Belkin F6D4230-4 v3

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
bgn (N150)
N150 Enhanced Wireless Router
Belkin F6D4230-4 001.jpg
Support
Wikipedia
WikiDevi.wi-cat.ru
3rd Party Firmware
dd-wrt
Status Unknown
OpenWrt
Incompatible
Tomato any flavor
Incompatible
Platform
BrandModelRev
Belkin F6D4230-4 v3
FCC ID
IC ID
Board ID
141700520016J
Type
wireless router
Series
F6D4230-4
CPU1
Broadcom BCM5356A1
CPU1 Type
MIPS 74K
CPU1 Speed
333 MHz
Flash1 Chip
Macronix MX25L1605DM2I-12G
Flash1 Size
2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />
RAM1 Size
8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Chip
Zentel A3V64S40ETP-G6
ETH chip1
Broadcom BCM5356A1
Switch
Broadcom BCM5356A1
Ethernet Port Count
1-100MbE-WAN
4-100MbE-LAN
Wired Standard
IEEE 802.3i/3u

802dot11 OUI: 00:22:75 (13 E, 21 W)
Ethernet OUI: 00:22:75 (13 E, 21 W)

Stock bootloader
CFE vendor modified
Stock FW OS
SuperTask!
Expansion IF types
none specified
Power
12 VDC, 1 A
Connector type
barrel
Serial Port (UART)
yes, internal, 5-pin connector, , (115200 8N1), unpopulated, 3.3V TTL, J102
Other

Default SSID: Belkin_Enhanced_Wireless_XXXXXX
, Broadcom
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 294 additional devices
of which 99 are Belkin devices

Manuf/OEM/ODM
Arcadyan WG7005F11 -LF-AK
Retail
FCC approval date 03 July 2009
Country of manuf China
Radio 1
Chip1
Broadcom BCM5356A1
Wireless interface OUI
00:22:75
Antenna Connector Type
none specified
MIMO status
1x1:1
Wireless Standard
IEEE 802.11b/g/n
802.11n
up to 150 Mbps
802.11g
up to 54 Mbps
802.11b
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
Radio cor_rev
21
 CPU1 brandRadio1 chip1 brandRadio1 chip2 brand
Belkin F6D4230-4 v1RalinkRalink
Belkin F6D4230-4 v2RalinkRalink
Belkin F6D4230-4 v3BroadcomBroadcom

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

For a list of all currently documented Belkin device with specifications, see Belkin.

150 Mbps - 1SS 2.4GHz 802.11n (40MHz chan.) = N150 class

Overview

"P/N: 141700520016J R01" is silkscreened on a production model board.

From the FCC photos, the Flash appears to be the 4MB Macronix MX25L3205DM2I-12G

and the RAM a 16MB Samsung K4S281632K-UC60.

This appears to differ from reality. The CPU is part BCM5356A1KFBG.

It is currently assumed that the SuperTask! RTOS is used on this device.

The default SSID pattern for the device is Belkin_Enhanced_Wireless_XXXXXX, where

XXXXXX is the last 6 digits of the wireless interface MAC address (upper case letters).

When the device is booting, the device will temporarily assume the SSID of Broadcom.

JTAG-Serial Info

Serial

Serial Pinouts

           J102
(GND) (RxD) (TxD) [3.3]

Info derived from

boot log • >>
Decompressing...done
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
Found a 2MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.36
CPU type 0x19749: 333MHz
Tot mem: 8192 KBytes

CFE mem:    0x80700000 - 0x807DC9D0 (903632)
Data:       0x80732780 - 0x807359E0 (12896)
BSS:        0x807359E0 - 0x807769D0 (266224)
Heap:       0x807769D0 - 0x807DA9D0 (409600)
Stack:      0x807DA9D0 - 0x807DC9D0 (8192)
Text:       0x80700000 - 0x80732778 (206712)


Copying boot params.....DONE

Arcadyan bootloader version 1.15 boot_version 1.15 18:30 2009/7/6
Press space bar to cancel startup...
Device eth0:  hwaddr 00-22-75-BC-01-71, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: [ZIP 3] [ZIP 1]  done 0 bytes read
Entry at 0x80002000
Closing network.

