No change after adding these delays to mdio:
reset-delay-us = <10000>;
reset-post-delay-us = <50000>;
The problems are probably not related. I have the same issue on kernel 6.1 and everything is working if AQR firmware is loaded from u-boot.
1 Like
I installed openwrt snapshot for my mx8500.
All ports are working but I cannot get the wifi to work.
I tried 2g, 5g, 6g and different ht_mode (HT20, VHT40, ...), the log shows that the changes are correctly made and I get phy0-ap0: AP-ENABLED at the end but the SSID is not broadcast and I cannot see it from another device.
Below are the different logs:
/etc/config/wireless
> config wifi-device 'radio0'
> option type 'mac80211'
> option path 'soc@0/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
> option htmode 'VHT40'
> option disabled '0'
> option band '5g'
> option country 'US'
> option channels '36 40 44 48 157'
> option channel '40'
>
> config wifi-iface 'default_radio0'
> option device 'radio0'
> option network 'lan'
> option mode 'ap'
> option ssid 'x'
> option encryption 'psk2'
> option key 'x'
```
iw phy0 info
Wiphy phy0
wiphy index: 0
max # scan SSIDs: 16
max scan IEs length: 142 bytes
max # sched scan SSIDs: 0
max # match sets: 0
Retry short limit: 7
Retry long limit: 4
Coverage class: 0 (up to 0m)
Device supports AP-side u-APSD.
Available Antennas: TX 0xf RX 0xf
Configured Antennas: TX 0xf RX 0xf
Supported interface modes:
* managed
* AP
* monitor
* mesh point
Band 2:
Capabilities: 0x19e7
RX LDPC
HT20/HT40
Dynamic SM Power Save
RX HT20 SGI
RX HT40 SGI
TX STBC
RX STBC 1-stream
Max AMSDU length: 7935 bytes
DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: No restriction (0x00)
HT TX/RX MCS rate indexes supported: 0-31
VHT Capabilities (0x338b79fa):
Max MPDU length: 11454
Supported Channel Width: 160 MHz, 80+80 MHz
RX LDPC
short GI (80 MHz)
short GI (160/80+80 MHz)
TX STBC
SU Beamformer
SU Beamformee
MU Beamformer
RX antenna pattern consistency
TX antenna pattern consistency
VHT RX MCS set:
1 streams: MCS 0-9
2 streams: MCS 0-9
3 streams: MCS 0-9
4 streams: MCS 0-9
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
VHT RX highest supported: 0 Mbps
VHT TX MCS set:
1 streams: MCS 0-9
2 streams: MCS 0-9
3 streams: MCS 0-9
4 streams: MCS 0-9
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
VHT TX highest supported: 0 Mbps
VHT extended NSS: supported
HE Iftypes: managed
HE MAC Capabilities (0x000b9a181040):
+HTC HE Supported
TWT Requester
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c89ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation: 1
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE Iftypes: AP
HE MAC Capabilities (0x000d9a181040):
+HTC HE Supported
TWT Responder
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE Iftypes: mesh point
HE MAC Capabilities (0x00098a081040):
+HTC HE Supported
Dynamic BA Fragementation Level: 1
BSR
OM Control
Maximum A-MPDU Length Exponent: 1
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c600c80fd5b811c100000):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
SU Beamformer
SU Beamformee
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Codebook Size SU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
HE ER SU PPDU 1x HE-LTF 0.8us GI
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
Frequencies:
* 5180.0 MHz [36] (30.0 dBm)
* 5200.0 MHz [40] (30.0 dBm)
* 5220.0 MHz [44] (30.0 dBm)
* 5240.0 MHz [48] (30.0 dBm)
* 5260.0 MHz [52] (24.0 dBm) (radar detection)
* 5280.0 MHz [56] (24.0 dBm) (radar detection)
* 5300.0 MHz [60] (24.0 dBm) (radar detection)
