Hello everyone! I decided to start this thread on the seldom
discussed STARBRIDGE LYNX-110/220 ROUTER/MODEMS.
I can't find anywhere else that people are talking about them
and I've made some discoveries so hey, why not?
I'd love to see OPENWRT on this device.
I assume it can be done. It's been done on similar devices.
My girlfriend lives in a small town with fairly crappy DSL.
One day I decided to see if I could access her router/modem
as her speeds were terrible. She has a STARBRIDGE LYNX-220.
I was able to telnet into the device easilly with the usual
methods. I have a client in that same town who upgraded to
CABLE internet and had no use for her DSL router/modem so
she gave it to me, it's a STARBRIDGE LYNX-210. I have taken
the 210 home and put it onto my LAN as another embedded
busybox device that can be accessed via http or telnet.
I have also taken it apart and logged what I found.
I have not taken the 220 apart but I assume it's very similar.
So... Without further ado... Here is the start!!!
STARBRIDGE LYNX 210 ROUTER/MODEM
--------------------------------
This device is an Texas Instruments AR7 based DSL router/modem.
It can be accessed via telnet or http by going to 192.168.1.1
after setting your LAN to 192.168.1.X of course.
(X being anything other than 1.)
Strangely, the default logins from web and telnet are different.
TELNET
------
Login: root
Password: admin
HTTP
----
Login: admin
Password: admin
I'm pretty sure I found a backup of the firmware, it's located
at /usr/lib/modules and named "ar0700xx.bin".
You can enable web access to the entire filesystem and download
anything you want, including the firmware, with this from shell:
# thttpd -d / -p 81 -D
After that, go to 192.168.1.1:81 and you're in!
Hit CTRL+C to break the process or just put an & after it to
throw it into the background when you first type it.
It's easy to get the router into a state that needs resetting.
If you crash it by simply causing a core dump or something
from shell it often enters into a strange state where you can
telnet to it and get to the login, but nothing works.
In this state, you can't use http at all and the only thing I
have found to do is use a paperclip or similar object to hit
the reset button on the back.
TECHNICAL SPECS:
The device uses a TNETD7300AGDW CPU which is a version of
Texas Instrument's AR7. The WIKI listed below gives some very
usefull information and links about the AR7 plus links to
various devices that use it. Many of these devices have OPENWRT
on them so I assume the 210/220 should be easy to do!!!
http://www.linux-mips.org/wiki/AR7
You can get a datasheet on the cpu from here:
http://focus.ti.com.cn/pdfs/bcg/ar7wi_fact_sheet.pdf
It's a very cool CPU! I am wondering if it is possible, after
hacked, to turn the device into a VOIP box where it can grab
the net through it's ethernet port and put the voip out it's
analog DSL port to a phone. This *should* be possible in my
opinion, anyone in the know please give your thoughts!
Under the hood you will find:
TNETD7300AGDW CPU with alpha numeric 5C2CJ49 on it.
Linkcom LAN 1102 0550
Sticker on the board reading T488 11 P31A42
Small chip (controller chip?)
UTC SKA1 MC34063AL ND
Chip with sticker on it that lettering/numbering was rubbed
off of. 2 red dots on chip also. Here is all I could get:
INTEL C F1 60
A5
(M) (C) '02
The sticker says: 62.48.3 P31 C 21
Another chip:
ISSI
FOUND INFO ON THIS! THIS IS THE RAM!
---> IS42S16400B-7T <---- THIS IS IT!
G2583500N 0521
Here's a link to the datesheet:
http://www.alldatasheet.com/datasheet-p … 0B-7T.html
It's 64 Megabits Synchronous DRAM
Sticker on back of board:
MAC: (My MAC ID)
DSL 600EU
Logo on back of board:
B(Looks like Devil's tail)RB M103D
94V-0 2405
Another thing on the board:
050-533000-401 G
I know I'm being overly descriptive but any information may
help so I'm doing this in hopes that someone in the know may
understand if firmware from another device may work in this.
STARBRIDGE LYNX 220 ROUTER/MODEM
--------------------------------
I am not positive but I assume all that applies to the 210 is
true with the 220 as well. Verification of this coming soon!
I hope that something can/will come of this thread and that
at the very least it will become the one place people who have
these devices can talk at. Thanks!!!
- Dieter
(Last edited by MENTALDOMINANCE on 2 Apr 2009, 07:59)