Por razones que no vienen al caso ha llegado a mis manos un router comtrend ct536+. Lo he abierto y he visto que era relativamente facil conectarle un puerto serie. Me he puesto manos a la obra y finalmente ha funcionado. El problema que tengo es que no se la contraseña del root. He probado admin, 1234 etc, pero nada. Si pongo como nombre admin y contraseña admin me entra en una interfaz como la web pero modo texto. Alguien sabe cual es?
necesitas serie? el router trae servidores ssh y telnet....
es admin/admin, cuando te salga el menú pon "sh" para un shell.
Muchas gracias, estaba buscando el sh. Lo del puerto serie viene a cuento de que asi se puede acceder al CFE y trastear con el aparato. De momento he descubierto que se puede arrancar con una imagen desde tftp cambiando la configuracion en el CFE.
Si a alguien le intersa saber que pone durante el arranque del bicho os pongo los mensajes completo.
CFE version 1.0.37-5.17 for BCM96348 (32bit,SP,BE)
Build Date: Mon, 31 Jan 2005 23:36:28 +0800 (root@max-redhat)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena.
Initializing Devices.
Device id = 22a8
totalBlks=71
totalSize=4096K
getShareBlks: i=70, sect_size=65536, end_blk=71
getShareBlks: i=0, sect_size=8192, end_blk=1
getShareBlks: i=0, sect_size=8192, end_blk=1
fInfo.flash_nvram_start_blk = 0
fInfo.flash_nvram_blk_offset = 0x580
fInfo.flash_nvram_number_blk = 1
psi startAddr = bfffa000
fInfo.flash_persistent_start_blk = 70
fInfo.flash_persistent_blk_offset = 0xa000
fInfo.flash_persistent_number_blk = 1
init 5325E: init mii=0
init 5325E: init success, mii=9f
getShareBlks: i=0, sect_size=8192, end_blk=1
CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz
Total memory used by CFE: 0x80401000 - 0x80522040 (1183808)
Initialized Data: 0x8041C990 - 0x8041E400 (6768)
BSS Area: 0x8041E400 - 0x80420040 (7232)
Local Heap: 0x80420040 - 0x80520040 (1048576)
Stack Area: 0x80520040 - 0x80522040 (8192)
Text (code) segment: 0x80401000 - 0x8041C990 (113040)
Boot area (physical): 0x00523000 - 0x00563000
Relocation Factor: I:00000000 - D:00000000
getShareBlks: i=0, sect_size=8192, end_blk=1
getShareBlks: i=0, sect_size=8192, end_blk=1
Board IP address : 192.168.1.24
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host (f/h) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Board Id Name : 96348GW-11
Psi size in KB : 24
Number of MAC Addresses (1-32) : 11
Base MAC Address : xx:xx:xx:xx:xx:xx
Ethernet PHY Type : External Using Reverse MII with SPI
Memory size in MB : 16
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 1Decompression OK!
Entry at 0x8018a018
Closing network.
Starting program at 0x8018a018
Linux version 2.6.8.1 (root@localhost.localdomain) (gcc version 3.4.2) #1 Wed Feb 22 17:10:46 CST 2006
Total Flash size: 4096K with 71 sectors
Scratch pad is not used for this flash part.
96348GW-11 prom init
CPU revision is: 00029107
mpi: No Card is in the PCMCIA slot
Determined physical RAM map:
memory: 00fa0000 @ 00000000 (usable)
On node 0 totalpages: 4000
DMA zone: 4000 pages, LIFO batch:1
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd
brcm mips: enabling icache and dcache...
Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB 2-way, linesize 16 bytes.
PID hash table entries: 64 (order 6: 512 bytes)
Using 128.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 14104k/16000k available (1308k kernel code, 1876k reserved, 200k data, 72k init, 0k highmem)
Calibrating delay loop... 254.77 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction... unavailable.
NET: Registered protocol family 16
Can't analyze prologue code at 801558dc
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Using noop io scheduler
bcm963xx_mtd driver v1.0
brcmboard: brcm_board_init entry
bcm963xx_serial driver v2.0
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
NET: Registered protocol family 1
NET: Registered protocol family 17
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 72k freed
init started: BusyBox v1.00 (2006.02.22-09:22+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5
BusyBox v1.00 (2006.02.22-09:22+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
Loading drivers and kernel modules...
atmapi: module license 'Proprietary' taints kernel.
blaadd: blaa_detect entry
adsl: adsl_init entry
Broadcom BCMPROCFS v1.0 initialized
Broadcom BCM6348A2 Ethernet Network Device v0.3 Feb 22 2006 17:06:16
Config Ethernet Switch Through SPI Slave Select 1
eth0: MAC Address: xx:xx:xx:xx:xx:xx
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
wl0: Broadcom BCM4320 802.11 Wireless Controller 3.91.41.0
BcmAdsl_Initialize=0xC0054208, g_pFnNotifyCallback=0xC0067374
AdslCoreHwReset: AdslOemDataAddr = 0xA0FF74C4
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
==> Bcm963xx Software Version: A101-302JAZ-C02_R07.A2pB018b3.d16f
eth0 Link UP.
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
Setting country code "ES"
device wl0 entered promiscuous mode
br0: port 2(wl0) entering learning state
br0: topology change detected, propagating
br0: port 2(wl0) entering forwarding state
device eth0 left promiscuous mode
br0: port 1(eth0) entering disabled state
device wl0 left promiscuous mode
br0: port 2(wl0) entering disabled state
device wl0 entered promiscuous mode
br0: port 1(wl0) entering learning state
br0: topology change detected, propagating
br0: port 1(wl0) entering forwarding state
device eth0.2 entered promiscuous mode
device eth0.3 entered promiscuous mode
device eth0.4 entered promiscuous mode
device eth0.5 entered promiscuous mode
eth0.2: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
br0: port 2(eth0.2) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0.2) entering forwarding state
eth0.3: dev_set_promiscuity(master, 1)
br0: port 3(eth0.3) entering learning state
br0: topology change detected, propagating
br0: port 3(eth0.3) entering forwarding state
eth0.4: dev_set_promiscuity(master, 1)
br1: port 1(eth0.4) entering learning state
br1: topology change detected, propagating
br1: port 1(eth0.4) entering forwarding state
eth0.5: dev_set_promiscuity(master, 1)
br1: port 2(eth0.5) entering learning state
br1: topology change detected, propagating
br1: port 2(eth0.5) entering forwarding state
sntp: host not found
Pero eso que es la biblia en arameo :-P :-P
Ya he estado haciendo pruebas con el CFE y he flasheado la imagen del openwrt openwrt-brcm-2.4-squashfs.trx que se supone compatible con TODO los broadcom. Pues confirmado que no funciona. Despues de esta desilusion he vuelto a flashear el firmaware de jazztel sin ningun problema mediante CFE y vuelve a rular. Me parece que voy a tener que bajarme el openwrt entero a ver que se puede hacer.
Openwrt para el comtrend, interesante....
