TP-Link CPE210/CPE220

TP-Link CPE210/220 is a 2.4Ghz outdoor access point similar to Ubiquiti NanoStations. There is also a 5GHz Version of this AP, the TP-Link CPE510/520. The device has a built-in 9dBi 2×2 dual-polarized directional MIMO antenna with a beamwidth of 65° (H-Plane) and 35° (E-Plane).

Connect the TP-Link CPE210 with your computer via ethernet
Set the IP address of your computer to 192.168.0.10 with a subnetmask of 255.255.255.0
Open your browser, go to https://192.168.0.254 and accept the invalid certificate
Log in with user “admin” and password “admin”, change the password in the next step
Go to the “System” tab and upload the OpenWrt firmware in the “Firmware Update” section and select “Restore” in the dialog promted
Follow official OpenWrt setup instructions (e.g. IP address of the device is now 192.168.1.1)

Note: This will void your warranty!

Remove the cap at the lower back of the device. Underneath the sticker which labels “GND”, “LAN0”, “LAN1” and “RESET” in the lower left and lower right corner, there are two screws to remove. Afterwards, you can slide the whole board out of the case by applying some force. The v1 and v3 models have also glue applied in the area under the “Model”/“S/N” sticker. Stick in a knive between the both plastic case parts to losen it.

Front with one of the screws to remove (v1), Main PCB (v1), Antenna (v1), Side view (v1)

CPE210-v3 AC Mesh

The area to connect the LAN-cables and GND-screw, at the bottom of the device are protected by a cover. In case you lost this cover, there is a model available to reprint it yourself. A discussion about this cover can be found: https://forum.freifunk.net/t/tp-link-cpe-210-deckel-kappe-spritzschutz/20131

→ port.serial general information about the serial port, serial port cable, etc.

J1 is located near the LEDs on the board. Starting from left to right: 3.3V, GND, RX, TX (enlarge photo below)

TTL voltage, 115200 bps, 8N1.

We need to activate GPIO 20 (high) for PoE Passthrough.

echo 20 > /sys/class/gpio/export
echo out > /sys/class/gpio/gpio20/direction
echo 1 > /sys/class/gpio/gpio20/value

https://forum.freifunk.net/t/tp-link-cpe210-510/594/37

In LEDE 17.01 and recent OpenWrt versions, we can configure this permanently in /etc/config/system (activating at boot):

config gpio_switch 'poe_passthrough'
	option name 'PoE Passthrough'
	option gpio_pin '20'
	option value '1'

The flash chip usually holds the operating system, mac address and calibration data. To get the binary blob from the flash chip, use a SPI programmer (CH341A in this case, or use a RasPi). Attach a clamp on the flash chip and connecting it to the SPI programmer:

flashrom -c "GD25Q64(B)" -p ch341a_spi -r /tmp/data

(works for CPE210 v3)

→ generic.debrick How to use firmware recovery function of Pharos CPE http://forum.tp-link.com/showthread.php?81684-How-to-use-firmware-recovery-function-of-Pharos-CPE

If you are experimenting with CPE210 and you flash a wrong firmware and the device doesn't boot, you can restore the original firmware.

Set PC to fixed ip address 192.168.0.100
Download original firmware from TP-Link and rename it to recovery.bin
Start a tftp server (like tftpd32 or similar) and put recovery.bin in the working directory of server
Turn off your CPE210
Set the server interface of tftpd32 on 192.168.0.100
Push (and hold) the reset button while giving the power to the CPE210
Afther some seconds Tftpd32.exe interface will send the recovery for flashing
Wait and then go to 192.168.0.254 to visit the stock interface (if you used the stock firmware)

NOTE:

It's highly recommended to place a switch between the PC and the CPE210. I have never been able to run recovery succesfully without the switch
and I have never been able to recover from Win XP and Win 10, only with Win 7 been successful all the time, without switch
instead of standard tftpd32 you can your the tftpd server from Solarwinds (without using a switch on Win10 for ther CPE210 V3)

For the devices with TP-LINK SafeLoader (Build time: Jun 12 2015 - 09:49:53)

To build you own (kernel)vmlinuz just follow the instruction toolchain

Follow the previous HOW TO but download this vmlinuz file into your TFTP server
After you need to give your machine a static ip in 192.168.1.11 / 255.255.255.0 and change the lan port to power supply (probably is port 0 )
Login in to your router http://192.168.1.1 - Change your password.
Go to System → Backup/Flash firmware and upgrade with this image.
Your router will restart normally.

Boot the vmlinuz.
Open a ssh client and connect to the latest know address of the device.
Check if you have internet connection (ping 8.8.8.8) if you dont have you need to setup your network (search on OpenWrt how).

type:

cd /tmp
wget http://downloads.lede-project.org/releases/17.01.4/targets/ar71xx/generic/lede-17.01.4-ar71xx-generic-cpe210-220-squashfs-sysupgrade.bin 
sysupgrade -v /tmp/lede-17.01.4-ar71xx-generic-cpe210-220-squashfs-sysupgrade.bin

the router will reboot!!!
if it's still looking for the vmlinuz you need to add the -F parameter for sysupgrade!
```
sysupgrade -F /tmp/lede-17.01.4-ar71xx-generic-cpe210-220-squashfs-sysupgrade.bin
```

Still working to reinstall the Pharos-CPE firmware

It's possible to replace one directional antenna with an omni-directional antenna. See this thread (German) for more information.

(dead link freifunk, unable to find with google and images on imgur.com appear to be damaged)

The chip of U9 is removed and the crossing point between 6 and 7 conclusions of a chip of U11 is established. More info here (in russian).

TP-LINK SafeLoader (Build time: Jan 14 2015 - 11:01:05) CPU: 560MHz AHB: 225MHz DDR: 64MB Performing LED check.. PASS Press CTRL+B to enter SafeLoader: 1 open user-config failed. open user-config failed. Allocated memory for elf segment ok: addr: 0x80260000, size 0x4cde40 Loading .text @ 0x80261030 (4848 bytes) Loading .rodata.str1.4 @ 0x80262320 (212 bytes) Loading .data @ 0x80262400 (825899 bytes) Clearing .bss @ 0x8032be30 (4202512 bytes) Starting kernel Booting Atheros AR934x Linux version 2.6.31 (root@ubuntu) (gcc version 4.3.3 (GCC) ) #1 PREEMPT Wed Apr 1 15:23:59 HKT 2015 flash_size passed from bootloader = 0 CPU revision is: 0001974c (MIPS 74Kc) ath_sys_frequency: cpu srif ddr srif cpu 560 ddr 450 ahb 225 Determined physical RAM map: memory: 02000000 @ 00000000 (usable) User-defined physical RAM map: memory: 04000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 Kernel command line: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/init mtdparts=ath-nor0:128k(u-boot),64k(pation-table),64k(product-info),1536k(kernel),6144k(rootfs),192k(configM PID hash table entries: 256 (order: 8, 1024 bytes) Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00000000 Readback ErrCtl register=00000000 Memory: 62388k/65536k available (1836k kernel code, 3080k reserved, 476k data, 116k init, 0k highmem) Hierarchical RCU implementation. NR_IRQS:128 plat_time_init: plat time init done Calibrating delay loop... 279.55 BogoMIPS (lpj=559104) Mount-cache hash table entries: 512 NET: Registered protocol family 16 bio: create slab <bio-0> at 0 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) net_link: create socket ok. TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 ATH GPIOC major 0 squashfs: version 4.0 (2009/01/31) Phillip Lougher NTFS driver 2.1.29 [Flags: R/O]. msgmni has been set to 121 alg: No test for lzma (lzma-generic) alg: No test for stdrng (krng) io scheduler noop registered io scheduler anticipatory registered io scheduler deadline registered io scheduler cfq registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A console [ttyS0] enabled PPP generic driver version 2.4.2 NET: Registered protocol family 24 7 cmdlinepart partitions found on MTD device ath-nor0 Creating 7 MTD partitions on "ath-nor0": 0x000000000000-0x000000020000 : "u-boot" 0x000000020000-0x000000030000 : "pation-table" 0x000000030000-0x000000040000 : "product-info" 0x000000040000-0x0000001c0000 : "kernel" 0x0000001c0000-0x0000007c0000 : "rootfs" 0x0000007c0000-0x0000007f0000 : "config" 0x0000007f0000-0x000000800000 : "ART" TCP cubic registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> athwdt_init: Registering WDT success athwdt_timer_init: Starting WDT. ath_otp_init: Registering OTP success ath_clksw_init: Registering Clock Switch Interface success VFS: Mounted root (squashfs filesystem) readonly on device 31:4. Freeing unused kernel memory: 116k freed init started: BusyBox v1.01 (2015.04.01-07:24+0000) multi-call binary This Board use 2.6.31 xt_time: kernel timezone is -0000 nf_conntrack version 0.5.0 (1024 buckets, 30720 max) ip_tables: (C) 2000-2006 Netfilter Core Team insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory PPPoL2TP kernel driver, V1.0 PPTP driver version 0.8.3 WARN: TDB not supported! WARN: TDB not supported! (none) mips #1 PREEMPT Wed Apr 1 15:23:59 HKT 2015 (none) (none) login: httpMudCreate: MUD 0x657800 was created [info @ initModelParameters:205] init profile... ATHR_GMAC: Length per segment 1536 ATHR_GMAC: fifo cfg 3 01f00140 mac:0 Registering S27.... ATHR_GMAC: RX TASKLET - Pkts per Intr:100 ATHR_GMAC: Mac address for unit 0:bfff0000 ATHR_GMAC: ff:ff:ff:ff:ff:ff ATHR_GMAC: Max segments per packet : 1 ATHR_GMAC: Max tx descriptor count : 128 ATHR_GMAC: Max rx descriptor count : 128 ATHR_GMAC: Mac capability flags : 2580 mac:1 Registering S27.... ATHR_GMAC: RX TASKLET - Pkts per Intr:100 ATHR_GMAC: Mac address for unit 1:bfff0006 ATHR_GMAC: ff:ff:ff:ff:ff:ff ATHR_GMAC: Max segments per packet : 1 ATHR_GMAC: Max tx descriptor count : 128 ATHR_GMAC: Max rx descriptor count : 128 ATHR_GMAC: Mac capability flags : 2D80 device eth0 entered promiscuous mode device eth1 entered promiscuous mode athr_gmac_ring_alloc Allocated 2048 at 0x83a69000 athr_gmac_ring_alloc Allocated 2048 at 0x83a83800 WASP ----> S27 PHY MDIO Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... athr_gmac_ring_alloc Allocated 2048 at 0x83b2e000 athr_gmac_ring_alloc Allocated 2048 at 0x83ac6800 WASP ----> S27 PHY MDIO ATHRS27: resetting s27 ATHRS27: s27 reset done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... br_igmp_snooping: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint rmmod: br_dhcp_filter.ko: No such file or directory Will output 1024 bit rsa secret key to '/tmp/dropbear_rsa_host_key' Generating key, this may take a while... insmod: cannot insert `/lib/modules/2.6.31/kernel/nf_conntrack_proto_gre.ko': File exists (-1): File exists Public key portion is: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgnEXtVjonhDqEUOPpg/VNEnuRrT0EI/OT1CCv7kMVh3XYER7u6tJ0bAUaM2Ywg/DLQggEfnkMucVEoLQWu4scRod0vu2Tn6+2Z+KjP88HK9qAvIuTDfSsxK/KPLRnxwTrQFt6NBtJ8L0f4+sGES/UV6NLq0 Fingerprint: md5 b1:f2:c6:29:9d:18:00:d6:b7:e1:c8:85:23:80:a3:4e Will output 1024 bit dss secret key to '/tmp/dropbear_dss_host_key' Generating key, this may take a while... Public key portion is: ssh-dss AAAAB3NzaC1kc3MAAACBAP42d6AjBo6eeQNZT1UX1+mQZcDPUJIV2oHtryChJRu+Ptr5Z3Me5DD3oOmYyinSPsTIAhZctv1PO8zsv2vnCImLhhfU+B6xXoZDgdISLiAMN1NpTuKF2kpCfEhXEcB6JBGEalpo+dupSJ55S4Rr7Q6t+yvwsMgTj50 Fingerprint: md5 35:44:09:c8:77:f3:29:48:01:bd:7d:72:c4:bd:dc:4a httpServerCreate: try to add port 80

TP-LINK SafeLoader (Build time: Jan 14 2015 - 11:01:05) CPU: 560MHz AHB: 225MHz DDR: 64MB Performing LED check.. PASS Press CTRL+B to enter SafeLoader: 1 open user-config failed. open user-config failed. Allocated memory for elf segment ok: addr: 0x80060000, size 0x10daba Loading .text @ 0x80060000 (1104570 bytes) Starting kernel OpenWrt kernel loader for AR7XXX/AR9XXX Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org> Decompressing kernel... done! Starting kernel at 80060000... [ 0.000000] Linux version 3.18.20 (buildbot@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46450) ) #1 Fri Sep 4 21:55:57 CEST 2015 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001974c (MIPS 74Kc) [ 0.000000] SoC: Atheros AR9344 rev 2 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: board=CPE510 console=ttyS0,115200 mtdparts=spi0.0:128k(u-boot)ro,64k(pation-table)ro,64k(product-info)ro,1536k(kernel),6144k(rootfs),192k(config)ro,64k(Ad [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 61004K/65536K available (2621K kernel code, 129K rwdata, 344K rodata, 224K init, 194K bss, 4532K reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:51 [ 0.000000] Clocks: CPU:560.000MHz, DDR:450.000MHz, AHB:225.000MHz, Ref:40.000MHz [ 0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688) [ 0.070000] pid_max: default: 32768 minimum: 301 [ 0.070000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.080000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.090000] NET: Registered protocol family 16 [ 0.090000] MIPS: machine is TP-LINK CPE210/220/510/520 [ 0.320000] Switched to clocksource MIPS [ 0.330000] NET: Registered protocol family 2 [ 0.330000] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.330000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.340000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.350000] TCP: reno registered [ 0.350000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.360000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.360000] NET: Registered protocol family 1 [ 0.370000] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.400000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.400000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.410000] msgmni has been set to 119 [ 0.420000] io scheduler noop registered [ 0.420000] io scheduler deadline registered (default) [ 0.430000] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.460000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 2500000) is a 16550A [ 0.470000] console [ttyS0] enabled [ 0.470000] console [ttyS0] enabled [ 0.480000] bootconsole [early0] disabled [ 0.480000] bootconsole [early0] disabled [ 0.490000] m25p80 spi0.0: found s25fl064k, expected m25p80 [ 0.490000] m25p80 spi0.0: s25fl064k (8192 Kbytes) [ 0.500000] 8 cmdlinepart partitions found on MTD device spi0.0 [ 0.510000] Creating 8 MTD partitions on "spi0.0": [ 0.510000] 0x000000000000-0x000000020000 : "u-boot" [ 0.520000] 0x000000020000-0x000000030000 : "pation-table" [ 0.520000] 0x000000030000-0x000000040000 : "product-info" [ 0.530000] 0x000000040000-0x0000001c0000 : "kernel" [ 0.530000] 0x0000001c0000-0x0000007c0000 : "rootfs" [ 0.540000] mtd: device 4 (rootfs) set to be root filesystem [ 0.550000] 1 squashfs-split partitions found on MTD device rootfs [ 0.550000] 0x0000003e0000-0x0000007c0000 : "rootfs_data" [ 0.560000] 0x0000007c0000-0x0000007f0000 : "config" [ 0.560000] 0x0000007f0000-0x000000800000 : "ART" [ 0.570000] 0x000000040000-0x0000007c0000 : "firmware" [ 0.600000] libphy: ag71xx_mdio: probed [ 1.190000] ag71xx-mdio.1: Found an AR934X built-in switch [ 1.230000] eth0: Atheros AG71xx at 0xba000000, irq 5, mode:GMII [ 1.240000] TCP: cubic registered [ 1.240000] NET: Registered protocol family 17 [ 1.240000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 1.260000] Bridge firewalling registered [ 1.260000] 8021q: 802.1Q VLAN Support v1.8 [ 1.270000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. [ 1.280000] Freeing unused kernel memory: 224K (80368000 - 803a0000) [ 2.290000] init: Console is alive [ 2.300000] init: - watchdog - [ 4.380000] init: - preinit - [ 4.990000] random: procd urandom read with 7 bits of entropy available Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 6.570000] eth0: link up (1000Mbps/Full duplex) [ 8.290000] mount_root: jffs2 not ready yet, using temporary tmpfs overlay [ 8.330000] eth0: link down [ 8.340000] procd: - early - [ 8.340000] procd: - watchdog - [ 9.000000] procd: - ubus - [ 10.010000] procd: - init - Please press Enter to activate this console. [ 10.790000] NET: Registered protocol family 10 [ 10.800000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 10.810000] Loading modules backported from Linux version master-2015-03-09-0-g141f155 [ 10.820000] Backport generated by backports.git backports-20150129-0-gdd4a670 [ 10.830000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 10.850000] nf_conntrack version 0.5.0 (956 buckets, 3824 max) [ 10.880000] xt_time: kernel timezone is -0000 [ 10.910000] cfg80211: Calling CRDA to update world regulatory domain [ 10.940000] cfg80211: World regulatory domain updated: [ 10.950000] cfg80211: DFS Master region: unset [ 10.950000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 10.960000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 10.970000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 10.980000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 10.980000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 10.990000] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 11.000000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 11.010000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 11.020000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 11.050000] PPP generic driver version 2.4.2 [ 11.060000] NET: Registered protocol family 24 [ 11.150000] ieee80211 phy0: Atheros AR9340 Rev:2 mem=0xb8100000, irq=47 [ 11.200000] cfg80211: Calling CRDA for country: US [ 11.220000] cfg80211: Regulatory domain changed to country: US [ 11.220000] cfg80211: DFS Master region: FCC [ 11.230000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 11.240000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A) [ 11.240000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 1700 mBm), (N/A) [ 11.250000] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2300 mBm), (0 s) [ 11.260000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A) [ 11.270000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A) [ 19.920000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 19.950000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 19.950000] jffs2_build_filesystem(): erasing all blocks after the end marker... [ 22.650000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 22.690000] device eth0.1 entered promiscuous mode [ 22.690000] device eth0 entered promiscuous mode [ 22.730000] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 22.770000] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready [ 24.810000] eth0: link up (1000Mbps/Full duplex) [ 25.030000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 25.060000] br-lan: port 1(eth0.1) entered forwarding state [ 25.060000] br-lan: port 1(eth0.1) entered forwarding state [ 25.070000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready [ 25.070000] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 27.060000] br-lan: port 1(eth0.1) entered forwarding state [ 35.400000] done. [ 35.400000] jffs2: notice: (999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.

How to add tags

AR9344, FastEthernet, Outdoor, PoE, integrated, NonDetachableAntenna, 2Ant, serial, 802.11bgn, 2NIC, ath9k, 64RAM, 8Flash, MIPS, MIPS32, 74Kc

ar9344 fastethernet Outdoor PoE integrated nondetachableantenna 2ant serial 802.11bgn 2nic ath9k 64RAM 8Flash mips mips32 74kc

TP-Link CPE210/CPE220

Supported Versions

Hardware Highlights

Installation

Hardware

Info

Photos

Opening the case

Cover for cabling-section

Serial

PoE Passthrough

Access Flash With Flashrom

Debricking / Restore stock firmware (webrevert)

Debricking a router that is waiting for vmlinuz that had installed OpenWrt/LEDE

Debricking a router that is waiting for vmlinuz that had installed any other firmware

Hardware mods

Omni-directional antenna mod

Power 24v to 12v mod

Bootlogs

OEM bootlog

OpenWrt bootlog

Tags