Skip to content

Instantly share code, notes, and snippets.

@EastArctica
Last active August 19, 2024 20:08
Show Gist options
  • Save EastArctica/f045ca93f2781c629bc93e60fbf675b0 to your computer and use it in GitHub Desktop.
Save EastArctica/f045ca93f2781c629bc93e60fbf675b0 to your computer and use it in GitHub Desktop.
KuWfi CPE200M_V1.1 Serial Output
This mode can be entered by holding the reset button for 3 seconds while booting(give it maybe 5 or more if you're not watching the serial console). When connected to then LAN port (I totally didn't have my device flipped and was matching up what the casing said to the board wrong and kept trying on the WAN port), you can then set your static ip to the 192.168.0.0/24 range and then visit the device at 192.168.0.100, this will let you flash a new firmware or uboot.
Everything past these equal signs is the raw output from the device
==================================================
[04050C0A][04050C0C][88870000][22214342][00222143]
DU Setting Cal Done
U-Boot 1.1.3 (Jul 9 2019 - 17:59:30)
Board: Ralink APSoC DRAM: 64 MB
relocate_code Pointer at: 83f9c000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
*** Warning - bad CRC, using default environment
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jul 9 2019 Time:17:59:30
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
##### The CPU freq = 580 MHZ ####
estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Press press reset button for more than 2 seconds to run web failsafe mode
Reset button is pressed for: 0 second(s) 1 second(s) 2 second(s) 3 second(s)
Reset button was pressed for 3 seconds
HTTP server is starting for firmware update...
NetTxPacket = 0x83FE8840
NetRxPackets[0] = 0x83FE8E40
NetRxPackets[1] = 0x83FE9440
NetRxPackets[2] = 0x83FE9A40
NetRxPackets[3] = 0x83FEA040
NetRxPackets[4] = 0x83FEA640
NetRxPackets[5] = 0x83FEAC40
NetRxPackets[6] = 0x83FEB240
NetRxPackets[7] = 0x83FEB840
NetRxPackets[8] = 0x83FEBE40
NetRxPackets[9] = 0x83FEC440
NetRxPackets[10] = 0x83FECA40
NetRxPackets[11] = 0x83FED040
NetRxPackets[12] = 0x83FED640
NetRxPackets[13] = 0x83FEDC40
NetRxPackets[14] = 0x83FEE240
NetRxPackets[15] = 0x83FEE840
NetRxPackets[16] = 0x83FEEE40
NetRxPackets[17] = 0x83FEF440
NetRxPackets[18] = 0x83FEFA40
NetRxPackets[19] = 0x83FF0040
NetRxPackets[20] = 0x83FF0640
NetRxPackets[21] = 0x83FF0C40
NetRxPackets[22] = 0x83FF1240
NetRxPackets[23] = 0x83FF1840
KSEG1ADDR(NetTxPacket) = 0xA3FE8840
NetLoopHttpd,call eth_halt !
Trying Eth0 (10/100-M)
Waitting for RX_DMA_BUSY status Start... done
ETH_STATE_ACTIVE!!
HTTP server is starting at IP: 192.168.0.100
HTTP server is ready!
Below is the output from my initial test of my CH341A which I tested on the CPE200 "by" KuWfi uploaded in case anyone might have a use for it
Everything past these equal signs is the raw output from the device
==================================================
[04050C0A][04050C0C][88870000][23224443][00232244]
DU Setting Cal Done
U-Boot 1.1.3 (Jul 9 2019 - 17:59:30)
Board: Ralink APSoC DRAM: 64 MB
relocate_code Pointer at: 83f9c000
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
*** Warning - bad CRC, using default environment
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jul 9 2019 Time:17:59:30
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
##### The CPU freq = 580 MHZ ####
estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Press press reset button for more than 2 seconds to run web failsafe mode
Reset button is pressed for: 0 second(s)
Catution: Reset button wasn't pressed or not long enough!
Continuing normal boot...
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.
default: 3
 0
3: System Boot system code via Flash.
## Booting image at bc050000 ...
Image Name: Linux Kernel Image
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 4394221 Bytes = 4.2 MB
Load Address: 80000000
Entry Point: 803d9990
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 803d9990) ...
