Posted: Wed Jan 06, 2010 18:06 Post subject: Edimax PS-1208mfg =>> dd-wrt-micro is working fine :)
Hello everyone :)
I have some good news about the Edimax ps-1208 mfg:
CPU: Broadcom BCM5354 KFBG rev3 at 240MHz (0x29029)
FLASH: MX29LV160CBTC (2MB BotB nor flash)
RAM: 32MB according to original kernel
Serial port
Jtag port
Lan: Broadcom BCM47xx 100/100 Mbps Ethernet Controller 4.130.25.0
Wlan: eth1: Broadcom BCM4318 802.11 Wireless Controller 4.130.28.0
USB 2.0 Host port (PCI ID: 14e4:471a)
Reset button, Lan, Wlan, Status LEDs
This device is actually bricked (CFE overwrited), but I can reflash new CFE with ejtag. I have modified pjtag to probe flash chip with byte mode addresses. My big problem is to find good CFE, for this device.
I have already some informations about the original CFE:
Boot partition size = 131072(0x20000) =>> 128k CFE ?
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Byte-mode configured Flash chip (pin 47 to GND)
Partitions by the original kernel:
0x00000000-0x00200000 : "boot"
0x00000000-0x001f0000 : "linux"
0x00000000-0x00200000 : "rootfs"
0x001f0000-0x00200000 : "nvram"
My question is: How can I find a good CFE for this device ?
I have already tried some CFEs (normal and 128K) with nvram customization or not, they doesn't boot...
To help in this research I attach some files with this post (modified pjtag with source code, original nvram parameters and orginal boot logs).
When I flash, backup and compare original with flashed image (md5sum), I obtain same hash, the flashing process is working well.
Thanks in advance for your help and sorry for eventual language errors (I'm French).
Joined: 22 Jun 2008 Posts: 2440 Location: Am now Dark_Shadow
Posted: Wed Jan 06, 2010 18:14 Post subject:
I don't know for sure, but you have JTAG capabilities, I wonder if the CFE from a Linksys WRT54G2 v1.0 would work. Same Proc. _________________ The New Me
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Mon Jan 28 10:52:32 CST 2008 (root@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.130.31.0
CPU type 0x29029: 240MHz
Total memory: 32768 KBytes
Total memory used by CFE: 0x80400000 - 0x80497FF0 (622576)
Initialized Data: 0x8042F370 - 0x80431830 (9408)
BSS Area: 0x80431830 - 0x80431FF0 (1984)
Local Heap: 0x80431FF0 - 0x80495FF0 (409600)
Stack Area: 0x80495FF0 - 0x80497FF0 (8192)
Text (code) segment: 0x80400000 - 0x8042F370 (193392)
Boot area (physical): 0x00498000 - 0x004D8000
Relocation Factor: I:00000000 - D:00000000
Device eth0: hwaddr 90-E6-BA-5F-15-1F, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Null Rescue Flag.
Invalid boot block on disk
Hello!! Enter Rescue Mode: (Check error)
This is with cfe from WL500GPV2, but this cfe doesn't work well, networking is bugged, I can't upload new firmware for now. But It runs a little, my print server is alive. I try with differents cfe. I will buy another print server to dump the original cfe and put it into cfe collection.
Sebtx,
I don't have a profound knowledge of the matter, but I have the same print server, in its original configuration, and I'll be glad to help if I can. So, in case it is possible to dump the original CFE without building a JTAG cable, just let me know how to do it.
Thanks for your proposition. I need original CFE because I can't recompile it, there is a compilation error.
To backup CFE you need to build serial or jtag cable, there is no other option...
CFE that is actually in my edimax can't provide arp and can't use correctly the ethernet. when I setup static arp entry and try to upload firmware I obtain:
I can't even manipulate the nvram. I'll try to flash other CFE's and eventually re-contact Edimax to query the original CFE dump...
<dream>
The final goal is to run minimal system on flash, that detects an usb key and chroot into ext2 partition containing a debian-mips rootfs. With 32MB of RAM and 2GB rootfs on usb key with full r/w access, we can imagine a lot of usages.
Hi ! i have the same router and i solder on the serial port. After googling a little i found that login and password are edimax and software01 then it works like i charm .
I've been looking for a portable (small) wireless USB router to run DDwrt with G3 code to convert my Blackberry's USB Internet connection to a 2.4Ghz G-wireless signal.
The ps-1208mfg would be nice to use, but does the 2MB flash even have room for G3 USB support?
TIA. _________________ Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9
Off Site 1
R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4
Off Site 2
R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531
I've been looking for a portable (small) wireless USB router to run DDwrt with G3 code to convert my Blackberry's USB Internet connection to a 2.4Ghz G-wireless signal.
The ps-1208mfg would be nice to use, but does the 2MB flash even have room for G3 USB support?
TIA.
What is G3, and how are you planning on using your BlackBerry with a router?
The reason I ask is because I have a BlackBerry, a USB capable router, and am proficient at hacking linux...you have me interested. _________________ Eko Builds
I've been looking for a portable (small) wireless USB router to run DDwrt with G3 code to convert my Blackberry's USB Internet connection to a 2.4Ghz G-wireless signal.
The ps-1208mfg would be nice to use, but does the 2MB flash even have room for G3 USB support?
TIA.
What is G3, and how are you planning on using your BlackBerry with a router?
The reason I ask is because I have a BlackBerry, a USB capable router, and am proficient at hacking linux...you have me interested.
