OpenWrt Forum Archive

Topic: OpenWRT Kamikaze on TP-link tl-wa501g?

The content of this topic has been archived between 31 Aug 2014 and 5 May 2018. Unfortunately there are posts – most likely complete pages – missing.

thanks for advise max232 is very simple and usefull shame smile tonigh if i will have litle time will make few pictures of board. I use tl-wr542 v7 and system led is off after vxkiller. for now it's is most usefull info now.

I have already mounting procedures in WR340gd openwrt kamikaze but now I want to reinstall another version of openwrt kamikaze custom, and I imagine enter RedBoot and do the same procedure I did to install openwrt by xssa but I have no access to 192.168.1.55 on port 9000 .
How I can now access the RedBoot?

Redboot is on 192.168.1.1:9000 as expected. IPs on Linux and on RedBoot is not correlated in any way.

xssa wrote:

Redboot is on 192.168.1.1:9000 as expected. IPs on Linux and on RedBoot is not correlated in any way.

OK lol.

xssa hello.

I am grateful to you because I have openwrt running Wr340gd. but I need SSH service, maybe you can avoid PPP, WEP, WPA, and put the SSH anyway.
I have made my custom image but they are always very grades or just the router lights blink constantly and the power is stable. many strange things happen, so I reinstalled the image that you have not provided and the router is working again but I have fear of charging or disappointment in so many failed attempts to install SSH.
If you can make micro-openwrt with SSH server you'll be my idol neutral.

Because all that I build with openwrt firmware do not work. which are the core packages that I have to choose.
I am selecting:

-base-files-atheros_14.1-unknown_mips.ipk
-busybox_1.11.2-2.1_mips.ipk
-gpioctl_1.0-1_mips.ipk
-hotplug2_0.9+r102-2_mips.ipk
-opkg_4564-3.1_mips.ipk

As you will realize, I have not mentioned the madwifi drivers.
result is as follows:

- Openwrt-atheros-root.squashfs = 512 kb
- Openwrt-atheros-vmlinux.lzma = 704 kb

And after the update to the router using RedBoot LEDs are blinking and do not stop and the power LED is constant.

(Last edited by padrecito007 on 18 Aug 2010, 18:12)

padrecito007 wrote:

Because all that I build with openwrt firmware do not work. which are the core packages that I have to choose.
I am selecting:

-base-files-atheros_14.1-unknown_mips.ipk
-busybox_1.11.2-2.1_mips.ipk
-gpioctl_1.0-1_mips.ipk
-hotplug2_0.9+r102-2_mips.ipk
-opkg_4564-3.1_mips.ipk

As you will realize, I have not mentioned the madwifi drivers.
result is as follows:

- Openwrt-atheros-root.squashfs = 512 kb
- Openwrt-atheros-vmlinux.lzma = 704 kb

And after the update to the router using RedBoot LEDs are blinking and do not stop and the power LED is constant.

Good start!!! But don't expect that blind kitten will find the right way easily ;-)  Solder serial console cable to the board and look to the output.
I dropped sshd support to leave more free space for custom binaries in jffs. You can add sshd by installing dropbear package into running image. There is about a 350 kB of a free space. In packages don't omit uci!

xssa wrote:

Good start!!! But don't expect that blind kitten will find the right way easily ;-)  Solder serial console cable to the board and look to the output.
I dropped sshd support to leave more free space for custom binaries in jffs. You can add sshd by installing dropbear package into running image. There is about a 350 kB of a free space. In packages don't omit uci!

Hello Xssa and all.

I can remove the busybox_1.11.2-2.2_mips.ipk and base-files-atheros_14.3-unknown_mips.ipk because these packages are occupying more space.

If what I say it seems unusual, please tell me which are the primary package for a minimal installation.

Hello xssa and all.

The file rootsq.rom is the openwrt-atheros-root.squashfs?
and the file openwrt-atheros-vmlinux.lzma is the openwrt-atheros-vmlinux.lzma?

I'm about to give up because I can not make valid files, the LEDs are still blinking and the Power nonstop stable, I tested over 70 occasions with different files and it took two weeks of tests and no positive results.

the commands you use RedBoot and properly functional xssa files. And I use the same commands to my files are invalid:

fis init
ip_addr -h 192.168.1.2 -l 192.168.1.1
load -r -v -b %{FREEMEMLO} openwrt-atheros-vmlinux.lzma
fis create -r 0x80041000 -e 0x80041000 vmlinux.bin.l7
fis free
load -r -v -b %{FREEMEMLO} openwrt-atheros-root.squashfs
fis create -l 0x110000 rootfs
fis list
fis free
reset

Note:
openwrt-atheros-root.squashfs = 512 KB
openwrt-atheros-vmlinux.lzma = 768 KB

If anyone can give me so much work invalid. please can build a micro-openwrt with SSH support for this device, or show me the light so that I can.

(Last edited by padrecito007 on 20 Aug 2010, 16:08)

padrecito007 wrote:

Hello xssa and all.

The file rootsq.rom is the openwrt-atheros-root.squashfs?
and the file openwrt-atheros-vmlinux.lzma is the openwrt-atheros-vmlinux.lzma?

Thats it.

I'm about to give up because I can not make valid files, the LEDs are still blinking and the Power nonstop stable, I tested over 70 occasions with different files and it took two weeks of tests and no positive results.

Again, without boot log from serial console it is difficult to determine a problem.

the commands you use RedBoot and properly functional xssa files. And I use the same commands to my files are invalid:

fis init
ip_addr -h 192.168.1.2 -l 192.168.1.1
load -r -v -b %{FREEMEMLO} openwrt-atheros-vmlinux.lzma
fis create -r 0x80041000 -e 0x80041000 vmlinux.bin.l7
fis free
load -r -v -b %{FREEMEMLO} openwrt-atheros-root.squashfs
fis create -l 0x110000 rootfs
fis list
fis free
reset

Note:
openwrt-atheros-root.squashfs = 512 KB
openwrt-atheros-vmlinux.lzma = 768 KB

If anyone can give me so much work invalid. please can build a micro-openwrt with SSH support for this device, or show me the light so that I can.

I have newer use load -v option, and have no idea what does it mean without acces to redbooot prompt. What do you have as answer on "fis list"?
Try to make kernell smaller (try to throw up firewall staff as marvell switch code still is broken for tplink hw setup on stock openwrt kernel) and you'll have much more space for rootfs. Take a look on my rootsq.rom for example.

SPI flash chip SST 25vf016b found by me in tl-wr542 v4 currently is unsupported both in microredboot and linux kernel from public vxkiller image. Wait for solution as i have access to actual hardware for testing.

xssa wrote:

SPI flash chip SST 25vf016b found by me in tl-wr542 v4 currently is unsupported both in microredboot and linux kernel from public vxkiller image. Wait for solution as i have access to actual hardware for testing.

hello all.

The Redboot to wa500g/501g if it works? because it has Realtek network chip.
to buy an access Point wa500g/501g, microRedboot confirm if it works, kernel, etc.

Still no hardware to play with sad

xssa wrote:

Still no hardware to play with sad

Then, I'll buy an AP wa500g/wa501g to test, and we notice.

Let me know what actual HW did you bought. I will prepare special image for testing.

xssa wrote:

Let me know what actual HW did you bought. I will prepare special image for testing.

Hello Xssa.

You buy it, the model is Tl-WA501G (http://www.tp-link.com/products/product … =tl-wa501g)

It's for testing, and if you come to ruin no problem on my part. But I would like uste SSH adds, is a supplication.

And I remove WPA supplicant, Telnet, PPPoE, etc.. then only have to wait.

smile smile

Hello Xssa know I did, update the image for WA500 and the router no longer turns on the LED, power LED lights only. and Acess point happily the warranty and had sent him to replace me and so it was. and I have a new Tl-WA501G without touching anything.

And I keep waiting for the new work that was engaged in conduct uste.

(Last edited by padrecito007 on 16 Sep 2010, 23:13)

First of all sorry for my bad English. Currently working on router TP-Link TL-WR542G. I made hardware changes and increased Flash memory to 4MB and RAM to 32MB. Originally FLASH memory is MX25L1605 - changed to MX25L3205; has 16Mbit of RAM - I changed to a 256Mbit (32 MBytes). I compiled the RedBoot and programmed MX25L3205 with SPIFLASH (http://www.spiflash.org/)

RedBoot is working correctly, unfortunately, every version that tries to run openwrt comes to the "Kernel panic".

Please, any information which might be wrong?

