Buffalo WZR 1750DHP UnBrick

Post new topic   Reply to topic    DD-WRT Forum Index -> Hardware DIY / Hardware Mods
Author Message
softbeard
DD-WRT Novice


Joined: 01 Jan 2016
Posts: 1

PostPosted: Fri Jan 01, 2016 21:29    Post subject: Buffalo WZR 1750DHP UnBrick Reply with quote
I recently managed to brick my Buffalo WZR 1750DHP router after an aborted attempt at updating the factory firmware to 1.97. I first lost ability to access the router's webpage, then internet access was lost a few minutes later. The reset button was useless. The indicator leds were white but then flashed red twice, in a repeating pattern.
I figured out how to (literally) crack the router case open to expose the motherboard. The 4 pins at J14 I guessed were the serial debug port. Fortunately, I googled and found http://blog.tonywall.co/2013/06/de-bricking-a-buffalo-wifi-router-with-an-arduino/ which saved me a lot of grief since the 1800 model router is very similar and the serial pinout described in the blog is the same for both routers. He also describes a critical parameter
for flashing that I would never have thought to use myself (explained below).
Using a TTL-USB converter cable with a Silicon Labs chipset, after installing the Silicon Labs driver in Windows 10, I now had a new virtual COM port (COM3 in my case) accessible.
COM3 was configured as 115200 bps, 8 data bits, no parity, 1 stop bit, and no flow control. This was done in both Windows and PuTTY.
The pinout of the Buffalo motherboard's serial interface is as shown in the photo. The pin with the silk-screened pointer is +3.3V, going left the next pin is Ground, then Rx (receive), finally Tx (transmit) leftmost. Note that Tx (router motherboard) needs to be connected to Rx on the TTL-USB converter and vice-versa (crossed wiring).
After physically connecting my TTL-USB cable between my PC's USB port and the router motherboard's serial interface, I powered up the router and opened the PuTTY terminal to listen on (in my case) COM3. With the router powered up, the CFE (Common Firmware Environment) will respond to a <ctrl>-C break command and drop you to a command prompt.
A 'help' command will list all available command options in the CFE.
I was quite pleased with myself to have gotten this far, but I soon found I had greatly overestimated my progress. Some more reading made me realize that by itself, console access to the router's CFE, though informative, is useless. I needed to have the router read and flash the new firmware to make it functional again. More reading made me realize the webflash version of dd-wrt(buffalo-wzr-1750dhp-webflash.bin) was what I needed to upload to the router and the easiest tranfer for me was via a tftp server set up on my PC.
I tried several tftp servers, but decided on using PumpKIN. My PC's ethernet port was configured with a static ip 192.168.11.2, gateway ip 192.168.11.1 (the router's ip). Via ethernet cable, I physically connected my PC's ethernet port to one of the router's ethernet ports. I placed buffalo-wzr-1750dhp-webflash.bin binary in a directory that was set up as the tftp root (/) directory in PumpKIN.
I issued a 'nvram erase' command in the CFE and then 'reboot'.
Now I started to fiddle with the 'flash' command in the CFE. I knew my target was named 'nflash1.trx', but I could not get the router to start downloading the dd-wrt binary. The 'flash' command always timed out without accessing my PC's tftp server (PumpKIN).
Finally, careful reading of the 1800 de-bricking blog paid off.
To get the flash command to download the binary via tftp, you MUST include the < -size= > parameter with the <flash> command. So, you must first get your binary's filesize, in bytes. In my case, this number was 27615232, so the command in the router CFE to flash the binary file was:

flash -noheader -size=27615232 192.168.11.2:buffalo-wzr-1750dhp-webflash.bin nflash1.trx

And that did it. PumpKIN reported a file request from 192.168.11.1, the file transfer started, and was complete in ~2 min. After the upload, the CFE reported it had begun flashing the file to nflash1.trx. After the successful flash, rebooting resulted in the dd-wrt interface.

Note: There have been attempts to simplify the flashing by pressing the AOSS button during bootup. This makes the router attempt to download a file called "firmware.ram" from 192.168.11.2 (ie. 192.168.11.2:firmware.ram). I tried renaming the dd-wrt binary to "firmware.ram" and placed it in the tftp root directory. The download never worked, and I suspect a specific "firmware.ram" binary with a proper header is required for this to work.

Let me know if this long post helps anyone and if further explanation or pictures are needed. I tried to attach a photo of the router motherboard but it was probably too large and would not post.
Sponsor
markreb
DD-WRT Novice


Joined: 14 Mar 2015
Posts: 5

PostPosted: Wed Feb 17, 2016 4:33    Post subject: Reply with quote
Can someone give me a specific recommendation on what board or cable to buy from amazon so i can do this? I would prefer to get one that i can use on any future router i buy as well as my wzr 1750dhp.
Brimmy
DD-WRT User


Joined: 29 Mar 2015
Posts: 398

PostPosted: Fri Apr 08, 2016 11:50    Post subject: Reply with quote
Thanks @softbeard, this helped me unbrick my 1750dhp with ease. I had to use Pumpkin because tftp and tftpd would keep timing out.
Brimmy
DD-WRT User


Joined: 29 Mar 2015
Posts: 398

PostPosted: Thu Apr 14, 2016 2:25    Post subject: Reply with quote
Have you tried this....https://wiki.openwrt.org/doc/howto/generic.debrick
skbean02
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 7

PostPosted: Thu Jun 16, 2016 11:26    Post subject: Reply with quote
First of all, u need UART-TTL connection. In my case, I use FT232RL breakout board that is selling at adafruit. Google Adafruit then search for FT232RL. In my country, FT232RL breakout board is selling at the price of 8US, so yeah, you certainly dont need to buy expensive Arduino just to get UART-TTL connection.

In many router, debug port can identify pretty easy. It is 4 pins headers.

1 - VCC
2 - GND
3 - RX
4 - TX

Here is the connection diagram

Router FT232RL (or any equivalent uart-ttl IC)
GND <-------> GND
RX <-------> TX
TX <-------> RX

DONT connect VCC. Only 3 pins.

You dont need to type that long command. Here is what I do with that router:
flash -erase nflash1.trx
flash -erase nflash1.brcmnand
flash -noheader : nflash1.trx

Once u hit enter at last command, u need to switch to PumpKin (or any TFTP Client / Server App that you are familiar with) and put the file onto PumpKin so it can send to router.

After it is done flashing, issue these commands:

nvram erase
reboot

Then you are good to go.
pokazene_maslo
DD-WRT User


Joined: 29 Dec 2009
Posts: 84
Location: Slovakia

PostPosted: Wed Aug 24, 2016 15:30    Post subject: Reply with quote
Hi.

I managed to flash new FW but the router is still in bootloop. I flashed the latest kong build http://www.desipro.de/ddwrt/K3-AC-Arm/dd-wrt.v24-K3_AC_ARM_STD.bin

Bootup:
Code:

BUFFALO CFE Version 1.00  [DDRCLK:333]
decompressing
Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.18 (r377098)

DDR clock change and Calibrate... [333->533]


BUFFALO CFE Version 1.00  [DDRCLK:533]
Memory Test start(0x07E00000) end(0x08000000) size(2097152)
Data line test start:0x07e00000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x07e00000 len:0x200000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA  Writing...   Reading...
fill Pattern AAAA5555  Writing...   Reading...
decompressing
Decompressing...done
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB


CFE version 6.30.163.18 (r377098) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Fri Jan 18 16:22:36 JST 2013 (root@fc17.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Memory Test start(0x00000000) end(0x07E00000) size(132120576)
Data line test start:0x00000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x00000000 len:0x7e00000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA  Writing...   Reading...
fill Pattern AAAA5555  Writing...   Reading...
Memory Test start(0x88000000) end(0xA0000000) size(402653184)
Data line test start:0x88000000 pattern 0x00000001 0x00000003 0x00000007 0x0000000F 0x00000005 0x00000015 0x00000055 0xAAAAAAAA
Address line test start:0x88000000 len:0x18000000 pattern 0xAAAAAAAA 0x55555555
Fill test patnum:2
fill Pattern 5555AAAA  Writing...   Reading...
fill Pattern AAAA5555  Writing...   Reading...
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Esmt NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8-bit
Device ID: 0x92 0xf1 0x80 0x95 0x40
DDR Clock: 533 MHz
Warning: using legacy sdram_ncdl parameter to set DDR frequency. Equivalent setting in clkfreq=800,*0* will be ignored.
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.18 (r377098)
CPU type 0x0: 800MHz
Tot mem: 524288 KBytes

CFE mem:    0x07E00000 - 0x07F9A984 (1681796)
Data:       0x07E53480 - 0x07E53948 (1224)
BSS:        0x07E53958 - 0x07E98984 (282668)
Heap:       0x07E98984 - 0x07F98984 (1048576)
Stack:      0x07F98984 - 0x07F9A984 (8192)
Text:       0x07E00000 - 0x07E488F0 (297200)
Boot:       0x07F9B000 - 0x07FDB000
Reloc:      I:00000000 - D:00000000

Device eth0:  hwaddr B2-C7-45-7E-5A-AA, ipaddr 192.168.11.1, mask 255.255.255.0
        gateway not set, nameserver not set
check_trx: start nflash1.trx
check_trx: exit nflash1.trx
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 1629760 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
** 16 printk messages dropped ** PERCPU: Embedded 11 pages/cpu @86bd4000 s12940 r8192 d23924 u45056
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 130816
Kernel command line: console=ttyS0,115200 panic=10 root=/dev/mtdblock3 earlyprintk=1 rootfstype=squashfs,jffs2 noinitrd init=/bin/sh
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 514272K/524288K available (3414K kernel code, 194K rwdata, 1204K rodata, 340K init, 468K bss, 10016K reserved, 0K cma-reserved, 393216K highmem)
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
    vmalloc : 0x88800000 - 0xff800000   (1904 MB)
    lowmem  : 0x80000000 - 0x88000000   ( 128 MB)
    pkmap   : 0x7fe00000 - 0x80000000   (   2 MB)
    modules : 0x7f000000 - 0x7fe00000   (  14 MB)
      .text : 0x80008000 - 0x8048ae4c   (4620 kB)
      .init : 0x8048b000 - 0x804e0000   ( 340 kB)
      .data : 0x804e0000 - 0x80510b70   ( 195 kB)
       .bss : 0x80513000 - 0x805881e4   ( 469 kB)
Hierarchical RCU implementation.
        CONFIG_RCU_FANOUT set to non-default value of 2
        Build-time adjustment of leaf fanout to 2.
NR_IRQS:256
MPCORE GIC init
soc_dmu_init
add clk lookups
MPCORE Global Timer Clock 400000000Hz on IRQ 27
sched_clock: 32 bits at 400MHz, resolution 2ns, wraps every 5368709118ns
clocksource: mpcore_gtimer: mask: 0xffffffffffffffff max_cycles: 0x5c4093a7d1, max_idle_ns: 440795210635 ns
register local timer
smp_twd: clock not found -2
Calibrating local timer... 399.68MHz.
Calibrating delay loop... 1594.16 BogoMIPS (lpj=7970816)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
2 cores has been found
Setting up static identity map for 0x85e0 - 0x8614
L2C: platform provided aux values permit register corruption.
L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x7a530000
L2C-310 erratum 769419 enabled
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 256 kB
L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x4e530001
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3188.32 BogoMIPS).
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
coherence_win_size = 10000000
coherence_flag = FFFFFFF8
ddr_phys_offset_va =FFFFFFFF
ddr_phys_offset2_va =A8000000
Found a ST compatible (Marconix) serial flash with 16 64KB blocks; total size 1MB
found cfe nvram on sflash
CCA UART Clock Config: Sel=1 Ovr=1 Div=48
CCA UART Clock rate 100000000Hz CCB UART Clock rate 100000000Hz
clocksource: Switched to clocksource mpcore_gtimer
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
init gpio code
Buffalo WZR-1750DHP
PCI: no core
PCI: no core
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io  0x0000-0xffffffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
pci 0000:00:0f.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
PCI: Fixing up bus 0 domain 0
PCIE1 link=1
PCIE1 switching to GEN2
PCIE1 link=1
PCI host bridge to bus 0001:00
pci_bus 0001:00: root bus resource [mem 0x08000000-0x0fffffff]
pci_bus 0001:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 1
PCI: bus0: Fast back to back transfers disabled
pci 0001:01:00.0: Max Payload Size set to 512 (was 128, max 512)
PCI: Fixing up bus 1 domain 1
PCI: bus1: Fast back to back transfers disabled
pci 0001:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
pci 0001:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
pci 0001:00:00.0: PCI bridge to [bus 01]
pci 0001:00:00.0:   bridge window [mem 0x08000000-0x080fffff]
PCIE2 link=1
PCIE2 switching to GEN2
PCIE2 link=1
PCI host bridge to bus 0002:00
pci_bus 0002:00: root bus resource [mem 0x40000000-0x47ffffff]
pci_bus 0002:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0 domain 2
PCI: bus0: Fast back to back transfers disabled
pci 0002:01:00.0: can't set Max Payload Size to 512; if necessary, use "pci=pcie_bus_safe" and report a bug
PCI: Fixing up bus 1 domain 2
PCI: bus1: Fast back to back transfers disabled
pci 0002:00:00.0: BAR 8: assigned [mem 0x40000000-0x400fffff]
pci 0002:01:00.0: BAR 0: assigned [mem 0x40000000-0x40003fff 64bit]
pci 0002:00:00.0: PCI bridge to [bus 01]
pci 0002:00:00.0:   bridge window [mem 0x40000000-0x400fffff]
PCIE3 link=0
futex hash table entries: 512 (order: 3, 32768 bytes)
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered (default)
io scheduler cfq registered
serial8250_init
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
console [ttyS0] disabled
serial8250.0: ttyS0 at MMIO 0x18000300 (irq = 117, base_baud = 6250000) is a 16550
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117, base_baud = 6250000) is a 16550
brd: module loaded
loop: module loaded
Boot partition size = 2097152(0x200000)
Creating 3 MTD partitions on "bcmsflash":
0x000000000000-0x000000200000 : "boot"
mtd: partition "boot" extends beyond the end of device "bcmsflash" -- size truncated to 0x100000
0x0000000f0000-0x000000100000 : "nvram_cfe"
0x0000000e0000-0x0000000f0000 : "nvram"
Found a Esmt NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8 (8-bit)
Device ID: 0x92 0xf1 0x80 0x95 0x40 0x7f
lookup_nflash_rootfs_offset: offset = 0x0 size = 0x2000000, 0x20000
found TRX Header on nflash!
nflash: squash filesystem with lzma found at block 13
