小荷

生活记录

0%

发表于 更新于

路由器主板正面

路由器主板背面

某小黄鱼上15元捡来的路由器，必虎路由器DC。

硬件配置

  • SOC：MT7628NN
  • FLASH：16MB
  • RAM：64M
  • 网口：3个
  • 天线：2个
  • USB：无
  • 供电：5V1A，圆口
  • 指示灯：蓝/紫色
  • 特色：磁铁

硬件上没啥好说的，主板与外壳没有任何连接方便拆卸，直接拿来刷机。

刷机工作

原厂固件自动开启收费共享WIFI无法修改，而且已经绑定了其他人手机号，必须刷机。原厂固件默认开启SSH，但是无法登录，用编程器备份固件后刷breed然后刷第三方固件。

编程器

diybcq.com 设计出品的CH341A v1.5 （论坛有网店），上手相当不错，配合SOP8烧录夹（带转接板）顺利读写闪存。注意：我操作的闪存是Winbond 25Q128JVSQ，按照软件说明应该使用3.3V电压操作，但实测此时路由器会启动，结果是无法识别读写闪存。经测试，电压设置为2.5V可正常读写闪存。

转接板，夹子

没有热风枪 + 怕麻烦，遂尝试了免拆机方案，CH341A配合最普通的SOP8烧录夹和转接板就行了。在免拆机条件下由于外围电路会有干扰，所以不一定能够成功读写闪存。

UART-USB？

原厂固件的UART也加密了，需要身份验证，无法直接操作。另外CH341A提供了TTL功能，不需要另外购买。

附上原厂固件启动日志：

点击展开查看 
[BEGIN] 2021/3/4 21:11:07
[040±°08][0′0±0C0E]
                   DDR Ca먢ratiDQS r䥠= 00°08788

ӭBoot ±.1.3 ¨Feb 2· 2017 - 14:21o39)

