SerComm H500-s

abgn+ac (AC2100)
wireless router, dsl modem, CPE
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Partial Support
Tomato any flavor	Status Unknown
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	SerComm H500-s v1 (Vodafone)
FCC ID	none specified
Board ID	BXK00C-1.6
Type	wireless router, dsl modem, CPE
CPU1	Broadcom BCM63167
CPU1 Type	MIPS
CPU1 Speed	400 MHz ( 2 cores )
CPU2	Quantenna QT3740BC
CPU2 Speed	500 MHz ( 2 cores )
Flash1 Chip	Macronix MX30LF1G18AC-TI
Flash1 Size	128 MiB134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br />
Flash2 Chip	Macronix MX25L512E
Flash2 Size	0.064 MiB67,108.864 B <br />524.288 Kib <br />65.536 KiB <br />0.512 Mib <br />6.25e-5 GiB <br />
RAM1 Size	128 MiB134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br />
RAM1 Chip	Nanya NT5CC64M16GP-DI
RAM2 Size	128 MiB134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br />
RAM2 Chip	Nanya NT5CC64M16GP-DI
ETH chip1	Broadcom BCM63167
Switch	Broadcom BCM53134S
Ethernet Port Count	1-1GbE-WAN 3-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: 78:81:02 (1 E, 1 W) Ethernet OUI: 78:81:02 (1 E, 1 W)
Stock bootloader	CFE
Stock FW OS	Linux
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 2.5 A
Connector type	barrel 5.5 mm (OD) 2.5 mm (ID)
Serial Port (UART)	yes, 4-pin header
Flags: ADSL2+, VDSL2, VoIP, UMTS
Additional chips 5GHz WLAN Front End Module;Microsemi;LX5586H;MSC, 586H, 730F;4; 2ch 150V Tracking miSLIC FXS Interface IC;Microsemi;Le9672WQC;;1;
Other
Default SSID: vodafoneXXXX , vodafoneXXXX_5G Default IP address: 192.168.0.1 the IP 192.168.0.1 is used by 799 additional devices of which 13 are SerComm devices Default login user: admin Default login password: VF-ESVodafone-H-500-s
Manuf/OEM/ODM	SerComm
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Retail
Availability	Vodafone
(Est.) release date	January 2017
EAN	8430208012420 (UPC DB, On eBay)
Country of manuf	China
Radio 1
Chip1	Broadcom BCM63168
Wireless interface OUI	78:81:02
Antenna Connector Type	U.FL
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	Quantenna QT3740BC
Chip2	Quantenna QT2518B
Wireless interface OUI	78:81:02
Antenna Connector Type	MS156
MIMO status	4x4:4
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 1733 Mbps
802.11n	up to 600 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.
For a list of all currently documented Quantenna chipsets with specifications, see Quantenna.

For a list of all currently documented SerComm device with specifications, see SerComm.

• 1733 Mbps - 4SS 5GHz 802.11ac (80MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AC2100 class

Overview

Model Name: Vodafone H500-s (SerComm)

"BXK00C-1.6" and "1735" is silkscreened on the board.

See also: Askey RTF3505VW-GV and MitraStar GPT-2541GNAC

Specifications

• Flash: Macronix MX25L512E 64KB (Serial NOR)

512Kbit (x1/x2) 3V CMOS Flash Memory

• Macronix MX30LF1G18AC 128MB (SLC NAND)

1Gbit x8 4-bit ECC 48-pin TSOP 3V SLC Flash

• RAM: Nanya NT5CC64M16GP 128MB (DDR3L)

1Gbit 64Mx16 1.35V 96-Pin VFBGA SDRAM

• PSU: PS30W120EUG20-BXK-00

Wi-Fi CERTIFIED N

• 2.4 GHz, 5 GHz - Concurrent
• 2 Spatial Streams 2.4 GHz
• 3 Spatial Streams 5 GHz
• Short Guard Interval
• TX A-MPDU
• STBC Transmit
• 40 MHz operation in 2.4 GHz, with coexistence mechanisms
• 40 MHz operation in 5 GHz
• HT Duplicate Mode (MCS 32)

