LG-Nortel ELO WR100T (LNWR100T)/Serial info

From TechInfoDepot
Jump to navigationJump to search

After booting, Shift-0 will allow access to debug mode. Option 4 would appear to allow fetching + flashing of firmware via TFTP, to some extent.

Info derived from

boot log
ar531xPlus rev 0x00000087 boot loader startup...
Flash initialized
SDRAM initialized
Cache initialized

Copy program from 0xbfc00000 to 0x80520000, length 0x0000cd04 bytes ... done
Jump to SDRAM 0x80520cb4 [0x10000008, 0x00000000, 0x00000000]
Clear BSS section ... done
Stack: 0x8053eb20
Heap: 0x8053eb30



============================================================================
 Wireless Gateway WG4005E 1-LF-17 LN Loader V2.00 build Nov 14 2007 18:17:34
                  Arcadyan Technology Corporation
============================================================================

Copying boot params.....DONE
cpuFreq=240000000 sysFreq=60000000 cntFreq=120000000

Press any key to enter command mode ...
Checking Valid Image in Flash... Passed.

Unzipping program from bank 2...............................done

*** WEB image writing into the 16MB SDRAM has completed ***

Try to find image for running...
Valid Code found in the Flash
........................................................................................................................................................................................................................................................................................done
Uncompressed size = 2161965
I am going to run the Code image from 80001000




firmware startup...
Stack: 0x80c83150
Heap: 0x80c83160
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called??
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: setGpio is called??
##### _ftext      = 0x80001000
##### _fdata      = 0x801D1C50
##### __bss_start = 0x80210D2D
##### end        = 0x80C7315C
##### Backup Data from 0x801D1C50 to 0x80C9315C length=0003F0DD
[CGI] Web SDRAM area is from 0X80E00000H

install_exception
Installing TLB Refill exception handler from 8000ED00 to 80000000, size=184
Installing General exception handler from 8000EDB8 to 80000180, size=216
Installing Interrupt exception handler from 8000EE90 to 80000200, size=160
misc_int_init
mips_int_enable : 0x00000400
Connect the AHB interrupt
sysBoardDataInit
Init the GPIOs !!!
Enable arbitration for SOC devices !!!
cpuFreq=184000000 sysFreq=40000000 cntFreq=92000000
AR531X_TIMER=00061A6D
AR531X_RELOAD=00061A80
AR531X_IMR=00000028
mips_cp0_status=10000401
mips_cp0_cause=30800000
[INIT] MTinitialize ..
Runtime code version: V2.09
System startup...
[INIT] MTmeminit ..
[INIT] check COLOR 0 ..
[INIT] soho initialize COLOR1 : 819200
[INIT] soho initialize COLOR2 : 524288
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called??

Flash Found. It is 2MB Flash....
Set flash memory layout to Runcode version: V2.09
Runcode date: Jan  4 2008 13:53:32
Bootcode version: V2.00
Serial number: J818033937
Hardware version: 01
sizeof(struct III_Config_t) is 125688
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=48 BUF_ALIGN_SZ=8 BUFFER_OFFSET=112
BUF_BUFSZ0=384 BUF_BUFSZ1=3264
NUM_OF_B0=200 NUM_OF_B1=1000
BUF_POOL0_SZ=86400 BUF_POOL1_SZ=3312000
sizeof(BUFFER0)=432,sizeof(BUFFER1)=3312
*BUF0=0x808eae34 *BUF1=0x805c24a4
Altgn *BUF0=0x808eae40 *BUF1=0x805c24b0
End at BUF0:0x808fffc0, BUF1:0x808eae30

buffer0 pointer init OK!
buffer1 pointer init OK!
time = 08/01/2003, 00:00:00
TRAP(linkUp) : send ok!
Interface 0 ip = 127.0.0.1

ar531xmac_init: ifno=1, initstr=UNIT=0 VLAN=1
D:/MyProjects/ttf2004/source/firmware/hardware/ar5312/ar531xbsp.c:sysEnetInit is called
ae531xEndLoad: loading device ...
ae531xEndLoad: unit=0, pDmaBuf=0xa0211538, dmaBufSize=8976, txDescCount=192, rxDescCount=256, clCount=512
ae531xEndLoad: System param: mac=b0500000, dma=b0501000, ivec=4, ilev=1000
ae531xEndLoad: Flash ea = 00:13:f7:e5:34:19
ae0 qt = 1, buf begin = 80000000, buf end = 80000000
ae0 qt = 1, drsc begin = a0211540, desc end = a021242c
Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x       0
ae0 qt = 2, buf begin = 805c2522, buf end = 80690832
ae0 qt = 2, drsc begin = a0212440, desc end = a021382c
Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000
ae531xMemInit: Memory setup complete.
EepromWriteWord: address=01, lowByte=00, highByte=80
EepromWriteWord: address=03, lowByte=00, highByte=80
EepromWriteWord: address=05, lowByte=00, highByte=80
EepromWriteWord: address=07, lowByte=00, highByte=80
SR_CHIP_ID = 00000000
Invalid PHY ID for enet0.  Expected 0x00007102, read 0x00000000

