Ubee DDW2602

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Ubee DDW2602

Manuf (OEM/ODM): Foxconn U10C037 .20

FCC approval date: 09 December 2004
(Est.) release date: January 2008
Country of manuf.: China

Type: wireless router, cable modem

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Broadcom BCM3361
FLA1: 8 MiB 8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX29LV640EBTI-70G)
RAM1: 32 MiB 33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br /> (Brand? Model?)

Expansion IFs: USB (unk. standard - slave), Mini PCI
Mini PCI slots: 1
Serial: yes, internal, 4-pin header, (115200,8,N,1), populated, 3.3V TTL, J353

WI1 module: Foxconn T60H096
WI1 module IF: Mini PCI
WI1 chip1: Broadcom BCM4318
WI1 802dot11 protocols: bg
WI1 antenna connector: U.FL, RP-SMA

ETH chip1: Broadcom BCM3361
Switch: Broadcom BCM5325E
LAN speed: 100M
LAN ports: 4

bg

Additional chips
Direct Conversion Cable Tuner;Broadcom;BCM3421;Broadcom, BCM3421KMLG, TS1015 P10, 62757 11;1;

Stock FW OS: eCos

Flags: DOCSIS 2.0

Default SSID: XXXX
Default IP address: 192.168.100.1
the IP 192.168.100.1 is used by 57 additional devices
of which 3 are Ubee devices

802dot11 OUI: C4:46:19 (-, 4 W)
Ethernet OUI: C4:46:19 (-, 4 W)

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.


User Guide on wavebroadband

Rev: 1.03, dated 2013-01-03

"U10C037" and "REV.0 GP" is silkscreened on the board.

One particular production model board is using a mix of nichicon and Chemi-Con branded radial capacitors.

This device is using...

  • a Broadcom BCM3361 (BCM3361KPBG) Cable Modem SoC
  • an 8MB Flash chip (Macronix MX29LV640EBTI-70G)
  • an RAM chip of unknown size and part (it's under a soldered on shield which I do not currently feel like removing)
  • a Foxconn T60H096 wireless module (BCM4318)
  • a Broadcom BCM5325E (BCM5325EKQMG) FE Switch

The default SSID for the device (or at the very least, some devices) appears to be the last two octets of the Cable RF MAC address (it's on the label) w/ lower case characters.

Serial

Pinout

1 (GND)
  (TxD)
  (...)
  (RxD)
  (GND) J353

Info derived from

 • boot log (default / Image 2)

BCM3361A1 TP0
1
Shmoo: Passed
DDR1 DDR2 DDR3 DDR4 VCDL
0000 0000 0424 0000 0C0C
Sync:1
346890
MemSize:             32 M

BootLoader Version: 5.1.1b Release Gnu spiboot reduced DDR drive
Build Date: Jun  3 2008
Build Time: 15:08:13

Signature/PID: a615



Foxconn BootLoader Version: 5.1.1b Release Gnu spiboot reduced DDR drive
Flash detected @0xbf000000
Image 1 Program Header:
   Signature: a615
     Control: 0005
   Major Rev: 0001
   Minor Rev: 0000
  Build Time: 2009/1/23 06:26:18 Z
 File Length: 2086967 bytes
Load Address: 80004000
    Filename: ecram_sto.bin
         HCS: 1560
         CRC: c064a433


Image 2 Program Header:
   Signature: a615
     Control: 0005
   Major Rev: 0001
   Minor Rev: 0000
  Build Time: 2009/7/29 12:27:33 Z
 File Length: 2086606 bytes
Load Address: 80004000
    Filename: ecram_sto.bin
         HCS: 99dc
         CRC: 23696876



Enter '1', '2', or 'p' within 2 seconds or take default...
. .

Performing CRC on Image 2...
CRC time = 89281466
Detected LZMA compressed image... decompressing...
Target Address: 0x80004000
Elapsed time 798622051

Decompressed length: 8893787

Executing Image 2...


 eCos - hal_diag_init
Init device '/dev/BrcmTelnetIoDriver'
Init device '/dev/ttydiag'
Init tty channel: 8087eff0
Init device '/dev/tty0'
Init tty channel: 8087f010
Init device '/dev/haldiag'
HAL/diag SERIAL init
Init device '/dev/ser0'
BCM 33XX SERIAL init - dev: 0.2
Set output buffer - buf: 0x8090c8d0 len: 2048
Set input buffer - buf: 0x8090d0d0 len: 2048
BCM 33XX SERIAL config
Current Boot Image : 2
file length= 2086606
program header length :92
Flash driver opened.
magic Num : 1634563696
length     :49
crc        :eb80af88
Total Parse 16 element
ParseTLV Successd !
Tag    : 11, Length : 1, Value =0
Tag    : 12, Length : 1, Value =1
Tag    : 13, Length : 1, Value =1
Tag    : 14, Length : 1, Value =0
Tag    : 15, Length : 1, Value =0
Tag    : 16, Length : 1, Value =0
Tag    : 17, Length : 1, Value =1
Tag    : 18, Length : 1, Value =1
Tag    : 19, Length : 1, Value =1
Tag    : 1a, Length : 1, Value =1
Tag    : 1b, Length : 1, Value =1
Tag    : 1c, Length : 1, Value =0
Tag    : 1d, Length : 1, Value =1
Tag    : 1e, Length : 1, Value =0
Tag    : 2d, Length : 1, Value =2
Programming BMU for ADC use.
  picocode: BCM3367/68 ADC Picocode rev 1.3.4SLIMS
  Date / Time stamp = Mon Jun 25 15:35:26 2007
  BMU picocode verified.
@@@@BPI Key is encryped@@@@
0000000 - The DS Channel List is being updated (RFI-N-03.0086).
0000001 - The list is empty; adding a single default scanning entry.
Fxtal is 25000000
Fclk_us_vco is 900000000
Fclk_us_pll is 450000000
Writing 0x00362266 to US_PLL
Fxtal is 25000000
Fclk_us_vco is 900000000
Fclk_us_pll is 450000000
Writing 0x00362266 to US_PLL
BcmMacInit: advMapRunAheadTimeMin = 5120 (0x00001400) 10.24 MHz ticks, 500 usec
0000002 - CM HAL reports h/w support for PHS, bitmask=3
0000003 - CM HAL reports h/w support for PHS, size=64
Tcpip NI: Init - RegisteredStackCount = 1
Tcpip NI: Init - RegisteredStackCount = 2
Tcpip NI: Init - RegisteredStackCount = 3
Tcpip NI: Init - RegisteredStackCount = 4
Tcpip NI: Init - RegisteredStackCount = 5
Propane version: 2.0.1 (28 Oct 2002)
0000004 - Configuring IP stack 2
0000005 -        IP address = 192.168.100.1
0000006 -        Subnet Mask = 255.255.255.0
0000007 -        Router = 192.168.100.254
0000008 -        IsPrimaryInterface = 0
0000009 - Successfully added MAC Management address to CAM
Initializing Net-SNMP transport for IPv4
0000010 - Interface 10 additional registration w/ SNMP agent OK.
Updates sent to WiFi driver...
************************************
*** Start up CPU load monitor module
************************************
SES2WindowClosed! (unexpected)
SES2WindowClosed! (unexpected)
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.0.5, November 19 2006
*********************************************
Initializing stack...0000011 - Configuring IP stack 5
0000012 -        IP address = 192.168.0.1
0000013 -        Subnet Mask = 255.255.255.0
0000014 -        Router = 192.168.0.254
0000015 -        IsPrimaryInterface = 0
0000016 - Configuring IP stack 4
0000017 -        IP address = 192.168.100.5
0000018 -        Subnet Mask = 255.255.255.0
0000019 -        Router = 192.168.100.254
0000020 -        IsPrimaryInterface = 0
[ERROR] key_from_blob: remaining bytes in key blob 167 0000021 - Interface 10 additional registration w/ SNMP agent OK.
DumpBuf(27): Setting CH engine - <80 00 11 3d 04 50 53 2f 63 34 3a 34 36 3a 31 39 3a 37 33 3a 63 36 3a 66 33 01 00 >
 OK
Now starting stack

******* MODE: AP with built-in Registrar and UPnP Proxy *******
WSC: Build-in Regstrar, wait for start command....


                          *
                         * *
                         * *
                        *   *
                        *   *
                       *     *
                       *     *
                       *     *
                      *       *
                      *       *
                      *       *
                     *         *
                     *         *
                     *         *
                     *         *
                    *           *
          *         *           *         *
        *   *       *           *       *   *          ***
*     *      *     *             *     *      *     *       *******************
   *          *   *               *   *          *
                *                   *

Broadcom Corporation Reference Design

 +----------------------------------------------------------------------------+
 |       _/_/     _/_/_/_/    _/_/                                            |
 |      _/  _/   _/        _/    _/   Broadband                               |
 |     _/  _/   _/        _/                                                  |
 |    _/_/     _/_/_/    _/           Foundation                              |
 |   _/  _/   _/        _/                                                    |
 |  _/   _/  _/        _/    _/       Classes                                 |
 | _/_/_/   _/          _/_/                                                  |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  BCM93361WRG MinimalConsole TelnetConsole Nonvol Slim            |
 | Features:  HeapManager SNMP Networking USB1.1 (script                      |
 | Features:  bcm93361wrgcmvendor_U10C037CharterRg)                           |
 +----------------------------------------------------------------------------+
 | Standard Embedded Target Support for BFC                                   |
 |                                                                            |
 | Copyright (c) 2003-2007 Broadcom Corporation                               |
 |                                                                            |
 | Revision:  3.0.1                                                           |
 |                                                                            |
 | Features:  PID=0xa615 Bootloader-Rev=5.1.1b                                |
 | Features:  Bootloader-Compression-Support=0x11                             |
 | Features:  Bcm80211g Library Build Oct 17 2007 15:40:31 Ver 4.120.25.1.47  |
 +----------------------------------------------------------------------------+
 | eCos BFC Application Layer                                                 |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.0.2                                                           |
 |                                                                            |
 | Features:  eCos Console Cmds, (no Idle Loop Profiler)                      |
 +----------------------------------------------------------------------------+
 |         _/_/    _/     _/                                                  |
 |      _/    _/  _/_/ _/_/   DOCSIS Cable Modem                              |
 |     _/        _/  _/ _/                                                    |
 |    _/        _/     _/                                                     |
 |   _/        _/     _/                                                      |
 |  _/    _/  _/     _/                                                       |
 |   _/_/    _/     _/                                                        |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  AckCel(tm) DOCSIS 1.0/1.1/2.0 Propane(tm) CM SNMP CM Vendor     |
 | Features:  Extension eDOCSIS SLED NA                                       |
 +----------------------------------------------------------------------------+
 | Broadcom Data-Only CM Vendor Extension                                     |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.0.2                                                           |
 |                                                                            |
 | Features:  DHCP Server  HTTP Server  OSS2-N-03025 Visualization LED        |
 | Features:  Controller  Reset/Standby Switch Support                        |
 +----------------------------------------------------------------------------+
 |         _/_/    _/    _/                                                   |
 |      _/    _/  _/    _/   CableHome Cable Modem                            |
 |     _/        _/    _/                                                     |
 |    _/        _/_/_/_/                                                      |
 |   _/        _/    _/      CableLabs Certified                              |
 |  _/    _/  _/    _/                                                        |
 |   _/_/    _/    _/                                                         |
 |                                                                            |
 | Copyright (c) 1999 - 2005 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  CableHome 1.0/1.1 CH SNMP CH Customer Extension                 |
 +----------------------------------------------------------------------------+
 | Broadcom CableHome Customer Extension                                      |
 |                                                                            |
 | Copyright (c) 1999 - 2004 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.6.2                                                           |
 |                                                                            |
 | Features:  ()                                                              |
 +----------------------------------------------------------------------------+
 | Build Date:  Jul 29 2009                                                   |
 | Build Time:  20:27:21                                                      |
 | Built By:    bill                                                          |
 | Firmware version:   5.105.1003                                             |
 | Hidden version : 5.105.1003a                                               |
 +----------------------------------------------------------------------------+

