Skip to content

Telekom Speedport Smart 4 Typ B

J. Neuschäfer edited this page Mar 2, 2026 · 1 revision
photo of device back side photo of device front side

The Deutsche Telekom Speedport Smart 4 Typ B is a CPE DSL modem and WiFi router deployed by Deutsche Telekom.

Ports

  • DSL
  • 2.5 Gbps Ethernet (LAN 1)
  • 3x 1 Gpbs Ethernet (LAN 2-4)
  • USB host
  • 12 V DC in
  • TAE socket
  • status display, 3 buttons
  • WLAN, DECT
  • serious thermal design

Chips

photo of PCB top side

Sadly, there is no silk screen layer. The labels that due exist are constructed as gaps in the solder mask.

UART

cropped photo of PCB bottom side with annotations to show the location of RX, TX and RST signals

UART RX/TX (3.3V, 115200 baud) as well as SoC reset are exposed on pads next to the SoC's cooling shield on the bottom side.

Boot log
----
BTRM
V1.2
L1CD
MMUI
MMUA
DATA
ZBBS
MAIN
OTP?
REF?
REFP
RTF?
RTFP
OTPP
FSBT
EMMC
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
AHD?
ROT?
ROTA
MID?
MIDP
AHDP
SBI?
SBIA
PASS
----
HELO
5.0207p1-1.0.38-163.243
CPU0
L1CD
MMUI
MMUB
ZBBS
MAIN
SEND
Boot Strap Register:  0x3fffff70
rom_emmc: emmc initialized!
rom_emmc: MCB from NVRAM: 0x0004152b
NVRAM memcfg 0x4152b
MCB chksum 0x81f33775, config 0x4152b

MemsysInit hpg0_generic_aarch64 3.5.0.1 20170510
DDR3
80835180 80180000 801A0000 00000000 00000000 016042EF
MCB rev=0x00000501 Ref ID=0x042EF Sub Bld=0x016
Dram Timing 14-14-14

DDR3-2133 CL14 total 1024MB 2 16bits part[s] %1 SSC

Add/Ctl Alignment
Coarse Adj=0x087 deg, cmd steps=0x0A6
reg 0x801A0090 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A0094 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A0098 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A009C set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00A0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00A4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00A8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00AC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00B0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00B4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00B8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00BC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00C0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00C4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00C8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00CC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00D0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00D4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00D8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00DC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00E0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00E4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00E8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00EC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00F0 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00F4 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00F8 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A00FC set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A0100 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A0108 set to VDL 0x03E with Fine Adj=0x01 deg
reg 0x801A010C set to VDL 0x03E with Fine Adj=0x01 deg
HP RX TRIM
itrim = 0x0
lstrim = 0x9

ZQ Cal HP PHY
 R in Ohm
 P: Finger=0x348 Term=0x78 Drv=0x28
 N: Finger=0x300 Term=0x80 Drv=0x28

PLL Ref(Hz)=0x02FAF080 UI STEPS=0x053
 DDR CLK(MHz)=0x425 WL CLK dly(ps)=0x0C8 bitT(ps)=0x1D7 VDLsize(fs)=0x162A CLK_VDL=0x023

SHMOO 28nm
801A0000 80180800 00000000 00020000 00000001

Shmoo WL

One UI Steps : 0x5E

auto-clk result = 00B (filter=0C steps)
initial CLK shift = 023
final CLK shift   = 00B

   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 S--------------X------------------------------------------------------------------------------
01 S-----------------------X---------------------------------------------------------------------
02 S---------------------------------------------X-----------------------------------------------
03 S----------------------------------------------------------X----------------------------------

Shmoo RD En
FORCED WR ODT = 0x00001800
 DQSN DRIVE PAD CONTROL (from) (to)
 B0 00039AB3 00079AB3
 B1 00039AB3 00079AB3
 B2 00039AB3 00079AB3
 B3 00039AB3 00079AB3
B0 RISE UI=1 VDL=36 PICK UI=2 VDL=36
B1 RISE UI=1 VDL=23 PICK UI=2 VDL=23
B2 RISE UI=1 VDL=47 PICK UI=2 VDL=47
B3 RISE UI=1 VDL=27 PICK UI=2 VDL=27
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 --S---------------------------------------------------X+++++++++++++++------------------------
01 --S--------------------------------X+++++++++++++++-------------------------------------------
02 --S------------------------------------------------------------------+-X+++++++++++++++-------
03 --S------------------------------------X+++++++++++++++---------------------------------------

