A- A+

Parameters of Fijian k3c wireless router, enabling telnet

This article was last updated on April 9, 2019 Computer Skills

It should be noted that K3c adopts nand 48 feet flash, Zhang Ziran suggested careful operation. Take responsibility for all consequences.

It is emphasized that the reason for the 48 feet is that the non related employees generally have no tools or cannot weld well at all. Moreover, the corresponding programmer is not cheap compared with the router, and it is basically useless when playing with bricks. (Of course, I can play. For example, the big guys who use hg255d as a programmer, just ignore this.)

Basic parameters and hardware information of Fijian K3c

Unpacking Feixun K3c

After the network cable is connected normally and the IP address is obtained, access the 192.168.2.1 or p.to (dns non routing cannot be used) configuration password and other information.

It is recommended that you read the internal structure of the disassembly (some of the contents below also come from the following articles)

https://post.smzdm.com/p/591652/

Feixun K3c uses Intel GRX350 CPU (more than $20 on the official website)

https://ark.intel.com/products/92553/Intel-AnyWAN-GRX350-Network-Processors

Performance comparison between Intel GRX350 chip and MT7621:

http://www.right.com.cn/forum/thread-249736-1-1.html

According to the following information, the CPU frequency of Fijian K3c is 800MHz, but the ASUS Blue Cave router with Intel GRX350 chip is 1.6GHz. Therefore, it is judged that Feixun K3c uses castrated Intel GRX350 chip or can not control power consumption and heat generation, and so on.

How to view the CPU information recognized by openwrt:
[ root@Zhangziran.com ] cat /proc/cpuinfo
system type : GRX500 rev 1.2
machine : EASY350 ANYWAN (GRX350) Router model
processor : 0
cpu model : MIPS interAptiv V2.0
cpu MHz : 800.000
BogoMIPS : 516.09
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : dsp mt eva
shadow register sets : 1
kscratch registers : 0
core : 0
VPE : 0
VCED exceptions : not available
VCEI exceptions : not available

processor : 1
cpu model : MIPS interAptiv V2.0
cpu MHz : 800.000
BogoMIPS : 516.09
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : dsp mt eva
shadow register sets : 1
kscratch registers : 0
core : 0
VPE : 1
VCED exceptions : not available
VCEI exceptions : not available

processor : 2
cpu model : MIPS interAptiv V2.0
cpu MHz : 800.000
BogoMIPS : 516.09
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : dsp mt eva
shadow register sets : 1
kscratch registers : 0
core : 1
VPE : 0
VCED exceptions : not available
VCEI exceptions : not available

Feixun K3c adopts 256M memory chip of Yuchuang Technology.

To view the memory information identified in openwrt, do as follows:
[ root@Zhangziran.com ]cat /proc/meminfo
MemTotal: 190052 kB
MemFree: 112172 kB
Buffers: 6836 kB
Cached: 23896 kB
SwapCached: 0 kB
Active: 23008 kB
Inactive: 19156 kB
Active(anon): 11384 kB
Inactive(anon): 0 kB
Active(file): 11624 kB
Inactive(file): 19156 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 11384 kB
Mapped: 5752 kB
Shmem: 0 kB
Slab: 20968 kB
SReclaimable: 4120 kB
SUnreclaim: 16848 kB
KernelStack: 1008 kB
PageTables: 672 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 95024 kB
Committed_AS: 36688 kB
VmallocTotal: 524280 kB
VmallocUsed: 1632 kB
VmallocChunk: 503308 kB
~ #

Fijian K3c uses 128M TSOP48 to package Nano SLC Flash

There are Samsung K9F1G08U0F and other brands, but they are all 128M SLC

Feixun K3c power consumption

Look at the maximum 36W DC power supply that comes with this device. It is relatively energy-saving....

Brand: Feixun

Product name: power adapter

Model: YH-AE-120A300-CH

Input: 100-240V~50/60Hz 1A MAX

Output: 12V 3A

Other parameters

2.4Ghz module: S7054L36 SLLVN

5Ghz module: S7114L48 SLLOH

Three 5Ghz power amplifier modules: GPF4519 5EFX (corresponding to three ipx antennas respectively)

Three 2.4Ghz power amplifier modules: 4252 (corresponding to three ipx antennas respectively)

Feixun K3c software

 

K3c enters u-boot mode

Press and hold the reset key after powering off the K3C. After powering on, press and hold it for 20 seconds and release it.

Because Fijian K3C has two main and standby firmware areas, it usually needs to be painted twice. Otherwise, it may be restored automatically.

Connect the computer to any LAN port of K3c and open 192.168.2.1 (no dhcp). If the brush cannot be started here, the TTL brush shall be used for disassembly (but there is not much difference between the TTL brush here and the TTL brush for disassembly in theory). Maybe we need to remove the flash programmer.

 

Firmware comparison of Fijian K3c

K3c official firmware

http://www.phicomm.com/cn/support.php/Soho/software_support/t/sm.html

As of 20190402, the latest firmware is K3C_V32.1.46.268.bin

http://www.phicomm.com/cn/Uploads/files/20180205/K3C_V32.1.46.268.bin

20190403 The test web online upgrade 268 version will directly prompt unknown errors.

http://www.phicomm.com/cn/Uploads/files/20170930/K3C_V32.1.26.175.bin

http://www.phicomm.com/cn/Uploads/files/20170731/K3C_V32.1.22.113.bin

K3c official firmware

https://www.right.com.cn/forum/thread-318971-1-1.html

K3c openwrt cc firmware

https://www.right.com.cn/forum/thread-325709-1-1.html

K3c firmware ISDK beta

https://www.right.com.cn/forum/thread-250546-1-1.html

K3c Asus - Blue Hole - Merlin firmware (hard modification required)

https://www.right.com.cn/forum/thread-304861-1-1.html

https://asuswrt.lostrealm.ca/download

The blue hole is 512M memory. The firmware will not start if it recognizes that the RAM capacity is incorrect.

In addition, the firmware cannot be modified due to Intel's closed source and other reasons, so it can only be hard modified.

 

Feixun K3c starts telnet

K3c enables telnet (unofficial original firmware) through degradation

In K3c V32.1.22.113, the following firmware (V32.1.15.93) will be directly written on the web interface to enable telnet.

K3c degraded firmware: K3C_V32.1.15.93

The degraded firmware comes from (the original author has all rights and responsibilities): http://koolshare.cn/thread-120922-1-1.html

K3c starts telnet through software

Use K3C V32.1.22.113 or above and V32.1.45.267 or below

Feixun K3c launches telnet tool to download: RoutAckProV1B2

The software comes from (the original author has all rights and responsibilities): http://www.right.com.cn/forum/thread-261028-1-1.html

Use K3C V32.12.113 and below (since 113 is now stable, it is recommended to upgrade to 113)

http://www.right.com.cn/forum/thread-252388-1-1.html

http://koolshare.cn/thread-90610-1-1.html

 

View telnet service status

telnetd_startup show( If the meeting is held, telnetd default on will be displayed

Enter: telnetd_startup clear or iwpriv ra0 e2p 26=FFFF to shut down the telnet service

Install ssh and enable auto start

opkg install http://downloads.openwrt.org/chaos_calmer/15.05/lantiq/xrx200/packages/base/dropbear_2015.67-1_lantiq.ipk

/etc/init.d/dropbear enable

/etc/init.d/dropbear start

/etc/init.d/dropbear restart

 

http://downloads.openwrt.org/chaos_calmer/15.05/lantiq/xrx500/packages/base/Packages.gz.

Execute cp/etc/opkg/distfeeds. conf/etc/opkg/distfeeds. conf.bakup (backup for emergencies)

Execute vi/etc/opkg/distfeeds.conf

 

 

If you cannot upgrade online, you can upgrade offline:
1) Download [Offline Scrub Package]
2) Copy the downloaded cleaning package to the root directory of USB flash drive
3) Insert the USB stick into the K3C, telnet or ssh, and execute the following command

tar xzf /ramdisk/usb/.run/mountd/sda1/k3c_v16.tar.gz -C /tmp && /tmp/upfw.sh

 

/ramdisk/usb/.run/mountd/sda1 # tar xzf /ramdisk/usb/.run/mountd/sda1/k3c_v16.tar.gz -C /tmp && /tmp/upfw.sh
down firmware ok!write firmware,please wait...
Volume ID 1, size 194 LEBs (24633344 bytes, 23.5 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfsA", alignment 1
upgrade : calling do_upgrade with filename = /tmp/fs.bin and size 24510464

Image Header --> Data Size = 24510400
Image Name = LTQCPE RootFS
Image contains header with name [LTQCPE RootFS]
Upgrade : successfully upgraded rootfs
Unlocking uboot ...

Writing from /tmp/uboot.bin to uboot ...
Unlocking gphyfirmware ...

Writing from /tmp/gphy.bin to gphyfirmware ...
upgrade : calling do_upgrade with filename = /tmp/bootcore.bin and size 2635616

Image Header --> Data Size = 2635552
Image Name = MIPS 4Kec Bootcore
Image contains header with name [MIPS 4Kec Bootcore]
Volume ID 4, size 21 LEBs (2666496 bytes, 2.5 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "bootcoreA", alignment 1
Erasing 128 Kibyte @ 20000 -- 100 % complete
parameter active_bank value changed from rootfs_id=4 to A
Erasing 128 Kibyte @ 20000 -- 100 % complete
parameter update_chk value changed from =A to 3
Upgrade : successfully upgraded bootcore
write firmware ok,start write kernel,please wait...
upgrade : calling do_upgrade with filename = /tmp/kernel.bin and size 3014656

Image Header --> Data Size = 3014592
Image Name = MIPS LTQCPE Linux-3.10.104
Image contains header with name [MIPS LTQCPE Linux-3.10.104]
Volume ID 0, size 24 LEBs (3047424 bytes, 2.9 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "kernelA", alignment 1
parameter f_kernel_sizeA is not existed
Erasing 128 Kibyte @ 20000 -- 100 % complete
parameter active_bank value changed from to A
Erasing 128 Kibyte @ 20000 -- 100 % complete
parameter update_chk value changed from =A to 3
Upgrade : successfully upgraded kernel
upgrade ok!reboot...
/ramdisk/usb/.run/mountd/sda1 #

Lost connection to host.

Other instructions:
If the official firmware needs to be flashed back, the official firmware can be directly "manually upgraded" via WEB
In case of failure to start, you can try to press and hold the reset key to restore the factory, restart more, and restore the factory several times, which can generally be solved; If it is really impossible to restore the latest official firmware in the official uboot (note: operation in uboot is easy to change bricks)
In case of instability, wireless loss, crash and other phenomena, you can try to replace the advertisement shielding with adbyby

 

Optimize Feixun K3c

 

/etc/init.d/lc stop

/etc/init.d/lc disable

Stop the Fijian app service and disable its startup

/etc/init.d/collect stop

/etc/init.d/collect disable

Edit/etc/crontabs/root

Add # before 00 02 * * * up_data, or delete and remove the scheduled upload data.

If you want to be thorough, just uninstall the app remote service and telnet service...

Opkg remove data_collect (After deletion, the app cannot be used for remote connection)

opkg remove telnetd_startup

 

 

  1. Wxlsr We Media
    I can see that your writing is very professional. I like it for you!

Leave a message to Zhang Ziran's personal blog