OpenWrt Forum Archive

Topic: Quallcomm qca9558/TP-Link WDR7500 support

The content of this topic has been archived between 1 May 2014 and 7 May 2018. Unfortunately there are posts – most likely complete pages – missing.

Hello Community.

i need your help.
i have connected an USBtoSerial Cable with a Profilic 2303 chip to the WDR7500v2 from China.
the Cable is only a 3-wire cable with red, white and black colors.

after connecting to serial terminal (windows and mac) i can see the output from the router.
but i cant send any commands like "f" and "enter" to start the failsafe mode.

can anyone advise to get it working?

thanks in advance

@skdubg
The 3-wire cable should be fine. Probably it is just a wring problem.
It could also be a voltage level problem, the router uses 3.3V volt serial levels. If you have any resistors in the serial lines, then reduce them the affected line to a resistor of 150 ohm. Also make sure your terminal software is working correctly. Use Hyperterminal or something that is know to work. COM port settings seem to be OK if you can see the output, it should be 115200 baud, 8 bits, 1 stop bit, no parity, no flow control.

Ck-NoSFeRaTU wrote:

If someone interested there are I placed various files produced during recent experimentations with TL-WDR7500. Content:

- TL-WDR7500 stock firmware (and the one with bootloader).
- Last Archer C7 TP-Link firmware.
- Full mtd backups, printenvs and boot logs on Chinese stock and Last Archer C7 firmwares.
- OpenWRT Ram Image which can be loaded from u-boot to ram, booted and used for backuping original flash content or flashing to different firmware.
- OpenWRT firmwares for Archer C7 and TL-WDR7500
- Trivial TL-WDR7500 target support patch which used for openwrt images above.
- Small video demonstration/tutorial about how you can flash above images even without UART access.

Hint: It is possible to flash firmware through web-interfaces only when firmware is exact for that model, if you want convert TL-WDR7500->Archer C7 or vice versa you must use "mtd -r write image.bin firmware" command from openwrt image console.

PS. Provided AS IS without warranty of any kind. smile OpenWRT images obviously doesn't support qca9880v1 pci-e module (802.11ac wifi) and likely will never be except there is someone interested enough to port current ath10k driver to old ABI of chip firmware. Here are
extracted firmware blobs for qca9880v1 from last archer c7 firmware.

Many thanks Ck-NoSFeRaTU.
I've been away a couple of weeks and yesterday did the serial hack. But then finding your post made everything simple. Great to watch the serial output while using the web interface for updates.

Best,
Don

I managed to obtain a v2 card (CUS223B) and it is working fine in the Archer C7. I first installed the latest snapshot through the original firmware (using the ...-factory.bin file). I then installed ath10k and verified that the original card does not work. Then I replaced the card and immediately got a working 5 GHz (802.11n for now) network.

Next step will be to build OpenWrt with current upstream ath10k and latest hostapd with ac-support.

snk wrote:

I managed to obtain a v2 card (CUS223B) and it is working fine in the Archer C7. I first installed the latest snapshot through the original firmware (using the ...-factory.bin file). I then installed ath10k and verified that the original card does not work. Then I replaced the card and immediately got a working 5 GHz (802.11n for now) network.

Next step will be to build OpenWrt with current upstream ath10k and latest hostapd with ac-support.

Where did you get it from? I had a go at sampling one but would've cost more than the router itself.

(Last edited by qca9558 on 27 Oct 2013, 06:56)

qca9558 wrote:

Where did you get it from? I had a go at sampling one but would've cost more than the router itself.

I have some personal contacts at Qualcomm, and I was able to get one directly from them.

I managed to get a few sample hw v2.0 boards and trying to get working on Gateworks boards.  I also have an Archer C7 to try it in.  I think I am having the same problems as SNK.  I have it working for N but not ac.  Everything I can tell seems like it points back to hosted.  Here is my post with the details of what I have found and what I have tried:

https://forum.openwrt.org/viewtopic.php?pid=216051#p216051

Hi,

I'm new in the forum. I got an Archer C7 and am very interested to try out the firmware in this thread. Just one question... does it support VLAN Tag?

