[OpenWrt Wiki] ZLMnet MiFi F1 (2024)

The device has 4MB Flash and 32MB SDRAM

Device is same/similar or OEM of Hame MPR-A1

(The MPR-A1 image might work, not sure if it will detect 16MB or 32MB of ram - depends on beeing hardcoded or bootstrap detected).

To be safe first flash the initramfs image (as per the MPR-A2 wiki page) and then the sysupgrade image.

An MPR-A1 trunk build as of Nov 23, 2013 (r38896) did detect 32 MB of RAM. However the ethernet port was mapped to WAN and it was set upto get an address for a DHCP server. So to access the device connect the ethernet to the LAN port of another router and access throughthat. Once you get to the device - you can modify /etc/config/network to map all the enabled ports (0,1,2,3,4) to LAN. As it turns out port 4 is the port for the physical ethernet and so that needs to be part of the LAN VLAN. To do a permanent fix - edit target/linux/ramips/base-files/etc/uci-defaults/02_network by inserting comments as follows and then rebuild. This ensures that all the ports in the VLAN get assigned to the LAN.

#if [ `swconfig dev rt305x port $port get lan` = "0" ]; then \\#wanports="$port $wanports" \\#else \\ lanports="$port $lanports" \\#fi \\

Here two pictures from the front and the backside of the PCB(the wires are for the serial console port - the blue wire is Tx
the middle wire is Rx, and the other wire is Ground
Serial settings are 57600/ N 8 1

U-Boot 1.1.3 (Jul 8 2013 - 10:59:04)Board: Ralink APSoC DRAM: 32 MBrelocate_code Pointer at: 81fb4000spi_wait_nsec: 42 spi device id: c2 20 16 c2 20 (2016c220)find flash: MX25L3205Draspi_read: from:30000 len:1000 .*** Warning - bad CRC, using default environment============================================ Ralink UBoot Version: 3.6.0.0-------------------------------------------- ASIC 5350_MP (Port5<->None)DRAM_CONF_FROM: Boot-Strapping DRAM_TYPE: SDRAM DRAM_SIZE: 256 MbitsDRAM_WIDTH: 16 bitsDRAM_TOTAL_WIDTH: 16 bitsTOTAL_MEMORY_SIZE: 32 MBytesFlash component: SPI FlashDate:Jul 8 2013 Time:10:59:04============================================ icache: sets:256, ways:4, linesz:32 ,total:32768dcache: sets:128, ways:4, linesz:32 ,total:16384 ##### The CPU freq = 360 MHZ #### estimate memory size =32 MbytesPlease choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. unenter reset button... 0 3: System Boot system code via Flash.## Booting image at bc050000 ...raspi_read: from:50000 len:40 . Image Name: ZLMnet?MIFIF10N? Created: 2013-07-16 11:09:46 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 3811199 Bytes = 3.6 MB Load Address: 80000000 Entry Point: 803ae000raspi_read: from:50040 len:3a2770 ...........................................................OK Uncompressing Kernel Image ... OKNo initrd## Transferring control to Linux (at address 803ae000) ...## Giving linux memsize in MB, 32Starting kernel ...LINUX started... THIS IS ASICLinux version 2.6.21 (root@lamon) (gcc version 3.4.2) #157 Tue Jul 16 19:09:32 CST 2013 The CPU frequency set to 360 MHzCPU revision is: 0001964cDetermined physical RAM map: memory: 02000000 @ 00000000 (usable)Initrd not found or empty - disabling initrdBuilt 1 zonelists. Total pages: 8128Kernel command line: console=ttyS1,57600n8 root=/dev/ram0Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.Primary data cache 16kB, 4-way, linesize 32 bytes.Synthesized TLB refill handler (20 instructions).Synthesized TLB load handler fastpath (32 instructions).Synthesized TLB store handler fastpath (32 instructions).Synthesized TLB modify handler fastpath (31 instructions).Cache parity protection disabledcause = c0808030, status = 11000000PID hash table entries: 128 (order: 7, 512 bytes)calculating r4koff... 0015f900(1440000)CPU frequency 360.00 MHzUsing 180.000 MHz high precision timer.Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)Memory: 25988k/32768k available (3019k kernel code, 6780k reserved, 744k data, 2628k init, 0k highmem)Mount-cache hash table entries: 512NET: Registered protocol family 16SCSI subsystem initializedusbcore: registered new interface driver usbfsusbcore: registered new interface driver hubusbcore: registered new device driver usbNET: Registered protocol family 2Time: MIPS clocksource has been installed.IP route cache hash table entries: 1024 (order: 0, 4096 bytes)TCP established hash table entries: 1024 (order: 1, 8192 bytes)TCP bind hash table entries: 1024 (order: 0, 4096 bytes)TCP: Hash tables configured (established 1024 bind 1024)TCP reno registereddetected lzma initramfsdetected lzma initramfsinitramfs: LZMA lc=3,lp=0,pb=2,dictSize=1048576,origSize=10702848LZMA initramfs by Ming-Ching Tiew <mctiew@yahoo.com>....................................................................................................................................................................deice id : c2 20 16 c2 20 (2016c220)MX25L3205D(c2 2016c220) (4096 Kbytes)mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0Creating 5 MTD partitions on "raspi":0x00000000-0x00400000 : "ALL"0x00000000-0x00030000 : "Bootloader"0x00030000-0x00040000 : "Config"0x00040000-0x00050000 : "Factory"0x00050000-0x01000000 : "Kernel"mtd: partition "Kernel" extends beyond the end of device "raspi" -- size truncated to 0x3b0000RT3xxx EHCI/OHCI init.squashfs: version 3.2-r2 (2007/01/15) Phillip Loughersquashfs: LZMA suppport for slax.org by jroNTFS driver 2.1.28 [Flags: R/W].fuse init (API version 7.8)io scheduler noop registered (default)Ralink gpio driver initializedHDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096N_HDLC line discipline registered.Serial: 8250/16550 driver $Revision: 1.8 $ 2 ports, IRQ sharing disabledserial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550Aserial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550ARAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksizeloop: loaded (max 8 devices)rdm_major = 253eth2 mii.o query= phy_id:0, address:1 retval:7849Ralink APSoC Ethernet Driver Initilization. v2.1 256 rx/tx descriptors allocated, mtu = 1500!MAC_ADRH -- : 0x00002c67MAC_ADRL -- : 0xfb5d106aPROC INIT OK!PPP generic driver version 2.4.2PPP BSD Compression module registeredNET: Registered protocol family 24PPPoL2TP kernel driver, V0.17PPTP driver version 0.8.1=== pAd = c0019000, size = 647784 ===<-- RTMPAllocAdapterBlock, Status=0block2mtd: version $Revision: 1.1.1.1 $usbcore: registered new interface driver cdc_acmdrivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB modems and ISDN adaptersInitializing USB Mass Storage driver...usbcore: registered new interface driver usb-storageUSB Mass Storage support registered.nf_conntrack version 0.5.0 (256 buckets, 2048 max)ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Conearp_tables: (C) 2002 David S. MillerTCP cubic registeredNET: Registered protocol family 1NET: Registered protocol family 17802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>All bugs added by David S. Miller <davem@redhat.com>Freeing unused kernel memory: 2628k freedinit started: BusyBox v1.12.1 (2012-08-27 10:10:44 CST)startAlgorithmics/MIPS FPU Emulator v1.5ing pid 620, tty '': '/etc_ro/rcS'devpts: called with bogus optionsrt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controllerrt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 1rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000usb usb1: configuration #1 chosen from 1 choicehub 1-0:1.0: USB hub foundhub 1-0:1.0: 1 port detectedrt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controllerrt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 2rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004usb usb2: configuration #1 chosen from 1 choicehub 2-0:1.0: USB hub foundhub 2-0:1.0: 1 port detectedstarting pid 645, tty '/dev/ttyS1': '/bin/sh'BusyBox v1.12.1 (2012-08-27 10:10:44 CST) built-in shell (ash)Enter 'help' for a list of built-in commands.starting pid 646, tty '': '/bin/goahead'echo 8196 > /proc/sys/net/netfilter/nf_conntrack_maxstarting pid 648, tty '': '/bin/syslogc'|20000101000005.info.mesg:648|/sbin/syslogd -C -n|syslog/syslog.c:108killall umodemkillall: umodem: no process killedntp-init.shinternet.shPassword for 'admin' changedPassword for 'root' changedinsmod: bridge.ko: module not foundinsmod: mii.ko: module not foundinsmod: raeth.ko: module not foundphy_tx_ring = 0x00488000, tx_ring = 0xa0488000phy_rx_ring0 = 0x00489000, rx_ring0 = 0xa0489000MAC_ADRH -- : 0x00002c67MAC_ADRL -- : 0xfb5d106aRT305x_ESW: Link Status Changedrmmod: rt2860v2_ap: No such file or directoryrmmod: rt2860v2_sta: No such file or directoryinsmod: rt2860v2_ap.ko: module not foundrmmod: nf_nat_pptp: No such file or directoryrmmod: nf_conntrack_pptp: No such file or directoryrmmod: nf_nat_proto_gre: No such file or directoryrmmod: nf_conntrack_proto_gre: No such file or directoryrmmod: nf_conntrack_sip: No such file or directoryrmmod: nf_conntrack_sip: No such file or directoryrmmod: nf_nat_sip: No such file or directoryrmmod: nf_conntrack_h323: No such file or directoryrmmod: nf_conntrack_h323: No such file or directoryrmmod: nf_nat_h323: No such file or directoryRX DESC a04cb000 size = 2048<-- RTMPAllocTxRxRingMemory, Status=0Key1Str is Invalid key length(0) or Type(0)Key2Str is Invalid key length(0) or Type(0)Key3Str is Invalid key length(0) or Type(0)Key4Str is Invalid key length(0) or Type(0)1. Phy Mode = 92. Phy Mode = 93. Phy Mode = 9pAd->TxPowerCtrl.bInternalTxALC == FALSE !RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff 00 00 00 01SYNC - BBP R4 to 20MHz.lMain bssid = 2c:67:fb:5d:10:68<==== rt28xx_init, Status=00x1300 = 00064380insmod: 8021q.ko: module not foundeth2.2: Setting MAC address to 2c 67 fb 5d 10 6b.device eth2 entered promiscuous modeVLAN (eth2.2): Setting underlying device (eth2) to promiscious mode.ifconfig: ioctl 0x8913 failed: No such devicebrctl: bridge br0: No such device or address##### config RT3050 TWO LAN (WLLLL) #####switch reg write offset=14, value=405555switch reg write offset=50, value=2001switch reg write offset=98, value=7f3fswitch reg write offset=e4, value=3fswitch reg write offset=40, value=1002switch reg write offset=44, value=1001switch reg write offset=48, value=1001switch reg write offset=70, value=ffff417edevice ra0 entered promiscuous modeeth2 mii.o query= phy_id:1, address:4 retval:5e1eth2 mii.o query= phy_id:1, address:0 retval:3900eth2 mii.o query= phy_id:1, address:5 retval:0eth2.1: dev_set_promiscuity(master, 1)device eth2.1 entered promiscuous modebr0: port 2(eth2.1) entering learning statebr0: port 1(ra0) entering learning stateifconfig: ioctl 0x8914 failed: Cannot assign requested addressifconfig: ioctl 0x8914 failed: Cannot assign requested addresskillall: dhcpd-reset.sh: no process killedkillall: udhcpd: no process killedrm: cannot remove '/etc/udhcpd.conf': No such file or directorybr0: topology change detected, propagatingbr0: port 2(eth2.1) entering forwarding statebr0: topology change detected, propagatingbr0: port 1(ra0) entering forwarding stateifconfig: ioctl 0x8913 failed: No such devicekillall rt2860apd 1>/dev/null 2>&1iptables -F -t filter 1>/dev/null 2>&1iptables -D FORWARD -j PORTSCAN 1>/dev/null 2>&1iptables -D INPUT -j PORTSCAN 1>/dev/null 2>&1iptables -F PORTSCAN 1>/dev/null 2>&1iptables -D FORWARD -j PSD 1>/dev/null 2>&1iptables -D INPUT -j PSD 1>/dev/null 2>&1iptables -F PSD 1>/dev/null 2>&1iptables -D FORWARD -j SHORT 1>/dev/null 2>&1iptables -D INPUT -j SHORT 1>/dev/null 2>&1iptables -F SHORT 1>/dev/null 2>&1iptables -D FORWARD -j icmp_flood 1>/dev/null 2>&1iptables -D INPUT -j icmp_flood 1>/dev/null 2>&1iptables -F icmp_flood 1>/dev/null 2>&1iptables -D FORWARD -j udp_flood 1>/dev/null 2>&1iptables -D INPUT -j udp_flood 1>/dev/null 2>&1iptables -F udp_flood 1>/dev/null 2>&1iptables -D FORWARD -j syn_flood 1>/dev/null 2>&1iptables -D INPUT -j syn_flood 1>/dev/null 2>&1iptables -F syn_flood 1>/dev/null 2>&1iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1iptables -F macipport_filter 1>/dev/null 2>&1iptables -D FORWARD -j web_filter 1>/dev/null 2>&1iptables -F web_filter 1>/dev/null 2>&1iptables -P INPUT ACCEPTiptables -P OUTPUT ACCEPTiptables -P FORWARD ACCEPTiptables -A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPTiptables -A INPUT -i ppp0 -p tcp --dport 80 -j DROPiptables -A INPUT -i ppp0 -p tcp --dport 23 -j DROPiptables -A FORWARD -p udp --dport 1701 -j DROPiptables -A FORWARD -p tcp --dport 1723 -j DROPiptables -t filter -N web_filter 1>/dev/null 2>&1iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1echo "127.0.0.1 3Groute" > /etc/hostskillall dnsmasqdnsmasq -r /etc/resolv.conf&iptables -t filter -N ipport_trigger 1>/dev/null 2>&1iptables -t filter -A FORWARD -j ipport_trigger 1>/dev/null 2>&1iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forward 1>/dev/null 2>&1iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&1iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1iptables -t nat -N port_trigger 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j port_trigger 1>/dev/null 2>&1greenap.sh initroute delete 239.255.255.250 1>/dev/null 2>&1killall wscd 1>/dev/null 2>&1killall -9 wscd 1>/dev/null 2>&1iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1killall -q zebrakillall -q ripd##### USB init #####MIC Different in pairwise msg 2 of 4-way handshake!storage.sh sambaMIC Different in pairwise msg 2 of 4-way handshake!1st partition does not existgoahead pid is 646....webs: Listening for HTTP requests at address 192.168.100.1MIC Different in pairwise msg 2 of 4-way handshake!MIC Different in pairwise msg 2 of 4-way handshake!

How to add tags