OpenWrt for Zyxel WSM20 (Multy M1) discussion

[SirLouen]

After some discussion in the #hardware-questions-and-recommendations inside the AX routers thread, I've come to a conclusion that I should be buying this product Zyxel Multy M1.

So basically, by checking the specs I bought a pack of 3, and I'm waiting because it will arrive by next Monday 20th.

@Annick has already opened them
https://forum.openwrt.org/t/802-11ax-routers/10484/700?u=sirlouen

And loaded U-Boot. It feels it's going to be kind of easy to set with OpenWRT, but I will try to help here also. For this week, I'm going to start retrieving all the hardware information and see if @Annick can interrupt U-Boot with the classic procedure. Anyway I have to find my solderer I don't remeber where I packed it my last moving of home last month

I've added the WIKI page also with all the information we will be finding in this thread:

ZyXEL WSM20 (Multy M1)

Already available to download in the latest snapshots:

Installation from ZyXEL UI: zyxel_wsm20-initramfs-kernel.bin

Installation instructions:

1. Log into the OEM web GUI
2. Access the hidden upgrade page by navigating to
   http://<ROUTER_IP>/gui/#/main/debug/firmwareupgrade
3. Upload the -initramfs-kernel.bin file and flash it
4. Wait for OpenWrt to boot and log in via SSH
5. Transfer the sysupgrade file via SCP
6. Run sysupgrade to install the image
7. Reboot and enjoy

Upgrade from OpenWRT: zyxel_wsm20-squashfs-sysupgrade.bin

[Annick]

opening of the case
side above
unclip at the back with an object like a mediator

serial port 115200 -> 3.3volts nothing, white RX -> TX , green TX -> RX , black GND

Startuo log

You can interrupt startup with f key ( not found login / password )

102.6 KB file on MEGA

Loading from nand0, offset 0x2c00000
Fit image detected...
FIT description: MIPS OpenWrt FIT (Flattened Image Tree)
Image 0 (kernel@1)
Description: MIPS OpenWrt Linux-4.4.198

U-Boot 1.0.3 (Jul 29 2021 - 06:23:57)
CPU: MediaTek MT7621AT ver 1, eco 3
Clocks: CPU: 880MHz, DDR: 1200MHz, Bus: 220MHz, XTAL: 40MHz
Model: MediaTek MT7621 reference board (NAND)
DRAM: 256 MiB
NAND: 128 MiB

[SirLouen]

This is definitelly great

U-Boot 1.0.3 (Jul 29 2021 - 06:23:57)

CPU:   MediaTek MT7621AT ver 1, eco 3
Clocks: CPU: 880MHz, DDR: 1200MHz, Bus: 220MHz, XTAL: 40MHz
Model: MediaTek MT7621 reference board (NAND)
DRAM:  256 MiB
NAND:  128 MiB

Maybe just with such user and password we could be sysupgrading straight from the U-Boot.

What happens if you interrupt with f

Can you send help command?

[hecatae]

Is there anything in the NWA50AX Wiki that can help?

[frollic]

Post the output.

[frollic]

interrupt uboot, post the output from help, and printenv.

FYI I've requested the M1 specific posts to be split from this thread, they're off topic.

[SirLouen]

@slh

Probably because there is no one taking such requests. Doing so would involve a lot of money and time, both of which are in short demand - if you want to see it supported, it would be up to you yourself to do the development.

@Annick

How open a Zyxel Multi M1

It's true, but it would be great to know more about all the specs as in the ToH

I would say:

Bootloader: U-Boot 99,99%
Flash: 128Mb???
RAM: 256Mb???
Ethernet ports (100mb/1Gb): 1 WAN Gb and 3 LAN Gb

Multy M1 - Specifications | Zyxel Networks

For me it looks the best future proof budget solution so far.

With the hype I'm seriously tempted on purchasing the pack of 3. They are absurdly cheap. Almost the same price as the shitty TP-Link TL-WR741 4/32 but we are talking about a killer AX1800 that may probably blast 90% of the current's ToH inventory (at least for a Dumb AP).