This is IC PLUS...
Found PHY enet0 port0: model 0x18 revision 0x0
Found PHY enet0 port1: model 0x18 revision 0x0
Found PHY enet0 port2: model 0x18 revision 0x0
Found PHY enet0 port3: model 0x18 revision 0x0
Found PHY enet0 port4: model 0x18 revision 0x0
Port 0, Negogiation timeout
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
eth0: Phy Status=7849
ip_VLANInit> WAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
ip_VLANInit> LAN port
Smart Router : 189
ae0 Phy Setup Failed
Please check the ethernet cable on port 0!
eth0: duplex 0, link 0
ae_SetMacFromPhy: enet0 as half duplex, 100Mbps
ae0: setting TXDP=0xa0211540 RXDP=0xa0212440
ae0 Verify MAC address E5F71300 00001934
  sb = 00 13 F7 E5 34 19
ae531xRxFilterConfig: MacControl = 1084000C
ae531xEndLoad: Done loading, pDrvCtrl=80211330 txQ=8021135C rxQ=80211370
ar531xmac_init: enet0 set to VLAN mode
ar531xmac_init: enet0 interface 1 registered to VLAN 1

  DmaStatus  = 0x       0
  DmaBusMode = 0x    2084
  DmaRxBase  = 0x  212440
  DmaTxBase  = 0x  211540
  DmaControl = 0x  200000
  DmaIntr    = 0x       0
  MacControl = 0x1084000c
  MacAddrHi  = 0x    1934
  MacAddrLo  = 0xe5f71300
  MacVlan1   = 0x    8100
  MacVlan2   = 0x       0

Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000
Current Rx buffer = 0x       0
Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x       0
Current Tx buffer = 0x       0
time = 08/01/2003, 00:00:00
TRAP(linkUp) : send ok!
ae531xRxFilterConfig: MacControl = 1084000C
Interface 1 ip = 192.168.2.1

ae531xRxFilterConfig: MacControl = 1084000C
ether_init : Set WAN MTU = 1500
ar531xmac_init: ifno=2, initstr=UNIT=0 VLAN=2
ar531xmac_init: driver already loaded, number of instances is 2
ar531xmac_init: enet0 set to VLAN mode
ar531xmac_init: enet0 interface 2 registered to VLAN 2

  DmaStatus  = 0x       0
  DmaBusMode = 0x    2084
  DmaRxBase  = 0x  212440
  DmaTxBase  = 0x  211540
  DmaControl = 0x  200000
  DmaIntr    = 0x       0
  MacControl = 0x1084000c
  MacAddrHi  = 0x    1934
  MacAddrLo  = 0xe5f71300
  MacVlan1   = 0x    8100
  MacVlan2   = 0x       0

Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000
Current Rx buffer = 0x       0
Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x       0
Current Tx buffer = 0x       0
time = 08/01/2003, 00:00:00
TRAP(linkUp) : send ok!
iput_IpLinkUp(ifno=2)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
iput_IpLinkUp(ifno=2): set ddns_update to 1
Interface 2 ip = 0.0.0.0

D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called??
[HWLAN] ifno=3 irno=7 port=0x00000000
[HWLAN] semBCreate return 1 80378e50, count 1
[HWLAN] pRadio->abolt = 00000000
[HWLAN] pRadio->abolt = 00000000
[HWLAN] gSetting.BasicRate=f
apInit: Initialize Access Point.
[HWLAN] ar5hwcCreatePhy : ifno:3 pdevInfo=80457e44, devno=1
[HWLAN] devno 1 pdevInfo 80457e44
[HWLAN] Base address = b0000000, irq 3
Attach AR5212 0x13 0x80457e44
[HWLAN] DOMAIN 00008210
[HWLAN] Set HWLAN MAC as LAN MAC ..
[HWLAN] MAC Address=00-13-F7=E5-34-1B
[HWLAN] wlan1 revisions: mac 11.0 phy 4.8 analog 7.0 eeprom 5.2
### MAX ### Sending Power Strength = 30 dBm
[HWLAN] phwChannel 2437, channelFlags 00005400
[HWLAN] size of ATHEROS_DESC hardware part 32
[HWLAN] CACHE_LINE_SIZE 16, AR_DESC_SIZE 128
[HWLAN] AR_HEADER_SIZE 96, AR_BUF_SIZE 3196numDescriptors = 704
[HWLAN] wlan1: pDmaBuf=A02162E0
[HWLAN] pMemBuf a02162e0 pdevInfo->pDmaBuf a02162e0
[HWLAN] semBCreate return 2 80378e60, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 80378e60
[HWLAN] semBCreate return 3 80378e70, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 80378e70
[HWLAN] semBCreate return 4 80378e80, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 80378e80
[HWLAN] semBCreate return 5 80378e90, count 1
[HWLAN] ar5hwcQueueCreate: semaphore id 80378e90
[HWLAN] pMemBuf a02322e0, pdevInfo->pDmaBuf + pdevInfo->dmaBufSize a0264300
[HWLAN] muxDevLoad is called for vportNum 10000, loadfn 80096c1c, vportStr 16: 0: 1
[HWLAN] semBCreate return 6 80378ea0, count 1
[HWLAN] semBCreate return 7 80378eb0, count 1
ar5212Reset: maxCalCount 20
[HWLAN] ioctl CMD=0xb
mips_int_connect: ivec 3 ar5hwcInt 8007b4e0 pdevInfo 80457e44
mips_int_enable : 0x00000C00
[HWLAN] bridgePortAdd : vp, 10000
[HWLAN] bridgePortAdd (base BSS) succeeded for vp1
[HWLAN] semBCreate return 8 80378ec0, count 0
[HWLAN] semBCreate return 9 80378ed0, count 0
[HWLAN] semBCreate return 10 80378ee0, count 1
[HWLAN] semBCreate return 11 80378ef0, count 1
[HWLAN] semBCreate return 12 80378f00, count 0
[HWLAN] semBCreate return 13 80378f10, count 1
[HWLAN] semBCreate return 14 80378f20, count 1
[HWLAN] semBCreate return 15 80378f30, count 0
[HWLAN] semBCreate return 16 80378f40, count 1
[HWLAN] semBCreate return 17 80378f50, count 1
[HWLAN] semBCreate return 18 80378f60, count 0
[HWLAN] semBCreate return 19 80378f70, count 1
wlan1 added STA: 00:13:f7:e5:34:1b (1050)
[HWLAN] ifno=3 after call apInit() : .... bg 1 , a 0 ....
time = 08/01/2003, 00:00:00
TRAP(linkUp) : send ok!
[HWLAN] hwlan_ioctl() ..
Interface 3 ip = 192.168.2.1

[HWLAN] hwlan_ioctl() ..
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called??
[HWLAN] ifno=6 irno=7 port=0x00000000
[HWLAN] hwlan_ioctl() ..
Interface 6 ip = 192.168.2.1

[HWLAN] hwlan_ioctl() ..
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called??
[HWLAN] ifno=7 irno=7 port=0x00000000
[HWLAN] hwlan_ioctl() ..
Interface 7 ip = 192.168.2.1

[HWLAN] hwlan_ioctl() ..
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called??
[HWLAN] ifno=8 irno=7 port=0x00000000
[HWLAN] hwlan_ioctl() ..
Interface 8 ip = 192.168.2.1

[HWLAN] hwlan_ioctl() ..
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called??
[HWLAN] ifno=9 irno=7 port=0x00000000
[HWLAN] hwlan_ioctl() ..
Interface 9 ip = 192.168.2.1

[HWLAN] hwlan_ioctl() ..
ruleCheck()> Group: 0,  Error: Useless rule index will be truncated
ruleCheck()> Group: 1,  Error: Useless rule index will be truncated
ruleCheck()> Group: 2,  Error: Useless rule index will be truncated
ruleCheck()> Group: 3,  Error: Useless rule index will be truncated
ruleCheck()> Group: 4,  Error: Useless rule index will be truncated
ruleCheck()> Group: 5,  Error: Useless rule index will be truncated
ruleCheck()> Classify Rule: 1,  Error: Protocol Field
ruleCheck()> Classify Rule: 2,  Error: Protocol Field
ruleCheck()> Classify Rule: 3,  Error: Protocol Field
ruleCheck()> Classify Rule: 4,  Error: Protocol Field
ruleCheck()> Classify Rule: 5,  Error: Protocol Field
ruleCheck()> Classify Rule: 6,  Error: Protocol Field
ruleCheck()> Classify Rule: 7,  Error: Protocol Field
ruleCheck()> Classify Rule: 8,  Error: Protocol Field
ruleCheck()> Classify Rule: 9,  Error: Protocol Field
ruleCheck()> Classify Rule: 10,  Error: Protocol Field
ruleCheck()> Classify Rule: 11,  Error: Protocol Field
ruleCheck()> Classify Rule: 12,  Error: Protocol Field
ruleCheck()> Classify Rule: 13,  Error: Protocol Field
ruleCheck()> Classify Rule: 14,  Error: Protocol Field
ruleCheck()> Classify Rule: 15,  Error: Protocol Field
ruleCheck()> Classify Rule: 16,  Error: Protocol Field
ruleCheck()> Classify Rule: 17,  Error: Protocol Field
ruleCheck()> Classify Rule: 18,  Error: Protocol Field
ruleCheck()> Classify Rule: 19,  Error: Protocol Field
ruleCheck()> Classify Rule: 20,  Error: Protocol Field
ruleCheck()> Classify Rule: 21,  Error: Protocol Field
ruleCheck()> Classify Rule: 22,  Error: Protocol Field
ruleCheck()> Classify Rule: 23,  Error: Protocol Field
ruleCheck()> Classify Rule: 24,  Error: Protocol Field
ruleCheck()> Classify Rule: 25,  Error: Protocol Field
ruleCheck()> Classify Rule: 26,  Error: Protocol Field
ruleCheck()> Classify Rule: 27,  Error: Protocol Field
ruleCheck()> Classify Rule: 28,  Error: Protocol Field
ruleCheck()> Classify Rule: 29,  Error: Protocol Field
ruleCheck()> Classify Rule: 30,  Error: Protocol Field
ruleCheck()> Classify Rule: 31,  Error: Protocol Field
ruleCheck()> Classify Rule: 32,  Error: Protocol Field
reqCBACBuf()> init match pool, Have: 1000
Memory Address: 0x80c22034 ~ 0x80c28db0
reqCBACBuf()> init timeGap pool, Have: 10000
Memory Address: 0x80c28db0 ~ 0x80c59b04
reqCBACBuf()> init sameHost pool, Have: 2000
Memory Address: 0x80c59b04 ~ 0x80c69524
[setClsfyEnable] clsfy_func=0
CBAC rule pool initialized !!
Init NAT data structure
RUNTASK id=2 if_task if0...
RUNTASK id=3 if_task if1...
RUNTASK id=4 if_task if2...
RUNTASK id=5 if_task if3...
RUNTASK id=6 if_task if6...
RUNTASK id=7 if_task if7...
RUNTASK id=8 if_task if8...
RUNTASK id=9 if_task if9...
RUNTASK id=10 timer_task...
RUNTASK id=11 conn_mgr...
RUNTASK id=12 main_8021x...
year=104,mon=11,day=18D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called??
randomize ..
RUNTASK id=13 period_task...
RUNTASK id=14 dhcp_daemon...
RUNTASK id=15 dhcp_clt...on interface 2
RUNTASK id=16 pptp_callmgr...
httpd: listen at 192.168.2.1:80
HTTPD TIMER_RESOURCE:5, FS_RESOURCE:6
RUNTASK httpd...
RUNTASK id=19 dnsproxy...
RUNTASK id=20 snmp_task...
RUNTASK id=21 rip...
RUNTASK id=22 ripout...
RUNTASK id=23 dhcpd_mgmt_task...
UPnP is enabled
RUNTASK id=24 upnp_main ...
[UPNP] Device initialize success
D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called??
Starting Multitask...
MTstart2() begin  ...
upnp_Init: flag=0
SSDP Initialization completed...
GenaInit : event_hook is NULL!!
[HWLAN] Ready

 This Device is GW
TRAP(coldStart) : send ok!
console debug options, root
======= Console Debug =======
 (1)   Alert Mail Testing
 (2)   Web Upgrage
 (3)   Write Web
 (4)   Firmware Upgrage
 (5)   Write Firmware
 (6)   Warm Reboot
 (8)   Show B0,B1 Mem pool
 (9)   All LEDs ON
 (0)   All LEDs OFF
 (a)   <MENU> gConfig
 (b)   <MENU> gSetting
 (c)   <MENU> DHCP Client
 (d)   <MENU> Dial
 (e)   <MENU> Ethernet
 (f)   <MENU> Firewall
 (p)   <MENU> PPPoE
 (s)   <MENU> System
 (w)   <MENU> Wireless
 (x)   Exit
 (y)   Show Reg 0xA0
 (?)   Help
=============================