自用的贝尔金F5D7231-4路由一台，由于上网绑定了MAC，用路由原厂的固件修改MAC怎么也不成功，于是下载了DD-WRT刷机（忘记刷的哪个版本了），现在直接变砖，网线接任何一个LAN口都提示网线拔出。
路由器信息：
cpu：BCM5352EKPB
内存：ESMT M12L64164A
FLASH：S29AL016M
手头有TTL转USB线，连接进入CFE显示如下：
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
LDR version 2.03.08 for identification.
Build Date: Wed Jul 13 19:16:25 CST 2005 (denny@dny_fc3.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.23.0
CPU type 0x29008: 200MHz
Total memory: 8192 KBytes
Total memory used by CFE: 0x80300000 - 0x8039B320 (635680)
Initialized Data: 0x803310B0 - 0x80333740 (9872)
BSS Area: 0x80333740 - 0x80335320 (7136)
Local Heap: 0x80335320 - 0x80399320 (409600)
Stack Area: 0x80399320 - 0x8039B320 (8192)
Text (code) segment: 0x80300000 - 0x803310B0 (200880)
Boot area (physical): 0x0039C000 - 0x003DC000
Relocation Factor: I:00000000 - D:00000000
Device eth0: hwaddr 00-11-50-5B-4B-18, ipaddr 192.168.2.1, mask 255.255.255.0
gateway not set, nameserver not set
Boot program checksum is invalid
Reading :: Failed.: Timeout occured
Reading :: Failed.: Timeout occured
Reading :: Failed.: Timeout occured
Reading :: Failed.: Interrupted
CFE> help
请教应该如何刷回原厂的固件？TFTP无法连接，LAN口都没有反应。
在xgg54321的帮助下，终于刷砖成功，恢复到了原厂固件，祝贺一下！！
附上修复方法：
TTL线接J8，1是VCC，2是地线，3是TX接TTL的RX，4是RX接TTL的TX。
SecureCRT，选好com口，波特率115200，去掉RTS/CTS。
进入后ctrl+c，显示CFE>，打help，查看命令。
有个dnvram的命令，输入help dnvram，查看命令格式。
执行dnvram erase
dnvram commit
reboot
此时，Lan口就能恢复通信了。记得提前设好电脑ip：192.168.2.2 255.255.255.0 192.168.2.1，联好网线。
进cmd，ping 192.168.2.1 -t
显示TTL=100。
运行tftp1.62，选择固件，我用的是beklin官网下载的V1XXX固件。勾选TTL=100选项。
CFE下运行reboot。
重启后自动刷新，变绿点后，7231再获重生。
附上重生后CFE启动记录，供能看懂的人查询，注意，没连WAN和LAN。
Decompressing..........done
Decompressing..........done
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
LDR version 2.03.08 for identification.
Build Date: Wed Jul 13 19:16:25 CST 2005 (denny@dny_fc3.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.23.0
CPU type 0x29008: 200MHz
Total memory: 8192 KBytes
Total memory used by CFE: 0x80300000 - 0x8039B320 (635680)
Initialized Data: 0x803310B0 - 0x80333740 (9872)
BSS Area: 0x80333740 - 0x80335320 (7136)
Local Heap: 0x80335320 - 0x80399320 (409600)
Stack Area: 0x80399320 - 0x8039B320 (8192)
Text (code) segment: 0x80300000 - 0x803310B0 (200880)
Boot area (physical): 0x0039C000 - 0x003DC000
Relocation Factor: I:00000000 - D:00000000
Device eth0: hwaddr 00-90-96-00-00-00, ipaddr 192.168.2.1, mask 255.255.255.0
gateway not set, nameserver not set
Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options
null)
Loading: ..... 1470464 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029008
Primary instruction cache 16kb, linesize 16 bytes (2 ways)
Primary data cache 8kb, linesize 16 bytes (2 ways)
Linux version 2.4.20 (fangsongmao@compile-server) (gcc version 3.2.3 with Broadcom modifications) #16 Tue Jun 28 18:27:59 CST 2005
Setting the PFC value as 0x15
Determined physical RAM map:
memory: 00800000 @ 00000000 (usable)
On node 0 totalpages: 2048
zone(0): 2048 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
CPU: BCM5352 rev 0 at 200 MHz
Calibrating delay loop... 199.47 BogoMIPS
Memory: 6432k/8192k available (1251k kernel code, 1760k reserved, 108k data, 60k init, 0k highmem)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
Checking for 'wait' instruction... unavailable.
POSIX conformance testing by UNIFIX
PCI: no core
PCI: Fixing up bus 0
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch ([email protected])
devfs: boot_options: 0x1
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
PPP generic driver version 2.4.2
Amd/Fujitsu Extended Query Table v1.3 at 0x0040
number of CFI chips: 1
Using word write method
Flash device: 0x200000 at 0x1c000000
Physically mapped flash: cramfs filesystem found at block 743
Creating 5 MTD partitions on "
hysically mapped flash":
0x00000000-0x00020000 : "pmon"
0x00020000-0x001f0000 : "linux"
0x000b9c78-0x001f0000 : "rootfs"
0x00004000-0x00006000 : "profile"
0x001f0000-0x00200000 : "nvram"
sflash: found no supported devices
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
ip_conntrack version 2.1 (64 buckets, 512 max) - 344 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_time loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.7 Ben Greear <[email protected]>
All bugs added by David S. Miller <[email protected]>
VFS: Mounted root (cramfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 60k freed
Using /lib/modules/2.4.20/kernel/drivers/net/et/et.o
Using /lib/modules/2.4.20/kernel/drivers/net/wl/wl.o
Using /lib/modules/2.4.20/kernel/drivers/net/led/led.o
Hit enter to continue...START
#wl0_maclist=
No interface specified. Quitting...
info, Moreton Bay DHCP Server (v0.9.5) started
===wan_ifname=eth0, ifname=eth0
killall: upnp: no process killed
start_wan(): Manual config
Configure eth0:0 to be DMZ IP(D7)/netmaske(
Configure eth0:1 to be DMZ IP(D7)/netmaske(
sscanf() error!
Configure eth0:3 to be DMZ IP(磢)/netmaske(
Configure eth0:4 to be DMZ IP(磢)/netmaske(
start_wan_done(): start_firewall
br0: No such process
eth0: No such process
none pppoe
parent_control: Cannot find cerberian account in the box, use account 'bel00001'
killall: dnsmasq: no process killed
killall: ntpclient: no process killed
killall: ntpclient: no process killed
led_mon(): System is ready(1), WAN is ready(1), quit!
Hit enter to continue...(): open /tmp/route_check.pid successfully
route_check():Got non-killed route_check with pid(109)
route_check(): don't kill myself!
No interface specified. Quitting...
Hit enter to continue...No reply from(192.168.0.1)! loss_count(1)
No reply from(192.168.0.1)! loss_count(2)
No reply from(192.168.0.1)! loss_count(3)
route_check(): Remote gateway is down!
No reply from(202.102.154.3)! loss_count(1)
No reply from(202.102.154.3)! loss_count(2)
No reply from(202.102.154.3)! loss_count(3)
route_check(): DNS is down!
No reply from(heartbeat.belkin.com)! loss_count(1)
No reply from(heartbeat.belkin.com)! loss_count(2)
No reply from(heartbeat.belkin.com)! loss_count(3)
route_check(): heartbeat.belkin.com is down!
set_WAN(): set WAN down
No reply from(192.168.0.1)! loss_count(1)
No reply from(192.168.0.1)! loss_count(2)
No reply from(192.168.0.1)! loss_count(3)
route_check(): Remote gateway is down!
No reply from(202.102.154.3)! loss_count(1)