Yes it does support VLAN tagging. However, if you have v1.x of the router, you won't get the 5 GHz ac/n/a wifi to work.

snk wrote:

Yes it does support VLAN tagging. However, if you have v1.x of the router, you won't get the 5 GHz ac/n/a wifi to work.


Ohhh no... I think mine is V1.

Ck-NoSFeRaTU wrote:
mtk wrote:

Hi,how to make  ATH_USER_REGD enable?I can't find a clue in your patch?

Wut? ATH_USER_REGD is a configure option, you can set it when buiiding from sources (make menuconfig). There are only compilled images on the link above. r38351 ones have that option enabled, r38298 doesn't.

mtk wrote:

And what is tplink_fw_header_v2 for?To support 32m flash?

It is needed to support tplink v2 header in firmwares like 130820.

Hello Ck, I got a new firmware from CN TP Link of 131024 as follow for your record-

https://mega.co.nz/#!ZNJTnYRZ!HL_5_VzUHu34z36BOjAcv2gkl-sRugeZ8m_1U2tXz6Y

snk wrote:

I have some personal contacts at Qualcomm, and I was able to get one directly from them.

You are the lucky one ^_^ Looks like it is impossible to acquire v2 board without personal sources now, or it will cost you 100$+ for one piece. >_<

echen wrote:

Hello Ck, I got a new firmware from CN TP Link of 131024 as follow for your record-

https://mega.co.nz/#!ZNJTnYRZ!HL_5_VzUHu34z36BOjAcv2gkl-sRugeZ8m_1U2tXz6Y

Hi, thanks. Mirrored on my site as usual. That one also have v2header+rsasign as 130820:

Filename           : wdr7500v2_cn_3_13_34_up_boot(131024).bin
Filesize           : 0x007e0200 / 8258048

Header Version     : 2
Header Size        : 512
Image Vendor       : 5A87AA52D998D0167C5D
Image Version      : ver. 2.0
Image Size         : 0x007e0200 / 8258048
Image Checksum     : 64 e8 e3 55 b7 4d fb 2f 65 2a 1b 8f 10 c3 59 11  (Valid)

Product Id         : 0x75000002  (TL-WDR7500v2)
Product Version    : 0x00000001
Firmware Version   : 3.13.34

RSA                : A521C45EDC754BD7B4374566F1C2CA21
                   : 707A75D02E0D84C7A3CE130465499663
                   : F213715753498F36D3702A0B0014B0B3
                   : C3DF3C83A9AC354B78E16A11FEF8CE3C
                   : 3578FA24BD4B986DB43F8F5184A7262B
                   : 28E588929FAB414F416545B57C185702
                   : 777E218378E809E0098499DE6AC23118
                   : 62D22D51166186144A385DF3F06E3A58
                   : 
Bootldr Offset     : 0x00000000 /       0
Bootldr Length     : 0x0001a8c4 /  108740

Image2 Size        : 0x007c0000 / 8126464
Image2 Checksum    : 77 c0 91 9c 0b a9 79 69 eb 6a 29 ae 1f 60 04 41  (Valid)

Kernel Offset      : 0x00000200 /     512
Kernel Length      : 0x000d591e /  874782
Kernel Load Address: 0x80002000
Kernel Entry Point : 0x801d3c30
Kernel Checksum    : cf 13 e7 4e 68 c7 48 c1 4d 44 2e 39 3e cb b9 7f  (Not Verified)

Rootfs Offset      : 0x00100000 / 1048576
Rootfs Length      : 0x006c0000 / 7077888

I'm a bit curious. Are they planning to use that kind of firmwares only for chinese models or for international models too... Will see with release of 3.13.34 for archer.

(Last edited by Ck-NoSFeRaTU on 12 Nov 2013, 22:48)

after a while I got to do some benchmarks with an Archer C7 with a hw version 2 card I received from QCA
with latest trunk (with backports of 20131105)
(btw trunk before that on a WDR3600 had problems: I couldn't associate the Archer C7 to that unit)

and with http://patchwork.openwrt.org/patch/4396/
(running with haveged because entropy_pool was really low)

in preparation of later testing with AC modes i use a custom hostapd.conf file (and wpa_supplicant package)

interface=ath0
driver=nl80211
ssid=ath10k
channel=40
country_code=US
ieee80211n=1
ieee80211d=1
ieee80211h=1
ht_capab=[HT40-][SHORT-GI-20][SHORT-GI-40][DSSS_CCK-40]
hw_mode=a
macaddr_acl=0
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=4
wmm_enabled=1

it seems to work:

iw dev ath0 info
Interface ath0
    ifindex 548
    wdev 0x203
    addr 00:03:7f:48:da:38
    ssid ath10k
    type AP
    wiphy 0
    channel 36 (5180 MHz), width: 40 MHz, center1: 5190 MHz

