Table of Contents
Linksys WAG354G
The Linksys WAG354G is an ADSL gateway with wireless acccess point integrated.
Supported Versions
| Version/Model | Launch Date | S/N | OpenWrt Version Supported | Model Specific Notes |
|---|---|---|---|---|
| WAG354G |  | - | Backfire 10.03.1 | only WEP encryption |
| Attitude Adjustment 12.09 | - | |||
| Barrier Breaker 14.07 | only without web interface (i.e. LuCI) | |||
| WAG354G v2 | | - | - | - |
NOTE: With the default image of Attitude Adjustment 12.09 seems to hang because of the small amount of free RAM. With the default image of Barrier Breaker 14.07 the system won't boot.
OEM source code available at:
- http://support.linksys.com/en-eu/gplcodecenter not longer available
Hardware Highlights
| SoC | Ram | Flash | Network | USB | Serial | JTag |
|---|---|---|---|---|---|---|
| Texas Instruments TNETD7300A@150MHz | 16MiB | 4MiB | 4 x 1 | | Yes | Yes |
Manufacturer's site: http://support.linksys.com/en-eu/support/gateways/WAG354G
Installation
- → downloads WA31 for Annex A (ADSL over POTS) devices - WA32 for Annex B devices
Flash Layout
Please check out the article flash.layout. It contains an example and a couple of explanations.
| partition | start | end | Name |
|---|---|---|---|
| mtd0 | 0x900e0000 | 0x903d0000 | fs |
| mtd1 | 0x90020000 | 0x903d0000 | kernel |
| mtd2 | 0x90000000 | 0x90020000 | bootloader |
| mtd3 | 0x903f0000 | 0x90400000 | NVRAM |
| mtd4 | 0x903d0000 | 0x903f0000 | Lang partition |
OEM installation using the TFTP method
Specific values you need
| Bootloader tftp server IPv4 address | 192.168.1.1 |
| Firmware tftp image | Latest OpenWrt release (NOTE: Name must be upgrade_code.bin) |
| TFTP Transfer Window | 1 second |
| TFTP Window Start | approximately 2 seconds after power on; just after LAN leds lights up all together |
| TFTP Client Required IP Address | same class of the router (192.168.1.x) |
Hardware
Info - WAG354G
| Instruction set: | MIPS |
| Vendor: | Texas Instruments |
| bootloader: | PSPBoot |
| System-On-Chip: | TNETD7300AGDW |
| CPU @Frq | MIPS 4KEc V4.8 @150MHz |
| Flash size: | 4 MB |
| Flash Chip: | MIRA P2V28S40BTP |
| RAM size: | 16 MB |
| RAM Chip: | AMD AM29LV320DT90EI |
| Wireless No1: | VLYNQ: Texas Instruments TNETW1130GVF w/ internal antenna for 802.11b/g + RP-SMA connector |
| switch: | Infineon ADM6996L |
| Modem: | xDSL |
| USB: | No |
| Serial: | Yes |
| JTAG: | Yes |
Info - WAG354G v2
| Instruction set: | MIPS |
| Vendor: | Texas Instruments |
| bootloader: | PSPBoot |
| System-On-Chip: | TNETD7200ZDW |
| CPU @Frq | MIPS 4KEc V4.8 @210MHz |
| Flash size: | 4 MB |
| Flash Chip: | MIRA P2V28S40BTP |
| RAM size: | 16 MB |
| RAM Chip: | AMD AM29LV320DT90EF |
| Wireless No1: | integrated: Texas Instruments TNETW1350A w/ internal antenna for 802.11b/g + RP-SMA connector |
| switch: | Infineon ADM6996LC |
| Modem: | xDSL |
| USB: | No |
| Serial: | Yes |
| JTAG: | |
Photos
Front:
Back:
Opening the case
Note: This will void your warranty!
- Remove four screws under the four pads
Main PCB
Serial
→ port.serial general information about the serial port, serial port cable, etc.
Serial console can be plugged to JP5 (JP4 for WAG354G v2): connector lacks, it has to be soldered on the board.
Since your router is working at 3.3V (TTL level voltage), you'll need USB to RS232 TTL converter or a level shifter such as a Maxim MAX232 to change the level from 3.3V to your computer level which is usually at 12V.
You cannot plug directly those pins to your pc serial port (or serial adapter): you will certainly fry the serial circuit or even the whole board 
There are plenty of USB to TTL and RS-232 to TTL available on the market, just be careful with the voltage: the standard is 5V and it may also damage your board. Look for the ones with 3.3V, or with both voltages and a way to switch between them.
How to connect to the Serial Port of this specific device:
WAG354G
| Pin | Signal |
|---|---|
| 1 | GND |
| 2 | n/a |
| 3 | RxD |
| 4 | TxD |
| 5 | VCC |
The settings are: 38400 bauds, 8 bits, no parity, 1 stop bit (38400 8N1)
| terminal confiration | ||
|---|---|---|
| Bits per second | 38400 | |
| Data bits | 8 | |
| Parity | None | |
| Stop bits | 1 | |
| Flow control | None | |
WAG354G V2
JP4_______ | | [1] [2] [3] [4] [5] | | | | | |___ _ ___|-|____|-|__leds___|-|_|-|_|-|_|-|_______________________________| Legend: 1 GND 2 NC 3 Rx 4 Tx 5 Vcc
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
Jtag pins are located in JP2, but the connector lacks. The pinout and specifications are the same of others AR7 devices that is 14 ping ejtag 2.6.
With the router upside down, GND pins are located in the upper pin strip.
You can use Hairydairymaid Debrick Utility with a Xilinx cable.
How to connect to the JTAG Port of this specific device:
Debricking
Bootlogs
OEM bootlog
free space start: 0xb0020000 free space end: 0xb0400000 Minimal POST completed... Success. Last reset cause: Software reset (memory controller also reset) PSPBoot1.2 rev: 0.22.17 (c) Copyright 2002-2004 Texas Instruments, Inc. All Rights Reserved. FlashType: No mac find, use default mac mac_value: 00:16:B6:01:B9:D8 Press ESC for monitor... 521 (psbl) boot order: f boot file: mtd1 Booting... Launching kernel decompressor. Starting LZMA Uncompression Algorithm. Copyright (C) 2003 Texas Instruments Incorporated; Copyright (C) 1999-2003 Igor Pavlov. Compressed file is LZMA format. Kernel decompressor was successful ... launching kernel. LIN X tarted..ConfThiCPU revision is: 00018448 Primary instruction cache 16kb, linesize 16 bytes (4 ways) Primary data cache 16kb, linesize 16 bytes (4 ways) Number of TLB entries 16. Linux version 2.4.17_mvl21-malta-mips_fp_le (root@59-120-187-167.hinet-ip.hinet.net) (gcc version 2.95.3 20010315 (release/MontaVista)) #31 €» 10€ë 28 00:23:15 CST 2006 Determined physical RAM map: memory: 14000000 @ 00000000 (reserved) memory: 00020000 @ 14000000 (ROM data) memory: 00fe0000 @ 14020000 (usable) On node 0 totalpages: 4096 zone(0): 4096 pages. zone(1): 0 pages. zone(2): 0 pages. .........boot_code Pspboot........... ..54....49....45....4e....56....30....2e....38....00....ff.. base address: b0010000 env size: 65536 ptr: b0010000 Kernel command line: calculating r4koff... 000b71b0(750000) CPU frequency 150.00 MHz Calibrating delay loop... 149.91 BogoMIPS Freeing Adam2 reserved memory [0x14001000,0x0001f000] Memory: 13876k/16384k available (1888k kernel code, 2508k reserved, 139k data, 64k init) Dentry-cache hash table entries: 2048 (order: 2, 16384 bytes) Inode-cache hash table entries: 1024 (order: 1, 8192 bytes) Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 4096 (order: 2, 16384 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 TI Optimizations: Allocating TI-Cached Memory Pool. Warning: Number of buffers is not configured.Setting default to 512 Using 512 Buffers for TI-Cached Memory Pool. DEBUG: Using Hybrid Mode. NSP Optimizations: Succesfully allocated TI-Cached Memory Pool. Initializing RT netlink socket Starting kswapd Disabling the Out Of Memory Killer devfs: v1.7 (20011216) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 pty: 32 Unix98 ptys configured Serial driver version 5.05c (2001-07-08) with no serial options enabled ttyS00 at 0xa8610e00 (irq = 15) is a 16550A ttyS01 at 0xa8610f00 (irq = 16) is a 16550A Vlynq CONFIG_MIPS_AVALANCHE_VLYNQ_PORTS=2 Vlynq Device vlynq0 registered with minor no 63 as misc device. Result=0 Vlynq instance:0 Link UP Vlynq Device vlynq1 registered with minor no 62 as misc device. Result=0 VLYNQ 1 : init failed block: 64 slots per queue, batch=16 Using the MAC with external PHY Cpmac driver is allocating buffer memory at init time. Using the MAC with external PHY Cpmac driver Disable TX complete interrupt setting threshold to 20. Default Asymmetric MTU for eth0 1500 PPP generic driver version 2.4.1 avalanche flash device: 0x400000 at 0x10000000. Amd/Fujitsu Extended Query Table v1.1 at 0x0040 Physically mapped flash: Swapping erase regions for broken CFI table. number of CFI chips: 1 Looking for mtd device :mtd0: Found a mtd0 image (0xe0000), with size (0x2f0000). Looking for mtd device :mtd1: Found a mtd1 image (0x20000), with size (0x3b0000). Looking for mtd device :mtd2: Found a mtd2 image (0x0), with size (0x20000). Looking for mtd device :mtd3: Found a mtd3 image (0x3f0000), with size (0x10000). Looking for mtd device :mtd4: Found a mtd4 image (0x3d0000), with size (0x20000). Creating 5 MTD partitions on "Physically mapped flash": 0x000e0000-0x003d0000 : "mtd0" 0x00020000-0x003d0000 : "mtd1" 0x00000000-0x00020000 : "mtd2" 0x003f0000-0x00400000 : "mtd3" 0x003d0000-0x003f0000 : "mtd4" NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP, IGMP IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 1024 bind 1024) IPv4 over IPv4 tunneling driver Default Asymmetric MTU for tunl0 1480 GRE over IPv4 tunneling driver Default Asymmetric MTU for gre0 1476 Linux IP multicast router 0.06 plus PIM-SM klips_info:ipsec_init: KLIPS startup, FreeS/WAN IPSec version: super-freeswan-1.99.8 Default Asymmetric MTU for ipsec0 0 Default Asymmetric MTU for ipsec1 0 Default Asymmetric MTU for ipsec2 0 Default Asymmetric MTU for ipsec3 0 Default Asymmetric MTU for ipsec4 0 klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=15) klips_info:ipsec_alg_init: calling ipsec_alg_static_init() ipsec_1des_init(alg_type=15 alg_id=2 name=1des): ret=0 You should NOT load 1DES support except for testing purposes ! ipsec_null_init(alg_type=15 alg_id=11 name=null): ret=0 ip_conntrack version 2.0 (128 buckets, 1024 max) - 392 bytes per conntrack ip_tables: (c)2000 Netfilter core team netfilter PSD loaded - (c) astaro AG NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 Initializing the WAN Bridge. Please set the MAC Address for the WAN Bridge. Set the Environment variable 'wan_br_mac'. MAC Address should be in the following format: xx.xx.xx.xx.xx.xx 802.1Q VLAN Support v1.6 Ben Greear <greearb@candelatech.com> vlan Initialization complete. VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing unused kernel memory: 64k freed Firmware Version: 1.01.11 SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,4) ret = -1 www -> /www mount: Invalid argument Hit enter to continue...killall: httpd: no process killed Configured 19 states now insmod tiatm Using /lib/modules/2.4.17_mvl21-malta-mips_fp_le/kernel/drivers/atm/tiatm.o name=[eth0] lan_ifname=[br0] =====> set br0 hwaddr to eth0 wlconf: No such file or directory Lan Ipaddr: 255.255.255.0 Netmask: 255.255.255.0................ 255.255.255.0 255.255.255.0 mixed mode insmod ap driver Using /lib/modules/2.4.17_mvl21-malta-mips_fp_le/kernel/drivers/net/tiap.o ret = 0 .............list .............. antsel.c: External Antenna [HTTPD Starting on /www] The boot is UNKNOWN tftp server started tftpd: standalone socket HTTPD start, port 80 dhcpd:auto_search_ip=0,firstsetlanip=1 .............list .............. info, udhcp server (v0.9.8) started QE: No such file or directory log_ipaddr=255 killall: leijun--upnpd-igd ver 0.83 2004-0329: no process killed Now Start syslog.........................!!zebra disabled killall: adslpolling: no process killed IDLE Hit enter to continue...wan def hwaddr 00:16:B6:01:B9:D9 polling now ....... upnpd-igd:current select wan connection:0 upnp_content_num_0 = 14 killall: begin_now: no process killed Hit enter to continue...Hit enter to continue...
OpenWrt bootlog
free space start: 0xb0020000 free space end: 0xb0400000 Minimal POST completed... Success. Last reset cause: Hardware reset (Power-on reset) PSPBoot1.2 rev: 0.22.17 (c) Copyright 2002-2004 Texas Instruments, Inc. All Rights Reserved. FlashType: No mac find, use default mac mac_value: 00:16:B6:01:B9:D8 Press ESC for monitor... 521 (psbl) boot order: f boot file: mtd1 Booting... [ 0.000000] Linux version 3.3.8 (blogic@Debian-60-squeeze-64-minimal) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Sat Mar 23 14:45:52 UTC 2013 [ 0.000000] gpiochip_add: registered GPIOs 0 to 31 on device: ar7-gpio [ 0.000000] ar7-gpio: registered 32 GPIOs [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00018448 (MIPS 4KEc) [ 0.000000] TI AR7 (TNETD7300), ID: 0x0005, Revision: 0x27 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 01000000 @ 14000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00014000 -> 0x00015000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] Early memory PFN ranges [ 0.000000] 0: 0x00014000 -> 0x00015000 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064 [ 0.000000] Kernel command line: console=ttyS0,38400n8 rootfstype=squashfs,jffs2 [ 0.000000] PID hash table entries: 64 (order: -4, 256 bytes) [ 0.000000] Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.000000] Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 16 bytes [ 0.000000] Memory: 11952k/16384k available (2467k kernel code, 4432k reserved, 365k data, 172k init, 0k highmem) [ 0.000000] NR_IRQS:256 [ 0.000000] Calibrating delay loop... 148.88 BogoMIPS (lpj=744448) [ 0.080000] pid_max: default: 32768 minimum: 301 [ 0.090000] Mount-cache hash table entries: 512 [ 0.110000] NET: Registered protocol family 16 [ 0.170000] bio: create slab <bio-0> at 0 [ 0.190000] Switching to clocksource MIPS [ 0.210000] NET: Registered protocol family 2 [ 0.230000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.250000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.270000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.290000] TCP: Hash tables configured (established 512 bind 512) [ 0.310000] TCP reno registered [ 0.320000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.340000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.360000] NET: Registered protocol family 1 [ 0.440000] unable to register fixed phy for cpmac-high: 0 [ 0.470000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.490000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.520000] msgmni has been set to 23 [ 0.530000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) [ 0.560000] io scheduler noop registered [ 0.570000] io scheduler deadline registered (default) [ 0.580000] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.610000] serial8250: ttyS0 at MMIO 0x8610e00 (irq = 15) is a TI-AR7 [ 0.630000] console [ttyS0] enabled, bootconsole disabled [ 0.630000] console [ttyS0] enabled, bootconsole disabled [ 0.660000] serial8250: ttyS1 at MMIO 0x8610f00 (irq = 16) is a TI-AR7 [ 0.720000] physmap platform flash device: 02000000 at 10000000 [ 0.740000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000001 Chip ID 0x0022f6 [ 0.770000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.790000] Amd/Fujitsu Extended Query version 1.1. [ 0.800000] physmap-flash.0: Swapping erase regions for top-boot CFI table. [ 0.820000] number of CFI chips: 1 [ 0.840000] 4 ar7part partitions found on MTD device physmap-flash.0 [ 0.860000] Creating 4 MTD partitions on "physmap-flash.0": [ 0.880000] 0x000000000000-0x000000010000 : "loader" [ 0.900000] 0x000000010000-0x000000020000 : "config" [ 0.920000] 0x000000020000-0x000000400000 : "linux" [ 0.950000] 0x00000010f3ed-0x000000400000 : "rootfs" [ 0.960000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 1.010000] mtd: partition "rootfs" set to be root filesystem [ 1.030000] mtd: partition "rootfs_data" created automatically, ofs=310000, len=F0000 [ 1.050000] 0x000000310000-0x000000400000 : "rootfs_data" [ 1.090000] Fixed MDIO Bus: probed [ 7.340000] INTERNAL PHY!!! [ 7.410000] cpmac-mii: probed [ 7.420000] cpmac: No PHY present, using fixed PHY [ 7.500000] cpmac: device eth0 (regs: 08612800, irq: 41, phy: fixed-0:01, mac: 00:16:b6:01:b9:d8) [ 7.600000] cpmac: device eth1 (regs: 08610000, irq: 27, phy: cpmac-1:1f, mac: 00:16:b6:01:b9:d8) [ 7.640000] vlynq0: regs 0x08611800, irq 29, mem 0x04000000 [ 7.950000] vlynq0: local VLYNQ protocol rev. is 0x0001010b [ 7.970000] vlynq0: remote VLYNQ protocol rev. is 0x00010108 [ 7.990000] vlynq0: using local clock divisor 8 [ 8.090000] Found a VLYNQ device: 00000009 [ 8.100000] vlynq1: regs 0x08611c00, irq 33, mem 0x0c000000 [ 9.030000] TCP cubic registered [ 9.040000] NET: Registered protocol family 17 [ 9.050000] Bridge firewalling registered [ 9.070000] 8021q: 802.1Q VLAN Support v1.8 [ 9.100000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 9.140000] Freeing prom memory: 1020k freed [ 9.160000] Freeing unused kernel memory: 172k freed - preinit - Press the [f] key and hit [enter] to enter failsafe mode - regular preinit - [ 17.460000] JFFS2 notice: (316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 2 orphan) found. switching to jffs2 - init - Please press Enter to activate this console. [ 22.210000] Compat-drivers backport release: compat-drivers-2012-09-04-2-gddac993 [ 22.240000] Backport based on wireless-testing.git master-2012-09-07 [ 22.260000] compat.git: wireless-testing.git [ 22.380000] cfg80211: Calling CRDA to update world regulatory domain [ 22.400000] cfg80211: World regulatory domain updated: [ 22.410000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 22.440000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 22.460000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 22.490000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 22.510000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 22.530000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 23.360000] NET: Registered protocol family 8 [ 23.370000] NET: Registered protocol family 20 [ 23.780000] PPP generic driver version 2.4.2 [ 24.230000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 24.700000] NET: Registered protocol family 24 [ 24.780000] nf_conntrack version 0.5.0 (205 buckets, 820 max) [ 25.500000] acx-mac80211, version: v0.6.0 (git: unknown) [ 25.520000] this driver is still EXPERIMENTAL [ 25.520000] acx: please read the README file and/or go to http://acx100.sourceforge.net/wiki for further information [ 25.560000] built with CONFIG_ACX_MAC80211_PCI [ 25.580000] compiled to use 32bit I/O access. I/O timing issues might occur, such as non-working firmware upload. Report them [ 25.610000] acx: running on a little-endian CPU [ 25.610000] PCI/VLYNQ module initialized, waiting for cards to probe... [ 25.650000] Driver found for VLYNQ device: 00000009 [ 25.950000] vlynq0: local VLYNQ protocol rev. is 0x0001010b [ 25.970000] vlynq0: remote VLYNQ protocol rev. is 0x00010108 [ 25.990000] vlynq0: using local clock divisor 1 [ 26.000000] found TI TNETW1130-based wireless network card at vlynq0, irq:80, phymem:0x4000000, mem:0xa4000000 [ 26.030000] the initial debug setting is 0x000A [ 26.050000] using IRQ 80 [ 26.060000] device IS_PCI [ 26.060000] acx.acx_reset_dev: ACX radio type 0x16 [ 26.080000] acx.acxpci_upload_fw: need firmware for acx111 chipset with radio ID 16 [ 26.080000] Please provide via firmware hotplug: [ 26.080000] either combined firmware (single file named 'tiacx111c16') [ 26.080000] or two files (base firmware file 'tiacx111' + radio fw 'tiacx111r16') [ 26.160000] acx.acxpci_upload_fw: need to load firmware for acx111 chipset with radio ID 16, please provide via firmware hotplug: [ 26.160000] either one file only (<c>ombined firmware image file, radio-specific) or two files (radio-less base image file *plus* separate <r>adio-specific extension file) [ 26.240000] requesting firmware image 'tiacx111c16' [ 26.710000] acx._acx_upload_fw: acx_write_fw (main): 0 [ 26.780000] acx._acx_upload_fw: acx_validate_fw (main): 0 [ 27.410000] initializing max packet templates [ 27.430000] acx.acx_allocate: bdev:94927ec0 size:37536 phy:144f0000 ptr:b44f0000 [ 27.460000] acx.acx_allocate: bdev:94927ec0 size:896 phy:14798000 ptr:b4798000 [ 27.480000] acx.acx_allocate: bdev:94927ec0 size:37536 phy:147a0000 ptr:b47a0000 [ 27.500000] acx.acx_allocate: bdev:94927ec0 size:896 phy:14799000 ptr:b4799000 [ 27.530000] acx.acx_allocate: bdev:94927ec0 size:37536 phy:147b0000 ptr:b47b0000 [ 27.550000] acx.acx_allocate: bdev:94927ec0 size:896 phy:146ee000 ptr:b46ee000 [ 27.580000] acx.acx_allocate: bdev:94927ec0 size:37536 phy:147c0000 ptr:b47c0000 [ 27.600000] acx.acx_allocate: bdev:94927ec0 size:896 phy:146ef000 ptr:b46ef000 [ 27.620000] acx.acx_allocate: bdev:94927ec0 size:37536 phy:147d0000 ptr:b47d0000 [ 27.650000] acx.acx_allocate: bdev:94927ec0 size:896 phy:144d8000 ptr:b44d8000 [ 27.670000] acx.acx_allocate: bdev:94927ec0 size:448 phy:144d9000 ptr:b44d9000 [ 27.690000] acx.acx_allocate: bdev:94927ec0 size:38336 phy:147e0000 ptr:b47e0000 [ 27.720000] phy0: type=0x0003, typestr=ACX111_IE_MEMORY_CONFIG_OPTIONS, len=40: OK [ 27.740000] (type:ACX111_IE_QUEUE_CONFIG,len:56) [ 27.760000] Queue head: len=56, tx_memory_block_address=1A760, rx_memory_block_address=16360 [ 27.780000] Queue head: rx_queue_start=13954 [ 27.800000] Queue head: tx_queue_start[0]=14994 [ 27.810000] Queue head: tx_queue_start[1]=14654 [ 27.830000] Queue head: tx_queue_start[2]=14314 [ 27.840000] Queue head: tx_queue_start[3]=13FD4 [ 27.850000] Queue head: tx_queue_start[4]=13C94 [ 27.870000] acx.acx_create_tx_desc_queue: adev->iobase2=a4022000,tx_queue_start=00014994,tx->desc_start=a4036994 [ 27.900000] acx.acx_create_tx_desc_queue: adev->iobase2=a4022000,tx_queue_start=00014654,tx->desc_start=a4036654 [ 27.930000] acx.acx_create_tx_desc_queue: adev->iobase2=a4022000,tx_queue_start=00014314,tx->desc_start=a4036314 [ 27.960000] acx.acx_create_tx_desc_queue: adev->iobase2=a4022000,tx_queue_start=00013FD4,tx->desc_start=a4035fd4 [ 27.990000] acx.acx_create_tx_desc_queue: adev->iobase2=a4022000,tx_queue_start=00013C94,tx->desc_start=a4035c94 [ 28.030000] (type:ACX111_IE_CONFIG_OPTIONS,len:332) [ 28.070000] NVSv: 01 16 05 00 02 41 02 00 [ 28.080000] NVS_vendor_offs:0221 probe_delay:200 eof_memory:1114112 [ 28.100000] CCAModes:04 Diversity:01 ShortPreOpt:01 PBCC:01 ChanAgil:00 PHY:05 Temp:01 [ 28.130000] AntennaID:00 Len:02 Data:01 02 [ 28.140000] PowerLevelID:01 Len:02 Data:001E 000A [ 28.160000] DataRatesID:02 Len:05 Data:02 04 11 22 44 [ 28.170000] DomainID:03 Len:06 Data:41 20 30 31 32 40 [ 28.190000] ProductID:04 Len:09 Data:TI ACX100 [ 28.200000] ManufacturerID:05 Len:07 Data:TI Test [ 28.220000] (type:ACX1xx_IE_DOT11_CURRENT_ANTENNA,len:2) [ 28.240000] Got antenna[0,1]: 0x4A 0x04 [ 28.250000] (type:ACX1xx_IE_DOT11_STATION_ID,len:6) [ 28.260000] Got station_id: 00:14:BF:EF:EE:1D [ 28.280000] (type:ACX1xx_IE_DOT11_CURRENT_REG_DOMAIN,len:2) [ 28.300000] Got regulatory domain 0x41 [ 28.310000] don't know how to get sensitivity for radio type 0x16 [ 28.330000] acx.interrupt_show_flags: HOST_INT_TX_COMPLETE # OUT: packet sent from device to remote h [ 28.360000] acx.interrupt_show_flags: HOST_INT_RX_COMPLETE # IN: packet rcvd from device to host [ 28.390000] acx.interrupt_show_flags: HOST_INT_IV_ICV_FAILURE # no docs [ 28.410000] acx.interrupt_show_flags: HOST_INT_CMD_COMPLETE # no docs [ 28.430000] acx.interrupt_show_flags: HOST_INT_INFO # no docs [ 28.450000] acx.interrupt_show_flags: HOST_INT_SCAN_COMPLETE # no docs [ 28.470000] acx.interrupt_show_flags: HOST_INT_FCS_THRESHOLD # no docs - in BSD as ACX_DEV_INTF_BOOT ?? [ 28.500000] acx.acx_set_interrupt_mask: adev->irq_mask: before: 0 devtype:0 chiptype:2 tobe: 39157 [ 28.530000] new ratevector: 82 84 0B 0C 12 16 18 24 2C 30 48 60 6C [ 28.550000] (type:ACX1xx_IE_DOT11_TX_POWER_LEVEL,len:1) [ 28.560000] Got tx-power-level: 1 [ 28.570000] Enabling hw-encryption [ 28.590000] (type:ACX1xx_IE_FEATURE_CONFIG,len:8) [ 28.600000] phy0: type=0x0015, typestr=ACX1xx_IE_FEATURE_CONFIG, len=8: OK [ 28.620000] (type:ACX1xx_IE_FWREV,len:24) [ 28.640000] Firmware: firmware_version='Rev 2.3.1.31' hw_id=03010101 [ 28.660000] chipset TNETW1130, radio type 0x16 (Radia (RC2422?)), form factor 0x01 ((mini-)PCI / CardBus), EEPROM version 0x05, uploaded firmware 'Rev 2.3.1.31' [ 28.700000] acx.acx_debugfs_add_adev: adev:9461d760 nm:phy0 dirp:946127d8 [ 28.720000] net device phy0, driver compiled against wireless extensions 22 and Linux 3.3.8 [ 28.860000] registered device TI Avalanche SAR [ 28.870000] Sangam detected [ 28.880000] requesting firmware image "ar0700xx.bin" [ 31.400000] tn7dsl_set_modulation : Setting mode to 0x1 [ 31.420000] Creating new root folder avalanche in the proc for the driver stats [ 31.450000] Texas Instruments ATM driver: version:[7.03.01.00] [ 46.520000] device eth0 entered promiscuous mode [ 46.570000] br-lan: port 1(eth0) entered forwarding state [ 46.580000] br-lan: port 1(eth0) entered forwarding state [ 46.700000] device eth1 entered promiscuous mode [ 46.710000] br-lan: port 2(eth1) entered forwarding state [ 46.730000] br-lan: port 2(eth1) entered forwarding state [ 46.770000] device eth0.1 entered promiscuous mode [ 46.790000] br-lan: port 3(eth0.1) entered forwarding state [ 46.810000] br-lan: port 3(eth0.1) entered forwarding state [ 46.890000] device eth0.2 entered promiscuous mode [ 46.910000] br-lan: port 4(eth0.2) entered forwarding state [ 46.920000] br-lan: port 4(eth0.2) entered forwarding state [ 47.040000] PHY: fixed-0:01 - Link is Up - 100/Full [ 47.560000] br-lan: port 2(eth1) entered disabled state [ 48.580000] br-lan: port 1(eth0) entered forwarding state [ 48.810000] br-lan: port 3(eth0.1) entered forwarding state [ 48.920000] br-lan: port 4(eth0.2) entered forwarding state
Notes
The unit comes with an internal antenna. It's possible to add an external antenna via the RP-SMA connector. There seems to be a mechanical switch that gets (de-)activated when you open the tap of the external antenna port.