OpenWrt Forum Archive

Topic: Sercomm VD625 Teardown

The content of this topic has been archived on 6 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
arny91
28 Jan 2017, 20:36

This modem is currently used by the customers of the Italian ISP TIM. (ex Telecom Italia)

I wonder why nobody has done this yet. So here are the specs:

Flash:F59L2G81A -> 256MB
RAM: NANYA NT5CC64M16GP-D1 -> 128MB
CPU: BCM63168VKFEBG
Eth PHY: BCM53124SKMMLG
Wireless PHY: BCM4360KMLG
VDSL PHY: BCM6303
SLIC:  Le9672WQC

there is also a http://www.ti.com/product/MSP430G2513 near the wireless phy.

1 adsl/vdsl port
5 port gigabit ethernet switch
2 fxs ports
2 usb ports (probably usb 2.0)
5 wifi antennas, 4 of them are printed on the main pcb and 1 on a small separated pcb
power: 12 vdc 2a

Some pictures: http://imgur.com/a/fQ47V

(Last edited by arny91 on 7 Feb 2017, 10:57)

Post #2
arny91
3 Feb 2017, 15:10

The serial pinout is the same of this:

https://wiki.openwrt.org/toh/sercom/shg1500


Serial Bootlog:

HELO
CPUI
L1CI
HELO
CPUI
L1CI
4.1602-1.0.38-116.118
DRAM
----
PHYS
STRF
400H
PHYE
DDR3
SIZ4
SIZ3
SIZ2
DINT
USYN
LSYN
MFAS
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN
FPS0
FDPM
PMOK
GFOK
F002
F003
RAM2
NAN9
NAN3
RFS0
NAN5


Base: 4.16_02
CFE version 1.0.38-116.118 for BCM963268 (32bit,SP,BE)
Build Date: Fri Jan 29 14:08:03 CST 2016 (adam@localhost)
Copyright (C) 2000-2013 Broadcom Corporation.

Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 134217728 bytes (128MB)
Boot Address: 0xb8000000

NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc8da block 128KB size 262144KB
Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host/tftp (f/h/c)  : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Default host ramdisk file name    :   
Default ramdisk store address     :   
Board Id (0-29)                   : 963168MBV3  
Number of MAC Addresses (1-32)    : 16  
Base MAC Address                  : b4:a5:ef:73:b5:c8  
PSI Size (1-64) KBytes            : 24  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Auxillary File System Size Percent: 0  
Main Thread Number [0|1]          : 0  
WLan Feature                      : 0x00  
Voice Board Configuration (0-19)  : LE9672  

External switch id = 53125 
SC_DEBUG: Nand Partition Table Magic Found at 20000.
part 0, logic_offset 00000000, logic_length 00020000, real_offset 00000000, real_length 00020000
part 1, logic_offset 00020000, logic_length 000a0000, real_offset 00020000, real_length 000a0000
part 2, logic_offset 000c0000, logic_length 00140000, real_offset 000c0000, real_length 00140000
part 3, logic_offset 00200000, logic_length 00140000, real_offset 00200000, real_length 00140000
part 4, logic_offset 00340000, logic_length 000a0000, real_offset 00340000, real_length 000a0000
part 5, logic_offset 003e0000, logic_length 00140000, real_offset 003e0000, real_length 00140000
part 6, logic_offset 00520000, logic_length 04b00000, real_offset 00520000, real_length 04b00000
part 7, logic_offset 05020000, logic_length 04b00000, real_offset 05020000, real_length 04b00000
part 8, logic_offset 09b20000, logic_length 00140000, real_offset 09b20000, real_length 00140000
part 9, logic_offset 09c60000, logic_length 00140000, real_offset 09c60000, real_length 00140000
part 10, logic_offset 09da0000, logic_length 00500000, real_offset 09da0000, real_length 00500000
part 11, logic_offset 0a2a0000, logic_length 05360000, real_offset 0a2a0000, real_length 05360000
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0

