Review del TP-Link XZ000-G7 (ONT)

Gradius

Gradius

Systems Integrator
Se incorporó
29 Marzo 2014
Mensajes
237
Bueno, la ont podría ofrecer mucho más cosas, pero es súper limitado por firmware.

Existe otro que te dá acceso a superadmin, con mucho más opciones, el que viene es sólo modo usuário.

Por intentar instalar una versión más reciente del FW, terminé con la unidad sin uso. Tengo programador de Serial Flash, pero no será nada facil sin microscopio, y sin un binario "puro" (que no sea para uso en web).

La PCB mide 7cm x 7cm, es baseado en Galachip GC1601A, que es un todo en uno.

No viene ningún manual real, sólo de acceso rapido, y la IP default: http://192.168.1.1

Y si, trae las conexion para UART TTL (bien facil de conectar).

Los modos que ofrezce (y eso no trae nada en el manual):

Normal: Autodetección del tipo de OLT (en general funciona bien por defecto).

H: Emula OLT de Huawei (si tu ISP lo usa, y el modo normal falla).

Z: Emula OLT de ZTE

F: Emula OLT de FiberHome

X: Emula OLT de XTEK

HH: Otra variante de Huawei

No trae cable de red, ni el patch cord de fibra, sólo la unidad y la fuente de energía.
 

Archivo adjunto

  • 01.jpg
    01.jpg
    176 KB · Visitas: 34
  • 02.jpg
    02.jpg
    89,2 KB · Visitas: 30
  • 03.jpg
    03.jpg
    73,2 KB · Visitas: 36
Sort by date Sort by votes
Gradius

Gradius

Systems Integrator
Se incorporó
29 Marzo 2014
Mensajes
237
OK, recuperé la BESTIA.

jtag hace maravillas.

-------------------------------------------------------

BOOT MODE: SPI-NOR

Boot from Offset 0: Done.


ddr init done!
controller locked!
4

U-Boot V1.2.3 (Jul 23 2023 - 17:14:04 +0800)

CPU: Galachip 1601
Model: GC1601
DRAM: 32 MiB
*** Warning - default environment, using default environment

OK
In: serial
Out: serial
Err: serial
Net: eth0
Hit any key to stop autoboot: 0
Start Multicast upgrade detect...
LAN init sucessfully
Detecting multicast upgrade packets,wait=3000ms
Multicast Listening done!
SF: Detected en25qh32b(id: 0x1c7016) with page size 256 Bytes, erase size 64 KiB, total 4 MiB
Fix Flash size to FLASH_SIZE
[board/galachip1601/galachip_spi.c] do_boot: 746 do_boot will call do_spi_flash_autoboot
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 149 argv[1] is 41000000 ...,argc is 2
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 152 addr is 41000000 ...
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 161 spiFlash->size is 400000 ...
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 168 after addr map_physmem buf is 41000000 ...
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 210 spi_flash_read IMAGE_TAG offset is 20000
[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 215 IMAGE_TAG.kernelLen + sizeof(IMAGE_TAG) is 1422960

[board/galachip1601/galachip_spi.c] do_spi_flash_autoboot: 219 env_cmd is console=ttyS0,115200n8 root=/dev/mtdblock3 mtdparts=a0000000.ftspi020:4096k@0x0(whole),128k@0x0(uboot),1472k@0x20000(kernel),2304k@0x190000(rootfs),128k@0x3d0000(misc),64k@0x3f0000(hwconfig) init=/sbinOK
[common/bootm.c] do_bootm_states: 554 do_bootm_states will callbootm_find_os,argv[0] is 0x41000200
[common/bootm.c] do_bootm_states: 554 do_bootm_states will callbootm_find_os,argv[0] is 0x41000200

Starting kernel ...

