NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi RBS850 stuck on boot loop
Hi Netgear Community!
This is my first post and looking for a possible way to recovery my RBS 850 stuck on boot-loop.
I already already tried a usb ttl converted to read the output but no luck.
1. Plug to a desktop and set the static ip, LAN not connected
2. Plug the LAN to RBR does not show-up on my RBR
3. Using windows 11 pro tftp does not work (i think because LAN not able to connect)
4. Downloaded nmrpflash-0.9.24-win32 does not work (i think because LAN not able to connect)
5. I am able to boot on OS~DK but it does not accept any command, nothing happen..
6. I am able to set the RBS to TFTP Server recovery mode but still my LAN is not able to connect.
7. For all my scenarios my windows firewall is disabled.
======================
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B - 201 - PBL, Start
B - 2735 - bootable_media_detect_entry, Start
B - 3441 - bootable_media_detect_success, Start
B - 3446 - elf_loader_entry, Start
B - 6107 - auth_hash_seg_entry, Start
B - 72444 - auth_hash_seg_exit, Start
B - 134512 - elf_segs_hash_verify_entry, Start
B - 197207 - PBL, End
B - 310368 - SBL1, Start
B - 387502 - GCC [RstStat:0x23, RstDbg:0x720100] WDog Stat : 0x4
B - 397140 - pm_device_init, Start
B - 573857 - PM_SET_VAL:Skip
D - 174734 - pm_device_init, Delta
B - 576114 - pm_driver_init, Start
D - 5337 - pm_driver_init, Delta
B - 582611 - clock_init, Start
D - 2104 - clock_init, Delta
B - 586637 - boot_flash_init, Start
D - 12505 - boot_flash_init, Delta
B - 602924 - boot_config_data_table_init, Start
D - 3080 - boot_config_data_table_init, Delta - (575 Bytes)
B - 610427 - Boot Setting : 0x00000618
B - 614331 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B - 621254 - sbl1_ddr_set_params, Start
B - 624975 - CPR configuration: 0x30c
B - 628452 - cpr_init, Start
B - 631319 - Rail:0 Mode: 5 Voltage: 800000
B - 636413 - CL CPR settled at 752000mV
B - 639249 - Rail:1 Mode: 5 Voltage: 880000
B - 643519 - Rail:1 Mode: 7 Voltage: 904000
D - 16409 - cpr_init, Delta
B - 650321 - Pre_DDR_clock_init, Start
B - 654347 - Pre_DDR_clock_init, End
B - 657732 - DDR Type : PCDDR4
B - 667889 - Image Load, Start
D - 783911 - QSEE Image Loaded, Delta - (1380336 Bytes)
B - 1451891 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 1459577 - Image Load, Start
D - 569313 - DEVCFG Image Loaded, Delta - (32404 Bytes)
B - 2028982 - Image Load, Start
D - 583831 - RPM Image Loaded, Delta - (112364 Bytes)
B - 2612874 - Image Load, Start
D - 656085 - APPSBL Image Loaded, Delta - (604084 Bytes)
B - 3269112 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 3274907 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 3281312 - SBL1, End
D - 2973262 - SBL1, Delta
S - Flash Throughput, 6739 KB/s (2130435 Bytes, 316095 us)
S - DDR Frequency, 600 MHz
S - Core 0 Frequency, 1651 MHz
Orbi11AX V1.0.13
U-Boot 2016.01 (Nov 01 2019 - 02:01:43 -0700)
DRAM: smem ram ptable found: ver: 1 len: 4
1 GiB
NAND: ONFI device found
ID = 1590aaef
Vendor = ef
Device = aa
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
MMC: sdhci: Node Not found, skipping initialization
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010000
MMC Device 0 not found
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
Net: MAC0 addr:8:36:c9:e0:d5:1
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
eth0
1
set_firmware_partition:1005 setenv firmware_partition 1
Setting bus to 0
Valid chip addresses: 31
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
10M speed not supported
ipq807x_eth_init: done
net_loop:496
Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual
ipq807x_eth_halt: done
nmrp server is stopped or failed !
Crashdump magic found, but reboot. Because crash_pause is not enabled
resetting ...
======================
Regards,
Alvin
9 Replies
Replies have been turned off for this discussion
Updates..
Putty
Client starts...[Listening] for ADVERTISE...
NMRP CONFIGING
Recv FW-UP optionNo ST-UP option
NMRP WAITING FOR UPLOAD FIRMWARE or STRING TABLES!
start nmrp , change pwr led to solid amber
start nmrp , change pwr led to solid amber
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :10 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
10M speed not supported
ipq807x_eth_init: done
TftpServerStart()
Listening on Port : 69, IP Address: 10.164.183.253 ...waiting nmrp server to upload firmware!
Tstart nmrp , change pwr led to solid amber
start nmrp , change pwr led to solid amber
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :10 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
10M speed not supported
ipq807x_eth_init: done
TftpServerStart()
Listening on Port : 69, IP Address: 10.164.183.253 ...Rcv:
T T T T T T T T T T T T T T T T==========================
D:\Download\nmrpflash-0.9.24-win32>nmrpflash.exe -i net3 -f RBS850-V7.2.6.31.chk
Advertising NMRP server on net3 ... |
Received configuration request from 08:36:c9:e0:d5:01.
Sending configuration: 10.164.183.253/24.
Received upload request: filename 'firmware'.
Uploading RBS850-V7.2.6.31.chk ... Timeout while waiting for ACK(1).Does a 30-30-30 reset change anything?
Hi appreciate for your reponse but 30-30-30 does not do anything.
It seems that the LAN is not up hence cannot transmit the packets.
Latest updates
===============================
eth0 PHY0 up Speed :10 Full duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
10M speed not supported
ipq807x_eth_init: done
TftpServerStart()
Listening on Port : 69, IP Address: 10.164.183.253 ...retry tftp_upload count exceeded;
TTTTT
Rcv:retry conf count exceeded;
Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual
ipq807x_eth_halt: doneFirmware recovering from TFTP server is stopped or failed! 😞
ipq807x_eth_halt: doneFirmware recovering from TFTP server is stopped or failed! 😞
ipq807x_eth_halt: doneFirmware recovering from TFTP server is stopped or failed! 😞
ipq807x_eth_halt: doneFirmware recovering from TFTP server is stopped or failed! 😞
ipq807x_eth_halt: doneFirmware recovering from TFTP server is stopped or failed! 😞
ipq807x_eth_halt: donenmrp server is stopped or failed !
==========================================================================================================================
D:\nmrpflash-0.9.24-win32>nmrpflash.exe -vvv -i net3 -f RBS850-V3.2.17.12-signed.chk -t 180000 -m 08:36:c9:e0:d5:01
nmrpflash 0.9.24
{0EAAB078-062E-4F23-8993-3562096C5431}: Type=6, Name=Ethernet
Waiting for Ethernet connection (Ctrl-C to skip).
Adding 10.164.183.252 to interface net3.
Advertising NMRP server on net3 ... |
Received configuration request from 08:36:c9:e0:d5:01.
Sending configuration: 10.164.183.253/24.
Received upload request: filename 'firmware'.
Using remote filename 'firmware'.
Uploading RBS850-V3.2.17.12-signed.chk ... << WRQ(firmware, octet)
Discarding TFTP_UL_REQ packet
<< WRQ(firmware, octet)
>> ACK(0)
<< DATA(1)
<< DATA(1)
<< DATA(1)
<< DATA(1)
<< DATA(1)
Timeout while waiting for ACK(1).
