OpenWrt support for Telewell TW-LTE/4G/3G router

JiiPee · September 23, 2021, 9:59am

Hello!

I got in hands Telewell TW-LTE/4G/3G router.

In my research it seems to be quite similar to some of the supported devices. Example to this https://openwrt.org/toh/d-link/dwr-921

It has same jboot recovery enviroment like D-Link devices, only differences what I have noticed is that D-Link have all NIC interface 100Mbps and this device have 4x1Gbps LAN and 100Mbps WAN ports. At least specs of D-link is telling that. And D-Link have integrated SIM slot, this have USB where you can stick some USB modems.

My question is, how safe it is for me to start flashing different openwrt firmwares to see if some already support this device?

Oh and currently I have root access to device via telnet. From shell I can see example this information.

RT305XL login: root
Password:
# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24Kc V5.0
BogoMIPS                : 386.04
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
ASEs implemented        : mips16 dsp
shadow register sets    : 1
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

# lsmod
Module                  Size  Used by
MT7610_ap            1497869  1
nf_nat_sip              6048  0
nf_conntrack_sip       18269  1 nf_nat_sip
rt2860v2_ap          1818584  1
hw_nat                 27953  0
ralink_wdt              3114  1
proc_sample            20409  0
# fdisk -l

Disk /dev/mtdblock0: 16 MB, 16777216 bytes
192 heads, 166 sectors/track, 1 cylinders
Units = cylinders of 31872 * 512 = 16318464 bytes


Disk /dev/mtdblock1: 0 MB, 65536 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes


Disk /dev/mtdblock2: 1 MB, 1310720 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes


Disk /dev/mtdblock3: 14 MB, 14221312 bytes
255 heads, 63 sectors/track, 1 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes


Disk /dev/mtdblock4: 0 MB, 916992 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes


Disk /dev/mtdblock5: 0 MB, 65536 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

# free
              total         used         free       shared      buffers
  Mem:        60752        48784        11968            0         5212
 Swap:            0            0            0
Total:        60752        48784        11968
# uname -a
Linux RT305XL 2.6.36 #43 PREEMPT Tue May 5 15:20:24 CST 2015 mips unknown

Or maybe someone can spot what clone this device is?
I think manufacturer is Amit because default root pass is amittima, found that from old d-link discussion.
So I believe that Amit is doing board design and then they are branded by different company to sell customers.
I think there is high changes that there is already openwrt firmware for this exact device.

JiiPee · September 26, 2021, 11:07pm

I have play around some more with this device. I don't have serial port at least not yet, but I think I got quite much full dmesg output.

# dmesg
Linux version 2.6.36 (shirley@SI2) (gcc version 4.3.5 (Buildroot 2011.05) ) #43 PREEMPT Tue May 5 15:20:24 CST 2015
CMD_LINE:console=ttyS1,57600n8 root=/dev/mtdblock3

 The CPU feqenuce set to 580 MHz
 PCIE: bypass PCIe DLL.
 PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
 disable all power about PCIe
CPU revision is: 00019650 (MIPS 24Kc)
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
On node 0 totalpages: 16384
free_area_init_node: node 0, pgdat 803ff5e0, node_mem_map 81000000
  Normal zone: 128 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 16256 pages, LIFO batch:3
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0004e3c7
Readback ErrCtl register=0004e3c7
Memory: 60576k/65536k available (3334k kernel code, 4960k reserved, 763k data, 176k init, 0k highmem)
Hierarchical RCU implementation.
        Verbose stalled-CPUs detection is disabled.
NR_IRQS:128
Console: colour dummy device 80x25
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 40009d
RALINK_GPIOMODE = 40009d
PPLL_CFG1=0xe74000
MT7620 PPLL lock
PPLL_DRV =0x80080504
start PCIe register access
RALINK_PCI_PCICFG_ADDR = 1000f0

*************** MT7620 PCIe RC mode *************
bio: create slab <bio-0> at 0
vgaarb: loaded
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: reg 14: [mem 0x00000000-0x0000ffff]
pci 0000:00:00.0: supports D1
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
pci 0000:01:00.0: PME# disabled
pci 0000:01:00.1: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.1: supports D1
pci 0000:01:00.1: PME# supported from D0 D1 D3hot D3cold
pci 0000:01:00.1: PME# disabled
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
pci 0000:00:00.0:   bridge window [mem pref disabled]
PCI: Setting latency timer of device 0000:00:00.0 to 64
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20100000
res[0]->end = 201fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS 80 bytes, default 32
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 118
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=3
======================================
   SPI driver, modified by Jason
======================================
---
0x60: 0x0040009d
-----
spidrv_major = 217
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
brd: module loaded
deice id : c2 20 18 c2 20 (2018c220)
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 4096
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "Whole"
0x000000000000-0x000000010000 : "Bootloader"
0x000000010000-0x000000150000 : "Kernel"
0x000000180000-0x000000f10000 : "RootFS"
0x000000f10010-0x000000ff0000 : "UI"
mtd: partition "UI" doesn't start on an erase block boundary -- force read-only
0x000000ff0000-0x000001000000 : "Config"
rdm_major = 253
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880f8
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, Tx Ring = 256, Rx Ring = 256
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880f1
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (946 buckets, 3784 max)
xt_time: kernel timezone is -0000
IPv4 over IPv4 tunneling driver
GRE over IPv4 demultiplexor driver
gre: can't add protocol
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 176k freed
Raeth v3.0 (NAPI
,SkbRecycle)

phy_tx_ring = 0x03fc0000, tx_ring = 0xa3fc0000

phy_rx_ring0 = 0x03fc1000, rx_ring0 = 0xa3fc1000
Search Phy: 0x0 ,0x4d ,0xd036
Find AR8327/8337 GiGa switch 0x4d ,0xd036
AR8327 id       ==> 0x1302
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880f1
ESW: Link Status Changed - Port5 Link UP
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
addrconf_dad_completed 7

 write athero reg off:614 val:80000001

 write athero reg off:424 val:280

 write athero reg off:48 val:28100

 write athero reg off:42c val:80

 write athero reg off:434 val:80

 write athero reg off:43c val:80

 write athero reg off:444 val:80

 write athero reg off:44c val:80

 write athero reg off:610 val:1b3fc0

 write athero reg off:614 val:80020002

 write athero reg off:69c val:40201

 write athero reg off:448 val:20002

 write athero reg off:90 val:280

 write athero reg off:610 val:1bc000

 write athero reg off:614 val:80010002

 write athero reg off:690 val:14020f

 write athero reg off:440 val:10001

 write athero reg off:8c val:280

 write athero reg off:684 val:140217

 write athero reg off:438 val:10001

 write athero reg off:88 val:280

 write athero reg off:678 val:14021b

 write athero reg off:430 val:10001

 write athero reg off:84 val:280

 write athero reg off:66c val:14021d

 write athero reg off:428 val:10001

 write athero reg off:80 val:280
device eth2 entered promiscuous mode
device eth2.1 entered promiscuous mode
br0: port 1(eth2.1) entering forwarding state
br0: port 1(eth2.1) entering forwarding state
phy 0, reg 0, val 0x800
phy 1, reg 0, val 0x800
phy 2, reg 0, val 0x800
phy 3, reg 0, val 0x800
phy 4, reg 0, val 0x800
phy 5, reg 0, val 0x800

 write athero reg off:660 val:14023e

 write athero reg off:420 val:30003

 write athero reg off:7c val:4e

 write athero reg off:614 val:80000005

 read athero reg off:614 val:10005

 read athero reg off:610 val:1bc000

 write athero reg off:614 val:80010005

 read athero reg off:614 val:20005

 read athero reg off:610 val:1b3fc0

 write athero reg off:614 val:80020005

 read athero reg off:614 val:5
ramtd_erase: addr:ff0000 len:0
ramtd_write: to:ff0000 len:10
ramtd_write: to:ff0010 len:89a
ramtd_write: to:ff0000 len:1
addrconf_dad_completed 7
phy 0, reg 0, val 0x3300
addrconf_dad_completed 7
phy 1, reg 0, val 0x3300
addrconf_dad_completed 7
phy 2, reg 0, val 0x3300
phy 3, reg 0, val 0x3300
phy 4, reg 0, val 0x3300
phy 5, reg 0, val 0x3300
device eth2.2 entered promiscuous mode
br0: port 2(eth2.2) entering forwarding state
br0: port 2(eth2.2) entering forwarding state

 write athero reg off:624 val:3f7f7f7f
eth2: no IPv6 routers present

 write athero reg off:620 val:4f8

 write athero reg off:618 val:1ff8002b

 write athero reg off:214 val:1060606

 write athero reg off:210 val:6060606

 write athero reg off:664 val:40018

 write athero reg off:670 val:40018

 write athero reg off:67c val:40018

 write athero reg off:688 val:40018

 write athero reg off:694 val:40018

 write athero reg off:6a0 val:40018

 write athero reg off:6ac val:40018

 write athero reg off:30 val:80000302

 write athero reg off:404 val:e0000000

 write athero reg off:408 val:0

 write athero reg off:40c val:11

 write athero reg off:410 val:0

 write athero reg off:414 val:20

 write athero reg off:400 val:80000000

 write athero reg off:404 val:f0000000

 write athero reg off:408 val:0

 write athero reg off:40c val:ff

 write athero reg off:410 val:30000

 write athero reg off:414 val:c2

 write athero reg off:400 val:80000100

 write athero reg off:404 val:e001

 write athero reg off:408 val:2800

 write athero reg off:40c val:0

 write athero reg off:410 val:0

 write athero reg off:414 val:0

 write athero reg off:400 val:80000200

 write athero reg off:970 val:3cfc9996

 write athero reg off:978 val:3300fc96

 write athero reg off:980 val:3300fc96

 write athero reg off:988 val:3300fc96

 write athero reg off:990 val:3300fc96

 write athero reg off:998 val:3300fc96

 write athero reg off:9a0 val:3300fc96

 write athero reg off:974 val:c6

 write athero reg off:97c val:c6

 write athero reg off:984 val:c6

 write athero reg off:98c val:c6

 write athero reg off:994 val:c6

 write athero reg off:99c val:c6

 write athero reg off:9a4 val:c6

 write athero reg off:90 val:280

 write athero reg off:8c val:280

 write athero reg off:88 val:280

 write athero reg off:84 val:280

 write athero reg off:80 val:280
eth2.1: no IPv6 routers present
eth2.2: no IPv6 routers present
hw_nat: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Ralink HW NAT Module Enabled
Ralink APSoC Hardware Watchdog Timer
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
Ralink HW NAT Module Disabled
Ralink HW NAT Module Enabled
ramtd_erase: addr:ff0000 len:0
ramtd_write: to:ff0000 len:10
ramtd_write: to:ff0010 len:89a
ramtd_write: to:ff0000 len:1
Length of MAC:6
 mac:0:1e:ab:12:a0:34:
----


=== pAd = c1641000, size = 1146928 ===

 RTMPAllocTxRxRingMemory, Status=0
 RTMPAllocAdapterBlock, Status=0
AP Driver version-2.7.1.6
Length of MAC:6
 mac:0:1e:ab:12:a0:35:
----
PCI: Setting latency timer of device 0000:01:00.0 to 64


=== pAd = c1c82000, size = 1635280 ===

 RTMPAllocTxRxRingMemory, Status=0
 RTMPAllocAdapterBlock, Status=0
device_id =0x7650
==>MT76x0_WLAN_ChipOnOff(): OnOff:1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0xff000002
MACVersion = 0x76502000
RX DESC a2239000  size = 2048
RTMP_TimerListAdd: add timer obj c16d8e50!
RTMP_TimerListAdd: add timer obj c16a3fd0!
RTMP_TimerListAdd: add timer obj c16a3fa4!
RTMP_TimerListAdd: add timer obj c16a3f78!
RTMP_TimerListAdd: add timer obj c164923c!
RTMP_TimerListAdd: add timer obj c1648e30!
RTMP_TimerListAdd: add timer obj c164920c!
RTMP_TimerListAdd: add timer obj c1649548!
RTMP_TimerListAdd: add timer obj c1649488!
RTMP_TimerListAdd: add timer obj c16494b8!
RTMP_TimerListAdd: add timer obj c164c678!
RTMP_TimerListAdd: add timer obj c164c26c!
RTMP_TimerListAdd: add timer obj c164c648!
RTMP_TimerListAdd: add timer obj c164c984!
RTMP_TimerListAdd: add timer obj c164c8c4!
RTMP_TimerListAdd: add timer obj c164c8f4!
RTMP_TimerListAdd: add timer obj c164fab4!
RTMP_TimerListAdd: add timer obj c164f6a8!
RTMP_TimerListAdd: add timer obj c164fa84!
RTMP_TimerListAdd: add timer obj c164fdc0!
RTMP_TimerListAdd: add timer obj c164fd00!
RTMP_TimerListAdd: add timer obj c164fd30!
RTMP_TimerListAdd: add timer obj c1652ef0!
RTMP_TimerListAdd: add timer obj c1652ae4!
RTMP_TimerListAdd: add timer obj c1652ec0!
RTMP_TimerListAdd: add timer obj c16531fc!
RTMP_TimerListAdd: add timer obj c165313c!
RTMP_TimerListAdd: add timer obj c165316c!
RTMP_TimerListAdd: add timer obj c165632c!
RTMP_TimerListAdd: add timer obj c1655f20!
RTMP_TimerListAdd: add timer obj c16562fc!
RTMP_TimerListAdd: add timer obj c1656638!
RTMP_TimerListAdd: add timer obj c1656578!
RTMP_TimerListAdd: add timer obj c16565a8!
RTMP_TimerListAdd: add timer obj c1659768!
RTMP_TimerListAdd: add timer obj c165935c!
RTMP_TimerListAdd: add timer obj c1659738!
RTMP_TimerListAdd: add timer obj c1659a74!
RTMP_TimerListAdd: add timer obj c16599b4!
RTMP_TimerListAdd: add timer obj c16599e4!
RTMP_TimerListAdd: add timer obj c165cba4!
RTMP_TimerListAdd: add timer obj c165c798!
RTMP_TimerListAdd: add timer obj c165cb74!
RTMP_TimerListAdd: add timer obj c165ceb0!
RTMP_TimerListAdd: add timer obj c165cdf0!
RTMP_TimerListAdd: add timer obj c165ce20!
RTMP_TimerListAdd: add timer obj c165ffe0!
RTMP_TimerListAdd: add timer obj c165fbd4!
RTMP_TimerListAdd: add timer obj c165ffb0!
RTMP_TimerListAdd: add timer obj c16602ec!
RTMP_TimerListAdd: add timer obj c166022c!
RTMP_TimerListAdd: add timer obj c166025c!
RTMP_TimerListAdd: add timer obj c16a63d4!
RTMP_TimerListAdd: add timer obj c16a5fc8!
RTMP_TimerListAdd: add timer obj c16a63a4!
RTMP_TimerListAdd: add timer obj c16a66e0!
RTMP_TimerListAdd: add timer obj c16a6404!
RTMP_TimerListAdd: add timer obj c16a6434!
RTMP_TimerListAdd: add timer obj c16a6464!
RTMP_TimerListAdd: add timer obj c16af7bc!
RTMP_TimerListAdd: add timer obj c16af8d8!
RTMP_TimerListAdd: add timer obj c16af7e8!
RTMP_TimerListAdd: add timer obj c16a6a8c!
RTMP_TimerListAdd: add timer obj c16464cc!
RTMP_TimerListAdd: add timer obj c1649908!
RTMP_TimerListAdd: add timer obj c164cd44!
RTMP_TimerListAdd: add timer obj c1650180!
RTMP_TimerListAdd: add timer obj c16535bc!
RTMP_TimerListAdd: add timer obj c16569f8!
RTMP_TimerListAdd: add timer obj c1659e34!
RTMP_TimerListAdd: add timer obj c165d270!
RTMP_TimerListAdd: add timer obj c16a679c!
RTMP_TimerListAdd: add timer obj c16a6af4!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
4a:b1:4f:18:b1:78:7e:c1:9a:e5:d7:c7:f1:9a:5c:ae:
48:d8:b3:9d:b0:97:08:1f:4d:8b:2b:4a:31:7b:a0:58:

1. Phy Mode = 9
2. Phy Mode = 9
E2PROM: D0 target power=0xff20
E2PROM: 40 MW Power Delta= 0
3. Phy Mode = 9
AntCfgInit: primary/secondary ant 0/1
Initialize RF Central Registers for E2 !!!
Initialize RF Central Registers for E3 !!!
Initialize RF Channel Registers for E2 !!!
Initialize RF Channel Registers for E3 !!!
Initialize RF DCCal Registers for E2 !!!
Initialize RF DCCal Registers for E3 !!!
D1 = 4, D2 = 7, CalCode = 7 !!!
RT6352_Temperature_Init : BBPR49 = 0x4
RT6352_Temperature_Init : TemperatureRef25C = 0xfffffffa
Current Temperature from BBP_R49=0xfffffffa
 TX BW Filter Calibration !!!
 RX BW Filter Calibration !!!
LOFT Calibration Done!
IQCalibration Start!
IQCalibration Done! CH = 0, (gain= 3, phase=3e)
IQCalibration Start!
IQCalibration Done! CH = 1, (gain= 1, phase= 2)
TX IQ Calibration Done!
RXIQ Sigma_i=950, Sigma_q=937, R_iq=-2000
RXIQ calibration FAIL
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
SYNC - BBP R4 to 20MHz.l
RTMP_TimerListAdd: add timer obj c16a7098!
Main bssid = 00:1e:ab:12:a0:34
== rt28xx_init, Status=0
0x1300 = 00064380
device ra0 entered promiscuous mode
br0: port 3(ra0) entering forwarding state
br0: port 3(ra0) entering forwarding state
RTMP_TimerListAdd: add timer obj c14d1e98!
addrconf_dad_completed 7
load fw spent 40ms
RX DESC a3bcc000 size = 2048
RX1 DESC a3bcd000 size = 2048
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
2a:55:44:e4:05:1a:cb:eb:01:93:83:88:b2:c3:4f:8f:
50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97:

1. Phy Mode = 49
2. Phy Mode = 49
ext_pa_current_setting = 1
3. Phy Mode = 49
AntCfgInit: primary/secondary ant 0/1
ChipStructAssign(): RALINK6590 hook !
MCS Set = ff 00 00 00 01
MT76x0_ChipBBPAdjust():rf_bw=2, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=42
APStartUp(): AP Set CentralFreq at 42(Prim=36, HT-CentCh=38, VHT-CentCh=42, BBP_BW=2)
Main bssid = 00:1e:ab:12:a0:35
== rt28xx_init, Status=0
0x1300 = 00064300
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
device rai0 entered promiscuous mode
br0: port 4(rai0) entering forwarding state
br0: port 4(rai0) entering forwarding state
addrconf_dad_completed 7
ra0: no IPv6 routers present
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

Rcv Wcid(1) AddBAReq
Start Seq = 00000000
Rcv Wcid(1) AddBAReq
Start Seq = 00000000
rai0: no IPv6 routers present
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(6)=AES

Rcv Wcid(2) AddBAReq
Start Seq = 00000010

And telnet to jboot recovery I can see this

# info
MODEL_NAME: TW-4G (LTE)
ROMID: TLW6E3804001
ECN_NO: 201404080001E
FMID: 6E38
PV: 1
IP: 192.168.123.254
BEID: 00:1E:AB:12:A0:33
PSEC: BCFFE000 806545E0

I did try to upload similar openwrt firmware image from D-Link DWR-118 (Because it seems to have very similar hardware with jboot) I get this in jboot console

 ERROR(-151) Invalid upgrade file

Data:5505108(0x540054)

So jboot is validating what is uploaded.

How should I move forward from here? I have ROMID what jboot wants, I have flash partition layout. Am I missing anything?

I have been doing some play around with image builder, but I cannot get it to build image even that I have add new profile for telewell and at least for me wiki ain't very clear about this or maybe information is little outdated because I could not find files to edit what it was suggesting. I had to do some grep to find out where profile information are located.

JiiPee · September 27, 2021, 7:45pm

And now that I have done more sniffing around, it looks like this router is a clone of

I did make changes to imagebuilder files and copied lr25g001 kernel files to matching names.
Was able to build firmware, it flashed just fine from original firmware flashing page, didn't even need to select "Accept unofficial firmware" option to flash it.

Router did boot up but I could not connect to it. There was issues with LAN leds what is talked in that lava topic and 2 of the LAN ports was "dead".

I think I need to find my solder iron and get connector before I can get forward with this. Or does anyone have some ideas how I could get forward?

Flashing original firmware back from jboot recovery went just fine. When I was flashing original firmware back, telnet console from jboot was spitting this information:

 WF A:BC010000 L:20000
 WF A:BC030000 L:20000
 WF A:BC050000 L:20000
 WF A:BC070000 L:20000
 WF A:BC090000 L:20000
 WF A:BC0B0000 L:20000
 WF A:BC0D0000 L:20000
 WF A:BC0F0000 L:20000
 WF A:BC110000 L:20000
 WF A:BC130000 L:20000
 WF A:BC150000 L:20000
 WF A:BC170000 L:34BC
WF A:BC010000 CM:04
 WF A:BC180000 L:20000
 WF A:BC1A0000 L:20000
 WF A:BC1C0000 L:20000
 WF A:BC1E0000 L:20000
 WF A:BC200000 L:20000
 WF A:BC220000 L:20000
 WF A:BC240000 L:20000
 WF A:BC260000 L:20000
 WF A:BC280000 L:20000
 WF A:BC2A0000 L:20000
 WF A:BC2C0000 L:20000
 WF A:BC2E0000 L:20000
 WF A:BC300000 L:20000
 WF A:BC320000 L:20000
 WF A:BC340000 L:20000
 WF A:BC360000 L:20000
 WF A:BC380000 L:20000
 WF A:BC3A0000 L:20000
 WF A:BC3C0000 L:20000
 WF A:BC3E0000 L:20000
 WF A:BC400000 L:20000
 WF A:BC420000 L:20000
 WF A:BC440000 L:20000
 WF A:BC460000 L:20000
 WF A:BC480000 L:20000
 WF A:BC4A0000 L:20000
 WF A:BC4C0000 L:20000
 WF A:BC4E0000 L:20000
 WF A:BC500000 L:20000
 WF A:BC520000 L:20000
 WF A:BC540000 L:20000
 WF A:BC560000 L:20000
 WF A:BC580000 L:20000
 WF A:BC5A0000 L:20000
 WF A:BC5C0000 L:20000
 WF A:BC5E0000 L:20000
 WF A:BC600000 L:20000
 WF A:BC620000 L:20000
 WF A:BC640000 L:20000
 WF A:BC660000 L:20000
 WF A:BC680000 L:20000
 WF A:BC6A0000 L:20000
 WF A:BC6C0000 L:20000
 WF A:BC6E0000 L:20000
 WF A:BC700000 L:20000
 WF A:BC720000 L:20000
 WF A:BC740000 L:20000
 WF A:BC760000 L:20000
 WF A:BC780000 L:20000
 WF A:BC7A0000 L:20000
 WF A:BC7C0000 L:20000
 WF A:BC7E0000 L:20000
 WF A:BC800000 L:20000
 WF A:BC820000 L:20000
 WF A:BC840000 L:20000
 WF A:BC860000 L:20000
 WF A:BC880000 L:20000
 WF A:BC8A0000 L:20000
 WF A:BC8C0000 L:20000
 WF A:BC8E0000 L:20000
 WF A:BC900000 L:20000
 WF A:BC920000 L:20000
 WF A:BC940000 L:20000
 WF A:BC960000 L:20000
 WF A:BC980000 L:20000
 WF A:BC9A0000 L:20000
 WF A:BC9C0000 L:20000
 WF A:BC9E0000 L:20000
 WF A:BCA00000 L:20000
 WF A:BCA20000 L:20000
 WF A:BCA40000 L:20000
 WF A:BCA60000 L:20000
 WF A:BCA80000 L:20000
 WF A:BCAA0000 L:20000
 WF A:BCAC0000 L:20000
 WF A:BCAE0000 L:20000
 WF A:BCB00000 L:20000
 WF A:BCB20000 L:20000
 WF A:BCB40000 L:20000
 WF A:BCB60000 L:20000
 WF A:BCB80000 L:20000
 WF A:BCBA0000 L:20000
 WF A:BCBC0000 L:20000
 WF A:BCBE0000 L:5000
 WF A:BCF10010 L:1FFF0
 WF A:BCF30000 L:20000
 WF A:BCF50000 L:20000
 WF A:BCF70000 L:20000
 WF A:BCF90000 L:20000
 WF A:BCFB0000 L:1D010
Data:13129132(0xc855ac)
Success!

