O3 Labs

Essa página está em modo somente de leitura. Você pode visualizar a fonte, mas não alterá-la. Informe-se com o administrador do Wiki, caso você ache que isso está incorreto.
====== Zyxel PMG5617GA ======

{{description>Informações sobre a Zyxel PMG5617GA GPON ONT/ONU. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.}}

===== Disclaimer =====

<WRAP center round important 80%>
Todas as informações, métodos, procedimentos, firmwares, aplicativos e material sobre modificações e configurações postadas neste wiki foram criados pelo O3 Labs (salvo menção em contrário) e disponibilizadas **GRATUITAMENTE** desde o dia de sua elaboração. Denuncie quando possível quaisquer tentativas de venda destes material.
</WRAP>

===== Hardware =====

{{:ont:zyxel:zyxel-pmg5617ga-front.jpg?direct&400 |}}
{{ :ont:zyxel:zyxel-pmg5617ga-back.jpg?direct&400|}}

----

^ SoC | Econet EN7526GT / EN751221 - MIPS 34Kc 4 x 900 MHz |
^ RAM | 128 MB - W631GG6KB-12I DDR3 SDRAM |
^ Flash | 128 MB - Macronix MXIC35LF1G SPI NAND |
^ LAN | 4 x 1 Gbit/s |
^ USB | 1 x USB 2.0 |
^ Wireless 2.4 GHz| 2x2 Mediatek MT7592N |
^ Wireless 5 GHz| 2x2 Mediatek MT7612EN |
^ Laser Driver/Transceiver | Econet EN7571N |
^ Acoplamento fibra | SC/APC |
^ FXS | 2 - Microsemi Le9642PQC |
^ HPNA | - |
^ Serial | Sim |
^ JTAG | ? |
^ Alimentação | DC 12 V / 2 A |
^ Credenciais padrão | única por aparelho ([[#senhas_de_supervisor_e_root|veja mais]]) |
^ IP LAN padrão | 192.168.1.1 |

==== GPON ====

^ Tipo | SFU e HGU (Ethernet UNI: 4 \ VEIP: 1) |
^ Vendor ID | ZYYG |
^ Version | PMG5617GA |
^ Equipment ID | PMG5617GA |
^ OMCC Version | 160 (0xA0) |
^ Product code | 0 |
^ Software Version (Main, example) | V540ABNA1b3h02 |
^ Software Version (Standby, example) | V540ABNA0C0 |

===== Bootlog =====

++++ Clique aqui para visualizar|

<code>
BGA IC
Xtal:1
DDR3 init.
DRAMC init done.
Calculate size.
DRAM size=128MB
Set new TRFC.
ddr-1066

7512DRAMC V1.2.2 (0)


EN751221 at Wed May 16 11:26:49 CST 2018 version 1.1 free bootbase

Memory size 128MB

Set SPI Clock to 50 Mhz
spi_nand_probe: mfr_id=0xc2, dev_id=0x12
Using Flash ECC.
Detected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MXIC35LF1G, Flash Size=0x8000000
bmt pool size: 81
BMT & BBT Init Success



ZyXEL zloader v1.2.3 (05/16/2018 - 11:26:48)
Multiboot client version: 2.2

Hit any key to stop autoboot:  0

==> boot flag = 0

 main tclinux.bin have ZYXEL trx header!
from main
Decompress to 80002000 free_mem_ptr=80750000 free_mem_ptr_end=807B0000
Uncompressing [LZMA] ...  done.
Linux version 2.6.36 (vm@vm-virtual-machine) (gcc version 4.3.6 (OpenWrt GCC 4.3.6 unknown) ) #1 SMP Wed Jun 12 23:39:30 CST 2019
ISPRAM0: PA=00360000,Size=00010000,enabled
memsize:128MB
EcoNet EN751221 SOC prom init
bootconsole [early0] enabled
CPU revision is: 00019558 (MIPS 34Kc)
Determined physical RAM map:
 memory: 07fe0000 @ 00020000 (usable)
Wasting 1024 bytes for tracking 32 unused pages
Zone PFN ranges:
  Normal   0x00000020 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000020 -> 0x00008000
3 available secondary CPU TC(s)
PERCPU: Embedded 7 pages/cpu @81103000 s7232 r8192 d13248 u65536
pcpu-alloc: s7232 r8192 d13248 u65536 alloc=16*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32480
Kernel command line:  es=1
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00048c82
Readback ErrCtl register=00048c82
nmi base is 8115c200
Memory: 125136k/130944k available (3480k kernel code, 5808k reserved, 693k data, 208k init, 0k highmem)
SLUB: Genslabs=7, HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
Hierarchical RCU implementation.
	RCU-based detection of stalled CPUs is disabled.
	Verbose stalled-CPUs detection is disabled.
NR_IRQS:64
CPU frequency 900.00 MHz
 Using 199.996 MHz high precision timer.
console [ttyS0] enabled, bootconsole disabled
console [ttyS0] enabled, bootconsole disabled
Calibrating delay loop... 598.01 BogoMIPS (lpj=2990080)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
34K sync es set to 1.
Config7: 0x80080500
Limit of 4 TCs set
TLB of 64 entry pairs shared by 2 VPEs
VPE 0: TC 0 1 2, VPE 1: TC 3
IPI buffer pool of 16 buffers
CPU revision is: 00019558 ((null))
TC 1 going on-line as CPU 1
CPU revision is: 00019558 ((null))
TC 2 going on-line as CPU 2
CPU revision is: 00019558 ((null))
TC 3 going on-line as CPU 3
Brought up 4 CPUs
kworker/u:0 used greatest stack depth: 14864 bytes left
NET: Registered protocol family 16
PCIe driver version: 751221.3.20160516
MT7512_pcie_init
check pcie link up status:
isRC0_LINKUP=1
isRC1_LINKUP=1
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:01.0: BAR 8: assigned [mem 0x20100000-0x202fffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0:   bridge window [mem pref disabled]
pci 0000:02:00.0: BAR 0: assigned [mem 0x20100000-0x201fffff 64bit]
pci 0000:02:00.0: BAR 0: set to [mem 0x20100000-0x201fffff 64bit] (PCI address [0x20100000-0x201fffff]
pci 0000:02:00.0: BAR 6: assigned [mem 0x20200000-0x2020ffff pref]
pci 0000:00:01.0: PCI bridge to [bus 02-02]
pci 0000:00:01.0:   bridge window [io  disabled]
pci 0000:00:01.0:   bridge window [mem 0x20100000-0x202fffff]
pci 0000:00:01.0:   bridge window [mem pref disabled]
PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1

 mt7512_pcie_fixup: 0x1438 = 20000014
 mt7512_pcie_fixup: 0x3438 = 20100015
 mt7512_pcie_rc1_retrain: 70 = 0047dc11 80 = 01608c12
TC3162 hardware watchdog module loaded.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.15)
msgmni has been set to 244
io scheduler noop registered (default)
ttyS0 at I/O 0xbfbf0003 (irq = 1) is a TC3162
ECNT ring buffer init success
brd: module loaded

SPI Flash Init Start
Found no SPI flash device
IS_SPIFLASH=0x0, IS_NANDFLASH=0x2, (0xBFA10114)=0x6)
Set SPI Clock to 50 Mhz
SPI_NAND_Flash_init: before init, mtx_mode_tog=0xl9, manaul_en=0x1
spi_nand_probe: mfr_id=0xc2, dev_id=0x12
Detected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MXIC35LF1G, Flash Size=0x8000000
spi nand flash
tc3162: flash device 0x01000000 at 0x1c000000
EN7512 mtd init: spi nand probe enter
[spi_nand_setup] : Enter
NAND device: Manufacturer ID: 0xc2, Chip ID: 0x12 (Unknown _SPI_NAND_DEVICE_ID_MXIC35LF1G)
nand_scan_ident ok
[spi_nand_setup]: chip size =  0x8000000, erase_shift=0x11
calc_bmt_pool_size : need_valid_block_num=0x51, total_block=0x400
bmt pool size: 81
BMT & BBT Init Success

parsing <0[bootloader],0[romfile],56M[tclinux],-[tclinux_slave],1M[wwan],4M[data],1M[rom-d]>
partition 10: name <rom-d>, offset ffffffff, size 100000, mask flags 0
partition 9: name <data>, offset ffffffff, size 400000, mask flags 0
partition 8: name <wwan>, offset ffffffff, size 100000, mask flags 0
partition 7: name <tclinux_slave>, offset ffffffff, size ffffffff, mask flags 0
partition 4: name <tclinux>, offset ffffffff, size 3800000, mask flags 0
partition 1: name <romfile>, offset ffffffff, size fffffffe, mask flags 0
partition 0: name <bootloader>, offset ffffffff, size fffffffe, mask flags 0
Creating 12 MTD partitions on "EN7512-SPI_NAND":
0x000000000000-0x000000040000 : "bootloader"
0x000000040000-0x000000080000 : "romfile"
0x000000080000-0x0000001e1128 : "kernel"
mtd: partition "kernel" doesn't end on an erase block -- force read-only
0x0000001e1128-0x00000126112c : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x000000080000-0x000003880000 : "tclinux"
0x000003880000-0x0000039e0671 : "kernel_slave"
mtd: partition "kernel_slave" doesn't end on an erase block -- force read-only
0x0000039e0671-0x000004a20675 : "rootfs_slave"
mtd: partition "rootfs_slave" doesn't start on an erase block boundary -- force read-only
0x000003880000-0x000006f60000 : "tclinux_slave"
0x000006f60000-0x000007060000 : "wwan"
0x000007060000-0x000007460000 : "data"
0x000007460000-0x000007560000 : "rom-d"
0x000007560000-0x0000075e0000 : "reservearea"

rootfs
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
RT3xxx EHCI/OHCI init.
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1955 buckets, 7820 max)
ctnetlink v0.93: registering with nfnetlink.
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 208k freed
uname used greatest stack depth: 14832 bytes left
mount used greatest stack depth: 14264 bytes left
mount used greatest stack depth: 14128 bytes left
mknod: dev/hwnat0: File exists
mknod: dev/acl0: File exists
mknod: dev/ac0: File exists
mknod: dev/mtr0: File exists
cp used greatest stack depth: 14104 bytes left
**************prepare var*****************
busybox init and set aff
init started: BusyBox v1.20.1 (2019-06-12 22:56:37 CST)
chmod: /userfs/profile.cfg: Read-only file system
yaffs: dev is 32505865 name is "mtdblock9" rw
yaffs: passed flags "tags-ecc-off"
yaffs: dev is 32505867 name is "mtdblock11" rw
yaffs: passed flags "tags-ecc-off"
mount: mounting /dev/mtmount used greatest stack depth: 13944 bytes left
dblock11 on /misc failed: Invalid argument
mount: mounting debugfs on /sys/kernel/debug failed: No such file or directory
mtd[readflash]:device=reservearea tclen=160 tcoffset=198144
Unlocking reservearea ...
Reading from reservearea to /tmp/7570_bob.conf ...
module_sel: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint

tcsmux version: tcsmux V1.1.0.0 (Aug 24 2017-14:49:30).

tcportbind version: tcportbind V1.1.0.0 (Mar  9 2017-12:21:59).
vlantag_drv_init
TCSUPPORT_IPV6
TC3162 LED Manager 0.1 init

tcledctrl version: tcledctrl V1.1.0.0 (Jun 12 2019-23:13:09).
find led.conf error
led path:/userfs/led.conf
tccicmd V1.1.0.0 (Jun 12 2019-23:13:11)

SIFMaster 0.1 init

Register sifm cmd
Reading MT7592 EEPROM from flash reservearea
mtd[readflash]:device=reservearea tclen=512 tcoffset=393216
Unlocking reservearea ...
Reading from reservearea to /etc/RT30xxEEPROM.bin ...
Reading MT7612E EEPROM from flash reservearea
mtd[readflash]:device=reservearea tclen=512 tcoffset=393728
Unlocking reservearea ...
Reading from reservearea to /etc/Wireless/RT2860AP_AC/RT30xxEEPROM.bin ...
insmod ETH_LAN driver
macType = 0
qdma_lan: physical_size is 0x00200000
ether.c:v1.00-NAPI 29.Mar.2015
eth0: FE MAC Ethernet address: C8:54:4B:XX:XX:XX
Use External switch ,type 10
EN7512 TRGMII V1.0 GE Rxet cal (1)(1)(1)(0x1f)
  GE Rext AnaCal Done! (2)(0x1e)
  GE Rext AnaCal Done! (2)(0x1e)
  GE R50 AnaCal Done! (1) (0x28)(0xa8)
  GE R50 AnaCal Done! (1) (0x28)(0xa8)
  GE R50 AnaCal Done! (1) (0x2b)(0xab)
  GE R50 AnaCal Done! (1) (0x2b)(0xab)
 GE Tx offset AnaCal Done! (1)(0x21)
 GE Tx offset AnaCal Done! (3)(0x23)
 GE Tx offset AnaCal Done! (2)(0x22)
 GE Tx offset AnaCal Done! (1)(0x21)
 GE Tx amp AnaCal Done! (pair-0)(0x12)(0x2020)
 GE Tx amp AnaCal Done! (26) (0x6)
 GE Tx amp AnaCal Done! (pair-1)(0x17)(0x820)
 GE Tx amp AnaCal Done! (26) (0x6)
 GE Tx amp AnaCal Done! (pair-2)(0x19)(0x520)
 GE Tx amp AnaCal Done! (29) (0x3)
 GE Tx amp AnaCal Done! (pair-3)(0x21)(0x320)
 GE Tx amp AnaCal Done! (31) (0x1)
tcPhyVerLookUp 3887 0
tcPhyVerLookUp 3887 0
tcPhyVerLookUp 3887 0
tcPhyVerLookUp 3887 9412
 7530 Ge, 0x1
MCM MT7530
tcPhyVerLookUp 3887 9412
 7530 Ge, 0x1
MCM MT7530
 [tcPhyInit] in  [tcPhyInit] out , r31 = (1, 0x0)
tcPhyVerLookUp 3887 9412
 7530 Ge, 0x1
MCM MT7530
 [tcPhyInit] in  [tcPhyInit] out , r31 = (2, 0x0)
tcPhyVerLookUp 3887 9412
 7530 Ge, 0x1
MCM MT7530
 [tcPhyInit] in  [tcPhyInit] out , r31 = (3, 0x0)
tcPhyVerLookUp 3887 9412
 7530 Ge, 0x1
MCM MT7530
 [tcPhyInit] in  [tcPhyInit] out , r31 = (4, 0x0)
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 0
MCM MT7530
tcPhyVerLookUp 3887 9451
 7512 Ge,
MCM MT7530
 [tcPhyInit] in  [tcPhyInit] out , r31 = (12, 0x0)
Exec. Successful
Exec. Successful and the accuracy is 8kbps
Exec. Successful and the accuracy is 8kbps
eth0: starting interface.
netif_start_queue
macType = 0
qdma_wan: qdma_bmgr.c [2588]: HW_FWD physical size is not illegal, force setting to 4MB
qdma_wan: physical_size is 0x00400000
Exec. Successful
Exec. Successful and the accuracy is 8kbps
Exec. Successful and the accuracy is 8kbps
[4294939261]0ms[phy_init.c:342]
  xPON PHY initialization done
EN7571 found!
FLASH matrix got
PWRADC offset = 0x3625
PWRADC ready
BG 1.76V = 0x293
BG 0.875V = 0x148
RSSI_Vref = 0x21e
RSSI_V = 0x299
eFuse value = 0xf5
eFuse offset = -3.3'C
Start GPON Tx Calibration
RGS_T0C = 0x4d
RGS_T1C = 0x51
APD initialization done
Initial current loaded
PWR/ER loaded
TIASD = 0x2a
Rx LOS is set
Internal DDMI Enabled
KT Enabled
EN7571 Initialization Done!
PON PHY driver version is 170228.103.8
insmod used greatest stack depth: 13792 bytes left
xPON driver initialization
Alloc data struct memory successful, 35376
insmod used greatest stack depth: 13596 bytes left
XPON Mapping Module init OK!
TCSUPPORT_WLAN
TCSUPPORT_DUAL_WLAN_MT7612E
mtphy[1]:Link-up at 1000 F.
message received before monitor task is initialized kerSysSendtoMonitorTask
ALL 0x1E,0x9B =0x102
ALL 0x1E,0x9C =0x202
BB1 lch_mse_mdcA =0x1
BB2 lch_mse_mdcB =0x2
BB3 lch_mse_mdcC =0x2
BB4 lch_mse_mdcD =0x2
register rtpci
mt7662e_ap.ko zyWlan_evt_init: create socket successfully
PCI: Enabling device 0000:02:00.0 (0000 -> 0002)


=== pAd = c0c02000, size = 1681984 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0b00000, csr_addr=0xc0b00000!
device_id =0x7662
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai
TCSUPPORT_WLAN_MT7592
register mt_drv
mt7603eap.ko zyWlan_evt_init: Enter.
mt7603eap.ko zyWlan_evt_init: create socket successfully
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)


=== pAd = c1282000, size = 814832 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc1180000, csr_addr=0xc1180000!
device_id =0x7603
RtmpChipOpsHook(507): Not support for HIF_MT yet!
mt7603_init()-->
mt_bcn_buf_init(224): Not support for HIF_MT yet!
<--mt7603_init()
Mirror/redirect action on
insmod used greatest stack depth: 13456 bytes left
ifconfig: SIOCGIFFLAGS: No such device
Ebtables v2.0 registered
HWNAT Module enabled with Type:L2B/IPv4/IPv6/DS-LITE/6RD, foeSize:80B, foeNum:16384
IP check use Black List
**************lan port init*****************
four ports
TC3162 hardware watchdog initialized
Added VLAN with VID == 1 to IF -:eth0:-
WARNING:  VLAN 1 does not work with many switches,
consider another number if you have problems.
device eth0.1 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.1) entering learning state
br0: port 1(eth0.1) entering learning state
Added VLAN with VID == 2 to IF -:eth0:-
device eth0.2 entered promiscuous mode
br0: port 2(eth0.2) entering learning state
br0: port 2(eth0.2) entering learning state
Added VLAN with VID == 3 to IF -:eth0:-
device eth0.3 entered promiscuous mode
br0: port 3(eth0.3) entering learning state
br0: port 3(eth0.3) entering learning state
Added VLAN with VID == 4 to IF -:eth0:-
device eth0.4 entered promiscuous mode
br0: port 4(eth0.4) entering learning state
br0: port 4(eth0.4) entering learning state
device eth0 is not a slave of br0
pon_vlan_init

Multi Lan port
insmod used greatest stack depth: 13080 bytes left

 initilize xpon igmp module....done!
pon_mac_filter_init

Multi Lan port*reg=00001640 value:00000000 (ext_switch:0)
valid subcommands:
adsl
taskset: invalid number '0x8'
MTK DSP support
voip_loader start
sh used greatest stack depth: 12520 bytes left
status:
DSPCore[Ver:TVM1.0.4-545]
[1] PCM V2.4 (Jun 16 2017 14:17:51)
pcm[Ver:TVB1.0.4.545.100-2]
PCM V2.4 (Mar  9 2017 14:00:18)
pcm[Ver:TVM1.0.4-545]
lec[Ver:TVB1.0.4.545.100-2]
Major Num:255, device: spi
spi[Ver:TVM1.0.4-545]
START CHECK ZARLIN ZSI
[4294940229][slic][INFO][slic3_init:L36]init mod-slic3,interface:ZSI,devNum:1,gpio:2000
[4294940229][slic][INFO][slic3_init:L49]ZSI
slic3[Ver:TVM1.0.4-545]
[4294940230][spi][INFO][SPI_slic_check:L1515]set slic type: ===0===
[4294940231][spi][INFO][SPI_slic_check:L1516]set interface_type: ===1===
[4294940232][spi][INFO][SPI_slic_check:L1517]set slicid: ===0===
[4294940232][spi][INFO][SLIC_Reset_Infc:L1493]======slic reset 7512======
[4294940233][spi][INFO][SPI_Reset:L379]
 SPI_Reset 2
[4294940237][spi][INFO][SPI_slic_check:L1539]======spi check zarlink======
[4294940237][spi][INFO][SPI_slic_check:L1555]res_arr[0]:0x8
res_arr[1]:0x75
[4294940238][spi][INFO][SPI_slic_check:L1586]le9642_deviceVerify RCNPCN success!
param.data:le9642
[4294940239][spi][INFO][SPI_slic_check:L1515]set slic type: ===0===
[4294940239][spi][INFO][SPI_slic_check:L1516]set interface_type: ===1===
[4294940240][spi][INFO][SPI_slic_check:L1517]set slicid: ===1===
[4294940241][spi][INFO][SLIC_Reset_Infc:L1493]======slic reset 7512======
[4294940241][spi][INFO][SPI_Reset:L379]
 SPI_Reset 2
[4294940246][spi][INFO][SPI_slic_check:L1539]======spi check zarlink======
[4294940246][spi][INFO][SPI_slic_check:L1555]res_arr[0]:0x0
res_arr[1]:0x0
[4294940247][spi][INFO][SPI_slic_check:L1607][zarlink] unknown slic type!
param.data:
PCM and SLIC Controller Module has been unloaded
[SLIC] le9642
Loading le9642,slic num:1
init slicFunc slic1:7 slic2:7 [4294940279][spi][INFO][SPI_Reset:L379]
 SPI_Reset 2
[4294940283][slic][INFO][SLIC_DeviceVerify:L540]SLIC_DeviceVerify
[4294940283][slic][INFO][le9662_deviceVerify:L317]le9662_deviceVerify Start
[4294940284][slic][INFO][le9662_deviceVerify:L329]devInfo->deviceNum=0 res_arr[0]=8 res_arr[0]=75
[4294940285][slic][INFO][le9662_deviceVerify:L332]le9662_deviceVerify Success!
rd_cnt=1
[4294940285][slic][INFO][le9662_deviceVerify:L346]SLIC_SELF_TEST VP886_R_OPCOND_RD = 0x0
[4294940286][slic][INFO][le9662_deviceVerify:L353]SLIC_SELF_TEST WRT VAL = 0x47
SLIC_SELF_TEST RD BACK = 0x47
[4294940287][slic][INFO][le9662_deviceVerify:L357]SLIC WRT RD test Pass
[4294940288][slic][INFO][le9662_deviceVerify:L366]SLIC_SELF_TEST WRT VAL = 0x0
SLIC_SELF_TEST RD BACK = 0x0
[4294940289][slic][INFO][le9662_deviceVerify:L371]SLIC WRT RD test Pass
[4294940289][slic][INFO][SLIC_DeviceVerify:L552]DEVICE_VERIFY ret:1
[4294940290][slic][ERR][le9662_deviceVerify:L313]le9662_deviceVerify already! Bypass 2nd verify!
[4294940291][slic][INFO][SLIC_DeviceVerify:L552]DEVICE_VERIFY ret:0
pcm1 ch num:2 pcm2 ch num:0
Init fxsNum(2) + fxoNum(0) = slic_ch_num(2) , deviceNum(1)
[4294940292][slic][INFO][SLIC_Init:L593]FXS_NUM=2 FXO_NUM=0
[4294940293][slic][INFO][le9662_deviceInit:L441]le9662_deviceInit 0
[4294940293][slic][INFO][le9662_slicParamReset:L194]le9662_slicParamReset Successful(CountryCode=Default)
[4294940295][slic][INFO][le9662_deviceInit:L474]le9662 Init ..[4294940439][slic][INFO][le9662_deviceInit:L489]
le9662_Init_Cnt = 170
[4294940439][slic][INFO][le9662_deviceInit:L541]CODEC_LINEAR setting
[4294940440][slic][INFO][le9662_deviceInit:L582]FXS-0 timeslot:2
[4294940440][slic][INFO][le9662_deviceInit:L596]FXS-1 timeslot:3
[4294940441][slic][INFO][le9662_deviceInit:L613]fxs0 gain--TX :4000 RX: 4000
[4294940442][slic][INFO][le9662_deviceInit:L613]fxs1 gain--TX :4000 RX: 4000
[4294940442][slic][INFO][SLIC_Init:L593]FXS_NUM=2 FXO_NUM=0
[4294940443][slic][WARN][le9662_deviceInit:L434]Bypass le9662_deviceInit on Device 1!
fxs[Ver:TVB1.0.4.545.100-2]
Loading common
init mod-ksocket
ksocket[Ver:TVM1.0.4-545]
ortp[Ver:TVM1.0.4-545]
init mod-acodec
acodec[Ver:TVM1.0.4-545]
init mod-foip3
foip3[Ver:TVM1.0.4-545]
init mod-vdsp for 2 channels 4 sessions
vdsp[Ver:TVB1.0.4.545.100-2]

===============================
|| MTK DSP init successfully ||
===============================

dbgTool_init init v2.0
pcmdump[Ver:TVM1.0.4-545]
voip loader end
pid 772's current affinity mask: 0
pid 772's new affinity mask: 0
pid 765's current affinity mask: 0
pid 765's new affinity mask: 0
pid 785's current affinity mask: 0
pid 785's new affinity mask: 0
pid 783's current affinity mask: 0
pid 783's new affinity mask: 0
pid 784's current affinity mask: 0
pid 784's new affinity mask: 0
MMM
*reg=00007d08 value:00077777 (ext_switch:1)
* doPhyMMDWrite => phyaddr=1, dev_addr=31, data_addr=0x0026 , value=0xC002
* doPhyMMDWrite => phyaddr=1, dev_addr=31, data_addr=0x0027 , value=0x000C
usage: <cid(0|1)> <RegStat(0|1|2)>
sh: write error: Invalid argument
usage: <cid(0|1)> <RegStat(0|1|2)>
sh: write error: Invalid argument
VDSP_GetInstasipclient used greatest stack depth: 8296 bytes left
nce:275
MMM_end
hw_nat -U 300 300 300 300
done
Jan  1 00:00:39 crond[823]: crond: crond (busybox 1.20.1) started, log level 8
START disable Lan and Wan...
ln: /dev/log: File exists
message received before monitor task is initialized kerSysSendtoMonitorTask
mtcphy[1]: Link-down!!!
1970-01-01 00:00:39 dnsmasq<844>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3
1970-01-01 00:00:40 dnsmasq<844>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully
ZCMD Start
1970-01-01 00:00:40 zcmd<853>, uitimer.c:95, UITimerProc(), INFO: thread starts
killall: zywifid_run.sh: no process killed
zcfg_schema.bin

Please press Enter to activate this console. killall: zywifid: no process killed
1970-01-01 00:00:40 zywifid<869>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3
1970-01-01 00:00:40 zywifid<869>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 40 bind server on /var/lib/.sock/zcfg_sockaddr40 successfully
zywifid> [ALERT] wifi_module_init:1082: load libzywl_001_ecn.so ..........
zywifid> [ALERT] main:1211: Check and fix Wifi MAC address......
Find MTD Device /dev/mtd1 with name romfile.
mtd.oobsize 64 mtd.writesize 2048
romfile type ffff
romfile size 4294967295
romfile crc 65535
zcmdRomConvert
rm: can't remove '/tmp/wifiScanTime*': No such file or directory
br0: port 1(eth0.1) entering forwarding state
MAX Number of Interface Stack is 128
br0: port 2(eth0.2) entering forwarding state
br0: port 3(eth0.3) entering forwarding state
br0: port 4(eth0.4) entering forwarding state
Enter zcmdTr98MapTableInit
zcmdTr98ParmAttrNodeBuild:
zcmdTr98ParmAttrNodeBuild: obj 67152 3,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=1
zcmdTr98ParmAttrNodeBuild: obj 67152 4,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=2
zcmdTr98ParmAttrNodeBuild: obj 67152 5,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=3
zcmdTr98ParmAttrNodeBuild: obj 67152 6,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=4
zcmdTr98ParmAttrNodeBuild: obj 67152 7,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=5
zcmdTr98ParmAttrNodeBuild: obj 67152 8,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=6
zcmdTr98ParmAttrNodeBuild: obj 67152 9,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=7
zcmdTr98ParmAttrNodeBuild: obj 67152 10,1,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=8
zcmdTr98ParmAttrNodeBuild: obj 64764 1,0,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=9
zcmdTr98ParmAttrNodeBuild: obj 14520 0,0,0,0,0,0  nSetParmAttr 2
setParmAttrNodeLst Add, n=10
zcmdTr98ParmAttrNodeBuild: obj 16872 0,0,0,0,0,0  nSetParmAttr 1
setParmAttrNodeLst Add, n=11
mainDhcpPoolInfo[0]= 1 [1 0]
mainDhcpPoolInfo[1]= 0 [0 0]
mainDhcpPoolInfo[2]= 0 [0 0]
mainDhcpPoolInfo[3]= 0 [0 0]
mainDhcpPoolInfo[4]= 0 [0 0]
mainDhcpPoolInfo[5]= 0 [0 0]
mainDhcpPoolInfo[6]= 0 [0 0]
mainDhcpPoolInfo[7]= 0 [0 0]
mainDhcpPoolInfo[8]= 0 [0 0]
mainDhcpPoolInfo[9]= 0 [0 0]
mainDhcpPoolInfo[10]= 0 [0 0]
mainDhcpPoolInfo[11]= 0 [0 0]
mainDhcpPoolInfo[12]= 0 [0 0]
mainDhcpPoolInfo[13]= 0 [0 0]
mainDhcpPoolInfo[14]= 0 [0 0]
mainDhcpPoolInfo[15]= 0 [0 0]
zcmdTr98MapTableInit End
main: tr98 map table inited!
zcmdReleaseTr98ObjParamMapping: no this object mapping
zcmdReleaseTr98ObjParamMapping: no this object mapping
1970-01-01 00:00:41 zcmd<852>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3
1970-01-01 00:00:41 zcmd<852>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 1 bind server on /var/lib/.sock/zcfg_sockaddr1 successfully
main: create thread zcmdConfigApplyTask
1970-01-01 00:00:41 zcmd<887>, zcmd_config_apply.c:1656, zcmdModuleConfigHandleTask(), INFO: thread starts
1970-01-01 00:00:41 zcmd<887>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 4
1970-01-01 00:00:41 zcmd<887>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 70 ip6_tables: (C) 2000-2006 Netfilter Core Team
bind server on /var/lib/.sock/zcfg_sockaddr70 successfully
1970-01-01 00:00:41 zcmd<886>, zcmd_config_apply.c:1707, zcmdConfigApplyTask(), INFO: thread starts
1970-01-01 00:00:41 zcmd<886>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 5
1970-01-01 00:00:41 zcmd<886>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 68 bind server on /var/lib/.sock/zcfg_sockaddr68 successfully
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
/bin/sh: dsldiagd: not found
1970-01-01 00:00:42 esmd<911>, esmd.c:2009, main(), INFO: ESMD Start
ESMD msg server init...
1970-01-01 00:00:42 esmd<911>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 0
1970-01-01 00:00:42 esmd<911>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO:set user_pid flag to 911
 EID 2 bind server on /var/lib/.sock/zcfg_sockaddr2 successfully
[ESMD] Initial kernel monitor ...
kernelFd=6
Error: zyUtilUpdateWWANPackage, open FW_WWANPACKAGE_FILE fail!
main: create thread zcmdBeInit
1970-01-01 00:00:42 zcmd<918>, zcmd.c:5638, zcmdActiveZtr69(), INFO: thread starts
FW_WATCHER Start
Find MTD Device /dev/mtd8 with name wwan.
mtd.oobsize 64 mtd.writesize 2048
Notice: zyUtilUpdateWWANPackage, No WWAN Package in Flash!
zyUtilUpdateWWANPackage: Could not get Revision
1970-01-01 00:00:42 esmd<922>, esmd.c:1487, _esmd_thread(), INFO: ESMD usr config thread starts
1970-01-01 00:00:42 esmd<923>, esmd.c:1495, _esmd_thread(), INFO: ESMD ground thread starts
1970-01-01 00:00:42 esmd<923>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 7
1970-01-01 00:00:42 esmd<923>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 67 bind server on /var/lib/.sock/zcfg_sockaddr67 successfully
1970-01-01 00:00:42 esmd<924>, esmd.c:1876, timer_thread(), INFO: thread starts
zyUtilTcpSvrInit
zcmdBeInit(): DL opening...
Initial begui_customization....
Initial bedevice....
insmod: can't insert '/lib/modules/2.6.36/ipt_TRIGGER.ko': No such file or directory
xt_time: kernel timezone is -0000
insmod: can't insert '/lib/modules/2.6.36/xt_LOG.ko': No such file or directory
insmod: can't insert '/lib/modules/2.6.36/ip6_tables.ko': File exists
insmod: can't insert '/lib/modules/2.6.36/ip6table_filter.ko': File exists
insmod: can't insert '/lib/modules/2.6.36/nf_defrag_ipv6.ko': No such file or directory
insmod: can't insert '/lib/modules/2.6.36/ip6t_REJECT.ko': File exists
Chain MACFILTER already exists.
devObj->DeviceSummary = InternetGatewayDevice:1.4[](Baseline:1,EthernetLAN:2,WiFiLAN:1,ADSLWAN:1,ADSL2WAN:1,VDSL2WAN:1,PTMWAN:1,EthernetWAN:1,QoS:1,Time:1,IPPing:1),VoiceService:1[](Endpoint:1,SIPEndpoint:1,TAEndpoint:1)
Initial belog....
killall: tty_log_echo: no process killed
killall: mailsend: no process killed
killall: syslog-ng: no process killed
Initial besysinfo....
Initial beaccount....
mkdir: can't create directory '/var/tmp': File exists
chmod: /data/zcfg_predef.json: No such file or directory
Initial bedevinfo....
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr9
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 1, dstEid = 9, type = 273, without reply
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:805, zcfg_msg_sendAndGetReply(), ERROR: fail to send message. ret = -5
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr52
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 1, dstEid = 52, type = 273, without reply
1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:805, zcfg_msg_sendAndGetReply(), ERROR: fail to send message. ret = -5
Initial beethlink....
Initial beethintf....
mtphy[1]:Link-up at 1000 F.
ALL 0x1E,0x9B =0x202
ALL 0x1E,0x9C =0x302
BB1 lch_mse_mdcA =0x2
BB2 lch_mse_mdcB =0x2
BB3 lch_mse_mdcC =0x3
BB4 lch_mse_mdcD =0x2
updateLinkStatus 336: receiving Kernel event !!
auto, Auto-negotiation enabled.
The autonegotiated media type is 100baseTx-FD.
Link is up
auto, Auto-negotiation enabled.
No common media type was autonegotiated!
This is extremely unusual and typically indicates a configuration error.
Perhaps the advertised capability set was intentionally limited.
Link is down
auto, Auto-negotiation enabled.
No common media type was autonegotiated!
This is extremely unusual and typically indicates a configuration error.
Perhaps the advertised capability set was intentionally limited.
Link is down
auto, Auto-negotiation enabled.
No common media type was autonegotiated!
This is extremely unusual and typically indicates a configuration error.
Perhaps the advertised capability set was intentionally limited.
Link is down
Initial beoptintf....
Initial beXpon....
Initial beGpon....
Initial bePmmgr....
Initial bewifi_radio....
Initial bewifi_ssid....
Initial bewifi_ap....
Initial bebridging....
Initial bebridgingbr....
Initial bebridgePort....
device eth0.1 left promiscuous mode
br0: port 1(eth0.1) entering forwarding state
device eth0.2 left promiscuous mode
br0: port 2(eth0.2) entering forwarding state
device eth0.3 left promiscuous mode
br0: port 3(eth0.3) entering forwarding state
device eth0.4 left promiscuous mode
device eth0 left promiscuous mode
br0: port 4(eth0.4) entering forwarding state
device ra0 is not a slave of br0
interface ra1 does not exist!
interface ra2 does not exist!
interface ra3 does not exist!
device rai0 is not a slave of br0
interface rai1 does not exist!
interface rai2 does not exist!
interface rai3 does not exist!
device eth0.1 entered promiscuous mode
device eth0 entered promiscuous mode
device eth0.2 entered promiscuous mode
device eth0.3 entered promiscuous mode
device eth0.4 entered promiscuous mode
TX_BCN DESC a5293000 size = 320
RX[0] DESC a5295000 size = 2048
RX[1] DESC a5296000 size = 2048
ERROR!!! Your no. of SSIDs( = 1) does not match your BssidNum( = 4)!
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
Key1Str is Invalid key length(1) or Type(0)
Key2Str is Invalid key length(1) or Type(0)
Key3Str is Invalid key length(1) or Type(0)
Key4Str is Invalid key length(1) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=0
[PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0
[PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0
RtmpOSFileOpen(): Error 2 opening /etc/Wireless/RT2860AP/SingleSKU.dat
FW Version:CL173766-A
FW Build Date:20170925114906
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
AsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=1
RtmpChipOpsEepromHook: E2P type(4), E2pAccessMode = 4, E2P default = 1
NVM is BIN mode
1. Phy Mode = 14
Cal Free IC!!
@@@  NICReadEEPROMParameters : pAd->FWLoad=0
now bb MainSsid mac 00:aa:bb:01:23:40
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 22
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(14): Not support for HIF_MT yet!
NICInitializeAsic(585): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
mt7603_init_mac_cr()-->
AsicSetMacMaxLen(1826): Set the Max RxPktLen=1024!
<--mt_mac_init()
	WTBL Segment 1 info:
		MemBaseAddr/FID:0x28000/0
		EntrySize/Cnt:32/128
	WTBL Segment 2 info:
		MemBaseAddr/FID:0x40000/0
		EntrySize/Cnt:64/128
	WTBL Segment 3 info:
		MemBaseAddr/FID:0x42000/64
		EntrySize/Cnt:64/128
	WTBL Segment 4 info:
		MemBaseAddr/FID:0x44000/128
		EntrySize/Cnt:32/128
MtAsicACQueue: Write CR:21510, Value=10421
MtAsicACQueue: Write CR:21500, Value=10421
AntCfgInit(2577): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
AsicSetRalinkBurstMode(4230): Not support for HIF_MT yet!
RTMPSetPiggyBack(876): Not support for HIF_MT yet!
AsicSetTxPreamble(4217): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xa0
Main bssid = 00:aa:bb:01:23:40
<==== rt28xx_init, Status=0
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
mt7603_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f
jiffies=ffffa83f, POLLING_MODE_DETECT_INTV=300
WiFi Startup Cost (ra0): 3.620s
device ra0 entered promiscuous mode
##### mbss_cr_enable, BssId = 1
device ra1 entered promiscuous mode
##### mbss_cr_enable, BssId = 2
device ra2 entered promiscuous mode
##### mbss_cr_enable, BssId = 3
device ra3 entered promiscuous mode
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =

patch version =

FW Version:0.0.00 Build:1
Build Time:201607111443____
fw for E3 IC
RX[0] DESC a5718000 size = 8192
RX[1] DESC a571a000 size = 8192
ERROR!!! Your no. of SSIDs( = 1) does not match your BssidNum( = 4)!
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
pAd->ed_threshold = 90
pAd->ed_chk = 1
pAd->ed_false_cca_threshold = 180
Key1Str is Invalid key length(1) or Type(0)
Key2Str is Invalid key length(1) or Type(0)
Key3Str is Invalid key length(1) or Type(0)
Key4Str is Invalid key length(1) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=0
[PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0
[PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0
RtmpOSFileOpen(): Error 2 opening /etc/Wireless/RT2860AP_AC/SingleSKU.dat
--> Error opening /etc/Wireless/RT2860AP_AC/SingleSKU.dat
RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5
NVM is BIN mode
1. Phy Mode = 49
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
/home/vm/ex100/opal/btc-git/pmg5617ga/b_201906111526_1b3/build_dir/target-mips_r2_uClibc-0.9.33.2/linux-en75xx_pmg5617ga/MT7612E_LinuxAP_3.0.4.0.P2_DPA/os/linux/../../chips/mt76x2.c:2938 assert (ad->TxPower[choffset].Channel == 42)failed
Country Region from e2p = 1ff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=1, temp_tx_alc_enable=1
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=1, ePA_type=1
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=15, low_temp_slope=9
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=-7, tc_upper_bound=4
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_get_external_lna_gain::LNA type=0x1, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0xffffff8c, ALNAGain2=0xffffff8c
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00073200
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
MCS Set = ff ff 00 00 01
[PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[PMF]APStartUp:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[PMF]APStartUp:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[PMF]APStartUp:: apidx=3, MFPC=0, MFPR=0, SHA256=0
mt76x2_bbp_adjust():rf_bw=2, ext_ch=3, PrimCh=161, HT-CentCh=159, VHT-CentCh=155
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
APStartUp(): AP Set CentralFreq at 155(Prim=161, HT-CentCh=159, VHT-CentCh=155, BBP_BW=2)
mt76x2_calibration(channel = 155)
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
Main bssid = 00:aa:bb:01:23:40
mt76x2_reinit_agc_gain:original agc_vga0 = 0x48, agc_vga1 = 0x48
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x48, agc_vga1 = 0x48
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33
original vga value(chain0) = 48
original vga value(chain1) = 48
<==== rt28xx_init, Status=0
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
jiffies=ffffa92d, POLLING_MODE_DETECT_INTV=300
device rai0 entered promiscuous mode
device rai1 entered promiscuous mode
device rai2 entered promiscuous mode
device rai3 entered promiscuous mode
Initial bebridgeFilter....
Initial bewifi....
Initial beipiface....
[ZYXEL] The untag WAN doesn't use bridge mode.
zywifid:Config> [ERROR] zyWifiUpdateLanInfo:404: No wifi interface on module(ECN).
br0: port 12(rai3) entering forwarding state
br0: port 12(rai3) entering forwarding state
br0: port 11(rai2) entering forwarding state
br0: port 11(rai2) entering forwarding state
br0: port 10(rai1) entering forwarding state
br0: port 10(rai1) entering forwarding state
br0: port 9(rai0) entering forwarding state
br0: port 9(rai0) entering forwarding state
br0: port 8(ra3) entering forwarding state
br0: port 8(ra3) entering forwarding state
br0: port 7(ra2) entering forwarding state
br0: port 7(ra2) entering forwarding state
br0: port 6(ra1) entering forwarding state
br0: port 6(ra1) entering forwarding state
br0: port 5(ra0) entering forwarding state
br0: port 5(ra0) entering forwarding state
br0: port 4(eth0.4) entering forwarding state
br0: port 4(eth0.4) entering forwarding state
br0: port 3(eth0.3) entering forwarding state
br0: port 3(eth0.3) entering forwarding state
br0: port 2(eth0.2) entering forwarding state
br0: port 2(eth0.2) entering forwarding state
br0: port 1(eth0.1) entering forwarding state
br0: port 1(eth0.1) entering forwarding state
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202
zcfgBeWanInitIntfMark : Enter
zcfgBeWanInitIntfMark: Init IfMark Done !!
Initial benatIntf....
ftp switch turn on
sip switch turn on
rtsp switch turn off
pptp switch turn off
iptables: Bad rule (does a matching rule exist in that chain?).
ipsec switch turn off,sw_state=
iptables: Bad rule (does a matching rule exist in that chain?).
Initial bev4addr....
Initial bev6addr....
Initial bev6prefix....
Initial beloopguard....
Initial beusbhost....
Initial beusbintf....
Initial beusbport....
Initial berouter....
Initial berainfo....
Initial bedhcp4_server....
Initial bedhcp4_serverpool....
Initial bedhcp4_serverpool_staticaddr....
Initial bedhcp4_serverpool_option....
Initial bedhcp4_serversubnet....
restart DNSMASQ...
1970-01-01 00:01:22 dnsmasq<1817>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 6
1970-01-01 00:01:22 dnsmasq<1817>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully
Initial bedhcp4_relay....
Initial bedhcp6_server....
Initial bedhcp6_serverpool....
Initial bevlanTerm....
Initial bepppiface....
[pppIfaceObj->Username=] beConfigBoot 95
zcmdTr98SyncTr98WANConnectNum: obj 63648 seqnum 216
Initial bepppifaceipcp....
Initial bedhcp4_client....
Initial bedhcp6_client....
1970-01-01 00:01:23 zcmd<917>, be_dhcp6_client_config_init.c:29, beConfigBoot(), INFO: boot Dhcp6 Client
Initial beradvd....
Initial bedns....
Initial bedns_route....
Initial bedns_server....
Initial benat_port_map....
Initial benat_port_trigger....
Initial benat_addr_mapping....
Initial begre_tunnel....
modprobe ip_gre
modprobe: module ip_gre not found in modules.dep
Initial besessCtl....
br0: port 5(ra0) entering forwarding state
/bin/sh: can't create /proc/zy_nf_ct_udp_STB_port: nonexistent directory
/bin/sh: can't create /proc/zy_nf_ct_udp_STB_timeout: nonexistent directory
Initial befirewall....
br0: port 6(ra1) entering forwarding state
br0: port 7(ra2) entering forwarding state
MTPciPollTxRxEmpty
AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
RTMPSetPiggyBack(876): Not support for HIF_MT yet!
RT28xxPciAsicRadioOff(): Not support for HIF_MT yet!
RTMPDrvClose call RT28xxPciAsicRadioOff fail !!
tx_kickout_fail_count = 0
tx_timeout_fail_count = 0
rx_receive_fail_count = 0
alloc_cmd_msg = 78
free_cmd_msg = 78
br0: port 8(ra3) entering forwarding state
TX_BCN DESC a5293000 size = 320
RX[0] DESC a5295000 size = 2048
RX[1] DESC a5296000 size = 2048
cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
APSDCapable[0]=1
APSDCapable[1]=1
APSDCapable[2]=1
APSDCapable[3]=1
APSDCapable[4]=1
APSDCapable[5]=1
APSDCapable[6]=1
APSDCapable[7]=1
APSDCapable[8]=1
APSDCapable[9]=1
APSDCapable[10]=1
APSDCapable[11]=1
APSDCapable[12]=1
APSDCapable[13]=1
APSDCapable[14]=1
APSDCapable[15]=1
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=1, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=2, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=3, Desired MFPC=1
[PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=1, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=2, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=3, Desired MFPR=0
[PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=1, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=2, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=3, Desired PMFSHA256=0
FW Version:CL173766-A
FW Build Date:20170925114906
AsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5
RtmpEepromGetDefault::e2p_dafault=1
RtmpChipOpsEepromHook: E2P type(4), E2pAccessMode = 4, E2P default = 1
NVM is BIN mode
1. Phy Mode = 14
Cal Free IC!!
@@@  NICReadEEPROMParameters : pAd->FWLoad=1
now bb MainSsid mac c8:54:4b:xx:xx:xx
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 22
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(14): Not support for HIF_MT yet!
NICInitializeAsic(585): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
mt7603_init_mac_cr()-->
AsicSetMacMaxLen(1826): Set the Max RxPktLen=1024!
<--mt_mac_init()
	WTBL Segment 1 info:
		MemBaseAddr/FID:0x28000/0
		EntrySize/Cnt:32/128
	WTBL Segment 2 info:
		MemBaseAddr/FID:0x40000/0
		EntrySize/Cnt:64/128
	WTBL Segment 3 info:
		MemBaseAddr/FID:0x42000/64
		EntrySize/Cnt:64/128
	WTBL Segment 4 info:
		MemBaseAddr/FID:0x44000/128
		EntrySize/Cnt:32/128
MtAsicACQueue: Write CR:21510, Value=10421
MtAsicACQueue: Write CR:21500, Value=10421
AntCfgInit(2577): Not support for HIF_MT yet!
RTMPSetPhyMode(): channel out of range, use first ch=0
MCS Set = ff ff 00 00 00
[PMF]ap_pmf_init:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]ap_pmf_init:: apidx=1, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]ap_pmf_init:: apidx=2, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]ap_pmf_init:: apidx=3, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
AsicSetRalinkBurstMode(4230): Not support for HIF_MT yet!
RTMPSetPiggyBack(876): Not support for HIF_MT yet!
AsicSetTxPreamble(4217): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xa0
Main bssid = c8:54:4b:xx:xx:xx
<==== rt28xx_init, Status=0
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
mt7603_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f
jiffies=ffffad4b, POLLING_MODE_DETECT_INTV=300
WiFi Startup Cost (ra0): 3.730s
br0: port 5(ra0) entering forwarding state
br0: port 5(ra0) entering forwarding state
getL1InterfaceUpstream: 560 USB.Interface.1
restart DNSMASQ...
getL1InterfaceUpstream: 560 USB.Interface.1
1970-01-01 00:01:29 dnsmasq<1923>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 6
1970-01-01 00:01:29 dnsmasq<1923>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully

ppe cmd done!

ppe cmd done!

ppe cmd done!

ppe cmd done!

ppe cmd done!

ppe cmd done!

ppe cmd done!

ppe cmd done!
done
Initial betr69....
==>Set_Debug_Proc()
<==Set_Debug_Proc(RTDebugLevel = 0)
Initial beddns....
Initial betime....
Initial bediagnostic....
Initial beschedule....
Initial beparenCtl....
device ra0 is already a member of a bridge; can't enslave it to bridge br0.
Initial beqos....
Initial beqosQueue....
device ra1 is already a member of a bridge; can't enslave it to bridge br0.
device ra2 is already a member of a bridge; can't enslave it to bridge br0.
device ra3 is already a member of a bridge; can't enslave it to bridge br0.
Initial beqosClass....
Initial beqosShaper....
Initial beqosPolicer....
Initial be6rd....
Initial beigmp....
cp: can't stat '/etc/mcpd_igmp.conf': No such file or directory
beigmp!
/bin/sh: can't create /proc/zy_igmp_noipsrcaddr_enable: nonexistent directory

 nas0 : 4
 nas1 : 4
 nas2 : 4
 nas3 : 4
 nas4 : 4
 nas5 : 4
 nas6 : 4
 nas[ZYXEL] The untag WAN doesn't use bridge mode.
7 : 4Initial besnmp....
Boot SNMP
beConfigBoot, start snmpd
Initial bemld....
cp: can't stat '/etc/mcpd_mld.conf': No such file or directory
cat: can't open '/var/run/ecmh.pid': No such file or directory
sh: you need to specify whom to kill
Initial bevcAutoHunt....
Initial bevlanAutoHunt....
Initial beupnp....
Initial bemacfilter....
Initial bemacfilter_whitelist....
Initial beuserinterface....
Initial beremoMgmt....
mount: mounting devpts on /dev/pts failed: Device or resource busy
Initial bechangehosticon....
Initial behosts....
Initial behostshost....
Initial becert....
Initial beportmirror....
Initial bedslite....
Initial beSTBVendorID....
Initial berip....
killall: ripd: no process killed
Initial betr64....
Initial besamba....
starting smbd.
samba start ok
Initial bevoiceSrv....
Initial bevoiceCap....
Initial bevoiceCapSip....
Initial bevoiceCapCodec....
Initial bevoiceCommon....
Initial bevoiceProf....
Initial bevoiceProfSip....
Initial bevoiceProfFaxT38....
Initial bevoiceProfNumberingPlan....
Initial bevoiceProfNumberingPlanPrefixInfo....
Initial bevoiceProfRTP....
Initial bevoiceProfRTPSRTP....
Initial bevoiceLine....
Initial bevoiceLineSip....
writing RSA key
Initial bevoiceLineProc....
Initial bevoiceLineCallingFeatures....
Initial bevoiceLineCodecList....
Initial bevoiceLineStats....
Initial bevoiceLineRinger....
Initial bevoiceLineRingerDescription....
Initial bevoicePhyIntf....
Initial http with port(443), SSL enable.
Initial bevoiceSpeedDialBookList....
Initial bevoiceCallPolicyBook....
Initial bevoiceCallPolicyBookList....
Initial bevoiceCallStatus....
Initial bednsentry....
Initial http with port(80), SSL disable.
1970-01-01 00:01:35 zhttpd<2109>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 11
1970-01-01 00:01:35 zhttpd<2109>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 15 bind server on /var/lib/.sock/zcfg_sockaddr15 successfully
Initial bezx....
Initial bedlna....
Initial bevlangroup....
Initial beTFTPServerName....
Initial bepptp....
Boot PPTP
PptpVpnConfigStatsUpdate
ifconfig: ppp11: error fetching interface information: Device not found
Initial beOmci....
00:01:35 imgr.c [71]: Initial system driver.
00:01:35 imgr.c [77]: Initial pthread parameters.
00:01:35 imgr.c [83]: Initial dispatcher.
00:01:35 dspch_init.c [23]: Create IPC trap message queue
00:01:35 dspch_init.c [36]: Create IPC trap message queue
00:01:35 imgr.c [89]: Initial database manager.
00:01:35 dbmgr_init.c [32]: Create database memory.
00:01:35 dbmgr_init.c [38]: Create the share database memory successful.
00:01:35 dbmgr_init.c [41]: The total share database size is 0.
00:01:35 imgr.c [95]: Initial config manager.
00:01:35 imgr.c [101]: Initial fault manager.
00:01:35 imgr.c [107]: Initial performance manager.
Exec. Successful
Back-end module init finished
Initial USB driver...

 OMCI mode: gpon
br0: port 9(rai0) entering forwarding state
[econet] open zyomci-a control message queue (mqId=262152) OK!
[econet] open zyomci-e control messaSCSI subsystem initialized
ge br0: port 10(rai1) entering forwarding state
queue (mqId=294921) OK!
[econet] open zyomci-e TX message queue (mqId=327690) OK!
set olt type: 0
sh used greatest stack depth: 7704 bytes left
br0: port 11(rai2) entering forwarding state
turn on ztr69
@@@ APStop: go to ed_monitor_exit()!!
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
andes_pci_erasefw
==>rlt_wlan_chip_onoff(): OnOff:0, Reset= 0, pAd->WlanFunCtrl:0x20b, Reg-WlanFunCtrl=0x20b
RTMP_TimerListRelease: release timer obj c0c16390!
RTMP_TimerListRelease: release timer obj c0cc134c!
RTMP_TimerListRelease: release timer obj c0c1a3b4!
RTMP_TimerListRelease: release timer obj c0c19f98!
RTMP_TimerListRelease: release timer obj c0c1a384!
RTMP_TimerListRelease: release timer obj c0c1a6c4!
RTMP_TimerListRelease: release timer obj c0c1a600!
RTMP_TimerListRelease: release timer obj c0c1a630!
RTMP_TimerListRelease: release timer obj c0c1d5ec!
RTMP_TimerListRelease: release timer obj c0c1d1d0!
RTMP_TimerListRelease: release timer obj c0c1d5bc!
RTMP_TimerListRelease: release timer obj c0c1d8fc!
RTMP_TimerListRelease: release timer obj c0c1d838!
RTMP_TimerListRelease: release timer obj c0c1d868!
RTMP_TimerListRelease: release timer obj c0c20824!
RTMP_TimerListRelease: release timer obj c0c20408!
RTMP_TimerListRelease: release timer obj c0c207f4!
RTMP_TimerListRelease: release timer obj c0c20b34!
RTMP_TimerListRelease: release timer obj c0c20a70!
RTMP_TimerListRelease: release timer obj c0c20aa0!
RTMP_TimerListRelease: release timer obj c0c23a5c!
RTMP_TimerListRelease: release timer obj c0c23640!
RTMP_TimerListRelease: release timer obj c0c23a2c!
RTMP_TimerListRelease: release timer obj c0c23d6c!
RTMP_TimerListRelease: release timer obj c0c23ca8!
RTMP_TimerListRelease: release timer obj c0c23cd8!
RTMP_TimerListRelease: release timer obj c0c26c94!
RTMP_TimerListRelease: release timer obj c0c26878!
RTMP_TimerListRelease: release timer obj c0c26c64!
RTMP_TimerListRelease: release timer obj c0c26fa4!
RTMP_TimerListRelease: release timer obj c0c26ee0!
RTMP_TimerListRelease: release timer obj c0c26f10!
RTMP_TimerListRelease: release timer obj c0c29ecc!
RTMP_TimerListRelease: release timer obj c0c29ab0!
RTMP_TimerListRelease: release timer obj c0c29e9c!
RTMP_TimerListRelease: release timer obj c0c2a1dc!
RTMP_TimerListRelease: release timer obj c0c2a118!
RTMP_TimerListRelease: release timer obj c0c2a148!
RTMP_TimerListRelease: release timer obj c0c2d104!
RTMP_TimerListRelease: release timer obj c0c2cce8!
RTMP_TimerListRelease: release timer obj c0c2d0d4!
RTMP_TimerListRelease: release timer obj c0c2d414!
RTMP_TimerListRelease: release timer obj c0c2d350!
RTMP_TimerListRelease: release timer obj c0c2d380!
RTMP_TimerListRelease: release timer obj c0c3033c!
RTMP_TimerListRelease: release timer obj c0c2ff20!
RTMP_TimerListRelease: release timer obj c0c3030c!
RTMP_TimerListRelease: release timer obj c0c3064c!
RTMP_TimerListRelease: release timer obj c0c30588!
RTMP_TimerListRelease: release timer obj c0c305b8!
RTMP_TimerListRelease: release timer obj c0c6d09c!
RTMP_TimerListRelease: release timer obj c0c6d1b8!
RTMP_TimerListRelease: release timer obj c0c6d0c8!
RTMP_TimerListRelease: release timer obj c0c49958!
RTMP_TimerListRelease: release timer obj c0c6d14c!
RTMP_TimerListRelease: release timer obj c0c178a8!
RTMP_TimerListRelease: release timer obj c0c1aae0!
RTMP_TimerListRelease: release timer obj c0c1dd18!
RTMP_TimerListRelease: release timer obj c0c20f50!
RTMP_TimerListRelease: release timer obj c0c24188!
RTMP_TimerListRelease: release timer obj c0c273c0!
RTMP_TimerListRelease: release timer obj c0c2a5f8!
RTMP_TimerListRelease: release timer obj c0c2d830!
RTMP_TimerListRelease: release timer obj c0c49888!
RTMP_TimerListRelease: release timer obj c0d9a8dc!
RTMP_TimerListRelease: release timer obj c0c5318c!
@@@ RTMPDrvClose: go to ed_monitor_exit()!!
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
1970-01-01 00:01:38 ztr69<2324>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 12
1970-01-01 00:01:38 ztr69<2324>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 9 bind server on /var/lib/.sock/zcfg_sockaddr9 successfully
exFAT: Version 1.2.9
br0: port 12(rai3) entering forwarding state
==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 0, pAd->WlanFunCtrl:0x208, Reg-WlanFunCtrl=0x208
build time =
20141115060606a
rom patch for E3 IC

platform =
ALPS
hw/sw version =

patch version =

FW Version:0.0.00 Build:1
Build Time:201607111443____
fw for E3 IC
RX[0] DESC a5718000 size = 8192
RX[1] DESC a571a000 size = 8192
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
APSDCapable[0]=1
APSDCapable[1]=1
APSDCapable[2]=1
APSDCapable[3]=1
APSDCapable[4]=1
APSDCapable[5]=1
APSDCapable[6]=1
APSDCapable[7]=1
APSDCapable[8]=1
APSDCapable[9]=1
APSDCapable[10]=1
APSDCapable[11]=1
APSDCapable[12]=1
APSDCapable[13]=1
APSDCapable[14]=1
APSDCapable[15]=1
pAd->ed_threshold = 90
pAd->ed_chk = 1
pAd->ed_false_cca_threshold = 180
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
[PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=1, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=2, Desired MFPC=1
[PMF]Set_PMFMFPC_Proc:: apidx=3, Desired MFPC=1
[PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=1, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=2, Desired MFPR=0
[PMF]Set_PMFMFPR_Proc:: apidx=3, Desired MFPR=0
[PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=1, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=2, Desired PMFSHA256=0
[PMF]Set_PMFSHA256_Proc:: apidx=3, Desired PMFSHA256=0
usbcore: registered new interface driver usbfs
updateLinkStatus usbcore: registered new interface driver hub
336: receiving Kernel event !!
RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5
NVM is BIN mode
1. Phy Mode = 49
usbcore: registered new device driver usb
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (167)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (169)
get_chl_grp:illegal channel (171)
get_chl_grp:illegal channel (171)
/home/vm/ex100/opal/btc-git/pmg5617ga/b_201906111526_1b3/build_dir/target-mips_r2_uClibc-0.9.33.2/linux-en75xx_pmg5617ga/MT7612E_LinuxAP_3.0.4.0.P2_DPA/os/linux/../../chips/mt76x2.c:2938 assert (ad->TxPower[choffset].Channel == 42)failed
Country Region from e2p = 1ff
mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=1, temp_tx_alc_enable=1
mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=1, ePA_type=1
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=15, low_temp_slope=9
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=-7, tc_upper_bound=4
mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
mt76x2_get_external_lna_gain::LNA type=0x1, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0xffffff8c, ALNAGain2=0xffffff8c
2. Phy Mode = 49
3. Phy Mode = 49
andes_pci_fw_init
0x1300 = 00064340
AntCfgInit: primary/secondary ant 0/1
andes_load_cr:cr_type(2)
ChipStructAssign(): MT76x2 hook !
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 00
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
BGA USB PHY config
port 0 u2_slew_rate_calibration
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
FM_OUT value = 137(0x00000089)
SR calibration value = 4
port 1 u2_slew_rate_calibration
FM_OUT value = 136(0x00000088)
SR calibration value = 4
USB driver version: 751221.2.20160516
xhc_mtk xhc_mtk: xHCI Host Controller
xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 1
xhc_mtk xhc_mtk: irq 18, io mem 0x1fb90000
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
[/sbin/usb-hotplug.sh] add /var/usb/usb1
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
xhc_mtk xhc_mtk: xHCI Host Controller
xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 2
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
/bin/sh: /etc/init.d/mcpd.sh: not found
START enable Lan and Wan...
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
hotplug:beUsbPortSet: USB Port Alias is cpe-
hotplug:beUsbPortSet: USB Port Type is Device
[/sbin/usb-hotplug.sh] add /var/usb/usb2
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
hotplug:beUsbPortSet: USB Port Alias is cpe-
hotplug:beUsbPortSet: USB Port Type is Device
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
[PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=1, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=2, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=3, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
mt76x2_bbp_adjust():rf_bw=0, ext_ch=0, PrimCh=52, HT-CentCh=52, VHT-CentCh=58
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
APStartUp(): AP Set CentralFreq at 52(Prim=52, HT-CentCh=52, VHT-CentCh=58, BBP_BW=0)
mt76x2_calibration():RDMode  is in Silent State, do not calibration.
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
edcca_tx_stop_start():start tx
Main bssid = c8:54:4b:xx:xx:xx
mt76x2_reinit_agc_gain:original agc_vga0 = 0x4a, agc_vga1 = 0x4a
mt76x2_reinit_agc_gain:updated agc_vga0 = 0x4a, agc_vga1 = 0x4a
mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33
mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33
original vga value(chain0) = 4a
original vga value(chain1) = 4a
<==== rt28xx_init, Status=0
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
@@@ ed_monitor_init : ===>
jiffies=ffffb45b, POLLING_MODE_DETECT_INTV=300
br0: port 9(rai0) entering forwarding state
br0: port 9(rai0) entering forwarding state
valid subcommands:
eth0            addwan          delwan          miir
miiw            gswr            gsww            miir2
miiw2           gswr2           gsww2           vlan
acl             qos             arl             reset
ratectl         macctl          portmirror      stp
phyctl          mib             gen_pkt         pbrw-test
version         help            portmode        wptest
dsp5qos         dstrtcm         stormctrl       traffic
portmatrix      dstq
valid subcommands:
media-type      reset           lanchip         vlanpt
status          igmpsnoop
valid subcommands:
media-type      reset           lanchip         vlanpt
status          igmpsnoop
TR181 object IP.Interface.1
zyExtRemoteMgmtSrvObjGet : Enter
l3fwdObjGet : Enter
l3fwdGetDfGwByRtTable: enter, 4
Restarting ZyIMS VoIP
killall: voiceApp: no process killed
l3fwdGetDfGwByRtTable: ifname =
l3fwdGetDfGwByRtTable: No find default gateway interface!!
killall: mm.exe: no process killed
zcmdReqProcess():5352 ret=2
zcmdReqProcess():5352 ret=2
killall: icf.exe: no process killed
zcmdReqProcess():5352 ret=2
zcmdReqProcess():5352 ret=2
zcmdReqProcess():5352 ret=2
zcmdReqProcess():5352 ret=2

============================================================================
UPnP Mapping table Dump:
TR98 Object Name                                                            : UPnP service Id
InternetGatewayDevice.Layer3Forwarding                                      : urn:upnp-org:serviceId:Layer3Forwarding.1
============================================================================

zupnpGetInterfaceName: enter, 4
l3fwdObjGet : Enter
l3fwdGetDfGwByRtTable: enter, 4
l3fwdGetDfGwByRtTable: ifname =
l3fwdGetDfGwByRtTable: No find default gateway interface!!
handlerName=mgmt_srv method=GET i=72
handlerName=firewall method=GET i=26
handlerName=tr69 method=GET i=1
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29

ppe cmd done!
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].

ppe cmd done!

ppe cmd done!
handlerName=wifi_others method=GET i=39

ppe cmd done!
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29

ppe cmd done!
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].

ppe cmd done!

ppe cmd done!
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
handlerName=wlan method=GET i=29
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].

ppe cmd done!
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
done
handlerName=wifi_others method=GET i=39
zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)].
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
1970-01-01 00:01:48 zupnp<2423>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 13
1970-01-01 00:01:48 zupnp<2423>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 17 bind server on /var/lib/.sock/zcfg_sockaddr17 successfully
@@@ APStop: go to ed_monitor_exit()!!
@@@ ed_monitor_exit : ===>
@@@ ed_monitor_exit : <===
[PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=1, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=2, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
[PMF]APStartUp:: apidx=3, MFPC=1, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0
[PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE
mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=52, HT-CentCh=54, VHT-CentCh=58
mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400
APStartUp(): AP Set CentralFreq at 58(Prim=52, HT-CentCh=54, VHT-CentCh=58, BBP_BW=2)
mt76x2_calibration():RDMode  is in Silent State, do not calibration.
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
edcca_tx_stop_start():start tx
1970-01-01 00:01:49 omci<2497>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 18
1970-01-01 00:01:49 omci<2497>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 52 bind server on /var/lib/.sock/zcfg_sockaddr52 successfully
1970-01-01 00:01:49 omci<2498>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 19
1970-01-01 00:01:49 omci<2498>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 53 bind server on /var/lib/.sock/zcfg_sockaddr53 successfully
[MM] main(): getpid = 2502
AppRegisterSignal(): mm.exe pid = 2502
UITimer_Init()...
[MM]dspDriverDeinit(): DSP & Phone Port driver is already De-initialized ==> skip the action!!
UITimerProc(): The UI Timer System (thread task: 'vo-USR-UItimer', pid=2502) is running...
WARNING: no real random source present!
srtpInit....ret = 0
zcmd.c line 5583, zcmdReqProcess() : get ZCFG_MSG_INIT_DATAMODEL_FIN
ECONET/zcmd_wrapper.c line 1830, zcmdEnableConfigSave() : enable tr98mapTableSaveFlag and configSaveFlag
AppRegisterSignal(): voiceApp pid = 2503
UITimer_Init()...
1970-01-01 00:01:51 voiceApp<2503>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 9
1970-01-01 00:01:51 voiceApp<2503>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 12 bind server on /var/lib/.sock/zcfg_sockaddr12 successfully

### ZyIMS VoIP TR-104 Config Data Init Procedure Start ###

UITimerProc(): The UI Timer System (thread task: 'vo-USR-UItimer', pid=2503) is running...
rai0      bbp:
BBP[0x2308]:00000303

==>Set_Debug_Proc()
<==Set_Debug_Proc(RTDebugLevel = 0)
main(): getpid = 2501

[ENTERED]:ICF_ES

INFO: AUTO_SCALE: 1

INFO: MODE_OF_OPERATION: 0

INFO: SIP_COMPACT_HDRS: NO

INFO: NW_TRACE_ENABLED: YES
INFO: ICF_DEF_SIP_SERVER_PORT: 6062
INFO: ICF_DEF_SIP_PROXY_PORT: 6061
INFO: TRANSPORT_MODE: 0
INFO: ICF_SYS_RESOURCE_LIMIT: 1

