Ubiquiti Bullet AC
The Ubiquiti Bullet AC is a dual band 2.4/5GHz AC outdoor PoE CPE with 1 GbE ports.
Supported Versions
Hardware Highlights
Installation
Flashing through factory firmware
Ensure firmware version v8.7.0 is installed. Up/downgrade to this exact version.
Patch fwupdate.real binary using:
hexdump -Cv /bin/ubntbox | sed 's/14 40 fe 27/00 00 00 00/g' | hexdump -R > /tmp/fwupdate.real
Make the patched fwupdate.real binary executable using:
chmod +x /tmp/fwupdate.real
Copy the squashfs factory image to /tmp on the device
Flash OpenWrt using:
/tmp/fwupdate.real -m <squashfs-factory image>
Wait for the device to reboot
(copied from Ubiquiti NanoBeam AC and modified)
Flashing from serial console
Connect serial console (115200 baud)
Connect ethernet to a network with a
TFTP server, through a passive PoE injector.
Press a key to obtain a u-boot prompt
Set your
TFTP server's ip address, with:
setenv serverip <tftp-server-address>
Set the Bullet AC's ip address, with:
setenv ipaddr <bullet-ac-address>
Set the boot file, with:
setenv bootfile <name-of-initramfs-binary-on-tftp-server>
Fetch the binary with tftp:
tftpboot
Boot the initramfs binary:
bootm
From the initramfs, fetch the sysupgrade binary, and flash it with sysupgrade.
Hardware
Info
Architecture | MIPS |
Vendor | Ubiquiti |
Bootloader | U-Boot |
System-On-Chip | Atheros AR9342 - MIPS 74Kc V4.12 |
CPU/Speed | 535 MHz |
Flash-Chip | SPI NOR |
Flash size | 16 |
RAM | 64 MiB |
Wireless | Atheros AR9342 & Qualcomm/Atheros QCA988X |
Ethernet | 1x GbE |
USB | None |
Serial | Yes |
JTAG | No |
Photos
Opening the case
To open the case depress the latch on the back of the unit and slide out the PCB assembly.
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device:
Serial connection parameters
for Ubiquiti Bullet AC | 115200, 8N1 |
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port
Bootlogs
OEM bootlog
OpenWrt bootlog
Notes