Hi!

Please tell me your opinion about support of TP-LINK TL-WA5210G.

Hardware:
CPU Atheros AR2315A
Amplifier SE2576L http://www.sige.com/files/PB_DST_SE2576L.pdf
Flash 4MB  S25FL032A http://www.spansion.com/Support/Datashe … 0_C3_e.pdf
RAM 16 MB M12L128168A http://www.esmt.com.tw/DB/manager/uploa … 28168A.pdf
Ethernet RTL8201CP realtek.info/pdf/rtl8201cp.pdf

Images:
http://proline.biz.ua/files/external_li … g_0002.jpg
http://proline.biz.ua/files/external_li … g_0003.jpg
http://proline.biz.ua/files/external_li … g_0005.jpg
http://proline.biz.ua/files/external_li … g_0006.jpg
http://proline.biz.ua/files/external_li … g_0007.jpg
http://proline.biz.ua/files/external_li … g_0008.jpg
http://proline.biz.ua/files/external_li … g_0009.jpg

Let me know if you'll need additional info.

What OS is preinstalled?

Standard tp-link firmware.

It is possible to run openwrt on ar2315/4/16 but need actual hardware for testing. Do you have a original flash dump?

Any idea how to flash those units?

I tried with AP51, fonflash and open-mesh-flash. exe, could not bypass redboot.

(Last edited by jkimmel on 3 Sep 2010, 15:59)

AFAIK original FW does not have redboot and any other bootloader in sense you can access their debug console and flash your custom images.
So there are only complex way - you can do this by JTAG, program flash chip directly, or... prepare your images so they will fit into TpLink custom WEB update format.
There no easy way, guys.

(Last edited by xssa on 5 Sep 2010, 08:36)

Hello! Someone has already flash tp-link tl-wa5210g?

is it possible that the hardware is the same of ubiquiti picostation? Do you think it's possible use picostation's openwrt firmware??

Any update? Is it possible to use openwrt with WA5210G ?

Any updates for WA5210G???

This would be a perfect outdoor openwrt router, hopefully it gets some traction soon...

xssa build openwrt for ar5317
if you're daring enough (and you have serial ttl console connected) you can try these builds http://wiki.openwrt.org/toh/tp-link/tl-wr542g

Has anybody tried? I have no hardware so I can't try
If anybody sends me one I have cables and expertise to test and troubelshoot if this router will work with openwrt

A friend and I started hacking on the WA5210G yesterday. We've made some progress and were able to start a kernel (well, until it panics because it doesn't know the hardware).

Some facts we discovered:

* it is running vxworks
* there is no "bootloader", just a decompressor
* RAM is at 0x80000000, FLASH at 0xBFC00000
* the firmware update has a 20 byte header, after that's the data is written straight to the flash

We gained access to the raw flash (8 pin SPI flash near the UART header) using a Buspirate and assembled a tiny "Hello world"-firmware in order to test the flashing procedure and our assumptions about the memory mappings. They turned out to be correct and we concluded the platform to be very close to AP51 so we wrote redboot from http://www.dd-wrt.com/dd-wrtv2/download … 0/ap51.rom to the flash.

Next up was initializing redboot (fis init, fconfig, ...) and flashing a kernel using TFTP. Unfortunately, it had a kernel panic so the next step will be getting the kernel to run. We also need to figure out how to craft a firmware upgrade that will install and setup redboot without a buspirate.

Hello-World-Firmware:
Source: https://gist.github.com/3793343
Compile: as -o hello.o hello.S; objcopy hello.o -O binary hello.bin -j .text

Kernel bootlog: http://pastebin.com/raw.php?i=H5MV0xBn
Original firmware bootlog: http://pastebin.com/raw.php?i=H5QEL6Cz
Redboot log: http://pastebin.com/raw.php?i=zDxm1Q2x

I hope you can find a way guys i am verry interesed cuz i have one
If evrything go ok with this what wee win? Sorry for my english

20 byte header -
[0x00000000-0x00000004] - The length of the firmware without a title
[0x00000004-0x00000014] - checksum md5

I got a root shell by moving the boardconfig from 0x1f0000 to 0x3f0000: http://pastebin.com/raw.php?i=AMxwdGV1

OMG that's GREAT!

how far are we from having an image flashable from stock GUI?

any updates?

please help,
my 5210g broke down,
diode circuit D16 burnt and no way to read out marking.
any user of wa5210g to read marking/sign from D16?
D16 is located by HST1025(big black component by lan connector)
thanks in advance...

its a 1.5ke protection diode model. cant see the exact model. just remove it. the unit should work then. if not its burned completely

@tcatm
we should try to get the jtag pinout on this model. so redboot flashing and debugging gets easier

(Last edited by Sash on 12 Nov 2012, 22:49)

Always reflash 5210G to Ubiquti Nanostation 2 free (one activation per day or email request)

http://wa5210g.blogspot.com

discussion in russian
http://www.lan23.ru/forum/showthread.php?t=8581

please help revers-ingenering horizontal/vertical antenna gpio..

(Last edited by ukraine_russia_friends on 8 Jan 2013, 06:55)

After re-flash TL-WA5210G in Ubiqiuiti Nanostation 2, easily load to AP openwrt.
But can not work horizontal antenna.

-------------------------------------------------------------------------------

the fact is, what TP-Link use 2MB of SPI Flash 4MB, and EEPROM place in end of 2MB address space from 4MB in all, that is EEPROM in the middle of SPI Flash, and divide one half address space. (in Ubiquiti EEPROM in end of SPI Flash, normally in end of 4 MB)

If anybody can make open source redboot to convert TP-Link 5210G 2MB virtually model memory to 4MB real SPI Flash, it is all right, and we can sign redboot. Send redboot to us, and we do it. (after that need also non-standard steps to return back to TP-Link, if need be)

After that, it is suitable to openwrt in TP-Link.

-------------------------------------------------------------------------------

Who is undestanding EEPROM 800b Atheros field by field and can explain:

which byte in EEPROM of Nanos 2 or other 2.4MHz device corresponding to which data?

If you can explain, or may help in this question, please do it.

I find on address in 800b EEPROM Atheros, staring from 3f00f8h of full dump:
02h manufacturer 168ch
0eh Ubiquiti model c002h
10h manufacturer 0777h (non-Ubiquiti) - 168ch (Ubiquiti)
3ah MAC address backwards swap twice byte 34 56 6d 12 00 15
7ah 5aa5 valid (3dh adress in open software atheros c file)
14ah MAC address backwards 56 34 12 6d 15 00

MAC addr of device: 00 15 6d 12 34 56 for example

Where byte of antenna switch?

(Last edited by unicorp99 on 20 Mar 2013, 02:20)

How can I try this re-flashing program? It seems to require "activation"?

Sorry, but payment question may be banned on this forum, and best idea: go to http://wa5210g.blogspot.ru/2013/01/mac.html