AVM FRITZ!Box 7520 / 7530

The FRITZ!Box 7520 and 7530 are AC1200 Dual-Band WiFi Routers (up to 1.2Gbps). They have 4x 1G LAN ports, a DSL/VDSL port up to 300Mb, and a USB 3.0 port.

The FRITZ!Box 7520 is the same hardware platform as the 7530, but its OEM software reduces the speed of 2x LAN ports and the USB port. Those limits do not apply to OpenWRT.

The FRITZ!Box 7530 AX, IS NOT SUPPORTED as it uses a broadcom SoC with a broadcom DSL chipset, see https://en.avm.de/products/fritzbox/fritzbox-7530-ax/

Product Page (English): https://en.avm.de/products/fritzbox/fritzbox-7530/technical-data/

Source Code: FRITZ!Box 7520 and FRITZ!Box 7530

Brand	Model	Version	Current Release	OEM Info	Forum Search	Technical Data
AVM	FRITZ!Box 7530		23.05.0	https://avm.de/produkte/fritzbox/fritzbox-7530/	FRITZ!Box 7530	View/Edit data
AVM	FRITZ!Box 7520		23.05.0	http://¿	FRITZ!Box 7520	View/Edit data

NB:

Some models of the 7530 have a changed flash chip which is only supported for releases after 22.03 and snapshot builds. There is no known way to identify these boards from the outside. The only known box this happened with was an ISP-branded 7530 (A1).
Some models of the 7530 require a patch to enable the VDSL modem which is not yet included in any build.
The “Typ B” model of the 7520 is not (yet?) supported. It uses the same SoC but a different DSL chipset.
The AX hardware is a completely different platform and not supported at all.

Unsupported Functions
DECT
DECT

Model	Version	SoC	CPU MHz	CPU Cores	Flash MB	RAM MB	WLAN Hardware	WLAN2.4	WLAN5.0	100M ports	Gbit ports	Modem	USB
FRITZ!Box 7520		Qualcomm IPQ4019	716	4	128NAND	256	Qualcomm IPQ4019	b/g/n	a/n/ac	-		xDSL	1x 3.0
FRITZ!Box 7530		Qualcomm IPQ4019	716	4	128NAND	256	Qualcomm IPQ4019	b/g/n	a/n/ac	-		xDSL	1x 3.0

root@fritzbox:~# cat /proc/cpuinfo

model name      : ARMv7 Processor rev 5 (v7l) - Quad Core CPU
Features        : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae evtstrm

Hardware        : Generic DT based system
Revision        : 0000
Serial          : 0000000000000000

Model	Version	Current Release	Firmware OpenWrt Install	Firmware OpenWrt Upgrade	Firmware OEM Stock
FRITZ!Box 7520		23.05.0	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-initramfs-fit-uImage.itb, https://downloads.openwrt.org/snapshots/targets/ipq40xx/generic/u-boot-fritz7520/uboot-fritz7520.bin	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin	https://avm.de/service/downloads/?product=fritzbox-7520
FRITZ!Box 7530		23.05.0	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-initramfs-uImage.itb, https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/u-boot-fritz7530/uboot-fritz7530.bin	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin	https://avm.de/service/downloads/?product=fritzbox-7530

For the 7520 model, replace all occurences of 7530 by 7520

Grab the uboot for the Device from the u-boot-fritz7530 subdirectory. Place it in the same directory as the eva_ramboot.py script.
Assign yourself the IP address 192.168.178.10/24. Connect your Computer to one of the boxes LAN ports.
Connect Power to the Box. As soon as the LAN port of your computer shows link, load the U-Boot to the box using following command.
```
> ./eva_ramboot.py --offset 0x85000000 192.168.178.1 uboot-fritz7530.bin
```

Some models use IP address 192.168.1.1 during boot. If the command above fails repeatedly, try the command with 192.168.1.1 as target (after assigning yourself IP address 192.168.1.70/24)

The U-Boot will now start. Now assign yourself the IP address 192.168.1.70/24. Copy the OpenWrt initramfs (!) image to a installed TFTP server root directory (see instructions here: TFP Server) on our Computer and rename it to FRITZ7530.bin.
The Box will now put the file (a pull request every 5 seconds) and boot OpenWrt into RAM. This can take up to two minutes.
Copy the U-Boot and the OpenWrt sysupgrade (!) image to the Box using scp, like

scp /tmp/uboot-fritz7530.bin root@192.168.1.1:/tmp/
scp /tmp/avm_fritzbox-7530-squashfs-sysupgrade.bin  root@192.168.1.1:/tmp/

If you get an error like ash: /usr/libexec/sftp-server: not found, run scp with the -O flag: scp -O /tmp/uboot-fritz7530.bin root@192.168.1.1:/tmp/

SSH into the Box and first write the Bootloader to both previous kernel partitions.

mtd write /tmp/uboot-fritz7530.bin uboot0
mtd write /tmp/uboot-fritz7530.bin uboot1

Remove the AVM filesystem partitions to make room for our kernel + rootfs + overlayfs.
```
ubirmvol /dev/ubi0 --name=avm_filesys_0
ubirmvol /dev/ubi0 --name=avm_filesys_1
```

Flash OpenWrt peristently using sysupgrade.

sysupgrade -n /tmp/avm_fritzbox-7530-squashfs-sysupgrade.bin

The integrated VRX518 DSL modem is only supported in snapshot and releases from 23.x onwards. It does not work on 22.03.x and earlier.

Due to licensing uncertainties, only the drivers are included but no firmware files are provided. After installing OpenWrt, the firmware files need to be installed manually on the device. Download the following files to your computer and transfer the files to your device:

mkdir -p firmware/09a9
wget -P firmware/09a9 https://gitlab.com/prpl-foundation/intel/vrx518_aca_fw/-/raw/ugw-8.5.2/platform/xrx500/aca_fw.bin
wget -P firmware https://gitlab.com/prpl-foundation/intel/vrx518_ppe_fw/-/raw/ugw_8.5.2.10/platform/xrx500/ppe_fw.bin
wget -P firmware https://gitlab.com/prpl-foundation/intel/dsl_vr11_firmware_xdsl/-/raw/ugw-8.5.2/xcpe_8D1507_8D0901.bin

Then transfer the files to your device:

scp -O -r firmware/* root@192.168.1.1:/lib/firmware

One symlink needs to be created on the device. Log in via SSH and run the following command on your box:

ln -s xcpe_8D1507_8D0901.bin /lib/firmware/vdsl.bin

Finally, reboot your device and you should end up with working VDSL support. Please also verify that you also set the correct VLAN ID for you WAN interface. Otherwise you might not be able to connect to your provider (vdsl1).

If you want the firmware files to survive sysupgrade, simply add the following lines to /etc/sysupgrade.conf:

/lib/firmware/ppe_fw.bin
/lib/firmware/xcpe_8D1507_8D0901.bin
/lib/firmware/vdsl.bin
/lib/firmware/09a9/aca_fw.bin

NB: What happens with the vdsl.bin symlink is not yet tested. If you tried it, please clarify this section.

dev:    size   erasesize  name
mtd0: 00080000 00020000 "SBL1"
mtd1: 00080000 00020000 "MIBIB"
mtd2: 00080000 00020000 "QSEE"
mtd3: 00040000 00020000 "CDT"
mtd4: 00080000 00020000 "QSEE_B"
mtd5: 00040000 00020000 "urlader0"
mtd6: 00040000 00020000 "urlader1"
mtd7: 00840000 00020000 "nand-tffs"
mtd8: 00400000 00020000 "uboot0"
mtd9: 00400000 00020000 "uboot1"
mtd10: 06d00000 00020000 "ubi"

See Installation

Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
Upload image file for sysupgrade to LuCI
Wait for reboot

sysupgrade

Login as root via SSH on 192.168.1.1, then enter the following commands:

cd /tmp
wget https://downloads.openwrt.org/releases/22.03.3/targets/ipq40xx/generic/openwrt-22.03.3-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin
sysupgrade /tmp/openwrt-22.03.3-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin

WinScp

If no Internet or WAN configured use WinScp. and upload the file to /tmp

1st Login as root via WinScp on 192.168.1.1, then browse to /tmp and upload the openwrt-21.XX.XX-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin file
2nd Login as root via SSH on 192.168.1.1, then enter the following commands:

cd /tmp
sysupgrade openwrt-22.03.3-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin

For debrick and / or factory image recovery use the AVM Recovery Tool.

The default network configuration as of 22.03.3

Interface Name	Description	Default configuration
br-lan	LAN & WiFi	192.168.1.1/24
eth0	Unknown port	Unknown port
eth1	LAN 1-4	LAN 1-4
wlan0	2.4GHz WiFi	Disabled
wlan1	5 GHz WiFi	Disabled
DSL	Unsupported	Unsupported

The default network configuration as of SNAPSHOTS

Interface Name	Description	Default configuration
br-lan	LAN & WiFi	192.168.1.1/24
lo	Loopback	127.0.0.1
eth1	LAN 1-4	LAN 1-4
phy0-ap0	2.4GHz WiFi	Disabled
phy1-ap0	5 GHz WiFi	Disabled
dsl0	DSL/VDSL	Disabled

This device has one Ethernet interface with 4 LAN ports. It does not have a fifth eth port for WAN like FB4040

eth0 is connected to the 4 LAN ports as well as the CPU. VLANs can be configured the standard OpenWrt way. The table below shows how they are displayed and numbered in LUCI.

Up to and including at least 22.03.5 - the Switch LAN port ordering is *reversed*. Meaning Physical LAN1 = Switch LAN4 ... Physical LAN4 = Switch LAN1.

Switch Ports

Port	Switch port
CPU (eth0)	0
LAN 1	1
LAN 2	2
LAN 3	3
LAN 4	4

A working VLAN setup is shown in the image below. This uses LAN 1 as a trunk port that receives tagged VLAN traffic from the network. LAN 2 and LAN 3 are members of VLAN 42 (used for the “Internal” network), LAN 4 is connected to VLAN 99 (used for a “Guest” network)

When configuring the VLANs it is very important to bind the LUCI network interfaces to the correct physical interfaces before applying the settings. Otherwise you will be locked out of the device and need to factory reset it.

For the above VLAN example, go to LUCI→Network→Interfaces and check the “Physical Settings” for each one. Following the example above “Internal” would be connected to eth0.42 and “Guest” to eth0.99. When everything works as expected, corresponding WIFI networks can be added as a bridge here later on.

Alternatively, so as not to break WIFI (from a factory config) by changing the Physical Settings of the default 'br-lan', you must follow this order:

Under LUCI→Network→Switch, set VLANs, save but don't apply
LUCI→Network→Interfaces→Devices, Configure br-lan, choose the appropriate Switch VLAN

It has been mentioned in the forums that with this SoC, VLAN IDs 1 and 2 are treated specially by the hardware driver (https://forum.openwrt.org/t/vlans-on-ipq40xx-alternative-config-for-fritzbox-4040/41832/6) so it is probably best to avoid VLAN ID 1 and 2 if possible. This may change with updated hardware drivers.

The following assumes that the Physical/Switch LAN port numbering is reversed (as is the case up to 22.03.5).

Some (UK, Zen) providers are upgrading from ADSL to Fibre. Connect the Fibre adaptor to Physical LAN4 (or LAN1 if not reversed), configure the Switch like so (assuming a factory config):

Under LUCI→Network→Switch, set VLANs, save but don't apply:

VLAN 10, CPU (eth0) tagged, LAN 1 untagged, LAN 2-4 off ← this is Physical LAN 4

VLAN 20, CPU (eth0) tagged, LAN 1 off, LAN 2-4 untagged ← these are Physical LAN 1-3

Note: VLANs can be any number, except 1 and 2 - 10 and 20 are just an example.

LUCI→Network→Interfaces→Devices, Configure br-lan, choose the appropriate Switch VLAN

LUCI→Network→Interfaces→Interfaces, Add new, name: WAN, Prootocol, PPPoE, Device: Switch VLAN: “eth0.10”

Apply config.

If for some reason your devices Switch ports are not in reverse order, it would be:

VLAN 10, CPU (eth0) tagged, LAN 1 untagged, LAN 2-4 off ← this is Physical LAN 1

VLAN 20, CPU (eth0) tagged, LAN 1 off, LAN 2-4 untagged ← these are Physical LAN 2-4

With LAN cable:

Disconnect power
connect your LAN cable to any of Physical LAN1-3 (assuming the ports are reversed as in 22.03.5)
Connect power while pressing the WIFI button
You should see the INFO LED flash orange and all LED blink off
Run wireshark to capture LAN traffic
wait about 5 seconds
When you see a UDP packet from 192.168.1.1, to 192.168.1.255 press the WIFI button multiple times (while the Power LED flashes green) until the INFO LED flashes RED rapidly
ssh root@192.168.1.1 ...

Without LAN cable

Disconnect power
Connect power while pressing the WIFI button
You should see the INFO LED flash orange and all LED blink off
wait about 5 seconds
press the WIFI button multiple times while the Power LED flashes green until the INFO LED flashes RED rapidly
ssh root@192.168.1.1 ...

→ hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.

Please fill in real values for this device, then remove the EXAMPLEs

The AVM FRITZ!Box 7530 has the following buttons:

BUTTON	Event
WLAN	wlan
DECT	???
WPS	???

General
Brand	AVM
Model	FRITZ!Box 7530
Versions
Device Type	WiFi Router
Availability	Available 2019
Comments - general	See also https://boxmatrix.info/wiki/FRITZ!Box_7530
OpenWrt Support
Supported Since Commit	https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=95b0c07a618fe5fd93a26931152ced483bba143b
Supported Since Release	19.07.0
Supported Current Release	23.05.0
Unsupported
Hardware
Bootloader	U-Boot
Target	ipq40xx
System-On-Chip
CPU MHz	716
Flash MB	128NAND
RAM MB	256
Network
Ethernet 100M ports	-
Ethernet 1Gbit ports
Switch	Qualcomm Atheros QCA8075
Modem	xDSL
VLAN	Yes
Comments - network ports

Wireless
WLAN 2.4GHz	b/g/n
WLAN 5.0GHz	a/n/ac
WLAN Hardware	Qualcomm IPQ4019
Detachable Antennas	-
Comments - WLAN
Interfaces
USB ports	1x 3.0
SATA ports	-
Serial	Yes
JTAG	¿
Comments - USB & SATA ports
Misc
LED count	6
Button count	3
Power supply	12 VDC, 1.5 A
Links
Forum Topic URL
WikiDevi URL	https://wikidevi.wi-cat.ru/AVM_FRITZ!Box_7530
OEM device homepage URL	https://avm.de/produkte/fritzbox/fritzbox-7530/
Firmware OEM Stock URL	https://avm.de/service/downloads/?product=fritzbox-7530
Firmware OpenWrt Install URL	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-initramfs-uImage.itb, https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/u-boot-fritz7530/uboot-fritz7530.bin
Firmware OpenWrt Upgrade URL	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin
Edit the underlying data	View/Edit data

General
Brand	AVM
Model	FRITZ!Box 7520
Versions
Device Type	WiFi Router
Availability	Available 2022
Comments - general	Identical to Fritzbox 7530. See also https://boxmatrix.info/wiki/FRITZ!Box_7520
OpenWrt Support
Supported Since Commit	https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=cb6f4be13703f0224fc462caaeac14e725c72986
Supported Since Release	22.03.0
Supported Current Release	23.05.0
Unsupported
Hardware
Bootloader	U-Boot
Target	ipq40xx
System-On-Chip
CPU MHz	716
Flash MB	128NAND
RAM MB	256
Network
Ethernet 100M ports	-
Ethernet 1Gbit ports
Switch	Qualcomm Atheros QCA8075
Modem	xDSL
VLAN	Yes
Comments - network ports

Wireless
WLAN 2.4GHz	b/g/n
WLAN 5.0GHz	a/n/ac
WLAN Hardware	Qualcomm IPQ4019
Detachable Antennas	-
Comments - WLAN	AC1300, 2.4GHz @ 867Mbps 2-stream 802.11ac device (433Mbps per stream)
Interfaces
USB ports	1x 3.0
SATA ports	-
Serial	Yes
JTAG	¿
Comments - USB & SATA ports
Misc
LED count	6
Button count	3
Power supply	12 VDC, 1.5 A
Links
Forum Topic URL
WikiDevi URL
OEM device homepage URL	http://¿
Firmware OEM Stock URL	https://avm.de/service/downloads/?product=fritzbox-7520
Firmware OpenWrt Install URL	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-initramfs-fit-uImage.itb, https://downloads.openwrt.org/snapshots/targets/ipq40xx/generic/u-boot-fritz7520/uboot-fritz7520.bin
Firmware OpenWrt Upgrade URL	https://downloads.openwrt.org/releases/23.05.0/targets/ipq40xx/generic/openwrt-23.05.0-ipq40xx-generic-avm_fritzbox-7530-squashfs-sysupgrade.bin
Edit the underlying data	View/Edit data

Measured with Peaktech P9035 (CS5460A-BSZ) at the wall power plug, the device consumes 5.5W with both WiFis active and one 1 Gigabit Ethernet link established without much traffic. Power consumption is no different between scaling governors ondemand (Idle with 200 MHz) or performance (Idle with 716 MHz).

Front:

Back:

Note: This will void your warranty!

Remove 4 Torx TR10 screws from the bottom of the case
Lift white cover up from the front (side of the case where the buttons are)

Main PCB:

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:
Insert photo of PCB with markings for serial port

Serial connection parameters for AVM FRITZ!Box 7530	115200, 8N1

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

COPY HERE THE BOOTLOG WITH THE ORIGINAL FIRMWARE

[ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 5.4.188 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16554-1d4dea6d4f)) #0 SMP Sat Apr 16 12:59:34 2022 [ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d [ 0.000000] CPU: div instructions available: patching division code [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache [ 0.000000] OF: fdt: Machine model: AVM FRITZ!Box 7530 [ 0.000000] Memory policy: Data cache writealloc [ 0.000000] On node 0 totalpages: 65024 [ 0.000000] Normal zone: 576 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 65024 pages, LIFO batch:15 [ 0.000000] percpu: Embedded 15 pages/cpu s30156 r8192 d23092 u61440 [ 0.000000] pcpu-alloc: s30156 r8192 d23092 u61440 alloc=15*4096 [ 0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64448 [ 0.000000] Kernel command line: [ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear) [ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear) [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 248620K/260096K available (5794K kernel code, 189K rwdata, 876K rodata, 1024K init, 241K bss, 11476K reserved, 0K cma-reserved, 0K highmem) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16 [ 0.000000] random: get_random_bytes called from 0xc0a00cfc with crng_init=0 [ 0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt). [ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns [ 0.000007] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns [ 0.000021] Switching to timer-based delay loop, resolution 20ns [ 0.000231] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000) [ 0.000249] pid_max: default: 32768 minimum: 301 [ 0.000452] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.000470] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.001447] CPU: Testing write buffer coherency: ok [ 0.002463] Setting up static identity map for 0x80300000 - 0x80300060 [ 0.002597] rcu: Hierarchical SRCU implementation. [ 0.003030] smp: Bringing up secondary CPUs ... [ 0.006103] smp: Brought up 1 node, 4 CPUs [ 0.006121] SMP: Total of 4 processors activated (384.00 BogoMIPS). [ 0.006130] CPU: All CPU(s) started in SVC mode. [ 0.010524] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5 [ 0.010676] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.010702] futex hash table entries: 1024 (order: 4, 65536 bytes, linear) [ 0.010902] pinctrl core: initialized pinctrl subsystem [ 0.011904] NET: Registered protocol family 16 [ 0.012176] DMA: preallocated 256 KiB pool for atomic coherent allocations [ 0.013389] cpuidle: using governor ladder [ 0.013434] cpuidle: using governor menu [ 0.018209] GPIO line 461 (enable USB3 power) hogged as output/high [ 0.033387] cryptd: max_cpu_qlen set to 1000 [ 0.036736] usbcore: registered new interface driver usbfs [ 0.036800] usbcore: registered new interface driver hub [ 0.036864] usbcore: registered new device driver usb [ 0.036913] pps_core: LinuxPPS API ver. 1 registered [ 0.036922] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.036948] PTP clock support registered [ 0.038485] clocksource: Switched to clocksource arch_sys_counter [ 0.039273] thermal_sys: Registered thermal governor 'step_wise' [ 0.039553] NET: Registered protocol family 2 [ 0.039710] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear) [ 0.040603] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) [ 0.040648] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear) [ 0.040686] TCP bind hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.040736] TCP: Hash tables configured (established 2048 bind 2048) [ 0.040853] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.040891] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.041104] NET: Registered protocol family 1 [ 0.041144] PCI: CLS 0 bytes, default 64 [ 0.042951] workingset: timestamp_bits=14 max_order=16 bucket_order=2 [ 0.048728] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.048742] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.100112] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248) [ 0.102186] qcom-pcie 40000000.pci: host bridge /soc/pci@40000000 ranges: [ 0.102233] qcom-pcie 40000000.pci: IO 0x40200000..0x402fffff -> 0x40200000 [ 0.102262] qcom-pcie 40000000.pci: MEM 0x40300000..0x40ffffff -> 0x40300000 [ 0.380060] qcom-pcie 40000000.pci: Link up [ 0.380219] qcom-pcie 40000000.pci: PCI host bridge to bus 0000:00 [ 0.380239] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.380257] pci_bus 0000:00: root bus resource [io 0x0000-0xfffff] (bus address [0x40200000-0x402fffff]) [ 0.380271] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff] [ 0.380311] pci 0000:00:00.0: [17cb:1001] type 01 class 0x060400 [ 0.380351] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff] [ 0.380422] pci 0000:00:00.0: PME# supported from D0 D3hot [ 0.381850] PCI: bus0: Fast back to back transfers disabled [ 0.382056] pci 0000:01:00.0: [8086:09a9] type 00 class 0x028000 [ 0.382183] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x007fffff] [ 0.382676] pci 0000:01:00.0: supports D1 D2 [ 0.382690] pci 0000:01:00.0: PME# supported from D0 D1 D3hot D3cold [ 0.384222] PCI: bus1: Fast back to back transfers disabled [ 0.384273] pci 0000:00:00.0: BAR 8: assigned [mem 0x40800000-0x40ffffff] [ 0.384291] pci 0000:00:00.0: BAR 0: assigned [mem 0x40300000-0x40300fff] [ 0.384312] pci 0000:01:00.0: BAR 0: assigned [mem 0x40800000-0x40ffffff] [ 0.384340] pci 0000:00:00.0: PCI bridge to [bus 01-ff] [ 0.384357] pci 0000:00:00.0: bridge window [mem 0x40800000-0x40ffffff] [ 0.387167] pcieport 0000:00:00.0: AER: enabled with IRQ 94 [ 0.388947] bam-dma-engine 8e04000.dma: num-channels unspecified in dt [ 0.388965] bam-dma-engine 8e04000.dma: num-ees unspecified in dt [ 0.390230] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000 [ 0.390318] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7 [ 0.390401] tcsr 1953000.ess_tcsr: setting ess interface select = 0 [ 0.390485] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222 [ 0.390796] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.392627] msm_serial 78af000.serial: msm_serial: detected port #0 [ 0.392670] msm_serial 78af000.serial: uartclk = 1843200 [ 0.392726] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 24, base_baud = 115200) is a MSM [ 0.392753] msm_serial: console setup on port #0 [ 1.023422] printk: console [ttyMSM0] enabled [ 1.028324] msm_serial: driver initialized [ 1.037245] loop: module loaded [ 1.038835] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xf1 [ 1.039359] nand: Macronix MX30LF1G18AC [ 1.045955] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 1.049644] 11 fixed-partitions partitions found on MTD device qcom_nand.0 [ 1.057155] Creating 11 MTD partitions on "qcom_nand.0": [ 1.064041] 0x000000000000-0x000000080000 : "SBL1" [ 1.070908] 0x000000080000-0x000000100000 : "MIBIB" [ 1.075419] 0x000000100000-0x000000180000 : "QSEE" [ 1.080278] 0x000000180000-0x0000001c0000 : "CDT" [ 1.084835] 0x0000001c0000-0x000000240000 : "QSEE_B" [ 1.089897] 0x000000240000-0x000000280000 : "urlader0" [ 1.094597] 0x000000280000-0x0000002c0000 : "urlader1" [ 1.099649] 0x0000002c0000-0x000000b00000 : "nand-tffs" [ 1.112098] 0x000000b00000-0x000000f00000 : "uboot0" [ 1.116696] 0x000000f00000-0x000001300000 : "uboot1" [ 1.117780] random: fast init done [ 1.124610] 0x000001300000-0x000008000000 : "ubi" [ 1.253005] ESS reset ok! [ 1.277136] ESS reset ok! [ 1.707152] i2c /dev entries driver [ 1.709149] sdhci: Secure Digital Host Controller Interface driver [ 1.709446] sdhci: Copyright(c) Pierre Ossman [ 1.715692] sdhci-pltfm: SDHCI platform and OF driver helper [ 1.723498] NET: Registered protocol family 10 [ 1.727069] Segment Routing with IPv6 [ 1.730228] NET: Registered protocol family 17 [ 1.733894] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.738193] 8021q: 802.1Q VLAN Support v1.8 [ 1.751347] Registering SWP/SWPB emulation handler [ 1.764796] UBI: auto-attach mtd10 [ 1.764834] ubi0: attaching mtd10 [ 2.528663] ubi0: scanning is finished [ 2.538869] ubi0: attached mtd10 (name "ubi", size 109 MiB) [ 2.538907] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 2.543255] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 2.550247] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 2.557057] ubi0: good PEBs: 868, bad PEBs: 4, corrupted PEBs: 0 [ 2.563871] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128 [ 2.570111] ubi0: max/mean erase counter: 5/3, WL threshold: 4096, image sequence number: 130102031 [ 2.577113] ubi0: available PEBs: 0, total reserved PEBs: 868, PEBs reserved for bad PEB handling: 16 [ 2.586128] ubi0: background thread "ubi_bgt0d" started, PID 104 [ 2.587232] block ubiblock0_1: created from ubi0:1(rootfs) [ 2.601524] ubiblock: device ubiblock0_1 (rootfs) set to be root filesystem [ 2.606799] hctosys: unable to open rtc device (rtc0) [ 2.618577] VFS: Mounted root (squashfs filesystem) readonly on device 254:0. [ 2.620168] Freeing unused kernel memory: 1024K [ 2.649359] Run /sbin/init as init process [ 2.989132] init: Console is alive [ 2.989362] init: - watchdog - [ 3.258493] crng init done [ 3.613590] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.733293] dwc3-qcom 8af8800.usb3: IRQ hs_phy_irq not found [ 3.733330] dwc3-qcom 8af8800.usb3: IRQ dp_hs_phy_irq not found [ 3.738020] dwc3-qcom 8af8800.usb3: IRQ dm_hs_phy_irq not found [ 3.743703] dwc3-qcom 8af8800.usb3: IRQ ss_phy_irq not found [ 3.751694] dwc3 8a00000.dwc3: Failed to get clk 'ref': -2 [ 3.881515] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 3.881677] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1 [ 3.886444] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000000002010010 [ 3.893594] xhci-hcd xhci-hcd.0.auto: irq 98, io mem 0x08a00000 [ 3.903742] hub 1-0:1.0: USB hub found [ 3.908840] hub 1-0:1.0: 1 port detected [ 3.912907] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller [ 3.916667] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2 [ 3.922001] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed [ 3.929636] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. [ 3.936663] hub 2-0:1.0: USB hub found [ 3.944466] hub 2-0:1.0: 1 port detected [ 3.956375] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.963907] init: - preinit - [ 5.470566] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 9.807651] UBIFS (ubi0:4): Mounting in unauthenticated mode [ 9.807881] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 205 [ 9.848476] UBIFS (ubi0:4): recovery needed [ 9.950890] UBIFS (ubi0:4): recovery completed [ 9.951083] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data" [ 9.954263] UBIFS (ubi0:4): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 9.962224] UBIFS (ubi0:4): FS size: 84566016 bytes (80 MiB, 666 LEBs), journal size 4190208 bytes (3 MiB, 33 LEBs) [ 9.972085] UBIFS (ubi0:4): reserved for root: 3994261 bytes (3900 KiB) [ 9.982309] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID 3B93DD94-2616-4B56-9B63-6EBAFDFDECB8, small LPT model [ 9.993225] mount_root: switching to ubifs overlay [ 10.011631] urandom-seed: Seeding with /etc/urandom.seed [ 10.120887] procd: - early - [ 10.121161] procd: - watchdog - [ 10.704471] procd: - watchdog - [ 10.714128] procd: - ubus - [ 10.787450] procd: - init - [ 11.386681] kmodloader: loading kernel modules from /etc/modules.d/* [ 11.433842] urngd: v1.0.2 started. [ 11.461933] Loading modules backported from Linux version v5.10.110-0-g3238bffaf992 [ 11.461969] Backport generated by backports.git v5.10.110-1-0-g1fbde860 [ 11.479632] xt_time: kernel timezone is -0000 [ 11.509150] PPP generic driver version 2.4.2 [ 11.510037] NET: Registered protocol family 24 [ 12.625193] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 12.625240] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 12.636693] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b [ 12.718018] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:20 crc32 e2dfaa91 [ 14.007157] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 14.007205] ath10k_ahb a000000.wifi: msdu-desc: 2500 skid: 32 [ 14.043029] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 14.044006] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752' [ 14.176206] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1 [ 14.336153] ath: EEPROM regdomain: 0x0 [ 14.336161] ath: EEPROM indicates default country code should be used [ 14.336165] ath: doing EEPROM country->regdmn map search [ 14.336174] ath: country maps to regdmn code: 0x3a [ 14.336179] ath: Country alpha2 being used: US [ 14.336183] ath: Regpair used: 0x3a [ 15.163525] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000 [ 15.163574] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0 [ 15.176331] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b [ 15.230830] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 e2dfaa91 [ 16.519467] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96 [ 16.519517] ath10k_ahb a800000.wifi: msdu-desc: 2500 skid: 32 [ 16.555173] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0' [ 16.556137] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752' [ 16.681370] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1 [ 16.828353] ath: EEPROM regdomain: 0x0 [ 16.828362] ath: EEPROM indicates default country code should be used [ 16.828365] ath: doing EEPROM country->regdmn map search [ 16.828373] ath: country maps to regdmn code: 0x3a [ 16.828379] ath: Country alpha2 being used: US [ 16.828383] ath: Regpair used: 0x3a [ 16.834799] kmodloader: done loading kernel modules from /etc/modules.d/* [ 21.947436] br-lan: port 1(eth0) entered blocking state [ 21.947471] br-lan: port 1(eth0) entered disabled state [ 21.951950] device eth0 entered promiscuous mode [ 22.968728] br-lan: port 1(eth0) entered blocking state [ 22.968809] br-lan: port 1(eth0) entered forwarding state [ 22.974144] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

Space for additional notes, links to forum threads or other resources.

...

How to add tags

ipq40xx, IPQ4019, 128NAND, 256RAM, xDSL, 4port, GigabitEthernet, 802.11abgnac, 1USB, USB3.0, ARMv7

ipq40xx ipq4019 128nand 256ram xdsl 4port gigabitethernet 802.11abgnac 1usb usb3.0 armv7

AVM FRITZ!Box 7520 / 7530

Supported Versions

Hardware Highlights

Installation

DSL modem

Flash Layout

OEM installation using the TFTP method

Upgrading OpenWrt

LuCI Web Upgrade Process

Terminal Upgrade Process

sysupgrade

WinScp

Debricking

Basic configuration

Network interfaces

VLAN Setup

Switch Ports

Fibre via Ethernet to Physical LAN1

Factory Reset of OpenWrt

Buttons

Hardware

Info

Power consumption

Photos

Opening the case

Serial

JTAG

Bootlogs

OEM bootlog

OpenWrt bootlog

Notes

Tags