This device is NOT RECOMMENDED for future use with OpenWrt due to low flash/ram.
DO NOT BUY DEVICES WITH 4MB FLASH / 32MB RAM if you intend to flash an up-to-date and secure OpenWrt version (18.06 or later) onto it! See 4/32 warning for details.
1) This device does not have sufficient resources (flash and/or RAM) to provide secure and reliable operation.
This means that even setting a password or changing simple network settings might not be possible any more, rendering the device effectively useless. See OpenWrt on 4/32 devices what you can do now.
2) OpenWrt support for this device will end after 2019.
19.07 will be the last official build for 4/32 devices. After 19.07, no further OpenWrt images will be built for 4/32 devices. See OpenWrt on 4/32 devices what you can do now.
Atheros Devices with identical PCBs: AP121 / AP121U / Hornet-UB
Brand | Model | Version | Current Release | OEM Info | Forum Topic | Technical Data |
---|---|---|---|---|---|---|
ALFA Network | Hornet-UB / AP121 / AP121U | 18.06.5 | View/Edit data | |||
ALFA Network | Hornet-UB x2 | 18.06.5 | View/Edit data |
Model | Version | SoC | CPU MHz | Flash MB | RAM MB | WLAN Hardware | WLAN2.4 | WLAN5.0 | 100M ports | Gbit ports | Modem | USB |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Hornet-UB / AP121 / AP121U | Atheros AR9331 | 400 | 8 | 32 | Atheros AR9331 | b/g/n | - | 2 | - | - | 1x 2.0 | |
Hornet-UB x2 | Atheros AR9331 | 400 | 16 | 64 | Atheros AR9331 | b/g/n | - | 2 | - | - | 1x 2.0 |
For the 16MB/64MB version of the Hornet-UB board (the “Hornet-UB x2”), see jivex5k's procedure in the forums.
This installation method needs a TTL level serial console (putty) and a working TFTP server (OpenTFTP)
Connect serial console cable and a network cable to WAN/LAN. Switch on the router and press '1' to get the U-boot prompt.
If nothing happens, switch TX und RX around.
Important: You need to change the baud/port speed to 115200 in putty
For installation with OpenTFTP You need to copy the firmwarefile in the same directory as the start batch file of OpenTFTP (You can also give it a shorter name like FW.bin)
Make sure your firewall is diabled. The default IP-Settings of the U-Bootloader are 192.168.2.1 for the Alfa-AP and 192.168.2.11 for the TFTP-Server. You can change these setting with the command “setenv serverip <IP>” and “setenv ipaddr <IP>”
To check if the connection is up you can use ping like allways.
U-Boot 1.1.4 (Sep 29 2011 - 16:39:41) AP121-8MB (ar9331) U-boot DRAM: 32 MB Top of RAM usable for U-Boot at: 82000000 Reserving 248k for U-Boot at: 81fc0000 Reserving 192k for malloc() at: 81f90000 Reserving 44 Bytes for Board Info at: 81f8ffd4 Reserving 36 Bytes for Global Data at: 81f8ffb0 Reserving 128k for boot params() at: 81f6ffb0 Stack Pointer at: 81f6ff98 Now running in RAM - U-Boot at: 81fc0000 id read 0x100000ff flash size 8388608, sector count = 128 Flash: 8 MB In: serial Out: serial Err: serial Net: ag7240_enet_initialize... Fetching MAC Address from 0x81feb688 Fetching MAC Address from 0x81feb688 : cfg1 0x5 cfg2 0x7114 eth0: 00:c0:ca:5f:6b:3d eth0 up : cfg1 0xf cfg2 0x7214 eth1: 00:c0:ca:5f:6b:3e athrs26_reg_init_lan ATHRS26: resetting s26 ATHRS26: s26 reset done eth1 up eth0, eth1 Please choose the operation: 1: Entr boot command line interface. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). You choosed 1 0 ar7240>
tftp 0xa0800000 openwrt-ar71xx-generic-hornet-ub-jffs2-sysupgrade.bin
ar7240> tftp 0xa0800000 openwrt-ar71xx-generic-hornet-ub-jffs2-sysupgrade.bin eth0 link down FAIL dup 1 speed 1000 Using eth1 device TFTP from server 192.168.1.254; our IP address is 192.168.1.1 Filename 'openwrt-ar71xx-generic-hornet-ub-jffs2-sysupgrade.bin'. Load address: 0xa0800000 Loading: ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# # done Bytes transferred = 7322966 (6fbd56 hex)
now enter
erase 0x9f050000 +0x790000
erase 0x9f050000 +0x790000 Erase Flash from 0x9f050000 to 0x9f7dffff in Bank # 1 First 0x5 last 0x7d sector size 0x10000 125 Erased 121 sectors
cp.b 0xa0800000 0x9f050000 0x790000
ar7240> cp.b 0xa0800000 0x9f050000 0x790000 Copy to Flash... write addr: 9f050000 done
issue reset and it should restart into OpenWrt
ar7240>reset U-Boot 1.1.4 (Sep 29 2011 - 16:39:41) AP121-8MB (ar9331) U-boot DRAM: 32 MB Top of RAM usable for U-Boot at: 82000000 Reserving 248k for U-Boot at: 81fc0000 Reserving 192k for malloc() at: 81f90000 Reserving 44 Bytes for Board Info at: 81f8ffd4 Reserving 36 Bytes for Global Data at: 81f8ffb0 Reserving 128k for boot params() at: 81f6ffb0 Stack Pointer at: 81f6ff98 Now running in RAM - U-Boot at: 81fc0000 id read 0x100000ff flash size 8388608, sector count = 128 Flash: 8 MB In: serial Out: serial Err: serial Net: ag7240_enet_initialize... Fetching MAC Address from 0x81feb688 Fetching MAC Address from 0x81feb688 : cfg1 0x5 cfg2 0x7114 eth0: 00:c0:ca:5f:6b:3d eth0 up : cfg1 0xf cfg2 0x7214 eth1: 00:c0:ca:5f:6b:3e athrs26_reg_init_lan ATHRS26: resetting s26 ATHRS26: s26 reset done eth1 up eth0, eth1 Please choose the operation: 1: Entr boot command line interface. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 0 System Boot system code via Flash. ## Booting image at 9f650000 ... Image Name: MIPS OpenWrt Linux-3.3.8 Created: 2012-07-11 8:29:19 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1031446 Bytes = 1007.3 kB Load Address: 80060000 Entry Point: 80060000 Verifying Checksum at 0x9f650040 ...OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80060000) ... ## Giving linux memsize in bytes, 33554432 Starting kernel ... [ 0.000000] Linux version 3.3.8 (fnord@tschunk) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Wed Jul 11 08:28:3 3 UTC 2012 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00019374 (MIPS 24Kc) [ 0.000000] SoC: Atheros AR9330 rev 1 [ 0.000000] Clocks: CPU:400.000MHz, DDR ...
There will be many informations but you have to wait until it all stops and in the last line are only 3 dots displayed.
Now press Enter and you should see the OpenWrt Commandline.
BusyBox v1.19.4 (2013-03-14 11:28:31 UTC) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- ATTITUDE ADJUSTMENT (12.09, r36088) ----------------------------------------------------- * 1/4 oz Vodka Pour all ingredients into mixing * 1/4 oz Gin tin with ice, strain into glass. * 1/4 oz Amaretto * 1/4 oz Triple sec * 1/4 oz Peach schnapps * 1/4 oz Sour mix * 1 splash Cranberry juice ----------------------------------------------------- root@OpenWrt:/#
Hold the reset button and powercycle the device. You can release the button, when all lights come on.
Architecture | MIPS |
---|---|
Vendor | Qualcomm Atheros |
bootloader | U-Boot |
System-On-Chip | Atheros AR9331 (MIPS 24Kc V7.4) |
CPU/Speed | 400 MHz |
BogoMIPS | 265.42 |
Flash-Chip | MX25L6406EM2I-12G (MX25L12835F on UB64 version) |
Flash size | 8 MiB (16 on UB64 version) |
RAM-Chip | ? (NT5DS32M16DS on UB64 version) |
RAM | 32 MiB (64 on UB64 version) |
Wireless | Atheros AR9330 |
Ethernet | Atheros AG71xx |
USB | 1x 2.0 |
Serial | Yes |
JTAG | With Hardwaremod |
To open the case, remove the 2 rubber feet on the bottom located at the USB port side. After removing the caps you will find two screws, unscrew them and voila case opened.
J1 | |||
---|---|---|---|
1 | 2 | 3 | 4 |
VDD | RX | TX | GND |
![]() | Warning! Be aware that you should not connect the VDD pin or the CPU will receive too much voltage when the DC power supply is connected. This will likely brick it. |
TP1 | TP2 | TP3 | TP4 | TP5 |
---|---|---|---|---|
TRST_L | TDI | TDO | TMS | TCK |
TP1 is near the Serial VDD Pin.
TP2-5 are on the right next to the SoC.
each JTAG Pin has its own solderpad, but is not populated.
GPIO Overview | |
---|---|
GPIO 0 | WLAN LED |
GPIO 1 | USB LED |
GPIO 11 | WPS Button |
GPIO 12 | System Reset Button |
GPIO 13 | LAN LED |
GPIO 17 | WAN LED |
GPIO 18 | Watchdog Buffer Control |
GPIO 22 | Watchdog Clock |
GPIO 27 | WPS LED |
How to configure LEDs in general, see the LED section in the led_configuration.
The Hornet-UB has 6 LEDs:
LED name | LED print | Internal name | Trigger |
---|---|---|---|
Power | Power symbol | N/A (fixed supply) | N/A |
USB | Internet symbol | alfa:blue:usb | USB:1-1 |
WLAN | WLAN symbol | alfa:blue:wlan | phy0tpt |
LAN | LAN symbol | alfa:blue:lan | netdev:eth0 |
WAN | WAN symbol | alfa:blue:wan | netdev:eth1 |
WPS | WPS | alfa:blue:wps | User preference |
![]() |
(My layout is the same. On Alfa firmware mtd3 is named “uImage”. reichhart 2013-10-03)
Hornet-UB Flash Layout | |||||||
---|---|---|---|---|---|---|---|
Layer0 | m25p80 spi0.0: MX25L6406EM2I-12G 8192 KiB | ||||||
Layer1 | mtd0 u-boot 256KiB | mtd1 u-boot-env 64KiB | mtd6 firmware 7744KiB | mtd4 nvram 64KiB | mtd5 art 64KiB | ||
Layer2 | mtd2 rootfs 6144KiB | mtd3 kernel 1600KiB | |||||
mountpoint | / | ||||||
filesystem | SquashFS |
The default network configuration is:
Interface Name | Description | Default configuration |
---|---|---|
br-lan | LAN & WiFi | 192.168.1.1/24 |
eth0 | PoE/LAN port | None |
eth1 | WAN/LAN port | DHCP |
wlan0 | WiFi | Disabled |