OpenWrt Forum Archive

Topic: HAME MPR-A1 - Small and cheap router with built-in battery

The content of this topic has been archived between 12 May 2015 and 2 May 2018. Unfortunately there are posts – most likely complete pages – missing.

Hi mali,

mali wrote:

Hi, I got a new device that seems like a MPR-A1 clone (labeled as MPR-M1). The PCB looks like a MPR-A1 v1.4 (compared to the picture posted by p1vo in post 444).
The interesting thing is, that it has allready a 32 MB RAM-Chip (Samsung K4S561632E-TC75, 16M x16).
Unfortunatly the system only recognizes 16MB, even though the resistors are set like the ones in post 444.

How can I get the system to recognize the whole RAM?

what does U-Boot an the starting Linux print on the console ?

Hi,
here is a boot-log from the serial port:

U-Boot 1.1.7 (Dec 13 2011 - 13:49:42)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb4000
******************************
Software System Reset Occurred
******************************
spi_wait_nsec: 42 
spi device id: c2 20 16 c2 20 (2016c220)
find flash: MX25L3205D
raspi_read: from:30000 len:1000 
.*** Warning - bad CRC, using default environment

============================================ 
Ralink UBoot Version: 3.6.0.0
-------------------------------------------- 
ASIC 5350_MP (Port5<->None)
DRAM_CONF_FROM: Boot-Strapping 
DRAM_TYPE: SDRAM 
DRAM_SIZE: 256 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 32 MBytes
Flash component: SPI Flash
Date:Dec 13 2011  Time:13:49:42
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384 

 ##### The CPU freq = 360 MHZ #### 
 estimate memory size =32 Mbytes
raspi_read: from:40028 len:6 
.
raspi_read: from:0 len:30004 
....*************Is_update = 0 plat = 1**************

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
 0 
   
3: System Boot system code via Flash.
## Booting image at bc050000 ...
raspi_read: from:50000 len:40 
.   Image Name:   Linux Kernel Image
   Created:      2012-08-21   6:43:43 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    3766250 Bytes =  3.6 MB
   Load Address: 80000000
   Entry Point:  80244000
raspi_read: from:50040 len:3977ea 
..........................................................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80244000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@localhost.localdomain) (gcc version 3.4.2) #128 Thu Aug 2 10:37:55 CST 2012

 The CPU frequency set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 4064
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 40808000, status = 11000000
PID hash table entries: 64 (order: 6, 256 bytes)
calculating r4koff... 0015f900(1440000)
CPU frequency 360.00 MHz
Using 180.000 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 13720k/16384k available (2021k kernel code, 2664k reserved, 295k data, 112k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
deice id : c2 20 16 c2 20 (2016c220)
MX25L3205D(c2 2016c220) (4096 Kbytes)
mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 7 MTD partitions on "raspi":
0x00000000-0x00400000 : "ALL"
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x0011282a : "Kernel"
mtd: partition "Kernel" doesn't end on an erase block -- force read-only
0x0011282a-0x01000000 : "RootFS"
mtd: partition "RootFS" extends beyond the end of device "raspi" -- size truncated to 0x2ed7d6
mtd: partition "RootFS" doesn't start on an erase block boundary -- force read-only
0x00050000-0x01000000 : "Kernel_RootFS"
mtd: partition "Kernel_RootFS" extends beyond the end of device "raspi" -- size truncated to 0x3b0000
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
Hame plat 1
Ralink gpio driver initialized [003c4001]
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.8 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 253
Ralink APSoC Ethernet Driver Initilization. v2.1  256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x00002c67
MAC_ADRL -- : 0xfbd007c8
PROC INIT OK!
IMQ starting with 2 devices...
IMQ driver loaded successfully.
    Hooking IMQ after NAT on PREROUTING.
    Hooking IMQ before NAT on POSTROUTING.
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
block2mtd: version $Revision: 1.1.1.1 $
usbcore: registered new interface driver cdc_acm
drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver usbhid
drivers/usb/input/hid-core.c: v2.6:USB HID core driver
nf_conntrack version 0.5.0 (128 buckets, 1024 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 112k freed
init started: BusyBox v1.12.1 (2011-10-22 23:04:50 CST)
starting pid 14, tty '': '/etc_ro/rcS'
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
-------------------------------------------
Welcome to
    __  __     __     __    __  ______
    | | | |   /  \   |  \  /  | | ____|
    | |_| |  / /\ \  | |\\//| | | |___
    |  _  | |_/__\ \ | | \/ | | | |___|
        | | | | | |  | | | |    | | | |___
        |_| |_| |_|  |_| |_|    |_| |_____|
    HameData Technology Co., Ltd
-------------------------------------------
killall: goahead: no process killed
usbcore: registered new interface driver ipheth
Start gpio 0 monitor
g_iplat = 1
starting pid 46, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2011-10-22 23:04:50 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# killall: udhcpc: no process killed
killall: udhcpc: no process killed
apcli0    no private ioctls.

ifconfig: ioctl 0x8913 failed: No such device
internet.sh
Password for 'admin' changed
/sbin/internet.sh: line 278: can't create /proc/sys/kernel/hotplug: nonexistent directory
/sbin/internet.sh: line 289: can't create /proc/sys/net/ipv6/conf/default/accept_dad: nonexistent directory
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
choose_configuration 0000 0000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
choose_configuration 0000 0000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
rmmod: ralink_wdt: No such file or directory
rmmod: cls: No such file or directory
rmmod: hw_nat: No such file or directory
rmmod: raeth: No such file or directory
insmod: bridge.ko: module not found
insmod: mii.ko: module not found
insmod: raeth.ko: module not found
/sbin/internet.sh: line 325: can't create /proc/
phy_tx_ring = 0x00953000, tx_ring = 0xa0953000

phy_rx_ring0 = 0x00954000, rx_ring0 = 0xa0954000
MAC_ADRH -- : 0x00002c67
MAC_ADRL -- : 0xfbd007c8
sys/net/ipv6/conRT305x_ESW: Link Status Changed
f/eth2/accept_dad: nonexistent directory

##### disable 1st wireless interface #####
rmmod: rt2860v2_ap_net: No such file or directory
rmmod: rt2860v2_ap: No such file or directory
rmmod: rt2860v2_ap_util: No such file or directory
rmmod: rt2860v2_sta_net: No such file or directory
rmmod: rt2860v2_sta: No such file or directory
rmmod: rt2860v2_sta_util: No such file or directory
insmod: rt2860v2_ap_util.ko: module not found
rt2860v2_ap: module license 'unspecified' taints kernel.


=== pAd = c0069000, size = 629120 ===

<-- RTMPAllocAdapterBlock, Status=0
insmod: rt2860v2_ap_net.ko: module not found
rmmod: nf_nat_pptp: No such file or directory
rmmod: nf_conntrack_pptp: No such file or directory
rmmod: nf_nat_proto_gre: No such file or directory
rmmod: nf_conntrack_proto_gre: No such file or directory
RX DESC a0495000  size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
RTMP_TimerListAdd: add timer obj c00d3b88!
RTMP_TimerListAdd: add timer obj c007101c!
RTMP_TimerListAdd: add timer obj c0070bec!
RTMP_TimerListAdd: add timer obj c0070fc8!
RTMP_TimerListAdd: add timer obj c0070ff0!
RTMP_TimerListAdd: add timer obj c00710d4!
RTMP_TimerListAdd: add timer obj c0071100!
RTMP_TimerListAdd: add timer obj c00712ac!
RTMP_TimerListAdd: add timer obj c00a19c4!
RTMP_TimerListAdd: add timer obj c00a1594!
RTMP_TimerListAdd: add timer obj c00a1970!
RTMP_TimerListAdd: add timer obj c00a1998!
RTMP_TimerListAdd: add timer obj c00a1a7c!
RTMP_TimerListAdd: add timer obj c00a1aa8!
RTMP_TimerListAdd: add timer obj c00a19f0!
RTMP_TimerListAdd: add timer obj c00a1a1c!
RTMP_TimerListAdd: add timer obj c00a1a48!
RTMP_TimerListAdd: add timer obj c00d40a8!
RTMP_TimerListAdd: add timer obj c00d4080!
RTMP_TimerListAdd: add timer obj c00d4058!
RTMP_TimerListAdd: add timer obj c00aa944!
RTMP_TimerListAdd: add timer obj c00aaa48!
RTMP_TimerListAdd: add timer obj c00aa96c!
RTMP_TimerListAdd: add timer obj c00a1f8c!
RTMP_TimerListAdd: add timer obj c006e4e0!
RTMP_TimerListAdd: add timer obj c00a1cac!
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 9
2. Phy Mode = 9
TXALC> bInternalTxALC = 0
3. Phy Mode = 9
RTMP_TimerListAdd: add timer obj c006e0e4!
NICInitAsicFromEEPROM: pAd->TxPowerCtrl.bInternalTxALC = 0
RTMPSetPhyMode: channel is out of range, use first channel=0 
MCS Set = ff 00 00 00 01
SYNC - BBP R4 to 20MHz.l
RTMP_TimerListAdd: add timer obj c00a228c!
Main bssid = 2c:67:fb:d0:07:c8
<==== rt28xx_init, Status=0
0x1300 = 00064380
vconfig: ioctl error for rem: Invalid argument
vconfig: ioctl error for rem: Invalid argument
rmmod: 8021q: No such file or directory
insmod: 8021q.ko: module not found
eth2.2: Setting MAC address to  9c 41 7c e3 16 37.
device eth2 entered promiscuous mode
VLAN (eth2.2):  Setting underlying device (eth2) to promiscious mode.
/sbin/internet.sh: line 476: can't create /proc/sys/net/ipv6/conf/eth2.2/accept_dad: nonexistent directory
/sbin/internet.sh: line 476: can't create /proc/sys/net/ipv6/conf/eth2.2/dad_transmits: nonexistent directory
ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: No such device or address
##### config Ralink ESW vlan partition (WLLLL) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1002
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=70, value=ffff417e
done.
device ra0 entered promiscuous mode
/sbin/internet.sh: line 763: can't create /proc/sys/net/ipv6/conf/br0/accept_dad: nonexistent dieth2.1: dev_set_promiscuity(master, 1)
rectory
/sbin/idevice eth2.1 entered promiscuous mode
nternet.sh: line 763: can't create /proc/sys/net/ipv6/conf/br0/dad_transmits: nonexistent directory
##### start wan #####
wan.sh: unknown wan connection type: SMART
##### start lan #####
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
br0: topology change detected, propagating
br0: port 2(eth2.1) entering forwarding state
br0: topology change detected, propagating
br0: port 1(ra0) entering forwarding state
killall: udhcpd: no process killed
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[0].reg[0] = 3100
ifconfig: ioctl 0x8913 failed: No such device
/sbin/lan.sh: line 154: can't create /proc/sys/net/ipv6/conf/all/forwarding: nonexistent directory
##### start nat #####
##### finish nat #####
killall rt2860apd 1>/dev/null 2>&1
iptables -F -t filter 1>/dev/null 2>&1
iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -F macipport_filter 1>/dev/null 2>&1
iptables -D FORWARD -j web_filter  1>/dev/null 2>&1
iptables -F web_filter  1>/dev/null 2>&1
iptables -D FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -F malicious_filter  1>/dev/null 2>&1
iptables -D INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -F malicious_input_filter  1>/dev/null 2>&1
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -t filter -N web_filter 1>/dev/null 2>&1
iptables -t filter -N macipport_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_input_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_filter -p tcp --syn -j synflood_filter 1>/dev/null 2>&1
iptables -t filter -A INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_input_filter -p tcp --syn -j synflood_input_filter 1>/dev/null 2>&1
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 1>/dev/null 2>&1
iptables -A malicious_input_filter -i  -m state --state RELATED,ESTABLISHED -j ACCEPT
Bad argument `state'
Try `iptables -h' or 'iptables --help' for more information.
iptables -A malicious_input_filter -i  -m state -p tcp --dport 80 --state NEW,INVALID -j DROP
Bad argument `state'
Try `iptables -h' or 'iptables --help' for more information.
/bin/super_dmz -f
sh: /bin/super_dmz: not found
iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1
iptables -t nat -F port_forward  1>/dev/null 2>&1; iptables -t nat -X port_forward  1>/dev/null 2>&1
iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1
iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ  1>/dev/null 2>&1
iptables -t nat -F POSTROUTING 1>/dev/null 2>&1
iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1
iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1
iptables -t nat -A POSTROUTING -o  -s 10.0.22.11/255.255.255.0 -j MASQUERADE 1>/dev/null 2>&1
ntp.sh
ddns.sh
pool.ntp.org: Unknown host
kill -9 `cat /var/run/wscd.pid.ra0`
cat: can't open '/var/run/wscd.pid.ra0': No such file or directory
kill: you need to specify whom to kill
iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1
route delete 239.255.255.250 1>/dev/null 2>&1
frkillall -q klogd
killall -q syslogd
syslogd -C8 1>/dev/null 2>&1
klogd 1>/dev/null 2>&1
killall -q zebra
ekillall -q ripd
webs: Listening for HTTP requests at address 10.0.22.11
etmk 7 set askdial=1
free
/bin/sh: freefree: not found
# free
              total         used         free       shared      buffers
  Mem:        13832        13004          828            0         1132
 Swap:            0            0            0
Total:        13832        13004          828

Thanks for your help.

>How can I get the system to recognize the whole RAM?

What are you flashing?  I assume it's not a version which has 16M set on the kernel command line.

Hi mali,

mali wrote:

Hi,
here is a boot-log from the serial port:

DRAM_CONF_FROM: Boot-Strapping 
DRAM_TYPE: SDRAM 
DRAM_SIZE: 256 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 32 MBytes

 estimate memory size =32 Mbytes
raspi_read: from:40028 len:6 
.

## Transferring control to Linux (at address 80244000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@localhost.localdomain) (gcc version 3.4.2) #128 Thu Aug 2 10:37:55 CST 2012

 The CPU frequency set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)

Thanks for your help.

The memory is set to 32Mbyte by bootstrap.  But is set to 16Mbyte afterwards:

Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)

It seems that you use the installed software which set the memory to 16Mbyte as lizby already stated.
Please try to use OpenWrt trunk and modify the flash type and size in target/linux/ramips/dts/MPRA2 or:
http://lnxpps.de/openwrt/hame-mpra5/mpr-a5_minimal.bin
for testing.

(Last edited by bertc3p0 on 3 Jul 2013, 17:00)

Thanks, I flashed the mpr-a5_minimal.bin via tftp and have now the full 32MB.

Has anyone made a better antenna or connector for external antenna for the Hame A5? I would like to solder some longer wire to the pcb to increase signal strenght.

There are two quite big pads near the RT5350F which look a bit like ground and signal pads but I'm not sure they are the right ones.

@bertc3p0
I've seen your boot log with uboot version 1.1.8. Could you share your uboot image please?

By the way, seems I found a simple way to make serial console stable - I inserted 1kOhm resistor between USB-UART Tx pin and HAME Rx pin. Now it always boots up with serial port connected.

(Last edited by dimonix on 6 Jul 2013, 20:51)

dimonix wrote:

@bertc3p0
I've seen your boot log with uboot version 1.1.8. Could you share your uboot image please?

Sorry for the delay - I had a busy weekend ...

Please find the MPR-A5 Uboot 1.1.8 binary under:
http://lnxpps.de/openwrt/hame-mpra5/bin … _1.1.8.bin

By the way, seems I found a simple way to make serial console stable - I inserted 1kOhm resistor between USB-UART Tx pin and HAME Rx pin. Now it always boots up with serial port connected.

Sure - there are more ways to solve the startup problem while the console is connected. Your solution is a cheap and easy one. My approach is quite expensive but should work for every router ...


bertc3p0

(Last edited by bertc3p0 on 8 Jul 2013, 20:49)

Hi, I am trying to find the serial RX/TX pins on this mpr-a1 clone, but even if I tried almost every possible combination I don't get any feedback at 57600N1, any idea?

On the device there is the latest uboot version from HAME running and an openwrt initrd image, that I compiled, which is using the lan port as WAN in place of LAN (so no way to login via telnet).

mpr a1 clone front

mpr a1 clone back

i Have New Hame A1 Router ... How TO Flash Open WRT In It And How TO Back To Stock Firmware ... Where i Download Stock Firmware

Turkey, that I downloaded from the following fotodaki http://www.hamedata.com/html/server/download.html HAME_A8/A8P_V1.5.2 accidentally software product (A8 battery 15mA, A8P 1800mA battery) firmware installed.
When I turn on the red light directly to the device. Reset button and turn bright blue light. TFTP program via Ethernet bağlantığımda do not move at all. Rs232 tried to find the ends, but did not succeed.
Waiting for friends who help with information.
1 -) Can I upload the firmware via RS232?
2 -) which firmware to install?
http:/www.acarelektronik.com/3g/1.JPG
http:/www.acarelektronik.com/3g/2.JPG

(Last edited by zogasi on 29 Jul 2013, 19:43)

Hello everyone,

i have a Hame MPR-A1 clone named "YUN2000"

I found the Console connection.

http://i.imagebanana.com/img/3oi89tch/thumb/IMG_20130804_1944041234464231.jpg

Its important to connect the GND after the Router is started otherwise it will not start.

To connect use 57600 8N1

---
seok

(Last edited by seok on 12 Aug 2013, 10:50)

Hi all, I have recently bought a clone board containing the Ralink RT5350F as can be seen here: ralink front and here: ralink back.

The serial connector is working as intended, and the router works as it should, however, I cannot for the life of me get the OpenWRT firmware to flash using the TFTP method. I know the TFTP server is up and running as I can communicate with it from other devices, but when I try to flash the firmware to the router, I get an error either stating that the checksum is bad (?) or that the connection timed out.

I have set my Ubuntu machine to have a static IP address on the eth0 interface (192.168.1.2) and the router has the ip 192.168.1.1 at boot (set through setenv during the boot sequence).

Can anyone tell me what I am doing wrong?

(Last edited by n00bz0rz on 13 Aug 2013, 03:54)

n00bz0rz wrote:

I have set my Ubuntu machine to have a static IP address on the eth0 interface (192.168.1.2) and the router has the ip 192.168.1.1 at boot (set through setenv during the boot sequence).

Can anyone tell me what I am doing wrong?

Use tcpdump to see whats going on. Use short names (e.g test.bin) - sometimes tftp (client or server) doesn't like long names ...

(Last edited by bertc3p0 on 13 Aug 2013, 18:15)

Awesome, thanks, I will try that later on when I get home from work.

I have already renamed the .bin file to something short (openwrt.bin) so that shouldn't be an issue. I will post the log output later on too. I have a feeling that the issue lies with the IP address of the devices boot loader. Is there a way to set this manually so I can be sure I have the correct settings?

Thanks!

Hi, I have since given up using my Linux machine to do this with as it is far too slow, and the hard drive is too small to compile any .bin files (8gb hard drive, it's an old Acer Aspire One).

Here is the output of my hyperterminal window when I try to flash the firmware:

U-Boot 1.1.3 (Jul  8 2013 - 10:13:26)
RT5350 # setenv ipaddr 192.168.1.1
RT5350 # setenv serverip 192.168.1.3
RT5350 # setenv bootfile mpr-a5.bin
RT5350 # tftpboot

 netboot_common, argc= 1

 NetTxPacket = 0x81FE7240

 KSEG1ADDR(NetTxPacket) = 0xA1FE7240

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 Header Payload scatter function is Disable !!

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.U-Boot 1.1.3 (Jul  8 2013 - 10:13:26)
RT5350 # setenv ipaddr 192.168.1.1
RT5350 # setenv serverip 192.168.1.3
RT5350 # setenv bootfile mpr-a5.bin
RT5350 # tftpboot

 netboot_common, argc= 1

 NetTxPacket = 0x81FE7240

 KSEG1ADDR(NetTxPacket) = 0xA1FE7240

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done


 Header Payload scatter function is Disable !!

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.3; our IP address is 192.168.1.1
Filename 'mpr-a5.bin'.

This just repeats and doesn't do anything after this. Is everything set up properly? I can download the .bin file from other machines when the host machine is connected to the main network.

I'm really confused about all this stuff.

Thanks.


EDIT - SOLVED! I didn't realise you had to PUT the file using the software, I thought it would just automatically transfer if the names and IPs are all correct. My apologies. Now to find a binary that works properly tongue

2ND EDIT - ERROR.

So I thought I was making progress, however, when I try to flash the .bin file through TFTP, it results in an 'illigal image' error. Below is the output of the flashing process. Does anyone have any ideas? I'm completely stumped.

TFTP from server 192.168.1.1; our IP address is 192.168.1.2
Filename 'openwrt.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REQUEST, return our IP
ARPOP_REQUEST: 192.168.1.1================
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ####
done
Bytes transferred = 3014660 (2e0004 hex)
NetBootFileXferSize= 002e0004
raspi_erase_write: offs:50000, count:2e0004
raspi_erase: offs:50000 len:2e0000
..............................................
raspi_write: to:50000 len:2e0000
..............................................
raspi_read: from:50000 len:10000
.raspi_read: from:60000 len:10000
.raspi_read: from:70000 len:10000
.raspi_read: from:80000 len:10000
.raspi_read: from:90000 len:10000
.raspi_read: from:a0000 len:10000
.raspi_read: from:b0000 len:10000
.raspi_read: from:c0000 len:10000
.raspi_read: from:d0000 len:10000
.raspi_read: from:e0000 len:10000
.raspi_read: from:f0000 len:10000
.raspi_read: from:100000 len:10000
.raspi_read: from:110000 len:10000
.raspi_read: from:120000 len:10000
.raspi_read: from:130000 len:10000
.raspi_read: from:140000 len:10000
.raspi_read: from:150000 len:10000
.raspi_read: from:160000 len:10000
.raspi_read: from:170000 len:10000
.raspi_read: from:180000 len:10000
.raspi_read: from:190000 len:10000
.raspi_read: from:1a0000 len:10000
.raspi_read: from:1b0000 len:10000
.raspi_read: from:1c0000 len:10000
.raspi_read: from:1d0000 len:10000
.raspi_read: from:1e0000 len:10000
.raspi_read: from:1f0000 len:10000
.raspi_read: from:200000 len:10000
.raspi_read: from:210000 len:10000
.raspi_read: from:220000 len:10000
.raspi_read: from:230000 len:10000
.raspi_read: from:240000 len:10000
.raspi_read: from:250000 len:10000
.raspi_read: from:260000 len:10000
.raspi_read: from:270000 len:10000
.raspi_read: from:280000 len:10000
.raspi_read: from:290000 len:10000
.raspi_read: from:2a0000 len:10000
.raspi_read: from:2b0000 len:10000
.raspi_read: from:2c0000 len:10000
.raspi_read: from:2d0000 len:10000
.raspi_read: from:2e0000 len:10000
.raspi_read: from:2f0000 len:10000
.raspi_read: from:300000 len:10000
.raspi_read: from:310000 len:10000
.raspi_read: from:320000 len:10000
.raspi_read: from:330000 len:10000
.raspi_erase: offs:330000 len:10000
.
raspi_write: to:330000 len:10000
.
raspi_read: from:330000 len:10000
.Done!
## Booting image at bc050000 ...
raspi_read: from:50000 len:40
.Bad illegal image !

(Last edited by n00bz0rz on 15 Aug 2013, 05:43)

Hi,

please find attached a log of my upgrade process (sysupgrade bin using point 4 of the boot menu to flash):

RT5350 # setenv ipaddr 192.168.0.199                                                            
RT5350 # setenv serverip 192.168.0.9                                                            
RT5350 # setenv bootfile  hame.bin 
RT5350 # saveenv
RT5350 # tftpboot                                                               
                                                                                
 netboot_common, argc= 1                                                        
                                                                                
 KSEG1ADDR(NetTxPacket) = 0xA0FE5C40                                            
                                                                                
 NetLoop,call eth_halt !                                                        
                                                                                
 NetLoop,call eth_init !                                                        
Trying Eth0 (10/100-M)                                                          
                                                                                
