OpenWrt Forum Archive

Topic: Zyxel P-2812HNU-F3-telenor debrand ?

The content of this topic has been archived between 30 Mar 2018 and 4 May 2018. Unfortunately there are posts – most likely complete pages – missing.

Does the host name show up as you put it in the config file?

cannot change domain name, gived me caracter error.

Any idea if that is some client side script or if it's an answer of the webserver? In the first case you could use some debugging tool in your browser to pull the check in the Apply button.

Yes, after modified in config file, it appair as i write h ;......., but when i try to change domain, not let me do because caracter error of hostname.
I think is a web server error, when i go home i will post some images.

cornelus@home-pc:~/Downloads/fmk$ nmap 10.0.0.138 -p1-255

Starting Nmap 5.21 ( http://nmap.org ) at 2013-11-01 16:49 EET
Nmap scan report for h (10.0.0.138)
Host is up (0.62s latency).
Not shown: 250 closed ports
PORT    STATE    SERVICE
21/tcp  filtered ftp
23/tcp  filtered telnet
53/tcp  open     domain
80/tcp  open     http
139/tcp open     netbios-ssn

Nmap done: 1 IP address (1 host up) scanned in 6.37 seconds
cornelus@home-pc:~/Downloads/fmk$ nmap 10.0.0.138 -p24

Starting Nmap 5.21 ( http://nmap.org ) at 2013-11-01 16:49 EET
Nmap scan report for h (10.0.0.138)
Host is up (0.00070s latency).
PORT   STATE  SERVICE
24/tcp closed priv-mail

I flashed  FW 310TUJ0C0.bin with the script

# ./fwupgrade_erase_write_ras.sh

No news. I can access, with 3.10, the web page but router is still unstable and after 4 minutes reboots.

No way,
Oxo (thanks thanks thanks) today sent me all the mtd from his router but I got always the same behaviour.....
- With FW 3.10, web access & reboots after 4 mins.
- With FW 3.11, NO web access & reboots after 4 mins.

Only thing remain to try is to move to tuj bootloader.

(Last edited by cornelus2009 on 2 Nov 2013, 21:23)

cornelus2009 wrote:

Only thing remain to try is to move to tuj bootloader.

Right.....so how I can do that?

Tomorow we can try together.

passero is bricked sad

oxo, need ur help.

found a way to unsquashfs my filesystem.

backed up loop partition to usb stick, unsquashed with fmk (squashfs-4.2), and inspected web contents for dlna and printserver, and found that requested .cgi executables missing from there.

i need to backup for me ur loop partition and send to me, to extract from there print and mediaserver cgi's

thanks.

cornelus obtained GPL code, that we are trying to compile. https://www.dropbox.com/sh/eywont3uni0r8gw/-Wwe6MCudj

If one gets a version of Ubuntu 9.10 in a virtualbox.org, it seems to be possible to compile.
(Trying to complie with Ubuntu 12.04 gives bad charma...)

Note about the supplied GPL:
fakeroot, in the toolchain, is missing it's library: find  fakeroot and rename fakeroot.org and then use the ubuntu supplied fakeroot.

Note about Ubuntu 9.10 (not supported anymore: doesn't time fly ...):
Get via:
http://old-releases.ubuntu.com/releases/karmic/ - I took 32 bit desktop
Y need to install m4 and flex plus fakeroot:

sudo sed -i -e 's/archive.ubuntu.com\|security.ubuntu.com/old-releases.ubuntu.com/g' /etc/apt/sources.list
sudo apt-get update && sudo apt-get dist-upgrade
sudo apt-get install m4
sudo apt-get install flex
sudo apt-get install fakeroot

The final make ras gives:

==> ras
cp -f /home/owen/f3/310TUJ0/makecode/product-depconfig/fw.txt /home/owen/f3/310TUJ0/makecode/../build/
cd /home/owen/f3/310TUJ0/makecode/../build; ./makeras.sh
parse image names
parse configuration file
parse configuration file: fw.txt

========> process RootFS <========
pack default romfile with RootFS
add ZyCLiP image header to ./rootfs.img
image checksum: 0b32
romfile checksum: 6a2f
header checksum: b5

========> process Kernel <========
add ZyCLiP image header to ./uImage
image checksum: 40e4
header checksum: 490d

merge zboot
========> merge all images <====
copy image, type: 1
copy romfile, ofs: 102cfc0
copy image, type: 10
copy romfile, ofs: 135e40
indicator: 1128800
checksum of Z-Boot with OOB: b300

All necessary files are copied to directory 'final-images' for release.

FIRMWARE ID --> V3.10(TUS.0)_20110629
Kernel Checksum --> 000040e4
RootFS Checksum --> 00000b32

Next steps if there is a sucessfull "flash" or preferable, network boot, is:
http://wiki.openwrt.org/doc/devel/add.new.platform and in particular the diff to original kernel

VERSION = 2
PATCHLEVEL = 6
SUBLEVEL = 20
EXTRAVERSION = .19$(shell if [ -f .hhl_target_lspname ]; then \
                echo "-`cat .hhl_target_lspname`"; \
            fi)
NAME = Homicidal Dwarf Hamster

https://github.com/torvalds/linux/tree/v2.6.20

(Last edited by oxo on 16 Nov 2013, 16:46)

passero wrote:

New FW version ??? The revision looks old but the date is new...

http://origin-tw.zyxel.com/za/en/suppor … b=Firmware

Right now only a pdf file with changelog.

Hi passero.

Have a look to documentation: new firmware for P-2813HNU-F1 RAS, but firmware for european version is OBM. Different bootbase.

I know you have to match bootbase to firmware version, and in case of debranding, we need a WHOLE image that includes bootbase + firmware.

I already done something similar with a P870HW 51a v2 from Movistar (Spain).

@oxo

Please, oxo, could you provide us with a full dump of your flash?, with debug mode flag activated, if possible. Thanks in advance.

If I have a full dump, I could generate a whole image by comparison, with an hex editor. I already done with Zyxel P-870HW 5a v2 and worked.

I can provide you with a serial cable if necessary, just mailing from Spain to Denmark. (about 1 week to get to you). I have a couple of them.

Regards,
Alex

(Last edited by asmartin on 24 Nov 2013, 09:39)

Well, I mounted a whole image, but I need to calculate zboot signature, maybe can be recover from GPL software?

I finally canceled verification and uploaded my "mixed" image (bootbase + firmware) by tftp to address 0x80000000(working in uboot environment), but when I tried to boot from memory it showed me an strange message: Wrong Magic Number

It's a kind of magic .... ?¿?¿??¿

Now I will try to compile the GPL version and upload full image with good bootbase, and later I will upload right firmware.

(Last edited by asmartin on 24 Nov 2013, 09:49)

asmartin wrote:
passero wrote:

New FW version ??? The revision looks old but the date is new...

http://origin-tw.zyxel.com/za/en/suppor … b=Firmware

Right now only a pdf file with changelog.

Hi passero.

Have a look to documentation: new firmware for P-2813HNU-F1 RAS, but firmware for european version is OBM. Different bootbase.

I know you have to match bootbase to firmware version, and in case of debranding, we need a WHOLE image that includes bootbase + firmware.

I already done something similar with a P870HW 51a v2 from Movistar (Spain).

Thank you very much for the info but, unfortunately, I bricked my device :-(

(Last edited by passero on 24 Nov 2013, 10:09)

Passero, could you access to z-boot environment?, if so, don'nt worry, I will try to make a whole image to load the right bootbase, and later the original firmware from zyxel.

My P-2812HNU-F1 is also bricked sad

(Last edited by asmartin on 24 Nov 2013, 11:53)

I prepared Kubuntu 9.10 machine under vmware player, and followed all steps, but... when I tried to untar 311TUJ3C0.tar.gz it shows me an error

asmartin@zyxel:~/P-2812HNU-F1$ tar -xvzf 311TUJ3C0.tar.gz > /dev/null
tar: Skipping to next header

gzip: stdin: unexpected end of file
tar: Child returned status 1
tar: Exiting with failure status due to previous errors
asmartin@zyxel:~/P-2812HNU-F1$

so I think this sourcefile is faulty or defective.

Downloaded twice with same CRC (HASH) result. Definitively it's faulty.

May anybody upload RIGHT source file to same location in dropbox again?

(Last edited by asmartin on 24 Nov 2013, 19:14)

oxo wrote:

cornelus obtained GPL code, that we are trying to compile. https://www.dropbox.com/sh/eywont3uni0r8gw/-Wwe6MCudj

If one gets a version of Ubuntu 9.10 in a virtualbox.org, it seems to be possible to compile.
(Trying to complie with Ubuntu 12.04 gives bad charma...)

Note about the supplied GPL:
fakeroot, in the toolchain, is missing it's library: find  fakeroot and rename fakeroot.org and then use the ubuntu supplied fakeroot.

Note about Ubuntu 9.10 (not supported anymore: doesn't time fly ...):
Get via:
http://old-releases.ubuntu.com/releases/karmic/ - I took 32 bit desktop
Y need to install m4 and flex plus fakeroot:

sudo sed -i -e 's/archive.ubuntu.com\|security.ubuntu.com/old-releases.ubuntu.com/g' /etc/apt/sources.list
sudo apt-get update && sudo apt-get dist-upgrade
sudo apt-get install m4
sudo apt-get install flex
sudo apt-get install fakeroot

Hi OXO.

I couldn't install m4, flex or fakeroot from apt-get, did you installed with apt-get or manually (./configure &&make &&make install)?

asmartin@zyxel:~$ sudo apt-get install m4
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package m4
asmartin@zyxel:~$ sudo apt-get install m4
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package m4
asmartin@zyxel:~$ sudo apt-get install flex
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package flex is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package flex has no installation candidate
asmartin@zyxel:~$ sudo apt-get install fakeroot
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package fakeroot is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package fakeroot has no installation candidate
asmartin@zyxel:~$

(Last edited by asmartin on 24 Nov 2013, 18:25)

Hi OXO.

Found mistake.

You have to edit /etc/sources.list and change (with gedit ot kate) "us.old-releases" (where us means locale, i.e. in spanish regional setting should be "es.old-releases") to "old-releases" and then make and apt-get update, NO upgrade.

m4, flex and fakeroot are obsolete packages and could not be found with apt-get install if you make an upgrade.

Finally, same error:

tar: Skipping to next header

gzip: stdin: unexpected end of file
tar: Child returned status 1
tar: Exiting with failure status due to previous errors

I need 311TUJ3C0.tar.gz in working order.

Could you help me?

(Last edited by asmartin on 24 Nov 2013, 21:14)

F3 GPL is complete, in the heat of all our threads, forgot to post that F1 is corrupt as I really only wanted boot source code which is possible to extract from the corrupt file

F3 GPL can help ensure an installation that should be able to compile a future F1 which I should receive in december.

fakeroot etc where obtained from archives ( I make a new Virtual and check the process at some time)

send a serial cable if it will help y (my address in PM): the only reason being I cannot be bothered finding one that works smile

oxo wrote:

F3 GPL is complete, in the heat of all our threads, forgot to post that F1 is corrupt as I really only wanted boot source code which is possible to extract from the corrupt file

F3 GPL can help ensure an installation that should be able to compile a future F1 which I should receive in december.

fakeroot etc where obtained from archives ( I make a new Virtual and check the process at some time)

send a serial cable if it will help y (my address in PM): the only reason being I cannot be bothered finding one that works smile

Hi oxo.

Already compiled but it's F3 image WITHOUT bootbase. Just the firm (rootfs and applications)

I need to ompile WITH bootbase that contains all structure of drivers and so on in ageement with firmware.

To solve fakeroot inconvenience I just deleted "fakeroot" in makefile and launched as root.

(Last edited by asmartin on 25 Nov 2013, 17:23)

Meaning of feature bits:

;/************************************************************************
; *
; *  Copyright (C) 2008 ZyXEL Communications, Corp.
; *  All Rights Reserved.
; *
; * ZyXEL Confidential; Need to Know only.
; * Protected as an unpublished work.
; *
; * The computer program listings, specifications and documentation
; * herein are the property of ZyXEL Communications, Corp. and shall
; * not be reproduced, copied, disclosed, or used in whole or in part
; * for any reason without the prior express written permission of
; * ZyXEL Communications, Corp.
; *
; *************************************************************************/
;/*
;** $Log: MRD format $
;** Initial revision
;*/

;
;Parameter file format:
;
;Start    # of    Data    Parameters
;Addr    Param    Type
;-----    ------    ------    ----------
;<Hex>    <Dec>    1(Str)
;        2(Hex)
;

;typedef struct mrd
;{
;uint8    VendorName[32];
1feb8    26        1        ZyXEL Communications Corp. ;

;uint8    ProductName[32];
1fed8    13        1        P-2812HNUL-F1

;uint8    EtherAddr;
1fef8    *        2        00 13 49 11 66 88

;uint8    CountryCode;
1fefe    *        2        ff ff

;uint8    FeatureBits[256];
1ff00    *        2        06 00 00 04    ; [00] ~ [03]: Model ID (0xff means unknown)
1ff04    *        2        19                   ; [04] : ImagePlan (0xff means unknown)
                                                       ; Bit 0: Double Image (0: No double image, 1: support double image)
                                                       ; Bit 1: Image Upgrade Mechanism (0: full function, 1: rescue function)
                                                       ; Bit 2: Support device tree (0: No, 1: Yes)
                                                       ; Bit 3: Kernel and RootFS is merged into one RAS image(0: No, 1: Yes)
                                                       ; Bit 4: Double MRD_CERT (0: single MRD_CERT, 1: support double MRD_CERT)
                                                       ; Bit 5 ~ Bit 7: Reserved 
1ff05    *        2        01                   ; [05] : Flash Number (1: one flash, 2: two flash)
1ff06    *        2        00 ff f8 00       ; [06] ~ [09]: Image version of max upgrade count for double image use
1ff0a    *        2        01                   ; [10] : Engineer debug flag (0: disable, 1: enable)
1ff0b    *        2        00                   ; [11] : Embed Flag (embed rootfs into kernel image. 0: kernel and rootfs separate, 1: kernel combination with rootfs)
1ff0c    *        2        01                    ; [12] : model ID checking flag (0:disable checking, 1:enable checking)
1ff0d    *        2        00                    ; [13] : Reserved
1ff0e    *        2        00                    ; [14] : Reserved
1ff0f    *        2        00                     ; [15] : Reserved
1ff10    *        2        00 00 00 00     ; [16] ~ [19] : Reserved
1ff14    *        2        00 00 00 00     ; [20] ~ [23] : Reserved
1ff18    *        2        00 00 00 00     ; [24] ~ [27] : Reserved
1ff1c    *        2        00 00 00 00      ; [28] ~ [31] : Reserved
1ff20    *        2        01                    ; [32] : NORPageSize (0: 8K, 1:64K, 2:128K for device tree update)
1ff21   *               2               08              ; [33] : MAC Address Quantity
1ff22   *               2               00 00 00        ; [34] ~ [36] : HW Version
1ff25   13              1        fffffffffffff   ; [37] ~ [50] : Serial Number
1ff33   *               2               00              ; [51] : Main feature bits
1ff34   *               2               ff ff ff ff     ; [52] ~ [75]: DDR calibration data
1ff38   *               2               ff ff ff ff     ;
1ff3c   *               2               ff ff ff ff     ;
1ff40   *               2               ff ff ff ff     ;
1ff44   *               2               ff ff ff ff     ;
1ff48   *               2               ff ff ff ff     ;
1ffff   *               2               00              ; [76] ~ [255]: Reserved
;}
;
passero wrote:

Hi cornelus2009,

I have Zyxel P-2812HNU-F1 (from Telfort) and I'm trying to flash it with the default firmware ( P-2812HNU-F1_3.11(TUJ.0)C0 ).
I tried also to boot the bin file "311TUJ0C0.bin" from tftp server but without success.
Did you find how to flash from the "VR9 #" prompt?

Could you also, please, explain me how to get root on my device or how you got root on your device?

Thank you!

What is your Bootbase version ?

Do you have UART cable to access to your router?

(Last edited by asmartin on 26 Nov 2013, 22:58)

passero wrote:
asmartin wrote:
passero wrote:

New FW version ??? The revision looks old but the date is new...

http://origin-tw.zyxel.com/za/en/suppor … b=Firmware

Right now only a pdf file with changelog.

Hi passero.

Have a look to documentation: new firmware for P-2813HNU-F1 RAS, but firmware for european version is OBM. Different bootbase.

I know you have to match bootbase to firmware version, and in case of debranding, we need a WHOLE image that includes bootbase + firmware.

I already done something similar with a P870HW 51a v2 from Movistar (Spain).

Thank you very much for the info but, unfortunately, I bricked my device :-(

Hi passero.

Finally I know RSA version is version for South Africa, but OBM version is for Europe. That's the difference. So that image does not apply to our routers in Europe.

Moreover, GPL image does not include bootbase (where drivers reside) and that's a faulty to GPL license that Zyxel should correct.

I requested GPL sources but they don't want to provide them to me, what can I do?