Belkin F6D4230-4 v3

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Belkin F6D4230-4 v3

Manuf (OEM/ODM): Arcadyan WG7005F11 -LF-AK

FCC approval date: 03 July 2009
Country of manuf.: China

Type: wireless router

FCC ID: K7SF6D4230V3
IC ID: 3623A-F6D4230V3
PCB ID: 141700520016J

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Broadcom BCM5356A1 (333 MHz)
FLA1: 2 MiB 2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br /> (Macronix MX25L1605DM2I-12G)
RAM1: 8 MiB 8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Zentel A3V64S40ETP-G6)

Expansion IFs: none specified
Serial: yes, internal, 5-pin connector, (115200,8,N,1), unpopulated, 3.3V TTL, J102

WI1 chip1: Broadcom BCM5356A1
WI1 802dot11 protocols: bgn
WI1 MIMO config: 1x1:1
WI1 antenna connector: none

ETH chip1: Broadcom BCM5356A1
Switch: Broadcom BCM5356A1
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

bgn

Stock bootloader: CFE vendor modified

Stock FW OS: SuperTask!

Default SSID: Belkin_Enhanced_Wireless_XXXXXX
, Broadcom
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 295 additional devices
of which 97 are Belkin devices

802dot11 OUI: 00:22:75 (13 E, 21 W)
Ethernet OUI: 00:22:75 (13 E, 21 W)

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

N150 Enhanced Wireless Router

 • Support page

"P/N: 141700520016J R01" is silkscreened on a production model board.

From the FCC photos, the Flash appears to be the 4MB Macronix MX25L3205DM2I-12G

and the RAM a 16MB Samsung K4S281632K-UC60.

This appears to differ from reality. The CPU is part BCM5356A1KFBG.

It is currently assumed that the SuperTask! RTOS is used on this device.

The default SSID pattern for the device is Belkin_Enhanced_Wireless_XXXXXX, where

XXXXXX is the last 6 digits of the wireless interface MAC address (upper case letters).

When the device is booting, the device will temporarily assume the SSID of Broadcom.

Serial

Pinout

           J102
(GND) (RxD) (TxD) [3.3]

Info derived from

 • boot log • >> 
Decompressing...done
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
Found a 2MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.36
CPU type 0x19749: 333MHz
Tot mem: 8192 KBytes

CFE mem:    0x80700000 - 0x807DC9D0 (903632)
Data:       0x80732780 - 0x807359E0 (12896)
BSS:        0x807359E0 - 0x807769D0 (266224)
Heap:       0x807769D0 - 0x807DA9D0 (409600)
Stack:      0x807DA9D0 - 0x807DC9D0 (8192)
Text:       0x80700000 - 0x80732778 (206712)


Copying boot params.....DONE

Arcadyan bootloader version 1.15 boot_version 1.15 18:30 2009/7/6
Press space bar to cancel startup...
Device eth0:  hwaddr 00-22-75-BC-01-71, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: [ZIP 3] [ZIP 1]  done 0 bytes read
Entry at 0x80002000
Closing network.

In c_entry() function ...
[Init_TFTP_buffer_behind_end] TFTP_buffer = 806b3cf4
CPU ProcId is: 0x00019749, options: 0x000021cd
CPU: BCM5356 rev 1 at 333 MHz
install_exception
Set C0 SR to 0x10000000
Co config = 80240483
sys_irq_init ...
Before entering coretest_main
##### _ftext      = 0x80002000
##### _fdata      = 0x80213680
##### __bss_start = 0x80263D3C
##### end         = 0x80693B64
##### Backup Data from 0x806B3CF4 to 0xBFDA0000~0xBFDF06BC len 329404
Found a 2MB ST compatible serial flash
[initialize_data_area] DATA area was already backuped in flash ..
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 300000000 Hz
mips_counter_frequency:150000000
r4k_offset: 0x000249f0(150000)
init_US_counter : time1 = 268814 , time2 = 32268884, diff 32000070
US_counter = 64
 cnt1 33228195 cnt2 33229876, diff 1681
r4k_cur:0x0206a71e(-2140554572)
End of usrclk_init
mips_int_enable: 5
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 8000
mips_int_enable 3: s = 0
Runtime code version: 3.00.03
System startup...
[INIT] Memory COLOR 0, 810000 bytes ..
[INIT] Memory COLOR 1, 400000 bytes ..
[INIT] Memory COLOR 2, 401200 bytes ..
PCI: no core
[pci_alloc_bus] alloc memory 8040548c
[pci_do_scan_bus]Scanning bus 00
Found bus:devfn[vid/did]class header_type 00:00 [14e4/0800] 000501 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
PCI: Calling quirk 800D3784 for 00:00.0
Found bus:devfn[vid/did]class header_type 00:08 [14e4/4338] 000280 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
PCI: Calling quirk 800D3784 for 00:01.0
Found bus:devfn[vid/did]class header_type 00:10 [14e4/4715] 000200 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
PCI: Calling quirk 800D3784 for 00:02.0
Found bus:devfn[vid/did]class header_type 00:20 [14e4/0835] 00ffff 00
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
PCI: Calling quirk 800D3784 for 00:04.0
Fixups for bus 00
PCI: Fixing up bus 0
Bus scan for 00 returning with max=00
[pci_fixup_device]: vendor= 0x14e4 dev=0x800 devfn= 0x0
[pci_fixup_device]: vendor= 0x14e4 dev=0x4338 devfn= 0x8
[pci_fixup_device]: vendor= 0x14e4 dev=0x4715 devfn= 0x10
[pci_fixup_device]: vendor= 0x14e4 dev=0x835 devfn= 0x20
RUNTASK id=1 iNetTask ...
[generic_flash_id_ok] flash already initialized ..

SFLASH Init OK!
FLASH boot parameter signature found!!
Boot Parameters found !!!
Bootcode version: 1.15
Serial number: 12933423009894
Hardware version: 01


sizeof(struct III_Config_t) is 70752, nLen:70752, Magic:0xffffffff
!![E-CFG-VER] Configuration data version mismatch!!
!![E-CFG-VER] Adapting factory defaults!!
!![E-CFG-VER] Reconfiguration required!!
!!No configuration file present!!
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=24 BUFFER_OFFSET=384
BUF_BUFSZ0=608 BUF_BUFSZ1=2272
NUM_OF_B0=0 NUM_OF_B1=500
BUF_POOL0_SZ=0 BUF_POOL1_SZ=1216000
sizeof(BUFFER0)=768,sizeof(BUFFER1)=2432
*BUF0=0x805a340c *BUF1=0x8047a5ec
Altgn *BUF0=0x805a3420 *BUF1=0x8047a600
End at BUF0:0x805a3420, BUF1:0x805a3400

buffer0 pointer init OK!
buffer1 pointer init OK!
ifno=  0, Link_Type= 4
Interface 0 ip = 127.0.0.1

ifno=  1, Link_Type= 1
[pci_set_master]
PCI: Enabling bus mastering for device 00:02.0
PCI: Setting latency timer of device 00:02.0 to 64
[pci_enable_device]
[pci_set_power_state] dev->device=0x4715 state=0
[dma64_alloc] alloc 128 dma tx descriptor size=10240(0x2800)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
[dma64_alloc] alloc 128 dma tx descriptor size=6144(0x1800)
mips_int_enable: 2
mips_int_enable 1: s = 8000
mips_int_enable 2: s = 9000
mips_int_enable 3: s = 0
: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.46
MAC Address: 00:22:75:bc:01:71
Interface 1 ip = 192.168.2.1

ifno=  2, Link_Type= 1
hwlan_init(239): [HWLAN] ifno=2 irno=7 port=0x00000000
[hwlan_init] if_table[2]::00-c0-a8-02-01-02
[hwlan_init] if_table[2]::00-22-a8-02-01-02
[hwlan_init] if_table[2]::00-22-75-02-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-02
[hwlan_init] if_table[2]::00-22-75-bc-01-71
[pci_enable_device]
[pci_set_power_state] dev->device=0x4338 state=0
[pci_set_master]
PCI: Enabling bus mastering for device 00:01.0
PCI: Setting latency timer of device 00:01.0 to 64
RUNTASK id=2 rapi_tmr_task ...
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma rx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
[dma64_alloc] alloc 256 dma tx descriptor size=12288(0x3000)
mips_int_enable: 1
mips_int_enable 1: s = 9000
mips_int_enable 2: s = 9800
mips_int_enable 3: s = 0
: Broadcom BCM4338 802.11 Wireless Controller 5.10.56.46
Interface 2 ip = 192.168.2.1

ifno=  3, Link_Type= 1
MAC Address: 00:22:75:bc:01:72
iput_IpLinkUp(ifno=3)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
Interface 3 ip = 0.0.0.0

ifno=  4, Link_Type= 0
ifno=  5, Link_Type= 0
ifno=  6, Link_Type= 0
ifno=  7, Link_Type= 0
ifno=  8, Link_Type= 0
ifno=  9, Link_Type= 0
ifno= 10, Link_Type= 0
ifno= 11, Link_Type= 0
ifno= 12, Link_Type= 0
ifno= 13, Link_Type= 0
ifno= 14, Link_Type= 0
ifno= 15, Link_Type= 0
ifno= 16, Link_Type= 0
Init NAT data structure
No default route, no need to reinit the NAT data structure
RUNTASK id=5 if_task if0...
RUNTASK id=6 if_task if1...
RUNTASK id=7 if_task if2...
RUNTASK id=8 if_task if3...
RUNTASK id=9 timer_task...
RUNTASK id=10 conn_mgr...
RUNTASK id=11 main_8021x...
RUNTASK id=12 main_lltd...
RUNTASK id=13 period_task...
RUNTASK id=14 dhcp_daemon...
RUNTASK id=15 dhcp_clt...on interface 3

[flash_init] PFS web (bfcf2400) in flash ...
[flash_init] set drive_start_addr[0] as bfcf2400
httpd: listen at 192.168.2.1:80
RUNTASK httpd...
RUNTASK id=18 dnsproxy...
RUNTASK id=19 dhcpd_mgmt_task...
UPnP is enabled
UPNP Device initialize success! slot=20

>>> belkin_wan_cfg task runs successfully, task_id = 21
gConfig.WSC_Mode:1
RUNTASK id=22 wscmain...
RUNTASK id=23 wsc_Send_eap_packet...
RUNTASK id=24 wsc_Send_UPNP_packet...
RUNTASK id=25 WSC_WaitUserAction_Task...
gConfig.WSC_Mode:1
Starting Multitask...
gSetting.lang_id = 0
run_project_task
RUNTASK id=26 apAppInit...
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
[wl_open] done
[HWLAN] Ready
[reset_802dot1x] wireless module ready
[init_wpa] dot1x_ready[0]=1
[reset_802dot1x] 802.1Xv2 ready
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.02, Jul  6 2009 19:47:40
*********************************************
Initializing stack...
---------in wsc init----------
----------sizeof(uint32)=4
----------sizeof(uint-long)=4
----------sizeof(uint32)=2
[22]pthread_cond_init: 0
[22]pthread_mutex_init: resource No. 33
[22]pthread_mutex_init: resource No. 34
[PORTABLITY]:WscCreateThread--------------------
 @#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@
Entered udp_read
wsc_Send_eap_packet:udpFdupnp_wcn:15;;udpFdupnp:17
WscCmd:ActualCBThreadProc: Started
GenaInit : event_hook is NULL!!
[htf_dbg]     - OnlineActiveWirless() 1990
###BCM5356 region was set when setting country code###
Chanspec set to 0x2e04
Setting Wireless Country Code : 0x348
Setting DTIMPeriod : 1
Setting BeaconPeriod : 100
Setting gfragThreshold:2346
Setting grtsThreshold:2347
Setting PreambleType:0
Setting TxBurst:1
Setting TxAntenna:3
wme_ac ap bk ecwmax 6 ecwmin 3 txop 0 aifsn 3 acm 0
wme_ac ap be ecwmax 10 ecwmin 3 txop 0 aifsn 7 acm 0wme_ac ap vi ecwmax 5 ecwmin 3 txop 94 aifsn 1 acm 0wme_ac ap vo ecwmax 3 ecwmin 2 txop 47 aifsn 1 acm 0wme_ac sta bk ecwmax 10 ecwmin 4 txop 0 aifsn 3 acm 0wme_ac sta be ecwmax 10 ecwmin 4 txop 0 aifsn 7 acm 0wme_ac sta vi ecwmax 4 ecwmin 3 txop 94 aifsn 2 acm 0wme_acSetting APSDCapable:0
Setting GF_Mode:0
Setting ShortGI 20MHz:1 40MHz:1
Setting Mpdudensity:6
Setting AMSDU enable:0
[22]pthread_cond_init: 1
[22]pthread_mutex_init: resource No. 35
[22]pthread_mutex_init: resource No. 36
[PORTABLITY]:WscCreateThread--------------------
 WscCmd:ActualUIThreadProc: Started.
ActualUIThreadProc: wait q
MasterControl constructor
WscCmd::MC instantiated ok
[22]pthread_cond_init: 2
[22]pthread_mutex_init: resource No. 37
[22]pthread_mutex_init: resource No. 38
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 39
[PORTABLITY]:pthread_mutex_init--------------------
 CTransport Construction
[22]pthread_cond_init: 3
[22]pthread_mutex_init: resource No. 40
[22]pthread_mutex_init: resource No. 41
[PORTABLITY]:WscCreateThread--------------------
 In CTransport::ActualCBThreadProc
ActualCBThreadProc: Calling Dequeue
MC::Init: Init complete ok
WscCmd::MC intialized ok
WscCmd::Init ok, starting stack...
Info::ReadConfigFile: Called
Info::ReadConfigFile:$▒ ▒
Info::ReadConfigFile:File open ok
******************uuid_p:0x00000000000000011000002275bc0171*****
mp_deviceInfo->uuid[i]:
0-0-0-0-0-0-0-1-10-0-0-22-75-bc-1-71-
mp_deviceInfo->macAddr:00:22:75:BC:01:71
gSetting.dot1x.if_entry[0].enableWEP:0
authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is , key len is 0
 ssid is Belkin_Enhanced_Wireless_BC0171
S, bf0
E, e1d
RegistrarSM constructor
[22]pthread_cond_init: 4
[22]pthread_mutex_init: resource No. 42
[22]pthread_mutex_init: resource No. 43
[PORTABLITY]:WscCreateThread--------------------
 [22]pthread_mutex_init: resource No. 44
[PORTABLITY]:pthread_mutex_init--------------------
 RegistrarSM constructor
[22]pthread_cond_init: 5
[22]pthread_mutex_init: resource No. 45
[22]pthread_mutex_init: resource No. 46
[PORTABLITY]:WscCreateThread--------------------
 c_devPwd:org:14382062
Generated devPwd: ▒▒</9▒
▒<▒▒[
in startMonitor....
CInbEap Construction
Sizeof(WSC_NOTIFY_DATA) = -2143501280
---test--sizeof(WSC_NOTIFY_DATA) = 36
[22]pthread_cond_init: 6
[PORTABLITY]:WscCreateEvent--------------------
 Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_bind
Binding successful for socket [-2143501312]
[PORTABLITY]:WscCreateThread--------------------
 In CInbEap::StaticRecvThread
CInbEap::ActualRecvThread Started
Entered udp_read
in startMonitor....
CInbUPnPDev Construction
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_open
Socket open successful, sd: -2143501296
Entered udp_bind
Binding successful for socket [-2143501312]
CInbUPnPDev StartMonitor
[PORTABLITY]:WscCreateThread--------------------
 MC::SwitchModeOn: Exit
MC::StartStack: Informing app of mode
In CInbUPnPDev::StaticUPnPThread
end UPnPCreateMicroStack
Entered udp_read
-WscCmd::CallbackProc Enqueue done
MC::SwitchModeOn: Done callback
exit wscmain
@@[27]pthread_mutex_unlock: the res is free 33-- -2145361880
WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd

******* MODE: Access Point *******
-@@[26]pthread_mutex_unlock: the res is free 35-- -2144482064
*******p_header->eType:1

Options:
0. Quit
1. Get configured
2. Get configured via push-button
3. Get configured using IEs
Enter selection: ***gp_mc->mp_info->GetSwitchMode():1
mp_info->GetSwitchMode():1:e_currMode:1,,e_targetMode:3
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
********cp_devPwd:14382062*****
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
MC::SetBeaconIE: call to trans->SetBeaconIE() ok
MC::SetProbeRespIE: call to trans->SetProbeRespIE() ok
Waiting for Registrar to connect...
WscCmd::unconfig initiated
ActualUIThreadProc: wait q
Retrieved from "https://wikidevi.wi-cat.ru/index.php?title=Belkin_F6D4230-4_v3&oldid=253988"