锐捷X60Pro-V1系列Openwrt分析
约 1056 字大约 4 分钟
2025-09-30
root@X60Pro:~# cat /proc/mtd
dev: size erasesize name
mtd0: 08000000 00020000 "spi0.1"
mtd1: 00100000 00020000 "BL2"
mtd2: 00080000 00020000 "u-boot-env"
mtd3: 00200000 00020000 "Factory"
mtd4: 00200000 00020000 "FIP"
mtd5: 00080000 00020000 "product_info"
mtd6: 00080000 00020000 "kdump"
mtd7: 03f00000 00020000 "ubi"Binwalk
BL2.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| 2056 | 0x00000808 | Mediatek File Info File Type: ARM-Bootloader Flash Type: NAND Sequential Flash Signature Type: PHASH Load Address: 0x200D00 File Length: 219756 Maximum Size: 221804 Content Offset: 0x300 Signature Lenght: 32 Jump Offset: 768 POST_BUILD_DONE |
| 175024 | 0x0002ABB0 | CRC32 polynomial table, little endian |
| 185664 | 0x0002D540 | xz compressed data |
| 220656 | 0x00035DF0 | Flattened device tree, size: 718 bytes, version: 17 |
FIP.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| 533489 | 0x000823F1 | CRC32 polynomial table, little endian |
| 586418 | 0x0008F2B2 | LZO compressed data |
| 646041 | 0x0009DB99 | Flattened device tree, size: 8792 bytes, version: 17 |
ubi.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| 0 | 0x00000000 | UBI erase count header, version: 1, EC: 0x1, VID header offset: 0x800, data offset: 0x1000 |
spi0.1.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| 2056 | 0x00000808 | Mediatek File Info File Type: ARM-Bootloader Flash Type: NAND Sequential Flash Signature Type: PHASH Load Address: 0x200D00 File Length: 219756 Maximum Size: 221804 Content Offset: 0x300 Signature Lenght: 32 Jump Offset: 768 POST_BUILD_DONE |
| 175024 | 0x0002ABB0 | CRC32 polynomial table, little endian |
| 185664 | 0x0002D540 | xz compressed data |
| 220656 | 0x00035DF0 | Flattened device tree, size: 718 bytes, version: 17 |
| 4203505 | 0x004023F1 | CRC32 polynomial table, little endian |
| 4256434 | 0x0040F2B2 | LZO compressed data |
| 4316057 | 0x0041DB99 | Flattened device tree, size: 8792 bytes, version: 17 |
| 6815744 | 0x00680000 | UBI erase count header, version: 1, EC: 0x1, VID header offset: 0x800, data offset: 0x1000 |
kdump.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| -------- | -------- | -------- |
product_info.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| -------- | -------- | -------- |
Factory.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| -------- | -------- | -------- |
u-boot-env.bin
| 十进制 | 十六进制 | 描述 |
|---|---|---|
| -------- | -------- | -------- |
SPI分布
| 描述 | 开始地址 | 结束地址 | 大小 | Erase数量 | 描述 | MTD |
|---|---|---|---|---|---|---|
| BL2 | 0x00000000 | 0x00100000 | 1 MiB | 8 | 引导分区 | mtd1 |
| U-boot-env | 0x00100000 | 0x00180000 | 0.5 MiB | 4 | uboot | mtd2 |
| Factory | 0x00180000 | 0x00380000 | 2 MiB | 16 | 工厂文件 | mtd3 |
| FIP | 0x00380000 | 0x00580000 | 2 MiB | 16 | uboot | mtd4 |
| Product Info | 0x00580000 | 0x00600000 | 0.5 MiB | 4 | 产品信息 | mtd5 |
| Kdump | 0x00600000 | 0x00680000 | 0.5 MiB | 4 | 内核转储 | mtd6 |
| Ubi | 0x00680000 | 0x04580000 | 63 MiB | 504 | 固件 | mtd7 |
| 空闲 | 0x04580000 | 0x07180000 | 44 MiB | 352 | 空闲 | 空闲 |
| 保留 | 0x07180000 | 0x08000000 | 14.5MiB | 116 | 保留 | 保留 |
闪存型号是W25N01GVZEIG，容量128MB，块大小128k（0x00020000） 128M = 1024 * 128 KB
root@X60Pro:~# cat /proc/mtd
dev: size erasesize name
mtd0: 08000000 00020000 "spi0.1"
mtd1: 00100000 00020000 "BL2"
mtd2: 00080000 00020000 "u-boot-env"
mtd3: 00200000 00020000 "Factory"
mtd4: 00200000 00020000 "FIP"
mtd5: 00080000 00020000 "product_info"