Creating 2 MTD partitions on "nflash":
0x000000000000-0x000002000000 : "linux"
0x0000001a0000-0x000002000000 : "rootfs"
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
GACT probability NOT on
Mirror/redirect action on
Simple TC action Loaded
netem: version 1.3
u32 classifier
    Performance counters on
    input device check on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (8035 buckets, 32140 max)
nf_conntrack_rtsp v0.7 loading
xt_time: kernel timezone is -0000
ip_set: protocol 6
gre: GRE over IPv4 demultiplexor driver
nf_nat_rtsp v0.7 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Bridge firewalling registered
8021q: 802.1Q VLAN Support v1.8
Registering SWP/SWPB emulation handler
found cfe nvram
check if nvram copy is required CFE Size is 65536
nvram copy magic is 48534C46
max nvram space = 131072
read 65536 bytes to offset 0
Key type encrypted registered
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
nand: device found, Manufacturer ID: 0x92, Chip ID: 0xf1
nand: Eon NAND 128MiB 3,3V 8-bit
nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
Spare area=64 eccbytes 56, ecc bytes located at:
 2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Options: NO_SUBPAGE_WRITE,
Creating 1 MTD partitions on "brcmnand":
0x000002000000-0x000008000000 : "ddwrt"
VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Freeing unused kernel memory: 340K (8048b000 - 804e0000)
start service
starting Architecture code for northstar
udevtrigger[367]: parse_config_file: can't open '/etc/udev/udev.conf' as config file: No such file or directory
1970-01-01 00:00:05 main: Sanity checks succeeded
try modules for ethernet adapters
et: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
et_module_init: passivemode set to 0x0
et_module_init: txworkq set to 0x1
et_module_init: et_txq_thresh set to 0x400
et_module_init: et_rxlazy_timeout set to 0x3e8
et_module_init: et_rxlazy_framecnt set to 0x20
et_module_init: et_rxlazy_dyn_thresh set to 0
ET Corerev 4
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.89.21 (r524987)
roboswitch: Probing device 'eth0'
roboswitch: trying a 53011! at eth0
detected CPU Port is 5
roboswitch: found a 53011! at eth0
detected CPU Port is 5
wl_module_init: passivemode set to 0x0
wl_module_init: txworkq set to 0x1
Unable to handle kernel NULL pointer dereference at virtual address 00000000
pgd = 871e8000
[00000000] *pgd=072af831, *pte=00000000, *ppte=00000000
Internal error: Oops - BUG: 17 [#1] SMP ARM
Modules linked in: wl(P+) igs(P) emf(P) switch_robo switch_core et(P)
CPU: 1 PID: 670 Comm: insmod Tainted: P                4.4.19 #77
Hardware name: Northstar Prototype
task: 87a8a000 ti: 872fe000 task.ti: 872fe000
PC is at memcpy+0x48/0x330
LR is at _3117+0x268c/0x2804 [wl]
pc : [<80011da8>]    lr : [<7f09ad10>]    psr: 80000013
sp : 872ff9fc  ip : 00000000  fp : 872ffaa4
r10: 872c6000  r9 : 8730e000  r8 : 000011f0
r7 : 872c6018  r6 : 0000000c  r5 : 000011ec  r4 : 00000000
r3 : 00000003  r2 : ffffffa0  r1 : 00000000  r0 : 8603ef80
Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 10c5387d  Table: 071e804a  DAC: 00000055
Process insmod (pid: 670, stack limit = 0x872fe190)
Stack: (0x872ff9fc to 0x87300000)
f9e0:                                                                000011ec
fa00: 0000000c 872c6018 000011f0 8603ef80 00000000 7f09ad10 ffffc000 872c6000
fa20: 872c6000 0002c108 801f6e58 00000000 00000000 00000000 00000020 00000020
fa40: 00000020 00000000 00000020 00000040 00000100 00000040 00000040 fffffffe
fa60: 00000000 00000000 00000100 00000200 7f190320 8007c610 8730e000 8730e000
fa80: 00000002 000006b8 8730e55d 7f27bbac 7f27bb94 00000000 872ffaf4 872ffaa8
faa0: 7f0b5e78 7f098690 0000011c 00000001 00000000 0000cb01 872ffadc 0004fac8
fac0: 80212069 800c5b54 87134000 87134000 87941500 00000000 00000000 89ea0000
fae0: 00000000 879a2000 872ffbcc 872ffaf8 7f1e3d68 7f0b49a0 ffffffff 00000001
fb00: 00000000 89ea0000 00000001 8603e540 89ea0000 89ea0000 15134360 8603e540
fb20: 0006cbff 58680001 005f07ff 00000000 00000000 00000000 00000014 8603e540
fb40: 00000000 b0518c05 872ffb6c 872ffb58 802115a0 800c5b54 8603e540 87136100
fb60: 8603e1c0 00000000 0000002a 00000001 00000001 00000000 436014e4 00004360
fb80: 00000003 00000001 00000008 0000f646 00001100 000014e4 00000110 00000000
fba0: 879a2000 879a2000 00000000 00004360 87135400 00000000 8713b400 8603e540
fbc0: 872ffc44 872ffbd0 7f1ac340 7f1e3398 00000000 8603e540 89ea0000 00000001
fbe0: 879c0800 872ffbf0 80020170 8015f914 879a230d 000014e4 87135400 00000000
fc00: 00000000 00000000 00000000 872ffc18 8002022c 80020044 7f18f5c8 87135400
fc20: 879c0800 7f423040 872b9000 00000000 00000000 8603e540 872ffcbc 872ffc48
fc40: 7f18f644 7f1ac0f4 00000000 8603e540 89ea0000 00000001 879c0800 00000000
fc60: 872ffc88 872e5448 872e53a8 000000a3 000014e4 00004360 08000000 8728f800
fc80: 872ffcb4 00000000 00000000 80119d4c 879c0868 879c0868 879c0800 7f4222c0
fca0: 00000000 7f4222f4 00000002 024000c0 872ffce4 872ffcc0 8018b98c 7f18f2e8
fcc0: 8058072c 879c0868 80580720 00000000 7f4222f4 00000002 872ffd0c 872ffce8
fce0: 801b5cbc 8018b920 879c0868 7f4222f4 879c089c 00000000 00000000 7f422780
fd00: 872ffd2c 872ffd10 801b5ecc 801b5bdc 00000000 7f4222f4 801b5e50 00000000
fd20: 872ffd54 872ffd30 801b41a8 801b5e5c 878a9d5c 8799bbb4 872ffd64 7f4222f4
fd40: 87b4db00 805013c8 872ffd64 872ffd58 801b574c 801b4160 872ffd8c 872ffd68
fd60: 801b5314 801b5734 7f38dd70 872ffd78 7f4222f4 804f7918 871529c0 7f437000
fd80: 872ffda4 872ffd90 801b64f8 801b5244 7f423040 804f7918 872ffdb4 872ffda8
fda0: 8018b200 801b6464 872ffdcc 872ffdb8 7f4370cc 8018b1c4 804f7918 804f7918
fdc0: 872ffe44 872ffdd0 800180a4 7f43700c 872fff3c 7f422780 00000002 871529c0
fde0: 00000001 0000001d 872fff3c 7f422780 872ffe1c 872ffe00 800bd3b8 800c4edc
fe00: 00000480 87198f40 00000001 0000001d 00000480 87198f40 00000001 0000001d
fe20: 7f422780 871f9e10 00000000 87198f40 872fff3c 7f422780 872ffe6c 872ffe48
fe40: 80090b70 80017f9c 872ffe6c 872ffe58 871f9c00 871f9e10 00000000 0000001d
fe60: 872fff34 872ffe70 800924d4 80090b14 7f42278c 00007fff 7f422780 80090510
fe80: 80429c90 80429c68 80429c5c 80429cc0 80429eec 7f42278c 89e96094 7f4228d8
fea0: 872ffecc 7f422780 804fd168 80429ee4 8008fa40 7f4227c8 80009e80 80009328
fec0: 89e427c0 76ecc7e0 000047c0 00000000 00000000 00000000 00000000 00000000
fee0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
ff00: 00000000 00000000 024002c2 0000f0e4 00000000 76f200f4 89e960e4 872fe000
ff20: 00091fc0 00000000 872fffa4 872fff38 80092c0c 80090d54 87a8a000 89a17000
ff40: 0047f0e4 89e95c5c 89e95b64 89e27244 003fa13c 00407d0c 00000000 00000000
ff60: 00000000 0001e610 0000001b 0000001c 00000015 00000000 00000010 00000000
ff80: 00000000 00091f00 00000000 00000080 800096e4 872fe000 00000000 872fffa8
ffa0: 80009540 80092af4 00000000 00091f00 76aa1010 0047f0e4 00091fc0 00091f10
ffc0: 00000000 00091f00 00000000 00000080 7e8e5ec4 00077f07 000768fd 00091f00
ffe0: 7e8e5c24 7e8e5c08 0001e2cc 76f73d3c 20000010 76aa1010 07ffd861 07ffdc61
Backtrace:
[<7f098684>] (_3117 [wl]) from [<7f0b5e78>] (_3115+0x14e4/0x1834 [wl])
 r10:00000000 r9:7f27bb94 r8:7f27bbac r7:8730e55d r6:000006b8 r5:00000002
 r4:8730e000
[<7f0b4994>] (_3115 [wl]) from [<7f1e3d68>] (_2082+0x9dc/0x1850 [wl])
 r10:879a2000 r9:00000000 r8:89ea0000 r7:00000000 r6:00000000 r5:87941500
 r4:87134000
[<7f1e338c>] (_2082 [wl]) from [<7f1ac340>] (_2038+0x258/0x1e88 [wl])
 r10:8603e540 r9:8713b400 r8:00000000 r7:87135400 r6:00004360 r5:00000000
 r4:879a2000
[<7f1ac0e8>] (_2038 [wl]) from [<7f18f644>] (_4838+0x368/0x5b0 [wl])
 r10:8603e540 r9:00000000 r8:00000000 r7:872b9000 r6:7f423040 r5:879c0800
 r4:87135400
[<7f18f2dc>] (_4838 [wl]) from [<8018b98c>] (pci_device_probe+0x78/0xd0)
 r10:024000c0 r9:00000002 r8:7f4222f4 r7:00000000 r6:7f4222c0 r5:879c0800
 r4:879c0868
[<8018b914>] (pci_device_probe) from [<801b5cbc>] (really_probe+0xec/0x280)
 r9:00000002 r8:7f4222f4 r7:00000000 r6:80580720 r5:879c0868 r4:8058072c
[<801b5bd0>] (really_probe) from [<801b5ecc>] (__driver_attach+0x7c/0xa0)
 r9:7f422780 r8:00000000 r7:00000000 r6:879c089c r5:7f4222f4 r4:879c0868
[<801b5e50>] (__driver_attach) from [<801b41a8>] (bus_for_each_dev+0x54/0xa8)
 r7:00000000 r6:801b5e50 r5:7f4222f4 r4:00000000
[<801b4154>] (bus_for_each_dev) from [<801b574c>] (driver_attach+0x24/0x28)
 r6:805013c8 r5:87b4db00 r4:7f4222f4
[<801b5728>] (driver_attach) from [<801b5314>] (bus_add_driver+0xdc/0x218)
[<801b5238>] (bus_add_driver) from [<801b64f8>] (driver_register+0xa0/0xdc)
 r7:7f437000 r6:871529c0 r5:804f7918 r4:7f4222f4
[<801b6458>] (driver_register) from [<8018b200>] (__pci_register_driver+0x48/0x4c)
 r5:804f7918 r4:7f423040
[<8018b1b8>] (__pci_register_driver) from [<7f4370cc>] (_961+0xcc/0xd8 [wl])
[<7f437000>] (_961 [wl]) from [<800180a4>] (do_one_initcall+0x114/0x1a4)
 r5:804f7918 r4:804f7918
[<80017f90>] (do_one_initcall) from [<80090b70>] (do_init_module+0x68/0x1c0)
 r9:7f422780 r8:872fff3c r7:87198f40 r6:00000000 r5:871f9e10 r4:7f422780
[<80090b08>] (do_init_module) from [<800924d4>] (load_module+0x178c/0x1da0)
 r7:0000001d r6:00000000 r5:871f9e10 r4:871f9c00
[<80090d48>] (load_module) from [<80092c0c>] (SyS_init_module+0x124/0x158)
 r10:00000000 r9:00091fc0 r8:872fe000 r7:89e960e4 r6:76f200f4 r5:00000000
 r4:0000f0e4
[<80092ae8>] (SyS_init_module) from [<80009540>] (ret_fast_syscall+0x0/0x34)
 r9:872fe000 r8:800096e4 r7:00000080 r6:00000000 r5:00091f00 r4:00000000
Code: ba000002 f5d1f03c f5d1f05c f5d1f07c (e8b151f8)
---[ end trace 9769ffd94e311832 ]---
Kernel panic - not syncing: Fatal exception
CPU0: stopping
CPU: 0 PID: 0 Comm: swapper/0 Tainted: P      D         4.4.19 #77
Hardware name: Northstar Prototype
Backtrace:
[<8001b0e0>] (dump_backtrace) from [<8001b2b4>] (show_stack+0x18/0x1c)
 r7:804e1f20 r6:60000193 r5:00000000 r4:80500edc
[<8001b29c>] (show_stack) from [<8015e104>] (dump_stack+0x8c/0xa0)
[<8015e078>] (dump_stack) from [<8001ce94>] (handle_IPI+0x110/0x1a8)
 r7:804e1f20 r6:00000000 r5:00000000 r4:805131a0
[<8001cd84>] (handle_IPI) from [<80009394>] (gic_handle_irq+0x78/0x7c)
 r7:b0100100 r6:804e1f20 r5:b010010c r4:804efb14
[<8000931c>] (gic_handle_irq) from [<80009e80>] (__irq_svc+0x40/0x54)
Exception stack(0x804e1f20 to 0x804e1f68)
1f20: 86bd4240 00000000 0000978e 8000a960 804e0000 804ef8e0 80424ddc 804dc220
1f40: 804e1f90 804b48c8 00000000 804e1f7c 804e1f80 804e1f70 80018d40 80018d44
1f60: 60000013 ffffffff
 r9:804b48c8 r8:804e1f90 r7:804e1f54 r6:ffffffff r5:60000013 r4:80018d44
[<80018d08>] (arch_cpu_idle) from [<80069b10>] (default_idle_call+0x30/0x34)
[<80069ae0>] (default_idle_call) from [<80069c1c>] (cpu_startup_entry+0x108/0x13c)
[<80069b14>] (cpu_startup_entry) from [<80012a60>] (rest_init+0x80/0x84)
 r7:80513020 r4:00000000
[<800129e0>] (rest_init) from [<8048bcc0>] (start_kernel+0x320/0x32c)
[<8048b9a0>] (start_kernel) from [<0000807c>] (0x807c)
Rebooting in 10 seconds..


nvram show:
Code:
CFE> nvram show
0:ag1=0
0:ag2=0
DEF-p_wireless_eth1_11a-crypto=aes
DEF-p_wireless_eth2_11bg-crypto=aes
1:noiselvl5gla0=31
1:noiselvl5gla1=31
1:sb20in80and160lr5ghpo=0
1:tssiposslope5g=1
boardrev=0x1100
1:noiselvl5gla2=31
1:rxgainerr5g=0xffff,0xffff,0xffff,0xffff
et0macaddr=B0:C7:45:7E:5A:AA
1:rxgains2gtrisoa0=0
1:antswitch=0
1:boardflags=0x10000000
1:rxgains2gtrisoa1=0
1:sar2g=18
0:ledbh0=11
1:mcsbw805glpo=0
1:tempsense_slope=0xff
1:rxgains2gtrisoa2=0
0:ledbh1=11
0:ledbh2=11
devpath0=pci/2/1/
watchdog=0
boot_wait=on
1:noiselvl5gha0=31
1:tempoffset=255
1:rxgains5ghelnagaina0=2
devpath1=pci/1/1/
0:ledbh3=11
1:noiselvl5gha1=31
1:rxgains5ghelnagaina1=2
1:noiselvl5gha2=31
1:sb40and80lr5gmpo=0x11111111
1:rxgains5ghelnagaina2=3
et0mdcport=0
0:venid=0x14E4
0:aa2g=7
hw_rev=0
0:ledbh12=2
pmon_ver=CFE 6.30.163-1.00
1:mcsbw805ghpo=0
0:pdetrange2g=3
1:rawtempsense=0x1ff
vlan2ports=4 5u
1:leddc=0xFFFF
1:sb20in80and160hr5glpo=0
1:femctrl=3
0:mcsbw402gpo=0x22222222
0:pa2gw1a0=0x1d5e
0:pa2gw1a1=0x1f02
0:elna2g=2
0:pa2gw1a2=0x1f83
1:dot11agofdmhrbw202gpo=0
1:sb20in40lrpo=0
1:sb20in80and160hr5ghpo=0
1:rxgains5gmtrelnabypa0=1
1:rxgains5gmtrelnabypa1=1
1:papdcap2g=0
1:rxgains5gmtrelnabypa2=1
0:mcsbw202gpo=0x22222222
1:pa2ga0=0xfe72,0x14c0,0xfac7
1:mcsbw405glpo=0
1:pa2ga1=0xfe80,0x1472,0xfabc
1:mcsbw402gpo=0
sromrev=8
1:pa2ga2=0xfe82,0x14bf,0xfad9
boardtype=0xF646
1:sb40and80hr5gmpo=0x11111111
1:mcsbw1605glpo=0
1:mcslr5glpo=0
1:dot11agduplrpo=0
1:ledbh0=11
1:ccode=Q1
1:macaddr=B0:C7:45:7E:5A:A5
1:ledbh1=11
0:legofdmbw202gpo=0x22222222
1:ledbh2=11
1:rxgains5ghtrelnabypa0=1
lan_netmask=255.255.255.0
1:ledbh3=11
1:rxgains5ghtrelnabypa1=1
1:mcsbw405ghpo=0
1:rxgains5ghtrelnabypa2=1
1:mcsbw202gpo=0
1:ofdmlrbw202gpo=0
1:mcsbw1605ghpo=0
1:mcslr5ghpo=0
0:rxchain=7
nvram_version=1.00
0:cckbw20ul2gpo=0
0:tempthresh=120
region=EU
1:devid=0x43a2
vlan2hwname=et0
pmon_date=Fri Jan 18 16:22:36 JST 2013
DEF-p_wireless_eth1_11a-authmode=psk
1:sb40and80lr5glpo=0x11111111
1:measpower1=0x7f
1:measpower2=0x7f
1:ledbh10=2
xtalfreq=25000
1:sb20in40hrrpo=0
nvram_space=65536
boardflags2=0x00000000
1:sb40and80lr5ghpo=0x11111111
boardflags3=0
0:parefldovoltage=60
1:maxp5ga0=40,40,0,0
1:rxgains2gtrelnabypa0=0
1:maxp5ga1=40,40,0,0
1:rxgains2gtrelnabypa1=0
1:maxp5ga2=40,40,0,0
1:rxgains2gtrelnabypa2=0
0:regrev=0
DEF-p_wireless_eth1_11a-wpapsk=50366293
0:pa2gw0a0=0xfe58
0:pa2gw0a1=0xfe64
DEF-p_wireless_eth2_11bg-wpapsk=50366293
0:leddc=0xFFFF
0:pa2gw0a2=0xfe73
wait_time=3
1:sar5g=15
1:gainctrlsph=0
melco_id=RD_BB12068
1:pdgain2g=4
0:sromrev=9
0:cckbw202gpo=0
1:aga0=0
1:aga1=0
1:subband5gver=0x4
1:aga2=0
1:sb40and80hr5glpo=0x11111111
1:mcsbw205gmpo=0
1:cckbw202gpo=0
1:agbg0=71
0:ccode=0
1:agbg1=71
1:epagain2g=0
1:agbg2=133
1:sb40and80hr5ghpo=0x11111111
1:rxgains2gelnagaina0=0
1:rxchain=7
1:rxgains2gelnagaina1=0
1:rxgains2gelnagaina2=0
1:boardnum=512
cfe_disable_2G=0
1:tworangetssi2g=0
1:dot11agduphrpo=0
1:papdcap5g=0
1:aa2g=0
0:ofdmlrbw202gpo=0
usb_gpio_reverse=0x400
1:tempcorrx=0x3f
1:regrev=27
1:rxgains5gtrelnabypa0=1
0:tssipos2g=1
1:rxgains5gtrelnabypa1=1
1:rxgains5gtrelnabypa2=1
0:devid=0x4332
lan_ipaddr=192.168.11.1
clkfreq=800
vlan1hwname=et0
0:dot11agofdmhrbw202gpo=0
1:boardrev=0x1305
0:extpagain2g=3
DEF-p_wireless_eth2_11bg-authmode=psk
1:boardvendor=x014e4
0:mcs32po=0x0003
0:maxp2ga0=46
0:temps_hysteresis=5
0:maxp2ga1=46
sdram_config=0x0147
0:maxp2ga2=46
1:pdoffset80ma0=0
1:maxp2ga0=76
1:pdoffset80ma1=0
vlan1ports=0 1 2 3 5*
1:cckbw20ul2gpo=0
1:maxp2ga1=76
1:pdoffset80ma2=0
1:maxp2ga2=76
1:temps_hysteresis=15
0:boardflags=0x80001200
1:tssiposslope2g=1
1:rxgainerr2g=0xffff
1:noiselvl5gua0=31
1:rxgains5gmtrisoa0=5
0:tempoffset=0
1:noiselvl5gua1=31
1:rxgains5gmtrisoa1=4
boardflags=0x00000110
sdram_refresh=0x0000
DEF-p_wireless_eth1_11a-authmode_ex=wpa2-psk
1:noiselvl5gua2=31
1:tempthresh=255
1:rxgains5gmtrisoa2=4
0:antswitch=0
wandevs=et0
1:rxgains5gelnagaina0=1
1:rxgains5gelnagaina1=1
0:phycal_tempdelta=0
0:txchain=7
1:pcieingress_war=15
1:rxgains5gelnagaina2=1
sdram_ncdl=0x215
1:sromrev=11
1:sb20in80and160lr5gmpo=0
0:legofdm40duppo=0
pincode=92527706
1:phycal_tempdelta=255
0:boardflags2=0x00100000
1:noiselvl2ga0=31
1:noiselvl2ga1=31
product=WZR-1750DHP
1:noiselvl2ga2=31
1:noiselvl5gma0=31
1:pdoffset40ma0=0
1:mcsbw205glpo=0
DEF-p_wireless_eth2_11bg-authmode_ex=wpa2-psk
1:noiselvl5gma1=31
1:pdoffset40ma1=0
1:noiselvl5gma2=31
1:pdoffset40ma2=0
1:measpower=0x7f
1:temps_period=15
et0phyaddr=30
1:venid=0x14E4
1:mcsbw805gmpo=0
1:pdgain5g=4
1:boardflags2=0x300000
1:mcsbw205ghpo=0
1:boardflags3=0x300030
0:mcsbw20ul2gpo=0x22222222
landevs=vlan1 wl0 wl1
1:rxgains5ghtrisoa0=5
1:rxgains5gtrisoa0=7
1:rxgains5ghtrisoa1=4
1:rxgains5gtrisoa1=6
1:rxgains5ghtrisoa2=4
1:rxgains5gtrisoa2=5
0:legofdmbw20ul2gpo=0x22222222
1:sb20in80and160hr5gmpo=0
sdram_init=0x0000
1:epagain5g=0
0:pa2gw2a0=0xf8ce
0:pa2gw2a1=0xf869
0:pa2gw2a2=0xf864
1:tempsense_option=0x3
1:boardtype=0x621
cfe_disable_5G=0
1:rxgains5gmelnagaina0=2
1:tworangetssi5g=0
1:rxgains5gmelnagaina1=2
1:rxgains5gmelnagaina2=3
0:xtalfreq=20000
1:aa5g=7
1:xtalfreq=40000
1:mcsbw405gmpo=0
custom_id=0
1:pa5ga0=0xff46,0x1a19,0xfce1,0xff45,0x19d4,0xfce6,0xff41,0x1a07,0xfcdd,0xff42,0x19f4,0xfce0
1:pa5ga1=0xff41,0x1a5b,0xfcd2,0xff41,0x1a2c,0xfcd9,0xff3d,0x1a6a,0xfcd0,0xff3e,0x1a65,0xfccd
1:txchain=7
1:mcsbw1605gmpo=0
1:mcslr5gmpo=0
1:pa5ga2=0xff46,0x1a88,0xfcd1,0xff42,0x1a53,0xfcd2,0xff3d,0x1a81,0xfccd,0xff3f,0x1a94,0xfcc9
boardnum=00
0:temps_period=5
0:macaddr=B0:C7:45:7E:5A:A0
bootflags=1
1:sb20in80and160lr5glpo=0
0:antswctl2g=0
0:ag0=0
size: 5524 bytes (60012 left)
*** command status = 0
CFE> nvram commit
*** command status = 0
CFE> nvram show
0:ag1=0
0:ag2=0
DEF-p_wireless_eth1_11a-crypto=aes
1:noiselvl5gla0=31
DEF-p_wireless_eth2_11bg-crypto=aes
boardrev=0x1100
1:tssiposslope5g=1
1:sb20in80and160lr5ghpo=0
1:noiselvl5gla1=31
1:noiselvl5gla2=31
1:rxgainerr5g=0xffff,0xffff,0xffff,0xffff
et0macaddr=B0:C7:45:7E:5A:AA
1:boardflags=0x10000000
1:antswitch=0
1:rxgains2gtrisoa0=0
0:ledbh0=11
1:sar2g=18
1:rxgains2gtrisoa1=0
0:ledbh1=11
1:rxgains2gtrisoa2=0
1:tempsense_slope=0xff
1:mcsbw805glpo=0
boot_wait=on
watchdog=0
devpath0=pci/2/1/
0:ledbh2=11
0:ledbh3=11
devpath1=pci/1/1/
1:rxgains5ghelnagaina0=2
1:tempoffset=255
1:noiselvl5gha0=31
1:rxgains5ghelnagaina1=2
1:noiselvl5gha1=31
et0mdcport=0
1:rxgains5ghelnagaina2=3
1:sb40and80lr5gmpo=0x11111111
1:noiselvl5gha2=31
0:venid=0x14E4
0:aa2g=7
hw_rev=0
0:ledbh12=2
1:mcsbw805ghpo=0
pmon_ver=CFE 6.30.163-1.00
0:pdetrange2g=3
vlan2ports=4 5u
1:rawtempsense=0x1ff
1:femctrl=3
1:sb20in80and160hr5glpo=0
1:leddc=0xFFFF
0:pa2gw1a0=0x1d5e
0:mcsbw402gpo=0x22222222
0:elna2g=2
0:pa2gw1a1=0x1f02
0:pa2gw1a2=0x1f83
1:dot11agofdmhrbw202gpo=0
1:sb20in80and160hr5ghpo=0
1:sb20in40lrpo=0
1:rxgains5gmtrelnabypa0=1
1:rxgains5gmtrelnabypa1=1
1:rxgains5gmtrelnabypa2=1
1:papdcap2g=0
0:mcsbw202gpo=0x22222222
1:pa2ga0=0xfe72,0x14c0,0xfac7
sromrev=8
1:mcsbw402gpo=0
1:pa2ga1=0xfe80,0x1472,0xfabc
1:mcsbw405glpo=0
1:pa2ga2=0xfe82,0x14bf,0xfad9
boardtype=0xF646
1:sb40and80hr5gmpo=0x11111111
1:mcslr5glpo=0
1:mcsbw1605glpo=0
1:dot11agduplrpo=0
1:ccode=Q1
1:ledbh0=11
1:ledbh1=11
1:macaddr=B0:C7:45:7E:5A:A5
lan_netmask=255.255.255.0
1:rxgains5ghtrelnabypa0=1
1:ledbh2=11
0:legofdmbw202gpo=0x22222222
1:rxgains5ghtrelnabypa1=1
1:ledbh3=11
1:rxgains5ghtrelnabypa2=1
1:mcsbw405ghpo=0
1:mcsbw202gpo=0
1:mcslr5ghpo=0
1:mcsbw1605ghpo=0
1:ofdmlrbw202gpo=0
0:rxchain=7
nvram_version=1.00
0:tempthresh=120
0:cckbw20ul2gpo=0
region=EU
1:devid=0x43a2
vlan2hwname=et0
pmon_date=Fri Jan 18 16:22:36 JST 2013
1:sb40and80lr5glpo=0x11111111
DEF-p_wireless_eth1_11a-authmode=psk
1:measpower1=0x7f
1:measpower2=0x7f
xtalfreq=25000
1:ledbh10=2
1:sb20in40hrrpo=0
nvram_space=65536
boardflags2=0x00000000
0:parefldovoltage=60
boardflags3=0
1:sb40and80lr5ghpo=0x11111111
1:rxgains2gtrelnabypa0=0
1:maxp5ga0=40,40,0,0
1:rxgains2gtrelnabypa1=0
1:maxp5ga1=40,40,0,0
0:regrev=0
1:rxgains2gtrelnabypa2=0
1:maxp5ga2=40,40,0,0
0:pa2gw0a0=0xfe58
DEF-p_wireless_eth1_11a-wpapsk=50366293
0:pa2gw0a1=0xfe64
wait_time=3
0:pa2gw0a2=0xfe73
0:leddc=0xFFFF
DEF-p_wireless_eth2_11bg-wpapsk=50366293
1:sar5g=15
1:gainctrlsph=0
melco_id=RD_BB12068
1:pdgain2g=4
0:sromrev=9
1:aga0=0
0:cckbw202gpo=0
1:subband5gver=0x4
1:aga1=0
1:aga2=0
1:sb40and80hr5glpo=0x11111111
1:cckbw202gpo=0
1:mcsbw205gmpo=0
0:ccode=0
1:agbg0=71
1:agbg1=71
1:sb40and80hr5ghpo=0x11111111
1:agbg2=133
1:epagain2g=0
1:rxchain=7
1:rxgains2gelnagaina0=0
1:rxgains2gelnagaina1=0
1:rxgains2gelnagaina2=0
1:boardnum=512
1:tworangetssi2g=0
cfe_disable_2G=0
1:papdcap5g=0
1:dot11agduphrpo=0
1:aa2g=0
0:tssipos2g=1
1:rxgains5gtrelnabypa0=1
1:regrev=27
1:tempcorrx=0x3f
usb_gpio_reverse=0x400
0:ofdmlrbw202gpo=0
1:rxgains5gtrelnabypa1=1
1:rxgains5gtrelnabypa2=1
0:devid=0x4332
clkfreq=800
lan_ipaddr=192.168.11.1
vlan1hwname=et0
1:boardrev=0x1305
0:dot11agofdmhrbw202gpo=0
0:extpagain2g=3
DEF-p_wireless_eth2_11bg-authmode=psk
1:boardvendor=x014e4
0:temps_hysteresis=5
0:maxp2ga0=46
0:mcs32po=0x0003
sdram_config=0x0147
0:maxp2ga1=46
1:pdoffset80ma0=0
0:maxp2ga2=46
vlan1ports=0 1 2 3 5*
1:pdoffset80ma1=0
1:maxp2ga0=76
1:pdoffset80ma2=0
1:maxp2ga1=76
1:cckbw20ul2gpo=0
1:maxp2ga2=76
0:boardflags=0x80001200
1:temps_hysteresis=15
1:tssiposslope2g=1
1:rxgainerr2g=0xffff
0:tempoffset=0
1:rxgains5gmtrisoa0=5
1:noiselvl5gua0=31
boardflags=0x00000110
1:rxgains5gmtrisoa1=4
1:noiselvl5gua1=31
wandevs=et0
0:antswitch=0
1:rxgains5gmtrisoa2=4
1:tempthresh=255
1:noiselvl5gua2=31
DEF-p_wireless_eth1_11a-authmode_ex=wpa2-psk
sdram_refresh=0x0000
1:rxgains5gelnagaina0=1
0:txchain=7
0:phycal_tempdelta=0
1:rxgains5gelnagaina1=1
sdram_ncdl=0x215
1:rxgains5gelnagaina2=1
1:pcieingress_war=15
1:sromrev=11
1:sb20in80and160lr5gmpo=0
pincode=92527706
0:legofdm40duppo=0
1:phycal_tempdelta=255
0:boardflags2=0x00100000
1:noiselvl2ga0=31
1:noiselvl2ga1=31
1:noiselvl2ga2=31
product=WZR-1750DHP
1:pdoffset40ma0=0
1:noiselvl5gma0=31
1:pdoffset40ma1=0
1:noiselvl5gma1=31
DEF-p_wireless_eth2_11bg-authmode_ex=wpa2-psk
1:mcsbw205glpo=0
1:pdoffset40ma2=0
1:noiselvl5gma2=31
1:measpower=0x7f
1:temps_period=15
et0phyaddr=30
1:venid=0x14E4
1:mcsbw805gmpo=0
1:pdgain5g=4
1:boardflags2=0x300000
1:boardflags3=0x300030
1:mcsbw205ghpo=0
landevs=vlan1 wl0 wl1
0:mcsbw20ul2gpo=0x22222222
1:rxgains5gtrisoa0=7
1:rxgains5ghtrisoa0=5
1:rxgains5gtrisoa1=6
1:rxgains5ghtrisoa1=4
1:rxgains5gtrisoa2=5
1:rxgains5ghtrisoa2=4
0:legofdmbw20ul2gpo=0x22222222
1:sb20in80and160hr5gmpo=0
sdram_init=0x0000
0:pa2gw2a0=0xf8ce
1:epagain5g=0
0:pa2gw2a1=0xf869
0:pa2gw2a2=0xf864
1:tempsense_option=0x3
1:boardtype=0x621
1:tworangetssi5g=0
1:rxgains5gmelnagaina0=2
cfe_disable_5G=0
1:rxgains5gmelnagaina1=2
0:xtalfreq=20000
1:rxgains5gmelnagaina2=3
1:aa5g=7
1:xtalfreq=40000
1:mcsbw405gmpo=0
custom_id=0
1:pa5ga0=0xff46,0x1a19,0xfce1,0xff45,0x19d4,0xfce6,0xff41,0x1a07,0xfcdd,0xff42,0x19f4,0xfce0
1:txchain=7
1:pa5ga1=0xff41,0x1a5b,0xfcd2,0xff41,0x1a2c,0xfcd9,0xff3d,0x1a6a,0xfcd0,0xff3e,0x1a65,0xfccd
1:pa5ga2=0xff46,0x1a88,0xfcd1,0xff42,0x1a53,0xfcd2,0xff3d,0x1a81,0xfccd,0xff3f,0x1a94,0xfcc9
1:mcslr5gmpo=0
1:mcsbw1605gmpo=0
boardnum=00
0:temps_period=5
0:macaddr=B0:C7:45:7E:5A:A0
0:antswctl2g=0
1:sb20in80and160lr5glpo=0
bootflags=1
0:ag0=0
size: 5524 bytes (60012 left)
*** command status = 0
CFE>
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Hardware DIY / Hardware Mods All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum