This is a compact, wall-wart type range extender with 2×2 Wifi5 dual band hardware. 20€ in 2022 in Germany, taxes included. Installation is done through an app, there is no HTML UI. If you don't mind some soldering, this is a very capable hardware for the price that runs OpenWrt just fine. Major hardware limitations (if you don't count the form factor's inherent lack of interfaces) are the 100Mbit LAN port and the 64MB of RAM.
Warning: There is a newer version on the market, Model RC04. This looks identical, but is quite a bit harder to install. Avoid.
Supported in snapshots, since 2023-01-14.
This box does not run a HTML UI, it is configured through an app. For this reason, you cannot use OpenWrtInvasion. You have to install it by opening the box, soldering an UART connector, connect an UART 3V Interface, flash via shell and TFTP.
This is almost the same hardware as mi_router_4a_mir4a_100m and can run its firmware, see notes at 'Alternative Firmware'.
Please note that right now, there is no way back to the stock firmware. (For lack of trying, and why would anybody?)
There seems to be a new version available from 2023 'Model RC04' with a different wifi chip. This is almost identical, but has a newer 5GHz Wifi chip. Unfortunately, console is not functional without directly modifying the SPI Flash's content with a flash programmer. You will also need to load a different chipset driver to get 5GHz functional.
Supporting activities
OpenWrt forum thread: https://forum.openwrt.org/t/almost-supported-xiaomi-ra75-aka-miwifi-range-extender-ac1200/134855
Alternative firmware
If you must or want to run a pre-2022 release version, you can use the one for mi-router-4a-100m. Warning: (*not* mi-router-4a-100m-intl).
Buttons and LED definitions are wrong, and the LAN interface does not exist, the only ethernet is the WAN interface). It follows that you have to disable the firewall or adjust the network config from the serial console, otherwise the device will be inacessible.
Only known way to install *right now* is the old school way of opening the box, soldering in a UART header, connecting to console. There is one screw under the barcode, right side. Header is standard. See FCC DB for photos.
From there, its rather easy:
After Boot, U-Boot will prompt for: Please choose the operation:
1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 9: Load Boot Loader code then write to Flash via TFTP.
With 2 (and having an tftp server running), you can flash the new firmware. Please note that the original firmware has not been yet extracted, so there is no way back!
The standard method of debricking common to xiaomi devices work: Hold the reset button while booting to get into a mode where the device will request a signed bootloader via TFTP. But there is currently no known source for an installable stock firmware.
Use the hidden reset button near the ethernet connector for failsafe mode, when the led starts blinking fast. The big WPS button on the front doesn't do anything at this stage.
After flashing, proceed with Basic configuration: Set up your Internet connection, configure wireless, configure USB port, etc.
Architecture | ramips |
---|---|
Vendor | Ralink |
Bootloader | U-Boot |
System-On-Chip | Mediatek MT7628DAN - MIPS 24KEc V5.5 |
CPU/Speed | 580 |
Flash-Chip | W25Q128BV |
Flash size | 16MiB |
RAM | 64MB |
Wireless | 2×2 Wifi5 Dual Band, MT7628DAN+ MT7612 |
Ethernet | 1 Port, 100 Mbit/s |
Switch | builtin |
USB | none |
Serial | Yes |
JTAG | Not populated |
See Photos from the FCC DB if you need them https://fccid.io/2AFZZRA75/Internal-Photos/Internal-photos-5364844
There is a single screw under the barcode label, right side. Removing the screw beneath, you can split the unit into the power supply and the wifi part. The 'hot' parts are shielded, no risk of electrical shock.
→ port.serial general information about the serial port, serial port cable, etc.
There is a place for a standard uart header, pinout is written down on the PCB. Can easily be soldered.
Looks like RC04 model have no marks for UART:
Serial connection parameters for Xiaomi Mi WiFi Range Extender AC1200 Model RA75 | 115200, 8N1, 3.3V |
---|
[04050D09][04050C0D][898B0000][22234446][00222343] DU Setting Cal Done U-Boot 1.1.3 (Jun 10 2021 - 02:22:33) Board: Ralink APSoC DRAM: 64 MB Power on memory test. Memory size= 64 MB...OK! relocate_code Pointer at: 83fb0000 RT2880_RSTSTAT_REG 0xc0030000 *************************** Board power on Occurred *************************** SPI-NOR flash has JEDEC ID: ef4018 Status Register 1 = 0x00 Status Register 3 = 0x68 flash manufacture id: ef, device id 40 18 find flash: W25Q128BV env is right! ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Jun 10 2021 Time:02:22:33 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 575 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 9: Load Boot Loader code then write to Flash via TFTP. 4 You choosed 3 0 n3: System Boot system code via Flash. ##Booting System 1 Erasing SPI Flash... raspi_erase: offs:20000 len:10000 . Writing to SPI Flash... . done ## Booting image at bc160000 ... Image Name: MIPS OpenWrt Linux-3.10.14 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1263216 Bytes = 1.2 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Erasing SPI Flash... raspi_erase: offs:20000 len:10000 . Writing to SPI Flash... . done commandline uart_en=0 factory_mode=0 mem=64m root=/dev/mtdblock8 No initrd ## Transferring control to Linux (at address 80000000) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC [ 0.000000] Linux version 3.10.14 (jenkins@70c8fd09c123) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 unknown) ) #0 Thu Jun 10 01:56:47 2021 [ 0.000000] [ 0.000000] The CPU feqenuce set to 575 MHz [ 0.000000] [ 0.000000] MIPS CPU sleep mode enabled. [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] Software DMA cache coherency [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] User-defined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: console=ttyS1,115200n8 uart_en=0 factory_mode=0 mem=64m root=/dev/mtdblock8 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=000425e1 [ 0.000000] Readback ErrCtl register=000425e1 [ 0.000000] Memory: 61084k/65536k available (2871k kernel code, 4452k reserved, 659k data, 180k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:128 [ 0.000000] console [ttyS1] enabled [ 0.110000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.170000] pid_max: default: 32768 minimum: 301 [ 0.170000] Mount-cache hash table entries: 512 [ 0.180000] NET: Registered protocol family 16 [ 0.180000] RALINK_GPIOMODE = 54054444 [ 0.190000] RALINK_GPIOMODE = 54044444 [ 0.290000] ***** Xtal 40MHz ***** [ 0.290000] start PCIe register access [ 0.790000] RALINK_RSTCTRL = 2400000 [ 0.800000] RALINK_CLKCFG1 = fdbfffc0 [ 0.800000] [ 0.800000] *************** MT7628 PCIe RC mode ************* [ 1.300000] PCIE0 enabled [ 1.310000] Port 0 N_FTS = 1b105000 [ 1.310000] init_rt2880pci done [ 1.330000] bio: create slab <bio-0> at 0 [ 1.340000] PCI host bridge to bus 0000:00 [ 1.340000] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff] [ 1.350000] pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff] [ 1.350000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 1.360000] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 1.360000] pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000) [ 1.370000] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff] [ 1.370000] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref] [ 1.380000] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff] [ 1.380000] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit] [ 1.390000] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref] [ 1.390000] pci 0000:00:00.0: PCI bridge to [bus 01] [ 1.400000] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff] [ 1.400000] pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref] [ 1.410000] BAR0 at slot 0 = 0 [ 1.410000] bus=0x0, slot = 0x0 [ 1.410000] res[0]->start = 0 [ 1.410000] res[0]->end = 0 [ 1.420000] res[1]->start = 20200000 [ 1.420000] res[1]->end = 2020ffff [ 1.420000] res[2]->start = 0 [ 1.430000] res[2]->end = 0 [ 1.430000] res[3]->start = 0 [ 1.430000] res[3]->end = 0 [ 1.430000] res[4]->start = 0 [ 1.440000] res[4]->end = 0 [ 1.440000] res[5]->start = 0 [ 1.440000] res[5]->end = 0 [ 1.440000] bus=0x1, slot = 0x0 [ 1.450000] res[0]->start = 20000000 [ 1.450000] res[0]->end = 200fffff [ 1.450000] res[1]->start = 0 [ 1.460000] res[1]->end = 0 [ 1.460000] res[2]->start = 0 [ 1.460000] res[2]->end = 0 [ 1.460000] res[3]->start = 0 [ 1.470000] res[3]->end = 0 [ 1.470000] res[4]->start = 0 [ 1.470000] res[4]->end = 0 [ 1.470000] res[5]->start = 0 [ 1.480000] res[5]->end = 0 [ 1.480000] cfg80211: Calling CRDA to update world regulatory domain [ 1.490000] Switching to clocksource Ralink Systick timer [ 1.490000] NET: Registered protocol family 2 [ 1.500000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 1.500000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 1.510000] TCP: Hash tables configured (established 512 bind 512) [ 1.510000] TCP: reno registered [ 1.520000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 1.520000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 1.530000] NET: Registered protocol family 1 [ 1.550000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 1.560000] jffs2: version 2.2. (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 1.570000] msgmni has been set to 119 [ 1.570000] io scheduler noop registered [ 1.580000] io scheduler deadline registered (default) [ 1.580000] MIWIFI panic notifier registered [ 1.590000] pcieport 0000:00:00.0: device [14c3:0801] has invalid IRQ; check vendor BIOS [ 1.600000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 1.610000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A [ 1.610000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A [ 1.620000] led=2, on=4000, off=1, blinks,=1, reset=1, time=4000 [ 1.630000] Ralink gpio driver initialized [ 1.630000] flash manufacture id: ef, device id 40 18 [ 1.640000] W25Q128BV(ef 40180000) (16384 Kbytes) [ 1.640000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 [ 1.650000] Creating 9 MTD partitions on "raspi": [ 1.660000] 0x000000000000-0x000001000000 : "ALL" [ 1.660000] 0x000000000000-0x000000020000 : "Bootloader" [ 1.670000] 0x000000020000-0x000000030000 : "Config" [ 1.680000] 0x000000030000-0x000000040000 : "Factory" [ 1.680000] 0x000000040000-0x000000050000 : "crash" [ 1.690000] 0x000000050000-0x000000060000 : "cfg_bak" [ 1.700000] 0x000000060000-0x000000160000 : "overlay" [ 1.700000] 0x000000160000-0x0000008a0000 : "OS1" [ 1.710000] mtd: try split OS1 partition [ 1.710000] mtd: split_firmware [ 1.720000] mtd: firmware_partition->size 0x740000 [ 1.720000] mtd: firmware_partition->offset 0x160000 [ 1.730000] mtd: uimage_len 1263280 [ 1.730000] mtd: uimage_len 1310720 [ 1.730000] mtd: rootfs_partition->size 0x600000 [ 1.740000] mtd: rootfs_partition->offset 0x2a0000 [ 1.740000] mtd: partition "rootfs" created automatically, ofs=2A0000, len=600000 [ 1.750000] 0x0000002a0000-0x0000008a0000 : "rootfs" [ 1.760000] 0x0000008a0000-0x000000fe0000 : "OS2" [ 1.760000] PPP generic driver version 2.4.2 [ 1.770000] PPP MPPE Compression module registered [ 1.770000] NET: Registered protocol family 24 [ 1.780000] GMAC1_MAC_ADRH -- : 0x00005c02 [ 1.780000] GMAC1_MAC_ADRL -- : 0x144c27fa [ 1.790000] Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500! [ 1.800000] GMAC1_MAC_ADRH -- : 0x00005c02 [ 1.800000] GMAC1_MAC_ADRL -- : 0x144c27fa 1.810000] PROC INIT OK! [ 1.810000] Ralink APSoC Hardware Watchdog Timer [ 1.810000] TCP: cubic registered [ 1.820000] NET: Registered protocol family 10 [ 1.830000] NET: Registered protocol family 17 [ 1.830000] 8021q: 802.1Q VLAN Support v1.8 [ 1.850000] **** dump comp_opts cpue, flags=0x90014, bit_opts 90, fb 40, dictionary_size 40000 [ 1.860000] squashfs_xz_init-73, dict_size 262144, dictionary size 262144 , len 12, size 12 [ 1.870000] squashfs_xz_init-83, size 40000 vs 40000 [ 1.870000] squashfs_xz_init-87, dict_size 262144. n 18 [ 1.880000] VFS: Mounted root (squashfs filesystem) readonly on device 31:8. [ 1.890000] Freeing unused kernel memory: 180K (80373000 - 803a0000) [ 3.110000] init: Console is alive [ 4.300000] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.360000] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.380000] init: - preinit - /etc/preinit: line 1: swconfig: not found /etc/preinit: line 1: swconfig: not found /etc/preinit: line 1: swconfig: not found [ 4.680000] Raeth v3.1 (Tasklet,SkbRecycle) [ 4.680000] [ 4.680000] phy_tx_ring = 0x03fa2000, tx_ring = 0xa3fa2000 [ 4.690000] [ 4.690000] phy_rx_ring0 = 0x03fa3000, rx_ring0 = 0xa3fa3000 [ 4.710000] config 7628 esw as LLLLW [ 4.790000] GMAC1_MAC_ADRH -- : 0x00005c02 [ 4.790000] GMAC1_MAC_ADRL -- : 0x144c27fa [ 4.800000] Link Status Changed: Port 6 linked Up. - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.980000] Link Status Changed: Port 0 linked Up. [ 8.190000] mount_root: mounting /dev/root [ 8.430000] urandom-seed: Seed file not found (/etc/urandom.seed) -----------------------------do_data_mount_fail_recover 1+0 records in 1+0 records out 4 bytes (4B) copied, 0.009180 seconds, 435B/s [ 9.260000] ra2880stop()...Done [ 9.270000] Free TX/RX Ring Memory! [ 9.280000] procd: - early - [ 9.900000] procd: - ubus - [ 9.990000] procd: - init - Please press Enter to activate this console. /etc/rc.d/S00sysfixtime: Thu Jun 10 02:34:48 UTC 2021 [ 11.370000] kmodloader: loading kernel modules from /etc/modules.d/* [ 11.390000] l2tp_core: L2TP core driver, V2.0 [ 11.390000] l2tp_netlink: L2TP netlink interface [ 11.990000] [ 11.990000] [ 11.990000] === pAd = c04a1000, size = 1758600 === [ 11.990000] [ 12.000000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x [ 12.000000] <-- RTMPAllocAdapterBlock, Status=0 [ 12.010000] RtmpChipOpsHook(492): Not support for HIF_MT yet! [ 12.010000] mt7628_init()--> [ 12.020000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628)) [ 12.020000] e2.bin mt7628_init(1117)::(2), pChipCap->fw_len(63984) [ 12.030000] mt_bcn_buf_init(218): Not support for HIF_MT yet! [ 12.030000] <--mt7628_init() [ 12.770000] <-- RTMPAllocTxRxRingMemory, Status=0 [ 12.790000] <-- RTMPAllocAdapterBlock, Status=0 [ 12.790000] pAd->CSRBaseAddress =0xc0a00000, csr_addr=0xc0a00000! [ 12.800000] <dbg> MAC_CSR0=1986146304, RtmpChipOpsHook [ 12.800000] <dbg> dev idx = 1! [ 12.810000] <dbg> get_dev_config_idx pAd->MACVersion = 76623000, pAd->ChipID = 76120044 [ 12.830000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 12.840000] Type=Linux [ 12.860000] nf_conntrack version 0.5.0 (957 buckets, 3828 max) [ 12.940000] xt_time: kernel timezone is -0000 [ 12.950000] kmodloader: done loading kernel modules from /etc/modules.d/* /etc/rc.d/S10boot: WARNING: Wifi detect is deprecated. Use wifi config instead /etc/rc.d/S10boot: For more information, see commit 5f8f8a366136a07df661e31decce2458357c167a /etc/rc.d/S10boot: mt7612: Detect failed /etc/rc.d/S10boot: mt7628: Detect failed [ 14.440000] led=2, on=1, off=4000, blinks,=1, reset=1, time=1 [ 14.450000] led=0, on=1, off=4000, blinks,=1, reset=1, time=1 [ 14.460000] led=2, on=4000, off=1, blinks,=1, reset=1, time=1 /etc/rc.d/S19dnsmasq: cp: can't stat '/etc/dnsmasq.d/*': No such file or directory /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19dnsmasq: sh: out of range /etc/rc.d/S19dnsmasq: sed: /var/etc/dnsmasq.conf.cfg01411c: No such file or directory /etc/rc.d/S19dnsmasq: sed: /var/etc/dnsmasq.conf.cfg01411c: No such file or directory /etc/rc.d/S20network: Set: phy[0].reg[0] = 3300 /etc/rc.d/S20network: Set: phy[1].reg[0] = 3300 /etc/rc.d/S20network: Set: phy[2].reg[0] = 3300 /etc/rc.d/S20network: Set: phy[3].reg[0] = 3300 /etc/rc.d/S20network: Set: phy[4].reg[0] = 3300 /etc/rc.d/S20network: uci: Entry not found /etc/rc.d/S20network: sh: out of range /etc/rc.d/S20network: uci: Invalid argument /etc/rc.d/S20network: uci: Invalid argument /etc/rc.d/S21nginx: start fcgi-cgi by spawn-fcgi. /etc/rc.d/S21nginx: start nginx ok. [ 17.790000] TX_BCN DESC a3030000 size = 320 [ 17.790000] RX[0] DESC a3032000 size = 2048 [ 17.800000] RX[1] DESC a3033000 size = 1024 [ 17.810000] E2pAccessMode=2 [ 17.820000] cfg_mode=9 [ 17.820000] cfg_mode=9 [ 17.820000] wmode_band_equal(): Band Equal! [ 17.950000] load fw image from fw_header_image [ 17.950000] AndesMTLoadFwMethod1(2183)::pChipCap->fw_len(63984) [ 17.960000] CmdAddressLenReq:(ret = 0) [ 17.960000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.970000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.970000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.980000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.980000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.990000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 17.990000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.000000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.000000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.010000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.010000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.020000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.020000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.030000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.030000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.040000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 18.040000] CmdFwStartReq: override = 1, address = 1048576 [ 18.050000] CmdStartDLRsp: WiFI FW Download Success [ 18.130000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) [ 18.130000] efuse_probe: efuse = 10000002 [ 18.140000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4 [ 18.140000] RtmpEepromGetDefault::e2p_dafault=2 [ 18.150000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2 [ 18.150000] NVM is FLASH mode [ 18.160000] 1. Phy Mode = 14 [ 18.320000] Country Region from e2p = ffff [ 18.320000] tssi_1_target_pwr_g_band = 34 [ 18.330000] 2. Phy Mode = 14 [ 18.330000] 3. Phy Mode = 14 [ 18.330000] NICInitPwrPinCfg(11): Not support for HIF_MT yet! [ 18.340000] NICInitializeAsic(652): Not support rtmp_mac_sys_reset () for HIF_MT yet! [ 18.350000] mt_mac_init()--> [ 18.350000] MtAsicInitMac()--> /etc/init.d/network: ifconfig: SIOCGIFFLAGS: No such device [ 18.530000] mt7628_init_mac_cr()--> [ 18.530000] MtAsicSetMacMaxLen(1279): Set the Max RxPktLen=1024! [ 18.530000] <--mt_mac_init() [ 18.540000] WTBL Segment 1 info: [ 18.540000] MemBaseAddr/FID:0x28000/0 [ 18.550000] EntrySize/Cnt:32/128 [ 18.550000] WTBL Segment 2 info: [ 18.550000] MemBaseAddr/FID:0x40000/0 [ 18.560000] EntrySize/Cnt:64/128 [ 18.560000] WTBL Segment 3 info: [ 18.560000] MemBaseAddr/FID:0x42000/64 [ 18.570000] EntrySize/Cnt:64/128 [ 18.570000] WTBL Segment 4 info: [ 18.570000] MemBaseAddr/FID:0x44000/128 [ 18.580000] EntrySize/Cnt:32/128 [ 18.580000] AntCfgInit(2918): Not support for HIF_MT yet! [ 18.590000] MCS Set = ff ff 00 00 01 [ 18.590000] MtAsicSetChBusyStat(846): Not support for HIF_MT yet! /etc/init.d/network: ifconfig: SIOCGIFFLAGS: No such device /etc/init.d/network: ifconfig: SIOCGIFFLAGS: No such device /etc/rc.d/S49messagingagent.sh: start messagingagent ok. [ 22.870000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 22.870000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 22.900000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 22.910000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 22.910000] Main bssid = d4:35:38:8b:52:6c [ 22.920000] <==== rt28xx_init, Status=0 [ 22.920000] CmdSlotTimeSet start [ 22.920000] CmdSlotTimeSet end [ 22.950000] !!!mt7628_xq_board=RA75!!! [ 22.960000] device wl1 entered promiscuous mode [ 22.960000] br-lan1: port 1(wl1) entered forwarding state [ 22.970000] br-lan1: port 1(wl1) entered forwarding state [ 23.080000] device apcli0 entered promiscuous mode [ 23.080000] br-lan1: port 2(apcli0) entered forwarding state [ 23.090000] br-lan1: port 2(apcli0) entered forwarding state [ 23.220000] Raeth v3.1 (Tasklet,SkbRecycle) [ 23.230000] [ 23.230000] phy_tx_ring = 0x023f4000, tx_ring = 0xa23f4000 [ 23.240000] [ 23.240000] phy_rx_ring0 = 0x023f5000, rx_ring0 = 0xa23f5000 [ 23.260000] config 7628 esw as LLLLW [ 23.330000] GMAC1_MAC_ADRH -- : 0x00005c02 [ 23.340000] GMAC1_MAC_ADRL -- : 0x144c27fa [ 23.340000] Link Status Changed: Port 0 linked Down. [ 23.410000] device eth0.1 entered promiscuous mode [ 23.410000] device eth0 entered promiscuous mode [ 23.420000] br-lan2: port 1(eth0.1) entered forwarding state [ 23.430000] br-lan2: port 1(eth0.1) entered forwarding state [ 23.470000] <dbg> MAC_CSR0=1986146304, rtmp_asic_top_init [ 23.600000] UserCfgInit set RDMode = RD_SILENCE_MODE [ 23.670000] mt7612_set_ed_cca on [ 24.140000] mt7612_set_ed_cca on [ 24.970000] br-lan1: port 1(wl1) entered forwarding state [ 25.090000] br-lan1: port 2(apcli0) entered forwarding state [ 25.430000] br-lan2: port 1(eth0.1) entered forwarding state [ 25.690000] mt7612_set_ed_cca on [ 25.690000] <==== rt28xx_init, Status=0 [ 25.710000] [sched_delayed] sched: RT throttling activated [ 25.740000] device wl0 entered promiscuous mode [ 25.740000] br-lan2: port 2(wl0) entered forwarding state [ 25.750000] br-lan2: port 2(wl0) entered forwarding state [ 25.790000] device apclii0 entered promiscuous mode [ 25.800000] br-lan2: port 3(apclii0) entered forwarding state [ 25.800000] br-lan2: port 3(apclii0) entered forwarding state [ 25.880000] ##### mbss_cr_enable, BssId = 1 [ 25.880000] device wl2 entered promiscuous mode [ 25.950000] br-miot: port 1(wl2) entered forwarding state [ 25.950000] br-miot: port 1(wl2) entered forwarding state [ 26.410000] Link Status Changed: Port 0 linked Up. /etc/init.d/network: Command failed: Not found [ 27.750000] br-lan2: port 2(wl0) entered forwarding state [ 27.800000] br-lan2: port 3(apclii0) entered forwarding state [ 27.950000] br-miot: port 1(wl2) entered forwarding state /etc/init.d/network: Command failed: Not found [ 28.550000] br-miot: port 1(wl2) entered disabled state Thu Jun 10 10:35:06 CST 2021 boot_check[1243]: INFO: Wireless OK /etc/rc.d/S60iweventd: iwevent-call start ok [ 33.140000] led=2, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 33.160000] led=0, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 33.190000] led=2, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 33.230000] led=0, on=4000, off=1, blinks,=1, reset=1, time=4000 Thu Jun 10 10:35:11 CST 2021 boot_check[2434]: Booting up finished. [ 34.230000] br-lan2: port 2(wl0) entered disabled state [ 34.430000] led=37, on=1, off=4000, blinks,=1, reset=1, time=1 [ 34.440000] led=44, on=1, off=4000, blinks,=1, reset=1, time=1 [ 34.450000] led=46, on=1, off=4000, blinks,=1, reset=1, time=1 [ 34.470000] led=46, on=10, off=10, blinks,=4000, reset=1, time=4000
[04050D0A][04050C0E][898B0000][23244547][00232444] DU Setting Cal Done U-Boot 1.1.3 (Jun 10 2021 - 02:22:33) Board: Ralink APSoC DRAM: 64 MB Power on memory test. Memory size= 64 MB...OK! relocate_code Pointer at: 83fb0000 RT2880_RSTSTAT_REG 0xc0030204 ****************************** Software System Reset Occurred ****************************** SPI-NOR flash has JEDEC ID: ef4018 Status Register 1 = 0x00 Status Register 3 = 0x68 flash manufacture id: ef, device id 40 18 find flash: W25Q128BV env is right! ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Jun 10 2021 Time:02:22:33 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 575 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 9: Load Boot Loader code then write to Flash via TFTP. 0 n3: System Boot system code via Flash. ##Booting System 1 Erasing SPI Flash... raspi_erase: offs:20000 len:10000 . Writing to SPI Flash... . done ## Booting image at bc160000 ... Image Name: MIPS OpenWrt Linux-5.10.136 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2184603 Bytes = 2.1 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Erasing SPI Flash... raspi_erase: offs:20000 len:10000 . Writing to SPI Flash... . done commandline uart_en=0 factory_mode=0 mem=64m root=/dev/mtdblock8 No initrd ## Transferring control to Linux (at address 80000000) ... ## Giving linux memsize in MB, 64 Starting kernel ... [ 0.000000] Linux version 5.10.136 (joe@urmel.joe.lo) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 11.3.0 r20352-9c862 [ 0.000000] Board has DDR2 [ 0.000000] Analog PMU set to hw control [ 0.000000] Digital PMU set to hw control [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] MIPS: machine is Xiaomi Mi AC1200 WLAN Range Extender RA75 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16240 [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2 [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.000000] Writing ErrCtl register=000425e0 [ 0.000000] Readback ErrCtl register=000425e0 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 56424K/65536K available (5276K kernel code, 612K rwdata, 1120K rodata, 1176K init, 201K bss, 911) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS: 256 [ 0.000000] intc: using register map from devicetree [ 0.000000] CPU Clock: 580MHz [ 0.000000] timer_probe: no matching timers found [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns [ 0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns [ 0.007631] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.073579] pid_max: default: 32768 minimum: 301 [ 0.078216] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.085238] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.095190] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build [ 0.106599] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.116109] futex hash table entries: 256 (order: -1, 3072 bytes, linear) [ 0.122753] pinctrl core: initialized pinctrl subsystem [ 0.129475] NET: Registered protocol family 16 [ 0.249280] mt7620-pci 10140000.pcie: Port 0 N_FTS = 1b105000 [ 0.404565] PCI host bridge /pcie@10140000 ranges: [ 0.409154] MEM 0x0000000020000000..0x000000002fffffff [ 0.414166] IO 0x0000000010160000..0x000000001016ffff [ 0.470888] PCI host bridge to bus 0000:00 [ 0.474808] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff] [ 0.481491] pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff] [ 0.488071] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.494631] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.502320] pci 0000:00:00.0: [14c3:0801] type 01 class 0x060400 [ 0.508092] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 0.514113] pci 0000:00:00.0: reg 0x14: [mem 0x20200000-0x2020ffff] [ 0.520247] pci 0000:00:00.0: supports D1 [ 0.524054] pci 0000:00:00.0: PME# supported from D0 D1 D3hot [ 0.531455] pci 0000:01:00.0: [14c3:7662] type 00 class 0x028000 [ 0.537242] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit] [ 0.543841] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] [ 0.550362] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold [ 0.557756] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 0.564096] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 [ 0.570550] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000] [ 0.576876] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000] [ 0.583610] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff] [ 0.590151] pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref] [ 0.597132] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff] [ 0.603683] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit] [ 0.610757] pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref] [ 0.617700] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.622501] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff] [ 0.629041] pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref] [ 0.642718] clocksource: Switched to clocksource MIPS [ 0.648938] NET: Registered protocol family 2 [ 0.653461] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.661161] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.669359] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.676740] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.683530] TCP: Hash tables configured (established 1024 bind 1024) [ 0.689819] UDP hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.696154] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.703194] NET: Registered protocol family 1 [ 0.707421] PCI: CLS 0 bytes, default 32 [ 0.719017] workingset: timestamp_bits=14 max_order=14 bucket_order=0 [ 0.730441] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.736101] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.749299] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.754990] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.760548] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.766315] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled [ 0.773600] printk: console [ttyS0] disabled [ 0.777765] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A [ 0.786550] printk: console [ttyS0] enabled [ 0.786550] printk: console [ttyS0] enabled [ 0.794953] printk: bootconsole [early0] disabled [ 0.794953] printk: bootconsole [early0] disabled [ 0.805817] spi-mt7621 10000b00.spi: sys_freq: 193333333 [ 0.824915] spi-nor spi0.0: w25q128 (16384 Kbytes) [ 0.829860] 7 fixed-partitions partitions found on MTD device spi0.0 [ 0.836442] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.843900] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.851860] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.859370] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.867047] Creating 7 MTD partitions on "spi0.0": [ 0.871919] 0x000000000000-0x000000020000 : "bootloader" [ 0.881002] 0x000000020000-0x000000030000 : "config" [ 0.887371] 0x000000030000-0x000000040000 : "factory" [ 0.895682] 0x000000040000-0x000000050000 : "crash" [ 0.901865] 0x000000050000-0x000000060000 : "cfg_bak" [ 0.910036] 0x000000060000-0x000000160000 : "overlay" [ 0.916569] 0x000000160000-0x000001000000 : "firmware" [ 0.925038] 2 uimage-fw partitions found on MTD device firmware [ 0.931064] Creating 2 MTD partitions on "firmware": [ 0.936174] 0x000000000000-0x0000002155db : "kernel" [ 0.941205] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only [ 0.950930] 0x0000002155db-0x000000ea0000 : "rootfs" [ 0.956058] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only [ 0.968258] mtd: device 8 (rootfs) set to be root filesystem [ 0.974216] 1 squashfs-split partitions found on MTD device rootfs [ 0.980497] 0x000000530000-0x000000ea0000 : "rootfs_data" [ 1.041293] rt3050-esw 10110000.esw: mediatek esw at 0xb0110000, irq 25 initialized [ 1.049987] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 [ 1.060148] NET: Registered protocol family 10 [ 1.070181] Segment Routing with IPv6 [ 1.074115] NET: Registered protocol family 17 [ 1.078727] 8021q: 802.1Q VLAN Support v1.8 [ 1.100136] VFS: Mounted root (squashfs filesystem) readonly on device 31:8. [ 1.114018] Freeing unused kernel memory: 1176K [ 1.118617] This architecture does not have kernel memory protection. [ 1.125191] Run /sbin/init as init process [ 2.177157] init: Console is alive [ 2.181214] init: - watchdog - [ 3.820387] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.988784] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.006796] init: - preinit - [ 4.594278] rt3050-esw 10110000.esw: port 0 link up [ 6.047684] random: jshn: uninitialized urandom read (4 bytes read) [ 6.313503] random: jshn: uninitialized urandom read (4 bytes read) [ 6.341958] random: jshn: uninitialized urandom read (4 bytes read) Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 9.069186] jffs2: notice: (385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (6 unch. [ 9.087543] mount_root: switching to jffs2 overlay [ 9.099237] overlayfs: upper fs does not support tmpfile. [ 9.112610] urandom-seed: Seeding with /etc/urandom.seed [ 9.444756] procd: - early - [ 9.448135] procd: - watchdog - [ 10.242775] procd: - watchdog - [ 10.246702] procd: - ubus - [ 10.446307] random: ubusd: uninitialized urandom read (4 bytes read) [ 10.455636] random: ubusd: uninitialized urandom read (4 bytes read) [ 10.462894] random: ubusd: uninitialized urandom read (4 bytes read) [ 10.480135] procd: - init - Please press Enter to activate this console. [ 11.812292] random: jshn: uninitialized urandom read (4 bytes read) [ 11.871186] random: ubusd: uninitialized urandom read (4 bytes read) [ 11.903299] random: ubus: uninitialized urandom read (4 bytes read) [ 11.936113] kmodloader: loading kernel modules from /etc/modules.d/* [ 12.545410] Loading modules backported from Linux version v5.15.58-0-g7d8048d4e064 [ 12.553179] Backport generated by backports.git v5.15.58-1-0-g42a95ce7 [ 12.931785] urngd: v1.0.2 started. [ 12.939202] mt76_wmac 10300000.wmac: ASIC revision: 76280001 [ 13.202412] random: crng init done [ 13.205941] random: 24 urandom warning(s) missed due to ratelimiting [ 13.975410] mt76_wmac 10300000.wmac: Firmware Version: 20151201 [ 13.981438] mt76_wmac 10300000.wmac: Build Time: 20151201183641 [ 14.002726] mt76_wmac 10300000.wmac: firmware init done [ 14.355228] mt76x2e 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4 [ 14.361784] mt76x2e 0000:01:00.0: ASIC revision: 76120044 [ 15.662069] mt76x2e 0000:01:00.0: ROM patch build: 20141115060606a [ 15.680570] mt76x2e 0000:01:00.0: Firmware Version: 0.0.00 [ 15.686227] mt76x2e 0000:01:00.0: Build: 1 [ 15.690379] mt76x2e 0000:01:00.0: Build Time: 201607111443____ [ 15.712742] mt76x2e 0000:01:00.0: Firmware running! [ 15.866676] PPP generic driver version 2.4.2 [ 15.884873] NET: Registered protocol family 24 [ 15.918934] kmodloader: done loading kernel modules from /etc/modules.d/*