Serial
115200
8N1
None
None
########################################################################
Boot Log Original Firmware
U-Boot 1.1.4 (Mar 1 2016 - 21:50:02)
ap143-2.0 - Honey Bee 2.0
DRAM: 32 MB
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment
In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ----> MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x5cb9a100
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
Uncompressing Kernel Image ... OK
Starting kernel ...
Booting QCA953x
▒inux version 2.6.31 (tomcat@buildserver) (gcc version 4.3.3 (GCC) ) #304 Tue Mar 1 21:52:40 CST 2016
Ram size passed from bootloader =32M
flash_size passed from bootloader = 8
CPU revision is: 00019374 (MIPS 24Kc)
ath_sys_frequency: cpu apb ddr apb cpu 650 ddr 392 ahb 216
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),64k(config),64k(art) mem=32M
PID hash table entries: 128 (order: 7, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 27872k/32768k available (1888k kernel code, 4896k reserved, 453k data, 120k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 433.15 BogoMIPS (lpj=866304)
Mount-cache hash table entries: 512
****************ALLOC***********************
Packet mem: 8027b420 (0x200000 bytes)
********************************************
NET: Registered protocol family 16
ath_pcibios_init: bus 0
***** Warning PCIe 0 H/W not found !!!
registering PCI controller with io_map_base unset
bio: create slab
at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 54
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTD device ath-nor0
Creating 5 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000120000 : "kernel"
0x000000120000-0x0000007e0000 : "rootfs"
0x0000007e0000-0x0000007f0000 : "config"
0x0000007f0000-0x000000800000 : "art"
->Oops: flash id 0xc84017 .
TCP cubic registered
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
athwdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 120k freed
init started: BusyBox v1.01 (2016.03.01-13:56+0000) multi-call binary
This Board use 2.6.31
xt_time: kernel timezone is -0000
nf_conntrack version 0.5.0 (512 buckets, 5120 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.3
insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/af_key.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xfrm_user.ko': No such file or directory
(none) mips #30vlan init params sucess.
4 Tue Mar 1 21:5qca955x_GMAC: Length per segment 1536
2:40 CST 2016 (n953x_GMAC: qca953x_gmac_attach
one)
(none) logLink Int Enabled
in: qca953x_set_gmac_caps CHECK DMA STATUS
mac:1 Registering S27....
qca955x_GMAC: RX TASKLET - Pkts per Intr:18
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 511
qca955x_GMAC: Max rx descriptor count : 128
qca955x_GMAC: Mac capability flags : 2D81
953x_GMAC: qca953x_gmac_attach
Link Int Enabled
qca953x_set_gmac_caps CHECK DMA STATUS
mac:0 Registering S27....
qca955x_GMAC: RX TASKLET - Pkts per Intr:18
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 511
qca955x_GMAC: Max rx descriptor count : 128
qca955x_GMAC: Mac capability flags : 2581
athr_gmac_ring_alloc Allocated 8176 at 0x81cdc000
athr_gmac_ring_alloc Allocated 2048 at 0x81ef7000
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth1: link is not ready
athr_gmac_ring_alloc Allocated 8176 at 0x81cd6000
athr_gmac_ring_alloc Allocated 2048 at 0x81e51800
HONEYBEE ----> S27 PHY MDIO
ATHRS27: resetting s27
ATHRS27: s27 reset done
++++ athrs27_igmp_setup once
port0 vid is 0xb000b
port1 vid is 0x30003
port2 vid is 0x50005
port3 vid is 0x70007
port4 vid is 0x90009
++ PVID: 0x0000000b, bitmap: 0x0000001f
++ PVID: 0x00000003, bitmap: 0x0000001f
++ PVID: 0x00000005, bitmap: 0x0000001f
++ PVID: 0x00000007, bitmap: 0x0000001f
++ PVID: 0x00000009, bitmap: 0x0000001f
vtable vid: 0x00000002, bitmap 0x00000003
vtable vid: 0x00000004, bitmap 0x00000005
vtable vid: 0x00000006, bitmap 0x00000007
vtable vid: 0x00000008, bitmap 0x00000009
vtable vid: 0x0000000a, bitmap 0x0000000b
vtable vid: 0x0000000c, bitmap 0x0000000d
vtable vid: 0x0000000e, bitmap 0x0000000f
vtable vid: 0x00000010, bitmap 0x00000011
vtable vid: 0x00000012, bitmap 0x00000013
vtable vid: 0x00000014, bitmap 0x00000015
vtable vid: 0x00000016, bitmap 0x00000017
vtable vid: 0x00000018, bitmap 0x00000019
vtable vid: 0x0000001a, bitmap 0x0000001b
vtable vid: 0x0000001c, bitmap 0x0000001d
vtable vid: 0x0000001e, bitmap 0x0000001f
vtable vid: 0x00000020, bitmap 0x00000021
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
device eth0 entered promiscuous mode
athr_gmac_ring_free Freeing at 0x81cdc000
athr_gmac_ring_free Freeing at 0x81ef7000
athr_gmac_ring_alloc Allocated 8176 at 0x81c58000
athr_gmac_ring_alloc Allocated 2048 at 0x81ef7000
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth1: link is not ready
