TP-Link CPE210/220 is a 2.4Ghz outdoor access point similar to Ubiquiti NanoStations. There is also a 5GHz Version of this AP, the TP-Link CPE510/520. The device has a built-in 9dBi 2×2 dual-polarized directional MIMO antenna with a beamwidth of 65° (H-Plane) and 35° (E-Plane).
Remove the cap at the lower back of the device. Underneath the sticker which labels “GND”, “LAN0”, “LAN1” and “RESET” in the lower left and lower right corner, there are two screws to remove. Afterwards, you can slide the whole board out of the case by applying some force. The v3 model has also glue applied in the area under the “Model”/“S/N” sticker. Stick in a knive between the both plastic case parts to losen it.
Front with one of the screws to remove (v1), Main PCB (v1), Antenna (v1), Side view (v1)
In LEDE 17.01 and recent OpenWrt versions, we can configure this permanently in /etc/config/system (activating at boot):
config gpio_switch 'poe_passthrough'
option name 'PoE Passthrough'
option gpio_pin '20'
option value '1'
Access Flash With Flashrom
The flash chip usually holds the operating system, mac address and calibration data.
To get the binary blob from the flash chip, use a SPI programmer (CH341A in this case, or use a RasPi).
Attach a clamp on the flash chip and connecting it to the SPI programmer:
toh/tp-link/cpe210.txt · Last modified: 2020/07/02 13:27 by huckley