Ubiquiti NanoStation M2 / Loco M2

This device is NOT RECOMMENDED for future use with OpenWrt due to low flash/ram.
DO NOT BUY DEVICES WITH 4MB FLASH / 32MB RAM if you intend to flash an up-to-date and secure OpenWrt version onto it! See 4/32 warning for details.

1) This device does not have sufficient resources (flash and/or RAM) to provide secure and reliable operation.
This means that even setting a password or changing simple network settings might not be possible any more, rendering the device effectively useless. See OpenWrt on 4/32 devices what you can do now.

2) OpenWrt support for this device has ended in 2022.
19.07.10 was the last official build for 4/32 devices.

The pin layout can be found in this image: External Link

There is (as of 2023/05) a unresolved problem with builds for Ubnt units with ONE ethernet port. Flashing a OpenWRT ath79 version after 19.07.10 will brick the unit. The last working version is 19.07.10 AR71xx. As mentioned in Ubiquiti Airmax M install the latest working buld and check your CPU with:

cat /proc/cpuinfo

if its AR7240 or Ar7241 and then flash the corresponding Ubiquiti BULLET M image! This is a one eth port only unit and is tested to be working on locos XM and rocket M.

→ Install OpenWrt (generic explanation)

IMPORTANT READ CAREFULLY
before make a flashing of any time check you have a lower or equal version of AirOS 5.5 because 5.6 or high have changes on the u-boot and cause that you can't recover the stock firmware easily and any change that make on openwrt don't survive after reboot.

(It seems like this only applies to the XM-Version. The XW-Version seems to work fine when flashed from 5.6.) Please confirm: Confirmed, while XW 5.6.15 will not allow downgrade to 5.5.10, it does not matter because XW 5.6.15 upgrades to OpenWRT just fine without issue of forgetting settings. Tested to OpenWRT 19 and then to 21

A working AirOS 5.5 image is available here:
mirror1: https://uz.sns.it/~ilario/XM.v5.5.11.28002.150723.1344.bin
mirror2: http://dl.ubnt.com/firmwares/XN-fw/v5.5.11/XM.v5.5.11.28002.150723.1344.bin
md5sum = 4f23cd9f04c4ee7dcb429b694bc3d40c

REMARK: If your device uses an AirOS 6.x.x signed version, you must first return to an unsigned version.

METHOD #1: Downgrade to unsigned version via AirOS web GUI only possible using v6.0.6-beta firmware. First upgrade/downgrade to v6.0.6-beta, then downgrade to unsigned v5.6.15. Just then it will be possible to downgrade to even lower AirOS version, e.g. v5.5.11.

v6.0.6-beta
https://www.ubnt.com/downloads/XN-fw-internal/v6.0.6/XM.v6.0.6-beta.30875.170526.0038.bin
https://www.ubnt.com/downloads/XN-fw-internal/v6.0.6/TI.v6.0.6-beta.30875.170526.0008.bin
https://www.ubnt.com/downloads/XN-fw-internal/v6.0.6/XW.v6.0.6-beta.30875.170526.0023.bin

v5.6.15 (unsigned)
https://dl.ui.com/firmwares/XN-fw/v5.6.15/XM.v5.6.15.30572.170328.1107.bin
https://dl.ui.com/firmwares/XW-fw/v5.6.15/XW.v5.6.15.30572.170328.1052.bin
https://dl.ui.com/firmwares/XN-fw/v5.6.15/TI.v5.6.15.30572.170328.1038.bin

METHOD #2: It is possible to use SSH and revert using ubnt's fwupdate command. More info at: https://technicalexperiments.wordpress.com/2017/08/10/downgrading-ubnt-nanostation-m2-loco-xm-ubnt-downgrade-code2-msgfirmware-check-failed

METHOD #3: Follow these instructions: https://forum.openwrt.org/t/install-openwrt-on-ubiquiti-nanostation-m2-xw-signed/36371

Downgrade airOS to 5.5 or lower via tftp or web and after proceed with the next steps
Once downgraded to 5.5, just go to update firmware and load openwrt-ar71xx-generic-ubnt-nano-m-squashfs-factory.bin image:

and flash the OpenWrt firmware

First you need to put Nanostation into TFTP server mode. Turn on Nanostation and keep reset button pressed for 20 seconds, until led light start flashing differently. When you see that odd and even wifi signal leds start turning on and off, you have put Nanostation in TFTP server mode.