StartFoxTplusClient: Starting TACACS Client Thread successfully!!
Scanning DS Channel at 00000861000000 Hz...
22 - Starting at the beginning of the DS Channel List.
CM> Scanning DS Channel at 855000000 Hz...
Scanning DS Channel at 849000000 Hz...
Scanning DS Channel at 843000000 Hz...
Scanning DS Channel at 837000000 Hz...
Scanning DS Channel at 831000000 Hz...
Scanning DS Channel at 825000000 Hz...
Scanning DS Channel at 819000000 Hz...
Scanning DS Channel at 813000000 Hz...
Scanning DS Channel at 807000000 Hz...
Scanning DS Channel at 801000000 Hz...
Scanning DS Channel at 795000000 Hz...
Scanning DS Channel at 789000000 Hz...
Scanning DS Channel at 783000000 Hz...
Scanning DS Channel at 777000000 Hz...
Scanning DS Channel at 771000000 Hz...
Scanning DS Channel at 765000000 Hz...
Scanning DS Channel at 759000000 Hz...
Scanning DS Channel at 753000000 Hz...
Scanning DS Channel at 747000000 Hz...
Scanning DS Channel at 741000000 Hz...
Scanning DS Channel at 735000000 Hz...
Scanning DS Channel at 729000000 Hz...
Scanning DS Channel at 723000000 Hz...
Scanning DS Channel at 717000000 Hz...
Scanning DS Channel at 711000000 Hz...
Scanning DS Channel at 705000000 Hz...
Scanning DS Channel at 699000000 Hz...
Scanning DS Channel at 693000000 Hz...
Scanning DS Channel at 687000000 Hz...
Scanning DS Channel at 681000000 Hz...
Scanning DS Channel at 675000000 Hz...
Scanning DS Channel at 669000000 Hz...
Scanning DS Channel at 663000000 Hz...
Scanning DS Channel at 657000000 Hz...
Scanning DS Channel at 651000000 Hz...
Scanning DS Channel at 645000000 Hz...
Scanning DS Channel at 639000000 Hz...
Scanning DS Channel at 633000000 Hz...
Scanning DS Channel at 627000000 Hz...
Scanning DS Channel at 621000000 Hz...
Scanning DS Channel at 615000000 Hz...
Scanning DS Channel at 609000000 Hz...
Scanning DS Channel at 603000000 Hz...
Scanning DS Channel at 597000000 Hz...
Scanning DS Channel at 591000000 Hz...
Scanning DS Channel at 585000000 Hz...
Scanning DS Channel at 579000000 Hz...
Scanning DS Channel at 573000000 Hz...
Scanning DS Channel at 567000000 Hz...
Scanning DS Channel at 561000000 Hz...
Scanning DS Channel at 555000000 Hz...
Scanning DS Channel at 549000000 Hz...
Scanning DS Channel at 543000000 Hz...
Scanning DS Channel at 537000000 Hz...
Scanning DS Channel at 531000000 Hz...
Scanning DS Channel at 525000000 Hz...
Scanning DS Channel at 519000000 Hz...
Scanning DS Channel at 513000000 Hz...
Scanning DS Channel at 507000000 Hz...
Scanning DS Channel at 501000000 Hz...
Scanning DS Channel at 495000000 Hz...
Scanning DS Channel at 489000000 Hz...
Scanning DS Channel at 483000000 Hz...
Scanning DS Channel at 477000000 Hz...
