OpenWrt Forum Archive

Topic: TP-Link WDR7500 V5.0

The content of this topic has been archived on 19 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi,

I`ve just bought one of those TP-Link routers from China.
On the back of the router, near the serial number it says V 5.0

Is there anyone that has any experience with OpenWRT on this router ?

http://i59.tinypic.com/k16pas.jpg

Thank you,

(Last edited by ovidiuvio on 1 Sep 2015, 18:59)

I've already done that, was just hoping that maybe someone got to play with it.

Anyways, I am planning to open it and have a look at the PCB when I get some time.

Thanks,

I've bought that router on aliexpress and a seller was promising that it's with openwrt firmware. But of course it's with chinese firmware. I opened a dispute at aliexpress and the seller sent me that link http://pan.baidu.com/s/1dm0Ce .
He says that there's no hardware difference between v3, v4 and v5 and difference is only in software.
I have a problem with programming that router, I can't write 'tpl' and get into the console. I did it many times and I'm sure that I do everything right.
Here's full uart output:

U-Boot 1.1.4 (May 18 2015 - 18:23:34)(COMPRESSED)

ap135 - Scorpion 1.0

DRAM: 128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 212k for U-Boot at: 87fc8000
Reserving 132k for malloc() at: 87fa7000
Reserving 44 Bytes for Board Info at: 87fa6fd4
Reserving 36 Bytes for Global Data at: 87fa6fb0
Reserving 128k for boot params() at: 87f86fb0
Stack Pointer at: 87f86f98
Now running in RAM - U-Boot at: 87fc8000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
Flash: 8 MB
Using default environment

Autobooting in 1 seconds
verifying uboot partition...
ok
verifying kernel and romfs partition...
ok

U-Boot 1.1.4 (Jun 24 2015 - 19:03:35)

ap135 - Scorpion 1.0

DRAM: 128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 140k for U-Boot at: 87fdc000
Reserving 132k for malloc() at: 87fbb000
Reserving 44 Bytes for Board Info at: 87fbafd4
Reserving 36 Bytes for Global Data at: 87fbafb0
Reserving 128k for boot params() at: 87f9afb0
Stack Pointer at: 87f9af98
Now running in RAM - U-Boot at: 87fdc000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
Flash: 8 MB
Using default environment


Now booting Linux!

Autobooting in 1 seconds
## Booting image at 9f040000 ...
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 134217728

Starting kernel ...

[ 0.000000] Linux version 3.3.8 (tplink@tplink-0B) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Wed Jun 24 19:12:31 CST 2015
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU revision is: 00019750 (MIPS 74Kc)
[ 0.000000] SoC: Qualcomm Atheros QCA9558 rev 0
[ 0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone PFN ranges:
[ 0.000000] Normal 0x00000000 -> 0x00008000
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] Early memory PFN ranges
[ 0.000000] 0: 0x00000000 -> 0x00008000
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: board=AP135 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 126372k/131072k available (2197k kernel code, 4700k reserved, 565k data, 180k init, 0k highmem)
[ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:83
[ 0.000000] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048)
[ 0.060000] pid_max: default: 32768 minimum: 301
[ 0.060000] Mount-cache hash table entries: 512
[ 0.070000] Initialized recycle list for cpu 0.
[ 0.070000] NET: Registered protocol family 16
[ 0.080000] gpiochip_add: registered GPIOs 0 to 23 on device: ath79
[ 0.080000] MIPS: machine is Atheros AP135 reference board
[ 0.090000] ar724x-pci ar724x-pci.0: PCIe link is down
[ 0.090000] registering PCI controller with io_map_base unset
[ 0.100000] registering PCI controller with io_map_base unset
[ 0.110000] bio: create slab <bio-0> at 0
[ 0.110000] PCI host bridge to bus 0000:00
[ 0.120000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[ 0.120000] pci_bus 0000:00: root bus resource [io 0x0000]
[ 0.130000] PCI host bridge to bus 0000:01
[ 0.130000] pci_bus 0000:01: root bus resource [mem 0x12000000-0x13ffffff]
[ 0.140000] pci_bus 0000:01: root bus resource [io 0x0001]
[ 0.140000] pci 0000:01:00.0: invalid calibration data
[ 0.150000] pci 0000:01:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[ 0.150000] pci 0000:01:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pref]
[ 0.160000] pci 0000:01:00.0: using irq 41 for pin 1
[ 0.160000] Switching to clocksource MIPS
[ 0.170000] NET: Registered protocol family 2
[ 0.170000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.170000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.180000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.180000] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.190000] TCP reno registered
[ 0.190000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.200000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.200000] NET: Registered protocol family 1
[ 0.220000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.220000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.230000] msgmni has been set to 246
[ 0.240000] io scheduler noop registered
[ 0.240000] io scheduler deadline registered (default)
[ 0.250000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[ 0.270000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[ 0.280000] console [ttyS0] enabled, bootconsole disabled
[ 0.280000] console [ttyS0] enabled, bootconsole disabled
[ 0.290000] m25p80 spi0.0: found s25fl064k, expected m25p80
[ 0.300000] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[ 0.300000] Searching for RedBoot partition table
[ 0.310000] 9 RedBoot partitions found on MTD device spi0.0
[ 0.310000] Creating 9 MTD partitions on "spi0.0":
[ 0.320000] 0x000000000000-0x00000001d800 : "factory_boot"
[ 0.320000] mtd: partition "factory_boot" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.340000] 0x00000001d800-0x00000001e000 : "factory_info"
[ 0.340000] 0x00000001e000-0x000000020000 : "art"
[ 0.350000] 0x000000020000-0x000000030000 : "config"
[ 0.360000] 0x000000030000-0x000000040000 : "boot"
[ 0.360000] 0x000000040000-0x00000013dd08 : "kernel"
[ 0.370000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.380000] 0x00000013dd08-0x0000006b0000 : "rootfs"
[ 0.390000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[ 0.400000] mtd: partition "rootfs" set to be root filesystem
[ 0.410000] 0x0000006b0000-0x000000800000 : "rootfs_data"
[ 0.410000] 0x000000040000-0x000000800000 : "firmware"
[ 0.420000] Registered character driver slp_flash_chrdev
[ 0.420000] u32 classifier
[ 0.430000] Performance counters on
[ 0.430000] input device check on
[ 0.430000] Actions configured
[ 0.440000] nf_conntrack version 0.5.0 (1974 buckets, 7896 max)
[ 0.440000] TCP cubic registered
[ 0.450000] NET: Registered protocol family 17
[ 0.450000] 8021q: 802.1Q VLAN Support v1.8
[ 0.460000] ### of_selftest(): No testcase data in device tree; not running tests
[ 0.470000] VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
[ 0.480000] Freeing unused kernel memory: 180k freed
- preinit -
- regular preinit -
[ 2.320000] JFFS2 notice: (344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
switching to jffs2
- init -

Please press Enter to activate this console. Wed Jun 24 11:12:00 UTC 2015
[ 5.410000] athrs17_reg_init: complete
[ 5.420000] GMAC: cfg1 0x80000000 cfg2 0x7235
[ 5.530000] athrs17_reg_init_wan done
[ 5.530000] GMAC: cfg1 0x800c0000 cfg2 0x7000
[ 6.050000] ag71xx_mdio: probed
[ 6.200000] eth0: Atheros AG71xx at 0xb9000000, irq 4
[ 6.780000] eth0: Atheros AR8327 switch driver attached.
[ 7.960000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0:00 [uid=004dd034, driver=Atheros AR8216/AR8236/AR8316]
[ 7.970000] eth1: Atheros AG71xx at 0xba000000, irq 5
[ 8.830000] SCSI subsystem initialized
[ 8.960000] usbcore: registered new interface driver usbfs
[ 8.970000] usbcore: registered new interface driver hub
[ 8.970000] usbcore: registered new device driver usb
[ 9.030000] NTFS driver 2.1.30 [Flags: R/O MODULE].
[ 9.240000] PPP generic driver version 2.4.2
[ 9.390000] asf: module license 'Proprietary' taints kernel.
[ 9.390000] Disabling lock debugging due to kernel taint
[ 9.410000] ****Address of trace_timer :870165b0
[ 9.650000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
[ 9.670000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
[ 9.780000] ath_tx99: Version 2.0
[ 9.780000] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
[ 9.930000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
[ 11.350000] __ath_attach: Set global_scn[0]
[ 11.360000] *** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead ***
[ 11.370000] ACBKMinfree = 48
[ 11.370000] ACBEMinfree = 32
[ 11.370000] ACVIMinfree = 16
[ 11.380000] ACVOMinfree = 0
[ 11.380000] CABMinfree = 48
[ 11.380000] UAPSDMinfree = 0
[ 11.380000] ATH_TXBUF=512
[ 11.400000] Enterprise mode: 0x33fc0000
[ 11.400000] Restoring Cal data from DRAM
[ 11.400000]
[ 11.400000] -----------------2G Caldata--------------------
[ 11.410000] 02 02 00 02 03 04 05 06 00 00 00 00 00 00 00 00
[ 11.420000] -----------------------------------------------
[ 11.420000]
[ 11.430000] ath_get_caps[6148] rx chainmask mismatch actual 7 sc_chainmak 0
[ 11.440000] ath_get_caps[6123] tx chainmask mismatch actual 7 sc_chainmak 0
[ 11.450000] ath_tx_paprd_init sc 871d8000 PAPRD disabled in HAL
[ 11.460000] wifi0: Atheros ???: mem=0xb8100000, irq=47
[ 11.470000] ath_pci: 10.2.3.31 (Atheros/multi-bss)
[ 11.470000] ath_pci_probe
[ 11.470000] PCI device id is 003c :003c
[ 11.480000] ath_pci 0000:01:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[ 11.490000] PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
[ 11.490000] ath_pci 0000:01:00.0: ath DEBUG: sc=0x8794fa00
[ 11.500000]
[ 11.500000] ol_ath_pci_configure : num_desired MSI set to 0
[ 11.500000]
[ 11.500000] Using PCI Legacy Interrupt
[ 12.510000] CE_per_engine_handler_adjust, base=8794fa00 offset=57400
[ 12.510000] CE_per_engine_handler_adjust, base=8794fa00 offset=57800
[ 12.530000] __ol_ath_attach: ath_attach TODO
[ 12.530000] __ol_ath_attach: dev name wifi1
[ 12.540000] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
[ 12.550000] OL_ACBKMinfree : 0
[ 12.550000] OL_ACBEMinfree : 0
[ 12.550000] OL_ACVIMinfree : 0
[ 12.560000] OL_ACVOMinfree : 0
[ 12.560000] ol_ath_attach() BMI inited.
[ 12.570000] ol_ath_attach() BMI Get Target Info.
[ 12.570000] ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
[ 12.580000] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[ 12.580000] ol_ath_attach() configure Target .
[ 12.590000]
[ 12.590000] -----------------5G Caldata--------------------
[ 12.590000] 44 08 93 AB 04 01 00 03 7F 12 34 56 00 00 1F 00
[ 12.600000] -----------------------------------------------
[ 12.600000]
[ 12.610000] qc98xx_verify_checksum: flash checksum passed: 0xab93
[ 12.610000] ol_transfer_bin_file 2153: Download Flash data len 2116
[ 12.620000] ol_transfer_bin_file 2070: Download Firmware data len 230100
[ 13.610000] ol_ath_attach() Download FW.
[ 13.610000] ol_ath_attach() HT Create .
[ 13.610000] ol_ath_attach() HIF Claim.
[ 13.620000] ol_ath_attach() BMI Done.
[ 13.620000] ol_ath_attach() WMI attached. wmi_handle 86740000
[ 13.630000] +HWT
[ 13.630000] SOC_RESET_CONTROL_ADDRESS : 800
[ 13.630000] CPU_INTR_ADDRESS = [0]
[ 13.640000] SOC_GLOBAL_RESET_ADDRESS = [0]
[ 13.640000] Rx_Filter : [0]
[ 13.650000] CE_per_engine_handler_adjust, base=8794fa00 offset=57400
[ 13.650000] CE_per_engine_handler_adjust, base=8794fa00 offset=57800
[ 13.660000] CE_per_engine_handler_adjust, base=8794fa00 offset=57c00
[ 13.660000] CE_per_engine_handler_adjust, base=8794fa00 offset=58000
[ 13.670000] CE_per_engine_handler_adjust, base=8794fa00 offset=58400
[ 13.680000] CE_per_engine_handler_adjust, base=8794fa00 offset=58800
[ 13.690000] CE_recv_buf_enqueue 653 Populate last entry 512 for CE 5
[ 13.690000] CE_recv_buf_enqueue 662 CE 5 wi 511 dest_ptr 0x620f820 nbytes 0 recv_ctxt 0x86666a80
[ 13.700000] -HWT
[ 13.710000] HTC Service:0x0300 ep:1 TX flow control disabled
[ 13.710000] CE_pkt_dl_len_set CE 4 Pkt download length 64
[ 13.720000] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from 85e40000
[ 13.730000] HTC Service:0x0100 ep:2 TX flow control disabled
[ 13.730000] wmi_service_ready_event_rx: WMI UNIFIED SERVICE READY event
[ 13.740000] num_rf_chain : 00000003
[ 13.740000] ht_cap_info: : 0000085b
[ 13.750000] vht_cap_info : 338001b2
[ 13.750000] vht_supp_mcs : 0000ffea
[ 13.760000] LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256
[ 13.760000] idx 0 req 1 num_units 0 num_unit_info 2 unit size 444 actual units 145
[ 13.770000] chunk 0 len 64380 requested ,ptr 0x5e60000
[ 13.780000] FIRMWARE tongue.gif 145 V 16 T 443
[ 13.780000]
[ 13.790000] FIRMWARE:_wlan_rtt_enable
[ 13.790000] wmi_ready_event_rx: WMI UNIFIED READY event
[ 13.800000] ol_ath_connect_htc() WMI is ready
[ 13.800000] ol_ath_set_host_app_area TODO
[ 13.810000] target uses HTT version 2.1; host uses 2.1
[ 13.820000] ol_ath_attach() connect HTC.
[ 13.820000] bypasswmi : 0
[ 13.830000] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
[ 13.840000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
[ 13.840000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
[ 13.850000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
[ 13.860000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
[ 13.870000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
[ 13.870000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
[ 13.880000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
[ 13.890000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
[ 13.900000] Add VHT80 channel: 5210
[ 13.900000] Add VHT80 channel: 5290
[ 13.900000] Add VHT80 channel: 5530
[ 13.910000] Add VHT80 channel: 5610
[ 13.910000] Add VHT80 channel: 5690
[ 13.910000] Add VHT80 channel: 5775
[ 13.920000] Skipping VHT80 channel 5825
[ 13.920000] ol_ath_phyerr_attach: called
[ 13.930000] OL Resmgr Init-ed
[ 13.930000] ol_ath_rtt_meas_report_attach: called
[ 13.930000] ol_ath_attach() UMAC attach .
[ 13.940000] __ol_ath_attach: init tx/rx TODO
[ 13.940000] __ol_ath_attach: hard_header_len reservation 58
[ 13.980000] GRE over IPv4 demultiplexor driver
[ 13.990000] GRE over IPv4 tunneling driver
[ 14.020000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 14.180000] xt_time: kernel timezone is -0000
[ 14.270000] NET: Registered protocol family 24
[ 14.370000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 14.370000] ehci-platform ehci-platform.0: Generic Platform EHCI Controller
[ 14.380000] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1
[ 14.420000] ehci-platform ehci-platform.0: irq 48, io mem 0x1b000000
[ 14.440000] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00
[ 14.440000] hub 1-0:1.0: USB hub found
[ 14.450000] hub 1-0:1.0: 1 port detected
[ 14.450000] ehci-platform ehci-platform.1: Generic Platform EHCI Controller
[ 14.460000] ehci-platform ehci-platform.1: new USB bus registered, assigned bus number 2
[ 14.500000] ehci-platform ehci-platform.1: irq 49, io mem 0x1b400000
[ 14.520000] ehci-platform ehci-platform.1: USB 2.0 started, EHCI 1.00
[ 14.530000] hub 2-0:1.0: USB hub found
[ 14.530000] hub 2-0:1.0: 1 port detected
[ 14.620000] [wifi1] FWLOG: [16526] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x460, 0x460, 0x0 )
[ 14.630000] [wifi1] FWLOG: [16526] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x460, 0x460, 0x0 )
[ 14.640000] [wifi1] FWLOG: [16526] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x460, 0x460, 0x0 )
[ 14.650000] [wifi1] FWLOG: [16526] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x460, 0x460, 0x0 )
[ 14.660000] [wifi1] FWLOG: [16531] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 )
[ 14.670000] [wifi1] FWLOG: [16531] WHAL_ERROR_RESET_PM ( )
[ 14.670000] [wifi1] FWLOG: [16685] ANI Enable: 1
[ 14.830000] PPTP driver version 0.8.5
[ 15.380000] nf_conntrack_rtsp v0.6.21 loading
[ 15.400000] nf_nat_rtsp v0.6.21 loading
[ 15.490000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 15.540000] uhci_hcd: USB Universal Host Controller Interface driver
[ 15.580000] Initializing USB Mass Storage driver...
[ 15.590000] usbcore: registered new interface driver usb-storage
[ 15.590000] USB Mass Storage support registered.
[ 15.610000] Registered character driver slp_gpio_chrdev
[ 15.820000] fuse init (API version 7.18)
[flashverify] flash UID signiture check OK!
Command failed: Not found
uci: Entry not found (protocol.wan.macaddr)
[CFG_MAC]user did not configured wan mac, use default.
USB port event happened -- port=1
USB port event happened -- port=2
[ 20.070000] ar8327: Disable igmp snooping function.
[ 20.640000] eth1: link up (1000Mbps/Full duplex)
[ 20.640000] device eth1 entered promiscuous mode
[ 20.650000] br-lan: port 1(eth1) entered listening state
[ 20.650000] br-lan: port 1(eth1) entered listening state
[ 22.650000] br-lan: port 1(eth1) entered learning state
[ 24.650000] br-lan: topology change detected, propagating
[ 24.650000] br-lan: port 1(eth1) entered forwarding state
[ 26.830000] set maxsta of phy: 32
[ 26.950000] isCountryCodeValid: EEPROM regdomain 0x0
[ 26.960000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
[ 26.970000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
[ 26.970000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
[ 26.980000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
[ 26.990000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
[ 26.990000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
[ 27.000000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
[ 27.010000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
[ 27.020000] Add VHT80 channel: 5210
[ 27.020000] Add VHT80 channel: 5775
[ 27.020000] Skipping VHT80 channel 5825
[ 27.060000] set maxsta of phy: 32
[ 27.110000] ath_ioctl: SIOC80211IFCREATE CALLED
[ 27.120000] wmi_unified_vdev_create_send: ID = 0 VAP Addr = fc biggrin.gif7:33:10:14:98:
[ 27.130000] Setting dscp for vap id: 0
[ 27.130000] VAP device ath1 created osifp: (85907b80) os_if: (85948000)
[ 27.150000] ol_ath_vap_set_param: VAP param unsupported param:38 value:0
[ 27.170000] ol_ath_vap_set_param: VAP param unsupported param:43 value:0
[ 27.180000] Set freq vap stop send + 85948000
[ 27.190000] OL vap_stop +
[ 27.190000] wmi_unified_vdev_stop_send for vap 0 (86740000)
[ 27.190000] OL vap_stop -
[ 27.200000] STOPPED EVENT for vap 0 (86740000)
[ 27.200000] Set freq vap stop send -85948000
[ 27.340000] Set wait done --85948000
[ 27.360000] Setting Max Stations:32
set encryption with driver
[ 27.390000] set IEEE80211_IOC_WPA to WPA and RSN
[ 27.400000] set Key Mgmt Algs to PSK!
[ 27.400000] set cipher as AES
[ 27.410000] set psksecret i78on3rl1, length = 9
[ 27.420000] set rekey period 86400
[ 27.430000] wlan_set_param> mc_mcast_enable set to 2
[ 27.430000] ol_ath_desc_alloc_and_mark_for_mcast_clone: VAP Mcast to Unicast buffer allocated: 400
[ 27.440000] ol_ath_vap_set_param: VAP param is now supported param:66 value:2
[ 27.450000] ol_ath_vap_set_param: VAP param unsupported param:49 value:1
[ 27.480000]
[ 27.480000] DES SSID SET=
[ 27.490000]
[ 27.490000] DES SSID SET=TP-LINK_5G_1496
[ 27.540000] ol_ath_vap_set_param: VAP param unsupported param:84 value:1
[ 28.330000] OL vap_stop +
[ 28.330000] wmi_unified_vdev_stop_send for vap 0 (86740000)
[ 28.330000] OL vap_stop -
[ 28.340000] STOPPED EVENT for vap 0 (86740000)
[ 28.470000] wmi_unified_scan_start_send for vap 0 (86740000)
[ 28.470000] 8021q: adding VLAN 0 to HW filter on device ath1
[ 28.480000] device ath1 entered promiscuous mode
[ 28.480000] br-lan: port 2(ath1) entered listening state
[ 28.490000] br-lan: port 2(ath1) entered listening state
[ 28.530000] Scan in progress.. Cancelling it
[ 28.530000] ol_scan_cancel for (86740000)
[ 28.540000] OL vap_stop +
[ 28.540000] wmi_unified_vdev_stop_send for vap 0 (86740000)
[ 28.540000] OL vap_stop -
[ 28.550000] STOPPED EVENT for vap 0 (86740000)
[ 28.550000] br-lan: port 2(ath1) entered disabled state
[ 28.570000] OL vap_stop +
[ 28.570000] wmi_unified_vdev_stop_send for vap 0 (86740000)
[ 28.580000] OL vap_stop -
[ 28.580000] STOPPED EVENT for vap 0 (86740000)
[ 28.710000] wmi_unified_scan_start_send for vap 0 (86740000)
[ 28.710000] br-lan: port 2(ath1) entered listening state
[ 28.720000] br-lan: port 2(ath1) entered listening state
[ 28.720000] 8021q: adding VLAN 0 to HW filter on device ath1
[ 28.990000] [stat]Lan ip: C0A80101, Lan mask: FFFFFF00
[ 28.990000] [stat]wan dev name: eth0
[ 29.180000] ----IGMP init begin------
[ 29.180000] wan_dev_index = 255 lan_dev_name=br-lan wan_dev_name=eth0
[ 29.190000] ----IGMP has been loaded------
[ 29.630000] [wifi1] FWLOG: [31945] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x7cc9, 0x200008a, 0x0, 0x68 )
wlan has already started in etc/init.d/network script.
[ 30.720000] br-lan: port 2(ath1) entered learning state
[ 31.410000] OL vap_start +
[ 31.420000] wmi_unified_vdev_start_send for vap 0 (86740000)
[ 31.420000] OL vap_start -
[ 31.430000] ol_vdev_start_resp_ev for vap 0 (86740000)
[ 31.430000] ol_ath_vap_join: join operation is only for STA/IBSS mode
[ 31.440000] ol_ath_wmm_update:
[ 31.670000] wmi_unified_vdev_up_send for vap 0 (86740000)
[ 31.670000] Notification to UMAC VAP layer
[ 31.680000] [wifi1] FWLOG: [34609] WAL_DBGID_SECURITY_ENCR_EN ( )
[ 31.680000] [wifi1] FWLOG: [34609] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 )
[ 32.720000] br-lan: topology change detected, propagating
[ 32.720000] br-lan: port 2(ath1) entered forwarding state
Loading redirects
Loading dmz
Loading forbidhost
Loading localmanage
Loading hostctrl
Loading includes
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
uci: Entry not found (guest_network.@guest_rule_2g[0])
uci: Entry not found (guest_network.@guest_rule_5g[0])
not ap mode, ignored.
not ap mode, ignored.
uci: Entry not found (guest_network.@guest_rule_2g[0])
uci: Entry not found (guest_network.@guest_rule_5g[0])
[ 38.810000] kcg 333 :GPL NetUSB up!
[ 38.920000] kc 90 : run_telnetDBGDServer start
[ 38.920000] kc 227 : init_DebugD end
[ 38.920000] INFO186B: NetUSB 1.02.62, 00030308 : Jan 15 2015 14:28:35
[ 38.930000] INFO186D: 7437: TL-WDR7500 :TL-WDR7500
[ 38.940000] INFO186E: AUTH ISOC
[ 38.940000] INFO186F: MOVE_HEAD filterAudio
[ 38.940000] usbcore: registered new interface driver KC NetUSB General Driver
[ 38.950000] INFO18C7: Reset device when disconnect
[ 38.960000] INFO0145: init proc : PAGE_SIZE 4096
[ 38.960000] INFO1740: infomap 85a86d1c
[ 38.970000] INFO1743: sleep to wait br-lan to wake up
[ 38.970000] INFO02CE: use dev Name br-lan
[ 38.980000] INFO174C: sleep to wait br-lan end.
[ 38.980000] INFO1765: UDP_BROAD 7437 tcpPort:625868800
[ 38.990000] INFO02CE: use dev Name br-lan
[ 39.010000] INFO161F: tcpConnector() started...
[ 42.070000] INFO14F8: Bind to br-lan

The strange thing is that it prints 'Autobooting in 1 seconds' twice. Also some logs that usually appears are missing now:

In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
athrs_sgmii_res_cal: cal value = 0xe
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Scorpion ----> S17 PHY *
Vlan config...
TEST: FINAL REG VAL after TX Calibration - 0x46000000
TEST: FINAL XMII VAL after RX Calibration - 0x56000000
TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00028001
athrs17_reg_init: complete
: cfg1 0x80000000 cfg2 0x7335
eth0: ba:be:fa:ce:08:41
eth0 up
athrs17_reg_init_wan done
SGMII in forced mode
athr_gmac_sgmii_setup SGMII done
: cfg1 0x800c0000 cfg2 0x7214
eth1: ba:be:fa:ce:08:41
eth1 up
eth0, eth1
Setting 0x18116290 to 0x54a9214f

(Last edited by angelovAlex on 2 Sep 2015, 07:35)

Some pictures with the PCB:

http://i60.tinypic.com/1q4yzb.jpg
http://i58.tinypic.com/2z3uij4.jpg
http://i62.tinypic.com/vxzxpu.jpg
http://i60.tinypic.com/2ptujpe.jpg
http://i59.tinypic.com/2hozs60.jpg

Ok ...
So it seems i am unable to access u-boot console ...

The serial connection is ok, as i get to the following login prompt where I am able to type:

[   43.770000] INFO14F8: Bind to br-lan

starting pid 441, tty '/dev/ttyS0': '/bin/login'

SLP login: 

Any ideas ?

ovidiuvio wrote:

Ok ...
So it seems i am unable to access u-boot console ...

The serial connection is ok, as i get to the following login prompt where I am able to type:

[   43.770000] INFO14F8: Bind to br-lan

starting pid 441, tty '/dev/ttyS0': '/bin/login'

SLP login: 

Any ideas ?

The same for me. I'm going to program flash chip on board directy when will receive needed tools

If you are successfull in doing it, please write a post detailing exactly what you did to get it right.

Thanks,

ovidiuvio wrote:

If you are successfull in doing it, please write a post detailing exactly what you did to get it right.

Thanks,

Ok, but at first we need to wait a few weeks until everything will be delivered from China

(Last edited by angelovAlex on 6 Sep 2015, 08:43)

Hello,
I also bought mine at Aliexpress, it is WDR7500 V3, but you wrote that hardware is the same as V5.
It came with English openWRT, but it is one of the first releases of  Barrier Breaker and repositories do not work anymore, so I am trying to flash a new Chaos Calmer firmware with serial connection.

If I digit "tpl" a couple of times during booting I get:

U-Boot 1.1.4 (Feb 10 2014 - 10:39:47)

ap135 - Scorpio
n 1.0DRAM:  
sri
Scorpion 1.0
ath_ddr_initial_config(178): (32bit) ddr2 init

tap = 0x00000003
Tap (low, high) = (0x3, 0x1c)
Tap values = (0xf, 0xf, 0xf, 0xf)

128 MB
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment


*** Warning *** : PCIe WLAN Module not found !!!

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_
initialize...
athrs_sgmii_res_cal: cal value = 0xe
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address

ath_gmac_enet_initialize: reset mask:c02200 

Scorpion  ----> S17 PHY *
athrs17_reg_init: complete
: cfg1 
0x80000000 cfg2 0x7114
eth0: ba:be:fa:ce:08:41

eth0 up
athrs17_reg_init_wan done
SGMII in forced mode
ath
r_gmac_sgmii_setup SGMII done
: cfg1 0x800c0000 cfg2 0x7214

eth1: ba:be:fa:ce:08:41

eth1 up
eth0, eth1
Setting 0x18116290 to 0x58b1214f
Autoboo
ting in 1 seconds

ap135> 

ap135> 
tpl

Unknown command 'tpl' - try 'help'
ap135> 

It seems this is the u-boot console. Isn't it?

Do you know which values to use now for RAM memory, bytes to erase, value to start etc?
Best
Fran

angelovAlex wrote:
ovidiuvio wrote:

If you are successfull in doing it, please write a post detailing exactly what you did to get it right.

Thanks,

Ok, but at first we need to wait a few weeks until everything will be delivered from China

Hi!

any success with flashing rom?
I have same router V5. I have no serial adapter.
How can i upgrade firmware to openwrt?

angelovAlex wrote:

I've bought that router on aliexpress and a seller was promising that it's with openwrt firmware. But of course it's with chinese firmware. I opened a dispute at aliexpress and the seller sent me that link http://pan.baidu.com/s/1dm0Ce .
He says that there's no hardware difference between v3, v4 and v5 and difference is only in software.
I have a problem with programming that router, I can't write 'tpl' and get into the console. I did it many times and I'm sure that I do everything right.

U-boot password for v5 is 'slp'. Type it instead of 'tpl'. However I could not get any further in updating the firmware. If anyone has any success with v5 please share.

It is identical with archer c7 v2.0

Hi,
any update about V5.0 ?
Thank You in advance !
Piotr

I have TP-LINK TL-WDR6500 V5 and also stuck in SLP Login

Any one know how to login to SLP please tell me

Please press Enter to activate this console.
starting pid 3014, tty '/dev/ttyS0': '/bin/login'
SLP login:
SLP login:
SLP login:
SLP login:
SLP login:

The discussion might have continued from here.