Now you can send image from your PC to Nanostation. You need TFTP client that will send file to Nanostation which is running TFTP server. Server is running on 192.168.1.20 address by default.

If you are running Linux on your PC here is how you can send firmware image to Nanostation:

ifconfig eth0 192.168.1.254
cp  openwrt-ar71xx-generic-ubnt-nano-m-squashfs-factory.bin code.bin
echo -e "binary\nrexmt 1\ntimeout 60\ntrace\nput code.bin flash_update\n" | tftp 192.168.1.20

Requirements:

1 USB-TTL Cable
2 Ethernet Cables
1 POE Converter
1 Bricked Device
1 TFTP Server Application (Example: Solar Winds)
1 AirOS v5.5.10 Firmware File
Tera-term or another Serial Port program

The following is the Procedure to unbrick the device:

Open up the device and locate the serial jumper, labeled J1.
Connect the USB-TTL Cable to the jumper, which has the following pinout:
- 1 3.3V+ (Red: Do not connect)
- 2 S-in (GREEN)
- 3 S-out (White)
- 4 GND(Black)
Open up a terminal program, such as tera-term, and configure it to the following settings:
- Bits per second: 115200
- Data Bits : 8
- Stop Bits : 1
- Parity : None
- Flow control : None
Plug the POE adapter into the wall.
Plug the LAN side of the device into your PC.
Configure your PC IP settings to the following:
- IP Address: 192.168.1.123
- Netmask : 255.255.0.0
Connect the POE side of the POE adapter into the Bullet M2 (or any other AirMax device).
Continually press any key while the tera-term window is selected. Doing this will interrupt the boot sequence and allow you to enter terminals while the device is in the bootloader.
Once the boot has been stopped, enter the following into the terminal:
```
urescue -f -e
```
It is vital that the -f and -e are there. This allows the bootloader to be over written.
Now start the TFTP application on your PC.
Open a command prompt on your PC and use the cd command to navigate to the location of your AirOS v5.5.10 firmware file.

Type the following command in the command prompt:

tftp -i 192.168.1.20 put XM.v5.5.10.24241.141001.1649.bin

You should now see text being written in the terminal screen.
Keep watching the text until it says the device is resetting. When it does reset, continually press any key to interrupt the boot.
When the boot has been interrupted, type the following in the serial console, pressing enter after each line:
```
mtdparts default
 
saveenv
 
boot
```
The device will now boot. Wait about 2 minutes, and then access the webpage of AirOS by typing 192.168.1.20 in the web address bar.
Login to the page and navigate to the system tab. Upload the same firmware version, AirOS v5.5.10, that you used in the urescue command.
Once the device reboots you will have a non-bricked, perfectly functional, wireless device.

	Nanostation M2	Nanostation loco M2 (xm)
Instruction set	MIPS
Vendor	Qualcomm Atheros
bootloader	uboot
System-On-Chip	Atheros AR7240
CPU @Frq	AR7240 MIPS 24KC @400MHz
Flash size	8 MiB
Flash Chip	Winbond W25Q64CVFIG (NOR SPI)	MX25L6408EMI-12G
RAM size	32 MiB
RAM Chip	ESMT M13S2561616A (DDR400)	Winbond W9725G6KB-25 (DDR2-800)
Wireless	Atheros AR9283 802.11b/g/n	Atheros AR9287 802.11b/g/n
Wireless Output power	28 dBm	23 dBm
Antenna gain	11.2 dBi	8.5 dBi
Ethernet	2x 10/100Mbps	1x 10/100Mbps
USB	No
Power	passive POE (pairs 4,5+; 7,8 return) 12 to 24 VDC (POE injector included in the package)
PSU	24V DC 0.5A / GP-A240-050 POE-24-12W
Serial	Yes
JTAG	Yes

