Sitecom WLR-8100
Supported Versions
Hardware Highlights
Installation
Hardware info
Architecture | MIPS32 (MIPS74Kc) |
---|---|
Target | ar7xxx/ar9xxx |
Vendor | Sitecom |
Bootloader | u-boot |
CPU Model | QCA9558 |
CPU Speed | 720MHz |
Flash size | 16MB |
RAM size | 128MB |
WAN | 1x RJ45 |
Ethernet | QCA8337 (4xGbe) |
Wireless | QCA9558 (Integrated 2.4GHz)+QCA9880(5GHz) |
Serial | yes (see picture below) |
Buttons | power switch, WPS button |
Power | external 12V 1A |
OpenSSL Benchmark:
OEM Flash Layout
# cat /proc/mtd dev: size erasesize name mtd0: 01000000 00010000 "ALL" mtd1: 00030000 00010000 "Bootloader" mtd2: 00010000 00010000 "Config" mtd3: 00f10000 00010000 "Kernel" mtd4: 00c40000 00010000 "apps" mtd5: 00040000 00010000 "manufacture" mtd6: 00010000 00010000 "backup" mtd7: 00050000 00010000 "storage" mtd8: 00010000 00010000 "caldata"
Factory Firmware Features
Factory firmware features a Hardware Accelerator that can be enabled/disabled in web-ui. Enhanced features won't work.
5GHz radio has selectable country regulatory settings. However there seems to be no DFS implemented (Sept. 2013) and therefore several 5GHz channels are disabled in Europe due to regulatory rules. see List of WLAN channels @ wikipedia
Factory Firmware is based on Linux Kernel 2.6.31.
TODO: Different FW versions available.
TODO: Factory FW in .dlf format
Bootloader U-Boot Information
help prints available commands.
The uboot environment variable op_mode seems to control some debug messages. Default is 0. 1 shows more messages in serial log.
Menu
1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default).
Working without entry 2 - Load system code to Flash via TFTP 4 - brings up u-boot console
TODO: Booting Firmware from NFS, BOOTP, TFTP could possible.
TODO: Uboot seems to contain some HTTP messages - Web Failsafe ?
Image Loading, Booting
Some useful commands - a list is available by “help” in u-boot console.
bdinfo - print Board Info structure bootp - boot image via network using BootP/TFTP protocol crc32 - checksum calculation iminfo - print header information for application image nfs - boot image via network using NFS protocol printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol tftpboot- boot image via network using TFTP protocol
USB 3.0 speeds
The factory fw has integrated Windows Networking (Samba) and a DLNA server to distribute content on attached USB devices. Embedded platforms often have problems saturating high speed links because of limited resources (CPU power, throughput, number of interrupts or packets/seconds )
Win7x64 with Samba and CrystalDiskMark read/write: 19.3 MB/s 21.26 MB/s Linux with Samba and dd read: 21,6 MB/s USB3 Stick: Lexar LJDS23-32G (100MB/s , 40MB/s read/write in Win7x64 Intel USB3 Controller)
Software
Serial port settings: 115200 8N1
The busybox password seems to be hardcoded. In my unit is: lin17 (To be confirmed if it's the same for every unit)
Serial port output during the boot:
U-Boot 0.0.9 (Feb 5 2013 - 14:17:09) Product Name: WLR-8100 ap136 - Scorpion 1.0 DRAM:128 MB Now running in RAM - U-Boot at: 87fc8000 Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18 Flash size 16MB, sector count = 256 In: serial Out: serial Err: serial reset_switch: reset_usb: Multi Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * : cfg1 0x80000000 cfg2 0x7114 eth0: 00:03:7f:09:0b:ad athrs17_reg_init: SUPPORT_QCA8337 athrs17_reg_init QCA8337 ID=1302 athrs17_reg_init: complete eth0 up eth0 Setting 0x18116290 to 0x60c0214f Please choose the operation: 1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default). 0 3: System Boot system code via Flash. athrs17_set_portvlan_isolated complete ## Booting image at 9f040000 ... Image Name: Linux Kernel Image Created: 2013-05-06 11:39:23 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2836384 Bytes = 2.7 MB Load Address: 80002000 Entry Point: 802ac9c0 Verifying Checksum at 0x9f040040 ...OK Uncompressing Kernel Image ... OK Starting kernel ... Booting QCA955x init started: BusyBox v1.13.3 (2013-05-06 19:30:41 CST) starting pid 800, tty '/dev/console': '/sbin/config_init' mknod: /dev/ttyS0: File exists mknod: /dev/ttyS1: File exists Config Init version: 1.0.0.9 date: 2013/05/06 Tue Jan 1 00:00:00 UTC 2013 ln: /lib/./libsysUtil.so: File exists ln: /lib/./modules: File exists starting pid 860, tty '/dev/ttyS0': '/sbin/config_term' ************************************************************************ * WLR-8100 * ************************************************************************ KernelApp/Ramdisk Ver:1.0.0.9 Date:2013/05/06 password:
another factory bootlog : bought in Germany 09/2013 (cyberport)
U-Boot 0.0.9 (Feb 18 2013 - 14:56:17) Product Name: WN-AC1600DGR ap136 - Scorpion 1.0 DRAM:128 MB Now running in RAM - U-Boot at: 87fc8000 Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18 Flash size 16MB, sector count = 256 In: serial Out: serial Err: serial reset_switch: reset_usb: Multi Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * : cfg1 0x80000000 cfg2 0x7114 eth0: 00:03:7f:09:0b:ad athrs17_reg_init: SUPPORT_QCA8337 athrs17_reg_init S17_GLOFW_CTRL1_REG624=7f7f7f7f athrs17_reg_init: MAC0 RGMII athrs17_reg_init S17_P0PAD_MODE_REG04=87680000 athrs17_reg_init: Not SGMII_FORCED_MODE athrs17_reg_init S17_PWS_REG10=40000000 athrs17_reg_init S17_P0STATUS_REG7c=7e athrs17_reg_init QCA8337 ID=1302 athrs17_reg_init: complete eth0 up eth0 Setting 0x18116290 to 0x60c0214f Please choose the operation: 1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default). 1 0 3: System Boot system code via Flash. athrs17_set_portvlan_isolated complete ## Booting image at 9f040000 ... Image Name: Linux Kernel Image Created: 2013-06-14 12:33:20 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2849143 Bytes = 2.7 MB Load Address: 80002000 Entry Point: 802ac840 Verifying Checksum at 0x9f040040 ...OK Uncompressing Kernel Image ... OK Starting kernel ... Booting QCA955x init started: BusyBox v1.13.3 (2013-06-14 05:25:02 PDT) starting pid 800, tty '/dev/console': '/sbin/config_init' mknod: /dev/ttyS0: File exists mknod: /dev/ttyS1: File exists Config Init version: 1.0.0.18 date: 2013/06/14 Tue Jan 1 00:00:00 UTC 2013 ln: /lib/./libsysUtil.so: File exists ln: /lib/./modules: File exists starting pid 860, tty '/dev/ttyS0': '/sbin/config_term' ************************************************************************ * WLR-8100 * ************************************************************************ KernelApp/Ramdisk Ver:1.0.0.18 Date:2013/06/14 password: !!! wrong password !!! password: !!! wrong password !!! password: sh: /sbin/cli: not found </code> Notice different Product Name: WN-AC1600DGR . Similar to a Japan only router from IO-Data but that one has different specs (no USB3).
Serial Log op_mode=1
After changing to op_mode=1 the serial log shows additional messages
U-Boot 0.0.9 (Feb 18 2013 - 14:56:17) Product Name: WN-AC1600DGR ap136 - Scorpion 1.0 DRAM:128 MB Now running in RAM - U-Boot at: 87fc8000 Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18 Flash size 16MB, sector count = 256 In: serial Out: serial Err: serial reset_switch: reset_usb: Multi Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * : cfg1 0x80000000 cfg2 0x7114 eth0: 00:03:7f:09:0b:ad athrs17_reg_init: SUPPORT_QCA8337 athrs17_reg_init S17_GLOFW_CTRL1_REG624=7f7f7f7f athrs17_reg_init: MAC0 RGMII athrs17_reg_init S17_P0PAD_MODE_REG04=87680000 athrs17_reg_init: Not SGMII_FORCED_MODE athrs17_reg_init S17_PWS_REG10=40000000 athrs17_reg_init S17_P0STATUS_REG7c=7e athrs17_reg_init QCA8337 ID=1302 athrs17_reg_init: complete eth0 up eth0 Setting 0x18116290 to 0x60c0214f Please choose the operation: 1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default). 1 0 3: System Boot system code via Flash. athrs17_set_portvlan_isolated complete ## Booting image at 9f040000 ... Image Name: Linux Kernel Image Created: 2013-06-14 12:33:20 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 2849143 Bytes = 2.7 MB Load Address: 80002000 Entry Point: 802ac840 Verifying Checksum at 0x9f040040 ...OK Uncompressing Kernel Image ... OK Starting kernel ... Booting QCA955x init started: BusyBox v1.13.3 (2013-06-14 05:25:02 PDT) starting pid 800, tty '/dev/console': '/sbin/config_init' mknod: /dev/ttyS0: File exists mknod: /dev/ttyS1: File exists Config Init version: 1.0.0.18 date: 2013/06/14 Tue Jan 1 00:00:00 UTC 2013 ln: /lib/./libsysUtil.so: File exists ln: /lib/./modules: File exists starting pid 859, tty '/dev/ttyS0': '/sbin/config_term' ************************************************************************ * WLR-8100 * ************************************************************************ KernelApp/Ramdisk Ver:1.0.0.18 Date:2013/06/14 Application Ver:1.0.0.18 Date:2013/06/14 password: cat: can't open '/apps/lib/modules/2.6.31/modulesApp.dep': No such file or directory ln: /sbin/apps_init: File exists ln: /sbin/factory_apps_init: File exists ln: /sbin/iwconfig: File exists ln: /sbin/iwpriv: File exists ln: /sbin/opmode.sh: File exists createShareMem keyid 7001 shmId 0 Use default system name. CTRL_INTERFACE:[/var/sysconfd_if] CTRL_INTERFACE_IF:[if0] System Monitoring ********************************************************************* Initializing system environment Setting up /tmp directory ... Setting up loopback device ... *************************************************** Radio_1 is in Access Point[0] Radio_2 is in Access Point[0] System is in AP Router[0] *************************************************** SEM_GETID got id -1 Mac: 0, rtcTime:1356998401 dmesg: klogctl: Function not implemented Open file err: /var/cpumhz! Starting system logging daemon ...OK Setting up Ethernet devices ... OK Configuring Bridge device ... OK Setting the host&domain name ...Finished. Configuring net ... OK Configuring LAN device ... OK ############################################# Initialize Radio setting ... OK Configuring radio1 setting ... Configuring Atheros device index:0... wifiname=wifi0 , macaddr=64:D1:A3:0F:7B:95Encryption using WEP ... ... finished. Set Atheros power to 25 (dBm) Encryption using WPA2-PSK ... Encryption using AES ... Starting Hostapd ... OK athOpen OK OK ############################################# Initialize Radio setting ... OK Configuring radio2 setting ... Configuring Atheros device index:1... wifiname=wifi1 , macaddr=64:D1:A3:0F:7B:96Encryption using WEP ... ... finished. Set Atheros power to 25 (dBm) Encryption using WPA2-PSK ... Encryption using AES ... Starting Hostapd ... OK athOpen OK OK Wan Manager... Configuring WAN device[WAN0] ... Obtaining IP address from DHCP ... No PHY Link cp: cannot stat '/etc/resolv.conf': No such file or directory cat: can't open '/tmp/resolv.conf': No such file or directory Starting DNS Proxy ... OK Starting DHCP(udhcpd) server ... FAILED fwmCheck[73] SC FW manager, wan is not ready yet!!! Starting ntpclient ... Setup tc for QoS ... QoS Disable Disabled Configuring network routing and filtering ...QoS Disable wan is not ready yet!!! OK Starting DDNS ... Disabled Starting UPNPD ... WAN Speed = 10 Mbps upnpd: WAN is not ready,use LAN FAILED Starting HTTPD server ... OK Staring ALG... OK Starting LLTD ... OK Starting WOL manager server ... Disable Starting SC utmproxy ... wan is not ready yet!!! Starting hotplug2 ... OK ----->kcodesPRT_STOR_Check kcodesPRT_STOR_Check<----- ----->kcodesSMBCheck [KCODES]---> you are in server mode(Samba) now kcodesSMBCheck<----- ----->kcodesSMBOpen ----->createKCSMBconfig [KCODES]---> mount point:[(null)] Starting iptv setting OK DLNA, starting service ... No mount points Initialization has completed *We used 15.380000 seconds to initialize all modules* pSEM_GETID got id 65538 [RMGMT DBG] RMGMT_VERSION: 3.42.32 *** PROCESS MANAGER Starts *** Processmanager update modules Reload WAN: eth0.2 ... Close WAN: eth0.2 ... Stopping SC utmproxy ... OK OK Configuring WAN device[WAN0] ... Obtaining IP address from DHCP ... No PHY Link Phy(eth0.2) link disconnected ...Wait for link recover Processmanager update modules !!! wrong password !!! password:
uboot printenv
german 09/2013 unit with fw 1.0 (?)
ath> printenv Reg 0x00[1302] port0 RXBROAD=0 port0 TXBROAD=1f port0 TXUNDERRUN=0 port0 TX64BYTE=1 port0 TX128BYTE=3e phy 0 no link phy0 speed=0 port1 RXBROAD=0 port1 TXBROAD=0 port1 TXUNDERRUN=0 port1 TX64BYTE=0 port1 TX128BYTE=0 phyBase=0,phyAddr=1 phy1 speed=110 port2 RXBROAD=1f port2 TXBROAD=0 port2 TXUNDERRUN=0 port2 TX64BYTE=0 port2 TX128BYTE=0 phy 2 no link phy2 speed=0 port3 RXBROAD=0 port3 TXBROAD=0 port3 TXUNDERRUN=0 port3 TX64BYTE=0 port3 TX128BYTE=0 phy 3 no link phy3 speed=0 port4 RXBROAD=0 port4 TXBROAD=0 port4 TXUNDERRUN=0 port4 TX64BYTE=0 port4 TX128BYTE=0 phy 4 no link phy4 speed=0 port5 RXBROAD=0 port5 TXBROAD=0 port5 TXUNDERRUN=0 port5 TX64BYTE=0 port5 TX128BYTE=0 port6 RXBROAD=0 port6 TXBROAD=0 port6 TXUNDERRUN=0 port6 TX64BYTE=0 port6 TX128BYTE=0 bootargs=console=ttyS0,115200 root=31:02 rootfstype=squashfs,jffs2 init=/sbin/init mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART) bootcmd=bootm 0x9f040000 bootdelay=2 baudrate=115200 ethaddr="64:D1:A3:0F:7B:95" ipaddr=192.168.99.9 serverip=192.168.99.8 sn=136253164 hw_ver=1.0.0 hw_id=02220056 pro_id=000 country=000 domain=1 wanaddr=64:D1:A3:0F:7B:97 wlanaddr=00:AA:BB:CC:DD:12 snextra=136253164*********** bootfile=uImageNBG6716 dir= lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize lf=tftp 0x80060000 ${dir}ap136${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize ethact=eth0 uboot_ver=0.0.9.1 op_mode=0 stdin=serial stdout=serial stderr=serial Environment size: 890/65532 bytes ath>
Installing OpenWrt
Currently installing OpenWrt requires you to access the bootloader using the serial port (3.3V level converter required). Set up your server to serve the firmware image (WLR-8100-OpenWrt-localtest.bin|https://app.box.com/s/f0prvebqsoveg1zkjq3n|) using tftp.
NOTE: Please modify the mac address in /etc/config/wireless to match your wifi interface. You can also modify it in the WebGUI(192.168.1.1)
Hit '2' after it shows “Please choose the operation:” 1: Load system code to SDRAM via TFTP.
3: Boot system code via Flash (default). ,
followed by 'y', IP for the device, IP for the server, tftp filename. The file will be transferred, flashed and booted automatically. Congratulations, you are now running OpenWrt! (Using '4' instead of '2' you can enter the uboot prompt)
Please choose the operation: 1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default). You choosed 2 0 2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N) Please Input new ones /or Ctrl-C to discard Input device IP (192.168.1.1) ==:192.168.1.1 Input server IP (192.168.1.100) ==:192.168.1.100 Input Linux Kernel filename (uImageWLR-8100) ==:test.bin dup 1 speed 1000 Using eth0 device TFTP from server 192.168.1.100; our IP address is 192.168.1.1 Filename 'test.bin'. Load address: 0x8060000 Loading: checksum bad Got ARP REQUEST, return our IP Got it ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ########################################## done Bytes transferred = 7864320 (780000 hex) NetBootFileXferSize= 00780000 Un-Protected 253 sectors Erase linux kernel block !! From 0x9F040000 To 0x9F7BFFFF Erasing flash... First 0x4 last 0x7b sector size 0x10000 123 Erased 120 sectors Copy linux image[7864320 byte] from[0x08060000] to Flash[0x9F040000].... Copy to Flash... write addr: 9f040000 done ## Booting image at 9f040000 ... Image Name: MIPS OpenWrt Linux-3.3.8 Created: 2013-08-28 12:20:12 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 925879 Bytes = 904.2 kB Load Address: 80060000 Entry Point: 80060000 Verifying Checksum at 0x9f040040 ...OK Uncompressing Kernel Image ... OK Starting kernel ... [ 0.000000] Linux version 3.3.8 (crazybee@softwarePC2) (gcc version 4.6.3 203 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00019750 (MIPS 74Kc) [ 0.000000] SoC: Qualcomm Atheros QCA9558 rev 0 [ 0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:240.000MHz, Ref:40.0z [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00008000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] Early memory PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00008000 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pa2 [ 0.000000] Kernel command line: board=AP136 console=ttyS0,115200 mtdparts=d [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32s [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 126568k/131072k available (2120k kernel code, 4504k rese) [ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, N1 [ 0.000000] NR_IRQS:51 [ 0.000000] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048) [ 0.060000] pid_max: default: 32768 minimum: 301 [ 0.060000] Mount-cache hash table entries: 512 [ 0.070000] NET: Registered protocol family 16 [ 0.070000] gpiochip_add: registered GPIOs 0 to 23 on device: ath79 [ 0.080000] MIPS: machine is Sitecom WLR-8100 [ 0.090000] registering PCI controller with io_map_base unset [ 0.090000] registering PCI controller with io_map_base unset [ 0.300000] bio: create slab <bio-0> at 0 [ 0.310000] PCI host bridge to bus 0000:00 [ 0.310000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff] [ 0.320000] pci_bus 0000:00: root bus resource [io 0x0000] [ 0.320000] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x10007fff 64b] [ 0.330000] PCI host bridge to bus 0000:01 [ 0.330000] pci_bus 0000:01: root bus resource [mem 0x12000000-0x13ffffff] [ 0.340000] pci_bus 0000:01: root bus resource [io 0x0001] [ 0.340000] pci 0000:01:00.0: invalid calibration data [ 0.350000] pci 0000:01:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64b] [ 0.350000] pci 0000:01:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pre] [ 0.360000] pci 0000:00:00.0: using irq 40 for pin 1 [ 0.360000] pci 0000:01:00.0: using irq 41 for pin 1 [ 0.370000] Switching to clocksource MIPS [ 0.370000] NET: Registered protocol family 2 [ 0.380000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.380000] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.390000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes) [ 0.390000] TCP: Hash tables configured (established 4096 bind 4096) [ 0.400000] TCP reno registered [ 0.400000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.410000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.410000] NET: Registered protocol family 1 [ 0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.430000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORIT. [ 0.440000] msgmni has been set to 247 [ 0.450000] io scheduler noop registered [ 0.450000] io scheduler deadline registered (default) [ 0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled [ 0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A [ 0.490000] console [ttyS0] enabled, bootconsole disabled [ 0.490000] console [ttyS0] enabled, bootconsole disabled [ 0.500000] m25p80 spi0.0: found mx25l12805d, expected m25p80 [ 0.510000] m25p80 spi0.0: mx25l12805d (16384 Kbytes) [ 0.510000] 7 cmdlinepart partitions found on MTD device spi0.0 [ 0.520000] Creating 7 MTD partitions on "spi0.0": [ 0.530000] 0x000000000000-0x000000030000 : "u-boot" [ 0.530000] 0x000000030000-0x000000040000 : "u-boot-env" [ 0.540000] 0x000000040000-0x0000001a0000 : "kernel" [ 0.540000] 0x0000001a0000-0x000000f60000 : "rootfs" [ 0.550000] mtd: partition "rootfs" set to be root filesystem [ 0.560000] split_squashfs: no squashfs found in "spi0.0" [ 0.560000] 0x000000f60000-0x000000f70000 : "mib0" [ 0.570000] 0x000000f70000-0x000000f80000 : "art" [ 0.570000] 0x000000040000-0x000000f60000 : "firmware" [ 0.720000] ag71xx_mdio: probed [ 0.720000] eth0: Atheros AG71xx at 0xb9000000, irq 4 [ 1.300000] eth0: Atheros AR8337 switch driver attached. [ 2.480000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0:00 [uid] [ 2.490000] TCP cubic registered [ 2.490000] NET: Registered protocol family 17 [ 2.500000] 8021q: 802.1Q VLAN Support v1.8 [ 5.630000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x6100 [ 5.640000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 5.650000] jffs2_build_filesystem(): erasing all blocks after the end marke. [ 59.210000] JFFS2 notice: (1) jffs2_build_xattr_subsystem: complete building. [ 59.230000] VFS: Mounted root (jffs2 filesystem) readonly on device 31:3. [ 59.230000] Freeing unused kernel memory: 208k freed
Upgrading OpenWrt
Sysupdate is not supported, if you try it, you'll get a warning. The firmware can be written directly to the flash. Be aware that this factory-resets all settings.
mtd write /tmp/openwrt-19.07.10-ar71xx-generic-wlr8100-squashfs-sysupgrade.bin firmware
Enabling 5GHz
Due to redesigns within the ath10k wireless driver - latest images do not work without modification of config files. Extracting caldata from art partition currently does not seem to work and is therefore not yet integrated in upstream firmware.
cat /etc/modules.d/55-ath10k ath10k_core skip_otp=y ath10k_pci skip_otp=y
enables the 2.5/5GHz AC radio.
Flash back to Factory firmware
root@OpenWrt:mtd erase mtd2 Unlocking mtd2 ... Erasing mtd2 ...
This erases the Kernel partition. Using the partition name (output of “cat /proc/mtd”) works if mtd does not accept the “mtd2” name.
Power cycle the device, then the device should enter the recovery mode and stops at:
U-Boot 0.0.9 (Feb 5 2013 - 14:17:09) Input Linux Kernel filename .......Start http[192.168.99.9]..............
Now set your computer to be in the same subnet(e.g: 192.168.99.8), open 192.168.99.9 in the browser and upload the factory dlf firmware. Then you are back to factory firmware.:)
Inside
Serial Port
J1
PINS ----> LAN ports / back side 4 3 2 1 <--- front side
Known Issue
- possible JTAG layout unclear
- USB3 on 21.02-rc1 is not working
xhci_hcd 0000:00:00.0: ERROR unknown event type 37 xhci_hcd 0000:00:00.0: xHCI host not responding to stop endpoint command. xhci_hcd 0000:00:00.0: xHCI host controller not responding, assume dead xhci_hcd 0000:00:00.0: HC died; cleaning up
older:
- The 5GHz support is now also supported but still under development, you can download and try: https://app.box.com/s/riptvzk2l1xjc8cks9fm 5G N works fine w. 21.02.0-rc1
- The USB3.0 Port is supported now, binary with USB 3.0 support can be downlaoded from https://app.box.com/s/m26jngsa5bhyfrr3cggo (Chipset EtroTech EJ168A)
- Now you can upgrade to OpenWrt through the web interface of the intermediate firmware. The two step upgrade procedure and related firmwares can be downloaded from https://app.box.com/s/4ulgcov1l542ptm4xa1u
Relations to other Hardware
- OEM Producer is Senao Network Inc. , FW v1
0x06cb000 -SENAO NETWORK INC.-\n(FF....) 0x06e6000 -SENAO NETWORK INC.-\n(FF....) 0x070a000 -SENAO NETWORK INC.-\n(FF....)
- u-boot-env variables suggest a link to Zyxel NBG6716 http://www.zyxel.com/products_services/nbg6716.shtml?t=p
# found in u-boot and u-boot-env partition bootfile=uImageNBG6716
- nvram variables suggest link to IO Data WN-AC1600DGR (Japan only ?) http://www.iodata.jp/product/network/wnlan/wn-ac1600dgr/
#at another location in u-boot partition only bootfile=uImageWN-AC1600DGR