タグ: MT7628AN

WCR-1166DS

既にOpenWrtでサポート済みながら以前よりfactoryが問題を抱えているという話を聞いていたものの、今一つ意欲が上がらず保留にしていた機種。今現在進めているWSR-2533DHP2のサポートに絡み行った変更で、この機種のfactoryの問題を解決できると思われる為今回確保して確認することにした。
サポート済みの為まとめるか迷ったものの、後々の為まとめる。

Switch

zone	WAN	LAN
port (WSR-1166DS)	INTERNET	LAN
port (MT7628)	port4	port3

MAC

LAN: 34:3D:C4:xx:xx:D3 (board_data, mac (text))
WAN: 34:3D:C4:xx:xx:D3 (board_data, mac (text))
2.4G: 34:3D:C4:xx:xx:D4 (Factory, 0x4 (hex))
5G: 34:3D:C4:xx:xx:D5 (Factory, 0x8004 (hex))

U-Boot

help

MT7628 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version

version

MT7628 # version

U-Boot 1.1.3 (Feb  3 2016 - 17:44:55) 0.04

printenv

MT7628 # printenv
bootcmd=tftp
bootdelay=5
baudrate=57600
ethaddr="00:AA:BB:CC:DD:10"
ipaddr=192.168.11.1
serverip=192.168.11.2
bootfile="linux.trx-recovery"
bootversion=0.04
bootpartition=1
stdin=serial
stdout=serial
stderr=serial

Environment size: 214/4092 bytes

tftpboot

MT7628 # tftpboot

netboot_common, argc= 1

NetTxPacket = 0x83FE6B00

KSEG1ADDR(NetTxPacket) = 0xA3FE6B00

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

ETH_STATE_ACTIVE!!
TFTP from server 192.168.11.2; our IP address is 192.168.11.1
Filename 'linux.trx-recovery'.

TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *

Kernel

uname -a

root@localhost:/# uname -a
Linux localhost 2.6.36 #1 Tue Mar 19 18:05:31 CST 2019 mips GNU/Linux

cat /proc/version

root@localhost:/# cat /proc/version
Linux version 2.6.36 (***********@***-build-01) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Tue Mar 19 18:05:31 CST 2019

cat /proc/cpuinfo

root@localhost:/# cat /proc/cpuinfo
system type             : MT7628
processor               : 0
cpu model               : MIPS 24Kc V5.5
BogoMIPS                : 386.04
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
ASEs implemented        : mips16 dsp
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

root@localhost:/# cat /proc/meminfo
MemTotal:          60080 kB
MemFree:           19200 kB
Buffers:            3448 kB
Cached:            12084 kB
SwapCached:            0 kB
Active:             8988 kB
Inactive:          12420 kB
Active(anon):       6068 kB
Inactive(anon):      456 kB
Active(file):       2920 kB
Inactive(file):    11964 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          5884 kB
Mapped:             3104 kB
Shmem:               648 kB
Slab:              13880 kB
SReclaimable:       2408 kB
SUnreclaim:        11472 kB
KernelStack:         696 kB
PageTables:          620 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       30040 kB
Committed_AS:      14052 kB
VmallocTotal:    1048372 kB
VmallocUsed:        5480 kB
VmallocChunk:    1040308 kB

cat /proc/mtd

root@localhost:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 01000000 00010000 "ALL"
mtd1: 00030000 00010000 "Bootloader"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 007c0000 00010000 "Kernel"
mtd5: 006340a4 00010000 "RootFS"
mtd6: 007c0000 00010000 "Kernel2"
mtd7: 006340a4 00010000 "RootFS2"
mtd8: 00010000 00010000 "glbcfg"
mtd9: 00010000 00010000 "board_data"

switch –help

root@localhost:/# switch --help
Usage:
switch dump                                 - dump switch table
switch clear                                - clear switch table
switch add [mac] [portmap]                  - add an entry to switch table
switch add [mac] [portmap] [vlan idx]       - add an entry to switch table
switch add [mac] [portmap] [vlan idx] [age] - add an entry to switch table
switch ingress-rate on [port] [Mbps]        - set ingress rate limit on port 0~4
switch egress-rate on [port] [Mbps]         - set egress rate limit on port 0~4
switch ingress-rate off [port]              - del ingress rate limit on port 0~4
switch egress-rate off [port]               - del egress rate limit on port 0~4
switch filt [mac]                           - add an SA filtering entry (with portmap 1111111) to switch table
switch filt [mac] [portmap]                 - add an SA filtering entry to switch table
switch filt [mac] [portmap] [vlan idx]      - add an SA filtering entry to switch table
switch filt [mac] [portmap] [vlan idx] [age]- add an SA filtering entry to switch table
switch del [mac]                            - delete an entry from switch table
switch del [mac] [vlan idx]                 - delete an entry from switch table
switch vlan dump                            - dump switch table
switch vlan set [vlan idx] [vid] [portmap]  - set vlan id and associated member
switch reg r [offset]                       - register read from offset
switch reg w [offset] [value]               - register write value to offset
switch phy [phy_addr]                   - dump phy register of specific port
switch phy                                      - dump all phy registers

switch vlan dump

root@localhost:/# switch vlan dump
idx   vid  portmap
0     1  1111-11
1     2  ----1-1
2     3  1111111
3     4  1111111
4     5  1111111
5     6  1111111
6     7  1111111
7     8  1111111
8     9  1111111
9    10  1111111
10    11  1111111
11    12  1111111
12    13  1111111
13    14  1111111
14    15  1111111
15    16  1111111

header –help

bootlog

[04010C0B][04010D08]
DDR Calibration DQS reg = 00008886

U-Boot 1.1.3 (Feb  3 2016 - 17:44:55) 0.04

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb8000
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: 16 MBytes NOR Flash
Date:Feb  3 2016  Time:17:44:55
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

##### The CPU freq = 575 MHZ ####
estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.                                                                                           0
Erasing SPI Flash...
.
Writing to SPI Flash...
.
done

3: System Boot system code via Flash1.
## Booting image at bc810000 ...

=================================================
Check image validation:
Image1 Trx Check -->
## check_trx, crc=-950968547, *crc_ret=-950968547.
OK
Image1 Header Magic Number --> OK
Image1 Header Checksum --> OK
Image1 Data Checksum --> OK

=================================================

=================================================
Check image validation:
Image2 Trx Check -->
## check_trx, crc=-950968547, *crc_ret=-950968547.
OK
Image2 Header Magic Number --> OK
Image2 Header Checksum --> OK
Image2 Data Checksum --> OK

=================================================
## check Image1 return 0, check Image2 return 0, Image1 crc=-950968547, Image2 crc=-950968547.
Image1 is ok!
Image2 is ok and same as Image1!
Image Name:   MIPS OpenWrt Linux-2.6.36
Image Type:   MIPS Linux Kernel Image (lzma compressed)
Data Size:    1621758 Bytes =  1.5 MB
Load Address: 80000000
Entry Point:  8000c150
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

LINUX started...

