MikroTik cAP ac support

Hi ,

I tried flashing the modified image:

Before flashing:

  • The uart pins connected to usb to uart - PBL messages were displayed on the minicom
  • Backup of the entire flash taken (In-circuit)
  • modified 15 00 04 00 01 to 15 00 04 00 00 on the flash image backup.
  • flashed the new image into the flash using flashrom
$ sudo flashrom --programmer ch341a_spi -w  mtik_cap_ac.bin 
flashrom v1.2-4-gad08aef on Linux 4.15.0-62-generic (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Winbond flash chip "W25Q128.V..M" (16384 kB, SPI) on ch341a_spi.
Reading old flash chip contents... done.
Erasing and writing flash chip... FAILED at 0x0007e282! Expected=0xff, Found=0xef, failed byte count from 0x0007e000-0x0007efff: 0x1
ERASE FAILED!
Reading current flash chip contents... done. Looking for another erase function.
FAILED at 0x0005013c! Expected=0xff, Found=0xbf, failed byte count from 0x00050000-0x00057fff: 0x3
ERASE FAILED!
Reading current flash chip contents... done. Looking for another erase function.
FAILED at 0x00290052! Expected=0xff, Found=0x7f, failed byte count from 0x00290000-0x0029ffff: 0x4
ERASE FAILED!
Reading current flash chip contents... done. Looking for another erase function.
FAILED at 0x0015941d! Expected=0xff, Found=0xfd, failed byte count from 0x00000000-0x00ffffff: 0x75
ERASE FAILED!
Reading current flash chip contents... done. Looking for another erase function.
FAILED at 0x00038001! Expected=0xff, Found=0xf0, failed byte count from 0x00000000-0x00ffffff: 0x32f
ERASE FAILED!
Reading current flash chip contents... 

done. Looking for another erase function.
Looking for another erase function.
Looking for another erase function.
No usable erase functions left.
FAILED!
Uh oh. Erase/write failed. Checking if anything has changed.
Reading current flash chip contents... done.
Apparently at least some data has changed.
Your flash chip is in an unknown state.
Please report this on IRC at chat.freenode.net (channel #flashrom) or
mail flashrom@flashrom.org, thanks!

After flashing, the PBL output that were being displayed on the serial stopped. the device is not booting into routeros.

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00096
S - IMAGE_VARIANT_STRING=DAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000021
S - Core 0 Frequency, 0 MHz
B -       262 - PBL, Start
B -      1342 - bootable_media_detect_entry, Start
B -      1683 - bootable_media_detect_success, Start
B -      1697 - elf_loader_entry, Start
B -      5104 - auth_hash_seg_entry, Start
B -      7271 - auth_hash_seg_exit, Start
B -    577868 - elf_segs_hash_verify_entry, Start
B -    694289 - PBL, End
B -    694313 - SBL1, Start
B -    782841 - pm_device_init, Start
D -         6 - pm_device_init, Delta
B -    784364 - boot_flash_init, Start
D -     45978 - boot_flash_init, Delta
B -    834540 - boot_config_data_table_init, Start
D -      3857 - boot_config_data_table_init, Delta - (419 Bytes)
B -    842012 - clock_init, Start
D -      7566 - clock_init, Delta
B -    853780 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B -    857269 - sbl1_ddr_set_params, Start
B -    862257 - cpr_init, Start
D -         2 - cpr_init, Delta
B -    866750 - Pre_DDR_clock_init, Start
D -         4 - Pre_DDR_clock_i.
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00096
S - IMAGE_VARIANT_STRING=DAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000021
S - Core 0 Frequency, 0 MHz
B -       262 - PBL, Start
B -      1342 - bootable_media_detect_entry, Start
B -      1683 - bootable_media_detect_success, Start
B -      1697 - elf_loader_entry, Start
B -      5104 - auth_hash_seg_entry, Start
B -      7271 - auth_hash_seg_exit, Start
B -    577869 - elf_segs_hash_verify_entry, Start
B -    694290 - PBL, End
B -    694314 - SBL1, Start
B -    782842 - pm_device_init, Start
D -         6 - pm_device_init, Delta
B -    784365 - boot_flash_init, Start
B -   3115669 - Boot error ocuured!. Error code: 302a

Tried the stable version 1.1 of flashrom, with same results.

Was i supposed to take out the nor flash for read and write?

Which version is that?

1.2-5 from debian sid

Have you read this:

and this:
https://openwrt.org/inbox/toh/mikrotik/mikrotik_rbcapgi-5acd2nd_cap_ac#pin_header
?