***************************************************
    Sercomm Boot Version 1.0.2.0

***************************************************
Entering Firmware : Everything is OK.
Boot Flag's Magic Found at 9b20000.
Boot Flag's Magic Found at 9c60000.
Find bootFlag successfully.
    BootFlag1: eRcOmM.002
    BootFlag2: eRcOmM.003
Booting from backup image (0xbd020000) ...
Checksum ... OK!
Decompression OK!
Entry at 0x8049e390
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found
Closing DMA Channels
Starting program at 0x8049e390
Linux version 3.4.11-rt19 (root@ubuntu) (gcc version 4.6.2 (Buildroot 2011.11) ) #1 SMP PREEMPT Thu May 19 02:26:05 CST 2016
963168MBV3 prom init
CPU revision is: 0002a080 (Broadcom BMIPS4350)
DSL SDRAM reserved: 0x132000
Determined physical RAM map:
 memory: 07ece000 @ 00000000 (usable)
Zone PFN ranges:
  DMA      0x00000000 -> 0x00001000
  Normal   0x00001000 -> 0x00007ece
Movable zone start PFN for each node
Early memory PFN ranges
    0: 0x00000000 -> 0x00007ece
On node 0 totalpages: 32462
free_area_init_node: node 0, pgdat 805e6e30, node_mem_map 81000000
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 222 pages used for memmap
  Normal zone: 28144 pages, LIFO batch:7
PERCPU: Embedded 28 pages/cpu @81103000 s91968 r8192 d14528 u114688
pcpu-alloc: s91968 r8192 d14528 u114688 alloc=28*4096
pcpu-alloc: [0] 0 [0] 1 
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32208
Kernel command line: root=mtd:rootfs ro rootfstype=jffs2  irqaffinity=0
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Memory: 121728k/129848k available (4722k kernel code, 8120k reserved, 1264k data, 324k init, 0k highmem)
Preemptible hierarchical RCU implementation.
NR_IRQS:128
console [ttyS0] enabled
Allocating memory for DSP module core and initialization code
Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0
Calibrating delay loop... 397.31 BogoMIPS (lpj=198656)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
--Kernel Config--
  SMP=1
  PREEMPT=1
  DEBUG_SPINLOCK=0
  DEBUG_MUTEXES=0
Broadcom Logger v0.1 May 19 2016 02:09:36
CPU revision is: 0002a080 (Broadcom BMIPS4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Brought up 2 CPUs
NET: Registered protocol family 16
Internal 1P2 VREG will be shutdown if unused...Unused, turn it off (00008576-0000856e=8<300)
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0xa0f00000-0xa0ffffff]
pci_bus 0000:00: root bus resource [io  0xa2000000-0xa200ffff]
pci 0000:00:00.0: [14e4:435f] type 00 class 0x028000
pci 0000:00:00.0: reg 10: [mem 0x10004000-0x10005fff]
pci 0000:00:09.0: [14e4:6300] type 00 class 0x0c0310
pci 0000:00:09.0: reg 10: [mem 0x10002600-0x100026ff]
pci 0000:00:0a.0: [14e4:6300] type 00 class 0x0c0320
pci 0000:00:0a.0: reg 10: [mem 0x10002500-0x100025ff]
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0x11000000-0x11efffff]
pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:01:00.0: [14e4:6326] type 01 class 0x060400
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:02:00.0: [14e4:4360] type 00 class 0x028000
pci 0000:02:00.0: reg 10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:02:00.0: supports D1 D2
pci 0000:01:00.0: BAR 8: assigned [mem 0x11000000-0x110fffff]
pci 0000:02:00.0: BAR 0: assigned [mem 0x11000000-0x11007fff 64bit]
pci 0000:01:00.0: PCI bridge to [bus 02-02]
pci 0000:01:00.0:   bridge window [mem 0x11000000-0x110fffff]
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
bcmleg_spi bcmleg_spi.0: master is unqueued, this is deprecated
skbFreeTask created successfully
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 May 19 2016 02:22:45 initialized
Broadcom GBPM v0.1 May 19 2016 02:22:45 initialized
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP: reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS mismatch (64 != 16), using 16 bytes
bcm_tstamp initialized, (hpt_freq=200000000 2us_div=200 2ns_mult=5 2ns_shift=0)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.30 [Flags: R/W].
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.18)
msgmni has been set to 237
io scheduler noop registered (default)
Broadcom NAND controller (BrcmNand Controller)
mtd->oobsize=0, mtd->eccOobSize=0
NAND_CS_NAND_XOR=00000000
B4: NandSelect=40000001, nandConfig=16152300, chipSelect=0
brcmnand_read_id: CS0: dev_id=c8da9095
After: NandSelect=40000001, nandConfig=16152300
DevId c8da9095 may not be supported.  Will use config info
Spare Area Size = 16B/512B
Block size=00020000, erase shift=17
NAND Config: Reg=16152300, chipSize=256 MB, blockSize=128K, erase_shift=11
busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff
timing1 not adjusted: 6574845b
timing2 not adjusted: 00001e96
ECC level changed to 4
OOB size changed to 16
BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 256MB on CS0

