Archer D5 uszkoszone firmware

Witam wszystkich.
Mam problem z routerem archer D5. Prawdopodobnie coś z firmware.
Chciałem wgrać firmware z strony producenta ale plik ma 18 MB.
i to jeszcze jakoś nierówno i nie do końca wiem w którym miejscu uciąć.
No i jeszcze pytanie czy procedura wgrywania po serial line jest inna? Wiem że można się podłączyć pod modem i główne cpu.

Witam,

Jakie masz objawy uszkodzonego firmware? Router w ogóle nie wstaje? Masz bootlog z niego?

Logi pozniej mogę wrzucić.
Ale po podłączeniu serial dla głównego cpu - uboot ładuje się jest możliwość załadowania z tftp.
Próbowałem standardowej procedury wgrywania przez tftp.
Pytanie czy wyglada ona tak samo dla routera z modemem?

Dla V1 wygląda to bardzo podobnie do ogólnych instrukcji. Z firmware wycinasz bootloader (0x20200) oraz z końca firmware do modemu.
Dla V2 jest to bardziej skomplikowane. Zatem jaką masz wersję?

v1
Przy wrzucaniu całego firmware to będą poprawne adresy?
tftp 0x81000000 d5boot.bin
erase 0x9f020000 +f80000
cp.b 0x81020200 0x9f020000 0xf80000
reset

Tak. Wygląda to poprawnie.

po wykonaniu tych komend są takie logi:

U-Boot 1.1.4 (Apr 23 2014 - 08:43:14)

ap135 - Scorpion 1.0
DRAM: 128 MB

U-Boot 1.1.4 (Apr 23 2014 - 08:43:14)

ap135 - Scorpion 1.0
DRAM: 128 MB
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
athrs_sgmii_res_cal: cal value = 0xe
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ----> S17 PHY *
athrs17_reg_init: complete
: cfg1 0x80000000 cfg2 0x7114
eth0: c4:e9:84:43:5d:7a
eth0 up
athrs17_reg_init_wan done
SGMII in forced mode
athr_gmac_sgmii_setup SGMII done
: cfg1 0x800c0000 cfg2 0x7214
eth1: c4:e9:84:43:5d:7b
eth1 up
eth0, eth1
Setting 0x18116290 to 0x4081214f
Hit any key to stop autoboot: 0

Booting image at 80800000 ...

    Uncompressing Kernel Image ... OK

Starting kernel ...

Booting QCA955x
Linux version 2.6.31--LSDK-9.5.2.18 (swd@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #4 Tue Dec 2 10:04:17 CST 2014
flash_size passed from bootloader = 16
arg 1: console=ttyS0,115200
arg 2: root=31:02
arg 3: rootfstype=squashfs
arg 4: init=/sbin/init
arg 5: mtdparts=ath-nor0:128k(u-boot),1152k(kernel),14848k(rootfs),64k(config),64k(romfs),64k(reserve),64k(radio)
arg 6: mem=128M
CPU revision is: 00019750 (MIPS 74Kc)
cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1152k(kernel),14848k(rootfs),64k(config),64k(romfs),64k(reserve),64k(radio) mem=128M
PID hash table entries: 512 (order: 9, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 112256k/131072k available (2268k kernel code, 18644k reserved, 600k data, 136k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
Mount-cache hash table entries: 512

ALLOC*******
Packet mem: 8030f300 (0xe00000 bytes)


NET: Registered protocol family 16
ath_pcibios_init: bus 0
***** Warning PCIe 0 H/W not found !!!
registering PCI controller with io_map_base unset
ath_pcibios_init: bus 1
ath_pcibios_init(232): PCI 1 CMD write: 0x356
registering PCI controller with io_map_base unset
bio: create slab at 0
pcibios_map_irq: IRQ 76 for bus 1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.12)
msgmni has been set to 219
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
brd: module loaded
loop: module loaded
PPP generic driver version 2.4.2
NET: Registered protocol family 24
7 cmdlinepart partitions found on MTD device ath-nor0
Creating 7 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000140000 : "kernel"
0x000000140000-0x000000fc0000 : "rootfs"
0x000000fc0000-0x000000fd0000 : "config"
0x000000fd0000-0x000000fe0000 : "romfs"
0x000000fe0000-0x000000ff0000 : "reserve"
0x000000ff0000-0x000001000000 : "radio"
Mirror/redirect action on
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 10240 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear greearb@candelatech.com
All bugs added by David S. Miller davem@redhat.com
arch/mips/atheros/gpio.c (ath_simple_config_init) JUMPSTART_GPIO: 16
athwdt_init: Registering WDT success
ath_otp_init: Registering OTP success
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 136k freed
starting pid 162, tty '': '/etc/init.d/rcS'
mount: mounting devpts on /dev/pts failed: No such device
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Port Status 1c000004
ath-ehci ath-ehci.0: ATH EHCI
ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Port Status 1c000000
ath-ehci1 ath-ehci1.1: ATH EHCI
ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
dns_init
domain_name:tplinkmodem.net
PPPoL2TP kernel driver, V1.0

Please press Enter to activate this console. [ dm_readFile ] 2042: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
[ oal_sys_readCfgFlash ] 714: User config length is too long - 6e666967

[ dm_loadCfg ] 2278: Read config from flash failed. ret = 1
[ dm_readFile ] 2042: can not open xml file /var/tmp/pc/default_config.xml!, about to open file /etc/default_config.xml
[ parseConfigNode ] 522: Meet unrecognized object node "PhDDNSCfg", skip the node
[ parseConfigNode ] 527: Meet unrecognized parameter node "PhDDNSCfg", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_WANUSB3gLinkConfig", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "QueueManagement", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "VoiceService", skip the node
[ parseConfigNode ] 527: Meet unrecognized parameter node "VoiceService", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_SpeedDialCfg", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_MultiIspDialPlan", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_CallLogCfg", skip the node
init system mode
qca955x_GMAC: Length per segment 1536
955x_GMAC: qca955x_gmac_attach
955x_GMAC: qca955x_set_gmac_caps
Currently in polling mode unit1
mac:1 Registering S17....
qca955x_GMAC: RX TASKLET - Pkts per Intr:200
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 220
qca955x_GMAC: Max rx descriptor count : 220
qca955x_GMAC: Mac capability flags : 12002200
955x_GMAC: qca955x_gmac_attach
955x_GMAC: qca955x_set_gmac_caps
Currently in polling mode unit0
mac:0 Registering S17....
qca955x_GMAC: RX TASKLET - Pkts per Intr:200
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 220
qca955x_GMAC: Max rx descriptor count : 220
qca955x_GMAC: Mac capability flags : 10002A00
955x_GMAC: Serdes PLL is locked value 0x1f038116
athr_gmac_ring_alloc Allocated 3520 at 0x87a3e000 for 1 (RX=0)
athr_gmac_ring_alloc Allocated 3520 at 0x87ac0000 for 0 (RX=0)
@@[athr_gmac_rx_alloc]: r->ring_desc is a7b56000 , r->ring_desc_dma is 7b56000 , r->ring_buffer is 87ac0000
955x_GMAC: eth1 in SGMII MODE
Scorpion -----> S17 PHY
[athrs17_reg_init]: entering
_athrs17_mac0_intf SGMII done
[athrs17_reg_init]: complete
955x_SGMII::athr_gmac_sgmii_setup Done
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
[athrs17_disable_vlan_dsl]: Doing Basic init for Vlan for Grouping not enable
Phy setup Complete
955x_GMAC: enet unit:1 is up...
eth1 SGMII 1000Mbps full duplex
955x_GMAC: qca955x_soc_gmac_set_mac_duplex
955x_GMAC: qca955x_soc_gmac_set_link Done
955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl
[ oal_sys_getOldTZInfo ] 359: Open TZ file error!
ioctl: No such device
device eth0.6 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.6) entering forwarding state
device eth0.6 left promiscuous mode
device eth0 left promiscuous mode
br0: port 1(eth0.6) entering disabled state
device eth0.2 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.2) entering forwarding state
device eth0.3 entered promiscuous mode
br0: port 2(eth0.3) entering forwarding state
device eth0.4 entered promiscuous mode
br0: port 3(eth0.4) entering forwarding state
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entering forwarding state
**cal_data_2g
020200023537707500000000
**cal_data_end
**cal_data_5g
4408d8909999090000080808
**cal_data_end
adf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_spectral: Version 2.0.0
Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
SPECTRAL module built on Dec 18 2014 16:51:08
ath_tx99: Version 2.0
Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2-00155-8 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
Enterprise mode: 0x53fc0000
Restoring Cal data from Flash
SPECTRAL : get_capability not registered
HAL_CAP_PHYDIAG : Capable
SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
SPECTRAL : get_capability not registered
HAL_CAP_RADAR : Capable
SPECTRAL : Need to fix the capablity check for SPECTRAL
(spectral_attach : 236)
SPECTRAL : get_capability not registered
HAL_CAP_SPECTRAL_SCAN : Capable
SPECTRAL : get_tsf64 not registered
spectral_init_netlink 52 NULL SKB
SPECTRAL : No ADVANCED SPECTRAL SUPPORT
SPECTRAL :----- module attached
Green-AP : Green-AP : Attached

ath_get_caps[6148] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[6123] tx chainmask mismatch actual 7 sc_chainmak 0
ath_attach_dfs[12558] dfsdomain 1
SPECTRAL : module already attached
wifi0: Atheros ???: mem=0xb8100000, irq=2
ath_pci: 10.2-00155-8 (Atheros/multi-bss)
ath_pci_probe
PCI device id is 003c :003c
ath_pci 0000:01:00.0: ath DEBUG: sc=0x86f67000

ol_ath_pci_configure : num_desired MSI set to 0

Using PCI Legacy Interrupt

Enet:1 port1 up
__ol_ath_attach: ath_attach TODO
__ol_ath_attach: dev name wifi1
ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
OL_ACBKMinfree : 0
OL_ACBEMinfree : 0
OL_ACVIMinfree : 0
OL_ACVOMinfree : 0
ol_ath_attach() BMI inited.
ol_ath_attach() BMI Get Target Info.
ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0

ath: factory configuration restored..
Erase from fc0000 with 100 bytes .
Write flash to fc0000, len is 100

Po wykonaniu tych komend logi są jak powyżej.
resetuje się cyklicznie
Czy to oznacza uszkodzenie pamięci?

Sorki za opóźnienie.
Możliwe że "czegoś" dalej brakuje w firmware.
Próbowałeś się podłączyć konsolą do modemu? Może to on wydaje restarty?