Topic: TP-Link TL-WR800N v1.0

The TP-Link TL-WR800N is similar to the TL-WR700N but the WR800N has a MIMO radio.
It is AC powered and has only a single Ethernet port.
With 4MB Flash and 16MB of RAM it should be capable of running OpenWrt.

Factory Boot

                            Software Platform for MIPS
Creation date: Sep  2 2011, 11:40:56 (huangqingjia@tp-link.net)
Copyright(C) 2001-2012 by TP-LINK TECHNOLOGIES CO., LTD.
CPU: AR9341: AP123 Board
CPU freq: 535 MHZ
SDRAM size: 16 MB
ipaddr:192.168.1.1
serverip:192.168.1.100
file:vxWorks.img


Press Ctrl+C to stop auto-boot...
1
0

auto-booting...
Uncompressing...done
Starting at 0x80001000...

Attaching interface lo0... done
Rx clbufs 2048 each of size 1756
eth_rx_netpool_init: allocated, pDmaBuf=0x80b813e0, buffend = 80ef33e4
ATHRS27: resetting s27
ATHRS27: s27 reset done
eth_rx_netpool_init: done already!
Attached IPv4 interface to mirror unit 0
usrAppInitEx: 117: GPIO_OE = 71300

usrAppInitEx: 118: CP0 CONFIG = 80208483

usrAppInitEx: 119: CP0 CONFIG1 = bee3519e



-->starting wireless...
APCFG task id 809afc90
sysWlanInit ...
Create WLAN event task tWLANEventTask
Create mem partion 0x8098e460 for size 86016
AH_CAL_IN_FLASH_AHB
Boostrap clock 25MHz
ar9300RadioAttach: Need analog access recipe!!
Restoring Cal data from Flash
ath_get_caps[4716] rx chainmask mismatch actual 3 sc_chainmak 0
ath_get_caps[4691] tx chainmask mismatch actual 3 sc_chainmak 0
Create OS_MESGQ Successfully at 0x8097ce70
osifp->queue_head = 0x8097d170
ag7240MemInit: allocated, dmabuf=0x80689450, buffend = 8094b654
Entering Task Loop
Entering WLAN event Task Loop
-->wps is shutdown!

ERROR:wireless OR ACL disable

sending message 80659820,24
sending message 80659820,24
TDDP: Now listening client request.

tddp is running.

httpInit: System File Registry successfully initialized.
httpInit: System File Manager successfully initialized.
httpInit: File System RPM successfully initialized.
httpInit: RPM dispatcher successfully initialized.
httpInit: MIME type guessing RPM successfully initialized.
httpInit: http Password Checking successfully initialized.
httpInit: http Access Control successfully initialized.



                            Software Platform for MIPS
  Copyright(C) 2001-2010 by TP-LINK TECHNOLOGIES CO., LTD.
  Creation date: Sep 22 2011, 11:26:20
# Starting WLAN !!!!
AP_STARTMODE=standard
AP_ENABLE=1
ATH_COUNTRYCODE=156
wlan_vap_create : enter. devhandle=0x80440e60, opmode=IEEE80211_M_HOSTAP, flags=0x1
wlan_vap_create : exit. devhandle=0x80440e60, opmode=IEEE80211_M_HOSTAP, flags=0x1.
osif_ioctl_create_vap: vap 0x80ffe970 vap->iv_unit 0
ieee80211_end_load: load done
ath0 end flag = 0x00028802
default
default
default
IEE80211-FREQ IOCTL vap 0x80ffe970 0,0,0
AP_CHMODE=11NGHT40PLUS

WLAN IOCTL AP_CHMODE=11NGHT40PLUS=11NGHT20=11NGHT40PLUS=1003
IEE80211-MODE IOCTL 1,11NGHT40PLUS,13
set mode 11,-2130709132,6
set mode retv 0

WLAN IOCTL AP_PRIMARY_CH=auto=6=auto=1002
IEE80211-FREQ IOCTL vap 0x80ffe970 0,0,11

WLAN IOCTL PUREG=0=0=0=1004
IEEE80211-SETPURGE IOCTL 0

WLAN IOCTL AP_HIDE_SSID=0=0=0=1005
IEEE80211-SETHIDESSIDIOCTL 0

WLAN IOCTL AP_ISOLATION=0=0=0=1034
IEE80211-setparam-nobridge 0

WLAN IOCTL AP_TX11NRATE==0x0=0x0=1041
set auto rate

WLAN IOCTL AP_11G_PROTECTION==0=0=1042

WLAN IOCTL AP_BEACON_INTERVAL=100=100=100=1043

WLAN IOCTL AP_FRAGMENT_THRESHOLD=2346=2346=2346=1044

WLAN IOCTL AP_RTS_THRESHOLD=2346=2347=2346=1046

WLAN IOCTL AP_DTIM_PERIOD=1=1=1=1045

WLAN IOCTL AP_WMM_ENABLE=1=1=1=1051

WLAN IOCTL AP_WMM_NOACK==0=0=1052
IOCTL set wmm noack 0

WLAN IOCTL AP_CYPHER_2==CCMP=CCMP=1000
Get EIOCGADDR

WLAN IOCTL AP_NO_EDGE_CH==0=0=1056

WLAN IOCTL AP_MCASTRATE==0=0=1018

WLAN IOCTL AP_MACFILTER_MODE==0=0=1038

WLAN IOCTL AP_MACFILTER_LIST====1000
Get EIOCGADDR

WLAN IOCTL AP_SHORT_GI=1=1=1=1055

WLAN IOCTL AP_DISABLECOEXT=1=0=1=1075

WLAN IOCTL AP_SSID=TP-LINK_PocketAP_839F2E=Ath_AP123ng=TP-LINK_PocketAP_839F2E=1001
IEE80211-ESSID IOCTL 1,TP-LINK_PocketAP_839F2E,24
AP_CHMODE=11NGHT40PLUS
AP_CWMMODE=1
IEE80211-CWMMODE IOCTL 1
AP_AMPDU=0
AP_PURE_N=0
AP_TX_CHAINMASK=3
AP_RX_CHAINMASK=3
AP_SECMODE=None
WPS_ENABLE=0
Security Mode: None
IEE80211-setparam-authmode 1
AP_MACFILTER_MODE=0
ieee80211_open

WLAN IOCTL AP_BASICRATES====1039

WLAN IOCTL AP_DEBUG=0==0=1062

WLAN IOCTL AP_TX_POWER====1073
Starting Hostapd
AP_SSID=TP-LINK_PocketAP_839F2E
AP_HOSTAPD_DEBUG=
AP_IPADDR=192.168.1.2
AP_SECMODE=None
WPS BSS init
WPS_ENABLE=0
AP_SECMODE=None
WPS OPEN BSS init
Adding ath0 in bridge ...
default
Set EIOCGMIB2
default

# ?
command        description
-------------------------------
help        print all commands
arpShow        arp show
bridgeShow    bridge info show
call        call a function by the function pointer
netPoolShow    netPoolShow [data][sys][eth][wlan]
endPacket    endPacket debug
ifShow        interface show
iosFdShow    display a list of file descriptor names in the system
task        print task information
logo        print Logo
memShow        mem show
mem        print mem information, limited 16KB
inetStatShow    Active Internet connections show
natShow        nat show
routeShow    route show
reboot        Reboot the systerm
netPoolShow    netPoolShow [data][sys][eth][wlan]
stack        print task stack
ethreg        -r reg(0x) value(0x)
        -p phyUnit(0x) reg(0x) value(0x)
        -o regAddr(0x) value(0x)
ping        ping a host
arpAdd        add an ARP
arpDelete    del an ARP
ifconfig    config interface
routec        route cmd
memset        memory set
memtest        memory test
s26_wanstatus    show wan link status
s26_portstatus    show s26's port status
ag7240DbgLevel    set ag7240 debug level
ethrxring    dump rx rings' info on eth
buttontest    test QSS/restoredefault button
wlaninit        apcfg_autostart
wlanup            apcfg_wlanstart
wlandown        apcfg_wlanstop
wlanup_hostapd        start wlan with hostapd
wlanup_supplicant    start wlan with with supplicant
to turn on/off debug statement in wlan driver

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

ldpinney wrote:

With 4MB Flash

Where did you get that from?
It has 2MB flash and runs VXWorks using their proprietary boot loader.

3 (edited by ldpinney 2012-05-22 01:54:59)

Re: TP-Link TL-WR800N v1.0

@ JonnyM
Rather simple....I bought one in Shenzhen China and opened it.
It has a Spansion FL032PIF. The same chip as my 703N_V1.6 and 841N_V8.0
Also it has a Zentel A3S28D40FTP-G5  16MB RAM chip and just like the one from my 841_V8.0 it will soon be in the trash.

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

ldpinney wrote:

@ JonnyM
Rather simple....I bought one in Shenzhen China and opened it.
It has a Spansion FL032PIF. The same chip as my 703N_V1.6 and 841N_V8.0
Also it has a Zentel A3S28D40FTP-G5  16MB RAM chip and just like the one from my 841_V8.0 it will soon be in the trash.

strange..
It has been reported as 2MB flash in the past and the stock firmware is only 1.4MB, VXWorks is also often used in routers with limited flash space.
Anyway, it is not booting with U-Boot, it has VXWorks BSP boot loader so you will have to replace that before being able to run Linux on it.

5 (edited by ldpinney 2012-05-26 02:35:34)

Re: TP-Link TL-WR800N v1.0

JonnyM wrote:
ldpinney wrote:

@ JonnyM
Rather simple....I bought one in Shenzhen China and opened it.
It has a Spansion FL032PIF. The same chip as my 703N_V1.6 and 841N_V8.0
Also it has a Zentel A3S28D40FTP-G5  16MB RAM chip and just like the one from my 841_V8.0 it will soon be in the trash.

strange..
It has been reported as 2MB flash in the past and the stock firmware is only 1.4MB, VXWorks is also often used in routers with limited flash space.
Anyway, it is not booting with U-Boot, it has VXWorks BSP boot loader so you will have to replace that before being able to run Linux on it.

Doesn't seem strange to me...I usually reserve judgment on other "reports" and wait for the "facts"

This is factual report I actually own said device.
I only wish to present these "facts" to the OpenWrt community.

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

Hi ldpinney,

Do you think openwrt could work on TL-WR802N? I checked the product description, the only difference it is from WR800N is it has a USB power port.

Also, how can I flash openwrt on this device? I saw there's a upgrade menu. I guess I can just upload the image file?


Thanks,
D.

Re: TP-Link TL-WR800N v1.0

davidshen84

The factory product description will usually not be helpful to determine if the device can run OpenWrt.

To run OpenWrt boring details of the hardware are required smile

If you have the device ... open it and post the serial output.

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

ldpinney wrote:

...and just like the one from my 841_V8.0 it will soon be in the trash.

What do you have against wr841 v8? Let me know, when you're going out with the garbage, I hope I'll be there sooner than the bums smile

Re: TP-Link TL-WR800N v1.0

i think it was talking about the 16MB ram chip, not the router itself...

Re: TP-Link TL-WR800N v1.0

But 841 V8 has 32MB ram and 4MB flash, which is nothing special, but it does its work fine with bb wink AA worked even on 16MB/4MB flash systems as far as I know, at least what I have tested, but it has been very slow.

11 (edited by nebbia88 2014-01-05 21:20:24)

Re: TP-Link TL-WR800N v1.0

first (chinese) version of 841 v8 has 16 MB, and i tried, AA with luci is unusable!

https://forum.openwrt.org/viewtopic.php?id=37010

anyway.. we are OT wink

Re: TP-Link TL-WR800N v1.0

Hi ldpinney,

My mistake, I actually got a WR800N smile
I want to flash openwrt on it. But I don't know where/which file to down...The download link takes me to a folder, and there are tons of files.

many people says dd-wrt is a better option for newbies, but there's no wr800n image on dd-wrt website. do you think the images for wr7xx could work for wr800n?


Thanks,

Re: TP-Link TL-WR800N v1.0

OK, I just tried, and it does not work sad I checked http://downloads.openwrt.org/snapshots/trunk/ar71xx/, there's no factory bin for wr800n neither.

ldpinney, do you happen to have a factory bin for wr800n? could you share it?

Re: TP-Link TL-WR800N v1.0

This device (TL-WR800Nv1.0) needs at the least a new bootloader.

Refer to the serial output in the first post of THIS THREAD.
https://forum.openwrt.org/viewtopic.php?id=36983

It runs VxWorks and their bootloader.

http://wiki.openwrt.org/toh/tp-link/tl-wr800n

So get out the soldering iron unless you have a newer version...
that has Das-U-Boot for a bootloader.

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

i don't have a soldering iron...nor a serial console...o_O! what am I gonna do sad

Re: TP-Link TL-WR800N v1.0

Hi ldpinney,

I opened up my WR700N. I know openwrt won't work on it. But I think I can use it to learn how to tap it with my computer. But I have no idea where to look at...can you help?

Here's a photo https://plus.google.com/+XiShen/posts/N2bnSFyRPks


Thanks,

Re: TP-Link TL-WR800N v1.0

davidshen84 wrote:

Hi ldpinney,

I opened up my WR700N. I know openwrt won't work on it. But I think I can use it to learn how to tap it with my computer. But I have no idea where to look at...can you help?

Here's a photo https://plus.google.com/+XiShen/posts/N2bnSFyRPks


Thanks,


Have a look at the WR710
http://wiki.openwrt.org/toh/tp-link/tl-wr710n

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221

Re: TP-Link TL-WR800N v1.0

I just opened the cap, I still cannot find a way to pull out the board, unless I break the LED light. Do you happen to know a way to pull out the board without break anything?


Thanks a lot.

Re: TP-Link TL-WR800N v1.0

davidshen84 wrote:

I just opened the cap, I still cannot find a way to pull out the board, unless I break the LED light. Do you happen to know a way to pull out the board without break anything?


Thanks a lot.

David .... reply by using the forum email and I'll send you pictures of my hardware hacked WR700N

DIR-615 E3 : DIR-825 B1 : WNDR3700 V2 : WDR4310 V1.0 : Hardware Hacks  WR703n V1.6 : WR841n V8.0 : WR1041n V2.0 : Latest Toy : Kingston Mobilelite MLW221