Adding support for TL-MR6400 v3 - LTE modem not working

And also the factory dmesg log:

U-Boot 1.1.3 (Nov 16 2018 - 15:45:52)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb4000
gpiomode1 55054404.
gpiomode2 05550555.
######GPIO CTRL 1 for GPIO 32~64 OUTPUT tmp(0x00001fa0)#####
######GPIO CTRL 1 for GPIO 32~64 INPUT tmp(0x00001fa0)#####
flash manufacture id: c8, device id 40 17
find flash: GD25Q64B
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Nov 16 2018  Time:15:45:52
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.                                                                                                                                                                                                               0
disable switch phyport...

3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

怘▒▒▒▒fff▒▒~▒▒~fx▒▒▒怘▒怘▒f▒▒▒▒f▒▒▒▒f▒f▒▒▒Linux version 2.6.36 (tp-link@Sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Fri Nov 16 15:49:38 CST 2018

 The CPU feqenuce set to 580 MHz

 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0004690f
Readback ErrCtl register=0004690f
Memory: 60868k/65536k available (2916k kernel code, 4668k reserved, 715k data, 184k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 55054404
RALINK_GPIOMODE = 55044404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 no card, disable it(RST&CLK)
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.15)
msgmni has been set to 118
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
i2cdrv_major = 218
Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
brd: module loaded
flash manufacture id: c8, device id 40 17
GD25Q64B(c8 40170000) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007d0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007d0000-0x0000007e0000 : "config"
0x0000007e0000-0x0000007f0000 : "romfile"
0x0000007f0000-0x000000800000 : "radio"
Register flash device:flash0
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
FM_OUT value: u4FmOut = 0(0x00000000)
FM_OUT value: u4FmOut = 127(0x0000007F)
FM detection done! loop = 1
SR calibration value u1SrCalVal = 6
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (951 buckets, 3804 max)
GRE over IPv4 demultiplexor driver
gre: can't add protocol
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 184k freed
starting pid 35, tty '': '/etc/init.d/rcS'
cp: can't stat '/etc/SingleSKU_FCC.dat': No such file or directory
SCSI subsystem initialized
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/core/usbcore.ko': No such file or directory
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/host/ifxusb_host.ko': No such file or directory
rdm_major = 253
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7EF100) 68-ffffffff-7b-fffffff4-65-ffffffb8
GMAC1_MAC_ADRH -- : 0x000068ff
GMAC1_MAC_ADRL -- : 0x7bf465b8
Ralink APSoC Ethernet Driver Initilization. v3.1  256 rx/tx descriptors allocated, mtu = 1500!
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7EF100) 68-ffffffff-7b-fffffff4-65-ffffffb8
GMAC1_MAC_ADRH -- : 0x000068ff
GMAC1_MAC_ADRL -- : 0x7bf465b8
PROC INIT OK!
usbcore: registered new interface driver cdc_wdm
usbcore: registered new interface driver qmi_wwan
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
dns_init
domain_name:tplinkmodem.net
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
[err] syslogd[main --763] syslogd : syslogd_init

usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac 68-ff-7b-f4-65-b9
qmi_wwan: probe of 1-1:1.0 failed with error -22
usbserial_generic 1-1:1.0: generic converter detected
usb 1-1: generic converter now attached to ttyUSB0
[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac 68-ff-7b-f4-65-b9
qmi_wwan: probe of 1-1:1.1 failed with error -22
qmi_wwan 1-1:1.2: bogus CDC Union: master=0, slave=0
qmi_wwan: probe of 1-1:1.2 failed with error -1
qmi_wwan 1-1:1.3: bogus CDC Union: master=0, slave=0
qmi_wwan: probe of 1-1:1.3 failed with error -1
qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device
[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac 68-ff-7b-f4-65-b9
scsi0 : usb-storage 1-1:1.5
scsi 0:0:0:0: Direct-Access     Linux    File-Stor Gadget 0318 PQ: 0 ANSI: 2
sd 0:0:0:0: [sda] 130048 512-byte logical blocks: (66.5 MB/63.5 MiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Assuming drive cache: write through
 sda:
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Attached SCSI removable disk
linux_qmi_qmux_io_pwr_up_init.c: Unable to open wakelock file = /sys/power/wake_lock, error [2:No such file or directory]
qmuxd: linux_qmi_read_sysfs_config: couldn't open file /sys/module/f_rmnet/parameters/rmnet_ctl_chqmuxd: linux_qmi_read_sysfs_config: couldn't open /sys/module/rmnet/parameters/rmnet_ctl_chlinux_qmi_qmux_if_configure_port_timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc-wdm0/open_timeout errno [2:No such file or directory]linux_qmi_qmux_if_configure_port_timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc-wdm0/open_timeout errno [2:No such file or directory]qmi_qmux_open_connection: connection is disabled for conn_id=1
qmuxd: opening connection for conn_id=1 [DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=2
qmuxd: opening connection for conn_id=2 [DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=3
qmuxd: opening connection for conn_id=3 [DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=4
qmuxd: opening connection for conn_id=4 [DATA9_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=5
qmuxd: opening connection for conn_id=5 [DATA12_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=6
qmuxd: opening connection for conn_id=6 [DATA13_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=7
qmuxd: opening connection for conn_id=7 [DATA14_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=9
qmuxd: opening connection for conn_id=9 [DATA15_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=10
qmuxd: opening connection for conn_id=10 [DATA16_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=11
qmuxd: opening connection for conn_id=11 [DATA17_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=21
qmuxd: opening connection for conn_id=21 [SDIO_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=22
qmuxd: opening connection for conn_id=22 [SDIO_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=23
qmuxd: opening connection for conn_id=23 [SDIO_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=24
qmuxd: opening connection for conn_id=24 [SDIO_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=25
qmuxd: opening connection for conn_id=25 [SDIO_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=26
qmuxd: opening connection for conn_id=26 [SDIO_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=27
qmuxd: opening connection for conn_id=27 [SDIO_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=28
qmuxd: opening connection for conn_id=28 [SDIO_DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=29
qmuxd: opening connection for conn_id=29 [MDM_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=30
qmuxd: opening connection for conn_id=30 [MDM_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=31
qmuxd: opening connection for conn_id=31 [MDM_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=32
qmuxd: opening connection for conn_id=32 [MDM_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=33
qmuxd: opening connection for conn_id=33 [MDM_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=34
qmuxd: opening connection for conn_id=34 [MDM_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=35
qmuxd: opening connection for conn_id=35 [MDM_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=36
qmuxd: opening connection for conn_id=36 [MDM_DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=48
qmuxd: opening connection for conn_id=48 [SMUX0] failed
qmi_qmux_open_connection: connection is disabled for conn_id=49
qmuxd: opening connection for conn_id=49 [MDM2_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=50
qmuxd: opening connection for conn_id=50 [MDM2_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=51
qmuxd: opening connection for conn_id=51 [MDM2_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=52
qmuxd: opening connection for conn_id=52 [MDM2_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=53
qmuxd: opening connection for conn_id=53 [MDM2_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=54
qmuxd: opening connection for conn_id=54 [MDM2_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=55
qmuxd: opening connection for conn_id=55 [MDM2_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=56
qmuxd: opening connection for conn_id=56 [MDM2_DATA8_CNTL] failed

Please press Enter to activate this console. qmi_ctl_rx_msg.c Can't find txn info for txn_id = 1
[ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
[ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model_MR6400.xml!, about to open file /etc/reduced_data_model_MR6400.xml
spiflash_ioctl_read, Read from 0x007d0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x007d0000 length 0x5f1a, ret 0, retlen 0x5f1a
spiflash_ioctl_read, Read from 0x007d0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x007d0000 length 0x5f1a, ret 0, retlen 0x5f1a
[ checkUdiskReady ] 069:  [cos] times:0, mount cmd:mount -t auto /dev/sda /tmp/udisk

FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
17 INFO: src/flowstat_main.c(18) main(): LTE flospiflash_ioctl_read, Read from 0x007ef500 length 0x29, ret 0, retlen 0x29
wstat process stspiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
arts working!
1spiflash_ioctl_read, Read from 0x007ef200 length 0x4, ret 0, retlen 0x4
7 ERROR: Post evspiflash_ioctl_read, Read from 0x00020000 length 0x200, ret 0, retlen 0x200
ent to MOBILE sespiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
rver failed, errno = 2 (No such file or directory).
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

17 ERROR: Client communication with server failed.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

17 ERROR: src/flowstat_manage.c(73) flowstat_get_wwan_tx_rx_statistics(): Get Rx/Tx flow from qmi failed!
Raeth v3.1 (Tasklet,SkbRecycle)

phy_tx_ring = 0x036e7000, tx_ring = 0xa36e7000

phy_rx_ring0 = 0x036e8000, rx_ring0 = 0xa36e8000
[fe_sw_init:4952]rt305x_esw_init.
disable switch phyport...
GMAC1_MAC_ADRH -- : 0x000068ff
GMAC1_MAC_ADRL -- : 0x7bf465b8
RT305x_ESW: Link Status Changed
18 ERROR: Post event to MOBILE server failed, erspiflash_ioctl_read, Read from 0x007ef600 length 0xf, ret 0, retlen 0xf
rno = 2 (No such file or directory).
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 ERROR: Client communication with server failed.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory).
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 ERROR: Client communication with server failed.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

Query new SMS count success.18 ERROR: New sms count is 0
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 USER: Mobile device manager (qmi) initialized OK.
Init QMI services......
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 USER: Start get voice service object.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 USER: VOICE Service Object got.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 USER: VOICE QMI Client Init successfully, handle is 0x004A7C48.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

18 USER: Mobile device manager (qmi) initialized OK.
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

21 USER: Not registered, searching!
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

21 ERROR: 0x0000002F QMI_ERR_UNKNOWN
21 ERROR: Failed to set the primary client (0).
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

21 ERROR: 0x00000034 QMI_ERR_DEVICE_NOT_READY
21 ERROR: Failed to get smsc address (0).
[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --652] syslogd : log module is not config

spiflash_ioctl_read, Read from 0x007ef600 length 0xf, ret 0, retlen 0xf
sendto /var/tmp/7 msg 2001 error No such file or directory ,pid 106
sh: can't create /proc/tplink/eth_vlan: nonexistent directory
ioctl: No such device
brctl: bridge br0: Invalid argument
set if eth0.2 to *not wan dev
device eth0.2 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.2) entering forwarding state
br0: port 1(eth0.2) entering forwarding state
set if eth0.3 to *not wan dev
device eth0.3 entered promiscuous mode
br0: port 2(eth0.3) entering forwarding state
br0: port 2(eth0.3) entering forwarding state
set if eth0.4 to *not wan dev
1451606421 USER: The service status is limited.
1451606421 USER: Network type is WCDMA.
[err] syslogd[syslogd_msg_process --652] syslogd : logdevice eth0.4 entered promiscuous mode
 module is not cbr0: port 3(eth0.4) entering forwarding state
onfig

[err] sbr0: port 3(eth0.4) entering forwarding state
yslogd[syslogd_msg_process --652] syslogd : log module is not config

set if eth0.5 to *not wan dev
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entering forwarding state
br0: port 4(eth0.5) entering forwarding state
set if eth0.5 to wan dev
[ vlan_addLanPortsIntoBridge ] 512:  add lan Port 255 from br0
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
ra0       no private ioctls.



=== pAd = c0c28000, size = 914848 ===

<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
RtmpChipOpsHook(492): Not support for HIF_MT yet!
mt7628_init()-->
mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(64736)
mt_bcn_buf_init(218): Not support for HIF_MT yet!
<--mt7628_init()
Interface doesn't accept private ioctl...
set (8BE2): Network is down
[ oal_wlan_ra_lteCoexistence ] 6891:  Get Curr band err 0.

No need to switch channel.
[ oal_sht:pAd->ApBootFlag = TRUE
wlan_ra_lteCoexiTX_BCN DESC a2122000 size = 320
stence ] 6981:  RX[0] DESC a2126000 size = 4096

AutoChannelSkiRX[1] DESC a2127000 size = 2048
pList = 12;13;52;56;60;64;100;104;108;112;116;120;124;128;132;136;140

cfg_mode=9
cfg_mode=9
wmode_band_equal(): Band Equal!
AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
Key1Str is Invalid key length(0) or Type(0)
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
WscKeyASCII=8
WscKeyASCII=8
load fw image from fw_header_image
AndesMTLoadFwMethod1(2261)::pChipCap->fw_len(64736)
FW Version:1
FW Build Date:20170411104110
CmdAddressLenReq:(ret = 0)
CmdFwStartReq: override = 1, address = 1048576
CmdStartDLRsp: WiFI FW Download Success
MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000012
RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
RtmpEepromGetDefault::e2p_dafault=2
RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
NVM is FLASH mode
1. Phy Mode = 14
exec!
spiflash_ioctl_read, Read from 0x007f0000 length 0x400, ret 0, retlen 0x400
eeFlashId = 0x7628!
Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 30
2. Phy Mode = 14
3. Phy Mode = 14
NICInitPwrPinCfg(11): Not support for HIF_MT yet!
NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
mt_mac_init()-->
MtAsicInitMac()-->
mt7628_init_mac_cr()-->
MtAsicSetMacMaxLen(1277): Set the Max RxPktLen=450!
<--mt_mac_init()
        WTBL Segment 1 info:
                MemBaseAddr/FID:0x28000/0
                EntrySize/Cnt:32/128
        WTBL Segment 2 info:
                MemBaseAddr/FID:0x40000/0
                EntrySize/Cnt:64/128
        WTBL Segment 3 info:
                MemBaseAddr/FID:0x42000/64
                EntrySize/Cnt:64/128
        WTBL Segment 4 info:
                MemBaseAddr/FID:0x44000/128
                EntrySize/Cnt:32/128
AntCfgInit(2943): Not support for HIF_MT yet!
MCS Set = ff ff 00 00 01
MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
open DNS error: No such file or directory
[ oal_sys_getOldTZInfo ] 732:  Open TZ file error!
Fri Jan  1 00:00:26 UTC 2016
Fri Jan  1 00:00:26 UTC 2016
[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MtAsicSetRalinkBurstMode(3145): Not support for HIF_MT yet!
MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
reload DPD from flash , 0x9F = [c400] doReload bit7[0]
CmdLoadDPDDataFromFlash: Channel = 2, DoReload = 0
MtAsicSetTxPreamble(3124): Not support for HIF_MT yet!
CmdSlotTimeSet:(ret = 0)
MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
Main bssid = 68:ff:7b:f4:65:b8
<==== rt28xx_init, Status=0
@@@ ed_monitor_init : ===>
@@@ ed_monitor_init : <===
mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1
sht:pAd->ApBootFlag = FALSE
WiFi Startup Cost (ra0): 3.740s
Set_ed_chk_proc()::ed_chk=0
mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f, EDCCA_Status=0
device ra0 entered promiscuous mode
br0: port 5(ra0) entering forwarding state
br0: port 5(ra0) entering forwarding state
device ra1 entered promiscuous mode
Checking 2.4G cal data...
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
WLAN-Start wlNetlinkTool
Waiting for Wireless Events from interfaces...
swWlanChkAhbErr: netlink to do
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 106
wscd: SSDP UDP PORT = 1900
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 106
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 106
[src/cloud_downloadHandler.c:cloud_initPthreadDownloadHandler:241] init download handler success!

[src/cloud_downloadHandler.c:downloadHandler:104] Enter download handler, download firmware from cloud...

[src/cloud_downloadHandler.c:downloadHandler:108] wait semaphore to download firmware to device...

sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 106
mmmInit():Total mem size=51364, addr=0x0x446150.
*************************************************************
*************************MMM TABLE DUMP**********************
-------------------------------------------------------------
 poolhead(40)  poolnum  dynamictimes  chainhead  poolend
-------------------------------------------------------------
 0x446150        8          0         (nil)     0x4529f4
-------------------------------------------------------------
 index  poolhead(20)    size    blocks    free     usage
-------------------------------------------------------------
  1     0x446178        32          256       256       0
  2     0x448590        64          128       128       0
  3     0x44a7a8        128         64        64        0
  4     0x44c8c0        256         32        32        0
  5     0x44e958        512         8         8         0
  6     0x44f990        1024        4         4         0
  7     0x4509b8        2048        2         2         0
  8     0x4519d8        4096        1         1         0
-------------------------------------------------------------
 index  chainnode(16)   magic    length    prev    next
-------------------------------------------------------------
(nil)
*************************************************************
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 106
sendto /var/tmp/9 msg 2004 error No such file or directory ,pid 106
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/tun.ko': No such file or directory
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/ppp_mppe.ko': No such file or directory
lin: oal_WritePptpVpnFile start!
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
radvd starting
[rsl_initWanLteIntfCfgObj 3263] init LTE module, set flowstat [enableDataLimit 0, enablePaymentDay 0, paymentDay 1, limitation 0, warningPercent 90]
[initProfileList 413] LTE Module: profile num [1], default profile [1], active profile [0]
[initProfileList 415] DM: profile num [1], default profile [1], active profile [0]
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/zebra.pid.
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/ripd.pid.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
nf_nat_rtsp v0.6.21 loading
iptables: Bad rule (does a matching rule exist in that chain?).
[src/cloud_client.c:initSigIntHandler:104] init signal handler success!

[src/cloud_client.c:cloudClientInit:148] Init cloud-client environment successful.

[src/cloud_localMsgHandler.c:cloud_localMsgTask:96] Start cloud local message observer...

ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
[ rsl_init ] 1612:  MR6400 must use single band oid_str.js!!!
enable switch phyport...
Set: phy[0].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[0] = 3300
resetMiiPortV over.
Set: phy[0].reg[4] = 01e1
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[4] = 01e1
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[4] = 01e1
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[4] = 01e1
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[4] = 01e1
Set: phy[4].reg[0] = 3300
turn off flow control over.
Generating key, this may take a while...
Public key portion is:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDgT8qrlTc1KHP+xUFlzeSEXpxMACEbPEW8XNB/bESppS8Ob7ijGizi3zXZmJaF4vIGwt5cX69Xi1LG5LgWtsMxIw0E13tM725nposq4n6nt2LT3PMjzq4mWcSD7P6XmvNgaQJhH78Q4CKv0E4gp7iNeHhPr+ny7OoRiIdb20QQ9w== admin@TL-MR6400
Fingerprint: md5 31:15:7f:29:9f:35:44:fe:65:e4:48:1d:1d:88:47:46
Generating key, this may take a while...
Public key portion is:
ssh-dss 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 admin@TL-MR6400
Fingerprint: md5 82:b1:b2:08:45:08:85:c9:a2:01:cf:21:41:39:dc:c6
open DNS error: No such file or directory
Fri Jan  1 00:01:00 UTC 2016
Fri Jan  1 00:01:00 UTC 2016

starting pid 107, tty '': '/sbin/getty -L ttyS1 115200 vt100'

TL-MR6400 login:

you should use /dev/cdc-wdm0 instead.

Thanks Andrew, I tried that also with the same result, console hangs.

Further investigation seems to point to the LTE module being in storage mode, the dmesg log seems to show this with the usb scsi device showing. I had a look at /etc/usb-mode.jaon and there is no entry for my LTE module, what would be the correct way to add the vendor and device ids to this file?

Which LTE module are you using? What are USB VID & PID ?
You have too many serial drivers loaded, not sure if that is right.

Hi Andrew
It shows up as "Qualcomm HSUSB Device" vid=05c6 pid=9025

It looks like its not actually in storage mode, just is not responding to commands.

The modem itself is a module soldered down to the main PCB, it's not PCI-E or anything, i.e. it can't un-slot from a socket.

Anyway I ended up using a different router for my requirements which was already supported, a dlink dwr-921-c3 and it working well. I've given up on this tplink, as I wasted the best part of a couple days trying to get it working with openwrt.

If anyone wants to look at the tplink and add support for it to openwrt, let me know - I can provide remote access to it via uart cable and lan.

Looks like they use a slightly modified version of the qmi_wwan driver, and have left a few additional debug comments. That's helpful :slight_smile:

Your problem is most likely related to the change dtr 1 thing. Most modern Qualcomm modems require setting DTR to enable the QMI control channel. I've been meaning to make that default for some time, but have been hoping to get some time and motivation do dig out the pile of older Qualcomm modems from my basement to see if any of them has issues with this change.

Anyway, you can probably fix your problem with a patch enabling the DTR quirk for your modem. Or temporarily work around with someting along:

echo 1-1:1.4 >/sys/bus/usb/drivers/qmi_wwan/unbind
echo 05c6 9025 ff 05c6 9625  >/sys/bus/usb/drivers/qmi_wwan/new_id

If I'm right, then you will get a /dev/cdc-wdm0 device which works with uqmi. But the workaround will only help until the next reboot (or driver reload).

Thanks i'll give this a try now and see if it works, I can always add those commands to rc.local so they load on startup.

I tried it, however didn't seem to work

I'm assuming "05c6 9025 ff 05c6 9625" should be "05c6 9025 ff 05c6 9025" ? I tried both ways anyway.

Here's the logs, i'm also manually enabling the serial drivers.

root@OpenWrt:/# echo '05c6 9025 ff' > /sys/bus/usb-serial/drivers/option1/new_id
[  117.149612] option 1-1:1.0: GSM modem (1-port) converter detected
[  117.156146] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[  117.163876] option 1-1:1.2: GSM modem (1-port) converter detected
[  117.170466] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
[  117.178067] option 1-1:1.3: GSM modem (1-port) converter detected
[  117.184551] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB2
root@OpenWrt:/# cat /sys/kernel/debug/usb/devices

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 4.14
S:  Manufacturer=Linux 4.14.131 ehci_hcd
S:  Product=EHCI Host Controller
S:  SerialNumber=101c0000.ehci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480  MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=05c6 ProdID=9025 Rev= 3.18
S:  Manufacturer=Android
S:  Product=Android
S:  SerialNumber=f0f92748
C:* #Ifs= 6 Cfg#= 1 Atr=a0 MxPwr=500mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=usbfs
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=84(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=86(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=88(I) Atr=03(Int.) MxPS=   8 Ivl=32ms
E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 5 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage
E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12   MxCh= 1
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0001 Rev= 4.14
S:  Manufacturer=Linux 4.14.131 ohci_hcd
S:  Product=Generic Platform OHCI controller
S:  SerialNumber=101c1000.ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms
root@OpenWrt:/# echo 1-1:1.4 >/sys/bus/usb/drivers/qmi_wwan/unbind
[  133.949819] qmi_wwan 1-1:1.4 wwan0: unregister 'qmi_wwan' usb-101c0000.ehci-1, WWAN/QMI device
root@OpenWrt:/# echo 05c6 9025 ff 05c6 9625  >/sys/bus/usb/drivers/qmi_wwan/new_
id
[  138.753462] qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device
[  138.777627] qmi_wwan 1-1:1.4 wwan0: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, fa:6e:57:83:d9:4e
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-data-status
^C"Failed to connect to service"
root@OpenWrt:/#

and again after another reboot without first manually enabling the serial drivers

root@OpenWrt:/# echo 1-1:1.4 >/sys/bus/usb/drivers/qmi_wwan/unbind[   18.923399] rt3050-esw 10110000.esw: link changed 0x00

[   20.317606] qmi_wwan 1-1:1.4 wwan0: unregister 'qmi_wwan' usb-101c0000.ehci-1, WWAN/QMI device
root@OpenWrt:/# [   23.145363] rt3050-esw 10110000.esw: link changed 0x08
[   26.668669] br-lan: port 1(eth0.1) entered blocking state
[   26.674159] br-lan: port 1(eth0.1) entered disabled state
[   26.680081] device eth0.1 entered promiscuous mode
[   26.684947] device eth0 entered promiscuous mode
[   26.730121] br-lan: port 1(eth0.1) entered blocking state
[   26.735612] br-lan: port 1(eth0.1) entered forwarding state
[   26.741699] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
ls[   27.696652] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
 /dev
bus                 mtd3ro              null
console             mtd4                port
cpu_dma_latency     mtd4ro              ppp
full                mtd5                ptmx
gpiochip0           mtd5ro              pts
gpiochip1           mtd6                random
gpiochip2           mtd6ro              sda
kmsg                mtdblock0           shm
log                 mtdblock1           tty
memory_bandwidth    mtdblock2           ttyS0
mtd0                mtdblock3           ttyS1
mtd0ro              mtdblock4           ttyS2
mtd1                mtdblock5           urandom
mtd1ro              mtdblock6           watchdog
mtd2                net                 watchdog0
mtd2ro              network_latency     zero
mtd3                network_throughput
root@OpenWrt:/# echo 05c6 9025 ff 05c6 9025  >/sys/bus/usb/drivers/qmi_wwan/new_
id
[   47.799439] qmi_wwan: probe of 1-1:1.0 failed with error -22
[   47.805342] qmi_wwan 1-1:1.2: bogus CDC Union: master=0, slave=0
[   47.826641] qmi_wwan 1-1:1.2: cdc-wdm0: USB WDM device
[   47.832882] qmi_wwan 1-1:1.2 wwan0: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, e2:07:bf:eb:36:1e
[   47.843802] qmi_wwan 1-1:1.3: bogus CDC Union: master=0, slave=0
[   47.900605] qmi_wwan 1-1:1.3: cdc-wdm1: USB WDM device
[   47.906981] qmi_wwan 1-1:1.3 wwan1: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, e2:07:bf:eb:36:1e
[   47.956615] qmi_wwan 1-1:1.4: cdc-wdm2: USB WDM device
[   47.962891] qmi_wwan 1-1:1.4 wwan2: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, e2:07:bf:eb:36:1e
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-data-status
[   72.477628] qmi_wwan 1-1:1.2: unknown notification 32 received: index 2 len 2
^C"Failed to conne[   85.971168] qmi_wwan 1-1:1.2: Error in flush path: -32
ct to service"
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-signal-info
^C"Failed to conne[   92.589020] qmi_wwan 1-1:1.2: Error in flush path: -32
ct to service"
root@OpenWrt:/# ls /dev
bus                 mtd2ro              network_throughput
cdc-wdm0            mtd3                null
cdc-wdm1            mtd3ro              port
cdc-wdm2            mtd4                ppp
console             mtd4ro              ptmx
cpu_dma_latency     mtd5                pts
full                mtd5ro              random
gpiochip0           mtd6                sda
gpiochip1           mtd6ro              shm
gpiochip2           mtdblock0           tty
kmsg                mtdblock1           ttyS0
log                 mtdblock2           ttyS1
memory_bandwidth    mtdblock3           ttyS2
mtd0                mtdblock4           urandom
mtd0ro              mtdblock5           watchdog
mtd1                mtdblock6           watchdog0
mtd1ro              net                 zero
mtd2                network_latency
root@OpenWrt:/#

Then I was obviously wrong...

"05c6 9025 ff 05c6 9625" is correct. The idea was to override the existing 05c6:9025 entry in the driver with a new dynamic entry using 05c6:9625 as a template. This ID has the DTR quirk, and also use interface 4 (makes no difference in practice but still..)

bjorn@miraculix:/usr/local/src/git/linux$ git grep 9625 v4.14.131 -- drivers/net/usb/qmi_wwan.c
v4.14.131:drivers/net/usb/qmi_wwan.c:   {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */

This should have worked in your first test, if my initial assumption about missing the DTR quirk had been correct.

The test without serial driver should have worked if you used /dev/cdc-wdm2 as QMI device. The qmi_wwan driver happily binds to the serial functions, but that doesn't mean they'll work as QMI devices. Only USB interface 4 will do that.

Just one final thought: Maybe the test with "05c6 9625" was messed up by an earlier attempt using "05c6 9025" as a reference? That would make further tests fail. New IDs are added to the end of the list, so adding the same ID twice or more is pointless.

You can read the current list using

cat /sys/bus/usb/drivers/qmi_wwan/new_id

(Note that any reference ID won't show up when you read the list, as it isn't stored anywhere)

Clearing one entry at a time:

echo 05c6 9025 >/sys/bus/usb/drivers/qmi_wwan/remove_id

You may have to repeat this if you had multiple entries in the list.

I've had some luck with this now and its responding to uqmi commands.

I applied the following patch and then issued "make clean" and "make V=s" again

--- a/drivers/net/usb/qmi_wwan.c
+++ b/drivers/net/usb/qmi_wwan.c
@@ -1025,7 +1025,7 @@
        {QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
        {QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
        {QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
-       {QMI_FIXED_INTF(0x05c6, 0x9025, 4)},    /* Alcatel-sbell ASB TL131 TDD LTE  (China Mobile) */
+       {QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)}, /* Alcatel-sbell ASB TL131 TDD LTE  (China Mobile) */
        {QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
        {QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
        {QMI_FIXED_INTF(0x05c6, 0x9031, 5)},

On first boot I also had to enable serial before uqmi would respond:

echo '05c6 9025 ff' > /sys/bus/usb-serial/drivers/option1/new_id

Now i'm getting:

root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-data-status
"disconnected"
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-imsi
"Not supported"
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --network-scan
"Invalid arguments given"
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --list-messages
[

]
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-imsi
"Not supported"
root@OpenWrt:/# uqmi -d /dev/cdc-wdm0 --get-signal-info
"Information unavailable"
root@OpenWrt:/#

I have a sim card in there, and its working fine on the original factory firmware.

I also added a new interface wwan0

config interface 'wwan'
        option proto 'wwan'
        option apn 'internet'
        option pincode '1234'
        option auto '0'

Then did "ifup wwan" which doesn't seem to work, it remains disconnected.

Hi @gareth41

I'm also interested in using OpenWRT on TL-MR6400 v3.
Did you make any progress since last post?

did u manage to operate LTE modem?

2 posts were split to a new topic: TL-MR6400 v5 - can't start LTE modem

String marked "-" mast be deleted and string marked "+" mast be added. Is this right?

What is the command to do this?

How far did you get with this? I have a boxed v3 which I would like to deploy :slight_smile:

APN may need changing to what the operator/SIM mandates, like internet.blah.co
Shouldn't proto be something else?

Hi guy

https://mega.nz/folder/QnAVkYbJ#lTmIeHsGZtbjnx4HySALYA

i compiled stable 21.02.0 for MR6400v3... you can try this firmware...
i add few line in qmi.sh & qmi.js... Add script for WAN & SIGNAL STRENGTH led
Don't forget to reboot after finish flashing...

let me know if it working...

Thank You