SMC SMCWBR14S-N4


 * Product page

"P/N: 141000000018W REV:R01" is silkscreened on the board.
 * OEM AWB WR6205-T01 (Accton Wireless Broadband)

The power adapter included with the device is a PSA15-10U (5V, 1A).

Third party firmware notes
will require serial access


 * DD-WRT can apparently run to some extent w/ a 16MiB RAM
 * tailored build for the ESR-9752 (see below links)


 * OpenWrt will work on the device (the WR-6202 build seems OK),
 * but 16MiB isn't sufficient for most use cases - you will
 * certainly need to compile a pared down build

Additional external links

 * On the DD-WRT Forums
 * and again, hotlinking my images this time

Pinout

 * [USB]
 * [VCC] (Rx) (Tx) (GND) [UNU]
 * |RT3050|
 * |RT3050|
 * |RT3050|
 * |RT3050|
 * |RT3050|
 * |RT3050|

Boot log
{{SCollapse|Boot log U-Boot 1.1.3 (Nov 25 2009 - 18:49:43)

Board: Ralink APSoC DRAM: 16 MB relocate_code Pointer at: 80fb0000 flash_protect ON: from 0xBF000000 to 0xBF01D423 flash_protect ON: from 0xBF030000 to 0xBF030FFF
 * Warning - bad CRC, using default environment

=
=============================== Ralink UBoot Version: 3.3

ASIC 3052_MP2 (Port5<->None) DRAM component: 128 Mbits SDR DRAM bus: 16 bit Total memory: 16 MBytes Flash component: NOR Flash Date:Nov 25 2009 Time:18:49:43

=
=============================== icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:128, ways:4, linesz:32 ,total:16384


 * 1) The CPU freq = 320 MHZ ####

SDRAM bus set to 16 bit SDRAM size =16 Mbytes

Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 9: Load Boot Loader code then write to Flash via TFTP. 0

3: System Boot system code via Flash. Image Name:  Linux Kernel Image-V0.0.4.4 Created:     2009-12-08   7:57:03 UTC Image Type:  MIPS Linux Kernel Image (lzma compressed) Data Size:   3719104 Bytes =  3.5 MB   Load Address: 80000000 Entry Point: 8025c000 Verifying Checksum ... OK  Uncompressing Kernel Image ... OK No initrd
 * 1) Booting image at bf050000 ...
 * 1) Transferring control to Linux (at address 8025c000) ...
 * 2) Giving linux memsize in MB, 16

Starting kernel ...

LINUX started...

THIS IS ASIC - AWB Linux version 2.6.21 (root@FedoraCore4) (gcc version 3.4.2) #1 Wed Nov 25 20:53:

The CPU feqenuce set to 320 MHz CPU revision is: 0001964c Determined physical RAM map: memory: 01000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 4064 Kernel command line: console=ttyS1,115200n8 root=/dev/mtdblock4 Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 16kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). Cache parity protection disabled cause = 10800060, status = 1100ff00 PID hash table entries: 64 (order: 6, 256 bytes) calculating r4koff... 00138800(1280000) CPU frequency 320.00 MHz Using 160.000 MHz high precision timer. Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Memory: 13612k/16384k available (2147k kernel code, 2772k reserved, 265k data, 1 Mount-cache hash table entries: 512 NET: Registered protocol family 16 Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 512 (order: 0, 4096 bytes) TCP bind hash table entries: 512 (order: -1, 2048 bytes) TCP: Hash tables configured (established 512 bind 512) TCP reno registered squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro io scheduler noop registered (default) Ralink gpio driver initialized HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A loop: loaded (max 8 devices) rdm_major = 254 PPP generic driver version 2.4.2 PPP BSD Compression module registered NET: Registered protocol family 24 ralink flash device: 0x400000 at 0x1fc00000 Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank Amd/Fujitsu Extended Query Table at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. Creating 5 MTD partitions on "Ralink SoC physically mapped flash": 0x00000000-0x00030000 : "Bootloader" 0x00030000-0x00040000 : "Config" 0x00040000-0x00050000 : "Factory" 0x00050000-0x00120000 : "Kernel" 0x00120000-0x00400000 : "RootFS" block2mtd: version $Revision: 1.1.1.1 $ nf_conntrack version 0.5.0 (128 buckets, 1024 max) ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Fully Cone arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 10 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear  All bugs added by David S. Miller  GDMA1_MAC_ADRH -- : 0x00000000 GDMA1_MAC_ADRL -- : 0x00000000 Ralink APSoC Ethernet Driver Initilization. v2.00 256 rx/tx descriptors allocat GDMA1_MAC_ADRH -- : 0x00000022 GDMA1_MAC_ADRL -- : 0x2dbd3aae PROC INIT OK! VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 116k freed init started: BusyBox v1.12.1 (2009-12-08 15:54:43 CST) starting pid 13, tty '': '/etc_ro/rcS' Algorithmics/MIPS FPU Emulator v1.5 devpts: called with bogus options mount: mounting none on /proc/bus/usb failed: No such file or directory internet.sh starting pid 25, tty '/dev/ttyS1': '/bin/sh'