* 5320.0 MHz [64] (24.0 dBm) (radar detection)
* 5500.0 MHz [100] (24.0 dBm) (radar detection)
* 5520.0 MHz [104] (24.0 dBm) (radar detection)
* 5540.0 MHz [108] (24.0 dBm) (radar detection)
* 5560.0 MHz [112] (24.0 dBm) (radar detection)
* 5580.0 MHz [116] (24.0 dBm) (radar detection)
* 5600.0 MHz [120] (24.0 dBm) (radar detection)
* 5620.0 MHz [124] (24.0 dBm) (radar detection)
* 5640.0 MHz [128] (24.0 dBm) (radar detection)
* 5660.0 MHz [132] (24.0 dBm) (radar detection)
* 5680.0 MHz [136] (24.0 dBm) (radar detection)
* 5700.0 MHz [140] (24.0 dBm) (radar detection)
* 5720.0 MHz [144] (24.0 dBm) (radar detection)
* 5745.0 MHz [149] (30.0 dBm)
* 5765.0 MHz [153] (30.0 dBm)
* 5785.0 MHz [157] (30.0 dBm)
* 5805.0 MHz [161] (30.0 dBm)
* 5825.0 MHz [165] (30.0 dBm)
* 5845.0 MHz [169] (30.0 dBm)
* 5865.0 MHz [173] (30.0 dBm)
* 5885.0 MHz [177] (30.0 dBm)
valid interface combinations:
* #{ managed } <= 1, #{ AP, mesh point } <= 16,
total <= 16, #channels <= 1, STA/AP BI must match, radar detect widths: { 20 MHz (no HT), 20 MHz, 40 MHz, 80 MHz, 80+80 MHz, 160 MHz }HT Capability overrides: * MCS: ff ff ff ff ff ff ff ff ff ff * maximum A-MSDU length * supported channel width * short GI for 40 MHz * max A-MPDU length exponent * min MPDU start spacing max # scan plans: 1 max scan plan interval: -1 max scan plan iterations: 0 Maximum associated stations in AP mode: 128 Supported extended features: * [ RRM ]: RRM * [ SET_SCAN_DWELL ]: scan dwell setting * [ FILS_STA ]: STA FILS (Fast Initial Link Setup) * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211 * [ ACK_SIGNAL_SUPPORT ]: ack signal level support * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs * [ ENABLE_FTM_RESPONDER ]: enable FTM (Fine Time Measurement) responder * [ STA_TX_PWR ]: TX power control per station * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support * [ BSS_COLOR ]: BSS coloring support * [ POWERED_ADDR_CHANGE ]: can change MAC address while up
iw dev phy0-ap0 info
Interface phy0-ap0
ifindex 9
wdev 0x1
addr e8:9f:80:f0:02:bb
ssid camerica2
type AP
wiphy 0
channel 40 (5200 MHz), width: 40 MHz, center1: 5190 MHz
txpower 30.00 dBm
multicast TXQ:
qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets
0 0 0 0 0 0 0 0 0
iwinfo
root@OpenWrt:~# iwinfo
phy0-ap0 ESSID: "xxx"
Access Point: X
Mode: Master Channel: 40 (5.200 GHz) HT Mode: HT40
Center Channel 1: 38 2: unknown
Tx-Power: 30 dBm Link Quality: unknown/70
Signal: unknown Noise: -107 dBm
Bit Rate: unknown
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11ac/ax/n
Hardware: 17CB:1104 17CB:1104 [Qualcomm Atheros QCN6024/9024/9074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy0
logread:
https://pastebin.com/Gq063SrgThis PR need to be merged: OpenWrt support for Linksys MX8500 - #186 by lytr
BDF for QCN9074 needs some work.
Looking forward to the PR getting merged so I can continue testing. Thank you!
While on the topic of wifi, after reading everything I could find, my understanding is that you need a different BDF for each band (2g,5g,6g) but that you can only start one band for each Phy.
Is this understanding correct?
If correct, why is the linksys firmware able to run 3 band at the same time? Is it using different driver and firmware than the opensource ones?
Also, I am still confused with what the BDF is and what are the other firmware for the ath11k.
I understand the ath11k driver is used and then load the firmware based on the bus id. But then I don't undesrtand if the BDF is the firmware or is it the board-2.bin?
