|
|
楼主 |
发表于 2022-4-18 20:53
|
显示全部楼层
本帖最后由 kmdyc 于 2023-1-31 03:20 编辑
解决了，仔细研究电路板发现tp-link 低端产品竟然连调试接口都不接上，果断飞线接上，终于有调试数据了
tp真心省，竟然连调试接口都不接
以下是调试数据：
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2021 HackPascal <hackpascal@gmail.com>
Build date 2021-12-15 [git-f9b74d0]
Version 1.1 (r1337)
DRAM: 64MB
Platform: Qualcomm Atheros QCA953X rev 2
Board: Generic board
Clocks: CPU: 550MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz
Flash: Winbond W25Q128 (16MB) on ath79-spi
ag71xx-eth: MAC address is invalid, using default settings.
ag71xx-eth: Using MAC address 00:13:74:00:00:01
Waiting for auto-negotiation complete ... OK
eth0: Atheros AR8228/AR8229 rev 1
Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0
Press any key to interrupt autoboot ... 4
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2021 HackPascal <hackpascal@gmail.com>
Build date 2021-12-15 [git-f9b74d0]
Version 1.1 (r1337)
DRAM: 64MB
Platform: Qualcomm Atheros QCA953X rev 2
Board: Generic board
Clocks: CPU: 550MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz
Flash: Winbond W25Q128 (16MB) on ath79-spi
ag71xx-eth: MAC address is invalid, using default settings.
ag71xx-eth: Using MAC address 00:13:74:00:00:01
Waiting for auto-negotiation complete ... OK
eth0: Atheros AR8228/AR8229 rev 1
Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0
Press any key to interrupt autoboot ... 2
Autoboot aborted due to button press.
Starting breed built-in shell
Autoboot aborted due to button press.
what?????????毛线了，初步估计是胖瘦开关导致的，等会再详细研究下。
我手动引导下试试。。。。
breed> autoboot
Trying to boot firmware from 0x9f020000 ...
TP-LINK firmware image header detected.
Image Name: 08410009
Data Size: 871912 Bytes
Load Address: 80060000
Entry Point: 80060000
Uncompressing data (LZMA) ... done.
Flushing cache ... done.
Starting kernel at 0x80060000...
[ 0.000000] Linux version 3.3.8 (axinchan@cnrouter.com) (Wireless AP based on Qualcomm SDK) 2022-03-25 02:03:21
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9531 rev 2
[ 0.000000] Clocks: CPU:550.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] Zone PFN ranges:
[ 0.000000] Normal 0x00000000 -> 0x00004000
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] Early memory PFN ranges
[ 0.000000] 0: 0x00000000 -> 0x00004000
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[ 0.000000] Kernel command line: board=AP941 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd crashkernel=10M@20M oops=panic
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Writing ErrCtl register=0001aee4
[ 0.000000] Readback ErrCtl register=0001aee4
[ 0.000000] Memory: 61516k/65536k available (1989k kernel code, 4020k reserved, 342k data, 164k init, 0k highmem)
[ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:51
[ 0.000000] Calibrating delay loop... 366.18 BogoMIPS (lpj=1830912)
[ 0.060000] pid_max: default: 32768 minimum: 301
[ 0.060000] Mount-cache hash table entries: 512
[ 0.070000] NET: Registered protocol family 16
[ 0.070000] gpiochip_add: registered GPIOs 0 to 17 on device: ath79
[ 0.080000] MIPS: machine is GECOOS Wireless AP of AP941
[ 0.080000] ar71xx: invalid MDIO id 1
[ 0.490000] WLAN firmware dump buffer allocation of 2097152 bytes @ address 0x83a00000- SUCCESS !!!
[ 0.500000] bio: create slab <bio-0> at 0
[ 0.510000] Switching to clocksource MIPS
[ 0.510000] NET: Registered protocol family 2
[ 0.520000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.520000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[ 0.530000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.530000] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.540000] TCP reno registered
[ 0.540000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.550000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.560000] NET: Registered protocol family 1
[ 0.580000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.580000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.590000] msgmni has been set to 120
[ 0.600000] io scheduler noop registered
[ 0.600000] io scheduler deadline registered (default)
[ 0.610000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.630000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[ 0.640000] console [ttyS0] enabled, bootconsole disabled
[ 0.640000] console [ttyS0] enabled, bootconsole disabled
[ 0.660000] m25p80 spi0.0: found w25q128, expected m25p80
[ 0.660000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[ 0.670000] m25p80 spi0.0: spi jedec id: 0xEF4018 (w25q128 00)
[ 0.670000] 6 tp-link partitions found on MTD device spi0.0
[ 0.680000] Creating 6 MTD partitions on "spi0.0":
[ 0.680000] 0x000000000000-0x000000020000 : "u-boot"
[ 0.690000] 0x000000020000-0x0000000f4fe8 : "kernel"
[ 0.700000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.710000] 0x0000000f4fe8-0x000000fe0000 : "rootfs"
[ 0.720000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.730000] mtd: partition "rootfs" set to be root filesystem
[ 0.740000] mtd: partition "rootfs_data" created automatically, ofs=690000, len=950000
[ 0.740000] 0x000000690000-0x000000fe0000 : "rootfs_data"
[ 0.750000] 0x000000fe0000-0x000000ff0000 : "opt"
[ 0.760000] 0x000000ff0000-0x000001000000 : "art"
[ 0.760000] 0x000000020000-0x000000fe0000 : "firmware"
[ 0.790000] ag71xx_mdio: probed
[ 0.930000] ag71xx_mdio: probed
[ 0.930000] eth0: Atheros AG71xx at 0xb9000000, irq 4
[ 1.490000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.1:00 [uid=004dd042, driver=Generic PHY]
[ 1.500000] eth1: Atheros AG71xx at 0xba000000, irq 5
[ 2.060000] eth1: Found an AR934X built-in switch
[ 3.090000] AR71XX_RESET_REG_WDOG_CTRL: 0x0
[ 3.090000] TCP cubic registered
[ 3.100000] NET: Registered protocol family 17
[ 3.100000] 8021q: 802.1Q VLAN Support v1.8
[ 3.110000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[ 3.120000] Freeing unused kernel memory: 164k freed
[ 5.020000] JFFS2 notice: (561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
=============HELLO7=============
?寎巊梡廤媞澷?AP宯? [枹拲檈] (涍?峴9昩)
=========================================================================
??宆崋 : AP941 斉杮崋 : 7.1_2022032400
IP/墕? : 0.0.0.0/24 AC峊惂婍 :
悚? : 0.0.0.0 MAC抧毈 : 3A:BD:FD:B1:FB:E5
DNS抧毈 :
*** BOOTING ***
=========================================================================
1) 廳?杮??
2) 廳抲WEB娗棟枾?
3) 夬?弌櫴?抲
4) 屌審嵼?彙?
???嵷?(1, 2, 3埥幰4):
还真引导进去了！！
根据引导log信息，发现gpio12脚电压不对
于是上网查了芯片数据手册，发现gpio12脚为重置引脚，该脚接地或拉低将产生重置信号，同时查询了其他路由器的原理图发现tp的路由器大多都是该脚3.3v高电平
tp路由重置电路
于是自己改造了下重置电路，这样终于可以塞回墙上，体验集客ap或openwrt了。
302I 原重置电路
更改后的302i重置电路
74hc164芯片1、2、14脚电路都是接3.3v于是从该ic处取3.3v供电，并根据其他tp重置电路原理，该位置可以使用150-220欧电阻限流至gpio12，于是我使用180欧的电阻做了连接。
改造后的主板
|
本帖子中包含更多资源
您需要 登录 才可以下载或查看，没有账号？立即注册
×
|
简体中文
繁體中文
English
日本語
Deutsch
한국 사람
بالعربية
TÜRKÇE
português
คนไทย
IP卡
狗仔卡
发表于 2022-4-17 19:09
置顶卡
沉默卡
喧嚣卡
顶贴卡
显身卡
