Show pagesourceOld revisionsBacklinksBack to top × Table of Contents TP-Link Archer D7 AC1750 Supported Versions Hardware Highlights Installation Hardware - Router section Hardware info Serial header Access serial header (easy way) Case opening OEM Flash Layout Hardware - Modem section Hardware info Serial header OEM Flash Layout Installation Gain shell access Tags TP-Link Archer D7 AC1750 Under Construction! This page is currently under construction. You can edit the article to help completing it. Dual Band (concurrent), Gigabit Ethernet and ADSL Modem. Advertised as 1750 Mbps. It has simultaneous Triple-Stream (3×3) radios on both 2.4GHz and 5 GHz Bands. It supports 802.11n in 2.4GHz for 450Mbps throughput and IEEE 802.11ac (draft) for 1300Mbps throughput in 5GHz. This modem is practically divided in 2 sections: Router section: This part shares the same hardware with Archer C5 v1 and Archer C7 v2 Modem section: Based on BCM6318 (unsupported) DSL will not work at all on devices with BCM63xx DSL chipset (due to unavailability of FLOSS driver for Broadcom chips). Consider this when chosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported. See Broadcom DSL, Unsupported: DSL modem and Broadcom BCM63xx for details. Supported Versions BrandModelVersionCurrent ReleaseOEM InfoForum TopicTechnical DataTP-LinkArcher D7 / D7bv1snapshothttps://www.tp-link.com/en/home-networking/dsl-modem-router/archer-d7/View/Edit dataUnsupported FunctionsDSL modem Hardware Highlights ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M portsGbit portsModemUSBArcher D7 / D7bv1Qualcomm Atheros QCA955877516128Qualcomm Atheros QCA9558, Qualcomm Atheros QCA9880-BR4Ab/g/na/n/ac-4ADSL2+2x 2.0 Installation ModelVersionCurrent ReleaseFirmware OpenWrt snapshot InstallFirmware OpenWrt snapshot UpgradeFirmware OEM StockArcher D7 / D7bv1snapshothttp://downloads.openwrt.org/snapshots/targets/ath79/generic/openwrt-ath79-generic-tplink_archer-d7-v1-squashfs-sysupgrade.bin, http://downloads.openwrt.org/snapshots/targets/ath79/generic/openwrt-ath79-generic-tplink_archer-d7b-v1-squashfs-sysupgrade.binhttps://www.tp-link.com/en/support/download/archer-d7/ → Install OpenWrt (generic explanation) Please add the installation procedure here. Hardware - Router section Hardware info Architecture MIPS32 (MIPS74Kc) Target ar7xxx/ar9xxx Vendor TP-Link Bootloader uboot CPU Model QCA9558 CPU Speed 720MHz Flash chip Winbond 25Q128FVSG (128 Mibit) Flash size 16 MiB RAM chip 2x Winbond W9751G6KB-25 (512 Mibit each) RAM size 128 MiB WAN In the original firmware LAN4 can act as WAN Switch AR8327N-BL1A Ethernet QCA8337 (4xGbe) Wireless QCA9558 (Integrated 2.4GHz) + QCA9880-BR4A (5GHz) Serial yes (see picture below) Buttons power switch, WPS button, Wifi on/off Power external 12V 2,5A Serial header J1 • VCC • GND • RX ▣ TX Configure your favorite terminal with the following settings: 115200 baud, 8 bit, no parity, 1 stop bit, no flow control. To enter into the bootloader, press “t” when it says: “Hit any key to stop autoboot” Default user and password for console login inside the original OEM firmware is admin/1234 Access serial header (easy way) Since opening the case is relatively hard (because of the hard to remove silver clip and strong plastic clips), the easiest way to gain Serial access is by using some snips to cut out part of the case. Case opening To open the case you have to remove two screws underneath the information sticker and one screw below the silver front clip which should push forward, then you need to pry open the rest of the case which is clipped together (2×3 side clips; 2 front clips; 2 back clips). OEM Flash Layout ~ # cat /proc/mtd dev: size erasesize name mtd0: 00020000 00010000 "u-boot" mtd1: 00140000 00010000 "kernel" mtd2: 00e50000 00010000 "rootfs" mtd3: 00010000 00010000 "radioDECT" mtd4: 00010000 00010000 "config" mtd5: 00010000 00010000 "romfs" mtd6: 00010000 00010000 "rom" mtd7: 00010000 00010000 "radio" Hardware - Modem section Hardware info Architecture MIPS32 (MIPS74Kc) Target brcm63xx Bootloader CFE CPU Model BCM6318 CPU Speed 333MHz Flash chip Winbond 25Q16DVSIG (16 Mibit) Flash size 2 MiB RAM chip ESMT M12L128168A (128 Mibit) RAM size 16 MiB WAN RJ-11 Serial yes (see picture below) Serial header J41 • VCC • GND • RX ▣ TX Default user and password for console login inside the original OEM firmware is admin/admin OEM Flash Layout # cat /proc/mtd dev: size erasesize name mtd0: 0011d000 00000000 "BCM63XX RootFS" Installation Developers are currently working on OpenWrt for this router Here. The following tutorial allows only a complete shell access to the router. When the firmware will be ready for this router, this page will be updated with a proper guide. Gain shell access This hack is the same used for the w8970/w9980 https://forum.kitz.co.uk/index.php?topic=17108.105. Prerequisites You'll need python3 and pycrypto to run this script. You can install pycrypto by: apt install python3-crypto OR pip install pycrypto OR pip install pycryptodome Download this python script: https://github.com/sta-c0000/tpconf_bin_xml/blob/master/tpconf_bin_xml.py Guide Download the system configuration from the OEM interface (System Tools → Backup & Restore → Backup) Rename it in “config.bin” (if necessary) and copy it in the same folder of the tpconf_bin_xml.py script. Execute python3 tpconf_bin_xml.py -n conf.bin conf.xml Open the conf.xml file with a text editor and add the following line inside the “<DeviceInfo>” tag: <Description val="Modem Router`telnetd -p 1023 -l login`" /> Before <?xml version="1.0"?> <DslCpeConfig> <InternetGatewayDevice> <DeviceSummary val="InternetGatewayDevice:1.1[](Baseline:1, EthernetLAN:1)" /> <LANDeviceNumberOfEntries val=1 /> <DeviceInfo> <ManufacturerOUI val=XXXXXX /> <SerialNumber val=XXXXXXXXXXXXX /> <HardwareVersion val="Archer D7 v1 00000002" /> <SoftwareVersion val="1.6.0 0.9.1 v002d.0 Build 160216 Rel.57110n" /> <UpTime val=4 /> <X_TP_IsFD val=3 /> </DeviceInfo> ... After <?xml version="1.0"?> <DslCpeConfig> <InternetGatewayDevice> <DeviceSummary val="InternetGatewayDevice:1.1[](Baseline:1, EthernetLAN:1)" /> <LANDeviceNumberOfEntries val=1 /> <DeviceInfo> <ManufacturerOUI val=XXXXXX /> <SerialNumber val=XXXXXXXXXXXXX /> <HardwareVersion val="Archer D7 v1 00000002" /> <SoftwareVersion val="1.6.0 0.9.1 v002d.0 Build 160216 Rel.57110n" /> <UpTime val=4 /> <X_TP_IsFD val=3 /> <Description val="Modem Router`telnetd -p 1023 -l login`" /> </DeviceInfo> .... After editing the conf.xml file it must be coverted back the configuration file using the previous python script: python3 tpconf_bin_xml.py conf.xml conf_new.bin Restore the modem's configuration using this new conf_new.bin file. (System Tools → Backup & Restore → Restore) Now you are able to connect to the router using telnet on port 1023: telnet 192.168.1.1 1023 Tags How to add tags QCA9558, 16flash, 128ram, adsl This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.OKMore information about cookies qca9558 16flash 128ram adsl Last modified: 2020/03/21 17:34by tmomas