Hello,
is somebody working on support for TP-LINK RE305 v3?
I taste already the image for RE305 v1, but it does not work. I think the new version must be defined in the tplinksafeloader for support. The hardware thems to be the same.
Would be happy if somebody can help me.
Hello, Please tell me when there will be OpenWRT for RE305 v3 from Tp-link.
I have garthered some input via serial port:
root@OpenWrt:/# cat /proc/cpuinfo
system type : MT7628
processor : 0
cpu model : MIPS 24Kc V5.5
BogoMIPS : 386.04
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
ASEs implemented : mips16 dsp
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available
cat /proc/mtd
dev: size erasesize name
mtd0: 00800000 00010000 "ALL"
mtd1: 00020000 00010000 "fs-uboot"
mtd2: 000e0000 00010000 "os-image"
mtd3: 006c0000 00010000 "file-system"
mtd4: 00010000 00010000 "radio"
What to do next?
And the boot messages:
DDR Calibration MEMCTRL reg = 0E120003
U-Boot 1.1.3 (Aug 26 2020 - 18:01:32)
Board: Ralink APSoC DRAM: 64 MB
relocate_code Pointer at: 83fb8000
******************************
Software System Reset Occurred
******************************
flash manufacture id: 20, device id 70 17
Warning: un-recognized chip ID, please update bootloader!
*** Warning - bad CRC, using default environment
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Aug 26 2020 Time:18:01:32
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768
##### The CPU freq = 580 MHZ ####
estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.
default: 3 0
3: System Boot system code via Flash.
tplink_turn_off_led
## Booting image at bc020000 ...
text base: 80000000
entry point: 8000c150
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64
Starting kernel ...
LINUX started...
THIS IS ASIC
Linux version 2.6.36 (jenkins@Sohoiipf) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1 Wed Aug 26 18:03:39 CST 2020
The CPU feqenuce set to 580 MHz
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00004000
On node 0 totalpages: 16384
free_area_init_node: node 0, pgdat 80249290, node_mem_map 81000000
Normal zone: 128 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 16256 pages, LIFO batch:3
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3 init=/sbin/init earlyprintk debug
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=00028700
Readback ErrCtl register=00028700
Memory: 62292k/65536k available (1910k kernel code, 3244k reserved, 434k data, 132k init, 0k highmem)
Hierarchical RCU implementation.
RCU-based detection of stalled CPUs is disabled.
Verbose stalled-CPUs detection is disabled.
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 570504c4
RALINK_GPIOMODE = 570404c4
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0
*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab <bio-0> at 0
pci 0000:00:00.0: reg 10: [mem 0x00000000-0x7fffffff]
pci 0000:00:00.0: reg 14: [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: supports D1
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: reg 10: [mem 0x00000000-0x000fffff 64bit]
pci 0000:01:00.0: reg 30: [mem 0x00000000-0x0000ffff pref]
pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
pci 0000:01:00.0: PME# disabled
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff 64bit] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0: bridge window [io disabled]
pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff]
pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref]
PCI: Setting latency timer of device 0000:00:00.0 to 64
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
bus=0x1, slot = 0x0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS 80 bytes, default 32
Load Ralink Timer0 Module
Load Ralink Timer1 Module
Load Ralink Timer2 Module
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 121
io scheduler noop registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A
flash manufacture id: 20, device id 70 17
Warning: un-recognized chip ID, please update SPI driver!
N25Q064A13ESE40F(20 ba171000) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 5 MTD partitions on "raspi":
0x000000000000-0x000000800000 : "ALL"
0x000000000000-0x000000020000 : "fs-uboot"
0x000000020000-0x000000100000 : "os-image"
0x000000100000-0x0000007c0000 : "file-system"
0x0000007f0000-0x000000800000 : "radio"
TCP cubic registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 132k freed
procd: Console is alive
procd: - preinit -
mounting /dev/root
procd: - early -
procd: - ubus -
procd: - init -
Please press Enter to activate this console.
GMAC1_MAC_ADRH -- : 0x0000000c
GMAC1_MAC_ADRL -- : 0x432880c8
Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500!
GMAC1_MAC_ADRH -- : 0x0000000c
GMAC1_MAC_ADRL -- : 0x432880a3
PROC INIT OK!
liblog: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
bridge: Successed to create netlink socket
r
eloadprofile() begin
reloadprofile() end
reloadconfig() begin
get_upgrade_level() begin
============> upgrade_level = 1
get_upgrade_level() end
get_upgrade_level() begin
============> upgrade_level = 1
get_upgrade_level() end
!!!!===> not do resetandmergeconfig .....
reloadconfig() end
user has set country
device is not production models, do nothing!!!
loadRepeaterProductInfo() end
[GPIOD][gpio_create_ibus_thread:34]create ibus thread successfully
Raeth v3.1 (Tasklet)
phy_tx_ring = 0x02d88000, tx_ring = 0xa2d88000
phy_rx_ring0 = 0x02d89000, rx_ring0 = 0xa2d89000
Gpio Mode Value: 570404c4
Gpio Mode Value: 570404c4
GMAC1_MAC_ADRH -- : 0x000028ee
GMAC1_MAC_ADRL -- : 0x5220dfcd
RT305x_ESW: Link Status Changed
device eth2 entered promiscuous mode
br-lan: port 1(eth2) entering forwarding state
br-lan: port 1(eth2) entering forwarding state
tz isGMT-01:00
[smartip_create_ibus_thread 40] create ibus thread successfully
[smartip_start_process 761] smartipd start udhcpd...........
[onemesh_get_mesh_enable 939] Parse JSON failed!
server: 192.168.0.100@@@@@@@@ap follow sta ...
wifid[mtk_init_platform:6121]: mtk init platform start.
[smartip_receive_event 64] smartipd received action: 2
[smartip_receive_event 112] in ibus action wifi: set prelink_status to FALSE
wifid[wifi_get_production_models:323]: get char 0
wifid[_init_config_file:2089]:
++++++++l_mtk.DFS_support = TRUE+++++++++
scanTime_2G:15 scanTime_5G:18
MT7628-->
=== pAd = c05e7000, size = 2404808 ===
<-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x
<-- RTMPAllocAdapterBlock, Status=0
MT7628-->RtmpChipOpsHook(492): Not support for HIF_MT yet!
MT7628-->mt7628_init()-->
MT7628-->mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
MT7628-->e2.bin mt7628_init(1135)::(2), pChipCap->fw_len(64736)
MT7628-->mt_bcn_buf_init(218): Not support for HIF_MT yet!
MT7628--><--mt7628_init()
table: 0x42dba8
on
off
!!!!!!!!!!!!!!!!!!!cloud_brd start!!!!!
!!!!!!!!!!!!!!!!!!cloud-client start!!!
[cloud_cli.c]: main()->cloud client start.
MT7612E-->register rt2860
PCI: Setting latency timer of device 0000:01:00.0 to 64
MT7612E-->
=== pAd = c0e82000, size = 1953440 ===
<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
MT7612E-->pAd->CSRBaseAddress =0xc0d80000, csr_addr=0xc0d80000!
MT7612E-->device_id =0x7662
MT7612E-->==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
device not binded
event:11
ubus call cloud_client response is 0
monitor doing
{"sun":[],"wed":[],"sat":[],"tue":[],"thu":[],"fri":[],"mon":[]}
/usr/sbin/tsched_conf -a power_schedule power_schedule '{"sun":[],"wed":[],"sat":[],"tue":[],"thu":[],"fri":[],"mon":[]}'
/usr/sbin/tsched_conf -u power_schedule
procd: - init complete -
MT7612E-->E2pAccessMode=2
MT7612E-->cfg_mode=14
MT7612E-->cfg_mode=14
MT7612E-->wmode_band_equal(): Band Not Equal!
MT7612E-->APSDCapable[0]=1
MT7612E-->APSDCapable[1]=1
MT7612E-->APSDCapable[2]=1
MT7612E-->APSDCapable[3]=1
MT7612E-->APSDCapable[4]=1
MT7612E-->APSDCapable[5]=1
MT7612E-->APSDCapable[6]=1
MT7612E-->APSDCapable[7]=1
MT7612E-->APSDCapable[8]=1
MT7612E-->APSDCapable[9]=1
MT7612E-->APSDCapable[10]=1
MT7612E-->APSDCapable[11]=1
MT7612E-->APSDCapable[12]=1
MT7612E-->APSDCapable[13]=1
MT7612E-->APSDCapable[14]=1
MT7612E-->APSDCapable[15]=1
MT7612E-->default ApCliAPSDCapable[0]=1
MT7612E-->pAd->ed_threshold = 90
MT7612E-->pAd->ed_false_cca_threshold = 180
MT7612E-->Key1Str is Invalid key length(0) or Type(0)
MT7612E-->Key1Str is Invalid key length(0) or Type(0)
MT7612E-->Key2Str is Invalid key length(0) or Type(0)
MT7612E-->Key2Str is Invalid key length(0) or Type(0)
MT7612E-->Key3Str is Invalid key length(0) or Type(0)
MT7612E-->Key3Str is Invalid key length(0) or Type(0)
MT7612E-->Key4Str is Invalid key length(0) or Type(0)
MT7612E-->Key4Str is Invalid key length(0) or Type(0)
MT7612E-->Ap0MWDS=0
MT7612E-->Ap1MWDS=1
MT7612E-->RTMPSetSingleSKUParameters - the country region is 5.
MT7612E-->RTMPSetSingleSKUParameters - country code is DE .
MT7612E-->RTMPSetSingleSKUParameters - the country DFSType is 0.
MT7612E-->Loading SKU file: /etc_ro/Wireless/iNIC/SingleSKU_5G_CE.dat
MT7612E-->RtmpChipOpsEepromHook::e2p_type=2, inf_Type=5
MT7612E-->NVM is FLASH mode (pAd->flash_offset = 0x48000)
MT7612E-->get_dev_name_prefix(): dev_idx = 1, dev_name_prefix=rai
MT7628-->TX_BCN DESC a2f21000 size = 320
MT7628-->RX[0] DESC a2f25000 size = 4096
MT7628-->RX[1] DESC a2f28000 size = 1024
MT7628-->AndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
MT7628-->Smart Carrier Sense = 1
MT7628-->RTMPSetSingleSKUParameters - the country region is 5.
MT7628-->RTMPSetSingleSKUParameters - country code is DE .
MT7628-->RTMPSetSingleSKUParameters - the country DFSType is 0.
MT7628-->Loading SKU file: /etc_ro/Wireless/RT2860/SingleSKU_2G_CE.dat
MT7628-->load fw image from fw_header_image
MT7628-->AndesMTLoadFwMethod1(2182)::pChipCap->fw_len(64736)
MT7628-->FW Version:1MT7628-->
MT7628-->FW Build Date:20170411104110MT7628-->
MT7628-->CmdAddressLenReq:(ret = 0)
MT7628-->CmdFwStartReq: override = 1, address = 1048576
MT7628-->CmdStartDLRsp: WiFI FW Download Success
MT7628-->MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000012
MT7628-->RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
MT7628-->RtmpEepromGetDefault::e2p_dafault=2
MT7628-->RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
MT7628-->NVM is FLASH mode
MT7628-->1. Phy Mode = 14
MT7628-->Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 33
MT7628-->2. Phy Mode = 14
MT7628-->3. Phy Mode = 14
MT7628-->NICInitPwrPinCfg(11): Not support for HIF_MT yet!
MT7628-->NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
MT7628-->MtAsicInitMac()-->
MT7628-->mt7628_init_mac_cr()-->
MT7628-->MtAsicSetMacMaxLen(1276): Set the Max RxPktLen=1024!
MT7628-->AntCfgInit(2974): Not support for HIF_MT yet!
MT7628-->MCS Set = ff ff 00 00 01
MT7628-->MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
MT7628-->[DEBUG]zhulin:MacByte = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 0, MAC = 28:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[DEBUG]zhulin:MacByte = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 1, MAC = 2a:ee:52:30:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3060): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->CmdSlotTimeSet:(ret = 0)
MT7628-->MtAsicSetTxPreamble(3039): Not support for HIF_MT yet!
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = 28:ee:52:20:df:cc
MT7628--><=== APStartUp, clear ApCliAutoConnectRunn
ath_band_steering_netlink_receive 159 pid = 695
MT7612E-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
device apclii0 entered promiscuous mode
br-lan: port 4(apclii0) entering forwarding state
br-lan: port 4(apclii0) entering forwarding state
MT7612E-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
wifid[backend_apMT7628-->_tpie_info_stop:Del::OID_AP_VENDOR_IE_DEL
4732]: call tp_ie_info_stop
wifid[tp_ie_info_stMT7612E-->op:4221]: lengthDel::OID_AP_VENDOR_IE_DEL
= 0, flags = 37377
wifid[tp_ie_info_stop:4229]MT7628-->: stop tpie ret:Set::OID_AP_VENDOR_IE_SET
0
wifid[tp_ie_info_stop:4221]: length = 0, flags = 37377
wifidMT7612E-->[tp_ie_info_stopSet::OID_AP_VENDOR_IE_SET
:4229]: stop tpie ret:0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 0, MAC = 28:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 1, MAC = 2a:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3060): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->MtAsicSetTxPreamble(3039): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = 28:ee:52:20:df:cc
MT7628--><=== APStartUp, clear ApCliAutoConnectRunning
MT7612E-->@@@ APStop: go to ed_monitor_exit()!!
MT7612E-->@@@ ed_monitor_exit : ===>
MT7612E-->@@@ ed_monitor_exit : <===
MT7612E-->[PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7612E-->[PMF]APStartUp:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MT7612E-->mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=42
MT7612E-->APStartUp(): AP Set CentralFreq at 42(Prim=36, HT-CentCh=38, VHT-CentCh=42, BBP_BW=2)
MT7612E-->mt76x2_calibration(channel = 42)
MT7612E-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7612E-->Apcli DFS need mask beacon!!!
MT7612E-->@@@ ed_monitor_init : ===>
MT7612E-->@@@ ed_monitor_init : <===
MT7612E--><=== APStartUp, clear ApCliAutoConnectRunning
wifid[_setSTA_security_settings:1760]: ApCli none
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
wifid[_setSTA_security_settings:1760]: ApCli none
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 0, MAC = 28:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 1, MAC = 2a:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3060): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->MtAsicSetTxPreamble(3039): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = 28:ee:52:20:df:cc
MT7628--><=== APStartUp, clear ApCliAutoConnectRunning
MT7612E-->cfg_mode=14
MT7612E-->wmode_band_equal(): Band Equal!
MT7612E-->@@@ APStop: go to ed_monitor_exit()!!
MT7612E-->@@@ ed_monitor_exit : ===>
MT7612E-->@@@ ed_monitor_exit : <===
MT7612E-->[PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7612E-->[PMF]APStartUp:: apidx=1, MFPC=0, MFPR=0, SHA256=0
MT7612E-->mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=36, HT-CentCh=38, VHT-CentCh=42
MT7612E-->APStartUp(): AP Set CentralFreq at 42(Prim=36, HT-CentCh=38, VHT-CentCh=42, BBP_BW=2)
MT7612E-->mt76x2_calibration(channel = 42)
MT7612E-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7612E-->Apcli DFS need mask beacon!!!
MT7612E-->@@@ ed_monitor_init : ===>
MT7612E-->@@@ ed_monitor_init : <===
MT7612E--><=== APStartUp, clear ApCliAutoConnectRunning
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 0, MAC = 28:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[DEBUG]zhulin:MacByte = 3
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:BssidNum = 2
MT7628-->[DEBUG]zhulin:Value = 4c0f0f0f
MT7628-->[DEBUG]zhulin:MacMask = ef
MT7628-->[DEBUG]zhulin:idx = 1, MAC = 2a:ee:52:20:df:cc
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3060): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->MtAsicSetTxPreamble(3039): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = 28:ee:52:20:df:cc
MT7628--><=== APStartUp, clear ApCliAutoConnectRunning
wifid[wifi_create_ibus_thread:40]: Create ibus thread successfully
1,count is 45
ra0:rai0:ra1:rai1:eth2:br-lan:apcli0:apclii0
====>ra0:1, rai0:2, ra1:3, rai1:4, eth0:5, br-lan:6, apcli0:7, apclii0:8
table: 0x42dba8
on
off
wifid[_acl_reload:676]: ===>> system mode: 0, mesh_enable: 0
wpsd[main:1781]: wpsd has been started@@@@@@@@ap follow sta ...
wifid[_start_prescan:1174]: _start_prescan!
wifid[mtk_init_platform:6283]: Wifi start begin time: 13, end time:48
wifid[_mark_down_reboot_time_to_use:5187]: Wifi start need time: 35
wifid[_mark_down_reboot_time_to_use:5192]: Mark down system start need time: 48
wifid[mtk_init_platform:6285]: mtk init platform end.
wifid[_acl_reload:676]: ===>> system mode: 0, mesh_enable: 0
MT7628-->ApSiteSurvey: BssTableInit!!!
MT7612E-->ApSiteSurvey: BssTableInit!!!
MT7612E-->Channel to scan is 40, BSSID[0]
MT7612E-->Channel to scan is 44, BSSID[0]
MT7612E-->Channel to scan is 48, BSSID[0]
MT7612E-->Channel to scan is 52, BSSID[0]
MT7612E-->Channel to scan is 56, BSSID[0]
MT7612E-->Channel to scan is 60, BSSID[0]
MT7612E-->Channel to scan is 64, BSSID[0]
BusyBox v1.22.1 (2020-08-26 18:19:07 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
MM NM MMMMMMM M M
$MMMMM MMMMM MMMMMMMMMMM MMM MMM
MMMMMMMM MM MMMMM. MMMMM:MMMMMM: MMMM MMMMM
MMMM= MMMMMM MMM MMMM MMMT7612E-->MMM MMMM MMMMChannel to scan is 100, BSSID[0]
MM MMMM MMMMM'
MMMM= MMMMM MMMM MM MMMMM MMMM MMMM MMMMNMMMMM
MMMM= MMMM MMMMM MMMMM MMMM MMMM MMMMMMMM
MMMM= MMMM MMMMMM MMMMM MMMM MMMM MMMMMMMMM
MMMM= MMMM MMMMM, NMMMMMMMM MMMM MMMM MMMMMMMMMMM
MMMM= MMMM MMMMMM MMMMMMMM MMMM MMMM MMMM MMMMMM
MMMM= MMMM MM MMMM MMMM MMMM MMMM MMMM MMMM
MMMM$ ,MMMMM MMMMM MMMM MMM MMMM MMMMM MMMM MMMM
MMMMMMM: MMMMMMM M MMMMMMMMMMMM MMMMMMM MMMMMMM
MMMMMM MMMMN M MMMMMMMMM MMMM MMMM
MMMM M MMMMMMM M M
M
---------------------------------------------------------------
For those about to rock... (Attitude Adjustment, r2611)
---------------------------------------------------------------
root@OMT7612E-->penWrt:/#
I am also interested to install openwrt in the my tp-link RE305 v3.
I'm trying to "prepare" the code - according to similar configs - it seems you can't just reuse the code from re305v1 - there's different "disk" layout - it's more similar to re200/220.
I've forked repo & made new branch - you can check it here: https://github.com/koyuch/openwrt/commit/98ca337978ceab343509d1d5dab395b41d994527
Could anyone with more knowledge about openwrt code check if it could be ok..?
Though I haven't still tested it (I haven't even connect to serial, but you can read a lot of info from oem firmware..) Will probably try it trough weekend
Btw. it's really funny that the OEM version is actually built on old openwrt version (12.09 from 2013)
Heads up 
I've been running a test image for a couple of weeks ("OpenWrt SNAPSHOT, r15882-4b37e3bc2b"). I haven't noticed issues so far, but I had the wrong numbers of the LED GPIOs.
From some testing and checking the binaries in the OEM firmware related to upgrade process (especially /usr/bin/nvrammanager), this device seems to require a signed image when uploading through the TP-Link web UI. You can downgrade the firmware, though.
I couldn't find any button combination to trigger the TFTP download, I had to interrupt UBoot through serial. I booted from a initramfs image first (setup the TFTP server and connect it via ethernet, choose 1 in the boot options), tested it a bit with that, then proceeded to run sysupgrade. Serial settings are the same as RE305V1 (baudrate=57600). To access the serial port, you need to remove the 4 screws, and remove the front cover. After that, the nodes are labelled and easy to access.
@servitkar, my changes were almost exactly yours! Besides the GPIO (your list seems correct, just tested it) and MAC addresses. For the MACs, I used negative increments. I believe I had to use negative values to match how the OEM firmware behaved.
Since I don't a device with the OEM firmware anymore, could you check the MACs to be sure what's the right setting?
(By the way, on this line you need to use a tab instead of spaces)
Hi
Can any one help me with snapshot download link for re305 v3?
hi
can u help me to install ?
i need link to bin file
thanks @pmeira, so I've loaded it with serial (according to your "recipe"), but I'm not big soldering master, so it was really messy soldering.. I don't know if I haven't overburnt something.. (but at least it seems everything is working as intended)
I've tried it also with "usual" option '2' - rewrite flash in bootloader, but it seems there's some problem with lzma compression of kernel - the error was like this one: How to replicate snapshot builds exactly? (LZMA ERROR 1)
I've tried to "look" on it with binwalk, but I just don't understand how can be dictionary bigger than the actual size of data (8MB vs 6MB):
$ binwalk openwrt-ramips-mt76x8-tplink_re305-v3-squashfs-factory.bin
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
9416 0x24C8 LZMA compressed data, properties: 0x6D, dictionary size: 8388608 bytes, uncompressed size: 6289259 bytes
2004840 0x1E9768 Squashfs filesystem, little endian, version 4.0, compression:xz, size: 3128791 bytes, 1175 inodes, blocksize: 262144 bytes, created: 2021-03-22 17:44:16
but when I compare this with "official" snapshot build of re305v1, result is very similar.. (& nobody has reported problems with it..
Could anybody test it with original oem upload? (but just be ready to "debug" with serial..) - in v1 it seems it was succesful: OpenWrt Support for TP-LINK RE305 v1 - #2 by petitess
I can upload my builds here, but I don't know what's "official" place where to upload it
btw. thank you @pmeira for your comments, actualy you we're right about macs negative increments (I've already updated my branch), but I don't think that positive increments would have any impact on functionality 
I have spotted in your changes, that you haven't changed size of target image size - actually you can use "bigger" size as mtd partitions were moved & they emptied more space for rootfs (it's more similar to re200 than to 305v1)
but I don't think that positive increments would have any impact on functionality
Right, you can put any value and it would work, but it's better to reproduce the OEM values.
that you haven't changed size of target image size
Yep, I know, but note that I abandoned that in favor of your repo, I don't plan to make a PR from mine (since yours looked OK, that was no point in mentioning it). That's why I went so far as mention the issue with tab vs spaces -- someone else would have requested the change down the line when you make the PR.
@pmeira ah ok thanks, I thought that you want to also create PR. So I've just filed that in - we'll see if it's gonna be accepted https://github.com/openwrt/openwrt/pull/4044
I've uploaded my build to: gdrive. pls follow procedure described by @pmeira, or you can try also load it trough oem update, but at your own risk! (& be ready to "repair" with serial port)
i try with OEM upgrade but got error "enable to upgrade"
even i change the file name !
try to name it similar as original oem names: "re305v3_eu-up-ver1-1-4-P1[20201202-rel42413].bin" (you can "update" the versions - for example "re305v3_eu-up-ver1-1-5-P1[20210404-rel54321].bin")
otherwise it could be more complicated as @pmeira pointed out.. for example for re200v1 there was some more difficult way how to "glue" new bin file: https://openwrt.org/toh/tp-link/re200#web_interface_method_v1 (but there would be other "numbers" according to 305 bin file..)
This is because there's no .soft_ver set, see my comment on the GitHub PR.
@Aabayoumy Can you share the firmware version yours has? My EU one has (had) 1.1.3 20200715 and I can't grab that one from TP-Link's website even (it will give me an older 2020-03-20 one as the most recent one).
We want to set the .soft_ver high enough.
This is because there's no
.soft_verset
@Borromini Oh, if that was the only issue, this is great news then.
This contains re305v3_eu-up-ver1-1-4-P1[20201202-rel42413].bin: https://static.tp-link.com/2021/202101/20210114/RE305(V3)_20201202.zip
The file name check is a crude one that earlier TP-Link firmware used but it's easy to work around, which is probably why they hardcoded a version number check. Also helps if they want to prevent downgrading (which apparently happens with some models).
I just flashed OpenWrt through the OEM web UI with the version set, so it's definitely just that. Otherwise installation from OEM web UI would still be broken.
I have 1.1.4 Build 20201202 Rel. 42413
Can you explian more how to make this changes?
Or can i downgrade to older ver?
i downgrade to ver 1.1.3 Build 20200715 Rel. 38287
and rename openwrt-ramips-mt76x8-tplink_re305-v3-squashfs-factory.bin to re305v3_eu-up-ver1-1-4-P1[20201202-rel42413].bin and try to upgrade but it's also fail after 3 %