Boa2¤: ᫩үC DRAMo  64 MB
1ÿt￥Αɕnew interface driver usbfs
[    1.272000] usbcore: registered new interface driver hub
[    1.276000] usbcore: registered new device driver usb
[    1.280000] bhu_tc_attach : end, g_bhu_tc_salt=-1536776869
[    1.284000] Switching to clocksource MIPS
[    1.288000] NET: Registered protocol family 2
[    1.296000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    1.300000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    1.308000] TCP: Hash tables configured (established 512 bind 512)
[    1.316000] TCP: reno registered
[    1.316000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    1.324000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    1.332000] NET: Registered protocol family 1
[    1.336000] MTK/Ralink EHCI/OHCI init.
[    1.340000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.348000] jffs2: version 2.2. (NAND) (SUMMARY)  (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    1.360000] msgmni has been set to 118
[    1.364000] io scheduler noop registered (default)
[    1.376000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    1.384000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
[    1.392000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
[    1.400000] led=43, on=1, off=5, blinks=1, rest=0, times=1
[    1.404000] Ralink gpio driver initialized
[    1.408000] flash manufacture id: ef, device id 40 18
[    1.416000] W25Q128BV(ef 40180000) (16384 Kbytes)
[    1.420000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
[    1.428000] Creating 8 MTD partitions on "raspi":
[    1.432000] 0x000000000000-0x000001000000 : "ALL"
[    1.440000] 0x000000000000-0x000000040000 : "Bootloader"
[    1.448000] 0x000000040000-0x000000050000 : "Config"
[    1.452000] 0x000000050000-0x000000060000 : "Factory"
[    1.460000] 0x000000060000-0x000000de0000 : "firmware"
[    1.468000] 0x0000001a398a-0x000000de0000 : "rootfs"
[    1.472000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    1.488000] mtd: partition "rootfs_data" created automatically, ofs=0x940000, len=0x4a0000
[    1.496000] 0x000000940000-0x000000de0000 : "rootfs_data"
[    1.504000] 0x000000de0000-0x000000fe0000 : "user"
[    1.508000] 0x000000fe0000-0x000000ff0000 : "cfg"
[    1.516000] 0x000000ff0000-0x000001000000 : "oem"
[    1.524000] tun: Universal TUN/TAP device driver, 1.6
[    1.528000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    1.532000] GMAC1_MAC_ADRH -- : 0x00008482
[    1.540000] GMAC1_MAC_ADRL -- : 0xf438c014
[    1.544000] Ralink APSoC Ethernet Driver Initilization. v3.1  512 rx/tx descriptors allocated, mtu = 1500!
[    1.552000] GMAC1_MAC_ADRH -- : 0x00008482
[    1.556000] GMAC1_MAC_ADRL -- : 0xf438c014
[    1.560000] PROC INIT OK!
[    1.564000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.572000] ehci-pci: EHCI PCI platform driver
[    1.576000] ehci-platform: EHCI generic platform driver
[    1.600000] ******MT7628 mtk phy
[    1.604000] *****run project phy.
[    1.616000] FM_OUT value: u4FmOut = 0(0x00000000)
[    1.628000] FM_OUT value: u4FmOut = 124(0x0000007C)
[    1.632000] FM detection done! loop = 1
[    1.644000] SR calibration value u1SrCalVal = 7
[    1.648000] *********Execute mt7628_phy_init!!
[    1.652000] ehci-platform ehci-platform: EHCI Host Controller
[    1.656000] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
[    1.664000] ehci-platform ehci-platform: irq 18, io mem 0x101c0000
[    1.684000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00
[    1.688000] hub 1-0:1.0: USB hub found
[    1.692000] hub 1-0:1.0: 1 port detected
[    1.696000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    1.724000] *********Execute mt7628_phy_init!!
[    1.728000] ohci-platform ohci-platform: Generic Platform OHCI Controller
[    1.736000] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2
[    1.744000] ohci-platform ohci-platform: irq 18, io mem 0x101c1000
[    1.812000] hub 2-0:1.0: USB hub found
[    1.816000] hub 2-0:1.0: 1 port detected
[    1.820000] Ralink APSoC Hardware Watchdog Timer
[    1.824000] gre: GRE over IPv4 demultiplexor driver
[    1.832000] TCP: cubic registered
[    1.832000] NET: Registered protocol family 10
[    1.840000] NET: Registered protocol family 17
[    1.844000] Bridge firewalling registered
[    1.848000] 8021q: 802.1Q VLAN Support v1.8
[    1.852000] registered taskstats version 1
[    1.864000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    1.872000] Freeing unused kernel memory: 220K (80389000 - 803c0000)
procd: Console i[    2.556000] Started WatchDog Timer.
s alive
procd: - watchdog -
[    3.904000] SCSI subsystem initialized
[    3.916000] usbcore: registered new interface driver usb-storage
procd: - preinit -
[    5.104000] jffs2: notice: (239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 53 of xdatum (0 unchecked, 53 orphan) and 53 of xref (0 dead, 53 orphan) found.
[    5.120000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    5.128000] block: unable to load configuration (fstab: Entry not found)
[    5.136000] block: attempting to load /tmp/jffs_cfg/etc/config/fstab
[    5.140000] block: unable to load configuration (fstab: Entry not found)
[    5.148000] block: attempting to load /etc/config/fstab
[    5.288000] block: extroot: not configured
jffs2 is ready
No jffs2 marker was found
[    5.452000] jffs2: notice: (236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 53 of xdatum (0 unchecked, 53 orphan) and 53 of xref (0 dead, 53 orphan) found.
[    5.836000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[    5.844000] block: unable to load configuration (fstab: Entry not found)
[    5.848000] block: attempting to load /tmp/jffs_cfg/etc/config/fstab
[    5.856000] block: unable to load configuration (fstab: Entry not found)
[    5.864000] block: attempting to load /etc/config/fstab
[    5.872000] block: extroot: not configured
switching to overlay
procd: - early -
procd: - watchdog -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
[    7.052000] NTFS driver 2.1.30 [Flags: R/O MODULE].
[    7.092000] Initializing XFRM netlink socket
[    7.100000] NET: Registered protocol family 15
[    7.156000] nf_conntrack version 0.5.0 (954 buckets, 3816 max)
[    7.164000] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    7.240000] Ebtables v2.0 registered
[    7.248000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    7.252000] Type=Linux
[    7.276000] rdm_major = 253
[    7.300000] xt_time: kernel timezone is -0000
[    7.316000] PPP generic driver version 2.4.2
[    7.324000] NET: Registered protocol family 24
[    7.384000] bhu_stat_register_netlink: family id is 19
[    7.388000] BHUGenNetlink: bhu_gen_nl_register_netlink