P.S. TL-WR542G TL-WR541G and TL-WR543G and it is the same device with the same motherboard - they differ only by the amount of RAM - photos can be viewed at http://picasaweb.google.pl/etthtech

Below is a log from RedBoot:

Ethernet eth0: MAC address 64:f3:1a:d0:46:34
IP: 192.168.1.1/255.255.255.0, Gateway: 0.0.0.0
Default server: 192.168.1.10

RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version UNKNOWN - built 19:42:03, Oct 20 2010

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Copyright (C) 2007 NewMedia-NET GmbH (DD-WRT build)

Board: ap51 
RAM: 0x80000000-0x81000000, [0x80040970-0x80fe1000] available
FLASH: 0xbfc00000 - 0xbfff0000, 64 blocks of 0x00010000 bytes each.

And log for trying to run the Kernel:

RedBoot> load -r -b %{FREEMEMLO} openwrt-atheros-vmlinux.lzma
Using default protocol (TFTP)
Raw file loaded 0x80040c00-0x80100bff, assumed entry at 0x80040c00

RedBoot> fis create -e 0x80041000 -r 0x80041000 vmlinux.bin.l7
... Erase from 0xbfc30000-0xbfcf0000: ............
... Program from 0x80040c00-0x80100c00 at 0xbfc30000: ............
... Erase from 0xbffe0000-0xbfff0000: .
... Program from 0x80ff0000-0x81000000 at 0xbffe0000: .

RedBoot> fis load -l vmlinux.bin.l7
Image loaded from 0x80041000-0x80282085

RedBoot> fis list
Name              FLASH addr  Mem addr    Length      Entry point
RedBoot           0xBFC00000  0xBFC00000  0x00030000  0x00000000
vmlinux.bin.l7    0xBFC30000  0x80041000  0x000C0000  0x80041000
FIS directory     0xBFFE0000  0xBFFE0000  0x0000F000  0x00000000
RedBoot config    0xBFFEF000  0xBFFEF000  0x00001000  0x00000000

RedBoot> exec

Now booting linux kernel:
 Base address 0x80030000 Entry 0x80041000
 Cmdline : 
Linux version 2.6.26.5 (nbd@baustelle) (gcc version 4.1.2) #21 Sat Feb 14 23:12:28 CET 2009
CPU revision is: 00019064 (MIPS 4KEc)
Determined physical RAM map:
 memory: 00800000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal          0 ->     2048
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     2048
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 2032
Kernel command line: console=ttyS0,9600 rootfstype=squashfs,jffs2 init=/etc/preinit
Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 16 bytes
PID hash table entries: 32 (order: 5, 128 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 1024 (order: 0, 4096 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 5440k/8192k available (1876k kernel code, 2752k reserved, 310k data, 124k init, 0k highmem)
SLUB: Genslabs=6, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Mount-cache hash table entries: 512
net_namespace: 644 bytes
NET: Registered protocol family 16
WARNING: No board configuration data found!
CPU 0 Unable to handle kernel paging request at virtual address 00000050, epc == 80268e7c, ra == 80268de4
Oops[#1]:
Cpu 0
$ 0   : 00000000 10008400 80250000 80256388
$ 4   : 80256020 80256040 8027ea6c 00000000
$ 8   : 80280000 8013d610 80290000 80290000
$12   : 80290000 00000000 00000000 00000000
$16   : 80280000 00000001 00000000 802638c4
$20   : 80280e80 00000000 00000000 00000000
$24   : 00000001 00008000                  
$28   : 802cc000 802cdf20 00000000 80268de4
Hi    : 0000005b
Lo    : c01e0000
epc   : 80268e7c     Not tainted
ra    : 80268de4 Status: 10008403    KERNEL EXL IE 
Cause : 00801008
BadVA : 00000050
PrId  : 00019064 (MIPS 4KEc)
Modules linked in:
Process swapper (pid: 1, threadinfo=802cc000, task=802c8000, tls=00000000)
Stack : 11300000 00000000 00000400 80168c18 80268cc4 80280000 00000000 00000000
        80264618 80264618 00000000 00000000 00000000 00000000 00000000 8026457c
        00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
        00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
        00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
        ...
Call Trace:[<80168c18>][<80268cc4>][<80264618>][<80264618>][<8026457c>][<8004526c>][<8004525c>]

Code: ac4064a0  12220039  00000000 <96420050> 12220024  00000000  96420052  16220009  02602021 
Kernel panic - not syncing: Attempted to kill init!

Sorry for bad English.

Firstly, many thanks for the work done xssa and other members of the community!
After a (successful) experiments with the firmware, I got the following question:
tell me please how to connect WR340GD as a client to an access point with WPA2-PSK. I understand that the only way - is to use wpa_supplicant. But in the rootfs, kindly provided on this forum is not enough space. In addition, in the future, this router will be used for the well-known program, whose name is present in the command prompt:) Again, the question arises from the lack of space in the memory ...
Anyway, at this moment I am concerned about the first question. I have little experience with Linux, so please do not shoot, if the question is stupid. Thanks in advance!

(Last edited by vevs on 25 Oct 2010, 19:07)

Any news for wa501g?

Found this interesting thread.

Are there any news on building OpenWrt micro-firmware for TP-Link TL-WR340G, TL-WR340GD, TL-WR543G, WR542G ?
WR340G and WR340GD are very cheap routers, perfect candidates for meshing or WDS deployments.
BTW:  I do not need any routing features (Firewall/NAT), PPPoE/PPTP, etc. for those models.
I have WR841ND and WR1043ND for Internet access smile

Hello to all. Sorry kind a for getting into this topic. I have quite similar board. It's named Techniclan WAE-54GAT it is based upon Atheros 2317 chip, 8mb ram and 2mb flash, realtek 1-port switch chip (PHY). Originally it has Redboot as for a bootloader installed. Original software really sucks so I wanted to load some other firmware. Wanted to ask about OpenWrt and maybe original software for TP-LINK TL-WA501g - seems like the same hardware. Does anyone have jtag flash dump from TP-LINK TL-WA501g ?

http://www.bitmex.pl/techniclan/techniclan.jpg


+Ethernet eth0: MAC address 00:aa:ab:01:0b:7e
IP: 192.168.1.115, Default server: 192.168.1.34

RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version UNKNOWN - built 04:49:51, Oct 24 2008

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

Board: ap61
RAM: 0x80000000-0x80800000, [0x800331f0-0x807ed000] available
FLASH: 0xbfc00000 - 0xbfdf0000, 32 blocks of 0x00010000 bytes each.
== Executing boot script in 1.000 seconds - enter ^C to abort
^C
RedBoot>

(Last edited by Baron3K on 1 Dec 2010, 19:38)

Baron3K wrote:

... I have quite similar board. It's named Techniclan WAE-54GAT it is based upon Atheros 2317 chip, 8mb ram and 2mb flash, realtek 1-port switch chip (PHY). Originally it has Redboot as for a bootloader installed. Original software really sucks so I wanted to load some other firmware. Wanted to ask about OpenWrt and maybe original software for TP-LINK TL-WA501g - seems like the same hardware. Does anyone have jtag flash dump from TP-LINK TL-WA501g ?
...
Board: ap61
...

This board is more like tl-wa500g. What firmware does it running? What do you expect from it?

Is is running some custom build firmware. Linux based of course. Original firmware is kind a shitty (has many problems and issues) So i was wondering about running some cut off version of openwrt. Or some other firmware maybe if any exists. Device has RedBoot BootStrap from the beggining so the only problem is flash/memory limitations.

"xssa" if you want I can provide you with original firmware from this device for testing.

(Last edited by Baron3K on 23 Dec 2010, 10:30)

BTW: there was a short discussion thread on DD-Wrt forum about TechnicLan WAE-54GAT Atheros AR2317 - in March 2009.

I am wondering if it is still on the market?
For example: TP-Link was moving away from 11g products to 11n.
TL-WR340GD is probably last model in 11G range.

Well there are two versions of that device

v1 - ar2317, 2mb flash, 8mb ram, realtek phy, redboot
v2 - ar2317, 4mb flash, 16mb ram, infineon 6996FC phy, redboot


Loading dd-wrt or openwrt to version2 is not a problem since it has enough memory to make it happen, problem is only in version1. Since it's lack of memory.

I was just wondering could i load firmware from other (similar device) from another manufacturer if specification will be exacly the same ? For example can I load org firmware from tp-link wa-500 or similar.


wish you merry Xmas and a Happy New Year.