[ENTERING]:icf_es_init
[ICF_ES]:PORT initalized succesfully
icf_port_open_ipc_channel path = /var/iptk_es.chanl
the open channel succeded
exit from the es init
icf_register_signal(): icf.exe pid = 2501
device rai0 is already a member of a bridge; can't enslave it to bridge br0.
device rai1 is already a member of a bridge; can't enslave it to bridge br0.
device rai2 is already a member of a bridge; can't enslave it to bridge br0.
device rai3 is already a member of a bridge; can't enslave it to bridge br0.
route: SIOCADDRT: File exists
1970-01-01 00:01:53 zcmd<852>, zcfg_msg.c:827, zcfg_msg_sendAndGetReply(), ERROR: fail to receive message. ret = -1
<<Error>> beVoiceCapConfigStatsUpdate() beVoiceSendMsgToZyIMSAndGetReply failed -5 use default list
tr104ConvertPortsType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertDialingType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertDialToneType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertReceiveToneType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCallerIDType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCallerIDPayloadType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertTASType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertTASType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertPortsType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertDialingType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertDialToneType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertReceiveToneType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCallerIDType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCallerIDPayloadType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertTASType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertTASType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertRegType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCWStatus(): <<Error>> INVALID parameter value : '' !!
tr104ConvertRegType(): <<Error>> INVALID parameter value : '' !!
tr104ConvertCWStatus(): <<Error>> INVALID parameter value : '' !!

### ZyIMS VoIP TR-104 Config Data Init Procedure Successfully Finished ###

MM:voiceDspCoreInit(): Entering...
[MM]dspDriverInit(): Start to initialize the DSP [4294948857][slic][INFO][le9662_fxsSetGainLv:L1291]le9662_fxsSetGainLv - 5a67 / 2d4e
([4294948857][slic][INFO][le9662_fxsSetGainLv:L1294]&le9662_fxsSetGainLv - 5a67 / 2d4e
 P[4294948858][slic][INFO][le9662_fxsSetGainLv:L1291]le9662_fxsSetGainLv - 5a67 / 2d4e
ho[4294948859][slic][INFO][le9662_fxsSetGainLv:L1294]le9662_fxsSetGainLv - 5a67 / 2d4e
ne Port) driver by calling 'PhoneInit(countryCode=25)'...
PhoneInit(): region: 'NOR'.
Country Name:NOR
result:10946392
result:-10946392
VDSP_GetInstance:275
MM:voiceDspCoreInit(): after calling 'dsp_driver_itf.c/dspDriverGetInitData(initData@0x0, initDataLength=0)' to get the inited data of the MM part 'Endpoint_itf_mm.c/cmPhysEndpt[MAX_ENDPT]'...
MM:voiceDspCoreInit(): after calling 'voiceEventIpcSendToVoiceApp()' to send the response message 'VOICE_DSP_INIT_RSP' back to [voiceApp]...
MM:voiceDspCoreInit(): Exiting...with ret=1 & ret2=1 (MM_SUCCESS(1), MM_FAILURE(0))
[Adam] Change log level to (EVA_LOG_ERR).
[GDI] Change log level to (EVA_LOG_ERR).
fxsPhoneIOP_hookFlashDetecTimerSet(): <<Error>>Invalid input timer value {flashTimerMin=0, flashTimerMax=0} for the FXS phone port index-0!! The valid condition is: both values should >= 0 except these two cases - (i)both values == 0, and (ii)(flashTimerMin >= flashTimerMax) while both values > 0!
fxsPhoneIOP_hookFlashDetecTimerSet(): <<Error>>Invalid input timer value {flashTimerMin=0, flashTimerMax=0} for the FXS phone port index-1!! The valid condition is: both values should >= 0 except these two cases - (i)both values == 0, and (ii)(flashTimerMin >= flashTimerMax) while both values > 0!
voiceDspInit(): <<Error>> The Phone (DSP Init) Data: LocationPtr=0x00000000, Size=-1!!
DSP state is Inactive , so exit PhoneInitEventCb now
DSP activated success
taskCreate()...
voiceDspInit(): Leaving with return 0...
 phonePortVMWISet enters (for 'FXS' phone, phid=8 (8:All 'Ports' of the type), vmwiSigType=2 (1:SigOn,2:SigOff,0:SigNone))...
in PhoneEventCb , the event 17 is not support !
in PhoneEventCb , the event 17 is not support !
taskCreate()...
flushVoipRoutePolicy(): cmd = iptables -t mangle -F IP_ROUTE2_VOIP

### ZyIMS VoIP Start-up Procedure Finished ###

zyRegionLListAdd(): <<WARN>> VoIP Country/Region Code 'MEX' is NOT supported, Skip it!!
zyRegionLListAdd(): <<WARN>> VoIP Country/Region Code 'CYP' is NOT supported, Skip it!!
1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory
1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr1-3867476
1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 12, dstEid = 1, type = 103, without reply
get_iface_ipv4_address(): <<Error>> ioctl socket 'SIOCGIFADDR' fail for ifName() ==> try to get IP address info by searching the 'iface_ipv4_address_list[]' array database alternatively!!
get_iface_ipv4_address(): <<Error>> Can't find any matched ifName() even in the 'iface_ipv4_address_list[]' array database!!
mmCfgSelfIp()/SipAcctId=0: <<Error>> calling 'get_iface_ipv4_address()' to get the IP Address FAIL for the interface pProf->ZyXEL_ActiveBoundIfName='' (where pProf->name='ChangeMe', ZyXEL_BoundIfName='Multi_WAN', ZyXEL_BoundIfList='IP.Interface.3', ZyXEL_BoundIpAddr='') ==> return FALSE now!!
mmCfgOfRtpInfo()/SipAcctId=0: <<Error>> MM -> IPTK : 'mmCfgSelfIp(ICF_CFG_SET_SELF_IP_REQ)' FAILed ==> return FALSE now!!
mmIptkCfgOfSipAccount(PID = 2503): <<Error>> 'mmCfgOfRtpInfo(sipAccountId=0)' FAIL ===> try to continue processing the next SIP Account!!
get_iface_ipv4_address(): <<Error>> ioctl socket 'SIOCGIFADDR' fail for ifName() ==> try to get IP address info by searching the 'iface_ipv4_address_list[]' array database alternatively!!
get_iface_ipv4_address(): <<Error>> Can't find any matched ifName() even in the 'iface_ipv4_address_list[]' array database!!
mmCfgSelfIp()/SipAcctId=1: <<Error>> calling 'get_iface_ipv4_address()' to get the IP Address FAIL for the interface pProf->ZyXEL_ActiveBoundIfName='' (where pProf->name='ChangeMe', ZyXEL_BoundIfName='Multi_WAN', ZyXEL_BoundIfList='IP.Interface.3', ZyXEL_BoundIpAddr='') ==> return FALSE now!!
mmCfgOfRtpInfo()/SipAcctId=1: <<Error>> MM -> IPTK : 'mmCfgSelfIp(ICF_CFG_SET_SELF_IP_REQ)' FAILed ==> return FALSE now!!
mmIptkCfgOfSipAccount(PID = 2503): <<Error>> 'mmCfgOfRtpInfo(sipAccountId=1)' FAIL ===> try to continue processing the next SIP Account!!
mt76x2_calibration(channel = 58)
</code>

++++

===== Configurações =====

<WRAP center round important 80%>
É de sua total responsabilidade o uso e implicações que utilizar equipamentos não fornecidos ou homologados pelo ISP podem causar.
</WRAP>

===== Bugs, dicas e notas =====

==== Senhas de supervisor e root ====

Para obter as senhas de supervisor e root, anote o serial do aparelho (impresso na etiqueta) composto por 13 caracteres e iniciando-se com "S190Y", e utilize a seguinte ferramenta de //boginw//:

  https://github.com/boginw/zyxel-vmg8825-keygen
  
Execute-a com o serial do aparelho desta forma:

  python main.py S190Yxxxxxxxx

Várias senhas serão geradas, utilize a mostrada no tipo **zcfgBeCommonGenKeyBySerialNumMethod2**, que terá o formato de **8 caracteres hexadecimais, minúsculos**.
===== Firmwares =====

==== Stock ====

Versões oficiais e não modificadas para o aparelho. São de propriedade do fabricante - que detém todos os direitos sobre elas - e mantidas aqui apenas em caráter de arquivamento e espelhamento, podendo ser removidas caso solicitado pelos representantes oficiais da empresa.

==== Custom ====

<WRAP center round important 80%>
Todas as versões custom são testadas localmente ao máximo possível, porém seu uso e possíveis implicações são de total responsabilidade do proprietário do aparelho. Não atualize o aparelho sem necessidade; só atualize o aparelho para as versões custom se confirmado que precise das alterações listadas.

Os arquivos produzidos pelo O3 Labs são assinados para garantir sua integridade e procedência. Para instruções de como validar as assinaturas, [[about:signing|acesse aqui]].
</WRAP>

Versões modificadas com correções e/ou melhorias, baseadas em //releases// oficiais/stock. As versões são cumulativas, ou seja, a mais recente sempre contém também todas as modificações das versões anteriores.

É possível atualizar entre versões custom ou stock sem nenhum problema. Note que saltos na versão base podem incluir ou remover parâmetros de configuração, portanto é aconselhável um //factory reset// após realizar tais atualizações. Adicionalmente, efetue estes procedimentos com a fibra **desconectada** do aparelho.

Caso a versão base continue a mesma de uma versão custom para a outra, não é necessário o //factory reset//, salvo se solicitado explicitamente na descrição.

===== Agradecimentos =====

Pessoas envolvidas em arquivos, discussões, dicas, doações ou bate papo em geral. Lista em ordem alfabética.

<code>skullao</code>