D-Link DAP-1353 如何通过TTL在Redboot模式下重刷固件

mtying

DAP-1353(CPU:IXP420)在升级固件后无法正常启动.
故障现象AN口拼不通，无线灯闪烁且无信号。
通过TTL可以看见启动信息，不知道在Redboot模式下怎么重刷固件？
TTL信息：
Trying NPE-B...[error] ixEthMiiPhyScan : unexpected Mii PHY0 ID 001cc852
success. Using NPE-B with PHY 0.
Ethernet eth0: MAC address 00:22:b0:59:fd:0e
IP: 192.168.0.50/255.255.255.0, Gateway: 192.168.0.52
Default server: 192.168.0.52

RedBoot(tm) bootstrap and debug environment [ROM]
AlphaNetworks release, version RH2.02.14(v014) - built 16:10:46, Aug  7 2007

Platform: DAP-1353 Development Platform (IXP420 ABC 400MHz) BE
Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

RAM: 0x00000000-0x02000000, [0x0002be00-0x01fd2000] available
FLASH: 0x50000000 - 0x50800000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 1.000 seconds - enter ^C to abort
RedBoot> fload -l
Lzma decompressing...
Image loaded from 0x00208000-0x003e06f4
RedBoot> exec
fload success--do exec..
Using base address 0x00208000 and length 0x001d86f4
Linux version 2.6.13.2 (erick@march) (gcc version 3.4.5) #1 Thu Oct 25 15:15:16 CST 2007
CPU: XScale-IXP42x Family [690541d2] revision 2 (ARMv5TE)
Machine: AP71 Platform
Memory policy: ECC disabled, Data cache writeback
CPU0: D VIVT undefined 5 cache
CPU0: I cache: 32768 bytes, associativity 32, 32 byte lines, 32 sets
CPU0: D cache: 32768 bytes, associativity 32, 32 byte lines, 32 sets
Built 1 zonelists
Kernel command line: console=ttyS1,115200 noinitrd ip=off root=/dev/mtdblock0 rw mem=32M@0x00000000
PID hash table entries: 256 (order: 8, 4096 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 32MB = 32MB total
Memory: 30396KB available (1499K code, 148K data, 312K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
PCI: IXP4xx is host
PCI: IXP4xx Using direct access for memory space
PCI: bus0: Fast back to back transfers enabled
dmabounce: registered device 0000:00:01.0 on pci bus
request IRQ for SWRESET GPIO 1 OK
NetWinder Floating Point Emulator V0.97 (double precision)
Squashfs 2.2-r2 (released 2005/09/08) (C) 2002-2005 Phillip Lougher
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
Initializing Cryptographic API
HDLC line discipline: version $Revision: #1 $, maxframe=4096
N_HDLC line discipline registered.
IXP4xx Watchdog Timer: heartbeat 60 sec
Serial: 8250/16550 driver $Revision: #1 $ 2 ports, IRQ sharing disabled
ttyS0 at MMIO 0xc8000000 (irq = 15) is a XScale
ttyS1 at MMIO 0xc8001000 (irq = 13) is a XScale
io scheduler noop registered
io scheduler cfq registered
PPP generic driver version 2.4.2
NET: Registered protocol family 24
APAPPS physmap flash device: 800000 at 50000000
APAPPS physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
APAPPS physically mapped flash: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
APAPPS physically mapped flash: squashfs filesystem found at offset 1048576
Creating 6 MTD partitions on "APAPPS physically mapped flash":
0x00100020-0x003c7020 : "rootfs"
0x00050000-0x007e0000 : "upgrade"
0x007e0000-0x007f0000 : "rgdb"
0x00000000-0x00050000 : "RedBoot"
0x007f0000-0x00800000 : "Boot Config"
0x00000000-0x00800000 : "flash"
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing init memory: 312K
init started:  BusyBox v1.00 (2007.10.25-07:15+0000) multi-call binary
Starting pid 14, console /dev/tts/1: '/etc/init.d/rcS'
[/etc/init.d/S03config.sh]
Mounting proc and var ...
Inserting modules ...
Using /lib/modules/ixp400.ko
ixp400: module license 'unspecified' taints kernel.
Using /lib/modules/ixp400_eth.ko
ixp400_eth: Initializing IXP400 NPE Ethernet driver software v. 1.4A
ixp400_eth: CPU clock speed (approx) = 399 MHz
[warning] Warning: the NPE A component you specified does not exist
ixp400_eth: ixp0 is using NPEB and the PHY at address 4
ixp400_eth: ixp1 is using NPEC and the PHY at address 0
ixp400_eth: Use default MAC address 00:02:b3:01:01:01 for port 0
ixp400_eth: Use default MAC address 00:02:b3:02:02:02 for port 1
Using /lib/modules/ixp42x_access.ko
AP71/IXP42X GPIO/MII/RESET accesss driver !
Watchdog enabled!!
Using /lib/modules/ifresetcnt.ko
Network interface reset count v1.0
Start xmldb ...
[/etc/scripts/misc/profile.sh] get ...
[/etc/scripts/misc/defnodes.sh] ...
PHP [/etc/defnodes/S10setnodes.php] ...
[/etc/defnodes/S10setnodes.sh] ...
PHP [/etc/defnodes/S20setnodes.php] ...
PHP [/etc/defnodes/S40brand.php] ...
[/etc/templates/timezone.sh] ...
[/etc/templates/logs.sh] ...
[/var/run/logs_run.sh] ...
Set gpio 2 to output mode!
[/etc/init.d/S03config.sh] done!
[/etc/init.d/S10system.sh]
start Layout ...
[/etc/scripts/layout.sh] ...
[/var/run/layout_start.sh] ...
Start bridge layout ...
device ixp0 entered promiscuous mode
br0: port 1(ixp0) entering learning state
br0: topology change detected, propagating
br0: port 1(ixp0) entering forwarding state
start LAN ...
[/etc/templates/lan.sh] ...
[/var/run/lan_start.sh] ...
Bridge mode selected, LAN is disabled !
start web server ...
[/etc/templates/webs.sh] ...
[/var/run/webs_start.sh] ...
Starting HTTPD ...
start fresetd ...
Set gpio 3 to output mode!
enable LAN ports ...
[/etc/scripts/enlan.sh] ...
start WLAN ...
[/etc/templates/wlan.sh] start ...
[/var/run/wlan_start.sh] ...
Start WLAN interface ath0 ...
: cannot create
Using /lib/modules/wlan.ko
wlan: 0.8.4.2 (Atheros/multi-bss)
Using /lib/modules/wlan_xauth.ko
Using /lib/modules/wlan_ccmp.ko
Using /lib/modules/wlan_tkip.ko
Using /lib/modules/wlan_wep.ko
Using /lib/modules/wlan_acl.ko
wlan: mac acl policy registered
Using /lib/modules/wlan_scan_sta.ko
Using /lib/modules/ath_dfs.ko
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
Using /lib/modules/ath_hal.ko
ath_hal: 0.9.14.25 (AR5416, DEBUG, REGOPS_FUNC)
Using /lib/modules/ath_rate_atheros.ko
ath_rate_atheros: Version 2.0.1
Copyright (c) 2001-2004 Atheros Communications, Inc, All Rights Reserved
Using /lib/modules/ath_pci.ko
ath_pci: 0.9.4.5 (Atheros/multi-bss)
PCI: enabling device 0000:00:01.0 (0340 -> 0342)
Chan  Freq  RegPwr  HT   CTL CTL_U CTL_L DFS
   1  2412n     20  HT20  1    0    1     N
   1  2412n     20  HT40  1    0    1     N
   2  2417n     20  HT40  1    0    1     N
   3  2422n     20  HT40  1    1    1     N
   4  2427n     20  HT40  1    1    1     N
   5  2432n     20  HT40  1    1    1     N
   6  2437n     20  HT40  1    1    1     N
   7  2442n     20  HT40  1    1    1     N
   8  2447n     20  HT40  1    1    1     N
   9  2452n     20  HT40  1    1    1     N
  10  2457n     20  HT40  1    1    1     N
  11  2462n     20  HT40  1    1    1     N
  12  2467n     20  HT40  1    1    0     N
  13  2472n     20  HT40  1    1    0     N
wifi0: 11ng rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11ng MCS:  0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
wifi0: mac 13.2 phy 8.1 radio 13.0
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 5416 PCI: mem=0x48000000, irq=28 hw_base=0xc2820000
ar5416SetPowerPerRateTable() syn 2412 ctl 2412 ext 2412 is40 0
TPC Enabled 1 1 0
ar5416SetPowerPerRateTable() syn 2412 ctl 2412 ext 2412 is40 0
ath0
ath1
device ath0 entered promiscuous mode
device ath1 entered promiscuous mode
Error for wireless request "Set Bit Rate" (8B20) :
    SET failed on device ath0 ; Invalid argument.
ar5416SetPowerPerRateTable() syn 2412 ctl 2412 ext 2412 is40 0
TPC Enabled 1 1 0
Force rf_pwd_icsyndiv to 2 on 2412 (0 2)
ALPHA:[Wireless]Initiate Wireless success
ath_newstate: Resetting VAP dfswait_run
ath_newstate: Resetting VAP dfswait_run
Force rf_pwd_icsyndiv to 2 on 2437 (0 2)
ar5416SetPowerPerRateTable() syn 2437 ctl 2437 ext 2437 is40 0
ath_chan_set: Changing to channel 2437, Flags 30080, PF 0
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
ath_newstate: Resetting VAP dfswait_run
br0: port 3(ath1) entering learning state
br0: topology change detected, propagating
br0: port 3(ath1) entering forwarding state
ath_newstate: Resetting VAP dfswait_run
br0: port 1(ixp0) entering disabled state
ath_newstate: Resetting VAP dfswait_run
NF calibrated [ctl] [chain 0] is -91
NF calibrated [ext] [chain 0] is 0
NF calibrated [ctl] [chain 1] is -84
NF calibrated [ext] [chain 1] is 0
NF calibrated [ctl] [chain 2] is -92
NF calibrated [ext] [chain 2] is 0
Force rf_pwd_icsyndiv to 2 on 2412 (0 2)
ar5416SetPowerPerRateTable() syn 2412 ctl 2412 ext 2412 is40 0
ath_chan_set: Changing to channel 2412, Flags 10082, PF 0
: not found
Start WLAN interface ath0 .running..
[/var/run/multi_ssid_start.sh] ...
incorrect number of arguments for command

mtying

Manage aliases kept in FLASH memory
   alias name [value]
Set/Query the system console baud rate
   baudrate [-b <rate>]
Manage machine caches
   cache [ON | OFF]
Display/switch console channel
   channel [-1|<channel number>]
Compute a 32bit checksum [POSIX algorithm] for a range of memory
   cksum -b <location> -l <length>
Display disks/partitions.
   disks
Display (hex dump) a range of memory
   dump -b <location> [-l <length>] [-s] [-1|2|4]
Execute an image - with MMU off
   exec [-w timeout] [-b <load addr> [-l <length>]]
        [-r <ramdisk addr> [-s <ramdisk length>]]
        [-c "kernel command line"] [<entry_point>]
Manage FLASH images
   fis {cmds}
Manage configuration kept in FLASH memory
   fconfig [-i] [-l] [-n] [-f] [-d] | [-d] nickname [value]
Load image and decompress from flash
   fload [-l]
write image into flash
   fwrite [-f] flash base [-b] mem base [l] image size [e] entry point
Execute code at a location
   go [-w <timeout>] [-c] [-n] [entry]
Help about help?
   help [<topic>]
Display command history
   history
Start httpd
   httpd
Set/change IP addresses
   ip_address [-l <local_ip_address>[/<mask_len>]] [-h <server_address>]
Load a file
   load [-r] [-v] [-d] [-h <host>] [-p <TCP port>][-m <varies>] [-c <channel_number>]
        [-b <base_address>] <file_name>
Dump information on PCI devices
   lspci
Compare two blocks of memory
   mcmp -s <location> -d <location> -l <length> [-1|-2|-4]
Copy memory from one address to another
   mcopy -s <location> -d <location> -l <length> [-1|-2|-4]
Fill a block of memory with a pattern
   mfill -b <location> -l <length> -p <pattern> [-1|-2|-4]
Network connectivity test
   ping [-v] [-n <count>] [-l <length>] [-t <timeout>] [-r <rate>]
        [-i <IP_addr>] -h <IP_addr>
Reset the system
   reset
Set/Read MAC address for NPE ethernet ports
   set_npe_mac [-p <portnum>] [xx:xx:xx:xx:xx:xx]
Swap bytes in 16-bit or 32-bit words in a block of memory
   swab -b <location> -l <length> [-2|-4]
Display RedBoot version information
   version
Display (hex dump) a range of memory
   x -b <location> [-l <length>] [-s] [-1|2|4]

mtying

拆解图片