@532910 Thanks Sergio, I modified the uart connection and removed CPU reset; But at the time of flashing it was connected to CPU reset.

I am still facing the same issue flashing into the nor.

++ pulled down the CPU reset pin to ground.

Isn't PBL part of the SoC ROM in case of ipq40xx? Any thoughts on why modifying the flash could have affected the PBL log on uart?

Any suggestion? Thanks.

F..., I'm sorry, it's my fault! Please check the updated pinout.

From what I see, you made a dump and then flashed it but since the pinout was partially incorrect it managed to corrupt the NOR?

PBL is indeed part of the SoC, but its really small and is used only to load the SBL1 which is first thing on the SPI-NOR, that is the log you see over UART.
If @532910 has a valid bootloader dump, you can simply make a layout file and flash that only

From what I see, you made a dump and then flashed it but since the pinout was partially incorrect it managed to corrupt the NOR?

While reading works fine, writing requires CPU RESET to be low.

No worries! just an opportunity to learn more about the platform now! :grin:

Thanks @robimarko. I'll try flashing the bootloader, I hope there's no restrictions on the trustzone/qsee to flash other devices' bootloader?

@532910 if possible can you please share your flash dump?

Just shorting the CPU RESET pin to ground is sufficient for this, right?

There are no restrictions as safe boot is not active.

Just shorting the CPU RESET pin to ground is sufficient for this, right?

Yep!

BTW, you can use it for the board reset of course.

Wait what? Why would anyone replace MikroTik OS with OpenWRT??
It's like replacing a swiss-army-knife with a nail-clipper.

I can think of a simple reason:
Because I want to.

Also, not everybody likes running the black box that Mikrotik ships full of holes, no Wireguard support etc.

I bet you know how to enable WPA3 and EdDSA keys on "MikroTik OS"!?
BTW, do you know it's name is RouterOS?
Possibly you know how to run tor for example (on ARM platrofm, where Metarouter isn't supported)?

@shashank1, could you confirm the current instruction is correct and you've successfully enabled uart?

Yes, I know very well the it's name, I have been using MikroTik for years.
BTW, do you know that there is SwOS, which is also a MikroTik OS?

Obviously you need some very specific functionalities. However, if we talk about multihomed network design capabilities, dynamic routing, plenty of VPNs, PBR, shapers, a bunch of tools for troubleshooting and monitoring, etc, etc... all of them ready for you out of the box, you can hardly beat it with OpenWRT.

Don't get me wrong, I'm also OpenWRT fan and use both of them in my personal network, but MT is far better and closer to the professional networking field.

  1. SwOS is just a web interface for switch configuration, not an OS.
  2. The only advantage of MT is TDMA.
  3. Please stop with the off-topic comments! If you'd like to talk about replacing RouterOS with OpenWrt start a separate topic. This one is only about porting OpenWrt on cAP ac. I've already flagged your comments as off-topic and like them to be removed (including my replies), @jow?

Why should one replace MikroTik´s RouterOS on a MikroTik 802.11ac access point with OpenWRT:

On an access point I don´t need BGP, OSPF, MPLS, ... but I need good wireless and this is something MikroTik is missing:

  • MikroTik programs its own wireless drivers. They neither use the linux kernel modules nor paid drivers from the vendor.
  • Those drivers are way too generic and doesn't provide any special improvement for a specific chipset.
  • No roaming protocols, i.e. 802.11k/v/r. If you write an email to mikrotik.com and ask if those are one the roadmap, the answer is "no"
  • No MU-MIMO. Almost 2 years ago, there was an answer within the MikroTik forum, that this is "wip", i.e. work in progress. Since then it hasn´t arrived nor has anyone from MikroTik replied about the expected release date. MikroTik started selling access points with 802.11ac wave 2 chipsets years ago, even with 4 antennas for 5 GHz, but only supports MIMO with its "RouterOS".
  • No WPA3, WPA3 Enterprise
  • No airtime fairness
  • No band steering
1 Like

I have hAP ac2 with OpenWRT and it works way better than with ROS, it's unacceptable how Mikrotik don't even support SQM considering they're targeting the routing market where Ubiquiti has supported fq_codel for years.

