導入
前回の記事ではURoad-Homeを分解するところまでやりました。今回はシリアルポート(UART)に接続して、起動ログやU-Bootなどを見てみます。
URoad-Home関係の記事の一覧と概要はこちら
PCとシリアル接続
基板状のUARTと書かれているところに適当にピンを立ててあげて、USBとシリアルポートを変換するのをWindowsに挿して、TeraTermでボーレート115200としてその他はディフォルト通りで接続しました。
いざ電源導入…
適当なマイクロUSBを挿して電源を入れます。これでログが見れるはず…うん？
こんな感じでThis product is not a dedicated cable!!と出て永遠と再起動してしまいます。電源LEDもチカチカするだけです。どうやら純正の電源じゃないといけないっぽいのですが、ここのサイトを参考にするとどうやら1番ピンだけでなく4番ピンにも5Vを印加しないといけないっぽいです。なるほど、と思って純正の電源を探してくると
確かに書いてありました。まあ、純正の電源に変えるのもめんどくさいので下の写真の赤丸で囲った部分をピンセットとかで一瞬ショートさせたら無事起動しました。
起動！
これで無事に電源が入るようになり、メッセージがダバァーと流れていきます。起動までのすべてのログは記事の一番最後に貼り付けておきました。RAMは64MB、CPUはRT3052、フラッシュは16MiB、ブートローダはU-Bootっぽいです。なんか、前回の記事で部品の型番から追ったのとは全然違いますね…(MBとMbを間違えてただけ…)
ログを見てくとURoad-3000っていう文字が出てきます。これは、韓国企業のMODACOMでの製造名だと思われます。KWD-C2000とも呼ばれているっぽいです。一方販売ページ的なものを見つけました。
途中でUSBに関して色々やっていて、ベンダーID(VID)が0x1EB8でMODACOMのもの、プロダクトID(PID)が0x7f30と0xc7f00となっています。前者の方は謎ですが、0xc7f00はMW-U3500(BDSS02)というWiMAXのUSBドングルのもののようです。mini PCI端子で接続されていたモジュールはどうやらPCI接続ではなく、USBでの接続だったようです。
起動が完了するとログインコンソールが出てきますが、パスワードがわからないのでどうにもならないです。
フラッシュのパーティションはKernelのバックアップが存在しているようです。
U-Bootのコンソールに入ってみる
初めの方に起動する選択肢が出てくるのですが、自動入力で3が選択されてしまいます。色々試したところキーボードの数字を長押ししておけば大丈夫そうです。4を長押ししていたところ無事に入れました。
U-BootにはいれてTFTPとかも使えそうなので、似た構成用のOpenWrtを起動させれそうです。次で試してみようと思います。
URoad-Home関係の記事の一覧と概要はこちら
起動までのログ
U-Boot 1.1.3 (Aug 23 2011 - 21:53:25)
Board: Ralink APSoC : RT3052 ,30500100:28720200 DRAM: 64 MB
PID : UR3000BUQCW BSNv2 : 32006254
WebInit=1
============================================
URoad-3000 UBoot Version: 1.0.0.0
Date:Aug 23 2011 Time:21:53:25
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384
CPU freq: 384 MHz
SDRAM size: 64 Mbytes
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
6: Load system code 2 then write to Flash via TFTP.
7: Load Linux filesystem then write to Flash via TFTP.
9: Load Boot Loader code then write to Flash via TFTP.
You choosed 3
0
3: System Boot system code via Flash.
Image1 :
Image Header Magic Number --> OK
Image Header Checksum --> OK
Image Data Checksum --> OK
Image2 Checksum Check --> SKIP
Image Stable Flag --> Image1
=================================================
Image1Stable : Kernel
## Booting image at bf080000 ...
Image Name: Linux Kernel Image
Created: 2011-11-23 5:24:19 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 6581598 Bytes = 6.3 MB
Load Address: 80000000
Entry Point: 8045f000
Uncompressing Kernel Image ... ...............OK
Starting kernel ...
LINUX started...
Linux version 2.6.21.02 (@) (gcc version 3.4.2)
URoad-3000 version 1.2.6.1
The CPU feqenuce set to 384 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Built 1 zonelists. Total pages: 16256
Kernel command line: console=ttyS1,115200 root=/dev/ram0
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 10800000, status = 1100ff00
PID hash table entries: 256 (order: 8, 1024 bytes)
calculating r4koff... 00177000(1536000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 55204k/65536k available (3782k kernel code, 10272k reserved, 690k data, 5096k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
detected lzma initramfs
detected lzma initramfs
initramfs: LZMA lc=3,lp=0,pb=2,dictSize=1048576,origSize=17002496
LZMA initramfs by Ming-Ching Tiew <[email protected]>
................................................................................ ................................................................................ ................................................................................ ....................<5>LZMA Decoding Done
Load RT2880 Timer Module(Wdg/Soft)
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
fuse init (API version 7.8)
io scheduler noop registered (default)
FLASH_API: MAN_ID=1 DEV_ID=7E2101 SIZE=16MB
[GPIO setting][RALINK_REG_GPIOMODE] gpiomode = 0x2dd , 0x2dd
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
loop: loaded (max 8 devices)
rdm_major = 254
=== pAd = c004f000, size = 802704 ===
<-- RTMPAllocAdapterBlock, Status=0
IMAGE1_SIZE 0x800000
MTD_BOOT_PART_SIZE 0x40000
MTD_CONFIG_PART_SIZE 0x20000
MTD_FACTORY_PART_SIZE 0x20000
MTD_KERNAL_PART_SIZE 0x740000
MTD_WIMAX_PART_SIZ 0x100000
ralink flash device: 0x1000000 at 0x1f000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
Ralink SoC physically mapped flash: CFI does not contain boot bank location. Ass uming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 6 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00040000 : "Bootloader"
0x00040000-0x00060000 : "Config"
0x00060000-0x00080000 : "Factory"
0x00080000-0x007c0000 : "Kernel"
0x007c0000-0x00f00000 : "Kernel2"
0x00f00000-0x01000000 : "Wimax"
block2mtd: version $Revision: 1.1.1.1 $
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
NET: Registered protocol family 26
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <[email protected]>
All bugs added by David S. Miller <[email protected]>
ieee80211: 802.11 data/management/control stack, git-1.1.13
ieee80211: Copyright (C) 2004-2005 Intel Corporation <[email protected]>
Ralink APSoC Ethernet Driver Initilization. v2.00 256 rx/tx descriptors allocat ed, mtu = 1500!
Freeing unused kernel memory: 5096k freed
init started: BusyBox v1.12.1 (2011-11-23 14:07:49 KST)
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
Welcome to
______ ______
ralink_gpio_ioctl() info.irq:0xd, pid:691
| \ / |
| \ / |
| \ / |
| \ / |
| \ / |
| \/ |
| |\ /| |
| | \ / | |
| | \ / | |
| | \ / | |
|_____| \__/ |_____|
M O D A C O M M U N I C A T I O N
MODACOM is a leading provider of next-generation
convergence terminal solution based on the technology
of Mobile WiMAX,mobile and next-generation internet
Nvram_daemon: Skip checking broken NVRAM here, checking later in rcS(factory_res et -s command) to avoid conflict.
nvram_daemon.c : GPIO Initialize.
internet.sh
TELNETD DISABLE
2011-11-23 ...
Wed Nov 23 09:00:00 UTC 2011
Waiting for 15 Sec. ... ...
ralink_gpio_ioctl() info.irq:0x2b, pid:695
WiFi Switch Control - Waiting for ON/OFF interrupt
*** WiFi ON/OFF Switch Check ***
Test-mode socket thread created with 9801 port
Test-mode socket thread created with 9803 port
<<>> gpio = 43, tmp = 0, val = 0
[SKLEE debug message] gpio_value_read =0 , UROAD_GPIO_WIFI_ON_N =43
*** WiFi OFF ***
ra0 no private ioctls.
Password for 'root' changed
dwc_otg: version 2.72a 24-JUN-2008
DWC_otg: Core Release: 2.66a
DWC_otg: Periodic Transfer Interrupt Enhancement - disabled
DWC_otg: Multiprocessor Interrupt Enhancement - disabled
DWC_otg: Using DMA mode
DWC_otg: Device using Buffer DMA mode
dwc_otg lm0: DWC OTG Controller
dwc_otg lm0: new USB bus registered, assigned bus number 1
dwc_otg lm0: irq 18, io mem 0x00000000
DWC_otg: Init: Port Power? op_state=1
DWC_otg: Init: Power Port (0)
usb usb1: choose_configuration
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
phy_tx_ring0 = 005bd000, tx_ring0 = a05bd000, size: 16 bytes
phy_tx_ring1 = 005be000, tx_ring1 = a05be000, size: 16 bytes
phy_tx_ring2 = 005bf000, tx_ring2 = a05bf000, size: 16 bytes
phy_tx_ring3 = 005c0000, tx_ring3 = a05c0000, size: 16 bytes
phy_rx_ring = 0x00000000, rx_ring = 0x00000000
ifconfig: ioctl 0x8913 failed: No such device
rmmod: nf_nat_pptp: No such file or directory
rmmod: nf_conntrack_pptp: No such file or directory
rmmod: nf_nat_proto_gre: No such file or directory
rmmod: nf_conntrack_proto_gre: No such file or directory
RX DESC a05d7000 size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
usb 1-1: new high speed USB device using dwc_otg and address 2
usb 1-1: choose_configuration
usb 1-1: configuration #33 chosen from 1 choice
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff 00 00 00 01
SYNC - BBP R4 to 20MHz.l
Main bssid = 00:1d:93:33:e2:74
<==== rt28xx_init, Status=0
0x1300 = 00064320
<<>> gpio = 43, tmp = 0, val = 0
[SKLEE debug message] gpio_value_read =0 , UROAD_GPIO_WIFI_ON_N =43
*** WiFi Switch status check after boot-up process ***
*** WiFi OFF ***
insmod: 8021q.ko: module not found
BusyBox v1.12.1 (2011-11-23 14:07:49 KST) multi-call binary
Usage: ifconfig [-a] interface [address]
ifconfig: ioctl 0x8913 failed: No such device
brctl: bridge br0: No such device or address
##### config RT3052 vlan partition (WLLLL) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1002
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=70, value=ffff417e
device ra0 entered promiscuous mode
eth2.1: dev_set_promiscuity(master, 1)
device eth2 entered promiscuous mode
device eth2.1 entered promiscuous mode
device ra1 entered promiscuous mode
udhcpc: ioctl 0x8933 failed: No such device
br0: port 3(ra1) entering learning state
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
killall: udhcpd: no process killed
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[1].reg[0] = 3100
Set: phy[2].reg[0] = 3100
Set: phy[3].reg[0] = 3100
Set: phy[4].reg[0] = 3100
ifconfig: ioctl 0x8913 failed: No such device
========================iwpriv ra0 set MaxStaNum=5
========================iwpriv ra1 set MaxStaNum=5
killall rt2860apd 1>/dev/null 2>&1
iptables -F -t filter 1>/dev/null 2>&1
iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -F macipport_filter 1>/dev/null 2>&1
iptables -D FORWARD -j web_filter 1>/dev/null 2>&1
iptables -F web_filter 1>/dev/null 2>&1
iptables -D FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -F malicious_filter 1>/dev/null 2>&1
iptables -D INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -F malicious_input_filter 1>/dev/null 2>&1
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -t filter -N web_filter 1>/dev/null 2>&1
iptables -t filter -N macipport_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_input_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_filter -p tcp --syn -j synflood_filter 1>/dev/nu ll 2>&1
iptables -t filter -A INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_input_filter -p tcp --syn -j synflood_input_filt er 1>/dev/null 2>&1
iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set -mss 1360 1>/dev/null 2>&1
iptables -A FORWARD -i wm0 -o ra0 -j ACCEPT 1>/dev/null 2>&1
iptables -A FORWARD -i ra0 -o wm0 -j ACCEPT 1>/dev/null 2>&1
iptables -A FORWARD -i br0 -o wm0 -j ACCEPT 1>/dev/null 2>&1
iptables -A FORWARD -i wm0 -o br0 -j ACCEPT 1>/dev/null 2>&1
iptables -A malicious_input_filter -i wm0 -m state --state RELATED,ESTABLISHED - j ACCEPT
iptables -A malicious_input_filter -i wm0 -m state -p tcp --dport 80 --state NEW ,INVALID -j DROP
iptables -A malicious_input_filter -p icmp --icmp-type 8 -s 0/0 -i wm0 -m state --state NEW,ESTABLISHED,RELATED -j DROP
iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1
iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forwa rd 1>/dev/null 2>&1
iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1
iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>& 1
iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1
iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1
iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1
iptables -I malicious_input_filter -i wm0 -p tcp --dport 80 -j DROP
ntp.sh
ntp.nict.jp: Unknown host
route delete 239.255.255.250 1>/dev/null 2>&1
killall wscd 1>/dev/null 2>&1
killall -9 wscd 1>/dev/null 2>&1
iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1
iwpriv ra0 set WscConfMode=7
route add -host 239.255.255.250 dev br0 1>/dev/null 2>&1
wscd -m 1 -a 192.168.100.254 -i ra0 &
killall -q klogd
killall -q syslogd
syslogd -C8 -l 7 1>/dev/null 2>&1
libupnp: using UDP SSDP_PORT = 1900
klogd 1>/dev/null 2>&1
killall -q zebra &
killall -q ripd &
/bin/qos_run
##### USB init #####
WPS_AP_PBC_GPIO ralink_gpio_ioctl() info.irq:0x2, pid:693
= 2
goahead.c : WPS PBC Start.2500
webs: Listening for HTTP requests at address 192.168.100.254
insmod: wimax device driver ...
Found GDM USB VID = 0x1eb8 PID = 0x7f30 bcdDevice = 0x7f00
MODACOM WiMax driver version 3.2.1.0
GCT: Kernel download success.
GCT: Filesystem download success.
usbcore: registered new interface driver gdm_wimax
hub 1-0:1.0: port 1 disabled by hub (EMI?), re-enabling...
usb 1-1: USB disconnect, address 2
usb 1-1: new high speed USB device using dwc_otg and address 3
usb 1-1: choose_configuration
usb 1-1: configuration #17 chosen from 1 choice
Found GDM USB VID = 0x1eb8 PID = 0x7f00 bcdDevice = 0x0002
MODACOM WiMax driver version 3.2.1.0
GDM WiMax Set CAPABILITY: 0x00000003
Set Log Level : 6
killall: cannot kill pid 714: No such process
ralink_gpio_ioctl() info.irq:0x2b, pid:1567
WiFi Switch Control - Waiting for ON/OFF interrupt
*** WiFi ON/OFF Switch Check ***
Test-mode socket thread created with 9803 port
<<>> gpio = 43, tmp = 0, val = 0
[SKLEE debug message] gpio_value_read =0 , UROAD_GPIO_WIFI_ON_N =43
*** WiFi OFF ***
MAC change [00:0a:3b:f0:01:30]->[00:1d:93:1c:65:ca]
br0: topology change detected, propagating
br0: port 3(ra1) entering forwarding state
br0: topology change detected, propagating
br0: port 2(eth2.1) entering forwarding state
br0: topology change detected, propagating
br0: port 1(ra0) entering forwarding state
[CM] #ERROR: in set_omadm_portblock [lr:0x41bbac]
:set_omadm_portblock 1
set_oma_portblock ++++++
[CM] AUTO_MODE : 1
[CM] --------- Begin propritary NVRAM configurations --------
[CM] [Call Control]
[CM] Fail Delay Time: 1
[CM] Max. Fail Count: 3
[CM] Max Fail Delay Time: 10
[CM] Max Recon Signal Level: 1
[CM] ------------ propritary NVRAM configurations -----------
vpn-pptp DISABLE
modacom login:U-Boot
U-Boot 1.1.3 (Aug 23 2011 - 21:53:25)
Board: Ralink APSoC : RT3052 ,30500100:28720200 DRAM: 64 MB
PID : UR3000BUQCW BSNv2 : 32006254
WebInit=1
============================================
URoad-3000 UBoot Version: 1.0.0.0
Date:Aug 23 2011 Time:21:53:25
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384
CPU freq: 384 MHz
SDRAM size: 64 Mbytes
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
6: Load system code 2 then write to Flash via TFTP.
7: Load Linux filesystem then write to Flash via TFTP.
9: Load Boot Loader code then write to Flash via TFTP.
You choosed 4
0
4: System Enter Boot Command Line Interface.
U-Boot 1.1.3 (Aug 23 2011 - 21:53:25)
URoad-3000 # help
? - alias for 'help'
base - print or set address offset
bootm - boot application image from memory
button - Perform POWER, RESET Switch Test
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
erase - erase FLASH memory
go - start application at address 'addr'
help - print online help
loadb - load binary file over serial line (kermit mode)
loop - infinite loop on address range
md - memory display
mdio - Ralink PHY register R/W command !!
mm - memory modify (auto-incrementing)
mtest - simple RAM test
mw - memory write (fill)
nm - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
reset - Perform RESET of the CPU
rf - read/write rf register
saveenv - save environment variables to persistent storage
setenv - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
URoad-3000 # version
U-Boot 1.1.3 (Aug 23 2011 - 21:53:25)
URoad-3000 # printenv
bootcmd=tftp
bootdelay=1
baudrate=115200
ramargs=setenv bootargs root=/dev/ram rw
addip=setenv bootargs $(bootargs) ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):$(hostname):$(netdev):off
addmisc=setenv bootargs $(bootargs) console=ttyS0,$(baudrate) ethaddr=$(ethaddr) panic=1
flash_self=run ramargs addip addmisc;bootm $(kernel_addr) $(ramdisk_addr)
kernel_addr=BFC40000
u-boot=u-boot.bin
load=tftp 8A100000 $(u-boot)
u_b=protect off 1:0-1;era 1:0-1;cp.b 8A100000 BC400000 $(filesize)
loadfs=tftp 8A100000 root.cramfs
u_fs=era bc540000 bc83ffff;cp.b 8A100000 BC540000 $(filesize)
test_tftp=tftp 8A100000 root.cramfs;run test_tftp
Image2Version=00000000
ethact=Eth0 (10/100-M)
ethaddr="00:1D:93:01:00:01"
Image1Try=0
bootfile=uboot_v1000.bin
uboot_ver="1.0.0.0"
uImage=URoad-3000_BIC_uImage
autostart=no
filesize=645fbb
fileaddr=80100000
ipaddr=10.0.0.124
serverip=10.0.0.123
Image1Stable=1
Image1Version=00000000
stdin=serial
stdout=serial
stderr=serial
Environment size: 958/4092 bytes
URoad-3000 #