First, make sure the USB ports at the rear of the computer work by connecting a USB device to the rear port. If the device is not recognized in the rear port, then use the other sections in this document to resolve the problem. Use the following steps to see if the front USB ports have become disconnected from the motherboard.

This is the Vodafone Vox2.5 CPE shipped for different type of fixed lines technology in various countries. There exists three known clones of the same product made by different vendors over time (ADB, Huawei and Sercomm) which share the same exact hardware specs and firmware releases, despite different board designs. It supports both ADSL2+/VDSL2 broadband connections through DSL modem and fiber lines by Ethernet WAN port. Provides also two FXS ports for VoIP-to-POTS telephony gateway features.

This Vox2.5 has been marketed with different names in some countries, like:

• Vodafone EasyBox 804 (SHG2500)
• Vodafone Station Revolution (AHG2500/HHG2500/SHG2500)

The Vodafone firmware image variant, its UI design and features set differ by country.

The ADB AHG2500 clone share the same board of ADB VV5820 (aka “Fastweb Fibra Top”).The Sercomm SHG2500 clone share the same board of Sercomm VD625 (aka “Smart Modem TIM”).

• Uninstall and reinstall the driver. The device driver may have become corrupted. Uninstall the driver from Device Manager and scan for new hardware to install the driver again. In the device's Properties dialog box, click the Driver tab, and then click Uninstall. Follow the instructions. Restart your computer.
• Download driver ZTE (Vodafone) Mobile Broadband Network Adapter version 12.0.0.36 for Windows XP, Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10 32-bit (x86), 64-bit (x64). Screenshot of files.

OpenWrt support

Not supported.

Supporting activities

• First community interest into OpenWrt porting –> External Link

Hardware highlights

Hardware

Info

Photos

Insert photo of front of the casing

Insert photo of back of the casing

Insert photo of backside label

BOARD

Opening the case

All versions share the same casing appearance but screws are in different position. All models have internal clips all around the borders that keep both front and rear casing together.

The Huawei version has a single screw under the back label. The ADB version is the same but the screw is a torx one. The Sercomm version has three screws, one under a rubber pin inside the rear USB internet key slot, two other under rubber pins of the base stand.

Serial

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port:

Settings:

• Data bits: 8
• Stop bits: 1

Vodafone Port Devices Driver Updater

AHG2500

The serial port is located at the Jumper J1801 on top of the board:

HHG2500

The serial port is located at the bottom right on the board:

SHG2500

The serial port is located at the Jumper J302 on the board:

Bootlogs

OEM bootlog

From Sercomm SHG2500 with OpenRG firmware variant

HELOCPUIL1CIHELOCPUIL1CIDRAM----PHYSSTRF400HPHYEDDR3SIZ4SIZ3SIZ2DINTUSYNLSYNMFASLMBERACEPASS----ZBSSCODEDATAL12FMAINRO08SUN2findflagfindflagSUN6000000001001RAM2NAN3RFS0NAN5CFE version 1.0.38-114.185 for BCM963268 (32bit,SP,BE)Build Date: Fri Sep 18 16:13:20 CST 2015 (jeremy@localhost)Copyright (C) 2000-2011 Broadcom Corporation.NAND flash device: name , id 0xc2da block 128KB size 262144KBExternal switch id = 53125Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHzMain Thread: TP0Memory Test PassedTotal Memory: 134217728 bytes (128MB)Boot Address: 0xb8000000find flag begin read flash mapBoard IP address : 192.168.1.1:ffffff00Host IP address : 192.168.1.100Gateway IP address :Run from flash/host (f/h) : fDefault host run file name : vmlinuxDefault host flash file name : bcm963xx_fs_kernelBoot delay (0-9 seconds) : 1Board Id (0-26) : 963168MBV3Number of MAC Addresses (1-32) : 12Base MAC Address : e0:60:66:79:75:5ePSI Size (1-64) KBytes : 24Enable Backup PSI [0|1] : 0System Log Size (0-256) KBytes : 0Auxillary File System Size Percent: 0Main Thread Number [0|1] : 0Voice Board Configuration (0-9) : LE9672_ZSI*** Press any key to stop auto run (1 seconds) ***Auto run second count down: 0*************************************************** Sercomm Boot Version 1.0.2.0***************************************************Entering Firmware : Everything is OK.begin check sumsafe value is 255check sum okBooting from BackUp image (0xbb720000) ...Correctable ECC Error detected: addr=0x03850600, intrCtrl=0x00000090, accessCtrl=0xF7FF1010Correctable ECC Error detected: addr=0x0388ba00, intrCtrl=0x00000090, accessCtrl=0xF7FF1010Correctable ECC Error detected: addr=0x0388ce00, intrCtrl=0x00000090, accessCtrl=0xF7FF1010Decompression OK!Entry at 0x803e1e40Closing network.Disabling Switch ports.Flushing Receive Buffers...0 buffers found.Closing DMA Channels.Starting program at 0x803e1e40Linux version 2.6.30 (sharon@ubuntu) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #3 SMP PREEMPT Tue Feb 23 10:34:27 CST 2016BCM Flash API. Flash device is not found.963168MBV3 prom initCPU revision is: 0002a080 (Broadcom4350)DSL SDRAM reserved: 0x132000Determined physical RAM map: memory: 07ece000 @ 00000000 (usable)Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00007eceMovable zone start PFN for each nodeearly_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00007eceOn node 0 totalpages: 32462free_area_init_node: node 0, pgdat 804dde70, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 222 pages used for memmap Normal zone: 28144 pages, LIFO batch:7Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32208Kernel command line: root=mtd:rootfs rw rootfstype=jffs2 console=ttyS0,115200wait instruction: enabledPrimary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytesNR_IRQS:128PID hash table entries: 512 (order: 9, 2048 bytes)console [ttyS0] enabledDentry cache hash table entries: 16384 (order: 4, 65536 bytes)Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)Allocating memory for DSP module core and initialization codeAllocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0Memory: 123032k/129848k available (3945k kernel code, 6644k reserved, 992k data, 168k init, 0k highmem)Calibrating delay loop... 398.33 BogoMIPS (lpj=199168)Mount-cache hash table entries: 512--Kernel Config-- SMP=1 PREEMPT=1 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0Broadcom Logger v0.1 Feb 23 2016 09:51:00CPU revision is: 0002a080 (Broadcom4350)Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytesCalibrating delay loop... 402.43 BogoMIPS (lpj=201216)Brought up 2 CPUsCPU0 attaching sched-domain: domain 0: span 0-1 level CPU groups: 0 1CPU1 attaching sched-domain: domain 0: span 0-1 level CPU groups: 1 0net_namespace: 1140 bytesNET: Registered protocol family 16Total Flash size: 0K with -1 sectorsInternal 1P2 VREG will be shutdown if unused...Unused, turn it off (00008d6f-00008d79=-10<300)registering PCI controller with io_map_base unsetregistering PCI controller with io_map_base unsetbio: create slab <bio-0> at 0SCSI subsystem initializedusbcore: registered new interface driver usbfsusbcore: registered new interface driver hubusbcore: registered new device driver usbpci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10005fff]pci 0000:00:00.0: supports D1 D2pci 0000:00:00.0: PME# supported from D0 D3hot D3coldpci 0000:00:00.0: PME# disabledpci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff]pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff]pci 0000:01:00.0: PME# supported from D0 D3hotpci 0000:01:00.0: PME# disabledpci 0000:02:00.0: reg 10 64bit mmio: [0x000000-0x007fff]pci 0000:02:00.0: supports D1 D2pci 0000:01:00.0: PCI bridge, secondary bus 0000:02pci 0000:01:00.0: IO window: disabledpci 0000:01:00.0: MEM window: 0x11000000-0x110fffffpci 0000:01:00.0: PREFETCH window: disabledPCI: Enabling device 0000:01:00.0 (0000 -> 0002)PCI: Setting latency timer of device 0000:01:00.0 to 64skbFreeTask created successfullyBLOG v3.0 InitializedBLOG Rule v1.0 InitializedBroadcom IQoS v0.1 Feb 23 2016 10:02:00 initializedBroadcom GBPM v0.1 Feb 23 2016 10:02:01 initializedNET: Registered protocol family 8NET: Registered protocol family 20NET: Registered protocol family 2IP route cache hash table entries: 1024 (order: 0, 4096 bytes)TCP established hash table entries: 4096 (order: 3, 32768 bytes)TCP bind hash table entries: 4096 (order: 3, 32768 bytes)TCP: Hash tables configured (established 4096 bind 4096)TCP reno registeredNET: Registered protocol family 1NTFS driver 2.1.29 [Flags: R/W].JFFS2 version 2.2. (NAND) c 2001-2006 Red Hat, Inc.fuse init (API version 7.11)msgmni has been set to 240io scheduler noop registered (default)PCI: Setting latency timer of device 0000:01:00.0 to 64Driver 'sd' needs updating - please use bus_type methodsPPP generic driver version 2.4.2PPP Deflate Compression module registeredPPP BSD Compression module registeredNET: Registered protocol family 24bcm963xx_mtd driver v2.0Failed to read image tag from flashBroadcom DSL NAND controller (BrcmNand Controller)-->brcmnand_scan: CS=0, numchips=1, csi=0mtd->oobsize=0, mtd->eccOobSize=0NAND_CS_NAND_XOR=00000000Disabling XOR on CS#0brcmnand_scan: Calling brcmnand_probe for CS=0B4: NandSelect=40000001, nandConfig=16152300, chipSelect=0brcmnand_read_id: CS0: dev_id=c2da9095After: NandSelect=40000001, nandConfig=16152300DevId c2da9095 may not be supported. Will use config infoSpare Area Size = 16B/512BBlock size=00020000, erase shift=17NAND Config: Reg=16152300, chipSize=256 MB, blockSize=128K, erase_shift=11busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007fftiming1 not adjusted: 6574845btiming2 not adjusted: 00001e96brcmnand_adjust_acccontrol: gAccControl[CS=0]=00000000, ACC=f7ff1010ECC level changed to 15OOB size changed to 16BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 256MB on CS0Found NAND on CS0: ACC=f7ff1010, cfg=16152300, flashId=c2da9095, tim1=6574845b, tim2=00001e96BrcmNAND version = 0x0400 256MB @00000000brcmnand_scan: Done brcmnand_probebrcmnand_scan: B4 nand_select = 40000001brcmnand_scan: After nand_select = 40000001100 CS=0, chip->ctrl->CS[0]=0ECC level 15, threshold at 1 bitsreqEccLevel=0, eccLevel=15190 eccLevel=15, chip->ecclevel=15, acc=f7ff1010brcmnand_scan 10200 CS=0, chip->ctrl->CS[0]=0200 chip->ecclevel=15, acc=f7ff1010page_shift=11, bbt_erase_shift=17, chip_shift=28, phys_erase_shift=17brcmnand_scan 220Brcm NAND controller version = 4.0 NAND flash size 256MB @10000000brcmnand_scan 230brcmnand_scan 40, mtd->oobsize=64, chip->ecclayout=00000000brcmnand_scan 42, mtd->oobsize=64, chip->ecclevel=15, isMLC=0, chip->cellinfo=0ECC layout=brcmnand_oob_bch4_4kbrcmnand_scan: mtd->oobsize=64brcmnand_scan: oobavail=50, eccsize=512, writesize=2048brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=15, eccbytes=3300 CS=0, chip->ctrl->CS[0]=0500 chip=87ab9190, CS=0, chip->ctrl->CS[0]=0-->brcmnand_default_bbtbrcmnand_default_bbt: bbt_td = bbt_main_descrBad block table Bbt0 found at page 0001ffc0, version 0x01 for chip on CS0Bad block table 1tbB found at page 0001ff80, version 0x01 for chip on CS0brcmnand_scan 99ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) DriverPCI: Enabling device 0000:00:0a.0 (0000 -> 0002)PCI: Setting latency timer of device 0000:00:0a.0 to 64ehci_hcd 0000:00:0a.0: EHCI Host Controllerehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1ehci_hcd 0000:00:0a.0: Enabling legacy PCI PMehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00usb usb1: configuration #1 chosen from 1 choicehub 1-0:1.0: USB hub foundhub 1-0:1.0: 2 ports detectedohci_hcd: USB 1.1 'Open' Host Controller (OHCI) DriverPCI: Enabling device 0000:00:09.0 (0000 -> 0002)PCI: Setting latency timer of device 0000:00:09.0 to 64ohci_hcd 0000:00:09.0: OHCI Host Controllerohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600usb usb2: configuration #1 chosen from 1 choicehub 2-0:1.0: USB hub foundhub 2-0:1.0: 2 ports detectedusbcore: registered new interface driver usblpInitializing USB Mass Storage driver...usbcore: registered new interface driver usb-storageUSB Mass Storage support registered.brcmboard: brcm_board_init entrySerial: BCM63XX driver $Revision: 3.00 $Magic SysRq enabled (type ^ h for list of supported commands)ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XXttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XXTotal # RxBds=1448bcmPktDmaBds_init: Broadcom Packet DMA BDs initializedbcmPktDma_init: Broadcom Packet DMA Library initializedbcmxtmrt: Broadcom BCM3168D0 ATM/PTM Network Device v0.4 Feb 23 2016 10:01:03p8021ag: p8021ag_init entryIPSEC SPU: SUCCEEDEDGACT probability NOT onMirror/redirect action onu32 classifier input device check on Actions configuredNetfilter messages via NETLINK v0.30.nf_conntrack version 0.5.0 (2028 buckets, 8112 max)GRE over IPv4 tunneling drivernf_nat_pt: no ports specifiedip_tables: (C) 2000-2006 Netfilter Core TeamTCP cubic registeredInitializing XFRM netlink socketNET: Registered protocol family 10lo: Disabled Privacy Extensionsip6_tables: (C) 2000-2006 Netfilter Core TeamIPv6 over IPv4 tunneling driversit0: Disabled Privacy ExtensionsNET: Registered protocol family 17NET: Registered protocol family 15Initializing MCPD ModuleEbtables v2.0 registeredebt_time registeredebt_tcpmss registeredebt_ftos registeredebt_wmm_mark registered802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>All bugs added by David S. Miller <davem@redhat.com>brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03850600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:0388ba00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:0388ce00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03c19c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03c21800brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03e29c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04135800brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04169a00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04182000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:041a0600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:041a0600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04260000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:042e5400brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04302000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:0445dc00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:046c7600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:0492be00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:049efe00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04ac1e00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04b38a00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04b39a00VFS: Mounted root (jffs2 filesystem) readonly on device 31:7.brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:057e8000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:058c3000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:059aee00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:05a25200brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:05af3400brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:05b32600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:05c02e00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:05c0da00Freeing unused kernel memory: 168k freedinit started: BusyBox v1.15.3 ()starting pid 261, tty ': '/etc/rcS'jffs2_scan_dirent_node(): Node CRC failed on node at 0x00220fe4: Read 0xffffffff, calculated 0x0d19b389Empty flash at 0x00221018 ends at 0x00221800JFFS2 notice: (291) check_node_data: wrong data CRC in data node at 0x000c02cc: read 0xd0cf7ce8, calculated 0x7800a27f.brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04169a00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04135800MCU module loaded ok v0.1 Feb 23 2016 09:57:56bcm_ingqos: module license 'Proprietary' taints kernel.Disabling lock debugging due to kernel taintBroadcom Ingress QoS Module Char Driver v0.1 Feb 23 2016 09:57:53 Registered<243>Broadcom Ingress QoS ver 0.1 initializedBPM: tot_mem_size=134217728B (128MB), buf_mem_size=20132655B (19MB), num of buffers=9460, buf size=2128Broadcom BPM Module Char Driver v0.1 Feb 23 2016 09:55:33 Registered<244>[NTC bpm] bpm_set_status: BPM status : enabledNBUFF v1.0 InitializedInitialized fcache stateBroadcom Packet Flow Cache Char Driver v2.2 Feb 23 2016 09:57:55 Registered<242>Created Proc FS /procfs/fcacheBroadcom Packet Flow Cache registered with netdev chainBroadcom Packet Flow Cache learning via BLOG enabled.Constructed Broadcom Packet Flow Cache v2.2 Feb 23 2016 09:57:55chipId 0x631680D0Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 Feb 23 2016 09:57:42 Registered <241>Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000FAP Soft Reset Done4ke Reset DoneEnabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000FAP Soft Reset Done4ke Reset DoneFAP Debug values at 0xa5f9d300 0xa581d300Allocated FAP0 GSO Buffers (0xA5FAE388) : 1048576 bytes @ 0xA5900000Allocated FAP1 GSO Buffers (0xA582E388) : 1048576 bytes @ 0xA5A00000Allocated FAP0 TM SDRAM Queue Storage (a5fae38c) : 341376 bytes @ a5880000Allocated FAP1 TM SDRAM Queue Storage (a582e38c) : 341376 bytes @ a5b00000[NTC fapProto] fapReset : Reset FAP Protocol layer[FAP0] DSPRAM : stack <0x80000000><1536>, global <0x80000600><3968>, free <2688>, total<8192>[FAP1] DSPRAM : stack <0x80000000><1536>, global <0x80000600><3968>, free <2688>, total<8192>[FAP0] PSM : addr<0x80002000>, used <23436>, free <1140>, total <24576>[FAP1] PSM : addr<0x80002000>, used <23436>, free <1140>, total <24576>[FAP0] DQM : availableMemory 14652 bytes, nextByteAddress 0xE0004948[FAP1] DQM : availableMemory 14652 bytes, nextByteAddress 0xE0004948[FAP0] GSO Buffer set to 0xA5900000[FAP1] GSO Buffer set to 0xA5A00000[FAP0] FAP BPM Initialized.[FAP1] FAP BPM Initialized.fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytesfapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytesbcmPktDma_bind: FAP Driver binding successfull[FAP0] FAP TM: ON[FAP1] FAP TM: ONbcmxtmcfg: bcmxtmcfg_init entryadsl: adsl_init entryBroadcom BCM63168D0 Ethernet Network Device v0.1 Feb 23 2016 10:00:50fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000ETH Init: Ch:0 - 200 tx BDs at 0xb0820650fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000ETH Init: Ch:1 - 200 tx BDs at 0xb0a20650fapDrv_psmAlloc: wastage 8 bytesfapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184ETH Init: Ch:0 - 600 rx BDs at 0xb0821910fapDrv_psmAlloc: wastage 8 bytesfapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910dgasp: kerSysRegisterDyingGaspHandler: bcmsw registeredeth0: MAC Address: E0:60:66:79:75:5Eeth1: MAC Address: E0:60:66:79:75:5Eeth2: MAC Address: E0:60:66:79:75:5Eeth3: MAC Address: E0:60:66:79:75:5Eeth4: MAC Address: E0:60:66:79:75:5E[NTC arl] arlEnable : Enabled ARL binding to FAPBroadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 Feb 23 2016 09:55:32 Registered <245>Broadcom 802.1Q VLAN Interface, v0.1brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:04107c00Endpoint: endpoint_init entryEndpoint: endpoint_init COMPLETEDSuccessNote: Loading 6300 MDK (default) driver for 63168 chipNote: Forcing 53115 driver for 53125Switch MDK: num_switches = 2Switch MDK: unit = 0; phy_pbmp = 0x8; config_pbmp = 0x18Switch MDK link poll thread: unit=0; phypbmp=0x8Switch MDK link poll thread: unit=1; phypbmp=0x1eVOX25_SERCOMM_VFES_3106Tue Feb 23 10:48:14 UTC 2016brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d06600brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03ae0c00brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03d35000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9c000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03a9d000brcmnand_ctrl_verify_ecc: Correctable ECC error at 00000000:03ae0c00ap_name=syslogd, action=startap_name=coredump, action=startap_name=energy_saving, action=startap_name=dnrd, action=startap_name=phy, action=startap_name=dnsmasq, action=startap_name=lanip, action=startap_name=firewall, action=startap_name=telnetd, action=startap_name=sshd, action=startap_name=httpd, action=startap_name=redirect, action=startap_name=dnrd, action=startbind: Address already in useap_name=ftpd, action=startap_name=networkmap, action=startap_name=srt, action=restartap_name=rp, action=startap_name=udpecho, action=startap_name=ntp, action=startap_name=wlan, action=startap_name=ingress_qos, action=startap_name=ingress_classify, action=startap_name=qos, action=startap_name=qos_cls, action=start/bin/wlctl: Not Found/bin/wlctl: Not Found/bin/wlctl: Not Found/bin/wlctl: Not FoundSetting SSID: 'test'Setting SSID: '_ONOWiFi'Setting SSID: '_AUTO_ONOWiFi'ifconfig: SIOCGIFFLAGS: No such deviceChanspec set to 0x1803/bin/wlctl: Not In Range/bin/wlctl: Not In Rangeifconfig: SIOCGIFFLAGS: No such deviceSetting SSID: 'test_5G'Setting SSID: '_ONOWiFi'Setting SSID: '_AUTO_ONOWiFi'ifconfig: SIOCGIFFLAGS: No such deviceChanspec set to 0xe06a/bin/wlctl: Not In Range/bin/wlctl: Not In Rangeifconfig: SIOCGIFFLAGS: No such deviceSuccessSuccessSuccessap_name=qos_remark, action=startACSD >>main(499): No interface specified, exiting...connect failed: Connection refusedconnect failed: Connection refusedkillall: wps_det: no process killedap_name=ipv6wd, action=startap_name=duplexmode, action=startap_name=cpm, action=startap_name=igd_upnp, action=startap_name=dnsr, action=startap_name=cron, action=startap_name=cups, action=startap_name=snmp, action=startap_name=3g, action=startap_name=emrd, action=startap_name=fon, action=startstarting pid 1560, tty ': '/sbin/getty ttyS0 115200'VOX25 login:

OEM Firmwares:

The usual stock Vox2.5 firmware is based on OpenRG 5.4. See OpenRG User, Administrator and Developer manuals for further details (all available for OpenRG 5.5).

OpenRG firmware remote upgrade images are in .rms file format, binwalk+fmk is capable of unpacking the rootfs image found in these files. Bootloader doesn't get updated and its version string matches the first firmware image originally flashed in factory.

OpenRG for Vodafone Station Revolution variant

There exist VSR firmware variants for all three hardware versions described in this page. The same firmware upgrade .rms file is shared among all of them. For safety, we assume each device can't run a firmware older then its bootloader, as older firmwares are likely not supporting newer clones boards.

Sources

OpenRG GPL toolchain and sources for this variant can be found here:

• 5.4.8.1.327.1.51 GPL.zip MEGA

The available toolchain runs on 32-bit Linux systems.

Firmware upgrades

Firmware upgrade is automatically managed by CWMP. Setup an ACS and upload from there.

OpenRG for EasyBox 804 variant

Vodafone Device Guide Uk

When marketed as EasyBox 804, the SHG2500 board ships with a quite different OEM firmware.

Sources

OpenRG GPL toolchain and sources for this variant can be found here:

The available toolchain runs on 32-bit Linux systems.

Firmware upgrades

Here is a sample OEM firmware image which belongs to this variant:

• cis804-firmware-05-02-easybox-804.zip https://www.vodafone.de/business/hilfe-support/support-firmware-easybox-804-dsl-modem.html#rights

For this variant, you can simply upgrade firmware by placing the rms image into an usb drive.

Notes

Italian forum thread with lots of details on all versions of this device –> External Link

Tags