LG-Nortel ELO WR100T (LNWR100T)/Serial info

After booting, Shift-0 will allow access to debug mode. Option 4 would appear to allow fetching + flashing of firmware via TFTP, to some extent.

Info derived from

boot log

ar531xPlus rev 0x00000087 boot loader startup... Flash initialized SDRAM initialized Cache initialized Copy program from 0xbfc00000 to 0x80520000, length 0x0000cd04 bytes ... done Jump to SDRAM 0x80520cb4 [0x10000008, 0x00000000, 0x00000000] Clear BSS section ... done Stack: 0x8053eb20 Heap: 0x8053eb30 ============================================================================ Wireless Gateway WG4005E 1-LF-17 LN Loader V2.00 build Nov 14 2007 18:17:34 Arcadyan Technology Corporation ============================================================================ Copying boot params.....DONE cpuFreq=240000000 sysFreq=60000000 cntFreq=120000000 Press any key to enter command mode ... Checking Valid Image in Flash... Passed. Unzipping program from bank 2...............................done *** WEB image writing into the 16MB SDRAM has completed *** Try to find image for running... Valid Code found in the Flash ........................................................................................................................................................................................................................................................................................done Uncompressed size = 2161965 I am going to run the Code image from 80001000 firmware startup... Stack: 0x80c83150 Heap: 0x80c83160 D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called?? D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: setGpio is called?? ##### _ftext = 0x80001000 ##### _fdata = 0x801D1C50 ##### __bss_start = 0x80210D2D ##### end = 0x80C7315C ##### Backup Data from 0x801D1C50 to 0x80C9315C length=0003F0DD [CGI] Web SDRAM area is from 0X80E00000H install_exception Installing TLB Refill exception handler from 8000ED00 to 80000000, size=184 Installing General exception handler from 8000EDB8 to 80000180, size=216 Installing Interrupt exception handler from 8000EE90 to 80000200, size=160 misc_int_init mips_int_enable : 0x00000400 Connect the AHB interrupt sysBoardDataInit Init the GPIOs !!! Enable arbitration for SOC devices !!! cpuFreq=184000000 sysFreq=40000000 cntFreq=92000000 AR531X_TIMER=00061A6D AR531X_RELOAD=00061A80 AR531X_IMR=00000028 mips_cp0_status=10000401 mips_cp0_cause=30800000 [INIT] MTinitialize .. Runtime code version: V2.09 System startup... [INIT] MTmeminit .. [INIT] check COLOR 0 .. [INIT] soho initialize COLOR1 : 819200 [INIT] soho initialize COLOR2 : 524288 D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called?? Flash Found. It is 2MB Flash.... Set flash memory layout to Runcode version: V2.09 Runcode date: Jan 4 2008 13:53:32 Bootcode version: V2.00 Serial number: J818033937 Hardware version: 01 sizeof(struct III_Config_t) is 125688 !!! Invalid wireless channel range 0 ~ 0 !!! Use default value 1 ~ 13 default route: 0.0.0.0 BufferInit: BUF_HDR_SZ=48 BUF_ALIGN_SZ=8 BUFFER_OFFSET=112 BUF_BUFSZ0=384 BUF_BUFSZ1=3264 NUM_OF_B0=200 NUM_OF_B1=1000 BUF_POOL0_SZ=86400 BUF_POOL1_SZ=3312000 sizeof(BUFFER0)=432,sizeof(BUFFER1)=3312 *BUF0=0x808eae34 *BUF1=0x805c24a4 Altgn *BUF0=0x808eae40 *BUF1=0x805c24b0 End at BUF0:0x808fffc0, BUF1:0x808eae30 buffer0 pointer init OK! buffer1 pointer init OK! time = 08/01/2003, 00:00:00 TRAP(linkUp) : send ok! Interface 0 ip = 127.0.0.1 ar531xmac_init: ifno=1, initstr=UNIT=0 VLAN=1 D:/MyProjects/ttf2004/source/firmware/hardware/ar5312/ar531xbsp.c:sysEnetInit is called ae531xEndLoad: loading device ... ae531xEndLoad: unit=0, pDmaBuf=0xa0211538, dmaBufSize=8976, txDescCount=192, rxDescCount=256, clCount=512 ae531xEndLoad: System param: mac=b0500000, dma=b0501000, ivec=4, ilev=1000 ae531xEndLoad: Flash ea = 00:13:f7:e5:34:19 ae0 qt = 1, buf begin = 80000000, buf end = 80000000 ae0 qt = 1, drsc begin = a0211540, desc end = a021242c Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x 0 ae0 qt = 2, buf begin = 805c2522, buf end = 80690832 ae0 qt = 2, drsc begin = a0212440, desc end = a021382c Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000 ae531xMemInit: Memory setup complete. EepromWriteWord: address=01, lowByte=00, highByte=80 EepromWriteWord: address=03, lowByte=00, highByte=80 EepromWriteWord: address=05, lowByte=00, highByte=80 EepromWriteWord: address=07, lowByte=00, highByte=80 SR_CHIP_ID = 00000000 Invalid PHY ID for enet0. Expected 0x00007102, read 0x00000000 This is IC PLUS... Found PHY enet0 port0: model 0x18 revision 0x0 Found PHY enet0 port1: model 0x18 revision 0x0 Found PHY enet0 port2: model 0x18 revision 0x0 Found PHY enet0 port3: model 0x18 revision 0x0 Found PHY enet0 port4: model 0x18 revision 0x0 Port 0, Negogiation timeout eth0: Phy Status=7849 eth0: Phy Status=7849 eth0: Phy Status=7849 eth0: Phy Status=7849 eth0: Phy Status=7849 ip_VLANInit> WAN port ip_VLANInit> LAN port ip_VLANInit> LAN port ip_VLANInit> LAN port ip_VLANInit> LAN port Smart Router : 189 ae0 Phy Setup Failed Please check the ethernet cable on port 0! eth0: duplex 0, link 0 ae_SetMacFromPhy: enet0 as half duplex, 100Mbps ae0: setting TXDP=0xa0211540 RXDP=0xa0212440 ae0 Verify MAC address E5F71300 00001934 sb = 00 13 F7 E5 34 19 ae531xRxFilterConfig: MacControl = 1084000C ae531xEndLoad: Done loading, pDrvCtrl=80211330 txQ=8021135C rxQ=80211370 ar531xmac_init: enet0 set to VLAN mode ar531xmac_init: enet0 interface 1 registered to VLAN 1 DmaStatus = 0x 0 DmaBusMode = 0x 2084 DmaRxBase = 0x 212440 DmaTxBase = 0x 211540 DmaControl = 0x 200000 DmaIntr = 0x 0 MacControl = 0x1084000c MacAddrHi = 0x 1934 MacAddrLo = 0xe5f71300 MacVlan1 = 0x 8100 MacVlan2 = 0x 0 Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000 Current Rx buffer = 0x 0 Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x 0 Current Tx buffer = 0x 0 time = 08/01/2003, 00:00:00 TRAP(linkUp) : send ok! ae531xRxFilterConfig: MacControl = 1084000C Interface 1 ip = 192.168.2.1 ae531xRxFilterConfig: MacControl = 1084000C ether_init : Set WAN MTU = 1500 ar531xmac_init: ifno=2, initstr=UNIT=0 VLAN=2 ar531xmac_init: driver already loaded, number of instances is 2 ar531xmac_init: enet0 set to VLAN mode ar531xmac_init: enet0 interface 2 registered to VLAN 2 DmaStatus = 0x 0 DmaBusMode = 0x 2084 DmaRxBase = 0x 212440 DmaTxBase = 0x 211540 DmaControl = 0x 200000 DmaIntr = 0x 0 MacControl = 0x1084000c MacAddrHi = 0x 1934 MacAddrLo = 0xe5f71300 MacVlan1 = 0x 8100 MacVlan2 = 0x 0 Rx Queue b=0xa0212440, e=0xa021382c, c=0xa0212440, s@c=0x80000000 Current Rx buffer = 0x 0 Tx Queue b=0xa0211540, e=0xa021242c, c=0xa0211540, s@c=0x 0 Current Tx buffer = 0x 0 time = 08/01/2003, 00:00:00 TRAP(linkUp) : send ok! iput_IpLinkUp(ifno=2)> ifp->add_default_route:1 Re-Init NAT data structure Init NAT data structure iput_IpLinkUp(ifno=2): set ddns_update to 1 Interface 2 ip = 0.0.0.0 D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called?? [HWLAN] ifno=3 irno=7 port=0x00000000 [HWLAN] semBCreate return 1 80378e50, count 1 [HWLAN] pRadio->abolt = 00000000 [HWLAN] pRadio->abolt = 00000000 [HWLAN] gSetting.BasicRate=f apInit: Initialize Access Point. [HWLAN] ar5hwcCreatePhy : ifno:3 pdevInfo=80457e44, devno=1 [HWLAN] devno 1 pdevInfo 80457e44 [HWLAN] Base address = b0000000, irq 3 Attach AR5212 0x13 0x80457e44 [HWLAN] DOMAIN 00008210 [HWLAN] Set HWLAN MAC as LAN MAC .. [HWLAN] MAC Address=00-13-F7=E5-34-1B [HWLAN] wlan1 revisions: mac 11.0 phy 4.8 analog 7.0 eeprom 5.2 ### MAX ### Sending Power Strength = 30 dBm [HWLAN] phwChannel 2437, channelFlags 00005400 [HWLAN] size of ATHEROS_DESC hardware part 32 [HWLAN] CACHE_LINE_SIZE 16, AR_DESC_SIZE 128 [HWLAN] AR_HEADER_SIZE 96, AR_BUF_SIZE 3196numDescriptors = 704 [HWLAN] wlan1: pDmaBuf=A02162E0 [HWLAN] pMemBuf a02162e0 pdevInfo->pDmaBuf a02162e0 [HWLAN] semBCreate return 2 80378e60, count 1 [HWLAN] ar5hwcQueueCreate: semaphore id 80378e60 [HWLAN] semBCreate return 3 80378e70, count 1 [HWLAN] ar5hwcQueueCreate: semaphore id 80378e70 [HWLAN] semBCreate return 4 80378e80, count 1 [HWLAN] ar5hwcQueueCreate: semaphore id 80378e80 [HWLAN] semBCreate return 5 80378e90, count 1 [HWLAN] ar5hwcQueueCreate: semaphore id 80378e90 [HWLAN] pMemBuf a02322e0, pdevInfo->pDmaBuf + pdevInfo->dmaBufSize a0264300 [HWLAN] muxDevLoad is called for vportNum 10000, loadfn 80096c1c, vportStr 16: 0: 1 [HWLAN] semBCreate return 6 80378ea0, count 1 [HWLAN] semBCreate return 7 80378eb0, count 1 ar5212Reset: maxCalCount 20 [HWLAN] ioctl CMD=0xb mips_int_connect: ivec 3 ar5hwcInt 8007b4e0 pdevInfo 80457e44 mips_int_enable : 0x00000C00 [HWLAN] bridgePortAdd : vp, 10000 [HWLAN] bridgePortAdd (base BSS) succeeded for vp1 [HWLAN] semBCreate return 8 80378ec0, count 0 [HWLAN] semBCreate return 9 80378ed0, count 0 [HWLAN] semBCreate return 10 80378ee0, count 1 [HWLAN] semBCreate return 11 80378ef0, count 1 [HWLAN] semBCreate return 12 80378f00, count 0 [HWLAN] semBCreate return 13 80378f10, count 1 [HWLAN] semBCreate return 14 80378f20, count 1 [HWLAN] semBCreate return 15 80378f30, count 0 [HWLAN] semBCreate return 16 80378f40, count 1 [HWLAN] semBCreate return 17 80378f50, count 1 [HWLAN] semBCreate return 18 80378f60, count 0 [HWLAN] semBCreate return 19 80378f70, count 1 wlan1 added STA: 00:13:f7:e5:34:1b (1050) [HWLAN] ifno=3 after call apInit() : .... bg 1 , a 0 .... time = 08/01/2003, 00:00:00 TRAP(linkUp) : send ok! [HWLAN] hwlan_ioctl() .. Interface 3 ip = 192.168.2.1 [HWLAN] hwlan_ioctl() .. D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called?? [HWLAN] ifno=6 irno=7 port=0x00000000 [HWLAN] hwlan_ioctl() .. Interface 6 ip = 192.168.2.1 [HWLAN] hwlan_ioctl() .. D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called?? [HWLAN] ifno=7 irno=7 port=0x00000000 [HWLAN] hwlan_ioctl() .. Interface 7 ip = 192.168.2.1 [HWLAN] hwlan_ioctl() .. D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called?? [HWLAN] ifno=8 irno=7 port=0x00000000 [HWLAN] hwlan_ioctl() .. Interface 8 ip = 192.168.2.1 [HWLAN] hwlan_ioctl() .. D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: Hwlan_light_init is called?? [HWLAN] ifno=9 irno=7 port=0x00000000 [HWLAN] hwlan_ioctl() .. Interface 9 ip = 192.168.2.1 [HWLAN] hwlan_ioctl() .. ruleCheck()> Group: 0, Error: Useless rule index will be truncated ruleCheck()> Group: 1, Error: Useless rule index will be truncated ruleCheck()> Group: 2, Error: Useless rule index will be truncated ruleCheck()> Group: 3, Error: Useless rule index will be truncated ruleCheck()> Group: 4, Error: Useless rule index will be truncated ruleCheck()> Group: 5, Error: Useless rule index will be truncated ruleCheck()> Classify Rule: 1, Error: Protocol Field ruleCheck()> Classify Rule: 2, Error: Protocol Field ruleCheck()> Classify Rule: 3, Error: Protocol Field ruleCheck()> Classify Rule: 4, Error: Protocol Field ruleCheck()> Classify Rule: 5, Error: Protocol Field ruleCheck()> Classify Rule: 6, Error: Protocol Field ruleCheck()> Classify Rule: 7, Error: Protocol Field ruleCheck()> Classify Rule: 8, Error: Protocol Field ruleCheck()> Classify Rule: 9, Error: Protocol Field ruleCheck()> Classify Rule: 10, Error: Protocol Field ruleCheck()> Classify Rule: 11, Error: Protocol Field ruleCheck()> Classify Rule: 12, Error: Protocol Field ruleCheck()> Classify Rule: 13, Error: Protocol Field ruleCheck()> Classify Rule: 14, Error: Protocol Field ruleCheck()> Classify Rule: 15, Error: Protocol Field ruleCheck()> Classify Rule: 16, Error: Protocol Field ruleCheck()> Classify Rule: 17, Error: Protocol Field ruleCheck()> Classify Rule: 18, Error: Protocol Field ruleCheck()> Classify Rule: 19, Error: Protocol Field ruleCheck()> Classify Rule: 20, Error: Protocol Field ruleCheck()> Classify Rule: 21, Error: Protocol Field ruleCheck()> Classify Rule: 22, Error: Protocol Field ruleCheck()> Classify Rule: 23, Error: Protocol Field ruleCheck()> Classify Rule: 24, Error: Protocol Field ruleCheck()> Classify Rule: 25, Error: Protocol Field ruleCheck()> Classify Rule: 26, Error: Protocol Field ruleCheck()> Classify Rule: 27, Error: Protocol Field ruleCheck()> Classify Rule: 28, Error: Protocol Field ruleCheck()> Classify Rule: 29, Error: Protocol Field ruleCheck()> Classify Rule: 30, Error: Protocol Field ruleCheck()> Classify Rule: 31, Error: Protocol Field ruleCheck()> Classify Rule: 32, Error: Protocol Field reqCBACBuf()> init match pool, Have: 1000 Memory Address: 0x80c22034 ~ 0x80c28db0 reqCBACBuf()> init timeGap pool, Have: 10000 Memory Address: 0x80c28db0 ~ 0x80c59b04 reqCBACBuf()> init sameHost pool, Have: 2000 Memory Address: 0x80c59b04 ~ 0x80c69524 [setClsfyEnable] clsfy_func=0 CBAC rule pool initialized !! Init NAT data structure RUNTASK id=2 if_task if0... RUNTASK id=3 if_task if1... RUNTASK id=4 if_task if2... RUNTASK id=5 if_task if3... RUNTASK id=6 if_task if6... RUNTASK id=7 if_task if7... RUNTASK id=8 if_task if8... RUNTASK id=9 if_task if9... RUNTASK id=10 timer_task... RUNTASK id=11 conn_mgr... RUNTASK id=12 main_8021x... year=104,mon=11,day=18D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called?? randomize .. RUNTASK id=13 period_task... RUNTASK id=14 dhcp_daemon... RUNTASK id=15 dhcp_clt...on interface 2 RUNTASK id=16 pptp_callmgr... httpd: listen at 192.168.2.1:80 HTTPD TIMER_RESOURCE:5, FS_RESOURCE:6 RUNTASK httpd... RUNTASK id=19 dnsproxy... RUNTASK id=20 snmp_task... RUNTASK id=21 rip... RUNTASK id=22 ripout... RUNTASK id=23 dhcpd_mgmt_task... UPnP is enabled RUNTASK id=24 upnp_main ... [UPNP] Device initialize success D:/MyProjects/ttf2004/source/firmware/project/smc/wg4005e1-lf-17-ln/ar5315/gpio.c: feed_watchdog is called?? Starting Multitask... MTstart2() begin ... upnp_Init: flag=0 SSDP Initialization completed... GenaInit : event_hook is NULL!! [HWLAN] Ready This Device is GW TRAP(coldStart) : send ok!

console debug options, root

======= Console Debug ======= (1) Alert Mail Testing (2) Web Upgrage (3) Write Web (4) Firmware Upgrage (5) Write Firmware (6) Warm Reboot (8) Show B0,B1 Mem pool (9) All LEDs ON (0) All LEDs OFF (a) <MENU> gConfig (b) <MENU> gSetting (c) <MENU> DHCP Client (d) <MENU> Dial (e) <MENU> Ethernet (f) <MENU> Firewall (p) <MENU> PPPoE (s) <MENU> System (w) <MENU> Wireless (x) Exit (y) Show Reg 0xA0 (?) Help =============================