tcl: add bcm47xx config and Asus RT-N16 board using it 49/1849/2
authorPaul Fertser <>
Mon, 30 Dec 2013 18:26:36 +0000 (22:26 +0400)
committerSpencer Oliver <>
Wed, 8 Jan 2014 22:18:18 +0000 (22:18 +0000)
This adds the bcm47xx config with the special undocumented trick to
put it into standard EJTAG mode from the mystic "LV mode".

The RAM setup is not done as it would require considerable efforts
without much practical gain.

The only issue I noticed so far is that "reset" doesn't actually reset
the chip.

Unfortunately, it's unclear how to make it work properly with SRST as
OpenOCD asserts it in MIPS-specific code so the device will enter LV
mode again but the LV tap is already disabled by that time, so it's
not possible to send the magic command again.

Anyway, this config is more than enough to "recover" any RT-N16
provided the hardware is not damaged.

Change-Id: I0894e339763e6d20d1c93341c597382b479d039b
Signed-off-by: Paul Fertser <>
Tested-by: jenkins
Reviewed-by: Spencer Oliver <>
tcl/board/asus-rt-n16.cfg [new file with mode: 0644]
tcl/target/bcm4718.cfg [new file with mode: 0644]
tcl/target/bcm47xx.cfg [new file with mode: 0644]

diff --git a/tcl/board/asus-rt-n16.cfg b/tcl/board/asus-rt-n16.cfg
new file mode 100644 (file)
index 0000000..78f111d
--- /dev/null
@@ -0,0 +1,15 @@
+set partition_list {
+    CFE                { Bootloader                    0xbc000000 0x00040000 }
+    firmware   { "Kernel+rootfs"               0xbc040000 0x01fa0000 }
+    nvram      { "Config space"                0xbdfe0000 0x00020000 }
+source [find target/bcm4718.cfg]
+# External 32MB NOR Flash (Macronix MX29GL256EHTI2I-90Q)
+flash bank $_FLASHNAME cfi 0xbc000000 0x02000000 1 1 $_TARGETNAME x16_as_x8
diff --git a/tcl/target/bcm4718.cfg b/tcl/target/bcm4718.cfg
new file mode 100644 (file)
index 0000000..8193914
--- /dev/null
@@ -0,0 +1,5 @@
+set _CHIPNAME bcm4718
+set _LVTAPID 0x1471617f
+set _CPUID 0x0008c17f
+source [find target/bcm47xx.cfg]
diff --git a/tcl/target/bcm47xx.cfg b/tcl/target/bcm47xx.cfg
new file mode 100644 (file)
index 0000000..0132bb8
--- /dev/null
@@ -0,0 +1,21 @@
+echo "Forcing reset_config to none to prevent OpenOCD from pulling SRST after the switch from LV is already performed"
+reset_config none
+jtag newtap $_CHIPNAME-lv tap -irlen 32 -ircapture 0x1 -irmask 0x1f -expected-id $_LVTAPID -expected-id $_CPUID
+jtag configure $_CHIPNAME-lv.tap -event setup "jtag tapenable $_CHIPNAME.cpu"
+jtag configure $_CHIPNAME-lv.tap -event tap-disable {}
+jtag newtap $_CHIPNAME cpu -irlen 5 -ircapture 0x1 -irmask 0x1f -expected-id $_CPUID -disable
+jtag configure $_CHIPNAME.cpu -event tap-enable "switch_lv_to_ejtag"
+target create $_TARGETNAME mips_m4k -endian little -chain-position $_TARGETNAME
+proc switch_lv_to_ejtag {} {
+    global _CHIPNAME
+    poll 0
+    irscan $_CHIPNAME-lv.tap 0x143ff3a
+    drscan $_CHIPNAME-lv.tap 32 1
+    jtag tapdisable $_CHIPNAME-lv.tap
+    poll 1