Where are you from?
Can I send you one of the AP´s?
So that you coult try it?
You can keep it because i dont need so much of it.
So i tryed to boot from TFTP, but i got the following error:
U-Boot
lcap> setenv serverip 192.168.88.78
lcap> setenv ipaddr 192.168.88.227
lcap> ping 192.168.88.78
Using eth0 device
host 192.168.88.78 is alive
lcap> tftp image.bin
Using eth0 device
TFTP from server 192.168.88.78; our IP address is 192.168.88.227
Filename 'image.bin'.
Load address: 0x80100000
Loading: #################################################################
#################################################################
#####################################
done
Bytes transferred = 3407876 (340004 hex)
lcap> bootm 0x80100000
Wrong Image Format for bootm command
ERROR: can't get kernel image!
Is there anyone who can help me?
With another Image i got the following error:
lcap> bootm 0x80100000
## Booting kernel from Legacy Image at 80100000 ...
Image Name: MIPS OpenWrt Linux-4.14.221
Created: 2021-02-15 15:22:37 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1589436 Bytes = 1.5 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum ... OK
Uncompressing Kernel Image ... LZMA: uncompress or overwrite error 1 - must RESET board to recover
Does anyone have an Idea?
Kernel isn't enough to get it up and running, you'll need an initramfs, if you don't want to write anything to flash.
I can write it to flash, but i dont understand how to do it
progfw or some fw command, I'd guess.
can you describe that a little more precisely?
Not really, never had to do it manually.
help progfw will probably provide some help.
help fw likewise.
Looks not good!!
lcap> tftpboot 0x81000000 image.bin
Using eth0 device
TFTP from server 192.168.88.78; our IP address is 192.168.88.227
Filename 'image.bin'.
Load address: 0x81000000
Loading: #################################################################
####
done
Bytes transferred = 1395347 (154a93 hex)
lcap> erase 0xbf020000 +0x7c0000
............................................................................................................................
Erased 124 sectors
lcap> cp.b 0x81000000 0xbf020000 0x7c0000
Copy to Flash... done
lcap> bootm 0xbf020000
## Booting kernel from Legacy Image at bf020000 ...
Image Name: MIPS OpenWrt Linux-4.14.167
Created: 2020-01-29 16:05:35 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1395283 Bytes = 1.3 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
[ 0.000000] Linux version 4.14.167 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10911-c155900f66)) #0 Wed Jan 29 16:05:35 2020
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[ 0.000000] SoC: Atheros AR7161 rev 2
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] random: get_random_bytes called from 0x8045f6ec with crng_init=0
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: ethaddr=00:04:96:88:AE:04 rootfstype=squashfs noinitrd
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=0007fff0
[ 0.000000] Readback ErrCtl register=0007fff0
[ 0.000000] Memory: 125004K/131072K available (3452K kernel code, 172K rwdata, 460K rodata, 196K init, 207K bss, 6068K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 51
[ 0.000000] Clocks: CPU:680.000MHz, DDR:340.000MHz, AHB:170.000MHz, Ref:40.000MHz
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5621354254 ns
[ 0.000008] sched_clock: 32 bits at 340MHz, resolution 2ns, wraps every 6316128254ns
[ 0.007807] Calibrating delay loop... 452.19 BogoMIPS (lpj=2260992)
[ 0.074073] pid_max: default: 32768 minimum: 301
[ 0.078892] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.085494] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.094573] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.104436] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.111640] NET: Registered protocol family 16
[ 0.117313] MIPS: machine is Generic AR71XX/AR724X/AR913X based board
[ 0.138140] clocksource: Switched to clocksource MIPS
[ 0.144120] NET: Registered protocol family 2
[ 0.149370] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.156345] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.162747] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.169244] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.175080] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.181585] NET: Registered protocol family 1
[ 0.189548] Crashlog allocated RAM at address 0x3f00000
[ 0.195984] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[ 0.207328] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.213198] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.231760] io scheduler noop registered
[ 0.235683] io scheduler deadline registered (default)
[ 0.241233] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.249571] console [ttyS0] disabled
[ 0.273207] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 10625000) is a 16550A
BootOS (c) 2004-2016 Extreme Networks, Inc. All rights reserved.
data bus walking 1's......pass
address bus walking 1's...pass
ram device test...........pass
read config...............w1i1c6
write config..............w1i1c5
booting image1 @ 0xbf010008
BootOS (c) 2004-2016 Extreme Networks, Inc. All rights reserved.
data bus walking 1's......pass
address bus walking 1's...pass
ram device test...........pass
read config...............w1i1c5
write config..............w1i1c4
booting image1 @ 0xbf010008
BootOS (c) 2004-2016 Extreme Networks, Inc. All rights reserved.
data bus walking 1's......pass
address bus walking 1's...pass
ram device test...........pass
read config...............w1i1c4
write config..............w1i1c3
booting image1 @ 0xbf010008
BootOS (c) 2004-2016 Extreme Networks, Inc. All rights reserved.
data bus walking 1's......pass
address bus walking 1's...pass
ram device test...........pass
read config...............w1i1c3
write config..............w1i1c2
booting image1 @ 0xbf010008
BootOS (c) 2004-2016 Extreme Networks, Inc. All rights reserved.
data bus walking 1's......pass
address bus walking 1's...pass
ram device test...........pass
read config...............w1i1c2
write config..............w1i1c1
booting image1 @ 0xbf010008
Still looks like you only transfered a kernel, and no rootfs.
Can you give me a Link to an image that should work?
Looks like this AP ist bricked.
there are no initramfs images avialable, you have to compile one yourself.
if you overwrote uboot, then yes, it would be.
No Problem, i have 26 others to test 
Is there anyone who can compile that Image for me?
Well, just picking any image certainly won't work.
openwrt-15.05-ar71xx-generic-tl-wr1043nd-v1-squashfs-sysupgrade.bin is obviouly wrong here ...
Based on the history of comments so far I'd recommend to sell the remaining 26 devices again; I'm sorry, but the comments so far don't look like you will be able to move forward substantially with this subject (at least in the short term).
I set up a Debian System for Compiling the image. But wenn i du make menuconfig there ist no Atheros AR7161 to select, only Atheros AR231x/AR5312 or Atheros ATH79, is there a way to integrade AR7161?
And which Target Profile can I try?
AR7161 is a ath79 chipset.
If there is no one who can help me i think i must give up 
hello, I have the same AP650, but I can't in diagnostics mode because I don't have a password, I've tried all possible ways to enter, can you tell me what password you used?
picture
Any special reason? most commands seems to be available without it