Hello everyone, I recently bought this AP
According to the seller it is possible to write the open-wrt on it, but it does not give any help, just sent me the link.
I'm thinking of downloading the .bin and uploading it directly from the web page, but I don't know if it would work.
Does anyone have any idea how to record the openwrt?
ps: I have access to the original fw ssh root
since it's root, are you sure it isn't running OpenWRT already ?
yes, i'm sure, it's possible to have root access to the original fw.
How to:
The stock firmware has an SSH daemon but the root password is not known, and does not match the web GUI's password. However, the following procedure allows setting it to a known one and gaining SSH access to the device.
1. Using the stock web GUI, under `System → Tools → Export Settings`, download a backup of the configuration to your computer
2. The generated file, called `bakup.file` [sic], is actually a `tar.gz` file containing the `etc` folder and some configuration files
3. Extract the backup and edit the `etc/shadow` file
4. Replace the first line of `etc/shadow` by `root:$1$pjKB26GF$T9mfHI/C6JGX9rQ8CYDPl/:18270:0:99999:7:::` to set root password to “openwrt”
5. Repack the modified `etc` directory as a `tar.gz.` file, and rename it to `bakup.file`
6. Using the stock web GUI, use `System → Tools → Import Settings` to upload the modified backup
7. The device will reboot and the password will be `openwrt`
Well, the Openwrt link you received is for 3 year old FWs, and there is no
device specific image for your hardware.
I wouldn't attempt an upgrade before I knew I'd be able to roll back, or rescue
the unit using TFTP or serial console.
Recent FW versions for the same arch.
I would however start by verifying the flash size of the E455AC.
Thanks for the help, how can we know the size of the flash?
try
df -kh
or
/cat/proc/mtd
flash should be 16 MB
ram 64 MB
root@COMFAST:~# df -kh
Filesystem Size Used Available Use% Mounted on
rootfs 568.3G 132.7G 435.6G 23% /
/dev/root 39.3G 39.3G 0 100% /rom
tmpfs 14.0T 235.6G 13.7T 2% /tmp
/dev/mtdblock6 568.3G 132.7G 435.6G 23% /overlay
overlayfs:/overlay 568.3G 132.7G 435.6G 23% /
tmpfs 239.3G 0 239.3G 0% /dev
root@COMFAST:~# cat /proc/mtd
dev: size erasesize name
mtd0: 00030000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00010000 00010000 "factory"
mtd3: 00770000 00010000 "firmware"
mtd4: 0012c41b 00010000 "kernel"
mtd5: 00643be5 00010000 "rootfs"
mtd6: 00130000 00010000 "rootfs_data"
mtd7: 00040000 00010000 "configs"
mtd8: 00000000 00000000 "reserve"
I think I saw this information on the manufacturer's website
On the page of this device on AliExpress is declared that it is OpenWRT-based (with U-BOOT loader) and can be reflashed with OpenWRT and DD-WRT. But it's shipped with proprietary interface.
So, I hope it's really possible to reflash because original FW is really awful: it's not possible to change encryption type, hide SSID and many more. Wireless channel not actually changing event you have changed it in UI. Event more, UI works only with IE, in Chrome you cannot change advanced wireless settings!
Seller offers some patch for this device, I asked him to share it to me.
in fact the interface is pretty bad, the seller's patch is just that link I sent.
The settings I managed to use in chrome, I just disabled adblock.
Seller sent me this link:
how is the process of upgrading to openwrt
Hello everyone, nothing new at the moment.
Great topic, I'll follow
I will try a few things with the serial port, if I succeed notice.
Hello everyone again, I managed to make the connection via serial at speed 115200, and this was the result:
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2020.12.29 13:54:40 =~=~=~=~=~=~=~=~=~=~=~=
[ 0.840000] console [ttyS0] enabled
[ 0.840000] console [ttyS0] enabled
[ 0.850000] bootconsole [early0] disabled
[ 0.850000] bootconsole [early0] disabled
[ 0.860000] spi-mt7621 10000b00.spi: sys_freq: 193333333
[ 0.880000] m25p80 spi32766.0: found w25q128, expected en25qh64a
[ 0.880000] m25p80 spi32766.0: w25q128 (16384 Kbytes)
[ 0.890000] m25p80 spi32766.0: using chunked io
[ 0.890000] 6 ofpart partitions found on MTD device spi32766.0
[ 0.900000] Creating 6 MTD partitions on "spi32766.0":
[ 0.900000] 0x000000000000-0x000000030000 : "u-boot"
[ 0.910000] 0x000000030000-0x000000040000 : "u-boot-env"
[ 0.920000] 0x000000040000-0x000000050000 : "factory"
[ 0.920000] 0x000000050000-0x0000007c0000 : "firmware"
[ 0.970000] 2 uimage-fw partitions found on MTD device firmware
[ 0.970000] 0x000000050000-0x00000017c41b : "kernel"
[ 0.980000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.990000] 0x00000017c41b-0x0000007c0000 : "rootfs"
[ 1.000000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 1.010000] mtd: device 5 (rootfs) set to be root filesystem
[ 1.020000] 1 squashfs-split partitions found on MTD device rootfs
[ 1.020000] 0x000000690000-0x0000007c0000 : "rootfs_data"
[ 1.030000] 0x0000007c0000-0x000000800000 : "configs"
[ 1.040000] 0x000001000000-0x000002000000 : "reserve"
[ 1.040000] mtd: partition "reserve" is out of reach -- disabled
[ 1.060000] ralink_soc_eth 10100000.ethernet eth0: ralink at 0xb0100000, irq 5
[ 1.070000] mt7621_wdt 10000120.watchdog: Initialized
[ 1.070000] TCP: cubic registered
[ 1.080000] NET: Registered protocol family 17
[ 1.080000] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 1.090000] Bridge firewalling registered
[ 1.100000] 8021q: 802.1Q VLAN Support v1.8
[ 1.120000] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[ 1.130000] Freeing unused kernel memory: 200K (8035e000 - 80390000)
[ 3.040000] init: Console is alive
[ 3.040000] init: - watchdog -
[ 6.070000] init: - preinit -
[ 7.310000] rt305x-esw 10110000.esw: link changed 0x00
[ 7.360000] random: procd urandom read with 11 bits of entropy available
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 10.820000] jffs2: notice: (398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (1 dead, 0 orphan) found.
[ 10.840000] mount_root: switching to jffs2 overlay
[ 10.880000] procd: - early -
[ 10.880000] procd: - watchdog -
[ 11.630000] procd: - ubus -
[ 12.650000] procd: - init -
Please press Enter to activate this console.
[ 14.510000] gre: GRE over IPv4 demultiplexor driver
[ 14.520000] ip_gre: GRE over IPv4 tunneling driver
[ 14.530000] i2c /dev entries driver
[ 14.550000] u32 classifier
[ 14.560000] input device check on
[ 14.560000] Actions configured
[ 14.560000] Mirror/redirect action on
[ 14.570000] nf_conntrack version 0.5.0 (956 buckets, 3824 max)
[ 14.610000] Ebtables v2.0 registered
[ 14.620000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 14.710000] Netfilter messages via NETLINK v0.30.
[ 14.780000] xt_time: kernel timezone is -0000
[ 14.800000] ctnetlink v0.93: registering with nfnetlink.
[ 14.820000] PPP generic driver version 2.4.2
[ 14.820000] PPP MPPE Compression module registered
[ 14.830000] NET: Registered protocol family 24
[ 23.660000] device eth0.2 entered promiscuous mode
[ 23.670000] device eth0 entered promiscuous mode
[ 23.690000] br-lan: port 1(eth0.2) entered forwarding state
[ 23.690000] br-lan: port 1(eth0.2) entered forwarding state
[ 23.750000] device eth0.1 entered promiscuous mode
[ 23.750000] br-lan: port 2(eth0.1) entered forwarding state
[ 23.760000] br-lan: port 2(eth0.1) entered forwarding state
[ 25.690000] br-lan: port 1(eth0.2) entered forwarding state
[ 25.760000] br-lan: port 2(eth0.1) entered forwarding state
configs:do check configs
[ 34.050000] register rt2860
[ 34.070000]
[ 34.070000]
[ 34.070000] === pAd = c0781000, size = 2104944 ===
[ 34.070000]
[ 34.080000] <-- RTMPAllocTxRxRingMemory, Status=0
[ 34.080000] <-- RTMPAllocAdapterBlock, Status=0
[ 34.090000] pAd->CSRBaseAddress =0xc0680000, csr_addr=0xc0680000!
[ 34.090000] device_id =0x7662
[ 34.100000] ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
[ 34.110000] chip_id1=, chip_id2=7612, pAd->MACVersion=0x76623000
[ 34.110000] chip_id1=0x0, chip_id2=0x7612, pAd->MACVersion=0x76623000
[ 34.120000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=5
[ 34.130000] RtmpEepromGetDefault::e2p_dafault=2
[ 34.130000] NVM is efuse and the information is too less to bring up the interface
[ 34.140000] Force to use Flash mode
[ 34.140000] NVM is FLASH mode (pAd->flash_offset = 0x48000)
[ 34.150000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 34.200000] build time =
[ 34.200000] 20141115060606a
[ 34.210000] rom patch for E3 IC
[ 34.210000]
[ 34.210000] platform =
[ 34.210000] ALPS
[ 34.220000] hw/sw version =
[ 34.220000] ŠŠ
[ 34.220000] patch version =
[ 34.220000]
[ 34.240000] FW Version:0.0.00 Build:1
[ 34.240000] Build Time:201607111443____
[ 34.240000] fw for E3 IC
[ 34.260000] RX[0] DESC a1cba000 size = 4096
[ 34.270000] RX[1] DESC a1cbb000 size = 4096
[ 34.280000] E2pAccessMode=2
[ 34.290000] cfg_mode=14
[ 34.290000] cfg_mode=14
[ 34.290000] wmode_band_equal(): Band Not Equal!
[ 34.300000] APSDCapable[0]=0
[ 34.310000] APSDCapable[1]=0
[ 34.310000] APSDCapable[2]=0
[ 34.310000] APSDCapable[3]=0
[ 34.310000] APSDCapable[4]=0
[ 34.320000] APSDCapable[5]=0
[ 34.320000] APSDCapable[6]=0
[ 34.320000] APSDCapable[7]=0
[ 34.330000] APSDCapable[8]=0
[ 34.330000] APSDCapable[9]=0
[ 34.330000] APSDCapable[10]=0
[ 34.340000] APSDCapable[11]=0
[ 34.340000] APSDCapable[12]=0
[ 34.340000] APSDCapable[13]=0
[ 34.340000] APSDCapable[14]=0
[ 34.350000] APSDCapable[15]=0
[ 34.350000] default ApCliAPSDCapable[0]=0
[ 34.740000] Key1Str is Invalid key length(0) or Type(1)
[ 34.740000] Key1Str is Invalid key length(0) or Type(1)
[ 34.750000] Key1Str is Invalid key length(0) or Type(1)
[ 34.760000] Key1Str is Invalid key length(0) or Type(1)
[ 34.760000] Key1Str is Invalid key length(0) or Type(1)
[ 34.770000] Key1Str is Invalid key length(0) or Type(1)
[ 34.770000] Key1Str is Invalid key length(0) or Type(1)
[ 34.780000] Key1Str is Invalid key length(0) or Type(1)
[ 34.780000] Key2Str is Invalid key length(0) or Type(1)
[ 34.790000] Key2Str is Invalid key length(0) or Type(1)
[ 34.790000] Key2Str is Invalid key length(0) or Type(1)
[ 34.800000] Key2Str is Invalid key length(0) or Type(1)
[ 34.810000] Key2Str is Invalid key length(0) or Type(1)
[ 34.810000] Key2Str is Invalid key length(0) or Type(1)
[ 34.820000] Key2Str is Invalid key length(0) or Type(1)
[ 34.820000] Key2Str is Invalid key length(0) or Type(1)
[ 34.830000] Key3Str is Invalid key length(0) or Type(1)
[ 34.830000] Key3Str is Invalid key length(0) or Type(1)
[ 34.840000] Key3Str is Invalid key length(0) or Type(1)
[ 34.840000] Key3Str is Invalid key length(0) or Type(1)
[ 34.850000] Key3Str is Invalid key length(0) or Type(1)
[ 34.860000] Key3Str is Invalid key length(0) or Type(1)
[ 34.860000] Key3Str is Invalid key length(0) or Type(1)
[ 34.870000] Key3Str is Invalid key length(0) or Type(1)
[ 34.870000] Key4Str is Invalid key length(0) or Type(1)
[ 34.880000] Key4Str is Invalid key length(0) or Type(1)
[ 34.880000] Key4Str is Invalid key length(0) or Type(1)
[ 34.890000] Key4Str is Invalid key length(0) or Type(1)
[ 34.890000] Key4Str is Invalid key length(0) or Type(1)
[ 34.900000] Key4Str is Invalid key length(0) or Type(1)
[ 34.910000] Key4Str is Invalid key length(0) or Type(1)
[ 34.910000] Key4Str is Invalid key length(0) or Type(1)
[ 34.960000] 1. Phy Mode = 49
[ 34.970000] get_chl_grp:illegal channel (167)
[ 34.970000] get_chl_grp:illegal channel (167)
[ 34.980000] get_chl_grp:illegal channel (169)
[ 34.980000] get_chl_grp:illegal channel (169)
[ 34.990000] get_chl_grp:illegal channel (171)
[ 34.990000] get_chl_grp:illegal channel (171)
[ 35.000000] /home/malinan/work/new/OPENWRT/trunk/build_dir/target-mipsel_24kec+dsp_uClibc-0.9.33.2/linux-ramips_mt7628/mt76x2e-3.0.4.0/rlt_wifi_ap/../rlt_wifi/chips/mt76x2.c:2899 assert (ad->TxPower[choffset].Channel == 42)failed
[ 35.020000] Country Region from e2p = ff00
[ 35.020000] mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=0, temp_tx_alc_enable=0
[ 35.030000] mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=0, ePA_type=3
[ 35.040000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=0, low_temp_slope=0
[ 35.040000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0
[ 35.050000] mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=0, tc_upper_bound=0
[ 35.060000] mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0
[ 35.070000] mt76x2_get_external_lna_gain::LNA type=0x11, BLNAGain=0x0, ALNAGain0=0x0, ALNAGain1=0x0, ALNAGain2=0x0
[ 35.080000] 2. Phy Mode = 49
[ 35.080000] 3. Phy Mode = 49
[ 35.090000] andes_pci_fw_init
[ 35.090000] 0x1300 = 00073200
[ 35.120000] AntCfgInit: primary/secondary ant 0/1
[ 35.120000] andes_load_cr:cr_type(2)
[ 35.140000] ChipStructAssign(): MT76x2 hook !
[ 35.140000] @@@ BuildChannel # 36 :: Pwr0 = 20, Pwr1 =31, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 40 :: Pwr0 = 20, Pwr1 =31, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 44 :: Pwr0 = 20, Pwr1 =31, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 48 :: Pwr0 = 20, Pwr1 =31, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 52 :: Pwr0 = 25, Pwr1 =33, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 56 :: Pwr0 = 25, Pwr1 =33, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 60 :: Pwr0 = 25, Pwr1 =33, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 64 :: Pwr0 = 25, Pwr1 =33, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 149 :: Pwr0 = 16, Pwr1 =25, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 153 :: Pwr0 = 16, Pwr1 =25, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 157 :: Pwr0 = 16, Pwr1 =25, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 161 :: Pwr0 = 16, Pwr1 =25, Flags = c0, RemainingTimeForUse=0
@@@ BuildChannel # 165 :: Pwr0 = 16, Pwr1 =25, Flags = 0, RemainingTimeForUse=0
RTMPSetPhyMode: channel is out of range, use first channel=36
[ 35.240000] MCS Set = ff ff 00 00 01
[ 35.630000] mt76x2_bbp_adjust():rf_bw=1, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=36
[ 35.720000] APStartUp(): AP Set CentralFreq at 38(Prim=36, HT-CentCh=38, VHT-CentCh=36, BBP_BW=1)
[ 35.750000] mt76x2_calibration(channel = 38)
[ 36.130000] Main bssid = 20:0d:b0:7a:27:59
[ 36.140000] mt76x2_reinit_agc_gain:original agc_vga0 = 0x5c, agc_vga1 = 0x5c
[ 36.140000] mt76x2_reinit_agc_gain:updated agc_vga0 = 0x5c, agc_vga1 = 0x5c
[ 36.150000] mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x28, hi_lna1 = 0x28
[ 36.160000] mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x28, hi_lna1 = 0x28
[ 36.170000] original vga value(chain0) = 5c
[ 36.170000] original vga value(chain1) = 5c
[ 36.170000] <==== rt28xx_init, Status=0
[ 36.180000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.200000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.200000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.210000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.220000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.230000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.230000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
[ 36.250000] get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=apclii
[ 36.260000] RTMPDrvOpen(1):Check if PDMA is idle!
[ 36.260000] RTMPDrvOpen(2):Check if PDMA is idle!
[ 36.960000] device rai0 entered promiscuous mode
[ 36.970000] br-lan: port 3(rai0) entered forwarding state
[ 36.980000] br-lan: port 3(rai0) entered forwarding state
[ 37.660000] device rai7 entered promiscuous mode
[ 38.980000] br-lan: port 3(rai0) entered forwarding state
[ 40.050000]
[ 40.050000]
[ 40.050000] === pAd = c0b35000, size = 1242688 ===
[ 40.050000]
[ 40.060000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
[ 40.060000] <-- RTMPAllocAdapterBlock, Status=0
[ 40.070000] RtmpChipOpsHook(492): Not support for HIF_MT yet!
[ 40.080000] mt7628_init()-->
[ 40.080000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
[ 40.080000] e2.bin mt7628_init(1166)::(2), pChipCap->fw_len(63888)
[ 40.090000] mt_bcn_buf_init(218): Not support for HIF_MT yet!
[ 40.100000] <--mt7628_init()
[ 40.120000] TX_BCN DESC a15d4000 size = 320
[ 40.120000] RX[0] DESC a15d7000 size = 1024
[ 40.130000] RX[1] DESC a15d8000 size = 1024
[ 40.140000] E2pAccessMode=0
[ 40.150000] cfg_mode=9
[ 40.150000] cfg_mode=9
[ 40.150000] wmode_band_equal(): Band Equal!
[ 40.160000] AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
[ 40.170000] APSDCapable[0]=1
[ 40.170000] APSDCapable[1]=1
[ 40.170000] APSDCapable[2]=1
[ 40.180000] APSDCapable[3]=1
[ 40.180000] APSDCapable[4]=1
[ 40.180000] APSDCapable[5]=1
[ 40.190000] APSDCapable[6]=1
[ 40.190000] APSDCapable[7]=1
[ 40.190000] APSDCapable[8]=1
[ 40.190000] APSDCapable[9]=1
[ 40.200000] APSDCapable[10]=1
[ 40.200000] APSDCapable[11]=1
[ 40.200000] APSDCapable[12]=1
[ 40.210000] APSDCapable[13]=1
[ 40.210000] APSDCapable[14]=1
[ 40.210000] APSDCapable[15]=1
[ 40.220000] default ApCliAPSDCapable[0]=1
[ 40.600000] Key1Str is Invalid key length(0) or Type(1)
[ 40.610000] Key1Str is Invalid key length(0) or Type(1)
[ 40.610000] Key1Str is Invalid key length(0) or Type(1)
[ 40.620000] Key1Str is Invalid key length(0) or Type(1)
[ 40.630000] Key2Str is Invalid key length(0) or Type(1)
[ 40.630000] Key2Str is Invalid key length(0) or Type(1)
[ 40.640000] Key2Str is Invalid key length(0) or Type(1)
[ 40.640000] Key2Str is Invalid key length(0) or Type(1)
[ 40.650000] Key3Str is Invalid key length(0) or Type(1)
[ 40.650000] Key3Str is Invalid key length(0) or Type(1)
[ 40.660000] Key3Str is Invalid key length(0) or Type(1)
[ 40.660000] Key3Str is Invalid key length(0) or Type(1)
[ 40.670000] Key4Str is Invalid key length(0) or Type(1)
[ 40.680000] Key4Str is Invalid key length(0) or Type(1)
[ 40.680000] Key4Str is Invalid key length(0) or Type(1)
[ 40.690000] Key4Str is Invalid key length(0) or Type(1)
[ 40.700000] [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 40.710000] [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 40.900000] 88:5c:50:fa:68:c5:f5:d0:73:e0:76:9b:14:79:05:66:
[ 40.910000] 45:6a:8e:2a:02:72:05:56:d8:23:78:5b:84:72:0e:59:
[ 40.920000]
[ 40.960000] load fw image from fw_header_image
[ 40.960000] AndesMTLoadFwMethod1(2190)::pChipCap->fw_len(63888)
[ 40.970000] FW Version:20151201
[ 40.970000] FW Build Date:20151201183641
[ 41.000000] CmdAddressLenReq:(ret = 0)
[ 41.010000] CmdFwStartReq: override = 1, address = 1048576
[ 41.010000] CmdStartDLRsp: WiFI FW Download Success
[ 41.020000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
[ 41.020000] efuse_probe: efuse = 10000002
[ 41.030000] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=4
[ 41.030000] RtmpEepromGetDefault::e2p_dafault=2
[ 41.040000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
[ 41.050000] NVM is FLASH mode
[ 41.050000] 1. Phy Mode = 14
[ 41.220000] Country Region from e2p = ffff
[ 41.220000] tssi_1_target_pwr_g_band = 32
[ 41.220000] 2. Phy Mode = 14
[ 41.230000] 3. Phy Mode = 14
[ 41.230000] NICInitPwrPinCfg(11): Not support for HIF_MT yet!
[ 41.240000] NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
[ 41.240000] mt_mac_init()-->
[ 41.250000] MtAsicInitMac()-->
[ 41.250000] mt7628_init_mac_cr()-->
[ 41.250000] MtAsicSetMacMaxLen(1281): Set the Max RxPktLen=1024!
[ 41.260000] <--mt_mac_init()
[ 41.260000] WTBL Segment 1 info:
[ 41.270000] MemBaseAddr/FID:0x28000/0
[ 41.270000] EntrySize/Cnt:32/128
[ 41.270000] WTBL Segment 2 info:
[ 41.280000] MemBaseAddr/FID:0x40000/0
[ 41.280000] EntrySize/Cnt:64/128
[ 41.290000] WTBL Segment 3 info:
[ 41.290000] MemBaseAddr/FID:0x42000/64
[ 41.290000] EntrySize/Cnt:64/128
[ 41.300000] WTBL Segment 4 info:
[ 41.300000] MemBaseAddr/FID:0x44000/128
[ 41.300000] EntrySize/Cnt:32/128
[ 41.310000] AntCfgInit(2940): Not support for HIF_MT yet!
[ 41.310000] MCS Set = ff ff 00 00 01
[ 41.320000] MtAsicSetChBusyStat(866): Not support for HIF_MT yet!
[ 41.320000] [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
[ 41.330000] [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 41.330000] [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
[ 41.340000] [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
[ 41.350000] [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0
[ 41.350000] [PMF]ap_pmf_init:: apidx=4, MFPC=0, MFPR=0, SHA256=0
[ 41.360000] [PMF]ap_pmf_init:: apidx=5, MFPC=0, MFPR=0, SHA256=0
[ 41.370000] [PMF]ap_pmf_init:: apidx=6, MFPC=0, MFPR=0, SHA256=0
[ 41.370000] [PMF]ap_pmf_init:: apidx=7, MFPC=0, MFPR=0, SHA256=0
[ 41.380000] [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 41.380000] MtAsicSetRalinkBurstMode(3052): Not support for HIF_MT yet!
[ 41.390000] MtAsicSetPiggyBack(801): Not support for HIF_MT yet!
[ 41.420000] reload DPD from flash , 0x9F = [c600] doReload bit7[0]
[ 41.430000] CmdLoadDPDDataFromFlash: Channel = 5, DoReload = 0
[ 41.430000] MtAsicSetTxPreamble(3031): Not support for HIF_MT yet!
[ 41.440000] CmdSlotTimeSet:(ret = 0)
[ 41.450000] MtAsicAddSharedKeyEntry(1348): Not support for HIF_MT yet!
[ 41.460000] MtAsicAddSharedKeyEntry(1348): Not support for HIF_MT yet!
[ 41.460000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
[ 41.470000] Main bssid = 20:0d:b0:7a:27:58
[ 41.470000] <==== rt28xx_init, Status=0
[ 41.500000] @@@ ed_monitor_init : ===>
[ 41.500000] @@@ ed_monitor_init : <===
[ 41.510000] mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f
[ 41.510000] WiFi Startup Cost (ra0): 1.390s
[ 41.870000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[ 41.870000] [PMF]ApCli_Open:: MFPC=0, MFPR=0, SHA256=0
[ 42.310000] device ra0 entered promiscuous mode
[ 42.320000] br-lan: port 5(ra0) entered forwarding state
[ 42.320000] br-lan: port 5(ra0) entered forwarding state
[ 42.350000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[ 42.360000] ##### mbss_cr_enable, BssId = 7
[ 42.370000] AddTxSType: already registered TxSType (PID = 32, Format = 0
[ 42.440000] [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
[ 42.470000] Rcv Wcid(1) AddBAReq
[ 42.470000] Start Seq = 00000004
[ 42.530000] MtAsicAddSharedKeyEntry(1348): Not support for HIF_MT yet!
[ 42.810000] device ra7 entered promiscuous mode
[ 44.320000] br-lan: port 5(ra0) entered forwarding state
[ 62.760000] random: nonblocking pool is initialized
Any idea?
get the model of every chip on the board
record the partitions from the kernel log
have a copy of the source code on a linux machine using git
https://openwrt.org/docs/guide-developer/quickstart-build-images
use this and other information to make your DTS file which goes in this folder
https://github.com/openwrt/openwrt/tree/master/target/linux/ramips/dts
add a basic profile to the makefile
https://github.com/openwrt/openwrt/blob/master/target/linux/ramips/image/mt7621.mk
build an initramfs image:
in make menuconfig
select the profile you made
select Target Image --> ramdisk
continue build as usual (following the guide)
at the end you will have an initramfs-kernel.bin
figure out how to load that image over TFTP and boot it
(if it is uboot, the commands are tftpboot and bootm)
look at other boards DTS files and profiles for examples if you need...
thanks for the feedback, now i have a lot of information i will try to follow the steps.
