EAP225-Outdoor restore for a Windows user

Dardania · May 26, 2021, 6:12am

Good morning to all the community!
I've made a search on the forum but at this stage I am not able to continue.
I've bricked my TP-LINK EAP225-outdoor during firmware upgrage and now led green blink but I am not able to connect.
I am a windows10 user so I was able to connect the USB to the mother board and read bootloader (below).
I ask the community if someone could help me in how to proceed for restore the device, because I have tried to " upload initramfs via built-in TFTP client..." found at
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=4f86edf477edbc0f20b5a49a69f658fa82158284

but without success because maybe I am doing something wrong on my PC and so other steps remain for me a challenge.
Thanks for your help

frollic · May 26, 2021, 7:46am

The most common cause of failing TFTP transfers is the firewall.

Make sure it's been disabled.

Dardania · May 26, 2021, 8:48pm

I have add exception in firewall but without success.
At the end of bootloader in the Putty console if I press any key it will show always the same days when it was bricked asking for user login:

EAP225-Outdoor mips #1 Tue Mar 16 18:30:42 CST 2021 (none)
EAP225-Outdoor login:

Any thought?

svanheule · May 26, 2021, 9:24pm

Can you post the full boot log? (maybe in a [details] tag)

Dardania · May 26, 2021, 9:51pm

Good evening and thanks for your help.

U-Boot 1.1.4--LSDK-10.2-00082-4 (Jul 19 2017 - 13:54:13)

board956x - Dragonfly 1.0DRAM:
sri
ath_ddr_initial_config(287): (ddr2 init)
ath_ddr_initial_config: DDR_EMR2_ADDRESS=0x180000bc, EMR2 value=0x80
ath_sys_frequency: ref_clk 25000000
ath_sys_frequency: cpu 775 ddr 650 ahb 258
Tap values = (0x10, 0x10, 0x10, 0x10)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 164k for U-Boot at: 87fd4000
Reserving 192k for malloc() at: 87fa4000
Reserving 44 Bytes for Board Info at: 87fa3fd4
Reserving 36 Bytes for Global Data at: 87fa3fb0
Reserving 128k for boot params() at: 87f83fb0
Stack Pointer at: 87f83f98
Now running in RAM - U-Boot at: 87fd4000
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Setting 0x181162c0 to 0x28502100
Hit Ctrl+B to stop autoboot:  0
Loading .text @ 0x80306850 (12496 bytes)
Loading .rodata.str1.4 @ 0x80309920 (676 bytes)
Loading .data @ 0x80309bd0 (1287217 bytes)
Clearing .bss @ 0x80444010 (4202512 bytes)
## Starting application at 0x80306850 ...
BOOT CONFIG:     80208482
zimage at:     80309BD0 80444001
Uncompressing Linux at load address 80060000
Now, booting the kernel...
[    0.000000] Linux version 3.3.8 (jenkins@sohoiapbuild) (gcc version 4.3.3 (GCC) ) #1 Tue Mar 16 18:30:42 CST 2021
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 00019750 (MIPS 74Kc)
[    0.000000] SoC: Qualcomm Atheros QCA956X rev 0
[    0.000000] Clocks: CPU:775.000MHz, DDR:650.000MHz, AHB:258.333MHz, Ref:25.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone PFN ranges:
[    0.000000]   Normal   0x00000000 -> 0x00008000
[    0.000000] Movable zone start PFN for each node
[    0.000000] Early memory PFN ranges
[    0.000000]     0: 0x00000000 -> 0x00008000
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line:  0x9f040000 console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/init mtdparts=spi0.0:128k(u-boot),64k(pation-table),64k(product-info),1536k(kernel),13568k(rootfs),192k(config),512k(mutil-log),256k(oops),64k(ART) mem=128M board=AP152
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 126596k/131072k available (2034k kernel code, 4476k reserved, 500k data, 180k init, 0k highmem)
[    0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:83
[    0.000000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 512
[    0.070000] NET: Registered protocol family 16
[    0.070000] gpiochip_add: registered GPIOs 0 to 22 on device: ath79
[    0.080000] MIPS: machine is Qualcomm Atheros AP152 reference board
[    0.600000] Max resets limit reached exiting...
[    0.610000]
[    0.610000] WLAN firmware dump buffer allocation of 2097152 bytes @ address 0x87a00000- SUCCESS !!!
[    0.620000] registering PCI controller with io_map_base unset
[    0.830000] bio: create slab <bio-0> at 0
[    0.830000] PCI host bridge to bus 0000:00
[    0.830000] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    0.840000] pci_bus 0000:00: root bus resource [io  0x0001]
[    0.840000] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    0.850000] pci 0000:00:00.0: using irq 40 for pin 1
[    0.850000] Switching to clocksource MIPS
[    0.860000] NET: Registered protocol family 2
[    0.860000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.860000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    0.870000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    0.870000] TCP: Hash tables configured (established 4096 bind 4096)
[    0.880000] TCP reno registered
[    0.880000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.890000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.890000] NET: Registered protocol family 1
[    0.910000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.910000] msgmni has been set to 247
[    0.920000] io scheduler noop registered
[    0.920000] io scheduler deadline registered (default)
[    0.930000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.950000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.960000] console [ttyS0] enabled, bootconsole disabled
[    0.960000] console [ttyS0] enabled, bootconsole disabled
[    0.970000] m25p80 spi0.0: m25p80 (16384 Kbytes)
[    0.980000] 9 cmdlinepart partitions found on MTD device spi0.0
[    0.980000] Creating 9 MTD partitions on "spi0.0":
[    0.990000] 0x000000000000-0x000000020000 : "u-boot"
[    0.990000] 0x000000020000-0x000000030000 : "pation-table"
[    1.000000] 0x000000030000-0x000000040000 : "product-info"
[    1.010000] 0x000000040000-0x0000001c0000 : "kernel"
[    1.010000] 0x0000001c0000-0x000000f00000 : "rootfs"
[    1.020000] mtd: partition "rootfs" set to be root filesystem
[    1.030000] 0x000000f00000-0x000000f30000 : "config"
[    1.030000] 0x000000f30000-0x000000fb0000 : "mutil-log"
[    1.040000] 0x000000fb0000-0x000000ff0000 : "oops"
[    1.050000] 0x000000ff0000-0x000001000000 : "ART"
[    1.060000] ag71xx_mdio: probed
[    1.060000] eth0: Atheros AG71xx at 0xb9000000, irq 4
[    1.620000] ar8033_config_init 132 0xe=6
[    1.620000] ar8033_config_init 135 0xe=0
[    1.630000] ar8033_config_init 142 0xe=3732
[    1.630000] ar8033_config_init 146 0xe=1732
[    1.640000] ar8033_config_init 152 0x00=1000
[    1.640000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0:04 [uid=004dd074, driver=Qualcomm Atheros AR8033 PHY]
[    1.650000] TCP cubic registered
[    1.660000] NET: Registered protocol family 17
[    1.660000] 8021q: 802.1Q VLAN Support v1.8
[    1.660000] ### of_selftest(): No testcase data in device tree; not running tests
[    1.670000] tty_open: Opening ttyS0 and default set O_NONBLOCK...
[    1.680000] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[    1.690000] Freeing unused kernel memory: 180k freed
init started: BusyBox v1.20.2 (2021-03-16 18:37:03 CST)
starting pid 216, tty '': '/etc/rc.d/rcS >/dev/[    2.280000] tty_open: Opening ttyS0 and default set O_NONBLOCK...
console 2>&1'
[NM_Debug](main) 01042: getopt_long: c=C

[NM_Debug](main) 01042: getopt_long: c=▒

[NM_Debug](main) 01125: excute the command: start=====>

[NM_Debug](nm_lock_init) 00149: create semaphore...
[NM_Debug](nm_lib_getProductInfoFromNvram) 00928: productinfo from NVRAM is (EAP225-Outdoor(TP-Link|UN|AC1200-D):1.0
key=BgIAAAAkAABSU0ExAAQAAAEAAQDZtUNzD6KsxO4Tfx/Sp8S7w8TwPWwoppXy77wSPNs5WoV+Wr4kh09nu70vHVmSPji5KFUG+hmRjapsJsIJj+M0Zmd4EycKY8r0Ea3D4XO/uvloX4VHVPsDZkm8Krian5iNy6BgApVlebx0zQxto0GkgvPBq1nhoZxJNapLghGO7w==
rsaKey=BgIAAACkAABSU0ExAAQAAAEAAQDZaGCNzHjzrgNoCjyHKa0TIkgmqE5kheNhZHs23TmAbHXN0dFwdNOqqDOTmTdoN1+zW6KY3YkkwNypoZbDTR3sKdSdIDTNnftfHhRAlR9l4lNnnvfbUWRDqaGD2nAkdasXXfD5c23COMvAEjLJXzwqZjNmj27ZgrrTlH9SoDPerg==
HWID=25D5A049380DDBA7AF3A96CC2DCB5986
)

This board use 3.3.8
[    2.720000] mtdoops: Attached to MTD device 7
insmod: can't insert '/lib/modules/3.3.8/kernel/xt_iprange.ko': No such file or directory
[    2.830000] xt_time: kernel timezone is -0000
[    2.840000] nf_conntrack version 0.5.0 (1980 buckets, 15840 max)
[    2.990000] ip_tables: (C) 2000-2006 Netfilter Core Team
[    3.110000] Ebtables v2.0 registered
insmod: can't insert '/lib/modules/3.3.8/kernel/ts_kmp.ko': No such file or directory
insmod: can't insert '/lib/modules/3.3.8/kernel/br_filter.ko': No such file or directory
[    3.180000] ---portal module open ok
[    3.190000] Register vlan_manage hooks success.
insmod: can't insert '/lib/modules/3.3.8/kernel/statistics.ko': No such file or directory
[    3.240000] [Debug gpio_parse_conf:271] Open File /etc/EAP225-Outdoor_1.0/gpio.conf SUCCESS!!
[    3.260000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 14, readCount 256
[    3.270000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 44, readCount 256
[    3.280000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 6 , readCount 256
[    3.290000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 7 , readCount 256
[    3.290000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 2 , readCount 256
[    3.300000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 7 , readCount 256
[    3.310000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 44, readCount 256
[    3.320000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 6 , readCount 256
[    3.320000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 7 , readCount 256
[    3.330000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 2 , readCount 256
[    3.340000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 7 , readCount 256
[    3.350000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 44, readCount 256
[    3.360000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 7 , readCount 247
[    3.360000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 6 , readCount 240
[    3.370000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 6 , readCount 234
[    3.380000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 6 , readCount 228
[    3.390000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 2 , readCount 222
[    3.400000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 51, readCount 220
[    3.400000] [Debug gpio_parse_conf:360] Ignore line (0), skipLen 44, readCount 169
[    3.410000] [Debug gpio_parse_conf:388] GPIO Parse OK:  led_green   led(1) low (0) low (0) 7
[    3.420000] [Debug gpio_parse_conf:388] GPIO Parse OK:  led_yellow  led(1) low (0) high(1) 9
[    3.430000] [Debug gpio_parse_conf:388] GPIO Parse OK:  btn_reset   btn(2) low (0) high(1) 2
[    3.440000] [Debug btn_netlink_init:179] btn: create netlink socket SUCCESS.
[    3.440000] [Debug wdt_module_init:249] Create watchdog proc dir SUCCESS.
[    3.450000] [Debug led_entry_handler:771] Create led_green   proc dir SUCCESS.
[    3.460000] [Debug led_entry_handler:771] Create led_yellow  proc dir SUCCESS.
[    3.470000] [Debug btn_entry_handler:857] Init button: btn_reset 2 2 0 success.
[    3.530000] rate_limit: module license 'BSD' taints kernel.
[    3.540000] Disabling lock debugging due to kernel taint
wlanmonitor is not supported.
ap_watchdog is not supported.
Japan disaster mode is not suppo[    3.650000] tty_open: Opening ttyS0 and default set O_NONBLOCK...
rted
starting pid 343, tty '': '/sbin/getty ttyS0 115200'

 (none) mips #1 Tue Mar 16 18:30:42 CST 2021 (none)
(none) login: Into util_dbg_setMod, pModName(all), enable(1)
[    4.450000] [Debug btn_netlink_receive:72] BTN netlink with user space daemon 340 SUCCESS.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 200, delayoff 200, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 200, delayoff 200, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 500, delayoff 500, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 500, delayoff 500, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 200, delayoff 200, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode on   , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode blink, delayon 500, delayoff 500, blinkCount 4.
[Debug checkLedParamValid:343] Param: mode disable, delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode enable, delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode blink, delayon 200, delayoff 200, blinkCount 3000.
[Debug checkLedParamValid:343] Param: mode stop , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode off  , delayon 0  , delayoff 0  , blinkCount 0.
[Debug checkLedParamValid:343] Param: mode repeat, delayon 4200, delayoff 800, blinkCount 0.
[Debug checkLedParamValid:343] Param: mode stop , delayon 0  , delayoff 0  , blinkCount 0.
LED_RESET
        { led_green     off      1   0   0   0 }
        { led_yellow    off      1   0   0   0 }
        { led_yellow    repeat   1   200 200 0 }
        { led_green     repeat   1   200 200 0 }
LED_UPDATE_START
        { led_green     off      1   0   0   0 }
        { led_yellow    off      1   0   0   0 }
        { led_yellow    repeat   1   500 500 0 }
        { led_green     repeat   1   500 500 0 }
LED_UPDATE_FINISH
        { led_yellow    off      1   0   0   0 }
        { led_green     off      1   0   0   0 }
LED_DUT_NO_CALDATA
        { led_green     off      0   0   0   0 }
        { led_yellow    repeat   4   200 200 0 }
LED_SYS_INIT_PROCESS
        { led_yellow    off      0   0   0   0 }
        { led_green     on       0   0   0   0 }
LED_SYS_INIT_OK
        { led_yellow    off      0   0   0   0 }
        { led_green     blink    0   500 500 4 }
LED_DISABLE_ALL
        { led_green     disable  2   0   0   0 }
LED_ENABLE_ALL
        { led_green     enable   0   0   0   0 }
LED_LOCATE
        { led_green     blink    3   200 200 3000 }
LED_LOCATE_STOP
        { led_green     stop     1   0   0   0 }
LED_ISOLATED_START
        { led_yellow    off      0   0   0   0 }
        { led_green     repeat   2   4200 800 0 }
LED_ISOLATED_FINISH
        { led_green     stop     0   0   0   0 }
[    5.450000] [Debug led_proc_write:639] Write led_yellow.

[Debug ledClien[    5.450000] [Debug led_common_write_proc:478] Execute LED action: tEventHandler:11    { 1   0   0   0   0 }
0] GPIOD received led rule: LED_SYS_INIT_PROCESS.
[    5.520000] [Debug led_proc_write:639] Write led_green.
[    5.520000] [Debug led_common_write_proc:478] Execute LED action:    { 2   0   0   0   0 }

==============radio config============
radioType: 0x11
EIRP: 1
0.      radioID:0
        band:2
        mimo:2
        mimogain:3
        anttgain:2
        mode:7
1.      radioID:1
        band:5
        mimo:2
        mimogain:3
        anttgain:3
        mode:14
chanlimit:1
dfsImproveSupp:1
thermalSupp:1
        level[0] 100 125 0
        level[1] 120 145 30
        level[2] 140 149 90
        level[3] 143 150 100
QCA HAL BB reg:
        CCA: 1
         0x035f9c
        AGC: 1
         0x3179e162
         0x3179e162
        PSD 0
         00000000
         00000000
         00000000

==============radio config============
<debug>_radio_region_init(): 227  @ read next region flag, parse finish
<debug>_radio_region_init(): 256  @ region:276, parse channel num:13
<debug>_radio_region_init(): 227  @ read next region flag, parse finish
<debug>_radio_region_init(): 256  @ region:276, parse channel num:19
GBK essid(TP-Link_2.4GHz_0454E2)
UTF8 essid(TP-Link_2.4GHz_0454E2)
GBK essid(TP-Link_5GHz_0454E3)
UTF8 essid(TP-Link_5GHz_0454E3)
[    6.000000] [Debug led_proc_write:639] Write led_green.

[Debug ledClien[    6.010000] [Debug led_common_write_proc:478] Execute LED action: tEventHandler:11    { 5   0   0   0   0 }
0] GPIOD receive[    6.020000] [NOTICE led_common_write_proc:515] pledconf->backup.mode 0 1
d led rule: LED_ENABLE_ALL.
[    6.100000]
[    6.100000] Disable VlanManage, data.enable(0), data.vid(1)
[    6.110000] ath_spi_writeread get id 0xc8 0x17
[    6.120000] ath_spi_writeread get id 0xc8 0x17
[    6.120000] ath_spi_writeread get id 0xc8 0x17
[    6.130000] mspi_read_id get id=0xc8
[    6.130000] ath_spi_uid_read_old 0x38363135
[    6.130000] ath_spi_uid_read_old 0x35191f0a
uid = 0x38 0x36 0x31 0x35 0x35 0x19 0x1f 0xa 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0

[NM_Debug](readFlashPublicKey) 00175: rsaKey=: BgIAAACkAABSU0ExAAQAAAEAAQDZaGCNzHjzrgNoCjyHKa0TIkgmqE5kheNhZHs23TmAbHXN0dFwdNOqqDOTmTdoN1+zW6KY3YkkwNypoZbDTR3sKdSdIDTNnftfHhRAlR9l4lNnnvfbUWRDqaGD2nAkdasXXfD5c23COMvAEjLJXzwqZjNmj27ZgrrTlH9SoDPerg==!

Rsa verify success
[    6.230000]
[    6.230000] manage vlan set port: ssh (22), http (80), https (443)
[    6.240000]
[    6.240000] manage vlan set port: ssh (22), http (80), https (443)
[    6.250000] ath_spi_writeread get id 0xc8 0x17
[    6.250000] ath_spi_writeread get id 0xc8 0x17
[    6.260000] ath_spi_writeread get id 0xc8 0x17
[    6.260000] mspi_read_id get id=0xc8
[    6.270000] ath_spi_uid_read_old 0x38363135
[    6.270000] ath_spi_uid_read_old 0x35191f0a
uid = 0x38 0x36 0x31 0x35 0x35 0x19 0x1f 0xa 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0

[NM_Debug](readFlashPublicKey) 00175: rsaKey=: BgIAAACkAABSU0ExAAQAAAEAAQDZaGCNzHjzrgNoCjyHKa0TIkgmqE5kheNhZHs23TmAbHXN0dFwdNOqqDOTmTdoN1+zW6KY3YkkwNypoZbDTR3sKdSdIDTNnftfHhRAlR9l4lNnnvfbUWRDqaGD2nAkdasXXfD5c23COMvAEjLJXzwqZjNmj27ZgrrTlH9SoDPerg==!

part 1

Dardania · May 26, 2021, 9:52pm

part 2

Rsa verify success
[    6.340000] tty_open: Opening ttyS0 and default set O_NONBLOCK...
***** EU276: copy /lib/firmware/EAP225-Outdoor_1.0/boarddata.bin *****
[    6.740000] ath_tx99: Version 2.0
[    6.740000] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
[    8.070000] __ath_attach: Set global_scn[0]
[    8.080000] *** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead ***
[    8.090000] ACBKMinfree = 48
[    8.090000] ACBEMinfree = 32
[    8.100000] ACVIMinfree = 16
[    8.100000] ACVOMinfree = 0
[    8.100000] CABMinfree = 48
[    8.100000] UAPSDMinfree = 0
[    8.110000] ATH_TXBUF=2700
[    8.120000]
[    8.120000] ART Version : -48.0.0
[    8.120000] SW Image Version : -48.0.0.0.0
[    8.130000] Board Revision :
[    8.130000] ar9300_attach: nf_2_nom -110 nf_2_max -60 nf_2_min -125
[    8.140000] spectral_init_netlink 78 NULL SKB
[    8.140000] SPECTRAL : No ADVANCED SPECTRAL SUPPORT
[    8.150000] SPECTRAL :----- module attached
[    8.160000] ath_get_caps[6421] rx chainmask mismatch actual 3 sc_chainmak 0
[    8.160000] ath_get_caps[6396] tx chainmask mismatch actual 3 sc_chainmak 0
[    8.180000] band steering initialized for direct attach hardware
[    8.180000] ath_attach_dfs[13193] dfsdomain 1
[    8.190000] dfs_attach: event log enabled by default
[    8.200000] SPECTRAL : module already attached
[    8.210000] ath_tx_paprd_init sc 865c0000 PAPRD disabled in HAL
[    8.220000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[    8.230000]
[    8.230000] __ol_ath_attach() Allocated scn 85e40380
[    8.250000] ol_ath_attach interface_id 1
[    8.260000] Chip id: 0xc, chip version: 0x1000000
[    8.260000]
[    8.260000]  Target Version is 1000000
[    8.270000]
[    8.270000]  Flash Download Address  c0000
[    8.270000] ol_transfer_bin_file: flash data file defined
[    8.280000] Cal location [0]: 00004000
[    8.280000]
[    8.280000]  wifi1 NAND FLASH Select OFFSET 0x5000
[    8.300000] qc98xx_verify_checksum: flash checksum passed: 0x8983
[    8.300000] ol_transfer_bin_file 3582: Download Flash data len 12064
[    8.330000]
[    8.330000]  Board data initialized
[    8.660000] ol_ath_download_firmware :First OTP download and Execute is good address:0x6000 return param 4660
[    8.670000] ol_ath_download_firmware:##Board Id 24 , CHIP Id 0
[    8.680000]
[    8.680000]  wifi1: Selecting board data file name boardData_2_0_QCA9888_5G_YA105.bin
[    8.690000] ol_transfer_bin_file: Board Data File download to address=0xc0000 file name=QCA9888/hw.2/boardData_2_0_QCA9888_5G_YA105.bin
[    8.760000]
[    8.760000]  [Flash] : Ignore Module param
[    9.020000] ol_ath_download_firmware : Second OTP download and Execute is good, param=0x0
[    9.130000] ol_transfer_bin_file: Downloading firmware file: QCA9888/hw.2/athwlan.bin
[   10.860000] Startup Mode-0 set
[   10.860000] HTC Service:0x0300 ep:1 TX flow control disabled
[   10.870000] htt_peer_map_timer_init Enter pdev 85638000 hrtimer 8563c800
[   10.880000]
[   10.880000]  htt_alloc_peer_map_mem : Alloc Success : host q vaddr 85678000 paddr 5678000
[   10.890000]
[   10.890000]  htt_alloc_peer_map_mem : Flush Interval Configured to 256 pkts
[   10.900000] HTC Service:0x0100 ep:2 TX flow control disabled
[   10.910000] Firmware_Build_Number:99
[   10.910000] num_rf_chain:0x00000002  ht_cap_info:0x0000085b  vht_cap_info:0x339979f2  vht_supp_mcs:0x0000fffa
[   10.920000]
[   10.920000]  RES CFG Support wmi_service_bitmap 9778
[   10.930000]
[   10.930000]  Sending Ext resource cfg: HOST PLATFORM as 1 and fw_feature_bitmap as 50 to TGT
[   10.940000] ol_ath_alloc_host_mem_chunk req_id 2 idx 0 num_units 53 unit_len 256,
[   10.940000] ol_ath_alloc_host_mem_chunk req_id 3 idx 1 num_units 53 unit_len 1024,
[   10.950000] ol_ath_alloc_host_mem_chunk req_id 4 idx 2 num_units 53 unit_len 4096,
[   10.960000] ol_ath_alloc_host_mem_chunk req_id 1 idx 3 num_units 265 unit_len 872,
[   10.970000] ol_ath_alloc_host_mem_chunk req_id 1 idx 4 num_units 266 unit_len 872,
[   10.980000] ol_ath_alloc_host_mem_chunk req_id 5 idx 5 num_units 132 unit_len 1892,
[   10.990000] ol_ath_alloc_host_mem_chunk req_id 5 idx 6 num_units 133 unit_len 1892,
[   11.000000] ol_ath_alloc_host_mem_chunk req_id 5 idx 7 num_units 133 unit_len 1892,
[   11.010000] ol_ath_alloc_host_mem_chunk req_id 5 idx 8 num_units 133 unit_len 1892,
[   11.060000] wmi_ready_event_rx:  WMI UNIFIED READY event
[   11.070000] spectral_init_netlink 78 NULL SKB
[   11.080000] dfs_attach: event log enabled by default
[   11.090000]
[   11.090000] ****************************************************
[   11.090000]                   tp mesh init
[   11.100000] ****************************************************
[   11.110000] ol_ath_thermal_mitigation_attach: --
[   11.380000] ath_attach_dfs[13193] dfsdomain 1
[   11.390000] dfs_attach: event log enabled by default
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
[   11.580000] wlan_vap_create : enter. devhandle=0x86450380, opmode=IEEE80211_M_HOSTAP, flags=0x1
[   11.580000]
[   11.590000] ieee80211_mbo_vattach:MBO Initialized
[   11.600000] wlan_vap_create : exit. devhandle=0x86450380, opmode=IEEE80211_M_HOSTAP, flags=0x1.
[   11.600000]
[   11.610000] VAP device ath0 created osifp: (8566fb80) os_if: (86680000)
ath0
[   11.630000] ath_attach_dfs[13193] dfsdomain 2
[   11.640000] dfs_attach: event log enabled by default
Interface doesn't accept private ioctl...
vhtsubfee (8BE0): Invalid argument
[   11.800000] siwfreq
[   11.800000] Set freq vap 0 stop send + 86680000
[   11.800000] Set freq vap 0 stop send -86680000
[   11.840000] Set wait done --86680000
[   11.850000]
[   11.850000]  DES SSID SET=TP-Link_2.4GHz_0454E2
[   11.900000] Set beacon rate: 1000
[   11.900000] wlan_set_param : This rate is not allowed. Please try a valid rate.
Interface doesn't accept private ioctl...
set_bcn_rate (8BE0): Invalid argument
[   11.920000] Set bcast rate: 1000
[   11.920000] Rate is not allowed in current mode:
Interface doesn't accept private ioctl...
bcast_rate (8BE0): Invalid argument
[   11.930000] Set mcast rate: 1000
[   11.930000] Rate is not allowed in current mode:
Interface doesn't accept private ioctl...
mcast_rate (8BE0): Invalid argument
[   11.950000] Set mgmt rate: 1000
[   11.960000] Set data minrate: 0
[   11.970000] Set sta minrate: 1000
[   11.990000] Set disable CCK rate: 0
Removing interface ath0 failed
FAIL
Configuration file: /tmp/ath0.ap_bss (phy ath0) --> new PHY
Line 6: DEPRECATED: 'dump_file' configuration variable is not used anymore
[   12.170000]  ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
[   12.180000]  DEVICE IS DOWN ifname=ath0
ath0: [   12.180000]  DEVICE IS DOWN ifname=ath0
Could not connect to kernel driver
Using interface ath0 with hwaddr b0:be:76:04:54:e2 and ssid "TP-Link_2.4GHz_[   12.190000] ar9300_override_ini: reset 0x9e14, 0x317b5de2
0454E2"
ath0: interface state UNINITIALIZED->ENABLED
ath0: AP-ENABLED
OK
[   12.270000] ar9300_override_ini: reset 0x9e14, 0x3179e162
[   12.310000] isCountryCodeValid: EEPROM regdomain 0x0
Invalid command : HALDbg
Invalid command : chainmasksel
Interface doesn't accept private ioctl...
AMPDU (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDUFrames (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDULim (8BE0): Operation not permitted
[   12.370000] set improve dfs switch = 1
[   12.470000] wmi_unified_vdev_create_send: ID = 0 Type = 1, Subtype = 0 VAP Addr = b0:be:76:04:54:e3:
[   12.480000] ieee80211_mbo_vattach:MBO Initialized
[   12.490000] VAP device ath10 created osifp: (86686380) os_if: (872dc000)
ath10
[   12.500000] isCountryCodeValid: EEPROM regdomain 0x0
[   12.550000] ME Pool succesfully initialized vaddr - 84dc0000 paddr - 0
[   12.550000] num_elems = 1424 buf_size - 64 pool_size = 102528
[   12.570000] Enable MCAST_TO_UCAST
[   12.630000] set channellimit = 0
[   12.680000] siwfreq
[   12.690000] Set freq vap 0 stop send + 872dc000
[   12.690000] Set freq vap 0 stop send -872dc000
[   12.730000] Set wait done --872dc000
[   12.740000]
[   12.740000]  DES SSID SET=TP-Link_5GHz_0454E3
[   12.790000] Set beacon rate: 6000
[   12.800000] Set bcast rate: 6000
[   12.800000] Configuring BCAST RATE is deffered as channel is not yet set for VAP
[   12.820000] Set mcast rate: 6000
[   12.820000] Configuring MCAST RATE is deffered as channel is not yet set for VAP
[   12.830000] Set mgmt rate: 6000
[   12.840000] Configuring MGMT RATE is deffered as channel is not yet set for VAP
[   12.850000] Set data minrate: 0
[   12.860000] Disable data minrate
[   12.860000] bw_nss_val: 0x0
[   12.870000] Set sta minrate: 6000
[   12.870000] Set sta minrate: 6000
[   12.890000] Set disable CCK rate: 0
[   12.920000] WARNING: Fragmentation with HT mode NOT ALLOWED!!
Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device ath10 ; Invalid argument.
Removing interface ath10 failed
FAIL
Configuration fi[   13.030000]  ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1
le: /tmp/ath10.a[   13.040000]  DEVICE IS DOWN ifname=ath10
p_bss (phy ath10[   13.050000]  DEVICE IS DOWN ifname=ath10
) --> new PHY
Line 6: DEPRECATED: 'dump_file' configuration variable is not used anymore
ath10: Could not connect to kernel driver
Using interface ath10 with hwaddr b0:be:76:04:54:e3 and ssid "TP-Link_5GHz_0454E3"
ath10: interface state UNINITIALIZED->ENABLED
ath10: AP-ENABLED
OK
<error>radio_region_get[   13.140000]
[   13.140000] manage vlan set ssid vlan: idx (0), intfName (ath0), vlan (0)
ChanCommonFlag()[   13.150000]
[   13.150000] manage vlan set ssid vlan: idx (1), intfName (ath10), vlan (0)
: 962  @ invalid chanIndex:0, current channelNum = 19
[   13.240000] tp mesh events being sent to PID:816
[   13.350000] wmi_unified_vdev_create_send: ID = 1 Type = 1, Subtype = 0 VAP Addr = b6:be:76:04:54:e3:
[   13.360000] ieee80211_mbo_vattach:MBO Initialized
[   13.360000] VAP device bkhap1 created osifp: (86687b80) os_if: (84de8000)
bkhap1
[   13.380000]  ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1

==============radio config============
radioType: 0x11
EIRP: 1
0.      radioID:0
        band:2
        mimo:2
        mimogain:3
        anttgain:2
        mode:7
1.      radioID:1
        band:5
        mimo:2
        mimogain:3
        anttgain:3
        mode:14
chanlimit:1
dfsImproveSupp:1
thermalSupp:1
        level[0] 100 125 0
        level[1] 120 145 30
        level[2] 140 149 90
        level[3] 143 150 100
QCA HAL BB reg:
        CCA: 1
         0x035f9c
        AGC: 1
         0x3179e162
         0x3179e162
        PSD 0
         00000000
         00000000
         00000000

==============radio config============
List Flushed
[   13.560000] set channellimit = 0
[   13.590000] osif_vap_init: Scan in progress.. Cancelling it. vap: 0x872dc000
[   13.660000]
[   13.660000]  DES SSID SET=mesh_b0be760454e2
Configuration fi[   13.700000]  ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1
le: /tmp/bkhAp.a[   13.710000]  DEVICE IS DOWN ifname=bkhap1
p_bss (phy bkhap[   13.720000]  DEVICE IS DOWN ifname=bkhap1
1) --> new PHY
Line 6: DEPRECATED: 'dump_file' configuration variable is not used anymore
bkhap1: Could not connect to kernel driver
Using interface bkhap1 with hwaddr b6:be:76:04:54:e3 and ssid "mesh_b0be760454e2"
random: Cannot r[   13.860000] osif_vap_init: Scan in progress.. Cancelling it. vap: 0x84de8000
ead from /dev/random: Resource temporarily unavailable
random: Only 18/20 bytes of strong random data available from /dev/random
random: Not enough entropy pool available for secure operations
WPA: Not enough entropy in random pool for secure operations - update keys later when the first station connects
bkhap1: interface state UNINITIALIZED->ENABLED
bkhap1: AP-ENABLED
OK
[Debug ledListenEventHandler:148] Accep[   13.910000] [Debug led_proc_write:639] Write led_yellow.
[   13.920000] [Debug led_common_write_proc:478] Execute LED action:
                                                                     [Debug ledClien    { 1   0   0   0   0 }
tEventHandler:110] GPIOD received led rule: LED_[   13.930000] [Debug led_proc_write:639] Write led_green.
SYS_INIT_OK.
[   13.940000] [Debug led_common_write_proc:478] Execute LED action:    { 3   0   500 500 4 }
[   14.060000] Switching to Tx Mode-0
[   15.020000] ar9300_override_ini: reset 0x9e14, 0x317b5de2
[   15.040000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
[   15.060000] ar9300_override_ini: reset 0x9e14, 0x317b5de2
[   15.080000] ar9300_override_ini: reset 0x9e14, 0x3179e162
[   15.940000] ath_spi_writeread get id 0xc8 0x17
[   15.940000] ath_spi_writeread get id 0xc8 0x17
[   15.950000] ath_spi_writeread get id 0xc8 0x17
[   15.950000] mspi_read_id get id=0xc8
[   15.960000] ath_spi_uid_read_old 0x38363135
[   15.960000] ath_spi_uid_read_old 0x35191f0a
uid = 0x38 0x36 0x31 0x35 0x35 0x19 0x1f 0xa 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0

[NM_Debug](readFlashPublicKey) 00175: rsaKey=: BgIAAACkAABSU0ExAAQAAAEAAQDZaGCNzHjzrgNoCjyHKa0TIkgmqE5kheNhZHs23TmAbHXN0dFwdNOqqDOTmTdoN1+zW6KY3YkkwNypoZbDTR3sKdSdIDTNnftfHhRAlR9l4lNnnvfbUWRDqaGD2nAkdasXXfD5c23COMvAEjLJXzwqZjNmj27ZgrrTlH9SoDPerg==!

Rsa verify success
[Debug ledListenEventHandler:148] Accep[   16.910000] [Debug led_proc_write:639] Write led_green.
[   16.920000] [Debug led_common_write_proc:478] Execute LED action:
                                                                     [Debug ledClien    { 7   0   0   0   0 }
tEventHandler:110] GPIOD received led rule: LED_ISOLATED_FINISH.
[   19.450000] OL vap_start +
[   19.460000] OL vap_start -
[   19.460000] ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x3
[   19.470000] ol_ath_vap_set_param: Now supported BCAST RATE is 6000(kbps) and rate code: 0x3
[   19.480000] ol_ath_vap_set_param: Now supported BCAST RATE is 6000(kbps) and rate code: 0x3
[   19.490000] ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x3
[   19.500000] OL vap_start +
[   19.500000] OL vap_start -
now ok to start tddp---------------------
uclite init ok, now startup eap-cs ---------------------
[TDDP_DEBUG]<debug>[main:1290] tddp init---
httpMudCreate: MUD 0x4dfe10 was created
[utilities_debug: httpSystemFirmwareInit:271]register rpm
httpServerCreate------------------
httpMudCreate: MUD 0x4dfe10 was created
[utilities_debug: httpSystemFirmwareInit:271]register rpm
httpServerCreate------------------
httpServerCreate: try to add port 80
httpServerCreate: try to add port 22080
[   24.480000] tp dfs events being sent to PID:352
route: SIOCDELRT: No such process
[UNIX_SOCK][unix_sock_connSrv:301]connect to file(/var/run/srv/22) failed after retry(0), errno(2):No such file or directory
Into util_dbg_setMod, pModName(all), enable(1)
[NM_Debug](nm_region_getRegionName) 00192: Flash region info, code: 276, name: EU.

Error for wireless request "Set ESSID" (8B1A) :
    SET failed on device sta1 ; No such device.
Failed to connect to wpa_supplicant global interface: /var/run/wpa_supplicant-global  error: No such file or directory
[UNIX_SOCK][unix_sock_connSrv:301]connect to file(/var/run/srv/22) failed after [   74.280000] [Debug led_proc_write:639] Write led_yellow.
retry(0), errno([   74.290000] [Debug led_common_write_proc:478] Execute LED action: 2):No such file    { 1   0   0   0   0 }
or directory
[Debug ledListenEventHandler:148] [   74.300000] [Debug led_proc_write:639] Write led_green.
Accept a new cli[   74.310000] [Debug led_common_write_proc:478] Execute LED action: ent.
[Debug led      { 4   2   4200 800 0 }
ClientEventHandler:110] GPIOD received led rule: LED_ISOLATED_START.
[   75.290000] No cloning
[   75.300000] wmi_unified_vdev_create_send: ID = 2 Type = 2, Subtype = 0 VAP Addr = f2:be:76:04:54:e3:
[   75.310000] wmi_unified_set_psmode:set psmode=1
[   75.310000] VAP device sta1 created osifp: (84f4c380) os_if: (84f50000)
sta1
[   75.330000]  ieee80211_ioctl_siwmode: imr.ifm_active=18874496, new mode=2, valid=1
[   75.370000] wmi_unified_set_psmode:set psmode=0
[   75.380000] wmi_unified_set_psmode:set psmode=0
[   75.470000] OL vap_start +
[   75.470000] OL vap_start -
[   75.470000] ol_ath_vap_set_param: Now supported BCAST RATE is 6000(kbps) and rate code: 0x3
[   75.480000] ol_ath_vap_set_param: Now supported MCAST RATE is 6000(kbps) and rate code: 0x3
[   75.520000] siwfreq
[   75.530000]
[   75.530000]  DES SSID SET=
Invalid command : addrdetect
Invalid command : vap_ind
Successfully initialized wpa_supplicant

 EAP225-Outdoor mips #1 Tue Mar 16 18:30:42 CST 2021 (none)
EAP225-Outdoor login: lanport detectFeddback, plugEvent(1)
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: associated
ath10: AP-STA-CONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: disassociated
ath10: AP-STA-DISCONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: associated
ath10: AP-STA-CONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: disassociated
ath10: AP-STA-DISCONNECTED bc:09:63:a3:15:13
[TDDP_DEBUG]<debug>[doTddpTask:426] Tddp runned more than 15 minutes
[TDDP_DEBUG]<debug>[doTddpTask:483] tddp exit.
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: associated
ath10: AP-STA-CONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: disassociated
ath10: AP-STA-DISCONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: associated
ath10: AP-STA-CONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: disassociated
ath10: AP-STA-DISCONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: associated
ath10: AP-STA-CONNECTED bc:09:63:a3:15:13
ath10: STA bc:09:63:a3:15:13 IEEE 802.11: disassociated
ath10: AP-STA-DISCONNECTED bc:09:63:a3:15:13

svanheule · May 27, 2021, 6:04am

This is still the TP-Link kernel that is booting. Does the u-boot shell have a ping command you can use to test if the machine running the TFTP-server is reachable? Getting TFTP to work will probably be the easiest option.

Dardania · May 27, 2021, 6:35am

In Windows I can Ping the AEP225 in the console window (launch cmd.exe) with the address 169.254.xxx.yyy

svanheule · May 27, 2021, 7:02am

So the AP has as 169.254 address? Can you reach the web-interface at that address too?

Note that the 169.254 address is a link-local address that is self-assigned in the absence of a DHCP server. It might be easier to work with statically assigned addresses.

frollic · May 27, 2021, 7:34am

Based on the git link, did you also change the IP of your TFTP host ?

(or change the serverip param in uboot)

paste a text dump of a failed TFTP session.

Dardania · May 27, 2021, 8:04pm

No, I cannot open in a browser the web interface at 169.254...
Do I have to assign a static address at my PC (now is at 192.168.0.196 assigned bu router DHCP)?

frollic · May 27, 2021, 9:04pm

You don't need to have internet, or your main router involved in this, as long as you've already DLed the image.

Set static IP on PC, disable fw, start TFTP, and boot the router while pressing the reset (was it?) button.

Dardania · May 27, 2021, 9:57pm

I've follow your step and also installed a free program called Wireshark that it is not able to show me expected TFTP packet that will point to the recovery file.
Still no success.
It starts to became a nightmare.

svanheule · May 28, 2021, 6:23am

These EAPs are different from other TP-Link devices. You need to interrupt the bootloader from the serial console to run the TFTP client.

@Dardania Can you run printenv in the bootloader console? Then we can see what IP addresses are being used for the access point and TFTP server.

Dardania · May 28, 2021, 11:51am

Good morning, here the printev output.

ath> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdpar                            ts=ath-nor0:256k(u-boot),64k(u-boot-env),14528k(rootfs),1408k(uImage),64k(mib0),                            64k(ART)
bootcmd=bootelf 0x9f040000
bootdelay=2
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
ipaddr=192.168.1.1
serverip=192.168.1.10
dir=
lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr                             0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}board956x${bc}-jffs2&&erase 0x9f050000 +0xE30000&&cp.b                             $fileaddr 0x9f050000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9fe80000 +$filesize&&                            cp.b $fileaddr 0x9fe80000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0

Environment size: 690/65532 bytes

frollic · May 28, 2021, 12:03pm

run the help command, it'll give you the command reference.

svanheule · May 28, 2021, 6:14pm

To reach the TFTP server running on your PC at 192.168.0.196, you will need to run setenv serverip 192.168.0.109. Do the same for ipaddr, where you can pick any (unused) IP address in the same subnet as your PC.

If you still can't get it to work, can you post the exact commands that you are using?

Dardania · May 29, 2021, 6:17am

good morning, back again.
One doubt. Do I have to connect the EAP225 directly to my pc throught RJ45 or do I have to connect to the router?

This is the help command list:

ath>
?       - alias for 'help'
base    - print or set address offset
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootvx  - Boot vxWorks from an ELF image
cp      - memory copy
erase   - erase FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
loady   - load binary file over serial line (ymodem mode)
mct   - simple RAM test
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath>

Dardania · May 29, 2021, 7:34am

I've set in the console serverip at 192.168.0.109 and ipaddr at 192.168.0.166:

ath> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),14528k(rootfs),1408k(uImage),64k(mib0),64k(ART)
bootcmd=bootelf 0x9f040000
bootdelay=2
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
dir=
lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}board956x${bc}-jffs2&&erase 0x9f050000 +0xE30000&&cp.b $fileaddr 0x9f050000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9fe80000 +$filesize&&cp.b $fileaddr 0x9fe80000 $filesize
stdin=serial
stdout=serial
stderr=serial
serverip=192.168.0.109
ipaddr=192.168.0.166
ethact=eth0

Environment size: 693/65532 bytes

then i run tftp in the console in order to load initramfs but without success:

ath> tftpboot 192.168.0.166 openwrt-ath79-generic-tplink_eap225-outdoor-v1-initramfs-kernel.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.166
Filename 'openwrt-ath79-generic-tplink_eap225-outdoor-v1-initramfs-kernel.bin'.
Load address: 0x192
Loading: T T T T T T T T T T
Retry count exceeded; starting again
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.166
Filename 'openwrt-ath79-generic-tplink_eap225-outdoor-v1-initramfs-kernel.bin'.
Load address: 0x192
Loading: T T T T T T T T T T
Retry count exceeded; starting again

frollic · May 29, 2021, 7:53am

Try to shorten the name, sometimes long filenames can be an issue.

Connecting via a switch, as the one in the router, can be beneficial.