

1、TTL接法:

假如没有输出,将RX/TX互换。
防止图片消失,留下文字版本
+++RG
++T++

PS: R=RXD、T=TXD、G=GND


刷机正式开始
1、下载tftpd软件 (http://tftpd32.jounin.net),下载下面的固件等。
  1. 我收集到的固件如下:
  2. http://pan.baidu.com/s/1bnD8oKB      提取码pxrn
  3. 固件地址,里面有4个固件
  4. 其中有三个是web升级,另一个用TFTT升级
  5. 如果升级带AP的那个固件,得先刷带ap的那个,然后再刷2ap的那个,就可以了,web升级
  6. 来自:wandyblues http://forum.anywlan.com/thread-342549-1-1.html

  7. 链接: http://pan.baidu.com/s/1qW9ihLq 密码: hu77
  8. 20131218是原厂接收固件
  9. 来自 鬼影 http://bbs.mydigit.cn/read.php?tid=1260428&ds=1&page=4#40554702
复制代码
2、接入TTL,超级终端或者putty打开TTL串口115200

3、TTL输入printenv,查看输出的serverip=192.168.0.xx,使用网线把电脑和路由器的相连,手动设置电脑IP为serverip:192.168.0.xx

3、使用附件中的ap.img,放入tftpd32文件夹内,打开tftpd32,点击tftpd32->ShowDir确认弹出窗口中有你放入的文件ap.img。找不到请收到Browse找到ap.img的文件夹。

4、路由器开机,出现“Hit any key to stop autoboot:  3”。按任意键中断启动

输入upgrade。等待“firmware download ok”后重启

升级过程:
注意刷ART过程中,曾经死机卡住了,但是重启后会出现自动升级成功提示。
upgrade会自动升级三个文件:ap91fus-art.bin、config.bin、ap.img

  1. U-Boot 1.0.6(ZN_7200_C)1 (Feb 24 2012 - 15:33:26)

  2. AP91 (ar7240) U-boot
  3. DRAM:
  4. sri
  5. #### TAP VALUE 1 = 9, 2 = a
  6. 32 MB
  7. id read 0x100000ff
  8. flash size 8MB, sector count = 128
  9. In:    serial
  10. Out:   serial
  11. Err:   serial
  12. Net:   ag7240_enet_initialize...
  13. Fetching MAC Address from 0x81fed350
  14. : cfg1 0xf cfg2 0x7014
  15. eth0: 00:03:7f:e0:00:4d
  16. eth0 up
  17. eth0
  18. Hit any key to stop autoboot:  0
  19. uboot> upgrade
  20. GPIO OE      : 0002ecfe
  21. GPIO IN      : 00001607
  22. GPIO OUT     : 0000e427
  23. GPIO SET     : 0000e027
  24. GPIO CLR     : 0000e427
  25. GPIO INT_EN  : 00000000
  26. GPIO INT_TYPE: 00000000
  27. GPIO INT_POL : 00000000
  28. GPIO INT_PEN : 00000000
  29. GPIO INT_MASK: 00000000
  30. GPIO FUNC    : 00048082
  31. RESET button is pressed.(download ART)
  32. Un-Protected 1 sectors
  33. Erasing Flash...
  34. First 0x4 last 0x4 sector size 0x10000                                         4
  35. Erased 1 sectors
  36. Writing to Flash... write addr: 9f040000
  37. done
  38. Protected 1 sectors
  39. dup 1 speed 100
  40. Using eth0 device
  41. TFTP from server 192.168.0.36; our IP address is 192.168.0.35
  42. Filename 'ap91fus-art.bin'.
  43. Load address: 0x8005fffc
  44. Loading: #############
  45. done
  46. Bytes transferred = 65536 (10000 hex)

