Belkin F5D8236-4 v1xxx

"P/N: 141700520007J", "R01" is silkscreened on the board.

The default SSID for the device is Belkin_N_Wireless_XXXXXX where XXXXXX is the last three octets of the WLAN MAC address (capitalized letters).

JTAG/Serial Info
Serials console baudrate is : 115200,8n1

Serial console is available on J1, pinout as follows (from router perspective, so Rx router should be hooked up to Tx PC): 1	?	2	?	3	Rx 4	?	5	Tx 6	?	7	?	8	?	9	GND 10	3.3V Boot output: ÿ

Ready Set Value = 0x0511FFA1

Setup FLASH_CS1_CFG = 0511FFA1

Disable all eth ports!!

=
==========================================================

Wireless Gateway WG7005D Loader V0.13 build Sep 17 2007 16:56:36

Arcadyan Technology Corporation

=
==========================================================

MX29LV160B bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ...

Flash Checking

Passed.

Unzipping firmware at 0x88002000 ... [ZIP 3] [ZIP 1] done

Enable all eth ports!!

In c_entry function ...

CPU : RT2880 Chip V1.4, CPU Speed 266 MHz, Interrups Status 00000000

install_exception

Co config = 80240483

sys_irq_init ...

mips_int_connect : intnum 2 hdl 88008d28

IrqEnable : IRQ = 8


 * 1) _ftext      = 0x88002000


 * 1) _fdata      = 0x88392500


 * 1) __bss_start = 0x884074FC


 * 1) end         = 0x88E59B68


 * 1) Backup Data from 0x88392500 to 0x88E61B68~0x88ED6B64 len 479228


 * 1) Backup Data completed


 * 1) Backup Data verified

[INIT] System Log Pool startup ...

[INIT] MTinitialize ..

[INIT] usrclk

CPU Clock 266000000 Hz

mips_counter_frequency:133000000

r4k_offset: 0x00020788(133000)

init_US_counter : time1 = 208652, time2 = 32208698, diff 32000046

US_counter = 59

cnt1 32975569 cnt2 32976788, diff 1219

mips_int_enable: 7

mips_int_enable 1: s = 8401

mips_int_enable 2: s = 8401

mips_int_enable 3: s = 0

Runtime code version: 1.00.01

System startup...

[INIT] Memory COLOR 0, 800000 bytes ..

[INIT] Memory COLOR 1, 600000 bytes ..

[INIT] Memory COLOR 2, 607200 bytes ..

MX29LV160B bottom boot 16-bit mode found

Set flash memory layout to BRN-BOOT

Boot Parameters found !!!

Bootcode version: V0.13

Serial number: 12832823601765

Hardware version: 01

MX29LV160B bottom boot 16-bit mode found

sizeof(struct III_Config_t) is 88048, nLen:88048, Magic:0x33343536

MX29LV160B bottom boot 16-bit mode found

my CFGVersionMagic = 33343536, old CFGVersionMagic on flash = 33343536

my CFGsize = 88064, my CFGDescSize = 18452

my Version = 1.00.01, Version on flash= 1.00.01

[CONFIG] flash version:[1.00.01], [1.0.0-1]

[CONFIG] code version:[1.00.01], [1.0.0-1]

CFGsize on flash = 88064, CFGDescSize on flash = 18452

MX29LV160B bottom boot 16-bit mode found

OldCfgHexSize:6310

Unzipping from 886B48C8 to 886B00A4 ... [ZIP 1] done

Uncompressed size = 18450

Tail1 : END_III_Config_t

Size of Old CFG_DESC is :18450!!!

useCfgDesc:1

MyCfgHexSize:6310

Unzipping from 886AE7E4 to 886A9FC0 ... [ZIP 1] done

Uncompressed size = 18450

My CFGDescSize:18452

useCfgDesc:1

Tail : END_III_Config_t

useCfgDesc:3

Restore Config file from ver:1.00.01!!!

[CONFIG] Configuration in Flash is old version: 1.0.1

[CONFIG] DS_Tail:[t_N Wireless Rou]

!!! Invalid wireless channel range 255 ~ 255

!!! Use default value 1 ~ 11

default route: 0.0.0.0

BufferInit:

BUF_HDR_SZ=160 BUF_ALIGN_SZ=28 BUFFER_OFFSET=384

BUF_BUFSZ0=544 BUF_BUFSZ1=4320

NUM_OF_B0=0 NUM_OF_B1=1000

BUF_POOL0_SZ=0 BUF_POOL1_SZ=4480000

sizeof(BUFFER0)=704,sizeof(BUFFER1)=4480


 * BUF0=0x88bc772c *BUF1=0x88781b0c

Altgn *BUF0=0x88bc7740 *BUF1=0x88781b20

End at BUF0:0x88bc7740, BUF1:0x88bc7720

BUF0[0]=0x88bc7740 BUF1[0]=0x88781b20

buffer0 pointer init OK!

buffer1 pointer init OK!

ifno= 0, Link_Type= 4

time = 08/01/2003, 00:00:00

Interface 0 ip = 127.0.0.1

ifno= 1, Link_Type= 1

need to reset Ethernet switch????

MAC Address: 00:1c:df:e1:fa:e9

debug: dev_raether irq is 3(eth2)

dev->priv 8860cbd0

sb = 0 1C DF E1 FA E9

GDMA1_MAC_ADRH -- : 0x0000001c

GDMA1_MAC_ADRL -- : 0xdfe1fae9

RA2880 Ethernet Driver Initilization. v1.01 128 rx/tx descriptors allocated!

sb = 0 1C DF E1 FA E9

GDMA1_MAC_ADRH -- : 0x0000001c

GDMA1_MAC_ADRL -- : 0xdfe1fae9

ra2880_setup_dev_fptableis called!

ICPLUS 175C config LAN_WAN finished (demo board)

IC-Plus PHY Init...ok

DSP_EN OFF version driver

phy_tx_ring = 0840a640, tx_ring = a840a640, size: 16 bytes

phy_rx_ring = 0840aa40, rx_ring = a840aa40, size: 16 bytes

should set VLAN ??????????????

@@@@@@@@@@@@@@@@@@ Set LAN and WAN VLAN....

mips_int_connect : intnum 5 hdl 88009974

mips_int_enable: 5

mips_int_enable 1: s = 8401

mips_int_enable 2: s = a401

mips_int_enable 3: s = 0

time = 08/01/2003, 00:00:00

Interface 1 ip = 192.168.2.1

ifno= 2, Link_Type= 1

hwlan_init(376): [HWLAN] ifno=2 irno=7 port=0x00000000

RT2860_init_module

2860 version : v1.6.0.0 (2007/10/12)

--> RTMPAllocAdapterBlock

RTMP_ADAPTER_mem : 884c6b84, sizeof(RTMP_ADAPTER) 465448

pAd = 884C6B84, size = 465448
<-- RTMPAllocAdapterBlock, Status=0

ra0: at CSR addr 0xa0480000.

wlan security on!

RUNTASK id=1 hwlan_light_isr...

time = 08/01/2003, 00:00:00

Interface 2 ip = 192.168.2.1

ifno= 3, Link_Type= 1

clone: WAN MAC Address: 00:24:1d:16:20:90

MAC Address: 00:24:1d:16:20:90

should set VLAN ??????????????

time = 08/01/2003, 00:00:00

iput_IpLinkUp(ifno=3)> ifp->add_default_route:1

Re-Init NAT data structure

Init NAT data structure

Interface 3 ip = 0.0.0.0

ifno= 4, Link_Type= 0

ifno= 5, Link_Type= 0

ifno= 6, Link_Type= 0

ifno= 7, Link_Type= 0

ifno= 8, Link_Type= 0

ifno= 9, Link_Type= 0

ifno= 10, Link_Type= 0

ifno= 11, Link_Type= 0

ifno= 12, Link_Type= 0

ifno= 13, Link_Type= 0

ifno= 14, Link_Type= 0

ifno= 15, Link_Type= 0

ifno= 16, Link_Type= 0

ruleCheck> Group: 0, Error: Useless rule index will be truncated

ruleCheck> Group: 1, Error: Useless rule index will be truncated

ruleCheck> Group: 2, Error: Useless rule index will be truncated

ruleCheck> Group: 3, Error: Useless rule index will be truncated

CBAC rule format check succeed !!

reqCBACBuf> init match pool, Have: 500

Memory Address: 0x88e35fb4 ~ 0x88e39680

reqCBACBuf> init timeGap pool, Have: 5000

Memory Address: 0x88e39680 ~ 0x88e51d34

reqCBACBuf> init sameHost pool, Have: 1000

Memory Address: 0x88e51d34 ~ 0x88e59a54

[setClsfyEnable] clsfy_func=0

CBAC rule pool initialized !!

[init_if] local_if_mask=0x7

[init_if] local_wiredif_mask=0x2

[init_if] local_wirelessif_mask=0x4

[init_if] localorVPN_if_mask=0x1dc07

Init NAT data structure

No default route, no need to reinit the NAT data structure

RUNTASK id=2 if_task if0...

RUNTASK id=3 if_task if1...

RUNTASK id=4 if_task if2...

RUNTASK id=5 if_task if3...

RUNTASK id=6 timer_task...

RUNTASK id=7 conn_mgr...

RUNTASK id=8 main_8021x...

RUNTASK id=9 main_lltd...

RUNTASK id=10 period_task...

RUNTASK id=11 dhcp_daemon...

RUNTASK id=12 dhcp_clt...on interface 3

RUNTASK id=13 pptp_callmgr...

RUNTASK id=14 L2tpd...

found signature: 78h 56h 34h 12h

ulImgLens=998783, LENGTH[3]-12=1769460

length checking OK

[0] find End at 0xBC133C00 len=998783

---[ LZMA head start in 0xBC134000 ]---

found signature: 78h 56h 34h 12h

ulImgLens=112573, LENGTH[3]-12=1769460

length checking OK

[1] find End at 0xBC14F400 len=112573

Image[1] at 0xBC040000, len = 998783

Image[2] at 0xBC134000, len = 112573

Unzipping from BC134000 to 88EE2000 ... [ZIP 1] done

Uncompressed size = 1051031

drive start addr[0]=88ee2000, [1]=88fe29a0

[HTTPD] flash_init: failed!!

httpd: listen at 192.168.2.1:80

RUNTASK httpd...

RUNTASK id=17 dnsproxy...

RUNTASK id=18 rip...

RUNTASK id=19 ripout...

RUNTASK id=20 dhcpd_mgmt_task...

UPnP is enabled

UPNP Device initialize success! slot=21

gConfig.WSC_Mode:1

RUNTASK id=22 wscmain...

RUNTASK id=23 wsc_Send_eap_packet...

RUNTASK id=24 wsc_Send_UPNP_packet...

RUNTASK id=25 WSC_WaitUserAction_Task...

gConfig.WSC_Mode:1

RUNTASK id=26 led_task...

>>> belkin_wan_cfg task runs successfully, task_id = 27

UART RX Input

Starting Multitask...

run_project_task

RUNTASK id=28 apAppInit...

dot1x_build_if_mapping ifno2dot1x_if[2]=0

dot1x_build_if_mapping dot1x_wireless_if_mask=0x4

dot1x_build_if_mapping completed.

init psock cnt=671078903

mips_int_connect : intnum 6 hdl 880af3f4

mips_int_enable: 6

mips_int_enable 1: s = a400

mips_int_enable 2: s = e400

mips_int_enable 3: s = 0

rt2860_open : should call request_irq ????????????????????????

rt2860_open 1

rt2860_open 2

rt2860_init 1

rt2860_init 2

rt2860_init 3

rt2860_init 6

rt2860_init 8

RX DESC A8414640 size = 2048

<-- RTMPAllocDMAMemory, Status=0

rt2860_init 9

rt2860_init 10

sizeof(RT2860AP_DAT) : 1314

HT: Auto BA = Enable

HT: MCS = AUTO

HT: STBC = 1

gSetting.GTxRateBitmap=0

gSetting.NTxRateMCS=33

gSetting.WirelessMode=9

1. Phy Mode = 9

2. Phy Mode = 9

sould check E2PROM MAC ?????????????????

EEPROM_NIC1 222

3. Phy Mode = 9

MCS Set = ff ff 00 00 01

CarrierDetect.Enable=0

Main bssid = 00:1c:df:e1:fa:e9

<==== RTMPInitialize, Status=0

rt2860_open 3

should Set up the Mac address ?????????

rt2860_open 4

rt2860_open 5

rt2860_open 6

0x1300 = 00064300

netif_carrier_on called ???

[dhcp_clt] enable dhcp client in interface WAN[3]



Wi-Fi Simple Config Application - Intel Corp.

Version: Build 1.02, Jul 17 2008 17:51:28



Initializing stack...

-in wsc init--

--sizeof(uint32)=4

--sizeof(uint-long)=4

--sizeof(uint32)=2

@#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@

wsc_Send_eap_packet:udpFdupnp_wcn:28;;udpFdupnp:2a

WSC_WaitUserAction:wait user action:0

[HWLAN] [30] rapi_tmr_task running

[22]pthread_cond_init: 0

[22]pthread_mutex_init: resource No. 34

[22]pthread_mutex_init: resource No. 35

[PORTABLITY]:WscCreateThread

Entered udp_read

WscCmd:ActualCBThreadProc: Started

[htf_dbg]    - OnlineActiveWirless 1608

[ipriv]:[ipriv]:[ipriv]:[ipriv]:CarrierDetect.Enable=0

[22]pthread_cond_init: 1

[22]pthread_mutex_init: resource No. 36

[22]pthread_mutex_init: resource No. 37

[PORTABLITY]:WscCreateThread

WscCmd:ActualUIThreadProc: Started.

ActualUIThreadProc: wait q

MasterControl constructor

WscCmd::MC instantiated ok

[22]pthread_cond_init: 2

[22]pthread_mutex_init: resource No. 38

[22]pthread_mutex_init: resource No. 39

[PORTABLITY]:WscCreateThread

[22]pthread_mutex_init: resource No. 40

[PORTABLITY]:pthread_mutex_init

CTransport Construction

[22]pthread_cond_init: 3

[22]pthread_mutex_init: resource No. 41

[22]pthread_mutex_init: resource No. 42

[PORTABLITY]:WscCreateThread

In CTransport::ActualCBThreadProc

ActualCBThreadProc: Calling Dequeue

MC::Init: Init complete ok

WscCmd::MC intialized ok

WscCmd::Init ok, starting stack...

Info::ReadConfigFile: Called

Info::ReadConfigFile:

Info::ReadConfigFile:File open ok


 * uuid_p:0x00000000000000011000001cdfe1fae9*****

mp_deviceInfo->uuid[i]:

0-0-0-0-0-0-0-1-10-0-0-1c-df-e1-fa-e9-

mp_deviceInfo->macAddr:00:1C:DF:E1:FA:E9

gSetting.dot1x.if_entry[0].enableWEP:1

temp_value=27ffd9f7

authTypeFlags is 1 ,encrTypeFlags is 2 ,m_nwKey is sOßù¼, key len is 5

ssid is birch_belk

S, cb6

E, fd1

RegistrarSM constructor

[22]pthread_cond_init: 4

[22]pthread_mutex_init: resource No. 43

[22]pthread_mutex_init: resource No. 44

[PORTABLITY]:WscCreateThread

[22]pthread_mutex_init: resource No. 45

[PORTABLITY]:pthread_mutex_init

RegistrarSM constructor

[22]pthread_cond_init: 5

[22]pthread_mutex_init: resource No. 46

[22]pthread_mutex_init: resource No. 47

[PORTABLITY]:WscCreateThread

c_devPwd:org:44108069


 * mcp_devPwd:44108069;;

Generated devPwd: xÐfˆ

in startMonitor....

CInbEap Construction

Sizeof(WSC_NOTIFY_DATA) = -2006527840

---test--sizeof(WSC_NOTIFY_DATA) = 36

[22]pthread_cond_init: 6

[PORTABLITY]:WscCreateEvent

Entered udp_open

Socket open successful, sd: -2006527856

Entered udp_open

Socket open successful, sd: -2006527856

Entered udp_bind

Binding successful for socket [-2006527872]

[PORTABLITY]:WscCreateThread

In CInbEap::StaticRecvThread

CInbEap::ActualRecvThread Started

Entered udp_read

in startMonitor....

CInbUPnPDev Construction

Entered udp_open

Socket open successful, sd: -2006527856

Entered udp_open

Socket open successful, sd: -2006527856

Entered udp_bind

Binding successful for socket [-2006527872]

CInbUPnPDev StartMonitor

[PORTABLITY]:WscCreateThread

MC::SwitchModeOn: Exit

In CInbUPnPDev::StaticUPnPThread

end UPnPCreateMicroStack

Entered udp_read

MC::StartStack: Informing app of mode

-WscCmd::CallbackProc Enqueue done

MC::SwitchModeOn: Done callback

exit wscmain

@@[31]pthread_mutex_unlock: the res is free 34-- -2007564804

WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd


 * MODE: Access Point *******

-@@[28]pthread_mutex_unlock: the res is free 36-- -2007564924


 * p_header->eType:1

Options:

0. Quit

1. Get configured

2. Get configured via push-button

3. Get configured using IEs

Enter selection: ***gp_mc->mp_info->GetSwitchMode:1

mp_info->GetSwitchMode:1:e_currMode:1,,e_targetMode:3

mp_deviceInfo->authTypeFlags:1

mp_deviceInfo->encrTypeFlags:2


 * cp_devPwd:44108069*****

MC::SetBeaconIE: call to trans->SetBeaconIE ok

MC::SetProbeRespIE: call to trans->SetProbeRespIE ok

Waiting for Registrar to connect...

WscCmd::unconfig initiated

ActualUIThreadProc: wait q

[reset_802dot1x] wireless module ready

[init_wpa] dot1x_ready[0]=1

AES Key Wrap Test #0 cipher data:

0x a8ba61f 0x47b41281 0xd84bf3ae 0x827b5afb 0x23863e9d 0xe5cfd271

AES Key wrap Test #0 passed

AES Key UnWrap Test #0 returned with clear data:

0x33221100 0x77665544 0xbbaa9988 0xffeeddcc

AES Key UnWrap Test #0 passed

AES Key Wrap Test #1 cipher data:

0x258b7796 0x35a46cae 0x975b2bf9 0xd2ae50c0 0xa1b88a46 0x5d4ed87a

AES Key wrap Test #1 passed

AES Key UnWrap Test #1 returned with clear data:

0x33221100 0x77665544 0xbbaa9988 0xffeeddcc

AES Key UnWrap Test #1 passed

AES Key Wrap Test #2 cipher data:

0xf9c3e864 0xa25b0fce 0x7977e963 0x2a8a8105 0x1e19c893 0xe78a6e7d

AES Key wrap Test #2 passed

AES Key UnWrap Test #2 returned with clear data:

0x33221100 0x77665544 0xbbaa9988 0xffeeddcc

AES Key UnWrap Test #2 passed

AES Key Wrap Test #3 cipher data:

0x26331d03 0x32d3154e 0xc24ef268 0xdc3e7460 0xddc7c6e1 0x935a72ee 0x9114a86b 0xd262675c

AES Key wrap Test #3 passed

AES Key UnWrap Test #3 returned with clear data:

0x33221100 0x77665544 0xbbaa9988 0xffeeddcc 0x 3020100 0x 7060504

AES Key UnWrap Test #3 passed

[reset_802dot1x] 802.1Xv2 ready

upnp_Init: flag=0

SSDP Initialization completed...

GenaInit : event_hook is NULL!!

Boot Menu:

=
==========================================================        Wireless Gateway WG7005D Loader V0.13 build Sep 17 2007 16:56:36 Arcadyan Technology Corporation

=
==========================================================        MX29LV160B bottom boot 16-bit mode found Copying boot params.....DONE Press Space Bar 3 times to enter command mode ...123 Yes, Enter command mode ...                                                    [WG7005D Boot]:

=
=========                                                          [U] Upload to Flash [E] Erase Flash [G] Run Runtime Code [A] Set MAC Address [#] Set Serial Number [V] Set Board Version [H] Set Options [P] Print Boot Params [1] Set SKU Number [2] Set PIN Number

=
=========                                                         [WG7005D Boot]:p MAC address    : 00-1C-DF-E1-FA-E9 Serial number  : 12832823601765 Hardware version: 01 Options        : FF-FF-FF-FF-FF-FF Country region : 1 SKU Num        : 1 PIN Num        : 44108069 [WG7005D Boot]:! Enter Administrator Mode !

=
=========                                                          [U] Upload to Flash [E] Erase Flash [G] Run Runtime Code [M] Upload to Memory [R] Read from Memory [W] Write to Memory [T] Memory Test [Y] Go to Memory [A] Set MAC Address [#] Set Serial Number [V] Set Board Version [H] Set Options [P] Print Boot Params [1] Set SKU Number [2] Set PIN Number

=
=========                                                         [WG7005D Boot]:

Debug mode (at runtime):

console mode
shift-0: enable debug ENTER : show this help

=
=============                                                     Running Console Debug... !!! @@pppoe_maclist_destroy_check Size of MacSetList=0

(1)  Alert Mail Testing (2)  Web Upgrage (3)  Write Web (4)  Firmware Upgrage (5)  Write Firmware (6)  Warm Reboot (8)  Show B0,B1 Mem pool (a)   gConfig (b)   gSetting (c)   DHCP Client (d)   Dial (e)   Ethernet (f)   Firewall (g)   GPIO (p)   PPPoE (s)   System (w)   Wireless (x)  Exit (?)  Help

=
================

[Debug]: pppoe_maclist_destroy_check Size of MacSetList=0 @time: 0 d  0: 2:24, Buf[1].count= 679 @pppoe_maclist_destroy_check S [Debug]: @[dhcp_clt] WAN could not find DHCP daemon to get information @pppoe_maclist_destroy_check Size of MacSetList=0 time: 0 d  0: 2: 0, Buf[1].count= 679 period_task running 240

Pictures
Belkin Images