Table of Contents
D-Link DSL 2500U
The DSL-2500U is an ADSL modem with one FastEthernet port.
Supported Versions
This device is impossible to support due to insufficient RAM + flash.
Hardware Highlights
| CPU | Ram | Flash | Network | USB | Serial | JTag |
|---|---|---|---|---|---|---|
| Broadcom | 8MB | 2MB | 1x1 | No | Yes | No |
| Model | Revision | Chip ID | Board ID | CPU | CPU Rev | Flash Size | Flash type | Flash name | Flash ID | RAM Size | RAM Chip | LAN | USB | Serial | JTAG |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| DSL-2500U | A1 | 6338 | D-1P | BCM6338 | 0x00029010 | 2MB | Parallel | AM29LV160B | 0x2249 | 8MB | n/a | 1 | - | J3 | J7 |
| DSL-2500U/BRU/C | C1 | 6338 | 96332CG_F4W | BCM6332 | 0x00029010 | 2MB | Serial | NXW25P16 | 0xef14 | 8MB | n/a | 1 | - | J5 | - |
| DSL-2500U/BRU/D | D1 | 6338 | 96332CG | BCM6332 | 0x00029010 | 2MB | Serial | S25FL016A | 0x0114 | 8MB | n/a | 1 | - | JP2 | - |
| DSL-2500U/BRU/D | D2 | 6338 | 96332 | BCM6332 | 0x00029010 | 2MB | Serial | S25FL016A | 0x0114 | 8MB | n/a | 1 | - | JP2 | - |
| DSL-2500U/BRU/D | D3 | 6338 | 96332 | BCM6332 | 0x00029010 | 2MB | Serial | W25X16 | 0xEF14 | 8MB | HY57V641620FTP | 1 | - | JP2 | - |
| DSL-2500U/BRU/D | D4 | 6338 | n/a | BCM6332 | 0x00029010 | 2MB | Serial | 25Q16BVSIG | n/a | 8MB | M12L64164A | 1 | - | + | - |
Hardware
Photos
Opening the case
Note: This will void your warranty!
- To remove the cover simply pull off the two rubber feet, then undo the screws beneath them. Run a fingernail along the crack between the two pieces, and the case will pop off easily.
- There is one screw holding the PCB to the bottom cover.
Main PCB
Insert photo of PCB
Serial
The serial port is marked as J2 and looks like:
xoxxx where x is a pin, and o is a vacant position with no pin.
Currently, the known pins are:
RoxGT
where G = ground, T = the device's Tx pin (connected to your terminal's Rx pin, obviously), R = the device's Rx pin.
JTAG
The JTAG port is marked as J7 on revision A1.
Currently the known pins are:
1-TDO 2-N.C.? 3-TMS 4-TRST 5-TDI 6-TCK 7-GND 8-SRST
Bootlogs
OEM bootlog
Auto-negotiation timed-out 10 MB Half-Duplex (assumed) CPU type 0x29010: 240MHz Total memory: 8388608 bytes (8MB) Total memory used by CFE: 0x80401000 - 0x80527930 (1206576) Initialized Data: 0x8041D020 - 0x8041F160 (8512) BSS Area: 0x8041F160 - 0x80425930 (26576) Local Heap: 0x80425930 - 0x80525930 (1048576) Stack Area: 0x80525930 - 0x80527930 (8192) Text (code) segment: 0x80401000 - 0x8041D014 (114708) Boot area (physical): 0x00528000 - 0x00568000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-12) : 96332 Number of MAC Addresses (1-32) : 12 Base MAC Address : 00:24:01:06:dd:cd PSI Size (1-64) KBytes : 24 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Code Address: 0x80010000, Entry Address: 0x80181018 Decompression OK! Entry at 0x80181018 Closing network. Starting program at 0x80181018 Linux version 2.6.8.1 (jenny@BS5) (gcc version 3.4.2) #1 Wed Mar 4 2 1:10:17 CST 2009 Serial flash device: name S25FL016A, id 0x0114, size 2048KB 96332 prom init CPU revision is: 00029010 Determined physical RAM map: memory: 007a0000 @ 00000000 (usable) On node 0 totalpages: 1952 DMA zone: 1952 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 32 (order 5: 256 bytes) Using 120.000 MHz high precision timer. Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Memory: 6024k/7808k available (1287k kernel code, 1764k reserved, 184k data, 64k init, 0k highmem) Calibrating delay loop... 239.20 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 2048K with 32 sectors File system address: 0xbfc10100 Can't analyze prologue code at 80150754 PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry ======= GPIO CONFIG_BCM96338 inited ======== Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 64k freed init started: BusyBox v1.00 (2009.03.04-13:11+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2009.03.04-13:11+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6338A2 Ethernet Network Device v0.3 Mar 4 2009 21:09:19 Config Internal PHY Through MDIO BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 10 MB Half-Duplex (assumed) eth0: MAC Address: 00:24:01:06:DD:CD BcmAdsl_Initialize=0xC0068A08, g_pFnNotifyCallback=0xC00816D4 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 pSdramPHY=0xA07FFFF8, 0x64905 0xDFADBFFF AdslCoreHwReset: AdslOemDataAddr = 0xA07EF96C AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered ATM proc init !!! ==> Bcm963xx Software Version: RU_1.50 <== device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state ##############status LED blink now################## br0: port 1(eth0) entering disabled state
rev D4 OEM bootlog
CFE version 1.0.37-8.7 for BCM96338 (32bit,SP,BE) Build Date: Fri Dec 18 09:19:11 CST 2009 (root@mochow)(Revision: 63) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbfc00000 Initializing Arena. Initializing Devices. Serial flash device: name W25X16VSSIG, id 0xef14, size 2048KB Auto-negotiation timed-out 10 MB Half-Duplex (assumed) CPU type 0x29010: 240MHz Total memory: 8388608 bytes (8MB) Total memory used by CFE: 0x80401000 - 0x80527800 (1206272) Initialized Data: 0x8041CEE0 - 0x8041F030 (8528) BSS Area: 0x8041F030 - 0x80425800 (26576) Local Heap: 0x80425800 - 0x80525800 (1048576) Stack Area: 0x80525800 - 0x80527800 (8192) Text (code) segment: 0x80401000 - 0x8041CEDC (114396) Boot area (physical): 0x00528000 - 0x00568000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-12) : 96332 Number of MAC Addresses (1-32) : 12 Base MAC Address : 34:08:04:98:e7:8d PSI Size (1-64) KBytes : 24 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Code Address: 0x80010000, Entry Address: 0x80181018 Decompression OK! Entry at 0x80181018 Closing network. Starting program at 0x80181018 Linux version 2.6.8.1 (hebe@localhost.localdomain) (gcc version 3.4.2) #1 Thu Aug 26 09:38:01 CST 2010 Serial flash device: name W25X16VSSIG, id 0xef14, size 2048KB 96332 prom init CPU revision is: 00029010 Determined physical RAM map: memory: 007a0000 @ 00000000 (usable) On node 0 totalpages: 1952 DMA zone: 1952 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 32 (order 5: 256 bytes) Using 120.000 MHz high precision timer. Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Memory: 6024k/7808k available (1287k kernel code, 1764k reserved, 184k data, 64k init, 0k highmem) Calibrating delay loop... 239.20 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 2048K with 512 sectors File system address: 0xbfc10100 Can't analyze prologue code at 801506c4 PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry ======= GPIO CONFIG_BCM96338 inited ======== Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 64k freed init started: BusyBox v1.00 (2010.08.26-01:39+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2010.08.26-01:39+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6338A2 Ethernet Network Device v0.3 Aug 26 2010 09:37:22 Config Internal PHY Through MDIO BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 10 MB Half-Duplex (assumed) eth0: MAC Address: 34:08:04:98:E7:8D is not default cfg. is not default cfg. BcmAdsl_Initialize=0xC0068A48, g_pFnNotifyCallback=0xC0081784 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 pSdramPHY=0xA07FFFF8, 0x8100280 0x880084 AdslCoreHwReset: AdslOemDataAddr = 0xA07EF96C AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 DoInitialize: do kerSysRegisterDyingGaspHandler dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered DoInitialize: do put_user DoInitialize: do kerSysLedCtrl ATM proc init !!! ip_tables: (C) 2000-2002 Netfilter core team ip_conntrack version 2.1 (61 buckets, 0 max) - 376 bytes per conntrack ip_conntrack_pptp version 2.1 loaded ip_nat_pptp version 2.0 loaded insmod: cannot open module `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_conntrack_h323.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/ip_nat_h323.ko': No such file or directory ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading unregistering helper for port 5060 unregistering helper for port 5060 ==> Bcm963xx Software Version: RU_1.58 <== device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state BcmRfc2684_init interface is not up nas_0_0_35_1! pvc2684ctl -a -v 0.0.35 -x 1 -f & br2684: tried to attach to non-existant device pvc2684d: Can't create interface : No such device or address Interface nas35 couldn't be created Error: unable to create nas_0_0_35_1! device eth0 left promiscuous mode br0: port 1(eth0) entering disabled state device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state ##############status LED blink now################## Plugin pppoe loaded. RP-PPPoE plugin version 3.3 compiled against pppd 2.4.3 Plugin pppoe called. pppd: unrecognized option 'nas_0_0_35' pppd version 2.4.3 Usage: pppd [ options ], where options are: <device> Communicate over the named device <speed> Set the baud rate to <speed> <loc>:<rem> Set the local and/or remote interface IP addresses. Either one may be omitted. asyncmap <n> Set the desired async map to hex <n> auth Require authentication from peer connect <p> Invoke shell command <p> to set up the serial line crtscts Use hardware RTS/CTS flow control defaultroute Add default route through interface file <f> Take options from file <f> modem Use modem control lines mru <n> Set MRU value to <n> for negotiation See pppd(8) for more options. br0: port 1(eth0) entering disabled state
Original Firmware Info
The original GPL sourcecode v1.00 can be downloaded Here Here Here. It consist on a Linux 2.? kernel with binary Broadcom tools&drivers and sourcecode of the kernel and the rest of tools.
Tags
