You need serial connection to it, mandatory So get a cable (a siemens C45/C55 unlock cable works too ... just need a cable with RS232<->TTL(3.3v) converter)
Whe you have it, connect it, switch off the unit, switch on, stop the boot and then, do a help command and a printenv command. You will get available commands and environment variables
At this point, we can continue "openwrting" the unit
Ok, i connected serial cable to my ZTE device, here is boot log:
ROM VER: 1.2.0 CFG 04 EEPROM Data¦=-5)? U-Boot 1.1.5-2.2 (Jun 7 2011 - 19:16:57) DRAM: 16 MB relocate_code start relocate_code finish. Flash: 4 MB Flash: W25Q32BV *** Warning - bad CRC, using default environment parse tag param success In: serial Out: serial Err: serial Net: Init chip ,reset switch ! Internal Clock Selected EPHY_MODE AMAZON_SE Switch Type "run flash_nfs" to mount root filesystem over NFS Have Calibration Data *** Press 1 means entering boot mode*** Press 2 means entering testing mode*** Press 3 means entering norm mode*** Hit key to stop autoboot: 0 Entering norm mode ... Found image at 0x00040000 foundVer = 1 ****Try the first image... ## Booting image at 00040100 ... Image Name: MIPS Linux-2.6.20 Created: 2012-03-27 9:28:37 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 804942 Bytes = 786.1 kB Load Address: 80002000 Entry Point: 80268000 Verifying Checksum ... OK Uncompressing Kernel Image ...
The problem is that i can't stop device booting. It looks like device does not see my keystokes. I tried to disconnect RX from board - had rubish on screen instead of booting log, so fisically all three are connected RX, TX, GND.
I tried Putty and Hyperterm as terminal - reaction the same. Serial parameters are 115200/8/N/1/N