Belkin F5D8236-4 v2

"P/N: 141700520010J R01" is silkscreened on the board.

The default SSID is Belkin_N_Wireless_XXXXXX where XXXXXX is the last
 * three octets of the WLAN MAC address (upper case letters).

This is, again, presumed to be another Arcadyan device using the SuperTask! RTOS.

Included PSU(s)
The power supply included with the unit is a Leader Electronics MT12-Y120100-A1.

Pinout
( • ) (GND) ( • ) ( • ) ( • ) (TxD) ( • ) (RxD) ( • ) [ • ] J2

Info derived from
{{SCollapse|boot log

=
========================================================== Wireless Router WG7005E22-LF-AK Loader v0.05 build Oct 22 2008 14:11:57 Arcadyan Technology Corporation

=
========================================================== MXIC MX29LV160B bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ... Flash Checking Passed.

Unzipping firmware at 0x80002000 ... [ZIP 3] [ZIP 1] done In c_entry function ... CPU : RT3052 Chip V1.2, CPU Speed 384 MHz, Interrups Status 00000000 install_exception Co config = 80050483 sys_irq_init ... ▒enter start_ralink_timer - 2 [INIT] System Log Pool startup ... [INIT] MTinitialize .. [INIT] usrclk CPU Clock 384000000 Hz mips_counter_frequency:192000000 r4k_offset: 0x0002ee00(192000) init_US_counter : time1 = 299966, time2 = 40299998, diff 40000032 US_counter = 48 cnt1 41401835 cnt2 41403103, diff 1268 mips_int_enable: 5 mips_int_enable 1: s = 8401 mips_int_enable 2: s = 8401 mips_int_enable 3: s = 0 Runtime code version: 2.00.04 System startup... [INIT] Memory COLOR 0, 800000 bytes .. [INIT] Memory COLOR 1, 600000 bytes .. [INIT] Memory COLOR 2, 607200 bytes .. MXIC MX29LV160B bottom boot 16-bit mode found Set flash memory layout to Boot Parameters found !!! Bootcode version: v0.05 Serial number: 12907823631234 Hardware version: 01 MXIC MX29LV160B bottom boot 16-bit mode found
 * 1) _ftext      = 0x80002000
 * 2) _fdata      = 0x803647F0
 * 3) __bss_start = 0x8040AF3C
 * 4) end         = 0x80E22EFC
 * 5) Backup Data from 0x803647F0 to 0x80E2AEFC~0x80ED1648 len 681804
 * 6) Backup Data completed
 * 7) Backup Data verified

sizeof(struct III_Config_t) is 88256, nLen:88256, Magic:0xffffffff !![E-CFG-VER] Configuration data version mismatch!! !![E-CFG-VER] Adapting factory defaults!! !![E-CFG-VER] Reconfiguration required!! !!No configuration file present!! !!! Invalid wireless channel range 0 ~ 0 !!! Use default value 1 ~ 13 default route: 0.0.0.0 BufferInit: BUF_HDR_SZ=160 BUF_ALIGN_SZ=28 BUFFER_OFFSET=384 BUF_BUFSZ0=544 BUF_BUFSZ1=4320 NUM_OF_B0=0 NUM_OF_B1=900 BUF_POOL0_SZ=0 BUF_POOL1_SZ=4032000 sizeof(BUFFER0)=704,sizeof(BUFFER1)=4480 Altgn *BUF0=0x80b426c0 *BUF1=0x8076a0a0 End at BUF0:0x80b426c0, BUF1:0x80b426a0
 * BUF0=0x80b426b8 *BUF1=0x8076a098

BUF0[0]=0x80b426c0 BUF1[0]=0x8076a0a0

buffer0 pointer init OK! buffer1 pointer init OK! ifno= 0, Link_Type= 4 time = 08/01/2003, 00:00:00 Interface 0 ip = 127.0.0.1

ifno= 1, Link_Type= 1 need to reset Ethernet switch???? GDMA1_MAC_ADRH -- : 0x00000022 GDMA1_MAC_ADRL -- : 0x75489dd7 RA2880 Ethernet Driver Initilization. v1.60 256 rx/tx descriptors allocated. NAPI enable, Tx Ring = 256, Rx Ring = 256 phy_tx_ring = 0x0040c630, tx_ring = 0xA040C630, size: 16 bytes

phy_rx_ring = 0x0040d630, rx_ring = 0xA040D630, size: 16 bytes GDMA1_FWD_CFG = 10000 mips_int_enable: 3 mips_int_enable 1: s = 8400 mips_int_enable 2: s = a400 mips_int_enable 3: s = 0 MAC Address: 00:22:75:48:9d:d7 time = 08/01/2003, 00:00:00 Interface 1 ip = 192.168.2.1

ifno= 2, Link_Type= 1 hwlan_init(384): [HWLAN] ifno=2 irno=7 port=0x00000000 2860 version : 1.9.0.0 (Nov 12 2008) RTMP_ADAPTER_mem : 804c8bb4, sizeof(RTMP_ADAPTER) 391008

