Am un router ZXHN H298N m-am conectat cu el cu o interfata seriala TTL facuta de mine cu un ft 232 se gasesc multe scheme pe net cel mai folosit si simplu este max232 .

routerul are in partea de sus un conector fara pini x 4

corespondenta pinilor este urmatoarea :

pin1 (cel cu patratel ) - posibil + 5v eu nu l-am folosit

pin 2 - TX  este pinul care transimite informatia catre pc

pin3 - RX este pinul care receptioneaza datele de la pc

pin 4 - GND masa

viteza de comunicatie 115200 N 8

problema este ca nu stiu parola si nu merge cea cu user si user , nici admin cu admin

si nu gasesc nici firmware pentru el.

daca reusiti sa gasiti parola ori versiune de soft  te rog sa imi trimiteti si mie un email la adresa ionut[at]p10.ro

Booting
Press '1' to enter BOOT console...
Press '2' to enter DEBUG mode......
RTL8367B is detected!
Boot from NAND flash
load normal bbt table:0 page:65344
check normal bbt table:0 OK
Congratulation!! No BBs in this Nand.
Nand BBT NORMAL Content bad block num 0
dwFWversionNum    : 0
dwFWrealAddress   : 1400000
dwFWheaderAddress : 1ba0000
dwFWheadernum     : 1
dwFWcheckresult   : 0
dwFWversionNum    : 1
dwFWrealAddress   : 3c00000
dwFWheaderAddress : 43a0000
dwFWheadernum     : 1
dwFWcheckresult   : 0

To read reset key,if on,to update
Flash owned validImgNum: 2
****Try the second image...
para->BootParaCksum=     b4c

ok!
Disabling Switch portsLinux version 2.6.30.9 (xia@njzd) (gcc version 4.4.6 (Realtek RSDK-1.5.6p2) ) #2 Thu Dec 12 10:54:36 CST 2013
Check boot para cksum...
boot para cksum OK!
bootPara.runmode=3
CPU revision is: 0000dc02
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
User-defined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS0,115200 mem=64M root=31:3
root_dev_setup line 174 root: 31:3
icache: 16kB/32B, dcache: 8kB/32B, scache: 0kB/0B
NR_IRQS:128
PID hash table entries: 256 (order: 8, 1024 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 49704k/65536k available (3864k kernel code, 15756k reserved, 1689k data, 136k init, 0k highmem)
Calibrating delay loop... 619.31 BogoMIPS (lpj=3096576)
Mount-cache hash table entries: 512
IMEM section size = 0x7cb8
pdt_cspkernel_init
NET: Registered protocol family 16
11930:22:53 [Klogctl][Info] [(920)LogCtlInit] LogCtlInit begin
11930:22:53 [Klogctl][Info] [(730)AddLogOutModule] AddLogOutModule:OutputMode=0X00000200,ptLogProcSet=838179b8
11930:22:53 [Klogstdio][Info] [(1078)LogStdioProcInit] LogStdioProcInit

11930:22:53 [Klogctl][Info] [(730)AddLogOutModule] AddLogOutModule:OutputMode=0X00000800,ptLogProcSet=838179b8
11930:22:53 [Klogctl][Info] [(730)AddLogOutModule] AddLogOutModule:OutputMode=0X00000100,ptLogProcSet=838179b8
11930:22:53 [Klogfile][Info] [(3079)LogFileProcInit] LogFileProcInit

11930:22:53 [Klogfile][Info] [(3091)LogFileProcInit] g_dwUptime is 0

11930:22:53 [Klogctl][Info] [(730)AddLogOutModule] AddLogOutModule:OutputMode=0X00002000,ptLogProcSet=838179b8
LogUdpWatchProcInit
11930:22:53 [Klogctl][Info] [(853)SetLogConf] SetLogConf OutputMode=0X00000100,pBuf=83817810,iLen=88
11930:22:53 [Klogfile][Info] [(2898)ProcLogConf] Set LOG_FILE_CONF_SET_PDTCONF

11930:22:53 [Klogctl][Info] [(1235)CreateCspKlogdtread] create thread klog success!
11930:22:53 [Klogctl][Info] [(1003)LogCtlInit] LogCtlInit end
11930:22:53 [KMONITOR][Notice] [monitor.c(506)MonitorInit]  cspmonitor init... !
bio: create slab at 0
SCSI subsystem initialized
usb_enable_IP: ipsel = 0x0008d7ef, phyCtrl2 = 0x008020c0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
11930:22:53 [MIRROR][Notice] [cspmirror.c(709)MirrorInit]  CspMirror start init ...
11930:22:53 [KQOS][Info] [qos.c(471)CSPKernel_QC_In] Qos module init
NET: Registered protocol family 2
ip_rt_init() start call CSP_alloc_large_system_hash
 <6>IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
ip_rt_init() call CSP_alloc_large_system_hash end
 <6>TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 2048 bind 1024)
TCP reno registered
Realtek GPIO Driver for Flash Reload Default
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 97
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
systools version:v0.7.2
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 13) is a 16550A
Driver 'sd' needs updating - please use bus_type methods
RTL8192C/RTL8188C driver version 1.1 (2010-03-31/2011-12-20)
vendor_deivce_id=819110ec
val=5
val=c6
tx_power_tracking Thread create successfully!
_
=== (rtl867x_8367b_proc_init 588)0 ===
=== (rtl867x_8367b_proc_init 593)0.1 ===
=== (rtl867x_8367b_proc_init 598)0.2 ===
=== (rtl867x_8367b_proc_init 604)1 ===
=== (rtl867x_8367b_proc_init 680)2 ===
Realtek NAND Flash Driver Rev:1.3 (2011/12/07)
One S34ML01G1 chip has 1 die(s) on board
nand part=S34ML01G1, id=1f1001d, device_size=134217728, chip_size=134217728, num_chips=1, isLastPage=0
[rtk_nand_scan] page_shift=11, phy_erase_shift=17, oob_shift=6, chip_shift=27
rtk_nand_scan: pagesize=800,oob=40 mtd=838e6000(838e6014)
[rtk_nand_scan], bbt_num=51, this->BBT_PERCENT = 5
[nand_scan_normal_bbt] mem_page_num=1 bbt_page 65344
INFO: Stored BBT in Die 0: block=1021 , block_status_p1=0xbb
nand_scan_normal_bbt: is_first_boot:0
INFO: Stored BBT in Die 0: block=1021 , block_status_p1=0xbb
load normal bbt table:0 page:65344
[nand_scan_normal_bbt] have created normal bbt table:0 on block 1021, just loads it !!
check normal bbt table:0 OK
[dump_normal_BBT] Nand normal BBT Content
Congratulation!! No BBs in this Nand.
RTK: using dynamic nand partition
Creating 4 MTD partitions on "rtk_nand":
0x000000000000-0x000008000000 : "whole flash"
0x000000000000-0x000000020000 : "bootloader"
0x000000020000-0x000001400000 : "userconfig"
fw_arg0 67108864, fw_arg1 0 fw_arg2 1 map 288
0x000004000000-0x000006400000 : "rootfs"
Realtek Nand Flash Driver is successfully installing.

 legerity_init ok.
u32 classifier
    Actions configured
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
netfilter PSD loaded - (c) astaro AG
NET: Registered protocol family 1
NET: Registered protocol family 10
6WIND/LSIIT IPv6 multicast forwarding 0.1 plus PIM-SM/SSM with *BSD API
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
af_packet.c packet_init call register_netdevice_notifier
Bridge firewalling registered
br_init call register_netdevice_notifier
Ebtables v2.0 registered
NET: Registered protocol family 24
PPP Deflate Compression module registered
11930:22:54 [LEDKEYDRV][Info] [ledkey_mod.c(1726)LedkeymodInit] Ledkey_mod Driver Version 0.0.1.
11930:22:54 [LEDKEYDRV][Info] [ledkey_mod.c(1777)LedkeymodInit] watchdog enable!
watchdog started
11930:22:54 [km255][Info] [ver_info.c(405)ver_info_init] ver_info_init
________________CspGetVerInfo____________________
bootPara.bootWhichImg=2
bootPara.img_info_tbl[1].headaddr=0x43a0000
g_MaxNumOfFirmWare =2
11930:22:54 [km255][Info] [ver_info.c(144)ReadInfoFromVer] ver_info_init
11930:22:54 [km255][Info] [ver_info.c(175)ReadInfoFromVer] ver_info_init
11930:22:54 [km255][Info] [ver_info.c(196)ReadInfoFromVer] wFirmwareForm is:0x1
11930:22:54 [KSWETH][Notice] [csp_ifinfo.c(191)csp_ifinfo_init] Initializing CSP IFinfo...
11930:22:54 [KSWETH][Warn] [csp_ifinfo.c(213)csp_ifinfo_init] No IFinfo in flash!
11930:22:54 [KSWETH][Notice] [sweth_core.c(2706)sweth_init] SWÐ HAL driver initing!
11930:22:54 [KSWETH][Notice] [sweth_core.c(132)CreateSwEthObjs] Create SW & ETH objects
11930:22:54 [KSWETH][Notice] [sweth_core.c(148)CreateSwEthObjs] Failed to get SWITCH attr, iRet=-2
11930:22:54 [KSWETH][Info] [sweth_core.c(155)CreateSwEthObjs] nEmac = 1, nSw = 0, nEth=5.
11930:22:54 [KSWETH][Warn] [sweth_core.c(302)CreateSwEthObjs] Failed to get TAG_PARA_MAC1!
11930:22:54 [KSWETH][Info] [sweth_core.c(314)CreateSwEthObjs] ETH obj0: PhyType = 0, Is_assoc_sw = 0, Emac = 0, Phy = 4
11930:22:54 [KSWETH][Warn] [sweth_core.c(302)CreateSwEthObjs] Failed to get TAG_PARA_MAC1!
11930:22:54 [KSWETH][Info] [sweth_core.c(314)CreateSwEthObjs] ETH obj1: PhyType = 1, Is_assoc_sw = 0, Emac = 0, Phy = 3
11930:22:54 [KSWETH][Warn] [sweth_core.c(302)CreateSwEthObjs] Failed to get TAG_PARA_MAC1!
11930:22:54 [KSWETH][Info] [sweth_core.c(314)CreateSwEthObjs] ETH obj2: PhyType = 1, Is_assoc_sw = 0, Emac = 0, Phy = 2
11930:22:54 [KSWETH][Warn] [sweth_core.c(302)CreateSwEthObjs] Failed to get TAG_PARA_MAC1!
11930:22:54 [KSWETH][Info] [sweth_core.c(314)CreateSwEthObjs] ETH obj3: PhyType = 1, Is_assoc_sw = 0, Emac = 0, Phy = 1
11930:22:54 [KSWETH][Warn] [sweth_core.c(302)CreateSwEthObjs] Failed to get TAG_PARA_MAC1!
11930:22:54 [KSWETH][Info] [sweth_core.c(314)CreateSwEthObjs] ETH obj4: PhyType = 1, Is_assoc_sw = 0, Emac = 0, Phy = 0

Probing RTL8186 10/100 NIC-kenel stack size order[2]...
rtl8367b detected!
chip name: 8196B, chip revid: 0
NOT YET
Start to initiate QM
Set threshould idx 0
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login:
ZXHN H298N
Login: __ratelimit: 10 callbacks suppressed

ZXHN H298N
00:07:39 [dss][Notice] [dss_slaac.c(944)_SLAACProcessFa] Rcv slaac FailMsg, Reason 0x0 dev ppp0
00:07:39 [dss][Info] [dss_slaac.c(2969)_SLAACSendRS] start send RS on ppp0.

ZXHN H298N
Login:

Pentru partea de boot

Booting
Press '1' to enter BOOT console...
Press '2' to enter DEBUG mode......
RTL8367B is detected!
Boot from NAND flash
load normal bbt table:0 page:65344
check normal bbt table:0 OK
Congratulation!! No BBs in this Nand.
Nand BBT NORMAL Content bad block num 0
dwFWversionNum    : 0
dwFWrealAddress   : 1400000
dwFWheaderAddress : 1ba0000
dwFWheadernum     : 1
dwFWcheckresult   : 0
dwFWversionNum    : 1
dwFWrealAddress   : 3c00000
dwFWheaderAddress : 43a0000
dwFWheadernum     : 1
dwFWcheckresult   : 0

To read reset key,if on,to update
(c)Copyright Realtek, Inc. 2011
Project RTL8676 LOADER (LZMA)
Version V1.4.0 (Jun 21 2013 18:53:24)

help
help
help
info
reboot
run [app addr] [entry addr]
r [addr]
w [addr] [val]
d [addr]
resetcfg
mac ["clear"/"osk"/mac address]
bootline
entry [address]
load [address]
xmodem [address]
tftp [ip] [server ip] [file name]
web
flashsize [256(k)/128(k)/1(M)/2(M)/4(M)/8(M)/16(M)]
memsize ROW[2k/4k/8k/16k] COL[256/512/1k/2k/4k] BANK[2/4]
uart [0(enable)/1(disable)]

--cum se face update de soft

Booting
Press '1' to enter BOOT console...
Press '2' to enter DEBUG mode......
RTL8367B is detected!
Boot from NAND flash
load normal bbt table:0 page:65344
check normal bbt table:0 OK
Congratulation!! No BBs in this Nand.
Nand BBT NORMAL Content bad block num 0
dwFWversionNum    : 0
dwFWrealAddress   : 1400000
dwFWheaderAddress : 1ba0000
dwFWheadernum     : 1
dwFWcheckresult   : 0
dwFWversionNum    : 1
dwFWrealAddress   : 3c00000
dwFWheaderAddress : 43a0000
dwFWheadernum     : 1
dwFWcheckresult   : 0

To read reset key,if on,to update
Reset key has been pressing,wait for update......
The local IP is 192.168.1.254
Listening......