找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
广告投放联系QQ68610888
查看: 476|回复: 6

大神么50块全新 typec紧凑型的4G cpe 路由器mtk7628能否一战

[复制链接]
发表于 2024-9-8 12:06 | 显示全部楼层 |阅读模式



求助各位大神,


最近入手一个lg x300 非常紧凑型的4G cpe 路由器,很多个公司有做,还歪果也做 ,同样外观,应该方案同样,
拼西西 50块左右,但是内置esim卡,应该也有远控,
CPU是 mtk7628想着是openwrt系统 ,但是可能猜错,后面有ttl 开机的启动日志,,望各位大神分析下,看还有机会解锁不,




打算做车载wifi ,usb-c直供电
telnet 端口是有反应的,但是密码猜不到,
另外telnet与平常telnet有点不一样,密码爆破不行,


运营商新版光猫的远控、TR069

开机指向open.cwmp.tenbay.cn:8000




能否特破telnet
能否刷机













**************************启动日志****************************


[BEGIN] 2024/9/7 12:23:15
[04040C0E][04040C09]
DDR Calibration DQS reg = 00008689


U-Boot 1.1.3 (Nov 22 2018 - 11:34:00)

Board: Ralink APSoC DRAM:   8 MB
rt2880 uboot v0.00e04 05/25/2006
SERIAL_CLOCK_DIVISOR =16
kaiker,,CONFIG_BAUDRATE =57600
SDRAM SIZE:00800000
Top of RAM usable for U-Boot at: 80800000
Reserving 263k for U-Boot at: 807bc000
Reserving 256k for malloc() at: 8077c000
Reserving 44 Bytes for Board Info at: 8077bfd4
Reserving 36 Bytes for Global Data at: 8077bfb0
Reserving 128k for boot params() at: 8075bfb0
Stack Pointer at: 8075bf98
relocate_code Pointer at: 807bc000
Now running in RAM - U-Boot at: 807bc000

monitor_flash_len =76796
Command "mdio": 0xbc006c70 => 0x807c2c70
Command "loadb": 0xbc00c800 => 0x807c8800
flash manufacture id: 68, device id 40 15
find flash: BH25D16A, flash size: 2048KB
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 64 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 8 MBytes
Flash component: SPI Flash
Date:Nov 22 2018  Time:11:34:00
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

##### The CPU freq = 575 MHZ ####
estimate memory size =8 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
   9: Load Boot Loader code then write to Flash via TFTP.                                                                                                                   0
   
3: System Boot system code via Flash.
## Booting image at bc018000 ...
   Image Name:   zxrouter
   Image Type:   MIPS Linux Standalone Program (uncompressed)
   Data Size:    948976 Bytes = 926.7 kB
   Load Address: 80500000
   Entry Point:  80500000
   Verifying Checksum ... OK
OK
  ZzOK
      diag init
attach irq vector = 5 isr =0x80242568
Init device '/dev/ttydiag'
Init device '/dev/tty0'
Init device '/dev/tty1'
Init device '/dev/haldiag'
Init device '/dev/ser0'
ra305x SERIAL init - dev: b0000c00.26
device '/dev/ser1'isr =0x80021204
ra305x SERIAL init - dev: b0000d00.27
attach irq vector = 27 isr =0x80021204
Init device '/dev/ser2'
ra305x SERIAL init - dev: b0000e00.28
attach irq vector = 28 isr =0x80021204
[cyg_net_init] Init: mbinit(0x00000000)
[cyg_net_init] Init: cyg_net_init_devs(0x00000000)
Init device 'ra305x_auto0'
ifra305x eth2: init pnde=802cf8f0, sc=802a91b0, ifp=802a953c
ifra305x: driver init
ifra305x: init numtxd=128 txd-base=800 at a02dfa00
ifra305x: init num_rxd=64 rxd_base=900 at a02e0200
attach irq vector = 3 isr =0x800389c8
attach irq vector = 23 isr =0x80038970
flash manufacture id: 68, device id 40 15
flash: BH25D16A
CFG_load: flash offset=2788, len=13c4
cfg_parse: add cfg item=377 (5060 bytes)
CFG_load: flash read 377 items(5060 bytes) into ram
cfg_parse: null config!
cfg_load_static: read-only 2 items(48 bytes) into ram
CFG_load: total 379 items(5108 bytes)
cfg_parse_wlan: parse 3079 bytes!
Parsing WIFI configuration succeeds
opmode is 1
auto0 mac: 888888888888888888888888
Init device 'ra305x_eth0'
ifra305x eth0: init pnde=802cf900, sc=802a92d0, ifp=802a9584
Init device 'ra305x_eth1'
ifra305x eth1: init pnde=802cf910, sc=802a93f0, ifp=802a95cc
Init device 'ra0'


=== pAd = 0x00000, size = 1042936 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
rt_ecos_init:150
RtmpChipOpsHook(748): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1189):2), pChipCap->fw_len(63984)
mt_bcn_buf_init(289): Not support for HIF_MT yet!
<--mt7628_init()
get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=ra
attach irq vector = 4 isr =0x
Init device 'ra1'
Init device 'ra2'
Init device 'ra3'
Init device 'ra4'
Init device 'ra5'
Init device 'ra6'
Init device 'ra7'
Init device 'usbs_eth0'
usb0 mac: 00:00:11:11:22:22
Init device 'apcli0'
Init device 'wds0'
Init device 'wds1'
Init device 'wds2'
Init device 'wds3'
[cyg_net_init] Init: loopattach(0x00000000)
[cyg_net_init] Init: ifinit(0x00000000)
[cyg_net_init] Init: domaininit(0x00000000)
[cyg_net_init] Init: cyg_net_add_domain(0x802cd8c8)
New domain internet at 0x00000000
IP Filter: v3.4.31 initialized.  Default = pass all, Logging = disabled
[cyg_net_init] Init: cyg_net_add_domain(0x802cd580)
New domain route at 0x00000000
[cyg_net_init] Init: call_route_init(0x00000000)
[cyg_net_init] Init: sysctl_register_all(0x00000000)
[cyg_net_init] Done

[cpuload_init]:calibration=9658958sn check is success!
Operation Mode: Gateway
[ra305x_close]====>
[ra305x_close]<====
[ra305x_restart]====>
ifra305x eth0: init pnde=802cf900, sc=802a92d0, ifp=802a9584
ifra305x: driver init
ifra305x: init numtxd=128 txd-base=800 at a02dfa00
ifra305x: init num_rxd=64 rxd_base=900 at a02e0200
ifra305x eth1: init pnde=802cf910, sc=802a93f0, ifp=802a95cc
ifra305x eth2: init pnde=802cf8f0, sc=802a91b0, ifp=802a953c
opmode is 1
auto0 mac: 888888888888888888888888
ifra305x1: start
ifra305x2: start
[ra305x_restart]<====
ifra305x0: start
ifra305x0: start
-----------------------------------------
eth0: Get IP by manual
IP address:169.254.254.254
MASK:255.255.0.0
Broadcast:169.254.255.255
Gateway:169.254.254.1
Server:0.0.0.0
mtu:0
Domain Name:
-----------------------------------------
interface eth0 init_net successed!
[DOT1X] Dot1x_Reboot
[DOT1X] DOT1X_Stop
[DOT1X] 1x daemon not running interfaces.rtapd == NULL
BRIDGE 020214 loaded
auto0: promiscuous mode enabled
ifra305x2: start
eth0: promiscuous mode enabled
-----------------------------------------
Bridge Id: 1
  eth0: if_flags=0xffff8943 bdg_flags=0x5
  auto0: if_flags=0xffff8943 bdg_flags=0x5
(max cache: 128, timeout: 300)
-----------------------------------------
DNS_daemon
dnsMasqstart
interfaceGet(): bind socket successful on 169.254.254.254:53
serverInit(): DNS Server List 0. 172.16.0.1:53
[00000286][SYS] Ver 2.1.2.121  Mon May 15 14:43:01 2023
CMD>[DOT1X] Dot1x_Reboot
[DOT1X] DOT1X_Stop
[DOT1X] 1x daemon not running interfaces.rtapd == NULL
Watchdog_init:178 Last reboot because watchdog reset, stat=0xc0030200.
Started WatchDog Timer.
[00000290][SYS] now_time: 110763, time type: 1, now_time_second: 24363, reboot_time: 14400
[00000292][SYS] reboot remaining_time: 76436
[00000292][CWMP] cwmp sleep 568 second, buf: 109104217, seed: 109104217
ifra305x2: start
ifra305x2: start
-----------------------------------------
auto0: Get IP by manual
IP address:172.16.0.1
MASK:255.255.0.0
Broadcast:172.16.255.255
Gateway:0.0.0.0
Server:0.0.0.0
mtu:0
Domain Name:
-----------------------------------------
interface auto0 init_net successed!
[DOT1X] Dot1x_Reboot
[DOT1X] DOT1X_Stop
[DOT1X] 1x daemon not running interfaces.rtapd == NULL
CFG_commit: 0 update!
zweb_location:ffb30
dnsMasqstop
dnsMasqstart
interfaceGet(): bind socket successful on 172.16.0.1:53
interfaceGet(): bind socket successful on 169.254.254.254:53
serverInit(): DNS Server List 0. 172.16.0.1:53

Invalid User Name
Login as:root
Password:****
Access denied

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?立即注册

×
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
发表于 2024-9-8 13:09 | 显示全部楼层
想着是openwrt系统

你想多了,闪存2M 内存8M,现在连linux内核都塞不下
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

 楼主| 发表于 2024-9-8 20:48 | 显示全部楼层
有人知道一般这种是什么系统吗?关键字
Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
   9: Load Boot Loader code then write to Flash via TFTP.   
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

发表于 2024-9-8 21:26 | 显示全部楼层
xwork估计
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

发表于 2024-9-9 10:14 来自手机 | 显示全部楼层
闪存和内存该改大还差不多

点评

够用即可,网速比起其他的4G cpe确实快,但是总感觉超级后台telnet密码没有拿到总感觉不爽  详情 回复 发表于 2024-9-10 11:08
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

 楼主| 发表于 2024-9-10 11:08 | 显示全部楼层
optical_cat 发表于 2024-9-9 10:14
闪存和内存该改大还差不多

够用即可,网速比起其他的4G cpe确实快,但是总感觉超级后台telnet密码没有拿到总感觉不爽
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

发表于 2024-9-12 00:25 | 显示全部楼层
支持一下
只谈技术、莫论政事!(点击见详情) | 恩山无线论坛欢迎您的来访,请互相尊重、友善交流,建议保持一颗平常心看待网友的评论,切勿过度反应。
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

关闭

欢迎大家光临恩山无线论坛上一条 /1 下一条

有疑问请添加管理员QQ86788181|手机版|小黑屋|Archiver|恩山无线论坛(常州市恩山计算机开发有限公司版权所有) ( 苏ICP备05084872号 )

GMT+8, 2024-9-22 01:59

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

| 江苏省互联网有害信息举报中心 举报信箱:js12377 | @jischina.com.cn 举报电话:025-88802724 本站不良内容举报信箱:68610888@qq.com

快速回复 返回顶部 返回列表