Seems to be doing writing at 8kb chunks.

In lava topic there is patch for switch, is that patch already part of latest release or still waiting testing? If I can get serial working with this device and figure out build enviroment for kernel images, I might be able to test it.

Few nudes also

JiiPee · September 29, 2021, 4:51pm

I got figured out how to build custom kernel and I have this Telewell router now running openwrt snapshot what include patch for switch. All ports working, however naming goes backward but it's most likely easily fixed.
And some wifi lets needs also little tweaking but at least 2g led is working as it should, not out of the box but I was able to reconfigure it from luci.

However 5g wifi is not working.

[    0.000000] Linux version 5.4.145 (builder@buildhost) (gcc version 11.2.0 (OpenWrt GCC 11.2.0 r17630-6cd54254e4)) #0 Mon Sep 27 17:00:28                        2021
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7620A ver:2 eco:4
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019650 (MIPS 24KEc)
[    0.000000] MIPS: machine is TELEWELL TW-4G (LTE)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] On node 0 totalpages: 16384
[    0.000000]   Normal zone: 144 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.000000] Writing ErrCtl register=0004fbd0
[    0.000000] Readback ErrCtl register=0004fbd0
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 57432K/65536K available (5114K kernel code, 206K rwdata, 620K rodata, 1220K init, 213K bss, 8104K reserved, 0K cma-re                       served)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] random: get_random_bytes called from 0x805cfa0c with crng_init=0
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns
[    0.000000] systick: enable autosleep mode
[    0.000000] systick: running - mult: 214748, shift: 32
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000009] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.015499] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.087708] pid_max: default: 32768 minimum: 301
[    0.097051] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.111455] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.132908] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.152388] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.165970] pinctrl core: initialized pinctrl subsystem
[    0.177770] NET: Registered protocol family 16
[    0.717898] mt7620-pci 10140000.pcie: PCIE0 no card, disable it(RST&CLK)
[    0.731125] mt7620-pci: probe of 10140000.pcie failed with error -1
[    0.765015] rt2880_gpio 10000600.gpio: registering 24 gpios
[    0.776080] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[    0.789118] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.812643] clocksource: Switched to clocksource systick
[    0.824215] thermal_sys: Registered thermal governor 'step_wise'
[    0.824613] NET: Registered protocol family 2
[    0.845259] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.860324] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.876888] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.892052] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.906066] TCP: Hash tables configured (established 1024 bind 1024)
[    0.918846] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.931754] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.945885] NET: Registered protocol family 1
[    0.954470] PCI: CLS 0 bytes, default 32
[    0.965338] rt-timer 10000100.timer: maximum frequency is 1220Hz
[    0.979265] workingset: timestamp_bits=14 max_order=14 bucket_order=0
[    0.999882] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.011389] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    1.045825] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    1.063517] gpio-export gpio_export: 1 gpio(s) exported
[    1.074085] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    1.089442] printk: console [ttyS0] disabled
[    1.097906] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103
[    1.117552] printk: console [ttyS0] enabled
[    1.134132] printk: bootconsole [early0] disabled
[    1.162038] spi spi0.0: force spi mode3
[    1.170580] spi-nor spi0.0: mx25l12805d (16384 Kbytes)
[    1.180936] 3 fixed-partitions partitions found on MTD device spi0.0
[    1.193605] Creating 3 MTD partitions on "spi0.0":
[    1.203159] 0x000000000000-0x000000010000 : "jboot"
[    1.213981] 0x000000010000-0x000000ff0000 : "firmware"
[    1.227536] 2 jimage-fw partitions found on MTD device firmware
[    1.239400] Creating 2 MTD partitions on "firmware":
[    1.249329] 0x000000000000-0x0000001e88ef : "kernel"
[    1.260297] 0x0000001e88ef-0x000000fe0000 : "rootfs"
[    1.271212] mtd: device 3 (rootfs) set to be root filesystem
[    1.284616] 1 squashfs-split partitions found on MTD device rootfs
[    1.297007] 0x000000520000-0x000000fe0000 : "rootfs_data"
[    1.308919] 0x000000ff0000-0x000001000000 : "config"
[    1.320782] libphy: Fixed MDIO Bus: probed
[    1.338272] gsw: ephy base address: 8
[    1.346923] gsw: setting port4 to ephy mode
[    1.355383] mtk_soc_eth 10100000.ethernet: generated random MAC address e2:83:ab:15:5a:db
[    1.371887] libphy: mdio: probed
[    1.380751] switch0: Atheros AR8337 rev. 2 switch registered on mdio-bus
[    1.618051] mtk_soc_eth 10100000.ethernet: port 5 - using fixed link parameters
[    1.632940] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver
[    1.645431] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    1.662455] rt2880_wdt 10000120.watchdog: Initialized
[    1.674060] NET: Registered protocol family 10
[    1.687428] Segment Routing with IPv6
[    1.694925] NET: Registered protocol family 17
[    1.703867] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you nee                       d this.
[    1.729706] 8021q: 802.1Q VLAN Support v1.8
[    1.749982] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    1.770937] Freeing unused kernel memory: 1220K
