hg255d终极jtag解砖+100%成功刷0508-By_shcl版本

qqfans · 发表于 2012-5-15 11:09

本帖最后由 qqfans 于 2012-5-18 09:34 编辑

hg255d终极jtag解砖+100%成功刷0508-By_shcl 版本

一、hg255d终极jtag解砖
先看这上篇
http://www.openwrt.com.cn/bbs/forum.php?mod=viewthread&tid=9314&extra=page%3D1

在linter帮助下，已成功打印口jtga解砖hg255d，待写。。。

jtag接线图如下，2N3904这部分可以不要

二、100%成功刷0508-By_shcl版本，必须是电信uboot

老办法是：先刷1102-0x20000_hg255d-squashfs-tftp.checksum2.bin
然后OpenWrt固件直接进入“备份|刷机”界面中更新，此办法难成功，因为关键是网络会断开，所以无法正常刷下去，这种方式我试了无数次，换了不同的网口没一次成功

新办法：ttl下刷0508，有点技巧，可避免网络断开的问题，100％成功，看下图（有的图片是借鉴的）：
电信的uboot，ttl有显示的，都可按照此操作，无需要刷几个固件了，只一个0508-By_shcl固件就可以了
1、连接好TTL线，波特率为57600，电脑本地网卡设定为固定ip192.168.1.2

2、当TTL显示如下画面的时候，选择2，并按Y确认！（图1）

3、出现这个画面，直接两次回车，第三步输入0508固件名称（可改个短名称），输入后切记不要回车（图2）

4、打开tftp32，设置好

5、看下图，在TTL里回车，掌握好插网线的最佳时机～，也就是先回车，再插网线，中间相隔就那么几秒钟（图3）
我第一次刷出现：Error: out of flash address range 这个提示
同样的操作刷第2次就成功了

6、出现这个画面就表示在上传固件了，否则按照上述步骤重新操作（图4）

7、等待写入固件，系统重启后的成功画面（图5）

本人感觉：电信uboot + 20120508--华为HG255d无线路由器OpenWrt固件-By_shcl ,比改的uboot+OpenWrt-DreamBox 网络顺畅些

请不要胡乱输入以及粘贴、复制等方式灌水

请尊重作者、并共同维护网站的正常阅读，否则账户将会被限制发帖、回帖，并且积分可能会被清零，站内短信以及阅读权限等都会受到影响，谢谢。具体限制方式：https://www.right.com.cn/forum/thread-8307840-1-1.html

qqfans · 发表于 2012-5-15 11:09

占位1

qqfans · 发表于 2012-5-15 11:10

占位2

qqfans · 发表于 2012-5-15 11:10

占位2

sdl0127 · 发表于 2012-5-15 11:21

强力打断，支持楼主，造福大众

fax001 · 发表于 2012-5-15 11:44

昨天刚刷转了等楼主的教程

tjpm · 发表于 2012-5-15 13:08

我2个多月前刷砖了一个。。。
刷uboot的时候不小心中断了。。

等教程

2060 · 发表于 2012-5-15 15:07

这个好，占位。。。。

wsdy001 · 发表于 2012-5-15 16:19

那个jtag修砖教程不全，应增加并口jtag线做法，jtag软件环境搭建等内容

2060 · 发表于 2012-5-15 16:49

5、看下图，在TTL里回车，掌握好插网线的最佳时机～，也就是先回车，再插网线，中间相隔就那么几秒钟（图3）
这步也太快了来不及啊还是没成功

2060 · 发表于 2012-5-15 17:17

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

Header Payload scatter function is Disable !!

ETH_STATE_ACTIVE!!

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.

You choosed 2

eth_register
Eth0 (10/100-M)
enetvar=ethaddr,Eth addr:00:AA:BB:CC

D:10
00:AA:BB:CC

D:10:

eth_current->name = Eth0 (10/100-M)

2: System Load Linux Kernel then write to Flash via TFTP.
Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
Please Input new ones /or Ctrl-C to discard
      Input device IP (192.168.1.1) ==:

      Input server IP (192.168.1.2) ==:

      Input Linux Kernel filename () ==:0508.bin

netboot_common, argc= 3
*************buf = 0x81fcd620
**********NexTxPacket = 81fe46c0

NetTxPacket = 0x81FE46C0

NetRxPackets[0] = 0x81FE4CC0

NetRxPackets[1] = 0x81FE52C0

NetRxPackets[2] = 0x81FE58C0

NetRxPackets[3] = 0x81FE5EC0

NetRxPackets[4] = 0x81FE64C0

NetRxPackets[5] = 0x81FE6AC0

NetRxPackets[6] = 0x81FE70C0

NetRxPackets[7] = 0x81FE76C0

NetRxPackets[8] = 0x81FE7CC0

NetRxPackets[9] = 0x81FE82C0

NetRxPackets[10] = 0x81FE88C0

NetRxPackets[11] = 0x81FE8EC0

NetRxPackets[12] = 0x81FE94C0

NetRxPackets[13] = 0x81FE9AC0

NetRxPackets[14] = 0x81FEA0C0

NetRxPackets[15] = 0x81FEA6C0

NetRxPackets[16] = 0x81FEACC0

NetRxPackets[17] = 0x81FEB2C0

NetRxPackets[18] = 0x81FEB8C0

NetRxPackets[19] = 0x81FEBEC0

KSEG1ADDR(NetTxPacket) = 0xA1FE46C0

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

Header Payload scatter function is Disable !!

ETH_STATE_ACTIVE!!
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename '0508.bin'.

TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
checksum bad
checksum bad
checksum bad
checksum bad

ArpTimeoutCheck
Got ARP REPLY, set server/gtwy eth addr (00:30:18:a9:59:5d)
Got it
T T T T T T T T T T
Retry count exceeded; starting again
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename '0508.bin'.

TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (00:30:18:a9:59:5d)
Got it
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
checksum bad
T T T T T T T T T T
Retry count exceeded; starting again
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename '0508.bin'.

TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (00:30:18:a9:59:5d)
Got it
T T T T T T T T T T
Retry count exceeded; starting again

U-Boot 1.1.3 (Oct 12 2011 - 17:58:01)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb0000
config usb..

The Flash ID =0000227E
flash_protect ON: from 0xBF000000 to 0xBF01D46B
protect on 0
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.3
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM component: 128 Mbits
DRAM bus: 32 bit
Total memory: 32 MBytes
Flash component: NOR Flash
Date:Oct 12 2011  Time:17:58:01
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

##### The CPU freq = 384 MHZ ####

SDRAM bus set to 32 bit
SDRAM size =32 Mbytes

@Start First PHY modio study cmd.

eth_register
Eth0 (10/100-M)
enetvar=ethaddr,Eth addr:00:AA:BB:CC

D:10
00:AA:BB:CC

D:10:

eth_current->name = Eth0 (10/100-M)

netboot_common, argc= 2
*************buf = 0x81fcd620
**********NexTxPacket = 81fe46c0

NetTxPacket = 0x81FE46C0

NetRxPackets[0] = 0x81FE4CC0

NetRxPackets[1] = 0x81FE52C0

NetRxPackets[2] = 0x81FE58C0

NetRxPackets[3] = 0x81FE5EC0

NetRxPackets[4] = 0x81FE64C0

NetRxPackets[5] = 0x81FE6AC0

NetRxPackets[6] = 0x81FE70C0

NetRxPackets[7] = 0x81FE76C0

NetRxPackets[8] = 0x81FE7CC0

NetRxPackets[9] = 0x81FE82C0

NetRxPackets[10] = 0x81FE88C0

NetRxPackets[11] = 0x81FE8EC0

NetRxPackets[12] = 0x81FE94C0

NetRxPackets[13] = 0x81FE9AC0

NetRxPackets[14] = 0x81FEA0C0

NetRxPackets[15] = 0x81FEA6C0

NetRxPackets[16] = 0x81FEACC0

NetRxPackets[17] = 0x81FEB2C0

NetRxPackets[18] = 0x81FEB8C0

NetRxPackets[19] = 0x81FEBEC0

KSEG1ADDR(NetTxPacket) = 0xA1FE46C0

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

Header Payload scatter function is Disable !!

ETH_STATE_ACTIVE!!

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.

## Booting image at bf020000 ...
Image Name: Linux Kernel Image
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 4881560 Bytes =  4.7 MB
Load Address: 80000000
Entry Point:  803d0000
Verifying Checksum ... OK
  IH_COMP_LZMA Uncompressing Kernel Image ...

U-Boot 1.1.3 (Oct 12 2011 - 17:58:01)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb0000
config usb..

The Flash ID =0000227E
flash_protect ON: from 0xBF000000 to 0xBF01D46B
protect on 0
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.3
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM component: 128 Mbits
DRAM bus: 32 bit
Total memory: 32 MBytes
Flash component: NOR Flash
Date:Oct 12 2011  Time:17:58:01
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

##### The CPU freq = 384 MHZ ####

SDRAM bus set to 32 bit
SDRAM size =32 Mbytes

@Start First PHY modio study cmd.

eth_register
Eth0 (10/100-M)
enetvar=ethaddr,Eth addr:00:AA:BB:CC

D:10
00:AA:BB:CC

D:10:

eth_current->name = Eth0 (10/100-M)

netboot_common, argc= 2
*************buf = 0x81fcd620
**********NexTxPacket = 81fe46c0

NetTxPacket = 0x81FE46C0

NetRxPackets[0] = 0x81FE4CC0

NetRxPackets[1] = 0x81FE52C0

NetRxPackets[2] = 0x81FE58C0

NetRxPackets[3] = 0x81FE5EC0

NetRxPackets[4] = 0x81FE64C0

NetRxPackets[5] = 0x81FE6AC0

NetRxPackets[6] = 0x81FE70C0

NetRxPackets[7] = 0x81FE76C0

NetRxPackets[8] = 0x81FE7CC0

NetRxPackets[9] = 0x81FE82C0

NetRxPackets[10] = 0x81FE88C0

NetRxPackets[11] = 0x81FE8EC0

NetRxPackets[12] = 0x81FE94C0

NetRxPackets[13] = 0x81FE9AC0

NetRxPackets[14] = 0x81FEA0C0

NetRxPackets[15] = 0x81FEA6C0

NetRxPackets[16] = 0x81FEACC0

NetRxPackets[17] = 0x81FEB2C0

NetRxPackets[18] = 0x81FEB8C0

NetRxPackets[19] = 0x81FEBEC0

KSEG1ADDR(NetTxPacket) = 0xA1FE46C0

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

Header Payload scatter function is Disable !!

ETH_STATE_ACTIVE!!

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.

You choosed 2

eth_register
Eth0 (10/100-M)
enetvar=ethaddr,Eth addr:00:AA:BB:CC

D:10
00:AA:BB:CC

D:10:

eth_current->name = Eth0 (10/100-M)

2: System Load Linux Kernel then write to Flash via TFTP.
Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
Please Input new ones /or Ctrl-C to discard
      Input device IP (192.168.1.1) ==:

      Input server IP (192.168.1.2) ==:

      Input Linux Kernel filename () ==:0508.bin

netboot_common, argc= 3
*************buf = 0x81fcd620
**********NexTxPacket = 81fe46c0

NetTxPacket = 0x81FE46C0

NetRxPackets[0] = 0x81FE4CC0

NetRxPackets[1] = 0x81FE52C0

NetRxPackets[2] = 0x81FE58C0

NetRxPackets[3] = 0x81FE5EC0

NetRxPackets[4] = 0x81FE64C0

NetRxPackets[5] = 0x81FE6AC0

NetRxPackets[6] = 0x81FE70C0

NetRxPackets[7] = 0x81FE76C0

NetRxPackets[8] = 0x81FE7CC0

NetRxPackets[9] = 0x81FE82C0

NetRxPackets[10] = 0x81FE88C0

NetRxPackets[11] = 0x81FE8EC0

NetRxPackets[12] = 0x81FE94C0

NetRxPackets[13] = 0x81FE9AC0

NetRxPackets[14] = 0x81FEA0C0

NetRxPackets[15] = 0x81FEA6C0

NetRxPackets[16] = 0x81FEACC0

NetRxPackets[17] = 0x81FEB2C0

NetRxPackets[18] = 0x81FEB8C0

NetRxPackets[19] = 0x81FEBEC0

KSEG1ADDR(NetTxPacket) = 0xA1FE46C0

NetLoop,call eth_halt !

NetLoop,call eth_init !
Trying Eth0 (10/100-M)

Waitting for RX_DMA_BUSY status Start... done

Header Payload scatter function is Disable !!

ETH_STATE_ACTIVE!!
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename '0508.bin'.

TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck

ArpTimeoutCheck
T T T T T T T T T T
Retry count exceeded; starting again

ArpTimeoutCheck

ArpTimeoutCheck

ArpTimeoutCheck

ARP Retry count exceeded; starting again

ArpTimeoutCheck

ArpTimeoutCheck

ARP Retry count exceeded; starting again

ArpTimeoutCheck

ArpTimeoutCheck

ArpTimeoutCheck

ArpTimeoutCheck

qqfans · 发表于 2012-5-15 17:27

2060 发表于 2012-5-15 17:17
NetLoop,call eth_halt !

NetLoop,call eth_init !

网口没连上，最好观察网口，当电脑上的网口被路由器断开后，再插上网线

antons · 发表于 2012-5-15 18:05

我也同问jtag刷法，我感觉那个图中0欧电阻是不是应该都去掉，jtag我一直连接不上，郁闷

2060 · 发表于 2012-5-15 18:38

qqfans 发表于 2012-5-15 17:27
网口没连上，最好观察网口，当电脑上的网口被路由器断开后，再插上网线

没按回车前网线到底是插没插啊，教程说先不插，不插的话怎么能看到被路由器断开？

qqfans · 发表于 2012-5-15 19:36

2060 发表于 2012-5-15 18:38
没按回车前网线到底是插没插啊，教程说先不插，不插的话怎么能看到被路由器断开？

不插，xp下被路由器断开网络的话有提示

账号		自动登录	找回密码
密码			立即注册

hg255d终极jtag解砖+100%成功刷0508-By_shcl版本

请不要胡乱输入以及粘贴、复制等方式灌水

本帖子中包含更多资源

欢迎大家光临恩山无线论坛 /1