[    7.392000] bhu_gen_nl_register_netlink: succeed to register bhu gen netlink. family id is 20
[    7.416000] BHUGenNetlink: bhu_gen_nl_register_netlink
[    7.420000] bhu_gen_nl_register_netlink: BHU gen netlink has been registered. Family id is 20
[    7.444000] FFFFFF84:FFFFFF82:FFFFFFF4:38:FFFFFFC0:14
[    7.448000] Raeth v3.1 (Tasklet,SkbRecycle)
[    7.452000]
[    7.452000] phy_tx_ring = 0x0328a000, tx_ring = 0xa328a000
[    7.460000]
[    7.460000] phy_rx_ring0 = 0x0328c000, rx_ring0 = 0xa328c000
[    7.484000] GMAC1_MAC_ADRH -- : 0x00008482
[    7.488000] GMAC1_MAC_ADRL -- : 0xf438c014
[    7.492000] RT305x_ESW: Link Status Changed
[    7.492000] [bhu_esw_link_status_change][2061]: stat[0], stat_curr[81808100]
[    7.492000] BHU ESW LAN link change
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1002
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=70, value=ffff417e
switch reg write offset=74, value=ffffffff
done.
Setting up networking on loopback device:
this file has been obseleted. please call "/sbin/block mount" directly
block: Fall back on RO mount. Permission denied.
block: /dev/mtdblock6 is already mounted
[    8.180000] jffs2: notice: (641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
/etc/rc.common: line 1: config_load: not found
block: /dev/mtdblock5 is already mounted
block: /dev/mtdblock6 is already mounted
block: /dev/mtdblock7 is already mounted
[    8.980000] device eth5T entered promiscuous mode
[    9.480000]
[    9.480000]
[    9.480000] === pAd = c078b000, size = 845504 ===
[    9.480000]
[    9.488000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
[    9.496000] <-- RTMPAllocAdapterBlock, Status=0
[    9.500000] RtmpChipOpsHook(492): Not support for HIF_MT yet!
[    9.508000] mt7628_init()-->
[    9.508000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
[    9.516000] e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(63888)
[    9.520000] mt_bcn_buf_init(218): Not support for HIF_MT yet!
[    9.528000] <--mt7628_init()
[    9.528000] bhu_stainfo_register_callback: register callback successed
[    9.540000] BHUGenNetlink: bhu_gen_nl_register_netlink
[    9.544000] bhu_gen_nl_register_netlink: BHU gen netlink has been registered. Family id is 20
[    9.568000] TX_BCN DESC a29d8000 size = 320
[    9.572000] RX[0] DESC a29db000 size = 1024
[    9.576000] RX[1] DESC a29dc000 size = 1024
[    9.608000] cfg_mode=9
[    9.612000] cfg_mode=9
[    9.616000] wmode_band_equal(): Band Equal!
[    9.620000] AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
[    9.632000] APSDCapable[0]=1
[    9.636000] APSDCapable[1]=1
[    9.636000] APSDCapable[2]=1
[    9.640000] APSDCapable[3]=1
[    9.644000] APSDCapable[4]=1
[    9.644000] APSDCapable[5]=1
[    9.648000] APSDCapable[6]=1
[    9.652000] APSDCapable[7]=1
[    9.656000] APSDCapable[8]=1
[    9.656000] APSDCapable[9]=1
[    9.660000] APSDCapable[10]=1
[    9.664000] APSDCapable[11]=1
[    9.668000] APSDCapable[12]=1
[    9.668000] APSDCapable[13]=1
[    9.672000] APSDCapable[14]=1
[    9.676000] APSDCapable[15]=1
[    9.708000] load fw image from fw_header_image
[    9.712000] AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
[    9.720000] FW Version:20151201
[    9.720000] FW Build Date:20151201183641
[    9.724000] CmdAddressLenReq:(ret = 0)
[    9.732000] CmdFwStartReq: override = 1, address = 1048576
[    9.736000] CmdStartDLRsp: WiFI FW Download Success
[    9.740000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
[    9.748000] efuse_probe: efuse = 10000012
[    9.752000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=4
[    9.756000] RtmpEepromGetDefault::e2p_dafault=2
[    9.760000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
[    9.768000] NVM is FLASH mode
[    9.772000] 1. Phy Mode = 14
[    9.936000] Country Region from e2p = ffff
[    9.940000] tssi_1_target_pwr_g_band = 36
[    9.944000] 2. Phy Mode = 14
[    9.944000] 3. Phy Mode = 14
[    9.948000] NICInitPwrPinCfg(11): Not support for HIF_MT yet!
[    9.956000] NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
[    9.964000] mt_mac_init()-->
[    9.964000] MtAsicInitMac()-->
[    9.968000] mt7628_init_mac_cr()-->
[    9.972000] MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
[    9.980000] <--mt_mac_init()
[    9.980000]         WTBL Segment 1 info:
[    9.984000]                 MemBaseAddr/FID:0x28000/0
[    9.988000]                 EntrySize/Cnt:32/128
[    9.992000]         WTBL Segment 2 info:
[    9.996000]                 MemBaseAddr/FID:0x40000/0
[   10.000000]                 EntrySize/Cnt:64/128
[   10.004000]         WTBL Segment 3 info:
[   10.008000]                 MemBaseAddr/FID:0x42000/64
[   10.012000]                 EntrySize/Cnt:64/128
[   10.012000]         WTBL Segment 4 info:
[   10.016000]                 MemBaseAddr/FID:0x44000/128
[   10.020000]                 EntrySize/Cnt:32/128
[   10.024000] AntCfgInit(2947): Not support for HIF_MT yet!
[   10.032000] MCS Set = ff ff 00 00 00
[   10.032000] MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
[   10.540000] RT305x_ESW: Link Status Changed
[   10.540000] [bhu_esw_link_status_change][2061]: stat[81808100], stat_curr[a190a110]
[   10.540000] BHU ESW LAN link change
[   10.600000] CmdSlotTimeSet:(ret = 0)
[   12.696000] =====================================================
[   12.700000] Channel 1 : Dirty = 258, False CCA = 0, Busy Time = 5134, Skip Channel = FALSE
[   12.708000] Channel 2 : Dirty = 152, False CCA = 0, Busy Time = 6000, Skip Channel = FALSE
[   12.716000] Channel 3 : Dirty = 222, False CCA = 0, Busy Time = 7537, Skip Channel = FALSE
[   12.724000] Channel 4 : Dirty = 184, False CCA = 0, Busy Time = 7006, Skip Channel = FALSE
[   12.732000] Channel 5 : Dirty = 244, False CCA = 0, Busy Time = 8647, Skip Channel = FALSE
[   12.744000] Channel 6 : Dirty = 144, False CCA = 0, Busy Time = 12316, Skip Channel = FALSE
[   12.752000] Channel 7 : Dirty = 356, False CCA = 0, Busy Time = 5557, Skip Channel = FALSE
[   12.760000] Channel 8 : Dirty = 260, False CCA = 0, Busy Time = 5268, Skip Channel = FALSE
[   12.768000] Channel 9 : Dirty = 310, False CCA = 0, Busy Time = 15987, Skip Channel = FALSE
[   12.776000] Channel 10 : Dirty = 268, False CCA = 0, Busy Time = 11282, Skip Channel = FALSE
[   12.784000] Channel 11 : Dirty = 490, False CCA = 0, Busy Time = 10399, Skip Channel = FALSE
[   12.792000] Channel 12 : Dirty = 254, False CCA = 0, Busy Time = 6015, Skip Channel = TRUE
[   12.800000] Channel 13 : Dirty = 192, False CCA = 0, Busy Time = 3918, Skip Channel = TRUE
[   12.808000] =====================================================
