Unconfirmed (No-Name/No-Brand) Router Model - Correct Firmware?

PaddyLad · August 25, 2018, 3:36pm

Hi, I have acquired a MiFi Router name: 4G LTE CPE CPF901 from a Chinaman via Amazon. Seems he's just a salesman and not very technical. So the device has little to no support. When I first got it. The Web interface for the device appeared to be all in Chinese and was not OpenWRT as had originally been claimed, but a rather simple and unique proprietary Web interface. The was no LUCI. I managed to log into the device via SSH terminal (Putty) and found that the router was running 'LEDE Reboot 17.01.4'.
I popped into the device my UK (3 Carrier) SIM card and it was instantly recognized and just worked.
However, I complained to the seller that the devices Web interface was all in Chinese and the was no LUCI web interface, so the features I was hoping for were not available. I asked were the any other firmware packages I might install for an English interface. The seller sent me via email an attachment a new firmware .bin. I installed it via the Chinese web interface. Not the easiest of things to do.

It now appears that the new firmware I was supplied with and installed, called (U9531_01-EC20_Nepal_20180428.bin) is a Nepalese version of OpenWRT's 15.05.1 Chaos Calmer.
And my UK (3 Carrier) SIM card is no longer recognized. However, I do now have an English language
LUCI Interface. And the Chinese supplier has seemingly now buried his head in the sand.

DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='Chaos Calmer'
DISTRIB_REVISION='r21'
DISTRIB_CODENAME='chaos_calmer'
DISTRIB_TARGET='ar71xx/generic'
DISTRIB_DESCRIPTION='OpenWrt Chaos Calmer 15.05.1'
DISTRIB_TAINTS='no-all no-ipv6 busybox

I have discovered that the router has a: Qualcomm Atheros QCA9533 ver2 rev 0 (The Chipset is a QCA9533 Ver2)
The Motherboard board is a: u9531-01

root@LEDE:/etc# free
total used free shared buffers
Mem: 126116 23636 102480 64 2436
-/+ buffers: 21200 104916
Swap: 0 0 0

My question is. Does anyone know what up to date OpenWRT firmware I might install on this device? As it has no brand name. So I'm not sure where to start? Thank you for reading my dilema

juppin · August 25, 2018, 4:03pm

Hello,

please collect some other usefull data from your device... Please use the unfomated text option (</>) for all you collected data or something like pastebin.
Probably it is a clone of another device and it is already supported.

https://openwrt.org/docs/guide-developer/adding_new_device#collecting_relevant_data

PaddyLad · August 25, 2018, 10:38pm

Here's what I've come up with in respects to possible USEFUL INFORMATION, using the instructions from the above link. In order to try and figure out what the correct OpenWRT firmware might be for my No-Brand-Name
MiFi router device. Which is presently running 'OpenWrt Chaos Calmer 15.05.1' and was running 'LEDE Reboot 17.01.4', until I followed a China salesman's instructions and installed the sadly backdated firmware. Now my system thinks my UK (Three 3 Carrier) SIM, is distributed by a Nepalese carrier, and my China man's support has all but disappeared into the hidden city   :-) 


