WikiDevi will be going offline 2019-10-31. For historical dumps of the database, see 'WikiDevi' @ the Internet Archive (MW XML, Files, Images).
Final dumps will be made available after the site goes offline.
There is no chance the data will not live on, in some form - even if it isn't 'WikiDevi' anymore. For example, see TechInfoDepot.

ZyXEL ZyWALL 2WG

From WikiDevi
Jump to: navigation, search

ZyXEL ZyWALL 2WG

FCC approval date: 08 November 2006
(Est.) initial retail price (in USD): $369.99
UPC: 760559114435 (UPC DB, On eBay)
Country of manuf.: Taiwan

Amazon image

ASIN
B000PAPT3I (Flag of the United States.svg, On Amazon, On CCC)

Type: wireless router, security appliance

FCC ID: I88NWD670SU

Power: 12 VDC, 1.5 A
Connector type: barrel

CPU1: Intel XScale IXP422 (266 MHz)
FLA1: 8 MiB
8,388,608 B
65,536 Kib
8,192 KiB
64 Mib
0.00781 GiB
(Intel JS28F640-J3D75)
RAM1: 32 MiB
33,554,432 B
262,144 Kib
32,768 KiB
256 Mib
0.0313 GiB
(Winbond W9812G6GH-6 × 2)

Expansion IFs: Mini PCI, PCMCIA (32-bit)
PCMCIA slots: 1
Mini PCI slots: 1
Serial: yes

WI1 module: ZyXEL NWD-670SU
WI1 module IF: Mini PCI
WI1 chip1: Atheros AR5414
WI1 802dot11 protocols: abg
WI1 antenna connector: none

ETH chip1: Intel XScale IXP422
Switch: Marvell 88E6060-RCJ1
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

abg

Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1173 additional devices
of which 71 are ZyXEL devices
Default login user: blank
Default login password: 1234
blank:1234 credentials used by 47 additional devices
of which 45 are ZyXEL devices

802dot11 OUI: 00:19:CB (7 E, 8 W, 2007), 40:4A:03 (4 E, 4 W, 2008)
Ethernet OUI: 00:19:CB (7 E, 8 W, 2007), 40:4A:03 (4 E, 4 W, 2008)

 FCC ID
ZyXEL NWD-670SUI88NWD670SU
M4Y-AG623C
For a list of all currently documented Atheros chipsets with specifications, see Atheros.
For a list of all currently documented Intel chipsets with specifications, see Intel.


Manual

Datasheet

Review on pcmag.com

Intel XScale Processors

Intel XScale IXP422 (PRIXP422ABB) @266MHz

Firmware[edit]

404AQI8C0.bin - The stock OS seems to be ZyNOS.

MemTab[edit]

ROMIO image start at 50080000
code version:
code start: 00028000
code length: 36BA7C
memMapTab: 18 entries, start = 500cf000, checksum = 2481
$RAM Section:
  0: BootExt(RAMBOOT), start=00028000, len=20000
  1: BootData(RAM), start=00048000, len=20000
  2: HTPCode(RAMCODE), start=00068000, len=498000
  3: HTPData(RAM), start=00500000, len=3B00000
  4: RasCode(RAMCODE), start=00068000, len=CF4000
  5: RasData(RAM), start=00d5c000, len=12A4000
  
$ROM Section:
  6: BootBas(ROMIMG), start=50000000, len=20000
  7: DbgArea(ROMIMG), start=50020000, len=2000
  8: RomDir2(ROMDIR), start=50040000, len=40000
  9: BootExt(ROMIMG), start=50080030, len=27FD0
 10: HTPCode(ROMBIN), start=500a8000, len=27000
     (Compressed)
     Version: HTP_ZW2WG V 0.5, start: 500a8030
     Length: 567D2, Checksum: F6CA
     Compressed Length: 1114F, Checksum: 01AB
 11: MemMapT(ROMMAP), start=500cf000, len=C00
 12: termcap(ROMIMG), start=500cfc00, len=400
 13: RomDefa(ROMIMG), start=500d0000, len=40000
 14: RasCode(ROMBIN), start=50110000, len=5F0000
     (Compressed)
     Version: RAS zw2wg, start: 50110030
     Length: CDE620, Checksum: A2F9
     Compressed Length: 2DBA7C, Checksum: 8037
 15: cwmpData(ROMBIN), start=50700000, len=20000
     signature error!
 16: BgtCtrl(ROMBIN), start=50720000, len=20000
     signature error!
 17: RomExt1(ROMDIR), start=50740000, len=C0001

binwalk dump[edit]

DECIMAL   	HEX       	DESCRIPTION
-------------------------------------------
163840    	0x28000   	ZynOS header,
header size: 48 bytes, load address 0x0, rom image type: ROMBIN,
uncompressed size: 354258, compressed size: 69967, 
uncompressed checksum: 0xF6CA, compressed checksum: 0x1AB, 
flags: 0xE0, uncompressed checksum is valid, the binary is compressed, 
compressed checksum is valid, memory map table address: 0x0
163888    	0x28030   	LZMA compressed data, properties: 
0x5D, dictionary size: 262144 bytes, uncompressed size: 354257 bytes
589824    	0x90000   	ZynOS header, header size: 48 bytes, 
load address 0x0, rom image type: ROMBIN, 
uncompressed size: 13493792, compressed size: 2996860, 
uncompressed checksum: 0xA2F9, compressed checksum: 0x8037, 
flags: 0xE0, uncompressed checksum is valid, the binary is compressed, 
compressed checksum is valid, memory map table address: 0x0
589872    	0x90030   	LZMA compressed data, properties: 0x5D, 
dictionary size: 262144 bytes, uncompressed size: 13493792 bytes

System Info[edit]

ZyWALL 2WG> atsh
ZyNOS Version          : V4.04(AQI.8) | 04/09/2010 08:59:04
Bootbase Version       : V1.08 | 11/01/2006 12:17:09
Vendor Name            : ZyXEL Communications Corp.
Product Model          : ZyWALL 2WG
ZyNOS ROM address      : 50080000
System Type            : 10
MAC Address            : ************
Default Country Code   : E1
Boot Module Debug Flag : 00
RomFile Version        : 45
RomFile Checksum       : 3f90
ZyNOS Checksum         : cfc1
Core Checksum          : 3780
SNMP MIB level & OID   : 060102030405060708091011121314151617181920
Main Feature Bits      : C0
Other Feature Bits     :
          01 22 00 00 00 00 00 00-00 00 00 00 00 00 00 00
          00 00 00 00 00 00 00 00-00 41 13 00 00 00