athr_gmac_ring_free Freeing at 0x81cd6000
athr_gmac_ring_free Freeing at 0x81e51800
[set_mac_addr] last byte of lan mac is 0xb8
[br_multicast] update lan dev id to ffffffb8
athr_gmac_ring_alloc Allocated 8176 at 0x81c72000
athr_gmac_ring_alloc Allocated 2048 at 0x81e51800
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
adf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2-00082-4 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
Enterprise mode: 0x03fc0000
Restoring Cal data from Flash
ath_get_caps[6191] rx chainmask mismatch actual 3 sc_chainmak 0
ath_get_caps[6166] tx chainmask mismatch actual 3 sc_chainmak 0
wifi0: Atheros ???: mem=0xb8100000, irq=2
ath_pci: 10.2-00082-4 (Atheros/multi-bss)
VAP device ath0 created
Setting Max Stations:33
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
Set freq vap stop send + 815ac000
Set freq vap stop send -815ac000
Set wait done --815ac000
Set freq vap stop send + 815ac000
Set freq vap stop send -815ac000
Set wait done --815ac000
athr_gmac_ring_free Freeing at 0x81c72000
athr_gmac_ring_free Freeing at 0x81e51800
br0: port 1(eth0) entering disabled state
[set_mac_addr] last byte of lan mac is 0xb7
[br_multicast] update lan dev id to ffffffb7
athr_gmac_ring_alloc Allocated 8176 at 0x81c52000
athr_gmac_ring_alloc Allocated 2048 at 0x81e51800
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
device ath0 entered promiscuous mode
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
br0: port 2(ath0) entering disabled state
DES SSID SET=etwork-2688333bd569784
br0: port 2(ath0) entering forwarding state
====>>>>wlanBootupAll ok
br0: port 2(ath0) entering disabled state
DES SSID SET=FPT
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1
br0: port 2(ath0) entering disabled state
DES SSID SET=FPT Telecom 03B8
br0: port 2(ath0) entering forwarding state
qca955x_GMAC: GE0 RX DMA ENABLE
blockWps_proc_write 1228: write value = 0
################################################################################
Printenv của U-Boot
ap143-2.0> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:32k(u-boot1),32k(u-boot2),3008k(rootfs),896k(uImage),64k(mib0),64k(ART)
bootcmd=bootm 0x9f020000
bootdelay=1
baudrate=115200
ethaddr=0xba:0xbe:0xfa:0xce:0x08:0x41
ipaddr=192.168.1.1
serverip=192.168.1.10
dir=
lu=tftp 0x80060000 ${dir}tuboot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap143-2.0${bc}-jffs2&&erase 0x9f010000 +$filesize&&cp.b $fileaddr 0x9f010000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f300000 +$filesize&&cp.b $fileaddr 0x9f300000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0
################################################################################
Boot Log của Gargoyle
ap143-2.0> bootm 0x9f020000
## Booting image at 9f020000 ...
Uncompressing Kernel Image ... OK
Starting kernel ...
[ 0.000000] Linux version 3.18.75 (eric@Osiris) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r49389) ) #2 Wed Oct 25 11:58:01 EDT 2017
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9533 ver 2 rev 0
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 02000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x00000000-0x01ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x00000000-0x01ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x00000000-0x01ffffff]
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
[ 0.000000] Kernel command line: board=TL-WR841N-v11 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 28716K/32768K available (2428K kernel code, 140K rwdata, 284K rodata, 276K init, 184K bss, 4052K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:51
[ 0.000000] Clocks: CPU:650.000MHz, DDR:391.186MHz, AHB:216.666MHz, Ref:25.000MHz
[ 0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[ 0.060000] pid_max: default: 32768 minimum: 301
[ 0.060000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.070000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.080000] NET: Registered protocol family 16
[ 0.080000] MIPS: machine is TP-LINK TL-WR841N/ND v11
[ 0.540000] Switched to clocksource MIPS
[ 0.540000] NET: Registered protocol family 2
[ 0.550000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.550000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.560000] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.570000] TCP: reno registered
[ 0.570000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.580000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.580000] NET: Registered protocol family 1
[ 0.590000] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.600000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.610000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.620000] msgmni has been set to 56
[ 0.620000] io scheduler noop registered
[ 0.630000] io scheduler deadline registered (default)
[ 0.630000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.640000] console [ttyS0] disabled
▒ 0.670000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a 16550A
[ 0.670000] console [ttyS0] enabled
[ 0.670000] console [ttyS0] enabled
[ 0.680000] bootconsole [early0] disabled
[ 0.680000] bootconsole [early0] disabled
[ 0.690000] m25p80 spi0.0: found gd25q64, expected m25p80
[ 0.700000] m25p80 spi0.0: gd25q64 (8192 Kbytes)
[ 0.700000] 5 tp-link partitions found on MTD device spi0.0
[ 0.710000] Creating 5 MTD partitions on "spi0.0":
[ 0.710000] 0x000000000000-0x000000020000 : "u-boot"
[ 0.720000] 0x000000020000-0x000000119344 : "kernel"
[ 0.730000] 0x000000119344-0x0000007f0000 : "rootfs"
[ 0.730000] mtd: device 2 (rootfs) set to be root filesystem
[ 0.740000] 1 squashfs-split partitions found on MTD device rootfs
[ 0.740000] 0x000000380000-0x0000007f0000 : "rootfs_data"
[ 0.750000] 0x0000007f0000-0x000000800000 : "art"
[ 0.760000] 0x000000020000-0x0000007f0000 : "firmware"
[ 0.800000] libphy: ag71xx_mdio: probed
[ 1.390000] ag71xx-mdio.1: Found an AR934X built-in switch
[ 1.430000] eth0: Atheros AG71xx at 0xba000000, irq 5, mode:GMII
[ 2.030000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd042, driver=Generic PHY]
[ 2.040000] eth1: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[ 2.050000] TCP: cubic registered
[ 2.050000] NET: Registered protocol family 17
[ 2.050000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 2.070000] Bridge firewalling registered
[ 2.070000] 8021q: 802.1Q VLAN Support v1.8
[ 2.090000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[ 2.090000] Freeing unused kernel memory: 276K
[ 3.070000] init: Console is alive
[ 3.070000] init: - watchdog -
[ 5.110000] init: - preinit -
[ 5.670000] random: procd urandom read with 8 bits of entropy available
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 7.750000] eth0: link up (1000Mbps/Full duplex)
[ 8.940000] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[ 8.970000] eth0: link down
[ 8.980000] procd: - early -
[ 8.990000] procd: - watchdog -
[ 9.720000] procd: - ubus -
[ 10.740000] procd: - init -
Please press Enter to activate this console.
[ 11.790000] tun: Universal TUN/TAP device driver, 1.6
[ 11.790000] tun: (C) 1999-2004 Max Krasnyansky
[ 11.800000] gre: GRE over IPv4 demultiplexor driver
[ 11.810000] ip_gre: GRE over IPv4 tunneling driver
[ 11.820000] nf_conntrack version 0.5.0 (453 buckets, 1812 max)
[ 11.840000] Hooked IMQ after mangle on PREROUTING
[ 11.840000] Hooked IMQ after nat on POSTROUTING
[ 11.850000] IMQ driver loaded successfully. (numdevs = 2, numqueues = 1, imq_dev_accurate_stats = 1)
[ 11.860000] Hooking IMQ before NAT on PREROUTING.
[ 11.860000] Hooking IMQ after NAT on POSTROUTING.
[ 11.880000] u32 classifier
[ 11.880000] input device check on
[ 11.880000] Actions configured
[ 11.890000] Mirror/redirect action on
[ 11.960000] Loading modules backported from Linux version v4.4-rc5-1913-gc8fdf68
[ 11.970000] Backport generated by backports.git backports-20151218-0-g2f58d9d
[ 12.000000] Ebtables v2.0 registered
[ 12.010000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 12.100000] Netfilter messages via NETLINK v0.30.
[ 12.210000] xt_time: kernel timezone is -0000
[ 12.370000] PPP generic driver version 2.4.2
[ 12.380000] PPP MPPE Compression module registered
[ 12.390000] NET: Registered protocol family 24
[ 12.400000] PPTP driver version 0.8.5
[ 12.500000] ieee80211 phy0: Atheros AR9531 Rev:2 mem=0xb8100000, irq=47
[ 26.380000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[ 26.380000] jffs2_build_filesystem(): unlocking the mtd device... done.
[ 26.390000] jffs2_build_filesystem(): erasing all blocks after the end marker...
[ 27.030000] device eth0 entered promiscuous mode
[ 29.140000] eth0: link up (1000Mbps/Full duplex)
[ 29.140000] br-lan: port 1(eth0) entered forwarding state
[ 29.150000] br-lan: port 1(eth0) entered forwarding state
[ 31.150000] br-lan: port 1(eth0) entered forwarding state
[ 36.150000] done.
[ 36.160000] jffs2: notice: (2238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 76.410000] random: nonblocking pool is initialized
[ 216.480000] ipt_bandwidth: timezone shift of 60 minutes detected, adjusting
[ 216.490000] old minutes west=0, new minutes west=-60
################################################################################
WR841N v11.0 Gargoyle firmware
Trên mạch dùng mỏ hàn Tháo bỏ R26 và nối R23 vào.
setenv ipaddr 192.168.1.10 (router)
setenv serverip 192.168.1.2 (PC)
Flash qua serial
```
tftpboot 0x80060000 firm.bin
erase 0x9f020000 +0x3c0000
cp.b 0x80060000 0x9f020000 0x3c0000
bootm 0x9f020000
```