Scanning DS Channel at 471000000 Hz...
Scanning DS Channel at 465000000 Hz...
Scanning DS Channel at 459000000 Hz...
Scanning DS Channel at 453000000 Hz...
Scanning DS Channel at 447000000 Hz...
Scanning DS Channel at 441000000 Hz...
Scanning DS Channel at 435000000 Hz...
Scanning DS Channel at 429000000 Hz...
Scanning DS Channel at 423000000 Hz...
Scanning DS Channel at 417000000 Hz...
Scanning DS Channel at 411000000 Hz...
Scanning DS Channel at 405000000 Hz...
Scanning DS Channel at 399000000 Hz...
Scanning DS Channel at 393000000 Hz...
Scanning DS Channel at 387000000 Hz...
Scanning DS Channel at 381000000 Hz...
Scanning DS Channel at 375000000 Hz...
Scanning DS Channel at 369000000 Hz...
Scanning DS Channel at 363000000 Hz...
Scanning DS Channel at 357000000 Hz...
Scanning DS Channel at 351000000 Hz...
Scanning DS Channel at 345000000 Hz...
Scanning DS Channel at 339000000 Hz...
Scanning DS Channel at 333000000 Hz...
Scanning DS Channel at 327000000 Hz...
Scanning DS Channel at 321000000 Hz...
Scanning DS Channel at 315000000 Hz...
Scanning DS Channel at 309000000 Hz...
Scanning DS Channel at 303000000 Hz...
Scanning DS Channel at 297000000 Hz...
Scanning DS Channel at 291000000 Hz...
Scanning DS Channel at 285000000 Hz...
Scanning DS Channel at 279000000 Hz...
Scanning DS Channel at 273000000 Hz...
Scanning DS Channel at 267000000 Hz...
Scanning DS Channel at 261000000 Hz...
Scanning DS Channel at 255000000 Hz...
Scanning DS Channel at 249000000 Hz...
Scanning DS Channel at 243000000 Hz...
Scanning DS Channel at 237000000 Hz...
Scanning DS Channel at 231000000 Hz...
Scanning DS Channel at 225000000 Hz...
Scanning DS Channel at 219000000 Hz...
Scanning DS Channel at 213000000 Hz...
Scanning DS Channel at 207000000 Hz...
Scanning DS Channel at 201000000 Hz...
Scanning DS Channel at 195000000 Hz...
Scanning DS Channel at 189000000 Hz...
Scanning DS Channel at 183000000 Hz...
Scanning DS Channel at 177000000 Hz...
Scanning DS Channel at 171000000 Hz...
Scanning DS Channel at 165000000 Hz...
Scanning DS Channel at 159000000 Hz...
Scanning DS Channel at 153000000 Hz...
Scanning DS Channel at 147000000 Hz...
Scanning DS Channel at 141000000 Hz...
Scanning DS Channel at 135000000 Hz...
Scanning DS Channel at 129000000 Hz...
Scanning DS Channel at 123000000 Hz...
Scanning DS Channel at 117000000 Hz...
Scanning DS Channel at 111000000 Hz...
Scanning DS Channel at 105000000 Hz...
Scanning DS Channel at 99000000 Hz...
Scanning DS Channel at 93000000 Hz...
 • boot log (Image 1)
BCM3361A1 TP0
1
Shmoo: Passed
DDR1 DDR2 DDR3 DDR4 VCDL
0000 0000 0424 0000 0C0C
Sync:1
346890
MemSize:             32 M

