Hi everyone,
this thread gethers all information about the Version 3 of the TP-Link CPE210. There is already a thread on this forum, where information of v2 and v3 are mixed. CPE210v3 seems to be very identically to CPE210v2. Forum member @robimarko did a great job and created a branch in his github repository.
Other thread in forum:Thread with mixed information CPE210 v2/v3
Here are some Details i got out of my CPE210v3 device:
Output U-Boot:
U-Boot 1.1.4-g7613bad0-dirty (Jul 20 2017 - 17:08:57)
ap143-2.0 - Honey Bee 2.0
DRAM: 64 MB
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment
In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ----> MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x50a1a100
is button pressed? 0
Autobooting in 1 seconds
Output of OEM-Boot:
## Booting image at 9f040000 ...
Uncompressing Kernel Image ... OK
Starting kernel ...
Booting QCA953x<0>
Linux version 2.6.31 (root@ubuntu) (gcc version 4.3.3 (GCC) ) #1 PREEMPT Thu Dec 28 19:47:02 CST 2017
flash_size passed from bootloader = 8
CPU revision is: 00019374 (MIPS 24Kc)
ath_sys_frequency: cpu apb ddr apb cpu 650 ddr 392 ahb 216
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
Kernel command line: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/init mtdparts=ath-nor0:128k(u-boot),64k(pation-table),64k(product-info),1536k(kernel),6144k(rootfs),192k(config),64k(ART) mem=64M
PID hash table entries: 256 (order: 8, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 61388k/65536k available (1832k kernel code, 4076k reserved, 473k data, 112k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 432.12 BogoMIPS (lpj=864256)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
net_link: create socket ok.
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/O].
msgmni has been set to 120
alg: No test for lzma (lzma-generic)
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
7 cmdlinepart partitions found on MTD device ath-nor0
Creating 7 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000030000 : "pation-table"
0x000000030000-0x000000040000 : "product-info"
0x000000040000-0x0000001c0000 : "kernel"
0x0000001c0000-0x0000007c0000 : "rootfs"
0x0000007c0000-0x0000007f0000 : "config"
0x0000007f0000-0x000000800000 : "ART"
TCP cubic registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
athwdt_timer_init: Starting WDT.
VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Freeing unused kernel memory: 112k freed
init started: BusyBox v1.01 (2017.12.28-11:47+0000) multi-call binary
This Board use 2.6.31
xt_time: kernel timezone is -0000
nf_conntrack version 0.5.0 (1024 buckets, 30720 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
iptable_raw: version magic '2.6.31-gbb45668-dirty preempt mod_unload MIPS32_R2 32BIT ' should be '2.6.31 preempt mod_unload MIPS32_R2 32BIT '
insmod: cannot insert `/lib/modules/2.6.31/kernel/iptable_raw.ko': Invalid module format (-1): Exec format error
Register vlan_manage hooks success.
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.3
WARN: TDB not supported!
WARN: TDB not supported!
(none) mips #1 PREEMPT Thu Dec 28 19:47:02 CST 2017 (none)
(none) login: httpMudCreate: MUD 0x6613b0 was created
[info @ initModelParameters:205] init profile...
qca95xx_GMAC: Length per segment 1536
953x_GMAC: qca953x_gmac_attach
Link Int Enabled
qca953x_set_gmac_caps CHECK DMA STATUS
mac:0 Registering S27....
qca95xx_GMAC: RX TASKLET - Pkts per Intr:18
qca95xx_GMAC: Mac address for unit 0:bfff0000
qca95xx_GMAC: ff:ff:ff:ff:ff:ff
qca95xx_GMAC: Max segments per packet : 1
qca95xx_GMAC: Max tx descriptor count : 128
qca95xx_GMAC: Max rx descriptor count : 128
qca95xx_GMAC: Mac capability flags : 3581
953x_GMAC: qca953x_gmac_attach
Link Int Enabled
qca953x_set_gmac_caps CHECK DMA STATUS
mac:1 Registering S27....
qca95xx_GMAC: RX TASKLET - Pkts per Intr:18
qca95xx_GMAC: Mac address for unit 1:bfff0006
qca95xx_GMAC: ff:ff:ff:ff:ff:ff
qca95xx_GMAC: Max segments per packet : 1
qca95xx_GMAC: Max tx descriptor count : 128
qca95xx_GMAC: Max rx descriptor count : 128
qca95xx_GMAC: Mac capability flags : 3D81
device eth0 entered promiscuous mode
device eth1 entered promiscuous mode
athr_gmac_ring_alloc Allocated 2048 at 0x83a71800
athr_gmac_ring_alloc Allocated 2048 at 0x83a71000
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
953x_GMAC: Enet Unit:0 PHY:4 is UP eth0 MII 100Mbps full duplex
953x_GMAC: done cfg2 0x7115 ifctl 0x10000 miictrl
Setting Drop CRC Errors, Pause Frames and Length Error frames
athr_gmac_ring_alloc Allocated 2048 at 0x83af4800
athr_gmac_ring_alloc Allocated 2048 at 0x83af4000
HONEYBEE ----> S27 PHY MDIO
ATHRS27: resetting s27
ATHRS27: s27 reset done
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
br0: port 1(eth0) entering forwarding state
Disable VlanManage, data.enable(0), data.vid(0)
rmmod: br_dhcp_filter.ko: No such file or directory
[dhcpcKill:643]error: dhcpc status:3
command not supported
Generating key, this may take a while...
insmod: cannot insert `/lib/modules/2.6.31/kernel/nf_conntrack_proto_gre.ko': File exists (-1): File exists
httpServerCreate: try to add port 80
Output of cat /proc/mtd:
# cat /proc/mtd
dev: size erasesize name
mtd0: 00020000 00010000 "u-boot"
mtd1: 00010000 00010000 "pation-table"
mtd2: 00010000 00010000 "product-info"
mtd3: 00180000 00010000 "kernel"
mtd4: 00600000 00010000 "rootfs"
mtd5: 00030000 00010000 "config"
mtd6: 00010000 00010000 "ART"
Images CPE210v3:
Serial port J3 starting at the small arrow (from left to right):
> TX | RX | GND | 3.3V
I will add more information soon.
Best regards.
/legacycode