Blitzz BWA711 v1 (??)

multiple revisions of this device, use caution
bg (G108)
	'Super G Wireless' 108Mbps Wireless G 4-Port Router
WikiDevi.wi-cat.ru	Blitzz BWA711 v1 (??)
3rd Party Firmware
dd-wrt	Incompatible
OpenWrt	Incompatible
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Blitzz BWA711 v1 (??)
FCC ID	JCK-GN-WIAG
Type	wireless router
CPU1	Brecis MSP2006
CPU1 Type	MIPS32 4Km
CPU1 Speed	167 MHz
Flash1 Chip	Macronix MX29LV160ABTC-90
Flash1 Size	2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />
RAM1 Size	16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Chip	SK hynix HY57V641620HG x 2
ETH chip1	Brecis MSP2006
Ethernet Port Count	4-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
	802dot11 OUI: 00:0F:EA (1 E, 1 W); Ethernet OUI: 00:01:38 (6 E, 6 W)
Stock bootloader	PMON 6.8.631
Stock FW OS	μClinux 2.4.20-br251
Expansion IF types	none specified
Power	? VDC, ? A
Connector type	barrel
Serial Port (UART)	yes, internal, 4-pin header, populated, (57600 8N1), P1
	Additional chips; 2.4GHz Power Amplifier IC;Microsemi;LX5510;MSC, 5510, 404V;1;
Other
	Default SSID: BWA711 ; Default IP address: 192.168.1.1; the IP 192.168.1.1 is used by 1324 additional devices; of which 1 are Blitzz devices; Default login user: admin; Default login password: admin; admin:admin credentials used by 1342 additional devices; of which 1 are Blitzz devices
Manuf/OEM/ODM	XAVi
Retail
FCC approval date	26 November 2003
Country of manuf	China
Radio 1
Radio1 module	Gigabyte GN-WIAG
Radio1 module IF	Mini PCI
Chip1	Atheros AR5213A
Chip2	Atheros AR2112A
Wireless interface OUI	00:0F:EA
Antenna Connector Type	U.FL
Wireless Standard	IEEE 802.11b/g
802.11g	up to 108 Mbps
802.11b	up to 11 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 GHz
Gigabyte GN-B49G	JCK-GN-WIAG
Gigabyte GN-WIAG	JCK-GN-WIAG

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented Brecis SoC's with specifications, see Brecis.

For a list of all currently documented Blitzz device with specifications, see Blitzz.

• 108 Mbps - 2.4GHz 802.11g = G108 class

Overview

"BWA711 Wireless Gateway Rev:1.0 31222" is silkscreened on a production model board.

"GC-WIAG-1.01" is silkscreened on the back of the wireless module. There is also a MAC label w/ a 00:0F:EA (Gigabyte) OUI affixed to it.

The module is using a Microsemi Corpration LX5510 InGaP HBT 2.4-2.5GHz Power Amplifier (marked "MSC", "5510", "404V").

The board populating this entry is using all TAICON capacitors.

JTAG-Serial Info

Serial

Info derived from

boot log


00111002

Copyright (c) 2003 Xavi Corporation
Switch chip detected : 1010
Chip select 0, Flash chip MXIC CFI-160 bottom, address 0xbfc00000, size 2MBytes
flash not detected in chip select 1
CPU type BRECIS 1000. CPU clock frequency 167 MHz.
Avail RAM 16025 KBytes.

PMON version 6.8.631 [EB], Tue Feb  3 17:27:32 CST 2004

IP Address : 192.168.1.1
MAC Address : 00:01:38:37:36:16
*** Press ^C to abort auto run (3 seconds) ***
Auto run second count down: 0
found image at 0xbfc20000, length 0x1b348d
Inflating image at bfc20000 to 80100000
block 69
Total blocks 69
original crc 0x850d0451 and length 0x306800
UART clock set to 1843200

LINUX started...
Set PCI Clock
Clock rate set to 166666667
CPU revision is: 0001830a
Primary instruction cache 16kb, linesize 16 bytes (4 ways)
Primary data cache 16kb, linesize 16 bytes (4 ways)



Linux version 2.4.20-br251 (mel@V_Server1) (gcc version 3.2 20030120 (uClinux 2.4.19-br20 BRECIS Release 2.0)) #3 Fri Jul 30 17:40:15 CST 2004
Determined physical RAM map:
 memory: 00001000 @ 00000000 (reserved)
 memory: 000ff000 @ 00001000 (ROM data)
 memory: 00338000 @ 00100000 (reserved)
 memory: 00bae700 @ 00438000 (usable)
On node 0 totalpages: 4070
zone(0): 4070 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: ip=::::XGATE:eth0:none:100fs console=ttyS0,57600
calculating r4koff... 000cb735(833333)
CPU frequency 166.66 MHz
Calibrating delay loop... 166.29 BogoMIPS
Memory: 11776k/11960k available (1571k kernel code, 184k reserved, 71k data, 84k init)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
POSIX conformance testing by UNIFIX
pcibios_init: assign resources, Autoconfig PCI channel 0x802b34c8
Scanning bus 00, I/O 0x00000004:0x00001000, Mem 0xb9002000:0xbc000000
00:0e.0 Class 0200: 168c:0013 (rev 01)
        Mem at 0xb9010000 [size=0x10000]
scan the buses.
Scanning bus 00
Found 00:70 [168c/0013] 000200 00
Fixups for bus 00
Bus scan for 00 returning with max=00
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xbc000100 (irq = 19) is a 16550A
ttyS01 at 0xb8400030 (irq = 13) is a 16550A
brecisboard: brecis_board_init entry
brecismspeth.c:v1.97, Sep 8, 2003 BRECIS Communications, Corp., www.brecis.com
ethaddr1 not set in boot prom
 No Mac addr specified for eth1 ethaddr1
ethaddr1 not set in boot prom
 No Mac addr specified for eth1 ethaddr1
Blkmem copyright 1998,1999 D. Jeff Dionne
Blkmem copyright 1998 Kenneth Albanowski
Blkmem 1 disk images:
0: 802B4000-804067FF [VIRTUAL A02B4000-A04067FF] (RO)
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
gbt_ar5k: gbt_atheros_init, Atheros AR5K 802.11a PCI/CardBus WLAN registering pci device.
PCI: Setting latency timer of device 00:0e.0 to 128
gbt_ar5k: AR5K deviceID = 0013 found.
gbt_ar5k: The GBT_ATHEROS CardBus Ethernet interface was not assigned an IRQ.
Maybe it will not be activated.
gbt_ar5k: ATTENTION, AP start up without file system supported!
H/W_probe Set wlan0 radio frequency 0
rxQueue phy addr : 00F44000
PPP generic driver version 2.4.2
Copy engine driver installed
b_flash flash device: bfc00000 at 200000
 Amd/Fujitsu Extended Query Table v1.0 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Creating 3 MTD partitions on "flash0":
0x00000000-0x00020000 : "pmon"
0x00020000-0x001f0000 : "linux image"
0x001f0000-0x00200000 : "nvram data storage"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 512)
eth0: Switch is set for 100 Mbps Full Duplex
Reading Configuration File "/var/apcfg".
Cannot open /var/apcfg
Can't parse configuration file.
Using factory default settings.
gbt_ar5k: ar5k module starts wlan0.
gbt_ar5k: ar5k module multiDomainCapEnabled FALSE
gbt_ar5k: swRadioDisable = 0, calibrationTime = 30
gbt_ar5k: wlan0 athCalibrationTask
gbt_ar5k: tApHouseKeeping alive.
gbt_ar5k: tApListKeeping alive.
gbt_ar5k: 802.1x built
gbt_ar5k: wlan0 pdevInfo @ 0x80f60000 BSS start
wireless access point starting...
wlan0 Ready
Ready
IP-Config: Incomplete network configuration information.
ip_conntrack version 2.1 (127 buckets, 1016 max) - 352 bytes per conntrack
ip_ct_ftp help registering helper callback=8023c034
ip_ct_irc help registering helper callback=8023c6f8
register h225 conntrack module
ip_ct_h323 help registering helper callback=8023e83c
register h225 nat help module
ip_ct_tftp help registering helper callback=0
ip_ct_quake3 help registering helper callback=8023feb0
ip_ct_pptp help registering helper callback=802401c8
ip_ct_mms help registering helper callback=80240ac8
ip_tables: (C) 2000-2002 Netfilter core team
ipt_timer loading
URLBLK init
ipt_inbox loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (romfs filesystem) readonly.
Freeing prom memory: 1020kb freed
Freeing unused kernel memory: 84k freed [8028c000-802a1000]
Algorithmics/MIPS FPU Emulator v1.5

Starting /etc/rc
Mount ramdisk as /var
Mount /proc
Create /var/tmp/
Create /var/run/utmp
Enabling IP forwarding
# nvram_retrieve_vars: magic number error
eth0: Switch is set for 100 Mbps Full Duplex
Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config
Added VLAN with VID == 1 to IF -:eth0:-
WARNING:  VLAN 1 does not work with many switches,
consider another number if you have problems.
Added VLAN with VID == 2 to IF -:eth0:-
eth0.1: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
device eth0.1 entered promiscuous mode
br0: port 1(eth0.1) entering learning state
br0: port 1(eth0.1) entering forwarding state
br0: topology change detected, propagating
device wlan0 entered promiscuous mode
Reading Configuration File "/var/apcfg".
gbt_ar5k: ar5k module starts wlan0.
gbt_ar5k: ar5k module multiDomainCapEnabled TRUE
gbt_ar5k: swRadioDisable = 0, calibrationTime = 30
gbt_ar5k: wlan0 athCalibrationTask
gbt_ar5k: tApHouseKeeping alive.
gbt_ar5k: tApListKeeping alive.
gbt_ar5k: 802.1x built
gbt_ar5k: wlan0 pdevInfo @ 0x80f60000 BSS start
wireless access point starting...
wlan0 Ready
Ready
br0: port 2(wlan0) entering learning state
br0: port 2(wlan0) entering forwarding state
br0: topology change detected, propagating
Firewall Initializing...
Firewall Setup...
Virtual Server Initializing...
Access Control List Initializing...
Content Filter Initializing...
Hex:0x1
Hex:0x0
Hex:0x0
Hex:0x0
Syslog Initializing...
close Remote Log

plog->slog_pid=153

xsyslogd started.
close Remote Log
eth0.2: Setting MAC address to  00 01 38 37 36 17.

bootloader help

XGATE> ?
  load  load memory from hostport            h  The help command
  help  The help command                     ?  The help command
  copy  copy memory                          g  start execution (go)
   sym  define symbol                      set  display/set variable
     d  display memory                  setmac  The setmac command
getmac  The getmac command               setbd  The setbd command
  dump  send srecs/binary to hostport     ping  send ping request to hostport

cat /proc/cpuinfo

# cat /proc/cpuinfo
BRECIS MIPS 4km

cat /proc/meminfo

# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  12144640  7360512  4784128        0   630784   643072
Swap:        0        0        0
MemTotal:        11860 kB
MemFree:          4672 kB
MemShared:           0 kB
Buffers:           616 kB
Cached:            628 kB
SwapCached:          0 kB
Active:            936 kB
Inactive:          308 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        11860 kB
LowFree:          4672 kB
SwapTotal:           0 kB
SwapFree:            0 kB

cat /proc/mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00020000 00010000 "pmon"
mtd1: 001d0000 00010000 "linux image"
mtd2: 00010000 00010000 "nvram data storage"

cat /etc/passwd

# cat passwd
root:z1UcRYmEzsAaY:0:0:root:/root:/bin/sh
demo:z1UcRYmEzsAaY:5000:100:Demo User:/home/demo:/bin/bash

ps

# ps
  PID  Uid     VmSize Stat Command
    1 root            S    init
    2 root            S    [keventd]
    3 root            R    [ksoftirqd_CPU0]
    4 root            S    [kswapd]
    5 root            S    [bdflush]
    6 root            S    [kupdated]
    7 root            S    [mtdblockd]
    8 root            Z    [tTrapMon]
    9 root            Z    [tWlanCal]
   10 root            Z    [tApHouseKeeping]
   11 root            Z    [swapper]
   33 root            S    /bin/webs
   34 root            S    -/bin/sh
   66 root            S    [tWlanCal]
   67 root            S    [tApHouseKeeping]
   68 root            S    [tApListKeeping]
  154 root            S    syslogd -f /var/run/logmail.conf
  172 root            S    udhcpd
  184 root            R    ps

cat /proc/bus/pci/devices

# cat devices
0070    168c0013        0       b9010000        00000000        00000000        00000000        00000000        00000000        00000000        00010000  00000000 00000000        00000000        00000000        00000000        00000000        atheros

Blitzz BWA711 v1 (??)

Overview

JTAG-Serial Info

Serial

Info derived from

bootloader help

cat /proc/cpuinfo

cat /proc/meminfo

cat /proc/mtd

cat /etc/passwd

ps

cat /proc/bus/pci/devices

Navigation menu

Page actions

Page actions

Personal tools

Search

Navigation

data/misc

Tools

query forms

ShoutWiki messages