This little box is found in many FTTH installations in Sweden. It's used as a media converter/managed switch
only. It is usually locked by the ISP, and only one LAN port is practically useable. In my search for a way
to use all the ports, I found out that the board is a BCM96328avng. It also ha a Marvell 88E6352 switch controller. I thought this device could do more, and indeed, I was able to install OpenWrt on it! However I have not got the networking up and running, and the LED's aren't working correctly either. How much work would it be to get OpenWrt fully working on this device and is it worth it? Did I mention there's no WiFi on it?

The OEM firmware: XG6846_4.12ITT01.69_20150430 (do a web search for it)
Also do a search for "inteno GPL" to find some of the source code.

CFE:

CFE version 1.0.38-114.101 for BCM96328 (32bit,SP,BE)
Build Date:  12  4 18:39:23 CST 2013 (anton@anton-fedora)
Copyright (C) 2000-2011 Broadcom Corporation.

HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
Total Flash size: 16384K with 256 sectors
Flash not used for Auxillary File System
Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-10)                   : 96328avng  
Number of MAC Addresses (1-32)    : 11  
Base MAC Address                  : 00:00:00:00:00:00  
PSI Size (1-64) KBytes            : 24  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Auxillary File System Size Percent: 0  
Main Thread Number [0|1]          : 0  

Photos at imgur dot com/a/72l9I

I have the same device. Used firmware image "openwrt-brcm63xx-generic-96328avng-generic-squashfs-cfe-4M.bin"

It has "Marvell 88E6352 switch" and based on DSA  (Distributed Switch Architecture).

So... to make it working, I compiled openwrt with:
             * Kernel Modules->DSA Support->kmod_dsa + kmod-dsa-mv88e6352

But nothing is changed. No network, no switch, no wan or lan. Only serial console is working.

This switch is working on wrt3200acm with openwrt. So how can we add this switch support to 96328avng board?

photos at ibb dot co/ejsPpF

DMESG output

# dmesg
<5>Linux version 2.6.30 (mike_chen@cs1) (gcc version 4.4.2 (Buildroot 2010.02-g5
<4>HS Serial flash device: name S25FL128, id 0x0118 size 16384KB
<4>96328avng prom init
<6>CPU revision is: 0002a075 (Broadcom4350)
<4>DSL SDRAM reserved: 0x100000
<6>Determined physical RAM map:
<6> memory: 03f00000 @ 00000000 (usable)
<4>Zone PFN ranges:
<4>  DMA      0x00000000 -> 0x00001000
<4>  Normal   0x00001000 -> 0x00003f00
<4>Movable zone start PFN for each node
<4>early_node_map[1] active PFN ranges
<4>    0: 0x00000000 -> 0x00003f00
<7>On node 0 totalpages: 16128
<7>free_area_init_node: node 0, pgdat 80334130, node_mem_map 81000000
<7>  DMA zone: 32 pages used for memmap
<7>  DMA zone: 0 pages reserved
<7>  DMA zone: 4064 pages, LIFO batch:0
<7>  Normal zone: 94 pages used for memmap
<7>  Normal zone: 11938 pages, LIFO batch:1
<4>Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16002
<5>Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
<4>wait instruction: enabled
<4>Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.
<4>Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
<6>NR_IRQS:128
<4>PID hash table entries: 256 (order: 8, 1024 bytes)
<6>console [ttyS0] enabled
<6>Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
<6>Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
<6>Memory: 60304k/64512k available (2545k kernel code, 4188k reserved, 676k dat)
<6>Calibrating delay loop... 319.48 BogoMIPS (lpj=159744)
<4>Mount-cache hash table entries: 512
<6>--Kernel Config--
<6>  SMP=0
<6>  PREEMPT=0
<6>  DEBUG_SPINLOCK=0
<6>  DEBUG_MUTEXES=0
<4>Broadcom Logger v0.1 Apr 14 2015 17:25:33
<6>net_namespace: 812 bytes
<6>NET: Registered protocol family 16
<4>Total Flash size: 16384K with 256 sectors
<4>Flash not used for Auxillary File System
<4>registering PCI controller with io_map_base unset
<4>registering PCI controller with io_map_base unset
<4>bio: create slab <bio-0> at 0
<5>SCSI subsystem initialized
<6>usbcore: registered new interface driver usbfs
<6>usbcore: registered new interface driver hub
<6>usbcore: registered new device driver usb
<7>pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff]
<7>pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff]
<6>pci 0000:01:00.0: PME# supported from D0 D3hot
<6>pci 0000:01:00.0: PME# disabled
<6>pci 0000:01:00.0: PCI bridge, secondary bus 0000:02
<6>pci 0000:01:00.0:   IO window: disabled
<6>pci 0000:01:00.0:   MEM window: disabled
<6>pci 0000:01:00.0:   PREFETCH window: disabled
<7>PCI: Setting latency timer of device 0000:01:00.0 to 64
<4>BLOG v3.0 Initialized
<4>BLOG Rule v1.0 Initialized
<4>Broadcom IQoS v0.1 Apr 14 2015 17:26:18 initialized
<4>Broadcom GBPM v0.1 Apr 14 2015 17:26:19 initialized
<6>NET: Registered protocol family 2
<6>IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
<6>TCP established hash table entries: 2048 (order: 2, 16384 bytes)
<6>TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
<6>TCP: Hash tables configured (established 2048 bind 2048)
<6>TCP reno registered
<6>NET: Registered protocol family 1
<6>squashfs: version 4.0 (2009/01/31) Phillip Lougher
<6>squashfs: version 4.0 with LZMA457 ported by BRCM
<6>fuse init (API version 7.11)
<6>msgmni has been set to 117
<6>io scheduler noop registered (default)
<4>pcieport-driver 0000:01:00.0: device [14e4:6328] has invalid IRQ; check vendS
<7>PCI: Setting latency timer of device 0000:01:00.0 to 64
<4>Driver 'sd' needs updating - please use bus_type methods
<6>PPP generic driver version 2.4.2
<6>PPP Deflate Compression module registered
<6>PPP BSD Compression module registered
<6>NET: Registered protocol family 24
<6>tun: Universal TUN/TAP device driver, 1.6
<6>tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
<4>bcm963xx_mtd driver v2.0
<4>File system address: 0xb8800100
<4>Registered device mtd[BCM63XX RootFS] dev[0] Flash[0xb8800100,2056192]
<6>ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
<4>PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
<7>PCI: Setting latency timer of device 0000:00:0a.0 to 64
<6>ehci_hcd 0000:00:0a.0: EHCI Host Controller
<6>ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
<4>ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
<6>ehci_hcd 0000:00:0a.0: irq 50, io mem 0x10002500
<6>ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00
<6>usb usb1: configuration #1 chosen from 1 choice
<6>hub 1-0:1.0: USB hub found
<6>hub 1-0:1.0: 1 port detected
<6>ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
<4>PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
<7>PCI: Setting latency timer of device 0000:00:09.0 to 64
<6>ohci_hcd 0000:00:09.0: OHCI Host Controller
<6>ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
<6>ohci_hcd 0000:00:09.0: irq 49, io mem 0x10002600
<6>usb usb2: configuration #1 chosen from 1 choice
<6>hub 2-0:1.0: USB hub found
<6>hub 2-0:1.0: 1 port detected
<6>usbcore: registered new interface driver usblp
<6>Initializing USB Mass Storage driver...
<6>usbcore: registered new interface driver usb-storage
<6>USB Mass Storage support registered.
<4>brcmboard: brcm_board_init entry
<4>PCIe: No device found - Powering down
<6>Serial: BCM63XX driver $Revision: 3.00 $
<6>Magic SysRq enabled (type ^ h for list of supported commands)
<6>ttyS0 at MMIO 0xb0000100 (irq = 36) is a BCM63XX
<6>ttyS1 at MMIO 0xb0000120 (irq = 47) is a BCM63XX
<4>Total # RxBds=1920
<4>bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized
<4>
<4>GACT probability NOT on
<4>Mirror/redirect action on
<4>u32 classifier
<4>    input device check on
<4>    Actions configured
<6>TCP cubic registered
<6>Initializing XFRM netlink socket
<6>NET: Registered protocol family 17
<6>NET: Registered protocol family 15
<6>802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
<6>All bugs added by David S. Miller <davem@redhat.com>
<4>VFS: Mounted root (squashfs filesystem) readonly on device 31:0.
<6>Freeing unused kernel memory: 120k freed
<4>chipinfo: module license 'proprietary' taints kernel.
<4>Disabling lock debugging due to kernel taint
<4>brcmchipinfo: brcm_chipinfo_init entry
<4>Broadcom Ingress QoS Module  Char Driver v0.1 Apr 14 2015 17:25:56 Registere>
<4>
<4>Broadcom Ingress QoS ver 0.1 initialized
<4>BPM: tot_mem_size=67108864B (64MB), buf_mem_size=10066329B (9MB), num of buf6
<4>Broadcom BPM Module Char Driver v0.1 Apr 14 2015 17:25:55 Registered<244>
<4>[NTC bpm] bpm_set_status: BPM status : enabled
<4>
<4>NBUFF v1.0 Initialized
<4>Initialized fcache state
<4>Broadcom Packet Flow Cache  Char Driver v2.2 Apr 14 2015 17:25:56 Registered>
<4>Created Proc FS /procfs/fcache
<4>Broadcom Packet Flow Cache registered with netdev chain
<4>Broadcom Packet Flow Cache learning via BLOG enabled.
<4>Constructed Broadcom Packet Flow Cache v2.2 Apr 14 2015 17:25:56
<4>Broadcom BCM6328B0 Ethernet Network Device v0.1 Apr 14 2015 17:25:58
<4>ETH Init: Ch:0 - 200 tx BDs at 0xa3972000
<4>ETH Init: Ch:0 - 1920 rx BDs at 0xa38a0000
<4>dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
<4>eth0: MAC Address: XX:XX:XX:XX:XX:XX
<2>eth0 Link UP 1000 mbps full duplex
<6>message received before monitor task is initialized kerSysSendtoMonitorTask
<4>Init switch ports for igmpsnooping
<4>Init switch LAN1~4 ports for EEE, enable = 0
<6>Marvell switch control module loaded successfully.
<6>xavi_igmpsnooping module loaded successfully.
<6>XAVi fiber control module loaded successfully.
<6>XAVi LED mode module loaded successfully.
<4>XAVi port_limit  Apr 14 2015 17:26:04 debug (0)
<4>SFP fiber start
<6>device eth0 entered promiscuous mode
<6>br0: port 1(eth0) entering forwarding state
<4>Scratch pad is not initialized.
<4>No scratch pad found.  Initialize scratch pad...
<6>monitor task is initialized pid= 281
<6>device tap0 entered promiscuous mode
<6>br0: port 2(tap0) entering forwarding state
<6>br0: port 1(eth0) entering disabled state
<6>br0: port 1(eth0) entering forwarding state

(Last edited by deniztaskin on 15 Sep 2017, 12:35)

# portstat
Interface,Unicast,Broadcast,Multicast,FCS,Pause,Speed,Duplex
LAN1-RX,0,0,0,0,0,Link is down
LAN1-TX,0,0,0,0,0,Link is down
LAN2-RX,0,38,90,0,0,1000 Mbps, Full-duplex
LAN2-TX,0,0,0,0,0,1000 Mbps, Full-duplex
LAN3-RX,0,0,0,0,0,Link is down
LAN3-TX,0,0,0,0,0,Link is down
LAN4-RX,0,0,0,0,0,Link is down
LAN4-TX,0,0,0,0,0,Link is down
EXT1-RX,0,0,0,0,0,Link is down
EXT1-TX,0,0,0,0,0,Link is down
WAN-RX,0,0,0,0,0,Link is down
WAN-TX,0,0,0,0,0,Link is down
CPU-RX,0,0,107,0,0,1000 Mbps, Full-duplex
CPU-TX,0,76,21,0,0,1000 Mbps, Full-duplex