{"id":21173637,"url":"https://github.com/systemcrash/openwrt-tilgin-2381","last_synced_at":"2026-04-02T02:59:48.953Z","repository":{"id":65518021,"uuid":"117255556","full_name":"systemcrash/openwrt-tilgin-2381","owner":"systemcrash","description":null,"archived":false,"fork":false,"pushed_at":"2023-02-16T14:40:04.000Z","size":19596,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-21T11:14:45.894Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/systemcrash.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-01-12T15:14:11.000Z","updated_at":"2024-10-31T16:23:09.000Z","dependencies_parsed_at":"2024-11-20T16:50:54.189Z","dependency_job_id":"878a8c16-00d0-4e9f-b84b-899ad8c41156","html_url":"https://github.com/systemcrash/openwrt-tilgin-2381","commit_stats":null,"previous_names":["systemcrash/openwrt-tilgin-2381"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/systemcrash%2Fopenwrt-tilgin-2381","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/systemcrash%2Fopenwrt-tilgin-2381/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/systemcrash%2Fopenwrt-tilgin-2381/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/systemcrash%2Fopenwrt-tilgin-2381/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/systemcrash","download_url":"https://codeload.github.com/systemcrash/openwrt-tilgin-2381/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243623923,"owners_count":20321025,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-20T16:48:25.702Z","updated_at":"2025-12-28T19:43:29.138Z","avatar_url":"https://github.com/systemcrash.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\n# Opensourcing the hardware (Investigation stage: WIP)\n\n\n## OEM Firmware\n\nIncluded here is an OEM OTA update: `13782324_ES5000_HG2380_02_07_03_48.bin`\nfor Tilgin 2381 (and by all indications 238x). \n\nTo extract it:\n```bash\ntar -xf 13782324_ES5000_HG2380_02_07_03_48.bin\n```\n\nInside are the UBI images, including:\n`rootfs.img`, `appfs.img` (empty), `uImage` (kernel)\n\n\nthe `.img` files are squashfsv2.1 FS\n\nchange `sqlz` (`73 71 6C 7A`) magic to `sqsh` (`73 71 73 68`).\n\n```bash\necho 73 71 73 68 | xxd -r -p -o 0 - rootfs.img\necho 73 71 73 68 | xxd -r -p -o 0 - appfs.img\n```\n\nSome archivers won't like it. Keka handles it fine. \n\n\n## UART Serial\n\nA serial UART `J1` is available on the 2381 board beside the heatsink, 'above'\nthe LAN1 and 2 ethernet buffer chips. `+3.3V`, `UART1_RX`, `UART1_TX`, `GND`.\n\n![UART](img/HG2381_UART_J1.jpg \"The Serial Port\")\n\nConnect your Serial adaptor `TX` to `UART1_RX`, and `RX` to `UART1_TX` and \nalso `GND` to `GND`.\n\n\n## Hardware\n\nAccording to some hardware wikis, the hardware in the HG238x is very similar to\n [D-Links DWR-966](https://deviwiki.com/wiki/D-Link_DWR-966) for which \nD-Links source is available [here](https://github.com/brunompena/dwr-966/). \nThe DWR-966 lacks a dedicated WAN port and phone/DECT ports, but has a GSM module\nand a SIM port.\n\n\n## DTS\n\nA corresponding DTS file for the DWR-966 (above) appears to be\n`target/linux/lantiq/image/dts/P02003.dts`, which describes a demo board.\nThe serial port is listed as `J8`. So some differences from the 2381 can be\nexpected, but the chipset looks identical.\n\n\n## Data Encryption Unit\n\nThe `/dev` character devices present in the 2381 OEM firmware indicate that\ncrypto hardware accelerators are available, for mostly deprecated cryptos:\n(3)DES, AES, MD5, SHA1, ARC4, and their corresponding HMACs. Likely for IPsec.\nSearch bootlogs for `IFX DEU` (Data Encryption Unit). Not bad to have.\nKernel drivers appear to be available for it. \nSee [here](https://lore.kernel.org/all/20210914212105.76186-3-olek2@wp.pl/)\nand [here (old original driver)](https://github.com/usnistgov/pscr-openwrt-fork/tree/master/package/kernel/lantiq/ltq-deu/src) and [here (openwrt git)](https://github.com/openwrt/openwrt/commit/e85180d90ed01ef4fb89675702622a9cabf3b092). Uncertain whether the driver is still\n[disabled in newer kernels](https://github.com/openwrt/openwrt/pull/4326).\n\n\n## Cellular / GSM\n\nBootlogs suggest that at least drivers are included for USB GSM dongles. Board\ninspection reveals an absence of anything built in to the HG2381. The Zyxel has\none, however.\n\n\n## DECT/FXS \n\nA Lantiq (now Intel) FXS chip is included in the HG2381 devices. \nA `S613NN81, SLL98` (Batch, part number).\nOther devices in the wild have similar chips. This manages the two RJ11 phone\nsockets. A 2384 (HKBN) includes a `S633NN58, SLL98`. Datasheet as usual \n[unavailable](https://www.avnet.com/shop/us/products/intel/pef42168vv12-s-ll9a-3074457345636172839/).\n[A forum post](https://forum.openwrt.org/t/tilgin-hg2381-uk/37714/3) documents \nan `S828NN26, SLL98` on a UK market model.\n\nIt seems a Lantiq VR9 kernel driver exists for the chip. You may need to dump\nthe \u003c1MB firmware blob for the FXS chip. [See here](https://openwrt-devel.openwrt.narkive.com/5eaKkB3x/patch-00-11-prepare-support-for-fxs-to-vr9-and-support-vgv7519-board).\n\n\n## USB EHCI PCI\n\nAt least two USB ports are available on the HG2381, and bootlogs show the EHCI\ncontroller.\n\n* USB1 (back)\n* USB2 (side)\n\n\n## GPIOs\n\n### HG2384\n\nThe 2384 (HKBN) bootlog reveals:\n```\ngpio-stp-xway 1e100bb0.stp: Init done\n...\ngpio-export gpio-export.8: 1 gpio(s) exported\n...\ntilgin-hg-ltq-gphy tilgin-hg-ltq-gphy.9: gpio_base=166\n...\ngpio 183 (name 3:green)\ngpio 184 (name 3:red)\ngpio 180 (name 4:green)\ngpio 181 (name 4:red)\ngpio 192 (name 5:green)\ngpio 179 (name 5:red)\ngpio 220 (name 6:green)\ngpio 187 (name 7:green)\ngpio 188 (name 7:red)\ngpio 193 (name 8:green)\ngpio 186 (name 8:red)\ngpio 185 (name 1:red)\ngpio 191 (name 6:red)\n```\n\nThe 2384 has 7 multicolour LEDs on the front panel, from left to right:\n* Power (booting, booted)\n* WAN\n* LAN\n* WiFi\n* USB\n* Telephone\n* DECT\n\n### HG2381\n\nThe 2381 bootlog reveals:\n\n```\non-off-sw-gpio:0\non-off-sw-gpio:1\non-off-sw-gpio:2\non-off-sw-gpio:3\non-off-sw-gpio:4\n...\ndanube-gpio danube-gpio.0: gpio_base=0\ndanube-gpio danube-gpio.1: gpio_base=16\ndanube-gpio danube-gpio.2: gpio_base=32\nLantiq Danube/Twinpass/Vinax LED controller GPO\ndanube-ledc-gpo danube-ledc-gpo: gpio_base=64\n...\nGPIO-based on/off switch with auto-off\n...\ntilgin-hg-ltq-gphy: gpio_base=96\n...\nRegistered led device: 1:red\nRegistered led device: 3:green\nRegistered led device: 3:red\nRegistered led device: 4:green\nRegistered led device: 4:red\nRegistered led device: 5:green\nRegistered led device: 5:red\nRegistered led device: 6:red\nRegistered led device: 6:green\nRegistered led device: 7:red\nRegistered led device: 7:green\nRegistered led device: 8:red\nRegistered led device: 8:green\n```\n\nThe 2381 has 7 multicolour LEDs on the front panel, from left to right:\n* Power (booting, booted)\n* WAN\n* LAN\n* WiFi\n* USB\n* Telephone\n* Extra (DECT?)\n\nThe 2381 PCB has two push buttons. \n* \"reset\" (S2) \n* \"WiFi\" (S4)\n* empty position S3\n\n\n## Contact / Further info.\n\nIf you have any datasheets for the chipsets, open an issue here or reach out to\nme on my email (see any commit) :)","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsystemcrash%2Fopenwrt-tilgin-2381","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsystemcrash%2Fopenwrt-tilgin-2381","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsystemcrash%2Fopenwrt-tilgin-2381/lists"}