BootLoader Version: 5.1.1b Release Gnu spiboot reduced DDR drive
Build Date: Jun  3 2008
Build Time: 15:08:13

Signature/PID: a615



Foxconn BootLoader Version: 5.1.1b Release Gnu spiboot reduced DDR drive
Flash detected @0xbf000000
Image 1 Program Header:
   Signature: a615
     Control: 0005
   Major Rev: 0001
   Minor Rev: 0000
  Build Time: 2009/1/23 06:26:18 Z
 File Length: 2086967 bytes
Load Address: 80004000
    Filename: ecram_sto.bin
         HCS: 1560
         CRC: c064a433


Image 2 Program Header:
   Signature: a615
     Control: 0005
   Major Rev: 0001
   Minor Rev: 0000
  Build Time: 2009/7/29 12:27:33 Z
 File Length: 2086606 bytes
Load Address: 80004000
    Filename: ecram_sto.bin
         HCS: 99dc
         CRC: 23696876



Enter '1', '2', or 'p' within 2 seconds or take default...
.

Performing CRC on Image 1...
CRC time = 89296959
Detected LZMA compressed image... decompressing...
Target Address: 0x80004000
Elapsed time 798590436

Decompressed length: 8904268

Executing Image 1...


 eCos - hal_diag_init
Init device '/dev/BrcmTelnetIoDriver'
Init device '/dev/ttydiag'
Init tty channel: 808818e0
Init device '/dev/tty0'
Init tty channel: 80881900
Init device '/dev/haldiag'
HAL/diag SERIAL init
Init device '/dev/ser0'
BCM 33XX SERIAL init - dev: 0.2
Set output buffer - buf: 0x8090f1c0 len: 2048
Set input buffer - buf: 0x8090f9c0 len: 2048
BCM 33XX SERIAL config
Current Boot Image : 1
file length= 2086967
program header length :92
Flash driver opened.
magic Num : 1634563696
length     :52
crc        :522728a1
Total Parse 17 element
ParseTLV Successd !
Tag    : 11, Length : 1, Value =1
Tag    : 31, Length : 1, Value =1
Tag    : 12, Length : 1, Value =1
Tag    : 13, Length : 1, Value =1
Tag    : 14, Length : 1, Value =0
Tag    : 15, Length : 1, Value =0
Tag    : 16, Length : 1, Value =0
Tag    : 17, Length : 1, Value =1
Tag    : 18, Length : 1, Value =1
Tag    : 19, Length : 1, Value =1
Tag    : 1a, Length : 1, Value =1
Tag    : 1b, Length : 1, Value =1
Tag    : 1c, Length : 1, Value =1
Tag    : 1d, Length : 1, Value =1
Tag    : 1e, Length : 1, Value =0
Tag    : 2d, Length : 1, Value =2
Programming BMU for ADC use.
  picocode: BCM3367/68 ADC Picocode rev 1.3.4SLIMS
  Date / Time stamp = Mon Jun 25 15:35:26 2007
  BMU picocode verified.
@@@@BPI Key is encryped@@@@
0000000 - The DS Channel List is being updated (RFI-N-03.0086).
0000001 - The list is empty; adding a single default scanning entry.
Fxtal is 25000000
Fclk_us_vco is 900000000
Fclk_us_pll is 450000000
Writing 0x00362266 to US_PLL
Fxtal is 25000000
Fclk_us_vco is 900000000
Fclk_us_pll is 450000000
Writing 0x00362266 to US_PLL
BcmMacInit: advMapRunAheadTimeMin = 5120 (0x00001400) 10.24 MHz ticks, 500 usec
0000002 - CM HAL reports h/w support for PHS, bitmask=3
0000003 - CM HAL reports h/w support for PHS, size=64
Tcpip NI: Init - RegisteredStackCount = 1
Tcpip NI: Init - RegisteredStackCount = 2
Tcpip NI: Init - RegisteredStackCount = 3
Tcpip NI: Init - RegisteredStackCount = 4
Tcpip NI: Init - RegisteredStackCount = 5
Propane version: 2.0.1 (28 Oct 2002)
0000004 - Configuring IP stack 2
0000005 -        IP address = 192.168.100.1
0000006 -        Subnet Mask = 255.255.255.0
0000007 -        Router = 192.168.100.254
0000008 -        IsPrimaryInterface = 0
0000009 - Successfully added MAC Management address to CAM
Initializing Net-SNMP transport for IPv4
0000010 - Interface 10 additional registration w/ SNMP agent OK.
Updates sent to WiFi driver...
************************************
*** Start up CPU load monitor module
************************************
SES2WindowClosed! (unexpected)
SES2WindowClosed! (unexpected)
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.0.5, November 19 2006
*********************************************
Initializing stack...0000011 - Configuring IP stack 5
0000012 -        IP address = 192.168.0.1
0000013 -        Subnet Mask = 255.255.255.0
0000014 -        Router = 192.168.0.254
0000015 -        IsPrimaryInterface = 0
0000016 - Configuring IP stack 4
0000017 -        IP address = 192.168.100.5
0000018 -        Subnet Mask = 255.255.255.0
0000019 -        Router = 192.168.100.254
0000020 -        IsPrimaryInterface = 0
[ERROR] key_from_blob: remaining bytes in key blob 167 0000021 - Interface 10 additional registration w/ SNMP agent OK.
DumpBuf(27): Setting CH engine - <80 00 11 3d 04 50 53 2f 63 34 3a 34 36 3a 31 39 3a 37 33 3a 63 36 3a 66 33 01 00 >
 OK
Now starting stack

******* MODE: AP with built-in Registrar and UPnP Proxy *******
WSC: Build-in Regstrar, wait for start command....


                          *
                         * *
                         * *
                        *   *
                        *   *
                       *     *
                       *     *
                       *     *
                      *       *
                      *       *
                      *       *
                     *         *
                     *         *
                     *         *
                     *         *
                    *           *
          *         *           *         *
        *   *       *           *       *   *          ***
*     *      *     *             *     *      *     *       *******************
   *          *   *               *   *          *
                *                   *

