ZyXEL ZyWALL 2WG

abg (AG108)
wireless router, security appliance
Wikipedia	ZyXEL
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	ZyXEL ZyWALL 2WG
FCC ID	I88NWD670SU
Type	wireless router, security appliance
CPU1	Intel XScale IXP422
CPU1 Type	ARM XScale
CPU1 Speed	266 MHz 32-bit
Flash1 Chip	Intel JS28F640-J3D75
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	Winbond W9812G6GH-6 x 2
ETH chip1	Intel XScale IXP422
Switch	Marvell 88E6060
Ethernet Port Count	1-WAN 4-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: 00:19:CB (7 E, 7 W), 40:4A:03 (4 E, 4 W) Ethernet OUI: 00:19:CB (7 E, 7 W), 40:4A:03 (4 E, 4 W)
Expansion IF types	Mini PCI, PCMCIA (32-bit)
PCMCIA slots	1
Mini PCI slots	1
Power	12 VDC, 1.5 A
Connector type	barrel
Serial Port (UART)	yes
Other
Default IP address: 192.168.1.1 the IP 192.168.1.1 is used by 1326 additional devices of which 97 are ZyXEL devices Default login user: blank Default login password: 1234 blank:1234 credentials used by 46 additional devices of which 44 are ZyXEL devices
Retail
Availability	End of Life
FCC approval date	08 November 2006
(Est.) initial retail price (in USD):	$369.99
UPC	760559114435 (UPC DB, On eBay)
ASIN	B000PAPT3I
Country of manuf	Taiwan
Radio 1
Radio1 module	ZyXEL NWD-670SU
Radio1 module IF	Mini PCI
Chip1	Atheros AR5414
Wireless interface OUI	00:19:CB, 40:4A:03
Antenna Connector Type	none specified
Wireless Standard	IEEE 802.11a/b/g
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 or 5 GHz
FCC ID ZyXEL NWD-670SU I88NWD670SU M4Y-AG623C

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented Intel XScale SoC's with specifications, see Intel XScale.
For a list of all currently documented Marvell chipsets with specifications, see Marvell.

For a list of all currently documented ZyXEL device with specifications, see ZyXEL.

• 54 Mbps - 5GHz 802.11a

• 54 Mbps - 2.4GHz 802.11g = AG108 class

Overview

See also: Intel XScale Processors

Links of Interest

Manual • Datasheet

• ZyXEL ZyWALL 2WG Review on PCmag

CPU: Intel XScale IXP422 (PRIXP422ABB) @266MHz

Flashing

Firmware

404AQI8C0.bin - The stock OS seems to be ZyNOS

System Info • >>

====System Info==== ZyWALL 2WG> atsh ZyNOS Version : V4.04(AQI.8) | 04/09/2010 08:59:04 Bootbase Version : V1.08 | 11/01/2006 12:17:09 Vendor Name : ZyXEL Communications Corp. Product Model : ZyWALL 2WG ZyNOS ROM address : 50080000 System Type : 10 MAC Address : ************ Default Country Code : E1 Boot Module Debug Flag : 00 RomFile Version : 45 RomFile Checksum : 3f90 ZyNOS Checksum : cfc1 Core Checksum : 3780 SNMP MIB level & OID : 060102030405060708091011121314151617181920 Main Feature Bits : C0 Other Feature Bits : 01 22 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 41 13 00 00 00 ====MemTab==== ROMIO image start at 50080000 code version: code start: 00028000 code length: 36BA7C memMapTab: 18 entries, start = 500cf000, checksum = 2481 $RAM Section: 0: BootExt(RAMBOOT), start=00028000, len=20000 1: BootData(RAM), start=00048000, len=20000 2: HTPCode(RAMCODE), start=00068000, len=498000 3: HTPData(RAM), start=00500000, len=3B00000 4: RasCode(RAMCODE), start=00068000, len=CF4000 5: RasData(RAM), start=00d5c000, len=12A4000 $ROM Section: 6: BootBas(ROMIMG), start=50000000, len=20000 7: DbgArea(ROMIMG), start=50020000, len=2000 8: RomDir2(ROMDIR), start=50040000, len=40000 9: BootExt(ROMIMG), start=50080030, len=27FD0 10: HTPCode(ROMBIN), start=500a8000, len=27000 (Compressed) Version: HTP_ZW2WG V 0.5, start: 500a8030 Length: 567D2, Checksum: F6CA Compressed Length: 1114F, Checksum: 01AB 11: MemMapT(ROMMAP), start=500cf000, len=C00 12: termcap(ROMIMG), start=500cfc00, len=400 13: RomDefa(ROMIMG), start=500d0000, len=40000 14: RasCode(ROMBIN), start=50110000, len=5F0000 (Compressed) Version: RAS zw2wg, start: 50110030 Length: CDE620, Checksum: A2F9 Compressed Length: 2DBA7C, Checksum: 8037 15: cwmpData(ROMBIN), start=50700000, len=20000 signature error! 16: BgtCtrl(ROMBIN), start=50720000, len=20000 signature error! 17: RomExt1(ROMDIR), start=50740000, len=C0001 ====binwalk dump==== DECIMAL HEX DESCRIPTION ------------------------------------------- 163840 0x28000 ZynOS header, header size: 48 bytes, load address 0x0, rom image type: ROMBIN, uncompressed size: 354258, compressed size: 69967, uncompressed checksum: 0xF6CA, compressed checksum: 0x1AB, flags: 0xE0, uncompressed checksum is valid, the binary is compressed, compressed checksum is valid, memory map table address: 0x0 163888 0x28030 LZMA compressed data, properties: 0x5D, dictionary size: 262144 bytes, uncompressed size: 354257 bytes 589824 0x90000 ZynOS header, header size: 48 bytes, load address 0x0, rom image type: ROMBIN, uncompressed size: 13493792, compressed size: 2996860, uncompressed checksum: 0xA2F9, compressed checksum: 0x8037, flags: 0xE0, uncompressed checksum is valid, the binary is compressed, compressed checksum is valid, memory map table address: 0x0 589872 0x90030 LZMA compressed data, properties: 0x5D, dictionary size: 262144 bytes, uncompressed size: 13493792 bytes