MIPS ejtag

[EEpromEE2]

I'm interested much the connections pin for this pcb, new informations?
I am have modified the tjtag software for BCM7325,Flash Type and making simple jtag.
Thanks

[tornado]

SInce it is a broadcom CPU, look in the docs directory of tjtag 3.0.1 after you have unziped it, in that dir there is another zipped file called all_jtag_pinouts
look for the MIPS - Ejtag-2.5 14pin label, I would bet on that pinout, and the square hole in the previous pages picture is pin 1. once connected with the universal, or DLC5 type jtag, or other wiggler for that matter, just try probeing with tjtag, this should help figure out at least if the pinout is correct. Something like, tjtag -probeonly, tjtag -probeonly /noemw "If its a compatible wiggler" add /wiggler

[EEpromEE2]

Tornado Thanks, I'll try to do some tests!

[sun]

Hi mate,
Were u able to connect the jtag?
If so, please share it.
Thanks

[razorx]

I dident have any luck with my reciver but i did make a connection to the internal serialport but it is locked So if u please can share ur moddified tjtag that would be great

[iqfish]

Hi @all,

can anyone provide me the changes for this platform (Pace DS830NP receiver, BCM 7325) for TJTAG ?
I guess I need something like
    { 0x3432117F, 5, "Broadcom BCM4321L RADIO STOP"},         // EKO Radio on WRT300n

Is a modification also needed for the flash ??

Second question - I am wondering about how to connect my JTAG interface (it is this one: http://www.tiaowiki.com/w/TIAO_USB_Powered_Buffered_Wiggler/FTA_JTAG_Programmer_Manual) to connect like described in the mentioned PDF.
I am missing the DINT Connection ? Is the "SRST_N Connector" (=PDF)  == nReset ?
Update: found here: http://www.tiaowiki.com/forums/tjtag-support-forum/jtag-connection-settings-for-a-buffalo-wla2-g54c/msg307/#msg307 - I guess there is no need for SRST and DINT ?

THANKS a lot !

 

[iqfish]

Hi !

I have build my serial and JTAG Cable - I am using the "Buffered JTAG v2" without the "DINT" and "SRST_N" PINs (hope it´s right...).

I did not have any luck using TJAG (unmodified):

> tjtag3 -probeonly /wiggler /noemw
==============================================
 EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** Unknown or NO CPU Chip ID Detected ***

*** Possible Causes:
    1) Device is not Connected.
    2) Device is not Powered On.
    3) Improper JTAG Cable.
    4) Unrecognized CPU Chip ID.

It does not take any "probing" time - the ouput appears immediatly after starting the program.

How can I figure out the PINs ? I guess there is the error (?).
Would it be a good idea to start with the TCK line ? I guess it´s the clock. Makes it sense to check this with an oscilloscope ?

Regards,
iqf

[catad]

BCM7325  has security boot.

you can not get a connection , EJTAG blocked and locked through the software.

[iqfish]

Hi @all,

When EJTAG ist blocked through software - should it work after removing the two Flash-ICs ?
We have removed both and tried again with JTAG - without success - same output as in my last post.

@catad
Do you (or anybody else) have a pinout of the BCM7325 Chip ? I would like to check if the JTAG PINS are connected to the CPU and how the pinout of the connector is. I would also remove the Chip from the PCB to check this....

Regards,
Sebastian

[EEpromEE2]

pin7325 -----+------- R1206 ------- VCC
                     |
                     |
                     |
              put gnd
            R200 ohm
           active jtag 

[EEpromEE2]

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00010000000001101011000101111111 (1006B17F)
*** Unknown or NO CPU Chip ID Detected ***

*** Possible Causes:
1) Device is not Connected.
2) Device is not Powered On.
3) Improper JTAG Cable.
4) Unrecognized CPU Chip ID.


00010000000001101011000101111111

101111111 (17F)= Broadcom

[EEpromEE2]

hello
@tornado
I found the jtag connection with urjtag when I do get that detect Manufacturer: Broadcom
jtag> detect
IR length: 32
Chain length: 1
Device Id: 00010000000001101011000101111111 (0x000000001006B17F)
Manufacturer: Broadcom
Unknown part!
chain.c(149) Part 0 without active instruction
chain.c(200) Part 0 without active instruction
chain.c(149) Part 0 without active instruction

but the device does not seem fair 006B, 7325 SHOULD be why?
 jai any ideas?

[razorx]

I think i know why  we are all trying to do this Anyone got closer?

[EEpromEE2]

if you think you know why you give me some advice? so the study?

[EEpromEE2]

you have any idea why answers
Device Id: 00010000000001101011000101111111 (0x000000001006B17F)
Manufacturer: Broadcom
processor 006B ??