Belkin F5D8236-4 v2

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Belkin F5D8236-4 v2

Manuf (OEM/ODM): Arcadyan WG7005E22 -LF-AK

FCC approval date: 10 November 2008
Country of manuf.: China

Type: wireless router

FCC ID: K7SF5D8236V2
IC ID: 3623A-F5D8236V2
PCB ID: 141700520010J

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Ralink RT3052F (384 MHz)
FLA1: 2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br /> (Macronix MX29LV160CBTC-70G)
RAM1: 16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (ISSI IC42S16400F-7TL × 2)

Expansion IFs: none specified
Serial: yes, internal, 10-pin header, unpopulated, 3.3V TTL, (115200,8,N,1)

WI1 chip1: Ralink RT3052F
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: none

ETH chip1: Ralink RT3052F
Switch: Ralink RT3052F
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

bgn

Additional chips
2.4GHz Power Amplifier IC;Richwave;RTC6691;;2;

Stock FW OS: SuperTask!

Default SSID: Belkin_N_Wireless_XXXXXX (4 addl. devices)
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 295 additional devices
of which 97 are Belkin devices

802dot11 OUI: 00:22:75 (13 E, 21 W)
Ethernet OUI: 00:22:75 (13 E, 21 W)

For a list of all currently documented Ralink chipsets with specifications, see Ralink.


N Wireless Router

 • Support page

"P/N: 141700520010J R01" is silkscreened on the board.

The default SSID is Belkin_N_Wireless_XXXXXX where XXXXXX is the last

three octets of the WLAN MAC address (upper case letters).

This is, again, presumed to be another Arcadyan device using the SuperTask! RTOS.

Wikis

Included PSU(s)

The power supply included with the unit is a Leader Electronics MT12-Y120100-A1.

Serial

Pinout

( • ) (GND)
( • ) ( • )
( • ) (TxD)
( • ) (RxD)
( • ) [ • ]
J2

Info derived from

 • boot log


=======================================================================
Wireless Router WG7005E22-LF-AK Loader v0.05 build Oct 22 2008 14:11:57
                    Arcadyan Technology Corporation
=======================================================================
MXIC MX29LV160B bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ...
Flash Checking
 Passed.

Unzipping firmware at 0x80002000 ... [ZIP 3] [ZIP 1]  done
In c_entry() function ...
CPU : RT3052  Chip V1.2, CPU Speed 384 MHz,
Interrups Status 00000000
install_exception
Co config = 80050483
sys_irq_init ...
                ▒enter start_ralink_timer - 2
##### _ftext      = 0x80002000
##### _fdata      = 0x803647F0
##### __bss_start = 0x8040AF3C
##### end         = 0x80E22EFC
##### Backup Data from 0x803647F0 to 0x80E2AEFC~0x80ED1648 len 681804
##### Backup Data completed
##### Backup Data verified
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 384000000 Hz
mips_counter_frequency:192000000
r4k_offset: 0x0002ee00(192000)
init_US_counter : time1 = 299966 , time2 = 40299998, diff 40000032
US_counter = 48
 cnt1 41401835 cnt2 41403103, diff 1268
mips_int_enable: 5
mips_int_enable 1: s = 8401
mips_int_enable 2: s = 8401
mips_int_enable 3: s = 0
Runtime code version: 2.00.04
System startup...
[INIT] Memory COLOR 0, 800000 bytes ..
[INIT] Memory COLOR 1, 600000 bytes ..
[INIT] Memory COLOR 2, 607200 bytes ..
MXIC MX29LV160B bottom boot 16-bit mode found
Set flash memory layout to Boot Parameters found !!!
Bootcode version: v0.05
Serial number: 12907823631234
Hardware version: 01
MXIC MX29LV160B bottom boot 16-bit mode found


sizeof(struct III_Config_t) is 88256, nLen:88256, Magic:0xffffffff
!![E-CFG-VER] Configuration data version mismatch!!
!![E-CFG-VER] Adapting factory defaults!!
!![E-CFG-VER] Reconfiguration required!!
!!No configuration file present!!
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=28 BUFFER_OFFSET=384
BUF_BUFSZ0=544 BUF_BUFSZ1=4320
NUM_OF_B0=0 NUM_OF_B1=900
BUF_POOL0_SZ=0 BUF_POOL1_SZ=4032000
sizeof(BUFFER0)=704,sizeof(BUFFER1)=4480
*BUF0=0x80b426b8 *BUF1=0x8076a098
Altgn *BUF0=0x80b426c0 *BUF1=0x8076a0a0
End at BUF0:0x80b426c0, BUF1:0x80b426a0

BUF0[0]=0x80b426c0 BUF1[0]=0x8076a0a0

buffer0 pointer init OK!
buffer1 pointer init OK!
ifno=  0, Link_Type= 4
time = 08/01/2003, 00:00:00
Interface 0 ip = 127.0.0.1

ifno=  1, Link_Type= 1
need to reset Ethernet switch????
GDMA1_MAC_ADRH -- : 0x00000022
GDMA1_MAC_ADRL -- : 0x75489dd7
RA2880 Ethernet Driver Initilization. v1.60  256 rx/tx descriptors allocated.
NAPI enable, Tx Ring = 256, Rx Ring = 256
phy_tx_ring = 0x0040c630, tx_ring = 0xA040C630, size: 16 bytes

phy_rx_ring = 0x0040d630, rx_ring = 0xA040D630, size: 16 bytes
GDMA1_FWD_CFG = 10000
mips_int_enable: 3
mips_int_enable 1: s = 8400
mips_int_enable 2: s = a400
mips_int_enable 3: s = 0
MAC Address: 00:22:75:48:9d:d7
time = 08/01/2003, 00:00:00
Interface 1 ip = 192.168.2.1

ifno=  2, Link_Type= 1
hwlan_init(384): [HWLAN] ifno=2 irno=7 port=0x00000000
2860 version : 1.9.0.0 (Nov 12 2008)
RTMP_ADAPTER_mem : 804c8bb4, sizeof(RTMP_ADAPTER) 391008


=== pAd = 804C8BB4, size = 391008 ===

<-- RTMPAllocAdapterBlock, Status=0
RUNTASK id=1 hwlan_light_isr...
time = 08/01/2003, 00:00:00
Interface 2 ip = 192.168.2.1

ifno=  3, Link_Type= 1
MAC Address: 00:22:75:48:9d:d8
time = 08/01/2003, 00:00:00
iput_IpLinkUp(ifno=3)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
Interface 3 ip = 0.0.0.0

ifno=  4, Link_Type= 0
ifno=  5, Link_Type= 0
ifno=  6, Link_Type= 0
ifno=  7, Link_Type= 0
ifno=  8, Link_Type= 0
ifno=  9, Link_Type= 0
ifno= 10, Link_Type= 0
ifno= 11, Link_Type= 0
ifno= 12, Link_Type= 0
ifno= 13, Link_Type= 0
ifno= 14, Link_Type= 0
ifno= 15, Link_Type= 0
ifno= 16, Link_Type= 0
ruleCheck()> Group: 0,  Error: Useless rule index will be truncated
ruleCheck()> Group: 1,  Error: Useless rule index will be truncated
ruleCheck()> Group: 2,  Error: Useless rule index will be truncated
ruleCheck()> Group: 3,  Error: Useless rule index will be truncated
CBAC rule format check succeed !!
reqCBACBuf()> init match pool, Have: 1000
Memory Address: 0x80dd2194 ~ 0x80dd8f10
reqCBACBuf()> init timeGap pool, Have: 10000
Memory Address: 0x80dd8f10 ~ 0x80e09c64
reqCBACBuf()> init sameHost pool, Have: 2000
Memory Address: 0x80e09c64 ~ 0x80e19684
[setClsfyEnable] clsfy_func=0
CBAC rule pool initialized !!
Init NAT data structure
No default route, no need to reinit the NAT data structure
RUNTASK id=2 if_task if0...
RUNTASK id=3 if_task if1...
RUNTASK id=4 if_task if2...
RUNTASK id=5 if_task if3...
RUNTASK id=6 timer_task...
RUNTASK id=7 conn_mgr...
RUNTASK id=8 main_8021x...
RUNTASK id=9 main_lltd...
RUNTASK id=10 period_task...
RUNTASK id=11 belkin_goodie_task...
RUNTASK id=12 dhcp_daemon...
RUNTASK id=13 dhcp_clt...on interface 3
RUNTASK id=14 pptp_callmgr...
RUNTASK id=15 L2tpd...
found signature: 78h 56h 34h 12h
ulImgLens=948129, LENGTH[3]-12=1769460
length checking OK
[0] find End at 0xBFD27400 len=948129
---[ LZMA head start in 0xBFD27800 ]---
found signature: 78h 56h 34h 12h
ulImgLens=97424, LENGTH[3]-12=1769460
length checking OK
[1] find End at 0xBFD3F400 len=97424
Image[1] at 0xBFC40000, len = 948129
Image[2] at 0xBFD27800, len = 97424
Unzipping from BFD27800 to 80ED2000 ... [ZIP 1] done
Uncompressed size = 990253
drive start addr[0]=80ed2000, [1]=80fc3c30
[HTTPD] flash_init: failed!!
httpd: listen at 192.168.2.1:80
RUNTASK httpd...
RUNTASK id=18 dnsproxy...
RUNTASK id=19 rip...
RUNTASK id=20 ripout...
RUNTASK id=21 dhcpd_mgmt_task...
UPnP is enabled
UPNP Device initialize success! slot=22

>>> belkin_wan_cfg task runs successfully, task_id = 23
gConfig.WSC_Mode:1
RUNTASK id=24 wscmain...
RUNTASK id=25 wsc_Send_eap_packet...
RUNTASK id=26 wsc_Send_UPNP_packet...
RUNTASK id=27 WSC_WaitUserAction_Task...
gConfig.WSC_Mode:1
UART RX Input
Starting Multitask...
run_project_task
RUNTASK id=28 apAppInit...
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
mips_int_enable: 4
mips_int_enable 1: s = a400
mips_int_enable 2: s = e400
mips_int_enable 3: s = 0
rt2860_open : should call request_irq ????????????????????????
RX DESC A0417A30  size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
sizeof(RT2860AP_DAT) : 1314
Channel=6
1. Phy Mode = 9
2. Phy Mode = 9
sould check E2PROM MAC ?????????????????
3. Phy Mode = 9
MCS Set = ff ff 00 00 00
Main bssid = 00:22:75:48:9d:d7
<==== RTMPInitialize, Status=0
should Set up the Mac address ?????????
0x1300 = 00064380
[HWLAN] Ready
[dhcp_clt] enable dhcp client in interface WAN[3]
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.02, Nov 12 2008 10:50:46
*********************************************
Initializing stack...
---------in wsc init----------
----------sizeof(uint32)=4
----------sizeof(uint-long)=4
----------sizeof(uint32)=2
@#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@
wsc_Send_eap_packet:udpFdupnp_wcn:28;;udpFdupnp:2a
WSC_WaitUserAction:wait user action:0
[HWLAN] [30] rapi_tmr_task running
[24]pthread_cond_init: 0
[24]pthread_mutex_init: resource No. 34
[24]pthread_mutex_init: resource No. 35
[PORTABLITY]:WscCreateThread--------------------
 Entered udp_read
upnp_Init: flag=0
SSDP Initialization completed...
GenaInit : event_hook is NULL!!
WscCmd:ActualCBThreadProc: Started
[htf_dbg]     - OnlineActiveWirless() 1633
[24]pthread_cond_init: 1
[24]pthread_mutex_init: resource No. 36
[24]pthread_mutex_init: resource No. 37
[PORTABLITY]:WscCreateThread--------------------
 WscCmd:ActualUIThreadProc: Started.
ActualUIThreadProc: wait q
MasterControl constructor
WscCmd::MC instantiated ok
[24]pthread_cond_init: 2
[24]pthread_mutex_init: resource No. 38
[24]pthread_mutex_init: resource No. 39
[PORTABLITY]:WscCreateThread--------------------
 [24]pthread_mutex_init: resource No. 40
[PORTABLITY]:pthread_mutex_init--------------------
 CTransport Construction
[24]pthread_cond_init: 3
[24]pthread_mutex_init: resource No. 41
[24]pthread_mutex_init: resource No. 42
[PORTABLITY]:WscCreateThread--------------------
 In CTransport::ActualCBThreadProc
ActualCBThreadProc: Calling Dequeue
MC::Init: Init complete ok
WscCmd::MC intialized ok
WscCmd::Init ok, starting stack...
Info::ReadConfigFile: Called
Info::ReadConfigFile:P▒5▒
Info::ReadConfigFile:File open ok
******************uuid_p:0x00000000000000011000002275489dd7*****
mp_deviceInfo->uuid[i]:
0-0-0-0-0-0-0-1-10-0-0-22-75-48-9d-d7-
mp_deviceInfo->macAddr:00:22:75:48:9D:D7
gSetting.dot1x.if_entry[0].enableWEP:0
authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is , key len is 0
 ssid is Belkin_N_Wireless_489DD7
S, c67
E, e67
RegistrarSM constructor
[24]pthread_cond_init: 4
[24]pthread_mutex_init: resource No. 43
[24]pthread_mutex_init: resource No. 44
[PORTABLITY]:WscCreateThread--------------------
 [24]pthread_mutex_init: resource No. 45
[PORTABLITY]:pthread_mutex_init--------------------
 RegistrarSM constructor
[24]pthread_cond_init: 5
[24]pthread_mutex_init: resource No. 46
[24]pthread_mutex_init: resource No. 47
[PORTABLITY]:WscCreateThread--------------------
 c_devPwd:org:84882295
**************mcp_devPwd:84882295;;
Generated devPwd:  ▒g▒
in startMonitor....
CInbEap Construction
Sizeof(WSC_NOTIFY_DATA) = -2140694200
---test--sizeof(WSC_NOTIFY_DATA) = 36
[24]pthread_cond_init: 6
[PORTABLITY]:WscCreateEvent--------------------
 Entered udp_open
Socket open successful, sd: -2140694216
Entered udp_open
Socket open successful, sd: -2140694216
Entered udp_bind
Binding successful for socket [-2140694232]
[PORTABLITY]:WscCreateThread--------------------
 In CInbEap::StaticRecvThread
CInbEap::ActualRecvThread Started
Entered udp_read
in startMonitor....
CInbUPnPDev Construction
Entered udp_open
Socket open successful, sd: -2140694216
Entered udp_open
Socket open successful, sd: -2140694216
Entered udp_bind
Binding successful for socket [-2140694232]
CInbUPnPDev StartMonitor
[PORTABLITY]:WscCreateThread--------------------
 MC::SwitchModeOn: Exit
In CInbUPnPDev::StaticUPnPThread
end UPnPCreateMicroStack
Entered udp_read
MC::StartStack: Informing app of mode
-WscCmd::CallbackProc Enqueue done
MC::SwitchModeOn: Done callback
exit wscmain
@@[31]pthread_mutex_unlock: the res is free 34-- -2143990900
WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd

******* MODE: Access Point *******
-@@[28]pthread_mutex_unlock: the res is free 36-- -2141841168
*******p_header->eType:1

Options:
0. Quit
1. Get configured
2. Get configured via push-button
3. Get configured using IEs
Enter selection: ***gp_mc->mp_info->GetSwitchMode():1
mp_info->GetSwitchMode():1:e_currMode:1,,e_targetMode:3
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
********cp_devPwd:84882295*****
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
MC::SetBeaconIE: call to trans->SetBeaconIE() ok
MC::SetProbeRespIE: call to trans->SetProbeRespIE() ok
Waiting for Registrar to connect...
WscCmd::unconfig initiated
ActualUIThreadProc: wait q
[reset_802dot1x] wireless module ready
[init_wpa] dot1x_ready[0]=1
[reset_802dot1x] 802.1Xv2 ready

Images