BusyBox v1.12.1 (2009-12-08 15:54:43 CST) built-in shell (ash) Enter 'help' for a list of built-in commands.

insmod: bridge.ko: module not found insmod: mii.ko: module not found insmod: raeth.ko: module not found
 * 1) Password for 'admin' changed

phy_tx_ring = 0x0080c000, tx_ring = 0xa080c000

phy_rx_ring = 0x00000000, rx_ring = 0x00000000 RT305x_ESW: Link Status Changed CDMA_CSG_CFG = 81000007 GDMA1_FWD_CFG = 710000 ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device rmmod: rt2860v2_ap: No such file or directory rmmod: rt2860v2_sta: No such file or directory Commit crc = 120ccba5 rt2860v2_ap: module license 'unspecified' taints kernel.

pAd = c0002000, size = 494240
<-- RTMPAllocAdapterBlock, Status=0 rmmod: nf_nat_pptp: No such file or directory rmmod: nf_conntrack_pptp: No such file or directory rmmod: nf_nat_proto_gre: No such file or directory rmmod: nf_conntrack_proto_gre: No such file or directory RX DESC a05e6000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 7 2. Phy Mode = 7 3. Phy Mode = 7 RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff 00 00 00 00 SYNC - BBP R4 to 20MHz.l Main bssid = 00:22:2d:bd:3a:b0 <==== rt28xx_init, Status=0 0x1300 = 00064380 insmod: 8021q.ko: module not found eth2.2: Setting MAC address to 00 22 2d bd 3a af. device eth2 entered promiscuous mode VLAN (eth2.2): Setting underlying device (eth2) to promiscious mode. ifconfig: ioctl 0x8913 failed: No such device brctl: bridge br0: No such device or address switch reg write offset=14, value=405555 switch reg write offset=50, value=2001 switch reg write offset=98, value=7f3f switch reg write offset=e4, value=3f switch reg write offset=40, value=1002 switch reg write offset=44, value=1001 switch reg write offset=48, value=1001 switch reg write offset=70, value=ffff417e device ra0 entered promiscuous mode eth2.1: dev_set_promiscuity(master, 1) device eth2.1 entered promiscuous mode udhcpc (v1.12.1) started br0: port 2(eth2.1) entering learning state br0: port 1(ra0) entering learning state ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8914 failed: Cannot assign requested address killall: udhcpd: no process killed Set: phy[1].reg[0] = 3900 Set: phy[2].reg[0] = 3900 Set: phy[3].reg[0] = 3900 Set: phy[4].reg[0] = 3900 Set: phy[1].reg[0] = 3100 Set: phy[2].reg[0] = 3100 Set: phy[3].reg[0] = 3100 Set: phy[4].reg[0] = 3100
 * 1) config RT3052 vlan partition (WLLLL) #####


 * g_wl_interface = ra0 ******

cat: can't open '/etc/uuid.dat': No such file or directory cat: can't open '/etc/serial.dat': No such file or directory /sbin/miniupnpd_init.sh: line 19: miniupnpd: not found ifconfig: ioctl 0x8913 failed: No such device Commit crc = 120ccba5 lan_ip=192.168.2.1 wan_if=eth2.2 echo "1024 65000" >/proc/sys/net/ipv4/ip_local_port_range echo "16384" > /proc/sys/net/ipv4/netfilter/ip_conntrack_max echo "600" > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established echo "60" > /proc/sys/net/ipv4/netfilter/ip_conntrack_udp_timeout_stream killall rt2860apd 1>/dev/null 2>&1 insmod /lib/modules/2.6.21/kernel/net/netfilter/xt_webstr.ko iptables -F -t filter 1>/dev/null 2>&1 iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -F macipport_filter 1>/dev/null 2>&1 iptables -D FORWARD -j web_filter 1>/dev/null 2>&1 iptables -F web_filter 1>/dev/null 2>&1 iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT iptables -t filter -N web_filter 1>/dev/null 2>&1 iptables -t filter -N macipport_filter 1>/dev/null 2>&1 iptables -t filter -N port_forward 1>/dev/null 2>&1 iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu                                                                                                                                                             1>/dev/null 2>&1 iptables -A INPUT -i eth2.2 -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth2.2 -m state -p tcp --dport 80 --state NEW,INVALID -j DR                                                                                                                                                            OP iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1 iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forwa                                                                                                                                                             rd  1>/dev/null 2>&1 iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1 iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&                                                                                                                                                             1 iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING                                                                                                                                                             1 -j port_forward 1>/dev/null 2>&1 iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ                                                                                                                                                             1>/dev/null 2>&1 iptables -t filter -A INPUT -i eth2.2 -p tcp --dport 23 -j DROP ddns.sh route delete 239.255.255.250 1>/dev/null 2>&1 killall wscd 1>/dev/null 2>&1 killall -9 wscd 1>/dev/null 2>&1 iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1 killall -q klogd killall -q syslogd syslogd -C8 1>/dev/null 2>&1 klogd 1>/dev/null 2>&1 killall -q zebra killall -q ripd /bin/qos_run killall -q ntpclient echo GMT5 > /etc/TZ ntpclient -s -c 0 -h time.nist.gov -i 21600 & time.nist.gov: Unknown host br0: topology change detected, propagating br0: port 2(eth2.1) entering forwarding state br0: topology change detected, propagating br0: port 1(ra0) entering forwarding state hnapd 8089 > /dev/null 2>&1 & /usr/sbin/snmpd -Cc /etc_ro/snmpd.conf No log handling enabled - turning on stderr logging Created directory: /etc/net-snmp Created directory: /etc/net-snmp/mib_indexes Cannot find module (SNMPv2-MIB): At line 0 in (none) Cannot find module (SNMPv2-SMI): At line 0 in (none) Cannot find module (SNMP-VIEW-BASED-ACM-MIB): At line 0 in (none) Cannot find module (SNMP-COMMUNITY-MIB): At line 0 in (none) Cannot find module (SNMP-MPD-MIB): At line 0 in (none) Cannot find module (SNMP-USER-BASED-SM-MIB): At line 0 in (none) Cannot find module (SNMP-FRAMEWORK-MIB): At line 0 in (none) /etc_ro/snmpd.conf: line 90: Warning: Unknown token: proc. /etc_ro/snmpd.conf: line 92: Warning: Unknown token: proc. /etc_ro/snmpd.conf: line 94: Warning: Unknown token: proc. /etc_ro/snmpd.conf: line 104: Warning: Unknown token: disk. /etc_ro/snmpd.conf: line 105: Warning: Unknown token: disk. /etc_ro/snmpd.conf: line 106: Warning: Unknown token: includeAllDisks. /etc_ro/snmpd.conf: line 116: Warning: Unknown token: load. /etc_ro/snmpd.conf: line 144: Warning: Unknown token: iquerySecName. /etc_ro/snmpd.conf: line 147: Warning: Unknown token: defaultMonitors. /etc_ro/snmpd.conf: line 149: Warning: Unknown token: linkUpDownNotifications. /etc_ro/snmpd.conf: line 161: Warning: Unknown token: extend. /etc_ro/snmpd.conf: line 162: Warning: Unknown token: extend-sh. /etc_ro/snmpd.conf: line 194: Warning: Unknown token: master. NET-SNMP version 5.5 webs: Listening for HTTP requests at address 192.168.2.1 }}

cat /proc/cmdline
 console=ttyS1,115200n8 root=/dev/mtdblock4
 * 1) cat /proc/cmdline

cat /proc/mtd
 dev:   size   erasesize  name mtd0: 00030000 00010000 "Bootloader" mtd1: 00010000 00010000 "Config" mtd2: 00010000 00010000 "Factory" mtd3: 000d0000 00010000 "Kernel" mtd4: 002e0000 00010000 "RootFS"
 * 1) cat /proc/mtd

cat /proc/cpuinfo
 system type            : Ralink SoC processor              : 0 cpu model              : MIPS 24K V4.12 BogoMIPS               : 212.99 wait instruction       : yes microsecond timers     : yes tlb_entries            : 32 extra interrupt vector : yes hardware watchpoint    : yes ASEs implemented       : mips16 dsp VCED exceptions        : not available VCEI exceptions        : not available
 * 1) cat /proc/cpuinfo

lsmod
 Module                 Size  Used by    Tainted: P xt_webstr               3104  0 rt2860v2_ap         1025168  1
 * 1) lsmod

ps
 PID USER      VSZ STAT COMMAND 1 admin    1448 S    init 2 admin       0 SWN  [ksoftirqd/0] 3 admin       0 SW<  [events/0] 4 admin       0 SW<  [khelper] 5 admin       0 SW<  [kthread] 6 admin       0 SW<  [kblockd/0] 7 admin       0 SW<  [kswapd0] 8 admin       0 SW<  [aio/0] 9 admin       0 DW   [swapper] 10 admin       0 SW   [swapper] 11 admin       0 SW   [mtdblockd] 16 admin    1084 S    nvram_daemon 17 admin    1560 S    goahead 25 admin    1456 S    /bin/sh 140 admin       0 SW   [RtmpWscTask] 272 admin    1444 S    udhcpc -i eth2.2 -H SMCWBR14S-N4 -s /sbin/udhcpc.sh - 521 admin    1448 S    udhcpd /etc/udhcpd.conf 656 admin     924 S    lld2d br0 729 admin     944 S    dnsmasq -i br0 1182 admin    1452 S    syslogd -C8 1185 admin    1444 S    klogd 1200 admin    1320 S    hnapd 8089 1217 admin    3040 S    /usr/sbin/snmpd -Cc /etc_ro/snmpd.conf 1253 admin    1448 R    ps
 * ps