ZyXEL SBT-2112T

Telefonica imagenio set-up IPTV box
Wikipedia	ZyXEL
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	ZyXEL STB-2112T V2
Type	set top box
CPU1	STMicro STi7105
CPU1 Speed	450 MHz
Flash1 Chip	Samsung K9F1G08U0D x 1
Flash1 Size	? MiB
RAM1 Size	1 GiB 1,024 MiB <br />1,073,741,824 B <br />8,388,608 Kib <br />1,048,576 KiB <br />8,192 Mib <br />
RAM1 Chip	ProMOS V59C1G01168QBJ25
RAM2 Size	1 GiB 1,024 MiB <br />1,073,741,824 B <br />8,388,608 Kib <br />1,048,576 KiB <br />8,192 Mib <br />
RAM2 Chip	Promos V59C1G01168QBJ25
ETH chip1	Broadcom AC201A1KMLG
Ethernet Port Count	1-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
Ethernet OUI: EC:43:F6 (1 E, 1 W)
Stock bootloader	U-boot
Stock FW OS	Linux
Expansion IF types	none specified
Power	12 VDC, 1 A
Connector type	barrel 50 mm (OD) 30 mm (ID) 100 mm (LEN)
Serial Port (UART)	J1
JTAG Port	J3
Flags: HDMI out, AV out, remote
Additional chips ITE IT9036E-AXG (Unknow), Sireal SD-100-LS (TV ANT)
Other
Default IP address: 10.131.52.162
Retail
Availability	ODM

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.
For a list of all currently documented STMicro chipsets with specifications, see STMicro.

For a list of all currently documented ZyXEL device with specifications, see ZyXEL.

Overview

Manual  • Similar product

Chipset datasheet

• Internal images(Teardown)

JTAG-Serial Info

Serial

On the left of the main chipset, it have a presoldered serial pins, that have the next configuration(from up to down): Ground, TX, RX and 3.3V. The port have a standard configuration with 115200 bauds. For skip the autoboot, keep pressing ESC until it finish the boot up.

UBOOT

Environment

bootdelay=0 baudrate=115200 serverip=192.168.33.201 load_addr=0x80000000 bigphysarea_pages=2000 nfs_target=/tftpboot/nano/target_nano nfs_ip=192.168.33.202 tty_no=0 rootfs_mtdno=5 apps_mtdno=4 filesystem=cramfs nfscmd=dhcp;nfs 0x80000000 $nfs_ip:/tftpboot/nano/vmlinux.ub;set bootargs "console=ttyAS$tty_no,115200 root=/dev/nfs ide0=noprobe nfsroot=$nfs_ip:$nfs_target,rsize=4096,wsize=8192,tcp,nfsvers=2 rw ip=$ipaddr nwhwconf=device:eth0,hwaddr:$ethaddr bigphysarea=$bigphysarea_pages";bootm 0x80000000 initrd_nbootcmd=set bootargs "console=ttyAS$tty_no,115200 root=/dev/ram0 rw ide0=noprobe init=/init $mtdparts nwhwconf=device:eth0,hwaddr:$ethaddr stmmaceth=phyaddr:$phyaddr bigphysarea=$bigphysarea_pages";nboot.e $kernel_offset $initrd_offset phyaddr=0 htpcmd=mem_tst 0xa6700000 0x5900000 bootcmd=run initrd_nbootcmd loader_offset=0x00020000 splash_offset=0x00180000 kernel_offset=0x00200000 initrd_offset=0x00800000 rootfs_offset=0x00E00000 mtdparts=mtdparts=stm-nand-flex.0:896K@0x20000(FW_Code)ro,512K@0x100000(FW_Data),512K@0x180000(Splash),6144K@0x200000(Kernel),6144K@0x800000(Initramfs),106624K@0xE00000(Rootfs),-@0x7620000(MVTVc_Data) ethaddr=EC:43:F6:B7:12:F0 ipaddr=10.131.52.162 gatewayip=10.131.52.161 netmask=255.255.255.248 colorsystem=pal-b fb_addr=0x8F000000 stdin=serial stdout=serial stderr=serial Environment size: 1322/4092 bytes

Commands

NANO> help

? - alias for 'help' adjPartitionTbl - Adjust NAND flash partition table. antiflick [0|1] askenv - get environment variables from stdin autoscr - run script from memory base - print or set address offset bdinfo - print Board Info structure bootm - boot application image from memory bootp - boot image via network using BootP/TFTP protocol cmp - memory compare cp - memory copy crc32 - checksum calculation dhcp - invoke DHCP client to obtain IP address dumpBadBlocks - Dump bad blocks. dumpNandParts - Dump NAND flash partition table. dump_edid exit - exit script fb_exit fb_init [N|P|S] [R|Y] [R|Y] [mode] fb_mode fb_run firmup - Firmware upgrade mechanism genNANDmtdpart - Generate mtdparts command line and save in u-boot environment. go - start application at address 'addr' gpio <s|r|w> <port> <pin> [dir|0|1] - GPIO utility commands help - print online help icrc32 - checksum calculation iloop - infinite loop on address range imd - i2c memory display imm - i2c memory modify (auto-incrementing) imw - memory write (fill) inm - memory modify (constant address) iprobe - probe to discover valid I2C chip addresses ir_dump - dump buffer ir_showkey - show IR key ir_status - status loadb - load binary file over serial line (kermit mode) loady - load binary file over serial line (ymodem mode) loop - infinite loop on address range lwip_dhcp - use LWIP to request IP address. lwip_run - Let LWIP working. mboot fw - Run Zyxel Multi-boot Firmware upgrade service. md - memory display mem_tst - memory test mii - MII utility commands mm - memory modify (auto-incrementing) mmburnnand - burn nand flash from memory. mtest - simple RAM test mw - memory write (fill) nand - NAND sub-system nboot - boot from NAND device nfs - boot image via network using NFS protocol nm - memory modify (constant address) opch - download file paramHdr- Show param header information ping - send ICMP ECHO_REQUEST to network host pmb - displays the contents of the PMB printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol reset - Perform RESET of the CPU run - run commands in an environment variable screen - Set screen on/off setenv - set environment variables showSplash - showSplash test - minimal test like /bin/sh tftp_get - tftp tftpboot- boot image via network using TFTP protocol token - Set/Get token upParams - Update params information. . updateRawFW - Using manually firmware images to update to FLASH. version - print monitor version

Boot up

First stage loader for NANO serial boads (STi7105) [32-bit mode] U-Boot 1.3.1 (Oct 24 2011 - 17:41:25) - stm23_0042_z031 SDRAM TEST OK!!! DRAM: 256 MiB NAND: Bad block table found at page 65472, version 0x01 Bad block table found at page 65408, version 0x01 nand_read_bbt: Bad block at 0x04b20000 128 MiB Using default environment In: serial Out: serial Err: serial Hit ESC key to stop autoboot: 0 NAND read: device 0 offset 0x20000, size 0xe0000 Reading data from 0xff800 -- 100% complete. 917504 bytes read: OK ## Booting image at 80000000 ... Image Name: U-Boot 1.3.1 for nano board Image Type: SuperH U-Boot Firmware (uncompressed) Data Size: 354504 Bytes = 346.2 KiB Load Address: 8ff00000 Entry Point: 8ff00000 Verifying Checksum ... OK OK Second stage loader for NANO serial boards (STx7105) [32-bit mode] U-Boot 1.3.1 (Oct 24 2011 - 17:42:14) - stm23_0042_z031 SDRAM TEST OK!!! DRAM: 256 MiB Enter Normal Mode NAND: Bad block table found at page 65472, version 0x01 Bad block table found at page 65408, version 0x01 nand_read_bbt: Bad block at 0x04b20000 128 MiB Using default environment device probe found 2 display pipelines Display0 tvstandard : PAL-B bitdepth : 24 componentvideo: YUV hdmivideo : RGB Video mode : 6 FB Address : 0x9F000000 FB Size : 1244160l HDMI cable not plug-in! Display1 tvstandard : PAL-B bitdepth : 24 componentvideo: CVBS hdmivideo : <NULL> Video mode : 5 FB Address : 0x9F000000 FB Size : 1244160l In: serial Out: serial Err: serial multi-boot detecting..... Warning: MAC addresses don't match: HW MAC address: FF:FF:FF:FF:FF:FF "ethaddr" value: EC:43:F6:XX:XX:XX Using MAC Address EC:43:F6:B7:12:F0 STM-GMAC: AC201 PHY (addr=0) found HandleVSYNCInterrupt: - time discontinuity detected, vsync interval = 184538 field duration = 20000 STM-GMAC: PHY auto-negotiate timed out STM-GMAC: *Warning* no link detected Warning: MAC addresses don't match: HW MAC address: FF:FF:FF:FF:FF:FF "ethaddr" value: EC:43:F6:XX:XX:XX Using MAC Address EC:43:F6:B7:12:F0 STM-GMAC: AC201 PHY (addr=0) found STM-GMAC: stmac_mii_busy timeout STM-GMAC: stmac_mii_busy timeout STM-GMAC: PHY auto-negotiate timed out STM-GMAC: *Warning* no link detected NANO> Set Multicast Fliter: Total 1 Set Multicast Fliter: Total 2 upgradecounter=6 quickstart=false zyxel-DTT7105-0.2 Init OPCH Version 1.00 Set Multicast Fliter: Total 3 OPCH download file "zyxel-DTT7105-0.2"(type:0x2)(Checksum:0x4000) from channel 239.0.2.30:22222