Ubiquiti Bullet AC

The Ubiquiti Bullet AC is a dual band 2.4/5GHz AC outdoor PoE CPE with 1 GbE ports.

Brand	Model	Version	Current Release	OEM Info	Forum Search	Technical Data
Ubiquiti	Bullet AC (B-DB-AC)	2WA	22.03.3	https://www.ui.com/airmax/bullet-ac/	Bullet AC	View/Edit data

Model	Version	SoC	CPU MHz	Flash MB	RAM MB	WLAN Hardware	WLAN2.4	WLAN5.0	100M ports	Gbit ports	Modem	USB
Bullet AC (B-DB-AC)	2WA	Atheros AR9342	535	16	64	Atheros AR9342, Qualcomm Atheros QCA988x	b/g/n	a/n/ac	-		-	-

Model	Version	Current Release	Firmware OpenWrt Install	Firmware OpenWrt Upgrade	Firmware OEM Stock
Bullet AC (B-DB-AC)	2WA	22.03.3	https://downloads.openwrt.org/releases/22.03.3/targets/ath79/generic/openwrt-22.03.3-ath79-generic-ubnt_bullet-ac-squashfs-factory.bin	https://downloads.openwrt.org/releases/22.03.3/targets/ath79/generic/openwrt-22.03.3-ath79-generic-ubnt_bullet-ac-squashfs-sysupgrade.bin	http://¿

Ensure firmware version v8.7.0 is installed. Up/downgrade to this exact version.

Patch fwupdate.real binary using:

hexdump -Cv /bin/ubntbox | sed 's/14 40 fe 27/00 00 00 00/g' | hexdump -R > /tmp/fwupdate.real

Make the patched fwupdate.real binary executable using:
```
chmod +x /tmp/fwupdate.real
```
Copy the squashfs factory image to /tmp on the device

Flash OpenWrt using:

/tmp/fwupdate.real -m <squashfs-factory image>

(copied from Ubiquiti NanoBeam AC and modified)

Connect serial console (115200 baud)
Connect ethernet to a network with a TFTP server, through a passive PoE injector.
Press a key to obtain a u-boot prompt
Set your TFTP server's ip address, with:
```
setenv serverip <tftp-server-address>
```
Set the Bullet AC's ip address, with:
```
setenv ipaddr <bullet-ac-address>
```

Set the boot file, with:

setenv bootfile <name-of-initramfs-binary-on-tftp-server>

Architecture	MIPS
Vendor	Ubiquiti
Bootloader	U-Boot
System-On-Chip	Atheros AR9342 - MIPS 74Kc V4.12
CPU/Speed	535 MHz
Flash-Chip	SPI NOR
Flash size	16
RAM	64 MiB
Wireless	Atheros AR9342 & Qualcomm/Atheros QCA988X
Ethernet	1x GbE
USB	None
Serial	Yes
JTAG	No

To open the case depress the latch on the back of the unit and slide out the PCB assembly.

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Serial connection parameters for Ubiquiti Bullet AC	115200, 8N1

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

Supported Versions