pAd = 804C8BB4, size = 391008
<-- RTMPAllocAdapterBlock, Status=0 RUNTASK id=1 hwlan_light_isr... time = 08/01/2003, 00:00:00 Interface 2 ip = 192.168.2.1

ifno= 3, Link_Type= 1 MAC Address: 00:22:75:48:9d:d8 time = 08/01/2003, 00:00:00 iput_IpLinkUp(ifno=3)> ifp->add_default_route:1 Re-Init NAT data structure Init NAT data structure Interface 3 ip = 0.0.0.0

ifno= 4, Link_Type= 0 ifno= 5, Link_Type= 0 ifno= 6, Link_Type= 0 ifno= 7, Link_Type= 0 ifno= 8, Link_Type= 0 ifno= 9, Link_Type= 0 ifno= 10, Link_Type= 0 ifno= 11, Link_Type= 0 ifno= 12, Link_Type= 0 ifno= 13, Link_Type= 0 ifno= 14, Link_Type= 0 ifno= 15, Link_Type= 0 ifno= 16, Link_Type= 0 ruleCheck> Group: 0, Error: Useless rule index will be truncated ruleCheck> Group: 1, Error: Useless rule index will be truncated ruleCheck> Group: 2, Error: Useless rule index will be truncated ruleCheck> Group: 3, Error: Useless rule index will be truncated CBAC rule format check succeed !! reqCBACBuf> init match pool, Have: 1000 Memory Address: 0x80dd2194 ~ 0x80dd8f10 reqCBACBuf> init timeGap pool, Have: 10000 Memory Address: 0x80dd8f10 ~ 0x80e09c64 reqCBACBuf> init sameHost pool, Have: 2000 Memory Address: 0x80e09c64 ~ 0x80e19684 [setClsfyEnable] clsfy_func=0 CBAC rule pool initialized !! Init NAT data structure No default route, no need to reinit the NAT data structure RUNTASK id=2 if_task if0... RUNTASK id=3 if_task if1... RUNTASK id=4 if_task if2... RUNTASK id=5 if_task if3... RUNTASK id=6 timer_task... RUNTASK id=7 conn_mgr... RUNTASK id=8 main_8021x... RUNTASK id=9 main_lltd... RUNTASK id=10 period_task... RUNTASK id=11 belkin_goodie_task... RUNTASK id=12 dhcp_daemon... RUNTASK id=13 dhcp_clt...on interface 3 RUNTASK id=14 pptp_callmgr... RUNTASK id=15 L2tpd... found signature: 78h 56h 34h 12h ulImgLens=948129, LENGTH[3]-12=1769460 length checking OK [0] find End at 0xBFD27400 len=948129 ---[ LZMA head start in 0xBFD27800 ]--- found signature: 78h 56h 34h 12h ulImgLens=97424, LENGTH[3]-12=1769460 length checking OK [1] find End at 0xBFD3F400 len=97424 Image[1] at 0xBFC40000, len = 948129 Image[2] at 0xBFD27800, len = 97424 Unzipping from BFD27800 to 80ED2000 ... [ZIP 1] done Uncompressed size = 990253 drive start addr[0]=80ed2000, [1]=80fc3c30 [HTTPD] flash_init: failed!! httpd: listen at 192.168.2.1:80 RUNTASK httpd... RUNTASK id=18 dnsproxy... RUNTASK id=19 rip... RUNTASK id=20 ripout... RUNTASK id=21 dhcpd_mgmt_task... UPnP is enabled UPNP Device initialize success! slot=22