Nanostation M2:

Nanostation Loco M2 (XM):

It was rummored that from the beginning of 2014 Ubiquiti has released new model of Nanostaion M2 devices (rumor was that old boards use ar724x chip and that new ones are using ar934x chip). This became true (at least confirmed for Loco M2 in Oct.2016).

If this is also affecting the “big” Nanostation M2 needs to be verified. But it seems to be related to a hardware-change as of obsoleted components (SoC?). See Ubiquiti-forum: https://community.ubnt.com/t5/airMAX-General-Discussion/Differencens-between-XM-XW-and-TI-firmwares/m-p/776166#M40308

There is also some info avail about how to choose the correct image-type: airmaxm

Observed for a NanoStationlocoM2 (model SWX-M2L, XM firmware). Recent OpenWrt compilations, on basis of kernel v5 , enumerate the ethernet interfaces differently. In /etc/config/network the iface name of the LAN port is eth1, not eth0 ! When using the standard network setting the LAN port will appear active from a serial console but it relates to the passthrough port that is not present as a connector. So make sure that eth1 is used in the configuration files to reference the LAN connector.

Nanostation Loco M2/M5 Loco:

Nanostation Loco M2 (XM):

Serial connection settings: 11520 Baud 8N1

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

U-Boot 1.1.4.2-s594 (Dec 5 2012 - 15:23:07) Board: Ubiquiti Networks XM board (rev 1.2 e0a2) DRAM: 32 MB Flash: 8 MB PCIe WLAN Module found (#1). Net: eth0, eth1 Hit any key to stop autoboot: 0 ## Booting image at 9f050000 ... Image Name: MIPS Ubiquiti Linux-2.6.32.54 Created: 2013-05-28 14:56:15 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1047584 Bytes = 1023 kB Load Address: 80002000 Entry Point: 80002000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Starting kernel ... Booting... BusyBox v1.11.2 (2011-12-19 20:41:43 EET) built-in shell (ash) Enter 'help' for a list of built-in commands. XM.v5.3.5.# dmesg [4294667.296000] Linux version 2.6.15-5.2 (buildd@builder) (gcc version 4.1.2) #1 Mon Dec 19 20:46:46 EET 2011 [4294667.296000] CPU revision is: 00019374 [4294667.296000] Determined physical RAM map: [4294667.296000] memory: 02000000 @ 00000000 (usable) [4294667.296000] On node 0 totalpages: 8192 [4294667.296000] DMA zone: 8192 pages, LIFO batch:1 [4294667.296000] DMA32 zone: 0 pages, LIFO batch:0 [4294667.296000] Normal zone: 0 pages, LIFO batch:0 [4294667.296000] HighMem zone: 0 pages, LIFO batch:0 [4294667.296000] Built 1 zonelists [4294667.296000] Kernel command line: console=tty0 root=31:03 rootfstype=squashfs init=/init mtdparts=ar7240-nor0:256k(u-boot),64k(u-boot-env),1024k(kernel),6528k(rootfs),256k(cfg),64k(EEPROM) panic=3 quiet [4294667.296000] Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes. [4294667.296000] Primary data cache 32kB, 4-way, linesize 32 bytes. [4294667.296000] Synthesized TLB refill handler (20 instructions). [4294667.296000] Synthesized TLB load handler fastpath (32 instructions). [4294667.296000] Synthesized TLB store handler fastpath (32 instructions). [4294667.296000] Synthesized TLB modify handler fastpath (31 instructions). [4294667.296000] Cache parity protection disabled [4294667.296000] PID hash table entries: 256 (order: 8, 4096 