OpenWrt Forum Archive

Topic: TP-Link Archer MR200

The content of this topic has been archived between 11 Apr 2018 and 6 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi all,
has someone installed openwrt on TP-Link Archer MR200?
Thanks for your answwer.
Fabio

No one?

Hi, i need to do the same. Is the image for archer c20i suitable for mr200? In any case i can't flash it from the web gui, probably because the name does not match. I guess i should try tftp, but if you have more info, you're welcome.

can anyone please help us with Archer MR200?

Hello,
I have the same problem... Then, going through the openwrt site I found this:

[http://wiki.openwrt.org/doc/howto/obtai … e.download

Because in the case of Archer MR200 doesn't exist a file named "factory" at the following links:

https://downloads.openwrt.org/chaos_cal … ps/mt7620/

https://downloads.openwrt.org/chaos_cal … ps/mt7620/

and

https://downloads.openwrt.org/barrier_b … s/mt7620a/

according to this router data that are the following:

https://wiki.openwrt.org/toh/hwdata/tp- … hermr200v1

and in particular:

Platform:
    MediaTek MT7620A

Target:
    ramips

that we need of to find the correct version of the firmware; I found that the Archer MR200 is supported from version 14.07 called "Barrier breaker". So I thought to flash on the OEM firmware to free the modem from that this file:

https://downloads.openwrt.org/barrier_b … uImage.bin


Done this, I upgrade the firmware with one of the following sysupgrade files to have the full support:

1) https://downloads.openwrt.org/barrier_b … pgrade.bin

2) https://downloads.openwrt.org/chaos_cal … pgrade.bin

or

3) https://downloads.openwrt.org/chaos_cal … pgrade.bin

In my opinion this should have to be the correct procedure.

Can someone try and comfirm to me if it works or less?

Let me know soon...

I would be very interested in running openwrt on this device and i am willing to help on its development but i don't have much experience (if any) in this matter. all i can see at this point, is that the mtd partitions from original bootlog and openwrt bootlog in the wiki page, don't seem to add up.

Image from Archer c50 runs on this router, without 5GHz.

@obsy
Thanks for your reply. that's great news. what about the LTE? does it work as well?
I am also concern about the seemingly mismatch mtd partitions region from original and c50 luci bootlog:

Original bootlog:

Creating 6 MTD partitions on "raspi":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007d0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007d0000-0x0000007e0000 : "romfile"
0x0000007e0000-0x0000007f0000 : "config"
0x0000007f0000-0x000000800000 : "radio"

C50 luci image bootlog:

[    0.710000] Creating 6 MTD partitions on "spi32766.0":
[    0.720000] 0x000000000000-0x000000020000 : "u-boot"
[    0.730000] 0x000000020000-0x0000007c0000 : "firmware"
[    0.820000] 2 tplink-fw partitions found on MTD device firmware
[    0.830000] 0x000000020000-0x000000160000 : "kernel"
[    0.830000] 0x000000160000-0x0000007c0000 : "rootfs"
[    0.840000] mtd: device 3 (rootfs) set to be root filesystem
[    0.850000] 1 squashfs-split partitions found on MTD device rootfs
[    0.850000] 0x000000690000-0x0000007c0000 : "rootfs_data"
[    0.860000] 0x0000007c0000-0x0000007d0000 : "config"
[    0.860000] 0x0000007d0000-0x0000007e0000 : "rom"
[    0.870000] 0x0000007e0000-0x0000007f0000 : "romfile"
[    0.880000] 0x0000007f0000-0x000000800000 : "radio"

"firmware" (and hence "rootfs" and "rootfs_data") should end at 7d0000
7d0000 to 7e0000 should be "romfile"
7e0000 to 7f0000 should be "config"

am i wrong? maybe that's why 5GHz isnt working...?

5GHz - lack of drivers. I'm not owner of mr200, for details ask @Heinz.

(Last edited by obsy on 14 Sep 2016, 12:34)

@obsy
Thanks. I have contacted Heinz via email (this was the only way i could find). let's hope that he replies. I will also try to ask an admin to move this topic to General Discussion as it does not belong here

(Last edited by Hamy on 15 Sep 2016, 03:02)

Update: Apparently the model that i have, is the EU version. the full model name is "Archer MR200(EU)" and it's Ver:1.0 . has 3 internal wifi antennas and from the stock firmware size, it's flash size must be at least 64MB

(Last edited by Hamy on 15 Sep 2016, 05:23)

I just connected to the device via TTL and confirmed the actual flash size is in fact 8MB.

However, examining the stock firmware, it turns out the rest of the file (after u-boot, kernel and squashfs), is a huge zip file containing all the fancy webpage resources as well as lots of other libraries, executables, modules and stuff.

It appears to me that there is in fact another embedded storage in this device (likely connected via usb in the form of MMC storage). but i'm not sure how to access it.

Edit: these lines in the bootlog seem specially interesting:

scsi0 : usb-storage 1-1:1.6
scsi 0:0:0:0: Direct-Access     TP-LINK  MMC Storage           PQ: 0 ANSI: 2
sd 0:0:0:0: [sda] Attached SCSI removable disk



Any ideas?

(Last edited by Hamy on 15 Sep 2016, 13:52)

Mass Storage device from modem. See:

T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  5 Spd=480  MxCh= 0
D:  Ver= 2.01 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=2357 ProdID=000d Rev= 2.28
S:  Manufacturer=TP-LINK Technologies Co., Ltd.
S:  Product=MR200
S:  SerialNumber=b8135db25416
C:* #Ifs= 7 Cfg#= 1 Atr=a0 MxPwr=500mA
A:  FirstIf#= 0 IfCount= 2 Cls=e0(wlcon) Sub=01 Prot=03
I:* If#= 0 Alt= 0 #EPs= 1 Cls=e0(wlcon) Sub=01 Prot=03 Driver=rndis_host
E:  Ad=82(I) Atr=03(Int.) MxPS=   8 Ivl=32ms
I:* If#= 1 Alt= 0 #EPs= 2 Cls=0a(data ) Sub=00 Prot=00 Driver=rndis_host
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=option
E:  Ad=84(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=86(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 5 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=option
E:  Ad=88(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 6 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage
E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

@obsy

Thanks smile

You are right. The modem seems to be running it's very own operating system (with actually a webinterface it appears, but not sure how to access it). it seems to be running android, has an android bootloader and everything. so the stock firmware, updates the device firmware as well as the LTE modem firmware. if we manage to successfully run the modem in OpenWRT, we could possibly come up with a solution to update the LTE modem firmware from the stock firmware when a new one comes around.

Hi @Hamy
I tried to prepare proper firmware to install from web interface, but mktplinkfw2 not create valid header.
Leds not work correct. I dont know how to change gpio led from switch.
You can use abd command on stock rom to connect to modem.

I install openwrt using bootloader, but I forgot commands.

@Heinz

Thank you for your response. i was able to get to the LTE modem's shell by using 'adb shell' . it has an ARMv7 processor with about 32MB of ram and lots of mtdblocks:

/ # cat /proc/partitions 
major minor  #blocks  name

   7        6       5120 loop6
  31        0       1280 mtdblock0
  31        1       1280 mtdblock1
  31        2      11264 mtdblock2
  31        3       3456 mtdblock3
  31        4       3456 mtdblock4
  31        5        768 mtdblock5
  31        6       3456 mtdblock6
  31        7      51968 mtdblock7
  31        8        256 mtdblock8
  31        9        896 mtdblock9
  31       10      10496 mtdblock10
  31       11        256 mtdblock11
  31       12      66944 mtdblock12
  31       13       4480 mtdblock13
  31       14      10624 mtdblock14
  31       15       1408 mtdblock15
  31       16        256 mtdblock16
  31       17      37504 mtdblock17
  31       18      52096 mtdblock18

But i suppose that's not our concern right now.

I would very much like to take a backup of the current running bootloader (mtd0) before trying to upload openwrt firmware (as i think it's likely that some u-boot parameters are specific to each device. i've seen this before in a tp-link router). but i'm kinda stuck on how to do so. there is a tftp command in the stock firmware but it just doesn't seem to do anything. i suspect that i do not know the exact arguments that it requires. it does not response to -h or --help and the conventional tftp arguments, doesn't seem to not have any effect here. and there is also no xxd or hexdump command as well.

I can not seem to be able to get to the bootloader either. getting to the bootloader, would be enough for me to backup the mtd0 and also do lots of other things. but the bootloader doesnt seem to wait for a key press. do you have any special method into getting into bootloader?

Edit: it was busybox version of tftp. i now have a backup of mtd0. but getting to the bootloader is still an issue

(Last edited by Hamy on 16 Sep 2016, 04:06)

To break bootloader use 2 or 4.
Please make backup partition mtd 3-5 because this is important.
Partition mtd 0 - 2 You can restore by uploading factory firmware from official tplink site. ( cut first 512b, cut all zip file from end of firmware)

luckily, there is no difference between the device bootloader and the supplied one via stock firmware. so tftp flashing should be straight forward: you remove any tp-link header(if any), you add boot partition at the beginning of the firmware and then use builtin TFTP Recovery method to upload the firmware.

reverting back to the stock firmware should be almost the same procedure except that you very likely have to remove all the extra data after the kernel and squashfs in the stock firmware.

Heinz wrote:

I tried to prepare proper firmware to install from web interface, but mktplinkfw2 not create valid header.

I suspect that's because of the very special kind of firmware it's using. after the tp-link header,u-boot, kernel and squashfs, it includes modem's firmware. the resulting firmware is huge (more than 55MB). i doubt that it could all be fit in the 64MB ram that this device has (while running its own kernel and services). so some specialized procedure could be happening. like saving the whole file in modems MMC storage first and then trying to split it and write it to appropriate locations. or maybe some other dark magic is taking place.

Heinz wrote:

To break bootloader use 2 or 4.
Please make backup partition mtd 3-5 because this is important.
Partition mtd 0 - 2 You can restore by uploading factory firmware from official tplink site. ( cut first 512b, cut all zip file from end of firmware)

Oh, thanks for the notes. will do smile
Awesome. pressing '4' , did actually do the trick. thanks

(Last edited by Hamy on 16 Sep 2016, 05:48)

Alright, I've added a new DTS profile for MR200, made entries for it in ramips.sh , platform.sh , mt7620.mk and also added it in mktplinkfw2.c . the DTS is pretty much the same as C20i , only the mtds adjusted and spi model corrected. ive managed to upload the image and boot openwrt. But obviously, a lot needs to be adjusted. specially in DTS . i don't know how or where i should find the correct DTS for this enteries.

@Heinz
looking at your openwrt bootlog, you've obviously gone further than me in adjusting things. i would appritiate if you could tell me what needs to be adjusted

The DTS file:

/dts-v1/;

#include "mt7620a.dtsi"

/ {
    compatible = "ralink,mt7620a-soc";
    model = "TP-Link Archer MR200";

    chosen {
        bootargs = "console=ttyS0,115200";
    };

    gpio-leds {
        compatible = "gpio-leds";

        lan {
            label = "tp-link:blue:lan";
            gpios = <&gpio0 1 1>;
        };

        power {
            label = "tp-link:blue:power";
            gpios = <&gpio0 7 0>;
        };

        usb {
            label = "tp-link:blue:usb";
            gpios = <&gpio0 9 1>;
        };

        wlan5g {
            label = "tp-link:blue:wlan5g";
            gpios = <&gpio0 11 1>;
        };

        wlan2g {
            label = "tp-link:blue:wlan2g";
            gpios = <&gpio3 0 1>;
        };
    };

    gpio-keys-polled {
        compatible = "gpio-keys-polled";
        #address-cells = <1>;
        #size-cells = <0>;
        poll-interval = <20>;

        reset {
            label = "reset";
            gpios = <&gpio0 13 1>;
            linux,code = <0x198>;
        };

        rfkill {
            label = "rfkill";
            gpios = <&gpio0 2 1>;
            linux,code = <0xf7>;
        };    };
};

&gpio2 {
    status = "okay";
};

&gpio3 {
    status = "okay";
};

&spi0 {
    status = "okay";

    m25p80@0 {
        #address-cells = <1>;
        #size-cells = <1>;
        compatible = "jedec,spi-nor";
        reg = <0>;
        linux,modalias = "m25p80", "w25q64bv";
        spi-max-frequency = <10000000>;

        partition@0 {
            label = "u-boot";
            reg = <0x0 0x20000>;
            read-only;
        };

        partition@20000 {
            label = "firmware";
            reg = <0x20000 0x7b0000>;
        };

        romfile: partition@7d0000 {
            label = "romfile";
            reg = <0x7d0000 0x10000>;
            read-only;
        };

        partition@7e0000 {
            label = "config";
            reg = <0x7e0000 0x10000>;
            read-only;
        };

        radio: partition@7f0000 {
            label = "radio";
            reg = <0x7f0000 0x10000>;
            read-only;
        };
    };
};

&pinctrl {
    state_default: pinctrl0 {
        gpio {
            ralink,group = "i2c", "uartf", "rgmii1", "rgmii2", "wled", "nd_sd";
            ralink,function = "gpio";
        };
    };
};

&ethernet {
        pinctrl-names = "default";
        pinctrl-0 = <&ephy_pins>;
        mtd-mac-address = <&romfile 0xf100>;
        mediatek,portmap = "wllll";
    };

&ehci {
    status = "okay";
};

&ohci {
    status = "okay";
};

&gsw {
    mediatek,port4 = "ephy";
};

&wmac {
    ralink,mtd-eeprom = <&radio 0>;
};

&pcie {
    status = "okay";

    pcie-bridge {
        mt76@0,0 {
            reg = <0x0000 0 0 0 0>;
            device_type = "pci";
            mediatek,mtd-eeprom = <&radio 32768>;
            mediatek,2ghz = <0>;
        };
    };
};

The openwrt bootlog:

U-Boot 1.1.3 (Jan  7 2016 - 17:19:14)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
enable ephy clock...done. rf reg 29 = 5
SSC disabled.   
------------------
  LTE AC750 v1.0.0
------------------
Now running in RAM - U-Boot at: 83fb0000, MONITOR BASE: bc000000

 uboot_end: 00006358   83fcd6ac
spi_wait_nsec: 29
spi device id: ef 40 17 0 0 (40170000)
find flash: W25Q64BV
============================================
Ralink UBoot Version: 4.1.2.0
--------------------------------------------
ASIC 7620_MP (Port5<->GigaSW)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: SPI Flash
Date:Jan  7 2016  Time:17:19:14
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 580 MHZ ####
 estimate memory size =64 Mbytes

BootType =
continue to starting system.                                                                                                                                                                  0
disableEthForward(1158):disable switch forward...

3: System Boot system code via Flash.(0xbc020000)
## Booting image at bc020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in MB, 64

Starting kernel ...

[    0.000000] Linux version 4.4.14 (roby@RVB) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 49928) ) #11 Sun Sep 18 11:42:32 UTC 2016
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7620A ver:2 eco:6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019650 (MIPS 24KEc)
[    0.000000] MIPS: machine is TP-Link Archer MR200
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Writing ErrCtl register=0007a3fe
[    0.000000] Readback ErrCtl register=0007a3fe
[    0.000000] Memory: 60772K/65536K available (2865K kernel code, 143K rwdata, 696K rodata, 192K init, 195K bss, 4764K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:256
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns
[    0.000000] systick: enable autosleep mode
[    0.000000] systick: running - mult: 214748, shift: 32
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000011] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007569] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.070068] pid_max: default: 32768 minimum: 301
[    0.074698] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.081074] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094236] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.103944] pinctrl core: initialized pinctrl subsystem
[    0.109674] NET: Registered protocol family 16
[    0.601308] PCI host bridge /pcie@10140000 ranges:
[    0.605912]  MEM 0x0000000020000000..0x000000002fffffff
[    0.610965]   IO 0x0000000010160000..0x000000001016ffff
[    0.624450] rt2880_gpio 10000600.gpio: registering 24 gpios
[    0.629897] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[    0.636027] rt2880_gpio 10000660.gpio: registering 32 gpios
[    0.641433] rt2880_gpio 10000660.gpio: registering 32 irq handlers
[    0.647548] rt2880_gpio 10000688.gpio: registering 1 gpios
[    0.652860] rt2880_gpio 10000688.gpio: registering 1 irq handlers
[    0.659575] PCI host bridge to bus 0000:00
[    0.663540] pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
[    0.670166] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    0.675925] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.682509] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.690692] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.699626] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    0.706035] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    0.712757] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    0.719356] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
[    0.725950] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
[    0.732552] pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
[    0.739128] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.743957] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    0.750551] pci 0000:00:00.0: card - bus=0x0, slot = 0x0 irq=0
[    0.756215] pci 0000:01:00.0: card - bus=0x1, slot = 0x0 irq=4
[    0.761871] pci 0000:01:00.1: card - bus=0x1, slot = 0x0 irq=4
[    0.768545] clocksource: Switched to clocksource systick
[    0.775102] NET: Registered protocol family 2
[    0.780240] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.786966] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.793183] TCP: Hash tables configured (established 1024 bind 1024)
[    0.799412] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.805038] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.811435] NET: Registered protocol family 1
[    0.816173] rt-timer 10000100.timer: maximum frequency is 1220Hz
[    0.823017] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.848497] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.854177] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.866419] io scheduler noop registered
[    0.870239] io scheduler deadline registered (default)
[    0.875438] ralink-usb-phy usbphy: invalid resource
[    0.880866] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.888232] console [ttyS0] disabled
[    0.891735] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103
[    0.901342] console [ttyS0] enabled
[    0.901342] console [ttyS0] enabled
[    0.908387] bootconsole [early0] disabled
[    0.908387] bootconsole [early0] disabled
[    0.921435] spi spi0.0: force spi mode3
[    0.925886] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.930883] 5 ofpart partitions found on MTD device spi0.0
[    0.936479] Creating 5 MTD partitions on "spi0.0":
[    0.941393] 0x000000000000-0x000000020000 : "u-boot"
[    0.948269] 0x000000020000-0x0000007d0000 : "firmware"
[    1.017655] 2 tplink-fw partitions found on MTD device firmware
[    1.023739] 0x000000020000-0x000000156d58 : "kernel"
[    1.030432] 0x000000156d58-0x0000007d0000 : "rootfs"
[    1.037304] mtd: device 3 (rootfs) set to be root filesystem
[    1.043293] 1 squashfs-split partitions found on MTD device rootfs
[    1.049639] 0x000000350000-0x0000007d0000 : "rootfs_data"
[    1.057034] 0x0000007d0000-0x0000007e0000 : "romfile"
[    1.064102] 0x0000007e0000-0x0000007f0000 : "config"
[    1.071034] 0x0000007f0000-0x000000800000 : "radio"
[    1.081759] gsw: setting port4 to ephy mode
[    1.086076] mtk_soc_eth 10100000.ethernet eth0 (uninitialized): port 0 link up (100Mbps/Full duplex)
[    1.095629] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver
[    1.102482] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    1.111524] rt2880_wdt 10000120.watchdog: Initialized
[    1.118233] NET: Registered protocol family 10
[    1.126514] NET: Registered protocol family 17
[    1.131223] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.144128] 8021q: 802.1Q VLAN Support v1.8
[    1.164355] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    1.172660] Freeing unused kernel memory: 192K (803a0000 - 803d0000)
[    3.600519] init: Console is alive
[    3.604215] init: - watchdog -
[    5.328217] usbcore: registered new interface driver usbfs
[    5.333987] usbcore: registered new interface driver hub
[    5.339557] usbcore: registered new device driver usb
[    5.350512] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.358831] ehci-platform: EHCI generic platform driver
[    5.374503] phy phy-usbphy.0: remote usb device wakeup disabled
[    5.380560] phy phy-usbphy.0: UTMI 16bit 30MHz
[    5.385125] ehci-platform 101c0000.ehci: EHCI Host Controller
[    5.391039] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    5.399252] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    5.410213] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    5.417759] hub 1-0:1.0: USB hub found
[    5.422028] hub 1-0:1.0: 1 port detected
[    5.429052] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    5.436913] ohci-platform: OHCI generic platform driver
[    5.442602] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[    5.449597] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[    5.457798] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[    5.488469] hub 2-0:1.0: USB hub found
[    5.492633] hub 2-0:1.0: 1 port detected
[    5.504273] init: - preinit -
[    6.462505] 8021q: adding VLAN 0 to HW filter on device eth0
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.504541] jffs2: notice: (340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    7.523380] mount_root: switching to jffs2 overlay
[    7.559715] procd: - early -
[    7.564311] procd: - watchdog -
[    8.001301] procd: - ubus -
[    8.028119] random: ubusd urandom read with 16 bits of entropy available
[    8.036784] procd: - init -
Please press Enter to activate this console.
[    8.214417] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    8.775870] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    8.795429] Loading modules backported from Linux version wt-2016-05-12-0-g7a54796
[    8.803164] Backport generated by backports.git backports-20160216-0-ge3c56e4
[    8.870380] ip_tables: (C) 2000-2006 Netfilter Core Team
[    8.887236] nf_conntrack version 0.5.0 (952 buckets, 3808 max)
[    8.942635] xt_time: kernel timezone is -0000
[    8.960261] PPP generic driver version 2.4.2
[    8.967711] NET: Registered protocol family 24
[    8.990544] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 5390, rev 0500 detected
[    8.998550] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 7620 detected
[    9.335460] usb 1-1: USB disconnect, device number 2
[   15.509066] 8021q: adding VLAN 0 to HW filter on device eth0
[   15.534599] device eth0.1 entered promiscuous mode
[   15.539509] device eth0 entered promiscuous mode
[   15.552884] br-lan: port 1(eth0.1) entered forwarding state
[   15.558621] br-lan: port 1(eth0.1) entered forwarding state
[   16.891905] usb 1-1: new high-speed USB device number 3 using ehci-platform
[   17.241545] br-lan: port 1(eth0.1) entered forwarding state



BusyBox v1.24.2 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 DESIGNATED DRIVER (Bleeding Edge, 49928)
 -----------------------------------------------------
  * 2 oz. Orange Juice         Combine all juices in a
  * 2 oz. Pineapple Juice      tall glass filled with
  * 2 oz. Grapefruit Juice     ice, stir well.
  * 2 oz. Cranberry Juice
 -----------------------------------------------------
root@OpenWrt:/# 

Any help would be greatly appreciated.
Thanks

Alright, i'm gonna give up on this. while i would have loved running openwrt on this device, writing a correct DTS file is too advanced for me to be done on my own and i couldn't find anyone to help

Hi, guys! Please help me. Is any possibility to change IMEI in LTE modem in this Archer MR200 router?

@WINTERZ
No, there is not a known way. manufactures make changing IMEI very hard or almost impossible for a good reason. and the fact that you want to change it is suspicious at the very least.

Hamy, thanks for quick reply. My LTE provider allows to use 4G internet only for smartphones and tablet pc. Provider checks IMEIs and blocks devices that have not phones or tablets IMEIs. So I can't use this router. Changing IMEI will help me to use internet. Nothing criminal or suspicious.

(Last edited by WINTERZ on 22 Sep 2016, 11:14)

WINTERZ wrote:

Hamy, thanks for quick reply. My LTE provider allows to use 4G internet only for smartphones and tablet pc. Provider checks IMEIs and blocks devices that have not phones or tablets IMEIs. So I can't use this router. Changing IMEI will help me to use internet. Nothing criminal or suspicious.

Alright, sorry. still, this router does not support changing IMEI (at least not officially anyway). my bet is that it's stored inside the LTE card which runs it's own OS. it could even be embedded in a seperate readonly chip. unless you're hacker and willing to take on a challenge, id look elsewhere.

On a side note, if possible, i would have you changed my provider as a sign of protest against their stupid policy and let them know that (they shouldn't be deciding or limiting you on this).