Results with iperf: ath10k
Archer C7 -> WLAN -> Client (ath9k_htc card: WNDA3200 2x2 card so only "300Mbit/s" speed)
[  4]  0.0-300.0 sec  2.14 GBytes  61.3 Mbits/sec (max: 83Mbit/s ; min: 1Mbit/s)

compared to Archer -> LAN -> Client
[  4]  0.0-100.0 sec  3.89 GBytes   334 Mbits/sec

iperf-PC -> LAN -> WDR3600 -> WLAN (2x2 @ 2.4GHz highly populated) -> Archer C7 -> WLAN (2x2 @5GHz) -> PC
avg 25.7 Mbit/s

During the test there were periods lasting 30 seconds where the transfer rate broke down to 1Mbit/s from the "max" of >70Mbit/s
However the avg. transfer rates seem to be normal compared to a 2x2 setup: http://www.smallnetbuilder.com/lanwan/router-charts/bar/113-5-ghz-dn-c
So I think these 30sec "windows" are only some artifacts / protocol inherent

Archer C7 with hw v2 trying to setup a 802.11ac SSID with DFS etc.

# wlan0 - with full debug its: insmod ath10k_core debug_mask=0xffffffff
rmmod ath10k_pci; rmmod ath10k_core; insmod ath10k_core; insmod ath10k_pci

root@OpenWrt:/# hostapd -P /var/run/hostapd.pid -B /etc/hostapd_radio1.conf
Configuration file: /etc/hostapd_radio1.conf
[  176.230000] ath10k: MSI-X didn't succeed (-1), trying MSI
[  176.240000] ath10k: MSI didn't succeed (-1), trying legacy INTR
[  176.270000] ath10k: legacy interrupt handling
[  177.490000] ath10k: UART prints disabled
[  177.500000] ath10k: firmware 999.999.0.636 booted
[  177.510000] ath10k: htt target version 2.1
[  177.520000] IPv6: ADDRCONF(NETDEV_UP): ath0: link is not ready
ath0: interface state UNINITIALIZED->COUNTRY_UPDATE
ACS: Automatic channel selection started, this may take a bit
ath0: interface state COUNTRY_UPDATE->ACS
ath0: ACS-STARTED 
ath0: ACS-COMPLETED freq=5745 channel=149
ath0: interface state ACS->HT_SCAN
ath0: interface state HT_SCAN->DFS
ath0: DFS-CAC-START freq=5745 chan=149 sec_chan=1

but

iw dev wlan0 info
Interface wlan0
        ifindex 8
        wdev 0x200000001
        addr 00:03:7f:48:da:38
        type AP
        wiphy 2

hostapd.conf:

interface=wlan0
driver=nl80211
ssid=ath10k

country_code=US
ieee80211n=1
ieee80211d=1
ieee80211h=1
ieee80211ac=1

ht_capab=[HT40+][SHORT-GI-20][SHORT-GI-40][DSSS_CCK-40]
vht_capab=[MAX-MPDU-11454][SHORT-GI-80][RXLDPC][TX-STBC-2BY1][RX-ANTENNA-PATTERN]

hw_mode=a
macaddr_acl=0
logger_syslog=-1
logger_syslog_level=4
logger_stdout=-1
logger_stdout_level=0
wmm_enabled=1

vht_oper_chwidth=1
vht_oper_centr_freq_seg0_idx=42

something is still wrong ... after STRG+C i get "^Chostapd_free_hapd_data: Interface ath0 wasn't started"
i added the interface with

# does not work: iw phy phy0 interface add ath0 type master
ip addr add 192.168.10.1 broadcast 192.168.10.255 dev wlan0

... anyway i need to compile an image for Sitecom WLR8100 too ... and there is other stoff to work on too

edit: edited to wlan0, maybe update hostapd/ath10k to fix instability

(Last edited by zloop on 26 Nov 2013, 00:14)

Have you noticed that DFS support was introduced to ath10k only very recently - it is not included in trunk yet. I made a patch which includes the DFS bits, you could try it:

http://ltl.tkk.fi/~malaakso/misc/80211ac.patch

Thanks for the hint!

I somehow overlooked / confused the submission dates (mailing list - ath10k tree - (backports release) - openwrt mac80211)
oh there is an update of your patch smile - so much stuff to keep track ...
I only had the version from 07.11.2013 smile

I'll try to update in the following days

i didn't try ath9k yet - since that router is somehow "production" ready and the other routers still need serial access to debug

(Last edited by zloop on 27 Nov 2013, 23:47)

Hello
Long time reader,first time poster here...I've a question for Archer C7 owners:I want to buy this router,and maybe someone here can tell mewhat is the maximum wan-to-lan throughput using an pppoe connection (ftth fiber) ?I'm not interested in wlan so much,I need only maximum speed on wire,and I know there are a lot of routers are with great speed on dhcp wan-lan,,but not for pppoe connection,which is more demanding on cpu.
Thanks a lot!
Best Regards!

viasat wrote:

Hello
Long time reader,first time poster here...I've a question for Archer C7 owners:I want to buy this router,and maybe someone here can tell mewhat is the maximum wan-to-lan throughput using an pppoe connection (ftth fiber) ?I'm not interested in wlan so much,I need only maximum speed on wire,and I know there are a lot of routers are with great speed on dhcp wan-lan,,but not for pppoe connection,which is more demanding on cpu.
Thanks a lot!
Best Regards!

I've been running a server through it with really good results on OpenWRT. The original firmware on the C7 would crap out during large file transfers (running a VPN and sending huge files to external sources), but I have no such issues with the OpenWRT firmware. My throughput seems to be capped by my ISP, not the router, as I'm maxing out my CPU usage on it around 30-45%. This is while running OpenVPN, 4 minecraft servers, a Teamspeak server, and a Plex Media Server (in addition to occasional torrents and regular usage on two other computers)

Let me know if you want more specific data!

viasat wrote:

Hello
Long time reader,first time poster here...I've a question for Archer C7 owners:I want to buy this router,and maybe someone here can tell mewhat is the maximum wan-to-lan throughput using an pppoe connection (ftth fiber) ?I'm not interested in wlan so much,I need only maximum speed on wire,and I know there are a lot of routers are with great speed on dhcp wan-lan,,but not for pppoe connection,which is more demanding on cpu.
Thanks a lot!
Best Regards!

Maximum PPPoE on this board will be around 300mbit/s in half duplex. Hardware NAT basically works only on raw connections so cpu is a limit there. This model is good if you want openwrt or other alternative firmware on it.

Otherwise if you are fine with OEM firmwares then ralink based ones with proper firmware will be better, like Zyxel Keenetic Giga II or ASUS RT-N56U, their Hardware NAT can pass over 900mbit/s in full duplex through PPPoE.

(Last edited by Ck-NoSFeRaTU on 2 Dec 2013, 02:45)

pyr0ball wrote:

Is this the right card to get 5ghz working with Ath10k?

http://www.alibaba.com/product-free/147172242/WLE900n5_18_802_11ac_5GHz_miniPCIe.html

Also I'm unfamiliar with how to get ath10k working on my C7 once I install the new card, and regrettably, the dev-chat stuff is a little over my head. Any chance for a walkthrough?

I think the card you linked does will not work because of the physical dimensions.

- Does your Archer C7 has hw ver 1 card ? :
Check with a new image on bootlog and/or the writing on the chip if possible

- Check the physical dimensions
The dimensions are written down in their respective datasheets:
http://www.compex.com.sg/Datasheets/WLE900V5-23_Dsv1.0.0.pdf
http://www.compex.com.sg/Datasheets/WLE900V5-18_Dsv1.0.0.pdf
I don't know if the dimensions were change recently but the dimensions are matching the WLE900V5-23 or the WLE900NX
by the looks of it (not finding a datasheet for this card) but
http://www.alibaba.com/product-free/147847332/WLE900NX_802_11ac_2_4G_5GHz.html

@Ck-NoSFeRaTU
Thank you for your answer,now I've big doubts what to buy...My ISP is giving TL-WDR3600 free for new customers ,so I was thinking that Archer C7 will be better for gigabit wan-to-lan,but it seems that I was wrong,it's not enough.
I've read a lot about Asus and ralink,but 2 things puts me off: first,not opensource firmware(like openwrt,tomato...),only Padawan's mods ,second the strange design of RT-N56U and RT-N65u,problems with overheating ,weak wifi range on both bands.Do you have any other model to recommend me?I'm trying to read some opinions here http://forum.ixbt.com/?id=14 ,but my Russian is second to none,and google translate doesn't help me to much...
Thanks again!
Cheers!

zloop wrote:

I think the card you linked does will not work because of the physical dimensions.

- Does your Archer C7 has hw ver 1 card ? :
Check with a new image on bootlog and/or the writing on the chip if possible

- Check the physical dimensions
The dimensions are written down in their respective datasheets:
http://www.compex.com.sg/Datasheets/WLE900V5-23_Dsv1.0.0.pdf
http://www.compex.com.sg/Datasheets/WLE900V5-18_Dsv1.0.0.pdf
I don't know if the dimensions were change recently but the dimensions are matching the WLE900V5-23 or the WLE900NX
by the looks of it (not finding a datasheet for this card) but
http://www.alibaba.com/product-free/147847332/WLE900NX_802_11ac_2_4G_5GHz.html

That card is just a standard card size instead of the extended one. Its the same exact model as the one linked above. Currently I've got a HW v.1 card that came with the router. This card has the same minipci slot connector, and the same holes at the top where the screws go thru, it's just skinnier, like this:

http://ecx.images-amazon.com/images/I/41Y-ujMAmjL._SY300_.jpg

(Last edited by pyr0ball on 3 Dec 2013, 05:25)

Ck-NoSFeRaTU wrote:

If someone interested there are I placed various files produced during recent experimentations with TL-WDR7500. Content:

- TL-WDR7500 stock firmware (and the one with bootloader).
- Last Archer C7 TP-Link firmware.
- Full mtd backups, printenvs and boot logs on Chinese stock and Last Archer C7 firmwares.
- OpenWRT Ram Image which can be loaded from u-boot to ram, booted and used for backuping original flash content or flashing to different firmware.
- OpenWRT firmwares for Archer C7 and TL-WDR7500
- Trivial TL-WDR7500 target support patch which used for openwrt images above.
- Small video demonstration/tutorial about how you can flash above images even without UART access.

Hint: It is possible to flash firmware through web-interfaces only when firmware is exact for that model, if you want convert TL-WDR7500->Archer C7 or vice versa you must use "mtd -r write image.bin firmware" command from openwrt image console.

PS. Provided AS IS without warranty of any kind. smile OpenWRT images obviously doesn't support qca9880v1 pci-e module (802.11ac wifi) and likely will never be except there is someone interested enough to port current ath10k driver to old ABI of chip firmware. Here are
extracted firmware blobs for qca9880v1 from last archer c7 firmware.

Hi, I just got the Archer C7, and it is the V1.
The default firmware is really lacking, so, I decided to try openwrt.
After the flash, using your bin, I did the telnet to 192.168.1.1 and set the password.
Then, after that, I waited about 5 mins, for cable modem to resync to the router.
I opened a web page, and did 192.168.1.1 and it couldn't connect. sad
I then tried to ssh into it, and that does work.
I tried to ping openwrt.org, says unknown.
I tried to ping 173.194.46.73 and it says unreachable.
I ping the client machines, and those work OK.
The cable modem is at http://192.168.100.1

So, how do I get WAN to work ?  Everything is in default mode, I didn't change anything but the password...

(Last edited by ACBlaze on 6 Dec 2013, 21:41)

ACBlaze wrote:

Then, after that, I waited about 5 mins, for cable modem to resync to the router.

Are you sure that openwrt would do it automagically?

ACBlaze wrote:

I opened a web page, and did 192.168.1.1 and it couldn't connect. sad

I suppose thats because LuCI is not preinstalled and you should install it by hand.

ACBlaze wrote:

I then tried to ssh into it, and that does work.

So the device is working as expected I believe.