[    1.780003] This architecture does not have kernel memory protection.
[    1.792833] Run /sbin/init as init process
[    2.451272] random: fast init done
[    3.516377] init: Console is alive
[    3.523829] init: - watchdog -
[    5.917628] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.325703] usbcore: registered new interface driver usbfs
[    6.336798] usbcore: registered new interface driver hub
[    6.347518] usbcore: registered new device driver usb
[    6.365053] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    6.380414] ehci-fsl: Freescale EHCI Host controller driver
[    6.393390] ehci-platform: EHCI generic platform driver
[    6.414183] phy phy-usbphy.0: remote usb device wakeup disabled
[    6.425991] phy phy-usbphy.0: UTMI 16bit 30MHz
[    6.434847] ehci-platform 101c0000.ehci: EHCI Host Controller
[    6.446333] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    6.462256] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    6.483835] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    6.497330] hub 1-0:1.0: USB hub found
[    6.505319] hub 1-0:1.0: 1 port detected
[    6.519448] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    6.533360] ohci-platform: OHCI generic platform driver
[    6.544130] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[    6.557731] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[    6.573656] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[    6.614022] hub 2-0:1.0: USB hub found
[    6.622019] hub 2-0:1.0: 1 port detected
[    6.635543] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.654471] init: - preinit -
[    8.479645] random: jshn: uninitialized urandom read (4 bytes read)
[    8.594136] random: jshn: uninitialized urandom read (4 bytes read)
[    9.108595] random: jshn: uninitialized urandom read (4 bytes read)
[    9.567813] urandom_read: 3 callbacks suppressed
[    9.567823] random: jshn: uninitialized urandom read (4 bytes read)
[   10.336920] random: procd: uninitialized urandom read (4 bytes read)
[   10.357404] mtk_soc_eth 10100000.ethernet eth0: port 5 link up (1000Mbps/Full duplex)
[   10.373685] 8021q: adding VLAN 0 to HW filter on device eth0
[   10.385405] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   10.791488] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   12.270362] jffs2: notice: (507) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (0 unchecked, 1 orphan) and                        12 of xref (1 dead, 0 orphan) found.
[   12.306225] mount_root: switching to jffs2 overlay
[   12.326382] overlayfs: upper fs does not support tmpfile.
[   12.345749] urandom-seed: Seeding with /etc/urandom.seed
[   12.482746] mtk_soc_eth 10100000.ethernet eth0: port 5 link down
[   12.518159] procd: - early -
[   12.524796] procd: - watchdog -
[   13.002297] procd: - watchdog -
[   13.012124] procd: - ubus -
[   13.095457] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.111072] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.128226] procd: - init -
[   14.262456] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.805267] Loading modules backported from Linux version v5.10.68-0-g4d8524048a35
[   14.820453] Backport generated by backports.git v5.10.68-1-0-ga4f9ba32
[   14.924360] xt_time: kernel timezone is -0000
[   15.100327] urngd: jent-rng init failed, err: 2
[   15.158070] PPP generic driver version 2.4.2
[   15.171893] NET: Registered protocol family 24
[   15.242256] ieee80211 phy0: rt2x00lib_request_eeprom_file: Info - Loading EEPROM data from 'soc_wmac.eeprom'.
[   15.263526] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 6352, rev 0500 detected
[   15.279047] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 7620 detected
[   15.292881] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   15.313823] kmodloader: done loading kernel modules from /etc/modules.d/*
[   24.226305] random: crng init done
[   36.838502] Atheros AR8216/AR8236/AR8316 mdio-bus:00: Port 4 is up
[   36.851000] Atheros AR8216/AR8236/AR8316 mdio-bus:00: Port 5 is up
[   36.886422] mtk_soc_eth 10100000.ethernet eth0: port 5 link up (1000Mbps/Full duplex)
[   36.902546] 8021q: adding VLAN 0 to HW filter on device eth0
[   36.992441] device eth0 entered promiscuous mode
[   37.017430] br-lan: port 1(eth0.1) entered blocking state
[   37.028267] br-lan: port 1(eth0.1) entered disabled state
[   37.039441] device eth0.1 entered promiscuous mode
[   37.093933] br-lan: port 1(eth0.1) entered blocking state
[   37.104762] br-lan: port 1(eth0.1) entered forwarding state
[   37.857206] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   41.375335] netlink: 'iw': attribute type 302 has an invalid length.
[   43.328430] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration start
[   43.345114] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration end
[   46.704653] ieee80211 phy0: rt2800_loft_iq_calibration: Info - LOFT Calibration Done!
[   46.724233] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[   46.752155] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 0, (gain= 3, phase=3e)
[   46.771269] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[   46.799182] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 1, (gain= f, phase=3f)
[   46.817419] ieee80211 phy0: rt2800_loft_iq_calibration: Info - TX IQ Calibration Done!
[   46.865385] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=-2, Ph_rx=-4
[   46.890912] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=0, Ph_rx=1
[   46.973940] br-lan: port 2(wlan0) entered blocking state
[   46.984611] br-lan: port 2(wlan0) entered disabled state
[   46.995619] device wlan0 entered promiscuous mode
[   51.280575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   51.293528] br-lan: port 2(wlan0) entered blocking state
[   51.304158] br-lan: port 2(wlan0) entered forwarding state
[  462.192270] usb 1-1: new high-speed USB device number 2 using ehci-platform
[ 4422.801135] usb 1-1: USB disconnect, device number 2

