mirror of https://github.com/hak5/openwrt.git
ff2c96333f
Sercomm H500-s is an xDSL dual band wireless router based on Broadcom
BCM63167 SoC.
Hardware:
SoC: Broadcom BCM63167
CPU: BMIPS4350 V8.0, 400 MHz, 2 cores
Flash: NAND 128 MiB
RAM: DDR3 128 MiB
Ethernet: 4x 10/100/1000 Mbps
Switch: BCM53134S
Wireless: 802.11b/g/n: BCM435f (integrated)
802.11ac: Quantenna QT3740BC (onboard SoC)
USB: 1x 2.0
LEDs/Buttons: 11x / 2x
Flash instruction, web UI:
1. Reset to defaults using the reset button if the admin password is
unknown
2. Login into the web UI as admin.
Address: http://192.168.0.1
User: admin
Password: VF-ESVodafone-H-500-s or l033i-h500s
3. Go to Settings -> Firmware Update, and select the Openwrt factory
firmware
4. Update the firmware.
5. Wait until it finish, the device will reboot with Openwrt installed
on the alternative image partitions keeping the stock firmware in
the former.
Notes:
- The patch also adds support for the lowi version. Only the factory
firmware is different.
- The integrated Wifi in the Broadcom Soc isn't still supported.
- The Quantenna 802.11ac wifi works ok, but needs to be configured with
the Quantenna client application. It can't be configured with Luci
nor any iw command since it's a separated subsystem linked via
ethernet.
- The BCM53134S external switch is managed via MDIO which isn't
supported in this target. Therefore it will behave as a dumb switch.
Signed-off-by: Daniel González Cabanelas <dgcbueu@gmail.com>
|
||
|---|---|---|
| .. | ||
| lzma-loader | ||
| Makefile | ||
| README.images-bcm63xx | ||
| bcm63xx.mk | ||
| bcm63xx_nand.mk | ||
README.images-bcm63xx
The image neede to flash onto a Broadcom 63xx-series board depends on the board, method you are using to flash, and, for web-based flash, on the version of the Broadcom code your router uses. There are two major revisions of the Broadcom code as far as imagetags are concerned, before 3.08 and after 3.08, however there are some variations within in that, either due to vendor differences or due to changes at Broadcom (it's not clear yet which is the case). In addtion Pirelli modified the Broadcom code, so Alice Gate models use a different imagetag than any other vendor. The imagetag format for flashing via CFE is the same for almost all the boards, and is the same for all images generated by the imagetag utility. Images flashable using cfe are labelled openwrt-<board>-<filesystem>-cfe.bin The imagetags for tftp/ftp flashing is based on Broadcom 3.00-3.04 imagetags and is known to be correct as the source code GPL and is available for reading. Broadcom code 2.21 is based on the BT Voyager firmware image I looked at. It may in fact be BT Voyager-specific. 2.21 is actually more difficult to deal with the imagetag from 3.00 as it has three different CRC calculations in addtition to the header CRC. Broadcom 3.00-3.02 flashing has been tested on Comtrend CT-5261, CT-536 and Tecom GW6000, and is the version of the flashing that was present before the imagetags were split by broadcom code version (early June 2009) 3.04 is guessed to be the same as 3.00-3.02 based on available information Broadom 3.06 is thought to be the same as 3.00-3.02, however the only 3.06 this author (Daniel Dickinson) has seen is the Alice Gate (Pirelli) firmware which is known to be different due to vendor (Pirelli) modifications to the Broadcom code. Broadcom 3.10 uses an imagetag that is believed to apply to all 3.10 and 3.12 versions, and has been tested on the Tecom GW6200. This version introdec changes to the imagetag to deal with TR69 (a remote rouer management system developed by