Also is the BDF a file that is coming from Qualcomm or from somewhere else ? I see that latest firmware are supposed to be in codelinaro git but currently there is no 2.9.0 BDF? in it.
Thanks,
Hello,
I recompiled openwrt using testuser7 mx8500 branch and loading latest openwrt changes.
I also used testuser7 changes for the firmware_qca-wireless.
With this, the 2G and 5G network are working very well.
There is a phy2 that allowed 6G frequency but I am not able to make it work. Hostap is complaining about channels.
iwinfo
phy0-ap0 ESSID: "OpenWrt5G"
Access Point:
Mode: Master Channel: 36 (5.180 GHz) HT Mode: HE80
Center Channel 1: 42 2: unknown
Tx-Power: 24 dBm Link Quality: unknown/70
Signal: unknown Noise: -112 dBm
Bit Rate: unknown
Encryption: WPA3 SAE (CCMP)
Type: nl80211 HW Mode(s): 802.11ac/ax/n
Hardware: embedded [Qualcomm Atheros IPQ8074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy0
phy1-ap0 ESSID: "OpenWrt2G"
Access Point:
Mode: Master Channel: 1 (2.412 GHz) HT Mode: HE20
Center Channel 1: 1 2: unknown
Tx-Power: 29 dBm Link Quality: unknown/70
Signal: unknown Noise: -102 dBm
Bit Rate: unknown
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11ax/b/g/n
Hardware: embedded [Qualcomm Atheros IPQ8074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy1
iw dev
phy#1
Interface phy1-ap0
ifindex 53
wdev 0x100000015
addr e8:9f:80:f0:02:b9
ssid OpenWrt2G
type AP
channel 1 (2412 MHz), width: 20 MHz, center1: 2412 MHz
txpower 29.00 dBm
multicast TXQ:
qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets
0 0 4169 0 0 0 0 305877 4169
phy#0
Interface phy0-ap0
ifindex 54
wdev 0x14
addr e8:9f:80:f0:02:ba
ssid OpenWrt5G
type AP
channel 36 (5180 MHz), width: 80 MHz, center1: 5210 MHz
txpower 24.00 dBm
multicast TXQ:
qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets
0 0 1026 0 0 0 0 81477 1026
1 Like
@hot21shot ...great to hear you were successful in getting the 2&5 networks running. I'm still looking forward to these changes landing in SNAPSHOT so I can continue testing also!
Hello,
So I got the 6G network working on the Linksys MX8500.
I followed this guide here:
https://www.reddit.com/r/homelab/comments/ymecyp/wifi_6e_softap_qcn9074_on_x86/
The key is basically to create a new board-2.bin using the 0x2A (162) board-id number and assigning it to the 255 board-id.
As per the guide, the 162 is the 6G board and the 255 is the generic one when the chip has not been fused into any specific band.
It should also be possible to run it at 5G but when trying that, I couldn't get it to work.
I did some simple test and the connection is working (from android phone to AP on the 6G band).
Thanks,
@hotshot21... Nice work, thank you! I'm hoping PR#37 will get approved for commit soon. I assume you would create a subsequent pull request after that for this improvement?
Awesome work!
Could you upload your board-2.bin and also where you got the original file to modify from? I tried the BDFs from snapshot, @lytr's PR, and codelinaro.org, and none seem to quite work.
Also, I can't seem to select a channel
I used the board-2.bin from dd-wrt: https://github.com/mirror/dd-wrt/tree/master/src/router/mac80211/ath10k-firmware-38eeda3ae6f90fde5546bdd48ee4ff3090f238c0/ath11k/QCN9074/hw1.0
I also updated the IPQ8074 and QCN9074 to the 2.12 firmware from DD-WRT.
With the board file, you need to use the qca-swiss-army-knife tools to extract the individual board file, update the generated json to have the 255 pointing to the 162 board file and rebuild the board-2.bin.
This will only work for QCN9074 for 1 6G band as any other QCN9074 would load the same board file and be limited to 5G.
Normally we should be able to make it work in 5G also but could make that work.
Still running some test to see if the wifi is stable and working fine in all bands (to test 2.12 and the board-2 for QCN9074).
Not sure we want to push that upstream as this is very specific for the MX8500 and would not potentially work for other devices.
Also I am not sure why this board file from DD-WRT work when the one in firmware_qca-wireless doesn't.
And by the way, don't try to use the board-2 file for IPQ8074 from DD-WRT, it doesn't work in MX8500.
I followed your instructions religiously. The logs show I have the updated 2.12 firmware and no board-2 errors, so it seems to have accepted the frankenboard-2 for QCN9074 created by swiss-army-knife.
Despite all this, the 6G band is still not coming up and I still can't select a channel. Can you share your board-2 file? I might have done something wrong building it, although the process seemed straightforward.
Also, I don't think there should be any issue putting this in a PR. If you don't want to generalize for other QCN9074 routers, just change the JSON to "bus=pci,qmi-chip-id=0,qmi-board-id=255,variant=Linksys-MX8500"
Here is the complete /lib/firmware I am using: https://fex.net/s/rxyv0kb
Also attached my /etc/config/wireless:
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc@0/c000000.wifi'
option band '5g'
option channel '100'
option htmode 'HE80'
option disabled '0'
option cell_density '2'
option country 'US'
option he_bss_color '10'
option he_mu_beamformee '1'
config wifi-iface 'default_radio1'
option device 'radio1'
option mode 'ap'
option ssid 'x'
option encryption 'psk2'
option key 'x'
option dtim_period '1'
option max_inactivity '86400'
option ieee80211w '2'
option ocv '1'
option network 'lan'
option ieee80211r '1'
option ft_over_ds '0'
option ft_psk_generate_local '1'
option ieee80211k '1'
option time_advertisement '2'
option wnm_sleep_mode '1'
option wnm_sleep_mode_no_keys '1'
option bss_transition '1'
option proxy_arp '1'
option reassociation_deadline '20000'
config wifi-device 'radio2'
option type 'mac80211'
option path 'platform/soc@0/c000000.wifi+1'
option band '2g'
option channel '6'
option htmode 'HE20'
option disabled '0'
option cell_density '2'
option country 'US'
option he_bss_color '11'
option he_mu_beamformee '1'
config wifi-iface 'default_radio2'
option device 'radio2'
option network 'lan'
option mode 'ap'
option ssid 'x'
option encryption 'psk2'
option key 'x'
option dtim_period '1'
option max_inactivity '86400'
option disassoc_low_ack '0'
config wifi-device 'radio5'
option type 'mac80211'
option path 'soc@0/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
option band '6g'
option country 'US'
option htmode 'HE160'
option disabled '0'
option channel '37'
option cell_density '0'
option he_bss_color '12'
option he_mu_beamformee '1'
config wifi-iface 'default_radio5'
option device 'radio5'
option network 'lan'
option mode 'ap'
option ssid 'x'
option encryption 'sae'
option key 'x'
option dtim_period '1'
option max_inactivity '86400'
option ocv '1'
option wnm_sleep_mode '1'
option bss_transition '1'
option proxy_arp '1'
option ieee80211r '1'
option ft_over_ds '0'
option ieee80211k '1'
option time_advertisement '2'
option reassociation_deadline '20000'
resulting iw info:
phy0-ap0 ESSID: "x"
Access Point: x
Mode: Master Channel: 100 (5.500 GHz) HT Mode: HE80
Center Channel 1: 106 2: unknown
Tx-Power: 23 dBm Link Quality: 22/70
Signal: -88 dBm Noise: -109 dBm
Bit Rate: 34.4 MBit/s
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11ac/ax/n
Hardware: embedded [Qualcomm Atheros IPQ8074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy0
phy1-ap0 ESSID: "x"
Access Point: x
Mode: Master Channel: 6 (2.437 GHz) HT Mode: HE20
Center Channel 1: 6 2: unknown
Tx-Power: 29 dBm Link Quality: 37/70
Signal: -73 dBm Noise: -105 dBm
Bit Rate: 80.5 MBit/s
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11ax/b/g/n
Hardware: embedded [Qualcomm Atheros IPQ8074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy1
phy2-ap0 ESSID: "x"
Access Point: x
Mode: Master Channel: 37 (6.135 GHz) HT Mode: HE160
Center Channel 1: 47 2: unknown
Tx-Power: 18 dBm Link Quality: unknown/70
Signal: unknown Noise: -109 dBm
Bit Rate: unknown
Encryption: WPA3 SAE (CCMP)
Type: nl80211 HW Mode(s): 802.11ax
Hardware: 17CB:1104 17CB:1104 [Qualcomm Atheros QCN6024/9024/9074]
TX power offset: none
Frequency offset: none
Supports VAPs: yes PHY name: phy2
iw phy for the phy2 (qcn9074)
Wiphy phy2
wiphy index: 2
max # scan SSIDs: 16
max scan IEs length: 184 bytes
max # sched scan SSIDs: 0
max # match sets: 0
Retry short limit: 7
Retry long limit: 4
Coverage class: 0 (up to 0m)
Device supports RSN-IBSS.
