Business Community > Pharos Wireless Bridges > I NEED cpe210 DUMP
< Pharos Wireless Bridges

I NEED cpe210 DUMP

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

I NEED cpe210 DUMP

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
18 Reply
Re:I NEED cpe210 DUMP
2017-05-13 19:42:02
@mixawy0 I am impressed, and I want to try do the same thing you did. What exactly did you buy to be able to reprogram the chip? You mentioned: https://www.aliexpress.com/item/Free-Shipping-EZP2013-Update-from-EZP2010-high-speed-USB-SPI-Programmer-24-25-93-EEPROM-25/1986423115.html. Was there something else? I will order one of those immediately after you confirm. Maybe you could also write a brief 'howto'?
  0  
  0  
#12
Options
Re:I NEED cpe210 DUMP
2017-05-14 19:12:25
well what did is just remove the spi flash from the ap the image of the chip is in the other thread , read and save the current image on the chip, then with a hex editor copy a openwrt sysupgrade fw to address 40000 in the image that i red, save the new file and flash it
but i didn't have any luck installing pharos fw , maybe because the is a signature partition that is missing.
you can also buy a cheaper one XTW100 mini programmer USB
  0  
  0  
#13
Options
Re:I NEED cpe210 DUMP
2017-05-16 01:21:44
Hi, well I cannot really imagine what to do with the device after I get it. You say "just remove the spi flash from the ap". How do you remove it? Solder it out, flash it and then solder it back in place? I would try that, if that is what you meant. Let me pick your brain a little more - how do you know which USB Programmer can do what you want? I can order any one, but both that you suggested I can only find from China. It takes an item 3+ weeks to arrive from China to Spain. If I could order some programmer available on Amazon.es premium, it will all happen much faster. The ones you suggest are not available, however, what I can find that seems similar are:
https://www.amazon.es/WINGONEER-velocidad-Programador-EZP2010-EZP2013/dp/B01DZC36GY/ref=sr_1_1?ie=UTF8&qid=1494867638&sr=8-1&keywords=ezp2013
https://www.amazon.es/WINGONEER-EEPROM-enrutamiento-programador-escritor/dp/B01H938PRK/ref=sr_1_10?ie=UTF8&qid=1494867777&sr=8-10&keywords=programador+usb
However, I cannot figure out whether these will do what I need.
And also can you tell me, if these clamps are any good for me, as it seems they are made especially for reprogramming without "removal"?
https://www.amazon.es/WINGONEER-versi%C3%B3n-circuito-programaci%C3%B3n-adaptadores/dp/B012VSGQ0Q/ref=pd_bxgy_107_img_2?_encoding=UTF8&psc=1&refRID=AJVCA67V9WPGR7A7D7TG
What software do you use to read and write the dumps?
  0  
  0  
#14
Options
Re:I NEED cpe210 DUMP
2017-05-18 03:07:43
You are right, you can get the cable to flash the spi without desolder it, the software comes with the programmer, you can edit the dump in a hex editor then flash itAny progrmmer would work that you mentioned. Ask me any thing, happy to help.
  0  
  0  
#15
Options
Re:I NEED cpe210 DUMP
2017-05-24 12:44:10
I managed to do it too. However, just as mixawy0 - I was only able to revive the bricked device back to OpenWRT. @R1D2 I tried using the uboot, you provided. And even though it is different than the one on my device, I see no change when I use it. I fixed my image with your uboot, and it still works with OpenWRT. However, I still cannot get past the 4th line when connected through the serial interface. And even though it no longer asks for vmlinuz, when trying to autorecover through TFTP, it does not recover anything. The OpenWRT image remains on and working. Can you please provide a full image of your CPE 210 v1.0? I want to try studying it and maybe flashing it. I could try build myself an image of Pharos and your uboot, if I knew at what offset I need to write the Pharos image.
  0  
  0  
#16
Options
partition table cpe210
2017-05-24 20:42:29
partition fs-uboot base 0x00000 size 0x20000
partition partition-table base 0x20000 size 0x02000
partition default-mac base 0x30000 size 0x00020
partition product-info base 0x31100 size 0x00100
partition signature base 0x32000 size 0x00400
partition os-image base 0x40000 size 0x170000
partition soft-version base 0x1b0000 size 0x00100
partition support-list base 0x1b1000 size 0x00400
partition file-system base 0x1c0000 size 0x600000
partition user-config base 0x7c0000 size 0x10000
partition default-config base 0x7d0000 size 0x10000
partition log base 0x7e0000 size 0x10000
partition radio base 0x7f0000 size 0x10000
  0  
  0  
#17
Options
Re:I NEED cpe210 DUMP
2017-05-25 08:41:48

jimmytaker wrote

Can you please provide a full image of your CPE 210 v1.0?


Sure, no problem. Find attached archive of all 7 partitions. But take care to flash them on correct addresses. When I last checked the OpenWRT partition table, it was different compared to the original CPE partition table. This is the partition table of my CPE210 v1.0 for reference:

[CODE]dev: size erasesize name
mtd0: 00020000 00010000 "u-boot"
mtd1: 00010000 00010000 "pation-table"
mtd2: 00010000 00010000 "product-info"
mtd3: 00180000 00010000 "kernel"
mtd4: 00600000 00010000 "rootfs"
mtd5: 00030000 00010000 "config"
mtd6: 00010000 00010000 "ART"
[/CODE]

This are the md5 checksums of the 7 files in attached ZIP archive:

[CODE]MD5 (mtdblock0) = 03af561034b6faf8d93adda8eed591dd
MD5 (mtdblock1) = f80ba6723eff0da04328c0603543d2c8
MD5 (mtdblock2) = 5e4589d48005bbf5b17c4025e1123788
MD5 (mtdblock3) = 8bd33eab4761a483b1cdd146a61eb515
MD5 (mtdblock4) = 30ad122107b7200d098a15dd5bc1abc7
MD5 (mtdblock5) = 465d28439117ec959d62c2eed5dba061
MD5 (mtdblock6) = 5a763917b74cf02a537e69e7f2f730eb
[/CODE]

The password I used to enable ssh was: tp-link. But you will probably want to reset to factory defaults anyway after flashing.

Good luck!

PS: I couldn't manage to upload the rootfs partition (mtdblock4), the forum software always throws a "database error". So I have stripped the rootfs from the archive. You can extract the relevant parts from the firmware file. This are the offsets in firmware version 2-0-0-P1[20170301-rel45104]:

[CODE]fwup-ptn partition-table base 0x00800 size 0x00800
fwup-ptn os-image base 0x01000 size 0xcbf8d
fwup-ptn soft-version base 0xccf8d size 0x00015
fwup-ptn support-list base 0xccfa2 size 0x0063c
fwup-ptn file-system base 0xcd5de size 0x3e4001
[/CODE]
File:
Archive.zipDownload
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#18
Options
Re:I NEED cpe210 DUMP
2017-07-09 06:25:22
Anyone with a dump of a CPE510? i screwed up ART partition
  2  
  2  
#19
Options
12
Related Articles
 i need CPE510 full dump firmware, i really need it
848 0
 CPE210 - will it do what I need or do I need something else.
6476 0
TP LINK EAP 110 INDOOR I NEED DUMP FILE PLEASE HELP ME
616 0
 full dump request
364 0
 Anyone with a dump of a CPE510?
428 0
Need assistance passing multiple VLANs accross PHAROS CPE210 Pair
6493 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.