mtd6: 00080000 00020000 "kdump"
mtd7: 03f00000 00020000 "ubi"major minor #blocks name
31 0 131072 mtdblock0
31 1 1024 mtdblock1
31 2 512 mtdblock2
31 3 2048 mtdblock3
31 4 2048 mtdblock4
31 5 512 mtdblock5
31 6 512 mtdblock6
31 7 64512 mtdblock7
253 0 22320 ubiblock0_1模拟FLASH
| 类型 | 参数 |
|---|---|
| first_id_byte | 0xef |
| second_id_byte | 0xaa |
| third_id_byte | 0x03 |
| fourth_id_byte | 0x95 |
| parts | 8,4,16,16,4,4,504 |
modprobe mtd
modprobe mtdblock
modprobe nandsim first_id_byte=0xef second_id_byte=0xaa third_id_byte=0x80 fourth_id_byte=0x95 parts=8,4,16,16,4,4,972
dd if=spi0.1.bin of=/dev/mtd8 bs=128M count=1
modprobe ubi mtd=8
modprobe ubi
ubiattach /dev/ubi_ctrl -m 2 -O 2048
ubimkvol /dev/ubi0 -N ubifs_0 -m
mount -t ubifs ubi0:ubifs_0 /mnt/ubi配置
| 类型 | 参数 |
|---|---|
| CPU | MT7986A |
| RAM | W634GU6QB |
| FLASH | W25N01GVZEIG |
| 1G SWITCH | MT7531A |
| 2.5G Phy | RTL8221B |
| 5G Radio | MT7976AN |
| 5G Fem | QPF4526 |
| 2.4G Radio | MT7976GN |
| 2.4G Fem | QPF4211 |
Devices
root@X60Pro:~# cat /proc/devices
Character devices:
1 mem
4 ttyS
5 /dev/tty
5 /dev/console
5 /dev/ptmx
10 misc
89 i2c
90 mtd
108 ppp
128 ptm
136 pts
164 conninfra_drv
180 usb
189 usb_device
247 factory_loop
248 ubi0
249 rpmb
250 was_cfg_io
251 watchdog
252 iio
253 rtc
254 gpiochip
Block devices:
7 loop
8 sd
31 mtdblock
65 sd
66 sd
67 sd
68 sd
69 sd
70 sd
71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd
179 mmc
253 ubiblock
254 device-mapper
259 blkextplatform
root@X60Pro:~# ls /sys/devices/platform
10000000.consys 11200000.xhci 151e0000.wocpu0_ilm nmbm_spim_nand
10003000.wed_pcie 11210000.audio-controller 151e8000.wocpu_dlm pcie-phy@11c00000
1001c000.watchdog 11d00000.efuse 151f0000.wocpu1_ilm power
1001f000.pinctrl 15010000.wed 18000000.wbsys psci
1020f000.trng 15010000.wed2 Fixed MDIO bus.0 reg-dummy
10320000.crypto 15100000.ethernet clkitg serial8250
11002000.serial 15100000.hnat gpio-keys timer
1100a000.spi 15104800.wdma gsw@0 uevent
1100b000.spi 15194000.wocpu_boot ice_debug usb-phy@11e10000
1100c800.thermal 151a5000.ap2woccif leds-gpioGPIOS
root@X60Pro:~# cat /sys/kernel/debug/gpio
gpiochip0: GPIOs 411-511, parent: platform/1001f000.pinctrl, pinctrl_moore:
gpio-416 ( |mt753x-reset ) out hi
gpio-417 ( |PHY reset ) out hi
gpio-420 ( |reset ) in hi IRQ
gpio-421 ( |mesh ) in hi IRQ
gpio-422 ( |atmled ) out hi ACTIVE LOW
gpio-433 ( |sysled ) out lo ACTIVE LOWresetting ...
F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 0225 [010F]
Jump to BL
NOTICE: BL2: v2.6(release):
NOTICE: BL2: Built : 14:37:05, May 23 2022
NOTICE: WDT: disabled
NOTICE: CPU: MT7986 (2000MHz)
NOTICE: EMI: Using DDR3 settings
NOTICE: EMI: Detected DRAM size: 512MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0x75
NOTICE: Page size 2048, Block size 131072, size 134217728
NOTICE: Initializing NMBM ...
NOTICE: Signature found at block 1023 [0x07fe0000]
NOTICE: First info table with writecount 0 found in block 960
NOTICE: Second info table with writecount 0 found in block 963
NOTICE: NMBM has been successfully attached in read-only mode
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.9.0(release):3669f039
NOTICE: BL31: Built : 11:54:44, Dec 31 2023
U-Boot 2023.07 (Dec 31 2023 - 11:54:35 +0800)
CPU: MediaTek MT7986
Model: mt7986-ruijie-x60pro-v1
(mediatek,mt7986-rfb)
DRAM: initcall sequence 0000000041e7c600 failed at call 0000000041e0260c (err=- 22)
### ERROR ### Please RESET the board ###版权所有
版权归属：Ashley Lee