Firmware not available for EX3301-T0

AX6

https://community.zyxel.com/en/discussion/comment/60538#Comment_60538

Yep, that's the issue. Would it be as easy as renaming the .bin to C0? Or do I risk bricking the router?

My previous comment is not showing for some reason, I edited it too many times but for reference here it is:

My router has the V5.50(ABVY.3.1)G0 version and I am unable to flash the V550ABVY3.4C0 probably because mine ends in G0 and the generic one is C0 so the router is preventing the update due to version mismatch.

I haven't found a 3.2 or 3.3 version so I am trying to flash the right version at least. I also tried to just flash the 3.1 C0 without success.

Peter2

The trick would be to replace the "C" in the binary with a "G" so may be your Router will accept it anyway .

But this smashes config and first you need all the account data to replace it afterwards . An will yout get the next update from your isp ? So ask your ISP or buy a EX3301-T0 Generic ?

AX6

https://community.zyxel.com/en/discussion/comment/60540#Comment_60540

The ISP only provides updates using remote access wich I disabled to prevent them from changing the admin password. I guess I'll never update the router, I rather have full admin rights and be able to choose the right country and wifi channels.

Spdif

Spdif

I have an ISP version EX3301-T0 . I opened the cover and connected via serial connection and ethernet cable.

Thanks to terraterm and pumpkin tools, reflashed the router with the latest fw.

But now the router rebooting contuniously.

Probably the firmware (5.50ABVY.4C0) doesn't match with my router.

Logs:

Machine restart ...

BGA IC

Xtal:1

DDR3 init.

DRAMC init done.

Calculate size.

DRAM size=512MB

Set new TRFC.

ddr-1333

7516DRAMC V1.0 (0)

Press 'x' or 'b' key in 1 secs to enter or skip bootloader upgrade.

EN751627 at Sun Mar 12 20:00:06 CST 2023 version 1.1 free bootbase

Set SPI Clock to 50 Mhz

spi_nand_probe: mfr_id=0x2c, dev_id=0x34

Using Flash ECC.

Detected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MT29F4G01ABAFDWB, Flash Size=0x20000000

bmt pool size: 163

BMT & BBT Init Success

ZyXEL zloader v1.4.4 (03/12/2023 - 20:00:05)

Multiboot client version: 2.5

Not found TC Phy

Not found TC Phy

Not found TC Phy

Not found TC Phy

Not found TC Phy

GE Rext AnaCal Done! (2)(0x1e)

Hit any key to stop autoboot: 0

==> boot flag = 0

main tclinux.bin have ZYXEL trx header!

from main

Decompress to 80002000 free_mem_ptr=81100000 free_mem_ptr_end=80780000

Uncompressing [LZMA] ... done.

ECNT ring buffer init success

CPU 1 Unable to handle kernel paging request at virtual address 000000e4, epc == 802ddeac, ra == 802ddeac

Oops[#1]:

CPU: 1 PID: 1 Comm: swapper/0 Not tainted 3.18.21 #1

task: 9ac50000 ti: 9ac34000 task.ti: 9ac34000

$ 0 : 00000000 00000000 0000001e 00000000

$ 4 : 80eeb568 00000001 00000189 0000001e

$ 8 : 809c0000 80eebe82 000000ab 7265655f

$12 : 00000002 81388248 00000000 000000aa

$16 : 00000000 9ade9000 9aeb0180 80ee0000

$20 : 00000008 809a1ff4 80eaf2ec 80ee0000

$24 : 00000010 000000ab

$28 : 9ac34000 9ac37db0 00000054 802ddeac

Hi : 00000000

Lo : 959b8f80

epc : 802ddeac free_allcate_memory+0x1c/0xa4

Not tainted

ra : 802ddeac free_allcate_memory+0x1c/0xa4

Status: 11000003 KERNEL EXL IE

Cause : 0080e408

BadVA : 000000e4

PrId : 0001992f (MIPS 1004Kc)

Modules linked in:

Process swapper/0 (pid: 1, threadinfo=9ac34000, task=9ac50000, tls=00000000)

Stack : 808ee46c 00000001 00000187 80eebe64 9aea1600 802e3860 80eaf2ec 808ec590

00000185 80eebe64 809c9340 809b2900 00000000 80ee0000 809c9340 808eea98

809c8808 802d6990 00000054 802e7a68 80ec5528 01000000 1c000000 00000000

80f60000 809d0000 80ee0000 80ec56b4 00000008 802777e4 bfa10000 80ec5620

00000000 00000001 9aeb0180 80ec5658 00000000 8000218c 808c4ba4 809c6a90

...

Call Trace:

[<802ddeac>] free_allcate_memory+0x1c/0xa4

[<802e3860>] spi_nand_probe_kernel+0x2b0/0x400

[<802d6990>] do_map_probe+0x38/0x98

[<80ec56b4>] tc3162_mtd_init+0x5c/0x1bc

[<8000218c>] do_one_initcall+0xe8/0x23c

[<80eafd20>] kernel_init_freeable+0x1d8/0x2a0

[<807fca18>] kernel_init+0x10/0x114

[<8000f8d0>] ret_from_kernel_thread+0x10/0x18

Code: afbf0014 0c1ff6e3 2484c3cc <8e0200e4> 8c430340 8c640004 10800005 00000000 0c03ae44

---[ end trace cfac62401c4f8f80 ]---

Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b

Machine restart

I don't know what I should do.

Peter2

This is risky making an upgrade this way . Repeat the process , there was a query for the bootloader, what was your decision ?

Did you tried to upgrade via ftp before ?

Spdif

Yes, before I tried it on a VMG3625-T50B and it worked well. The modem had become a retail version. Same method doesn't worked on this router.

First command is ATDC on terrraterm

Second command is ATUR firmware.bin (firmware.bin is firmware name)

After the second command, the device waits for the firmware to be downloaded

In this point I sent the firmware with Pumpkin tools via FTP.

Peter2

Oh, with " via ftp " i ment things like this :

https://support.zyxel.eu/hc/en-us/articles/360003285540-How-to-upgrade-firmware-to-controller-Access-Point-by-FTP

https://support.zyxel.eu/hc/en-us/articles/360005562413-Download-Upload-Configuration-File-via-FTP-on-a-USG

Spdif

I'm not sure if I'm actually uploading via ftp connection. I transferred the firmware with the Put command in the Pumpkin tool.

I will also try to install it using the method in the first link. But I don't think I can establish an ftp connection. FTP is already disabled on ISP devices

tonygibbs16

Hello @Spdif

The folks on the Openwrt project use tftp when working with Zyxel devices.

Comparing against the OEM bootlog at https://openwrt.org/inbox/toh/zyxel/zyxel_pmg5617ga it seems like the Linux kernel does not start up at all for you.

So maybe worth you trying with tftp instead… and maybe this info…https://forum.archive.openwrt.org/viewtopic.php?id=47957&p=1 and https://forum.openwrt.org/t/openwrt-support-for-zyxel-pmg5617ga-first-gpon-support/144231/4

Kind regards,

Tony