[Solved] Enginius EAP350 Support

Hm,that does not sound right.
I hope you did not connect VCC

I used built-in header poles leaving right most (vcc). I took cue from here https://wiki.openwrt.org/toh/engenius/engenius_ecb1750_1

Should be correct.
From what I saw,all Engenius devices use the same pinout.

Ok. Looks like prolific driver issue. I'll downgrade the driver version and see if it works without crashing as found in some forums

Classic fake FT232

Finally downgraded the the prolific driver version and used Teraterm instead. I can see full device bootup log and send openwrt commnads. Please guide me to next step

First,post the bootlog at gists or somewhere else.
Then we can look into creating mach file and everything else

Bootlog@gist https://gist.github.com/anonymous/677b68a1a8478aaa669627537b262d17

Ok,only worrying this I see is only 32MB of RAM.
Any chance you can share a ssh session to the device with me to take a look at GPIO configuration?
Is MAC adress in bootlog correct so I can find its location in flash?

I can then start making files needed.

Only serial console access is available as of now. I can share my pc using Anydesk or Teamviewer

Sure,Teamviewer works for me

Please check message box

I am back with easywrt BB version. Please have a look

Please help me with commands to load the image in ram and which file? Forgive me for being novice

That is really hard without seeing the console

Original Firmware kernel modules:

arc4.ko                 ip6_tables.ko           mac80211.ko             ppp_async.ko            xt_conntrack.ko
ath.ko                  ip6t_REJECT.ko          nf_conntrack.ko         ppp_generic.ko          xt_id.ko
ath10k_core.ko          ip6table_filter.ko      nf_conntrack_ftp.ko     pppoe.ko                xt_limit.ko
ath10k_pci.ko           ip6table_mangle.ko      nf_conntrack_ipv4.ko    pppox.ko                xt_mac.ko
ath9k.ko                ip6table_raw.ko         nf_conntrack_ipv6.ko    slhc.ko                 xt_mark.ko
ath9k_common.ko         ip_tables.ko            nf_conntrack_irc.ko     tun.ko                  xt_multiport.ko
ath9k_hw.ko             ipt_MASQUERADE.ko       nf_defrag_ipv4.ko       usb-common.ko           xt_nat.ko
cfg80211.ko             ipt_REJECT.ko           nf_defrag_ipv6.ko       usbcore.ko              xt_state.ko
compat.ko               iptable_filter.ko       nf_nat.ko               x_tables.ko             xt_tcpudp.ko
crc-ccitt.ko            iptable_mangle.ko       nf_nat_ftp.ko           xt_CT.ko                xt_time.ko
crypto_blkcipher.ko     iptable_nat.ko          nf_nat_ipv4.ko          xt_LOG.ko
ehci-hcd.ko             iptable_raw.ko          nf_nat_irc.ko           xt_REDIRECT.ko
ehci-platform.ko        ipv6.ko                 nls_base.ko             xt_TCPMSS.ko
gpio-button-hotplug.ko  ledtrig-usbdev.ko       ohci-hcd.ko             xt_comment.ko

Easywrt BB modules:

arc4.ko                 gpio-button-hotplug.ko  ipv6.ko                 nf_nat_irc.ko           xt_REDIRECT.ko
ath.ko                  ip6_tables.ko           ledtrig-usbdev.ko       nls_base.ko             xt_TCPMSS.ko
ath10k_core.ko          ip6t_REJECT.ko          mac80211.ko             ohci-hcd.ko             xt_comment.ko
ath10k_pci.ko           ip6table_filter.ko      nf_conntrack.ko         ppp_async.ko            xt_conntrack.ko
ath9k.ko                ip6table_mangle.ko      nf_conntrack_ftp.ko     ppp_generic.ko          xt_id.ko
ath9k_common.ko         ip6table_raw.ko         nf_conntrack_ipv4.ko    pppoe.ko                xt_limit.ko
ath9k_hw.ko             ip_tables.ko            nf_conntrack_ipv6.ko    pppox.ko                xt_mac.ko
cfg80211.ko             ipt_MASQUERADE.ko       nf_conntrack_irc.ko     slhc.ko                 xt_mark.ko
compat.ko               ipt_REJECT.ko           nf_defrag_ipv4.ko       usb-common.ko           xt_multiport.ko
crc-ccitt.ko            iptable_filter.ko       nf_defrag_ipv6.ko       usbcore.ko              xt_nat.ko
crypto_blkcipher.ko     iptable_mangle.ko       nf_nat.ko               x_tables.ko             xt_state.ko
ehci-hcd.ko             iptable_nat.ko          nf_nat_ftp.ko           xt_CT.ko                xt_tcpudp.ko
ehci-platform.ko        iptable_raw.ko          nf_nat_ipv4.ko          xt_LOG.ko               xt_time.ko

Yay its booting up

ar7240> tftpboot 0x3000000 vmlinux-art-ramdisk.bin
tftpboot 0x3000000 vmlinux-art-ramdisk.bin

Trying eth0
Using eth0 device
TFTP from server 192.168.137.1; our IP address is 192.168.137.2
Filename 'vmlinux-art-ramdisk.bin'.
Load address: 0x3000000
Loading: #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 ########################################################
done
Bytes transferred = 3945642 (3c34aa hex)
ar7240> bootm 0x3000000
bootm 0x3000000

## Booting image at 03000000 ...
   Image Name:   MIPS OpenWrt Linux-4.9.73
   Created:      2018-01-05  19:57:37 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    3945578 Bytes =  3.8 MB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x03000040 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

[    0.000000] Linux version 4.9.73 (robimarko@Builder) (gcc version 6.3.0 (OpenWrt GCC 6.3.0 r5700-7b98c3c) ) #0 Fri Jan 5 19:57:37 2018
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Atheros AR7242 rev 1
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] OF: fdt:No valid device tree found, continuing without
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=EAP350 mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env),320k(custom)ro,5952k(firmware),1536k(failsafe)ro,64k(art)ro console=ttyS0,115200 rootfstype=squashfs noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 24848K/32768K available (3220K kernel code, 164K rwdata, 820K rodata, 2764K init, 213K bss, 7920K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:400.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:40.000MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns
[    0.000013] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns
[    0.007907] Calibrating delay loop... 265.42 BogoMIPS (lpj=1327104)
[    0.090604] pid_max: default: 32768 minimum: 301
[    0.095366] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.101969] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.112644] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.122492] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.129404] NET: Registered protocol family 16
[    0.135930] MIPS: machine is EnGenius EAP350
[    0.376073] registering PCI controller with io_map_base unset
[    0.398854] PCI host bridge to bus 0000:00
[    0.402970] pci_bus 0000:00: root bus resource [mem 0x10000000-0x13ffffff]
[    0.409891] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.415451] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.422230] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.430182] pci 0000:00:00.0: fixup device configuration
[    0.437248] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x1000ffff 64bit]
[    0.444559] pci 0000:00:00.0: using irq 40 for pin 1
[    0.450484] clocksource: Switched to clocksource MIPS
[    0.456991] NET: Registered protocol family 2
[    0.462584] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.469556] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.475978] TCP: Hash tables configured (established 1024 bind 1024)
[    0.482486] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.488332] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.494963] NET: Registered protocol family 1
[    2.580498] random: fast init done
[    5.024270] Crashlog allocated RAM at address 0x1f00000
[    5.030953] workingset: timestamp_bits=30 max_order=13 bucket_order=0
[    5.047454] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    5.053314] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    5.149702] io scheduler noop registered
[    5.153683] io scheduler deadline registered (default)
[    5.159364] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    5.166343] console [ttyS0] disabled
Û[02][02][02]ªrŠÂÊʪ¢êserial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 12500000) is a 16550A
[    5.198659] console [ttyS0] enabled
[    5.198659] console [ttyS0] enabled
[    5.205679] bootconsole [early0] disabled
[    5.205679] bootconsole [early0] disabled
[    5.218500] m25p80 spi0.0: found mx25l6405d, expected m25p80
[    5.225081] m25p80 spi0.0: mx25l6405d (8192 Kbytes)
[    5.230036] 6 cmdlinepart partitions found on MTD device spi0.0
[    5.236036] Creating 6 MTD partitions on "spi0.0":
[    5.240884] 0x000000000000-0x000000040000 : "u-boot"
[    5.247905] 0x000000040000-0x000000050000 : "u-boot-env"
[    5.255486] 0x000000050000-0x0000000a0000 : "custom"
[    5.262691] 0x0000000a0000-0x000000670000 : "firmware"
[    5.277676] 2 uimage-fw partitions found on MTD device firmware
[    5.283687] 0x0000000a0000-0x0000001a0000 : "kernel"
[    5.290756] 0x0000001a0000-0x000000670000 : "rootfs"
[    5.297833] mtd: device 5 (rootfs) set to be root filesystem
[    5.303645] 1 squashfs-split partitions found on MTD device rootfs
[    5.309873] 0x0000003f0000-0x000000670000 : "rootfs_data"
[    5.317466] 0x000000670000-0x0000007f0000 : "failsafe"
[    5.324883] 0x0000007f0000-0x000000800000 : "art"
[    5.333238] libphy: Fixed MDIO Bus: probed
[    5.376319] libphy: ag71xx_mdio: probed
[    6.100617] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.0:04 [uid=004dd072, driver=Atheros 8035 ethernet]
[    6.111738] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:RGMII
[    6.119526] NET: Registered protocol family 10
[    6.127697] NET: Registered protocol family 17
[    6.132445] 8021q: 802.1Q VLAN Support v1.8
[    6.161146] Freeing unused kernel memory: 2764K
[    6.165719] This architecture does not have kernel memory protection.
[    6.191091] init: Console is alive
[    6.194796] init: - watchdog -
[    6.224013] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.234205] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.252073] init: - preinit -
[    6.491426] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    9.621874] eth0: link up (100Mbps/Full duplex)
[    9.626481] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    9.708083] eth0: link down
[    9.725956] procd: - early -
[    9.728986] procd: - watchdog -
[   10.304991] procd: - watchdog -
[   10.308495] procd: - ubus -
[   10.364087] procd: - init -
Please press Enter to activate this console.
[   10.610055] kmodloader: loading kernel modules from /etc/modules.d/*
[   10.622105] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.641191] Loading modules backported from Linux version wt-2017-11-01-0-gfe248fc2c180
[   10.649246] Backport generated by backports.git v4.14-rc2-1-31-g86cf0e5d
[   10.660057] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.676482] nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
[   10.751606] xt_time: kernel timezone is -0000
[   10.828098] PPP generic driver version 2.4.2
[   10.835648] NET: Registered protocol family 24
[   10.888070] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   10.899076] ath: phy0: Ignoring endianness difference in EEPROM magic bytes.
[   10.931686] ieee80211 phy0: Atheros AR9280 Rev:2 mem=0xb0000000, irq=40
[   11.001046] kmodloader: done loading kernel modules from /etc/modules.d/*
[   23.054530] br-lan: port 1(eth0) entered blocking state
[   23.059809] br-lan: port 1(eth0) entered disabled state
[   23.065665] device eth0 entered promiscuous mode
[   23.108172] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   26.181779] eth0: link up (100Mbps/Full duplex)
[   26.200563] br-lan: port 1(eth0) entered blocking state
[   26.205840] br-lan: port 1(eth0) entered forwarding state
[   26.240564] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready




BusyBox v1.27.2 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r5701-fc65535
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/#

Awesome, so we gotta find the reset button and LED GPIO-s.
Can you do that with wiki link I gave you?

After that, I can build a version with that.
Reset button is kinda important since you gotta manually factory reset after flashing OpenWRT as stock firmware preserves their settings and they are not compatible.

Also,still gotta test flashing from stock firmware to see if it will be accepted.
I have checked the magic in kernel and rootfs and they match the ones in script doing upgrade.

Also,you gotta check if MAC matches the one on the sticker

Not able to figure out the button and LED GPIO-s. Tried with factory image and easywrt.

Next I'll be trying to flash image using stock firmware. Yes MAC matches the one one on the sticker

Flash from stock firmware GUI did'nt work.

root@EAP350:/# /tmp/firmware.img Not existed.
/tmp/firmware.img Not existed.
doupgrade
device ath0 left promiscuous mode
br-lan: port 2(ath0) entering disabled state
ieee80211_scan_unregister_event_handler: Failed to unregister evhandler=c03e4598 arg=81705e60
ieee80211_scan_unregister_event_handler: Failed to unregister evhandler=c03e4598 arg=81705e60
ieee80211_scan_unregister_event_handler: Failed to unregister evhandler=c03e4250 arg=81705e60
wlan_vap_delete : enter. vaphandle=0x81d08000
wlan_vap_delete : exit. vaphandle=0x81d08000
ath_pci: driver unloaded
Removing athdebug proc file
ath_dev: driver unloaded
ath_rate_atheros: driver unloaded
ath_hal: driver unloaded
mini_fo: using base directory: /
mini_fo: using storage directory: /tmp/root
Writing kernel...
Writing rootfs...
Upgrade completed, rebooting system...
Restarting system.
.


U-Boot 1.1.4 (Nov 10 2012 - 18:21:00)

EAP350 (ar7241 - Virian) U-boot
DRAM:
sri
ar7240_ddr_initial_config(133): virian ddr1 init
#### TAP VALUE 1 = 0x2, 2 = 0x2 [0xc2ecb355: 0x5324bb54]
32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 242k for U-Boot at: 81fc0000
Reserving 192k for malloc() at: 81f90000
Reserving 44 Bytes for Board Info at: 81f8ffd4
Reserving 36 Bytes for Global Data at: 81f8ffb0
Reserving 128k for boot params() at: 81f6ffb0
Stack Pointer at: 81f6ff98
Now running in RAM - U-Boot at: 81fc0000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
In:    serial
Out:   serial
Err:   serial
Net:   ag7240_enet_initialize...
Fetching MAC Address from 0x81fea754
Virian MDC CFG Value ==> 6
: cfg1 0xf cfg2 0x7214
eth0: 88:dc:96:1e:0f:27
RGMII reg init
ATHRSF1_PHY: Port 0, Neg Success
ATHRSF1_PHY: unit 0 phy addr 4 eth0 up
eth0
eth_set_enetaddr(num=0, addr=88:dc:96:1e:0f:27)
Setting new HW address on eth0
New Address is             88:DC:96:1E:0F:27
eth_set_enetaddr(num=0, addr=88:dc:96:1e:0f:27)
Setting new HW address on eth0
New Address is             88:DC:96:1E:0F:27
Hit any key to stop autoboot:  0
Validating MD5Sum of 'vmlinux'... Failed!
    9fde74f3fd0bd73369460e0358860923 != eb66bd8d85db59d97559eca4e47055bb

Data validation failed!

## Booting image at 9f670000 ...
   Image Name:   MIPS OpenWrt Linux-2.6.15
   Created:      2012-07-27  10:23:48 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1570702 Bytes =  1.5 MB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f670040 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

Booting AR7240(Python)...