Broadcom Corporation Reference Design

 +----------------------------------------------------------------------------+
 |       _/_/     _/_/_/_/    _/_/                                            |
 |      _/  _/   _/        _/    _/   Broadband                               |
 |     _/  _/   _/        _/                                                  |
 |    _/_/     _/_/_/    _/           Foundation                              |
 |   _/  _/   _/        _/                                                    |
 |  _/   _/  _/        _/    _/       Classes                                 |
 | _/_/_/   _/          _/_/                                                  |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  BCM93361WRG MinimalConsole TelnetConsole Nonvol Slim            |
 | Features:  HeapManager SNMP Networking USB1.1 (script                      |
 | Features:  bcm93361wrgcmvendor_U10C037CharterRg)                           |
 +----------------------------------------------------------------------------+
 | Standard Embedded Target Support for BFC                                   |
 |                                                                            |
 | Copyright (c) 2003-2007 Broadcom Corporation                               |
 |                                                                            |
 | Revision:  3.0.1                                                           |
 |                                                                            |
 | Features:  PID=0xa615 Bootloader-Rev=5.1.1b                                |
 | Features:  Bootloader-Compression-Support=0x11                             |
 | Features:  Bcm80211g Library Build Oct 17 2007 15:40:31 Ver 4.120.25.1.47  |
 +----------------------------------------------------------------------------+
 | eCos BFC Application Layer                                                 |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.0.2                                                           |
 |                                                                            |
 | Features:  eCos Console Cmds, (no Idle Loop Profiler)                      |
 +----------------------------------------------------------------------------+
 |         _/_/    _/     _/                                                  |
 |      _/    _/  _/_/ _/_/   DOCSIS Cable Modem                              |
 |     _/        _/  _/ _/                                                    |
 |    _/        _/     _/                                                     |
 |   _/        _/     _/                                                      |
 |  _/    _/  _/     _/                                                       |
 |   _/_/    _/     _/                                                        |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  AckCel(tm) DOCSIS 1.0/1.1/2.0 Propane(tm) CM SNMP CM Vendor     |
 | Features:  Extension eDOCSIS SLED NA                                       |
 +----------------------------------------------------------------------------+
 | Broadcom Data-Only CM Vendor Extension                                     |
 |                                                                            |
 | Copyright (c) 1999 - 2007 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.0.2                                                           |
 |                                                                            |
 | Features:  DHCP Server  HTTP Server  OSS2-N-03025 Visualization LED        |
 | Features:  Controller  Reset/Standby Switch Support                        |
 +----------------------------------------------------------------------------+
 |         _/_/    _/    _/                                                   |
 |      _/    _/  _/    _/   CableHome Cable Modem                            |
 |     _/        _/    _/                                                     |
 |    _/        _/_/_/_/                                                      |
 |   _/        _/    _/      CableLabs Certified                              |
 |  _/    _/  _/    _/                                                        |
 |   _/_/    _/    _/                                                         |
 |                                                                            |
 | Copyright (c) 1999 - 2005 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  4.4.1                                                           |
 |                                                                            |
 | Features:  CableHome 1.0/1.1 CH SNMP CH Customer Extension                 |
 +----------------------------------------------------------------------------+
 | Broadcom CableHome Customer Extension                                      |
 |                                                                            |
 | Copyright (c) 1999 - 2004 Broadcom Corporation                             |
 |                                                                            |
 | Revision:  3.6.2                                                           |
 |                                                                            |
 | Features:  ()                                                              |
 +----------------------------------------------------------------------------+
 | Build Date:  Jan 23 2009                                                   |
 | Build Time:  14:26:05                                                      |
 | Built By:    seric                                                         |
 | Firmware version:   5.105.1001                                             |
 | Hidden version : 5.105.1001a                                               |
 +----------------------------------------------------------------------------+

StartFoxTplusClient: Starting TACACS Client Thread successfully!!
0000022 - Starting at the beginning of the DS Channel List.
CM>  Scanning All Frequency 861000000 Hz...
 Scanning All Frequency 855000000 Hz...
 Scanning All Frequency 849000000 Hz...
 Scanning All Frequency 843000000 Hz...
 Scanning All Frequency 837000000 Hz...
 Scanning All Frequency 831000000 Hz...
 Scanning All Frequency 825000000 Hz...
 Scanning All Frequency 819000000 Hz...
 Scanning All Frequency 813000000 Hz...
 Scanning All Frequency 807000000 Hz...
 Scanning All Frequency 801000000 Hz...
 Scanning All Frequency 795000000 Hz...
 Scanning All Frequency 789000000 Hz...
 Scanning All Frequency 783000000 Hz...
 Scanning All Frequency 777000000 Hz...
 Scanning All Frequency 771000000 Hz...
 Scanning All Frequency 765000000 Hz...
 Scanning All Frequency 759000000 Hz...
 Scanning All Frequency 753000000 Hz...
 Scanning All Frequency 747000000 Hz...
 Scanning All Frequency 741000000 Hz...
 Scanning All Frequency 735000000 Hz...
 Scanning All Frequency 729000000 Hz...
 Scanning All Frequency 723000000 Hz...
 Scanning All Frequency 717000000 Hz...
 Scanning All Frequency 711000000 Hz...
 Scanning All Frequency 705000000 Hz...
 Scanning All Frequency 699000000 Hz...
 Scanning All Frequency 693000000 Hz...
 Scanning All Frequency 687000000 Hz...
 Scanning All Frequency 681000000 Hz...
 Scanning All Frequency 675000000 Hz...
 Scanning All Frequency 669000000 Hz...
 Scanning All Frequency 663000000 Hz...
 Scanning All Frequency 657000000 Hz...
 Scanning All Frequency 651000000 Hz...
 Scanning All Frequency 645000000 Hz...
 Scanning All Frequency 639000000 Hz...
 Scanning All Frequency 633000000 Hz...
 Scanning All Frequency 627000000 Hz...
 Scanning All Frequency 621000000 Hz...
 Scanning All Frequency 615000000 Hz...
 Scanning All Frequency 609000000 Hz...
 Scanning All Frequency 603000000 Hz...
 Scanning All Frequency 597000000 Hz...
 Scanning All Frequency 591000000 Hz...
 Scanning All Frequency 585000000 Hz...
 Scanning All Frequency 579000000 Hz...
 Scanning All Frequency 573000000 Hz...
 Scanning All Frequency 567000000 Hz...
 Scanning All Frequency 561000000 Hz...
 Scanning All Frequency 555000000 Hz...
 Scanning All Frequency 549000000 Hz...
 Scanning All Frequency 543000000 Hz...
 Scanning All Frequency 537000000 Hz...
 Scanning All Frequency 531000000 Hz...
 Scanning All Frequency 525000000 Hz...
 Scanning All Frequency 519000000 Hz...
 Scanning All Frequency 513000000 Hz...
 Scanning All Frequency 507000000 Hz...
 Scanning All Frequency 501000000 Hz...
 Scanning All Frequency 495000000 Hz...
 Scanning All Frequency 489000000 Hz...
 Scanning All Frequency 483000000 Hz...
 Scanning All Frequency 477000000 Hz...
 Scanning All Frequency 471000000 Hz...
 Scanning All Frequency 465000000 Hz...
 Scanning All Frequency 459000000 Hz...
 Scanning All Frequency 453000000 Hz...
 Scanning All Frequency 447000000 Hz...
 Scanning All Frequency 441000000 Hz...
 Scanning All Frequency 435000000 Hz...
 Scanning All Frequency 429000000 Hz...
 Scanning All Frequency 423000000 Hz...
 Scanning All Frequency 417000000 Hz...
 Scanning All Frequency 411000000 Hz...
 Scanning All Frequency 405000000 Hz...
 Scanning All Frequency 399000000 Hz...
 Scanning All Frequency 393000000 Hz...
 Scanning All Frequency 387000000 Hz...
 Scanning All Frequency 381000000 Hz...
 Scanning All Frequency 375000000 Hz...
 Scanning All Frequency 369000000 Hz...
 Scanning All Frequency 363000000 Hz...
 Scanning All Frequency 357000000 Hz...
 Scanning All Frequency 351000000 Hz...
 Scanning All Frequency 345000000 Hz...
 Scanning All Frequency 339000000 Hz...
 Scanning All Frequency 333000000 Hz...
 Scanning All Frequency 327000000 Hz...
 Scanning All Frequency 321000000 Hz...
 Scanning All Frequency 315000000 Hz...
 Scanning All Frequency 309000000 Hz...
 Scanning All Frequency 303000000 Hz...
 Scanning All Frequency 297000000 Hz...
 Scanning All Frequency 291000000 Hz...
 Scanning All Frequency 285000000 Hz...
 Scanning All Frequency 279000000 Hz...
 Scanning All Frequency 273000000 Hz...
 Scanning All Frequency 267000000 Hz...
 Scanning All Frequency 261000000 Hz...
 Scanning All Frequency 255000000 Hz...
 Scanning All Frequency 249000000 Hz...
 Scanning All Frequency 243000000 Hz...
 Scanning All Frequency 237000000 Hz...
 Scanning All Frequency 231000000 Hz...
 Scanning All Frequency 225000000 Hz...
 Scanning All Frequency 219000000 Hz...
 Scanning All Frequency 213000000 Hz...
 Scanning All Frequency 207000000 Hz...
 Scanning All Frequency 201000000 Hz...
 Scanning All Frequency 195000000 Hz...
 Scanning All Frequency 189000000 Hz...
 Scanning All Frequency 183000000 Hz...
 Scanning All Frequency 177000000 Hz...
 Scanning All Frequency 171000000 Hz...
 Scanning All Frequency 165000000 Hz...
 Scanning All Frequency 159000000 Hz...
 Scanning All Frequency 153000000 Hz...
 Scanning All Frequency 147000000 Hz...
 Scanning All Frequency 141000000 Hz...
 Scanning All Frequency 135000000 Hz...
 Scanning All Frequency 129000000 Hz...
 Scanning All Frequency 123000000 Hz...
 Scanning All Frequency 117000000 Hz...
 Scanning All Frequency 111000000 Hz...
 Scanning All Frequency 105000000 Hz...
 Scanning All Frequency 99000000 Hz...
 Scanning All Frequency 93000000 Hz...