OpenWRT offers true wave2 WiFi for IPQ401X devices

  • I took the built for hAP ac2 from here and was able to boot openWRT and connect to 2.4 and 5.0 GHz wifi

  • MTD files

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 5.4.52 (pdvalck@cassiopeia) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r14057-a28b8fecf6)) #0 SMP Thu Aug 6 10:54:51 2020
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: Mikrotik hAP ac2
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] On node 0 totalpages: 32256
[    0.000000]   Normal zone: 284 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32256 pages, LIFO batch:7
[    0.000000] percpu: Embedded 15 pages/cpu s30028 r8192 d23220 u61440
[    0.000000] pcpu-alloc: s30028 r8192 d23220 u61440 alloc=15*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 31972
[    0.000000] Kernel command line: 
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 108584K/129024K available (5458K kernel code, 181K rwdata, 1452K rodata, 11264K init, 230K bss, 20440K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] random: get_random_bytes called from start_kernel+0x2f0/0x498 with crng_init=0
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000007] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000023] Switching to timer-based delay loop, resolution 20ns
[    0.000228] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000245] pid_max: default: 32768 minimum: 301
[    0.000445] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.000463] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001562] CPU: Testing write buffer coherency: ok
[    0.002709] Setting up static identity map for 0x80300000 - 0x80300060
[    0.002857] rcu: Hierarchical SRCU implementation.
[    0.003334] smp: Bringing up secondary CPUs ...
[    0.006639] smp: Brought up 1 node, 4 CPUs
[    0.006660] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.006668] CPU: All CPU(s) started in SVC mode.
[    0.011051] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.011221] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.011248] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.011610] pinctrl core: initialized pinctrl subsystem
[    0.012802] NET: Registered protocol family 16
[    0.013221] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.014512] cpuidle: using governor ladder
[    0.014562] cpuidle: using governor menu
[    0.019573] GPIO line 414 (enable USB power) hogged as output/high
[    0.035241] cryptd: max_cpu_qlen set to 1000
[    0.038918] usbcore: registered new interface driver usbfs
[    0.038987] usbcore: registered new interface driver hub
[    0.039081] usbcore: registered new device driver usb
[    0.039134] pps_core: LinuxPPS API ver. 1 registered
[    0.039143] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.039168] PTP clock support registered
[    0.040939] clocksource: Switched to clocksource arch_sys_counter
[    0.041787] thermal_sys: Registered thermal governor 'step_wise'
[    0.042109] NET: Registered protocol family 2
[    0.042787] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[    0.042828] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.042857] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.042886] TCP: Hash tables configured (established 1024 bind 1024)
[    0.043029] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.043073] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.043325] NET: Registered protocol family 1
[    0.043371] PCI: CLS 0 bytes, default 64
[    0.231106] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.236754] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.236768] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.289625] bam-dma-engine 8e04000.dma: num-channels unspecified in dt
[    0.289648] bam-dma-engine 8e04000.dma: num-ees unspecified in dt
[    0.290376] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.290462] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.290544] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.290621] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.291098] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.291772] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.291821] msm_serial 78af000.serial: uartclk = 1843200
[    0.291882] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 25, base_baud = 115200) is a MSM
[    0.291912] msm_serial: console setup on port #0
[    0.765903] printk: console [ttyMSM0] enabled
[    0.770813] msm_serial: driver initialized
[    0.780320] loop: module loaded
[    0.781577] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    0.789289] random: fast init done
[    0.792778] spi-nor spi0.0: w25q128jv (16384 Kbytes)
[    0.808320] 1 routerbootpart partitions found on MTD device spi0.0
[    0.808346] Creating 1 MTD partitions on "spi0.0":
[    0.813426] 0x000000000000-0x000001000000 : "partitions"
[    0.819283] 5 routerbootpart partitions found on MTD device partitions
[    0.823680] Creating 5 MTD partitions on "partitions":
[    0.829975] 0x000000080000-0x00000008e000 : "RouterBoot"
[    0.835974] 0x00000008e000-0x00000008f000 : "hard_config"
[    0.841417] 0x000000090000-0x000000097dbe : "dtb_config"
[    0.846717] 0x0000000bd000-0x0000000be000 : "soft_config"
[    0.852153] 0x000000100000-0x000001000000 : "firmware"
