IMPORTANT: This thread is old and out of date, read the most recent messages in the thread and ignore this opening post
-==============
Atheros AP81 routers that run u-boot that are now working with OpenWRT. However, this router has proven difficult to date given a highly modified u-boot that is crippled.
This router has some interesting hardware:
-- Common Atheros AP81 specifications: 400mhz CPU, 32MB of RAM, 4MB of FLASH. U-boot says 8MB of flash, but it is not true on actual hardware.
-- Atheros AR9103 802.11n radio chip has 3x3 MIMO with external antennas
-- USB port header has been discovered on the motherboard, even a punch-out on the plastic case.
-- BAD: the rs232 port on the router requires you to bridge one tiny surface mount pad jumpers/bridge.
-- 20 pin JTAG port identified, J9 on motherboard
===================
The wiki is running like crap the past months, so putting some stuff here. This s the default factory firmare boot, 9600 bps:
U-Boot 1.1.4 (May 1 2008 - 19:25:20)
AP81 (ar7100) U-boot
DRAM:
sri
32 MB
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment
In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
No valid address in Flash. Using fixed address
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Autobooting in 1 seconds, press "tp" to stop
## Booting image at bf020000 ...
Uncompressing Kernel Image ... OK
Starting kernel ...
The bps rate then goes to 115200:
Linux version 2.6.15--LSDK-6.1.1.40 gcc version 3.4.4 #37 Wed Apr 23 17:03:39 CST 2008
flash_size passed from bootloader = 8
CPU revision is: 00019374
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init mtdparts=ar7100-nor0:128k(u-boot),1024k(kernel),2816k(rootfs),64k(config),64k(art) mem=32M
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 200.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 29700k/32768k available (1753k kernel code, 3052k reserved, 354k data, 116k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
NET: Registered protocol family 16
Jumpstart button pressed.
AR7100 GPIOC major 0
squashfs: version 3.3 (2007/10/31) Phillip Lougher
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
Serial: 8250/16550 driver $Revision: #1 $ 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
RAMDISK driver initialized: 1 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTD device ar7100-nor0
Creating 5 MTD partitions on "ar7100-nor0":
0x00000000-0x00020000 : "u-boot"
0x00020000-0x00120000 : "kernel"
0x00120000-0x003e0000 : "rootfs"
0x003e0000-0x003f0000 : "config"
0x003f0000-0x00400000 : "art"
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
ar7100wdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 116k freed
init started: BusyBox v1.01 (2008.04.22-03:29+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5
ip_conntrack version 2.4 (256 buckets, 5120 max) - 236 bytes per conntrack
flash_id is 0X10215
Now flash open!
Now flash open!
(none) mips #37 Wed Apr 23 17:03:39 CST 2008 (none)
(none) login: device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.17.1 (AR5416, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 0.9.4.5 (Atheros/multi-bss)
COEXIST is defined.
Howl Revision ID 0xb5 <6>No MBSSID aggregation support<6>wifi0: Atheros AR9100 WiSoC: mem=0xb80c0000, irq=2
wlan: mac acl policy registered
ieee80211_ioctl_setmode: CHH Mode: 11NGHT40MINUS
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
device eth0 left promiscuous mode
br0: port 1(eth0) entering disabled state
device ath0 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 2(eth0) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0) entering forwarding state
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Country ie is US
ar5416StopDmaReceive: dma failed to stop in 10ms
AR_CR=0x00000024
AR_DIAG_SW=0x40000020
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
br0: port 1(ath0) entering learning state
br0: topology change detected, propagating
br0: port 1(ath0) entering forwarding state
ath_netdev_stop: The stopping of the running
ar5416StopDmaReceive: dma failed to stop in 10ms
AR_CR=0x00000024
AR_DIAG_SW=0x40000020
br0: port 1(ath0) entering disabled state
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Country ie is US
br0: port 1(ath0) entering learning state
br0: topology change detected, propagating
br0: port 1(ath0) entering forwarding state
TL-WR941N mips #37 Wed Apr 23 17:03:39 CST 2008 (none)
TL-WR941N login: ap71
BusyBox v1.01 (2008.04.22-03:29+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
$
$ cat /proc/mtd
dev: size erasesize name
mtd0: 00020000 00010000 "u-boot"
mtd1: 00100000 00010000 "kernel"
mtd2: 002c0000 00010000 "rootfs"
mtd3: 00010000 00010000 "config"
mtd4: 00010000 00010000 "art"
$
$ #press the qss button on front of router
$ Jumpstart button pressed.
registered routine return 1
$ cat /proc/interrupts
CPU0
2: 5352 MIPS wifi0
4: 153 MIPS eth0
6: 0 MIPS cascade
7: 99060 MIPS timer
18: 0 AR7100 MISC cascade
19: 532 AR7100 MISC serial
35: 0 AR7100 GPIO RESTORE_FACTORY_DEFAULT
39: 4 AR7100 GPIO SW_JUMPSTART
ERR: 0
$ cat /proc/iomem
00000000-01ffffff : System RAM
00060000-00216587 : Kernel code
00216588-0026f0bf : Kernel data
18020000-18020fff : serial8250.0
1b000000-1bffffff : ar7100-ehci.0
1c000000-1cffffff : ar7100-ohci.0
$ ls /proc
1 310 52 execdomains mtd
10 311 58 filesystems net
11 312 6 fs partitions
173 315 62 interrupts self
174 316 672 iomem simple_config
178 317 7 ioports slabinfo
183 318 8 irq stat
2 319 9 kallsyms sys
201 320 buddyinfo kcore sysvipc
3 321 bus kmsg tty
300 322 cmdline loadavg uptime
302 332 cpuinfo locks version
303 4 crypto meminfo vmstat
304 49 devices misc zoneinfo
305 5 diskstats modules
306 51 driver mounts
$ cat /proc/modules
wlan_acl 4576 0 - Live 0xc019d000
wlan_wep 6112 0 - Live 0xc00dd000
wlan_tkip 13408 0 - Live 0xc01b1000
wlan_ccmp 8416 0 - Live 0xc0199000
wlan_xauth 1344 0 - Live 0xc0160000
ath_ahb 49344 0 - Live 0xc01c3000
ath_dev 109840 1 ath_ahb, Live 0xc01d6000
ath_rate_atheros 39792 1 ath_dev, Live 0xc01a6000
wlan 228576 8 wlan_acl,wlan_wep,wlan_tkip,wlan_ccmp,wlan_xauth,ath_ahb,ath_dev, Live 0xc0127000
ath_hal 203664 3 ath_ahb,ath_dev, Live 0xc0166000
flashid 1344 0 - Live 0xc0108000
ts_kmp 2048 0 - Live 0xc0106000
ts_bm 2240 0 - Live 0xc00f6000
ipt_STAT 87344 0 - Live 0xc010a000
ipt_TCPMSS 3808 1 - Live 0xc00ed000
ip_nat_pptp 5264 0 - Live 0xc00f3000
ip_conntrack_pptp 8944 1 ip_nat_pptp, Live 0xc00ef000
ip_nat_h323 6912 0 - Live 0xc00e3000
ip_conntrack_h323 48736 1 ip_nat_h323, Live 0xc00f9000
ipt_TRIGGER 3552 0 - Live 0xc00e8000
ipt_time 2624 0 - Live 0xc00e6000
iptable_filter 2304 1 - Live 0xc00d5000
iptable_nat 7920 1 - Live 0xc00e0000
ipt_string 1728 0 - Live 0xc00d9000
ipt_state 1472 2 - Live 0xc00d7000
ipt_multiport 2336 0 - Live 0xc00b6000
ipt_mac 1696 0 - Live 0xc00d3000
ipt_iprange 1568 0 - Live 0xc00c3000
ipt_conntrack 2304 0 - Live 0xc00c1000
ipt_comment 1312 1 - Live 0xc00b8000
ipt_MASQUERADE 2752 1 - Live 0xc00a3000
ip_nat_tftp 1312 0 - Live 0xc00b4000
ip_nat_ftp 2976 0 - Live 0xc009a000
ip_nat 16896 7 ip_nat_pptp,ip_nat_h323,ipt_TRIGGER,iptable_nat,ipt_MASQUERADE,ip_nat_tftp,ip_nat_ftp, Live 0xc00bb000
ip_conntrack_tftp 3376 1 ip_nat_tftp, Live 0xc00a1000
ip_conntrack_ftp 6512 1 ip_nat_ftp, Live 0xc009e000
ip_conntrack 48064 13 ip_nat_pptp,ip_conntrack_pptp,ip_nat_h323,ip_conntrack_h323,iptable_nat,ipt_state,ipt_conntrack,ipt_MASQUERADE,ip_nat_tftp,ip_nat_ftp,ip_nat,ip_conntrack_tftp,ip_conntrack_ftp, Live 0xc00c6000
ip_tables 22656 13 ipt_TCPMSS,ipt_TRIGGER,ipt_time,iptable_filter,iptable_nat,ipt_string,ipt_state,ipt_multiport,ipt_mac,ipt_iprange,ipt_conntrack,ipt_comment,ipt_MASQUERADE, Live 0xc00ad000
ag7100_mod 25824 0 - Live 0xc00a5000
$ cat /proc/partitions
major minor #blocks name
31 0 128 mtdblock0
31 1 1024 mtdblock1
31 2 2816 mtdblock2
31 3 64 mtdblock3
31 4 64 mtdblock4
$ cat /proc/iomem
00000000-01ffffff : System RAM
00060000-00216587 : Kernel code
00216588-0026f0bf : Kernel data
18020000-18020fff : serial8250.0
1b000000-1bffffff : ar7100-ehci.0
1c000000-1cffffff : ar7100-ohci.0
$
$ path_bstuck_tasklet: stuck beacon; resetting (bmiss count 36)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
===================
Info on the USB port from Lark on dd-wrt forum:
http://www.dd-wrt.com/phpBB2/viewtopic. … p;start=21
He was playing around with the factory firmware 2.6.15 and compiling modules for it:
0 Dec 2004 USB 2.0 'Enhanced' Host Controller (EHCI) Driver (AR7100_EHCI)
In ar7100_ehci_drv_probe
probing ehci...
hcd->regs is 0xbb000000
/home/TEW-652BRP/TEW-652BRP_GPL/platform/AR9100/kernels/mips-linux-2.6.15/drivers/usb/host/ehci-ar7100.c: starting AR7100 EHCI USB Controller...done. reset 0x0 usb config 0x2
ehci->caps is 0xbb000000
ehci->caps->hc_base is 0x42fa05
ar7100-ehci ar7100-ehci.0: AR7100 EHCI
ar7100-ehci ar7100-ehci.0: new USB bus registered, assigned bus number 1
ar7100-ehci ar7100-ehci.0: irq 3, io mem 0x1b000000
hcc_params addr 0xbb000008 val 0x10020001 hcs_params addr 0xbb000004 val 0x22
ar7100-ehci ar7100-ehci.0: USB 0.0 started, EHCI 0.42, driver 10 Dec 2004
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
...probing done
2005 April 22 USB 1.1 'Open' Host Controller (OHCI) Driver (ar7100_ohci)block sizes: ed 64 td 64
In ohci_hcd_ar7100_drv_probeprobing...
/home/TEW-652BRP/TEW-652BRP_GPL/platform/AR9100/kernels/mips-linux-2.6.15/drivers/usb/host/ohci-ar7100.c: starting AR7100 OHCI USB Controller...<6>ar7100-ohci ar7100-ohci.0: AR7100 OHCI
ar7100-ohci ar7100-ohci.0: new USB bus registered, assigned bus number 2
ar7100-ohci ar7100-ohci.0: irq 22, io mem 0x1c000000
ar7100-ohci ar7100-ohci.0: init err (00000000 0038)
/home/TEW-652BRP/TEW-652BRP_GPL/platform/AR9100/kernels/mips-linux-2.6.15/drivers/usb/host/ohci-ar7100.c: can't start ar7100_usb
ar7100-ohci ar7100-ohci.0: startup error -79
ar7100-ohci ar7100-ohci.0: USB bus 2 deregistered
/home/TEW-652BRP/TEW-652BRP_GPL/platform/AR9100/kernels/mips-linux-2.6.15/drivers/usb/host/ohci-ar7100.c: stopping ar7100 OHCI USB Controller
ar7100-ohci: probe of ar7100-ohci.0 failed with error -79
(Last edited by RoundSparrow on 10 Apr 2011, 07:18)