Shmoo RD DQ NP
DQS :
B0 VDL=53 ok
B1 VDL=53 ok
B2 VDL=53 ok
B3 VDL=53 ok
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 ------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
01 --------------------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++--------
02 ------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++---------
03 -----------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
04 -----------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++----------
05 ------------------+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++------------
06 -----------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
07 ------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
08 ---------------------++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++--------
09 --------------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-----
10 ---------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-----
11 ----------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-----
12 ----------------------+-++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++----
13 ----------------------++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++-------
14 ---------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++------
15 ------------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-------
16 -----------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
17 ---------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-----
18 ---------------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
19 --------------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----
20 -----------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------
21 ----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++------
22 ---------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--
23 ----------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------
24 ----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++------
25 -------------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-----
26 ----------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--------
27 ----------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++-----
28 --------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----------
29 ----------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--------
30 ------------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
31 --------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++--------

Shmoo RD DQ P
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 -------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++--------
01 ----------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--------
02 --------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---------
03 ------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++--------
04 ----------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++----------
05 ------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-----------
06 -----------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++--------
07 -------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++--------
08 ------------+-+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++--------
09 --------------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++-----
10 --------------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++-----
11 ----------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++-----
12 -----------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
13 --------------+-+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-------
14 --------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++------
15 ------------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++-------
16 -------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----
17 --------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
18 --------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
19 --------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
20 ------------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
21 -----------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++------
22 --------------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++
23 -----------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-------
24 ----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++------
25 -------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----
26 ----------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--------
27 -----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++-----
28 -------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----------
29 ---------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++--------
30 -----------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
31 --------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++--------

Shmoo RD DQ N
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 ------------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++------
01 --------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-------
02 -------------------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++---------
03 ----------------+-+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
04 -----------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------
05 ------------------+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++------------
06 -----------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
07 ------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------
08 ----------------------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++------
09 --------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
10 --------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---
11 ----------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-----
12 ------------------------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--
13 ----------------------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-----
14 ----------------------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++------
15 -------------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++------
16 ----------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++----
17 ------------------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-----
18 ------------------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++---
19 ------------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
20 ---------------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++---------
21 ----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++------
22 ------------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++--
23 ---------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++----------
24 --------------+++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++----
25 ------------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++----
26 ----------------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++------
27 ---------------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++----
28 ------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++--------
29 --------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++------
30 -----------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++---
31 -------------++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++-------

RD DQS adjustments :
BL0: Start: 0x53 Final: 0x53
BL1: Start: 0x53 Final: 0x53
BL2: Start: 0x53 Final: 0x53
BL3: Start: 0x53 Final: 0x53

Shmoo WR DQ
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 ----++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------------------
01 -------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++---------------------
02 ------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------------------
03 ------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++----------------------
04 -----+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++------------------
05 -----+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++----------------------
06 ----+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++----------------------
07 --------++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++---------------------
08 -------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++---------------------
09 ------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-------------------
10 -----+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++------------------
11 ----------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------------
12 -----------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------------
13 ----------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++----------------
14 --------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----------------
15 ------++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++---------------
16 ----------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-----------------
17 ------------++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++-----------------
18 ----------------++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++-------------
19 --------------++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++--------------
20 -----------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------------
21 ----------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------------
22 ------------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-------------
23 --------+++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++-------------------
24 -------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++----------------
25 -----------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++--------------
26 --------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-----------------
27 ----------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++---------------
28 ------++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-------------------
29 -------+++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++-------------------
30 ----------+++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-------------
31 -------++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-----------------

