Freitag, 19. Oktober 2018, 02:36 UTC+2

Sie sind nicht angemeldet.

  • Anmelden
  • Registrieren

Another Brick Topic - unbricking SL3516 based Planet-7201

Lieber Besucher, herzlich willkommen bei: NAS Forum. Falls dies Ihr erster Besuch auf dieser Seite ist, lesen Sie sich bitte die Hilfe durch. Dort wird Ihnen die Bedienung dieser Seite näher erläutert. Darüber hinaus sollten Sie sich registrieren, um alle Funktionen dieser Seite nutzen zu können. Benutzen Sie das Registrierungsformular, um sich zu registrieren oder informieren Sie sich ausführlich über den Registrierungsvorgang. Falls Sie sich bereits zu einem früheren Zeitpunkt registriert haben, können Sie sich hier anmelden.

Baron3K

Anfänger

Beiträge: 3

1

Mittwoch, 14. Dezember 2011, 10:22

Another Brick Topic - unbricking SL3516 based Planet-7201

Well hello everyone. I bricked my NAS. My NAS is Planet-7201 2bay sata, based upon Cortina CS/SL3516 (c3),16mb Flash and 128mb Ram, 1Gb marvell based ethernet phy). http://www.youtube.com/watch?v=3AqanxvE-Ng (this is how the device looks).

Original firmware sucked very badly so I started my research for alternative firmware for 3516, BTW(if anyone would want to test my org firmware I have a backup of it even with RedBoot bootloader 16M+128MB on http://www.bitmex.pl/nas7201). First i Upgraded my device to (Mr. EmAns (that was his name, I guess) firmware (it was modified Raidsonic 4220 firmware with rsync, ssh support and much more). Lately I wanted to switch to try some firmware still in development based on OpenWRT. http://opengemini.free.fr/wiki/doku.php?id=start. From device Ui site I tried to uplaod the firmware for Planex device by loading sysupgrade image. Device flashed but wasn't working so I entered a bootloader console that still was available/working. I tried loading a firmware by pressing (bad decission) the magic X - upgrade firmware button. Than I loaded an image (binary for redboot update). Now I can't access the RedBoot anymore. I guess it's dead cannot access from TTL serial console anymore. Propably will need to do JTAG and load RedBoot :(


asking kindly for support :worthy:

I have an images of the PCB of the device these pictures are kind a in high resolution more than 200kb attachments upload limit so they are available at the external link http://www.bitmex.pl/nas7201

HWguru

NAS2000-Team

Beiträge: 1 001

Wohnort: Wien

2

Mittwoch, 14. Dezember 2011, 11:10

Hi and welcome!

Yes, it seems that you have overwritten the bootloader with some wrong data.

The only way to recover is either soldering a programmed FLASH to the board or having JTAG access.

From the pictures I don't see any connector that could be the JTAG interface.
Sometimes manufacturer put some copper pads on the board for accessing the signals through testing probes.

There should be some 4k7 pull up resistors connected to some of the JTAG signals.
TDI, TCK, TMS, DBGACK normally have a 4k7 pullup to VCC (3.3V)
DBGRQ normally has a 4k7 pulldown to GND
I assume them to be near the corner (top and/or bottom) of the CPU where you see R133

HWguru

P.S. edited the title - helps a lot when searching the forum
Leute ohne Laster haben oft wenige Tugenden...
NAS2000 2.3.2.IB.2.RS.1+Lüfterabschaltung+SSH+do_it+zusätzliche commandline tools+changed root password
1. suchen - lesen - Google - lesen - 1. Fragen gehören ins Forum, dann profitieren alle davon!

Baron3K

Anfänger

Beiträge: 3

3

Mittwoch, 14. Dezember 2011, 12:05

Thank you for the answer. Have to checki it than with a voltometer. Maybe I will be able to come up with something. I have an unbuffered jtag adapter will this be suitable to program that flash? How to enter a debug mode to enable flash write capabilities? Also what kind a software do I need to program the flash and also what area of the flash need to be programmed ?

I'am kind a new into hardcore hacking into hardware :) maybe I will try to make more detailed photos for better identification of possible areas (near cpu) where I could try soldering ?

kind regards,

Dieser Beitrag wurde bereits 1 mal editiert, zuletzt von »Baron3K« (14. Dezember 2011, 12:11)

HWguru

NAS2000-Team

Beiträge: 1 001

Wohnort: Wien

4

Mittwoch, 14. Dezember 2011, 12:20

Hi,
good point for start is the MRT unbricking guide and our guide at the NAS2000 wiki (HowTos)

We only program the bootloader as programming the whole FLASH with our tool would take about a day :rolleyes:
Then you can flash the other parts using the bootloader which controlled by commands sent through the serial console.

HWguru
Leute ohne Laster haben oft wenige Tugenden...
NAS2000 2.3.2.IB.2.RS.1+Lüfterabschaltung+SSH+do_it+zusätzliche commandline tools+changed root password
1. suchen - lesen - Google - lesen - 1. Fragen gehören ins Forum, dann profitieren alle davon!

AQUAR

Schüler

Beiträge: 101

Wohnort: Australia

5

Mittwoch, 14. Dezember 2011, 12:58

Might be a good idea to ask the person behind the OpenGemini project if his OpenWRT firmware port is a suitable match for this hardware.
The Planex only has an 8 MB flash and has a realtek chip set for ethernet.
Also the sysupgrade image is for upgrading his OpenWRT firmware via its GUI ("LUCI"). Incorectly applying this is an upgrade to a brick :pinch: .
I guess if you set up the planex flash structure and use his redboot loader, kernel and "ramdisk" images then most of it might/should work.

Aquar

Dieser Beitrag wurde bereits 1 mal editiert, zuletzt von »AQUAR« (14. Dezember 2011, 13:03)

Baron3K

Anfänger

Beiträge: 3

6

Mittwoch, 14. Dezember 2011, 14:09

Well I fully understand, though that X- upgrade firmware will not overwrite the RedBoot also. :(

Redboot has only 128k (it should take rather fast to program that) , I don't understand why I have to program the whole flash ? 128k with unbuffered jtag should take way faster than a day ?

Well I will play a little bit today to see where is a possibility to connect jtag. Propably will have to install windows also doh, OR is there any jtag utility that will work for linux ?

HWguru

NAS2000-Team

Beiträge: 1 001

Wohnort: Wien

7

Mittwoch, 14. Dezember 2011, 15:00

If you look at the nas4220 unbricking guide you will see that X would update the bootloader.

... we only program the bootloader (128k) which will take some minutes.
Programming the whole FLASH would be slow.

I am sure you will find a linux tool for detecting a JTAG device but for nas_flashtool you will need Win anyway.

HWguru
Leute ohne Laster haben oft wenige Tugenden...
NAS2000 2.3.2.IB.2.RS.1+Lüfterabschaltung+SSH+do_it+zusätzliche commandline tools+changed root password
1. suchen - lesen - Google - lesen - 1. Fragen gehören ins Forum, dann profitieren alle davon!

Ähnliche Themen