From dmesg I can see pci probe fails.

[    0.717898] mt7620-pci 10140000.pcie: PCIE0 no card, disable it(RST&CLK)
[    0.731125] mt7620-pci: probe of 10140000.pcie failed with error -1

What I have learn by googling around, that seems to be quite common issue with mt7610e chip. I just cannot find solution.. I think there should be one because it is working on stock firmware.

Another issue is this
[ 15.100327] urngd: jent-rng init failed, err: 2

Not telling me much why it fails at boot time. If I log in to ssh and start it manually, it will start just fine

JiiPee · October 1, 2021, 4:45pm

Well I have made some progress. I can get mt7610e to load. It does show up but not really working. Only works if I put my phone next to router.
And if used, it will cause router to crash/reboot. Then after reboot it won't show up anymore. I need to do cold boot to get it up again. This same happens if I do reboot from ssh or from luci when I haven't used 5G link and it haven't crashed.

I'm running out of ideas.

I have read that this chip is difficult to get working. Sometimes it seems you have luck and sometimes your out of luck.

JiiPee · October 11, 2021, 2:11am

I have this router up and running. Here is commit from my fork

I don't understand git and git don't understand me. I am unable to make pr of this. When I try to make pr it always goes mess aka adding other commits and other crap what is not part of this patch.

So I would be very thankfull if someone who have good relatioship with git does pr from this.

I also made this

It's cherry-picked to 21.02 and I am currently running this, so I don't need to build packets myself, I can use openwrt released packets for other software.

Issue is that only switch ports 3 and 4 works with this, because 21.02 doesn't have pr4303 yet. 1st posted commit is against master where that pr is included and all switch ports are working fine.

Both commits have fixes what affect lava router (Leds naming and switch port names), but because they are clone devices, I think it's fine.

Anyway I think I am done with this now, I archived what I wanted, to get openwrt running on this device.
Issues what there is like not working 5GHz wifi is something I cannot do anything. Done lot of research and mt7610e seems to cause lot of troubles to people.
I have theory that original firmware doesn't use binblob from flash at all and it's buildin to original firmweare module. Binblob what is on flash config partition is just some generic blob. But it's just my own theory.

Another issue is that if you do reboot from ssh or luci, mt7610e stops working. Init at boot time fails. My theory for this issue is that chip won't never get reset signal from kernel at reboot so it stay initialized whole reboot cycle.
But again athis is my own theory and I am not a coder who understand anything about pci device init.

Last thing to mention. 5.10 kernel I cannot compile for this device. Complains that kernel image is too big. Limit seems to be 2MB and 5.10 went like 64KB over that.

JiiPee · October 18, 2021, 2:29am

I got git figured out to point that I was able to make actual pr for this device

system · October 28, 2021, 2:29am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.