Ok, we have us an interesting router! All 3 models are the same, 550N and 550NH sold in USA, the 460N sold elsewhere. The NH is same as N but comes with three cool external antennas on cables.
Review and internal photos here:
http://en.network01.net/modules/newbb/v … mp;forum=2
This is an Atheros AP81 platform router. Gigabit Ethernet ports! And it has pad on the motherboard to add a USB port, they even have a pad on the front for an LED to be added labeled USB. Very impressive hardware specifications:
-- Gigabit LAN Ports (rtl8366sr chip)
-- ar9103 3x3 MIMO radio chip
-- same 32MB of RAM and 4MB of flash that most other AP81 have
I found a serial port with 5 pins and #4 pin missing matching this information:
I can not find a JTAG port, I look on the backside of the board like on some other Zyxel. Printed on backside of board:
HannStar K MV-4
Front of board
Made in Taiwan
Serial of boot is 9600:
Bootbase Version: V1.04 | 12/28/2007 13:20:00 RAM: Size = 32768 Kbytes DRAM POST: Testing: 32768K OK ST32M *1 ZyNOS Version: V3.60(BFD.1) | 08/20/2008 09:55:00 Press any key to enter debug mode within 3 seconds. ............................................................
Then I enter command "ATHE" and "ATSH":
ATHE ======= Debug Command Listing ======= AT just answer OK ATHE print help ATBAx change baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k ATENx,(y) set BootExtension Debug Flag (y=password) ATSE show the seed of password generator ATTI(h,m,s) change system time to hour:min:sec or show current time ATDA(y,m,d) change system date to year/month/day or show current date ATDS dump RAS stack ATDT dump Boot Module Common Area ATDUx,y dump memory contents from address x for length y ATRBx display the 8-bit value of address x ATRWx display the 16-bit value of address x ATRLx display the 32-bit value of address x ATGO(x) run program at addr x or boot router ATGR boot router ATGT run Hardware Test Program ATRTw,x,y(,z) RAM test level w, from address x to y (z iterations) ATSH dump manufacturer related data in ROM ATTD download router configuration to PC via XMODEM ATUR upload router firmware to flash ROM ATLC upload router configuration file to flash ROM < press any key to continue > ATLD upload router default configuration file to flash ROM ATXSx xmodem select: x=0: CRC mode(default); x=1: checksum mode ATSR system reboot ATSP send packet ATEUx Upgrate image by Ethernet, 0:bootbase,1:romfile,2:RAS ATMU print Multiboot client version ATLTx LED on/off test OK ATSH ZyNOS Version : V3.60(BFD.1) | 08/20/2008 09:55:00 Bootbase Version : V1.04 | 12/28/2007 13:20:00 Vendor Name : ZyXEL Communications Corp. Product Model : X550N ZyNOS ROM address : bfc40000 System Type : 7 MAC Address : 0019CBC4E3DE Default Country Code : FF Boot Module Debug Flag : 00 RomFile Version : BB RomFile Checksum : a369 ZyNOS Checksum : a50e Core Checksum : c67f SNMP MIB level & OID : 060102030405060708091011121314151617181920 Main Feature Bits : C0 Other Feature Bits : 01 F0 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00-06 41 13 00 00 00 OK ATMU MultiBoot Client version 2.2
No JTAG that I can see, I even lifted the large metal cover (center of board) and it houses the ar9132 CPU and the Realtek rtl8366sr switch. But no JTAG there either. So once I put OpenWRT, no way to flash back ZynOS?
keywordz: NBG460N NBG-460N 460 ZyOS
(Last edited by RoundSparrow on 29 Jan 2009, 01:51)