  47. Run RAM art, Entry is 0xe07f0300 ......

  48. 机器死了,拔电重启

  49. U-Boot 1.0.6(ZN_7200_C)1 (Feb 24 2012 - 15:33:26)

  50. AP91 (ar7240) U-boot
  51. DRAM:
  52. sri
  53. #### TAP VALUE 1 = 9, 2 = a
  54. 32 MB
  55. id read 0x100000ff
  56. flash size 8MB, sector count = 128
  57. In:    serial
  58. Out:   serial
  59. Err:   serial
  60. Net:   ag7240_enet_initialize...
  61. Fetching MAC Address from 0x81fed350
  62. : cfg1 0xf cfg2 0x7014
  63. eth0: 00:03:7f:e0:00:4d
  64. eth0 up
  65. eth0
  66. Hit any key to stop autoboot:  0
  67. uboot> upgrade
  68. GPIO OE      : 0002ecfe
  69. GPIO IN      : 00001607
  70. GPIO OUT     : 0000e427
  71. GPIO SET     : 0000e027
  72. GPIO CLR     : 0000e427
  73. GPIO INT_EN  : 00000000
  74. GPIO INT_TYPE: 00000000
  75. GPIO INT_POL : 00000000
  76. GPIO INT_PEN : 00000000
  77. GPIO INT_MASK: 00000000
  78. GPIO FUNC    : 00048082
  79. RESET button is pressed.(download ART)
  80. Un-Protected 1 sectors
  81. Erasing Flash...
  82. First 0x4 last 0x4 sector size 0x10000                                         4
  83. Erased 1 sectors
  84. Writing to Flash... write addr: 9f040000
  85. done
  86. Protected 1 sectors
  87. dup 1 speed 100
  88. Using eth0 device
  89. TFTP from server 192.168.0.36; our IP address is 192.168.0.35
  90. Filename 'ap91fus-art.bin'.
  91. Load address: 0x8005fffc
  92. Loading: #############
  93. done
  94. Bytes transferred = 65536 (10000 hex)

  95. Run RAM art, Entry is 0xe07f0300 ......
  96. eth0 up
  97. eth0
  98. Hit any key to stop autoboot:  0
  99. uboot>
  100. uboot>
  101. uboot> upgrade
  102. GPIO OE      : 0002ecfe
  103. GPIO IN      : 00001607
  104. GPIO OUT     : 0000e427
  105. GPIO SET     : 0000e427
  106. GPIO CLR     : 0000e427
  107. GPIO INT_EN  : 00000000
  108. GPIO INT_TYPE: 00000000
  109. GPIO INT_POL : 00000000
  110. GPIO INT_PEN : 00000000
  111. GPIO INT_MASK: 00000000
  112. GPIO FUNC    : 00048082
  113. RESET button is pressed.(download ART)
  114. Un-Protected 1 sectors
  115. Erasing Flash...
  116. First 0x4 last 0x4 sector size 0x10000                                         4
  117. Erased 1 sectors
  118. Writing to Flash... write addr: 9f040000
  119. done
  120. Protected 1 sectors
  121. dup 1 speed 100
  122. Using eth0 device
  123. TFTP from server 192.168.0.36; our IP address is 192.168.0.35
  124. Filename 'ap91fus-art.bin'.
  125. Load address: 0x8005fffc
  126. Loading: *
  127. TFTP error: 'File not found' (1)
  128. download ap91fus-art.bin fail!
  129. Using eth0 device
  130. TFTP from server 192.168.0.36; our IP address is 192.168.0.35
  131. Filename 'config.bin'.
  132. Load address: 0x82100000
  133. Loading: #############
  134. done
  135. Bytes transferred = 65536 (10000 hex)
  136. Using eth0 device
  137. TFTP from server 192.168.0.36; our IP address is 192.168.0.35
  138. Filename 'ap.img'.
  139. Load address: 0x82100000
  140. Loading: #################################################################
  141.          #################################################################
  142.          #################################################################
  143.          #################################################################
  144.          #################################################################
  145.          #################################################################
  146.          #################################################################
  147.          #################################################################
  148.          #################################################################
  149.          #################################################################
  150.          #################################################################
  151.          #################################################################
  152.          #################################################################
  153.          #################################################################
  154.          #################################################################
  155.          #################################################################
  156.          #################################################################
  157.          ##########################################
  158. done
  159. Bytes transferred = 5871084 (5995ec hex)
  160. firmware check pass