Found NAND on CS0: ACC=e3441010, cfg=16152300, flashId=c8da9095, tim1=6574845b, tim2=00001e96
BrcmNAND version = 0x0400 256MB @00000000
brcmnand_scan: B4 nand_select = 40000001
brcmnand_scan: After nand_select = 40000001
handle_acc_control: default CORR ERR threshold  1 bits
ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16
page_shift=11, bbt_erase_shift=17, chip_shift=28, phys_erase_shift=17
Brcm NAND controller version = 4.0 NAND flash size 256MB @10000000
ECC layout=brcmnand_oob_bch4_2k
brcmnand_scan:  mtd->oobsize=64
brcmnand_scan: oobavail=35, eccsize=512, writesize=2048
brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7
-->brcmnand_default_bbt
brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr
Bad block table Bbt0 found at page 0001ffc0, version 0x01 for chip on CS0
Bad block table 1tbB found at page 0001ff80, version 0x01 for chip on CS0
brcmnand_reset_corr_threshold: default CORR ERR threshold  1 bits for CS0
brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0
brcmnandCET: Status -> Deferred
==> sc_setup_mtd_partitions
[sc_setup_mtd_partitions] try read a page at offset = 0x20000
[sc_setup_mtd_partitions] read page OK at offset = 0x20000
mmap flag found on oft = 0x20000
[sc_setup_mtd_partitions] try read a page at offset = 0x20800
[sc_setup_mtd_partitions] read page OK at offset = 0x20800
=====> sc_set_running_rootfs
bootflags 1 = eRcOmM.002bootflags 2 = eRcOmM.003set booting from kfs 2
<===== sc_set_running_rootfs
<== sc_setup_mtd_partitions
Creating 12 MTD partitions on "brcmnand.0":
0x000000000000-0x000000020000 : "cferom"
0x000000020000-0x0000000c0000 : "mmap"
0x0000000c0000-0x000000200000 : "cferam1"
0x000000200000-0x000000340000 : "cferam2"
0x000000340000-0x0000003e0000 : "serial"
0x0000003e0000-0x000000520000 : "protect"
0x000000520000-0x000005020000 : "rootfs_inactive"
0x000005020000-0x000009b20000 : "rootfs"
0x000009b20000-0x000009c60000 : "bootflag1"
0x000009c60000-0x000009da0000 : "bootflag2"
0x000009da0000-0x00000a2a0000 : "xml_cfg"
0x00000a2a0000-0x00000f600000 : "app_dat"
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
usbcore: registered new interface driver cdc_ether
cdc_ncm: 14-Mar-2012
usbcore: registered new interface driver cdc_ncm
usbcore: registered new interface driver qmi_wwan
uhci_hcd: USB Universal Host Controller Interface driver
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver cdc_wdm
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x1 is enabled
SES: LED GPIO 0xc007 is enabled
DYING GASP IRQ initialized 
Serial: BCM63XX driver $Revision: 3.00 $
ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX
ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX
br_fb_bind: FB process hook bound to 803257dc
Broadcom Packet Flow Bond Char Driver v1.0 May 19 2016 02:17:12 Registered<204>
Broadcom Packet Flow Bond registered with netdev chain
Constructed Broadcom Packet Flow Bondv1.0 May 19 2016 02:17:12
Total # RxBds=1448
bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized

bcmPktDma_init: Broadcom Packet DMA Library initialized
IPSEC SPU: SUCCEEDED 
GACT probability NOT on
Mirror/redirect action on
u32 classifier
    input device check on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1902 buckets, 7608 max)
nf_nat_pt: no ports specified
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
L2TP debugfs support
8021q: 802.1Q VLAN Support v1.8
VFS: Mounted root (jffs2 filesystem) readonly on device 31:7.
Freeing unused kernel memory: 324k freed
init started: BusyBox v1.17.2 (2016-05-19 02:41:17 CST)
starting pid 317, tty '': '/etc/rcS'
mount: mounting ramfs on /home failed: No such file or directory
mkdir: can't create directory '/dev/pts': File exists
jffs2: Empty flash at 0x032028ac ends at 0x03203000
chmod: /var: No such file or directory
mkdir: can't create directory '/var/run': File exists
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Warning! ehci_hcd should always be loaded before uhci_hcd and ohci_hcd, not after
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: setting latency timer to 64
ehci_hcd 0000:00:0a.0: EHCI Host Controller
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500
ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: setting latency timer to 64
ohci_hcd 0000:00:09.0: OHCI Host Controller
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new interface driver usblp
chipinfo: module license 'proprietary' taints kernel.
Disabling lock debugging due to kernel taint
brcmchipinfo: brcm_chipinfo_init entry
bcmxtmrt: Broadcom BCM3168D0 ATM/PTM Network Device v0.6 May 19 2016 02:21:39
bcmxtmcfg: bcmxtmcfg_init entry
Broadcom Ingress QoS Module  Char Driver v0.1 May 19 2016 02:17:13 Registered<243>