[   12.816000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   12.824000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   12.828000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   12.836000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   12.840000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   12.848000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   12.876000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   12.880000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   12.888000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   12.892000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   12.900000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   12.908000] Main bssid = 84:82:f4:38:c0:15
[   12.912000] <==== rt28xx_init, Status=0
[   12.920000] BHUGenNetlink: bhu_gen_nl_register_netlink
[   12.924000] bhu_gen_nl_register_netlink: BHU gen netlink has been registered. Family id is 20
[   12.948000] BHUGenNetlink: bhu_gen_nl_register_netlink
[   12.952000] bhu_gen_nl_register_netlink: BHU gen netlink has been registered. Family id is 20
[   12.972000] BHUGenNetlink: bhu_gen_nl_register_netlink
[   12.976000] bhu_gen_nl_register_netlink: BHU gen netlink has been registered. Family id is 20
[   12.984000] @@@ ed_monitor_exit : ===>
[   12.988000] @@@ ed_monitor_exit : <===
[   12.992000] mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f
[   13.000000] WiFi Startup Cost (wlan0): 3.432s
[   15.496000] led=43, on=1, off=5, blinks=1, rest=0, times=1
[main] >>> Init dispather success!
BHU Software Version: AP902P07V1.6.0Build798_TU 2017-11-03-09:13 Revision: 798
procd: - init complete -
kill: you need to specify whom to kill
Mongoose web server v.3.9 started on port(s) 80 with web root [/usr/share/www]
main, 36, svn:798, version:10015, time:[Thu Nov  2 20:56:08 CST 2017]
wait for pa data initpa_data_init done[   19.788000] bhuhttp_L2_init: register nl family ok
[   19.796000] user space pid:799
[http_url_start_timer][269] http url age timer start..
[   20.036000] cfg_mode=9
[   20.036000] wmode_band_equal(): Band Equal!
[   20.044000] AddTxSType: already registered TxSType (PID = 32, Format = 0
kmod: module is not loaded
[   20.120000] cfg_mode=9
[   20.124000] wmode_band_equal(): Band Equal!
[   20.128000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   20.164000] cfg_mode=9
[   20.164000] wmode_band_equal(): Band Equal!
[   20.168000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   20.216000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   20.224000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   20.228000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   20.236000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   20.240000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   20.248000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   20.252000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   20.260000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   20.288000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   20.292000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   20.304000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   20.308000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   20.316000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   20.324000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   20.332000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   20.336000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   20.344000] Main bssid = 84:82:f4:38:c0:15
[   20.376000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   20.380000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   20.388000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   20.392000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   20.400000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   20.404000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   20.412000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   20.416000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   20.456000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   20.460000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   20.468000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   20.472000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   20.480000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   20.488000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   20.496000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   20.500000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   20.508000] Main bssid = 84:82:f4:38:c0:15
[   20.572000] device eth0 entered promiscuous mode
[   20.580000] device wlan0 entered promiscuous mode
[   20.592000] device wlan2 entered promiscuous mode
[   20.600000] device wlan3 entered promiscuous mode
killall: dropbear: no process killed
kill: you need to specify whom to kill
[   21.972000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   21.980000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   21.984000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   21.992000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   21.996000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   22.004000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   22.012000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   22.016000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   22.044000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   22.052000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   22.056000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   22.064000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   22.072000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   22.080000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   22.084000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   22.092000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTa￠￥μ&#189;&#1425;= 0xf0
[   22.096000] Main bssid = 84:82:f4:38:c0:15
[   22.104000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   22.112000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   22.116000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   22.124000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   22.128000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   22.136000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   22.144000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   22.148000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   22.176000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   22.180000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   22.188000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   22.196000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   22.200000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   22.208000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   22.216000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   22.224000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   22.228000] Main bssid = 84:82:f4:38:c0:15
[   22.244000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   22.252000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   22.256000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   22.264000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   22.268000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   22.276000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   22.280000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   22.288000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   22.316000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   22.324000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   22.328000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   22.336000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   22.344000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   22.352000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   22.356000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   22.364000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   22.372000] Main bssid = 84:82:f4:38:c0:15
[   23.416000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   23.424000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   23.428000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   23.436000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   23.440000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   23.448000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   23.452000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   23.460000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   23.488000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   23.492000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   23.500000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   23.504000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   23.512000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   23.520000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   23.528000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   23.532000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   23.540000] Main bssid = 84:82:f4:38:c0:15
[   23.560000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   23.564000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   23.572000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   23.576000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   23.584000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   23.588000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   23.596000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   23.600000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   23.628000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   23.636000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   23.640000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   23.648000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   23.652000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   23.660000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   23.668000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   23.676000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   23.680000] Main bssid = 84:82:f4:38:c0:15
[   24.724000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   24.732000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   24.736000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   24.744000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   24.748000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   24.756000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   24.760000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   24.768000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   24.796000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   24.800000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   24.808000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   24.812000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   24.820000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   24.828000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   24.836000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   24.840000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   24.848000] Main bssid = 84:82:f4:38:c0:15
[   24.868000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
[   24.872000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   24.880000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   24.884000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   24.892000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   24.896000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   24.904000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   24.908000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   24.936000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   24.944000] CmdLoadDPDDataFromFlash: Channel = 6, DoReload = 0
[   24.948000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   24.956000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[   24.964000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   24.972000] AddTxSType: already registered TxSType (PID = 6, Format = 0
[   24.976000] AddTxSType: already registered TxSType (PID = 8, Format = 0
[   24.984000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   24.988000] Main bssid = 84:82:f4:38:c0:15
iptables: No chain/target/match by that name.
MASQUERADE  all opt -- in * out eth1  0.0.0.0/0  -> 0.0.0.0/0  [24 bytes of unknown target data]
iptables: No chain/target/match by that name.
udhcpc (v1.22.1) started
route: SIOCDELRT: No such process
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
[   27.408000] br-lan: port 2(wlan0) entered forwarding state
[   27.412000] br-lan: port 2(wlan0) entered forwarding state
[   27.420000] br-lan: port 1(eth0) entered forwarding state
[   27.424000] br-lan: port 1(eth0) entered forwarding state
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
MASQUERADE  all opt -- in * out [   27.688000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
eth1  0.0.0.0/0 [   27.700000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
-> 0.0.0.0/0  [[   27.704000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
24 bytes of unknown target data]
MASQUERADE  all opt -- in * out eth1  192.168.62.0/24  -> 0.0.0.0/0  [24 bytes of unknown target data]