Given that 99,99% of the components have been already developed, only would like to see if the U-Boot can be halted and if it has some convenient way of flashing other than straight from UART (for dev is fine but for daily driver is a pain in the ass for me). But it seems that OEM factory images could be uploaded straight from Zyxel interface, which makes this amazing.

Also note that ZyXEL NR7101, NWA55AXE, NWA50AX has the exact same software and all three support 22.03.3

Also ZyXEL NR7101 is an amazing piece of hardware, which gives me some extra confidence on this budget APs.

[frollic]

@SirLouen

It's true, but it would be great to know more about all the specs as in the ToH

the boot log should reveal most of this, unless the output's supressed.

you could also see if you can find the info based on the markings, on the chips, on the PCB.

[SirLouen]

Dude, I've bought the pack out of pure hype. I've been reviewing hardware specs and for $20-$25 per unit, it's crazy!

As soon as they arrive i'm going all in

Anyway, to avoid keep on going on dev topics for this device, I've opened a more appropiate thread.
https://forum.openwrt.org/t/openwrt-for-zyxel-multy-m1/

[hecatae]

@Annick interrupt earlier, try hard reboot of the Zyxel and keep pressing ESC or space way way earlier in the uboot process.

[frollic]

or keep pressing the reset or WDS button while power it on, and watch the serial while doing so.

[hecatae]

@Annick if you unplug GND just after boot can you interrupt uboot?

I had an issue on the belkin rt1800 where I had to boot with GND unplugged and attach GND afterwards to break into uboot

[SirLouen]

You are not in bootloader, you are straight with that ZyXEL custom OpenWRT fully loaded.

I believe that you need to interrupt bootloader within the first second of loading. You can just reboot from OpenWRT and then start pressing keys like mad (possibly ENTER)

Can you check if sysupgrade command works within that custom OpenWRT?

[Annick]

In failsafe ode ( key f ) i can run sysupgrade & mtd

cat/proc/mtd
dev:    size   erasesize  name
mtd0: 07f80000 00020000 "All"
mtd1: 00100000 00020000 "Bootloader"
mtd2: 00100000 00020000 "Ubootenv"
mtd3: 001c0000 00020000 "Factory"
mtd4: 02800000 00020000 "firmware_now"
mtd5: 00380000 00020000 "kernel"
mtd6: 02440000 00020000 "rootfs"
mtd7: 02800000 00020000 "firmware"
mtd8: 00100000 00020000 "persist"
mtd9: 00400000 00020000 "rootfs_data"
mtd10: 025c0000 00020000 "app"
mtd11: 00100000 00020000 "crt"
mtd12: 02800000 00020000 "RAS1"
mtd13: 02800000 00020000 "RAS2"
root@(none):/#

Too bad there is no USB

Problem is login & password in not failsafe mode

[SirLouen]

@Annick

In failsafe ode ( key f ) i can run sysupgrade & mtd

This is more than enough.

Now its time to develop a firmware.

It would be great to find a TFTP in case we screw and brick the device

Will need to try the classic TFTP setups

[frollic]

still think you should check if the external buttons trigger some kind of recovery, then you wouldn't need to open the device for flashing.

[ercolino]

try another usb adapter or check the cable, or play with tx and rx

[frollic]

I assume there's output, but u-boot ignores the buttons ...

[SirLouen]

@ercolino

try another usb adapter or check the cable, or play with tx and rx

If he has the right output in the COM why do you think that playing with TX and RX would be a thing?

@frollic

I assume there's output, but u-boot ignores the buttons ...

Why would you interrupt the output if he already can access failsafe mode? There must be a TFTP already running from there.

@Annick

if we find the login password it would be easy

Can you do a ps to see which processes are running in failsafe?

[frollic]

@SirLouen

Why would you interrupt the output if he already can access failsafe mode?

Not what I'm saying/want.
I want to try to trigger a recovery w/o opening the device, but it seems to be a dead end.

@SirLouen

There must be a TFTP already running from there.

If you're already in openwrt, there's no TFTP, TFTP is used by uboot, if you can figure out the access.