bytes) [4294667.296000] Using 195.000 MHz high precision timer. [4294667.296000] Console: colour dummy device 80x25 [4294667.297000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [4294667.297000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [4294667.301000] Memory: 30124k/32768k available (1750k kernel code, 2628k reserved, 357k data, 100k init, 0k highmem) [4294667.301000] Calibrating delay loop... 259.07 BogoMIPS (lpj=129536) [4294667.317000] Mount-cache hash table entries: 512 [4294667.317000] Checking for 'wait' instruction... available. [4294667.319000] NET: Registered protocol family 16 [4294667.320000] PCI init:ar7240_pcibios_init [4294667.320000] ar7240_pcibios_init(295): PCI CMD write: 0x356 [4294667.321000] Generic PHY: Registered new driver [4294667.321000] usbcore: registered new driver usbfs [4294667.321000] usbcore: registered new driver hub [4294667.322000] Returning IRQ 48 [4294667.322000] TC classifier action (bugs to netdev@vger.kernel.org cc hadi@cyberus.ca) [4294667.324000] AR7240 GPIOC major 0 [4294667.326000] squashfs: version 3.4 (2008/08/26) Phillip Lougher [4294667.326000] squashfs: LZMA suppport for slax.org by jro [4294667.326000] Initializing Cryptographic API [4294667.326000] io scheduler noop registered [4294667.326000] io scheduler deadline registered [4294667.446000] Serial: 8250/16550 driver $Revision: #2 $ 1 ports, IRQ sharing disabled [4294667.447000] serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A [4294667.448000] tun: Universal TUN/TAP device driver, 1.6 [4294667.448000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> [4294667.448000] 6 cmdlinepart partitions found on MTD device ar7240-nor0 [4294667.448000] Creating 6 MTD partitions on "ar7240-nor0": [4294667.448000] 0x00000000-0x00040000 : "u-boot" [4294667.449000] 0x00040000-0x00050000 : "u-boot-env" [4294667.449000] 0x00050000-0x00150000 : "kernel" [4294667.450000] 0x00150000-0x007b0000 : "rootfs" [4294667.451000] 0x007b0000-0x007f0000 : "cfg" [4294667.451000] 0x007f0000-0x00800000 : "EEPROM" [4294667.452000] usbmon: debugfs is not available [4294667.482000] Port Status c000004 [4294667.482000] ar7240-ehci ar7240-ehci.0: ATH EHCI [4294667.482000] ar7240-ehci ar7240-ehci.0: new USB bus registered, assigned bus number 1 [4294667.482000] ar7240-ehci ar7240-ehci.0: irq 3, io mem 0x1b000000 [4294667.482000] hcc_params addr 0xbb000108 val 0x6 hcs_params addr 0xbb000104 val 0x10011 [4294667.483000] ar7240-ehci ar7240-ehci.0: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004 [4294667.483000] hub 1-0:1.0: USB hub found [4294667.483000] hub 1-0:1.0: 1 port detected [4294667.584000] 2005 April 22 USB 1.1 'Open' Host Controller (OHCI) Driver (ar7240_ohci)block sizes: ed 64 td 64 [4294667.584000] u32 classifier [4294667.584000] input device check on [4294667.584000] Actions configured [4294667.584000] Netfilter messages via NETLINK v0.30. [4294667.584000] NET: Registered protocol family 2 [4294667.593000] IP route cache hash table entries: 512 (order: -1, 2048 bytes) [4294667.593000] TCP established hash table entries: 2048 (order: 1, 8192 bytes) [4294667.593000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes) [4294667.593000] TCP: Hash tables configured (established 2048 bind 2048) [4294667.593000] TCP reno registered [4294667.594000] GRE over IPv4 tunneling driver [4294667.594000] TCP bic registered [4294667.594000] NET: Registered protocol family 1 [4294667.594000] NET: Registered protocol family 17 [4294667.636000] Bridge firewalling registered [4294667.636000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> [4294667.636000] All bugs added by David S. Miller <davem@redhat.com> [4294667.636000] ar7240wdt_init: Registering WDT success [4294667.640000] VFS: Mounted root (squashfs filesystem) readonly. [4294667.640000] Freeing unused kernel memory: 100k freed [4294667.644000] Warning: unable to open an initial console. [4294667.991000] Algorithmics/MIPS FPU Emulator v1.5 [4294670.038000] AG7240: Length per segment 1536 [4294670.038000] AG7240: Max segments per packet 1 [4294670.038000] AG7240: Max tx descriptor count 80 [4294670.038000] AG7240: Max rx descriptor count 252 [4294670.038000] AG7240: fifo cfg 3 01f00140 [4294670.038000] AG7240CHH: Mac address for unit 0 [4294670.038000] AG7240CHH: 00:27:22:c3:e3:03 [4294670.238000] AG7240CHH: Mac address for unit 1 [4294670.238000] AG7240CHH: 02:27:22:c3:e3:03 [4294670.603000] SCSI subsystem initialized [4294670.919000] CSLIP: code copyright 1989 Regents of the University of California [4294670.964000] PPP generic driver version 2.4.2 [4294671.051000] PPP MPPE Compression module registered [4294671.107000] NET: Registered protocol family 24 [4294671.389000] wlan: module license 'BSD' taints kernel. [4294671.400000] wlan: 0.8.4.2 (Atheros/multi-bss) [4294671.516000] ubnt_poll: Initializing polling module... [4294671.516000] ubnt_poll: Initializing packet classifier... [4294671.516000] ubnt_poll: OS timer frequency 1000 Hz [4294671.702000] ath_hal: 0.9.17.1 (AR5416, DEBUG, REGOPS_FUNC, 11D) [4294671.743000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved [4294671.844000] wlan: mac acl policy registered [4294671.951000] wlan_me: Version 0.1 [4294671.951000] Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved [4294672.058000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved [4294672.118000] ar7240-gpio 1.1 initialised [4294672.178000] usbcore: registered new driver cdc_acm [4294672.178000] drivers/usb/class/cdc-acm.c: v0.23:USB Abstract Control Model driver for USB modems and ISDN adapters [4294672.242000] usbcore: registered new driver usbserial [4294672.242000] drivers/usb/serial/usb-serial.c: USB Serial support registered for generic [4294672.243000] usbcore: registered new driver usbserial_generic [4294672.243000] drivers/usb/serial/usb-serial.c: USB Serial Driver core [4294672.362000] Initializing USB Mass Storage driver... [4294672.362000] usbcore: registered new driver usb-storage [4294672.362000] USB Mass Storage support registered. [4294672.417000] drivers/usb/serial/usb-serial.c: USB Serial support registered for airprime [4294672.417000] usbcore: registered new driver airprime [4294672.475000] drivers/usb/serial/usb-serial.c: USB Serial support registered for Option 3G data card [4294672.475000] usbcore: registered new driver option [4294672.475000] drivers/usb/serial/option.c: Option Card (PC-Card to) USB to Serial Driver: v0.4 [4294672.557000] fuse init (API version 7.8) [4294672.557000] fuse distribution version: 