JTAG для ADSL Alice Gate 2 Plus

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Оборудование на основе Broadcom
Author Message
Deep1984
DD-WRT Novice


Joined: 23 Nov 2009
Posts: 10

PostPosted: Tue Mar 09, 2010 13:49    Post subject: JTAG для ADSL Alice Gate 2 Plus Reply with quote
есть модем Alice Gate 2 Plus
на основе:
CPU - BCM6338KFBG
Flash - MX MO64409 29LV640MTTC-900
ROM - W9812G6GH-6 0638W

в который по ошибке залил прошивку от DLINK DSL-2300U ... девайс потерялся для стандартных методов восстановления(TFTP и загрузчик)

на фотографии видна группа контактов (14 штук)
не могу найти распиновку JTAG
буду благодарен за любую помощь

фото в хор разрешении - http://i078.radikal.ru/1003/da/1d855adf4570.jpg
Sponsor
dec123ua
DD-WRT Novice


Joined: 09 Jan 2010
Posts: 45
Location: Киев

PostPosted: Wed Mar 10, 2010 20:56    Post subject: Reply with quote
смотрим здесь: http://wiki.openwrt.org/inbox/alicegate_voip2_plus#jtag
_________________
Ремонт, перепрошивка и восстановление Wi-Fi роутеров. Ремонт iPhone и КПК в Киеве
goleg1972
DD-WRT Novice


Joined: 24 Dec 2010
Posts: 5

PostPosted: Fri Dec 24, 2010 11:58    Post subject: Reply with quote
Удалось ли поднять девайс и какой прогой? Так-как у меня такой же модем только
CPU - BCM6348SKFBG
Flash - MX MO63009 29LV640MTTC-900
ROM - IC42S16400-7TG - две штуки
пробовал проги tjtag, tjtag3.0.1, tjtag3.0.2, tjtagv2, wrt54g, - процесор опредиляют все кроме tjtag3.0.2 а флеш ни одна не видит. Во всех етих прогах нет поддержки етой памяти. Может кто подскажет какую программу использовать для JTAG
goleg1972
DD-WRT Novice


Joined: 24 Dec 2010
Posts: 5

PostPosted: Fri Dec 24, 2010 12:10    Post subject: Reply with quote
Прошу прощения может кому нужно содержание флешки
http://darviniano.eu/anselmo/files/hacking_routers/alice_gate/
goleg1972
DD-WRT Novice


Joined: 24 Dec 2010
Posts: 5

PostPosted: Mon Dec 27, 2010 12:21    Post subject: Reply with quote
Может кто подскажет по результату команды probeonly

D:\>tjtagv2 -probeonly

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000110001101001000000101111111 (0634817F)
*** Found a Broadcom BCM6348 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ... Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


D:\>

Смущает "Halting Processor ... <Processor Entered Debug Mode!> ... Done"
По идее должно бить "Halting Processor ... <Processor did NOT Enter Debug Mode!> ... Done
goleg1972
DD-WRT Novice


Joined: 24 Dec 2010
Posts: 5

PostPosted: Thu Jan 20, 2011 9:39    Post subject: Reply with quote
Подошла программа brjtag 1.9m - проблем правда подобавилось. Залил вот это: http://darviniano.eu/anselmo/files/hacking_routers/alice_gate/firmware_originale/cfe_alice_gate_AGPF_4.3.2_cfe-AGPF-10-0007.bin
И соответственно теперь флешка не опредиляется (и подури не снял дампа)

D:\>brjtag -flash:cfe

===============================================
Broadcom EJTAG Debrick Utility v1.9m-hugebird
===============================================

Probing bus ... Done

Detected IR Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101001000000101111111 (0634817F)
*** Found a Broadcom manufactured BCM6348 REV 01 CPU ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address...
Read MPI register value : 1F00000B
MPI register show Flash Access Base Addr : 1F000000

Probing Flash at Address: 0x1F000000 ...
Detected Chip ID (VenID:DevID = C27E : 1001)
*** Found a CFI Compatiable Flash Chip from Macronix

- Flash Chip Window Start .... : 1F000000
- Flash Chip Window Length ... : 00800000
- Selected Area Start ........ : 1F000000
- Selected Area Length ....... : 00040000

*** You Selected to Flash the CFE.BIN ***

а сейчас

D:\>brjtag -probeonly

===============================================
Broadcom EJTAG Debrick Utility v1.9m-hugebird
===============================================

Probing bus ... Done

Detected IR Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101001000000101111111 (0634817F)
*** Found a Broadcom manufactured BCM6348 REV 01 CPU ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address...
Read MPI register value : 00000000
MPI register show Flash Access Base Addr : 00000000

Probing Flash at Address: 0x00000000 ...
Detected Chip ID (VenID:DevID = 0000 : 0000)
*** Unknown or NO Flash Chip Detected ***


*** REQUESTED OPERATION IS COMPLETE ***

Большая просьба - подскажите полалуста как заставить программу видить флеш.
- может у когото есть полный дамп или хотябы CFE.bin (boot)
goleg1972
DD-WRT Novice


Joined: 24 Dec 2010
Posts: 5

PostPosted: Tue Feb 01, 2011 7:57    Post subject: Reply with quote
Помогли следующие сайты:
http://beghiero.myftp.org/firmware/roleo/pirelli_alice_gate_2_plus_wifi(AGA)/fw/beta/
http://www.mail-archive.com/wireless@ml.ninux.org/msg01713.html
http://www.ilpuntotecnicoeadsl.com/forum/index.php/topic,3781.1560.html
http://www.piccato.it/wikies/openwgate/backup_e_restore
http://rapidshare.com/#!download|46l35|45790707|AGW2-PLUS_flash_image_8MB.w|8375
http://www.hwupgrade.it/forum/showthread.php?t=1489038
http://fs5.www.ex.ua/get/a09e285fc5f055c3c7976f5770384fd9/150602/bcm963xx_4.02L.01_consumer_release.tar.gz
http://www.pirellibroadband.com/en_IT/browser/attachments/alice/Alice_AGPF_4.3.5-gpl.tar.gz
http://www.usr-apr.com/support/s-prod-template.asp?loc=apnz&prod=9108
http://downloads.openwrt.org/snapshots/trunk/brcm63xx/
http://beghiero.myftp.org/modifiche/index.php
http://www.ilpuntotecnicoeadsl.com/forum/index.php/topic,4176.15.html
http://ciclamab.altervista.org/hard.php?lan=en
http://www.ilpuntotecnicoeadsl.com/forum/index.php/topic,4176.60.html
http://repofulm.dyndns.org/index.php?dir=merlino60/software%20jtag/debrik%20windows%20jtag/
http://repofulm.dyndns.org/
http://repofulm.dyndns.org/index.php?dir=roleo/public/pirelli_alice_gate_2_plus_wifi/

Тоесть есть специальная прога под ети модемы.
maddokz
DD-WRT Novice


Joined: 31 Jan 2012
Posts: 1

PostPosted: Tue Jan 31, 2012 19:40    Post subject: Reply with quote
появился данный девайс, может кто подскажет чем его прошить, желательно чтобы с рус.языком...
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Оборудование на основе Broadcom All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum