Build boot image:

    cd target/config/prpmc800
    gmake clean
    gmake bootrom_uncmp.bin
    cp bootrom_uncmp.bin /tftpboot/boot_prpmc800.bin


Power down the board and switch the ROM jumper to select socketed FLASH.
Connect the Ethernet and console serial port cables, then power the board back
up.


PPC7-Bug>niot;h
Network Controllers/Nodes Available
CLUN  DLUN  Name      Address    P-Address/H-Address
  11     0  I82559    $00008800  0.0.0.0/0001AF0CADA2
  22     0  I82559    $00011000  0.0.0.0/0030640220AE
  25     0  I82559    $00012800  0.0.0.0/0030640220AF

PPC7-Bug>niot
Controller LUN =00? 11
Device LUN     =00? 
Node Control Memory Address =07E17850? 
Client IP Address      =0.0.0.0? 129.57.34.191
Server IP Address      =0.0.0.0? 129.57.167.14
Subnet IP Address Mask =255.255.255.0? 255.255.252.000
Broadcast IP Address   =255.255.255.255? 
Gateway IP Address     =0.0.0.0? 129.57.32.1
Boot File Name ("NULL" for None)     =? .

PPC7-Bug>niot;h
Network Controllers/Nodes Available
CLUN  DLUN  Name      Address    P-Address/H-Address
  11     0  I82559    $00008800  129.57.34.215/0001AF0CADA2
  22     0  I82559    $00011000  0.0.0.0/0030640220AE
  25     0  I82559    $00012800  0.0.0.0/0030640220AF
PPC7-Bug>







The file is transferred from the TFTP host to the target board using
the `niop' command.  Important: You must have a TFTP server running on your
host's subnet for the `niop' command to succeed.  The file name must be set to
the location of the binary file on the TFTP host.  The binary file must be
stored in the directory identified for TFTP accesses, but the file name is
a relative path and does not include the '/tftpboot' directory name:

PPC7-Bug>niop
Controller LUN =11? 
Device LUN     =00? 
Get/Put        =G? 
File Name      =? boot_prpmc800.bin
Memory Address =00004000? 
Length         =00000000? 
Byte Offset    =00000000? 

Bytes Received =&540720, Bytes Loaded =&540720
Bytes/Second   =&540720, Elapsed Time =1 Second(s)
PPC7-Bug>






After the file is loaded onto the target, the `pflash' command is used
to put it into Bank A (soldered FLASH) parts.

(4000:fff00 - source address and length, f0000100 - destination address in flash memory)

PPC7-Bug>pflash 4000:fff00 f0000100
Source Starting/Ending Addresses      =00004000/00103EFF
Destination Starting/Ending Addresses =F0000100/F00FFFFF
Number of Effective Bytes             =000FFF00 (&1048320)

Program FLASH Memory (Y/N)? y
Erasing sector  =$F0000000
Erasing sector  =$F0040000
Erasing sector  =$F0080000
Erasing sector  =$F00C0000
Programming sector =$F0000000
Programming sector =$F0040000
Programming sector =$F0080000
Programming sector =$F00C0000
FLASH Memory Programming Complete
PPC7-Bug>

========================================
mv2306(jumper J15):
PPC1-Bug>pflash 4000:fff00 ff000100
========================================


========================================
mv2432(jumper J8):
PPC4-Bug>pflash 4000:fff00 ff000100
========================================


========================================
mv5100(jumper J7):
PPC6-Bug>pflash 4000:fff00 f4000100
========================================


When the command is finished, power down the board and switch the ROM
jumper to select Bank A (soldered FLASH).  Then power the board back up.




===================================================================

A -> B:
=======
pflash f0000000:100000 ff800000

B -> A:
=======
pflash ff800000:100000 f0000000


===================================================================