Broadcom Ingress QoS ver 0.1 initialized
BPM: tot_mem_size=134217728B (128MB), buf_mem_size <15%> =20132655B (19MB), num of buffers=9986, buf size=2016
Broadcom BPM Module Char Driver v0.1 May 19 2016 02:15:02 Registered<244>
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache  Char Driver v2.2 May 19 2016 02:17:14 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
[FHW]  pktDbgLvl[0xc03656e0]=0
[FHW]  fhw_construct: 
Initialized Fcache HW accelerator layer state
flwStatsThread created
Constructed Broadcom Packet Flow Cache v2.2 May 19 2016 02:17:14
chipId 0x631680D0
Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 May 19 2016 02:16:58 Registered <241>
Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000
FAP Soft Reset Done
4ke Reset Done
Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000
FAP Soft Reset Done
4ke Reset Done
FAP Debug values at 0xa5fa2670 0xa5822670
fapGso_LoopBkThread created successfully
Allocated FAP0 SWQ_HOST2FAP_GSO_LOOPBACK_Q mem=a7170000 : 16384 bytes
Allocated FAP0 SWQ_FAP2HOST_GSO_LOOPBACK_Q mem=a716c000 : 16384 bytes
GSO LOOPBACK Cached HOST2FAP Q INFO:
 Swq =b0825ee0 qStart=a7170000 qEnd=a7174000 msgSize=4 dqm=18 fapId=0
GSO LOOPBACK Cached FAP2HOST Q INFO:
 Swq =b0825ec0 qStart=a716c000 qEnd=a7170000 msgSize=2 dqm=19 fapId=0
Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a5e7c000 : 7200 bytes
Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a713e000 : 7200 bytes
Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a7196000 : 7200 bytes
Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a71ba000 : 7200 bytes
Allocated FAP0 TM SDRAM Queue Storage (a5fb3700) : 390144 bytes @ a5880000
Allocated FAP1 TM SDRAM Queue Storage (a5833700) : 390144 bytes @ a5900000
[NTC fapProto] fapReset  : Reset FAP Protocol layer
[FAP0] DSPRAM : stack <0x80000000><1536>, global <0x80000600><4312>, free <2344>, total<8192>
[FAP1] DSPRAM : stack <0x80000000><1536>, global <0x80000600><4312>, free <2344>, total<8192>
[FAP0] PSM : addr<0x80002000>, used <24384>, free <192>, total <24576>
[FAP1] PSM : addr<0x80002000>, used <24384>, free <192>, total <24576>
[FAP0] DQM : availableMemory 15564 bytes, nextByteAddress 0xE00048B0
[FAP1] DQM : availableMemory 15564 bytes, nextByteAddress 0xE00048B0
[FAP0] Initializing FAP4KE GSO LOOPBACK on fapIdx=0 ...
[FAP1] FAP4KE WFD Init Done...
[FAP0] SWQ: HOST2FAP_GSO_LOOPBACK 
[FAP0] >>>>------------------
[FAP0] swq =80007ee0 msgSize =4 words , maxDepth=1024
[FAP0] qStart =a7170000 qEnd=a7174000
[FAP0] rdPtr =a7170000 wrPtr=a7170000 count=0
[FAP0]  processed =0 dropped =0 
[FAP0]  Associated DQM=18 dir HOST2FAP
[FAP0] ------------------<<<<
[FAP0] SWQ: FAP2HOST_GSO_LOOPBACK 
[FAP0] >>>>------------------
[FAP0] swq =80007ec0 msgSize =2 words , maxDepth=2048
[FAP0] qStart =a716c000 qEnd=a7170000
[FAP0] rdPtr =a716c000 wrPtr=a716c000 count=0
[FAP0]  processed =0 dropped =0 
[FAP0]  Associated DQM=19 dir FAP2HOST
[FAP0] ------------------<<<<
[FAP0] FAP4KE GSO LOOPBACK Init Done...
[FAP0] FAP4KE WFD Init Done...
[FAP1] FAP BPM Initialized.
[FAP0] FAP BPM Initialized.
Broadcom Packet Flow Cache HW acceleration enabled.
fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytes
fapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytes
bcmPktDma_bind: FAP Driver binding successfull
[FAP1] FAP TM: ON
[FAP0] FAP TM: ON
adsl: adsl_init entry
Broadcom BCM63168D0 Ethernet Network Device v0.1 May 19 2016 02:21:19
Broadcom GMAC Char Driver v0.1 May 19 2016 02:21:33 Registered<249>
Broadcom GMAC Driver v0.1 May 19 2016 02:21:33 Initialized
fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000
ETH Init: Ch:0 - 200 tx BDs at 0xb0a20650
fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000
ETH Init: Ch:1 - 200 tx BDs at 0xb0820650
fapDrv_psmAlloc: wastage 8 bytes
fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184
ETH Init: Ch:0 - 600 rx BDs at 0xb0821910
[FAP0] enetRxChannel 0
fapDrv_psmAlloc: wastage 8 bytes
fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184
ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910
[FAP1] enetRxChannel 1
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered 
eth0: <Ext sw port: 1> <Logical : 09> PHY_ID <0x20180001 : 0x01> MAC : B4:A5:EF:73:B5:C8
eth1: <Ext sw port: 2> <Logical : 10> PHY_ID <0x20180002 : 0x02> MAC : B4:A5:EF:73:B5:C8
eth2: <Ext sw port: 3> <Logical : 11> PHY_ID <0x20180003 : 0x03> MAC : B4:A5:EF:73:B5:C8
eth3: <Ext sw port: 4> <Logical : 12> PHY_ID <0x20180004 : 0x04> MAC : B4:A5:EF:73:B5:C8
eth4: <Int sw port: 3> <Logical : 03> PHY_ID <0x0010000c : 0x0c> MAC : B4:A5:EF:73:B5:C8
Ethernet Auto Power Down and Sleep: Enabled
NComm TMS V6.80 Kernel Module loaded.
[NTC arl] arlEnable : Enabled ARL binding to FAP
Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 May 19 2016 02:15:01 Registered <245>
p8021ag: p8021ag_init entry
Broadcom 802.1Q VLAN Interface, v0.1
Endpoint: endpoint_init entry
Obtained Voice board id string (LE9672)
Obtained Base board id string (963168MBV3)
Endpoint: endpoint_init COMPLETED
Loading PCM shim driver
init...
MCU SPI init OK!
Tue Jan  1 00:00:00 UTC 2013
Note: Loading 6300 MDK (default) driver for 63168 chip 
Note: Forcing 53115 driver for 53125 
Switch MDK: num_switches = 2
Switch MDK: unit = 0; phy_pbmp = 0x8; config_pbmp = 0x18 
Switch MDK: unit = 1; phy_pbmp = 0x1e; config_pbmp = 0x1e 
Switch MDK link poll thread: unit=0; phypbmp=0x8 config_pbmp=0x18
Switch MDK link poll thread: unit=1; phypbmp=0x1e config_pbmp=0x1e
Energy Efficient Ethernet: Enabled
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
mkdir: can't create directory '/mnt/appdat/dect': File exists
/etc/rcS: line 139: /usr/sbin/sys_guardian: not found
run rc script
starting pid 480, tty '': '/sbin/getty ttyS0 115200'

(none) login: 
=================================
/usr/sbin/rc_app init 
==================================
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
AGSOT_1.0.1
[led_sound_app.c][sc_led_init_handle][211]: sc_led_init_handle
insmod: can't insert '/lib/modules/adsldd.ko': File exists
flush_conntrack Module loaded
ln: /usr/sbin/adslctl: File exists
get_run_flag: run flag in /dev/mtd8 is eRcOmM.002
get_run_flag: run flag in /dev/mtd9 is eRcOmM.003
[main]read config /etc/default.xml success
/usr/sbin/adslctl: devCtl_adslGetObjectValue error
Password for 'admin' changed
Password for 'ADMIN' changed
Host MIPS Clock divider pwrsaving is enabled
DDR Self Refresh pwrsaving is enabled
Energy Efficient Ethernet changed to disabled
Adaptive Voltage Scaling is disabled because the internal regulator is powered down
wlevt is ready for new msg...
mount: mounting usbfs on /proc/bus/usb failed: Device or resource busy
scm_setup_cdev() add cdev success
*** scm module init done ***
sh: /usr/sbin/dp: not found
[led_sound_app.c][sc_led_umts_off_handle][437]: sc_led_umts_off_handle

=================================
/usr/sbin/rc_app syslogd start 
==================================

=================================
/usr/sbin/rc_app coldstart start 
==================================

=================================
/usr/sbin/rc_app fw init 0 ipv4 
==================================
Broadcom Packet Flow Cache flushing the flows

=================================
/usr/sbin/rc_app fw init 0 ipv6 
==================================
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
Broadcom Packet Flow Cache flushing the flows

=================================
/usr/sbin/rc_app hwim start 
==================================

=================================
/usr/sbin/rc_app wanif start 
==================================
[led_sound_app.c][sc_led_umts_off_handle][437]: sc_led_umts_off_handle
adsl_mode = <MMODE>

=================================
/usr/sbin/rc_app lanip start 
==================================
rcl_lan_dhcpd_start
rcl_lan_dhcpd_cfg_create

=================================
/usr/sbin/rc_app lanip6 start 
==================================
udhcp server (v0.9.7) started
Unable to open /var/udhcpd.leases for reading

=================================
/usr/sbin/rc_app fw start 3 ipv4 
==================================
Sorry, rule does not exist.
Sorry, rule does not exist.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
Broadcom Packet Flow Cache flushing the flows

=================================
/usr/sbin/rc_app fw start 3 ipv6 
==================================
Sorry, rule does not exist.
Sorry, rule does not exist.
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
ip6tables v1.4.16.3: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
WARNING: The state match is obsolete. Use conntrack instead.
ip6tables v1.4.16.3: unknown reject type "icmp-port-unreachable"
Try `ip6tables -h' or 'ip6tables --help' for more information.
Broadcom Packet Flow Cache flushing the flows

=================================
/usr/sbin/rc_app telnetd start 
==================================

=================================
/usr/sbin/rc_app dns start 
==================================

=================================
/usr/sbin/rc_app wlan start 
==================================
one_opt: dhcp domain = homenet.telecomitalia.it
one_opt: retry_interval = 300000
/usr/sbin/wl: wl driver adapter not found
RC: insmod wl modules ...
wl: wl driver adapter not found
wl: wl driver adapter not found
start all of radios
lan_ifnames=eth0 wl0 wl1 wl0.1 wl1.1 
lan1_ifnames=
Radio 2.4GHz is disabled
******************radio 2.4*****************
Radio 5GHz is disabled
******************radio 5*****************

=================================
/usr/sbin/rc_app ntp start 
==================================

=================================
/usr/sbin/rc_app httpd start 
==================================

=================================
/usr/sbin/rc_app igd_upnp start 
==================================
bind: Address already in use
bind: Address already in use

=================================
/usr/sbin/rc_app cron start 
==================================

=================================
/usr/sbin/rc_app voip start 
==================================

voip/voip_toneModify.c 645:read tone list form default xml 


voip/voip_toneModify.c 651:set vgw tone profile from default xml. 

Read system.conf success

Starting SeComm VGW Application pid=1443...

Previous vgw_app already exit, write new pid=1443 to /var/vgw.lock

Entering vgw_root_task()
CLI command 'dbgtr' added seccessfully

secos_queue_create name=DBG_Q qid=1 ret=0
CLI command 'show' added seccessfully
CLI command 'set' added seccessfully
VGW: Info Center Init...
conf.c:ReadGlobalSip(142), base_time=30 o_base_time=90, max_time=1800
conf.c:ReadGlobalSip(151), t1_timer=500 t2_timer=4000 timerA:500 timerB:32000 timerE:500 timerF:32000
conf.c:ReadSipReg(257), CONF: no 0 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 1 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 2 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 3 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 4 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 5 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 6 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 7 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 8 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 9 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 10 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 11 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 12 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 13 tx_port_type 

conf.c:ReadSipReg(257), CONF: no 14 tx_port_type 

conf.c:ReadSipLine(331), CONF: no 0 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=0 ret=-2
conf.c:ReadSipLine(331), CONF: no 1 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=1 ret=-2
conf.c:ReadSipLine(331), CONF: no 2 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=2 ret=-2
conf.c:ReadSipLine(331), CONF: no 3 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=3 ret=-2
conf.c:ReadSipLine(331), CONF: no 4 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=4 ret=-2
conf.c:ReadSipLine(331), CONF: no 5 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=5 ret=-2
conf.c:ReadSipLine(331), CONF: no 6 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=6 ret=-2
conf.c:ReadSipLine(331), CONF: no 7 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=7 ret=-2
conf.c:ReadSipLine(331), CONF: no 8 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=8 ret=-2
conf.c:ReadSipLine(331), CONF: no 9 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=9 ret=-2
conf.c:ReadSipLine(331), CONF: no 10 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=10 ret=-2
conf.c:ReadSipLine(331), CONF: no 11 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=11 ret=-2
conf.c:ReadSipLine(331), CONF: no 12 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=12 ret=-2
conf.c:ReadSipLine(331), CONF: no 13 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=13 ret=-2
conf.c:ReadSipLine(331), CONF: no 14 local port 5060 txptype 1(01=UDP, 02=TCP, 04=TLS)

