Posted: Wed Oct 17, 2007 3:32 Post subject: F5D7231-4,bcm5352 based,lan doesn't work after reset
dd-wrt had supported this router,display right model and version of router in status,
but after hard reset,lan and wan port will down
just wireless is working
telnet and
nvram set boardflags=0x398
it will recovery
Posted: Wed Oct 17, 2007 3:47 Post subject: Re: F5D7231-4,bcm5352 based,lan doesn't work after reset
deathclaw wrote:
dd-wrt had supported this router,display right model and version of router in status,
but after hard reset,lan and wan port will down
just wireless is working
telnet and
nvram set boardflags=0x398
it will recovery
Which model this is? F5D7230 v1444 ?. Please give more information. I don't remember we supported f5d7231-4. And as far as I know, 7231 is 4712 based.
Is this by any chance: Belkin F5D7231-4 VER.2000 Wireless G Plus
FCC ID: K7SF5D7231B.
Posted: Wed Oct 17, 2007 7:54 Post subject: Re: F5D7231-4,bcm5352 based,lan doesn't work after reset
Eko wrote:
deathclaw wrote:
dd-wrt had supported this router,display right model and version of router in status,
but after hard reset,lan and wan port will down
just wireless is working
telnet and
nvram set boardflags=0x398
it will recovery
Which model this is? F5D7230 v1444 ?. Please give more information. I don't remember we supported f5d7231-4. And as far as I know, 7231 is 4712 based.
Is this by any chance: Belkin F5D7231-4 VER.2000 Wireless G Plus
FCC ID: K7SF5D7231B.
Send me cfe.bin from it.
How is boardflags set after hard reset?
ho ho ho!Nice to meet you~
the router based broadcom bcm5352 chip,integration switch.
dd-wrt systeminformation display Belkin F5D7231-4 v1212UK
and nvram get boardflags,it is 0x0f58,
then get vlan1ports="0 5" or "0 5u",sorry to forgot
after power off and replug,it seems will brick.
after hard reset,wirless can work,eth is down, boardflags become 0x0388
the router just 2M flash,can't get cfe by ssh
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 3月 27 14:45:37 CST 2006 (david@5c34-195-9-2)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.23.0
CPU type 0x29008: 200MHz
Total memory: 8192 KBytes
Total memory used by CFE: 0x80300000 - 0x803BCC70 (773232)
Initialized Data: 0x80331AE0 - 0x80334270 (10128)
BSS Area: 0x80334270 - 0x80356C70 (141824)
Local Heap: 0x80356C70 - 0x803BAC70 (409600)
Stack Area: 0x803BAC70 - 0x803BCC70 (8192)
Text (code) segment: 0x80300000 - 0x80331AE0 (203488)
Boot area (physical): 0x003BD000 - 0x003FD000
Relocation Factor: I:00000000 - D:00000000
now in do_boot
CS4Config orignal value =00000010
CS4Config changed value =00000011
mac address in flash is:00:11:50:f2:94:7c
mac address in flash is:00:11:50:f2:94:7c
Get eRcOmM at 001e0000
have eRcOmM
run kernel
wait. press ctrl-c to cancel autostart
Reading :: Failed.: Error
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ...... 1739608 bytes read
Entry at 0x80001000
Starting program at 0x80001000
Watchdog reset bit set, clearing
RTE BSP v4.70.18.0 running on a 5352 Rev. 0 @ 100/200 Mhz
wl0: Broadcom BCM5352 802.11 Wireless Controller 4.70.18.0
et0: Broadcom BCM5352 Ethernet Controller 4.70.18.0
mirror0: Broadcom Relay 4.70.18.0
vl0: Broadcom VLAN 4.70.18.0
No interface specified. Quitting...
> GetNVFromFlash copied data
GetNVFromFlash copied data
GetNVFromFlash copied data
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 3月 27 14:45:37 CST 2006 (david@5c34-195-9-2)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.23.0
CPU type 0x29008: 200MHz
Total memory: 8192 KBytes
Total memory used by CFE: 0x80300000 - 0x803BCC70 (773232)
Initialized Data: 0x80331AE0 - 0x80334270 (10128)
BSS Area: 0x80334270 - 0x80356C70 (141824)
Local Heap: 0x80356C70 - 0x803BAC70 (409600)
Stack Area: 0x803BAC70 - 0x803BCC70 (8192)
Text (code) segment: 0x80300000 - 0x80331AE0 (203488)
Boot area (physical): 0x003BD000 - 0x003FD000
Relocation Factor: I:00000000 - D:00000000
now in do_boot
CS4Config orignal value =00000010
CS4Config changed value =00000011
mac address in flash is:00:11:50:f2:94:7c
mac address in flash is:00:11:50:f2:94:7c
Get eRcOmM at 001e0000
have eRcOmM
run kernel
wait. press ctrl-c to cancel autostart
Automatic startup canceled via Ctrl-C
CFE> help
Available commands:
rndis Broadcom USB RNDIS utility.
et Broadcom Ethernet utility.
nvram NVRAM utility.
reboot Reboot.
assign Warning! Assign a different mac address will cause restore to default and all config will be lost.
download Download.
flash Update a flash memory device
autoboot Automatic system bootstrap.
batch Load a batch file into memory and execute it
go Verify and boot OS image.
