Flash a new bootloader or firmware AT YOUR OWN RISKS, be aware that you can bricked your nas. Un-bricking can in the best case be achieved thanks to a serial console but can require a JTAG access.


Redboot with tftpboot failsafe

I have patched the boot loader in order to incorporate a failsafe feature : tftpboot. Redboot will first try to boot over the network provided that you have a running tftp server at 192.168.1.3 and serving a kernel named zrescue. If it fails requesting the file, Redboot will resume a normal boot sequence from flash. This Redboot version is compatible with the Planex flash mapping (I do not have mappings for other vendors)

This redboot is meant for 8MB Flash with Planex partition layout (hidden and unsused ramdisk)
I can provide other redboot binaries with a different layout upon request from users with confirmed JTAG access.

Procedure to flash the new bootloader

1. if you have access to redboot through a serial console and a running tftp server, proceed here:

grab redboot from redboot_cs351x_planex_109a.bin

Flash Block Size = 65536

Storlink SL351x Boot Loader [Linux], version 1.0.9
Built by linux, 18:38:20, Dec 24 2007

Processor: SL3516c2
CPU Rate: 300000000
AHB Bus Clock:150MHz    Ratio:2/1
MAC 1 Address: 00:50:C2:11:11:11
MAC 2 Address: 00:50:C2:22:22:22
inet addr: 192.168.1.250/255.255.255.0
==> enter ^C to abort booting within 2 seconds ...... 
PHY 0 Addr 1 Vendor ID: 0x001cc912
mii_write: phy_addr=0x1 reg_addr=0x4 value=0x5e1 
mii_write: phy_addr=0x1 reg_addr=0x9 value=0x300 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x1200 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x9200 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x1200 
mii_write: phy_addr=0x1 reg_addr=0x18 value=0x2741 

                              Boot Menu (8M+128M version 1.3)
==============================================================================
0: Reboot                                   1: Start the Kernel Code
2: List Image                               3: Delete Image
4: Create New Image                         5: Enter Command Line Interface
6: Set IP Address                           7: Set MAC Address
8: Show Configuration                       F: Create Default FIS
X: Upgrade Boot                             Y: Upgrade Kernel
Z: Upgrade Firmware                         A: Upgrade Application
R: Upgrade RAM Disk                         

=> Select: X

1  : Download by X-modem
2  : Download by TFTP
ESC: Return 
==> 2
TFTP Server IP Address: 192.168.1.3
Image Path and name(e.g. /images/zImage): redboot_cs351x_planex_109a.bin
TFTP Download redboot_cs351x_planex_109a.bin from 192.168.1.3 ....

Successful to download by TFTP! Size=77408

Unknown image header!!
Are you sure to continue (Y/N) ? Y
Do not power-off this device while flash programming is proceeding!!
==> enter ^C to abort program flash 0x30000000 within 2 seconds ...... 

Erase flash (0x30000000): Size=131072 .. OK!
Program flash (0x30000000): Size=77408 .. OK!

Start Update FIS data......
Erase flash (0x307e0000): Size=131072 .. OK!
Program flash (0x307e0000): Size=5120 . OK!
Successful to upgrade (0x30000000)!

                              Boot Menu (8M+128M version 1.3)
==============================================================================
0: Reboot                                   1: Start the Kernel Code
2: List Image                               3: Delete Image
4: Create New Image                         5: Enter Command Line Interface
6: Set IP Address                           7: Set MAC Address
8: Show Configuration                       F: Create Default FIS
X: Upgrade Boot                             Y: Upgrade Kernel
Z: Upgrade Firmware                         A: Upgrade Application
R: Upgrade RAM Disk                         

=> Select: 0

Storlink SL351x  Boot Loader [Linux], version 1.0.9a
Built by openGemini, 00:54:33, Oct  6 2010

Processor: SL3516c2
CPU Rate: 300000000
AHB Bus Clock:150MHz    Ratio:2/1
MAC 1 Address: 00:50:C2:11:11:11
MAC 2 Address: 00:50:C2:22:22:22
inet addr: 192.168.1.250/255.255.255.0
PHY 0 Addr 1 Vendor ID: 0x001cc912
mii_write: phy_addr=0x1 reg_addr=0x4 value=0x5e1 
mii_write: phy_addr=0x1 reg_addr=0x9 value=0x300 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x1200 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x9200 
mii_write: phy_addr=0x1 reg_addr=0x0 value=0x1200 

BOARD_SAFE_TFTPBOOT zrescue from C0A80103
..............................
Failed for TFTP GET! (-3) timeout
...........................................Success for TFTP GET!
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.32.16 (pf@HIRTER) (gcc version 4.3.4 (GCC) ) #4 Wed Oct 6 01:04:19 CEST 2010
CPU: FA526 [66015261] revision 1 (ARMv4), cr=0000397f
CPU: VIVT data cache, VIVT instruction cache
Machine: PLANEX MZK-NAS02SG
Oct  6 01:10:59 localhost tftpd[29032]: tftpd: trying to get file: zrescue
Oct  6 01:10:59 localhost tftpd[29032]: tftpd: serving file from /tftpboot

2. if you do not have a serial console

First install openwrt instead of the Planex firmware here

Then gain access to the nas through telnet or ssh

cd /tmp
mtd erase /dev/mtd0
wget http://opengemini.free.fr/cs351x/redboot/redboot_cs351x_planex_109a.bin
mtd write redboot_cs351x_planex_109a.img mtd0
reboot
 
Back to top
redboot.txt · Last modified: 2012/02/20 23:14 (external edit)
 
 
chimeric.de = chi`s home Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0