## Giving linux memsize in MB, 64
Starting kernel ...
LINUX started...
THIS IS ASIC
SDK 5.0.S.0
[ 0.000000] Linux version 3.10.14+ (root@ycore-70TUA000CN) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #558 Tue Dec 24 15:08:04 CST 2019
[ 0.000000]
[ 0.000000] The CPU feqenuce set to 580 MHz
[ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[ 0.000000] Software DMA cache coherency
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x03ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x03ffffff]
[ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[ 0.000000] Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=000314e0
[ 0.000000] Readback ErrCtl register=000314e0
[ 0.000000] Memory: 57112k/65536k available (3978k kernel code, 8424k reserved, 785k data, 2788k init, 0k highmem)
[ 0.000000] NR_IRQS:128
[ 0.000000] console [ttyS1] enabled
[ 0.096000] Calibrating delay loop... 385.02 BogoMIPS (lpj=770048)
[ 0.136000] pid_max: default: 32768 minimum: 301
[ 0.140000] Mount-cache hash table entries: 512
[ 0.144000] NET: Registered protocol family 16
[ 0.148000] RALINK_GPIOMODE = 55154444
[ 0.152000] RALINK_GPIOMODE = 55144444
[ 0.252000] ***** Xtal 40MHz *****
[ 0.256000] start PCIe register access
[ 0.756000] RALINK_RSTCTRL = 2400000
[ 0.760000] RALINK_CLKCFG1 = fdbfffc0
[ 0.764000]
[ 0.764000] *************** MT7628 PCIe RC mode *************
[ 1.264000] PCIE0 no card, disable it(RST&CLK)
[ 1.280000] bio: create slab <bio-0> at 0
[ 1.284000] cfg80211: Calling CRDA to update world regulatory domain
[ 1.288000] Switching to clocksource MIPS
[ 1.292000] NET: Registered protocol family 2
[ 1.304000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[ 1.316000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[ 1.328000] TCP: Hash tables configured (established 512 bind 512)
[ 1.340000] TCP: reno registered
[ 1.348000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 1.360000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 1.372000] NET: Registered protocol family 1
[ 4.972000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 4.984000] jffs2: version 2.2. (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
[ 5.000000] fuse init (API version 7.22)
[ 5.008000] msgmni has been set to 111
[ 5.016000] io scheduler noop registered (default)
[ 5.032000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[ 5.048000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
[ 5.060000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
[ 5.076000] Ralink gpio driver initialized
[ 5.096000] brd: module loaded
[ 5.104000] flash manufacture id: ef, device id 40 17
[ 5.112000] W25Q64BV(ef 40170000) (8192 Kbytes)
[ 5.120000] mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
[ 5.140000] Creating 6 MTD partitions on "raspi":
[ 5.152000] 0x000000000000-0x000000030000 : "Bootloader"
[ 5.164000] 0x000000030000-0x000000040000 : "Config"
[ 5.172000] 0x000000040000-0x000000050000 : "Factory"
[ 5.184000] 0x000000050000-0x000000700000 : "Kernel"
[ 5.196000] 0x000000700000-0x000000800000 : "DataConfig"
[ 5.208000] 0x000000000000-0x000000800000 : "ALL"
[ 5.220000] PPP generic driver version 2.4.2
[ 5.228000] PPP BSD Compression module registered
[ 5.240000] PPP Deflate Compression module registered
[ 5.248000] PPP MPPE Compression module registered
[ 5.256000] NET: Registered protocol family 24
[ 5.268000] PPTP driver version 0.8.5
[ 5.284000]
[ 5.284000]
[ 5.284000] === pAd = c0090000, size = 1529888 ===
[ 5.284000]
[ 5.300000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
[ 5.316000] <-- RTMPAllocAdapterBlock, Status=0
[ 5.324000] RtmpChipOpsHook(492): Not support for HIF_MT yet!
[ 5.336000] mt7628_init()-->
[ 5.340000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
[ 5.352000] e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(63888)
[ 5.364000] mt_bcn_buf_init(218): Not support for HIF_MT yet!
[ 5.376000] <--mt7628_init()
[ 5.380000] rdm_major = 253
[ 5.388000] GMAC1_MAC_ADRH -- : 0x000044d1
[ 5.396000] GMAC1_MAC_ADRL -- : 0xfa916a8d
[ 5.404000] Ralink APSoC Ethernet Driver Initilization. v3.1 512 rx/tx descriptors allocated, mtu = 1500!
[ 5.424000] GMAC1_MAC_ADRH -- : 0x000044d1
[ 5.432000] GMAC1_MAC_ADRL -- : 0xfa916a8d
[ 5.440000] PROC INIT OK!
[ 5.444000] Netfilter messages via NETLINK v0.30.
[ 5.456000] nf_conntrack version 0.5.0 (892 buckets, 3568 max)
[ 5.468000] gre: GRE over IPv4 demultiplexor driver
[ 5.476000] ip_gre: GRE over IPv4 tunneling driver
[ 5.488000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 5.500000] Type=Linux
[ 5.504000] TCP: cubic registered
[ 5.512000] NET: Registered protocol family 17
[ 5.520000] l2tp_core: L2TP core driver, V2.0
[ 5.528000] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 5.536000] 8021q: 802.1Q VLAN Support v1.8
[ 5.548000] registered taskstats version 1
[ 5.556000] Warning: unable to open an initial console.
[ 5.580000] Freeing unused kernel memory: 2788K (804a7000 - 80760000)
[ 5.600000] Algorithmics/MIPS FPU Emulator v1.5
CPE120M-pwned login: [ 6.500000] TX_BCN DESC a3d9b000 size = 320
[ 6.512000] RX[0] DESC a3d9f000 size = 1024
[ 6.520000] RX[1] DESC a3da2000 size = 1024
[ 6.532000] E2pAccessMode=0
[ 6.540000] cfg_mode=9
[ 6.544000] cfg_mode=9
[ 6.548000] wmode_band_equal(): Band Equal!
[ 6.556000] AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
[ 6.580000] APSDCapable[0]=0
[ 6.584000] APSDCapable[1]=0
[ 6.592000] APSDCapable[2]=0
[ 6.596000] APSDCapable[3]=0
[ 6.600000] APSDCapable[4]=0
[ 6.608000] APSDCapable[5]=0
[ 6.612000] APSDCapable[6]=0
[ 6.620000] APSDCapable[7]=0
[ 6.624000] APSDCapable[8]=0
[ 6.632000] APSDCapable[9]=0
[ 6.636000] APSDCapable[10]=0
[ 6.640000] APSDCapable[11]=0
[ 6.648000] APSDCapable[12]=0
[ 6.652000] APSDCapable[13]=0
[ 6.660000] APSDCapable[14]=0
[ 6.664000] APSDCapable[15]=0
[ 6.672000] default ApCliAPSDCapable[0]=0
[ 6.868000] Key1Str is Invalid key length(0) or Type(0)
[ 6.876000] Key1Str is Invalid key length(0) or Type(0)
[ 6.888000] Key1Str is Invalid key length(0) or Type(0)
[ 6.900000] Key1Str is Invalid key length(0) or Type(0)
[ 6.908000] Key2Str is Invalid key length(0) or Type(0)
[ 6.920000] Key2Str is Invalid key length(0) or Type(0)
[ 6.932000] Key2Str is Invalid key length(0) or Type(0)
[ 6.940000] Key2Str is Invalid key length(0) or Type(0)
[ 6.952000] Key3Str is Invalid key length(0) or Type(0)
[ 6.964000] Key3Str is Invalid key length(0) or Type(0)
[ 6.972000] Key3Str is Invalid key length(0) or Type(0)
[ 6.984000] Key3Str is Invalid key length(0) or Type(0)
[ 6.992000] Key4Str is Invalid key length(0) or Type(0)
[ 7.004000] Key4Str is Invalid key length(0) or Type(0)
[ 7.016000] Key4Str is Invalid key length(0) or Type(0)
[ 7.024000] Key4Str is Invalid key length(0) or Type(0)
[ 7.056000] ########################################################################################HT: 20/40 BssCoexSupport = OFF
[ 7.092000] RTMPSetDefaultChannel() : default channel to 1
[ 7.104000] load fw image from fw_header_image
[ 7.112000] AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
[ 7.124000] FW Version:20151201
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment