Issue Fonera 2200 ddwrt

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Author Message
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Sat Oct 08, 2011 15:59    Post subject: Issue Fonera 2200 ddwrt Reply with quote
Hi, I have this problem "can't program at region 0x80041000 : unknow error.
The version file is the lastest v24sp2.
If I update with v24rc6.2 work perfectly with out
I use serial or fon flash.
Where is the problem?
Sponsor
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Sat Oct 08, 2011 17:52    Post subject: Reply with quote
http://www.dd-wrt.com/routerdb/de/download.php?file=3592
_________________
DD-WRT Forum - Atheros Recommended Build
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Sun Oct 09, 2011 9:43    Post subject: Log Reply with quote
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version V1.00 - built 10:37:27, Dec 12 2006

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

Board: FON1
RAM: 0x80000000-0x81000000, [0x80040aa0-0x80fe1000] available
FLASH: 0xa8000000 - 0xa87f0000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 10.000 seconds - enter ^C to abort
^C
RedBoot>
RedBoot> fis list
Name FLASH addr Mem addr Length Entry point
RedBoot 0xA8000000 0xA8000000 0x00030000 0x00000000
vmlinux.bin.l7 0xA8030000 0x80041000 0x00080000 0x80041000
rootfs 0xA80B0000 0x80040C00 0x00730000 0x80040C00
FIS directory 0xA87E0000 0xA87E0000 0x0000F000 0x00000000
RedBoot config 0xA87EF000 0xA87EF000 0x00001000 0x00000000
RedBoot> ip_address -l 192.168.1.1/24 -h 192.168.1.166
IP: 192.168.1.1/255.255.255.0, Gateway: 192.168.1.1
Default server: 192.168.1.166
RedBoot> fis init
About to initialize [format] FLASH image system - continue (y/n)? y
*** Initialize FLASH Image System
... Erase from 0xa87e0000-0xa87f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa87e0000: .
RedBoot> load -r -v -b 0x80041000 linux.bin
Using default protocol (TFTP)
-
Raw file loaded 0x80041000-0x8067bfff, assumed entry at 0x80041000
RedBoot> fis create linux
... Erase from 0xa8030000-0xa866b000: ..........................................
..........................................................
... Program from 0x80041000-0x8067c000 at 0xa8030000: ..........................
.....................................V
Can't program region at 0xa8420000: Unknown error
RedBoot>
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Sun Oct 09, 2011 20:35    Post subject: Re: Log Reply with quote
siedrosat wrote:
Can't program region at 0xa8420000: Unknown error

To test whether there's a bad sector at 0xa8420000,
Code:
RedBoot> fis init
RedBoot> load -r -v -b 0x80041000 vmlinux.bin.l7
RedBoot> fis create -f 0xa8420000 -l 0x00010000 -n nvram

Or install "mtd-utils" over V24RC6.2 or OpenWrt Kamikaze 8.09.2 and run "nandtest" to verify sector 0xa8420000.

Mtdutils - Texas Instruments Embedded Processors Wiki

_________________
DD-WRT Forum - Atheros Recommended Build
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Mon Oct 10, 2011 21:25    Post subject: Reply with quote
The sector is ok.
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Mon Oct 10, 2011 23:59    Post subject: Reply with quote
Download linux.bin r14896 6328KB.
Download and extract file foneram-plus.elf from here.
Code:
RedBoot> fis init
RedBoot> ip_address -l 192.168.1.1/24 -h 192.168.1.166
RedBoot> load foneram-plus.elf
RedBoot> go

Code:
root@LamaBleu:/# cat /proc/cpuinfo
root@LamaBleu:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00030000 00010000 "RedBoot"
mtd1: 00010000 00010000 "loader"
mtd2: 00620000 00010000 "image"
mtd3: 0056afc0 00010000 "rootfs"
mtd4: 003f0000 00010000 "rootfs_data"
mtd5: 00010000 00010000 "config"
mtd6: 00140000 00010000 "image2"
mtd7: 0000f000 00010000 "FIS directory"
mtd8: 00001000 00010000 "RedBoot config"
mtd9: 00010000 00010000 "board_config"

root@LamaBleu:/# cd /tmp
root@LamaBleu:/tmp# wget http://192.168.1.166/linux.bin
root@LamaBleu:/tmp# dd if=/tmp/linux.bin bs=64K skip=1 | mtd write - image
root@LamaBleu:/tmp# dd if=/tmp/linux.bin bs=64K count=1 | mtd -r write - loader

It will take about 30 minutes to write a 6MB image over Fonera.
Code:
RedBoot> fis create -l 0x007A0000 -e 0x80041000 -n linux
RedBoot> fis list
RedBoot> fconfig
enter the bootscript:
fis load -l linux
exec

RedBoot> fis load -l linux
RedBoot> exec

Note:
linux.bin must not exceed mtd1+mtd2 which are 64KB+6272KB.

FONERAM - MOLIETS WiFi FON_BASTIDE

_________________
DD-WRT Forum - Atheros Recommended Build


Last edited by fyi2000 on Tue Oct 11, 2011 12:49; edited 1 time in total
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Tue Oct 11, 2011 7:55    Post subject: Reply with quote
I have this log and i have a problem with command wget. I used hfs for http server.

+Ethernet eth0: MAC address 00:18:84:80:ed:d4
IP: 192.168.1.1/255.255.255.0, Gateway: 192.168.1.1
Default server: 192.168.1.166

RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version V1.00 - built 10:37:27, Dec 12 2006

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

Board: FON1
RAM: 0x80000000-0x81000000, [0x80040aa0-0x80fe1000] available
FLASH: 0xa8000000 - 0xa87f0000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 10.000 seconds - enter ^C to abort
^C
RedBoot> fis init
About to initialize [format] FLASH image system - continue (y/n)? y
*** Initialize FLASH Image System
... Erase from 0xa87e0000-0xa87f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa87e0000: .
RedBoot> fconfig
Run script at boot: true
Boot script:
.. fis load -l linux
.. exec
Enter script, terminate with empty line
>> fis load -l linux
>> exec
>>
Boot script timeout (1000ms resolution): 10
Use BOOTP for network configuration: false
Gateway IP address: 192.168.1.1
Local IP address: 192.168.1.1
Local IP address mask: 255.255.255.0
Default server IP address: 192.168.1.166
Console baud rate: 9600
GDB connection port: 9000
Force console for special debug messages: false
Network debug at boot time: false
Update RedBoot non-volatile configuration - continue (y/n)? y
... Erase from 0xa87e0000-0xa87f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa87e0000: .
RedBoot> ip_address -l 192.168.1.1/24 -h 192.168.1.166
IP: 192.168.1.1/255.255.255.0, Gateway: 192.168.1.1
Default server: 192.168.1.166
RedBoot> load foneram-plus.elf
Using default protocol (TFTP)
Entry point: 0x802a8000, address range: 0x80041000-0x803fdaf6
RedBoot> go
Linux version 2.6.19.2 (eric@ubuntu) (gcc version 4.1.2) #33 Fri Apr 11 18:07:48
CPU revision is: 00019064
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Built 1 zonelists. Total pages: 4064
Kernel command line: console=ttyS0,9600 rootfstype=squashfs,jffs2 init=/etc/pret
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 64 (order: 6, 256 bytes)
Using 92.000 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 12040k/16384k available (2105k kernel code, 4344k reserved, 350k data, )
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
NET: Registered protocol family 16
Radio config found at offset 0xf8(0x1f8)
NET: Registered protocol family 2
IP route cache hash table entries: 128 (order: -3, 512 bytes)
TCP established hash table entries: 512 (order: -1, 2048 bytes)
TCP bind hash table entries: 256 (order: -2, 1024 bytes)
TCP: Hash tables configured (established 512 bind 256)
TCP reno registered
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0xb1100003 (irq = 37) is a 16550A
nbd: registered device at major 43
PHY ID: ffff:ffff
eth0: Dropping NETIF_F_SG since no checksum feature.
eth0: Atheros AR231x: 00:18:84:80:ed:d4, irq 4
cmdlinepart partition parsing not available
Searching for RedBoot partition table in spiflash at offset 0x7d0000
Searching for RedBoot partition table in spiflash at offset 0x7e0000
4 RedBoot partitions found on MTD device spiflash
Creating 4 MTD partitions on "spiflash":
0x00000000-0x00030000 : "RedBoot"
0x007e0000-0x007ef000 : "FIS directory"
mtd: partition "FIS directory" doesn't end on an erase block -- force read-only
0x007ef000-0x007f0000 : "RedBoot config"
mtd: partition "RedBoot config" doesn't start on an erase block boundary -- fory
0x007f0000-0x00800000 : "board_config"
ip_conntrack version 2.4 (128 buckets, 1024 max) - 240 bytes per conntrack
eth0: Configuring MAC for full duplex
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Time: MIPS clocksource has been installed.
Freeing unused kernel memory: 1368k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
eth0.0: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
device eth0.0 entered promiscuous mode
br-lan: port 1(eth0.0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 1(eth0.0) entering forwarding state
init started: BusyBox v1.4.2 (2008-03-07 22:17:12 CET) multi-call binary
mount: cannot read /etc/fstab: No such file or directory
umount: cannot umount /jffs: Invalid argument

Please press Enter to activate this console. br-lan: port 1(eth0.0) entering die
device eth0.0 left promiscuous mode
br-lan: port 1(eth0.0) entering disabled state
eth0.0: dev_set_promiscuity(master, -1)
device eth0 left promiscuous mode
eth0.0: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
device eth0.0 entered promiscuous mode
br-lan: port 1(eth0.0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 1(eth0.0) entering forwarding state
br-lan: port 1(eth0.0) entering disabled state
device eth0.0 left promiscuous mode
br-lan: port 1(eth0.0) entering disabled state
eth0.0: dev_set_promiscuity(master, -1)
device eth0 left promiscuous mode
eth0.0: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
device eth0.0 entered promiscuous mode
br-lan: port 1(eth0.0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 1(eth0.0) entering forwarding state
: udhcpc (v1.4.2) started

: Sending discover...

: udhcpc: sendto: Network is down

gpio_proc: module loaded and /proc/gpio/ created
loop: loaded (max 8 devices)
: Sending discovwlan: 0.8.4.2 (0.9.2.1)
er...

ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.17.2 (AR5212, AR5312, RF2316, TX_DESC_SWAP)
ath_rate_sample: 1.2 (0.9.2.1)
wlan: mac acl policy registered
ath_ahb: 0.9.4.5 (0.9.2.1)
ath_pci: switching rfkill capability off
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 3s
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 11.0 phy 4.8 radio 7.0
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 2315 WiSoC: mem=0xb0000000, irq=3
: Changing password for root

: New password:

: Retype password:Sending discover...

: Password for root changed by root

: Interface doesn't accept private ioctl...

: mode (8BE2): Network dropped connection on reset

: Sending discover...

device ath0 entered promiscuous mode
br-lan: port 2(ath0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 2(ath0) entering forwarding state
br-lan: port 2(ath0) entering disabled state
device ath0 left promiscuous mode
br-lan: port 2(ath0) entering disabled state
device ath0 entered promiscuous mode
br-lan: port 2(ath0) entering learning state
br-lan: topology change detected, propagating
br-lan: port 2(ath0) entering forwarding state
: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...




BusyBox v1.4.2 (2008-03-07 22:17:12 CET) Built-in shell (ash)
Enter 'help' for a list of built-in commands.


______
/\ ___\
\ \ \__/ __ ___ __ _ __ __ ______
\ \ _\/ __`\ /' _ `\ /'__`\/\`'__\/'__`\ /'__ __`\
\ \ \/\ \_\ \/\ \/\ \/\ __/\ \ \//\ \_\.\_\ \ \ \ \ \
\ \_\ \____/\ \_\ \_\ \____\\ \_\\ \__/.\_\\ \ \ \ \ \
\/_/\/___/ \/_/\/_/\/____/ \/_/ \/__/\/_/ \_\ \_\ \_\

---------------------------------------------
Based on OpenWrt - http://www.openwrt.org
Kamikaze 7.06 - kernel 2.6.19.2
Ram-version for la Fonera+ - 01/2008
---------------------------------------------------


root@LamaBleu:/# : Sending discover...


root@LamaBleu:/# cat /proc/mtd
dev: size erasesize name
mtd0: 00030000 00010000 "RedBoot"
mtd1: 0000f000 00010000 "FIS directory"
mtd2: 00001000 00010000 "RedBoot config"
mtd3: 00010000 00010000 "board_config"
root@LamaBleu:/# : Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...


root@LamaBleu:/# cd /tmp: Sending discover...


root@LamaBleu:~# : Sending discover...

: Sending discover...


root@LamaBleu:~# : Sending discover...

wget http://192.168.1.166/linux.bin
Connecting to 192.168.1.166 [192.168.1.166:80]
: Sending discover...

wget: cannot connect to remote host (192.168.1.166): No route to host
root@LamaBleu:~# : Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...