Shmoo WR DM
WR DM
   0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999
   0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123
00 -++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++-----------------------
01 --++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
02 -----------+++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++-----------
03 ----++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++-------------
DDR test done successfully

rom:emmc: GPT init success!
...Searching emmcflash0.mdata1_1 for seq_num
Image 1 has Sequence number 999, committed: 1
...Searching emmcflash0.mdata2_1 for seq_num
Image 2 has Sequence number 000, committed: 1
Loaded secram.000 (110480 bytes) from latest image in emmcflash0.bootfs2 ...
rom_emmc: emmc_ready_boot
BTLR
ATH?
PASS
DECP
DEFL
EMM5


Base: 5.2_07p2
CFE version 1.0.38-164.255.3 for BCM963158 (64bit,SP,LE)
Build Date: Tue Apr  9 11:35:15 CST 2024 (eric@build11)
Copyright (C) 2000-2015 Broadcom Corporation.

SEND
Boot Strap Register:  0x3fffff70
Chip ID: BCM63158_B1, Broadcom B53 Quad Core: 1675MHz
Total Memory: 1073741824 bytes (1024MB)
Initializing eMMC (v0.94). 2013.11.12.
GPT partitions exist, Updating cfe partitions!

 [Booted from eMMC BOOT1 Partition]
EMMC Addr Mode: Sector, ReadBlkLen 512 bytes, WriteBlklen 512 bytes
EMMC device: Samsung 4FTE4R v0.1, Serial 0xeddeba3c, Size 1872MB
 [eMMC Partition Information] : 
  Partition  :  Physical,   Partitioned
  - Data     :  001864MB,   001851MB
  - Boot1    :  000004MB,   004096KB
  - Boot2    :  000004MB,   004096KB

CPU1
CPU2
CPU3
Boot pmc_image_addr 0x00010000
Boot pmc_image_size 0x00004DA4
Boot pmc_image_max_size 0x00008000
Take PMC out of reset
waiting for PMC finish booting
pmc_init:PMC using DQM mode
Board IP address                  : 192.168.2.1:ffffff00  
Host IP address                   : 192.168.2.100  
Gateway IP address                :   
Run from flash/host/tftp (f/h/c)  : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Boot image (0=latest, 1=previous) : 0  
Default host ramdisk file name    :   
Default ramdisk store address     :   
Default DTB file name             :   
Board Id                          : ARCADYAN  
Number of MAC Addresses (1-64)    : 22  
Base MAC Address                  : 44:d4:54:de:49:dc  
PSI Size (1-512) KBytes           : 128  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Auxillary File System Size Percent: 0  
GPON Serial Number                : "41-52-53-41-32-30-31-37-30-30-30-31"
GPON Password                     : "30-30-30-30-30-30-30-30-30-30"
XGS-PON Password                  : "30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30-30"
RNR_TBLS memory allocation (10-74) (MB) : 12  
FPM_POOL memory allocation (MB)   : 64  
DHD 0 memory allocation (MB)      : 11  
DHD 1 memory allocation (MB)      : 11  
DHD 2 memory allocation (MB)      : 0  
WLan Feature                      : 0x00  
Voice Board Configuration (0-0)   : Si32184_LCCB_DE  
DECT Type Installed (0-1)         : 1  

ARC Serial Number                 : [redacted]
ARC DECT RFPI                     : [redacted]
ARC Manuf Model                   : "Sagemcom"  
ARC Manuf HW Version              : "01"  
ARC Image Clone Flag [0|12|21]    : "0"  
ARC MP Test                       : "0"  
ARC WLAN Country Code             : "DE"  
ARC WLAN Territory Code           : "SA/01"  
ARC Temp Boot Flag                : "0"  
ARC WLAN SSID                     : [redacted]
ARC PIN Code                      : [redacted]
ARC CFE Lock                      : "0"  
ARC WLAN SSID2                    : [redacted]
ARC PHY Type                      : "0"  

Initalizing switch low level hardware.
pmc_switch_power_up: Rgmii Tx clock zone1 enable 0 zone2 enable 0. 
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
Running Field Secure Boot
close avs with [island 0] margin_mv slow 125 fast 105 succeeded
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
...Searching emmcflash0.mdata1_1 for seq_num
Image 1 has Sequence number 999, committed: 1
...Searching emmcflash0.mdata2_1 for seq_num
Image 2 has Sequence number 000, committed: 1
Loaded vmlinux.sig (256 bytes) from latest image in emmcflash0.bootfs2 ...
...Searching emmcflash0.mdata1_1 for seq_num
Image 1 has Sequence number 999, committed: 1
...Searching emmcflash0.mdata2_1 for seq_num
Image 2 has Sequence number 000, committed: 1
Loaded vmlinux.lz (3620453 bytes) from latest image in emmcflash0.bootfs2 ...
cfe-v: 1.0.38-163.243
Decompression LZMA Image OK!
Entry at 0x0000000000080000
Starting program at 0x0000000000080000
...Searching emmcflash0.mdata1_1 for seq_num
Image 1 has Sequence number 999, committed: 1
...Searching emmcflash0.mdata2_1 for seq_num
Image 2 has Sequence number 000, committed: 1
Cannot find file ARCADYAN.dtb in partition
Valid bootfs entry not found!
Unable to load file ARCADYAN.dtb!
...Searching emmcflash0.mdata1_1 for seq_num
Image 1 has Sequence number 999, committed: 1
...Searching emmcflash0.mdata2_1 for seq_num
Image 2 has Sequence number 000, committed: 1
Loaded 963158.dtb (6868 bytes) from latest image in emmcflash0.bootfs2 ...
/memory = 0x40000000 bytes @ 0x0
Setting ROOTFS: root=/dev/mmcblk0p7
Appending CFE version to dtb, ret:0
Appending CFE RAM version 1.0.38-164.255.3 to dtb, ret:0
Appending NVRAM to dtb, ret:0

!!! Resetting eMMC to idle state NOW 1!!!

A bootloader shell can be entered by pressing Ctrl-C:

Bootloader shell
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 1
Enable Switch MAC Port Rx/Tx, set PBVLAN to FAN out, set switch to NO-STP.
web info: Waiting for connection on socket 0.
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> ^C
CFE> help
Available commands:

otpcfg              Reading/fusing potp/sotp bits
showdevs            Display information about the installed cfe devices.
emmcdmpgpt          dump emmc GPT partition config
emmcfmtgpt          modify emmc GPT partitions
emmcdbfs            dump the bootfs entries
emmcea              erase all partitions on emmc, and set partition settings to default
emmcei              erase all partitions belonging to an emmc image
emmcep              erase an emmc logical partition
emmcspw             Write a word to emmc logical partition
emmcdpw             Read words from emmc logical partition
emmcsetimgrepart    Allow next image update to repartition flash if necessary
emmcgi              force emmc to idle state
emmci               Get emmc info
emmcr               run linux image from emmc partition
phy                 Set memory or registers.
meminfo             Display CFE System Memory
kernp               Updates extra bootloader parameter for kernel. To end input enter // consecutively at any time then press <enter>
sm                  Set memory or registers.
db                  Dump bytes.
dh                  Dump half-words.
dw                  Dump words.
ddw                 Dump dwords.
ba                  set linux kernel boot argument
ldt                 load device tree blob from tftp server.
go                  goto and execute from specefic address.
loadb               load binary via network or kermit protocol.
r                   Run program from flash image or from host depending on [f/h/c] flags
p                   Print boot line and board parameter info
c                   Change booline parameters
f                   Write image to the flash
i                   Erase persistent storage data
avs                 Change AVS config
ddr                 Change board DDR config
a                   Change board AFE ID
b                   Change board parameters
reset               Reset the board
pmdio               Pseudo MDIO access for external switches.
spi                 Legacy SPI access of external switch.
pmclog              pmclog
pmc                 pmc cmd
closeavs            pmc close avs cmd
cpufreq             set CPU frequency
force               override chipid check for images.
help                Obtain help for CFE commands

Future research

  • Dumping SPI flash
  • Dumping eMMC flash
  • Booting mainline Linux

References

Clone this wiki locally