search

Anime4000 / RTL960x

Hacking RTL960x based xPON ONU Stick to suite your Universal OLT
The Unlicense
660 stars 111 forks source link

Is it possible to restore bricked V-SOL XPON V2801F #304

Open vbaskoff opened 4 months ago

vbaskoff commented 4 months ago

Hi Folks,

Without any reason sfp onu (V-SOL XPON V2801F) stopped to be reachable via IP, no mac address appeared behind sfp port in arp table as well.

RouterOS 'see' physical presence of the module and mark port as running.

When touching sfp module case it is 'hot' as usual...

Any way to bring it back to life?

[admin@MikroTik] > /interface/ethernet/monitor sfp5
# 1970-01-02 01:55:01 by RouterOS 7.12.1
# software id = 0MDF-UTYM
#
                      name: sfp5
                    status: link-ok
          auto-negotiation: done
                      rate: 1Gbps
               full-duplex: yes
           tx-flow-control: no
           rx-flow-control: no
                 supported: 10M-baseT-half,10M-baseT-full,100M-baseT-half,
                            100M-baseT-full,1G-baseT-half,1G-baseT-full,
                            1G-baseX
               advertising: 
  link-partner-advertising: 
        sfp-module-present: yes
               sfp-rx-loss: yes
                  sfp-type: SFP/SFP+/SFP28/SFP56
           eeprom-checksum: bad
                    eeprom: 0000: 03 00 00 00 00 00 00 00  03 00 00 00 00 00 00 00  ........ ........
                            *
                            0080: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
                            *

IMG_20240703_191904__01

Anime4000 commented 4 months ago

only can see is via TTL UART

vbaskoff commented 4 months ago

Does this sfp has some UART pins on the pcb?

Anime4000 commented 4 months ago

the SFP pin doesn't, need to open it and pin on the SoC pinout

crrodriguez commented 4 months ago

I also have a "bricked" CarlitosPro stick which is the same device. Does not autoneg with any device I have. wrong LAN_SDS_MODE selected. Buying all the needed debug tools more expensive than new ODI stick.

dittohead commented 3 months ago

@vbaskoff did you fix your dongle? got similar issue with fd511gx, but wait for needle pad @Anime4000 what the way? reset dongle to factory defaults?

@crrodriguez if you have 3d printer you can help yourself

dittohead commented 3 months ago

got same issue as @vbaskoff

/interface ethernet monitor sfp1  
                      name: sfp1
                    status: no-link
          auto-negotiation: done
               advertising: 
  link-partner-advertising: 
        sfp-module-present: yes
               sfp-rx-loss: no
           eeprom-checksum: bad
                    eeprom: 0000: 03 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........

connect with uart sucessfuly, but can't do backup via uart lan_sds_mode didn't help

@Anime4000 any ideas?

Anime4000 commented 3 months ago

did it boot successfully or stuck at recovery?

dittohead commented 3 months ago

@Anime4000 successfull

Anime4000 commented 3 months ago

try enter this, see EEPROM is fixed:

diag i2c set port 1 dev 0x50 reg 0x00 data 0x03
diag i2c set port 1 dev 0x50 reg 0x01 data 0x04
diag i2c set port 1 dev 0x50 reg 0x02 data 0x01
diag i2c set port 1 dev 0x50 reg 0x03 data 0x00
diag i2c set port 1 dev 0x50 reg 0x04 data 0x00
diag i2c set port 1 dev 0x50 reg 0x05 data 0x00
diag i2c set port 1 dev 0x50 reg 0x06 data 0x02
diag i2c set port 1 dev 0x50 reg 0x07 data 0x22
diag i2c set port 1 dev 0x50 reg 0x08 data 0x00
diag i2c set port 1 dev 0x50 reg 0x09 data 0x01
diag i2c set port 1 dev 0x50 reg 0x0A data 0x00
diag i2c set port 1 dev 0x50 reg 0x0B data 0x01
diag i2c set port 1 dev 0x50 reg 0x0C data 0x0D
diag i2c set port 1 dev 0x50 reg 0x0D data 0x00
diag i2c set port 1 dev 0x50 reg 0x0E data 0x14
diag i2c set port 1 dev 0x50 reg 0x0F data 0xC8
diag i2c set port 1 dev 0x50 reg 0x10 data 0x00
diag i2c set port 1 dev 0x50 reg 0x11 data 0x00
diag i2c set port 1 dev 0x50 reg 0x12 data 0x00
diag i2c set port 1 dev 0x50 reg 0x13 data 0x00
diag i2c set port 1 dev 0x50 reg 0x14 data 0x41
diag i2c set port 1 dev 0x50 reg 0x15 data 0x6E
diag i2c set port 1 dev 0x50 reg 0x16 data 0x69
diag i2c set port 1 dev 0x50 reg 0x17 data 0x6D
diag i2c set port 1 dev 0x50 reg 0x18 data 0x65
diag i2c set port 1 dev 0x50 reg 0x19 data 0x34
diag i2c set port 1 dev 0x50 reg 0x1A data 0x30
diag i2c set port 1 dev 0x50 reg 0x1B data 0x30
diag i2c set port 1 dev 0x50 reg 0x1C data 0x30
diag i2c set port 1 dev 0x50 reg 0x1D data 0x2D
diag i2c set port 1 dev 0x50 reg 0x1E data 0x4E
diag i2c set port 1 dev 0x50 reg 0x1F data 0x69
diag i2c set port 1 dev 0x50 reg 0x20 data 0x6A
diag i2c set port 1 dev 0x50 reg 0x21 data 0x69
diag i2c set port 1 dev 0x50 reg 0x22 data 0x6B
diag i2c set port 1 dev 0x50 reg 0x23 data 0x61
diag i2c set port 1 dev 0x50 reg 0x24 data 0x00
diag i2c set port 1 dev 0x50 reg 0x25 data 0x00
diag i2c set port 1 dev 0x50 reg 0x26 data 0x00
diag i2c set port 1 dev 0x50 reg 0x27 data 0x00
diag i2c set port 1 dev 0x50 reg 0x28 data 0x55
diag i2c set port 1 dev 0x50 reg 0x29 data 0x4E
diag i2c set port 1 dev 0x50 reg 0x2A data 0x49
diag i2c set port 1 dev 0x50 reg 0x2B data 0x46
diag i2c set port 1 dev 0x50 reg 0x2C data 0x49
diag i2c set port 1 dev 0x50 reg 0x2D data 0x2D
diag i2c set port 1 dev 0x50 reg 0x2E data 0x4F
diag i2c set port 1 dev 0x50 reg 0x2F data 0x4E
diag i2c set port 1 dev 0x50 reg 0x30 data 0x55
diag i2c set port 1 dev 0x50 reg 0x31 data 0x2D
diag i2c set port 1 dev 0x50 reg 0x32 data 0x53
diag i2c set port 1 dev 0x50 reg 0x33 data 0x46
diag i2c set port 1 dev 0x50 reg 0x34 data 0x50
diag i2c set port 1 dev 0x50 reg 0x35 data 0x32
diag i2c set port 1 dev 0x50 reg 0x36 data 0x47
diag i2c set port 1 dev 0x50 reg 0x37 data 0x58
diag i2c set port 1 dev 0x50 reg 0x38 data 0x20
diag i2c set port 1 dev 0x50 reg 0x39 data 0x20
diag i2c set port 1 dev 0x50 reg 0x3A data 0x20
diag i2c set port 1 dev 0x50 reg 0x3B data 0x20
diag i2c set port 1 dev 0x50 reg 0x3C data 0x05
diag i2c set port 1 dev 0x50 reg 0x3D data 0x1E
diag i2c set port 1 dev 0x50 reg 0x3E data 0x00
diag i2c set port 1 dev 0x50 reg 0x3F data 0x6C
diag i2c set port 1 dev 0x50 reg 0x40 data 0x00
diag i2c set port 1 dev 0x50 reg 0x41 data 0x1A
diag i2c set port 1 dev 0x50 reg 0x42 data 0x00
diag i2c set port 1 dev 0x50 reg 0x43 data 0x00
diag i2c set port 1 dev 0x50 reg 0x44 data 0x4E
diag i2c set port 1 dev 0x50 reg 0x45 data 0x49
diag i2c set port 1 dev 0x50 reg 0x46 data 0x4A
diag i2c set port 1 dev 0x50 reg 0x47 data 0x4B
diag i2c set port 1 dev 0x50 reg 0x48 data 0x30
diag i2c set port 1 dev 0x50 reg 0x49 data 0x30
diag i2c set port 1 dev 0x50 reg 0x4A data 0x30
diag i2c set port 1 dev 0x50 reg 0x4B data 0x30
diag i2c set port 1 dev 0x50 reg 0x4C data 0x30
diag i2c set port 1 dev 0x50 reg 0x4D data 0x30
diag i2c set port 1 dev 0x50 reg 0x4E data 0x30
diag i2c set port 1 dev 0x50 reg 0x4F data 0x46
diag i2c set port 1 dev 0x50 reg 0x50 data 0x20
diag i2c set port 1 dev 0x50 reg 0x51 data 0x20
diag i2c set port 1 dev 0x50 reg 0x52 data 0x20
diag i2c set port 1 dev 0x50 reg 0x53 data 0x20
diag i2c set port 1 dev 0x50 reg 0x54 data 0x32
diag i2c set port 1 dev 0x50 reg 0x55 data 0x34
diag i2c set port 1 dev 0x50 reg 0x56 data 0x2D
diag i2c set port 1 dev 0x50 reg 0x57 data 0x30
diag i2c set port 1 dev 0x50 reg 0x58 data 0x37
diag i2c set port 1 dev 0x50 reg 0x59 data 0x2D
diag i2c set port 1 dev 0x50 reg 0x5A data 0x31
diag i2c set port 1 dev 0x50 reg 0x5B data 0x36
diag i2c set port 1 dev 0x50 reg 0x5C data 0x00
diag i2c set port 1 dev 0x50 reg 0x5D data 0x00
diag i2c set port 1 dev 0x50 reg 0x5E data 0x00
diag i2c set port 1 dev 0x50 reg 0x5F data 0xEA
diag i2c set port 1 dev 0x50 reg 0x60 data 0x00
diag i2c set port 1 dev 0x50 reg 0x61 data 0x00
diag i2c set port 1 dev 0x50 reg 0x62 data 0x00
diag i2c set port 1 dev 0x50 reg 0x63 data 0x00
diag i2c set port 1 dev 0x50 reg 0x64 data 0x00
diag i2c set port 1 dev 0x50 reg 0x65 data 0x00
diag i2c set port 1 dev 0x50 reg 0x66 data 0x00
diag i2c set port 1 dev 0x50 reg 0x67 data 0x00
diag i2c set port 1 dev 0x50 reg 0x68 data 0x00
diag i2c set port 1 dev 0x50 reg 0x69 data 0x00
diag i2c set port 1 dev 0x50 reg 0x6A data 0x00
diag i2c set port 1 dev 0x50 reg 0x6B data 0x00
diag i2c set port 1 dev 0x50 reg 0x6C data 0x00
diag i2c set port 1 dev 0x50 reg 0x6D data 0x00
diag i2c set port 1 dev 0x50 reg 0x6E data 0x00
diag i2c set port 1 dev 0x50 reg 0x6F data 0x00
diag i2c set port 1 dev 0x50 reg 0x70 data 0x00
diag i2c set port 1 dev 0x50 reg 0x71 data 0x00
diag i2c set port 1 dev 0x50 reg 0x72 data 0x00
diag i2c set port 1 dev 0x50 reg 0x73 data 0x00
diag i2c set port 1 dev 0x50 reg 0x74 data 0x00
diag i2c set port 1 dev 0x50 reg 0x75 data 0x00
diag i2c set port 1 dev 0x50 reg 0x76 data 0x00
diag i2c set port 1 dev 0x50 reg 0x77 data 0x00
diag i2c set port 1 dev 0x50 reg 0x78 data 0x00
diag i2c set port 1 dev 0x50 reg 0x79 data 0x00
diag i2c set port 1 dev 0x50 reg 0x7A data 0x00
diag i2c set port 1 dev 0x50 reg 0x7B data 0x00
diag i2c set port 1 dev 0x50 reg 0x7C data 0x00
diag i2c set port 1 dev 0x50 reg 0x7D data 0x00
diag i2c set port 1 dev 0x50 reg 0x7E data 0x00
diag i2c set port 1 dev 0x50 reg 0x7F data 0x00
crrodriguez commented 3 months ago

Also the firmware seems to support TFTP flash/boot but I couldn't make it work. there was no TFTP client traffic from the device een when all addresses are correct. I guess this is because the device actually boots but does not work as opposed to be bricked and the fallback does not trigger.

dittohead commented 3 months ago

@Anime4000 not looks like it helps. same eeprom in mikrotik monitoring.

...
i2c set port 1 dev 0x50 reg 0x6A data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x6B data 0x00
i2c set port 1 dev 0x50 reg 0x6B data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x6C data 0x00
i2c set port 1 dev 0x50 reg 0x6C data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x6D data 0x00
50 reg 0x6F data 0x00
diag i2c set port 1 dev 0x50 reg 0x70 data 0x00
diag i2c set port 1 dev 0x50 reg 0x71 data 0x00
diag i2c set port 1 dev 0x50 reg 0x72 data 0x00
diag i2c set port 1 dev 0x50 reg 0x73 data 0x00
diag i2c set port 1 dev 0x50 reg 0x74 data 0x00
diag i2c set port 1 dev 0x50 reg 0x75 data 0x00
diag i2c set port 1 dev 0x50 reg 0x76 data 0x00
diag i2c set port 1 dev 0x50 reg 0x77 data 0x00i2c set port 1 dev 0x50 reg 0x6D data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x6E data 0x00
i2c set port 1 dev 0x50 reg 0x6E data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x6F data 0x00
i2c set port 1 dev 0x50 reg 0x6F data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x70 data 0x00
i2c set port 1 dev 0x50 reg 0x70 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x71 data 0x00
i2c set port 1 dev 0x50 reg 0x71 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x72 data 0x00
i2c set port 1 dev 0x50 reg 0x72 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x73 data 0x00
i2c set port 1 dev 0x50 reg 0x73 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x74 data 0x00
i2c set port 1 dev 0x50 reg 0x74 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x75 data 0x00
i2c set port 1 dev 0x50 reg 0x75 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x76 data 0x00
i2c set port 1 dev 0x50 reg 0x76 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x77 data 0x00
i2c set port 1 dev 0x50 reg 0x77 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x78 data 0x00

diag i2c set port 1 dev 0x50 reg 0x7A data 0x00
diag i2c set port 1 dev 0x50 reg 0x7B data 0x00
diag i2c set port 1 dev 0x50 reg 0x7C data 0x00
diag i2c set port 1 dev 0x50 reg 0x7D data 0x00
diag i2c set port 1 dev 0x50 reg 0x7E data 0x00
diag i2c set port 1 dev 0x50 reg 0x7F data 0x00i2c set port 1 dev 0x50 reg 0x78 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x79 data 0x00
i2c set port 1 dev 0x50 reg 0x79 data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7A data 0x00
i2c set port 1 dev 0x50 reg 0x7A data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7B data 0x00
i2c set port 1 dev 0x50 reg 0x7B data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7C data 0x00
i2c set port 1 dev 0x50 reg 0x7C data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7D data 0x00
i2c set port 1 dev 0x50 reg 0x7D data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7E data 0x00
i2c set port 1 dev 0x50 reg 0x7E data 0x00
RTK.0> command:# diag i2c set port 1 dev 0x50 reg 0x7F data 0x00
i2c set port 1 dev 0x50 reg 0x7F data 0x00
# halt
The system is going down NOW!
Sending SIGTERM to all processes
Terminated
Requesting system halt process
System halted.
RTL8672 halted.

Full log of boot:

U-Boot 2011.12.NA-svn12832 (Jan 21 2022 - 18:29:06)

Board: RTL9601C, CPU:112MHz, LX:200MHx, MEM:400MHz, Type:DDR2
DRAM: 32 MB
SPI-F: WINBOND/EF4017/MMIO16-1/ModeC 1x8 MB (plr_flash_info @ 81c2ba54)
Loading 8192B env. variables from offset 0x40000
Loading 8192B env. variables from offset 0x42000
Loaded 8192B env. variables from offset 0x42000
Net:   LUNA GMAC
Warning: eth device name has a space!

Hit any key to stop autoboot:  0
swcore_init
multicast_start Using LUNA GMAC  device
Net:   LUNA GMAC
Warning: eth device name has a space!

Hit any key to stop autoboot:  0
9601C# [A

9601C
PRELOADER Bismarck 3.5
II: PLR:f722d856, Build_date:22012118, Toolkit:rsdk-4.8.5-5281-EB-2.6.30-u0.9.33-m32utb-150924
II: Disable OCP Timeout Monitor
II: Disable LX Timeout Monitor
II: Enable Triple Synchronizer
II: CPU 112MHz (450/4/0), MEM 400MHz, LX 200MHz, SPIF 25MHz
II: NOR SPI-F... EF4017/MMIO16-1/ModeC done
AK: DRAM AUTO CALIBRATION
AK: MR0: 0x00100b62Passed
AK: MR1: 0x00110040
AK: MR2: 0x00120000
AK: MR3: 0x00130000
AK: clear dwdqor
AK: bit:00, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001510)=0x61e0f00
AK: bit:01, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001514)=0x61e0f00
AK: bit:02, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001518)=0x61e0f00
AK: bit:03, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb800151c)=0x51e0f00
AK: bit:04, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001520)=0x61e0f00
AK: bit:05, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb8001524)=0x51e0f00
AK: bit:06, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001528)=0x61e0f00
AK: bit:07, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb800152c)=0x51e0f00
AK: bit:08, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001530)=0x61e0f00
AK: bit:09, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31):  (0xb8001534)=0x71e0f00
AK: bit:10, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001538)=0x61e0f00
AK: bit:11, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb800153c)=0x61e0f00
AK: bit:12, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb8001540)=0x51e0f00
AK: bit:13, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001544)=0x61e0f00
AK: bit:14, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31):  (0xb8001548)=0x71e0f00
AK: bit:15, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb800154c)=0x51e0f00
AK: bit:16, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001550)=0x1e0f00
AK: bit:17, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001554)=0x1e0f00
AK: bit:18, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001558)=0x1e0f00
AK: bit:19, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb800155c)=0x1e0f00
AK: bit:20, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001560)=0x1e0f00
AK: bit:21, max_w_s(00), max_w_len(17), max_r_s(00), max_r_len(31):  (0xb8001564)=0x1e0f00
AK: bit:22, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001568)=0x1e0f00
AK: bit:23, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb800156c)=0x1e0f00
AK: bit:24, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001570)=0x1e0f00
AK: bit:25, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31):  (0xb8001574)=0x1e0f00
AK: bit:26, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001578)=0x1e0f00
AK: bit:27, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb800157c)=0x1e0f00
AK: bit:28, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001580)=0x1e0f00
AK: bit:29, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb8001584)=0x1e0f00
AK: bit:30, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31):  (0xb8001588)=0x1e0f00
AK: bit:31, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31):  (0xb800158c)=0x1e0f00
AK: DQ enable delay sync with DQ delay tap.
    0xb80015D0=0x05060606, 0xb80015D4=0x05060506, 0xb80015D8=0x06060706, 0xb80015DC=0x05070605
AK: Disable read after write function
AK: dram auto calibrtaion is done
II: MEM_PROBE_OK
II: MEM_XLAT_OK
II: MEM_TO_REG_OK
II: MEM_CAL_OK
II: Change Stack from 0x9f007ff8 to 0x80efffe0
II: Decompressing U-Boot (0x81c00000 <- 0x9fc15d30)... (180 KB <- 68 KB) OK
II: Starting U-boot...

U-Boot 2011.12.NA-svn12832 (Jan 21 2022 - 18:29:06)

Board: RTL9601C, CPU:112MHz, LX:200MHx, MEM:400MHz, Type:DDR2
DRAM: 32 MB
SPI-F: WINBOND/EF4017/MMIO16-1/ModeC 1x8 MB (plr_flash_info @ 81c2ba54)
Loading 8192B env. variables from offset 0x40000
Loading 8192B env. variables from offset 0x42000
Loaded 8192B env. variables from offset 0x42000
Net:   LUNA GMAC
Warning: eth device name has a space!

Hit any key to stop autoboot:  0
swcore_init
multicast_start Using LUNA GMAC  device
mcast upgrade timeout.
## Booting kernel from Legacy Image at 94080000 ...
   Image Name:   Linux Kernel Image
   Created:      2020-11-04   1:41:33 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1199462 Bytes = 1.1 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Linux version 2.6.30.9 (bohannon@terminal) (gcc version 4.4.6 (Realtek RSDK-1.5.6p2) ) #65 Wed Nov 4 09:40:55 CST 2020 [luna SDK V1.9.0]
RTL9602C PLL
CPU revision is: 0000dc02
Determined physical RAM map:
 memory: 01700000 @ 00000000 (usable)
 memory: 00700000 @ 01800000 (usable)
II: Kernel command line modified: mtdparts=rtk_spi_nor_mtd ->   mtdparts=physmap-flash
Zone PFN ranges:
  Normal   0x00000000 -> 0x00001f00
Movable zone start PFN for each node
early_node_map[2] active PFN ranges
    0: 0x00000000 -> 0x00001700
    0: 0x00001800 -> 0x00001f00
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 7618
Kernel command line: console=ttyS0,115200   mtdparts=physmap-flash:256K(boot),8K(env),8K(env2),240K(config),1408K(k0)ro,2432K(r0)ro,1408K(k1),2432K(r1),4K@0ro,4K@0ro,4K@0ro,4K@0ro,1408K@512K(linux),2432K@1920K(rootfs) root=31:5
root_dev_setup line 180 root: 31:5
icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B
NR_IRQS:128
PID hash table entries: 128 (order: 7, 512 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 16836k/30720k available (2848k kernel code, 13884k reserved, 877k data, 104k init, 0k highmem)
Calibrating delay loop... 112.23 BogoMIPS (lpj=561152)
Mount-cache hash table entries: 512
IMEM section size = 0xf80
net_namespace: 532 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
=================================
CONFIG_LUNA_SOC_GPIO: gpio_init()
=================================
=================================
luna_capabilities_init
=================================
=================================
luna_wdt_init
=================================
netlog: listening on port 4660
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/W].
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.11)
msgmni has been set to 32
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 49) is a 16550A
Driver 'sd' needs updating - please use bus_type methods
8686 Ethernet driver v0.0.1 (Feb 17, 2012)[Dual Band Disable]
TX[1024,64,64,64,64] , RX[1024,256,256,64,64,64]
eth0 (): not using net_device_ops yet
eth0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
eth0.2 (): not using net_device_ops yet
eth0.2: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
eth0.3 (): not using net_device_ops yet
eth0.3: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
nas0 (): not using net_device_ops yet
nas0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
pon0 (): not using net_device_ops yet
pon0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
RTL8686 GMAC Probing..
first entry: 0, portmask 127, rx: 802be73c
Init RTK Driver Module....OK
Init RTK Core Dev Module....OK

 rtdrv_init !!! for netfilter
pkt_redirect_init complete
interrupt broadcaster init ok!
u32 classifier
nf_conntrack version 0.5.0 (480 buckets, 1920 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Realtek GPIO Driver for Flash Reload Default
physmap platform flash device: 0b000000 at 14000000
Luna SPI NOR FLASH G3 driver-WINBOND/EF4017/MMIO16-1 <5>master->name physmap-flash
cmd: cmdlinepart
14 cmdlinepart partitions found on MTD device physmap-flash
Creating 14 MTD partitions on "physmap-flash":
0x000000000000-0x000000040000 : "boot"
0x000000040000-0x000000042000 : "env"
0x000000042000-0x000000044000 : "env2"
0x000000044000-0x000000080000 : "config"
0x000000080000-0x0000001e0000 : "k0"
0x0000001e0000-0x000000440000 : "r0"
0x000000440000-0x0000005a0000 : "k1"
0x0000005a0000-0x000000800000 : "r1"
0x000000000000-0x000000001000 : "Partition_008"
0x000000000000-0x000000001000 : "Partition_009"
0x000000000000-0x000000001000 : "Partition_010"
0x000000000000-0x000000001000 : "Partition_011"
0x000000080000-0x0000001e0000 : "linux"
0x0000001e0000-0x000000440000 : "rootfs"
VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
Freeing unused kernel memory: 104k freed
init started: BusyBox v1.12.4 (2020-10-26 08:35:57 CST)
starting pid 158, tty '': '/etc/init.d/rcS'
=== Start to run rc0 / rc63 ===
----- do_rc [/etc/init.d/rc2] -----
Mounting /dev/mtdblock3 onto /var/config as the configuration data storage
----- do_rc [/etc/init.d/rc10] -----
----- do_rc [/etc/init.d/rc18] -----
no need to do reset to default
----- do_rc [/etc/init.d/rc20] -----
------ [-b]Bootup_config ------
Wait for configd initialize 'MsgQ' and 'Shm'...
Wait for configd initialize 'MsgQ' and 'Shm'...
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
Fetch mib data (type 8) from program code.
Fetch mib data (type 2) from program code.
Pre-fetch mib data from program default done.
Checking input file [/var/config/lastgood_hs.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default_hs.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood_hs.xml](0) loaded *****

[xml_INFO]: Load HS configuration success.
Checking input file [/var/config/lastgood.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood.xml](0) loaded *****

[xml_INFO]: Load CS configuration success.
----- do_rc [/etc/init.d/rc21] -----
----- do_rc [/etc/init.d/rc22] -----
Register EPON for pkt_redirect module
priority: 0, portmask 127, rx: 802be73c
insert here, priority: 5, portmask 4, rx: c00ac9b4
priority: 5, portmask 4, rx: c00ac9b4
insert here, priority: 7, portmask 31, rx: c00acb48
[ERR] Input chain index(8) out of range(0~7).
[ERR] getOneChain() failed
priority: 7, portmask 31, rx: c00acb48
priority: 5, portmask 4, rx: c00ac9b4
insert here, priority: 6, portmask 4, rx: c00bc008

epon_mpcp_init ok!!
running EPON mode ...
insmod: rldp_drv.ko: module not found
change mode to 1(Fiber 1G)
SFP APP
==========================
Anime4000 2.5G HiSGMII Fix
==========================
Pause for few seconds to allow boot sequence to complete!
----- do_rc [/etc/init.d/rc32] -----
----- do_rc [/etc/init.d/rc34] -----
----- do_rc [/etc/init.d/rc35] -----
Turn on phy power...
sfp_app: pon_mode = 0
MIB chain descriptors checking (total 8) ok !
change mode to 0(GE/FE PHY)
xml_mib_update():...
xml_mib_update():...
   CMD: /bin/ifconfig eth0 hw ether 80f7a628db37
   CMD: /bin/brctl addbr br0
------ [-u cs]Update cs setting ------
------ [-u hs]Update hs setting ------
   CMD: /bin/ifconfig br0 hw ether 80f7a628db37
   CMD: /bin/brctl stp br0 off
change mode to 1(Fiber 1G)
   CMD: /bin/brctl setfd br0 1
   CMD: /bin/brctl setageing br0 7200
   CMD: /bin/brctl addif br0 eth0
device eth0 entered promiscuous mode
sh: can't create /proc/sys/net/ipv6/conf/br0/dad_transmits: nonexistent directory
   CMD: /bin/ifconfig br0 192.168.101.1 netmask 255.255.255.0 mtu 1500
   CMD: /bin/boa
   CMD: /bin/ifconfig eth0 up
re8670_open 3334
br0: port 1(eth0) entering learning state
set config for EPON
change mode to 2(SGMII PHY)
[xml_INFO]: Update cs configuration success.
oamcli set ctc statusVlan 0
br0: port 1(eth0) entering forwarding state
oamcli set ctc vlan 0 0
drivers/net/rtl86900/sdk/src/rtk/pon_led.c:1118 led sw blink init complete!
rtk_pon_led_SpecType_set 0
   CMD: /bin/ifconfig nas0 up
TRACE: /bin/ethctl addsmux bridge nas0 nas0_0 napt brpppoe
change mode to 3(SGMII MAC)
[xml_INFO]: Update hs configuration success.
nas0_0 (): not using net_device_ops yet
   CMD: /bin/ifconfig nas0_0 hw ether 80f7a628db3a
   CMD: /bin/ifconfig nas0_0 txqueuelen 10
   CMD: /bin/ifconfig nas0_0 up
1483 bridged
   CMD: /bin/brctl addif br0 nas0_0
change mode to 4(HiSGMII PHY)
device nas0_0 entered promiscuous mode
br0: port 2(nas0_0) entering learning state
   CMD: /bin/iptables -P INPUT ACCEPT
   CMD: /bin/iptables -P FORWARD ACCEPT
   CMD: /bin/iptables -A FORWARD -p tcp -o ppp+ --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
   CMD: /bin/iptables -A FORWARD -p tcp -i ppp+ --tcp-flags SYN,RST SYN -m tcpmss --mss 1452:1536 -j TCPMSS --set-mss 1452
   CMD: /bin/iptables -A INPUT -p udp --dport 520 -j ACCEPT
   CMD: /bin/iptables -A INPUT ! -i br0 -d 239.255.255.250 -j DROP
   CMD: /bin/iptables -A INPUT -d 224.0.0.0/4 -j ACCEPT
   CMD: /bin/ebtables -N br_wan
br0: port 2(nas0_0) entering forwarding state
change mode to 5(HiSGMII MAC)
port set phy-force-power-down port all state disable
size of linux : 1441792
size of linux : 3932160
init_global_parm834::size of g_max_upload_size : 3932160
   CMD: /bin/ebtables -P br_wan RETURN
   CMD: /bin/ebtables -N br_wan_out
   CMD: /bin/ebtables -P br_wan_out RETURN
   CMD: /bin/ebtables -A br_wan -i nas0_0 -j DROP
   CMD: /bin/ebtables -A br_wan_out -o nas0_0 -j DROP
   CMD: /bin/ebtables -A INPUT -j br_wan
   CMD: /bin/ebtables -A OUTPUT -j br_wan_out
   CMD: /bin/iptables -N dhcp_port_filter
   CMD: /bin/iptables -A INPUT -j dhcp_port_filter
starting pid 658, tty '/dev/ttyS0': '/bin/login -p'
starting pid 659, tty '': '/bin/inetd'
   CMD: /bin/ifconfig eth0 up
sh: can't create /proc/sys/net/ipv6/conf/br0/dad_transmits: nonexistent directory
sh: can't create /proc/br_igmpsnoop: nonexistent directory
IGMP Snooping: enabled
   CMD: /bin/iptables -t mangle -D PREROUTING -i br0 -j lan_mark
iptables v1.2.7a: Couldn't find target `lan_mark'

Try `iptables -h' or 'iptables --help' for more information.
   CMD: /bin/iptables -t mangle -N lan_mark
   CMD: /bin/iptables -t mangle -F lan_mark
   CMD: /bin/iptables -t mangle -A PREROUTING -i br0 -j lan_mark
   CMD: /bin/ebtables -D FORWARD -j portmapping
Illegal target name 'portmapping'.
   CMD: /bin/ebtables -N portmapping
   CMD: /bin/ebtables -A FORWARD -j portmapping
lan_sds_mode_set fail 6 ret 13
   CMD: /bin/ip rule del fwmark 0x00008000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00010000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00018000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00020000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00028000/0x000f8080
login: exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00030000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00038000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00040000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00048000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00050000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00058000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00060000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00068000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del fwmark 0x00070000/0x000f8080
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ip rule del prohibit
exec /bin/ip failed
   CMD: /bin/ebtables -A portmapping -i eth+ -o eth+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i eth+ -o wlan+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i wlan+ -o eth+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i wlan+ -o wlan+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i eth0+ -j DROP
   CMD: /bin/ebtables -A portmapping -i wlan+ -j DROP
   CMD: /bin/ebtables -I portmapping 1 -i eth0.2 -o nas0_0 -j RETURN
   CMD: /bin/ebtables -I portmapping 1 -i nas0_0 -o eth0.2 -j RETURN
   CMD: /bin/ebtables -I portmapping 1 -i eth0.3 -o nas0_0 -j RETURN
   CMD: /bin/ebtables -I portmapping 1 -i nas0_0 -o eth0.3 -j RETURN
   CMD: /bin/ebtables -A portmapping -i nas0_0 -j DROP
port set phy-force-power-down port all state disable
RTK.0> command:WaitforOpticalLinkAndReboot: check_mode=0
reg set 0x21808 0x71e0
RTK.0> command:change mode to 1(Fiber 1G)
ret -1
Error sendmsg: 95 Socket operation on non-socket
ctc_oam_gpio_tx_disable_init gpio_disTx_pin[13]
set llid 0 mac-addr 80f7a628db37
set llid 1 mac-addr 80f7a628db38
set llid 2 mac-addr 80f7a628db39
set llid 3 mac-addr 80f7a628db3a
set llid 4 mac-addr 80f7a628db3b
set llid 5 mac-addr 80f7a628db3c
set llid 6 mac-addr 80f7a628db3d
set llid 7 mac-addr 80f7a628db3e
change mode to 1(Fiber 1G)
==========================
Anime4000 2.5G HiSGMII Fix
==========================
2.5G HiSGMII Fix has been executed! Enjoy!

after busybox logged in with adminisp/adminisp

dittohead commented 3 months ago

UPD: calculate and set VS_AUTH_KEY + switch LAN_SDS_MODE from 1 to 4 - didn't help check eeprom from diag i2c get ... - all is stored, but mikrotik interface still displays as 0000: 03 00 00 00 00 00 00 00

dittohead commented 3 months ago

btw @Anime4000, this happened after this issue

switch firmware to second partition with this guide- back to default dongle firmware and dongle back to work

eeprom pretty same as before with bad checksum

[admin@MikroTik] > interface ethernet monitor sfp1
                      name: sfp1
                    status: link-ok
          auto-negotiation: done
                      rate: 1Gbps
               full-duplex: yes
           tx-flow-control: no
           rx-flow-control: no
               advertising:
  link-partner-advertising:
        sfp-module-present: yes
               sfp-rx-loss: no
           eeprom-checksum: bad
                    eeprom: 0000: 03 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........

next question: is some way to copy current FW from partition 1 to 0?