How to install redboot on WBR 1310 / 4MB flash via TJTAG ???

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Author Message
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Wed Oct 12, 2011 20:49    Post subject: How to install redboot on WBR 1310 / 4MB flash via TJTAG ??? Reply with quote
I plan to upgrade a DLINK - WBR 1310 from 2MB flash to 4MB flash.

As far as i understand from reading other posts , it is possible to upload redboot on it and then install DDWRT.

I would like to know the steps of installing redboot via JTAG on the device with a 4 MB flash chip.
Sponsor
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Sat Oct 15, 2011 9:36    Post subject: Reply with quote
we dont support 2mb flash ath hw
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Sat Oct 15, 2011 13:54    Post subject: Reply with quote
DD-WRT Forum :: View topic - TP-LINK WR340G HARDWARE MODDED TO 4mb FLASH and 16mb RAM
DD-WRT Forum :: View topic - 2M Flash - Atheros routerboards LINKS & INFORMATIONS - J
DD-WRT Forum :: View topic - SOLVED - D-LINK DIR-825 - FLASH MEMORY ERASED BY ACCIDENT (photos attached)

_________________
DD-WRT Forum - Atheros Recommended Build
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Sat Oct 15, 2011 17:25    Post subject: what i did so far Reply with quote
Thanks guys for your response.

@ sash

i know 2 MB devices are not supported , that's why i upgraded the flash to 8 MB.

i used a serial ST chip that seems to have simmilar control registers as the original spansion 2 MB flash.

the wbr-1310 i have seems to be similar to the dir-300 router , it comes with a IC+ chip and 16MB RAM.

i found somewhere on the dd-wrt website some redboot bootloader in ELF and ROM format and downloaded a ROM file version that seems to be the suiteable one for my router (IC+ / 8MB flash / 16MB RAM).

then i used TJTAG and it said that the FLASH starts from 1c000000 to 1c800000.

so i thought i upload the bootloader from 1c000000 to 1c010000 since it is 65KB.

@ fyi2000

in this post

http://www.dd-wrt.com/phpBB2/viewtopic.php?t=141179

you say...

Code:
0x00000000-0x00010000 : "Micro RedBoot"
0x003e0000-0x003ef000 : "FIS directory"
0x003ef000-0x003f0000 : "RedBoot config"
0x003f0000-0x00400000 : "boardconfig"


that means that the bootloader is the very first thing on the FLASH ?

will it generate the FIS directory and the config by itself ?

the other posts were talking about flashing the flash ic and then putting it back on the board.

i had the same idea too , but i could not find any full flash dump of the dir-300 i could use and then upgrade to dd-wrt later.
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Sat Oct 15, 2011 20:53    Post subject: Re: what i did so far Reply with quote
pompo wrote:
will it generate the FIS directory and the config by itself ?

Initializing FIS directory and RedBoot config shouldn't be difficult. Generating boardconfig is the problem. Maybe you can try the tools written by ShadowAndy.

Generating DIR-300′s board config | shadowandy - my life stories

_________________
DD-WRT Forum - Atheros Recommended Build
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Sun Oct 30, 2011 18:08    Post subject: somethings missing... Reply with quote
well i installed dd-wrt on the wbr-1310 with the 8MB flash chip.

i used a micro redboot i downloaded from the dd-wrt that is made for units with 8MB flash / 16MB ram / IC+ switch ICs.

i also uploaded the file generated from shadowandy's page which is supposed to be a dir-300 board config file.
the problem is that i had to use a pin from another unit in the genrator.

two things i noticed...

1. when i get into redboot at the startup , it complains not finding a MAC for eth0 i think.
it also appears that the radio is not working either.

2. i can not connect to the web interface of the unit on 192.168.1.1 even though i can connect to ddwrt via putty via serial port.
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Sun Oct 30, 2011 20:42    Post subject: Reply with quote
dmesg
_________________
DD-WRT Forum - Atheros Recommended Build
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Mon Oct 31, 2011 14:34    Post subject: boot log Reply with quote
this is the boot log when i start up the router without forcing it into the redboot.

it keeps hanging in the very last line of the log and the only way to leave is typing reset.

as soon as i doo that the dd-wrt welcome screen comes up.