[   27.936000] bhu_tc_send_q_tx: send skb failed, err=2
[   28.032000] bhu_tc_send_q_tx: send skb failed, err=2
[   28.240000] tx_kickout_fail_count = 0
[   28.244000] tx_timeout_fail_count = 0
[   28.244000] rx_receive_fail_count = 0
[   28.248000] alloc_cmd_msg = 207
[   28.252000] free_cmd_msg = 207
[   28.260000] br-lan: port 2(wlan0) entered disabled state
iptables: No chain/target/match by that name.
[   28.308000] TX_BCN DESC a29d8000 size = 320
[   28.312000] RX[0] DESC a29db000 size = 1024
[   28.316000] RX[1] DESC a29dc000 size = 1024
[   28.332000] cfg_mode=9
[   28.332000] cfg_mode=9
[   28.336000] wmode_band_equal(): Band Equal!
[   28.340000] AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
[   28.352000] APSDCapable[0]=1
[   28.356000] APSDCapable[1]=1
[   28.360000] APSDCapable[2]=1
[   28.360000] APSDCapable[3]=1
[   28.364000] APSDCapable[4]=1
[   28.368000] APSDCapable[5]=1
[   28.368000] APSDCapable[6]=1
[   28.372000] APSDCapable[7]=1
[   28.376000] APSDCapable[8]=1
[   28.380000] APSDCapable[9]=1
[   28.380000] APSDCapable[10]=1
[   28.384000] APSDCapable[11]=1
[   28.388000] APSDCapable[12]=1
[   28.392000] APSDCapable[13]=1
[   28.392000] APSDCapable[14]=1
[   28.396000] APSDCapable[15]=1
[   28.428000] load fw image from fw_header_image
[   28.432000] AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(63888)
[   28.440000] FW Version:20151201
[   28.444000] FW Build Date:20151201183641
[   28.448000] CmdReStartDLRsp: WiFI FW Download Success
[   28.452000] CmdAddressLenReq:(ret = 0)
[   28.456000] CmdFwStartReq: override = 1, address = 1048576
[   28.464000] CmdStartDLRsp: WiFI FW Download Success
[   28.468000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
[   28.472000] efuse_probe: efuse = 10000012
[   28.476000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
[   28.484000] RtmpEepromGetDefault::e2p_dafault=2
[   28.488000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
[   28.496000] NVM is FLASH mode
[   28.500000] 1. Phy Mode = 14
[   28.660000] Country Region from e2p = ffff
[   28.668000] tssi_1_target_pwr_g_band = 36
[   28.672000] 2. Phy Mode = 14
[   28.672000] 3. Phy Mode = 14
[   28.676000] NICInitPwrPinCfg(11): Not support for HIF_MT yet!
[   28.680000] NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
[   28.688000] mt_mac_init()-->
[   28.692000] MtAsicInitMac()-->
[   28.696000] mt7628_init_mac_cr()-->
[   28.700000] MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
[   28.704000] <--mt_mac_init()
[   28.708000]         WTBL Segment 1 info:
[   28.712000]                 MemBaseAddr/FID:0x28000/0
[   28.716000]                 EntrySize/Cnt:32/128
[   28.720000]         WTBL Segment 2 info:
[   28.724000]                 MemBaseAddr/FID:0x40000/0
[   28.728000]                 EntrySize/Cnt:64/128
[   28.732000]         WTBL Segment 3 info:
[   28.732000]                 MemBaseAddr/FID:0x42000/64
[   28.736000]                 EntrySize/Cnt:64/128
[   28.740000]         WTBL Segment 4 info:
[   28.744000]                 MemBaseAddr/FID:0x44000/128
[   28.748000]                 EntrySize/Cnt:32/128
[   28.752000] AntCfgInit(2947): Not support for HIF_MT yet!
[   28.756000] MCS Set = ff ff 00 00 00
[   28.760000] MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
[   31.416000] =====================================================
[   31.420000] Channel 1 : Dirty = 254, False CCA = 0, Busy Time = 4969, Skip Channel = FALSE
[   31.428000] Channel 2 : Dirty = 168, False CCA = 0, Busy Time = 4130, Skip Channel = FALSE
[   31.436000] Channel 3 : Dirty = 208, False CCA = 0, Busy Time = 3210, Skip Channel = FALSE
[   31.444000] Channel 4 : Dirty = 250, False CCA = 0, Busy Time = 3656, Skip Channel = FALSE
[   31.452000] Channel 5 : Dirty = 280, False CCA = 0, Busy Time = 8862, Skip Channel = FALSE
[   31.464000] Channel 6 : Dirty = 218, False CCA = 0, Busy Time = 6476, Skip Channel = FALSE
[   31.472000] Channel 7 : Dirty = 432, False CCA = 0, Busy Time = 6117, Skip Channel = FALSE
[   31.480000] Channel 8 : Dirty = 336, False CCA = 0, Busy Time = 5338, Skip Channel = FALSE
[   31.488000] Channel 9 : Dirty = 366, False CCA = 0, Busy Time = 9826, Skip Channel = FALSE
[   31.496000] Channel 10 : Dirty = 324, False CCA = 0, Busy Time = 4860, Skip Channel = FALSE
[   31.504000] Channel 11 : Dirty = 598, False CCA = 0, Busy Time = 9220, Skip Channel = FALSE
[   31.512000] Channel 12 : Dirty = 248, False CCA = 0, Busy Time = 6747, Skip Channel = TRUE
[   31.520000] Channel 13 : Dirty = 216, False CCA = 0, Busy Time = 7909, Skip Channel = TRUE
[   31.528000] =====================================================
[   31.536000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[   31.544000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[   31.548000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[   31.556000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[   31.560000] MtAsicSetRalinkBurstMode(3047): Not support for HIF_MT yet!
[   31.568000] MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
[   31.596000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[   31.600000] CmdLoadDPDDataFromFlash: Channel = 2, DoReload = 0
[   31.608000] MtAsicSetTxPreamble(3026): Not support for HIF_MT yet!
[   31.616000] The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
[   31.624000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[   31.628000] Main bssid = 84:82:f4:38:c0:15
[   31.632000] <==== rt28xx_init, Status=0
[   31.636000] @@@ ed_monitor_exit : ===>
[   31.640000] @@@ ed_monitor_exit : <===
[   31.644000] mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f
[   31.652000] WiFi Startup Cost (wlan0): 3.344s
[   31.656000] br-lan: port 2(wlan0) entered forwarding state
[   31.660000] br-lan: port 2(wlan0) entered forwarding state
iptables: No chain/target/match by that name.
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: No such file or directory)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
serverctl: BHU Tunnel probably not started (Error: Connection refused)
[   33.928000] led=43, on=0, off=1, blinks=0, rest=0, times=0
[   33.984000] led=42, on=2, off=5, blinks=1, rest=0, times=1
wandetect: eth1 is running
wandetect: start pppoe_discovery_main thread ok.
wandetect: start dhcp detect thread ok.
udhcpc (v1.22.1) started
wlan_ol_sta_online_proc: add sta 74:97:81:ab:06:dd, count 1
assoced:74:97:81:ab:06:dd
[   35.040000] led=43, on=2, off=5, blinks=1, rest=0, times=1
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
No lease, failing
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect: Timeout waiting for PADO packets
wandetect:
HOSTNAME login:

[END] 2021/3/4 21:13:04

breed

使用恩山论坛的breed-mt7688-reset38.bin。不能正确识别内存大小，此外没什么问题。这个路由器内存为一片EM68B16CWQH-25H，64MB，breed中识别为128MB，可以在编译openwrt前修改dts设置内存为64MB。

刷回原厂固件

breed中刷入一次刚才导出的编程器固件，此步骤作用是恢复mac地址与eeprom。

openwrt编译

使用lean/lede代码，选择MT76X8，GL.iNet VIXMINI配置。GL.iNet VIXMINI配置为MT7628NN 8+64，无USB，与必虎mini接近： https://www.gl-inet.cn/products/vixmini/

修改 lede/target/linux/ramips/mt76x8/base-files/etc/board.d/02_network

glinet,microuter-n300|\
glinet,vixmini)
    ucidef_add_switch "switch0" \
        "0:lan" "6@eth0"
    ;;

修改为

glinet,microuter-n300|\
glinet,vixmini)
    ucidef_add_switch "switch0" \
        "4:lan" "2:lan" "0:wan" "6@eth0"
    ;;

因为vixmini只有一个网口，我们需要自行添加2个网口，注意对应交换机的2和4。注意MT7628只有一个网卡（interface），内置5口交换机，通过VLAN划分WAN与LAN，WAN一般对应0号口，LAN需要自己测试，本例中为2和4。

修改lede/target/linux/ramips/image/mt76x8.mk

define Device/glinet_vixmini
  IMAGE_SIZE := 7872k
  DEVICE_VENDOR := GL.iNet
  DEVICE_MODEL := VIXMINI
  SUPPORTED_DEVICES += vixmini
endef
TARGET_DEVICES += glinet_vixmini

修改为

define Device/glinet_vixmini
  IMAGE_SIZE := 16064k
  DEVICE_VENDOR := GL.iNet
  DEVICE_MODEL := VIXMINI
  SUPPORTED_DEVICES += vixmini
endef
TARGET_DEVICES += glinet_vixmini

VIXMINI闪存8M，不如此修改无法生成8M~16M大小的固件。

修改lede/target/linux/ramips/dts/mt7628an_glinet_vixmini.dts

// SPDX-License-Identifier: GPL-2.0-or-later OR MIT
/dts-v1/;

#include "mt7628an_glinet_vixmini_microuter.dtsi"

/ {
    compatible = "glinet,vixmini", "mediatek,mt7628an-soc";
    model = "GL.iNet VIXMINI";

    memory@0 {
        device_type = "memory";
        reg = <0x0 0x4000000>;
    };
};

&led_power_blue {
    label = "vixmini:blue:power";
};