 ETH_STATE_ACTIVE!!                                                             
Using Eth0 (10/100-M) device                                                    
TFTP from server 192.168.0.9; our IP address is 192.168.0.199                   
Filename 'hame.bin'.                
                                                                                
 TIMEOUT_COUNT=10,Load address: 0x80100000                                      
Loading: checksum bad                                                           
checksum bad                                                                    
checksum bad                                                                    
checksum bad                                                                    
checksum bad                                                                    
checksum bad  
Got ARP REPLY, set server/gtwy eth addr (00:1d:7d:d9:a4:25)                     
Got it                                                                          
#################################################################               
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         ##################                                                     
done                                                                            
Bytes transferred = 2752516 (2a0004 hex)                                        
NetBootFileXferSize= 002a0004                                                   
RT5350 # erase linux                                                            
                                                                                
 Erase linux kernel block !!                                                    
From 0x50000 length 0x3B0000                                                    
raspi_erase: offs:50000 len:3b0000                                              
...........................................................                     
RT5350 # cp.linux                                                               
                                                                                
 Copy linux image[2752516 byte] to SPI Flash[0x00050000]....                    
raspi_write: to:50000 len:2a0004                                                
...........................................                                     
RT5350 # reset

Hi, I would try this, but I cannot access the bootloader menu selection anymore. When it boots up, it does not allow me to type anything into the terminal window and immediately boots to option 3 (which no longer works).

Any idea what I've done? I'm tearing my hair out here tongue

EDIT - I can boot into TFTP by holding down the hardware button on the device, but this doesn't help as any images that are flashed through this method are 'illegal images' apparently.

(Last edited by n00bz0rz on 15 Aug 2013, 15:28)

hello

can somebody help me with this device ?
after 1 day stop working and now is good only for charging my phone .

http://sdrv.ms/1dfCJkc

kalya wrote:

hello

can somebody help me with this device ?
after 1 day stop working and now is good only for charging my phone .

http://sdrv.ms/1dfCJkc

can you please upload a picture from the other side?

If you whould can you please try the upper pins from the 4 Resistors directly under the Ralink Chip (4 black resitors in a row).

if you try connect the Gnd after you power on the Router !

I am still having no luck flashing any images to my router, I am still having the 'illegal image' message. Does anyone know what this means and how can I fix it?

Thanks.

I had a problem with my device.
It seemed to be working, but when i went to the router site(192.168.169.1),
there was this Virtual Blue Color button, and i pressed that.
After that, all i get is a Red Flashing light, which never turns Blue.

Later, i tried using it as a router, and went to the site, and hit the button again.
Now even in the router mode it shows a red blinking light.

Any suggestions on how i can fix this?

Thanks!

msly wrote:

I had a problem with my device.
It seemed to be working, but when i went to the router site(192.168.169.1),
there was this Virtual Blue Color button, and i pressed that.
After that, all i get is a Red Flashing light, which never turns Blue.

Later, i tried using it as a router, and went to the site, and hit the button again.
Now even in the router mode it shows a red blinking light.

Any suggestions on how i can fix this?

Thanks!

I have the same problem and I think it's gone forever !

kalya wrote:
msly wrote:

I had a problem with my device.
It seemed to be working, but when i went to the router site(192.168.169.1),
there was this Virtual Blue Color button, and i pressed that.
After that, all i get is a Red Flashing light, which never turns Blue.

Later, i tried using it as a router, and went to the site, and hit the button again.
Now even in the router mode it shows a red blinking light.

Any suggestions on how i can fix this?

Thanks!

I have the same problem and I think it's gone forever !


Here is what i did, which may have caused it to fix.
I let it on for an hour or so, tried to drain its battery. Later, i tried hitting the reset button with a Pin.Hit is leave it, about 10-20 times. Hit reset in all stages. First at C, then at R.
Later keep it pressed(reset), and leave it on, then turn it on and off,2-3 times.
And it got fixed.
I dont know what the exact issue was, and how it got fixed(probably got reset).
Has anyone else experienced this?
Any suggestions on a permanent Fix?

Thanks

Sorry, posts 526 to 525 are missing from our archive.