Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
toh:netgear:wn2500rp_v1 [2019/12/25 13:49] – stock firmware telnet info and console output walteravtoh:netgear:wn2500rp_v1 [2021/08/01 10:58] – Typos pdecat
Line 1: Line 1:
 ====== Netgear WN2500RP v1 ====== ====== Netgear WN2500RP v1 ======
 +Universal Dual Band WiFi Range Extender 
  
-Hardware info see [[https://forum.archive.openwrt.org/viewtopic.php?id=50571|openwrt forum archive]]. Currently OpenWrt 18.06.5 has no wifi support for both 2,4 and 5ghz radios, but switch config is working (ports numbered incorrect, fix see[[https://github.com/openwrt/openwrt/pull/2641|pull request]] ). +{{section>meta:infobox:broadcom_wifi#infobox_for_dataentries&noheader&nofooter&noeditbutton}}
  
-Flashing the device to OpenWrt can be done via stock Netgear firmware webinterface "Maintenance > Firmware upgrade" tested using version "V1.0.0.30_1.0.58" with current [[https://downloads.openwrt.org/releases/18.06.5/targets/brcm47xx/mips74k/openwrt-18.06.5-brcm47xx-mips74k-netgear-wn2500rp-v1-squashfs.chk|18.06.5]] image. If you reseted the stock firmware and are greeted with a netgear setupwizard and cannot find the maintenance firmware tab goto "http://192.168.1.250/start.htm". After succesfull flash the power led will stay solid amber/orange wait a couple of minutes to login 192.168.1.1. Upgrading from OpenWrt 18.06.5 to OpenWrt 19.07-rc2 works as aspected via webinterface+Currently OpenWrt 19.07.2 has some wifi support for both 2,4GHz(channelscan) and 5GHz(AP mode) using the BCM43236
  
 +===== Supported Versions =====
 +---- datatable ----
 +cols    : Brand, Model, Versions, Supported Current Rel, OEM device homepage URL_url, OWrt Forum Topic URL_url, Device Techdata_pageid
 +headers : Brand, Model, Version, Current Release, OEM Info, Forum Topic, Technical Data
 +align   : c,c,c,c,c,c,c
 +filter  : Model=WN2500RP
 +filter  : Versions=v1
 +----
 +
 +
 +===== Hardware Highlights =====
 +---- datatable ----
 +cols    : Model, Versions, CPU, CPU MHz, Flash MB_mbflashs, RAM MB_mbram, WLAN Hardware, WLAN 2.4GHz, WLAN 5.0GHz, Ethernet 100M ports_, Ethernet Gbit ports_, Modem, USB ports_
 +header  : Model, Version,SoC,CPU MHz,Flash MB,RAM MB,WLAN Hardware,WLAN2.4,WLAN5.0,100M ports,Gbit ports,Modem,USB
 +align   : c,c,c,c,c,c,c,c,c,c,c,c,c
 +filter  : Model=WN2500RP
 +filter  : Versions=v1
 +----
 +
 +
 +===== Installation =====
 +---- datatable ----
 +cols    : Model, Versions, Supported Current Rel, Firmware OpenWrt Install URL_url, Firmware OpenWrt Upgrade URL_url, Firmware OEM Stock URL_url
 +headers : Model, Version, Current Release, Firmware OpenWrt Install, Firmware OpenWrt Upgrade, Firmware OEM Stock
 +align   : c,c,c
 +filter  : Model=WN2500RP
 +filter  : Versions=v1
 +----
 +
 +Flashing the device to OpenWrt can be done via stock Netgear firmware webinterface "Maintenance > Firmware upgrade" tested using version "V1.0.0.30_1.0.58" with current [[https://downloads.openwrt.org/releases/18.06.5/targets/brcm47xx/mips74k/openwrt-18.06.5-brcm47xx-mips74k-netgear-wn2500rp-v1-squashfs.chk|18.06.5]] image. If you reset the stock firmware and are greeted with a netgear setupwizard and cannot find the maintenance firmware tab goto "http://192.168.1.250/start.htm". After succesfull flash the power led will stay solid amber/orange wait a couple of minutes to login 192.168.1.1. Upgrading from OpenWrt 18.06.5 to OpenWrt 19.07-rc2 works as aspected via webinterface. 
 +
 +===== Return to Factory Firmware =====
 Reverting to stock Netgear firmware "V1.0.0.30_1.0.58" via OpenWrt 19.07-rc2 webinterface soft-bricks router into green flashing/blinking tftp recovery state! Set your PC to a static ip 192.168.1.22 and use a tftpclient in binary mode and type the following(asuming linux) enter after each line: Reverting to stock Netgear firmware "V1.0.0.30_1.0.58" via OpenWrt 19.07-rc2 webinterface soft-bricks router into green flashing/blinking tftp recovery state! Set your PC to a static ip 192.168.1.22 and use a tftpclient in binary mode and type the following(asuming linux) enter after each line:
  
 <code> <code>
-tfpt 192.168.1.1+tftp 192.168.1.1
 bin bin
 trace trace
 put stockfirmware.chk put stockfirmware.chk
 </code> </code>
-After a couple of minutes router power led is solid green and running stock Netgear firmware. +After a couple of minutes router power led is solid green and running stock restored Netgear firmware. 
-===== Hardware details ===== + 
-  * SoCBroadcom BCM5357 +===== Forum Activity ===== 
-  * CPUMIPS 74Kc V4.9 @ 266MHz +[[https://forum.archive.openwrt.org/viewtopic.php?id=50571|OpenWrt forum archive]]  
-  * RAM64MB + 
-  * FLASH8MB +===== LAN/WAN router ===== 
-  * SWITCH4port 100Mbit +This extender lacks a WAN port, but with OpenWrt webinterface "Network > Switch" one of the untagged LAN ports can be set to VLAN id 2 to make that port function as a WAN port. For instance change VLAN id 1, LAN 4 PORT from "untagged" to "off" (make sure its not your current used port to administer the device) and add/change VLAN id 2, LAN 4 PORT from "off" to "untagged". Than save and apply and you will have a working WAN if you connect Internet to new WAN port (LAN 4) and set WAN interface to "eth0.2"
-  * RADIO0BCM5358UB0 2,4GHz + 
-  * RADIO1: BCM43236 5GHz +===== BCM43236 802.11abgn Wireless Adapter ===== 
-  * BUTTONS1x Restore Factory Settings 1x WPS+ 
 +==== 5GHz AP-mode limited support ==== 
 +Using the 5GHz in AP modus has been succesfull for channels 36-48 at 20MHz N-MODE using WPA2PSK CCMP with ~30Mbit RX/TX. Notice that reboot makes the wifi adapter dissapear but a hard poweroff makes it appear again you can (check via lsusb) 
 +<code> 
 +opkg update 
 +opkg remove kmod-b43 
 +opkg install kmod-usb2 usbutils kmod-brcmfmac kmod-mac80211 
 +lsusb #wifi detected otherwise hard poweroff 
 +poweroff;exit 
 +</code> 
 + 
 +You need a poweroff/reboot otherwise the b43 won't be fully deleted and its ghost interface "phy0" blocks the correct initialization of the 5GHz AP modus.  
 +==== Further debugging ==== 
 +By looking at the telnet logs from the stock Netgear firmware USB was noticed and a "wl_high" module on the "usb-core" module. By installing the following packages on OpenWrt 19.07-rc2 made the following builtin usb wifi device show up! 
 + 
 +<code> 
 +opkg update 
 +opkg install kmod-usb-ehci 
 +opkg install usbutils 
 +lsusb  
 +unable to initialize libusb: -99 
 + 
 +opkg install kmod-usb2 
 +lsusb  
 +Bus 001 Device 002: ID 0a5c:bd17 Broadcom Corp. BCM43236 802.11abgn Wireless Adapter 
 +Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub 
 + 
 +opkg install kmod-brcmfmac 
 +dmesg #cut 
 + 433.199259] kmodloader: loading kernel modules from /etc/modules.d/* 
 +[  433.232886] usbcoreregistered new interface driver usbfs 
 + 433.238768] usbcore: registered new interface driver hub 
 +[  433.244408] usbcore: registered new device driver usb 
 +[  433.257746] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver 
 +[  433.268950] kmodloader: done loading kernel modules from /etc/modules.d/* 
 +[  433.398325] kmodloaderloading kernel modules from /etc/modules.d/* 
 + 433.408890] kmodloader: done loading kernel modules from /etc/modules.d/* 
 +[  578.218214] kmodloaderloading kernel modules from /etc/modules.d/* 
 + 578.243609] ehci-platform: EHCI generic platform driver 
 +[  578.249167] ehci-platform ehci-platform.0: EHCI Host Controller 
 +[  578.255244] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1 
 +[  578.263713] ehci-platform ehci-platform.0: irq 5, io mem 0x18004000 
 +[  578.296513] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00 
 +[  578.305877] hub 1-0:1.0: USB hub found 
 +[  578.311314] hub 1-0:1.0: 2 ports detected 
 +[  578.322366] kmodloader: done loading kernel modules from /etc/modules.d/* 
 +[  578.541726] kmodloaderloading kernel modules from /etc/modules.d/* 
 + 578.552560] kmodloader: done loading kernel modules from /etc/modules.d/* 
 +[  578.677365] usb 1-2new high-speed USB device number 2 using ehci-platform 
 + 815.937688] kmodloader: loading kernel modules from /etc/modules.d/* 
 +[  815.972032] brcmfmacbrcmf_fw_alloc_request: using brcm/brcmfmac43236b for chip BCM43236/
 +[  816.524399] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43236b for chip BCM43236/
 +[  816.533189] usb 1-2: Direct firmware load for brcm/brcmfmac43236b.clm_blob failed with error -2 
 +[  816.542139] usb 1-2: Falling back to user helper 
 +[  816.619343] firmware brcm!brcmfmac43236b.clm_blob: firmware_loading_store: map pages failed 
 +[  816.628198] brcmfmac: brcmf_c_process_clm_blob: no clm_blob available (err=-11)device may have limited channels available 
 + 816.661221] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM43236/3 wl0: Nov 30 2011 17:33:42 version 5.90.188.22 
 + 816.765986] usbcore: registered new interface driver brcmfmac 
 +[  816.790284] kmodloader: done loading kernel modules from /etc/modules.d/* 
 +[  817.506017] kmodloaderloading kernel modules from /etc/modules.d/
 +[  817.533410] kmodloader: done loading kernel modules from /etc/modules.d/
 + 
 +ifconfig -a #cropped 
 +wlan0     Link encap:Ethernet  HWaddr 00:90:4C:52:A8:E4   
 +          BROADCAST MULTICAST  MTU:1500  Metric:1 
 +          RX packets:0 errors:0 dropped:0 overruns:0 frame:0 
 +          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 
 +          collisions:0 txqueuelen:1000  
 +          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B) 
 +           
 +cat /etc/config/wireless 
 + 
 +config wifi-device 'radio0' 
 + option type 'mac80211' 
 + option channel '36' 
 + option hwmode '11a' 
 + option path 'bcma0:4/ehci-platform.0/usb1/1-2' 
 + option htmode 'HT20' 
 + 
 +config wifi-iface 'default_radio0' 
 + option device 'radio0' 
 + option network 'lan' 
 + option mode 'ap' 
 + option ssid 'OpenWrt' 
 + option encryption 'none' 
 +</code> 
 + 
 +From here the wlan0 interface shows up in the luci webinterface and can scan for wireless networks shows both 2,4 and 5 GHz frequencies in scan, still have to test other functions! Setting up a accesspoint from luci webinterface 2,4 or 5 GHz triggers some errors about wlan1 although the device is wlan0. 
 + 
 +<code> 
 +[ 1125.421112] ieee80211 phy1: brcmf_cfg80211_request_ap_if: setting ssid failed -50 
 +[ 1125.428829] ieee80211 phy1: brcmf_cfg80211_add_iface: add iface wlan1 type 3 failed: err=-50 
 +</code> 
 + 
 +After reboot the builtin the usb-device did not come up again(lsusb shows only hub) and is not directly related to b43 since the following dmesg output was also visible with original OpenWrt image. 
 + 
 +<code> 
 +dmesg 
 +[   14.158203] b43-phy0: Broadcom 5357 WLAN found (core revision 28) 
 +[   14.165421] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 9 
 +[   14.171636] b43-phy0 ERROR: FOUND UNSUPPORTED RADIO (Manuf 0x17F, ID 0x2057, Revision 5, Version 2) 
 +[   14.180969] b43: probe of bcma0:1 failed with error -122 
 +[   14.186651] Broadcom 43xx driver loaded [ Features: NL ] 
 +[   14.383877] usbcore: registered new interface driver brcmfmac 
 +</code> 
 + 
 +Poweroff the router for a couple of seconds and power it up again made the builtin usb wifi adapter available again more info: 
 +<code> 
 +opkg install wireless-tools 
 +ifconfig wlan0 up 
 + 
 +iwlist wlan0 chan 
 +wlan0     24 channels in total; available frequencies : 
 +          Channel 01 : 2.412 GHz 
 +          Channel 02 : 2.417 GHz 
 +          Channel 03 : 2.422 GHz 
 +          Channel 04 : 2.427 GHz 
 +          Channel 05 : 2.432 GHz 
 +          Channel 06 : 2.437 GHz 
 +          Channel 07 : 2.442 GHz 
 +          Channel 08 : 2.447 GHz 
 +          Channel 09 : 2.452 GHz 
 +          Channel 10 : 2.457 GHz 
 +          Channel 11 : 2.462 GHz 
 +          Channel 36 : 5.18 GHz 
 +          Channel 40 : 5.2 GHz 
 +          Channel 44 : 5.22 GHz 
 +          Channel 48 : 5.24 GHz 
 +          Channel 52 : 5.26 GHz 
 +          Channel 56 : 5.28 GHz 
 +          Channel 60 : 5.3 GHz 
 +          Channel 64 : 5.32 GHz 
 +          Channel 149 : 5.745 GHz 
 +          Channel 153 : 5.765 GHz 
 +          Channel 157 : 5.785 GHz 
 +          Channel 161 : 5.805 GHz 
 +          Channel 165 : 5.825 GHz 
 +</code> 
 + 
 +It might be a good idea to built a custom OpenWrt image without the b43 driver and see how the other brcm47xx interact with Broadcom 5357 WLAN maybe they got blocked. 
 + 
 +Removing the b43 package via the luci webinterface seems to remove more than "opkg remove kmod-b43" and makes "phy0" available for "wlan0". Therefor no more error when enabling AP since it was forced to use "phy1" and cannot find "wlan1"(see dmesg error), but now it uses "phy0" and "wlan0" and enabling a WPA2-PSK CCMP SSID on channels 36-48 at 20MHz has been succesfully tested with ~30Mbit RX/TX tested with iperf3! So the 5GHz wifi works, but using channels higher than 48 disables the interface (although channel 64 AP shows up in SSID scan...) it doesn't work. The 2,4GHz band also disables the device when selecting tested channels 11/6. The module "kmod-mac80211" is also needed otherwise AP won't enable and option to set "Legacy/N" mode will be missing. 
 + 
 +<code> 
 +iwinfo  
 +wlan0     ESSID: "OpenWrt" 
 +          Access Point: 00:90:4C:52:A8:E4 
 +          Mode: Master  Channel: 36 (5.180 GHz) 
 +          Tx-Power: 31 dBm  Link Quality: unknown/70 
 +          Signal: unknown  Noise: unknown 
 +          Bit Rate: 6.0 MBit/s 
 +          Encryption: WPA2 PSK (CCMP) 
 +          Type: nl80211  HW Mode(s): 802.11abgn 
 +          Hardware: unknown [Generic MAC80211] 
 +          TX power offset: unknown 
 +          Frequency offset: unknown 
 +          Supports VAPs: no  PHY name: phy0 
 +</code>
  
 ===== Telnet stock firmware ===== ===== Telnet stock firmware =====
-The stock firmware has a telnet deamon that gets enabled by sending a magic packet, see unlock netgear[[https://openwrt.org/toh/netgear/telnet.console|telnet console]] for more info. Example console output of multiple commands:+The stock firmware has a telnet deamon that gets enabled by sending a magic packet, see unlock netgear[[toh:netgear:telnet.console|telnet console]] for more info. Example console output of multiple commands:
  
 <code> <code>
-192.168.1.250/start.htm+./telnetenable 192.168.1.250 20E52A2B5180 Gearguy Geardog 
 + 
 +telnet 192.168.1.250
  
-telnetenable  
 # echo $0 # echo $0
 /bin/sh /bin/sh
Line 2038: Line 2229:
 size: 26349 bytes (39187 left) size: 26349 bytes (39187 left)
 </code> </code>
 +
 +===== Notes =====
 +Using the reset button while using OpenWrt or powering on the device, may clear the "Device Name" and it will be reported in the status tab as "Unknown Device" which may also affect switch0 configuration if set by device name. Restoring to stock Netgear fixes this! 
 +
 +
 +===== Tags =====
 +[[meta:tags|How to add tags]]
 +{{tag>BCM5357 8Flash 64RAM 4port FastEthernet 802.11abgn}}
  • Last modified: 2024/02/12 08:58
  • by 127.0.0.1