Je me permets de "déterrer" le sujet, pour rajouter une information, je l'espère, pertinente.
J'avais rapidement essayé de remplacer ma box Sfr 7F, sans succès, par un ont sfr (GS0100GH) acheté sur LBC.
Cela avant de me procurer un ONU Ma5671a.
Après avoir fait un dump du firmware avec un TL866 et en l'analysant brièvement j'ai trouvé la combinaison qui interrompt le démarrage.
Les touches sont : qwe321
ROM: V1.1.4
ROM: CFG 0x00000006
ROM: SFLASH-4
U-Boot 2015.04-lantiq-gpon-1.3.4-ALB_0.4 (Aug 07 2017 - 17:19:33), Build: ptin_gsxxx0g
Board: PTIN-GSXXX0G
Chip: FALCON-V2 (A22)
Bootmode: 0x06
Reset cause: Power-On Reset
CPU Clock: 400 MHz
Watchdog enabled
I2C: ready
DRAM: 64 MiB
SF: Detected W25Q128BV with page size 256 Bytes, erase size 4 KiB, total 16 MiB
Net: GPHY0, GPHY1
Press PASS to abort autoboot in 5 seconds
FALCON =>
On se retrouve alors avec un prompt Falcon, et voici les commandes disponibles :
FALCON => help
? - alias for 'help'
asc0_fixup- fix asc0 pins (for silent boot)
base - print or set address offset
bdinfo - print Board Info structure
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
chipinfo- print chip info
cmp - memory compare
coninfo - print console devices and information
cp - memory copy
crc32 - checksum calculation
ddrlp - config DDR LowPower
ddrstatus- show DDR Controller status
dhcp - boot image via network using DHCP/TFTP protocol
echo - echo args to console
editenv - edit environment variable
eeprom - EEPROM sub-system
env - environment handling commands
exit - exit script
extphy - external PHY enable (clock and reset)
false - do nothing, unsuccessfully
fuses - dump status (fuse) registers
go - start application at address 'addr'
gpio - query and control gpio pins
help - print command description/usage
i2c - I2C sub-system
iminfo - print header information for application image
itest - return true/false on integer compare
loadb - load binary file over serial line (kermit mode)
loads - load S-Record file over serial line
loadx - load binary file over serial line (xmodem mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mdio - MDIO utility commands
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mmd - MMD utility commands
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
sf - SPI flash sub-system
sfboot - boot from serial flash device
showvar - print local hushshell variables
sleep - delay execution for some time
sntp - synchronize RTC via network
source - run script from memory
test - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
time - run commands and summarize execution time
tlb - setup TLB (virtual memory) mapping
true - do nothing, successfully
version - print monitor, compiler and linker version
wdoff - switch watchdog off
wdtest - watchdog test (endless loop!)
wdtime - set watchdog timeout
Voici aussi les variables d'envirronement :
FALCON => printenv
CID=2
PCB=1389_V5
PTINhwBoM=1.12
PTINoptImon=367
PTINoptSn=0012939
PTINoptType=PA4260
act_img_addr=0xBF20003C
activate_image=-1
addip=setenv bootargs ${bootargs} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}:${netdev}:off
addmisc=setenv bootargs ${bootargs} ethaddr=${ethaddr} machtype=${machtype} vpe1_load_addr=0x83f00000 vpe1_mem=1M mem=63M ${mtdparts} quiet
addmtdparts0=setenv mtdparts mtdparts=sflash:256k(uboot)ro,512k(uboot_env),7424k(linux),8192k(image1)
addmtdparts1=setenv mtdparts mtdparts=sflash:256k(uboot)ro,512k(uboot_env),7424k(image0),8192k(linux)
baudrate=115200
boot_image=run boot_image${c_img};
boot_image0=run kernel0_from_sf flashargs addip addmtdparts0 addmisc && bootm ${ram_addr}
boot_image1=run kernel1_from_sf flashargs addip addmtdparts1 addmisc && bootm ${ram_addr}
boot_image_err=setenv kernel_offs ${kernel0_offs};httpd && setenv image0_is_valid 1
bootargs=rootfstype=squashfs,jffs2 ip=192.168.1.1:192.168.1.100:::::off ethaddr=00:06:91:00:00:00 machtype=PTIN-GS01X0G vpe1_load_addr=0x83f00000 vpe1_mem=1M mem=63M mtdparts=sflash:256k(uboot)ro,512k(uboot_env),7424k(linux),8192k(image1) quiet
bootcmd=run flash_flash
bootdelay=5
c_img=0
committed_image=1
env_offs=0x40000
env_offs_redund=0x80000
ethact=GPHY0
ethaddr=00:06:XX:XX:XX:XX
extphy=1
fileaddr=80f00000
filesize=480004
flash_flash=run select_image boot_image
flashargs=setenv bootargs rootfstype=squashfs,jffs2
goi_config=begin-base64 644 goi_config@H4sIAMSs8VoCA+2Y32/aMBDHeR0S/4OnPuSpqe3YcVi0B9pSqVqnVYDoA6oi@kxiwlpAoSdv1v98llJaE/pjUFXVd7gVz/l7s2HzOZ1TuH8RJrv2Deay9XE5D@5YUyU6mXqpk3hZbpZ9etVxkGE5yXn2D1T0wYaxGLMEoIYQR0RBBitxBu7cCu@slymCLXSOM6f073U/4/aHjqO0TLOkb+Qy7lC+UKh0W2ikA7UMtczrdLPruu2@C9/Xs96wP/AG/ZPCs4dGKkrQ5Nuli07zBZpc9aA17EPj4iAq2hKeN8ku263G@3q2p5/h/Pfr3/NvA+JP822LNP7ctAvzbxKIN/++I/852AuhsZ4DoiQzQadOu@4xJiCpcw28WdJiW8Z/6vZRJ40+Av0f8H/GNW459z3pz/O+I/qPBfYL6mfdw7@P/YOj+9Jd9EYDgU0Gd8BjahjUquB+ePwD/n6DcZ4qf6HDFCr/6lgvOF/F4Yb@BP57/v14OdPzMgGsmm/A/zPnP2FQ7N+f/wz8xLKJaPjfhbVXO45g85ExD+Op@DI32p+JEiJfoPA5lqvNb71DLDBn4kZ7Br4r/SIZ6msqiPdKRgrWFC4JB4Ua3@j8k+tUdEfGHURZmf6iRHY2Eyk7nox1HvbPXFctHJxZ3faFdmlxYFSvYwVlme@fNdLZBBak+ZQrSiYxlWqVjXtRtjI196w7y30fIGMfUK7pm2LajdcZu76u3wr@MIxvII5ivB1TdnFcm2Lmy7D8N63sxia2nhKsxlwpKu8T+IHvQVVeC4xns0zl@ZUR9AWCxskjnXhLfqHRj37CHi/Xa3EpSuDjefCGQEZAxUZEVLofTiozC6MKq@yMDVpU5tQpGSGexGBJfKB/FgODz1COviQKY/ixUoXwXjLlwAqHhEt16pUsec@LqQMy7IdypxHxIlM5TQOtb+OIMQRnILa4lxsbt/mYzkkH1H8npqzobHGGvvY@9hu40E1TABoAAA==@====@
gphy0_phyaddr=0
hwModel=GS0100GH
hwVersion=3NT7SFU1389B35
hw_validate=0
image0_addr=0xB00C0000
image0_is_valid=1
image0_version=3FE7SWS4040018
image1_addr=0xB0800000
image1_is_valid=1
image1_version=3FE7SWS4040018
image_name=openwrt-lantiq-falcon-PTIN-GS01X0G
import_uboot_env=env import -t ${ram_addr} ${filesize}
ipaddr=192.168.4.254
kernel0_from_sf=sf probe 0;sf read ${ram_addr} ${kernel0_offs} ${max_kernel_size}
kernel0_offs=0xC0000
kernel1_from_sf=sf probe 0;sf read ${ram_addr} ${kernel1_offs} ${max_kernel_size}
kernel1_offs=0x800000
load_kernel=tftpboot ${ram_addr} ${tftppath}${image_name}-uImage
load_uboot=tftpboot ${ram_addr} ${tftppath}u-boot.img
load_uboot_env=tftp ${ram_addr} ${tftppath}u-boot.env
load_uboot_env_y=loady ${ram_addr}
machtype=PTIN-GS01X0G
magic_addr=0xBF200038
magic_val=0xDEADBEEF
max_kernel_size=680000
mtdparts=mtdparts=sflash:256k(uboot)ro,512k(uboot_env),7424k(linux),8192k(image1)
net_nfs=run load_kernel nfsargs addip addmtdparts0 addmisc;bootm ${ram_addr}
netconsole=set stderr nulldev;set stdin nc,serial;set stdout nc,serial
nfsargs=setenv bootargs root=/dev/nfs rw nfsroot=${serverip}:${rootpath},${nfsoptions}
nfsoptions=rsize=1024,wsize=1024
ploam_emergency_stop_state=1
preboot=run start_netconsole
ptinClient=begin-base64 644 ptinClient@H4sIALrfe1cCA+2SXWvCMBSGe2t+RYYXvbJpXbUwLDhEhzA29nE3hsQ02kCb@lJwE8d+vVmWiVa82Nuhzc8h5T07Om8TkBSmMkKNMcGmcH8EviXq9KpYcxyAI@fSfoRrf9qBf1+5HjB90wDBzsO7+ABUM1xo5W6qL9a/o/pX1D5kISSFF79Dgd@P73f4bfJK6qSRlmWYsINI0zJhViSTC2FRJYJPKem1AaDzvh5glALuMGwBsNz@b7iNH/6nlyowkuY8dqcdP/AfOi8uajGV52JfjVoJz7jhuOrs0SQv+1fdDhJh@2WF7co3iWeC6OmSfqa0qKMBK6SR2SyuSMxOulR2CLQqljVu/hetcAAgl4/tz@c3krKmeUMQ4QB7UFCV9Qm5kzKqQ8y2KXWNAENnfOMjGDhT6d6MwNHNk/1b+N@V2u3puKaz8smDx3u3nY7Ktp8DaehoaGh4U/yBUBBKFMACgAA@====@
ptinIopMask=0x1
ram_addr=80F00000
reset_uboot_env=sf probe 0;sf erase 40000 80000
rf_config=begin-base64 644 rf_config@H4sIAJTs+1YCA+2Xy44etxFGZ82n0AP0JGSxeHsawzZsbwIYUJT3zzmcf7LI@IoEXCWBALUDi9zdZJE/dWr98+/mvX3/94duPP/3tl7/8/Otvb/+Dp/LMzPsv@z7//O1eLtxZz8WdGa28VwU9f6tv/4fnH37/9+PXLl7evv//+7T/N+2/v/6TP@fhIXPO+t71XafO4waom8wxiz9LjDdkbJ+jHsq+S+w7pbGR/Lauwy65PDca1l@5tMUZ+2y4unRGPdW1nzyjpmzmb/38773LPw7czLOUc581nFcZznx7FEd19Jq@Pqev533NU1qLp9WFqdVnaVEfD4mqA8W7yKtYFvtpvTFzLq7ZJydrBzVaack5@R+MQM7A5WDer7yqK+zSWPO9jY2ViZXnEMVnHPdrW5sgobWNlr46KLI0ztwO4@91FXCQC34zVzH9R+oibrcvUSMI96VKAOsAeuQCU+wEC0jc2MgUfqExHcKDlZ@wD9icpaOX3DTEx027x1/BOSjM/29T3aHfXRP1gf7QRxLrktmcqjIrsJ5AfHI@yQ694XbMRXKRd0alwzoupTidkMDKSGzGDhRWhmdhr9IxF2NDMCYKumQz9wt2@79CNKZdIbEI35lD1gcLKXKpYpUM3plyindKhG6tVFTY5FDu5QzUmsbIGMxuB@ltJdnqWtVlK6axudk5nSXQdKbTBTultP4/OS0t0EzXvLicLKlkvrp6R0dzqz@95LS3dOZnDOlu5cxH+wn3a2nW8tiZMepH2lSUrqnxc2UMqR7OND7mWUI93Rz@pZYh25PLREBoYmCQuw3Jnsk5wDwEe7zaxIBcz1FgAKz9JvXAAFR7lVyeMoDa@ayh6GTDttRslqwyQIo6uJ4k1kPp6IjQwlrDLbBq4dLPM0IBXP0Wf9mqodsZO@2uuxBGhJdzHEDnXhoUjAk+EiJcuEJok5SJ6i84mzTtiVyc1666Jg7FKyvvP7@cS13Jz9WdS2ep2DQQxzvZ/B7uBbDg9/DtdQIwCwP1shmYmGlaznw4vfhWiJ2@8bvwGjFCvi/Zmbyb30VHuD14aEmORvWQeevcykYpuNWMxUFta8TlFhwpSlHi@jeCi8wZwW3CEvOWqbMmZ21SrsuUVFiTScUuMDHyMui0zUuix9m6hBT5pVJ59@a+vEdFpDNUAKg6UYiAiKFiC24KwF1LRyJBcWsJnFmESwz9wUWw3ApVGcjvCI@dcQqR3oBJYpeOeILqxxsjvyIUsShcmvgsOnBtAQJP8tfOSK8VYX4PzIkehBU@eCESJ1Q7S7wUb72BFUoTzbpI5a5yxIfUPipwFSTeQlHxqyQhjjo2Cq2Y8dBr@RjPKKkmnqMLkkFZClDQx81iTCEutdIPQ/eTZcVXYKapAO4EYw/0k2skZqh29@SKTU1Meq12xNqG59s09phWaEM1RaIcGtls1mhDrWMJRcOyFN1UIJlqptZUJJ@tg+sbGdetMQA9QZ12Y5jhUFduIQEdQR16c5uubBLaoUIwS0qrcxlvqMuXQoM@jrGDaoXU6XolLl3aCJ5BXbrkPjmn0gqJRRYVvxlUx7xAXbq7GcqoS5fwIuDs@ylrZw4BRaYW6gWtQl+65V6ZjX7r3IvbvS5ck7fqvX7rH8hAqrRx2T9dJNyvT@9abNCMVfw3XSTUKQgd8EVcU6fWszwplMGK6TblKkIIySbtIKu56+h/J7ppNK@zWbU7TOdqtxsRih20O82I0KCCdScdiclcdaNAptRtxH3pRXp3r+WVqSb6Uyt@SDeJnu4Xic2Ii7K7EWIzQvHT1op0k5LYt1akm7StbrzYjFBYoZ41mxGAsGL0@2I1Q3JZO32xH/Zqi2jX7EYrptK02Ll1KQjeyxqV7LM3avHTxQxpntye5TVZt@SndU33HO25VG8502Ne6maQzevjTIW1D6NaYVMjWNyNuZBtmYjR1ua/KTJI3P@25sGX41Jj2m3Ow3ApdF6m9KYzpwqrRDzaX25rckDpZF8m9PYzvRbULqDT5KM@+y2oFepcGuW3Rc3ql627S3c21gW73zbFf2xQ3PY2qkkU+E3XbquafX8qraRW@ONltV5N8T3PlNiwPlLSGdlvWXP2lpDt3oI5KK4Aj1lDSXfVTSdcjZPcLVror@Xup2r9VVfs9Kd8nzKumu8amku6ghaW29HcxtPtQNW7L4pbRiFNC7221ifjJ/@KOnu6C8l3d3HS0nXxS91g/hznXT3yg91W5kTPpR0T33NvM3stPGpsHLidZbb@zmxjH0q6Z3y+k+751w7SPfvz3bz/ZcqP+9nT0i+qD7VvgL9I2NWyvpiFXY0A@P59KK3te8mFXI6T7S0GXIG7XY2FXI4jPS6UhTdXX0yiD/0bBKW/fn+/P9+f7@84eefwLfjWSpABQAAA==@====@
save_uboot=sf probe 0;sf erase 0 40000;sf write ${ram_addr} 0 ${filesize}
select_image=if test -n $committed_image ; then else setenv committed_image _err;saveenv;fi;if test -n $image0_is_valid ; then else setenv image0_is_valid 1;saveenv;fi;if test -n $image1_is_valid ; then else setenv image1_is_valid 0;saveenv;fi;setenv activate_image -1;if itest *${magic_addr} == ${magic_val} ; then if itest *${act_img_addr} == 0 ; then setenv activate_image 0;fi;if itest *${act_img_addr} == 1 ; then setenv activate_image 1;fi;mw ${magic_addr} 0x0;mw ${act_img_addr} 0x0;fi;if test $activate_image = -1 ; then setenv c_img $committed_image;else setenv c_img $activate_image;setenv activate_image -1;fi;if test $c_img = 0 && test $image0_is_valid = 0 ; then setenv c_img 1;fi;if test $c_img = 1 && test $image1_is_valid = 0 ; then setenv c_img 0;fi;if test $image0_is_valid = 0 && test $image1_is_valid = 0 ; then setenv c_img _err;fi;exit 0
serialNumber=0x50 0x54 0x49 0x4E 0xXX 0xXX 0xXX 0xXX
serverip=192.168.4.100
start_netconsole=if test -n ${ncip}; then echo 'check for netconsole'; if ping ${ncip}; then run netconsole; echo 'netconsole enabled'; fi; fi
stderr=serial
stdin=serial
stdout=serial
update_image0=tftpboot ${ram_addr} ${tftppath}${image_name}-squashfs.image;sf probe 0;sf erase ${kernel0_offs} +${filesize};sf write ${ram_addr} ${kernel0_offs} ${filesize}
update_image1=tftpboot ${ram_addr} ${tftppath}${image_name}-squashfs.image;sf probe 0;sf erase ${kernel1_offs} +${filesize};sf write ${ram_addr} ${kernel1_offs} ${filesize}
update_openwrt=run update_system
update_system=run update_image0 && setenv committed_image 0 && setenv image0_is_valid 1 && saveenv
update_uboot=run load_uboot && run save_uboot
update_uboot_env=run load_uboot_env && run import_uboot_env && saveenv
update_uboot_env_y=run load_uboot_env_y && run import_uboot_env && saveenv
update_uboot_y=loady ${ram_addr} && run save_uboot
ver=U-Boot 2015.04-lantiq-gpon-1.3.4-ALB_0.4 (Aug 07 2017 - 17:19:33)
Environment size: 8908/65531 bytes
Avec le retour d'expérience que j'ai acquis en manipulant les Ma5671a, je re-essayerai peut-être de le modifier pour le faire fonctionner avec ma connexion (de mémoire, juste le ploam ne suffisait pas).
Qui sait, le FW cartilox peut tourner dessus.
Je peux fournir le dump, à ceux qui le souhaitent.
Remplacer la box SFR par un routeur