boot Load an executable file into memory and execute it
load Load an executable file into memory without executing it
save Save a region of memory to a remote file via TFTP
ping Ping a remote IP host.
arp Display or modify the ARP Table
ifconfig Configure the Ethernet interface
unsetenv Delete an environment variable.
printenv Display the environment variables
setenv Set an environment variable.
help Obtain help for CFE commands
For more information about a command, enter 'help command-name'
*** command status = 0
CFE> printenv
Variable Name Value
-------------------- --------------------------------------------------
BOOT_CONSOLE uart0
CFE_VERSION 1.0.37
CFE_BOARDNAME BCM947XX
CFE_MEMORYSIZE 8192
STARTUP go;
*** command status = 0
CFE> nvram show
opo=12
ses_wds_mode=0
wl0_frameburst=off
boardrev=0x13
il0macaddr=00:11:50:f2:94:7c
et0macaddr=00:11:50:f2:94:7c
ses_status=Unknown
wl0_akm=
watchdog=3000
boot_wait=on
wl0_infra=1
et0mdcport=0
wl0_country_code=
reset_gpio=7
pmon_ver=CFE 3.91.23.0
restore_defaults=0
wl0_wme_sta_be=15 1023 3 0 0 off off
wl0_ifname=
wl0_wme_sta_bk=15 1023 7 0 0 off off
vlan0ports=0 1 2 3 5*
wl0_mrate=0
wl0_mode=ap
wl0_ap_isolate=0
wl_akm=
sromrev=2
wl0_gmode=1
wl0_wme_no_ack=off
boardtype=0x467
wl_gmode=1
et1macaddr=00:11:50:f2:94:7d
lan_netmask=255.255.255.0
wl0_ssid=Broadcom
wl0_dtim=3
os_date=Mar 23 2006
wl0_dfs_preism=60
wl_plcphdr=long
wl_macmode=disabled
wl0id=0x4318
wl0_key1=
wl0_key2=
wl0_key3=
wl0_key4=
ag0=2
wl_wpa_psk=
wl0_wme_ap_vi=7 15 1 6016 3008 off off
wl0_closed=0
wl0_rate=0
wl0_plcphdr=long
wl_wpa_gtk_rekey=3600
wl0_macmode=disabled
wl0_radioids=
wl0_wme_ap_vo=3 7 1 3264 1504 off off
wl0gpio2=0
wl0_phytype=b
wl0gpio3=0
wl0_lazywds=0
wl0_afterburner=off
wl0_antdiv=-1
wl_dtim=1
wl_ssid=belkin54g
wl0_wpa_psk=
wl_key1=0000000000
wl_key2=0000000000
wl_key3=0000000000
wl0_unit=0
wl_key4=0000000000
wl_country_code=US
wl0_net_reauth=36000
pa0itssit=62
ses_cl_enable=0
wl_rate=0
cctl=0
wl0_reg_mode=off
lan_ifnames=wl0
wl0_auth=0
wl0_wme=off
wl0_radius_port=1812
wl0_radius_ipaddr=
wl0_wme_sta_vi=7 15 2 6016 3008 off off
pa0maxpwr=74
wl_crypto=tkip
wl0_wme_sta_vo=3 7 2 3264 1504 off off
lan_ipaddr=192.168.1.1
clkfreq=200
os_name=hndrte
aa0=3
wl0_maxassoc=128
wl0_phytypes=
wl0_wep=disabled
wl0_frag=2346
sdram_config=0x22
wl0_country=
vlan1ports=4 5u
ccode=0
wl0_rateset=default
wl0_wme_apsd=on
wl_wme=off
lan_ifname=mirror0
boardflags=0x1758
wandevs=et0
sdram_refresh=0
wl_auth=0
sdram_ncdl=0x30826
wl_frameburst=off
is_modified=0
wl0_rts=2347
wl_wep=disabled
os_version=4.71.18.0
wl_gmode_protection=off
wl0_wpa_gtk_rekey=0
wl0_sta_retry_time=5
wl_frag=2346
wl0_key=1
gpio13=ses_led
wl_maclist=
gpio14=ses_button
et0phyaddr=30
landevs=vlan0 wl0
wl0_dfs_postism=60
wl0_radio=1
wl_channel=11
wl0_bcn=100
wl_radio=1
wl_afterburner=auto
wl0_hwaddr=
ezc_version=2
pa0b0=0x142D
wl0_gmode_protection=auto
pa0b1=0xFB32
wl0_maclist=
pa0b2=0xFEE5
wl_rts=2447
sdram_init=0x2
vlan0hwname=et0
wl0_radius_key=
wl0_wme_ap_be=15 63 3 0 0 off off
wl0_corerev=
wl_key=1
wl0_channel=11
wl0_wme_ap_bk=15 1023 7 0 0 off off
wl_closed=0
wl0_auth_mode=none
boardnum=1114
wl0_crypto=tkip
wl_bcn=100
size: 2417 bytes (30351 left)
*** command status = 0
CFE>
no joy on tftp during boot_wait or webgui, it seems tftp never opens during boot despite boot_wait being set to on as far as i can see, tftp is closed according to nmap while the router is up and running and webgui rejects it. heres some stuff to take a look at if someone wants to.
firmware download from belkin is attached and a saved config file
