อุปกรณ์ตัวนี้เป็นเราเตอร์ 4G LTE CAT6 ปล่อย WIFI ได้ รวมทั้งมีพอร์ตแลน 1000M จำนวน 1 พอร์ต
![]() |
| ตัวเครื่อง |
![]() |
| ข้างหลัง |
![]() |
| ใต้เครื่อง |
![]() |
| แกะฝา |
![]() |
| ภายใน |
![]() |
| PCB |
![]() |
| PCB |
![]() |
| ชิพต่างๆ |
อุปกรณ์ตัวนี้เป็นเราเตอร์ 4G LTE CAT6 ปล่อย WIFI ได้ รวมทั้งมีพอร์ตแลน 1000M จำนวน 1 พอร์ต
![]() |
| ตัวเครื่อง |
![]() |
| ข้างหลัง |
![]() |
| ใต้เครื่อง |
![]() |
| แกะฝา |
![]() |
| ภายใน |
![]() |
| PCB |
![]() |
| PCB |
![]() |
| ชิพต่างๆ |
อุปกรณ์ตัวนี้เป็นเราเตอร์ GPON WIFI AX5400 จากเน็ตบ้านของ TRUE
![]() |
| ตัวเครื่อง |
![]() |
| ด้านหลัง |
![]() |
| ใต้เครื่อง |
![]() |
| ภายในเครื่อง |
![]() |
| ชิพบนบอร์ด |
![]() |
| BCM68560IFSBG |
![]() |
| H5TQ4G63EFR |
![]() |
| BCM6705KFFBG |
![]() |
| BCM43684KRFBG |
![]() |
| 435 7676 |
![]() |
| PCB ด้านล่าง |
![]() |
| FMND2G08U3D |
อุปกรณ์ตัวนี้เป็น 4G Router ที่มี Modem 4G ภายในตัว
![]() |
| ตัวเครื่อง |
![]() |
| หลังเครื่อง |
![]() |
| ใต้เครื่อง |
![]() |
| ภายใน |
![]() |
| ชิพต่างๆ |
![]() |
| RTL8192ES |
![]() |
| IP175G |
![]() |
| IP101GR |
![]() |
| FE NZ |
![]() |
| 4G Module |
อุปกรณ์ตัวนี้เป็น Router 4G รองรับซิมแบบ Nano SIM พอร์ต Ethernet 10/100M จำนวน 2 พอร์ต สามารถปล่อย WiFi 2.4GHz ได้
![]() |
| ตัวเครื่อง |
![]() |
| หลังเครื่อง |
![]() |
| ใต้เครื่อง |
![]() |
| ภายใน |
![]() |
| ชิ้นส่วนภายใน |
![]() |
| MT7628NN |
![]() |
| Function Block Diagram |
![]() |
| A3S56D40GTP |
![]() |
| QH32B-104HIP |
![]() |
| F50D1G41LB |
![]() |
| LTE Module |
![]() |
| บอร์ดด้านล่าง |
U-Boot 1.1.3 (Jun 1 2021 - 08:51:05)Board: Ralink APSoC DRAM: 32 MBgpiomode1 55054404.gpiomode2 05550555.######GPIO CTRL 1 for GPIO 32~64 OUTPUT tmp(0x00005f90)###########GPIO CTRL 1 for GPIO 32~64 INPUT tmp(0x00005f90)#####flash manufacture id: 1c, device id 70 16find flash: EN25QH32BRALINK_GPIOMODE_REG_1(0xb0000060) old=0x55054404 new=0x55054404RALINK_GPIO_CTRL_32_63(0xb0000604) old=0x5f90 new=0x5f90RALINK_GPIO_DATA_32_63(0xb0000624) old=0x7f5f new=0x7f4f============================================Ralink UBoot Version: 4.3.0.0--------------------------------------------ASIC 7628_MP (Port5<->None)DRAM component: 256 Mbits DDR, width 16DRAM bus: 16 bitTotal memory: 32 MBytesFlash component: SPI FlashDate:Jun 1 2021 Time:08:51:05============================================icache: sets:512, ways:4, linesz:32 ,total:65536dcache: sets:256, ways:4, linesz:32 ,total:32768##### The CPU freq = 580 MHZ ####estimate memory size =32 MbytesRESET MT7628 PHY!!!!!!continue to starting system. 0disable switch phyport...3: System Boot system code via Flash.(0xbc010000)do_bootm:argc=2, addr=0xbc010000## Booting image at bc010000 ...Uncompressing Kernel Image ... OKNo initrd## Transferring control to Linux (at address 8000c150) ...## Giving linux memsize in MB, 32Starting kernel ...怘▒▒▒▒ff▒fa▒~▒~f▒`▒▒▒▒怘▒怘▒f30f▒`▒▒`▒▒f▒▒f▒▒▒Linux version 2.6.36 (tp-link@Sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Tue Jun 1 08:54:10 CST 2021The CPU feqenuce set to 575 MHzMIPS CPU sleep mode enabled.CPU revision is: 00019655 (MIPS 24Kc)Software DMA cache coherencyDetermined physical RAM map:memory: 02000000 @ 00000000 (usable)Initrd not found or empty - disabling initrdZone PFN ranges:Normal 0x00000000 -> 0x00002000Movable zone start PFN for each nodeearly_node_map[1] active PFN ranges0: 0x00000000 -> 0x00002000Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/initPID hash table entries: 128 (order: -3, 512 bytes)Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytesWriting ErrCtl register=0004084cReadback ErrCtl register=0004084cMemory: 29124k/32768k available (2433k kernel code, 3644k reserved, 486k data, 164k init, 0k highmem)NR_IRQS:128console [ttyS1] enabledCalibrating delay loop... 386.04 BogoMIPS (lpj=772096)pid_max: default: 4096 minimum: 301Mount-cache hash table entries: 512NET: Registered protocol family 16bio: create slab <bio-0> at 0SCSI subsystem initializedusbcore: registered new interface driver usbfsusbcore: registered new interface driver hubusbcore: registered new device driver usbSwitching to clocksource Ralink Systick timerNET: Registered protocol family 2IP route cache hash table entries: 1024 (order: 0, 4096 bytes)TCP established hash table entries: 1024 (order: 1, 8192 bytes)TCP bind hash table entries: 1024 (order: 0, 4096 bytes)TCP: Hash tables configured (established 1024 bind 1024)TCP reno registeredNET: Registered protocol family 1RT3xxx EHCI/OHCI init.squashfs: version 4.0 (2009/01/31) Phillip Loughermsgmni has been set to 56io scheduler noop registeredio scheduler deadline registered (default)Ralink gpio driver initializedSerial: 8250/16550 driver, 2 ports, IRQ sharing enabledserial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550Aserial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550Abrd: module loadedflash manufacture id: 1c, device id 70 16EN25QH32B(1c 70161c30 flash_version = 1) (4096 Kbytes)mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0Creating 6 MTD partitions on "raspi":0x000000000000-0x000000010000 : "boot"0x000000010000-0x000000110000 : "kernel"0x000000110000-0x0000003e0000 : "rootfs"mtd: partition "rootfs" set to be root filesystem0x0000003e0000-0x0000003f0000 : "config"0x0000003f0000-0x000000400000 : "romfile"0x0000003f0000-0x000000400000 : "radio"Register flash device:flash0PPP generic driver version 2.4.2PPP MPPE Compression module registeredNET: Registered protocol family 24ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) DriverFM_OUT value: u4FmOut = 0(0x00000000)FM_OUT value: u4FmOut = 145(0x00000091)FM detection done! loop = 1SR calibration value u1SrCalVal = 6rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controllerrt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00hub 1-0:1.0: USB hub foundhub 1-0:1.0: 1 port detectedohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driverrt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controllerrt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000hub 2-0:1.0: USB hub foundhub 2-0:1.0: 1 port detectedNetfilter messages via NETLINK v0.30.nf_conntrack version 0.5.0 (455 buckets, 1820 max)ip_tables: (C) 2000-2006 Netfilter Core Team, Type=LinuxTCP cubic registeredNET: Registered protocol family 10ip6_tables: (C) 2000-2006 Netfilter Core TeamIPv6 over IPv4 tunneling driverNET: Registered protocol family 17Ebtables v2.0 registered802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>All bugs added by David S. Miller <davem@redhat.com>VFS: Mounted root (squashfs filesystem) readonly on device 31:2.Freeing unused kernel memory: 164k freedusb 1-1: new high speed USB device using rt3xxx-ehci and address 2starting pid 30, tty '': '/etc/init.d/rcS'cp: can't stat '/etc/SingleSKU_FCC.dat': No such file or directoryinsmod: can't insert '/lib/modules/kmdir/kernel/drivers/scsi/scsi_mod.ko': No such file or directoryinsmod: can't insert '/lib/modules/kmdir/kernel/drivers/scsi/sd_mod.ko': No such file or directoryinsmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/core/usbcore.ko': No such file or directoryStarted WatchDog Timer.Ralink APSoC Hardware Watchdog TimerInitializing USB Mass Storage driver...usbcore: registered new interface driver usb-storageUSB Mass Storage support registered.insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/host/ifxusb_host.ko': No such file or directoryspiflash_ioctl_read, Read from 0x003ff900 length 0x6, ret 0, retlen 0x6Read MAC from flash(0x3FF900) 5c-ffffffa6-ffffffe6-ffffffd1-64-38GMAC1_MAC_ADRH -- : 0x00005ca6GMAC1_MAC_ADRL -- : 0xe6d16438Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500!spiflash_ioctl_read, Read from 0x003ff900 length 0x6, ret 0, retlen 0x6Read MAC from flash(0x3FF900) 5c-ffffffa6-ffffffe6-ffffffd1-64-38GMAC1_MAC_ADRH -- : 0x00005ca6GMAC1_MAC_ADRL -- : 0xe6d16438PROC INIT OK!dns_initdomain_name:tplinkmodem.netL2TP core driver, V2.0PPPoL2TP kernel driver, V2.0Please press Enter to activate this console. [err] syslogd[main --1001] syslogd : syslogd_init/var/tmp/dconf/rc.router: line 78: ebtables: not found[ dm_readFile ] 2042: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xmlspiflash_ioctl_read, Read from 0x003e0000 length 0x10000, ret 0, retlen 0x10000spiflash_ioctl_read, Read from 0x003e0000 length 0x6250, ret 0, retlen 0x6250spiflash_ioctl_read, Read from 0x003e0000 length 0x10000, ret 0, retlen 0x10000spiflash_ioctl_read, Read from 0x003e0000 length 0x6250, ret 0, retlen 0x6250usbcore: registered new interface driver cdc_etherusbcore: registered new interface driver rndis_hostusbcore: registered new interface driver usbserialUSB Serial support registered for genericusbcore: registered new interface driver usbserial_genericusbserial: USB Serial Driver corespiflash_ioctl_read, Read from 0x003ffd00 length 0x29, ret 0, retlen 0x29spiflash_ioctl_read, Read from 0x003ff900 length 0x6, ret 0, retlen 0x6spiflash_ioctl_read, Read from 0x003ffa00 length 0x4, ret 0, retlen 0x4usb 1-1: USB disconnect, address 2spiflash_ioctl_read, Read from 0x00010000 length 0x200, ret 0, retlen 0x200spiflash_ioctl_read, Read from 0x003ff900 length 0x6, ret 0, retlen 0x6sendto /var/tmp/7 msg 2001 error No such file or directory ,pid 67[ ntpc ] 979: Get time zone, g_timeZone = 720[ oal_sys_getOldTZInfo ] 812: Open TZ file error!Raeth v3.1 (Tasklet,SkbRecycle)phy_tx_ring = 0x00d46000, tx_ring = 0xa0d46000phy_rx_ring0 = 0x00d47000, rx_ring0 = 0xa0d47000[fe_sw_init:4954]rt305x_esw_init.disable switch phyport...GMAC1_MAC_ADRH -- : 0x00005ca6GMAC1_MAC_ADRL -- : 0xe6d16438RT305x_ESW: Link Status Changedsh: can't create /proc/tplink/eth_vlan: nonexistent directoryioctl: No such devicebrctl: bridge br0: Invalid argumentset if eth0.2 to *not wan devdevice eth0.2 entered promiscuous modedevice eth0 entered promiscuous modebr0: port 1(eth0.2) entering forwarding statebr0: port 1(eth0.2) entering forwarding stateset if eth0.3 to *not wan devdevice eth0.3 entered promiscuous modebr0: port 2(eth0.3) entering forwarding statebr0: port 2(eth0.3) entering forwarding stateset if eth0.4 to *not wan devdevice eth0.4 entered promiscuous modebr0: port 3(eth0.4) entering forwarding statebr0: port 3(eth0.4) entering forwarding stateset if eth0.5 to *not wan devdevice eth0.5 entered promiscuous modebr0: port 4(eth0.5) entering forwarding statebr0: port 4(eth0.5) entering forwarding state[ vlan_addLanPortsIntoBridge ] 539: add lan Port 255 from br0brctl: bridge br0: Device or resource busybrctl: bridge br0: Device or resource busybrctl: bridge br0: Device or resource busybrctl: bridge br0: Device or resource busy[ rsl_initVlanObj ] 982:+++++++++++++rsl_initVlanObj done!ra0 no private ioctls.MT7628-->=== pAd = c0a10000, size = 909280 ===<-- RTMPAllocAdapterBlock, Status=0MT7628-->RtmpChipOpsHook(494): Not support for HIF_MT yet!MT7628-->mt7628_init()-->MT7628-->mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))MT7628-->e2.bin mt7628_init(1143)::(2), pChipCap->fw_len(64736)MT7628-->mt_bcn_buf_init(218): Not support for HIF_MT yet!MT7628--><--mt7628_init()spiflash_ioctl_read, Read from 0x003ffe00 length 0xf, ret 0, retlen 0xf1538352006 [src/base/mobile_client.cpp PostEvent](630) ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory).[err] syslogd[syslogd_msg_process_thread --881] begin to lost!, msg = ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory).1538352006 [src/comm/client_comm.cpp GetSoftVersion](2768) ERROR: Client communication with server failed.[ oal_ltedev_getStatus ] 2164: GetSoftVersion from mobile error!![ oal_wlan_ra_lteCoexistence ] 7446: Get Curr band err 0.No need to switch sht:pAd->ApBootFlag = TRUEchannel.[ oal_MT7628-->wlan_ra_lteCoexiTX_BCN DESC a1afe000 size = 320stence ] 7553: MT7628-->AutoChannelSkiRX[0] DESC a0d82000 size = 4096pList = 12;13MT7628-->RX[1] DESC a0d83000 size = 2048MT7628-->cfg_mode=9MT7628-->cfg_mode=9MT7628-->wmode_band_equal(): Band Equal!MT7628-->AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMDMT7628-->APSDCapable[0]=1MT7628-->APSDCapable[1]=1MT7628-->APSDCapable[2]=1MT7628-->APSDCapable[3]=1MT7628-->APSDCapable[4]=1MT7628-->APSDCapable[5]=1MT7628-->APSDCapable[6]=1MT7628-->APSDCapable[7]=1MT7628-->APSDCapable[8]=1MT7628-->APSDCapable[9]=1MT7628-->APSDCapable[10]=1MT7628-->APSDCapable[11]=1MT7628-->APSDCapable[12]=1MT7628-->APSDCapable[13]=1MT7628-->APSDCapable[14]=1MT7628-->APSDCapable[15]=1MT7628-->Key1Str is Invalid key length(0) or Type(0)MT7628-->Key1Str is Invalid key length(0) or Type(0)MT7628-->Key2Str is Invalid key length(0) or Type(0)MT7628-->Key2Str is Invalid key length(0) or Type(0)MT7628-->Key3Str is Invalid key length(0) or Type(0)MT7628-->Key3Str is Invalid key length(0) or Type(0)MT7628-->Key4Str is Invalid key length(0) or Type(0)MT7628-->Key4Str is Invalid key length(0) or Type(0)MT7628-->WscKeyASCII=8MT7628-->WscKeyASCII=8MT7628-->Smart Carrier Sense = 0MT7628-->load fw image from fw_header_imageMT7628-->AndesMTLoadFwMethod1(2264)::pChipCap->fw_len(64736)MT7628-->FW Version:1MT7628-->MT7628-->FW Build Date:20170411104110MT7628-->MT7628-->CmdAddressLenReq:(ret = 0)MT7628-->CmdFwStartReq: override = 1, address = 1048576MT7628-->CmdStartDLRsp: WiFI FW Download SuccessMT7628-->MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)efuse_probe: efuse = 10000012MT7628-->RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4MT7628-->RtmpEepromGetDefault::e2p_dafault=2MT7628-->RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2MT7628-->NVM is FLASH modeMT7628-->1. Phy Mode = 14exec!spiflash_ioctl_read, Read from 0x003f0000 length 0x400, ret 0, retlen 0x400eeFlashId = 0x7628!MT7628-->Country Region from e2p = fffftssi_1_target_pwr_g_band = 32MT7628-->2. Phy Mode = 14MT7628-->3. Phy Mode = 14MT7628-->NICInitPwrPinCfg(11): Not support for HIF_MT yet!MT7628-->NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!MT7628-->mt_mac_init()-->MT7628-->MtAsicInitMac()-->MT7628-->mt7628_init_mac_cr()-->MT7628-->MtAsicSetMacMaxLen(1277): Set the Max RxPktLen=450!MT7628--><--mt_mac_init()MT7628--> WTBL Segment 1 info:MT7628--> MemBaseAddr/FID:0x28000/0MT7628--> EntrySize/Cnt:32/128MT7628--> WTBL Segment 2 info:MT7628--> MemBaseAddr/FID:0x40000/0MT7628--> EntrySize/Cnt:64/128MT7628--> WTBL Segment 3 info:MT7628--> MemBaseAddr/FID:0x42000/64MT7628--> EntrySize/Cnt:64/128MT7628--> WTBL Segment 4 info:MT7628--> MemBaseAddr/FID:0x44000/128MT7628--> EntrySize/Cnt:32/128MT7628-->AntCfgInit(2956): Not support for HIF_MT yet!MT7628-->MCS Set = ff ff 00 00 01MT7628-->MtAsicSetChBusyStat(861): Not support for HIF_MT yet!usb 1-1: new high speed USB device using rt3xxx-ehci and address 3generic_rndis_bind: rx_urb_size(1815)generic_rndis_bind: rx_urb_size(1792)generic_rndis_bind: hard_mtu(1558) mtu(1500) hard_header_len(58)generic_rndis_bind: maxpacket(256) rx_urb_size(1792) max_transfer_size(1792)LTE has rebooted, tell cos to restart mobile[ lteReconnectChangedHandler ] 1043: receive qmi/rndis connect msg![ lteReconnectChangedHandler ] 1044: mount /tmp/udisk[ checkUdiskReady ] 622: ### sda=, sdb=MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!MT7628-->CmdSlotTimeSet:(ret = 0)MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0MT7628-->Main bssid = 5c:a6:e6:d1:64:38<==== rt28xx_init, Status=0MT7628-->@@@ ed_monitor_init : ===>MT7628-->@@@ ed_monitor_init : <===MT7628-->mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1sht:pAd->ApBootFlag = FALSEMT7628-->WiFi Startup Cost (ra0): 3.852susbserial_generic 1-1:1.2: generic converter detectedusb 1-1: generic converter now attached to ttyUSB0usbserial_generic 1-1:1.3: generic converter detectedusb 1-1: generic converter now attached to ttyUSB1usbserial_generic 1-1:1.4: generic converter detectedusb 1-1: generic converter now attached to ttyUSB2scsi0 : usb-storage 1-1:1.5MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0##### mbss_cr_enable, BssId = 1MT7628-->====@@@ ed_status_read: EDCCA TH - HpAd->ed_trigger_cnt : 1 > 20 || pAd->ed_big_rssi_stat : 0 < 50====MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0MT7628-->Main bssid = 5c:a6:e6:d1:64:38MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet![ checkUdiskReady ] 622: ### sda=, sdb=MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]MT7628-->CmdLoadDPDDataFromFlash: Channel = 11, DoReload = 0MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0MT7628-->Main bssid = 5c:a6:e6:d1:64:38MT7628-->Set_ed_chk_proc()::ed_chk=0MT7628-->mt7628_set_ed_cca: TURN OFF EDCCA mac 0x10618 = 0xd7083f0f, EDCCA_Status=0MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0device ra0 entered promiscuous modebr0: port 5(ra0) entering forwarding statebr0: port 5(ra0) entering forwarding statedevice ra1 entered promiscuous modeChecking 2.4G caspiflash_ioctl_read, Read from 0x003f0000 length 0x2, ret 0, retlen 0x2l data...sh: wlNetlinkTool: not found[ rsl_initHttpdObj ] 786: [httpd]---tmp_ret=0 buff=1count=0wscd: SSDP UDP PORT = 1900scsi 0:0:0:0: Direct-Access DataCard USB Disk 1.00 PQ: 0 ANSI: 2scsi 0:0:0:1: Direct-Access DataCard USB Disk 1.00 PQ: 0 ANSI: 2sd 0:0:0:0: [sda] 57599 512-byte logical blocks: (29.4 MB/28.1 MiB)sd 0:0:0:1: [sdb] 24575 512-byte logical blocks: (12.5 MB/11.9 MiB)sd 0:0:0:0: [sda] Write Protect is offsd 0:0:0:0: [sda] Assuming drive cache: write throughsd 0:0:0:1: [sdb] Write Protect is offsd 0:0:0:1: [sdb] Assuming drive cache: write throughsd 0:0:0:0: [sda] Assuming drive cache: write throughsd 0:0:0:1: [sdb] Assuming drive cache: write throughsda: unknown partition tablesdb: unknown partition tablesd 0:0:0:0: [sda] Assuming drive cache: write throughsd 0:0:0:0: [sda] Attached SCSI removable disksd 0:0:0:1: [sdb] Assuming drive cache: write throughsd 0:0:0:1: [sdb] Attached SCSI removable disk[ checkUdiskReady ] 622: ### sda=/dev/sda, sdb=/dev/sdb[ checkUdiskReady ] 633: [cos] times:3, mount -t auto /dev/sda /tmp/udisk -o ro,data=journalrm: can't remove '/tmp/mount.err': No such file or directoryEXT3-fs: barriers not enabledkjournald starting. Commit interval 5 secondsEXT3-fs (sda): mounted filesystem with journal data mode[ checkUdiskReady ] 705: Udisk SDA Ready successfully!EXT3-fs: barriers not enabledkjournald starting. Commit interval 5 secondsEXT3-fs (sda): mounted filesystem with journal data mode[ checkUdiskReady ] 746: [cos] times:3, mount -t auto /dev/sdb /tmp/udisk2 -o ro,data=journalrm: can't remove '/tmp/mount.err': No such file or directoryEXT3-fs: barriers not enabledkjournald starting. Commit interval 5 secondsEXT3-fs (sdb): mounted filesystem with journal data mode[ checkUdiskReady ] 813: =========================================-rw-r--r-- 1 6 UdiskSdaSizedrwxrwxr-x 2 1024 bindrwxrwxr-x 2 1024 libdrwx------ 2 12288 lost+founddrwxr-xr-x 4 0 ..drwxr-xr-x 7 1024 .drwxrwxr-x 2 1024 SMS-rw-rw-r-- 1 9 versiondrwxrwxr-x 2 1024 Upgrade[ checkUdiskReady ] 815: =========================================[ checkUdiskReady ] 823: wasCheckRepair=0opened the device /dev/ttyUSB1Response data OK, buffer :*TPFIRMVER: 1.2.0 Build 210117 Rel.1012n NEZHAC_CP_1.064.004OKtmp_ver=1.2.0[ checkUdiskReady ] 867: no need repair lte software, go on.file_name=/tmp/udisk2/versiontmp_ver=55aa0104[ checkUdiskReady ] 903: no need repair udisk software, go on.[ checkUdiskReady ] 999: wasCheckRepair=0 lte_sw_repair=0 udisk_sw_repair=0insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/serial/usbserial.ko': File exists[ lteReconnectChangedHandler ] 1059: start mobile[ lteReconnectChangedHandler ] 1063: killall flowstatkillall: flowstat: no process killed[ lteReconnectChangedHandler ] 1065: start flowstat[ lteReconnectChangedHandler ] 1070: start qmuxd and mobile done.[ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid.[ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid.1538352019 INFO: src/flowstat_main.c(18) main(): LTE flowstat process starts working!1538352021 [src/comm/manager_comm_at.cpp SetModemMode](3636) ERROR: SetModemMode mode=01538352021 [src/comm/manager_comm_at.cpp SetupModemIndication](3684) ERROR: AT*CGDFLT=1,,,,,,,,,,,,,,,,,,11538352021 [src/comm/manager_comm_at.cpp SetupModemIndication](3700) ERROR: Setup modem indication failed.1538352021 [src/comm/manager_comm_at.cpp ProcDeviceEventComm](743) ERROR: Setup the modem indication failed.1538352021 [src/comm/manager_comm_at.cpp getBandCapability](4865) ERROR: [band scan] DM band_support_mask: 0x1a0000800d51538352021 [src/comm/manager_comm_at.cpp getBandCapability](4866) ERROR: [band scan] DM lte_category = 4.1538352021 [src/comm/manager_comm_at.cpp SetModemCfg](4155) ERROR: [band scan] band sel mode is auto. band: 0x1a0000800d51538352021 [src/comm/manager_comm_at.cpp SetModemCfg](4160) ERROR: Now will set band sel to 0x1a0000800d5.1538352021 [src/comm/manager_comm_at.cpp SetBandSel](4519) ERROR: [band scan] band mask = 0x1a0000800d51538352021 [src/comm/manager_comm_at.cpp ProcDeviceEventComm](2758) ERROR: MP_REQ_SET_MODEM_MODE res:OK1538352021 [src/comm/manager_comm_at.cpp ProcDeviceEventComm](1717) ERROR: set net selected network failed! ret = 1[ rsl_initHttpdObj ] 786: [httpd]---tmp_ret=0 buff=0count=11538352026 [src/base/mobile_manager_at.cpp SendThread](108) WARN: ###### Timeout AT: AT+EPIN? Send AT: AT*TPLINK ######sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 67iptables: Bad rule (does a matching rule exist in that chain?).killall: npd6: no process killedradvd starting[rsl_initWanLteIntfCfgObj 3613] init LTE module, set flowstat [enableDataLimit 0, enablePaymentDay 0, paymentDay 1, limitation 0, warningPercent 90][initProfileList 430] LTE Module: profile num [1], default profile [1], active profile [0][initProfileList 432] DM: profile num [0], default profile [0], active profile [0]/var/run/dhcp6c_lte0.pid: No such file or directory[ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid.[ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid.iptables: Bad rule (does a matching rule exist in that chain?).iptables: Bad rule (does a matching rule exist in that chain?).iptables: Bad rule (does a matching rule exist in that chain?).nf_nat_rtsp v0.6.21 loadingiptables: Bad rule (does a matching rule exist in that chain?).ip6tables: Bad rule (does a matching rule exist in that chain?).ip6tables: Bad rule (does a matching rule exist in that chain?).---------------> save 67 <---------------.spiflash_ioctl_erase, erase to 0x003f0000 length 0x0, nerase donespiflash_ioctl_write, Write to 0x003e0000 length 0x6250, ret 0, retlen 0x6250enable switch phyport...Set: phy[0].reg[0] = 3900Set: phy[1].reg[0] = 3900Set: phy[2].reg[0] = 3900Set: phy[3].reg[0] = 3900Set: phy[4].reg[0] = 3900Set: phy[0].reg[0] = 3300Set: phy[1].reg[0] = 3300Set: phy[2].reg[0] = 3300RT305x_ESW: Link Status ChangedSet: phy[3].reg[0] = 3300Set: phy[4].reg[0] = 3300resetMiiPortV over.Set: phy[0].reg[4] = 01e1Set: phy[0].reg[0] = 3300Set: phy[1].reg[4] = 01e1Set: phy[1].reg[0] = 3300Set: phy[2].reg[4] = 01e1Set: phy[2].reg[0] = 3300Set: phy[3].reg[4] = 01e1Set: phy[3].reg[0] = 3300Set: phy[4].reg[4] = 01e1Set: phy[4].reg[0] = 3300turn off flow control over.pidof mobile > /var/tmp/tmppidofecho -1000 > /proc/429/oom_score_adjpidof qmuxd > /var/tmp/tmppidofecho -1000 > /proc//oom_score_adjsh: can't create /proc//oom_score_adj: nonexistent directorypidof httpd > /var/tmp/tmppidofecho -1000 > /proc/452/oom_score_adjpidof dhcpd > /var/tmp/tmppidofecho -1000 > /proc/464/oom_score_adj1538352030 [src/base/mobile_manager_at.cpp RecvThread](288) WARN: ### Received TPLINK: REDADY1538352030 [src/sim/manager_sim_at.cpp ProcDeviceEventSim](671) ERROR: Sim IMSI Response Error!1538352030 [src/sms/manager_sms_at.cpp ProcDeviceEventSms](299) ERROR: Set CPMS fails. CMS ERROR, errno is 3141538352030 [src/sms/manager_sms_at.cpp ProcDeviceEventSms](232) WARN: Get SCA fails. CMS ERROR, errno is 5001538352030 [src/base/mobile_status_at.cpp UpdateNetType](56) USER: Network type is LTE.RT305x_ESW: Link Status ChangedPrimary DNS server Is Down... Switching To Secondary DNS serversh: write error: Input/output error[ fotaCheckHandler ] 4537: step 1.check WAN status[ checkWanStatus ] 4432: In LTE mode, current WAN status is 1.[ fotaCheckHandler ] 4540: WAN is not up, check 10 min later[ fotaCheckHandler ] 4537: step 1.check WAN status[ checkWanStatus ] 4432: In LTE mode, current WAN status is 1.[ fotaCheckHandler ] 4540: WAN is not up, check 10 min later[ fotaCheckHandler ] 4537: step 1.check WAN status[ checkWanStatus ] 4432: In LTE mode, current WAN status is 1.[ fotaCheckHandler ] 4540: WAN is not up, check 10 min laterstarting pid 69, tty '': '/sbin/getty -L ttyS1 115200 vt100'TL-MR100 login: adminPassword:Oct 1 00:23:01 login[69]: root login on 'ttyS1'~ #
1. Mount the cramfs file system image as a loop device. This will be read-only image.
sudo mount -t cramfs -o loop /tftpboot/img-dnp9200 /media/cramfs/
2. Create a new directory (e.g $HOME/initrd-new) which will be used for modifying the image (RW mode)
3. Go to the mounted cramfs image directory and get the list of files using the following command
4. Use cpio to copy the contents from the mounted directory to the new directory
5. modify the contents in the new directory as required.
6. Once the changes are done, use mkcramfs to create the cramfs image again.
เราสามารถแก้ไข rootfs ของกล้อง ip รุ่นนี้ได้โดยการ unpack -> แก้ไข -> repack -> สร้างไฟล์ .img คำสั่งที่ใช้มีดังนี้
1. unpack squashfs
sun89@TOT-Log-Server:~/Dahua IPC$ unsquashfs -d c12_rootfs_ori c12_rootfs.bin
2. เราจะได้ directory c12_rootfs_ori หลังจากแก้ไขเสร็จให้ repack squashfs
sun89@TOT-Log-Server:~/Dahua IPC$ mksquashfs c12_rootfs_ori c12_rootfs_mod1.bin -comp xz -Xdict-size 131072 -Xbcj arm -b 131072
3. สร้างไฟล์ c12_rootfs_mod1.bin romfs-x.squashfs.img เพื่อใช้ในการ upgrade ผ่าน micro sd-card
sun89@TOT-Log-Server:~/Dahua IPC$ mkimage -A arm -O linux -T standalone -C gzip -a 0x270000 -e 0x840000 -n romfs-by-sun -d c12_rootfs_mod1.bin romfs-x.squashfs.img
4. Upgrade ผ่านทาง micro sd-card
![]() |
#include <stdio.h>
#include <fcntl.h>
//#include <asm/termbits.h>
#include <termios.h>
int main() {
struct termios ttycfg;
int fd;
printf("Simple terminal TTYS0 baudrate change to 115200\n");
fd = open ("/dev/ttyS0", O_RDWR | O_NOCTTY);
if (fd < 0) {
printf("Error opening TTY /dev/ttyS0 \n");
return -1;
}
if (tcgetattr (fd, &ttycfg) < 0) {
printf("Error from tcgetattr\n");
return -1;
}
cfsetspeed (&ttycfg, B115200);
if (tcsetattr(fd, TCSANOW, &ttycfg) != 0) {
printf("Error from tcsetattr\n");
return -1;
}
printf("Success set baud\n");
return 0;
}
ผม cross-compile จากคอม x86 ไปเป็นโปรแกรมของ arm โดยใช้คำสั่ง
/home/sun89/cross/OpenWrt-Toolchain-kirkwood-for-arm_xscale-gcc-4.8-linaro_uClibc-0.9.33.2_eabi/toolchain-arm_xscale_gcc-4.8-linaro_uClibc-0.9.33.2_eabi/bin/arm-openwrt-linux-uclibcgnueabi-g++ setbaud.c -o setbaud -O0 -Wall