  161. First 0x66 last 0x75 sector size 0x10000                                     117
  162. Erased 16 sectors
  163. Copy to Flash... write addr: 9f660000
  164. done

  165. First 0x5 last 0x65 sector size 0x10000                                      101
  166. Erased 97 sectors
  167. Copy to Flash... write addr: 9f050000
  168. done

  169. First 0x7d last 0x7d sector size 0x10000                                     125
  170. Erased 1 sectors
  171. firmware download ok
  172. uboot>

复制代码




本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-13 22:15 | 显示全部楼层
我刷了uboot和breed都不支持原厂固件   刷dd和ubnt后网口变成wan   又刷成智达康了

点评

你可以出个教程了。 对了你要不发breed备份的原厂AP编程器给H大。 看看能不能适配! 确实挺折腾的!  详情 回复 发表于 2015-6-13 22:40
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-10 15:50 来自手机 | 显示全部楼层
小茅 发表于 2015-6-10 15:43
你这是sop16的闪存,夹子一般都是针对SOP8的,所以可能不行,而且烧录夹还是要用到编程器。TTL的话你可以看 ...

对的,我已经找到那个16针的夹子了(应该能用)。
主要问题还是电路能不能不拆芯片刷!
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-10 17:35 | 显示全部楼层
ttl没看到  要刷的话估计得上编程器     如果能找到对应的dd固件可以直刷其他固件

点评

这个路由只有一个10针的JP1,在天线边上,而且使用至少三层板,看不到TTL走线!  详情 回复 发表于 2015-6-10 19:02
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-10 19:02 来自手机 | 显示全部楼层
那个男人 发表于 2015-6-10 17:35
ttl没看到  要刷的话估计得上编程器     如果能找到对应的dd固件可以直刷其他固件

这个路由只有一个10针的JP1,在天线边上,而且使用至少三层板,看不到TTL走线!
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-11 10:36 | 显示全部楼层
本帖最后由 vic-dou 于 2015-6-12 16:42 编辑

TTL定义为86、87脚(芯片右侧从上往下的第10、11脚)。
此路由打了个洞,从中间那层板子走线。

from:https://www.right.com.cn/forum/thread-75141-1-1.html






TTL启动记录

  1. / # reboot
  2. starting pid 862, tty '': '/bin/umount /proc'
  3. umount: can't umount /proc: Device or resource busy
  4. starting pid 863, tty '': '/bin/umount /dev/pts'
  5. starting pid 864, tty '': '/bin/umount /tmp'
  6. umount: can't umount /tmp: Device or resource busy
  7. starting pid 865, tty '': '/bin/synczcomWdgIoctl: Disabled Watchdog.
  8. '
  9. The system is going down NOW!
  10. Sent SIGTERM to all processes
  11. Sent SIGKILL toRestarting system.


  12. U-Boot 1.0.6(ZN_7200_C)1 (Feb 24 2012 - 15:33:26)

  13. AP91 (ar7240) U-boot
  14. DRAM:
  15. sri
  16. #### TAP VALUE 1 = 9, 2 = a
  17. 32 MB
  18. id read 0x100000ff
  19. flash size 8MB, sector count = 128
  20. In:    serial
  21. Out:   serial
  22. Err:   serial
  23. Net:   ag7240_enet_initialize...
  24. Fetching MAC Address from 0x81fed350
  25. : cfg1 0xf cfg2 0x7014
  26. eth0: 00:03:7f:e0:00:4d
  27. eth0 up
  28. eth0
  29. Hit any key to stop autoboot:  0
  30. ## Booting image at 9f660000 ...
  31.    Image Name:   Linux Kernel Image
  32.    Created:      2013-12-18   2:39:33 UTC
  33.    Image Type:   MIPS Linux Kernel Image (lzma compressed)
  34.    Data Size:    890212 Bytes = 869.3 kB
  35.    Load Address: 80002000
  36.    Entry Point:  801c3550
  37.    Verifying Checksum ... OK
  38.    Uncompressing Kernel Image ... OK

  39. Starting kernel ...

  40. Booting AR7240(Python)...
  41. Linux version 2.6.31--LSDK-9.2.0_U10.5.13_ZOS Modify-svn552 (allen@s3.local) (gcc version 4.3.3 (GCC) ) #1 Tue Dec 17 11:09:25 CST 2013
  42. flash_size passed from bootloader = 8
  43. arg 1: console=ttyS0,115200
  44. arg 2: root=31:02
  45. arg 3: rootfstype=jffs2
  46. arg 4: init=/sbin/init
  47. arg 5: mtdparts=ar7240-nor0:256k(u-boot),64k(u-boot-env),6208k(rootfs),1472k(uImage),64k(configure),64k(mfg),64k(eeprom)
  48. arg 6: mem=32M
  49. CPU revision is: 00019374 (MIPS 24Kc)
  50. Determined physical RAM map:
  51. memory: 02000000 @ 00000000 (usable)
  52. User-defined physical RAM map:
  53. memory: 02000000 @ 00000000 (usable)
  54. Initrd not found or empty - disabling initrd
  55. Zone PFN ranges:
  56.   Normal   0x00000000 -> 0x00002000
  57. Movable zone start PFN for each node
  58. early_node_map[1] active PFN ranges
  59.     0: 0x00000000 -> 0x00002000
  60. Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
  61. Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ar7240-nor0:256k(u-boot),64k(u-boot-env),6208k(rootfs),1472k(uImage),64k(configure),64k(mfg),64k(eeprom) mem=32M
  62. PID hash table entries: 128 (order: 7, 512 bytes)
  63. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
  64. Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
  65. Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
  66. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
  67. Writing ErrCtl register=00000000
  68. Readback ErrCtl register=00000000
  69. Memory: 29900k/32768k available (1814k kernel code, 2868k reserved, 526k data, 148k init, 0k highmem)
  70. NR_IRQS:128
  71. plat_time_init: plat time init done
  72. Calibrating delay loop... 232.96 BogoMIPS (lpj=465920)
  73. Mount-cache hash table entries: 512
  74. ZOS Init Board Type = [▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒![@]

  75. Unknown Borad Type, Please Besure Your Device Was Ready!
  76. NET: Registered protocol family 16
  77. ===== ar7240_platform_init: 0
  78. PCI init:ar7240_pcibios_init
  79. registering PCI controller with io_map_base unset
  80. bio: create slab <bio-0> at 0
  81. pci 0000:00:00.0: PME# supported from D0 D1 D3hot
  82. pci 0000:00:00.0: PME# disabled
  83. Returning IRQ 48
  84. NET: Registered protocol family 2
  85. IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
  86. TCP established hash table entries: 1024 (order: 1, 8192 bytes)
  87. TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
  88. TCP: Hash tables configured (established 1024 bind 1024)
  89. TCP reno registered
  90. NET: Registered protocol family 1
  91. AR7240 GPIOC major 0
  92. squashfs: version 4.0 (2009/01/31) Phillip Lougher
  93. JFFS2 version 2.2 (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
  94. msgmni has been set to 16
  95. alg: No test for lzma (lzma-generic)
  96. alg: No test for stdrng (krng)
  97. io scheduler noop registered
  98. io scheduler deadline registered (default)
  99. Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
  100. serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
  101. console [ttyS0] enabled
  102. brd: module loaded
  103. PPP generic driver version 2.4.2
  104. PPP Deflate Compression module registered
  105. PPP BSD Compression module registered
  106. PPP MPPE Compression module registered
  107. NET: Registered protocol family 24
  108. PPPoL2TP kernel driver, V1.0
  109. 7 cmdlinepart partitions found on MTD device ar7240-nor0
  110. Creating 7 MTD partitions on "ar7240-nor0":
  111. 0x000000000000-0x000000040000 : "u-boot"
  112. 0x000000040000-0x000000050000 : "u-boot-env"
  113. 0x000000050000-0x000000660000 : "rootfs"
  114. 0x000000660000-0x0000007d0000 : "uImage"
  115. 0x0000007d0000-0x0000007e0000 : "configure"
  116. 0x0000007e0000-0x0000007f0000 : "mfg"
  117. 0x0000007f0000-0x000000800000 : "eeprom"
  118. u32 classifier
  119.     input device check on
  120.     Actions configured
  121. nf_conntrack version 0.5.0 (512 buckets, 2048 max)
  122. ip_tables: (C) 2000-2006 Netfilter Core Team
  123. TCP cubic registered
  124. NET: Registered protocol family 17
  125. Bridge firewalling registered
  126. 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
  127. All bugs added by David S. Miller <davem@redhat.com>
  128. ar7240wdt_init: Registering WDT success
  129. VFS: Mounted root (jffs2 filesystem) readonly on device 31:2.
  130. Freeing unused kernel memory: 148k freed
  131. init started: BusyBox v1.15.0 (2013-12-18 10:39:48 CST)
  132. starting pid 24, tty '': '/etc/rc.d/rcS'
  133. mount: mounting /sys on /sys failed: No such device
  134. Unknown Borad Type, Fail to init GPIO!
  135. zcomMiscInit: init zcommisc OK (Netlink, GPIO, Watchdog).
  136. ATHR_GMAC: Length per segment 1536
  137. ATHR_GMAC: fifo cfg 3 01f00140
  138. ATHR_GMAC: athr_gmacs[0]->mac_base: 19000000
  139. ATHR_GMAC: Mac address for unit 0:bfff0000
  140. ATHR_GMAC: 00:03:7f:e0:00:4d
  141. ATHR_GMAC: Max segments per packet :   1
  142. ATHR_GMAC: Max tx descriptor count :   40
  143. ATHR_GMAC: Max rx descriptor count :   128
  144. ATHR_GMAC: Mac capability flags    :   4403
  145. ATHR_GMAC: athr_gmacs[1]->mac_base: 1a000000
  146. ATHR_GMAC: Mac address for unit 1:bfff0006
  147. ATHR_GMAC: ff:ff:ff:ff:ff:ff
  148. ATHR_GMAC: Max segments per packet :   1
  149. ATHR_GMAC: Max tx descriptor count :   40
  150. ATHR_GMAC: Max rx descriptor count :   96
  151. ATHR_GMAC: Mac capability flags    :   4D83
  152. Wed Dec 18 10:38:24 UTC 2013
  153. starting pid 53, tty '': '/sbin/getty ttyS0 115


  154. BusyBox v1.15.0 (2013-12-18 10:39:48 CST) built-in shell (ash)
  155. Enter 'help' for a list of built-in commands.

  156. / # configserver 2.2.0  allen @/home/allen/zn-7200-c/zdc/2.0.90/now/build/.. #2013-12-18 10:41:24
  157. DetectProduct: Fail To Identify Product[ZCN-1523H-2-8] from Kernel. Try to Obtain Platform Info From MFG info.
  158. GetProductConfig: Obtain Product Name is [ZCN-1523H-2-8].
  159. asf: module license 'Proprietary' taints kernel.
  160. Disabling lock debugging due to kernel taint
  161. ath_hal: 0.9.17.1 (AR5416, AR9380, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D)
  162. ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
  163. ath_dfs: Version 2.0.0
  164. Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
  165. ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
  166. ath_pci: 9.2.0_U11.14 (Atheros/multi-bss)
  167. __ath_attach: Set global_scn[0]
  168. ACBKMinfree = 48
  169. ACBEMinfree = 32
  170. ACVIMinfree = 16
  171. ACVOMinfree = 0
  172. CABMinfree = 48
  173. UAPSDMinfree = 0
  174. Switch Antenna: External(1) -> Internal(0).
  175. DFS min filter rssiThresh = 18
  176. DFS max pulse dur = 151 ticks
  177. ath_get_caps[5191] rx chainmask mismatch actual 1 sc_chainmak 0
  178. ath_get_caps[5166] tx chainmask mismatch actual 1 sc_chainmak 0
  179. wifi0: Atheros 9285: mem=0x10000000, irq=48 hw_base=0xb0000000
  180. athr_gmac_ring_alloc Allocated 640 at 0x81f3c000
  181. athr_gmac_ring_alloc Allocated 2048 at 0x81c47000
  182. Setting Drop CRC Errors, Pause Frames and Length Error frames
  183. Setting PHY...
  184. .
  185. ATHR_GMAC: Enet Unit:0 PHY:4 is UP Mii 100Mbps full duplex
  186. ATHR_GMAC: done cfg2 0x7115 ifctl 0x10000 miictrl
  187. Setting Drop CRC Errors, Pause Frames and Length Error frames
  188. wlan_vap_create : enter. devhandle=0x81f302c0, opmode=IEEE80211_M_STA, flags=0x3
  189. wlan_vap_create : exit. devhandle=0x81f302c0, opmode=IEEE80211_M_STA, flags=0x3.
  190. mc_ioctl: clone enable:1, clone mode:0, clone mac 30:49:3b:04:86:8a
  191. Scan in progress.. Cancelling it
  192. Invalid command : autocvupdate
  193. Interface doesn't accept private ioctl...
  194. shortgi (8BE0): Invalid argument
  195. mc_ioctl: clone enable:1, clone mode:0, clone mac 30:49:3b:04:86:8a
  196. Scan in progress.. Cancelling it
  197. CheckDeamon, 52: restart '/usr/sbin/webs 'br0: starting userspace STP failed, starting kernel STP
  198. device eth0 entered promiscuous mode
  199. br0: port 1(eth0) entering listening state
  200. device atha0 entered promiscuous mode
  201. br0: port 1(eth0) entering learning state
  202. Scan in progress.. Cancelling it
  203. auto_mac_clone_handler: interface name:atha0, mac:e89a8f8278be
  204. br0: port 2(atha0) entering disabled state
  205. br0: topology change detected, propagating
  206. br0: port 1(eth0) entering forwarding state
  207. eth0: received packet with own address as source address
  208. Scan in progress.. Cancelling it
  209. br0: port 2(atha0) entering disabled state
  210. Scan in progress.. Cancelling it
  211. eth0: received packet with own address as source address
  212. br0: port 2(atha0) entering disabled state
  213. eth0: received packet with own address as source address
  214. eth0: received packet with own address as source address
  215. eth0: received packet with own address as source address
  216. eth0: received packet with own address as source address
  217. eth0: received packet with own address as source address
  218. br0: port 2(atha0) entering listening state
  219. br0: port 2(atha0) entering learning state
  220. br0: topology change detected, propagating
  221. br0: port 2(atha0) entering forwarding state
  222. eth0: received packet with own address as source address
  223. eth0: received packet with own address as source address
  224. eth0: received packet with own address as source address
  225. eth0: received packet with own address as source address
  226. eth0: received packet with own address as source address
  227. eth0: received packet with own address as source address
  228. eth0: received packet with own address as source address
  229. eth0: received packet with own address as source address
  230. eth0: received packet with own address as source address
  231. eth0: received packet with own address as source address

  232. / # ls
  233. root  sbin  proc  usr   var   sys   tmp   lib   etc   dev   bin
  234. / # __ratelimit: 2 callbacks suppressed
  235. eth0: received packet with own address as source address

  236. / # cat /proc/mtd
  237. dev:    size   erasesize  name
  238. mtd0: 00040000 00010000 "u-boot"
  239. mtd1: 00010000 00010000 "u-boot-env"
  240. mtd2: 00610000 00010000 "rootfs"
  241. mtd3: 00170000 00010000 "uImage"
  242. mtd4: 00010000 00010000 "configure"
  243. mtd5: 00010000 00010000 "mfg"
  244. mtd6: 00010000 00010000 "eeprom"
  245. / # cat /proc/partitions
  246. major minor  #blocks  name

  247.   31        0        256 mtdblock0
  248.   31        1         64 mtdblock1
  249.   31        2       6208 mtdblock2
  250.   31        3       1472 mtdblock3
  251.   31        4         64 mtdblock4
  252.   31        5         64 mtdblock5
  253.   31        6         64 mtdblock6
  254. / # cat /proc/version
  255. Linux version 2.6.31--LSDK-9.2.0_U10.5.13_ZOS Modify-svn552 (allen@s3.local) (gcc version 4.3.3 (GCC) ) #1 Tue Dec 17 11:09:25 CST 2013
  256. / #
复制代码