root@Wagon:~# dmesg
[    0.000000] Linux version 3.18.45 (sroot@ubuntu-server-14045-amd64) (gcc vers                                                                                                             ion 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r19) ) #49 Sat Apr 28 20:25:31 CST 201                                                                                                             8
[    0.000000] MyLoader: sysp=eb8b3778, boardp=dc94f7a5, parts=e7b646ff
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Qualcomm Atheros QCA9533 ver 2 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x07ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x07ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x07ffffff]
[    0.000000] On node 0 totalpages: 32768
[    0.000000] free_area_init_node: node 0, pgdat 80361cf0, node_mem_map 8100000                                                                                                             0
[    0.000000]   Normal zone: 256 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32768 pages, LIFO batch:7
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32                                                                                                              bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pag                                                                                                             es: 32512
[    0.000000] Kernel command line:  board=U9531-01 console=ttyS0,115200 mtdpart                                                                                                             s=spi0.0:256k(u-boot)ro,64k(u-boot-env)ro,14528k(rootfs),1472k(kernel),64k(art),                                                                                                             16000k@0x50000(firmware) rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 125856K/131072K available (2512K kernel code, 139K rwdata                                                                                                             , 536K rodata, 260K init, 188K bss, 5216K reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:650.000MHz, DDR:597.021MHz, AHB:216.666MHz, Ref:25.00                                                                                                             0MHz
[    0.000000] Calibrating delay loop... 432.53 BogoMIPS (lpj=2162688)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is U9531-01
[    0.530000] Switched to clocksource MIPS
[    0.540000] NET: Registered protocol family 2
[    0.540000] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.540000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.550000] TCP: Hash tables configured (established 1024 bind 1024)
[    0.560000] TCP: reno registered
[    0.560000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.570000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.570000] NET: Registered protocol family 1
[    0.580000] PCI: CLS 0 bytes, default 32
[    0.580000] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.590000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.600000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORIT                                                                                                             Y) (c) 2001-2006 Red Hat, Inc.
[    0.610000] msgmni has been set to 245
[    0.610000] io scheduler noop registered
[    0.620000] io scheduler deadline registered (default)
[    0.620000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.630000] console [ttyS0] disabled
[    0.650000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 156                                                                                                             2500) is a 16550A
[    0.660000] console [ttyS0] enabled
[    0.670000] bootconsole [early0] disabled
[    0.680000] m25p80 spi0.0: found mx25l12805d, expected m25p80
[    0.690000] m25p80 spi0.0: mx25l12805d (16384 Kbytes)
[    0.690000] 6 cmdlinepart partitions found on MTD device spi0.0
[    0.700000] Creating 6 MTD partitions on "spi0.0":
[    0.700000] 0x000000000000-0x000000040000 : "u-boot"
[    0.710000] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.720000] 0x000000050000-0x000000e80000 : "rootfs"
[    0.720000] mtd: device 2 (rootfs) set to be root filesystem
[    0.730000] 1 squashfs-split partitions found on MTD device rootfs
[    0.730000] 0x000000820000-0x000000e80000 : "rootfs_data"
[    0.740000] 0x000000e80000-0x000000ff0000 : "kernel"
[    0.750000] 0x000000ff0000-0x000001000000 : "art"
[    0.750000] 0x000000050000-0x000000ff0000 : "firmware"
[    0.790000] libphy: ag71xx_mdio: probed
[    1.380000] ag71xx-mdio.1: Found an AR934X built-in switch
[    1.420000] eth0: Atheros AG71xx at 0xba000000, irq 5, mode:GMII
[    2.020000] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.1:04 [uid=004dd0                                                                                                             42, driver=Generic PHY]
[    2.030000] eth1: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    2.040000] TCP: cubic registered
[    2.040000] NET: Registered protocol family 17
[    2.040000] bridge: automatic filtering via arp/ip/ip6tables has been depreca                                                                                                             ted. Update your scripts to load br_netfilter if you need this.
[    2.060000] 8021q: 802.1Q VLAN Support v1.8
[    2.070000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.080000] Freeing unused kernel memory: 260K (8037f000 - 803c0000)
[    3.060000] init: Console is alive
[    3.070000] init: - watchdog -
[    4.380000] usbcore: registered new interface driver usbfs
[    4.390000] usbcore: registered new interface driver hub
[    4.390000] usbcore: registered new device driver usb
[    4.410000] SCSI subsystem initialized
[    4.420000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.420000] ehci-platform: EHCI generic platform driver
[    4.430000] ehci-platform ehci-platform: EHCI Host Controller
[    4.440000] ehci-platform ehci-platform: new USB bus registered, assigned bus                                                                                                              number 1
[    4.450000] ehci-platform ehci-platform: irq 3, io mem 0x1b000000
[    4.470000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00
[    4.470000] hub 1-0:1.0: USB hub found
[    4.480000] hub 1-0:1.0: 1 port detected
[    4.480000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.490000] ohci-platform: OHCI generic platform driver
[    4.500000] usbcore: registered new interface driver usb-storage
[    4.800000] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.070000] init: - preinit -
[    5.610000] random: procd urandom read with 9 bits of entropy available
[    7.190000] eth0: link up (1000Mbps/Full duplex)
[    8.870000] jffs2: notice: (347) jffs2_build_xattr_subsystem: complete buildi                                                                                                             ng xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0                                                                                                              orphan) found.
[    8.890000] mount_root: switching to jffs2 overlay
[    8.920000] eth0: link down
[    8.930000] procd: - early -
[    8.930000] procd: - watchdog -
[    9.550000] procd: - ubus -
[   10.560000] procd: - init -
[   12.480000] tun: Universal TUN/TAP device driver, 1.6
[   12.490000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[   12.500000] Loading modules backported from Linux version v4.4-rc5-1913-gc8fd                                                                                                             f68
[   12.510000] Backport generated by backports.git backports-20151218-0-g2f58d9d
[   12.520000] nf_conntrack version 0.5.0 (1970 buckets, 7880 max)
[   12.550000] usbcore: registered new interface driver usbserial
[   12.560000] usbcore: registered new interface driver usbserial_generic
[   12.560000] usbserial: USB Serial support registered for generic
[   12.600000] xt_time: kernel timezone is -0000
[   12.640000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.700000] PPP generic driver version 2.4.2
[   12.710000] NET: Registered protocol family 24
[   12.740000] usbcore: registered new interface driver option
[   12.750000] usbserial: USB Serial support registered for GSM modem (1-port)
[   12.750000] option 1-1:1.0: GSM modem (1-port) converter detected
[   12.760000] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[   12.770000] option 1-1:1.1: GSM modem (1-port) converter detected
[   12.780000] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
[   12.780000] option 1-1:1.2: GSM modem (1-port) converter detected
[   12.790000] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB2
[   12.800000] option 1-1:1.3: GSM modem (1-port) converter detected
[   12.800000] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB3
[   12.840000] ath: EEPROM regdomain: 0x0
[   12.840000] ath: EEPROM indicates default country code should be used
[   12.840000] ath: doing EEPROM country->regdmn map search
[   12.840000] ath: country maps to regdmn code: 0x3a
[   12.840000] ath: Country alpha2 being used: US
[   12.840000] ath: Regpair used: 0x3a
[   12.850000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   12.850000] ieee80211 phy0: Atheros AR9531 Rev:2 mem=0xb8100000, irq=47
[   18.010000] eth0: link up (1000Mbps/Full duplex)
[   20.070000] eth0: link down
[   20.130000] device eth0 entered promiscuous mode
[   22.280000] eth0: link up (1000Mbps/Full duplex)
[   22.280000] br-lan: port 1(eth0) entered forwarding state
[   22.290000] br-lan: port 1(eth0) entered forwarding state
[   22.370000] device wlan0 entered promiscuous mode
[   22.370000] br-lan: port 2(wlan0) entered forwarding state
[   22.380000] br-lan: port 2(wlan0) entered forwarding state
[   24.290000] br-lan: port 1(eth0) entered forwarding state
[   24.380000] br-lan: port 2(wlan0) entered forwarding state
[   42.760000] random: nonblocking pool is initialized
root@Wagon:~#

root@Wagon:~# cat /proc/cmdline
 board=U9531-01 console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env)ro,14528k(rootfs),1472k(kernel),64k(art),16000k@0x50000(firmware) rootfstype=squashfs,jffs2 noinitrd
root@Wagon:~#

root@Wagon:~# cat /proc/cpuinfo
system type             : Qualcomm Atheros QCA9533 ver 2 rev 0
machine                 : U9531-01
processor               : 0
cpu model               : MIPS 24Kc V7.4
BogoMIPS                : 432.53
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa                     : mips1 mips2 mips32r1 mips32r2
ASEs implemented        : mips16
shadow register sets    : 1
kscratch registers      : 0
package                 : 0
core                    : 0
VCED exceptions         : not available
VCEI exceptions         : not available

root@Wagon:~#


root@Wagon:~# cat /proc/meminfo
MemTotal:         126116 kB
MemFree:          103172 kB
MemAvailable:     109620 kB
Buffers:            2736 kB
Cached:             6764 kB
SwapCached:            0 kB
Active:             7596 kB
Inactive:           3656 kB
Active(anon):       1980 kB
Inactive(anon):       80 kB
Active(file):       5616 kB
Inactive(file):     3576 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          1772 kB
Mapped:             1748 kB
Shmem:               308 kB
Slab:               5964 kB
SReclaimable:       1584 kB
SUnreclaim:         4380 kB
KernelStack:         256 kB
PageTables:          224 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:       63056 kB
Committed_AS:       4756 kB
VmallocTotal:    1048372 kB
VmallocUsed:         896 kB
VmallocChunk:    1043272 kB
root@Wagon:~#

root@Wagon:~# cat /proc/devices
Character devices:
  1 mem
  4 ttyS
  5 /dev/tty
  5 /dev/console
  5 /dev/ptmx
 10 misc
 90 mtd
108 ppp
128 ptm
136 pts
180 usb
188 ttyUSB
189 usb_device
254 ttyATH

Block devices:
259 blkext
  8 sd
 31 mtdblock
 65 sd
 66 sd
 67 sd
 68 sd
 69 sd
 70 sd
 71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd
root@Wagon:~#

root@Wagon:~# ls /sys/devices/platform
ag71xx-mdio.1     ag71xx.1          ath79-spi         ehci-platform     leds-gpio         regulatory.0      serial8250.0
ag71xx.0          alarmtimer        ath79-wdt         gpio-keys-polled  qca953x_wmac      serial8250        uevent
root@Wagon:~#

root@Wagon:~# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00040000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00e30000 00010000 "rootfs"
mtd3: 00660000 00010000 "rootfs_data"
mtd4: 00170000 00010000 "kernel"
mtd5: 00010000 00010000 "art"
mtd6: 00fa0000 00010000 "firmware"

root@Wagon:~#

root@Wagon:~# cat /sys/class/mtd/mtd*/offset
cat: can't open '/sys/class/mtd/mtd*/offset': No such file or directory
root@Wagon:~#


root@Wagon:~#root@PaddyWagon:~# ifconfig -a

br-lan    Link encap:Ethernet  HWaddr 38:1C:23:02:92:4C
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2906 errors:0 dropped:18 overruns:0 frame:0
          TX packets:2663 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:296946 (289.9 KiB)  TX bytes:578476 (564.9 KiB)

eth0      Link encap:Ethernet  HWaddr 38:1C:23:02:92:4C
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2943 errors:0 dropped:8 overruns:0 frame:0
          TX packets:2671 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:343322 (335.2 KiB)  TX bytes:578844 (565.2 KiB)
          Interrupt:5

eth1      Link encap:Ethernet  HWaddr 38:1C:23:02:92:4B
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:4

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:1108 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1108 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:75264 (73.5 KiB)  TX bytes:75264 (73.5 KiB)

wlan0     Link encap:Ethernet  HWaddr 38:1C:23:02:92:4D
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:94 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:14240 (13.9 KiB)

root@Wagon:~#

root@Wagon:~# ls /sys/class/net
br-lan  eth0    eth1    lo      wlan0
root@Wagon:~#

root@Wagon:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-lan          7fff.381c2302924c       no              eth0
                                                        wlan0
root@Wagon:~#


END OF SUGGESTED COMMANDS

jeff · August 25, 2018, 10:49pm

Though I'm suspicious of this to some extent, as it's not from the original firmware. Also, the number is pretty generic -- based on the Qualcomm chip number.

http://www.unielecinc.com/q/news/cn/p/product/detail.html?qd_guid=EENzXiDhJT

38:1C:23 HilanTec Hilan Technology CO.,LTD

PaddyLad · August 25, 2018, 11:11pm

Yes, that four antenna MiFi router above is exactly what my MiFi router looks like.
Only when I first got it. It was running 'LEDE Reboot 17.01.4',
I was sent some firmware by email from the Chinese seller
that instead of updating my router, seemingly backdated it to
a Nepalese version of 'OpenWrt Chaos Calmer 15.05.1'
That no longer recognizes my UK carriers SIM card,

I'm really not sure how to find the appropriate version of OpenWRT firmware to install into this router? I'd obviously like the latest OpenWRT version of possible. However as the brand is a no-name brand then it's not listed in the OpenWRT firmware releases. Someone with better knowledge than me, might be able to take an educated guess based on the data I have posted above. If it gets brick'd so be it. The Chinaman has suggested I mail it to Liverpool UK and he'll give me a refund. He believes it's not working anyway.

PaddyLad · August 26, 2018, 5:14pm

So it seems that my Chinese, Qualcomm QCA953, Unielecinc MiFi router has a number of similarities with
the 'TP-Link TL-MR6400 v1.0' router. I tried to install the TP-Link software on the Unielecinc QCA953 and just got...

"The uploaded image file does not contain a supported format. Make sure that you choose the generic image format for your platform"

https://wiki.openwrt.org/inbox/tp-link/tp-link_tl-mr6400_v1.0#lede_trunk_firmware_images

PaddyLad · August 26, 2018, 5:37pm

Not sure if this brings anything of value to the table?

root@Wagon:~# free
             total         used         free       shared      buffers
Mem:        126116        23516       102600          392         2736
-/+ buffers:              20780       105336
Swap:            0            0            0
root@Wagon:~#

ahmar16 · August 27, 2018, 4:17pm

I dont think if you can flash TP-Link firmware on this device because that might not be possible or I could be wrong. But you might want to try and use the MR6400 v1 Openwrt firmware because the devices look alike.
Worst case scenario is the device gets bricked and you will need to open the case and use serial to flash a new firmware but then again you will have to put the firmware you received from the email. But to be able to upgrade to the Openwrt firmware of MR6400 v1 you need to use command-line interface through Putty and use the force option of sysupgrade. I believe the correct command is sysupgrade -F /tmp/firmware.bin.

Someone with better knowledge please advise here. Thanks

danman · January 25, 2020, 6:15pm

I've bought this device recently. In u-boot I found following strings:

bc=AP147-16M
lok=tftp 0x80060000 openwrt-ar71xx-generic-${bc}-kernel.bin && erase 0x9f680000 +${filesize} && cp.b $fileaddr 0x9f680000 0x16000

So I tried flashing this:
https://downloads.openwrt.org/releases/18.06.6/targets/ar71xx/generic/openwrt-18.06.6-ar71xx-generic-ap147-010-squashfs-sysupgrade.bin

And it works

adOne · March 29, 2020, 1:06pm

I've bought this device 4G LTE CPE CPF901 recently and I have china interface.
I would try go to Openwrt .
I try with this command
tftpboot => keep the load address 0x81000000
remane U9531-01_CC15_Standard_EC20_OK_20190426.bin to U9531.bin
tftp 0x81000000 U9531.bin
+f4975f =>Filesize
erase XXXXXXXXX +f4975f && cp.b 0x81000000 XXXXXXXX f4975f
I didn't know where i find XXXXXXXX in the command line
Do you have any solution for me?
Regards

ahmar16 · April 10, 2020, 9:28am

Why don't you try the command from @danman above? Or you can also look under u-boot help menu and identify the correct commands with printenv.