Booting Linux on physical CPU 0x0
Linux version 3.16.0 (root@313cb039605f) (gcc version 4.9.4 (crosstool-NG 1.24.0) ) #1 PREEMPT Sun Jul 23 17:14:31 CST 2023
CPU: FA626TE [66056263] revision 3 (ARMv5TE), cr=0000397f
CPU: VIPT aliasing data cache, VIPT aliasing instruction cache
Machine model: GC1601
Memory policy: Data cache writeback
DT missing boot CPU MPIDR[23:0], fall back to default cpu_logical_map
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 7104
Kernel command line: console=ttyS0,115200n8 root=/dev/mtdblock3 mtdparts=a0000000.ftspi020:4096k@0x0(whole),128k@0x0(uboot),1472k@0x20000(kernel),2304k@0x190000(rootfs),128k@0x3d0000(misc),64k@0x3f0000(hwconfig) init=/sbin/init mem=32M bootv=V1.2.3(07/23/2023-17:14:04) rootwait user_debug=0xff
PID hash table entries: 128 (order: -3, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 24236K/28672K available (2776K kernel code, 175K rwdata, 812K rodata, 126K init, 149K bss, 4436K reserved)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xffe00000 (2048 kB)
vmalloc : 0xc2800000 - 0xff000000 ( 968 MB)
lowmem : 0xc0000000 - 0xc2000000 ( 32 MB)
modules : 0xbf000000 - 0xc0000000 ( 16 MB)
.text : 0xc0008000 - 0xc038940c (3590 kB)
.init : 0xc038a000 - 0xc03a9818 ( 127 kB)
.data : 0xc03aa000 - 0xc03d5fc0 ( 176 kB)
.bss : 0xc03d5fcc - 0xc03fb4cc ( 150 kB)
Preemptible hierarchical RCU implementation.
NR_IRQS:256
faraday,enable dying gasp
CPU: 533 MHz, DDR MCLK: 400 MHz, ACLK: 133 MHz, PCLK: 133 MHz SPICLK: 200 MHz
sched_clock: 32 bits at 133MHz, resolution 7ns, wraps every 32212254712ns
Calibrating delay loop... 530.84 BogoMIPS (lpj=2654208)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
Setting up static identity map for 0x402a45c8 - 0x402a4610
devtmpfs: initialized
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
Switched to clocksource fttmr010_clksrc
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
futex hash table entries: 256 (order: -1, 3072 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 47
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
ftgpio010 90900000.gpio: Start ftgpio010.
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
console [ttyS0] disabled
90400000.serial: ttyS0 at MMIO 0x90400000 (irq = 12, base_baud = 2062500) is a 16550A
console [ttyS0] enabled
ftspi020 a0000000.ftspi020: ctrl reg 0x00000081, icr reg 0x00003302
ftspi020 a0000000.ftspi020: reg base 0xc2810000, irq 14, tx fifo 64 rx fifo 64
ftspi020 a0000000.ftspi020: tx transfer 256, rx transfer 256
ftspi020 a0000000.ftspi020: found en25qh32b, expected at25fs010
ftspi020 a0000000.ftspi020: en25qh32b (id: 0x1c7016, 4096 Kbytes)
ftspi020 a0000000.ftspi020: mtd .name = a0000000.ftspi020, .size = 0x400000 (4MiB), .erasesize = 0x00001000 (4KiB) .numeraseregions = 0
6 cmdlinepart partitions found on MTD device a0000000.ftspi020
Creating 6 MTD partitions on "a0000000.ftspi020":
0x000000000000-0x000000400000 : "whole"
0x000000000000-0x000000020000 : "uboot"
0x000000020000-0x000000190000 : "kernel"
0x000000190000-0x0000003d0000 : "rootfs"
0x0000003d0000-0x0000003f0000 : "misc"
0x0000003f0000-0x000000400000 : "hwconfig"
input: soc:sys-buttons as /devices/soc/soc:sys-buttons/input/input0
i2c /dev entries driver
hs = 0 burst = 0
ftiic010 90600000.i2c0: irq 2, mapped at c2812000, clk 133333333
ftwdt010 90800000.wdt: clkrate = 133333333 timeout =10 counter = 0x4f790d52
ftwdt010 90800000.wdt: start watchdog timer
ftwdt010 90800000.wdt: irq 13, mapped at c2814000, clk 133333333
ftwdt010 90800000.wdt: creat /proc/watchdog/gcwdt_status ok
ftwdt010 90800000.wdt: watchdog active, reset enabled, irq enabled
softdog: Software Watchdog Timer: 0.08 initialized. soft_noboot=0 soft_margin=60 sec soft_panic=0 (nowayout=0)
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (378 buckets, 1512 max)
ctnetlink v0.93: registering with nfnetlink.
nf_tables: (c) 2007-2009 Patrick McHardy <[email protected]>
nf_tables_compat: (c) 2012 Pablo Neira Ayuso <[email protected]>
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
arp_tables: (C) 2002 David S. Miller
TCP: cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
8021q: 802.1Q VLAN Support v1.8
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing unused kernel memory: 124K (c038a000 - c03a9000)
Register flash device: flash0
cp: can't stat '/usr/etc': No such file or directory
rcS (31): drop_caches: 3
ifconfig: SIOCSIFADDR: No such device
ifconfig: ioctl 0x8913 failed: No such device
ifconfig: SIOCSIFMTU: No such device
/etc/init.d/rcS: /etc/init.d/rcS.galachip: line 12: can't create /proc/tso_lan/rule: nonexistent directory
interface eth0 does not exist!
interface eth1 does not exist!
interface pon does not exist!
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: No such device
ifconfig: SIOCSIFMTU: Invalid argument
drop_caches 3
rcS (31): drop_caches: 3
change for kernel panic reboot time
/etc/init.d/rcS: /etc/init.d/rcS.galachip: line 41: can't create /proc/sys/kernel/watchdog_thresh: nonexistent directory
rcS.sdk init done!
creat_domain_proc ok
tp_domain init ok
cp: can't stat '/etc/cloud/cloud_service.cfg': No such file or directory
rcS init done!
 
Upvote 0
Gradius

Gradius

Systems Integrator
Se incorporó
29 Marzo 2014
Mensajes
237
Código: 
admin@XZ000-G7:~ # ls -la
drwxr-xr-x   17 admin    root           246 Jul 23  2023 .
drwxr-xr-x   17 admin    root           246 Jul 23  2023 ..
drwxr-xr-x    2 admin    root           701 Jul 23  2023 bin
drwxr-xr-x    4 admin    root           960 Jan  1  1970 dev
drwxrwxrwt   14 admin    root          1200 Jan  1  1970 etc
drwxr-xr-x    4 admin    root           498 Jul 23  2023 lib
drwxr-xr-x    3 admin    root            32 Jul 23  2023 libexec
lrwxrwxrwx    1 admin    root            11 Jul 23  2023 linuxrc -> bin/busybox
drwxr-xr-x    2 admin    root             3 Jul 23  2023 mnt
dr-xr-xr-x   49 admin    root             0 Jan  1  1970 proc
drwxr-xr-x    2 admin    root            33 Jul 23  2023 root
lrwxrwxrwx    1 admin    root             8 Jul 23  2023 run -> tmp/run/
drwxr-xr-x    2 admin    root           530 Jul 23  2023 sbin
dr-xr-xr-x   11 admin    root             0 Jan  1  1970 sys
lrwxrwxrwx    1 admin    root             8 Jul 23  2023 tmp -> /var/tmp
drwxr-xr-x    3 admin    root            29 Jul 23  2023 userconfig
drwxr-xr-x    2 admin    root             3 Jul 23  2023 userfs
drwxr-xr-x    5 admin    root            49 Jul 23  2023 usr
drwxr-xr-x   15 admin    root             0 Jan  1  1970 var
drwxr-xr-x   10 admin    root           126 Jul 23  2023 web


admin@XZ000-G7:~ # df -T
Filesystem           Type       1024-blocks    Used Available Use% Mounted on
/dev/root            squashfs        2304      2304         0 100% /
devtmpfs             devtmpfs       12116         0     12116   0% /dev
tmpfs                tmpfs          16384        56     16328   0% /var/tmp
tmpfs                tmpfs          12180       688     11492   6% /etc
admin@XZ000-G7:~ #

admin@XZ000-G7:/etc # cat passwd
admin:x:0:0:root:/:/bin/sh
dropbear:x:500:500:dropbear:/var/tmp/dropbear:/bin/sh
nobody:*:0:0body:/:/bin/sh
user:x:500:500:user:/:/bin/sh


admin@XZ000-G7:/etc # cat shadow
root:$1$GcFCR1/B$L3d.adIYWrSTohCJN0Jo01:13013:0:99999:7:::
nobody:*:::::::
admin:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:16801::::::
user:*:::::::
gcftp:*:::::::

Por lo que veo la clave es ADMIN para root, pero no existe "root" en passwd. Depués veré, lamentablemente tengo que elaborar. :martilleo
 
Upvote 0
You must log in or register to reply here.
Subir