mirror of
https://github.com/openwrt/openwrt.git
synced 2025-01-02 03:56:49 +00:00
0de6a3339f
It's a 4G Cat.20 router used by Vodafone Italy (called Vodafone FWA) and Vodafone DE\T-Mobile PL (called GigaCube). Modem is a MiniPCIe-to-USB based on Snapdragon X24, it supports 4CA aggregation. There are currently two hardware revisions, which differ on the 5Ghz radio: AT1 = QCA9984 5Ghz Radio on PCI-E bus AT2 = IPQ4019 5Ghz Radio inside IPQ4019 like 2.4Ghz Device specification -------------------- SoC Type: Qualcomm IPQ4019 RAM: 256 MiB Flash: 128 MiB SPI NAND (Winbond W25N01GV) ROM: 2MiB SPI Flash (GD25Q16) Wireless 2.4 GHz (IP4019): b/g/n, 2x2 Wireless 5 GHz: (QCA9984): a/n/ac, 4x4 HW REV AT1 (IPA4019): a/n/ac, 2x2 HW REV AT2 Ethernet: 2xGbE (WAN/LAN1, LAN2) USB ports: No Button: 2 (Reset/WPS) LEDs: 3 external leds: Network (white or red), Wifi, Power and 1 internal (blue) Power: 12 VDC, 1 A Connector type: Barrel Bootloader: U-Boot Installation ------------ 1. Place OpenWrt initramfs image for the device on a TFTP in the server's root. This example uses Server IP: 192.168.0.2 2. Connect serial console (115200,8n1) to serial connector GND (which is right next to the thing with MF289F MIMO-V1.0), RX, TX (refer to this image: https://ibb.co/31Gngpr). 3. Connect TFTP server to RJ-45 port (WAN/LAN1). 4. Stop in u-Boot (using ESC button) and run u-Boot commands: setenv serverip 192.168.0.2 setenv ipaddr 192.168.0.1 set fdt_high 0x85000000 tftp openwrt-ipq40xx-generic-zte_mf289f-initramfs-fit-zImage.itb bootm $loadaddr 5. Please make backup of original partitions, if you think about revert to stock, specially mtd16 (Web UI) and mtd17 (rootFS). Use /tmp as temporary storage and do: WEB PARITION -------------------------------------- cat /dev/mtd16 > /tmp/mtd16.bin scp /tmp/mtd16.bin root@YOURSERVERIP:/ rm /tmp/mtd16.bin ROOT PARITION -------------------------------------- cat /dev/mtd17 > /tmp/mtd17.bin scp /tmp/mtd17.bin root@YOURSERVERIP:/ rm /tmp/mtd17.bin 6. Login via ssh or serial and remove stock partitions (default IP 192.168.0.1): # this can return an error, if ubi was attached before # or rootfs part was erased before. ubiattach -m 17 # it could return error if rootfs part was erased before ubirmvol /dev/ubi0 -N ubi_rootfs # some devices doesn't have it ubirmvol /dev/ubi0 -N ubi_rootfs_data 7. download and install image via sysupgrade -n (either use wget/scp to copy the mf289f's squashfs-sysupgrade.bin to the device's /tmp directory) sysupgrade -n /tmp/openwrt-...-zte_mf289f-squashfs-sysupgrade.bin Sometimes it could print ubi attach error, but please ignore it if process goes forward. Flash Layout NAND: mtd8: 000a0000 00020000 "fota-flag" mtd9: 00080000 00020000 "0:ART" mtd10: 00080000 00020000 "mac" mtd11: 000c0000 00020000 "reserved2" mtd12: 00400000 00020000 "cfg-param" mtd13: 00400000 00020000 "log" mtd14: 000a0000 00020000 "oops" mtd15: 00500000 00020000 "reserved3" mtd16: 00800000 00020000 "web" mtd17: 01d00000 00020000 "rootfs" mtd18: 01900000 00020000 "data" mtd19: 03200000 00020000 "fota" mtd20: 0041e000 0001f000 "kernel" mtd21: 0101b000 0001f000 "ubi_rootfs" SPI: mtd0: 00040000 00010000 "0:SBL1" mtd1: 00020000 00010000 "0:MIBIB" mtd2: 00060000 00010000 "0:QSEE" mtd3: 00010000 00010000 "0:CDT" mtd4: 00010000 00010000 "0:DDRPARAMS" mtd5: 00010000 00010000 "0:APPSBLENV" mtd6: 000c0000 00010000 "0:APPSBL" mtd7: 00050000 00010000 "0:reserved1" Back to Stock (!!! need original dump taken from initramfs !!!) ------------- 1. Place mtd16.bin and mtd17.bin initramfs image for the device on a TFTP in the server's root. This example uses Server IP: 192.168.0.2 2. Connect serial console (115200,8n1) to serial console connector (refer to the pin-out from above). 3. Connect TFTP server to RJ-45 port (WAN/LAN1). 4. rename mtd16.bin to web.img and mtd17.bin to root_uImage_s 5. Stop in u-Boot (using ESC button) and run u-Boot commands: This will erase RootFS+Web: nand erase 0x1000000 0x800000 nand erase 0x1800000 0x1D00000 This will restore RootFS: tftpboot 0x84000000 ${dir}root_uImage_s nand erase 0x1800000 0x1D00000 nand write $fileaddr 0x1800000 $filesize This will restore Web Interface: tftpboot 0x84000000 ${dir}web.img nand erase 0x1000000 0x800000 nand write $fileaddr 0x1000000 $filesize After first boot on stock firwmare, do a factory reset. Push reset button for 5 seconds so all parameters will be reverted to the one printed on label on bottom of the router Signed-off-by: Giammarco Marzano <stich86@gmail.com> Reviewed-by: Lech Perczak <lech.perczak@gmail.com> (Warning: commit message did not conform to UTF-8 - hopefully fixed?, added description of the pin-out if image goes down, reformatted commit message to be hopefully somewhat readable on git-web, redid some of the gpio-buttons & leds DT nodes, etc.) Signed-off-by: Christian Lamparter <chunkeey@gmail.com> |
||
|---|---|---|
| .. | ||
| qcom-ipq4018-a42.dts | ||
| qcom-ipq4018-ap120c-ac.dts | ||
| qcom-ipq4018-cap-ac.dts | ||
| qcom-ipq4018-cs-w3-wd1200g-eup.dts | ||
| qcom-ipq4018-dap-2610.dts | ||
| qcom-ipq4018-ea6350v3.dts | ||
| qcom-ipq4018-eap1300.dts | ||
| qcom-ipq4018-ecw5211.dts | ||
| qcom-ipq4018-emd1.dts | ||
| qcom-ipq4018-emr3500.dts | ||
| qcom-ipq4018-ens620ext.dts | ||
| qcom-ipq4018-ex61x0v2.dtsi | ||
| qcom-ipq4018-ex6100v2.dts | ||
| qcom-ipq4018-ex6150v2.dts | ||
| qcom-ipq4018-fritzbox-4040.dts | ||
| qcom-ipq4018-gl-ap1300.dts | ||
| qcom-ipq4018-hap-ac2.dts | ||
| qcom-ipq4018-jalapeno.dts | ||
| qcom-ipq4018-jalapeno.dtsi | ||
| qcom-ipq4018-magic-2-wifi-next.dts | ||
| qcom-ipq4018-meshpoint-one.dts | ||
| qcom-ipq4018-nbg6617.dts | ||
| qcom-ipq4018-pa1200.dts | ||
| qcom-ipq4018-rt-ac58u.dts | ||
| qcom-ipq4018-rutx10.dts | ||
| qcom-ipq4018-rutx.dtsi | ||
| qcom-ipq4018-sxtsq-5-ac.dts | ||
| qcom-ipq4018-wac510.dts | ||
| qcom-ipq4018-wap-ac.dts | ||
| qcom-ipq4018-whw01-v1.dts | ||
| qcom-ipq4018-wr-1.dts | ||
| qcom-ipq4018-wre6606.dts | ||
| qcom-ipq4018-wrtq-329acn.dts | ||
| qcom-ipq4019-a62.dts | ||
| qcom-ipq4019-cm520-79f.dts | ||
| qcom-ipq4019-e2600ac-c1.dts | ||
| qcom-ipq4019-e2600ac-c2.dts | ||
| qcom-ipq4019-e2600ac.dtsi | ||
| qcom-ipq4019-ea8300.dts | ||
| qcom-ipq4019-eap2200.dts | ||
| qcom-ipq4019-fritzbox-7530.dts | ||
| qcom-ipq4019-fritzrepeater-1200.dts | ||
| qcom-ipq4019-fritzrepeater-3000.dts | ||
| qcom-ipq4019-gl-b2200.dts | ||
| qcom-ipq4019-habanero-dvk.dts | ||
| qcom-ipq4019-hap-ac3.dts | ||
| qcom-ipq4019-lhgg-60ad.dts | ||
| qcom-ipq4019-map-ac2200.dts | ||
| qcom-ipq4019-mf286d.dts | ||
| qcom-ipq4019-mf289f.dts | ||
| qcom-ipq4019-mr8300.dts | ||
| qcom-ipq4019-ncp-hg100-cellular.dts | ||
| qcom-ipq4019-oap100.dts | ||
| qcom-ipq4019-orbi.dtsi | ||
| qcom-ipq4019-pa2200.dts | ||
| qcom-ipq4019-r619ac-64m.dts | ||
| qcom-ipq4019-r619ac-128m.dts | ||
| qcom-ipq4019-r619ac.dtsi | ||
| qcom-ipq4019-rbr50.dts | ||
| qcom-ipq4019-rbs50.dts | ||
| qcom-ipq4019-rt-ac42u.dts | ||
| qcom-ipq4019-rtl30vw.dts | ||
| qcom-ipq4019-srr60.dts | ||
| qcom-ipq4019-srs60.dts | ||
| qcom-ipq4019-u4019-32m.dts | ||
| qcom-ipq4019-u4019.dtsi | ||
| qcom-ipq4019-wifi.dts | ||
| qcom-ipq4019-wpj419.dts | ||
| qcom-ipq4019-wtr-m2133hp.dts | ||
| qcom-ipq4019-x1pro.dts | ||
| qcom-ipq4019-x1pro.dtsi | ||
| qcom-ipq4019-xx8300.dtsi | ||
| qcom-ipq4028-wpj428.dts | ||
| qcom-ipq4029-ap-303.dts | ||
| qcom-ipq4029-ap-303h.dts | ||
| qcom-ipq4029-ap-365.dts | ||
| qcom-ipq4029-aruba-glenmorangie.dtsi | ||
| qcom-ipq4029-gl-b1300.dts | ||
| qcom-ipq4029-gl-s1300.dts | ||
| qcom-ipq4029-insect-common.dtsi | ||
| qcom-ipq4029-mr33.dts | ||
| qcom-ipq4029-mr74.dts | ||
| qcom-ipq4029-ws-ap3915i.dts | ||