: Sending discover...
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Tue Oct 11, 2011 21:27    Post subject: Reply with quote
Download "linux.bin r14896 6328KB".
Download and extract file "foneram-plus.elf" from here.
Download and extract file "nc.exe" from Netcat for Windows if you try to debrick from Windows.
Code:
RedBoot> fis init
RedBoot> fis create -l 0x007a0000 -e 0x80041000 -n linux
RedBoot> fis list
RedBoot> fconfig -d boot_script_data
boot_script_data:
Enter script, terminate with empty line
>> fis load -l linux
>> exec
>>
Update RedBoot non-volatile configuration - continue (y/n)? y

RedBoot> ip_address -l 192.168.1.1/24 -h 192.168.1.166
RedBoot> load foneram-plus.elf
RedBoot> go

FONERAM - MOLIETS WiFi FON_BASTIDE
Quote:
  • Wait 1 minute leds POWER and WLAN are alternatively blinking orange.
    Wifi network is WEP encrypted. WEP-key is the serial number of your Fonera+
    Root password is the serial number of your Fonera+
  • Then try to connect Telnet/SSH to 192.168.1.1 on LAN port or WLAN

Now connect Telnet/SSH to 192.168.1.1 on WLAN.
Code:
root@LamaBleu:~# cat /proc/cpuinfo
system type             : Atheros AR2315
processor               : 0
cpu model               : MIPS 4KEc V6.4
BogoMIPS                : 183.50
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : no
ASEs implemented        :
VCED exceptions         : not available
VCEI exceptions         : not available

root@LamaBleu:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00030000 00010000 "RedBoot"
mtd1: 007a0000 00010000 "linux"
mtd2: 0000f000 00010000 "FIS directory"
mtd3: 00001000 00010000 "RedBoot config"
mtd4: 00010000 00010000 "board_config"

Because there are only 4MB left in /tmp which aren't enough to store the 6MB linux.bin, we have to run netcat and reprogram Fonera on the fly.
Code:
root@LamaBleu:~# nc -l -p 3333 | mtd write - linux

From PC, enter
Code:
nc 192.168.1.1 3333 -w 30 <linux.bin

It will take about 30 minutes to write a 6MB image over Fonera.

The last step is to compare the md5sum results,
Code:
root@LamaBleu:~# dd if=/dev/mtd1 bs=6328K count=1 | md5sum
root@LamaBleu:~# nc -l -p 3333 | md5sum

From PC, enter
Code:
nc 192.168.1.1 3333 -w 5 <linux.bin

_________________
DD-WRT Forum - Atheros Recommended Build
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Wed Oct 12, 2011 11:31    Post subject: Reply with quote
up to rc6.2 there is a different flash instruction! have you used the right one?
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Tue Oct 25, 2011 14:22    Post subject: Reply with quote
Update Now the fonera is dead. No led, no redboot ecc.
I bought a Jtag http://www.diygadget.com/jtag-cables/universal-jtag-adapter-for-routers-modem-fta-and-more.html
Do you know the right pinout to connect the JTAG to the Fonera 2200? This jtag works in a buffer and jtag unbuffered.
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Tue Oct 25, 2011 18:03    Post subject: Reply with quote
LaFonera Hardware IO (en) - DD-WRT Wiki
Original RedBoot of FON2200 by courtesy of Simon

_________________
DD-WRT Forum - Atheros Recommended Build
siedrosat
DD-WRT Novice


Joined: 07 Oct 2011
Posts: 6

PostPosted: Wed Oct 26, 2011 11:08    Post subject: Jtag Reply with quote
Hello, I've made ​​the connections as shown, but the CPU is not recognized.
D2--->A1
D3--->A2
D4--->A3
D5--->A4
D6--->A5
D11--->Y8
A8--->pin3 TDO
Y1--->pin6 srst (fonera 2200)
y2--->pin4 tdi
y3--->pin5 tck
y4--->pin2 tdi
y5--->pin1 trst

vcc pin 14
gnd pin 8 or 9 or 10

http://www.tiaowiki.com/w/Image:Universal.jtag-router.597.jpg
http://www.dd-wrt.com/wiki/index.php/Image:4-FONERA_2200A_JTAG_v2.6.jpg
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Wed Oct 26, 2011 21:53    Post subject: Reply with quote
Code:
nTRST  1   2 GND     (Pin 1 is a square pad)
TDI    3   4 GND
TDO    5   6 GND
TMS    7   8 GND
TCK    9  10 GND
nSRST 11  12 n/a

DD-WRT Forum :: View topic - Fonera 2200 flashing error "Can't program region"

_________________
DD-WRT Forum - Atheros Recommended Build
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum