threader / zyxel-p8702n-bcm63xx

Telenor Zyxel P8702N BCM68xx - Telenor frmware. Zyxel Open Source firmware, kernel, build tools and documentation.
4 stars 1 forks source link

Read:


https://oldwiki.archive.openwrt.org/toh/zyxel/zyxel_p8702n or doc/ https://forum.archive.openwrt.org/viewtopic.php?id=51212 https://openwrt.org/toh/zyxel/vmg1312-b30a https://github.com/openwrt-es/cfe-bcm63xx/blob/master/README.md https://openwrt.org/docs/techref/bootloader/cfe https://forum.openwrt.org/t/boot-to-cfe-prompt-from-ram-on-bcm63xx/88788 https://gist.github.com/goldyfruit/3a0c1500cb539fabe2c4105373b836ae https://forum.kitz.co.uk/index.php?topic=13939.0 https://web.archive.org/web/20200930145735/openwrt.org/toh/zyxel/zyxel_p8702n https://patchwork.ozlabs.org/project/devicetree-bindings/patch/1459684846-11308-1-git-send-email-noltari@gmail.com/ https://books.google.no/books?id=l3JIEAAAQBAJ&pg=PA13&lpg=PA13&dq=100AAJX14D0.bin.md&source=bl&ots=ZVkgWi3_oU&sig=ACfU3U3Qq8HI2KXKYWJKc7WrB2TO3HgWeQ&hl=en&sa=X&ved=2ahUKEwjC7OeZh7WFAxXoBxAIHVB3AL8Q6AF6BAgJEAM#v=onepage&q=00AAJX13D0.bin.md&f=false

(bmips: rename BCM63168 to BCM63268 BCM63168 and BCM63268 are very similar and Broadcom refers to them as BCM63268 in GPL sources (e.g. 63268_map_part.h). Use alphabetical order for supported bmips quirks. Add BCM63268 to devicetree documentation.)

https://openwrt.org/docs/techref/hardware/soc/soc.broadcom.bcm63xx https://openwrt.org/docs/guide-developer/toolchain/use-buildsystem

Firmware: Under zyxel-p8702n-bcm63xx/firmware/p8702/ are all the official Telenor Firmwares I have, the latest are missing, the latest known working not to be locked to Telenor WAN is 100AAJX14D0.bin , to flash this, older, or different firmwares the router needs to be put in a special mode, i'll get the techincal details later, but it involves holding the 'reset' button untill a light blinks red, set a static ip via ethernet cable to i believe 192.160.1.x and connect to 192.168.1.1. This should be in the linked documentation above.

To force flash firmware: from zyxel-p8702n-bcm63xx/doc/bcm963xx_bootloader_appnote.pdf : "

  1. Press and hold the reset button until the “DSL” LED goes on. It will take about 8 seconds.
  2. Configure a PC Ethernet connection with a static IP address on subnet 192.168.1.x.
  3. Open a Web browser to IP address 192.168.1.1. The following screen will appear. " To flash a non Telenor WAN locked firmwre, you can now select: 'zyxel-p8702n-bcm63xx/firmware/p8702/100AAJX14D0.bin'


A bit of copy-paste from zyxel-p8702n-bcm63xx/doc/oldwiki.archive.openwrt.org/toh/zyxel/zyxel_p8702n.html:

Serial connection:

< I'll provice pictures or something and pinouts to connect >

Connect via ttl serial - ie. 'cu -l /dev/ttyUSB0 -s 115200' or putty

To show a list of commands: CFE> ATHE

In true ZyXEL style, you now need to generate a seed for the bootloader password generator. CFE> ATSE DSL-2492GNAU-B3BC 00044320D52F OK *** command status = 0 --- Unlock Bootloader: *Nix: Compile zynpass to generate bootloader unlock key - Thanks mr. goldyfruit! gcc zynpass.c -o zynpass ./zynpass 00044320D52F Windows - Untested: doc/jstic.com/Newsgroup/Zyxel/ZynPass.zip is a windows version from 2012: This will output the next input --- CFE> ATEN 1 820FFBDD OK *** command status = 0 Now the bootloader is unlocked. OPTIONAL: Make FS writeable (I believe, I read the documentation at the time but found this in a log) CFE> ATBT 1