Creo que tengo todo lo necesario para empezar a trastear con openwrt en este router, lamentablemente soy novato en esto así que necesitaré algo de paciencia y mucha ayuda.
Actualmente tengo configurado el router sin password (se puede acceder al modo administrador !)en el bootloader. Primero arranca brnboot (VR9 Loader v0.70.01), luego uboot (U-Boot 2010-06) y finalmente una vesión antigua de openwrt (Openwrt kamikaze con kernel 2.6 con soporte ADSL, Ethernet y Usb).
También he podido acceder al modo failsafe que permite cargar diferentes firmwares.
Antes de seguir trasteando necesito conseguir hacer un backup de la flash completo.
Ver de que forma se puede cambiar el usuario y la password para poder acceder a la configuración a través de web. Tengo acceso total a través del puerto serie.
Y por supuesto ayúdame a compilar openwrt y uboot (que estoy muy verde) partiendo de los que ya funcionan.
También he intentado acceder con el cutecom al bootloader bloqueado con contraseña y no hay manera de que acepte la tecla intro.
Pongo capturas de pantalla y un dump
https://dl.dropboxusercontent.com/u/7423582/CapturasArv7519.7z---------------------------------------------------------------
root@arcadyan:/# opkg update
Downloading
http://downloads.openwrt.org/kamikaze/8.09/ifxcpe/packages/Packages.gzwget: bad address 'downloads.openwrt.org'
Collected errors:
* opkg_download: ERROR: Command failed with return value 1: `wget --passive-ftp -P /tmp/opkg-pjpu6F
http://downloads.openwrt.org/kamikaze/8.09/ifxcpe/packages/Packages.gz'
root@arcadyan:/#
=======================================================================
Wireless ADSL IAD VR9 Loader v0.70.01 build Mar 26 2012 13:36:53
Arcadyan Technology Corporation
=======================================================================
A1x VR9
0xbe22ff1c : 70240000
0xBf203014 : 70240000
MXIC MX29GL256EL top boot 16-bit mode found
Copying boot params.....DONE
Enter command mode ...123
Yes, Enter command mode ...
[VR9 Boot]:!
Enter Administrator Mode !
[VR9 Boot]:q
[VR9 Boot]:
ROM VER: 1�
ROM VER: 1.0.5
CFG 01
Tuning DDR begin
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa7ffffff
DDR check ok... start booting...
=======================================================================
Wireless ADSL IAD VR9 Loader v0.70.01 build Mar 26 2012 13:36:53
Arcadyan Technology Corporation
=======================================================================
A1x VR9
0xbe22ff1c : 70240000
0xBf203014 : 70240000
MXIC MX29GL256EL top boot 16-bit mode found
Copying boot params.....DONE
Enter command mode ...
Emergency value : 18
FLASH_AREA_IMAGE_0 is Linux, load image ...
Ready to run firmware
U-Boot 2010.06-LANTIQ-v-2.0.26-dirty (Jul 25 2011 - 09:16:19)
CLOCK CPU 500M RAM 250M
DRAM: 128 MiB
Flash: 32 MiB
In: serial
Out: serial
Err: serial
Net: fw_addr=0xa0200000
Internal phy(FE) firmware version: 0x8200
vr9 Switch
Type "run flash_nfs" to mount root filesystem over NFS
Hit any key to stop autoboot: 0
VR9 # help
? - alias for 'help'
base - print or set address offset
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
echo - echo args to console
erase - erase FLASH memory
flinfo - print FLASH memory information
go - start application at address 'addr'
help - print command description/usage
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mdio - mdio read and write
mm - memory modify (auto-incrementing address)
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
sleep - delay execution for some time
tftpboot- boot image via network using TFTP protocol
upgrade - upgrade - forward/backward copy memory to pre-defined flash location
version - print monitor version
VR9 # reset
ROM VER: 1.0.5
CFG 01
Tuning DDR begin
DDR Access auto data-eye tuning Rev 0.3a
DDR size from 0xa0000000 - 0xa7ffffff
DDR check ok... start booting...
=======================================================================
Wireless ADSL IAD VR9 Loader v0.70.01 build Mar 26 2012 13:36:53
Arcadyan Technology Corporation
=======================================================================
A1x VR9
0xbe22ff1c : 70240000
0xBf203014 : 70240000
MXIC MX29GL256EL top boot 16-bit mode found
Copying boot params.....DONE
Enter command mode ...
Emergency value : 19
FLASH_AREA_IMAGE_0 is Linux, load image ...
Ready to run firmware
U-Boot 2010.06-LANTIQ-v-2.0.26-dirty (Jul 25 2011 - 09:16:19)
CLOCK CPU 500M RAM 250M
DRAM: 128 MiB
Flash: 32 MiB
In: serial
Out: serial
Err: serial
Net: fw_addr=0xa0200000
Internal phy(FE) firmware version: 0x8200
vr9 Switch
Type "run flash_nfs" to mount root filesystem over NFS
Hit any key to stop autoboot: 0
## Booting kernel from Legacy Image at b016da90 ...
Image Name: MIPS IFXCPE Linux-2.6.20.19
Created: 2011-07-19 2:38:13 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1254704 Bytes = 1.2 MiB
Load Address: 80002000
Entry Point: 803a6000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
Infineon xDSL CPE VR9
mips_hpt_frequency = 250000000, counter_resolution = 2
Linux version 2.6.20.19
(ammon@debian-GccCompiler) (gcc version 3.4.6 (OpenWrt-2.0)) #5 Tue Jul 19 09:36:02 CST 2011
phym = 08000000, mem = 07e00000, max_pfn = 00007e00
Reserving memory for CP1 @0xa7e00000, size 0x00200000
CPU revision is: 00019555
Determined physical RAM map:
User-defined physical RAM map:
memory: 07e00000 @ 00000000 (usable)
Built 1 zonelists. Total pages: 32004
Kernel command line: root=/dev/mtdblock4 rw rootfstype=squashfs,jffs2 bridge mptest calibrate ip=192.168.2.1:192.168.2.100::::eth0:on console=ttyS0,115200 ethaddr=00:E0:92:00:01:40 phym=128M mem=126M panic=1 mtdparts=ifx_nor0:256k(uboot),256k(uboot_bin),128k(uboot_cfg),2m(kernel),10m(rootfs),11m(rootfs2),896k(sys_config),6m(supertask_img),1m(supertask_cfg),512k(supertask_bootcfg) init=/etc/preinit vpe1_load_addr=0x87e00000 vpe1_mem=2M
1 MIPSR2 register sets available
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
Lantiq ICU driver, version 3.0.1, (c) 2001-2010 Lantiq Deutschland GmbH
PID hash table entries: 512 (order: 9, 2048 bytes)
Using 250.000 MHz high precision timer.
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 123648k/129024k available (2929k kernel code, 5340k reserved, 794k data, 164k init, 0k highmem)
Security Framework v1.0.0 initialized
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Lantiq PCI host controller driver, version 1.1.9, (c) 2001-2010 Lantiq Deutschland GmbH
drivers/char/ifxmips_gpio.c:777:ifx_gpio_pin_reserve: Pin ID 21 (port 1, pin 5) has been reserved by module PCI from kernel!
Lantiq PCIe Root Complex driver, version 1.2.0, (c) 2001-2010 Lantiq Deutschland GmbH
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ifx_pcie_rc_class_early_fixup: fixed pcie host bridge to pci-pci bridge
PCI: Bridge: 0000:01:00.0
IO window: disabled.
MEM window: disabled.
PREFETCH window: 1c000000-1cbfffff
NET: Registered protocol family 8
NET: Registered protocol family 20
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 4096 bind 2048)
TCP reno registered
gptu: totally 6 16-bit timers/counters
gptu: misc_register on minor 63
gptu: succeeded to request irq 118
gptu: succeeded to request irq 119
gptu: succeeded to request irq 120
gptu: succeeded to request irq 121
gptu: succeeded to request irq 122
gptu: succeeded to request irq 123
IFX DMA driver, version ifxmips_dma_core.c:v1.0.9
,(c)2009 Infineon Technologies AG
Lantiq CGU driver, version 1.0.9, (c) 2001-2010 Lantiq Deutschland GmbH
Wired TLB entries for Linux read_c0_wired() = 0
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
Infineon Technologies DEU driver version 1.0.1
IFX DEU DES initialized (multiblock).
IFX DEU AES initialized (multiblock).
IFX DEU ARC4 initialized (multiblock).
IFX DEU SHA1 initialized.
IFX DEU MD5 initialized.
IFX DEU SHA1_HMAC initialized.
IFX DEU MD5_HMAC initialized.
io scheduler noop registered (default)
assign_interrupt_mode Found MSI capability
ifx_pmu_init: Major 252
Lantiq PMU driver, version 1.1.4, (c) 2001-2010 Lantiq Deutschland GmbH
Lantiq GPIO driver, version 1.2.12, (c) 2001-2010 Lantiq Deutschland GmbH
Infineon Technologies RCU driver version 1.0.6
======= ifx_gpio_register(6) =======
Lantiq LED Controller driver, version 1.0.4, (c) 2001-2010 Lantiq Deutschland GmbH
MEI CPE Driver, Version 1.0.2
<6>(c) Copyright 2009, Infineon Technologies AG
<6>### MEI CPE - MEI CPE - MEI CPE - MEI CPE ###
<6>ttyS0 at MMIO 0xbe100c00 (irq = 105) is a IFX_ASC
Lantiq ASC (UART) driver, version 1.0.5, (c) 2001-2010 Lantiq Deutschland GmbH
loop: loaded (max 8 devices)
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
IFX SWITCH API, Version 1.0.1
SWAPI: Registered character device [switch_api] with major no [81]
Switch API: PCE MicroCode loaded !!
Switch Auto Polling value = 0
GPHY FIRMWARE LOAD SUCCESSFULLY AT ADDR : 3f0000
IFX GPHY driver FE Mode, version ifxmips_vr9_gphy: V0.6 - Firmware: 109
ifx_nor0: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
ifx_nor0: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
10 cmdlinepart partitions found on MTD device ifx_nor0
ifx_mtd_init flash0: Using dynamic image partition
Creating 10 MTD partitions on "ifx_nor0":
0x00000000-0x00040000 : "uboot"
0x00040000-0x00080000 : "uboot_bin"
0x00080000-0x000a0000 : "uboot_cfg"
0x000a0000-0x002a0000 : "kernel"
0x002a0000-0x00ca0000 : "rootfs"
0x00ca0000-0x017a0000 : "rootfs2"
0x017a0000-0x01880000 : "sys_config"
0x01880000-0x01e80000 : "supertask_img"
0x01e80000-0x01f80000 : "supertask_cfg"
0x01f80000-0x02000000 : "supertask_bootcfg"
Lantiq MTD NOR driver, version 1.0.4, (c) 2001-2010 Lantiq Deutschland GmbH
======= ifx_gpio_register(3) =======
Lantiq SSC driver, version 2.2.2, (c) 2001-2010 Lantiq Deutschland GmbH
usbcore: registered new interface driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver libusual
usbcore: registered new interface driver usbserial
drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
drivers/usb/serial/usb-serial.c: USB Serial Driver core
drivers/usb/serial/usb-serial.c: USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver option
drivers/usb/serial/option.c: USB Driver for GSM modems: v0.7.1
Registered led device: broadband_led
Registered led device: internet_led
Registered led device: ledc_2
Registered led device: ledc_3
Registered led device: ledc_4
Registered led device: ledc_5
Registered led device: ledc_6
Registered led device: ledc_7
Registered led device: ledc_8
Registered led device: ledc_9
Registered led device: ledc_10
Registered led device: ledc_11
Registered led device: wps_led
Registered led device: ledc_13
Registered led device: ledc_14
Registered led device: usb2_link_led
Registered led device: ledc_16
Registered led device: ledc_17
Registered led device: usb1_link_led
Registered led device: fxo_act_led
Registered led device: internet_red_led
Registered led device: voip_led
Registered led device: warning_led
Registered led device: ledc_23
Lantiq LED driver, version 1.0.15, (c) 2001-2010 Lantiq Deutschland GmbH
u32 classifier
Performance counters on
nf_conntrack version 0.5.0 (1008 buckets, 8064 max)
nf_ct_ftp: registering helper for pf: 2 port: 21
nf_ct_ftp: registering helper for pf: 10 port: 21
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ipt_time loading
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 8
atmpvc_init() failed with -17
lec.c: May 16 2011 16:31:56 initialized
mpc.c: May 16 2011 16:31:52 initialized
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Time: MIPS clocksource has been installed.
VFS: Mounted root (jffs2 filesystem).
Freeing unused kernel memory: 164k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
rootdir=/
table='/etc/device_table.txt'
- preinit -
Press CTRL-C for failsafe
- config restore -
mtd device could not be found for image sysconfig with addr 0xb11a0000
read_img config.tgz failed, restore the default config
config/
config/rc.conf
config/firewall_ether
config/dhcp
config/fstab
config/firewall
config/samba
config/firewall_3g
config/arc-middle/
config/arc-middle/register/
config/arc-middle/register/002-mid_dsl.reg
config/arc-middle/register/003-mid_switch.reg
config/arc-middle/register/004-mid_qos.reg
config/arc-middle/register/001-mid_ccfg.reg
config/firewall_vdsl
config/system
config/ulogd.conf
config/firewall.user
config/firewall_adsl
config/timezonelist
config/ntpclient
config/ripd.conf
config/network-3g
config/network
config/passwd
config/glbcfg.dft
config/.glbcfg
config/firewall_lte
- init -
Please press Enter to activate this console. IFXUSB: ifxusb_hcd: version 3.0 B100913
IFXUSB: USB core #0 soft-reset
IFXUSB: USB core #0 soft-reset
ifxusb_hcd ifxusb_hcd: IFX USB Controller
ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1
ifxusb_hcd ifxusb_hcd: irq 54, io mem 0xbe101000
======= ifx_gpio_register(7) =======
IFXUSB: Init: Power Port (0)
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
IFXUSB: USB core #1 soft-reset
IFXUSB: USB core #1 soft-reset
ifxusb_hcd ifxusb_hcd: IFX USB Controller
ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 2
ifxusb_hcd ifxusb_hcd: irq 83, io mem 0xbe106000
IFXUSB: Init: Power Port (0)
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
IMQ starting with 2 devices...
IMQ driver loaded successfully.
Hooking IMQ before NAT on PREROUTING.
Hooking IMQ after NAT on POSTROUTING.
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
fuse init (API version 7.
fuse distribution version: 2.7.3
IFXOS, Version 1.5.11
<6>(c) Copyright 2007, Infineon Technologies AG
<6>### IFXOS - IFXOS - IFXOS - IFXOS ###
Lantiq CPE API Driver version: DSL CPE API V4.6.3.5-pd3
Predefined debug level: 3
ifxmips_ppa_datapath_vr9_a5: module license 'unspecified' taints kernel.
Loading A5 (MII0/1 + ATM) driver ...... Succeeded!
PPE datapath driver info:
Version ID: 128.3.7.1.0.0.4
Family : N/A
DR Type : Normal Data Path | Indirect-Fast Path
Interface : MII0 | MII1 | ATM
Mode : Routing
Release : 0.0.4
PPE firmware info:
Version ID: 7.2.4.6.1.14
Family : VR9
FW Type : Acceleration
Interface : MII0/1 + ATM
Mode : Bridging + IPv4 Routing
Release : 1.14
device eth0 entered promiscuous mode
br-lan: port 1(eth0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 1(eth0) entering forwarding state
PPA API --- init successfully
ifx_ppa_init - init succeeded
Successfully
Failed: -22
userspace registering PID
ifx_ppa_init - init succeeded
ENTER - Kernel Thread Startup <autbtex>
<7>ENTER - Kernel Thread Startup <pmex_ne>
<7>ENTER - Kernel Thread Startup <pmex_fe>
<3>DSL[00]: WARNING - SRA not supported by the FW
ifx_ppa_init - init succeeded
Successfully
Failed: -22
device eth1 entered promiscuous mode
br-lan: port 2(eth1) entering learning state
br-lan: topology change detected, propagating
br-lan: port 2(eth1) entering forwarding state