[    0.858405] libphy: ipq40xx_mdio: probed
[    0.950429] ESS reset ok!
[    0.983449] ESS reset ok!
[    1.401757] libphy: Fixed MDIO Bus: probed
[    1.402784] EDMA using MAC@ - using
[    1.402800] 6e:00:8d:91:77:44
[    1.409023] EDMA using MAC@ - using
[    1.409034] ca:4e:41:06:01:85
[    1.417393] i2c /dev entries driver
[    1.419794] sdhci: Secure Digital Host Controller Interface driver
[    1.421032] sdhci: Copyright(c) Pierre Ossman
[    1.427225] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.435417] MikroTik RouterBOARD hardware configuration sysfs driver v0.05
[    1.438525] MikroTik RouterBOARD software configuration sysfs driver v0.03
[    1.445231] NET: Registered protocol family 10
[    1.452446] Segment Routing with IPv6
[    1.455442] NET: Registered protocol family 17
[    1.459132] 8021q: 802.1Q VLAN Support v1.8
[    1.463501] Registering SWP/SWPB emulation handler
[    1.478683] hctosys: unable to open rtc device (rtc0)
[    1.496071] Freeing unused kernel memory: 11264K
[    1.533811] Run /init as init process
[    1.628483] init: Console is alive
[    1.628761] init: - watchdog -
[    1.646511] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    1.652867] dwc3-qcom 8af8800.usb3: IRQ hs_phy_irq not found
[    1.652912] dwc3-qcom 8af8800.usb3: IRQ dp_hs_phy_irq not found
[    1.658030] dwc3-qcom 8af8800.usb3: IRQ dm_hs_phy_irq not found
[    1.663725] dwc3-qcom 8af8800.usb3: IRQ ss_phy_irq not found
[    1.671128] dwc3-qcom 60f8800.usb2: IRQ hs_phy_irq not found
[    1.675477] dwc3-qcom 60f8800.usb2: IRQ dp_hs_phy_irq not found
[    1.681241] dwc3-qcom 60f8800.usb2: IRQ dm_hs_phy_irq not found
[    1.686757] dwc3-qcom 60f8800.usb2: IRQ ss_phy_irq not found
[    1.696469] dwc3 8a00000.dwc3: Failed to get clk 'ref': -2
[    1.852325] dwc3 6000000.dwc3: Failed to get clk 'ref': -2
[    1.986631] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    1.986790] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    1.991702] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000000002010010
[    1.998668] xhci-hcd xhci-hcd.0.auto: irq 94, io mem 0x08a00000
[    2.008949] hub 1-0:1.0: USB hub found
[    2.013985] hub 1-0:1.0: 1 port detected
[    2.018094] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.021857] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    2.027075] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[    2.036104] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.041846] hub 2-0:1.0: USB hub found
[    2.049503] hub 2-0:1.0: 1 port detected
[    2.053561] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.057121] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    2.062688] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000000002010010
[    2.070025] xhci-hcd xhci-hcd.1.auto: irq 95, io mem 0x06000000
[    2.080246] hub 3-0:1.0: USB hub found
[    2.087446] hub 3-0:1.0: 1 port detected
[    2.089374] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.093177] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    2.098429] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[    2.106125] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.113179] hub 4-0:1.0: USB hub found
[    2.120854] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19)
[    2.126500] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.139458] init: - preinit -
[    2.388300] random: jshn: uninitialized urandom read (4 bytes read)
[    2.440313] random: jshn: uninitialized urandom read (4 bytes read)
[    2.563417] random: jshn: uninitialized urandom read (4 bytes read)
[    2.848898] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    7.074929] procd: - early -
[    7.075075] procd: - watchdog -
[    7.616838] procd: - watchdog -
[    7.619727] procd: - ubus -
[    7.645145] urandom_read: 5 callbacks suppressed
[    7.645157] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.670620] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.673850] procd: - init -
[    7.966533] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.979880] Mirror/redirect action on
[    7.984558] urngd: v1.0.2 started.
[    7.988883] u32 classifier
[    7.988910]     input device check on
[    7.990480]     Actions configured
[    8.000342] Loading modules backported from Linux version v5.8-rc2-0-g48778464bb7d
[    8.000379] Backport generated by backports.git v5.8-rc2-1-0-g7a69429b
[    8.032967] xt_time: kernel timezone is -0000
[    8.051177] random: crng init done
[    8.075160] PPP generic driver version 2.4.2
[    8.076275] NET: Registered protocol family 24
[    8.119808] ath10k_mac_create, priv_size: 924  hw: 571c0850  hw->priv: 158f5239
[    8.816116] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[    8.816167] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[    8.829148] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-013-d81f62d97 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 adcbecaa
[    8.873977] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:16 crc32 24cecd7f
[   10.174994] ath10k_ahb a000000.wifi: unsupported HTC service id: 1536
[   10.176633] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   10.180434] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[   10.217633] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   10.218631] ath10k_ahb a000000.wifi: wmi print 'free: 53204 iram: 13416 sram: 35752'
[   10.342486] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   10.461825] ath: EEPROM regdomain sanitized
[   10.461926] ath: EEPROM regdomain: 0x64
[   10.461980] ath: EEPROM indicates we should expect a direct regpair map
[   10.462119] ath: Country alpha2 being used: 00
[   10.462173] ath: Regpair used: 0x64
[   10.480754] ath10k_mac_create, priv_size: 924  hw: e759e7f9  hw->priv: ce5cd91d
[   11.490913] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   11.491092] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   11.503971] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-013-d81f62d97 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 adcbecaa
[   11.555928] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:17 crc32 24cecd7f
[   12.863710] ath10k_ahb a800000.wifi: unsupported HTC service id: 1536
[   12.864949] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   12.869144] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[   12.906174] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   12.907159] ath10k_ahb a800000.wifi: wmi print 'free: 53204 iram: 13416 sram: 35752'
[   13.029261] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   13.142888] ath: EEPROM regdomain sanitized
[   13.142992] ath: EEPROM regdomain: 0x64
[   13.143046] ath: EEPROM indicates we should expect a direct regpair map
[   13.143186] ath: Country alpha2 being used: 00
[   13.143239] ath: Regpair used: 0x64
[   13.187528] kmodloader: done loading kernel modules from /etc/modules.d/*
[   28.355125] br-lan: port 1(eth0) entered blocking state
[   28.355181] br-lan: port 1(eth0) entered disabled state
[   28.359722] device eth0 entered promiscuous mode
[   28.386363] ess_edma c080000.edma: eth1: GMAC Link is down
[   29.431451] br-lan: port 1(eth0) entered blocking state
[   29.431504] br-lan: port 1(eth0) entered forwarding state
[   29.438802] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   31.516064] ess_edma c080000.edma: eth1: GMAC Link is up with phy_speed=1000
[   31.517073] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[ 2243.135596] ath10k_ahb a000000.wifi: unsupported HTC service id: 1536
[ 2243.135747] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[ 2243.141094] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[ 2243.177879] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[ 2243.178928] ath10k_ahb a000000.wifi: wmi print 'free: 53204 iram: 13416 sram: 35752'
[ 2243.469041] ath10k_ahb a000000.wifi: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[ 2243.494254] br-lan: port 2(wlan0) entered blocking state
[ 2243.494291] br-lan: port 2(wlan0) entered disabled state
[ 2243.499072] device wlan0 entered promiscuous mode
[ 2243.506520] ath10k_ahb a000000.wifi: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000
[ 2243.726203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2243.728572] br-lan: port 2(wlan0) entered blocking state
[ 2243.732208] br-lan: port 2(wlan0) entered forwarding state
[ 2268.491653] ath10k_ahb a800000.wifi: unsupported HTC service id: 1536
[ 2268.491830] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[ 2268.497096] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[ 2268.534103] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[ 2268.535146] ath10k_ahb a800000.wifi: wmi print 'free: 53204 iram: 13416 sram: 35752'
[ 2268.818613] ath10k_ahb a800000.wifi: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[ 2268.844827] br-lan: port 3(wlan1) entered blocking state
[ 2268.844870] br-lan: port 3(wlan1) entered disabled state
[ 2268.849752] device wlan1 entered promiscuous mode
[ 2269.357819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2269.360264] br-lan: port 3(wlan1) entered blocking state
[ 2269.363844] br-lan: port 3(wlan1) entered forwarding state
[ 2410.703997] device wlan0 left promiscuous mode
[ 2410.704282] br-lan: port 2(wlan0) entered disabled state
[ 2410.842057] ath10k_ahb a000000.wifi: mac flush null vif, drop 0 queues 0xffff
[ 2410.843778] ath10k_ahb a000000.wifi: peer-unmap-event: unknown peer id 0
[ 2411.074615] device wlan1 left promiscuous mode
[ 2411.076239] br-lan: port 3(wlan1) entered disabled state
[ 2411.170010] ath10k_ahb a800000.wifi: mac flush null vif, drop 0 queues 0xffff
[ 2411.177514] ath10k_ahb a800000.wifi: peer-unmap-event: unknown peer id 0
[ 2417.699262] ath10k_ahb a800000.wifi: unsupported HTC service id: 1536
[ 2417.699459] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[ 2417.704763] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[ 2417.741579] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[ 2417.743002] ath10k_ahb a800000.wifi: wmi print 'free: 53204 iram: 13416 sram: 35752'
[ 2418.027429] ath10k_ahb a800000.wifi: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[ 2418.054012] br-lan: port 2(wlan1) entered blocking state
[ 2418.054055] br-lan: port 2(wlan1) entered disabled state
[ 2418.058862] device wlan1 entered promiscuous mode
[ 2418.567740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2418.570018] br-lan: port 2(wlan1) entered blocking state
[ 2418.573793] br-lan: port 2(wlan1) entered forwarding state
  • hAP ac2 and cAP ac have similar hardware:


Hello, is it stable? I'm planning on buying 2 of this units