Xiaomi Mi WiFi Nano / Youth (R1CL)

Supported Versions

Hardware Highlights

Installation

Model Supported Current Rel OpenWrt Factory Install Firmware OpenWrt Upgrade Firmware Stock Firmware Developer Firmware
R1CL snapshot N/A (factory firmware is OpenWrt fork) openwrt-ramips-mt7628-miwifi-nano-squashfs-sysupgrade.bin Mirror Official

→ Install OpenWrt (generic explanation)

Installation via SSH

The snapshot version is NOT tested and it does not ship with a GUI. Your initial network configuration needs to be done via uci. Afterwards you can install LuCI for GUI. As of the time of this edit (2019-06-19), some users have reported Wi-Fi to be unstable. Do not attempt to perform firmware updates via Wi-Fi in order to avoid damage to your device.

  1. Download the Official Developer ROM.
  2. I recommend using google chrome for easy and complete page translation since original UI is in Chinese
  3. Visit http://192.168.31.1, login and manually upgrade to the Official Developer ROM. Ignore any warning regarding downgrading.
  4. Wait for 5-7 minutes. After the router is back on again, you need to set a root password to be able to log in. Login to the router and copy the “stok” bit from the address bar. Open up a shell and,
    curl -d "oldPwd=your_admin_pass&newPwd=desired_root_pass" \
"http://192.168.31.1/cgi-bin/luci/;stok=<stok from browser url>/api/xqsystem/set_name_password"
  5. note that “stok” is just a part of address bar of the official page after you set your passwords (compare with step 4. and notice what i changed)! e.g. 
     curl -d "oldPwd=12345678&newPwd=87654321" \
"http://192.168.31.1/cgi-bin/luci/;stok=4f183ef6cfb88a9e26efee47513ab78b/api/xqsystem/set_name_password"
  6. Now you should get a code 0 response if everything went okay. Let's login. 
    ssh root@192.168.31.1
  7. Download the image in the router's /tmp directory. 
    wget http://downloads.openwrt.org/snapshots/trunk/ramips/mt7628/openwrt-ramips-mt7628-miwifi-nano-squashfs-sysupgrade.bin
  8. Flash the image. 
    mtd -r write /tmp/openwrt-ramips-mt7628-miwifi-nano-squashfs-sysupgrade.bin firmware
  9. The router will take 5-7 minutes to flash itself and reboot.
  10. Hook up the router with your computer via ethernet. (Use any of the WHITE ports of the router, not the blue one)
  11. SSH into the router (IP 192.168.1.1) 
    ssh root@192.168.1.1
  12. Voila. Happy Hacking.

Hack

Initial findings

U-boot is enabled, and you can write a new U-boot if you want to. Console writing in original firmware is disabled.

You can flash a new uboot, use HiWiFi HC5661A board. Google “breed HiWiFi HC5661A mt7628 uboot”.

Generic MT7628 rom works, but WiFi doesn't. It detects 32MB RAM and 8MB ROM.

Designated Driver Xiaomi Nano works (WiFi included), but only sees 8MB flash (it does detect full 64MB RAM). Flashing can be done with the same exploit as Xiaomi MiWiFi Mini. If router doesn't work after flashing, there's recovery mode in bootloader: hold down reset button while powering on and keep it pressed until the LED starts blinking (~10 seconds), set your IP to 192.168.31.2, and access http://192.168.31.1/. You can only upload official Xiaomi rom, but you're free to retry flashing OpenWrt afterwards.

I have tried PandoraBox ROM and works out of the box, WiFi included.

UART console

From the J1:

1 ------ VCC

2 ------ RX

3 ------ GND

4 ------ TX

Instructions

  1. Download the generic image OR download the Pandora ROM. It is in testing, for now. I used PandoraBox-ralink-mt7628-xiaomi-r1cl-squashfs-sysupgrade-r1468-20151001.bin
  2. Download tftpd software, and run it. Place the ROM on the same directory.
  3. Use static IP on your Ethernet port: 192.168.1.2
  4. Connect your serial cable to the UART header and PuTTY
  5. Power up the router. Select 2 to flash a new rom.
  6. Select Device IP as: 192.168.1.1
  7. Select Server IP as: 192.168.1.2
  8. Write the name of the ROM. In my case: PandoraBox-ralink-mt7628-xiaomi-r1cl-squashfs-sysupgrade-r1468-20151001.bin
  9. Press ENTER. Wait until it reboots.
  10. Wait for 2 minutes and it will ping now. WiFi will be open. In Pandora's ROM, username is root/admin.

Bootlogs

OEM bootlog

This U-boot bootlog corresponds to the Xiaomi MiWifi Nano with original Firmware 2.0.30 :

[04060C0B][04060D06] DDR Calibration DQS reg = 00008A88 U-Boot 1.1.3 (Sep 25 2015 - 17:14:30) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83fa8000 RT2880_RSTSTAT_REG 0xc0030000 *************************** Board power on Occurred *************************** flash manufacture id: ef, device id 40 18 find flash: W25Q128BV *******env is cottupted,use default_environment!********* *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Sep 25 2015 Time:17:14:30 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 575 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 5: Load system2 code then write to Flash via TFTP. 7: Load system code via web. 9: Load Boot Loader code then write to Flash via TFTP. You choosed 3 0 3: System Boot system code via Flash. Try to boot OS1 Erasing SPI Flash... raspi_erase: offs:30000 len:10000 . Writing to SPI Flash... . done ## Booting image at bc050000 ... Image Name: MIPS OpenWrt Linux-3.10.14 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1418615 Bytes = 1.4 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK fac_flag 0xffffffff commandline uart_en=0 factory_mode=0 mem=64m No initrd ## Transferring control to Linux (at address 80000000) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC [ 0.000000] Linux version 3.10.14 (builder@xqtest-DailyBuild) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Tue Sep 8 17:18:55 CST 2015 [ 0.000000] [ 0.000000] The CPU feqenuce set to 575 MHz [ 0.000000] [ 0.000000] MIPS CPU sleep mode enabled. [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] Software DMA cache coherency [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] User-defined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: console=ttyS1,115200n8 root=/dev/mtdblock5 uart_en=0 factory_mode=0 mem=64m [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=0007d777 [ 0.000000] Readback ErrCtl register=0007d777 [ 0.000000] Memory: 60692k/65536k available (2894k kernel code, 4844k reserved, 886k data, 184k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:128 [ 0.000000] console [ttyS1] enabled [ 0.110000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.170000] pid_max: default: 32768 minimum: 301 [ 0.170000] Mount-cache hash table entries: 512 [ 0.180000] NET: Registered protocol family 16 [ 0.180000] RALINK_GPIOMODE = 54054404 [ 0.190000] RALINK_GPIOMODE = 54044404 [ 0.290000] ***** Xtal 40MHz ***** [ 0.290000] start PCIe register access [ 0.790000] RALINK_RSTCTRL = 2400000 [ 0.800000] RALINK_CLKCFG1 = fdbfffc0 [ 0.800000] [ 0.800000] *************** MT7628 PCIe RC mode ************* [ 1.300000] PCIE0 no card, disable it(RST&CLK) [ 1.330000] bio: create slab <bio-0> at 0 [ 1.340000] cfg80211: Calling CRDA to update world regulatory domain [ 1.340000] Switching to clocksource Ralink Systick timer [ 1.350000] NET: Registered protocol family 2 [ 1.350000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 1.360000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 1.370000] TCP: Hash tables configured (established 512 bind 512) [ 1.370000] TCP: reno registered [ 1.380000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 1.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 1.390000] NET: Registered protocol family 1 [ 1.390000] Load Kernel WDG Timer Module [ 1.410000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 1.420000] jffs2: version 2.2. (NAND) (SUMMARY) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 1.430000] msgmni has been set to 118 [ 1.440000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) [ 1.440000] io scheduler noop registered (default) [ 1.460000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 1.460000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A [ 1.470000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A [ 1.480000] led=44, on=4000, off=1, blinks,=1, reset=1, time=4000 [ 1.480000] Ralink gpio driver initialized [ 1.500000] brd: module loaded [ 1.510000] flash manufacture id: ef, device id 40 18 [ 1.510000] W25Q128BV(ef 40180000) (16384 Kbytes) [ 1.520000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 [ 1.530000] Creating 10 MTD partitions on "raspi": [ 1.530000] 0x000000000000-0x000001000000 : "ALL" [ 1.540000] 0x000000000000-0x000000030000 : "Bootloader" [ 1.540000] 0x000000030000-0x000000040000 : "Config" [ 1.550000] 0x000000040000-0x000000050000 : "Factory" [ 1.560000] 0x000000050000-0x000000bf0000 : "OS1" [ 1.560000] mtd: try split OS1 partition [ 1.570000] mtd: split_firmware [ 1.570000] mtd: firmware_partition->size 0xba0000 [ 1.580000] mtd: firmware_partition->offset 0x50000 [ 1.580000] mtd: uimage_len 1418679 [ 1.580000] mtd: uimage_len 1441792 [ 1.590000] mtd: rootfs_partition->size 0xa40000 [ 1.590000] mtd: rootfs_partition->offset 0x1b0000 [ 1.600000] mtd: partition "rootfs" created automatically, ofs=1B0000, len=A40000 [ 1.610000] 0x0000001b0000-0x000000bf0000 : "rootfs" [ 1.610000] 0x000000bf0000-0x000000e30000 : "OS2" [ 1.620000] 0x000000e30000-0x000000ef0000 : "data" [ 1.630000] 0x000000ef0000-0x000000ff0000 : "overlay" [ 1.630000] 0x000000ff0000-0x000001000000 : "crash" [ 1.640000] 0x000000050000-0x000000bf0000 : "firmware" [ 1.650000] PPP generic driver version 2.4.2 [ 1.650000] PPP MPPE Compression module registered [ 1.650000] NET: Registered protocol family 24 [ 1.660000] PPTP driver version 0.8.5 [ 1.660000] GMAC1_MAC_ADRH -- : 0x0000f0b4 [ 1.670000] GMAC1_MAC_ADRL -- : 0x292285e8 [ 1.670000] Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500! [ 1.680000] GMAC1_MAC_ADRH -- : 0x0000f0b4 [ 1.690000] GMAC1_MAC_ADRL -- : 0x292285e8 [ 1.690000] PROC INIT OK! [ 1.690000] Netfilter messages via NETLINK v0.30. [ 1.700000] nfnl_acct: registering with nfnetlink. [ 1.700000] nf_conntrack version 0.5.0 (948 buckets, 3792 max) [ 1.710000] ip_set: protocol 6 [ 1.710000] ipip: IPv4 over IPv4 tunneling driver [ 1.720000] gre: GRE over IPv4 demultiplexor driver [ 1.730000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 1.730000] Type=Restricted Cone [ 1.730000] TCP: cubic registered [ 1.740000] NET: Registered protocol family 10 [ 1.750000] NET: Registered protocol family 17 [ 1.750000] l2tp_core: L2TP core driver, V2.0 [ 1.750000] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 1.760000] l2tp_netlink: L2TP netlink interface [ 1.760000] 8021q: 802.1Q VLAN Support v1.8 [ 1.780000] registered taskstats version 1 [ 1.790000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 1.800000] Freeing unused kernel memory: 184K (803b2000 - 803e0000) config core 'version' # ROM ver option ROM '2.0.30' # channel option CHANNEL 'release' # hardware platform R1AC or R1N etc. option HARDWARE 'R1CL' # CFE ver option UBOOT '1.0.0' # Linux Kernel ver option LINUX '0.0.1' # RAMFS ver option RAMFS '0.0.1' # SQUASHFS ver option SQAFS '0.0.1' # ROOTFS ver option ROOTFS '0.0.1' #build time option BUILDTIME 'Tue, 08 Sep 2015 17:11:47 +0800' #build timestamp option BUILDTS '1441703507' #build git tag option GTAG 'commit 11dcb9cd396fa56e73cb6ae9bf77381a0aa975d3' [ 3.760000] Raeth v3.1 (Tasklet) [ 3.760000] [ 3.760000] phy_tx_ring = 0x03f33000, tx_ring = 0xa3f33000 [ 3.770000] [ 3.770000] phy_rx_ring0 = 0x03f22000, rx_ring0 = 0xa3f22000 [ 3.790000] config 7628 esw as LLLLW [ 3.870000] GMAC1_MAC_ADRH -- : 0x0000f0b4 [ 3.870000] GMAC1_MAC_ADRL -- : 0x292285e8 [ 3.870000] RT305x_ESW: Link Status Changed - preinit - Tue Sep 8 17:18:55 UTC 2015 Unlocking overlay ... Erasing overlay ... start nvram clear..... nvram clear...Done! nvram restore done. - regular preinit - mount: mounting /tmp/mnt on /extdisks failed: No such file or directory ffffffff overlay_head ffffffff [ 10.460000] jffs2: notice: (552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. 85190320 [ 11.000000] jffs2: notice: (573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. jffs2 not ready yet; using ramdisk Unlocking OS1 ... - init - [ 16.150000] ra2880stop()...Done [ 16.150000] Free TX/RX Ring Memory! init started: BusyBox v1.19.4 (2015-09-08 17:04:56 CST) Please press Enter to activate this console. rcS S boot: INFO: rc script run time limit to 65 seconds. [ 19.240000] Mirror/redirect action on [ 19.270000] u32 classifier [ 19.270000] input device check on [ 19.270000] Actions configured [ 19.360000] ip_gre: GRE over IPv4 tunneling driver [ 19.460000] xt_time: kernel timezone is -0000 [ 20.870000] [ 20.870000] [ 20.870000] === pAd = c05a5000, size = 1570408 === [ 20.870000] [ 20.880000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x [ 20.890000] <-- RTMPAllocAdapterBlock, Status=0 [ 20.890000] RtmpChipOpsHook(492): Not support for HIF_MT yet! [ 20.900000] mt7628_init()--> [ 20.900000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628)) [ 20.910000] e2.bin mt7628_init(1117)::(2), pChipCap->fw_len(63536) [ 20.910000] mt_bcn_buf_init(218): Not support for HIF_MT yet! [ 20.920000] <--mt7628_init() Wed Sep 9 01:19:13 CST 2015 netconfig[988]: #### Loopback configuration Wed Sep 9 01:19:13 CST 2015 netconfig[988]: config interface loopback Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ifname lo Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option proto static Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ipaddr 127.0.0.1 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option netmask 255.0.0.0 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: #### LAN configuration Wed Sep 9 01:19:13 CST 2015 netconfig[988]: config interface lan Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ifname eth0.1 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option type bridge Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option proto static Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ipaddr 192.168.31.1 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option netmask 255.255.255.0 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: #### WAN configuration Wed Sep 9 01:19:13 CST 2015 netconfig[988]: config interface wan Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ifname eth0.2 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option proto dhcp Wed Sep 9 01:19:13 CST 2015 netconfig[988]: ### IFB interface for MiQoS Wed Sep 9 01:19:13 CST 2015 netconfig[988]: config interface ifb Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ifname ifb0 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: #### READY configuration Wed Sep 9 01:19:13 CST 2015 netconfig[988]: config interface ready Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option proto static Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option ipaddr 169.254.29.1 Wed Sep 9 01:19:13 CST 2015 netconfig[988]: option netmask 255.255.255.0 [ 25.950000] Raeth v3.1 (Tasklet) [ 25.960000] [ 25.960000] phy_tx_ring = 0x0351d000, tx_ring = 0xa351d000 [ 25.970000] [ 25.970000] phy_rx_ring0 = 0x03424000, rx_ring0 = 0xa3424000 [ 25.990000] config 7628 esw as LLLLW [ 26.060000] GMAC1_MAC_ADRH -- : 0x0000f0b4 [ 26.070000] GMAC1_MAC_ADRL -- : 0x292285e8 [ 26.070000] RT305x_ESW: Link Status Changed [ 26.120000] device eth0.1 entered promiscuous mode [ 26.120000] device eth0 entered promiscuous mode [ 26.150000] br-lan: port 1(eth0.1) entered forwarding state [ 26.150000] br-lan: port 1(eth0.1) entered forwarding state [ 27.960000] TX_BCN DESC a289e000 size = 320 [ 27.970000] RX[0] DESC a28a2000 size = 2048 [ 27.970000] RX[1] DESC a28a3000 size = 1024 [ 28.020000] E2pAccessMode=2 [ 28.020000] cfg_mode=9 [ 28.030000] cfg_mode=9 [ 28.030000] wmode_band_equal(): Band Equal! [ 28.090000] load fw image from fw_header_image [ 28.090000] AndesMTLoadFwMethod1(2181)::pChipCap->fw_len(63536) [ 28.100000] CmdAddressLenReq:(ret = 0) [ 28.100000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.110000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.110000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.120000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.120000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.130000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.130000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.140000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.140000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.150000] br-lan: port 1(eth0.1) entered forwarding state [ 28.150000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.160000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.170000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.170000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.180000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.180000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.190000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 28.190000] CmdFwStartReq: override = 1, address = 1048576 [ 28.200000] CmdStartDLRsp: WiFI FW Download Success [ 28.250000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) [ 28.250000] efuse_probe: efuse = 10000012 [ 28.260000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4 [ 28.260000] RtmpEepromGetDefault::e2p_dafault=2 [ 28.270000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2 [ 28.270000] NVM is FLASH mode [ 28.280000] 1. Phy Mode = 14 [ 28.440000] Country Region from e2p = ffff [ 28.440000] tssi_1_target_pwr_g_band = 34 [ 28.450000] 2. Phy Mode = 14 [ 28.450000] 3. Phy Mode = 14 [ 28.450000] NICInitPwrPinCfg(11): Not support for HIF_MT yet! [ 28.460000] NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet! [ 28.470000] mt_mac_init()--> [ 28.470000] MtAsicInitMac()--> [ 28.490000] mt7628_init_mac_cr()--> [ 28.490000] MtAsicSetMacMaxLen(1279): Set the Max RxPktLen=1024! [ 28.500000] <--mt_mac_init() [ 28.500000] WTBL Segment 1 info: [ 28.500000] MemBaseAddr/FID:0x28000/0 [ 28.510000] EntrySize/Cnt:32/128 [ 28.510000] WTBL Segment 2 info: [ 28.510000] MemBaseAddr/FID:0x40000/0 [ 28.520000] EntrySize/Cnt:64/128 [ 28.520000] WTBL Segment 3 info: [ 28.530000] MemBaseAddr/FID:0x42000/64 [ 28.530000] EntrySize/Cnt:64/128 [ 28.530000] WTBL Segment 4 info: [ 28.540000] MemBaseAddr/FID:0x44000/128 [ 28.540000] EntrySize/Cnt:32/128 [ 28.540000] AntCfgInit(2903): Not support for HIF_MT yet! [ 28.550000] MCS Set = ff ff 00 00 01 [ 28.550000] MtAsicSetChBusyStat(846): Not support for HIF_MT yet! [ 29.010000] CmdSlotTimeSet start [ 29.010000] CmdSlotTimeSet end [ 29.020000] CmdSlotTimeSet start [ 29.050000] CmdSlotTimeSet end [ 35.560000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 35.560000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 35.590000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 35.600000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 35.600000] Main bssid = f0:b4:29:22:85:e9 [ 35.610000] <==== rt28xx_init, Status=0 [ 35.610000] set_obtw_delta_proc: found cck1m_, DeltaVal = 6 [ 35.620000] set_obtw_delta_proc: found cck5m_, DeltaVal = 6 [ 35.620000] set_obtw_delta_proc: found ofdm6m_, DeltaVal = 6 [ 35.630000] set_obtw_delta_proc: found ofdm12m_, DeltaVal = 6 [ 35.640000] set_obtw_delta_proc: found ht20mcs0_, DeltaVal = 6 [ 35.640000] set_obtw_delta_proc: found ht20mcs1_, DeltaVal = 6 [ 35.650000] set_obtw_delta_proc: found ht40mcs0_, DeltaVal = 6 [ 35.650000] set_obtw_delta_proc: found ht40mcs32_, DeltaVal = 6 [ 35.660000] set_obtw_delta_proc: found ht40mcs1_, DeltaVal = 6 [ 35.670000] AndesInitCmdMsg:cmd_type:237,ExtCmdType:47 [ 35.670000] set_obtw_delta_proc: anyEnable=1 [ 37.550000] device wl1 entered promiscuous mode [ 37.550000] br-lan: port 2(wl1) entered forwarding state [ 37.560000] br-lan: port 2(wl1) entered forwarding state [ 37.650000] ##### mbss_cr_enable, BssId = 1 [ 39.560000] br-lan: port 2(wl1) entered forwarding state Wed Sep 9 01:19:32 CST 2015 boot_check[2520]: INFO: Wireless OK [ 49.600000] tcpproxy_init, succeed! [ 49.620000] http_identify: module license 'Proprietary' taints kernel. [ 49.620000] Disabling lock debugging due to kernel taint [ 66.050000] xqfp: init success! [ 66.060000] xqfp: init success! [ 66.060000] xqfp: module init success! rcS S calling: /etc/rc.d/S99stat_points boot: logexec: exitcode 1, runt 65 /etc/rc.d/S99stat_points boot rcS S calling: /etc/rc.d/S99stat_points boot: tail: can't open '/tmp/stat_points_rom.log': No such file or directory rcS S calling: /etc/rc.d/S99stat_points boot: tail: can't open '/tmp/stat_points_web.log': No such file or directory rcS S boot: INFO: rcS S boot timing 53 seconds. Wed Sep 9 01:20:00 CST 2015 INFO: rcS S boot timing 53 seconds. rcS S boot: system type(R1CL/2): SQUASH/3 Wed Sep 9 01:20:00 CST 2015 system type(R1CL/2): SQUASH/3 rcS S boot: ROOTFS: /dev/root on / type squashfs (ro,relatime) Wed Sep 9 01:20:00 CST 2015 ROOTFS: /dev/root on / type squashfs (ro,relatime) [ 71.870000] led=37, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 72.320000] led=44, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 72.380000] led=11, on=4000, off=1, blinks,=1, reset=1, time=4000 mknod: /dev/gpio: File exists Wed Sep 9 01:20:22 CST 2015 boot_check[4392]: Booting up finished.


LEDE bootlog

New U-boot installed running lede-project firmware:

[04040C0E][04040D06] DDR Calibration DQS reg = 00008989 U-Boot 1.1.3 (Nov 15 2016 - 16:16:06) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83f68000 flash manufacture id: ef, device id 40 18 find flash: W25Q128BV ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Nov 15 2016 Time:16:16:06 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 575 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. 4 3 2 1 0 3: System Boot system code via Flash. ## Booting image at bc050000 ... Image Name: MIPS LEDE Linux-4.4.39 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1258147 Bytes = 1.2 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80000000) ... ## Giving linux memsize in MB, 64 Starting kernel ... [ 0.000000] Linux version 4.4.39 (black@black) (gcc version 5.4.0 (LEDE GCC 5.4.0 r2671-f922615) ) #0 Wed Dec 28 00:22:26 2016 [ 0.000000] Board has DDR2 [ 0.000000] Analog PMU set to hw control [ 0.000000] Digital PMU set to hw control [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] MIPS: machine is MiWiFi Nano [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=0005b576 [ 0.000000] Readback ErrCtl register=0005b576 [ 0.000000] Memory: 60776K/65536K available (2890K kernel code, 142K rwdata, 696K rodata, 168K init, 195K bss, 4760K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:256 [ 0.000000] intc: using register map from devicetree [ 0.000000] CPU Clock: 580MHz [ 0.000000] clocksource_probe: no matching clocksources found [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns [ 0.000012] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns [ 0.015350] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.080517] pid_max: default: 32768 minimum: 301 [ 0.089781] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.102730] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.122845] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.142393] pinctrl core: initialized pinctrl subsystem [ 0.153364] NET: Registered protocol family 16 [ 0.179047] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.190161] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.201171] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.213639] clocksource: Switched to clocksource MIPS [ 0.224989] NET: Registered protocol family 2 [ 0.234446] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.248149] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.260663] TCP: Hash tables configured (established 1024 bind 1024) [ 0.273309] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.284768] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.297412] NET: Registered protocol family 1 [ 0.310688] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.322800] Crashlog allocated RAM at address 0x3f00000 [ 0.348432] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.359900] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.381901] io scheduler noop registered [ 0.389583] io scheduler deadline registered (default) [ 0.400570] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled [ 0.414332] console [ttyS0] disabled [ 0.421293] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A [ 0.439223] console [ttyS0] enabled [ 0.439223] console [ttyS0] enabled [ 0.452914] bootconsole [early0] disabled [ 0.452914] bootconsole [early0] disabled [ 0.470215] spi-mt7621 10000b00.spi: sys_freq: 193333333 [ 0.484628] m25p80 spi32766.0: using chunked io (size=32) [ 0.495390] m25p80 spi32766.0: w25q128 (16384 Kbytes) [ 0.505425] 4 ofpart partitions found on MTD device spi32766.0 [ 0.516975] Creating 4 MTD partitions on "spi32766.0": [ 0.527155] 0x000000000000-0x000000030000 : "u-boot" [ 0.538734] 0x000000030000-0x000000040000 : "u-boot-env" [ 0.551136] 0x000000040000-0x000000050000 : "factory" [ 0.563013] 0x000000050000-0x000000800000 : "firmware" [ 0.600049] 2 uimage-fw partitions found on MTD device firmware [ 0.611807] 0x000000050000-0x0000001832e3 : "kernel" [ 0.623268] 0x0000001832e3-0x000000800000 : "rootfs" [ 0.635021] mtd: device 5 (rootfs) set to be root filesystem [ 0.646389] 1 squashfs-split partitions found on MTD device rootfs [ 0.658641] 0x000000400000-0x000000800000 : "rootfs_data" [ 0.680778] rt3050-esw 10110000.esw: link changed 0x00 [ 0.693346] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 [ 0.710292] mt7621_wdt 10000120.watchdog: Initialized [ 0.721869] NET: Registered protocol family 10 [ 0.734415] NET: Registered protocol family 17 [ 0.743302] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 0.768335] 8021q: 802.1Q VLAN Support v1.8 [ 0.789625] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 0.804569] Freeing unused kernel memory: 168K (803a6000 - 803d0000) [ 2.637870] init: Console is alive [ 2.644895] init: - watchdog - [ 3.845136] usbcore: registered new interface driver usbfs [ 3.856160] usbcore: registered new interface driver hub [ 3.866823] usbcore: registered new device driver usb [ 3.882898] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.897367] ehci-platform: EHCI generic platform driver [ 3.918047] phy phy-10120000.usbphy.0: remote usb device wakeup disabled [ 3.931329] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz [ 3.941706] ehci-platform 101c0000.ehci: EHCI Host Controller [ 3.953124] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1 [ 3.968939] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000 [ 3.993660] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00 [ 4.007206] hub 1-0:1.0: USB hub found [ 4.015064] hub 1-0:1.0: 1 port detected [ 4.025974] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 4.039729] ohci-platform: OHCI generic platform driver [ 4.050393] ohci-platform 101c1000.ohci: Generic Platform OHCI controller [ 4.063914] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2 [ 4.079688] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000 [ 4.148722] hub 2-0:1.0: USB hub found [ 4.156639] hub 2-0:1.0: 1 port detected [ 4.177498] init: - preinit - [ 5.273970] rt3050-esw 10110000.esw: link changed 0x00 Press the [f] key and hit [enter] to enter failsafe mode Press [ 5.463948] random: procd: uninitialized urandom read (4 bytes read, 8 bits of entropy available) the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.808613] jffs2: notice: (328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 7.841065] mount_root: switching to jffs2 overlay [ 7.859124] urandom-seed: Seeding with /etc/urandom.seed [ 8.003706] procd: - early - [ 8.010107] procd: - watchdog - [ 8.720967] procd: - ubus - [ 8.908714] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 8.927511] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 8.945909] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 8.963808] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 8.982319] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 9.000188] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 9.018159] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 9.036646] random: ubusd: uninitialized urandom read (4 bytes read, 14 bits of entropy available) [ 9.054895] procd: - init - Please press Enter to activate this console. [ 9.429659] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 9.452931] Loading modules backported from Linux version wt-2016-10-03-1-g6fcb1a6 [ 9.467994] Backport generated by backports.git backports-20160324-9-g0e38f5c [ 9.535171] mt76_wmac 10300000.wmac: ASIC revision: 76280001 [ 11.585670] mt76_wmac 10300000.wmac: Firmware Version: _e2_mp [ 11.597118] mt76_wmac 10300000.wmac: Build Time: 20150211175503 [ 11.623634] firmware init done [ 11.819497] ip_tables: (C) 2000-2006 Netfilter Core Team [ 11.848574] nf_conntrack version 0.5.0 (952 buckets, 3808 max) [ 11.987171] xt_time: kernel timezone is -0000 [ 12.008748] PPP generic driver version 2.4.2 [ 12.020134] NET: Registered protocol family 24 [ 12.936218] random: jshn: uninitialized urandom read (4 bytes read, 21 bits of entropy available) [ 19.578359] device eth0.1 entered promiscuous mode [ 19.587927] device eth0 entered promiscuous mode [ 19.608736] br-lan: port 1(eth0.1) entered forwarding state [ 19.619879] br-lan: port 1(eth0.1) entered forwarding state [ 21.622872] br-lan: port 1(eth0.1) entered forwarding state [ 32.361086] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 61.797842] random: nonblocking pool is initialized BusyBox v1.25.1 () built-in shell (ash) _________ / /\ _ ___ ___ ___ / LE / \ | | | __| \| __| / DE / \ | |__| _|| |) | _| /________/ LE \ |____|___|___/|___| lede-project.org \ \ DE / \ LE \ / ----------------------------------------------------------- \ DE \ / Reboot (SNAPSHOT, r2697-19059d8) \________\/ ----------------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@lede:/#


Tags

How to add tags

, , , , , ,
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2024/02/12 08:58
  • by 127.0.0.1