ReadSipLineConf line=14 ret=-2
ReadCallFeature ret=-2
conf.c:ReadCodec(673), coder[0][0].codec  = 18
conf.c:ReadCodec(674), coder[0][0].pack   = 20
conf.c:ReadCodec(675), coder[0][0].vad    = 0
conf.c:ReadCodec(676), coder[0][0].name   = G729A
conf.c:ReadCodec(673), coder[0][1].codec  = 8
conf.c:ReadCodec(674), coder[0][1].pack   = 20
conf.c:ReadCodec(675), coder[0][1].vad    = 0
conf.c:ReadCodec(676), coder[0][1].name   = PCMA
conf.c:ReadCodec(673), coder[0][2].codec  = -1
conf.c:ReadCodec(674), coder[0][2].pack   = 20
conf.c:ReadCodec(675), coder[0][2].vad    = 0
conf.c:ReadCodec(676), coder[0][2].name   = 
conf.c:ReadCodec(673), coder[0][3].codec  = -1
conf.c:ReadCodec(674), coder[0][3].pack   = 20
conf.c:ReadCodec(675), coder[0][3].vad    = 0
conf.c:ReadCodec(676), coder[0][3].name   = 
conf.c:ReadCodec(673), coder[0][4].codec  = 101
conf.c:ReadCodec(674), coder[0][4].pack   = 20
conf.c:ReadCodec(675), coder[0][4].vad    = 0
conf.c:ReadCodec(676), coder[0][4].name   = telephone-event
conf.c:ReadCodec(673), coder[0][5].codec  = -1
conf.c:ReadCodec(674), coder[0][5].pack   = 20
conf.c:ReadCodec(675), coder[0][5].vad    = 0
conf.c:ReadCodec(676), coder[0][5].name   = 
conf.c:ReadCodec(673), coder[0][6].codec  = -1
conf.c:ReadCodec(674), coder[0][6].pack   = 20
conf.c:ReadCodec(675), coder[0][6].vad    = 0
conf.c:ReadCodec(676), coder[0][6].name   = 
conf.c:ReadCodec(673), coder[1][0].codec  = 18
conf.c:ReadCodec(674), coder[1][0].pack   = 20
conf.c:ReadCodec(675), coder[1][0].vad    = 0
conf.c:ReadCodec(676), coder[1][0].name   = G729A
conf.c:ReadCodec(673), coder[1][1].codec  = 8
conf.c:ReadCodec(674), coder[1][1].pack   = 20
conf.c:ReadCodec(675), coder[1][1].vad    = 0
conf.c:ReadCodec(676), coder[1][1].name   = PCMA
conf.c:ReadCodec(673), coder[1][2].codec  = -1
conf.c:ReadCodec(674), coder[1][2].pack   = 20
conf.c:ReadCodec(675), coder[1][2].vad    = 0
conf.c:ReadCodec(676), coder[1][2].name   = 
conf.c:ReadCodec(673), coder[1][3].codec  = -1
conf.c:ReadCodec(674), coder[1][3].pack   = 20
conf.c:ReadCodec(675), coder[1][3].vad    = 0
conf.c:ReadCodec(676), coder[1][3].name   = 
conf.c:ReadCodec(673), coder[1][4].codec  = 101
conf.c:ReadCodec(674), coder[1][4].pack   = 20
conf.c:ReadCodec(675), coder[1][4].vad    = 0
conf.c:ReadCodec(676), coder[1][4].name   = telephone-event
conf.c:ReadCodec(673), coder[1][5].codec  = -1
conf.c:ReadCodec(674), coder[1][5].pack   = 20
conf.c:ReadCodec(675), coder[1][5].vad    = 0
conf.c:ReadCodec(676), coder[1][5].name   = 
conf.c:ReadCodec(673), coder[1][6].codec  = -1
conf.c:ReadCodec(674), coder[1][6].pack   = 20
conf.c:ReadCodec(675), coder[1][6].vad    = 0
conf.c:ReadCodec(676), coder[1][6].name   = 
conf.c:ReadCodec(701), coder[0][0] codec 18,  pack 20 vad 0 name G729A

conf.c:ReadCodec(701), coder[0][1] codec 8,  pack 20 vad 0 name PCMA

conf.c:ReadCodec(701), coder[0][2] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[0][3] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[0][4] codec 101,  pack 20 vad 0 name telephone-event

conf.c:ReadCodec(701), coder[0][5] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[0][6] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[1][0] codec 18,  pack 20 vad 0 name G729A

conf.c:ReadCodec(701), coder[1][1] codec 8,  pack 20 vad 0 name PCMA

conf.c:ReadCodec(701), coder[1][2] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[1][3] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[1][4] codec 101,  pack 20 vad 0 name telephone-event

conf.c:ReadCodec(701), coder[1][5] codec -1,  pack 20 vad 0 name 

conf.c:ReadCodec(701), coder[1][6] codec -1,  pack 20 vad 0 name 

ReadGeneral ret=-2
secos_dbg_set_enable: Set spy off 
secos_dbg_set_level: Set spy level 0 
vgw_create.c:vgw_create(161), VGW: SSL init ...