THIS IS ASIC
Linux version 2.6.36 (***********@***-build-01) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Tue Mar 19 18:05:31 CST 2019

The CPU feqenuce set to 575 MHz

MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5 init=/sbin/preinit rootfstype=squashfs,jffs2 console=ttyS0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0006d72f
Readback ErrCtl register=0006d72f
Memory: 59928k/65536k available (3364k kernel code, 5568k reserved, 1245k data, 152k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 54054404
RALINK_GPIOMODE = 54044404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab  at 0
vgaarb: loaded
SCSI subsystem initialized
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
Load Kernel WDG Timer Module
Load Ralink Timer0 Module
Load Ralink Timer2 Module
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.15)
msgmni has been set to 117
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
Ralink gpio driver initialized
@@@@@@#### buffalo_led_init initialized.
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: ef, device id 40 18
W25Q128BV(ef 40180000) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
in find_rootfs_mtd_partitions  off=0x00050000 end=0x00810000
The  trx header  magic offset 0x0018bf5c
raspi: squash filesystem found at offset 0x001dbf5c
Found image1 partition off 0x001dbf5c size 0x006340a4
in find_rootfs_mtd_partitions  off=0x00810000 end=0x00fd0000
The  trx header  magic offset 0x0018bf5c
raspi: squash filesystem found at offset 0x0099bf5c
Found image2 partition off 0x0099bf5c size 0x006340a4
Creating 10 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x000000810000 : "Kernel"
0x0000001dbf5c-0x000000810000 : "RootFS"
mtd: partition "RootFS" doesn't start on an erase block boundary -- force read-only
0x000000810000-0x000000fd0000 : "Kernel2"
0x00000099bf5c-0x000000fd0000 : "RootFS2"
mtd: partition "RootFS2" doesn't start on an erase block boundary -- force read-only
0x000000fd0000-0x000000fe0000 : "glbcfg"
0x000000fe0000-0x000000ff0000 : "board_data"
rdm_major = 253
GMAC1_MAC_ADRH -- : 0x0000000c
GMAC1_MAC_ADRL -- : 0x432880fd
Ralink APSoC Ethernet Driver Initilization. v3.1  256 rx/tx descriptors allocated, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x0000000c
GMAC1_MAC_ADRL -- : 0x432880f1
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
IMQ driver loaded successfully.
Hooking IMQ before NAT on PREROUTING.
Hooking IMQ after NAT on POSTROUTING.

=== pAd = c0003000, size = 798016 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1133)::(2), pChipCap->fw_len(63616)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (936 buckets, 3744 max)
ctnetlink v0.93: registering with nfnetlink.
IPVS: Registered protocols ()
IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
IPVS: ipvs loaded.
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
TCP cubic registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
Boot from /dev/mtdblock7
VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
Freeing unused kernel memory: 152k freed
arca.dbus.mng: is ready
agent_handler(244):arca.dbus.misc: is ready
MD5=[29fc71a6d22714104011fb7d27b3854b]

Please press Enter to activate this console. Raeth v3.1 (Tasklet)

phy_tx_ring = 0x0361d000, tx_ring = 0xa361d000

phy_rx_ring0 = 0x0361e000, rx_ring0 = 0xa361e000
GMAC1_MAC_ADRH -- : 0x0000343d
GMAC1_MAC_ADRL -- : 0xc4xxxxd3
debug : Enter [BRCTL_ADD_IF]
add_if 00000000 ***************************
device eth2.1 entered promiscuous mode
device eth2 entered promiscuous mode
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering learning state
TX_BCN DESC a3e90000 size = 320
RX[0] DESC a3e92000 size = 2048
RX[1] DESC a3e93000 size = 1024
E2pAccessMode=2
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
br0: port 1(eth2.1) entering forwarding state
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
load fw image from fw_header_image
AndesMTLoadFwMethod1(2174)::pChipCap->fw_len(63616)
FW Version:_e2_mp
FW Build Date:20150727171815
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 32
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1241): Set the Max RxPktLen=1024!
<--mt_mac_init()
WTBL Segment 1 info:
MemBaseAddr/FID:0x28000/0
EntrySize/Cnt:32/128
WTBL Segment 2 info:
MemBaseAddr/FID:0x40000/0
EntrySize/Cnt:64/128
WTBL Segment 3 info:
MemBaseAddr/FID:0x42000/64
EntrySize/Cnt:64/128
WTBL Segment 4 info:
MemBaseAddr/FID:0x44000/128
EntrySize/Cnt:32/128
AntCfgInit(2885): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 00
MtAsicSetChBusyStat(826): Not support for HIF_MT yet!
CmdSlotTimeSet:(ret = 0)
MtAsicSetRalinkBurstMode(2919): Not support for HIF_MT yet!
MtAsicSetPiggyBack(763): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [84c0] doReload bit7[1]
CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 1
MtAsicSetTxPreamble(2898): Not support for HIF_MT yet!
MtAsicAddSharedKeyEntry(1308): Not support for HIF_MT yet!
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
Main bssid = 34:3d:c4:xx:xx:d4
<==== rt28xx_init, Status=0
mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f
mt7628_set_ed_cca: pAd->CommonCfg.CountryCode = JP
mt7628_set_ed_cca: TURN OFF NBID mac 0x10610 = 0x36a1282a
WiFi Startup Cost (ra0): 3.936s
debug : Enter [BRCTL_ADD_RULE_IF]
add_if 00000100 ***************************
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
br0: port 2(ra0) entering learning state
br0: port 2(ra0) entering forwarding state
register rt2860

=== pAd = c0602000, size = 1801880 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0500000, csr_addr=0xc0500000!
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
NVM is FLASH mode (pAd->flash_offset = 0x48000)
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =

patch version =

FW Version:0.0.00 Build:1
Build Time:201507311614____
fw for E3 IC
RX[0] DESC a28a2000 size = 4096
RX[1] DESC a28a3000 size = 4096
E2pAccessMode=2
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 49
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
drivers/net/wireless/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2848 assert (ad->TxPower[choffset].Channel == 42)failed
Country Region from e2p = ffff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0x0, ALNAGain1=0x0, ALNAGain2=0x0
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
@@@ BuildChannel # 36 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 40 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 44 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 48 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 52 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 56 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 60 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 64 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 100 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 104 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 108 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 112 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 116 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 120 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 124 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 128 :: Pwr0 = 26, Pwr1 =26, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 132 :: Pwr0 = 26, Pwr1 =26, Flags = 40, RemainingTimeForUse=0
@@@ BuildChannel # 136 :: Pwr0 = 26, Pwr1 =26, Flags = 40, RemainingTimeForUse=0
@@@ BuildChannel # 140 :: Pwr0 = 26, Pwr1 =26, Flags = 0, RemainingTimeForUse=0
MCS Set = ff ff 00 00 01
TX0 power compensation = 0x38
TX1 power compensation = 0x38
mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=100, HT-CentCh=102, VHT-CentCh=106
APStartUp(): AP Set CentralFreq at 106(Prim=100, HT-CentCh=102, VHT-CentCh=106, BBP_BW=2)
mt76x2_calibration():RDMode  is in Silent State, do not calibration.
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
Main bssid = 34:3d:c4:xx:xx:d5
mt76x2_reinit_agc_gain:original agc_vga0 = 0x5c, agc_vga1 = 0x5c
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x5c, agc_vga1 = 0x5c
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x27, hi_lna1 = 0x27
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x27, hi_lna1 = 0x27
original vga value(chain0) = 5c
original vga value(chain1) = 5c
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
debug : Enter [BRCTL_ADD_RULE_IF]
add_if 00000100 ***************************
device rai0 entered promiscuous mode
br0: port 3(rai0) entering learning state
br0: port 3(rai0) entering learning state
Jan  1 00:00:21 miniupnpd[451]: WPS listening on port 59868
mcsnoop: module license 'BUFFALO Inc. PROPRIETARY' taints kernel.
Disabling lock debugging due to kernel taint
mcsnoop: flush all snoop entry
mcsnoop: Bridge Multicast Snooping module Ver0.1/20070912
mcsnoop_br_ioctl_device:275: mcast_maxage 75000 / 250
device eth2.1 left promiscuous mode
device eth2 left promiscuous mode
br0: port 1(eth2.1) entering forwarding state
debug : Enter [BRCTL_ADD_RULE_IF]
add_if 00000200 ***************************
device eth2.1 entered promiscuous mode
device eth2 entered promiscuous mode
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering learning state
/sbin/arc_mcastsnoop: [brctl adddebug : Enter [BRCTL_ADD_RULE_IF]
rif br0 eth2.2 1add_if 00000402 ***************************
026]
device eth2.2 entered promiscuous mode
br0: port 4(eth2.2) entering learning state
br0: port 4(eth2.2) entering learning state
br0: port 3(rai0) entering forwarding state
br0: port 1(eth2.1) entering forwarding state
br0: port 4(eth2.2) entering forwarding state
Jan  1 00:00:23 crond[522]: crond: crond (busybox 1.18.5) started, log level 8
ntp.jst.mfeed.ad.jp: Unknown host
Link Status Changed - Port4 Link Down
Time out! You may increase DEFAULT_TIMEOUT_COUNT[10]!

WRC-1167FS stock -> OpenWrt

とりあえずfactoryファームを正しい状態にdecodeされる形で組めたので、投入テスト。
stockで SQUASHFS error が大量に吐かれるのは何だろうか…（出ないこともあった）

------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 0.00
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6291456
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 1970-01-1
Version Firmware       : 
Version Code SCM       : 
Version Config         :                                 
Data CRC Checksum      : 0x337EBA50
Header CRC Checksum    : 0x0
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 96/96 (100%)
Writing data: 6144k/6144k (100%)
Verifying data: 6144k/6144k (100%)
The system is going down NOW!
[43306.704000] SQUASHFS error: zlib_inflate error, data probably corrupt
[43306.728000] SQUASHFS error: squashfs_read_data failed to read block 0x1d6305
[43306.740000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.756000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.768000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.780000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.796000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.808000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.820000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.836000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.848000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.864000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.876000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.888000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.904000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.916000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.928000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.944000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.956000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.972000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43306.984000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43306.996000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.012000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.024000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.036000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.052000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.064000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.080000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[43307.092000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[43307.104000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
Sent SIGKILL to all processes
Requesting system reboot
[43308.712000] Restarting system.
[04060C09][04060C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.143
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1669570 Bytes =  1.6 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.14.143 ([email protected]) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r0+11022-f01af852e5)) #0 Sun Sep 15 03:19:24 2019
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is ELECOM WRC-1167FS
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x98/0x4a0 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=000779f0
[    0.000000] Readback ErrCtl register=000779f0
[    0.000000] Memory: 58372K/65536K available (3919K kernel code, 185K rwdata, 892K rodata, 1204K init, 206K bss, 7164K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.015371] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.087589] pid_max: default: 32768 minimum: 301
[    0.096986] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.109944] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.130499] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.149876] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.162027] pinctrl core: initialized pinctrl subsystem
[    0.173329] NET: Registered protocol family 16
[    0.290156] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000
[    0.451172] PCI host bridge /pcie@10140000 ranges:
[    0.460516]  MEM 0x0000000020000000..0x000000002fffffff
[    0.470830]   IO 0x0000000010160000..0x000000001016ffff
[    0.500056] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.511272] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.522397] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.534247] PCI host bridge to bus 0000:00
[    0.542215] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.555863] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.567501] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.580917] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.597737] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.610732] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.624454] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    0.637870] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    0.652146] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.665570] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    0.680026] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    0.694282] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.704078] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    0.717505] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    0.736698] clocksource: Switched to clocksource MIPS
[    0.747967] NET: Registered protocol family 2
[    0.757384] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.771089] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.783600] TCP: Hash tables configured (established 1024 bind 1024)
[    0.796304] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.807770] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.820453] NET: Registered protocol family 1
[    0.832838] Crashlog allocated RAM at address 0x3f00000
[    0.844881] workingset: timestamp_bits=14 max_order=14 bucket_order=0
[    0.864744] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.876196] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.908291] io scheduler noop registered
[    0.915904] io scheduler deadline registered (default)
[    0.927039] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    0.940675] console [ttyS0] disabled
[    0.947712] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.965533] console [ttyS0] enabled
[    0.965533] console [ttyS0] enabled
[    0.979266] bootconsole [early0] disabled
[    0.979266] bootconsole [early0] disabled
[    0.996371] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    1.021181] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    1.030557] 5 fixed-partitions partitions found on MTD device spi0.0
[    1.043143] Creating 5 MTD partitions on "spi0.0":
[    1.052647] 0x000000000000-0x000000030000 : "u-boot"
[    1.063444] 0x000000030000-0x000000040000 : "u-boot-env"
[    1.074905] 0x000000040000-0x000000050000 : "factory"
[    1.085896] 0x000000050000-0x000000780000 : "firmware"
[    1.100090] 2 uimage-fw partitions found on MTD device firmware
[    1.111878] Creating 2 MTD partitions on "firmware":
[    1.121728] 0x000000000000-0x000000197a02 : "kernel"
[    1.132503] 0x000000197a02-0x000000730000 : "rootfs"
[    1.143221] mtd: device 5 (rootfs) set to be root filesystem
[    1.156083] 1 squashfs-split partitions found on MTD device rootfs
[    1.168396] 0x0000005f0000-0x000000730000 : "rootfs_data"
[    1.180046] 0x000000780000-0x000000800000 : "storage"
[    1.191697] libphy: Fixed MDIO Bus: probed
[    1.212238] rt3050-esw 10110000.esw: link changed 0x00
[    1.224104] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    1.242355] NET: Registered protocol family 10
[    1.255536] Segment Routing with IPv6
[    1.262985] NET: Registered protocol family 17
[    1.271879] 8021q: 802.1Q VLAN Support v1.8
[    1.286868] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    1.307441] Freeing unused kernel memory: 1204K
[    1.316404] This architecture does not have kernel memory protection.
[    1.970141] init: Console is alive
[    1.977215] init: - watchdog -
[    2.550349] random: fast init done
[    2.756372] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.937396] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.962292] init: - preinit -
[    4.384411] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3[    4.583806] random: procd: uninitialized urandom read (4 bytes read)
] or [4] key and hit [enter] to select the debug level
[    7.720341] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[    7.764542] urandom-seed: Seed file not found (/etc/urandom.seed)
[    7.904087] procd: - early -
[    7.909996] procd: - watchdog -
[    7.920624] rt3050-esw 10110000.esw: link changed 0x10
[    8.505187] procd: - watchdog -
[    8.511829] procd: - ubus -
[    8.593332] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.605999] rt3050-esw 10110000.esw: link changed 0x18
[    8.727290] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.740510] random: ubusd: uninitialized urandom read (4 bytes read)
[    8.754288] procd: - init -
Please press Enter to activate this console.
[    9.916960] kmodloader: loading kernel modules from /etc/modules.d/*
[   10.140706] urngd: v1.0.0 started.
[   10.235574] nat46: module (version 683fbd2b765506332a1af141545652bf58f03166) loaded.
[   10.283603] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.316489] Loading modules backported from Linux version v5.3-rc4-0-gd45331b00ddb
[   10.331554] Backport generated by backports.git v5.3-rc4-1-0-g4ec72687
[   10.398397] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.442233] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[   10.682682] xt_time: kernel timezone is -0000
[   10.977902] random: crng init done
[   10.984640] random: 6 urandom warning(s) missed due to ratelimiting
[   11.034113] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[   12.068989] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   12.080789] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   12.106712] mt76_wmac 10300000.wmac: firmware init done
[   12.320920] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[   12.333476] mt76x2e 0000:01:00.0: ASIC revision: 76120044
[   13.305510] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a
[   13.323665] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00
[   13.334612] mt76x2e 0000:01:00.0: Build: 1
[   13.342731] mt76x2e 0000:01:00.0: Build Time: 201507311614____
[   13.376709] mt76x2e 0000:01:00.0: Firmware running!
[   13.413026] PPP generic driver version 2.4.2
[   13.434463] NET: Registered protocol family 24
[   13.457255] kmodloader: done loading kernel modules from /etc/modules.d/*
[   81.007133] rt3050-esw 10110000.esw: link changed 0x00
[   84.725977] rt3050-esw 10110000.esw: link changed 0x10
[   85.210456] rt3050-esw 10110000.esw: link changed 0x18
[   87.717761] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   87.766439] br-lan: port 1(eth0.1) entered blocking state
[   87.777384] br-lan: port 1(eth0.1) entered disabled state
[   87.788486] device eth0.1 entered promiscuous mode
[   87.798020] device eth0 entered promiscuous mode
[   87.822336] jffs2_build_filesystem(): unlocking the mtd device... 
[   87.822399] done.
[   87.838517] jffs2_build_filesystem(): erasing all blocks after the end marker... 
[   87.963432] br-lan: port 1(eth0.1) entered blocking state
[   87.989006] br-lan: port 1(eth0.1) entered forwarding state
[   88.000788] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   88.797252] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   92.168458] done.
[   92.172311] jffs2: notice: (1302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   92.572867] overlayfs: upper fs does not support tmpfile.



BusyBox v1.31.0 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r0+11022-f01af852e5
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

WRC-1167FS factoryトラブルメモ

OpenWrtのfactoryを投げ込んだらFlashに書き込まれたデータが何故か化けていて、ブートに失敗した。
blocksizeか何かでピッタリでなければ正しい状態にdecodeできない？要検証

rm: '/tmp/nginx' is a directory
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 0.00
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6291460
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 1970-01-1
Version Firmware       : 
Version Code SCM       : 
Version Config         :                                 
Data CRC Checksum      : 0x56D08D59
Header CRC Checksum    : 0x0
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 97/97 (100%)
Writing data: 6144k/6144k (100%)
Verifying data: 6144k/6144k (100%)
The system is going down NOW!
[12500.716000] SQUASHFS error: zlib_inflate error, data probably corrupt
[12500.728000] SQUASHFS error: squashfs_read_data failed to read block 0x1d6305
[12500.744000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.756000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.772000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.784000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.796000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.812000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.824000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.836000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.852000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.864000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.880000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.892000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.904000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.920000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.932000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.944000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.960000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12500.972000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12500.988000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.000000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.012000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.028000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.040000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.052000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.068000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.080000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
[12501.096000] SQUASHFS error: Unable to read fragment cache entry [1d6305]
[12501.108000] SQUASHFS error: Unable to read page, block 1d6305, size 9161
Sent SIGKILL to all processes
Requesting system reboot
[12502.724000] Restarting system.
[04060C09][04060C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
Bad Magic Number,23071856

[04060C0A][04060C09]
DDR Calibration DQS reg = 00008788


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3

You choosed 4
                                                                                                                           0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)
MT7628 # md.l 0xbc050000
bc050000: 56180723 80312a9f de177f59 81781b04    #..V.*1.Y.....x.
bc050010: 00010284 00010284 2aa7bc3c 03030701    ........<..*....
bc050020: 53514b49 65714d24 7473556a 6e684e24    IKQS$MqejUst$Nhn
bc050030: 342c7a71 2e35332a 00323635 00010204    qz,4*35.562.....
bc050040: 80010269 509b7404 00010204 6f010204    i....t.P.......o
bc050050: a3fefdf9 8ef57db3 13fd43af a5c420ff    .....}...C... ..
bc050060: ef8d81a3 e0847128 5535138d 2fec8ed9    ....(q....5U.../
bc050070: b265d1b9 891febac 2bb7882c ef2ca1a3    ..e.....,..+..,.
bc050080: d602d7fa 951fb8c1 e13b60b3 2c0ed234    .........`;.4..,
bc050090: 79e713b1 9f5bb1be 2a74e0d2 bdd5abff    ...y..[...t*....
bc0500a0: 866b3de9 e8ff9092 e276aa26 13a4f17f    .=k.....&.v.....
bc0500b0: a8c306b1 4c7be526 71891b32 2e649c65    ....&.{L2..qe.d.
bc0500c0: 2926ac8c 2c41af92 e5322fbd 0c4b90df    ..&)..A,./2...K.
bc0500d0: f3f5cf52 814c5b0b b0db23da d50388b3    R....[L..#......
bc0500e0: c9e33000 5781c900 832dea55 a2f5d883    .0.....WU.-.....
bc0500f0: 21604dcd b38d66cb 44bd8db4 9affad64    .M`!.f.....Dd...
MT7628 #

WRC-1167FS fwhandleコマンドメモ

メーカーファームウェアにて、投入されたファームウェアのdecodeを行う fwhandle コマンドのメモ。

/tmp # tftp -r wrc-1167fs_v1.03.bin 192.168.1.133 -g
wrc-1167fs_v1.03.bin 100% |*******************************|  6080k  0:00:00 ETA
/tmp # ls -alh
drwxrwxrwx    3 root     root           0 Sep 14 22:38 .
drwxr-xr-x   17 root     root           0 Sep 14 22:38 ..
-rw-r--r--    1 root     root           5 Sep 14 22:36 dhcpc.lease
-rw-r--r--    1 root     root           3 Sep 14 22:36 dns.suffix
drwxr-xr-x    5 root     root           0 Jan  1  2017 nginx
-rw-r--r--    1 root     root        5.9M Sep 14 22:38 wrc-1167fs_v1.03.bin
/tmp # fwhandle
usage:    head    [-h?]      -h This help
  -s    Source filename
  -d    Destination filename
  -a    Auto set parameter
  -t    Types:    
            bootloader (0)
            state_config (2)
            kernel (3)
            kernel_elecom1700 (5)
            kernel_elecom1701 (6)
            config (1)
            token (4)
  -x    Recovery MD5 file [-u ih_magic]
  -v    FW Version
 -D     Build date
/tmp # fwhandle -t kernel_elecom1701 -x wrc-1167fs_v1.03.bin 
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 1.03
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6225920
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 2017-10-16
Version Firmware       : 1.03
Version Code SCM       : 0abafddb6
Version Config         : e46a8e6df70adbb54129ee057f1ffd35
Data CRC Checksum      : 0x30C2B056
Header CRC Checksum    : 0xff9
------------------------------
FWHANDLE, DECODE PASS
/tmp # ls -alh
drwxrwxrwx    3 root     root           0 Sep 14 22:39 .
drwxr-xr-x   17 root     root           0 Sep 14 22:38 ..
-rw-r--r--    1 root     root           5 Sep 14 22:36 dhcpc.lease
-rw-r--r--    1 root     root           3 Sep 14 22:36 dns.suffix
drwxr-xr-x    5 root     root           0 Jan  1  2017 nginx
-rw-r--r--    1 root     root        5.9M Sep 14 22:39 wrc-1167fs_v1.03.bin.bin

WRC-1167FS

以前から気になってはいた機種。FE止まりであること、最近製造終了となったことから躊躇していたが、Twitterでアンケートを取ってみたところWN-AG600DGRよりも先に票が入ったので今回やることにして確保した。
弄っていくのでメモ。

Switch

zone	WAN	LAN
port (WRC-1167FS)	INTERNET	LAN
port (MT7628A)	port4	port3

MAC

LAN: BC:5C:4C:xx:xx:68 (Config, ethaddr (text) / Factory, 0x28 (hex))
WAN: BC:5C:4C:xx:xx:69 (Config, wanaddr (text) / Factory, 0x22 (hex))
2.4G: BC:5C:4C:xx:xx:6A (Config, rmac (text) / Factory, 0x4 (hex))
5G: BC:5C:4C:xx:xx:6B (Config, rmac2 (text) / Factory, 0x8004 (hex))

U-Boot

help

MT7628 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase SPI FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
nm      - memory modify (constant address)
printenv- print environment variables
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spi     - spi command
tftpboot- boot image via network using TFTP protocol
version - print monitor version

version

MT7628 # version

U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

printenv

MT7628 # printenv
state=N
sn=7BL087007847A
ethaddr=BC:5C:4C:**:**:68
wanaddr=BC:5C:4C:**:**:69
rmac=BC:5C:4C:**:**:6A
rmac2=BC:5C:4C:**:**:6B
rdn=1
rdn2=1
rkey=************
rkey2=************
hver=1.0
BootType=3
bootdelay=1
ipaddr=192.168.2.1
serverip=192.168.2.10
bootfile=WRC-1167FS_uImage
rcn=JP
rcn2=JP
stdin=serial
stdout=serial
stderr=serial

Environment size: 330/4092 bytes

Kernel

コンソールにパスワードが掛けられている。

uname -a

/ # uname -a
sh: uname: not found

cat /proc/version

/ # cat /proc/version
Linux version 3.10.14 (root@***-DEV-****) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed Oct 11 21:04:36 CST 2017

cat /proc/cpuinfo

/ # cat /proc/cpuinfo
system type             : MT7628
machine                 : Unknown
processor               : 0
cpu model               : MIPS 24KEc V5.5
BogoMIPS                : 382.46
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16 dsp
shadow register sets    : 1
kscratch registers      : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/meminfo

/ # cat /proc/meminfo
MemTotal:          61440 kB
MemFree:           31888 kB
Buffers:            2744 kB
Cached:             9328 kB
SwapCached:            0 kB
Active:             4224 kB
Inactive:          10416 kB
Active(anon):       2568 kB
Inactive(anon):      224 kB
Active(file):       1656 kB
Inactive(file):    10192 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          2584 kB
Mapped:             1552 kB
Shmem:               224 kB
Slab:               3576 kB
SReclaimable:        536 kB
SUnreclaim:         3040 kB
KernelStack:         376 kB
PageTables:          404 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       30720 kB
Committed_AS:       7312 kB
VmallocTotal:    1048372 kB
VmallocUsed:        7304 kB
VmallocChunk:    1036944 kB

cat /proc/mtd

/ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 01000000 00010000 "all"
mtd1: 00030000 00010000 "Boot"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 00730000 00010000 "Kernel"
mtd5: 00590000 00010000 "user"
mtd6: 00080000 00010000 "storage"

switch vlan dump

/ # switch vlan dump
idx   vid  portmap
  0     1  ----1-1
  1     2  1111-11
  2     3  1111111
  3     4  1111111
  4     5  1111111
  5     6  1111111
  6     7  1111111
  7     8  1111111
  8     9  1111111
  9    10  1111111
 10    11  1111111
 11    12  1111111
 12    13  1111111
 13    14  1111111
 14    15  1111111
 15    16  1111111

ls -alh /sys/class/leds/

/ # ls -alh /sys/class/leds/
drwxr-xr-x    2 root     root           0 Sep 13 21:33 .
drwxr-xr-x   17 root     root           0 Sep 13 21:33 ..
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 lan_led -> ../../devices/platform/leds-gpio/leds/lan_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 power_led -> ../../devices/platform/leds-gpio/leds/power_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 radio1_led -> ../../devices/platform/leds-gpio/leds/radio1_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 radio2_led -> ../../devices/platform/leds-gpio/leds/radio2_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 wan_led -> ../../devices/platform/leds-gpio/leds/wan_led
lrwxrwxrwx    1 root     root           0 Sep 13 21:33 wps_led -> ../../devices/platform/leds-gpio/leds/wps_led

ls -alh /sys/devices/platform/gpio-keys-polled/

/ # ls -alh /sys/devices/platform/gpio-keys-polled/
drwxr-xr-x    2 root     root           0 Jan  1  2017 .
drwxr-xr-x    7 root     root           0 Jan  1  2017 ..
lrwxrwxrwx    1 root     root           0 Sep 13 21:36 driver -> ../../../bus/platform/drivers/gpio-keys-polled
-r--r--r--    1 root     root        4.0K Sep 13 21:36 modalias
-r--r--r--    1 root     root        4.0K Jan  1  2017 op1
-r--r--r--    1 root     root        4.0K Sep 13 21:36 reset
lrwxrwxrwx    1 root     root           0 Sep 13 21:36 subsystem -> ../../../bus/platform
-rw-r--r--    1 root     root        4.0K Sep 13 21:36 uevent
-r--r--r--    1 root     root        4.0K Sep 13 21:36 wps

bootlog

[04050C09][04050C09]
DDR Calibration DQS reg = 00008787


U-Boot 1.1.3 (Oct 23 2017 - 16:14:35)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa0000
******************************
Software System Reset Occurred
******************************
flash manufacture id: ef, device id 40 18
find flash: W25Q128BV
============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC 7628_MP (Port5None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Oct 23 2017  Time:16:14:35
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 580 MHZ #### 
 estimate memory size = 64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
default: 3                                                                                                                 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   Linux Kernel Image
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1646919 Bytes =  1.6 MB
   Load Address: 80000000
   Entry Point:  802b04a0
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 802b04a0) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 3.10.14 (root@***-DEV-****) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed Oct 11 21:04:36 CST 2017
[    0.000000] 
[    0.000000]  The CPU feqenuce set to 575 MHz
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] Software DMA cache coherency
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00057710
[    0.000000] Readback ErrCtl register=00057710
[    0.000000] Memory: 59744k/65536k available (2784k kernel code, 5792k reserved, 447k data, 1696k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS1] enabled
[    0.096000] Calibrating delay loop... 382.46 BogoMIPS (lpj=764928)
[    0.128000] pid_max: default: 32768 minimum: 301
[    0.132000] Mount-cache hash table entries: 512
[    0.136000] NET: Registered protocol family 16
[    0.140000] RALINK_GPIOMODE = 54050444 
[    0.144000] RALINK_GPIOMODE = 54044444 
[    0.244000] ***** Xtal 40MHz *****
[    0.248000] start PCIe register access
[    0.748000] RALINK_RSTCTRL = 2400000
[    0.752000] RALINK_CLKCFG1 = fdbfffc0
[    0.756000] 
[    0.756000] *************** MT7628 PCIe RC mode *************
[    1.256000] PCIE0 enabled
[    1.260000] Port 0 N_FTS = 1b105000
[    1.264000] init_rt2880pci done
[    1.280000] bio: create slab  at 0
[    1.284000] PCI host bridge to bus 0000:00
[    1.288000] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    1.292000] pci_bus 0000:00: root bus resource [io  0x10160000-0x1016ffff]
[    1.296000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.300000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
[    1.304000] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
[    1.308000] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
[    1.312000] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    1.316000] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
[    1.320000] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
[    1.324000] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.328000] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
[    1.332000] pci 0000:00:00.0:   bridge window [mem 0x20100000-0x201fffff pref]
[    1.336000] BAR0 at slot 0 = 0
[    1.340000] bus=0x0, slot = 0x0
[    1.344000] res[0]->start = 0
[    1.348000] res[0]->end = 0
[    1.352000] res[1]->start = 20200000
[    1.356000] res[1]->end = 2020ffff
[    1.360000] res[2]->start = 0
[    1.364000] res[2]->end = 0
[    1.368000] res[3]->start = 0
[    1.372000] res[3]->end = 0
[    1.376000] res[4]->start = 0
[    1.380000] res[4]->end = 0
[    1.384000] res[5]->start = 0
[    1.388000] res[5]->end = 0
[    1.392000] bus=0x1, slot = 0x0
[    1.396000] res[0]->start = 20000000
[    1.400000] res[0]->end = 200fffff
[    1.404000] res[1]->start = 0
[    1.408000] res[1]->end = 0
[    1.412000] res[2]->start = 0
[    1.416000] res[2]->end = 0
[    1.420000] res[3]->start = 0
[    1.424000] res[3]->end = 0
[    1.428000] res[4]->start = 0
[    1.432000] res[4]->end = 0
[    1.436000] res[5]->start = 0
[    1.440000] res[5]->end = 0
[    1.444000] cfg80211: Calling CRDA to update world regulatory domain
[    1.448000] Switching to clocksource MIPS
[    1.452000] NET: Registered protocol family 2
[    1.464000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    1.476000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    1.488000] TCP: Hash tables configured (established 512 bind 512)
[    1.500000] TCP: reno registered
[    1.508000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    1.520000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    1.532000] NET: Registered protocol family 1
[    1.568000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.580000] jffs2: version 2.2. (NAND) (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    1.596000] msgmni has been set to 116
[    1.604000] io scheduler noop registered (default)
[    1.620000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    1.636000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
[    1.648000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
[    1.676000] brd: module loaded
[    1.684000] flash manufacture id: ef, device id 40 18
[    1.692000] W25Q128BV(ef 40180000) (16384 Kbytes)
[    1.700000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
[    1.720000] Creating 7 MTD partitions on "raspi":
[    1.732000] 0x000000000000-0x000001000000 : "all"
[    1.740000] 0x000000000000-0x000000030000 : "Boot"
[    1.752000] 0x000000030000-0x000000040000 : "Config"
[    1.764000] 0x000000040000-0x000000050000 : "Factory"
[    1.776000] 0x000000050000-0x000000780000 : "Kernel"
[    1.788000] 0x0000001f0000-0x000000780000 : "user"
[    1.800000] 0x000000780000-0x000000800000 : "storage"
[    1.812000] IMQ driver loaded successfully. (numdevs = 2, numqueues = 1)
[    1.828000]  Hooking IMQ before NAT on PREROUTING.
[    1.836000]  Hooking IMQ after NAT on POSTROUTING.
[    1.844000] PPP generic driver version 2.4.2
[    1.856000] PPP MPPE Compression module registered
[    1.864000] NET: Registered protocol family 24
[    1.872000] rdm_major = 253
[    1.880000] nf_conntrack version 0.5.0 (933 buckets, 3732 max)
[    1.892000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.904000] Type=Linux
[    1.908000] TCP: cubic registered
[    1.916000] NET: Registered protocol family 17
[    1.924000] 8021q: 802.1Q VLAN Support v1.8
[    1.944000] Freeing unused kernel memory: 1696K (80328000 - 804d0000)
[    1.964000] Algorithmics/MIPS FPU Emulator v1.5
Sun Jan  1 00:00:00 UTC 2017
[    2.152000] Registered button device:reset, gpio:5,code:408,index:1
[    2.164000] Registered button device:wps, gpio:38,code:529,index:0
[    2.176000] Registered button device:opmode_1, gpio:4,code:747,index:2
[    2.196000] CLI_EXCHANGE, Load cli_exchange[v0.1.0] ready.
[    2.276000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.284000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.292000] Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocated, mtu = 1500!
[    2.312000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.320000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.340000] PROC INIT OK!
[    2.396000] FFFFFFBC:5C:4C:FFFFFFB0:23:68
[    2.404000] Raeth v3.1 ()
[    2.412000] 
[    2.412000] phy_tx_ring = 0x03556000, tx_ring = 0xa3556000
[    2.428000] 
[    2.428000] phy_rx_ring0 = 0x03580000, rx_ring[0] = 0xa3580000
[    2.440000] 
[    2.440000] phy_rx_ring0 = 0x03580000, rx_ring[0] = 0xa3580000
[    2.472000] GMAC1_MAC_ADRH -- : 0x0000bc5c
[    2.480000] GMAC1_MAC_ADRL -- : 0x4cb02368
[    2.488000] RT305x_ESW: Link Status Changed
[    2.500000] Set Port 0 Disabled
[    2.508000] Set Port 1 Disabled
[    2.520000] Set Port 2 Disabled
[    2.528000] Set Port 3 Disabled
[    2.540000] Set Port 4 Disabled
[    2.548000] Set Port 4 Enabled, 1000 Mbps
[    2.560000] Set Port 3 Enabled, 1000 Mbps
ln: /lib/./modules: File exists
### Radio 1 wps ----> 1
### Radio 2 wps ----> 1
/sbin/uwcd: '/lib/' is not an ELF file
Vendor Probe Success --> MTK API v0.1
Radio Number from CFG --> [2]
UWCD ctrl iface: /var/sysuwcd/if0
SEM_GETID got id -1
Sun Jan  1 00:00:00 UTC 2017
[    3.196000] device eth2 entered promiscuous mode
sysctl: write error: Invalid argument
ra0       no private ioctls.

ra1       no private ioctls.

ra2       no private ioctls.

rai0      no private ioctls.

rai1      no private ioctls.

[    3.340000] device eth2.2 entered promiscuous mode
[    3.352000] br0: port 1(eth2.2) entered forwarding state
[    3.360000] br0: port 1(eth2.2) entered forwarding state
[    3.380000] device eth2.1 entered promiscuous mode
[    3.388000] br0: port 2(eth2.1) entered forwarding state
[    3.400000] br0: port 2(eth2.1) entered forwarding state
info, udhcpc (v0.9.9-pre) started
debug, Entering released state
debug, Performing a DHCP renew
[Recv CMD] open_radio all
[Reply CMD] OK

crontab: can't open 'root': No such file or directory
[lltd_open:53] lltd_open.
[lltd_open:58] finish the upnpd open .
    ________________________________________________________________________________

     .-') _                   (`\ .-') /`      .-. .-')                ) (`-.   
    (  OO) )    .-----.        `.( OO ),'      \  ( OO )                ( OO ).   
    /     '._  /  .-.  \    ,--./  .--.         ;-----.\   .-'),-----. (_/.  \_)-. 
    |'--...__) |  \_.' /    |      |  |         | .-.  |  ( OO'  .-.  ' \  `.'  /  
    '--.  .--' /  .-. ',-.  |  |   |  |,        | '-' /_) /   |  | |  |  \     /\  
       |  |    | |   | . /_ |  |.'.|  |_)       | .-. `.  \_) |  |\|  |   \   \ |  
       |  |    \  '-'  _.__)|         |         | |  \  |   \ |  | |  |  .'    \_) 
       |  |     `----''     |   ,'.   |         | '--'  /    `'  '-'  ' /  .'.  \  
       `--'                 '--'   '--'         `------'       `-----' '--'   '--' 
    ________________________________________________________________________________