In c_entry() function ...
[Init_TFTP_buffer_behind_end] TFTP_buffer = 806b3cf4
CPU ProcId is: 0x00019749, options: 0x000021cd
CPU: BCM5356 rev 1 at 333 MHz
install_exception
Set C0 SR to 0x10000000
Co config = 80240483
sys_irq_init ...
Before entering coretest_main
##### _ftext      = 0x80002000
##### _fdata      = 0x80213680
##### __bss_start = 0x80263D3C
##### end         = 0x80693B64
##### Backup Data from 0x806B3CF4 to 0xBFDA0000~0xBFDF06BC len 329404
Found a 2MB ST compatible serial flash
[initialize_data_area] DATA area was already backuped in flash ..
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 300000000 Hz
mips_counter_frequency:150000000
r4k_offset: 0x000249f0(150000)
init_US_counter : time1 = 268814 , time2 = 32268884, diff 32000070
US_counter = 64
 cnt1 33228195 cnt2 33229876, diff 1681
r4k_cur:0x0206a71e(-2140554572)
End of usrclk_init
mips_int_enable: 5
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 8000
mips_int_enable 3: s = 0
Runtime code version: 3.00.03
System startup...
[INIT] Memory COLOR 0, 810000 bytes ..
[INIT] Memory COLOR 1, 400000 bytes ..
[INIT] Memory COLOR 2, 401200 bytes ..
PCI: no core
[pci_alloc_bus] alloc memory 8040548c
[pci_do_scan_bus]Scanning bus 00
Found bus:devfn[vid/did]class header_type 00:00 [14e4/0800] 000501 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
PCI: Calling quirk 800D3784 for 00:00.0
Found bus:devfn[vid/did]class header_type 00:08 [14e4/4338] 000280 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
PCI: Calling quirk 800D3784 for 00:01.0
Found bus:devfn[vid/did]class header_type 00:10 [14e4/4715] 000200 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
PCI: Calling quirk 800D3784 for 00:02.0
Found bus:devfn[vid/did]class header_type 00:20 [14e4/0835] 00ffff 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
PCI: Calling quirk 800D3784 for 00:04.0
Fixups for bus 00
PCI: Fixing up bus 0
Bus scan for 00 returning with max=00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
RUNTASK id=1 iNetTask ...
[generic_flash_id_ok] flash already initialized ..

SFLASH Init OK!
FLASH boot parameter signature found!!
Boot Parameters found !!!
Bootcode version: 1.15
Serial number: 12933423009894
Hardware version: 01


sizeof(struct III_Config_t) is 70752, nLen:70752, Magic:0xffffffff
!![E-CFG-VER] Configuration data version mismatch!!
!![E-CFG-VER] Adapting factory defaults!!
!![E-CFG-VER] Reconfiguration required!!
!!No configuration file present!!
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=24 BUFFER_OFFSET=384
BUF_BUFSZ0=608 BUF_BUFSZ1=2272
NUM_OF_B0=0 NUM_OF_B1=500
BUF_POOL0_SZ=0 BUF_POOL1_SZ=1216000
sizeof(BUFFER0)=768,sizeof(BUFFER1)=2432
*BUF0=0x805a340c *BUF1=0x8047a5ec
Altgn *BUF0=0x805a3420 *BUF1=0x8047a600
End at BUF0:0x805a3420, BUF1:0x805a3400

buffer0 pointer init OK!
buffer1 pointer init OK!
ifno=  0, Link_Type= 4
Interface 0 ip = 127.0.0.1

ifno=  1, Link_Type= 1
[pci_set_master]
PCI: Enabling bus mastering for device 00:02.0
PCI: Setting latency timer of device 00:02.0 to 64
[pci_enable_device]
[pci_set_power_state] dev->device=0x4715 state=0
[dma64_alloc] alloc 128 dma tx descriptor size=10240(0x2800)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
mips_int_enable: 2
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 9000
mips_int_enable 3: s = 0
: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.46
MAC Address: 00:22:75:bc:01:71
Interface 1 ip = 192.168.2.1

ifno=  2, Link_Type= 1
hwlan_init(239): [HWLAN] ifno=2 irno=7 port=0x00000000
[hwlan_init] if_table[2]::00-c0-a8-02-01-02
[hwlan_init] if_table[2]::00-22-a8-02-01-02
[hwlan_init] if_table[2]::00-22-75-02-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-71
[pci_enable_device]
[pci_set_power_state] dev->device=0x4338 state=0
[pci_set_master]
PCI: Enabling bus mastering for device 00:01.0
PCI: Setting latency timer of device 00:01.0 to 64
RUNTASK id=2 rapi_tmr_task ...
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
mips_int_enable: 1
mips_int_enable 1: s = 9000
mips_int_enable 2: s = 9800
mips_int_enable 3: s = 0
: Broadcom BCM4338 802.11 Wireless Controller 5.10.56.46
Interface 2 ip = 192.168.2.1

ifno=  3, Link_Type= 1
MAC Address: 00:22:75:bc:01:72
iput_IpLinkUp(ifno=3)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
Interface 3 ip = 0.0.0.0

ifno=  4, Link_Type= 0
ifno=  5, Link_Type= 0
ifno=  6, Link_Type= 0
ifno=  7, Link_Type= 0
ifno=  8, Link_Type= 0
ifno=  9, Link_Type= 0
ifno= 10, Link_Type= 0
ifno= 11, Link_Type= 0
ifno= 12, Link_Type= 0
ifno= 13, Link_Type= 0
ifno= 14, Link_Type= 0
ifno= 15, Link_Type= 0
ifno= 16, Link_Type= 0
Init NAT data structure
No default route, no need to reinit the NAT data structure
RUNTASK id=5 if_task if0...
RUNTASK id=6 if_task if1...
RUNTASK id=7 if_task if2...
RUNTASK id=8 if_task if3...
RUNTASK id=9 timer_task...
RUNTASK id=10 conn_mgr...
RUNTASK id=11 main_8021x...
RUNTASK id=12 main_lltd...
RUNTASK id=13 period_task...
RUNTASK id=14 dhcp_daemon...
RUNTASK id=15 dhcp_clt...on interface 3

[flash_init] PFS web (bfcf2400) in flash ...
[flash_init] set drive_start_addr[0] as bfcf2400
httpd: listen at 192.168.2.1:80
RUNTASK httpd...
RUNTASK id=18 dnsproxy...
RUNTASK id=19 dhcpd_mgmt_task...
UPnP is enabled
UPNP Device initialize success! slot=20

>>> belkin_wan_cfg task runs successfully, task_id = 21
gConfig.WSC_Mode:1
RUNTASK id=22 wscmain...
RUNTASK id=23 wsc_Send_eap_packet...
RUNTASK id=24 wsc_Send_UPNP_packet...
RUNTASK id=25 WSC_WaitUserAction_Task...
gConfig.WSC_Mode:1
Starting Multitask...
gSetting.lang_id = 0
run_project_task
RUNTASK id=26 apAppInit...
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
[wl_open] done
[HWLAN] Ready
[reset_802dot1x] wireless module ready
[init_wpa] dot1x_ready[0]=1
[reset_802dot1x] 802.1Xv2 ready
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.02, Jul  6 2009 19:47:40
*********************************************
Initializing stack...
---------in wsc init----------
----------sizeof(uint32)=4
----------sizeof(uint-long)=4
----------sizeof(uint32)=2
[22]pthread_cond_init: 0
[22]pthread_mutex_init: resource No. 33
[22]pthread_mutex_init: resource No. 34
[PORTABLITY]:WscCreateThread--------------------
 @#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@
Entered udp_read
wsc_Send_eap_packet:udpFdupnp_wcn:15;;udpFdupnp:17
WscCmd:ActualCBThreadProc: Started
GenaInit : event_hook is NULL!!
[htf_dbg]     - OnlineActiveWirless() 1990
###BCM5356 region was set when setting country code###
Chanspec set to 0x2e04
Setting Wireless Country Code : 0x348
Setting DTIMPeriod : 1
Setting BeaconPeriod : 100
Setting gfragThreshold:2346
Setting grtsThreshold:2347
Setting PreambleType:0
Setting TxBurst:1
Setting TxAntenna:3
wme_ac ap bk ecwmax 6 ecwmin 3 txop 0 aifsn 3 acm 0
wme_ac ap be ecwmax 10 ecwmin 3 txop 0 aifsn 7 acm 0wme_ac ap vi ecwmax 5 ecwmin 3 txop 94 aifsn 1 acm 0wme_ac ap vo ecwmax 3 ecwmin 2 txop 47 aifsn 1 acm 0wme_ac sta bk ecwmax 10 ecwmin 4 txop 0 aifsn 3 acm 0wme_ac sta be ecwmax 10 ecwmin 4 txop 0 aifsn 7 acm 0wme_ac sta vi ecwmax 4 ecwmin 3 txop 94 aifsn 2 acm 0wme_acSetting APSDCapable:0
Setting GF_Mode:0
Setting ShortGI 20MHz:1 40MHz:1
Setting Mpdudensity:6
Setting AMSDU enable:0
[22]pthread_cond_init: 1
[22]pthread_mutex_init: resource No. 35
[22]pthread_mutex_init: resource No. 36
[PORTABLITY]:WscCreateThread--------------------
 WscCmd:ActualUIThreadProc: Started.
ActualUIThreadProc: wait q
MasterControl constructor
WscCmd::MC instantiated ok
[22]pthread_cond_init: 2
[22]pthread_mutex_init: resource No. 37
[22]pthread_mutex_init: resource No. 38
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 39
[PORTABLITY]:pthread_mutex_init--------------------
 CTransport Construction
[22]pthread_cond_init: 3
[22]pthread_mutex_init: resource No. 40
[22]pthread_mutex_init: resource No. 41
[PORTABLITY]:WscCreateThread--------------------
 In CTransport::ActualCBThreadProc
ActualCBThreadProc: Calling Dequeue
MC::Init: Init complete ok
WscCmd::MC intialized ok
WscCmd::Init ok, starting stack...
Info::ReadConfigFile: Called
Info::ReadConfigFile:$▒ ▒
Info::ReadConfigFile:File open ok
******************uuid_p:0x00000000000000011000002275bc0171*****
mp_deviceInfo->uuid[i]:
0-0-0-0-0-0-0-1-10-0-0-22-75-bc-1-71-
mp_deviceInfo->macAddr:00:22:75:BC:01:71
gSetting.dot1x.if_entry[0].enableWEP:0
authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is , key len is 0
 ssid is Belkin_Enhanced_Wireless_BC0171
S, bf0
E, e1d
RegistrarSM constructor
[22]pthread_cond_init: 4
[22]pthread_mutex_init: resource No. 42
[22]pthread_mutex_init: resource No. 43
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 44
[PORTABLITY]:pthread_mutex_init--------------------
 RegistrarSM constructor
[22]pthread_cond_init: 5
[22]pthread_mutex_init: resource No. 45
[22]pthread_mutex_init: resource No. 46
[PORTABLITY]:WscCreateThread--------------------
 c_devPwd:org:14382062
Generated devPwd: ▒▒</9▒
▒<▒▒[
in startMonitor....
CInbEap Construction
Sizeof(WSC_NOTIFY_DATA) = -2143501280
---test--sizeof(WSC_NOTIFY_DATA) = 36
[22]pthread_cond_init: 6
[PORTABLITY]:WscCreateEvent--------------------
 Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_bind
Binding successful for socket [-2143501312]
[PORTABLITY]:WscCreateThread--------------------
 In CInbEap::StaticRecvThread
CInbEap::ActualRecvThread Started
Entered udp_read
in startMonitor....
CInbUPnPDev Construction
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_bind
Binding successful for socket [-2143501312]
CInbUPnPDev StartMonitor
[PORTABLITY]:WscCreateThread--------------------
 MC::SwitchModeOn: Exit
MC::StartStack: Informing app of mode
In CInbUPnPDev::StaticUPnPThread
end UPnPCreateMicroStack
Entered udp_read
-WscCmd::CallbackProc Enqueue done
MC::SwitchModeOn: Done callback
exit wscmain
@@[27]pthread_mutex_unlock: the res is free 33-- -2145361880
WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd

******* MODE: Access Point *******
-@@[26]pthread_mutex_unlock: the res is free 35-- -2144482064
*******p_header->eType:1

Options:
0. Quit
1. Get configured
2. Get configured via push-button
3. Get configured using IEs
Enter selection: ***gp_mc->mp_info->GetSwitchMode():1
mp_info->GetSwitchMode():1:e_currMode:1,,e_targetMode:3
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
********cp_devPwd:14382062*****
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
MC::SetBeaconIE: call to trans->SetBeaconIE() ok
MC::SetProbeRespIE: call to trans->SetProbeRespIE() ok
Waiting for Registrar to connect...
WscCmd::unconfig initiated
ActualUIThreadProc: wait q