secos_queue_create name=SBMQ qid=2 ret=0
SBM: msg Q created id=2
SBM task created
VGW: sbm_create() done......
************************* dcCodec_init_audio_prefer 0001 *************************
prefer_codec[0].codec  = 18 
audio_prefer_idxs[0]   = 0 
prefer_codec[1].codec  = 8 
audio_prefer_idxs[1]   = 0 
prefer_codec[2].codec  = -1 
audio_prefer_idxs[2]   = 0 
prefer_codec[3].codec  = -1 
audio_prefer_idxs[3]   = 0 
prefer_codec[4].codec  = 101 
audio_prefer_idxs[4]   = 0 
prefer_codec[5].codec  = -1 
audio_prefer_idxs[5]   = 0 
prefer_codec[6].codec  = -1 
audio_prefer_idxs[6]   = 0 
************************* dcCodec_init_audio_prefer 0002 *************************
audio_prefer_idxs[0] = 18 
audio_prefer_idxs[1] = 8 
audio_prefer_idxs[2] = 101 
audio_prefer_idxs[3] = 0 
audio_prefer_idxs[4] = 0 
audio_prefer_idxs[5] = 0 
audio_prefer_idxs[6] = 0 
count = 3 

secos_queue_create name=CSMQ qid=3 ret=0
BOS: Enter bosInit 
VGW: csm_create() done......
bosTimerInit
Enter bosAppInit Exit bosAppInit BOS: Exit bosInit 
cp: can't stat '/mnt/appdat/spdlog': No such file or directory

secos_queue_create name=LSMQ qid=4 ret=0
LSM: msg Q created id=4
LSM task created

/usr/sbin/led_sound_app voip_reg_fail
[led_sound_app.c][sc_led_voip_reg_fail_handle][418]: sc_led_voip_reg_fail_handle
Fxs[0]: sipmap in=0 out=0 fax_port=0 mwi_display=1 connDev_type=0
Fxs[1]: sipmap in=0 out=0 fax_port=0 mwi_display=1 connDev_type=0
vrgEndptDriverOpen: Endpoint driver open success
Endpoint Event task started with pid 1506...
Endpoint Packet task started with pid 1507 ...
EptDefaultCnxParameters 541, default eptappCnxInfo[0].cnxParameters.digitRelayType:0
EptDefaultCnxParameters 541, default eptappCnxInfo[1].cnxParameters.digitRelayType:0
EptDefaultCnxParameters 541, default eptappCnxInfo[7].cnxParameters.digitRelayType:0
EptDefaultCnxParameters 541, default eptappCnxInfo[8].cnxParameters.digitRelayType:0
EptDefaultCnxParameters 541, default eptappCnxInfo[14].cnxParameters.digitRelayType:0
EptDefaultCnxParameters 541, default eptappCnxInfo[15].cnxParameters.digitRelayType:0
VGW: lsm_create() done......
$$$$ ---- Wait lsm, sbm and csm finish initialization...
$$$$ ---- SIPREG start now...
IPPCM: SIPREG task created

secos_queue_create name=SIPREGQ qid=5 ret=0
SIPD: SIPD task created
shHandlerAgent: shared memory size=172672,define size=524288
VGW: cgiif_create() done......
**** vgw_create() done

=================================
/usr/sbin/rc_app dns start update_datamodel 
==================================
cp: can't stat '/var/dnsmasq.resolv.conf.bak': No such file or directory

=================================
/usr/sbin/rc_app 3g start 
==================================

=================================
/usr/sbin/rc_app mediaserver start 
==================================
[usb_storage/media_server_cfg.c][start_media_server][180]: *pvalue = 0

=================================
/usr/sbin/rc_app radvd restart 
==================================
killall: radvd: no process killed
killall: radvd: no process killed
killall: radvd: no process killed

=================================
/usr/sbin/rc_app nadvd restart 
==================================
[Jan 01 01:00:47] radvd: no linklocal address configured for br0
[Jan 01 01:00:47] radvd: can't join ipv6-allrouters on br0
killall: nadvd: no process killed
[Jan 01 01:00:47] nadvd: no linklocal address configured for br0
[Jan 01 01:00:47] nadvd: can't join ipv6-allrouters on br0

=================================
/usr/sbin/rc_app dhcp6s restart 
==================================
killall: dhcp6s: no process killed
killall: dhcp6s: no process killed
DHCPv6 server start


modemtim login:

(Last edited by arny91 on 3 Feb 2017, 15:15)

Post #3
odhar
28 Feb 2017, 14:16

Login: admin
Password: admin

Once you're logged in you can run telnetd and connect through telnet with the above user and password.

(Last edited by odhar on 28 Feb 2017, 14:45)

Post #4
M3m3nt0
3 Jun 2017, 14:14

Someone is working on this hardware? smile

Post #5
arny91
4 Jun 2017, 18:43
M3m3nt0 wrote:

Someone is working on this hardware? smile

Hi,
an Italian community that came back online recently and is known for the effort they put into making those devices usable with every internet provider is working on the Sercomm VD625 (A.k.a TIM AGSOT)

See here (you must be registered) :

https://www.ilpuntotecnicoeadsl.com/for … 016.0.html

The discussion might have continued from here.