Cisco EPC3212 Modem

mrazzido123 · Post by **mrazzido123** » Thu Oct 21, 2010 11:09 am

Hello!

got yesterday my first D3 broadcom modem.

any ideas how to solder this chip , i try it with the test clip for SB6120 and doesnÂ´t works.

pictures
http://www.abload.de/image.php?img=1frontbulf.jpg
http://www.abload.de/image.php?img=2backgnu9.jpg
http://www.abload.de/image.php?img=3upa6hd.jpg
http://www.abload.de/image.php?img=3up2gni7.jpg
http://www.abload.de/image.php?img=4downt5vj.jpg

spi-chip
http://www.abload.de/image.php?img=5dqu21.jpg

Koevoet · Post by **Koevoet** » Thu Oct 21, 2010 11:22 am

I see on the pics it has jtag points , have you tried these to see if you get a cpu detection ?

Regards

mrazzido123 · Post by **mrazzido123** » Thu Oct 21, 2010 11:47 am

i try the method with the test clip and power then pin2 with 3.3v , software writes unkown chip , i think i need new xml?.

and no i didnt test the "JTAG" interface i must do it later soldering ,its not original PIN SIZE. its 2mm smaller.

Post by **usbbdm** » Thu Oct 21, 2010 11:47 am

This will be another device that has JTAG and with SPI flash. Hope NT can detect the flash or we might need to update the software to work with this modem.

CAPONE · Post by **CAPONE** » Thu Oct 21, 2010 12:34 pm

mrazzido123 wrote:i try the method with the test clip and power then pin2 with 3.3v , software writes unkown chip , i think i need new xml?.

and no i didnt test the "JTAG" interface i must do it later soldering ,its not original PIN SIZE. its 2mm smaller.

Try 5 Volts on Pin 2. This Modem is a Docsis 3.0? Loocks the same as the New DPC3000 exept for thefact that its a VOIP. I bet it can be DOne Just like the DPC3000. You would lose the VOIP But Who Cares.

mrazzido123 · Post by **mrazzido123** » Thu Oct 21, 2010 12:51 pm

Doenst work with 5v , the LEDÂ´s Blinking when i put 5v on pin 2.

usbjtag

Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 0000,0000,009f
-flshdct 0
Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 0000,0000,0000
-flshdct 0
Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 00ff,00ff,00ff

mrazzido123 · Post by **mrazzido123** » Thu Oct 21, 2010 1:08 pm

after restart my pc usbjtag recognize modem sometimes
i load the SBG6580xml

Found Address= 00000000 25FL064A
Found Address= 00800000 25FL064A

i put 5v on pin2 and SPI CLIP from SB6120

Post by **usbbdm** » Thu Oct 21, 2010 1:35 pm

mrazzido123 wrote:after restart my pc usbjtag recognize modem sometimes
i load the SBG6580xml

Found Address= 00000000 25FL064A
Found Address= 00800000 25FL064A

i put 5v on pin2 and SPI CLIP from SB6120

You should consider use SB6120 since it is 8M SPI flash.

CAPONE · Post by **CAPONE** » Thu Oct 21, 2010 3:29 pm

mrazzido123 wrote:after restart my pc usbjtag recognize modem sometimes
i load the SBG6580xml

Found Address= 00000000 25FL064A
Found Address= 00800000 25FL064A

i put 5v on pin2 and SPI CLIP from SB6120

I agree with USBBDM Use and Program Same as SB6120. My Bet is it will work.

MrP · Post by **MrP** » Fri Oct 22, 2010 9:11 pm

Where can you pick up one of those spi clips?

CAPONE · Post by **CAPONE** » Sat Oct 23, 2010 3:47 am

MrP wrote:Where can you pick up one of those spi clips?

There a POS Fo Real But you can Google it. There caled SOIC Test Clip You will need the 16 Pin Ver.

mrazzido123 · Post by **mrazzido123** » Sat Oct 23, 2010 12:02 pm

hello guys!

i solder the chip yet like sb6120 and try also with 5v on pin 2 i dont know how to find isp pin.

.

when i put 5v on pin 2 , usbjtag some times regonize the flash "Found Address= 00000000 25FL064A " after 100x times of detecting. the LEDÂ´s from the modem blinks the hole time when i have 5v on the chip.

is isp here on pin 1 from usbjtag or i have to try like sbg on pin 4?

mrazzido123 · Post by **mrazzido123** » Sun Oct 24, 2010 1:35 pm

i read today the modem with console @ putty

Code: Select all

Sync:1
346890

SA BootLoader Version: 2.3.0_R1(S) Release Gnu pcminit spiboot reduced DDR drive
Build Date: Jun 22 2009
Build Time: 21:55:15
SPI flash ID 0x010216, size 8MB, block size 64KB, write buffer 256, busy bit 1

Found image 1 at offset 20000

Found image 2 at offset 400000
 eCos - hal_diag_init
Init device '/dev/BrcmTelnetIoDriver'
Init device '/dev/ttydiag'
Init tty channel: 80a0dfe8
Init device '/dev/tty0'
Init tty channel: 80a0e008
Init device '/dev/haldiag'
HAL/diag SERIAL init
Init device '/dev/ser0'
BCM 33XX SERIAL init - dev: 0.2
Set output buffer - buf: 0x80bd2ea8 len: 2048
Set input buffer - buf: 0x80bd36a8 len: 2048
BCM 33XX SERIAL config
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers:  (BFC Target) Configuring/Loading Flash driver...
[00:00:00 01/01/1970] [tStartup] BcmSpiFlashDevice::DetectFlash:  (SPI Flash Device Factory) WARNING - Detected SPI flash with JEDEC ID =0x10216
[00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions:  (Flash Driver C API) WARNING - Permanent NonVol would fit in the boot block of this flash device, but I found existing NonVol in the following block; using this location instead...
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers:  (BFC Target) Loading BootloaderStore driver...
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers:  (BFC Target) Loading ProgramStore driver...
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers:  (BFC Target) Loading NonVol driver...
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers:  (BFC Target) Storage drivers initialized successfully.
[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions:  (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices...
Detecting the next image number that we will store to by default...
Bootloader indicates we are running image 2
By default, we will dload to image number 1!

[00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions:  (BFC Target) Device abstraction singletons created successfully.

[00:00:00 01/01/1970] [tStartup] BcmCmSANonVolSettings::BcmCmSANonVolSettings:  (CM SA NonVol Settings) WARNING - Current CxC Version is 3.9.21.7.mp2
BcmEmtaBlindDataNonVolSettings::GetSingletonInstance:  WARNING - the singleton instance is NULL, and someone is accessing it!
ERROR: Unable to get GetCountry blind data. (BcmEmtaBlindDataNonVolSettings = NULL)
WARNING: ResetDefaultBlindEmtaData() -Resetting EMTA non-vol data section to default values
mtaNvCalcChecksum: checksum= 1273036007
Reading Permanent settings from non-vol...
Checksum for permanent settings:  0x439572af
Settings were read and verified.


Reading Dynamic settings from non-vol...
Checksum for dynamic settings:  0xcd570fce
[00:00:00 01/01/1970] [tStartup
[/QUOTE][/SIZE]

mrazzido123 · Post by **mrazzido123** » Wed Oct 27, 2010 4:49 pm

Hello guys!

i found the ISP Pin on EPC3212

i Used Testclip from SB6120 Pin1 on USBJTAG for ISP

and here is the Picture

i make full backup i think the firmware used onyl 4mb from the chip .

i read the complete 8mb , and 4mb is used the rest is empty.
i think i need the right xml yet.

Post by **usbbdm** » Sun Oct 31, 2010 8:17 am

Since this is Broadcom chip and if it has true JTAG port it is possible to read/write over JTAG port and it is even faster and safer.

BTW, the xml must be modified to use this new modem. It needs to be based on the memory location of the firmware.

USB JTAG

Cisco EPC3212 Modem

Cisco EPC3212 Modem

Who is online