TP-Link MR200 v4 custom firmware

Is this the correct way to cut the TP-Link firmware file?

[user@linux mr200]$ dd bs=512 skip=1 count=16000 if=ArcherMR200_stock_firmware.bin of=tp_recovery.bin
16000+0 records in
16000+0 records out
8192000 bytes (8.2 MB, 7.8 MiB) copied, 0.173458 s, 47.2 MB/s

It worked. IΒ΄m back on stock firmware.

Anybody who knows the username / password to access the console?

Will the kernel boot log be of any interest?

Have you tried admin admin. The log can probably tell us more about the lte modem in question

Boot log from firmware: Archer MR200(EU)_V4_210201.
Part1


[04020D0A][04020C0F][888A0000][23244648][00232446]
DU Setting Cal Done


U-Boot 1.1.3 (Feb  1 2021 - 18:08:24)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb4000
******************************
Software System Reset Occurred
******************************

cpuType 00000000.
cpuType 00000000.
gpiomode1 55154404.
gpiomode2 05550555.
######GPIO CTRL 0 for GPIO 0~31 OUTPUT tmp(0x00000030)#####
######GPIO CTRL 1 for GPIO 32~64 OUTPUT tmp(0x00000f80)#####
######GPIO CTRL 1 for GPIO 32~64 INPUT tmp(0x00000f80)#####
flash manufacture id: ef, device id 40 17
find flash: W25Q64BV
RALINK_GPIOMODE_REG_1(0xb0000060) old=0x55154404 new=0x55154404
RALINK_GPIO_CTRL_32_63(0xb0000604) old=0xf80 new=0xf90
RALINK_GPIO_DATA_32_63(0xb0000624) old=0x6f5f new=0x6f4f
============================================
Ralink UBoot Version: 4.3.0.0
--------------------------------------------
ASIC 7628_MP (Port5<->None)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Feb  1 2021  Time:18:08:24
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes
RESET MT7628 PHY!!!!!!
continue to starting system.                                                                                                                      0
disable switch phyport...

3: System Boot system code via Flash.(0xbc020000)
do_bootm:argc=2, addr=0xbc020000
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8000c150) ...
## Giving linux memsize in MB, 64

Starting kernel ...

ζ€˜β–’β–’β–’β–’ffβ–’β–’~β–’β–’~fxβ–’β–’β–’ζ€˜β–’ζ€˜β–’fβ–’β–’β–’β–’β–’β–’β–’β–’fβ–’fβ–’β–’β–’Linux version 2.6.36 (tp-link@Sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #9 Mon Feb 1 18:08:51 CST 2021

 The CPU feqenuce set to 575 MHz

 MIPS CPU sleep mode enabled.
CPU revision is: 00019655 (MIPS 24Kc)
Software DMA cache coherency
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, , 4-waylinesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0003a770
Readback ErrCtl register=0003a770
Memory: 61036k/65536k available (2919k kernel code, 4500k reserved, 545k data, 184k init, 0k highmem)
NR_IRQS:128
console [ttyS1] enabled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 55154404
RALINK_GPIOMODE = 55144404
***** Xtal 40MHz *****
start PCIe register access
RALINK_RSTCTRL = 2400000
RALINK_CLKCFG1 = fdbfffc0

*************** MT7628 PCIe RC mode *************
PCIE0 enabled
Port 0 N_FTS = 1b105000
init_rt2880pci done
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000)
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [io  disabled]
pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
pci 0000:00:00.0:   bridge window [mem pref disabled]
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20100000
res[0]->end = 201fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource Ralink Systick timer
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.15)
msgmni has been set to 119
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
i2cdrv_major = 218
Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A

create tplink/console_ctl

create tplink/console_ctl done
brd: module loaded
flash manufacture id: ef, device id 40 17
W25Q64BV(ef 40170000 flash_version = 1) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007d0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007d0000-0x0000007e0000 : "config"
0x0000007e0000-0x0000007f0000 : "romfile"
0x0000007f0000-0x000000800000 : "radio"
Register flash device:flash0
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
FM_OUT value: u4FmOut = 130(0x00000082)
FM detection done! loop = 0
SR calibration value u1SrCalVal = 6
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (953 buckets, 3812 max)
GRE over IPv4 demultiplexor driver
gre: can't add protocol
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 184k freed
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
starting pid 35, tty '': '/etc/init.d/rcS'
cp: can't stat '/etc/SingleSKU_FCC.dat': No such file or directory
SCSI subsystem initialized
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/core/usbcore.ko': No such file or directory
Initializing USB Mass Storage driver...
scsi0 : usb-storage 1-1:1.5
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/usb/host/ifxusb_host.ko': No such file or directory
rdm_major = 253
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7EF100) ffffffec-17-2f-04-ffffffd9-ffffff85
GMAC1_MAC_ADRH -- : 0x0000ec17
GMAC1_MAC_ADRL -- : 0x2f04d985
Ralink APSoC Ethernet Driver Initilization. v3.1  256 rx/tx descriptors allocated, mtu = 1500!
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Read MAC from flash(0x7EF100) ffffffec-17-2f-04-ffffffd9-ffffff85
GMAC1_MAC_ADRH -- : 0x0000ec17
GMAC1_MAC_ADRL -- : 0x2f04d985
PROC INIT OK!
usbcore: registered new interface driver cdc_wdm
dns_init
domain_name:tplinkmodem.net
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0

Please press Enter to activate this console. scsi 0:0:0:0: Direct-Access     Linux    File-Stor Gadget 0318 PQ: 0 ANSI: 2
sd 0:0:0:0: [sda] 130048 512-byte logical blocks: (66.5 MB/63.5 MiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Assuming drive cache: write through
 sda:
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Attached SCSI removable disk
[err] syslogd[main --1001] syslogd : syslogd_init

[ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_xml_file ] 2183:  dmcfg product xml file for 3 is /etc/reduced_data_model_MR200V4.xml
[ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model_MR200V4.xml!, about to open file /etc/reduced_data_model_MR200V4.xml
spiflash_ioctl_read, Read from 0x007d0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x007d0000 length 0x8850, ret 0, retlen 0x8850
spiflash_ioctl_read, Read from 0x007d0000 length 0x10000, ret 0, retlen 0x10000
spiflash_ioctl_read, Read from 0x007d0000 length 0x8850, ret 0, retlen 0x8850
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac ec-17-2f-04-d9-86
qmi_wwan: probe of 1-1:1.0 failed with error -22
[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac ec-17-2f-04-d9-86
qmi_wwan: probe of 1-1:1.1 failed with error -22
qmi_wwan 1-1:1.2: bogus CDC Union: master=0, slave=0
qmi_wwan: probe of 1-1:1.2 failed with error -1
qmi_wwan 1-1:1.3: bogus CDC Union: master=0, slave=0
qmi_wwan: probe of 1-1:1.3 failed with error -1
qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device
[zc] qmi_wwan_bind: in
[zc] change dtr 1
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
Init mac ec-17-2f-04-d9-86

LTE has booted, tell cos to start qmuxd and mobile
usbcore: registered new interface driver qmi_wwan
[ qmiReconnectChangedHandler ] 460:  receive qmi connect msg!

[ qmiReconnectChangedHandler ] 461:  mount /tmp/udisk
[ checkUdiskReady ] 384:  [cos] times:0, mount cmd:mount -t auto /dev/sda /tmp/udisk

usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbserial_generic 1-1:1.0: generic converter detected
usb 1-1: generic converter now attached to ttyUSB0
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ prepareForQmi ] 062:  wait for lte to recognize count:0

mount: mounting /dev/sdb on /tmp/udisk failed: No such device or address
mount: mounting /dev/sdc on /tmp/udisk failed: No such file or directory
[ qmiReconnectChangedHandler ] 467:  start qmuxd
spiflash_ioctl_read, Read from 0x007ef500 length 0x29, ret 0, retlen 0x29
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
spiflash_ioctl_read, Read from 0x007ef200 length 0x4, ret 0, retlen 0x4
spiflash_ioctl_read, Read from 0x00020000 length 0x200, ret 0, retlen 0x200
spiflash_ioctl_read, Read from 0x007ef100 length 0x6, ret 0, retlen 0x6
linux_qmi_qmux_io_pwr_up_init.c: Unable to open wakelock file = /sys/power/wake_lock, error [2:No such file or directory]
qmuxd: linux_qmi_read_sysfs_config: couldn't open file /sys/module/f_rmnet/parameters/rmnet_ctl_chqmuxd: linux_qmi_read_sysfs_config: couldn't open /sys/module/rmnet/parameters/rmnet_ctl_chlinux_qmi_qmux_if_configure_port_timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc-wdm0/open_timeout errno [2:No such file or directory]qmi_ctl_rx_msg.c Can't find txn info for txn_id = 1
14 ERROR: Post event to MOBspiflash_ioctl_read, Read from 0x007ef600 length 0xf, ret 0, retlen 0xf
ILE server failed, errno = 2 (No such file or directory).
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process_thread --881] begin to lost!, msg = ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory).

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

14 ERROR: Client communication with server failed.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

14 ERROR: Post event to MOBILE server failed, errno = 2 (No such file or directory).
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

14 ERROR: Client communication with server failed.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

linux_qmi_qmux_if_configure_port_timeout: failed to open SMD timeout config=/sys/devices/virtual/smdpkt/cdc-wdm0/open_timeout errno [2:No such file or directory]qmi_qmux_open_connection: connection is disabled for conn_id=1
qmuxd: opening connection for conn_id=1 [DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=2
qmuxd: opening connection for conn_id=2 [DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=3
qmuxd: opening connection for conn_id=3 [DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=4
qmuxd: opening connection for conn_id=4 [DATA9_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=5
qmuxd: opening connection for conn_id=5 [DATA12_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=6
qmuxd: opening connection for conn_id=6 [DATA13_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=7
qmuxd: opening connection for conn_id=7 [DATA14_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=9
qmuxd: opening connection for conn_id=9 [DATA15_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=10
qmuxd: opening connection for conn_id=10 [DATA16_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=11
qmuxd: opening connection for conn_id=11 [DATA17_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=21
qmuxd: opening connection for conn_id=21 [SDIO_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=22
qmuxd: opening connection for conn_id=22 [SDIO_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=23
qmuxd: opening connection for conn_id=23 [SDIO_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=24
qmuxd: opening connection for conn_id=24 [SDIO_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=25
qmuxd: opening connection for conn_id=25 [SDIO_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=26
qmuxd: opening connection for conn_id=26 [SDIO_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=27
qmuxd: opening connection for conn_id=27 [SDIO_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=28
qmuxd: opening connection for conn_id=28 [SDIO_DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=29
qmuxd: opening connection for conn_id=29 [MDM_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=30
qmuxd: opening connection for conn_id=30 [MDM_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=31
qmuxd: opening connection for conn_id=31 [MDM_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=32
qmuxd: opening connection for conn_id=32 [MDM_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=33
qmuxd: opening connection for conn_id=33 [MDM_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=34
qmuxd: opening connection for conn_id=34 [MDM_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=35
qmuxd: opening connection for conn_id=35 [MDM_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=36
qmuxd: opening connection for conn_id=36 [MDM_DATA8_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=48
qmuxd: opening connection for conn_id=48 [SMUX0] failed
qmi_qmux_open_connection: connection is disabled for conn_id=49
qmuxd: opening connection for conn_id=49 [MDM2_DATA1_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=50
qmuxd: opening connection for conn_id=50 [MDM2_DATA2_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=51
qmuxd: opening connection for conn_id=51 [MDM2_DATA3_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=52
qmuxd: opening connection for conn_id=52 [MDM2_DATA4_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=53
qmuxd: opening connection for conn_id=53 [MDM2_DATA5_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=54
qmuxd: opening connection for conn_id=54 [MDM2_DATA6_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=55
qmuxd: opening connection for conn_id=55 [MDM2_DATA7_CNTL] failed
qmi_qmux_open_connection: connection is disabled for conn_id=56
qmuxd: opening connection for conn_id=56 [MDM2_DATA8_CNTL] failed
[ qmiReconnectChangedHandler ] 471:  start mobile
Query new SMS count success.16 ERROR: New sms count is 0
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

16 USER: Mobile device manager (qmi) initialized OK.
Init QMI services......
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

[ qmiReconnectChangedHandler ] 475:  killall flowstat
killall: flowstat: no process killed
[ qmiReconnectChangedHandler ] 477:  start flowstat
[ qmiReconnectChangedHandler ] 482:  start qmuxd and mobile done.

