Te recomiendo que uses el wrt-ali.exe de 30-06-07 18:57 y lo único que tienes que hacer (si no me equivoco) es:
1.- Consigues el firmware original para tu receptor y lo copias con el nombre de BOOTLOADER.BIN en el mismo directorio que wrt-ali.exe.
2.- Ya en ese directorio tecleas "wrt-ali -flash:bootloader /fc:1 /byte"
3.- Cuando termine, cambias el puente para que arranque en modo normal, lo arrancas y por rs232 le puedes volver a meter el firmware correcto.
Si no abre el rs232, primero lanza en el pc el programa para actualizar y luego enciende el receptor, acabo de hacerlo y funciona.
Código:
wrt-ali -flash:bootloader /fc:1 /byte
========================================================
WRT54G-TEST VERSION BETA ADAPTED FOR ALI CHIP
========================================================
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ............... : 00000000110000000101001010001000 (00C05288)
- EJTAG Version ............... : 1 or 2.0
- EJTAG Implementation flags .. : R4k ASID_8 NoDMA MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done
Enabling Flash access (ALi) ... Done
Forced byte mode Flash access ...
Manual Flash Selection ... Done
Flash Vendor ID: 00000000000000000000000011000010 (000000C2)
Flash Device ID: 00000000000000000000000001001001 (00000049)
*** Manually Selected a MXIC 29lv160CB 1Mx16 BotB (2MB) Flash Chip ***
- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00200000
- Selected Area Start ........ : 1fc00000
- Selected Area Length ....... : 00010000
*** You Selected to Flash the BOOTLOADER.BIN ***
=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 4
Erasing block: 1 (addr = 1fc00000)...Done
Erasing block: 2 (addr = 1fc04000)...Done
Erasing block: 3 (addr = 1fc06000)...Done
Erasing block: 4 (addr = 1fc08000)...Done
Loading BOOTLOADER.BIN to Flash Memory...
[ 0% Flashed] 1fc00000: 100000e3 00000000 00000100 4352434e
[ 0% Flashed] 1fc00010: 746f6f62 64616f6c 00007265 00000000
[ 0% Flashed] 1fc00020: 2e312e31 00000030 00000000 00000000
[ 99% Flashed] 1fc0fff0: 00000000 00000000 00000000 00000000
Done (BOOTLOADER.BIN loaded into Flash Memory OK)
=========================
Flashing Routine Complete
=========================
elapsed time: 706 seconds
*** REQUESTED OPERATION IS COMPLETE ***
Lo extraño es que está definida, como /fc:48, si solo escribes el comando "wrt-ali" obtienes la ayuda y se puede leer:
Código:
wrt54-ali
========================================================
WRT54G-TEST VERSION BETA ADAPTED FOR ALI CHIP
========================================================
ABOUT: This program reads/writes flash memory on the WRT54G/GS and
compatible routers via EJTAG using either DMA Access routines
or PrAcc routines (slower/more compatible). Processor chips
supported in this version include the following chips:
Supported Chips
---------------
Broadcom BCM4702 Rev 1 CPU
Broadcom BCM4712 Rev 1 CPU
Broadcom BCM4712 Rev 2 CPU
Broadcom BCM5350 Rev 1 CPU
Broadcom BCM5352 Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM6348 Rev 1 CPU
Broadcom BCM6345 Rev 1 CPU
TI AR7WRD TNETD7300GDU Rev 1 CPU
Broadcom BCM4704 Rev 8 CPU
BRECIS MSP2007-CA-A1 CPU
ALi m3329 A1 CPU
ALi m3329 B1 CPU
ALi m3329 E1 CPU
ALi m3327 CPU
USAGE: wrt54g [parameter] </noreset> </noemw> </nocwd> </nobreak> </noerase>
</notimestamp> </dma> </nodma>
<start:XXXXXXXX> </length:XXXXXXXX>
</silent> </skipdetect> </instrlen:XX> </fc:XX>
Required Parameter
------------------
-backup:cfe
-backup:nvram
-backup:kernel
-backup:wholeflash
-backup:bootloader
-backup:custom
-erase:cfe
-erase:nvram
-erase:kernel
-erase:wholeflash
-erase:bootloader
-erase:custom
-flash:cfe
-flash:nvram
-flash:kernel
-flash:wholeflash
-flash:bootloader
-flash:custom
-probeonly
Optional Switches
-----------------
/noreset ........... prevent Issuing EJTAG CPU reset
/noemw ............. prevent Enabling Memory Writes
/nocwd ............. prevent Clearing CPU Watchdog Timer
/nobreak ........... prevent Issuing Debug Mode JTAGBRK
/noerase ........... prevent Forced Erase before Flashing
/notimestamp ....... prevent Timestamping of Backups
/dma ............... force use of DMA routines
/nodma ............. force use of PRACC routines (No DMA)
/byte .............. force byte access to flash.
/nofast .............disable fast write in AMD type memory
/window:XXXXXXXX ... custom flash window base (in HEX)
/start:XXXXXXXX .... custom start location (in HEX)
/length:XXXXXXXX ... custom length (in HEX)
/silent ............ prevent scrolling display of data
/fc:XX = Optional (Manual) Flash Chip Selection
-----------------------------------------------
/fc:01 ............. MXIC 29lv160CB 1Mx16 BotB (2MB)
/fc:02 ............. EON 29lv160AB 1Mx16 BotB (2MB)
/fc:03 ............. EON 29lv160AT 1Mx16 TopB (2MB)
/fc:04 ............. AMD 29lv160DB 1Mx16 BotB (2MB)
/fc:05 ............. AMD 29lv160DT 1Mx16 TopB (2MB)
/fc:06 ............. AMD 29lv320DB 2Mx16 BotB (4MB)
/fc:07 ............. AMD 29lv320DT 2Mx16 TopB (4MB)
/fc:08 ............. AMD 29lv320MB 2Mx16 BotB (4MB)
/fc:09 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:10 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:11 ............. Intel 28F128J3 8Mx16 (16MB)
/fc:12 ............. Intel 28F160B3 1Mx16 BotB (2MB)
/fc:13 ............. Intel 28F160B3 1Mx16 TopB (2MB)
/fc:14 ............. Intel 28F160C3 1Mx16 BotB (2MB)
/fc:15 ............. Intel 28F160C3 1Mx16 TopB (2MB)
/fc:16 ............. Intel 28F160S3/5 1Mx16 (2MB)
/fc:17 ............. Intel 28F320B3 2Mx16 BotB (4MB)
/fc:18 ............. Intel 28F320B3 2Mx16 TopB (4MB)
/fc:19 ............. Intel 28F320C3 2Mx16 BotB (4MB)
/fc:20 ............. Intel 28F320C3 2Mx16 TopB (4MB)
/fc:21 ............. Intel 28F320J3 2Mx16 (4MB)
/fc:22 ............. Intel 28F320J5 2Mx16 (4MB)
/fc:23 ............. Intel 28F320S3/5 2Mx16 (4MB)
/fc:24 ............. Intel 28F640B3 4Mx16 BotB (8MB)
/fc:25 ............. Intel 28F640B3 4Mx16 TopB (8MB)
/fc:26 ............. Intel 28F640C3 4Mx16 BotB (8MB)
/fc:27 ............. Intel 28F640C3 4Mx16 TopB (8MB)
/fc:28 ............. Intel 28F640J3 4Mx16 (8MB)
/fc:29 ............. Intel 28F640J5 4Mx16 (8MB)
/fc:30 ............. MBM29LV320BE 2Mx16 BotB (4MB)
/fc:31 ............. MBM29LV320TE 2Mx16 TopB (4MB)
/fc:32 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:33 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:34 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:35 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:36 ............. SST39VF320 2Mx16 (4MB)
/fc:37 ............. ST 29w320DB 2Mx16 BotB (4MB)
/fc:38 ............. ST 29w320DT 2Mx16 TopB (4MB)
/fc:39 ............. Sharp 28F320BJE 2Mx16 BotB (4MB)
/fc:40 ............. TC58FVB321 2Mx16 BotB (4MB)
/fc:41 ............. TC58FVT321 2Mx16 TopB (4MB)
/fc:42 ............. AT49BV/LV16X 2Mx16 BotB (4MB)
/fc:43 ............. AT49BV/LV16XT 2Mx16 TopB (4MB)
/fc:44 ............. MBM29LV160B 1Mx16 BotB (2MB)
/fc:45 ............. MBM29LV160T 1Mx16 TopB (2MB)
/fc:46 ............. MX29LV161B 1Mx16 BotB (2MB)
/fc:47 ............. MX29LV161T 1Mx16 TopB (2MB)
/fc:48 ............. ST M29W160EB 1Mx16 BotB (2MB)
/fc:49 ............. ST M29W160ET 1Mx16 TopB (2MB)
/fc:50 ............. SST39VF1601 1Mx16 BotB (2MB)
/fc:51 ............. SST39VF1602 1Mx16 TopB (2MB)
/fc:52 ............. SST39VF3201 2Mx16 BotB (4MB)
/fc:53 ............. SST39VF3202 2Mx16 TopB (4MB)
/fc:54 ............. SST39VF6401 4Mx16 BotB (8MB)
/fc:55 ............. SST39VF6402 4Mx16 TopB (8MB)
/fc:56 ............. K8D1716UTC 1Mx16 TopB (2MB)
/fc:57 ............. K8D1716UBC 1Mx16 BotB (2MB)
/fc:58 ............. MX29LV800BTC 512kx16 TopB (1MB)
/fc:59 ............. MX29LV800BTC 512kx16 BotB (1MB)
/fc:60 ............. K8D3216UTC 2Mx16 TopB (4MB)
/fc:61 ............. K8D3216UBC 2Mx16 BotB (4MB)
/fc:62 ............. SST39VF6401B 4Mx16 BotB (8MB)
/fc:63 ............. SST39VF6402B 4Mx16 TopB (8MB)
NOTES: 1) If 'flashing' - the source filename must exist as follows:
CFE.BIN, NVRAM.BIN, KERNEL.BIN, WHOLEFLASH.BIN, BOOTLOADER.BIN
or CUSTOM.BIN
2) If you have difficulty auto-detecting a particular flash part
you can manually specify your exact part using the /fc:XX option.
3) If you have difficulty with the older bcm47xx chips or when no CFE
is currently active/operational you may want to try both the
/noreset and /nobreak command line options together. Some bcm47xx
chips *may* always require both these options to function properly.
4) When using this utility, usually it is best to type the command line
out, then plug in the router, and then hit <ENTER> quickly to avoid
the CPUs watchdog interfering with the EJTAG operations.
***************************************************************************
* Flashing the KERNEL or WHOLEFLASH will take a very long time using JTAG *
* via this utility. You are better off flashing the CFE & NVRAM files *
* & then using the normal TFTP method to flash the KERNEL via ethernet. *
***************************************************************************
Puede que tenga un código de identificación distinto.
Un saludo y suerte.
P.D. Perdona por haber omitido la opción /byte pues cuando se utiliza /fc:XX cree que el acceso a la memoria es de 16-bits y por eso falla (en nuestro ali es de 8-bits y con la detección automática no ocurre ese problema, y no lo hemos puesto fijo a 8-bits para el ali porque así es mas genérico).
Última edición por jubamo; 04/07/2007 a las 16:33.
|