Device supports AP-side u-APSD.
Supported Ciphers:
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* CMAC (00-0f-ac:6)
* CMAC-256 (00-0f-ac:13)
* GMAC-128 (00-0f-ac:11)
* GMAC-256 (00-0f-ac:12)
* GCMP-128 (00-0f-ac:8)
* GCMP-256 (00-0f-ac:9)
* CCMP-256 (00-0f-ac:10)
Available Antennas: TX 0xf RX 0xf
Configured Antennas: TX 0xf RX 0xf
Supported interface modes:
* managed
* AP
* monitor
* mesh point
Band 4:
HE Iftypes: managed
HE MAC Capabilities (0x000b9a181040):
+HTC HE Supported
TWT Requester
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c89ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation: 1
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE Iftypes: AP
HE MAC Capabilities (0x000d9a181040):
+HTC HE Supported
TWT Responder
Dynamic BA Fragementation Level: 1
BSR
Broadcast TWT
OM Control
Maximum A-MPDU Length Exponent: 3
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c604c88ffdb839c110c00):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
Full Bandwidth UL MU-MIMO
DCM Max Constellation Rx: 1
SU Beamformer
SU Beamformee
MU Beamformer
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Ng = 16 MU Feedback
Codebook Size SU Feedback
Codebook Size MU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
STBC Rx > 80MHz
HE ER SU PPDU 4x HE-LTF 0.8us GI
HE ER SU PPDU 1x HE-LTF 0.8us GI
TX 1024-QAM
RX 1024-QAM
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE Iftypes: mesh point
HE MAC Capabilities (0x00098a081040):
+HTC HE Supported
Dynamic BA Fragementation Level: 1
BSR
OM Control
Maximum A-MPDU Length Exponent: 1
RX Control Frame to MultiBSS
A-MSDU in A-MPDU
OM Control UL MU Data Disable RX
HE PHY Capabilities: (0x1c600c80fd5b811c100000):
HE40/HE80/5GHz
HE160/5GHz
HE160/HE80+80/5GHz
LDPC Coding in Payload
HE SU PPDU with 1x HE-LTF and 0.8us GI
STBC Tx <= 80MHz
STBC Rx <= 80MHz
SU Beamformer
SU Beamformee
Beamformee STS <= 80Mhz: 7
Beamformee STS > 80Mhz: 7
Sounding Dimensions <= 80Mhz: 3
Sounding Dimensions > 80Mhz: 3
Ng = 16 SU Feedback
Codebook Size SU Feedback
PPE Threshold Present
HE SU PPDU & HE PPDU 4x HE-LTF 0.8us GI
Max NC: 3
HE ER SU PPDU 1x HE-LTF 0.8us GI
HE RX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set <= 80 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE RX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
HE TX MCS and NSS set 160 MHz
1 streams: MCS 0-11
2 streams: MCS 0-11
3 streams: MCS 0-11
4 streams: MCS 0-11
5 streams: not supported
6 streams: not supported
7 streams: not supported
8 streams: not supported
Bitrates (non-HT):
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 5955.0 MHz [1] (30.0 dBm)
* 5975.0 MHz [5] (30.0 dBm)
* 5995.0 MHz [9] (30.0 dBm)