16 USER: Start get voice service object.
16 USER: VOICE Service Object got.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

16 USER: VOICE QMI Client Init successfully, handle is 0x004C5BF8.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

16 USER: Mobile device manager (qmi) initialized OK.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

ioctl: No such device
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/zebra.pid.
16 INFO: src/flowstat_main.c(18) main(): LTE flowstat process starts working!
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/ripd.pid.
[ util_netParseDNSv6 ] 497:  DNS servers is

sendto /var/tmp/7 msg 2001 error No such file or directory ,pid 87
[ ntpc ] 979:  Get time zone, g_timeZone = 720
Raeth v3.1 (Tasklet,SkbRecycle)

phy_tx_ring = 0x036ba000, tx_ring = 0xa36ba000

phy_rx_ring0 = 0x036bb000, rx_ring0 = 0xa36bb000
[fe_sw_init:4952]rt305x_esw_init.
disable switch phyport...
GMAC1_MAC_ADRH -- : 0x0000ec17
GMAC1_MAC_ADRL -- : 0x2f04d985
RT305x_ESW: Link Status Changed
/bin/sh: can't create /proc/tplink/eth_vlan: nonexistent directory
ioctl: No such device
brctl: bridge br0: Invalid argument
set if eth0.2 to *not wan dev
device eth0.2 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.2) entering forwarding state
br0: port 1(eth0.2) entering forwarding state
set if eth0.3 to *not wan dev
device eth0.3 entered promiscuous mode
br0: port 2(eth0.3) entering forwarding state
br0: port 2(eth0.3) entering forwarding state
set if eth0.4 to *not wan dev
device eth0.4 entered promiscuous mode
br0: port 3(eth0.4) entering forwarding state
br0: port 3(eth0.4) entering forwarding state
set if eth0.5 to *not wan dev
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entering forwarding state
br0: port 4(eth0.5) entering forwarding state
[ vlan_addLanPortsIntoBridge ] 539:  add lan Port 255 from br0
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
brctl: bridge br0: Device or resource busy
[ rsl_initVlanObj ] 982:
+++++++++++++rsl_initVlanObj done!
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
628  id_5g 0x761spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
0   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

Part2

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

ra0       no private ioctls.

1538352018 USER: Not registered, searching!
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

1538352018 ERROR: 0x0000002F QMI_ERR_UNKNOWN
1538352018 ERROR: Failed to set the primary client (0).
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

1538352018 ERROR: 0x00000034 QMI_ERR_DEVICE_NOT_READY
1538352018 ERROR: Failed to get smsc address (0).
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

MT7628-->

=== pAd = c0be7000, size = 966280 ===

<-- RTMPAllocAdapterBlock, Status=0
MT7628-->RtmpChipOpsHook(494): Not support for HIF_MT yet!
MT7628-->mt7628_init()-->
MT7628-->mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
MT7628-->e2.bin mt7628_init(1141)::(2), pChipCap->fw_len(64736)
MT7628-->mt_bcn_buf_init(218): Not support for HIF_MT yet!
MT7628--><--mt7628_init()
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
628  id_5g 0x761spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
0   model type 1spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2


[ oal_sys_prspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
oduct_name ] 209spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
0:  Device is MRspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
200v4

[ oal_sspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
ys_product_name spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2sht:pAd->ApBootFlag = TRUE
090:  Device is MT7628-->MR200v4

[ oalTX_BCN DESC a188d000 size = 320
_sys_product_namMT7628-->e ] 2020:  dmcfgRX[0] DESC a188f000 size = 4096
 id_24g 0x7628  MT7628-->id_5g 0x7610   mRX[1] DESC a1890000 size = 2048
odel type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24gMT7628--> 0x7628  id_5g 0cfg_mode=9
x7610   model tyMT7628-->pe 1

[ oal_sycfg_mode=9
s_product_name ]MT7628--> 2090:  Device iwmode_band_equal(): Band Equal!
s MR200v4

[ oMT7628-->al_sys_product_nAndesSendCmdMsg: Could not send in band command due to diable fRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
ame ] 2020:  dmcfg id_24g 0x7628MT7628-->  id_5g 0x7610  APSDCapable[0]=0
 model type 1
MT7628-->
         [ oal_sys_produAPSDCapable[1]=0
ct_name ] 2090: MT7628--> Device is MR200APSDCapable[2]=0
v4

[ oal_wlanMT7628-->_ra_lteCoexistenAPSDCapable[3]=0
ce ] 7416:  Get MT7628-->Curr band err 0.APSDCapable[4]=0


No need to sMT7628-->witch channel.
APSDCapable[5]=0
[ oal_wlan_ra_ltMT7628-->eCoexistence ] 7APSDCapable[6]=0
514:
AutoChanMT7628-->nelSkipList = 12APSDCapable[7]=0
;13