Wi-Fi CERTIFIED AC

• 4 Spatial Streams 5 GHz
• Rx MCS 8-9 (256-QAM)
• Rx A-MPDU of A-MSDU
• Tx SU beamformer
• Low Density Parity Check coding

Links of Interest

• Press release
• Vodafone H500-s
• Sercom H 500-s OpenWrt Wiki

Source code

• H500s V3305.rar

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)
On the OpenWrt Wiki
OpenWrt Target: bmips
OpenWrt Subtarget: bcm63268
OpenWrt Package architecture: mips_mips32
Support started version: 21.02.0
Current supported version: 23.05.5
Unsupported Functions:
DSL modem, FXS, WiFi 2.4GHz

Please insert instructions here

JTAG-Serial Info

Serial

Serial Pinouts

• baudrate: 115200

GND	TX	VCC	RX
■	■	■	■
▷ 1	2	3	4

Boot log

boot log

HELO CPUI L1CI HELO CPUI L1CI 4.1605-1.0.38-118.3 DRAM ---- PHYS STRF 400H PHYE DDR3 SIZ4 SIZ3 SIZ2 DINT USYN LSYN MFAS LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN FPS0 FDPM PMOK GFOK F002 F001 RAM1 NAN9 NAN3 RFS0 NAN5 Base: 4.16_05 CFE version 1.0.38-118.3 for BCM963268 (32bit,SP,BE) Build Date: Fri Aug 19 13:10:18 CST 2016 (jeremy@Ubuntu) Copyright (C) 2000-2015 Broadcom Corporation. Boot Strap Register: 0x1ff90bf Chip ID: BCM63167D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes NAND flash device: MXIC MX30LF1G08AA, id 0xc2f1 block 128KB size 131072KB GPIOOverlays is 0x8010 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host/tftp (f/h/c) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Default host ramdisk file name : Default ramdisk store address : Board Id (0-33) : 963167REF3 Number of MAC Addresses (1-32) : 16 Base MAC Address : 78:81:02:61:DE:AD PSI Size (1-128) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 WLan Feature : 0x00 Voice Board Configuration (0-19) : LE9672_ZSI Partition 1 Size (MB) : Partition 2 Size (MB) : Partition 3 Size (MB) : Partition 4 Size (MB) (Data) : 4MB External switch id = a750 SC_DEBUG: Nand Partition Table Magic Found at 20000. part 0, logic_offset 00000000, logic_length 00020000, real_offset 00000000, real_length 00020000 part 1, logic_offset 00020000, logic_length 000a0000, real_offset 00020000, real_length 000a0000 part 2, logic_offset 000c0000, logic_length 00140000, real_offset 000c0000, real_length 00140000 part 3, logic_offset 00200000, logic_length 00140000, real_offset 00200000, real_length 00140000 part 4, logic_offset 00340000, logic_length 000a0000, real_offset 00340000, real_length 000a0000 part 5, logic_offset 003e0000, logic_length 00140000, real_offset 003e0000, real_length 00140000 part 6, logic_offset 00520000, logic_length 01e00000, real_offset 00520000, real_length 01e00000 part 7, logic_offset 02320000, logic_length 01400000, real_offset 02320000, real_length 01400000 part 8, logic_offset 03720000, logic_length 01e00000, real_offset 03720000, real_length 01e00000 part 9, logic_offset 05520000, logic_length 01400000, real_offset 05520000, real_length 01400000 part 10, logic_offset 06920000, logic_length 00140000, real_offset 06920000, real_length 00140000 part 11, logic_offset 06a60000, logic_length 00140000, real_offset 06a60000, real_length 00140000 part 12, logic_offset 06ba0000, logic_length 00280000, real_offset 06ba0000, real_length 00280000 part 13, logic_offset 06e20000, logic_length 00280000, real_offset 06e20000, real_length 00280000 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 *************************************************** Sercomm Boot Version 0.0.4.0 *************************************************** Entering Firmware : Everything is OK. Boot Flag's Magic Found at 6920000. Boot Flag's Magic Found at 6a60000. Find bootFlag successfully. BootFlag1: eRcOmM.002 BootFlag2: eRcOmM.001 Booting from first image (0xb8520000) ... Checksum ... OK! Correctable ECC Error detected: addr=0x0052aa00, intrCtrl=0x00000090, accessCtrl=0xE3441010 Correctable ECC Error detected: addr=0x0052aa00, intrCtrl=0x00000090, accessCtrl=0xE3441010 Correctable ECC Error detected: addr=0x005f9000, intrCtrl=0x000000B0, accessCtrl=0xE3441010 Decompression LZMA Image OK! Entry at 0x80455f10 Closing network. Disabling Switch ports. Flushing Receive Buffers... 1 buffers found Closing DMA Channels Starting program at 0x80455f10 Linux version 3.4.11-rt19 (west@ubuntu) (gcc version 4.6.2 (Buildroot 2011.11) ) #3 SMP PREEMPT Thu May 31 16:56:36 CST 2018 963167REF3 prom init CPU revision is: 0002a080 (Broadcom BMIPS4350) DSL SDRAM reserved: 0x132000 Determined physical RAM map: memory: 07ece000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00007ece Movable zone start PFN for each node Early memory PFN ranges 0: 0x00000000 -> 0x00007ece On node 0 totalpages: 32462 free_area_init_node: node 0, pgdat 8056e6d0, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 222 pages used for memmap Normal zone: 28144 pages, LIFO batch:7 PERCPU: Embedded 7 pages/cpu @81103000 s5520 r8192 d14960 u32768 pcpu-alloc: s5520 r8192 d14960 u32768 alloc=8*4096 pcpu-alloc: [0] 0 [0] 1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32208 Kernel command line: root=mtd:rootfs rw rootfstype=jffs2 irqaffinity=0 PID hash table entries: 512 (order: -1, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Memory: 122632k/129848k available (4432k kernel code, 7216k reserved, 1068k data, 220k init, 0k highmem) Preemptible hierarchical RCU implementation. NR_IRQS:128 console [ttyS0] enabled Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0 Calibrating delay loop... 397.31 BogoMIPS (lpj=198656) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 --Kernel Config-- SMP=1 PREEMPT=1 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 Broadcom Logger v0.1 May 31 2018 16:03:32 CPU revision is: 0002a080 (Broadcom BMIPS4350) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Brought up 2 CPUs NET: Registered protocol family 16 Internal 1P2 VREG will be shutdown if unused...Unused, turn it off (0000845b-00008457=4<300) registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [mem 0xa0f00000-0xa0ffffff] pci_bus 0000:00: root bus resource [io 0xa2000000-0xa200ffff] pci 0000:00:00.0: [14e4:435f] type 00 class 0x028000 pci 0000:00:00.0: reg 10: [mem 0x10004000-0x10005fff] pci 0000:00:09.0: [14e4:6300] type 00 class 0x0c0310 pci 0000:00:09.0: reg 10: [mem 0x10002600-0x100026ff] pci 0000:00:0a.0: [14e4:6300] type 00 class 0x0c0320 pci 0000:00:0a.0: reg 10: [mem 0x10002500-0x100025ff] PCI host bridge to bus 0000:01 pci_bus 0000:01: root bus resource [mem 0x11000000-0x11efffff] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0] pci 0000:01:00.0: [14e4:6326] type 01 class 0x060400 pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PCI bridge to [bus 02-02] bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated bcmleg_spi bcmleg_spi.0: master is unqueued, this is deprecated skb_free_task created successfully gbpm_do_work scheduled BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 May 31 2018 16:10:05 initialized Broadcom GBPM v0.1 May 31 2018 16:10:05 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 Switching to clocksource MIPS NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 3, 32768 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP: reno registered UDP hash table entries: 128 (order: 0, 4096 bytes) UDP-Lite hash table entries: 128 (order: 0, 4096 bytes) NET: Registered protocol family 1 PCI: CLS mismatch (64 != 16), using 16 bytes bcm_tstamp initialized, (hpt_freq=200000000 2us_div=200 2ns_mult=5 2ns_shift=0) squashfs: version 4.0 (2009/01/31) Phillip Lougher NTFS driver 2.1.30 [Flags: R/W]. jffs2: version 2.2. (NAND) (SUMMARY) �� 2001-2006 Red Hat, Inc. fuse init (API version 7.18) msgmni has been set to 239 io scheduler noop registered (default) Broadcom NAND controller (BrcmNand Controller) mtd->oobsize=0, mtd->eccOobSize=0 NAND_CS_NAND_XOR=00000000 B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0 brcmnand_read_id: CS0: dev_id=c2f18095 After: NandSelect=40000001, nandConfig=15142200 DevId c2f18095 may not be supported. Will use config info Spare Area Size = 16B/512B Block size=00020000, erase shift=17 NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11 busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff ECC level changed to 4 OOB size changed to 16 BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 128MB on CS0 Found NAND on CS0: ACC=e3441010, cfg=15142200, flashId=c2f18095, tim1=6532845b, tim2=00001e94 BrcmNAND version = 0x0400 128MB @00000000 brcmnand_scan: B4 nand_select = 40000001 brcmnand_scan: After nand_select = 40000001 handle_acc_control: default CORR ERR threshold 1 bits ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16 page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17 Brcm NAND controller version = 4.0 NAND flash size 128MB @18000000 ECC layout=brcmnand_oob_bch4_2k brcmnand_scan: mtd->oobsize=64 brcmnand_scan: oobavail=35, eccsize=512, writesize=2048 brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7 -->brcmnand_default_bbt brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0 Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0 brcmnand_reset_corr_threshold: default CORR ERR threshold 1 bits for CS0 brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0 brcmnandCET: Status -> Deferred PPP generic driver version 2.4.2 PPP BSD Compression module registered PPP Deflate Compression module registered NET: Registered protocol family 24 ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) ehci_hcd 0000:00:0a.0: setting latency timer to 64 ehci_hcd 0000:00:0a.0: EHCI Host Controller ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500 ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: setting latency timer to 64 ohci_hcd 0000:00:09.0: OHCI Host Controller ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected usbcore: registered new interface driver usblp Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. brcmboard: brcm_board_init entry DYING GASP IRQ Initialized and Enabled Serial: BCM63XX driver $Revision: 3.00 $ Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands) ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX Total # RxBds=1448 bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized bcmPktDma_init: Broadcom Packet DMA Library initialized IPSEC SPU: SUCCEEDED GACT probability NOT on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1916 buckets, 7664 max) ip_tables: (C) 2000-2006 Netfilter Core Team TCP: cubic registered Initializing XFRM netlink socket NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Initializing MCPD Module Ebtables v2.0 registered ebt_time registered ebt_tcpmss registered ebt_ftos registered ebt_wmm_mark registered 8021q: 802.1Q VLAN Support v1.8 hub 1-0:1.0: over-current condition on port 2 VFS: Mounted root (jffs2 filesystem) readonly on device 31:6. Freeing unused kernel memory: 220k freed init started: BusyBox v1.15.3 () starting pid 296, tty '': '/etc/rcS' bcm_ingqos: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint Broadcom Ingress QoS Module Char Driver v0.1 May 31 2018 16:06:16 Registered<243> Broadcom Ingress QoS ver 0.1 initialized BPM: tot_mem_size=134217728B (128MB), buf_mem_size <15%> =20132655B (19MB), num of buffers=9986, buf size=2016 Broadcom BPM Module Char Driver v0.1 May 31 2018 16:05:56 Registered<244> bcmxtmrt: Broadcom BCM3167D0 ATM/PTM Network Device v0.9 May 31 2018 16:08:15 NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v3.0 May 31 2018 16:06:16 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. [FHW] pktDbgLvl[0x85d5f040]=0 [FHW] fhw_construct: Initialized Fcache HW accelerator layer state flwStatsThread created Constructed Broadcom Packet Flow Cache v3.0 May 31 2018 16:06:16 chipId 0x631670D0 Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 May 31 2018 16:06:00 Registered <241> Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done FAP Debug values at 0xa5f246f0 0xa5fa46f0 fapGso_LoopBkThread created successfully Allocated FAP0 SWQ_HOST2FAP_GSO_LOOPBACK_Q mem=a7998000 : 16384 bytes Allocated FAP0 SWQ_FAP2HOST_GSO_LOOPBACK_Q mem=a7aa0000 : 16384 bytes GSO LOOPBACK Cached HOST2FAP Q INFO: Swq =b0825ef8 qStart=a7998000 qEnd=a799c000 msgSize=4 dqm=18 fapId=0 GSO LOOPBACK Cached FAP2HOST Q INFO: Swq =b0825ec8 qStart=a7aa0000 qEnd=a7aa4000 msgSize=2 dqm=19 fapId=0 Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a5df4000 : 7200 bytes Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a5cfc000 : 7200 bytes Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a5cfa000 : 7200 bytes Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a5efc000 : 7200 bytes Allocated FAP0 TM SDRAM Queue Storage (a5f35780) : 390144 bytes @ a5400000 Allocated FAP1 TM SDRAM Queue Storage (a5fb5780) : 390144 bytes @ a5480000 [NTC fapProto] fapReset : Reset FAP Protocol layer [FAP0] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4568>, free <1832>, total<8192> [FAP1] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4568>, free <1832>, total<8192> [FAP0] PSM : addr<0x80002000>, used <24472>, free <104>, total <24576> [FAP1] PSM : addr<0x80002000>, used <24472>, free <104>, total <24576> [FAP0] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0 [FAP1] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0 [FAP0] Initializing FAP4KE GSO LOOPBACK on fapIdx=0 ... [FAP1] IC Timer started [FAP0] SWQ: HOST2FAP_GSO_LOOPBACK [FAP1] FAP4KE WFD Init Done... [FAP0] >>>>------------------ [FAP0] swq =80007ef8 msgSize =4 words , maxDepth=1024 [FAP0] qStart =a7998000 qEnd=a799c000 [FAP0] rdPtr =a7998000 wrPtr=a7998000 count=0 [FAP0] swq->interrupts 0 processed =0 dropped =0 [FAP0] Associated DQM=18 dir HOST2FAP [FAP0] ------------------<<<< [FAP0] SWQ: FAP2HOST_GSO_LOOPBACK [FAP0] >>>>------------------ [FAP0] swq =80007ec8 msgSize =2 words , maxDepth=2048 [FAP0] qStart =a7aa0000 qEnd=a7aa4000 [FAP0] rdPtr =a7aa0000 wrPtr=a7aa0000 count=0 [FAP0] swq->interrupts 0 processed =0 dropped =0 [FAP0] Associated DQM=19 dir FAP2HOST [FAP0] ------------------<<<< [FAP0] FAP4KE GSO LOOPBACK Init Done... [FAP0] IC Timer started [FAP0] FAP4KE WFD Init Done... [FAP1] FAP BPM Initialized. [FAP0] FAP BPM Initialized. Broadcom Packet Flow Cache HW acceleration enabled. fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytes fapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytes bcmPktDma_bind: FAP Driver binding successfull [FAP0] FAP TM: ON [FAP1] FAP TM: ON bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM63167D0 Ethernet Network Device v0.1 May 31 2018 16:07:57 Broadcom GMAC Char Driver v0.1 May 31 2018 16:08:11 Registered<249> Broadcom GMAC Driver v0.1 May 31 2018 16:08:11 Initialized fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000 ETH Init: Ch:0 - 200 tx BDs at 0xb0a20650 fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000 ETH Init: Ch:1 - 200 tx BDs at 0xb0820650 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184 ETH Init: Ch:0 - 600 rx BDs at 0xb0821910 [FAP0] enetRxChannel 0 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184 ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910 [FAP1] enetRxChannel 1 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered eth0: <Ext sw port: 1> <Logical : 09> PHY_ID <0x20180001 : 0x01> MAC : 78:81:02:61:DE:AD eth1: <Ext sw port: 2> <Logical : 10> PHY_ID <0x20180002 : 0x02> MAC : 78:81:02:61:DE:AD eth2: <Ext sw port: 3> <Logical : 11> PHY_ID <0x20180003 : 0x03> MAC : 78:81:02:61:DE:AD eth3: <Ext sw port: 5> <Logical : 13> PHY_ID <0x22600e00 : 0x00> MAC : 78:81:02:61:DE:AD eth4: <Int sw port: 3> <Logical : 03> PHY_ID <0x0010000c : 0x0c> MAC : 78:81:02:61:DE:AD Ethernet Auto Power Down and Sleep: Enabled All Port Bit Map: 0x2e08: eth4,eth0,eth1,eth2,eth3 Chip WAN Only Ports 0000, Defined WAN Only Ports 0000, WAN Only Port Result: 0x0000: Chip WAN Preffered Ports 0008, Defined WAN Preffered Ports 0000, WAN Preffered Port Result: 0x0008:eth4 Chip LAN Only Ports 0000, Defined LAN Only Ports 0000, LAN Only Port Result: 0x0000: WAN/LAN Both Capable Ports 0x2e00:eth0,eth1,eth2,eth3 [NTC arl] arlEnable : Enabled ARL binding to FAP Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 May 31 2018 16:05:56 Registered <245> Broadcom 802.1Q VLAN Interface, v0.1 PCIe: No device found - Powering down Endpoint: endpoint_init entry Endpoint: endpoint_init COMPLETED Initializing WLCSM Module WLCSM Module loaded successfully Wifi Forwarding Driver is initialized! gre: GRE over IPv4 demultiplexor driver ip_gre: GRE over IPv4 tunneling driver PPTP driver version 0.8.5 Loading PCM shim driver insmod: can't insert '/lib/modules/qwerpe.ko': No such file or directory --SMP support wl: dsl_tx_pkt_flush_len=338 wl: norm_wmark_tot=3552, pktc_wmark_tot=3552 wl 0000:00:00.0: setting latency timer to 64 wl: passivemode=1 wl0: creating kthread wl0-kthrd wl: napimode=0 Neither SPROM nor OTP has valid image wl:srom/otp not programmed, using main memory mapped srom info(wombo board) wl: ID=sb/0/ wl: ID=sb/0/ wl: loading /etc/wlan/bcm6362_map.bin srom rev:8 wl0: allocskbmode=1 currallocskbsz=1024 wfd_bind: Dev wl%d wfd_idx 0 wl_radio_idx 0 Type skb configured WFD thread wfd0-thrd minQId/maxQId (20/1073741844), status (0) qmask 0x3 Instantiating WFD 0 thread +++++ Added gso loopback support for dev=wl0 <84ce4800> wfd_registerdevice Successfully registered dev wl0 ifidx 0 wfd_idx 0 wl0: Broadcom BCM435f 802.11 Wireless Controller 7.14.164.307.cpe4.16L05.1-kdb dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Success Note: Loading 6300 MDK (default) driver for 63167 chip Note: Forcing 53115 driver for 53134 Switch MDK: num_switches = 2 Switch MDK: unit = 0; phy_pbmp = 0x8; config_pbmp = 0x18 Switch MDK: unit = 1; phy_pbmp = 0xe; config_pbmp = 0x2e Switch MDK link poll thread: unit=0; phypbmp=0x8 config_pbmp=0x18 Switch MDK link poll thread: unit=1; phypbmp=0xe config_pbmp=0x2e Energy Efficient Ethernet: Enabled eth3 (Ext switch port: 5) (Logical Port: 13) Link UP 1000 mbps full duplex [LAN] LAN5 Link UP 1000 mbps full duplex device eth3 entered promiscuous mode br0: port 1(eth3) entered forwarding state br0: port 1(eth3) entered forwarding state device eth3.10 entered promiscuous mode br10: port 1(eth3.10) entered forwarding state br10: port 1(eth3.10) entered forwarding state Vodafone-H-500-s-v3.4.17 br0: port 1(eth3) entered forwarding state Thu May 31 17:00:50 UTC 2018 ap_name=syslogd, action=start ap_name=coredump, action=start ap_name=energy_saving, action=start ap_name=dnsmasq, action=start ap_name=phy, action=start device eth3 is already a member of a bridge; can't enslave it to bridge br0. ap_name=dhcpd, action=create Success Success Success Success ap_name=lanip, action=start ap_name=firewall, action=start ap_name=telnetd, action=start ap_name=sshd, action=start ap_name=httpd, action=start ap_name=redirect, action=start bind: Address already in use bind: Address already in use ap_name=dnsmasq, action=start ap_name=ftpd, action=start ap_name=networkmap, action=start ap_name=srt, action=restart ap_name=rp, action=start ap_name=udpecho, action=start ap_name=ntp, action=start ap_name=wlan, action=start ap_name=ingress_qos, action=start /bin/wlctl: Not Found ap_name=ingress_classify, action=start /bin/wlctl: Not Found ap_name=qos_cls, action=start Setting SSID: "caramelo2" Setting SSID: "_ONOWiFi" Setting SSID: "_AUTO_ONOWiFi" Setting SSID: "Vodafone-H-500-s3" /bin/wlctl: Not In Range /bin/wlctl: Not In Range killall: wifi_radar_2g: no process killed killall: wifi_wd_2g: no process killed acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: selected channel spec: 0x100a acsd: Adjusted channel spec: 0x100a acsd: selected channel spec: 0x100a 7200 sec flags: 0xb index: 0 : Default 5 sec 2 sample period 1 28800 sec killall: wps_det: no process killed ap_name=qos_remark, action=start ap_name=ipv6wd, action=start ap_name=duplexmode, action=start ap_name=cpm, action=start ap_name=wanip, action=stop ap_name=dnsmasq, action=stop ap_name=dnsmasq, action=stop ap_name=igd_upnp, action=start ap_name=dnsr, action=start ap_name=cron, action=start ap_name=cups, action=start ap_name=snmp, action=start ap_name=3g, action=start ap_name=emrd, action=start ap_name=fon, action=start ap_name=tr069, action=start killall: cwmp: no process killed ap_name=voip_qos, action=start starting pid 1467, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login: complete device eth3.300 is not a slave of br0 complete complete device eth3 is already a member of a bridge; can't enslave it to bridge br0. complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete Invalid QCSAPI option obss_coexist complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete killall: wifi_radar_5g: no process killed complete could not open /proc/892/statcould not open /proc/893/stat Vodafone-H-500-s login: admin process '/sbin/getty ttyS0 15200' (pid 1467) exited. Scheduling for restart. starting pid 1559, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login: admin process '/sbin/getty ttyS0 15200' (pid 1559) exited. Scheduling for restart. starting pid 1560, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login:

Pictures

User Images

• 

  case front

• 

  case back

• 

  board top

• 

  board bottom

• 

  board top noshields

• 

  board bottom noshields

• 

  wireless AC

• 

  switch

• 

  FXS

• 

  power

• 

  BCM63167 SoC