>>> belkin_wan_cfg task runs successfully, task_id = 23 gConfig.WSC_Mode:1 RUNTASK id=24 wscmain... RUNTASK id=25 wsc_Send_eap_packet... RUNTASK id=26 wsc_Send_UPNP_packet... RUNTASK id=27 WSC_WaitUserAction_Task... gConfig.WSC_Mode:1 UART RX Input Starting Multitask... run_project_task RUNTASK id=28 apAppInit... ifno2dot1x_if[2]=0 dot1x_wireless_if_mask=0x4 mips_int_enable: 4 mips_int_enable 1: s = a400 mips_int_enable 2: s = e400 mips_int_enable 3: s = 0 rt2860_open : should call request_irq ???????????????????????? RX DESC A0417A30 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 sizeof(RT2860AP_DAT) : 1314 Channel=6 1. Phy Mode = 9 2. Phy Mode = 9 sould check E2PROM MAC ????????????????? 3. Phy Mode = 9 MCS Set = ff ff 00 00 00 Main bssid = 00:22:75:48:9d:d7 <==== RTMPInitialize, Status=0 should Set up the Mac address ????????? 0x1300 = 00064380 [HWLAN] Ready [dhcp_clt] enable dhcp client in interface WAN[3] Wi-Fi Simple Config Application - Intel Corp. Version: Build 1.02, Nov 12 2008 10:50:46 Initializing stack... -in wsc init-- --sizeof(uint32)=4 --sizeof(uint-long)=4 --sizeof(uint32)=2 @#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@ wsc_Send_eap_packet:udpFdupnp_wcn:28;;udpFdupnp:2a WSC_WaitUserAction:wait user action:0 [HWLAN] [30] rapi_tmr_task running [24]pthread_cond_init: 0 [24]pthread_mutex_init: resource No. 34 [24]pthread_mutex_init: resource No. 35 [PORTABLITY]:WscCreateThread Entered udp_read upnp_Init: flag=0 SSDP Initialization completed... GenaInit : event_hook is NULL!! WscCmd:ActualCBThreadProc: Started [htf_dbg]    - OnlineActiveWirless 1633 [24]pthread_cond_init: 1 [24]pthread_mutex_init: resource No. 36 [24]pthread_mutex_init: resource No. 37 [PORTABLITY]:WscCreateThread WscCmd:ActualUIThreadProc: Started. ActualUIThreadProc: wait q MasterControl constructor WscCmd::MC instantiated ok [24]pthread_cond_init: 2 [24]pthread_mutex_init: resource No. 38 [24]pthread_mutex_init: resource No. 39 [PORTABLITY]:WscCreateThread [24]pthread_mutex_init: resource No. 40 [PORTABLITY]:pthread_mutex_init CTransport Construction [24]pthread_cond_init: 3 [24]pthread_mutex_init: resource No. 41 [24]pthread_mutex_init: resource No. 42 [PORTABLITY]:WscCreateThread In CTransport::ActualCBThreadProc ActualCBThreadProc: Calling Dequeue MC::Init: Init complete ok WscCmd::MC intialized ok WscCmd::Init ok, starting stack... Info::ReadConfigFile: Called Info::ReadConfigFile:P▒5▒ Info::ReadConfigFile:File open ok mp_deviceInfo->uuid[i]: 0-0-0-0-0-0-0-1-10-0-0-22-75-48-9d-d7- mp_deviceInfo->macAddr:00:22:75:48:9D:D7 gSetting.dot1x.if_entry[0].enableWEP:0 authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is, key len is 0 ssid is Belkin_N_Wireless_489DD7 S, c67 E, e67 RegistrarSM constructor [24]pthread_cond_init: 4 [24]pthread_mutex_init: resource No. 43 [24]pthread_mutex_init: resource No. 44 [PORTABLITY]:WscCreateThread [24]pthread_mutex_init: resource No. 45 [PORTABLITY]:pthread_mutex_init RegistrarSM constructor [24]pthread_cond_init: 5 [24]pthread_mutex_init: resource No. 46 [24]pthread_mutex_init: resource No. 47 [PORTABLITY]:WscCreateThread c_devPwd:org:84882295 Generated devPwd: ▒g▒ in startMonitor.... CInbEap Construction Sizeof(WSC_NOTIFY_DATA) = -2140694200 ---test--sizeof(WSC_NOTIFY_DATA) = 36 [24]pthread_cond_init: 6 [PORTABLITY]:WscCreateEvent Entered udp_open Socket open successful, sd: -2140694216 Entered udp_open Socket open successful, sd: -2140694216 Entered udp_bind Binding successful for socket [-2140694232] [PORTABLITY]:WscCreateThread In CInbEap::StaticRecvThread CInbEap::ActualRecvThread Started Entered udp_read in startMonitor.... CInbUPnPDev Construction Entered udp_open Socket open successful, sd: -2140694216 Entered udp_open Socket open successful, sd: -2140694216 Entered udp_bind Binding successful for socket [-2140694232] CInbUPnPDev StartMonitor [PORTABLITY]:WscCreateThread MC::SwitchModeOn: Exit In CInbUPnPDev::StaticUPnPThread end UPnPCreateMicroStack Entered udp_read MC::StartStack: Informing app of mode -WscCmd::CallbackProc Enqueue done MC::SwitchModeOn: Done callback exit wscmain @@[31]pthread_mutex_unlock: the res is free 34-- -2143990900 WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd
 * uuid_p:0x00000000000000011000002275489dd7*****
 * mcp_devPwd:84882295;;

-@@[28]pthread_mutex_unlock: the res is free 36-- -2141841168
 * MODE: Access Point *******
 * p_header->eType:1

Options: 0. Quit 1. Get configured 2. Get configured via push-button 3. Get configured using IEs Enter selection: ***gp_mc->mp_info->GetSwitchMode:1 mp_info->GetSwitchMode:1:e_currMode:1,,e_targetMode:3 mp_deviceInfo->authTypeFlags:1 mp_deviceInfo->encrTypeFlags:1 mp_deviceInfo->authTypeFlags:1 mp_deviceInfo->encrTypeFlags:1 MC::SetBeaconIE: call to trans->SetBeaconIE ok MC::SetProbeRespIE: call to trans->SetProbeRespIE ok Waiting for Registrar to connect... WscCmd::unconfig initiated ActualUIThreadProc: wait q [reset_802dot1x] wireless module ready [init_wpa] dot1x_ready[0]=1 [reset_802dot1x] 802.1Xv2 ready }}
 * cp_devPwd:84882295*****