the DSL forum). There is a field for vendor-specific information, that at least in some cases is not optional. It is based on the hexedit of a neufbox4 firmware image, the information in https://dev.openwrt.org/ticket/4987, and the hexedit of a Tecom GW6200 image. Some boards share the same tag format, but require vendor-specific fields in the board. In that case the tagid is shared, but the filename of the generated image reflects the router for which the image was created. router |method | codever |filename +-------------+-------------+---------+--------------------------------------- |any |cfe+most web | any |openwrt-<board>-<fs>-cfe.bin |AGVoIP2+WiFi |cfe |alice3.06|openwrt-AGV2+W-cfe-<fs>-cfe.bin |AGVoIP2+WiFi |web |alice3.06|openwrt-AGV2+W-cfe-<fs>-cfe.bin |CT536 |web |3.02 |openwrt-CT536_CT5621-<fs>-cfe.bin |CT5621 |web |3.02 |openwrt-CT536_CT5621-<fs>-cfe.bin |DG834GT |web |3.02 |openwrt-DG834GT_DG834PN-<fs>-cfe.bin |DG834PN |web |3.02 |openwrt-DG834GT_DG834PN-<fs>-cfe.bin |DSL-2640B |web |3.10 |openwrt-DSL2640B-<fs>-cfe.bin |DSL-2740B |web |3.10 |openwrt-DSL2670B-<fs>-cfe.bin |F5D7633 |web |3.10 |openwrt-F5D7633-<fs>-cfe.bin |F@ST2404 |web |3.0X? |openwrt-F@ST2404-cfe-<fs>-cfe.bin |F@ST2404 |web |3.1X? |openwrt-F@ST2404-<fs>-cfe.bin |GW6000 |web |3.00 |openwrt-GW6000-<fs>-cfe.bin |GW6200 |web |3.10 |openwrt-GW6200-<fs>-cfe.bin |Neufbox4 |web |3.12 |openwrt-NEUFBOX4-<fs>-cfe.bin |TD8810A |web |3.06 |openwrt-TD8810-<fs>-cfe.bin |TD8810B |web |3.06 |openwrt-TD8810-<fs>-cfe.bin |TD8811A |web |3.06 |openwrt-TD8811-<fs>-cfe.bin |TD8811B |web |3.06 |openwrt-TD881-<fs>-cfe.bin |TD8900GB |web |3.06 |openwrt-TD8900DB<fs>-cfe.bin |USR9108 |web |3.0X? |openwrt-USR9108-<fs>-cfe.bin |V2091_BTR |web |2.21 |openwrt-V2091_BTR-<fs>-cfe.bin |V2091_ROI |web |2.21 |openwrt-V2091-<fs>-cfe.bin |V2091_WB |web |2.21 |openwrt-V2091-<fs>-cfe.bin |V210_BTR |web |2.21 |openwrt-V210_BTR-<fs>-cfe.bin |V210_ROI |web |2.21 |openwrt-V210-ROI_WB<fs>-cfe.bin |V210_WB |web |2.21 |openwrt-V210-ROI_WB<fs>-cfe.bin |V2110 |web |2.21 |openwrt-V2110-<fs>-cfe.bin |V2110_AA |web |2.21 |openwrt-V2110-<fs>-cfe.bin |V2110_ROI |web |2.21 |openwrt-V2110-<fs>-cfe.bin |V2500V |web |2.21 |openwrt-V2500V<fs>-cfe.bin |V2500V_AA |web |2.21 |openwrt-V2500V-<fs>-cfe.bin |V2500V_SIP_CLUB |web |2.21 |openwrt-V2500V-<fs>-cfe.bin Old imagetag routers -------------------- Davolink DV201AMR Redboot routers --------------- Inventel Livebox Known router->code versions --------------------------- Vendor |Model |Code Ver ---------------------------+------------------------------------------+-------- Belkin |F5D7633 |3.10 British Telecom (BT) |Voyager V2091_BTR |2.21 British Telecom (BT) |Voyager V2091_ROI |2.21 British Telecom (BT) |Voyager V2091_WB |2.21 British Telecom (BT) |Voyager V210_BTR |2.21 British Telecom (BT) |Voyager V210_ROI |2.21 British Telecom (BT) |Voyager V210_WB |2.21 British Telecom (BT) |Voyager V2110 |2.21 British Telecom (BT) |Voyager V2110_AA |2.21 British Telecom (BT) |Voyager V2110_ROI |2.21 British Telecom (BT) |Voyager V220V |2.21 British Telecom (BT) |Voyager V2500V |2.21 British Telecom (BT) |Voyager V2500V_AA |2.21 British Telecom (BT) |Voyager V2500V_SIP_CLUB |2.21 Comtrend |CT-5261 |3.02 Comtrend |CT-536 |3.02 D-Link |DSL-2640B |3.10 D-Link |DSL-2670B |3.10 NetGear |DG834GT |3.02 NetGear |DG834PN |3.02 Neuf Cegetel |Neufbox 4 |3.12 Pirelli |Alice Gate Wi-Fi (+VoIP models?) |ag 3.06 Sagem |F@ST2404 |? TP-Link |TD-8810A |3.06 TP-Link |TD-8810B |3.06 TP-Link |TD-8811A |3.06 TP-Link |TD-8811B |3.06 TP-Link |TD-W8900GB |3.06 Tecom |GW6000 |3.00 Tecom |GW6200 |3.10 USR |9108 |?