MT7628-->APSDCapable[8]=0
MT7628-->APSDCapable[9]=0
MT7628-->APSDCapable[10]=0
MT7628-->APSDCapable[11]=0
MT7628-->APSDCapable[12]=0
MT7628-->APSDCapable[13]=0
MT7628-->APSDCapable[14]=0
MT7628-->APSDCapable[15]=0
MT7628-->Key1Str is Invalid key length(0) or Type(0)
MT7628-->Key1Str is Invalid key length(0) or Type(0)
MT7628-->Key1Str is Invalid key length(0) or Type(0)
MT7628-->Key2Str is Invalid key length(0) or Type(0)
MT7628-->Key2Str is Invalid key length(0) or Type(0)
MT7628-->Key2Str is Invalid key length(0) or Type(0)
MT7628-->Key3Str is Invalid key length(0) or Type(0)
MT7628-->Key3Str is Invalid key length(0) or Type(0)
MT7628-->Key3Str is Invalid key length(0) or Type(0)
MT7628-->Key4Str is Invalid key length(0) or Type(0)
MT7628-->Key4Str is Invalid key length(0) or Type(0)
MT7628-->Key4Str is Invalid key length(0) or Type(0)
MT7628-->WscKeyASCII=8
MT7628-->WscKeyASCII=8
MT7628-->WscKeyASCII=8
MT7628-->load fw image from fw_header_image
MT7628-->AndesMTLoadFwMethod1(2264)::pChipCap->fw_len(64736)
MT7628-->FW Version:1MT7628-->
MT7628-->FW Build Date:20170411104110MT7628-->
MT7628-->CmdAddressLenReq:(ret = 0)
MT7628-->CmdFwStartReq: override = 1, address = 1048576
MT7628-->CmdStartDLRsp: WiFI FW Download Success
MT7628-->MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC)
efuse_probe: efuse = 10000002
MT7628-->RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4
MT7628-->RtmpEepromGetDefault::e2p_dafault=2
MT7628-->RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2
MT7628-->NVM is FLASH mode
MT7628-->1. Phy Mode = 14
exec!
spiflash_ioctl_read, Read from 0x007f0000 length 0x400, ret 0, retlen 0x400
eeFlashId = 0x7628!
MT7628-->Country Region from e2p = ffff
tssi_1_target_pwr_g_band = 30
MT7628-->2. Phy Mode = 14
MT7628-->3. Phy Mode = 14
MT7628-->NICInitPwrPinCfg(11): Not support for HIF_MT yet!
MT7628-->NICInitializeAsic(651): Not support rtmp_mac_sys_reset () for HIF_MT yet!
MT7628-->mt_mac_init()-->
MT7628-->MtAsicInitMac()-->
MT7628-->mt7628_init_mac_cr()-->
MT7628-->MtAsicSetMacMaxLen(1277): Set the Max RxPktLen=450!
MT7628--><--mt_mac_init()
MT7628-->       WTBL Segment 1 info:
MT7628-->               MemBaseAddr/FID:0x28000/0
MT7628-->               EntrySize/Cnt:32/128
MT7628-->       WTBL Segment 2 info:
MT7628-->               MemBaseAddr/FID:0x40000/0
MT7628-->               EntrySize/Cnt:64/128
MT7628-->       WTBL Segment 3 info:
MT7628-->               MemBaseAddr/FID:0x42000/64
MT7628-->               EntrySize/Cnt:64/128
MT7628-->       WTBL Segment 4 info:
MT7628-->               MemBaseAddr/FID:0x44000/128
MT7628-->               EntrySize/Cnt:32/128
MT7628-->AntCfgInit(2952): Not support for HIF_MT yet!
MT7628-->MCS Set = ff ff 00 00 01
MT7628-->MtAsicSetChBusyStat(861): Not support for HIF_MT yet!
RT305x_ESW: Link Status Changed
open DNS error: No such file or directory
[ oal_sys_getOldTZInfo ] 763:  Open TZ file error!
Mon Oct  1 00:00:22 UTC 2018
Mon Oct  1 00:00:22 UTC 2018
1538352022 USER: The service status is limited.
1538352022 USER: Network type is LTE.
[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

[err] syslogd[syslogd_remote_msg_process --719] syslogd : log module is not config

[err] syslogd[syslogd_msg_process --763] syslogd : log module is not config

/bin/sh: can't create /proc/tplink/led_4g+: nonexistent directory
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]
MT7628-->CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!
MT7628-->CmdSlotTimeSet:(ret = 0)
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = ec:17:2f:04:d9:85
<==== rt28xx_init, Status=0
MT7628-->@@@ ed_monitor_init : ===>
MT7628-->@@@ ed_monitor_init : <===
MT7628-->mt7628_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f, EDCCA_Status=1
MT7628-->
====
@@@ ed_status_read: EDCCA TH - H
pAd->ed_trigger_cnt : 0 > 20 ||  pAd->ed_big_rssi_stat : 0 < 50
====
sht:pAd->ApBootFlag = FALSE
MT7628-->WiFi Startup Cost (ra0): 4.140s
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
##### mbss_cr_enable, BssId = 1
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
ERROR!!! RTMPSetTimer failed, Halt in Progress!
ERROR!!! RTMPSetTimer failed, Halt in Progress!
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]
MT7628-->CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = ec:17:2f:04:d9:85
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
##### mbss_cr_enable, BssId = 2
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]
MT7628-->CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 34, Format = 0
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = ec:17:2f:04:d9:85
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->[PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->[PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0
MT7628-->[PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0
mtk_band_steering_netlink_init 245 band steering netlink init ok
MT7628-->MtAsicSetRalinkBurstMode(3143): Not support for HIF_MT yet!
MT7628-->MtAsicSetPiggyBack(796): Not support for HIF_MT yet!
MT7628-->reload DPD from flash , 0x9F = [c000] doReload bit7[0]
MT7628-->CmdLoadDPDDataFromFlash: Channel = 1, DoReload = 0
MT7628-->MtAsicSetTxPreamble(3122): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->MtAsicAddSharedKeyEntry(1344): Not support for HIF_MT yet!
MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 33, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 34, Format = 0
MT7628-->The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
MT7628-->AddTxSType: already registered TxSType (PID = 6, Format = 0
MT7628-->AddTxSType: already registered TxSType (PID = 8, Format = 0
MT7628-->MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0
MT7628-->Main bssid = ec:17:2f:04:d9:85
MT7628-->Set_ed_chk_proc()::ed_chk=0
MT7628-->mt7628_set_ed_cca: TURN OFF EDCCA  mac 0x10618 = 0xd7083f0f, EDCCA_Status=0
MT7628-->Set::OID_AP_VENDOR_IE_SET
MT7628-->Set::OID_AP_VENDOR_IE_SET
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 209MT7628-->AddTxSType: already registered TxSType (PID = 32, Format = 0
0:  Device is MRMT7628-->AddTxSType: already registered TxSType (PID = 34, Format = 0
200v4

[ oal_sMT7628-->ys_product_name The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4
device ra0 entered promiscuous mode

br0: port 5(ra0) entering forwarding state
br0: port 5(ra0) entering forwarding state
device ra2 entered promiscuous mode
br0: port 6(ra2) entering forwarding state
br0: port 6(ra2) entering forwarding state
device ra1 entered promiscuous mode
Checking 2.4G caspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
l data...
/bin/sh: wlNetlinkTool: not found
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

rai0      no privatespiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
 ioctls.

spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

spiflash_ioctl_read, Read from 0x007f0000 length 0x10000, ret 0, retlen 0x10000
read radio success, offset 0x7f8000, size 0x400
eeFlashId = 0x7610!
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
628  id_5g 0x761spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
0   model type 1spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2


[ oal_sys_prspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
oduct_name ] 209spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
0:  Device is MRspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_nFW Version:0.1.00 ame ] 2090:  DevBuild:7640
ice is MR200v4
Build Time:
[ oal_sys_prod2uct_name ] 2020:0  dmcfg id_24g 01x7628  id_5g 0x74610   model type0 1

[ oal_sys_4product_name ] 20090:  Device is 1MR200v4

[ oal1_sys_product_nam0e ] 2020:  dmcfg1 id_24g 0x7628  8id_5g 0x7610   m_odel type 1

[_ oal_sys_product__name ] 2090:  D_evice is MR200v4


[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

load fw spent 48ms
0x1300 = 00064300
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
628  id_5g 0x761spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
0   model type 1spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2


[ oal_sys_prspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
oduct_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfgset 5G WscSetupLock=0
 id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_wlan_ra_setWpsUPnP ] 6813:  rai0: cannot open scpd xml file

Interface doesn't accept privatespiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
 ioctl...
set (spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
8BE2): Invalid aspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
rgument
[ oal_sspiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
ys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7device rai0 entered promiscuous mode
610   model typebr0: port 8(rai0) entering forwarding state
 1

[ oal_sys_br0: port 8(rai0) entering forwarding state
product_name ] 2090:  Device is MR200v4

device rai2 entered promiscuous mode
br0: port 9(rai2) entering forwarding state
br0: port 9(rai2) entering forwarding state
device rai1 entered promiscuous mode
Checking 5G cal spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
data...
/bin/sh: wlNetlinkTool: not found
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 87
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 87
mmmInit():Total mem size=51364, addr=0x0x44cfc0.
*************************************************************
*************************MMM TABLE DUMP**********************
-------------------------------------------------------------
 poolhead(40)  poolnum  dynamictimes  chainhead  poolend
-------------------------------------------------------------
 0x44cfc0        8          0         (nil)     0x459864
-------------------------------------------------------------
 index  poolhead(20)    size    blocks    free     usage
-------------------------------------------------------------
  1     0x44cfe8        32          256       256       0
  2     0x44f400        64          128       128       0
  3     0x451618        128         64        64        0
  4     0x453730        256         32        32        0
  5     0x4557c8        512         8         8         0
  6     0x456800        1024        4         4         0
  7     0x457828        2048        2         2         0
  8     0x458848        4096        1         1         0
-------------------------------------------------------------
 index  chainnode(16)   magic    length    prev    next
-------------------------------------------------------------
(nil)
*************************************************************
**************************************************
********************config dump*******************
--------------------------------------------------
sef domain                      : n-deventry-gw.tplinkcloud.com
sef port                        : 443
cloud svr default port          : 443
default svr                     : n-devs-gw.tplinkcloud.com
default port                    : 443
default valid time              : 172800
heartbeat interval              : 235000
request timeout                 : 5000
reconnect timewait max          : 1024000
reconnect cachedsvr max times   : 5
reconnect defaultsvr max times  : 5
reconnect random time min       : 2000
reconnect random time max       : 256000
short connect interval          : 259200000
max message number              : 1000
max client number               : 20
service file                    : /tmp/cloud_service.cfg
cer file                        : /etc/cloud/2048_newroot.cer
ssl verify CN                   :
ssl verify time                 : 0
**************************************************
sendto /var/tmp/8 msg 2030 error No such file or directory ,pid 87
sendto /var/tmp/9 msg 2004 error No such file or directory ,pid 87
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/tun.ko': No such file or directory
insmod: can't insert '/lib/modules/kmdir/kernel/drivers/net/ppp_mppe.ko': No such file or directory
[rsl_initWanLteIntfCfgObj 3412] init LTE module, set flowstat [enableDataLimit 0, enablePaymentDay 0, paymentDay 1, limitation 0, warningPercent 90]
[initProfileList 431] LTE Module: profile num [1], default profile [1], active profile [0]
[initProfileList 433] DM: profile num [0], default profile [0], active profile [0]
iptables: Bad rule (does a matching rule exist in that chain?).
radvd starting
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/ripd.pid.
Generating key, this may take a while...
Generating key, this may take a while...
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
nf_nat_rtsp v0.6.21 loading
iptables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_producspiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
t_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_product_name ] 2090:  Device is MR200v4

spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
[ oal_sys_product_name ] 2020:  dmcfg id_24g 0x7628  id_5g 0x7610   model type 1

[ oal_sys_prenable switch phyport...
oduct_name ] 2090:  Device is MR200v4

Set: phy[0].reg[0] = 3900
Set: phy[1].reg[RT305x_ESW: Link Status Changed
0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[0] = 3300
resetMiiPortV over.
Set: phy[0].reg[4] = 01e1
Set: phy[0].reg[0] = 3300
Set: phy[1].reg[4] = 01e1
Set: phy[1].reg[0] = 3300
Set: phy[2].reg[4] = 01e1
Set: phy[2].reg[0] = 3300
Set: phy[3].reg[4] = 01e1
Set: phy[3].reg[0] = 3300
Set: phy[4].reg[4] = 01e1
Set: phy[4].reg[0] = 3300
turn off flow control over.
[ cos_init ] 525:  Start ok, enable console input and output!
pidof mobile > /var/tmp/tmppidof
ath_band_steering_netlink_receive 159 pid = 670
ath_band_steering_netlink_receive 159 pid = 670
echo -1000 > /proc/297/oom_score_adj
pidof qmuxd > /var/tmp/tmppidof
ath_band_steering_netlink_receive 159 pid = 670
ath_band_steering_netlink_receive 159 pid = 670
echo -1000 > /proc/286/oom_score_adj
pidof httpd > /var/tmp/tmppidof
RT305x_ESW: Link Status Changed
echo -1000 > /proc/539/oom_score_adj
pidof dhcpd > /var/tmp/tmppidof
echo -1000 > /proc/564/oom_score_adj
Public key portion is:
ssh-dss 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 admin@Archer MR200
Fingerprint: md5 2e:90:13:51:60:c2:ec:2d:66:e1:ea:4e:d3:b8:f1:78
Public key portion is:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC1DEWqlUNIRRozmQ7gLgyX2A8iMuzXmLogkmIK+7leLNAVk+Poe/dA6r3MDmkwF43eLeR0mBA4Iru+6XIojNgROnvzqazWLKRsXaJuQf+h1vh4cAU9VrWtY1dnFT9QvNRqj4NXM0hG6ZHQmLZatVVrG/DcLP6D3aO/B/wETxIY5Q== admin@Archer MR200
Fingerprint: md5 ed:92:63:21:7a:4d:3e:c9:c1:17:74:bf:73:06:52:88
[gdpr_getSystemGDPREntry 344] gdpr_getSystemGDPREntry  Error
gdpr_initial 224 -  bLogin = 0
gdpr_getNewSystemGDPREntry OK
------------[ cut here ]------------
WARNING: at kernel/softirq.c:143 0x8003900c()
Modules linked in: nf_nat_rtsp nf_conntrack_rtsp nf_nat_sip nf_conntrack_sip nf_nat_h323 nf_conntrack_h323 nf_nat_tftp nf_conntrack_tftp nf_nat_pptp nf_nat_proto_gre nf_nat_ftp nf_conntrack_ftp MT7610_ap mt_wifi usbserial qmi_wwan l2tp_ppp l2tp_core tp_domain ipt_STAT usbnet cdc_wdm shortcut_fe_cm shortcut_fe_ipv6 shortcut_fe nf_conntrack_pptp nf_conntrack_proto_gre raeth rt_rdm scsi_wait_scan usb_storage sd_mod scsi_mod
Call Trace:[<80018390>] 0x80018390
[<80018390>] 0x80018390
[<8003900c>] 0x8003900c
[<800324b8>] 0x800324b8
[<8003900c>] 0x8003900c
[<800324fc>] 0x800324fc
[<c0adde14>] 0xc0adde14
[<8003900c>] 0x8003900c
[<c0e72954>] 0xc0e72954
[<800386a8>] 0x800386a8
[<80038dc0>] 0x80038dc0
[<80380000>] 0x80380000
[<80038ec4>] 0x80038ec4
[<8000840c>] 0x8000840c
[<8022254c>] 0x8022254c
[<80380000>] 0x80380000
[<80014710>] 0x80014710
[<80013eb0>] 0x80013eb0
[<803638c0>] 0x803638c0
[<803864b0>] 0x803864b0
[<8036321c>] 0x8036321c
[<803864b0>] 0x803864b0

---[ end trace 7ed715bdca0adeb7 ]---
spiflash_ioctl_read, Read from 0x007f0000 length 0x2, ret 0, retlen 0x2
spiflash_ioctl_read, Read from 0x007f8000 length 0x2, ret 0, retlen 0x2
open DNS error: No such file or directory
Mon Oct  1 00:00:56 UTC 2018
Mon Oct  1 00:00:56 UTC 2018

Hi mrhaav,

Is your mr200 v4 a free version or isp version?
I have an orange spain version, and after instalingl the 210201 stock firm with the tftp method, don't work the wifi or 4G.
Both macs don't match, so I need a full stock v4 dump to try to fix it. Can you make a full dump and share it? Before flashing it, I will change the wifi and 4g macs on the dump, as it is done with the dump file of the v1.

Thanks

Need to wait a developer to fix the qmi modem. I don't have this device so can't help further.

Hi
I use the free version from TP-Link, Archer MR200(EU)_V4_210201.
How do I make a "full dump"?

In my case the lan and wifi2.4 MAC is read from flash(0x7EF100) -> EC:17:2F:04:D9:85
wan MAC = EE:17:2F:04:D9:86
LTE MAC = EC:17:2F:04:D9:86
wifi5 MAC = EC:17:2F:04:D9:84

I found Adding OpenWrt support for TP-Link Archer MR200 V4? - #20 by Mctifa
and @Lochnair Β΄s fork of MR200v4. Now IΒ΄m trying to compile a version from his work.

Thanks for your help so far.

Hey, checking in here regarding this device. Does this image now work? Any reason why the MR200 v4 is still listed as unsupported on the device page?

8 posts were split to a new topic: Uqmi_2022-07-14-0.8 never connects to 4G