2.7.3 [4294672.614000] rssi-leds 1.1 loaded [4294672.722000] bridge: can't decode speed from eth0_real: 0 [4294672.722000] device eth0_real entered promiscuous mode [4294672.734000] bridge: can't decode speed from eth1_real: 0 [4294672.734000] device eth1_real entered promiscuous mode [4294673.316000] ath_pci: 0.9.4.5 (Atheros/multi-bss) [4294673.316000] PCI: Setting latency timer of device 0000:00:00.0 to 64 [4294673.322000] ar5416Attach: Mac Chip.Rev 0x80.2 PCI devid 0x2a [4294673.326000] ath_hal: Ubiquiti Merlin [4294673.326000] ath_hal: NF adjust values: 5G - 0/0/0/0/0/0, 2G: -110/0/0/-110/0/0 [4294673.333000] wifi0: Atheros 9280: mem=0x10000000, irq=48 hw_base=0xb0000000 [4294673.671000] ubnt_poll: Attaching hooks... [4294673.671000] ubnt_poll: ack_mode set to 0 [4294673.672000] ubnt_poll: Using antenna array type: None, ports=1, default=1 [4294673.702000] ubnt_poll: Setting timing params to min:1000 max:3000 offset:3000 tx_time: 3000 init: 5 [4294673.702000] ubnt_poll: Setting aggregation params to non-txop:0 tx-op:0 scheduling:0 [4294673.702000] ubnt_poll: Setting TXOP Window parameters to size:25 timeout-perc:5 [4294673.703000] ath_hookq_setup: POLL QUEUE no 4 [4294673.703000] ubnt_poll: Module started in AP mode [4294676.166000] Ebtables v2.0 registered [4294676.576000] ag7240_ring_alloc Allocated 1280 at 0x81585000 [4294676.576000] ag7240_ring_alloc Allocated 4032 at 0x81b55000 [4294676.578000] Virian MDC CFG Value ==> 4 [4294676.578000] ATHRS26: resetting s26 [4294676.678000] ATHRS26: s26 reset done [4294676.680000] Setting PHY... [4294679.810000] ag7240_ring_alloc Allocated 1280 at 0x815ea800 [4294679.811000] ag7240_ring_alloc Allocated 4032 at 0x815ec000 [4294679.812000] Virian MDC CFG Value ==> 4 [4294679.812000] Setting PHY... [4294679.877000] AG7240: enet unit:0 phy:4 is up...RGMii 100Mbps full duplex [4294679.877000] AG7240: done cfg2 0x7135 ifctl 0x10000 miictrl [4294679.877000] Virian MDC CFG Value ==> 4 [4294681.130000] ubnt_poll: Channel BW set to 40 MHz [4294681.130000] ubnt_poll: Setting timing params to min:1000 max:1000 offset:6000 tx_time: 1000 init: 9 [4294681.130000] ubnt_poll: Setting aggregation params to non-txop:0 tx-op:0 scheduling:0 [4294681.130000] ubnt_poll: Setting TXOP Window parameters to size:25 timeout-perc:5 [4294681.143000] bridge: can't decode speed from ath0: 300 [4294681.143000] device ath0 entered promiscuous mode [4294681.579000] br0: port 3(ath0) entering learning state [4294681.579000] br0: port 1(eth0) entering learning state [4294682.579000] br0: topology change detected, propagating [4294682.579000] br0: port 3(ath0) entering forwarding state [4294682.579000] br0: topology change detected, propagating [4294682.579000] br0: port 1(eth0) entering forwarding state [4294764.972000] AG7240: unit 0: phy 4 not up carrier 1 [4294764.973000] br0: port 1(eth0) entering disabled state [4294771.140000] AG7240: enet unit:0 phy:4 is up...RGMii 100Mbps full duplex [4294771.140000] AG7240: done cfg2 0x7135 ifctl 0x10000 miictrl [4294771.140000] Virian MDC CFG Value ==> 4 [4294771.141000] br0: port 1(eth0) entering learning state [4294772.141000] br0: topology change detected, propagating [4294772.141000] br0: port 1(eth0) entering forwarding state XM.v5.3.5.#

U-Boot 1.1.4.2-s594 (Dec 5 2012 - 15:23:07) Board: Ubiquiti Networks XM board (rev 1.2 e0a2) DRAM: 32 MB Flash: 8 MB PCIe WLAN Module found (#1). Net: eth0, eth1 Hit any key to stop autoboot: 0 ## Booting image at 9f050000 ... Image Name: MIPS OpenWrt Linux-3.10.36 Created: 2014-06-10 20:26:09 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1090897 Bytes = 1 MB Load Address: 80060000 Entry Point: 80060000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Starting kernel ... [ 0.000000] Linux version 3.10.36 (openwrt@gb-13) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r41098) ) #1 Tue Jun 10 20:20:53 UTC 2014 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00019374 (MIPS 24Kc) [ 0.000000] SoC: Atheros AR7241 rev 1 [ 0.000000] Clocks: CPU:390.000MHz, DDR:390.000MHz, AHB:195.000MHz, Ref:5.000MHz [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x01ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x01ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: board=UBNT-NM console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env)ro,7552k(firmware),256k(cfg)ro,64k(EEPROM)ro rootfstype=squashfs,jffs2 noinitrd [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 28588k/32768k available (2364k kernel code, 4180k reserved, 617k data, 280k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:51 [ 0.000000] Calibrating delay loop... 259.27 BogoMIPS (lpj=1296384) [ 0.070000] pid_max: default: 32768 minimum: 301 [ 0.070000] Mount-cache hash table entries: 512 [ 0.080000] NET: Registered protocol family 16 [ 0.090000] MIPS: machine is Ubiquiti Nanostation M [ 0.090000] registering PCI controller with io_map_base unset [ 0.500000] bio: create slab <bio-0> at 0 [ 0.510000] PCI host bridge to bus 0000:00 [ 0.510000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x13ffffff] [ 0.520000] pci_bus 0000:00: root bus resource [io 0x0000] [ 0.520000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.530000] pci 0000:00:00.0: fixup device configuration [ 0.530000] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x1000ffff 64bit] [ 0.540000] pci 0000:00:00.0: using irq 40 for pin 1 [ 0.540000] Switching to clocksource MIPS [ 0.550000] NET: Registered protocol family 2 [ 0.550000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.560000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.570000] TCP: Hash tables configured (established 512 bind 512) [ 0.570000] TCP: reno registered [ 0.580000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.580000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.590000] NET: Registered protocol family 1 [ 0.610000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.620000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.630000] msgmni has been set to 55 [ 0.630000] io scheduler noop registered [ 0.640000] io scheduler deadline registered (default) [ 0.640000] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.680000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A [ 0.680000] console [ttyS0] enabled, bootconsole disabled [ 0.680000] console [ttyS0] enabled, bootconsole disabled [ 0.700000] ath79-spi ath79-spi: master is unqueued, this is deprecated [ 0.710000] m25p80 spi0.0: found mx25l6405d, expected m25p80 [ 0.710000] m25p80 spi0.0: mx25l6405d (8192 Kbytes) [ 0.720000] 5 cmdlinepart partitions found on MTD device spi0.0 [ 0.720000] Creating 5 MTD partitions on "spi0.0": [ 0.730000] 0x000000000000-0x000000040000 : "u-boot" [ 0.730000] 0x000000040000-0x000000050000 : "u-boot-env" [ 0.740000] 0x000000050000-0x0000007b0000 : "firmware" [ 0.760000] 2 uimage-fw partitions found on MTD device firmware [ 0.760000] 0x000000050000-0x00000015a591 : "kernel" [ 0.770000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.780000] 0x00000015a591-0x0000007b0000 : "rootfs" [ 0.790000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.800000] mtd: device 4 (rootfs) set to be root filesystem [ 0.810000] 1 squashfs-split partitions found on MTD device rootfs [ 0.810000] 0x000000320000-0x0000007b0000 : "rootfs_data" [ 0.820000] 0x0000007b0000-0x0000007f0000 : "cfg" [ 0.830000] 0x0000007f0000-0x000000800000 : "EEPROM" [ 0.840000] libphy: ag71xx_mdio: probed [ 1.400000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd041, driver=Generic PHY] [ 1.410000] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII [ 1.960000] ag71xx-mdio.1: Found an AR7240/AR9330 built-in switch [ 3.000000] eth1: Atheros AG71xx at 0xba000000, irq 5, mode:GMII [ 3.010000] TCP: cubic registered [ 3.010000] NET: Registered protocol family 17 [ 3.010000] Bridge firewalling registered [ 3.020000] 8021q: 802.1Q VLAN Support v1.8 [ 3.030000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4. [ 3.040000] Freeing unused kernel memory: 280K (8034a000 - 80390000) procd: Console is alive procd: - watchdog - [ 5.930000] usbcore: registered new interface driver usbfs [ 5.930000] usbcore: registered new interface driver hub [ 5.940000] usbcore: registered new device driver usb [ 5.950000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 5.960000] ehci-platform: EHCI generic platform driver [ 5.960000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver procd: - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 8.580000] eth0: link up (100Mbps/Full duplex) jffs2 is not ready - marker found [ 9.700000] eth0: link down procd: - early - procd: - watchdog - procd: - ubus - procd: - init - Please press Enter to activate this console. [ 11.280000] NET: Registered protocol family 10 [ 11.300000] nf_conntrack version 0.5.0 (451 buckets, 1804 max) [ 11.320000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 11.330000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea [ 11.340000] Backport generated by backports.git backports-20140320-37-g5c33da0 [ 11.350000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 11.410000] xt_time: kernel timezone is -0000 [ 11.450000] cfg80211: Calling CRDA to update world regulatory domain [ 11.450000] cfg80211: World regulatory domain updated: [ 11.460000] cfg80211: DFS Master region: unset [ 11.460000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 11.470000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 11.480000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 11.490000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 11.500000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 11.500000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 11.510000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 11.590000] PPP generic driver version 2.4.2 [ 11.600000] NET: Registered protocol family 24 [ 11.650000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 11.690000] ieee80211 phy0: Atheros AR9287 Rev:2 mem=0xb0000000, irq=40 [ 11.700000] cfg80211: Calling CRDA for country: US [ 11.700000] cfg80211: Regulatory domain changed to country: US [ 11.710000] cfg80211: DFS Master region: FCC [ 11.710000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 11.720000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A) [ 11.730000] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A) [ 11.740000] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s) [ 11.750000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A) [ 11.760000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A) [ 19.640000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 19.670000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 19.670000] jffs2_build_filesystem(): erasing all blocks after the end marker... [ 23.590000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 23.590000] device eth0 entered promiscuous mode [ 23.620000] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 24.690000] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready [ 26.170000] eth0: link up (100Mbps/Full duplex) [ 26.170000] br-lan: port 1(eth0) entered forwarding state [ 26.180000] br-lan: port 1(eth0) entered forwarding state [ 26.180000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 26.220000] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 28.180000] br-lan: port 1(eth0) entered forwarding state done. [ 51.140000] jffs2: notice: (860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. procd: - init complete -

How to add tags

ath79, AR7240, AR9287, 8Flash, 32RAM, 1port, 2port, FastEthernet, 802.11bgn, 1NIC, 1WNIC, no switch, serial, MIPS, MIPS32, 24k, PoE, Outdoor, InternalAntenna

ath79 ar7240 ar9287 8Flash 32RAM 1port 2port fastethernet 802.11bgn 1nic 1wnic no switch serial mips mips32 24k PoE Outdoor internalantenna

Ubiquiti NanoStation M2 / Loco M2

Supported Versions

Hardware Highlights

Installation

Flashing via AirOS web gui

Flashing via TFTP method

Recover stock firmware flashed with airos 5.6 or higher

Hardware

Info

Photos

Old boards vs new boards (rumor)

LAN enumeration

Serial

JTAG

Bootlogs

OEM bootlog

OpenWrt bootlog

External Links

Tags