Belkin F5D8235-4 v1

N+ Wireless Router

Manuf. (and perhaps designed) by Gemtek, WRTR-235GN (WRTR-235GN_V01).
 * There is a NEC USB controller on-board.

The default SSID appears to be Belkin_N+_XXXXXX (where XXXXXX is replaced by the last three octets of the wireless interface MAC address [capital letters]).
 * When resetting to factory defaults, it seems the device temporarily assumes the SSID of Belkin_N+_Wireless_180170.
 * Belkin_N+_Guest is the default SSID for the guest network, but this is not enabled by default.


 * On the OpenWrt wiki
 * On the DD-WRT forums (thread goes nowhere, no donated HW)

Pinout
J6 (GND) (RxD) (GND)   --> to copper shielding (VCC) (VCC) [TxD]

Boot log
{{SCollapse| boot log white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word"> U-Boot 1.1.3 (Jun 12 2008 - 15:40:46)
 *  toe0 set to  flash_protect ON: from 0xBC400000 to 0xBC424D03 protect on 71 protect on 72 protect on 73 flash_protect ON: from 0xBC430000 to 0xBC43FFFF protect on 74
 * Warning - bad CRC, using default environment

=
=============================== Ralink UBoot Version: 2.0

ASIC 2880_MP (MAC to GigaMAC Mode) DRAM COMPONENT: 128Mbits DRAM BUS: 32BIT Total memory: 32Mbytes Date:Jun 12 2008 Time:15:40:46

=
=============================== D-CACHE set to 4 way I-CACHE set to 4 way


 * 1) The CPU freq = 266 MHZ ####

SDRAM bus set to 32 bit SDRAM size =32 Mbytes

Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 5: Load ucos code to SDRAM via TFTP.

You choosed 3

3: System Boot system code via Flash. Image Name:  Linux Kernel Image Created:     2008-08-22  11:25:09 UTC
 * 1) Booting image at bc450000 ...

System Control Status = 0x02910084 Image Type:  MIPS Linux Kernel Image (gzip compressed) Data Size:   1189525 Bytes =  1.1 MB   Load Address: 8a000000 Entry Point: 88244040 Verifying Checksum ... OK  Uncompressing Kernel Image ... OK No initrd
 * 1) Transferring control to Linux (at address 88244040) ...
 * 2) Giving linux memsize in MB, 32

Starting kernel ...

THIS IS ASIC - VERSION B ramsize = 32 MBytes rambase not set, set to default (0x08000000) MEMORY DESCRIPTOR dump: [0,882e3810]: base size type

The CPU feqenuce set to 266 MHz CPU revision is: 0001906c icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256 Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes. Primary data cache 16kB, 4-way, linesize 16 bytes. [setup_scache]:1032 Linux version 2.4.30 (root@localhost.localdomain) (gcc version 3.3.6) #294 Fri Aug 22 19:24:30 CST 2008 Determined physical RAM map: memory: 02000000 @ 08000000 (usable) On node 0 totalpages: 40960 zone(0): 40960 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock2 cause = 70c08258, status = 10005c00 calculating r4koff... 0028b0aa(2666666) CPU frequency 266.67 MHz Using 133.333 MHz high precision timer. Calibrating delay loop... 266.24 BogoMIPS Memory: 28036k/32768k available (2311k kernel code, 4732k reserved, 232k data, 92k init, 0k highmem) Dentry cache hash table entries: 32768 (order: 6, 262144 bytes) Inode cache hash table entries: 16384 (order: 5, 131072 bytes) Mount cache hash table entries: 512 (order: 0, 4096 bytes) Buffer cache hash table entries: 8192 (order: 3, 32768 bytes) Page-cache hash table entries: 65536 (order: 6, 262144 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX pci.c pcibios_init:840 BAR0 at slot 0 = 8 pci.c pcibios_fixup_resources:640 bus = 0, dev = 0, fun = 0 pci.c pcibios_fixup_resources:640 bus = 0, dev = 17, fun = 0 pci.c pcibios_fixup_resources:748 devid=0x11, baseaddr = 0x14 pci.c pcibios_fixup_resources:748 devid=0x11, baseaddr = 0x18 pci.c pcibios_fixup_resources:748 devid=0x11, baseaddr = 0x1c pci.c pcibios_fixup_resources:748 devid=0x11, baseaddr = 0x20 pci.c pcibios_fixup_resources:748 devid=0x11, baseaddr = 0x24 dev= 0x885fbc00 dev= 0x885e3000 Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Starting kswapd devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 squashfs: version 3.0 (2006/03/15) Phillip Lougher fuse init (API version 7.5) fuse distribution version: 2.5.3 pty: 256 Unix98 ptys configured Ralink RT2880 gpio driver initialized Gemtek LED init... Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled ttyS00 at 0x300500 (irq = 9) is a 16550A ttyS01 at 0x300c00 (irq = 8) is a 16550A HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. RA2880 Ethernet Driver Initilization. v1.01 256 rx/tx descriptors allocated! RA2880 Ethernet Driver Initilization. v1.01 256 rx/tx descriptors allocated, mtu = 4096! Netlink init ok! PROC INIT OK! PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered MPPE/MPPC encryption/compression module registered SCSI subsystem driver Revision: 1.00 kmod: failed to exec /sbin/modprobe -s -k scsi_hostadapter, errno = 2 kmod: failed to exec /sbin/modprobe -s -k scsi_hostadapter, errno = 2 FLASH_API: MAN_ID=C2 DEV_ID=22CB SIZE=8MB physmap flash device: 800000 at bf400000 Amd/Fujitsu Extended Query Table v1.1 at 0x0040 number of CFI chips: 1 Region0: SectorSize=0x2000 SectorNum=8 Region1: SectorSize=0x10000 SectorNum=127 cfi_cmdset_0002: Using word write method. cfi_cmdset_0002: Disabling fast programming due to code brokenness. Using physmap partition definition Creating 5 MTD partitions on "RT2880 SOC Physically mapped flash": 0x00000000-0x00050000 : "uboot" mtd: Giving out device 0 to uboot 0x00050000-0x007e0000 : "Kernel and Rootfs" mtd: Giving out device 1 to Kernel and Rootfs 0x00180000-0x007e0000 : "Rootfs" mtd: Giving out device 2 to Rootfs 0x007e0000-0x007f0000 : "Nvram" mtd: Giving out device 3 to Nvram 0x007f0000-0x00800000 : "Factory" mtd: Giving out device 4 to Factory usb.c: registered new driver usbdevfs usb.c: registered new driver hub host/usb-uhci.c: $Revision: 1.1.1.1 $ time 19:24:30 Aug 22 2008 host/usb-uhci.c: High bandwidth mode enabled host/usb-uhci.c: v1.275:USB Universal Host Controller Interface driver host/usb-ohci.c: USB OHCI at membase 0xc0801000, IRQ 2 host/usb-ohci.c: usb-00:11.0, PCI device 1033:0035 usb.c: new USB bus registered, assigned bus number 1 hub.c: USB hub found hub.c: 3 ports detected IPv6 v0.8 for NET4.0 IPv6 over IPv4 tunneling driver NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP, IGMP IP: routing cache hash table of 1024 buckets, 8Kbytes TCP: Hash tables configured (established 16384 bind 32768) IPv4 over IPv4 tunneling driver GRE over IPv4 tunneling driver Linux IP multicast router 0.06 plus PIM-SM ip_conntrack version 2.1 (1280 buckets, 10240 max) - 316 bytes per conntrack ip_tables: (C) 2000-2002 Netfilter core team, Type=Fully Cone ipt_time loading NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 create_proc_read_write_entry: fail 802.1Q VLAN Support v1.8 Ben Greear  All bugs added by David S. Miller  FAT: bogus logical sector size 34816 UMSDOS: msdos_read_super failed, mount aborted. FAT: bogus logical sector size 34816 FAT: bogus logical sector size 34816 VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing prom memory: 0kb freed Freeing unused kernel memory: 92k freed console started trying to start /sbin/init trying to strt /etc/init trying to start /bin/init Algorithmics/MIPS FPU Emulator v1.5 MDIO_CFG = 1f01dc01 GDMA1_FWD_CFG = 90000 DSP_EN OFF version driver

phy_tx_ring = 09c64000, tx_ring = a9c64000, size: 16 bytes phy_rx_ring = 09c43000, rx_ring = a9c43000, size: 16 bytes

BusyBox v1.1.0 (2008.08.22-10:56+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands.

usb.c: registered new driver usb-storage USB Mass Storage support registered. MTD_open MTD_ioctl Invalid ioctl 540d (MEMGETINFO = 40204d01) MTD_read MTD_close insmod: reset_btn.o: no module by that name found Starting Watchdog function !!!!!!! cat: /proc/watchdog_ctrl_folder/watchdog_ctrl_run: No such file or directory /proc/sys/kernelMTD_open /panic_on_oops: MTD_read cannot create MTD_close Done Clean storage nvram value!! blink_status=0 Close USB_BLINK led... rmmod: rtl: Success rtl_major = 253 0 smi_init check[0x0105]=0x8366 Gemtek Link status init. rtl8366s_getEthernetPHY fail for 5!!!! rtl8366s_getEthernetPHY fail for 6!!!! rtl8366s_getEthernetPHY fail for 7!!!! rtl8366s_getEthernetPHY fail for 8!!!! rtl8366s_getEthernetPHY fail for 9!!!! rtl8366s_getEthernetPHY fail for 10!!!! rtl8366s_getEthernetPHY fail for 11!!!! rtl8366s_getEthernetPHY fail for 12!!!! rtl8366s_getEthernetPHY fail for 13!!!! rtl8366s_getEthernetPHY fail for 14!!!! rtl8366s_getEthernetPHY fail for 15!!!! RTL8366RS driver SetVLan initialized RTL8366RS driver initChip initialized rtl8366s_getEthernetPHY fail for 5!!!! rtl8366s_getEthernetPHY fail for 6!!!! rtl8366s_getEthernetPHY fail for 7!!!! rtl8366s_getEthernetPHY fail for 8!!!! rtl8366s_getEthernetPHY fail for 9!!!! rtl8366s_getEthernetPHY fail for 10!!!! rtl8366s_getEthernetPHY fail for 11!!!! rtl8366s_getEthernetPHY fail for 12!!!! rtl8366s_getEthernetPHY fail for 13!!!! rtl8366s_getEthernetPHY fail for 14!!!! rtl8366s_getEthernetPHY fail for 15!!!! RTL8366RS driver SetVLan initialized vid 1 member:3e untag:1e vid 2 member:21 untag:1 port=0,VID=2,priority=0 port=1,VID=1,priority=0 port=2,VID=1,priority=0 port=3,VID=1,priority=0 port=4,VID=1,priority=0 port=5,VID=1,priority=0 RTL_GET_GREEN_ETHERNET Success!!! RTL_GET_GREEN_ETHERNET : tx is 0, rx is 0 RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.0, enabled : 0 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.1, enabled : 0 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.2, enabled : 0 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.3, enabled : 0 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.4, enabled : 0 !!! rtl:rtl_ge_read : 0 RTL_SET_GREEN_ETHERNET Success!!! RTL_GET_GREEN_ETHERNET Success!!! RTL_GET_GREEN_ETHERNET : tx is 1, rx is 1 RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.0, enabled : 1 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.1, enabled : 1 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.2, enabled : 1 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.3, enabled : 1 !!! RTL_GET_GREEN_ETHERNET : rtl8366s_getAsicPowerSaving is phyNo.4, enabled : 1 !!! rtl:rtl_ge_read : 1 Setting ra0 configuration.... Bring up ra0 interface.... 2860 version : 1.8.3.0 (Aug 22 2008)
 * 1) sysinit: [sysinit]
 * 2) Initializing USB Mass Storage driver...
 * 1) update nvram with default list!
 * 1) interfaces_init......

pAd = c0948000, size = 483400
<-- RTMPAllocAdapterBlock, Status=0 RX DESC a969b000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 MCS Set = ff ff 00 00 00 Main bssid = 00:1c:df:d4:3d:38 The UUID Hex string is:2880288028801880a880001cdfd43d38 The UUID ASCII string is:28802880-2880-1880-a880-001cdfd43d38! <==== RTMPInitialize, Status=0 0x1300 = 00064380 interface ra0 does not exist! No need to change ra0 to Nintendo NDS capable No need to change ra0 to Nintendo NDS capable...Complete killall: rt2860apd: no process killed rt2860apd: not found Mssid : init mode killall : No such file or directory get_WPS_PIN_code : WSCStatus : 39093042 check_WPS_status : WSCStatus is 3 now...STATUS_WSC_LINK_UP WPS BUTTON press!! killall: wscd: no process killed route: SIOC[ADD|DEL]RT: No such device ra0      mac: [0x0000102c]:73031e46 vlan1: Setting MAC address to 00 1c df d4 3d 38. device eth2 entered promiscuous mode VLAN (vlan1): Setting underlying device (eth2) to promiscious mode. vlan1: dev_set_promiscuity(master, 1) device vlan1 entered promiscuous mode device ra0 entered promiscuous mode ra0: attempt to add interface with same source address. gPassiveMsgQ Init success! gPassiveMsgID=0x386d438b! gActiveMsgQ Init success! br0: port 2(ra0) entering listening state br0: port 1(vlan1) entering listening state sock=5!(0x0x7fff7d10) Pthread(wscDevNLHandle)Now waiting for the netlink socket incoming message! Create netlink socket thread success! Create ioctl socket(6) success! killall: rt2860apd: no process killed rt2860apd: No such file or directory Start UPnP easyconf: start 20080820 easyconf: Waiting for client to connect... route: resolving gw route: resolving gw route: resolving gw route: resolving gw route: resolving gw br0: port 2(ra0) entering learning state br0: port 1(vlan1) entering learning state wscd: SSDP UDP PORT = 1900 Error with UpnpInit -- -208 killall : No such file or directory get_WPS_PIN_code : WSCStatus : 39093042 check_WPS_status : WSCStatus is 3 now...STATUS_WSC_LINK_UP br0: port 2(ra0) entering forwarding state br0: topology change detected, propagating br0: port 1(vlan1) entering forwarding state br0: topology change detected, propagating killall: wscd: no process killed route: SIOC[ADD|DEL]RT: File exists (2112)Service enable wireless Set country code to us!!! gPassiveMsgQ Init success! gPassiveMsgID=0x386d438d! gActiveMsgQ Init success! sock=5!(0x0x7fff7d10) Create netlink socket thread success! Create ioctl socket(6) success! Pthread(wscDevNLHandle)Now waiting for the netlink socket incoming message! vlan2: Setting MAC address to 00 1c df d4 3d 3a. (wscDevNLHandle):netlink socket data is available now. wscNLEventRTMNewlinkHandlewscd: SSDP UDP PORT = 1900 Close speed boot up led... UPnP Initialized IP-Addr: 192.168.2.1 Port: 49152 HW-Addr: 00:1c:df:d4:3d:38! Specifying the webserver root directory -- /etc_ro/xml/ UUID Str=uuid:28802880-2880-1880-a880-001cdfd43d38! alloc memory size=1135!    1    0    urn:schemas-wifialliance-org:device:WFADevice:1 Belkin Wireless Router Belkin Corporation http://www.belkin.com Belkin Wireless Router</modelDescription> <modelName>Belkin Wireless Router</modelName> <modelNumber>F5D</modelNumber> <modelURL>http://www.belkin.com</modelURL> <serialNumber>111111111111</serialNumber> <UDN>uuid:28802880-2880-1880-a880-001cdfd43d38</UDN> <serviceList> <serviceType>urn:schemas-wifialliance-org:service:WFAWLANConfig:1</serviceType> <serviceId>urn:wifialliance-org:serviceId:WFAWLANConfig1</serviceId> <SCPDURL>WFAWLANConfigSCPD.xml</SCPDURL> <controlURL>control</controlURL> <eventSubURL>event</eventSubURL> </serviceList>
 * 1) lan services init......
 * 1) wan_init......

Registering the RootDevice with descDocUrl: http://192.168.2.1:49152/description.xml RootDevice Registered WscLocalDevice: Device: FriendlyName=Belkin Wireless Router! DescDocURL=http://192.168.2.1:49152/description.xml! UDN=uuid:28802880-2880-1880-a880-001cdfd43d38! PresURL=! Service: servIdStr=urn:wifialliance-org:serviceId:WFAWLANConfig1! servTypeStr=urn:schemas-wifialliance-org:service:WFAWLANConfig:1! scpdURL=http://192.168.2.1:49152/WFAWLANConfigSCPD.xml! eventURL=http://192.168.2.1:49152/event! controlURL=http://192.168.2.1:49152/control! WscLocalDeviceInit Initialized Changing password for guest Bad password: too short.

Warning: weak password (continuing). Jan 1 00:00:14 passwd[264]: password for `guest' changed by user `root' Password changed. Advertisement Sent Can't load /etc/smb.conf - run testparm to debug it httpd : This is httpd...ssl_enabled is 0 }}

cat /proc/mtd
dev:   size   erasesize  name mtd0: 00050000 00010000 "uboot" mtd1: 00790000 00010000 "Kernel and Rootfs" mtd2: 00660000 00010000 "Rootfs" mtd3: 00010000 00010000 "Nvram" mtd4: 00010000 00010000 "Factory"
 * 1) cat /proc/mtd

cat /proc/cpuinfo
system type     : Palmchip Surfboard processor       : 0 cpu model       : unknown V6.12 BogoMIPS        : 266.24 wait instruction : no microsecond timers     : yes tlb_entries     : 16 extra interrupt vector : yes hardware watchpoint    : no VCED exceptions  : not available VCEI exceptions : not available
 * 1) cat /proc/cpuinfo

lsmod
Module                 Size  Used by    Tainted: P rt2860v2_ap           988920  1 rtl                   83616  0 usb-storage           70240  0 (unused)
 * 1) lsmod

nvram show
Belkin F5D8235-4 v1/nvram