One more happy wl500gP with 128M ram upgrade!
Big thanks to Oleg and all the contributors!
I’ve been looking around for a small form factor computer to use as the main computer of a mobile robot, when it occurred to me that routers are actually becoming some very good examples of physically small computers.
Linux is my OS of choice for such projects, so I was very happy to learn about the wl500gP + Oleg's firmware combo.
Spec's-wise the wl500gP it's nearly all-ready out of the box, but then again, one can never have enough memory!
Then I landed on that 128M memory upgrade post by Oleg, and this is the story:
Components:
After a week long search some NANYA NT5DS32M16BS-5T were located. So why not give it a try? There was no confirmation for these back then, though according to the datasheet they were pin compatible and organised as 32x16. But when I was about to acquire them, I got a call from a second-hand store, about some SO-DIMM with Samsung K4H511638C-UCB3 gathering dust on their shelves, so that was it! These were confirmed by trucki and way cheaper too.
(Thanks to particleman we now have a confirmation for NANYA NT5DS32M16BS-5T)
33 Ohm smd 0402 resistors were kindly donated from an old dvd player, (one for A12 line, one more to replace an accidentally desoldered and lost one)
Method:
- Used a hot-air gun (the paint-stripping gender) to preheat the pcb and then desolder the (fluxed) memory chips, while protecting the rest of the pcb with multiple layers of aluminium foil as a heat screen, both from the SO-DIMM and the wl500gP.
- Applied no-clean flux on the pads, then removed the solder from the pcb pads with desoldering braid (wick).
- Cleaned around with some alcohol and some cotton buds.
- Positioned the chip, then kept it in place with some scotch tape (it *really* helps).
- Used a fine tip, low wattage soldering iron with tiny amounts of solder applied on the tip.
- soldered pins under optical aid.
- cleaned around some more.
- Scanned and hi-res macro-photographed the result from various angles to visually inspect on screen.
- checked for sort / open circuits with a multi-meter.
- reworked a few stubborn pins. :p
And voila! It didn't work :confused: no power led on :eek: disappointment :(
At the time it was already very late at night, so I slept over it, many nights, and when I found the time, armed with multimeters, optical aids, pencil and paper for an improvised schematic, datasheets, previous pic's of the tracks under the chips and quite some patience I checked again every single track and pin on the first chip (U3). Pins 18 (Vdd) and 4 (DQ1) were found to be loose, giving false positives when pressed on their pads with the multi-meter probe. They were resoldered while I pressed down on them with a pointed tool and voila, router finally up and running! :) U4 was not much of an issue and soon I had all 128M of ram activated! :D:D:D
At first strong vibration would freeze the router (more loose pins) but then the soldering iron came again in to play, and everything worked just fine!
The router went through twelve runs of memtest and all is fine! Router is happy, I am happy, big Thanks Oleg!
Here is a reference list compiled from this forum with all chips known to work so far for wl500gP:
Code:
Chip: By: On memory module: Type: Form: By: Confirmed by: Note:
HY5DU121622CTP-D43 HYNIX HYMD532646CP6J-D43 PC3200 DIMM HYNIX Oleg 1
K4H511638B-TCB3 SAMSUNG M470L6524BT0-CB3 PC2700 SO-DIMM SAMSUNG Oleg .
K4H511638D-UCB3 SAMSUNG M470L6524DU0-CB3 PC2700 SO-DIMM SAMSUNG Oleg .
D5116AFTA-5B-E ELPIDA TS32MSD64V3M PC2700 SO-DIMM TRANSCEND Oleg .
K4H511638F-TCB3 SAMSUNG newbiefan .
K4H511638D-UCB3 SAMSUNG newbiefan .
K4H511638C-UCB3 SAMSUNG KVR333X64SC25/512 PC2700 SO-DIMM KINGSTON trucki .
MT46V32M16-6T MICRON mitek 1
NT5DS32M16BS-5T NANYA particleman .
K4H511638B-TCB3 SAMSUNG oyabun .
K4H511638C-UCB3 SAMSUNG M470L6524CUO-CB3 PC2700 SO-DIMM SAMSUNG inertial .
HY5DU121622CTP-D43 HYNIX NotebookKiller 1
Note 1: Capacitor between pin 51 and ground / Clock lines employed.
Note 2: Infineon chips are reported as not collaborating with wl500gP pcb.
Be warned that the pcb pads are really easy to damage, static electricity could fry the chips, thermal shock could destroy them as well as the pcb and other components, flux/solder fumes are usually toxic, etc.
Before attempting such a mod it would be useful to search for "SMD desoldering" on the net, since there are many informative how-to's and even videos on the subject, get familiar with the "reflow thermal curve" and "ESD damage", practice desoldering and soldering on some scrap pcb's first and make sure you won't miss your router too much if things go wrong.
Admittedly, coming from an H/W background I have quite extensive soldering/desoldering experience but I still believe it's possible to perform the mod when having some soldering experience and rehearsing the steps on some scrap first.
@breizh76:
I am pretty sure your asus is recoverable, have a look at what these people from http://www.circuitmedic.com are doing.
Agreed it requires lots of tools and even more skill, but still it is possible!
Got four partially lifted pads myself, when desoldering U3 but finally everything works fine.
Had a 60G HD too with many cut and lifted tracks 'few years ago, but managed to functionally restore it (visual aesthetic aspect though... ouch!)
If you don't feel confident, you could find some hardware-tech / mobile-phone repair-tech guy that could do it, or even I could try and have a go at it, if you post me your unit.
@All:
Could any one direct me to some wl500gP schematics, if such thing is available? I’d like to try some extensive wl500gP hard-hacking :)
Inertial
5 Attachment(s)
Expansion possibilities inspirations for wl500gP routers
Hello!
Quote:
Originally Posted by Oyabun
What kind of hard hacking are you thinking about?
Most of my inspiration came by looking at these pieces of information: (attached below)
* BCM4704 Block Diagram
* BCM4704 System Diagram
Well besides the gpio pins, I2C bus, SPI bus, SD card, etc type hacks, (directly off wl500gp pcb tracks), the most promising thing, may be the ability of BCM4704 processor to handle three mini-PCI 2.3 peripherals.
Quote:
From Broadcom's BCM4704 Product Brief:
The PCI 2.3 host interface allows enumeration of three external PCI peripherals (more with external arbiter)
Another way to explore would be the EBI (Expansion Bus Interface) route. Signals for this bus are presented to the flash memory chip (SPANSION S29GL064M), of course stealing them from the chip's pads seems extremely hard, but it might still be an option for just a couple of lines. And since extremely hard is still possible ;) , one could even try an IDE connection if all necessary signals are found to be present and the firmware side of things in understood as well (that already sounds pretty complex to me).
Other interesting things are the modem and audio codec’s as well as the two-port USB 1.1 host. Interesting these are, however, only if their respective signal/data lines are present somewhere on the pcb, since un-burying them from under the BGA :eek: seems highly unlikely, to stay optimistic. :cool:
Software-wise, access to the MAC (Multiply Accumulate) unit on-chip would be very useful to people who wish to hook up some sensors on the wl500gp and then use it to perform some DSP (digital signal processing) on the collected data.
Also software-wise, access to the IPSec Core and related hard-wired functions available in the BCM4704 (IPSec 3DES, SSL MAC, TLS HMAC, SSL/TLS DES/3DES, MD5/SHA-1 HASH, IPSec AES), would be very useful for some types of network applications.
All of the above require, inside knowledge of the processor core, usually found in a Programmer's Guide type document and in datasheets, for the software part, whereas for the hardware part, processor datasheets and router schematics would be needed. Without any of these documents in sight, it's gonna be pretty hard to attempt most of these modifications.
That's why I believe mini-PCI peripheral expansion is the most viable approach, given the available documentation.
PCI's, let's sum it up, we have: One for the PCI-to-USB bridge (VIA VT6212L), one more for the actual mini-PCI connector harbouring the wi-fi card, that's two, leaving room for (hopefully) one more! Plus all the signals for the PCI bus should be presented to the mini-PCI connector. That's only a guess however, I haven't actually checked to verify that, but still. The specifications for PCI and mini-PCI bus are at hand, so it will be a matter of (spare) time to verify it.
After verifying that all necessary signals are present and that the firmware (as is or modified) could handle such an addition, it might be possible to try and solder one more mini-PCI card connector on the existing pcb pads.
Many mini-PCI cards are available which could be used to offer additional functionality, provided the suitable driver exists, that is.
* mini-PCI to IDE and/or SATA controllers + Compact Flash (CF) Socket, (no USB bottleneck)
* mini-PCI to (a multitude of) serial ports extension cards
* mini-PCI GPS receiver module with extra serial ports
* mini-PCI 801.11a/b/g 400mW card
* more examples welcomed
A simple idea would be to add an extra dual band wi-fi card, transforming the router to a link, or even backbone node for wireless metropolitan networks. A GPS card would suit locative (location-aware) applications. The extra serial ports would be good for robotics or home automation and a direct mini-PCI to IDE/SATA/CF card would allow for file transfers at full speed, overcoming the USB bottleneck. I could go on daydreaming about possibilities for long... :)
Take a wl500gP, hook up some temp, humidity, pressure, wind-speed, rainfall, etc sensors over USB or serial ports and you get a remote, networked, weather-station. Or add some motors and motor drivers assortments, vision, GPS, batteries, sensors (speed, distance, temp, inertial, rotational, magnetic, etc) a few microcontrolers, quite some code, and voila: you have a networked mobile robot...
For the moment my preferred (and much more realistic) approach is to interface microcontrollers to the RS-232 and USB ports of the router. I'm planning to work with some PIC18F4550 with USB connection while some other PIC boards with rs-232 are already available and have plenty of things interfaced to them. Now I only need to set up a cross compiler for the wl500gP and write some code to get them to communicate with the router (and, hopefully, one day, attempt even native compilation). Some more code writting/porting will be needed to have the router perform some processing on the data collected through the uC's and plan some actions to execute on the devices interfaced to them in response, all while sending part of the data over lan/wi-fi. The birth of a simple robotics platform, indeed.
Following the various posts about the RS-232 console connection, and parper's post "Additional USB ports and Internal HD!", I performed the corresponding mod's, and now I have a very happy wl500gP with Oleg's firmware, 128MB ram, four onboard USB 2.0 ports and two RS-232 signal level serial ports. :D
I will post methods and findings soon!
Ideas, comments, suggestions are welcomed :)
Greetings to all and thanks for all the info's you are sharing,
inertial
Below are some very inspiring BCM4704 Diagrams from Broadcom's Product Brief, a picture of wl500gP's case following modification to house the extra two USB connectors, and a couple of pictures of the actual post mod pcb.
Exploring WL500gP hardware expansion / interfacing possibilities
Wouldn’t it be nice to have a thread dedicated to hardware hacks, hardware interfacing and expansion fantasies, and the stories of our quest to turn them in to reality? As discussed in the “Upgrading WL-500g Premium, WL-500W and WL-700gE RAM to 128 MB” thread there are many such possibilities, for wl500gP and other routers as well.
Inspired by the fact that a wl500gP with 128MB RAM can do quite some things on top of it’s base duties, and considering that the software – firmware – networking part of these is pretty well taken care of in the forum :), I take the honour to inaugurate a dedicated thread to hardware upgrade – expansion – interfacing.
Hopping to see postings on the subject of:
* Sensors interfacing
* Motor control
* Robotics
* wl500gp bus expansions
* Interfacing to microcontrollers and custom hardware through RS232 / USB / LAN / Wi-Fi / Bluetooth / (…)
* Interfacing to GPS modules, to smart phones, to PDA’s, to GPRS modules,to harddisks / Compact Flash's
and in general, on upgrades and hard-hacks of any kind , I welcome us all!
Inertial
2 Attachment(s)
Current consumption measurements on Asus WL500gP
In order to remove the uncertainty around the current consumption levels of the various usb peripherals that may be connected on a wl500gP (modified with extra USB ports or just plain, straight out of the box), an experimental current measurement set up was used.
The router was supplied with power through a digital millimetre, set at 10 Amps range, then the current consumption of various configurations of hardware was measured. The peek current during power-on of each module was also recorded. The router was modified with 128MB RAM, MAX202 RS-232 dual transceiver, two extra USB ports (taken from VIA chip). Firmware: Oleg's ver. 1.9.2.7-9. Picures of the mods here
Current Measurement During Boot Sequence:
Set up:
Two lan ports connected with PC's
Serial port 0 console connection to the unit
Wi-Fi initially off
No usb devices connected
Result:
Starts at 0.67 Amps for a couple of sec’s, then 0.89 Amps then ranges between 0.85 to 1.05 Amps and then after boot sequence and os-startup is complete stabilizes at 1.00 Amp.
Now we are just at the first prompt after the boot sequence.
Removing one of the two Lan cables dropped the current to 0.95 Amps
Connecting a 1GB flash USB rises at 1.04 (90mA more)
Connecting a 4GB flash USB rises at 1.13 (90mA more)
Connecting a 64MB flash USB rises at 1.18 (50mA more)
Connecting these results on the following messages on the Serial Console:
Code:
echo for PaN ::: &&&PaN
hub.c: new USB device 01:03.2-2, assigned address 2
usb.c: USB device 2 (vend/prod 0x19b6/0x1024) is not claimed by any active drive
r.
hub.c: new USB device 01:03.2-1, assigned address 3
usb.c: USB device 3 (vend/prod 0x90c/0x1000) is not claimed by any active driver
.
hub.c: new USB device 01:03.1-2, assigned address 2
usb.c: USB device 2 (vend/prod 0x1043/0x8006) is not claimed by any active drive
r.
/ #
Please note that the firmware was set up not to mount the USB mass strorage devices upon detection, in order to see if there is any difference in consumption pre-mount and post-mount. So let's mount them manually:
Code:
/ # insmod scsi_mod
SCSI subsystem driver Revision: 1.00
/ # insmod sd_mod
/ # insmod usb-storage
That's part of what we get at the Serial Console:
Code:
usb.c: registered new driver usb-storage
scsi0 : SCSI emulation for USB Mass Storage devices
Vendor: takeMS Model: USB Easy Rev: 1100
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0
SCSI device sda: 7864320 512-byte hdwr sectors (4027 MB)
sda: Write Protect is off
/dev/scsi/host0/bus0/target0/lun0: p1
scsi1 : SCSI emulation for USB Mass Storage devices
Vendor: S3+ Model: Rev: 8.07
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi removable disk sdb at scsi1, channel 0, id 0, lun 0
SCSI device sdb: 1918976 512-byte hdwr sectors (983 MB)
sdb: Write Protect is off
/dev/scsi/host1/bus0/target0/lun0: p1
scsi2 : SCSI emulation for USB Mass Storage devices
Vendor: Generic Model: USB Flash Drive Rev: %z!Y
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi removable disk sdc at scsi2, channel 0, id 0, lun 0
SCSI device sdc: 128512 512-byte hdwr sectors (66 MB)
sdc: Write Protect is off
/dev/scsi/host2/bus0/target0/lun0: p1
USB Mass Storage support registered.
Let's check the mounted devices:
Code:
/ # df
Filesystem 1k-blocks Used Available Use% Mounted on
/dev/root 3008 3008 0 100% /
Mounting the usb's:
Code:
/ # mkdir /tmp/hd1
/ # mkdir /tmp/hd2
/ # mkdir /tmp/hd3
/ # mount /dev/discs/disc0/part1 /tmp/hd1
/ # mount /dev/discs/disc1/part1 /tmp/hd2
/ # mount /dev/discs/disc2/part1 /tmp/hd3
/ # df
Filesystem 1k-blocks Used Available Use% Mounted on
/dev/root 3008 3008 0 100% /
/dev/discs/disc0/part1 3924460 1103812 2820648 28% /tmp/hd1
/dev/discs/disc1/part1 959200 703104 256096 73% /tmp/hd2
/dev/discs/disc2/part1 61596 4494 57102 7% /tmp/hd3
/ #
Everything remains at 1.18 Amps... So no difference when the Flash memory usb's are connected, whether mounted or not.
Let's turn on wi-fi:
Code:
/ # wl radio on
/ #
Now it's up to 1.43 Amps (250mA more)(TX Power settings are the default, mini-PCI card is the original WL120G R1.01)
Connecting a multi-card reader loaded with a 2GB CF:
That's 1.58 Amps after a peak of 1.60
Code:
/ # hub.c: new USB device 01:03.2-3, assigned address 6
/ # mkdir /tmp/hd4
/ # mount /dev/discs/disc4/part1 /tmp/hd5
/ # df
Filesystem 1k-blocks Used Available Use% Mounted on
/dev/root 3008 3008 0 100% /
/dev/discs/disc0/part1 3924460 1103812 2820648 28% /tmp/hd1
/dev/discs/disc1/part1 959200 703104 256096 73% /tmp/hd2
/dev/discs/disc2/part1 61596 4494 57102 7% /tmp/hd3
/dev/discs/disc4/part1 2000064 1706400 293664 85% /tmp/hd4
/ #
Connecting two more Lan's: 1.70 Amps (100mA more)
Initiating a large file transfer between two pc's connected over lan through the wl500gp doesn't affect current consumption which remains 1.70Amps
Disconnecting all usb flash memory devices, leaving only one lan connection, Wi-fi, and the RS-232 console too: 1.18Amps (520mA less)
Wi-fi turned off: 0.92Amps (260mA less) (It was 250mA up when turned on, but that's the reading i got)
Now to the interesting part:
60 GB, 2.5'' IDE HD connected through e-quip IDE to USB adaptor, power supplied from usb: 1.45Amps during several spin-up seconds then 1.25 Amps (530mA peek, 330 there after)
Disconnecting the usb-HD, connecting an external one:
250GB 3.5'' maxtor external HD, externally supplied: 1.02 Amps, no peek observed. (100 mA more)
I also checked the re-settable poly-fuses (on the mainboard) used to protect the router from USB overcurrent and they are rated 0.750 mA. I checked their specs from their manufacturer and it turns out they trip at 1.5 Amps(!), not that i would recommend connecting anything that heavy though.
So as thing are connected now on the modded router, three usb devices are supplied from the power initially intended for one of the two original usb ports while the other get's all the current by itself.
I had to stop experimenting at that time, but still want to take measurements during file transfers from/to the Flash memory devices and the usb-HD. These are sure to draw more current, how much exactly remains to be measured...
To sum it up, here are the same results, presented in a table:
Code:
Device/Action: Current Peek Current
Consumption: Consumption:
Asus WL500gP start-up (+2 Lan) 670 mA -
Asus WL500gP boot (+2 Lan) 850 - 1050 mA 1050 mA
Lan connected (each) 50 mA -
1GB iStar, usb Flash memory 90 mA 90 mA
4GB takeMS, usb Flash memory 90 mA 90 mA
64MB, usb Flash memory 50 mA 50 mA
usb multi-card reader with 2GB CF 150 mA 170 mA
Asus wl-121 mini-PCI power-on 250 mA -
2.5'' IDE HD - USB (internal) 330 mA 530 mA
3.5'' IDE HD - USB (external) 100 mA -
Also note that the usb ports will try to provide as much current as possible and the poly-fuses protecting them will only trip somewhere in the region 1Amp - 1.5Amps (guess not tested) (usb protecting Poly-fuses marked "P.075", WL500gP board version R1.14). There is also the Poly-fuse protecting the main power supply, (Main Poly-fuse marked "P.260", WL500gP board version R1.14). In general poly-fuses trip, when the current exceeds by some percentage their rating and then, once the overcurrent condition has been removed, conduct again when they have cool down.
I hope this info may be useful somehow
Greetings to all
Inertial
Attached: 1) The measurements set up. 2) Cable connections (little cables usb mod supply, larger cables router supply)
1 Attachment(s)
RS232 serial ports - max202 TTL-RS232 signal level translation
Following some posts in the forum on the RS232 port subject, a dual RS232 line transceiver was implemented, based on a 5-Volt, max202, narrow-SOIC 16pin chip. Spec's say that anything below 0.8 Volts is perceived as Low-Level signal whereas anything above 2 volts is perceived as High-Level signal so the 3.3 volts from the board are definitively interpreted correctly as a High-Level. Supply-voltage-wise the requirements range between 4.5 to 5.5 volts, so the on-board regulated USB supply kindly donates the appropriate voltage (and a maximum current of 15mA), keeping everyone happy. MAX202 is oriented towards battery operated, handheld applications, and only needs five 100nF capacitors to operate. Using smd ceramic capacitors results in a very small sized pcb. The transceiver circuit was tested OK using a USB to RS-232 converter and a plain-old RS-232 port (still quite a few of those available around). :)
The default settings for connection to the WL500gP over RS-232 are 115200 Baud rate, 8 Data bits, No Parity, 1 Stop bits, No Flow Control.
Port 0 is console, port 1 is free to use, both are found on /dev/tts/
Code:
echo "Hello Network" >> /dev/tss/1
will sent a string to rs-232 port one.
Note: FTDI based USB to RS232 converters work fine with Oleg's firmware ver. 1.9.2.7-9. and provide connection for extra micro-controllers if need be.
I will update this post with schematics / more details / better pic's and hopefully in the later future with a small pcb design.
Visible in the photo is the unorthodox use of an old prototyping board with tracks split in two, and some smd capacitors mounted in equally unorthodox orientations. that wasn't rapid prototyping, but rather impulse prototyping :) . It also made me consider a small custom pcb in the future.
Greetings
Inertial
3 Attachment(s)
Additional USB ports mod refinement
Hello again!
Following the post "Additional USB ports and Internal HD!" by parper, I decided to add two more USB ports by soldering tiny wires on the pins of the VIA (VT6212L) chip. I used very thin veneer-insulated copper wire taken from the coil windings of a Cathode Ray Tube (CRT) of an old monitor. I had a bit of a trouble finding the correct circuit schematic and component values on the forum or the net (I failed to actually), so I examined the wiring of the existing USB ports and used a multimeter to figure these out. The findings are: Each one of the data pins (usb3D+,usb3D-,usb4D+,usb4D-) is tied to ground by an 15K ohm resistor and filtered in pairs using magnetically coupled inductors. Power supply and grounding are also filtered by inductors and capacitors. The configuration I finally went with is: four 15K ohm resistors tying the usb data pins to ground, and some simple LC (inductor capacitor) filter for the positive power supply. Having trouble to locate suitable smd resistors in the "junk pile", pairs of 10K ohm and 4k7 ohm resistors off an old ink-jet printer board were used in series. The 100nf ceramic disc capacitors and ferrite beads for the supply filter were kindly provided by the same old monitor as before.
A standard dual stacked type A female pcb connector was "slightly" modified and the end result is quite acceptable. The case is also modified, with a rectangular hole between the WAN and LAN1 connectors, to house the usb connector.
In details, the usb connector was fitted with an eight pin standard 2.54 cm pitch gold plated male connector, while the rest of the circuit (pull-ups and filters) was attached to it’s respective female connector. The usb connector is not attached to the wl500gp PCB, and it’s only held in place by the metallic springs on the top and bottom of it’s body, holding against the rectangular opening on the case.
I have later refined the USB mod. This was needed since I already had managed to remove most of the fine wires while accidentally pulling the resistor – filters pcb. Oyabun is right: the previous implementation of mine was a little mess! :) Electrical connections are now achieved using a very small piece of pcb, with a fine pitch 1mm, gold contact, female connector, attached to the asus mainboard with Devcon - high strength "plastic steel epoxy". I have to admit it looks really neater! This way things are a bit more modular too, which comes handy since I plan to design and etch a small pcb to house the pull-ups and the filters, all hopefully in smd sizes. When successful, all results schematics, pcb layouts and relative photos will be posted here :)
Happy modding!
Inertial
Bellow are some pictures, one during the fabrication of the small pcb (included for it's strange beauty and it's mild industrial after-taste), and two more of it as it looks on the board. The little wires were not soldered on it yet; since it took 24 hours waiting for the epoxy to fully cure. The last picture shows the final arrangment with the little (fragile) wires in place.
3 Attachment(s)
Mini-PCI Type III signal names, pinouts and some specs
Hello again!
Let me present some info on the mini-PCI bus and the mini-PCI cards Type III, as the ones found on routers.
The connector has 124 pins. A list of pins and signal names, adapted from PCI Local Bus Specifications Rev 2.3 and pinouts.ru follows:
Code:
Mini PCI Card Type III System Connector Pinout
Pin Signal Pin Signal Pin Signal Pin Signal
1 TIP 2 RING 63 3.3V 64 FRAME#
Key Key 65 CLKRUN# 66 TRDY#
3 8PMJ-3 4 8PMJ-1 67 SERR# 68 STOP#
5 8PMJ-6 6 8PMJ-2 69 GROUND 70 3.3V
7 8PMJ-7 8 8PMJ-4 71 PERR# 72 DEVSEL#
9 8PMJ-8 10 8PMJ-5 73 C/BE[1]# 74 GROUND
11 LED1_GRNP 12 LED2_YELP 75 AD[14] 76 AD[15]
13 LED1_GRNN 14 LED2_YELN 77 GROUND 78 AD[13]
15 CHSGND 16 RESERVED 79 AD[12] 80 AD[11]
17 INTB# 18 5V 81 AD[10] 82 GROUND
19 3.3V 20 INTA# 83 GROUND 84 AD[09]
21 RESERVED 22 RESERVED 85 AD[08] 86 C/BE[0]#
23 GROUND 24 3.3VAUX 87 AD[07] 88 3.3V
25 CLK 26 RST# 89 3.3V 90 AD[06]
27 GROUND 28 3.3V 91 AD[05] 92 AD[04]
29 REQ# 30 GNT# 93 RESERVED 94 AD[02]
31 3.3V 32 GROUND 95 AD[03] 96 AD[00]
33 AD[31] 34 PME# 97 5V 98 RESERVED_WIP
35 AD[29] 36 RESERVED 99 AD[01] 100 RESERVED_WIP
37 GROUND 38 AD[30] 101 GROUND 102 GROUND
39 AD[27] 40 3.3V 103 AC_SYNC 104 M66EN
41 AD[25] 42 AD[28] 105 AC_SDATA_IN 106 AC_SDATA_OUT
43 RESERVED 44 AD[26] 107 AC_BIT_CLK 108 AC_CODEC_ID0#
45 C/BE[3]# 46 AD[24] 109 AC_CODEC_ID1# 110 AC_RESET#
47 AD[23] 48 IDSEL 111 MOD_AUDIO_MON 112 RESERVED
49 GROUND 50 GROUND 113 AUDIO_GND 114 GROUND
51 AD[21] 52 AD[22] 115 SYS_AUDIO_OUT 116 SYS_AUDIO_IN
53 AD[19] 54 AD[20] 117 SYS_AUDIO_OUT GND 118 SYS_AUDIO_IN GND
55 GROUND 56 PAR 119 AUDIO_GND 120 AUDIO_GND
57 AD[17] 58 AD[18] 121 RESERVED 122 MPCIACT#
59 C/BE[2]# 60 AD[16] 123 VCC5VA 124 3.3VAUX
61 IRDY# 62 GROUND
8PMJ = 8 position modular jack connector pin (RJ45)
To help things some more, an image of the actual wi-fi card used in the wl500gP, overlayed with pin numbers and signal names is attached bellow.
Some mechanical specs for type III connectors (adapted from the PCI Local Bus Specifications Rev 2.3) where found and are attached bellow too.
While having a look at the mainboards of wl700gE and wl500W, I noticed two interresting things:
The wl500W seems to have pads for a 68 pins pcb connector(!) on the underside of the mainboard (Bottom Layer). From a quick look i had, it seems that most of the interesting signals of the mini-PCI bus are present there :) . Initially i hopped they where EBI signals (Expansion Bus Interface) but no luck...
Wl700gE seems to have pads for a type III mini-PCI connector! :D
I am currently fighting my way through the PCI Local Bus Specs. Maybe an easier way (?) to approach things would be a PCI-to-PCI Bridge on a mini-PCI card (if such thing exists). This could be used in order to connect a multitude of Mini-PCI cards. I still dont understand all about how PCI's work, and reserve the right to return on the subject after completing my reading...
Inertial
1 Attachment(s)
Mini-PCI type III connector pads on wl700gE board
I managed to find a detailed enough picture of the underside of wl700gE mainboard, here in the forum.
82 connected pads out of the 124 on the wl700gE mainboard as opposed to 86 connected pads on the wl120v2, but still it yields a match!
These are indeed pads for a mini-PCI type III connector:D
Actually, four Reserved pins are left Non Connected at wl700gE as opposed to the WL120V2 wifi card.
Things must be a bit crowded at the PCI bus of wl700gE, between IDE controllers, USB 2.0 Hosts and onboard wifi's. Maybe the IDE controller is on the EBI bus, I will get hold of a wl700gE for a while, that will give me the chance to have a closer look... The wl700gE will be on short loan though, no chances for hardware experimentations...:p Whether it's possible to connect a mini-PCI connector and a type III card and make it visible for the firmware, i know not. I had a quick read through the firmware's source code of pci.c and such, i can't really say...:o I could probably use some help on that one.
Here goes the picture overlayed with pin numbers and signal names.
Inertial
1 Attachment(s)
It has been there since the beginning - UUP's sighting!
Well these wonderful pads of what seems to be an 8-pin ic, where there, next to the flash chip, on all wl500gP's, wl500w's and wl700gE's, waiting to be noticed...
What that IC might have been remains unclear...
If it was a real time clock, wouldn't it need a back-up battery? most probably yes.
An eeprom then...? but what it's use would be...?
Or do they give access to some internal pins of nearby chips...? Probably not since test points or connector awaiting pads would have been used in that case...
It seems (a wild guess) that there might be the signals of an I2C or an SPI presented there...
Having zero spare time now, it will take a while before I could have a chance to investigate this matter further...
The pads are know to belong to an IC nicknamed U12 ;)
If you can shed light on this case... we want to hear from you :)
Inertial
Bellow is a picture of the UUP's (Unidentified Unsoldered Pads) in question...
UUP chip U12 - maybe JTAG?
So U12 is on several wl-models?? Hmmm... I think they are JTAG pads.
Anybody with some knowledge/testing ability of JTAG, can have/borrow a bricked wl500gP from me.
http://www.3iii.dk/wifi/modding/asus...d-off-2782.jpg
http://www.3iii.dk/wifi/asus.htm ;) Please email me at wl500gp@3iii.dk
5 Attachment(s)
wl500g premium v1 IR remote
Well, the least i can do is share my own hardware mod with you, since it’s the only way i see to actually give something back (i’ve learned a lot from you guys).
My goal was rather simple, namely to turn it into a media player, as many have also done, so that’s pretty straight-forward.. the two internal USB ports are used for a
4GB flash drive and a cheap sound card, the soldering is as ugly (and flimsy, i’m afraid) as it gets, but so far it seems to work. What i wanted to add to it was a remote
of some sort, to be able to control it having no noisy computer powered up (and ssh access via wlan from the cell phone sounds like overkill just to change the song).
Having some experience with microcontrollers, i tied an SFH-5110 to an ATMega32, and the ATMega32 to the router via a serial connection (/dev/tts/1).
General configuration:
WL500G premium v1 running OpenWrt Kamikaze 7.09
USB flash drive (just for storage)
USB sound card
mpd, mpc
ird (more on that later)
Since i’m not a linux guru (actually i’m far from being one) the initial setup is being done as ugly as possible, namely my /etc/init.d/custom-user-startup contains the following lines:
Code:
mount /dev/scsi/host0/bus0/target0/lun0/part1 /mnt
mpd
ird &
mpc load unu
mpc random on
mpc repeat on
mpc volume -50
The hardware part of the mod contains the microcontroller (powered by the 3.3V line, and clocked at 11.0592MHz.. i know i’m overdoing it, but it seems to handle it), the SFH-5110
(needs 5V, and studying its datasheet revealed that adding a 43K resistor from its output to ground brings the output to a nice 3.25V) and an extra led just to fill that free slot in the case.
I also needed some piece of software to listen for the codes received via the serial interface on the router, and, filled with enthusiasm, i’ve downloaded the OpenWrt SDK.
My enthusiasm quickly arrived at a grinding halt when i looked over the how to of the SDK (again, not being a linux guru helped a lot :)) ).
However, i just needed to compile one file, an that proved rather simple since the compiler in the SDK doesn’t seem that bothered by my lack of skill.
So i quickly copied an example application from the web that would talk on the serial port and it worked.. hence ird and irtool.
irtool – prints the codes received (useful for key identification)
ird – listens on the serial port and upon reception of a code (say.. 0xFF50AF – the ‘enter’ key on my remote) tries to execute /ir/s<CODE>.sh (/ir/sFF50AF.sh)
I placed these two in /usr/sbin (seemed like a good idea at the time) Afterwards, made scripts in /ir to do stuff like mpc next, mpc play..
A side note.. The only remote control format this works with (in its current form) is NEC ( http://www.necel.com/en/faq/mi_com/__com_remo.html )
I know this post is rather sloppy, but if anyone wants any clarifications, i’d be glad to help out.
I haven’t posted any schematics simply because i’ve never drawn one, but if it’s required, i’ll try to doodle one up.
Attached:
- the router with acetone-cleaned “windows” for the IR sensor and extra led (hideous, i know)
- router with remote on top
- router, opened up
- detailed view of the extra led and IR sensor
- archive containing all sources
Attachment 3914
Attachment 3915
Attachment 3916
Attachment 3918
WL-500gP v1 flash size upgrade possible ?
Hello there guys!!
Recently I started wondering if a flash upgrade is possible on WL-500gP v1. Looking inside I noticed U12 place for a SPI flash - measuring connections it looks like the pinout is correct for example for S25FL128P (8 pin version) which is 16mB flash chip. SO , SI and SCK lines indicate some resistance comparing to GROUND - obviously some connections have been made on PCB and I'm sure they are connected to the SoC. CS# i bound with the CE# pin of the original flash chip. HOLD and WP would need a pull-up(pull-down) resistors (PCB has place for them). VCC and GND are on their places also. So from the hardware side there is a possibility to upgrade to larger ammounts of flash without the need for using SD storage or USB sticks (obviously removing old flash chip or desoldering its CE leg).
The problem is I'm pretty nooby in linux, CFE experiments and simillar stuff. My question is: if I copy the contents of the original flash chip, programm it to the SPI chip as they are, is there any possibility that the router will start the bootoader ?? Or maybe some of You know how to setup the bootloader for using SPI flash instead the parallel one. Does BCM4704 even try to boot up from SPI if it doesn't find any data on the original parallel interface. ASUS engineers didn't put U12 footprint on the board without a reason. I hope hearing your opinions on this.
PS. Sorry for my English if I made some mistakes - grettings from Poland :):)