本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×

点评

既然找到ttl了 那就直接刷breed 或者不死uboot啊  详情 回复 发表于 2015-6-12 15:15
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-12 15:15 | 显示全部楼层
vic-dou 发表于 2015-6-11 10:36
TTL定义为86、87脚(芯片右侧从上往下的第10、11脚)。
此路由打了个洞,从中间那层板子走线。

既然找到ttl了 那就直接刷breed 或者不死uboot啊

点评

那个第三方固件好像不支持内置外置天线互换。 并且我猜测内置两个功放,一个是内置天线功放,一个是外置天线功放。需要原厂固件控制功放开关。 Breed估计不支持此原厂固件,只能刷UBNT和TP-link和openwrt。  详情 回复 发表于 2015-6-12 15:19
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-12 15:16 | 显示全部楼层
这个和我刚入手的大唐CPE一样的  http://forum.anywlan.com/thread-364716-1-1.html
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-12 15:19 | 显示全部楼层
那个男人 发表于 2015-6-12 15:15
既然找到ttl了 那就直接刷breed 或者不死uboot啊

那个第三方固件好像不支持内置外置天线互换。

并且我猜测内置两个功放,一个是内置天线功放,一个是外置天线功放。需要原厂固件控制功放开关。

Breed估计不支持此原厂固件,只能刷UBNT和TP-link和openwrt。

算了,原厂就可以了,而且是定向天线。做路由器不合适。

点评

这个两功放是并联的......  SW7 开关是控制 收/发 的!  发表于 2015-6-14 18:40
备份个art就阔以了 你用ttl刷个不死uboot 然后看看是否会启动原厂固件 一般是会启动的 然后备份个art 在刷ubnt B M2 然后进uboot刷入原厂art  详情 回复 发表于 2015-6-12 15:21
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-12 15:21 | 显示全部楼层
vic-dou 发表于 2015-6-12 15:19
那个第三方固件好像不支持内置外置天线互换。

并且我猜测内置两个功放,一个是内置天线功放,一个是外 ...

备份个art就阔以了     你用ttl刷个不死uboot  然后看看是否会启动原厂固件  一般是会启动的   然后备份个art 在刷ubnt B M2 然后进uboot刷入原厂art
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-12 15:22 | 显示全部楼层
刷完uboot或者breed后建议备份下原厂固件
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-12 15:22 | 显示全部楼层
我买的那个cpe已经在用了   晚上有空刷ubnt试试
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-12 17:18 来自手机 | 显示全部楼层
我在帖子里贴出TTL输出文本,就会被敏感词系统判定为垃圾广告,进而要版主审核,今天第二次了,版主辛苦了!

点评

刷了没有啊?  详情 回复 发表于 2015-6-13 11:10
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

发表于 2015-6-13 11:10 | 显示全部楼层
vic-dou 发表于 2015-6-12 17:18
我在帖子里贴出TTL输出文本,就会被敏感词系统判定为垃圾广告,进而要版主审核,今天第二次了,版主辛苦了 ...

刷了没有啊?

点评

haha, after you.  详情 回复 发表于 2015-6-13 11:19
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

 楼主| 发表于 2015-6-13 11:19 来自手机 | 显示全部楼层
那个男人 发表于 2015-6-13 11:10
刷了没有啊?

haha, after you.
我的恩山、我的无线 The best wifi forum is right here.
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

有疑问请添加管理员QQ86788181|手机版|小黑屋|Archiver|恩山无线论坛(常州市恩山计算机开发有限公司版权所有) ( 苏ICP备05084872号 )

GMT+8, 2024-3-29 06:27

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

| 江苏省互联网有害信息举报中心 举报信箱:js12377 | @jischina.com.cn 举报电话:025-88802724 本站不良内容举报信箱:68610888@qq.com 举报电话:0519-86695797

快速回复 返回顶部 返回列表