Need help with a Netgear Cable Modem CG814CPR v2

USB BDM software. Bug report.
Post Reply
lvh
Junior Member
Posts: 3
Joined: Fri May 21, 2010 11:05 am

Need help with a Netgear Cable Modem CG814CPR v2

Post by lvh »

Hello, Everyones

Any one know which jtag cable work with this modem? its has 8 pin and 4 pin header already soldered on the board

Thank you
Top
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

USBJTAG NT with an adapter on the 8 Pin You be able to backUp the Flash. However So Far not been able to program the firmware Via The USBJTAG NT.
I can be done thru the serial ( 4 pin ) on board.
Top
usbbdm
Junior Member
Posts: 8974
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

TUNDRA wrote:USBJTAG NT with an adapter on the 8 Pin You be able to backUp the Flash. However So Far not been able to program the firmware Via The USBJTAG NT.
I can be done thru the serial ( 4 pin ) on board.
I do not understand why you cannot program it. Is it SPI flash or just regular TSOP flash?
Top
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

usbbdm wrote:I do not understand why you cannot program it. Is it SPI flash or just regular TSOP flash?
I can dump it but when I try to program It seams to be just fine but stays with same original firm. I do it with the TTL No Problem. It's Regular TSOP Flash.

In any case it just takes about 35 seconds to do with the TTL.
Top
lvh
Junior Member
Posts: 3
Joined: Fri May 21, 2010 11:05 am

Post by lvh »

usbbdm wrote:I do not understand why you cannot program it. Is it SPI flash or just regular TSOP flash?
I can read it from paralle Jtag cable but cannot write please take a look

Netgear businees IP Gateway
Model: CG814CCR AND CG814CPR


jtag> detect

Read IDCODE: 0x0334917f
Manufacturer: Broadcom
Part: BCM3349
Version: 0x0
---------------------------------
Create & Clear RAM Buffer (0x80000000 - 0x80800000)
Load Configuration File: bcm3349.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00800904
EJTAG Version: 1 or 2.0
EJTAG DMA Support: Yes
---------------------------------
Detect FLASH : Intel 28F640J3
Create & Clear FLASH Buffer (0x9fc00000 - 0xa0400000)
Read CFI Data:
- Protocol: INTEL
- FLASH Size: 0x00800000
- Block[0]: Sectors: 0x40, Sector Size: 0x00020000
jtag> getram 9fc00000 800000
Top
usbbdm
Junior Member
Posts: 8974
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Program this would be a piece of cake. You might need to adjust the program memory (xml) or even speed (unlikely).
Top
lvh
Junior Member
Posts: 3
Joined: Fri May 21, 2010 11:05 am

Post by lvh »

usbbdm wrote:Program this would be a piece of cake. You might need to adjust the program memory (xml) or even speed (unlikely).
Wow... I wish I could do that as a piece of cake. but because peoples told me that I have to use serial RS232 to TTL to write the program to flash ,but because I'm so noob about this type of modems therefore I have to look for an answer
Top
mamboswing
Junior Member
Posts: 70
Joined: Fri Jul 22, 2005 4:26 am

Post by mamboswing »

hi, I also need some help programing with usbjtagnt, when I try to program firm it says


-detect
IDCODE 0334917F
Broadcom BCM3349
IMPCODE 00800904
EJTAG V1, V2.0
DMA supoorted
Found Address= 9fc00000 CFI Intel 28F640J3
-program Firmware
Dest must start at the boundary of a block
Top
mamboswing
Junior Member
Posts: 70
Joined: Fri Jul 22, 2005 4:26 am

Post by mamboswing »

Ok after I programed the whole flash and reboot the modem it went back to original firm, any idea pls help thanks.
Top
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

lvh wrote:I can read it from paralle Jtag cable but cannot write please take a look

Netgear businees IP Gateway
Model: CG814CCR AND CG814CPR


jtag> detect

Read IDCODE: 0x0334917f
Manufacturer: Broadcom
Part: BCM3349
Version: 0x0
---------------------------------
Create & Clear RAM Buffer (0x80000000 - 0x80800000)
Load Configuration File: bcm3349.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00800904
EJTAG Version: 1 or 2.0
EJTAG DMA Support: Yes
---------------------------------
Detect FLASH : Intel 28F640J3
Create & Clear FLASH Buffer (0x9fc00000 - 0xa0400000)
Read CFI Data:
- Protocol: INTEL
- FLASH Size: 0x00800000
- Block[0]: Sectors: 0x40, Sector Size: 0x00020000
jtag> getram 9fc00000 800000
If you can Read with PJATG then you should be able to Program as well. Your main Problem will be to what location to write firmware. ;)
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Top
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

mamboswing wrote:hi, I also need some help programing with usbjtagnt, when I try to program firm it says


-detect
IDCODE 0334917F
Broadcom BCM3349
IMPCODE 00800904
EJTAG V1, V2.0
DMA supoorted
Found Address= 9fc00000 CFI Intel 28F640J3
-program Firmware
Dest must start at the boundary of a block
What this showes is your not instucting where to program flash.Plus in the Above you don't show that you Loaded the test firmware to begin with.

mamboswing wrote:Ok after I programed the whole flash and reboot the modem it went back to original firm, any idea pls help thanks.
Its Clear that if you program entire Flassh It will be back to Original Firm. Mind you if the entire flash your talking about is only 2 Meg then your only programing Half the flash. as the entire flash of this modem is 8 Meg and So far I have not been able to do a Full read of the flash with USBJTAG NT.
Top
junctionbox
Junior Member
Posts: 449
Joined: Sat Oct 21, 2006 6:19 am

Post by junctionbox »

CAPONE wrote:What this showes is your not instucting where to program flash.Plus in the Above you don't show that you Loaded the test firmware to begin with.




Its Clear that if you program entire Flassh It will be back to Original Firm. Mind you if the entire flash your talking about is only 2 Meg then your only programing Half the flash. as the entire flash of this modem is 4 Meg and So far I have not been able to do a Full read of the flash with USBJTAG NT.
trying to program entire flash with usbjtag nt but after flashing netgear it goes back to original firm anyone have any solutions .i dont own a blackcat but i do own old dependable (USBJTAG NT)
junctionbox
Top
usbbdm
Junior Member
Posts: 8974
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Make sure you enter "TRAP" ON. Then after program do cmpram. This works well for all the platforms.
If you just go program without go to TRAP ON first, sometime you get stuck and bricked the device.
This is especially true for devices that less people had tested. Well known device like SB510x or DCT700 does not have to do that but still recommended.

If you are sure "cmpram" passed there is no way it will return back to original firmware unless after you put the cable in when your CC "upgrade" your device.
Top
junctionbox
Junior Member
Posts: 449
Joined: Sat Oct 21, 2006 6:19 am

Ujtag

Post by junctionbox »

So you dont recommend programing netgear with ujtag
junctionbox
Top
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

junctionbox wrote:trying to program entire flash with usbjtag nt but after flashing netgear it goes back to original firm anyone have any solutions .i dont own a blackcat but i do own old dependable (USBJTAG NT)
Clearly It will go back to Original Firmware. If your Intention is to Install Haxoware then you dont need to program ENTIRE FLASH............
Just program Firm and Firm1 Using CG814WGV28M as target.
Top
Post Reply

Return to “Product Support.”

Who is online

Users browsing this forum: No registered users and 6 guests