sorry that I can't help you
but I found something interesting:
Milestone Kamikaze 8.09.2
Kamikaze 8.09 interim release 2
Bug fixes:
* Prevent nvram corruption on the WGT634U (r16350, r16379)
Topic: Netgear WGT634U bricked
The content of this topic has been archived between 10 Mar 2018 and 30 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
Page 2 of 2
Hi everyone...
I have two similar wgt634u here, one is booting and working fine, with the other i had messed up the NVRAM settings, so i used the ones from the good one (except for the mac adresses of course)
From the WORKING router:
Variable Name Value
-------------------- --------------------------------------------------
BOOT_CONSOLE uart1
boardtype bcm95365r
et0mdcport 0
et0phyaddr 254
STARTUP ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0;boot -elf flash0.os:
kernel_args console=ttyS1,115200 root=/dev/ram0 init=/linuxrc rw syst_size=8M
configvlan 0x1
et0macaddr 00-09-5b-f7-36-14
et1macaddr 00-09-5b-f7-36-15
CFE_VERSION 1.0.34
CFE_BOARDNAME BCM95365R
CFE_MEMORYSIZE 32
*** command status = 0
From the not working router
Variable Name Value
-------------------- --------------------------------------------------
BOOT_CONSOLE uart1
boardtype bcm95365r
et0mdcport 0
et0phyaddr 254
STARTUP ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0;boot -elf flash0.os:
kernel_args console=ttyS1,115200 root=/dev/ram0 init=/linuxrc rw syst_size=8M
configvlan 0x1
et0macaddr 00-09-5b-f7-36-14
et1macaddr 00-09-5b-f7-36-15
CFE_VERSION 1.0.34
CFE_BOARDNAME BCM95365R
CFE_MEMORYSIZE 32
*** command status = 0
i see no difference (exept for the order of things, is that important???)
anyway I connected both with the serial cable and both start booting the same way:
I did it with a stock Kamikaze WGT634U 8.09er image over tftp, to have the exact same conditions, check out the command line...
CFE> boot -elf -tftp 192.168.6.12:/boot/tftpd/634u.8.09
Loader:elf Filesys:tftp Dev:eth0 File:192.168.6.12:/boot/tftpd/634u.8.09 Options:(null)
***************************
**** MAC Client V1.0 ****
***************************
et0macaddr value :flag =0 value=00-0F-B5-0B-9D-94
et1macaddr value :flag =0 value=00-0F-B5-0B-9D-95
MAC exist at least one
system ethernet mac exist and not default....
Skip mac client process.....
Loading: 0x80001000/3768 Entry at 0x80001000
Closing network.
et0: link down
Starting program at 0x80001000
Linux version 2.6.25.17 (nbd@baustelle) (gcc version 4.1.2) #16 Sun Feb 15 00:19:46 CET 2009
console [early0] enabled
CPU revision is: 00029007 (Broadcom BCM3302)
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x05, vendor 0x4243)
ssb: Core 1 found: Fast Ethernet (cc 0x806, rev 0x06, vendor 0x4243)
ssb: Core 2 found: IPSEC (cc 0x80B, rev 0x01, vendor 0x4243)
ssb: Core 3 found: USB 1.1 Hostdev (cc 0x808, rev 0x02, vendor 0x4243)
ssb: Core 4 found: PCI (cc 0x804, rev 0x08, vendor 0x4243)
ssb: Core 5 found: MIPS 3302 (cc 0x816, rev 0x01, vendor 0x4243)
ssb: Core 6 found: MEMC SDRAM (cc 0x80F, rev 0x00, vendor 0x4243)
ssb: Initializing MIPS core...
ssb: set_irq: core 0x0806, irq 2 => 2
ssb: set_irq: core 0x0804, irq 0 => 3
now it varies, the good one has TWO IMPORTANT LINES MORE!!!
the bad one carries on with...
ssb: Sonics Silicon Backplane found at address 0x18000000
Serial init done.
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0 -> 8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0 -> 8192
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Primary instruction cache 8kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, VIPT, no aliases, linesize 16 bytes
Synthesized clear page handler (26 instructions).
Synthesized copy page handler (46 instructions).
PID hash table entries: 128 (order: 7, 512 bytes)
console handover: boot [early0] -> real [ttyS0]
After this it just hangs, it seems to bee not booting fully because the power led does not start flashing, no ssh, web, telnet, nothing
now the good one:
early_nvram_init: WGT634U NVRAM found.
ssb: Sonics Silicon Backplane found at address 0x18000000
Swapping serial ports!
Serial init done.
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0 -> 8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0 -> 8192
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 init=/etc/preinit noinitrd console=ttyS0,115200
Primary instruction cache 8kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, VIPT, no aliases, linesize 16 bytes
Synthesized clear page handler (26 instructions).
Synthesized copy page handler (46 instructions).
PID hash table entries: 128 (order: 7, 512 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29808k/32768k available (2082k kernel code, 2960k reserved, 315k data, 128k init, 0k highmem)
Mount-cache hash table entries: 512
net_namespace: 540 bytes
NET: Registered protocol family 16
ssb: PCIcore in host mode found
Registering a PCI bus after boot
PCI: Fixing up bridge 0000:00:00.0
PCI: Fixing up device 0000:00:00.0
PCI: Fixing latency timer of device 0000:00:00.0 to 168
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
detected lzma initramfs
initramfs: LZMA lc=1,lp=2,pb=2,origSize=512
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x0 (irq = 3) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 3) is a 16550A
serial8250 serial8250.0: unable to register port at index 0 (IO0 MEMb8000400 IRQ3): -28
serial8250 serial8250.0: unable to register port at index 1 (IO0 MEMb8000300 IRQ3): -28
b44.c:v2.0
eth0: Broadcom 44xx/47xx 10/100BaseT Ethernet 00:09:5b:f7:36:14
flash init: 0x1c000000 0x02000000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
Flash device: 0x800000 at 0x1fc00000
bootloader size: 655360
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x000a0000 : "cfe"
0x000a0000-0x007e0000 : "linux"
0x0015e400-0x007e0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=300000, len=4E0000
0x00300000-0x007e0000 : "rootfs_data"
0x007e0000-0x00800000 : "nvram"
Registered led device: power
TCP vegas registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 128k freed
Please be patient, while OpenWrt loads ...
Algorithmics/MIPS FPU Emulator v1.5
- preinit -
Press CTRL-C for failsafe
diag: Detected 'Netgear WGT634U'
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
roboswitch: Probing device eth0: found!
b44: eth0: powering down PHY
switching to jffs2
mini_fo: using base directory: /
mini_fo: using storage directory: /jffs
- init -
Please press Enter to activate this console.
so the good one has these two lines:
early_nvram_init: WGT634U NVRAM found.
Swapping serial ports!
that the bad one does'nt have...
this "swapping serial ports" might be the reason i cant see anything anymore on my minicom on the bad one....
but why is it not booting up properly ??? has'nt found any ram????
i also tried 8.09rc2 and even to flash the original firmware... all the same result.... at some point it switches of the serial console and stops booting...
is it possible its not working with non default but wrong mac adresses ( i might have switched the case with a third one...)
ideas anyone???
thanks for your time...
hoshy
(Last edited by hoshy on 29 Sep 2009, 11:30)
Since my last post I got a serial cable an manged to wipe the NVRAM, I also got the eth0 / no hardware adress failure above and tried to set the to setenv -P commands from post #7
Afterwards still no ifconfig possible, but the thing keeps rebooting over and over giving the exception 8 below:
CFE version 1.0.34 for BCM95365R (32bit,SP,LE)
Build Date: Tue Feb 24 03:21:41 CST 2004 (root@jackylinux)
Copyright (C) 2000,2001,2002 Broadcom Corporation.
Add MAC client version(DNI).
Initializing Arena.
Initializing Devices.
et0: chipattach: NVRAM_GET(et0phyaddr) not found
et0: chipattach error
et0: etc_attach failed
Could not attach bcm4710 ethernet: -2
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)
Total memory used by CFE: 0x81BB1280 - 0x82000000 (4517248)
Initialized Data: 0x81BB1280 - 0x81BB3E90 (11280)
BSS Area: 0x81BB3E90 - 0x81BB45D0 (1856)
Local Heap: 0x81BB45D0 - 0x81FB45D0 (4194304)
Stack Area: 0x81FB45D0 - 0x81FB65D0 (8192)
Text (code) segment: 0x81FB65E0 - 0x81FFFFB0 (301520)
Boot area (physical): 0x01B70000 - 0x01BB0000
Relocation Factor: I:E23B65E0 - D:01BB0280
configure vlans
*****************************************************************
*********************** VLAN Driver initial ********************
*****************************************************************
Process LAN port(2-5) vlan Architecture...
**Exception 8: EPC=00000028, Cause=00000008, VAddr=00000028
RA=81FE0B80, PRID=00029007
0 ($00) = 00000000 AT ($01) = A0000000
v0 ($02) = 00000028 v1 ($03) = 00000000
a0 ($04) = 81BB1EC0 a1 ($05) = 0000001E
a2 ($06) = 00000010 a3 ($07) = 00003401
t0 ($08) = 00000034 t1 ($09) = 81FE0AB0
t2 ($10) = 0000000C t3 ($11) = 00000001
t4 ($12) = 81FC66D4 t5 ($13) = 00000000
t6 ($14) = 00000000 t7 ($15) = 00000000
s0 ($16) = 81BB5FF8 s1 ($17) = 00000034
s2 ($18) = 00000002 s3 ($19) = 0000000A
s4 ($20) = 81FE0AB0 s5 ($21) = 81FC21A8
s6 ($22) = FFFE0428 s7 ($23) = 81FB65E0
t8 ($24) = 02000000 t9 ($25) = E23B65E0
k0 ($26) = 00000000 k1 ($27) = 81FB63A3
gp ($28) = 81BB9280 sp ($29) = 81FB6450
fp ($30) = 01BB0280 ra ($31) = 81FE0B80Is there any way out of this or did i finally brick the remains of my router? thx!
*edit:* BTW: Ctrl-C does not help to skip this, but serial link worked fine for giving the setenv commands. using minicom from ubuntu.
(Last edited by open34 on 1 Oct 2009, 14:40)
Ok, sorry for replying to mysel, but problem solved, perhaps it helps others:
When you looping infinitely follow the instruction in http://www.google.de/#hl=de&source=hp
&q=nervous.it+unbricking&btnG=Google-Suche&meta=&aq=f&oq=nervous.it+unbricking&fp=4cd870bd3f2e3622
Short the NVRAM to reset as described above and then set ALL variables mentioned in the link, including the MAC adress..
for flashing, use the WAN port - and if you connect directly to you PC you have to use a cross cable - the wan port does not accept a patch as the others.
mrmr wrote:
@zilla1000
When your CFE NVRAM "reset" it still has "default" macaddresset0macaddr 00-00-00-53-65-10
et1macaddr 00-00-00-53-65-11start changing those with:
> setenv -p et0macaddr 00-00-de-ad-ca-fe
> setenv -p et1macaddr 00-00-de-ad-ca-ffafter this, you need to add missing CFE NVRAM values.
The post from KillaB should help you...most likely you'll need:> setenv -p et0mdcport 0
> setenv -p et0phyaddr 254
> setenv -p configvlan 0x1
> setenv -p STARTUP "ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0;boot -elf flash0.os:"
> setenv -p kernel_args "console=ttyS1,115200 root=/dev/ram0 init=/linuxrc rw syst_size=8M"this should do...and as already said, don't mind your "strange" var there.
My problem is either minicom or screen program under my Linux machine dumps garbages when I tried to connect my USB/Serial console cable to interface with my WGT634U which makes CFE prompt unaccessible. However, once I moved to a Windows XP platform and using Hyperterminal program, I managed to get a CFE prompt. Then, using the above instruction, I managed to recover my WGT634U. Thanks.
Thanks to all posts here. My WGT634U, which had not been working since May, is now running properly. The necessary steps for me, using a serial cable, were:
1. Short pins 1 & 2 on the flash chip, as per http://www.nervous.it/2009/07/unbricking-wgt634u/ (This ended the cycling without ever getting to a CFE prompt.)
2. Set environment variables as per that site. Also set the following: setenv -p kernel_args "console=ttyS1,115200 root=/dev/ram0 init=/linuxrc rw syst_size=8M" (The latter ended a failure to boot successfully)
3. Make sure your cable is plugged into the WAN socket. You should be able to ping your tftp device from the CFE prompt.
4. Start the tftp server.
5. From CFE, flash, for example, as follows:
flash -noheader 192.168.1.31:openwrt-wgt634u-k8092rc2-squashfs.bin flash0.os
6. Wait until programming is done and reboot. OpenWrt should be running.
The discussion might have continued from here.
Page 2 of 2