* 6015.0 MHz [13] (30.0 dBm)
* 6035.0 MHz [17] (30.0 dBm)
* 6055.0 MHz [21] (30.0 dBm)
* 6075.0 MHz [25] (30.0 dBm)
* 6095.0 MHz [29] (30.0 dBm)
* 6115.0 MHz [33] (30.0 dBm)
* 6135.0 MHz [37] (30.0 dBm)
* 6155.0 MHz [41] (30.0 dBm)
* 6175.0 MHz [45] (30.0 dBm)
* 6195.0 MHz [49] (30.0 dBm)
* 6215.0 MHz [53] (30.0 dBm)
* 6235.0 MHz [57] (30.0 dBm)
* 6255.0 MHz [61] (30.0 dBm)
* 6275.0 MHz [65] (30.0 dBm)
* 6295.0 MHz [69] (30.0 dBm)
* 6315.0 MHz [73] (30.0 dBm)
* 6335.0 MHz [77] (30.0 dBm)
* 6355.0 MHz [81] (30.0 dBm)
* 6375.0 MHz [85] (30.0 dBm)
* 6395.0 MHz [89] (30.0 dBm)
* 6415.0 MHz [93] (30.0 dBm)
* 6435.0 MHz [97] (30.0 dBm)
* 6455.0 MHz [101] (30.0 dBm)
* 6475.0 MHz [105] (30.0 dBm)
* 6495.0 MHz [109] (30.0 dBm)
* 6515.0 MHz [113] (30.0 dBm)
* 6535.0 MHz [117] (30.0 dBm)
* 6555.0 MHz [121] (30.0 dBm)
* 6575.0 MHz [125] (30.0 dBm)
* 6595.0 MHz [129] (30.0 dBm)
* 6615.0 MHz [133] (30.0 dBm)
* 6635.0 MHz [137] (30.0 dBm)
* 6655.0 MHz [141] (30.0 dBm)
* 6675.0 MHz [145] (30.0 dBm)
* 6695.0 MHz [149] (30.0 dBm)
* 6715.0 MHz [153] (30.0 dBm)
* 6735.0 MHz [157] (30.0 dBm)
* 6755.0 MHz [161] (30.0 dBm)
* 6775.0 MHz [165] (30.0 dBm)
* 6795.0 MHz [169] (30.0 dBm)
* 6815.0 MHz [173] (30.0 dBm)
* 6835.0 MHz [177] (30.0 dBm)
* 6855.0 MHz [181] (30.0 dBm)
* 6875.0 MHz [185] (30.0 dBm)
* 6895.0 MHz [189] (30.0 dBm)
* 6915.0 MHz [193] (30.0 dBm)
* 6935.0 MHz [197] (30.0 dBm)
* 6955.0 MHz [201] (30.0 dBm)
* 6975.0 MHz [205] (30.0 dBm)
* 6995.0 MHz [209] (30.0 dBm)
* 7015.0 MHz [213] (30.0 dBm)
* 7035.0 MHz [217] (30.0 dBm)
* 7055.0 MHz [221] (30.0 dBm)
* 7075.0 MHz [225] (30.0 dBm)
* 7095.0 MHz [229] (30.0 dBm)
* 7115.0 MHz [233] (30.0 dBm)
* 5935.0 MHz [2] (30.0 dBm)
Supported commands:
* new_interface
* set_interface
* new_key
* start_ap
* new_station
* new_mpath
* set_mesh_config
* set_bss
* authenticate
* associate
* deauthenticate
* disassociate
* join_ibss
* join_mesh
* remain_on_channel
* set_tx_bitrate_mask
* frame
* frame_wait_cancel
* set_wiphy_netns
* set_channel
* probe_client
* set_noack_map
* register_beacons
* start_p2p_device
* set_mcast_rate
* connect
* disconnect
* channel_switch
* set_qos_map
* set_multicast_to_unicast
software interface modes (can always be added):
* monitor
valid interface combinations:
* #{ managed } <= 1, #{ AP, mesh point } <= 16,
total <= 16, #channels <= 1, STA/AP BI must match, radar detect widths: { 20 MHz (no HT), 20 MHz, 40 MHz, 80 MHz, 80+80 MHz, 160 MHz }
HT Capability overrides:
* MCS: ff ff ff ff ff ff ff ff ff ff
* maximum A-MSDU length
* supported channel width
* short GI for 40 MHz
* max A-MPDU length exponent
* min MPDU start spacing
Device supports TX status socket option.
Device supports HT-IBSS.
Device supports SAE with AUTHENTICATE command
Device supports scan flush.
Device supports AP scan.
Device supports per-vif TX power setting
Driver supports full state transitions for AP/GO clients
Driver supports a userspace MPM
Driver/device bandwidth changes during BSS lifetime (AP/GO mode)
Device supports static SMPS
Device supports dynamic SMPS
Device supports configuring vdev MAC-addr on create.
Device supports randomizing MAC-addr in scans.
max # scan plans: 1
max scan plan interval: -1
max scan plan iterations: 0
Supported TX frame types:
* IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
Supported RX frame types:
* IBSS: 0x40 0xb0 0xc0 0xd0
* managed: 0x40 0xb0 0xd0
* AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* mesh point: 0xb0 0xc0 0xd0
* P2P-client: 0x40 0xd0
* P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* P2P-device: 0x40 0xd0
Maximum associated stations in AP mode: 128
Supported extended features:
* [ RRM ]: RRM
* [ SET_SCAN_DWELL ]: scan dwell setting
* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
* [ ACK_SIGNAL_SUPPORT ]: ack signal level support
* [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
* [ ENABLE_FTM_RESPONDER ]: enable FTM (Fine Time Measurement) responder
* [ STA_TX_PWR ]: TX power control per station
* [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
* [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
* [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
* [ FILS_DISCOVERY ]: FILS discovery frame transmission support
* [ UNSOL_BCAST_PROBE_RESP ]: unsolicated broadcast probe response transmission support
* [ BSS_COLOR ]: BSS coloring support
* [ POWERED_ADDR_CHANGE ]: can change MAC address while up
Thanks so much. I finally got it to bring up the 6G band! There were a few gotchas beyond replacing the board-2.bin, which I will document here.
Here is the relevant section of my wireless config, with the key parts in bold:
config wifi-device 'radio0'
option type 'mac80211'
option path 'soc@0/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
option band '6g'
option channel 'auto'
option htmode 'HE80'
option cell_density '0'
option country 'US'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt'
option encryption 'sae'
option key 'xxx'
option ieee80211r '1'
option ft_over_ds '0'
option ocv '0'
First, option band '6g' needs to be manually added. Second, WPA3 must be selected. Mixed WPA2/WPA3 won't work. Finally, 802.11w management frame must be set to 'Required.'
If all three are not exactly as specified, the 6G band won't come up.
With the board file, you need to use the qca-swiss-army-knife tools to extract the individual board file, update the generated json to have the 255 pointing to the 162 board file and rebuild the board-2.bin.
Using your instructions, I rebuilt the board-2.bin from https://git.codelinaro.org/clo/qsdk/oss/ath11k-bdf/-/tree/master/QCN9074/hw1.0/WLAN.HK.2.9.0.1/WLAN.HK.2.9.0.1-01977-QCAHKSWPL_SILICONZ-1
I used that instead of your dd-wrt source to align with the firmware currently in OpenWRT, but it actually doesn't make any difference. Building from the dd-wrt source results in a completely identical file. Like the PR from @lytr, I did not include the regdb.
I put the updated board-2 files in a USB stick attached to the router, and use a short script to update the files from snapshot builds: https://fex.net/s/rbsfdz6
This is now ready to be merged. Thanks to @lytr and @hot21shot for figuring all this out!
Very good news that this is working for you also.
I saw that testuser7 pushed a new bdf with working 6g. Thanks a lot.
Testuser7, is it build like mine with charging the 162 into a 255? Can you explain the difference if not and what patch you did to the bdf?
Thanks,
Happy 6G.
This is an OEM BDF updated to be compatible with the latest BDF format for QCN9074.