&led_wlan_white {
    label = "vixmini:white:wlan";
};

&firmware_part {
        reg = <0x50000 0xfb0000>;
};

其中，

memory@0 {
    device_type = "memory";
    reg = <0x0 0x4000000>;
    };

这一段是自己加的，本来内存容量应该由BootLoader获取传递给openwrt，不过由于breed识别错误，所以自己手动指定参数。

经过以上修改后就可以编译固件了，然而由于MT7628开源WIFI驱动贫弱的表现，你很可能会不满意，如此可以继续阅读：

刷GL-iNet GL-MT300N-V2固件

在GL-iNet官网下载:http://download.gl-inet.com/firmware/

GL-iNet应该是主打外贸的国内路由器厂商，路由器固件均基于openwrt，包含MTK私有驱动，WIFI表现良好，实测穿2道非承重墙非常轻松。

GL-MT300N-V2固件初始WIFI密码goodlife，管理页面登录密码admin。首次设置需要通过WIFI连接，通过SSH访问修改/etc/config/network，将vlan为1的交换机端口修改成以下的样子：

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '2 4 6t'

对应2和4。之后执行/etc/init.d/network restartLAN口就可用了。

下步折腾计划

恩山上看见有人通过刮U露出针脚的方式自己加焊了USB接口……查了下资料MT7628NN的Pin61，62分别对应USB_DP和USB_DM，如果这两个针脚在主板上已经引出就简单了，有空时拿万用表测下。

发表于 更新于

在/usr/share/www中发现debug.html页面，访问http://192.168.62.1/debug.html :

可用命令

webportal_user_status
pppstatus
dhcpcstatus
dhcpstalist
dhcpdetect
wlanstatus
wlanscan
wlankickoff
sysinfo
diskinfo
sysdebug
syscap
hwinfo
delayreboot
sta_stats
syslice
upnp_nat
if_stat
arp
route
reboot
save
mode
restore_factory
net_speed_test
wandetect
dpi
user_stat
if_rate_info
firmware_upgrade
wifi_schedule
data_stats
pppoe_pass_hack
clear_reset_flag

sysinfo

<?xml version="1.0" encoding="UTF-8"?><return>    <ITEM index="1" cmd="sysinfo" uptime="5:17:13" memory="22835200/62578688" cpu_usage="2" average_load="0.12/0.13/0.14" firmware_version="AP902P07V1.6.0Build798_TU" sn="BN212GH600045AA" sys_name="" sys_description="uRouter series wireless AP. Support 802.11b/g/n. 300Mbps, 2T2R." sys_model="uRouter mini SJBY" ap_vendor="BHU" uplink_interface_mac="84:82:f4:38:bd:3b" hardware_version="Z05" ip="0.0.0.0" netmask="0.0.0.0" gateway="0.0.0.0" firmware_name="kochab" longitude="" latitude="" cpu_type="MIPS 24KEc V5.5" mem_type="DDR2" mem_size="61112" flash_size="16384" sys_net_id="" primary_dns="114.114.114.114" second_dns="0.0.0.0" location="" systime="13:17:13" saved_config="" build_info="2017-11-03-09:13 Revision: 798" config_model_ver="V3" config_mode="basic" work_mode="router-ap" dev_mac="84:82:f4:38:bd:38" bmc_status="" status="done"/></return>

ifrate

<?xml version="1.0" encoding="UTF-8"?><return>    <ITEM index="1" cmd="ifrate" status="done">        <ifrate_sub>            <SUB interface="wlan3" tx_pkts="490" rx_pkts="367" tx_bytes="38872" rx_bytes="56368" tx_rate="0" rx_rate="0"/>            <SUB interface="wlan2" tx_pkts="0" rx_pkts="0" tx_bytes="0" rx_bytes="0" tx_rate="0" rx_rate="0"/>            <SUB interface="wlan1" tx_pkts="0" rx_pkts="0" tx_bytes="0" rx_bytes="0" tx_rate="0" rx_rate="0"/>            <SUB interface="wlan0" tx_pkts="485" rx_pkts="161" tx_bytes="75992" rx_bytes="50581" tx_rate="0" rx_rate="0"/>            <SUB interface="eth1" tx_pkts="2023" rx_pkts="0" tx_bytes="686136" rx_bytes="0" tx_rate="0" rx_rate="0"/>            <SUB interface="eth0" tx_pkts="44410" rx_pkts="49873" tx_bytes="34125041" rx_bytes="18727781" tx_rate="0" rx_rate="0"/>        </ifrate_sub>    </ITEM></return>

发表于 更新于

其实并不是第一篇。之前在anyNodeVPS上搭建过typecho博客，不过不够稳定遂关停了。数据应该备份过，有空时翻翻。