FW version: 1.02, SCM version: 129e08ebd, Date: 2017-10-11
Login > spawn-fcgi: child spawned successfully: PID: 525
spawn-fcgi: child spawned successfully: PID: 527
spawn-fcgi: child spawned successfully: PID: 528
spawn-fcgi: child spawned successfully: PID: 529
spawn-fcgi: child spawned successfully: PID: 530
spawn-fcgi: child spawned successfully: PID: 531
[    4.960000] register rt2860
[    4.976000] 
[    4.976000] 
[    4.976000] === pAd = c0501000, size = 2166808 ===
[    4.976000] 
[    4.996000] rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
[    5.052000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
[    5.064000] RtmpEepromGetDefault::e2p_dafault=2
[    5.076000] RtmpEepromTypeAdjust:: eeFlashId = 0x7662.
[    5.084000] NVM is FLASH mode (pAd->flash_offset = 0x8000)
[    5.096000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[    6.196000] build time = 
[    6.200000] 20141115060606a
[    6.208000] rom patch for E3 IC
[    6.212000] 
[    6.216000] platform = 
[    6.220000] ALPS
[    6.224000] hw/sw version = 
[    6.228000] 
[    6.232000] patch version = 
[    6.240000] 
[    6.256000] FW Version:0.0.00 Build:1
[    6.260000] Build Time:201507311614____
[    6.268000] fw for E3 IC
[    6.292000] RX[0] DESC a3778000 size = 4096
[    6.300000] RX[1] DESC a3779000 size = 4096
[    6.316000] E2pAccessMode=2
[    6.324000] cfg_mode=14
[    6.328000] cfg_mode=14
[    6.332000] wmode_band_equal(): Band Not Equal!
[    6.572000] 1. Phy Mode = 49
[    6.576000] get_chl_grp:illegal channel (167)
[    6.588000] get_chl_grp:illegal channel (167)
[    6.596000] get_chl_grp:illegal channel (169)
[    6.604000] get_chl_grp:illegal channel (169)
[    6.612000] get_chl_grp:illegal channel (171)
[    6.620000] get_chl_grp:illegal channel (171)
[    6.628000] /builds/f13216d0/0/TNW/TWB1709/PKGS_MTK/MT76x2E_V3.0.4.x/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxPower[choffset].Channel == 42)failed
[    6.660000] Country Region from e2p = ffff
[    6.668000] mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
[    6.684000] mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
[    6.696000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
[    6.716000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
[    6.732000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
[    6.748000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
[    6.764000] mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0x0, ALNAGain1=0x0, ALNAGain2=0x0
[    6.788000] 2. Phy Mode = 49
[    6.792000] 3. Phy Mode = 49
[    6.800000] andes_pci_fw_init
[    6.804000] 0x1300 = 00073200
[    6.836000] AntCfgInit: primary/secondary ant 0/1
[    6.844000] andes_load_cr:cr_type(2)
[    6.864000] ChipStructAssign(): MT76x2 hook !
[    6.872000] RTMPSetPhyMode: channel is out of range, use first channel=36 
[    6.884000] MCS Set = ff ff 00 00 01
[    6.992000] TX0 power compensation = 0x38
[    7.000000] TX1 power compensation = 0x38
[   12.060000] mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=52, HT-CentCh=54, VHT-CentCh=58
[   12.124000] APStartUp(): AP Set CentralFreq at 58(Prim=52, HT-CentCh=54, VHT-CentCh=58, BBP_BW=2)
[   12.148000] mt76x2_calibration():RDMode  is in Silent State, do not calibration.
[   12.164000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   12.180000] Main bssid = bc:5c:4c:b0:23:6b
[   12.188000] mt76x2_reinit_agc_gain:original agc_vga0 = 0x5c, agc_vga1 = 0x5c
[   12.200000] mt76x2_reinit_agc_gain:updated agc_vga0 = 0x5c, agc_vga1 = 0x5c
[   12.216000] mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x27, hi_lna1 = 0x27
[   12.228000] mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x27, hi_lna1 = 0x27
[   12.244000] original vga value(chain0) = 5c
[   12.252000] original vga value(chain1) = 5c
[   12.260000] 
[   15.168000] MtAsicInitMac()-->
[   15.176000] mt7628_init_mac_cr()-->
[   15.180000] MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
[   15.192000]  Initialize FT KDP Module...
[   20.724000] Main bssid = bc:5c:4c:b0:23:6a
[   20.732000] 
[   20.752000] @@@ ed_monitor_exit : CommonCfg.CountryCode = JP  
[   20.788000] mt7628_set_ed_cca: TURN OFF NBID mac 0x10610 = 0x36a1282a
[   20.800000] WiFi Startup Cost (ra0): 6.516s
[   20.816000] device ra0 entered promiscuous mode
[   20.824000] br0: port 4(ra0) entered forwarding state
[   20.836000] br0: port 4(ra0) entered forwarding state
brctl: bridge br_guest0: No such device
ubox_if_is_existed: interface is NULL!
[   20.872000] Set_ed_chk_proc()::ed_chk=1
[   20.880000] mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1
[   20.896000] mt7628_set_ed_cca: pAd->CommonCfg.CountryCode = JP  
[   20.908000] mt7628_set_ed_cca: TURN OFF NBID mac 0x10610 = 0x36a1282a
[   20.944000] 
[   20.944000] ====
[   20.944000] @@@ ed_status_read: EDCCA TH - H
[   20.944000] pAd->ed_trigger_cnt : 1 > 20 ||  pAd->ed_big_rssi_stat : 0 < 50
[   20.944000] ====
ntp.nict.jp: Unknown host
[   27.360000] br0: port 3(rai0) entered forwarding state
[   35.872000] br0: port 4(ra0) entered forwarding state
ntp.nict.jp: Unknown host
ntp.nict.jp: Unknown host
[   79.120000] mt76x2_calibration(channel = 58)
ntp.nict.jp: Unknown host
ntp.nict.jp: Unknown host

Firmware Upgrade Log

43719 53987.583   31024.0      0.8  -974121.6      0.0         0
------- ELECOM1701 Header Info
Image Header Size      : 0x0038
Image Header ID        : ELECOM
Image Product Name     : WRC-1167FS
Image Version          : 1.03
------------------------------
------- Header Info
Image Header Size      : 0x0074
Image Header Magic Code: 0x031d6129
Image Data Size        : 6225920
Image Type             : 0x6 [kernel_elecom1701]
Compression Type       : 0x0
Model ID               : 0x00228000
Build Date             : 2017-10-16
Version Firmware       : 1.03
Version Code SCM       : 0abafddb6
Version Config         : e46a8e6df70adbb54129ee057f1ffd35
Data CRC Checksum      : 0x30C2B056
Header CRC Checksum    : 0xff9
------------------------------
FWHANDLE, DECODE PASS
Erasing blocks: 95/95 (100%)
Writing data: 6080k/6080k (100%)
Verifying data: 6080k/6080k (100%)
The system is going down NOW!
Received a SIGTERM
debug, Received SIGTERM
Sent SIGKILL to all processes
Requesting system reboot
[  243.244000] Restarting system.

Switch

MAC

U-Boot

Kernel

共有:

共有:

共有:

共有:

Switch

MAC

U-Boot

Kernel

Firmware Upgrade Log

共有: