数码之家

 找回密码
 立即注册
搜索
查看: 14262|回复: 17

小博AE10面板AP刷爱快H3及ART方法

[复制链接]
发表于 2020-2-23 18:32:44 | 显示全部楼层 |阅读模式
本帖最后由 hfsp 于 2020-2-24 13:40 编辑

小博现在几乎没人会想起,不能吸粉的话什么功能也没用,固件没优点当然也没人用了。手中有一块小博AE10面板AP,拆机图详见:https://www.mydigit.cn/forum.php?mod=viewthread&tid=105430

疫情不让出门也就有空,折腾折腾这面板AP吧。先焊上TTL插针,读下启动时有TTL输出,发现在启动时可按任何键进入ath>状态,见下:
U-Boot 1.1.4-dirty (May 10 2017 - 15:30:06)

ap147 - Honey Bee 2.0DRAM:  
sri
Honey Bee 2.0
ath_ddr_initial_config(195): (16bit) ddr2 init
ath_sys_frequency: cpu 650 ddr 575 ahb 216
tap = 0x00000003
Tap (low, high) = (0x9, 0x24)
Tap values = (0x16, 0x16, 0x16, 0x16)
64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 199k for U-Boot at: 83fcc000
Reserving 192k for malloc() at: 83f9c000
Reserving 44 Bytes for Board Info at: 83f9bfd4
Reserving 36 Bytes for Global Data at: 83f9bfb0
Reserving 128k for boot params() at: 83f7bfb0
Stack Pointer at: 83f7bf98
Now running in RAM - U-Boot at: 83fcc000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
*** Warning - bad CRC, using default environment

Power up PLL with outdiv = 0 then switch to 3
*** Warning *** : PCIe WLAN Module not found !!!
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
Fetching MAC Address from 0x83feca5c
Fetching MAC Address from 0x83feca5c
ath_gmac_enet_initialize: reset mask:c02200
Honey Bee ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: 00:03:7f:11:20:ce
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ---->  MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:11:20:cf
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x60c1a100
Hit any key to stop autoboot:  0
ath> help
?       - alias for 'help'
autoscr - run script from memory
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dhcp    - invoke DHCP client to obtain IP/boot params
echo    - echo args to console
erase   - erase FLASH memory
ethreg  - Switch/PHY Reg rd/wr  utility
exit    - exit script
flinfo  - print FLASH memory information
go      - start application at address 'addr'
help    - print online help
iminfo  - print header information for application image
itest   - return true/false on integer compare
loop    - infinite loop on address range
mct   - simple RAM test
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
pll cpu-pll dither ddr-pll dither - Set to change CPU & DDR speed
pll erase
pll get
printenv- print environment variables
progmac - Set ethernet MAC addresses
progmac2 - Set ethernet MAC addresses
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sleep   - delay execution for some time
test    - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath> printenv
bootargs=board= console=ttyS0,115200  mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),14528k(rootfs),1408k(uImage),64k(mib0),64k(ART) rootfstype=squashfs,jffs2 noinitrd
bootcmd=bootm 0x9fE80000
bootdelay=2
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
ipaddr=192.168.1.1
serverip=192.168.1.10
dir=
lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap147${bc}-jffs2&&erase 0x9f050000 +0xE30000&&cp.b $fileaddr 0x9f050000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9fE80000 +$filesize&&cp.b $fileaddr 0x9fE80000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0

Environment size: 683/65532 bytes
ath>

看上面内容本感觉在TTL下可刷机,但原来刷过有关设备为爱快H3,发现H3不能在不死BREED中刷,那样刷的一定启动不成功。好在闪存为8脚好焊有信心,焊下备份原固件后再用编程器写入爱快H3编程器固件如何?
这儿要注意,在用编程器写前一定要把固件中的MAC地址改为自己设备的MAC地址,不然将来上网会与其它设备冲突。修改方法如下:

也可找有关软件一次完成,我没细找就手工改好的,改好后用的优硕GZUT_OnePro土豪金编程器重写好固件,再焊到设备就一次成功了。
原来一直不敢试,因为这AE10的配置为QCA9533+16MB+64MB,按说官方的H3为QCA9531+16MB+128MB,还是双频的,没想到这个单频的也一次就刷成功了,各位大胆刷写,我也没想到这么简单就成了。
附上刷后TTL端信息如下:
U-Boot 1.1.4-g9e952007-dirty (Dec 20 2015 - 08:47:17)

ap143 - Honey Bee 2.0

DRAM:  64 MB
Flash: 16 MB

eth0 link down
FAIL
eth1 link down
FAIL
Using eth0 device
Tx Timed out
ping failed; host 192.168.1.10 is not alive
Unknown command 'ERROR!' - try 'help'
Hit any key to stop autoboot:  0
## Booting image at 9f020000 ...
   Image Name:   MIPS iKuai Linux-3.18.23
   Created:      2016-11-04   3:23:58 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1131619 Bytes =  1.1 MB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f020040 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 67108864

Starting kernel ...

[    0.000000] Linux version 3.18.23 (daxiong@ikuai8) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 unknown) ) #1 Wed Sep 14 18:24:49 CST 2016
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Qualcomm Atheros QCA9533 ver 2 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x03ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x03ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  board=COMFAST-CF-WR610N console=ttyS0,115200 mtdparts=spi0.0:64k(u-boot)ro,64k(art)ro,1536k(kernel),14528k(rootfs),64k@0xfc0000(ikfirm),64k(nvram)ro,16128k@0x20000(firmware) rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 61012K/65536K available (2502K kernel code, 125K rwdata, 512K rodata, 180K init, 186K bss, 4524K reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:650.000MHz, DDR:391.064MHz, AHB:216.666MHz, Ref:25.000MHz
[    0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is COMFAST CF-WR610N
[    0.530000] ar724x-pci ar724x-pci.0: PCIe link is down
[    0.530000] registering PCI controller with io_map_base unset
[    0.540000] PCI host bridge to bus 0000:00
[    0.540000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[    0.550000] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.550000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.560000] Switched to clocksource MIPS
[    0.560000] NET: Registered protocol family 2
[    0.570000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.570000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.580000] TCP: Hash tables configured (established 1024 bind 1024)
[    0.580000] TCP: reno registered
[    0.590000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.590000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.600000] NET: Registered protocol family 1
[    0.600000] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.630000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.640000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.650000] msgmni has been set to 119
[    0.650000] io scheduler noop registered
[    0.660000] io scheduler deadline registered (default)
[    0.660000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
  0.690000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a 16550A
[    0.700000] console [ttyS0] enabled
[    0.700000] console [ttyS0] enabled
[    0.710000] bootconsole [early0] disabled
[    0.710000] bootconsole [early0] disabled
[    0.720000] m25p80 spi0.0: found w25q128, expected m25p80
[    0.730000] m25p80 spi0.0: w25q128 (16384 Kbytes)
[    0.730000] 7 cmdlinepart partitions found on MTD device spi0.0
[    0.740000] Creating 7 MTD partitions on "spi0.0":
[    0.740000] 0x000000000000-0x000000010000 : "u-boot"
[    0.750000] 0x000000010000-0x000000020000 : "art"
[    0.750000] 0x000000020000-0x0000001a0000 : "kernel"
[    0.760000] 0x0000001a0000-0x000000fd0000 : "rootfs"
[    0.770000] mtd: device 3 (rootfs) set to be root filesystem
[    0.770000] 1 squashfs-split partitions found on MTD device rootfs
[    0.780000] 0x000000480000-0x000000fd0000 : "rootfs_data"
[    0.780000] 0x000000fc0000-0x000000fd0000 : "ikfirm"
[    0.790000] 0x000000fd0000-0x000000fe0000 : "nvram"
[    0.800000] 0x000000020000-0x000000fe0000 : "firmware"
[    0.820000] libphy: ag71xx_mdio: probed
[    1.420000] ag71xx-mdio.1: Found an AR934X built-in switch
[    1.460000] eth0: Atheros AG71xx at 0xba000000, irq 5, mode:GMII
[    2.060000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd042, driver=Generic PHY]
[    2.070000] eth1: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    2.080000] TCP: cubic registered
[    2.080000] NET: Registered protocol family 17
[    2.080000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    2.100000] 8021q: 802.1Q VLAN Support v1.8
[    2.110000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    2.120000] Freeing unused kernel memory: 180K (80373000 - 803a0000)
[    3.030000] init: Console is alive
[    3.040000] init: - watchdog -
[    4.040000] init: - preinit -
[    4.900000] mount_root: no usable overlay filesystem found, using tmpfs overlay
[    4.950000] procd: - early -
[    4.950000] procd: - watchdog -
[    5.560000] procd: - ubus -
[    6.570000] random: ubusd urandom read with 10 bits of entropy available
[    6.590000] procd: - init -
Please press Enter to activate this console.
[    7.380000] Loading modules backported from Linux version v4.4-rc5-1913-gc8fdf68
[    7.390000] Backport generated by backports.git backports-20151218-0-g2f58d9d
[    7.530000] ieee80211 phy0: Atheros AR9531 Rev:2 mem=0xb8100000, irq=47
[    7.630000] xt_time: kernel timezone is -0000
[    7.630000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.750000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x518e instead
[   12.780000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xdb13 instead
[   12.780000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xbf2b instead
[   12.810000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xde2a instead
[   12.810000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x1068 instead
[   12.840000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5357 instead
[   12.840000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9748 instead
[   12.870000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xf587 instead
[   12.870000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xebc6 instead
[   12.900000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xad64 instead
[   12.900000] jffs2: Further such events for this erase block will not be printed
[   12.980000] jffs2: Old JFFS2 bitmask found at 0x0000f2c0
[   12.980000] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[   13.010000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x9ed4 instead
[   13.040000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xdb3c instead
[   13.040000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x6538 instead
[   13.070000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x47f3 instead
[   13.070000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xfc6a instead
[   13.100000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x57fd instead
[   13.100000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x35cf instead
[   13.130000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xd1ff instead
[   13.130000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x8b0e instead
[   13.160000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x360f instead
[   13.160000] jffs2: Further such events for this erase block will not be printed
[   13.240000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020000: 0x5ebf instead
[   13.270000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020004: 0x8a87 instead
[   13.270000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020008: 0x25e1 instead
[   13.300000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002000c: 0xc42b instead
[   13.300000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020010: 0x07dd instead
[   13.330000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020014: 0xc250 instead
[   13.330000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020018: 0xb704 instead
[   13.360000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002001c: 0x3ab6 instead
[   13.360000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020020: 0xee3c instead
[   13.390000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020024: 0x7e3e instead
[   13.390000] jffs2: Further such events for this erase block will not be printed
[   13.470000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030000: 0xc207 instead
[   13.500000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030004: 0x1bc4 instead
[   13.500000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030008: 0xafc9 instead
[   13.530000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0003000c: 0xf172 instead
[   13.530000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030010: 0xbab7 instead
[   13.560000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030014: 0x3080 instead
[   13.560000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030018: 0x1744 instead
[   13.590000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0003001c: 0x0e45 instead
[   13.590000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030020: 0x7b33 instead
[   13.620000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00030024: 0x53ca instead
[   13.620000] jffs2: Further such events for this erase block will not be printed
[   13.700000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040000: 0xfa12 instead
[   13.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040004: 0xc4fa instead
[   13.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040008: 0x1fe7 instead
[   13.760000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004000c: 0xc4f5 instead
[   13.760000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040010: 0x937d instead
[   13.790000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040014: 0xdfe4 instead
[   13.790000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040018: 0x57e2 instead
[   13.820000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004001c: 0xa66d instead
[   13.820000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040020: 0xd729 instead
[   13.850000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040024: 0x7bb8 instead
[   13.850000] jffs2: Further such events for this erase block will not be printed
[   13.890000] jffs2: Old JFFS2 bitmask found at 0x00045570
[   13.890000] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[   13.960000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050000: 0x97d0 instead
[   13.990000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050004: 0xee66 instead
[   13.990000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050008: 0x0284 instead
[   14.020000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0005000c: 0xa000 instead
[   14.020000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050010: 0x992e instead
[   14.050000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050014: 0x78b2 instead
[   14.050000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050018: 0xacbf instead
[   14.080000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0005001c: 0xe747 instead
[   14.080000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050020: 0xbd53 instead
[   14.110000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00050024: 0xd8d5 instead
[   14.110000] jffs2: Further such events for this erase block will not be printed
[   14.190000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060000: 0xae39 instead
[   14.220000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060004: 0xc24d instead
[   14.220000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060008: 0x4356 instead
[   14.250000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006000c: 0x1179 instead
[   14.250000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060010: 0x0890 instead
[   14.280000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060014: 0xa856 instead
[   14.280000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060018: 0x593a instead
[   14.310000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006001c: 0xee52 instead
[   14.310000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060020: 0x7c46 instead
[   14.340000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060024: 0xe05f instead
[   14.340000] jffs2: Further such events for this erase block will not be printed
[   14.410000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070000: 0x963c instead
[   14.440000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070004: 0xe953 instead
[   14.440000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070008: 0x4eb4 instead
[   14.470000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0007000c: 0xd897 instead
[   14.470000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070010: 0x219f instead
[   14.500000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070014: 0x58f4 instead
[   14.500000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070018: 0x9612 instead
[   14.530000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0007001c: 0x00b8 instead
[   14.530000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070020: 0x65db instead
[   14.560000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00070024: 0xaeee instead
[   14.560000] jffs2: Further such events for this erase block will not be printed
[   14.640000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080000: 0x374c instead
[   14.670000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080004: 0x36c6 instead
[   14.670000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080008: 0xc060 instead
[   14.700000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008000c: 0x093a instead
[   14.700000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080010: 0x4f75 instead
[   14.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080014: 0xf26f instead
[   14.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080018: 0x569a instead
[   14.760000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008001c: 0x317d instead
[   14.760000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080020: 0x508a instead
[   14.790000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080024: 0x3b1a instead
[   14.790000] jffs2: Further such events for this erase block will not be printed
[   14.870000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090000: 0x32ff instead
[   14.900000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090004: 0x244f instead
[   14.900000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090008: 0x8830 instead
[   14.930000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0009000c: 0x16df instead
[   14.930000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090010: 0xeb9f instead
[   14.960000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090014: 0xd87b instead
[   14.960000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090018: 0xa17a instead
[   14.990000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0009001c: 0xa76c instead
[   14.990000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090020: 0x2a99 instead
[   15.020000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00090024: 0xaabf instead
[   15.020000] jffs2: Further such events for this erase block will not be printed
[   15.090000] jffs2: Old JFFS2 bitmask found at 0x0009c258
[   15.100000] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[   15.120000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0000: 0x4b92 instead
[   15.150000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0004: 0x15aa instead
[   15.150000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0008: 0x621e instead
[   15.180000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a000c: 0xdb08 instead
[   15.180000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0010: 0x431b instead
[   15.210000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0014: 0x3483 instead
[   15.210000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0018: 0x9ca1 instead
[   15.240000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a001c: 0x93e8 instead
[   15.240000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0020: 0xce4d instead
[   15.270000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0024: 0x1607 instead
[   15.270000] jffs2: Further such events for this erase block will not be printed
[   15.350000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0000: 0xbfb0 instead
[   15.380000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0004: 0x0786 instead
[   15.380000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0008: 0x7e50 instead
[   15.410000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b000c: 0x04b3 instead
[   15.410000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0010: 0xc3e5 instead
[   15.440000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0014: 0x4480 instead
[   15.440000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0018: 0x28bf instead
[   15.470000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b001c: 0x1c2c instead
[   15.470000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0020: 0x09a2 instead
[   15.500000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000b0024: 0x28ef instead
[   15.500000] jffs2: Further such events for this erase block will not be printed
[   15.540000] jffs2: Old JFFS2 bitmask found at 0x000b8a34
[   15.550000] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[   15.610000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0000: 0xea67 instead
[   15.640000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0004: 0x3531 instead
[   15.640000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0008: 0xfc4f instead
[   15.670000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c000c: 0x1bcd instead
[   15.670000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0010: 0x2c9b instead
[   15.700000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0014: 0xab58 instead
[   15.700000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0018: 0xfaba instead
[   15.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c001c: 0xa022 instead
[   15.730000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0020: 0xda73 instead
[   15.760000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000c0024: 0xfc3b instead
[   15.760000] jffs2: Further such events for this erase block will not be printed
[   15.840000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0000: 0xd099 instead
[   15.870000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0004: 0x5bf5 instead
[   15.870000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0008: 0x43e2 instead
[   15.900000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d000c: 0x9be6 instead
[   15.900000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0010: 0x8fd7 instead
[   15.930000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0014: 0x1a94 instead
[   15.930000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0018: 0xaab4 instead
[   15.960000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d001c: 0x9955 instead
[   15.960000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0020: 0x5213 instead
[   15.990000] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000d0024: 0x4fde instead
[   15.990000] jffs2: Further such events for this erase block will not be printed
[   16.070000] jffs2_scan_eraseblock(): End of filesystem marker found at 0xe0000
[   16.070000] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[   16.080000] jffs2: empty_blocks 167, bad_blocks 0, c->nr_blocks 181
[   18.130000] device eth0 entered promiscuous mode
[   18.150000] device eth1 entered promiscuous mode
[   18.160000] br-lan: port 2(eth1) entered forwarding state
[   18.160000] br-lan: port 2(eth1) entered forwarding state
[   19.090000] br-lan: port 2(eth1) entered disabled state
[   19.940000] device wlan0 entered promiscuous mode
[   19.940000] br-lan: port 3(wlan0) entered forwarding state
[   19.950000] br-lan: port 3(wlan0) entered forwarding state
[   21.950000] br-lan: port 3(wlan0) entered forwarding state
P:[   46.090000] random: nonblocking pool is initialized
[   90.480000] eth1: link up (100Mbps/Full duplex)
[   90.480000] br-lan: port 2(eth1) entered forwarding state
[   90.490000] br-lan: port 2(eth1) entered forwarding state
[   92.490000] br-lan: port 2(eth1) entered forwarding state
[  113.920000] device wlan0 left promiscuous mode
[  113.930000] br-lan: port 3(wlan0) entered disabled state
[  115.760000] device wlan0 entered promiscuous mode
[  115.760000] br-lan: port 3(wlan0) entered forwarding state
[  115.770000] br-lan: port 3(wlan0) entered forwarding state
[  115.780000] device wlan0-1 entered promiscuous mode
[  115.790000] br-lan: port 4(wlan0-1) entered forwarding state
[  115.790000] br-lan: port 4(wlan0-1) entered forwarding state
[  117.770000] br-lan: port 3(wlan0) entered forwarding state
[  117.790000] br-lan: port 4(wlan0-1) entered forwarding state




本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

x

打赏

参与人数 15家元 +298 收起 理由
eros8269 + 18
michael9258 + 20 優秀文章
girlstorm + 20 謝謝分享
沙漠臭屁虫 + 20
锰子 + 20 謝謝分享
kkdkj + 20 謝謝分享
阳光使者 + 20 認真發帖
人艰不拆了 + 20
aacyxjz + 20
moontree + 20 謝謝分享

查看全部打赏

 楼主| 发表于 2020-2-23 18:33:20 | 显示全部楼层
本帖最后由 hfsp 于 2020-2-24 13:57 编辑

刷好通电并接到AC设备上,可在设备中看到新连接上的AP,固件版本为1.2.6,在线升级成功,过程如下图:




刷好后感觉无线信号不强,在网友的提示下决定还是把原来固件中的ART提取,再在TTL状态下刷进去看无线信号好点不?
提取ART方法:
ART 位于 Flash 的最后 64KB,那么它在 Flash 中的地址就是 Flash 容量 - 64KB。
那么Flash 是 4MB 的,那么 ART 在 Flash 中的起始地址就是 0x400000 - 0x10000 = 0x3f0000;
Flash 是 8MB 的,那么 ART 在 Flash 中的起始地址就是 0x800000 - 0x10000 = 0x7f0000;
Flash 是 16MB 的,那么 ART 在 Flash 中的起始地址就是 0x1000000 - 0x10000 = 0xff0000

1、用winHex打开原编程器固件,在导航中转到偏移量,输入F0000并确定;

2、点击编辑,选择定义位块,在起始处选择00FF0000,结束处输入00FFFFFF(实际上此固件结束处为00FFFFF0);
3.把定义的位块复制出来并存为一个新文件如ae10art.bin即可。
现在再把面板AP拆开,接上TTL线继续操作。
测试过此固件在启动后都进不了SSH或TELNET等,只能在TTL中操作。
具体操作命令如下:
ath> setenv ipaddr 192.168.1.1
ath> setenv serverip 192.168.1.10
ath> tftp 0x80060000 AE10 ART.bin
Usage:
tftpboot- boot image via network using TFTP protocol #怀疑文件名中不能有空格


ath> tftp 0x80060000 AE10 ART.bin
Unknown command '192.168.1.10192.168.1.10tftp' - try 'help'
ath> tftp 0x8006000 ae10art.bin  #改了文件名后就正常了
eth0 link down
FAIL
Using eth1 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'ae10art.bin'.
Load address: 0x8006000
Loading: #############
done
Bytes transferred = 65536 (10000 hex)
ath> erase 0x9fff0000 +0x10000
Erasing flash...
First 0xff last 0xff sector size 0x10000
255
Erased 1 sectors                        #应该是ART没这么长,我从winHex中看到只到0000FFF0位置
ath> cp.b 0x8006000 0x9fff0000 0x10000
Copy to Flash... write addr: 9fff0000
done
ath>boot    #路由器重启
特别要注意,开始ART文件名中有空格怎么也不行呀。刷了ART后无线信号比原来要强点,但这种面板AP的无线信号还是与K2等不能比,只能在一个房间内信号还行,远点信号都不能满格呀。



本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

x

打赏

参与人数 11家元 +220 收起 理由
michael9258 + 20 原創內容
锰子 + 20 謝謝分享
yzs8414 + 20 謝謝分享
阳光使者 + 20 谢谢朋友经验分享!
kkdkj + 20 謝謝分享
myhaly + 20
lbpcwd + 20 謝謝分享
人艰不拆了 + 20
jsycwnw + 20 謝謝分享
xu6965319 + 20 優秀文章

查看全部打赏

回复 支持 反对

使用道具 举报

发表于 2020-2-23 20:08:25 | 显示全部楼层
还是酒店吸顶的那种温度,效果还不错 。

打赏

参与人数 1家元 +20 收起 理由
xu6965319 + 20 精彩回帖

查看全部打赏

回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-23 20:23:49 | 显示全部楼层
潜隆 发表于 2020-2-23 20:08
还是酒店吸顶的那种温度,效果还不错 。

皇上看中没?皇上看中了可以送哈,当然大清朝有的是钱打赏几个宝贝我还是要领受的。:titter:

打赏

参与人数 1家元 +20 收起 理由
xu6965319 + 20 精彩回帖

查看全部打赏

回复 支持 反对

使用道具 举报

发表于 2020-2-24 10:09:08 | 显示全部楼层
感谢楼主分享
回复 支持 反对

使用道具 举报

发表于 2020-2-24 10:15:32 | 显示全部楼层
一脸懵逼地看完
回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-2-24 22:34:56 | 显示全部楼层
ljlun 发表于 2020-2-24 10:15
一脸懵逼地看完

大佬不爱这个吧,要是美女图你肯定看得舒服
回复 支持 反对

使用道具 举报

发表于 2020-4-8 17:28:27 来自手机浏览器 | 显示全部楼层
能给个H3的1.5.4版本的编程器固件吗?我的只能是1.2.6版本
回复 支持 反对

使用道具 举报

 楼主| 发表于 2020-6-21 15:15:43 | 显示全部楼层
本帖最后由 hfsp 于 2020-6-21 15:18 编辑
wwwha 发表于 2020-4-8 17:28
能给个H3的1.5.4版本的编程器固件吗?我的只能是1.2.6版本

我的也是1.2.6呀,最新的没用编程器导出,刷好了就没再上编程器的。这个刷H3不好用,无线信号太弱了,最终刷了S3 才无线信号正常的。
回复 支持 反对

使用道具 举报

发表于 2020-7-27 09:23:54 | 显示全部楼层
认真学习了,我手里也有一块一模一样的,学习学习,感谢楼主分享。
回复 支持 反对

使用道具 举报

发表于 2020-7-27 10:34:51 | 显示全部楼层
原创文章,值得推荐
回复 支持 反对

使用道具 举报

发表于 2020-8-16 02:29:45 | 显示全部楼层
:mad: 手里几个H3C AP刷的爱快X3 两个卖家 一个改了mac 现在升级正常可以3.4 一个山东卖家偷懒没有改MAC 升级3.4后AP直接提示非法AP 卖家的骚操作是不升级软路由系统就ok。。。。
回复 支持 反对

使用道具 举报

发表于 2020-12-2 21:13:18 | 显示全部楼层
hfsp 发表于 2020-6-21 15:15
我的也是1.2.6呀,最新的没用编程器导出,刷好了就没再上编程器的。这个刷H3不好用,无线信号太弱了,最终 ...

层主可以提供下S3的固件么?
回复 支持 反对

使用道具 举报

发表于 2021-3-3 20:26:25 | 显示全部楼层
求 hxe找mac地址 找了很久找不到
回复 支持 反对

使用道具 举报

 楼主| 发表于 2022-4-24 14:14:59 | 显示全部楼层
justin0705 发表于 2020-12-2 21:13
层主可以提供下S3的固件么?

可以,加我Q:77294583
回复 支持 反对

使用道具 举报

发表于 2022-8-20 00:17:29 | 显示全部楼层
hfsp 发表于 2020-6-21 15:15
我的也是1.2.6呀,最新的没用编程器导出,刷好了就没再上编程器的。这个刷H3不好用,无线信号太弱了,最终 ...

求个S3 固件112801424@qq。com
回复 支持 反对

使用道具 举报

 楼主| 发表于 2022-10-10 21:15:27 | 显示全部楼层
qqmusicvcd 发表于 2022-8-20 00:17
求个S3 固件112801424@qq。com

上半年有天原来的硬盘突然不认了,所有的资料都没。。。。
回复 支持 反对

使用道具 举报

发表于 2023-1-26 00:05:32 来自手机浏览器 | 显示全部楼层
有编程器固件就好了
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

APP|手机版|小黑屋|关于我们|联系我们|法律条款|技术知识分享平台

闽公网安备35020502000485号

闽ICP备2021002735号-2

GMT+8, 2024-4-26 16:37 , Processed in 0.218400 second(s), 13 queries , Redis On.

Powered by Discuz!

© 2006-2023 smzj.net

快速回复 返回顶部 返回列表