One other observation, if I power cycle it, I can get it to the mood light turning on but the TX pin in that case output 0V, RX 3.3V.
In a couple weeks when I receive CH341 I will try to read the flash from the Winbond W25Q16JVSIG chip and try to undo the changes I did to the environments. Just in case if I would need to totally reflash the chip, could someone make a backup of their chip? It should be possible to do this using terminal in openwrt.
Hello,
i want say Thank you for your very nice work.
I love this router and in Germany i can buy for 70ā¬ the W6D proshop and the W6m for 65ā¬ on amazon.
But my W6D dont have holes for the Serial, i buy a Pogopin Clamp.
After 3x cleaning with iso 99,9% and 3x Clamp on and off.... i can use it
The Dissamply is easy but a lot of screws.
The Flash is easy:
The Router make alone a update with Stock Firmware.
Then you buy it new, dont access to the internet.
I must use autoboot=7
I want use sqm but i only have with cake 35 Mbit.
After i install irq balance i can use cake with 175mbit.
But SQM or irq balance is a little bit buggy.
I must find the right interface and settings.
The Temps are very good, i use:
|Sensor|Temperature|
|mdio_bus:06 / temp1|48.5 Ā°C
|cpu_thermal / temp1|41.1 Ā°C
|mt7915_phy0 / temp1|45 Ā°C
|mt7915_phy1 / temp1|45 Ā°C
Later make putty on the cooler and i test QOSmate.
This is with irq balance and cake
i can only post 1 pic 
The Flint 2 is a little bit better on Jitter but the Price for w6d i can buy 2 of them and a cold cola
But the w6d has better min ping.
But the bufferbloat test is not so easy to compare.
Update:
Without Cooler and without emi shield:
|Sensor|Temperature||
|mdio_bus:06 / temp1|38.3 Ā°C|Ī§|
|cpu_thermal / temp1|41.9 Ā°C|Ī§|
|mt7915_phy0 / temp1|41 Ā°C|Ī§|
|mt7915_phy1 / temp1|47 Ā°C|
|mt7915_phy0 / temp1|41 Ā°C|Ī§|
|mt7915_phy1 / temp1|47 Ā°C|
Infrarot Thermo:
-5 Ā°C to software on cpu
-10 Ā°C to Software on phy0 and phy1
Update:
After testing i dont use irq balance.
I use Packet Steering on all CPU and RPS with 128
Very good with sqm for me on eth1 and overhead: 34
https://www.waveform.com/tools/bufferbloat?test-id=2b40f846-9e15-4efa-a18e-f712f9c21d59
Without Wifi: 4,6 Watt
Wifi: 5,2 Watt
The W6d do the same as the Flint 2 for me, for only 40% Price
The Ping is lower then Flint 2 and Jitter is the same i think.
I change the pads to putty, only little better Temperature.
I do a 120mm fan on the cooler (without big LED cover from acer) and use 5v from usb.
Silent Wings USC (The first one) @ 625 U/min
10 Ā°C lower with Fan
With a 15mm fan you can close the case
does this mean, we can never run official openwrt images on such routers. i have related one
I was able to gain access to the w6x root loginā¦
- flash initramfs with nand enabled
- mount /dev/ub0_2 -
mount -t ubifs /dev/ubi0_2 <location> - from mounted directory, edit upper/etc/passwd and change line 1 from
root:x:0:0...toroot::0:0...(removing x, effectively removing the password), - reboot and profit
2 Likes
so i got openwrt flashed onto a w6x and is persistent across cold and warm starts..
However, thereās a couple of things that Iām trying to figure out now:
wifi isnāt loading, even though packages are installedFigured it out.only 3 of the 4 LAN ports are showing up. - there are 4 ports, one just mislabeled.LED is persistantly blue, lower priority to addthis device probably will require a uboot mod, 100MB is in the ubi1 partition which isnāt used.
Any help would be appreciated and welcomed
Edit: PR created: https://github.com/openwrt/openwrt/pull/19754 merged
Ubootmod PR created: https://github.com/openwrt/openwrt/pull/19842
2 Likes
Hi Everyone.
I managed to successfully install OpenWrt on my W6 (with a late 2024 OEM firmware). I managed to debug a few issues that did not work from the installation guide (due to newer OEM firmware), but unfortunately after getting the router up and running and screwing it all back together, the first thing I did was play with /dev/mmcblk0. Whoopssssss!!!
I've installed OpenWrt on half a dozen routers over the years, but this is my first eMMC based router, and unfortunately I did not understand that /dev/mmcblk0 should not be changed, especially with no backups or OEM firmware available (hehe). Short story, I managed to nuke the /dev/mmcblk0 partition table and zero out much of the data contained on it.
What I'm left with when I boot:
F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 028B [010F]
Jump to BL
And that's it. Bootloader is nuked. Obviously now I understand what I did wrong, but I believe there is no way to recover from this bricked state without desoldering the eMMC?
I know the MTK 7986 (filogic 830) supports uartboot, however mtk_uartboot (https://github.com/981213/mtk_uartboot) fails because secure boot is enabled as shown below. (I tested to see if there was any hope with the closest bootloader I could find):
unitywifi:mtk_uartboot-v0.1.1-x86_64-apple-darwin root#
unitywifi:mtk_uartboot-v0.1.1-x86_64-apple-darwin root# ./mtk_uartboot -s /dev/tty.usbserial-0001 --aarch64 -p mt7986-ram-ddr4-bl2.bin -f openwrt-23.05.5-mediatek-filogic-xiaomi_redmi-router-ax6000-ubootmod-bl31-uboot.fip
mtk_uartboot - 0.1.1
Using serial port: /dev/tty.usbserial-0001
Handshake...
hw code: 0x7986
hw sub code: 0x8a00
hw ver: 0xca01
sw ver: 0x1
thread 'main' panicked at src/main.rs:56:9:
Secure boot enabled.
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Abort trap: 6
unitywifi:mtk_uartboot-v0.1.1-x86_64-apple-darwin root#
At this point I am out of ideas. I have read in several places it may be possible to bypass secure boot to get uartboot to work, but I have already spent enough hours on this and I'm about ready to toss the thing in the bin and chalk it up as a learning experience.
Anyone have any ideas?
Failing that, I have a perfectly functional brick with fairly nicely soldered pins on the serial connector if anyone wants to try debricking--I can send it along.
You can send it over to me. If you agree, please use private messaging for shipping details. Thanks.
nitroshift
22 posts were merged into an existing topic: Acer Vero W6m (6E) with OpenWrt
Whatās considered bootloader here?
eMMC effectively emulates itself as if 3 separate perfect block devices; 2 of them are boot partitions exposed as /dev/mmcblk0boot0 and /dev/mmcblk0boot1 ; they somewhat behave like a SPI flash. Then the general user data area is the /dev/mmcblk0 which you nuked. Assuming you didnāt touch /dev/mmcblk0boot{0,1} , your BL2 is likely still intact.
Judged from secure boot is enabled, itād be difficult to get romcode to sideload any alternative BL2.
IMO paths to recovery is either find something in stock BL2 that allows chainload or sideload some other code, or to get data recovered into that eMMC part by offline programming. Former is a software challenge; latter is a hardware challenge.
my machine has one exception: the firmware it shipped with is not a commercial version, but from the OEM: dn=QUANTA WI-FI 6E ROUTERļ¼ who has the Quanta firmware, please help me.
your firmware is a black box to us, what are your expectations ?
I am a novice, and I hope to get help to rescue this machine... Maybe I can meet fellow netizens with the same firmware...
the standard W6 installation instructions doesn't work for you ?
Due to the presence of secure boot, it is impossible to unbrick the device. I have tried the backup partition information provided by netizens, but because the firmware is different from the one that came with my machine, even though it is the same model, I think I can only hope that friends with the same original firmware can see the post and provide help. Or is there a way to bypass the secure boot mechanism?
i figured something out: you dont need the kmod-leds-ktd202x to drive the big led plate on the cooler, only the i2c-tools
you can change the color rgb style with
i2cset -y 0 0x68 0x03 0x00 < red value
i2cset -y 0 0x68 0x04 0x00 < green value
i2cset -y 0 0x68 0x05 0x00 < blue value
maybe there are some effects too?
1 Like
Hi @WiredLife ,
are you referring to posts #185 and #186?
You are right, the software in the package kmod-leds-ktd202x is used (and integrated into the firmware) for the Acer Connect Vero W6m (only one rgb LED, driven by a KTD2026) and is useless for the KTD2061 in the Acer Predator Connect W6(e).
LED light effects can be determined using i2c commands listed in the KTD206x datasheet. Even a shell script will doā¦
Btw: Attempts have been made to add support for Kinetic Technologiesā chips to the Linux drivers code ā without success until now in spite of great marketing efforts for these chips.
Nice! Do you know if its possible to control the LEDs on the Mainboard? The green one is really annoying.
Edit: Found by myself, simply set green:status-0 to none under System - LED Configuration
Edit2: Is there a way to disable the Switch Port LEDs?
The W6D have 4Gib emmc and i mount 2GB for Nas.
Samba4 work, i can read.
Is it safe to use (now its readonly but for later)?
I make this see it:
opkg update && opkg install fdisk
fdisk /dev/mmcblk0
p # aktuelle Partitionen anzeigen
to mount:
mount -t ext4 /dev/mmcblk0p12 /mnt/shares
Thanks to:
https://www.reddit.com/r/openwrt/comments/1ilwurv/why_is_overlay_only_431mb_on_my_8gb_emmc_banana/