++++++++++++++++++++++++++++++++++++++++++++++++++++

MicroRedBoot v1.3, (c) 2009 DD-WRT.COM (Jul 6 2009)
CPU Clock: 184Mhz
Found Flash device SIZE=0x00800000 SECTORSIZE=0x00010000 FLASHBASE=0xA8000000
found bootable image: [linux] at [0xA8010000] EP [0x80041000]
Booting Linux
loading..................................................................................Linux version 2.6.24.111 (root@dd-wrt) (gcc version 4.1.1) #22661 Sat Oct 10 03:19:35 CEST 2009
mips devid = 90
CPU revision is: 00019064
mem setup
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Built 1 zonelists in Zone order. Total pages: 4064
Kernel command line: console=ttyS0,115200 root=/dev/mtdblock2 rootfstype=squashfs noinitrd mem=16M
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 64 (order: 6, 256 bytes)
Using 92.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 12948k/16384k available (2222k kernel code, 3436k reserved, 289k data, 124k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
scanning for board data at A87FF000 (FFFFFFFF)
scanning for board data at A87FE000 (FFFFFFFF)
scanning for board data at A87FD000 (FFFFFFFF)
scanning for board data at A87FC000 (FFFFFFFF)
scanning for board data at A87FB000 (FFFFFFFF)
scanning for board data at A87FA000 (FFFFFFFF)
scanning for board data at A87F9000 (FFFFFFFF)
scanning for board data at A87F8000 (FFFFFFFF)
scanning for board data at A87F7000 (FFFFFFFF)
scanning for board data at A87F6000 (FFFFFFFF)
scanning for board data at A87F5000 (FFFFFFFF)
scanning for board data at A87F4000 (FFFFFFFF)
scanning for board data at A87F3000 (FFFFFFFF)
scanning for board data at A87F2000 (FFFFFFFF)
scanning for board data at A87F1000 (FFFFFFFF)
scanning for board data at A87F0000 (35333131)
found 1
Could not find Radio Configuration data
Generic PHY: Registered new driver
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
gpio_proc: module loaded and /proc/gpio/ created
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0xb1100003 (irq = 37) is a 16550A
serial8250 serial8250.0: unable to register port at index 0 (IO3f8 MEM0 IRQ4): -28
serial8250 serial8250.0: unable to register port at index 1 (IO2f8 MEM0 IRQ3): -28
serial8250 serial8250.0: unable to register port at index 2 (IO3e8 MEM0 IRQ4): -28
serial8250 serial8250.0: unable to register port at index 3 (IO2e8 MEM0 IRQ3): -28
Infineon ADM6996: Registered new driver
Marvell 88E6060/88E6061: Registered new driver
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
scanning for root partition

found squashfs at E0000
found RedBoot partition at [0xA8000000]
found linux partition at [0xA8010000]
Creating 8 MTD partitions on "spiflash":
0x00000000-0x00010000 : "RedBoot"
0x00010000-0x007d0000 : "linux"
0x000e0000-0x003b0000 : "rootfs"
0x003b0000-0x007d0000 : "ddwrt"
0x007d0000-0x007e0000 : "nvram"
0x007e0000-0x007f0000 : "FIS directory"
0x007f0000-0x00800000 : "board_config"
0x00000000-0x00800000 : "fullflash"
watchdog hb: 60 ISR: 0x20 IMR: 0x8 WD : 0x28fe2ad6 WDC: 0x0
ar2315_wdt_init using heartbeat 60 s cycles 2400000000
watchdog hb: 60 ISR: 0x20 IMR: 0x88 WD : 0x8f07e7c2 WDC: 0x0
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length 128 bytes
PF_RING: ring slots 4096
PF_RING: sample rate 1 [1=no sampling]
PF_RING: capture TX No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode /dev/mtdblock2
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 124k freed
starting Architecture code for dir300
ar2315_wdt: starting watchdog w/timeout 60 seconds
watchdog hb: 60 ISR: 0x20 IMR: 0x89 WD : 0x8f0af646 WDC: 0x0
Algorithmics/MIPS FPU Emulator v1.5
test pattern is FFFFFFFF
eth0: Atheros AR231x: ff:ff:ff:ff:ff:ff, irq 4
ar2313_eth_mii: probed
eth0: attached PHY driver [Generic PHY] (mii_bus:phy_addr=0:00)
ath_hal: module license 'Proprietary' taints kernel.
CPU 0 Unable to handle kernel paging request at virtual address 00000182, epc == 809d1b84, ra == 809d181c
Oops[#1]:
Cpu 0
$ 0 : 00000000 10009c00 00000182 80390b80
$ 4 : 80ce4000 000000c1 8096d7b0 00000000
$ 8 : 00009820 b0009820 00000000 80ce4000
$12 : 8096d78c ec766e5a 8096d77c 8096d77c
$16 : 00000000 000000c1 8096d7b0 00000090
$20 : 8096d7b0 8096d8fc 80ad0000 80ad0000
$24 : 00000010 00200200
$28 : 8096c000 8096d778 c0056a50 809d181c
Hi : 000023d7
Lo : 0bb80000
epc : 809d1b84 Tainted: P
ra : 809d181c Status: 10009c03 KERNEL EXL IE
Cause : 00800008
BadVA : 00000182
PrId : 00019064
Modules linked in: ath_ahb ath_hal(P) ar2313
Process insmod (pid: 645, threadinfo=8096c000, task=8038b898)
Stack : 00009820 55555555 aaaaaaaa 66666666 80960380 80ce4000 80ce4000 809d181c
00000000 80ca5780 00000000 00000000 b0000000 8096d8fc 8096d8b8 8096d6a8
8096f2c4 8096f2c4 00000203 00000001 00000001 00000000 00000000 003000f3
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 0000000a 00000000 00002180 00000001 8096d810 8096d810
...
Call Trace:[<809d181c>][<809c19bc>][<8005fa2c>][<809c0204>][<80a96078>][<800945a4>][<800945a4>][<80061308>][<80061258>][<80061308>][<80061258>][<800618b4>][<80072dcc>][<8006e9a8>][<8008e1fc>][<8006eae8>][<800439a4>][<8026a220>][<80061210>][<80108214>][<8010e39c>][<8009726c>][<800a5074>][<8012e95c>][<8004f43c>][<8004f40c>][<8012e9c8>][<800f8694>][<800f8888>][<8008f6b4>][<8008d260>][<80198be0>][<80a944d8>][<8008d440>][<80a99dc8>][<802d0000>][<802d0000>][<80198450>][<8015b7e8>][<8015b7c8>][<80130474>][<802d0000>][<8015bf28>][<8015bc58>][<8015a398>][<8015bc58>][<8015a52c>][<80198450>][<8015a9dc>][<80a9d2d8>][<80a3111c>][<8008b0b4>][<8008b028>][<8004d230>][<802d0000>]

Code: 8fbf001c 00111040 02021021 <90430000> a2430000 90440001 a2440001 8fbf001c 8fb20018
sh: can't create /proc/sys/dev/wifi0/ledpin: nonexistent directory
sh: can't create /proc/sys/dev/wifi0/softled: nonexistent directory
Reset ICPLUS Phy
Start Autonegotiation
Port 0, Negogiation timeout
Port 1, Negogiation timeout
Port 2, Negogiation timeout
Port 3, Negogiation timeout
Port 4, Negogiation timeout
Port 5, Negogiation timeout
Setup VLANS
write register 29, addr 24 with 0
write register 29, addr 25 with 0
write register 29, addr 26 with 0
write register 29, addr 27 with 0
write register 29, addr 28 with 2
write register 29, addr 30 with 0
write register 29, addr 23 with 7C2
write register 30, addr 1 with 2F
write register 30, addr 2 with 30
write register 30, addr 9 with 1089
device vlan0 entered promiscuous mode
device eth0 entered promiscuous mode
device vlan2 entered promiscuous mode
nvram_commit(): end
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
device vlan0 left promiscuous mode
can't add vlan0 to bridge br0: Invalid argument
device vlan2 left promiscuous mode
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
etherip: Ethernet over IPv4 tunneling driver

gets stuck here ^

+++++++++++++++++++++++++++++++++++++++++++++++






This is what i get when i force the unit into redboot.

+++++++++++++++++++++++++++++++++++++++++++++++
MicroRedBoot v1.3, (c) 2009 DD-WRT.COM (Jul 6 2009)
CPU Clock: 184Mhz
Found Flash device SIZE=0x00800000 SECTORSIZE=0x00010000 FLASHBASE=0xA8000000
Reset Button triggered
Booting Recovery RedBoot
loading.....

þNo radio config data found!
+Couldn't find valid MAC address for enet0. Using default!
Ethernet eth0: MAC address 00:03:7f:e0:02:bf
IP: 192.168.1.1, Default server: 192.168.1.1

RedBoot(tm) bootstrap and debug environment [RAM]
Non-certified release, version UNKNOWN - built 12:22:55, Jul 6 2009

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Copyright (C) 2009 NewMedia-NET GmbH

Board: ap61
RAM: 0x80000000-0x81000000, [0x80031430-0x80fed000] available
FLASH: 0xa8000000 - 0xa87f0000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 4.000 seconds - enter ^C to abort
^C
RedBoot> fis list
Name FLASH addr Mem addr Length Entry point
RedBoot 0xA8000000 0xA8000000 0x00010000 0x00000000
linux 0xA8010000 0x80041000 0x0039D000 0x80041000
FIS directory 0xA87E0000 0xA87E0000 0x0000F000 0x00000000
RedBoot config 0xA87EF000 0xA87EF000 0x00001000 0x00000000
RedBoot>

+++++++++++++++++++++++++++++++++++++++++++++++




the ifconfig looks like this...

+++++++++++++++++++++++++++++++++++++++++++++++
root@DD-WRT:~# ifconfig
br0 Link encap:Ethernet HWaddr 00:00:00:00:00:00
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:324 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:13608 (13.2 KiB)

eth0 Link encap:Ethernet HWaddr FF:FF:FF:FF:FF:FF
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:523 errors:0 dropped:0 overruns:0 frame:0
TX packets:96 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:62108 (60.6 KiB) TX bytes:31488 (30.7 KiB)
Interrupt:4 Base address:0x1000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MULTICAST MTU:16436 Metric:1
RX packets:340 errors:0 dropped:0 overruns:0 frame:0
TX packets:340 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:37000 (36.1 KiB) TX bytes:37000 (36.1 KiB)

vlan0 Link encap:Ethernet HWaddr FF:FF:FF:FF:FF:FF
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:48 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5673 (5.5 KiB) TX bytes:0 (0.0 B)

vlan2 Link encap:Ethernet HWaddr 00:00:00:00:00:01
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:475 errors:0 dropped:0 overruns:0 frame:0
TX packets:96 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:56435 (55.1 KiB) TX bytes:31488 (30.7 KiB)

vlan2:0 Link encap:Ethernet HWaddr 00:00:00:00:00:01
inet addr:169.254.255.1 Bcast:169.254.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

+++++++++++++++++++++++++++++++++++++++++++++++
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Sat Nov 05, 2011 0:31    Post subject: progress Reply with quote
I found out what the reason is why i could not connect to the web interface.

It is the mac address that needs to be specified.

i was successful a few times setting up the right MAC address and hooking up to the web interface , and i could at one point even make the radio work too including WPA2 - AES encryption.

The problem is the setting vanish after a reboot.

It appears that the offset for the board config i am using is not correct and probably the same for the NVRAM.

do you guys have an idea where the board config exactly belongs.
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7647

PostPosted: Sat Nov 05, 2011 5:34    Post subject: Reply with quote
Where board config and nvram partitions resides is router and firmware dependent.
If you want to fully utilize your 8MB flash then you have to use a dd-wrt build for a hardware compatible 8MB router.

_________________
Kernel panic: Aiee, killing interrupt handler!
pompo
DD-WRT Novice


Joined: 31 Jan 2009
Posts: 12

PostPosted: Fri Dec 16, 2011 23:01    Post subject: losing settings Reply with quote
I replaced the 8MB chip with a 4MB chip and got DDWRT running , but i have a different problem now.

the router does not keep the settings after a power cycle , what could be the reason for that ?
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum