See 'WikiDevi' @ the Internet Archive (MW XML, Files, Images)
upgraded MW to 1.30 - maybe things are slightly less broken

D-Link DAP-1522 rev A1

From WikiDevi
Jump to: navigation, search

D-Link DAP-1522 A1

Manuf/OEM/ODM Alpha Networks WAP-ND01

FCC approval date: 19 March 2008
UPC: 790069311864 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

B001769K3O (Flag of the United States.svg, On Amazon, On CCC)
multiple revisions of this device, use caution

Type: access point, bridge

Industry Canada ID: 4216A-AP1522

Power: 5 VDC, 2 A
Connector type: barrel

CPU1: Ralink RT2880
FLA1: 4 MiB
4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
(Spansion S29AL032D90TFI04)
RAM1: 32 MiB
33,554,432 B
262,144 Kib
32,768 KiB
256 Mib
0.0313 GiB
(ProMOS V54C3256164VDI7)

Expansion IFs: none specified

WI1 chip1: Ralink RT2880
WI1 chip2: Ralink RT2850
WI1 802dot11 protocols: abgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: U.FL

ETH chip1: Ralink RT2880
Switch: Realtek RTL8366SR
LAN speed: 1G
LAN ports: 4


Stock FW OS: Linux 2.4.30

Default SSID: dlink (38 addl. devices)
Default IP address:
the IP is used by 63 additional devices
of which 63 are D-Link devices
Default login user: admin
Default login password: blank
admin:blank credentials used by 316 additional devices
of which 180 are D-Link devices

802dot11 OUI: 00:22:B0 (4 E, 10 W, 2008), 00:26:5A (9 E, 11 W, 2008), 34:08:04 (8 E, 10 W, 2010)
Ethernet OUI: 00:22:B0 (4 E, 10 W, 2008), 00:26:5A (9 E, 11 W, 2008), 34:08:04 (8 E, 10 W, 2010)

For a list of all currently documented Ralink chipsets with specifications, see Ralink.

Xtreme N Duo Wireless Bridge/Access Point

 • Support page

OEM/ODM: Alpha Networks WAP-ND01 (8WAPND01.1)

The third receive chain appears to be disabled (despite there being

three U.FL connectors, there are only two antennas pictured in
the FCC internal photos and the test report states 2T2R status).

GPL Code[edit]





Header J1

Left <--- [|Rx|___|3.3V|GND|Tx|] --> Right


Boot log[edit]

Boot log
U-Boot 1.1.3 (Jun  3 2008 - 15:48:40) Build 001--ALPHA_v011
Board: RT2880 DRAM:  32 MB
        twe0 set to <NULL>
        toe0 set to <NULL>
        Set up sector start address BC400000
ASIC -VerB/C (MAC to MAC Mode)
Total memory = 32Mbytes
Date:Jun  3 2008  Time:15:48:40
Eth0 (10/100-M)
Hit any key to stop autoboot:  0
## Booting image at bc440000 ...
   Image Name:   7zip Linux Kernel
   Created:      1970-01-01   0:00:00 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    -1 Bytes = 4096 MB
   Load Address: 8a000000
   Entry Point:  8a000000
   Uncompressing Kernel Image with LZMA ...

Starting kernel ...
ramsize = 32 MBytes
rambase not set, set to default (0x08000000)
[0,8a1ef950]: base<0a000000> size<02000000> type<Free RAM memory>

 The CPU feqenuce set to 266 MHz
CPU revision is: 0001906c
icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0
dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0
i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Linux version 2.4.30 (freddy@RangeRover) 
(gcc version 3.3.5) #1 Fri Jan 14 10:42:49 CST 2011
Determined physical RAM map:
 memory: 02000000 @ 0a000000 (usable)
On node 0 totalpages: 49152
zone(0): 49152 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock1 noinitrd
cause = 70c0807c, status = 1000ff00
calculating r4koff... 002896a0(2660000)
CPU frequency 266.00 MHz
Using 133.000 MHz high precision timer.
Calibrating delay loop... 265.42 BogoMIPS
Memory: 28652k/32768k available (1518k kernel code, 
4116k reserved, 92k data, 68k init, 0k highmem)
Dentry cache hash table entries: 32768 (order: 6, 262144 bytes)
Inode cache hash table entries: 16384 (order: 5, 131072 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 16384 (order: 4, 65536 bytes)
Page-cache hash table entries: 65536 (order: 6, 262144 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (
devfs: boot_options: 0x1
squashfs: version 3.1 (2006/08/19) Phillip Lougher
pty: 256 Unix98 ptys configured
Ralink RT2880 gpio driver initialized
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0x300500 (irq = 9) is a 16550A
ttyS01 at 0x300c00 (irq = 8) is a 16550A
RA2880 Ethernet Driver Initilization. v1.01  256 rx/tx descriptors allocated!
 Amd/Fujitsu Extended Query Table v1.1 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Flash device: 0x400000 at 0xbc400000
ELBOX Physically mapped flash: squashfs filesystem found at block 832
Creating 8 MTD partitions on "ELBOX Physically mapped flash":
0x000d0080-0x00400000 : "rootfs"
0x00040000-0x003e0000 : "upgrade"
0x003f0000-0x00400000 : "rgdb"
0x00030000-0x00040000 : "bdcfg"
0x003e0000-0x003f0000 : "langpack"
0x00000000-0x00400000 : "flash"
0x00000000-0x00030000 : "Boot"
0x00030000-0x00032000 : "Boot Config"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 2048 buckets, 16Kbytes
TCP: Hash tables configured (established 16384 bind 32768)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.8 Ben Greear <>
All bugs added by David S. Miller <>
Load RT2880 Timer Module(Wdg/Soft)
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing prom memory: 0kb freed
Freeing unused kernel memory: 68k freed
console started
trying to start /sbin/init
init started:  BusyBox v1.00 (2011.01.14-02:45+0000) multi-call binary
Starting pid 10, console /dev/tts/1: '/etc/init.d/rcS'
Algorithmics/MIPS FPU Emulator v1.5
Mounting proc and var ...
Inserting modules ...
Start xmldb ...
[/etc/scripts/misc/] get ...
[/etc/scripts/misc/] ...
[/etc/defnodes/] ...
PHP [/etc/defnodes/S11setnodes.php] ...
PHP [/etc/defnodes/S12features.php] ...
PHP [/etc/defnodes/S20setnodes.php] ...
SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,5)
mount: Mounting /dev/mtdblock/5 on /www/locale/alt failed: Invalid argument
PHP [/etc/defnodes/S40brand.php] ...
[/etc/scripts/misc/] Done !!
[/etc/templates/] ...
[/etc/templates/] ...
[/var/run/] ...
Inserting modules ...
insmod: /lib/modules/2.4.30: No such file or directory
Using /lib/modules/si2c.o
RTL8366SR i2cphy...
Phy init failed!!
Phy init retry success!!
RGMII phy data=10c
Set RGMII delay time SUCCESS
MDIO_CFG = 1f01dc01
GDMA1_FWD_CFG = 10000
rt2880_eth_setup: DSP_EN OFF version driver
[/etc/init.d/] done!
start Layout ...
[/etc/scripts/] ...
[/var/run/] ...
Start bridge layout ...
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
br0: port 1(eth0) entering forwarding state
br0: topology change detected, propagating
start LAN ...
[/etc/templates/] ...
[/var/run/] ...
Bridge mode selected, LAN is disabled !
start web server ...
[/etc/templates/] start ...
[/var/run/] ...
Starting HTTPD ...
start fresetd ...
enable LAN ports ...
Factory reset time : 5 secs
System reset time  : 1 secs
WPS command : [/etc/templates/ pbc &]
[/etc/scripts/] ...
 Generate channel table according to the country code...
start WAN ...
Set WAN port media type 0
Set WAN port greenethernet type 1
Enable green ethernet successed.
[/etc/templates/] start ...
[/var/run/] ...
Bridge mode selected !
DHCP client on WAN(br0) CloneMAC() ...
start telnet daemon ...
Start telnetd ...
start DHCP server
[/etc/templates/] ...
[/var/run/] ...
Stop DHCP server (br0) ...
never heard of command [dhcp_server_enable]
        addbr           <bridge>                add bridge
        addif           <bridge> <device>       add interface to bridge
        delbr           <bridge>                delete bridge
        delif           <bridge> <device>       delete interface from bridge
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info

        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        setgcint        <bridge> <time>         set garbage collection interval
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        stp             <bridge> <state>        turn stp on/off
        apmode          <bridge> <state>        pass AP operation mode to bridge
        setprimaryvid           <bridge> <vid>  set primary vlan ID
        igmp_snooping           <bridge> <state>        turn igmp snooping on/off
        deliver_control         <bridge> <state>        turn deliver_controlk on/off
        setmataddr      <bridge> <address>      set mac cloning address
        setmatmode      <bridge> <state>        set mac cloning mode
        scanlanmacs     <bridge>                scan lan port mac address
        setwpsstat      <bridge>                set current wps work status
        showmataddr     <bridge>                show current ra0 address
        block_aparray   <bridge> <state>                set this if aparray is enabled
        block_neap      <bridge> <state>                set this if aparray is enabled
Start DHCP server (br0) ...
start NEAP ...
[/etc/templates/] start ...
[/var/run/] ...
Start Neap Server ...
start NEAPC ...
[/etc/templates/] start ...
[/var/run/] ...
not pure AP mode, so disable AP ARRAY ...
Start NeapC Client ...
aparraymsg: not found
: cannot create
Stop apneaps Server ...
: not found
start Microsoft LLDP ...
[/etc/templates/] ...
/var/run/ cannot open
[/etc/templates/] restart ...
[/var/run/] ...
Start LLD2 daemon ...
[/var/run/] ...
Bridge mode selected !
Stop DHCP client on WAN(br0) ...
start NetBIOS ...
[/etc/templates/] ...
[/var/run/] ...
Enable NetBIOS!
[/etc/templates/] ...
[/etc/init.d/] done!
rcS done!
Starting pid 497, console /dev/tts/1: '/bin/sh'

BusyBox v1.00 (2011.01.14-02:45+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

# [/var/run/] ...
[/etc/templates/] ...
[/var/run/] ...
Bridge mode selected !
DHCP client on WAN(br0) CloneMAC() ...
[/etc/templates/] ...
[/etc/templates/] start ...
[/var/run/] ...
Start WLAN interface ra0 ...
WLAN is disabled !
[/etc/templates/] restart ...
[/etc/templates/] restart ...
[/var/run/] ...
Bridge mode selected !
Stop DHCP client on WAN(br0) ...
[/etc/templates/] ...
[/var/run/] ...
Interface is wanif=eth0 wlanif=ra0... OK
Start QOS system ...
QOS is disabled, because WLAN setting.
[/etc/templates/] restart ...
[/var/run/] ...
[/etc/templates/] ...
[/var/run/] ...
Bridge mode selected !
Start WAN(br0), ...
[/etc/templates/] ...
[/var/run/] ...
[/etc/templates/] ...
NTP client is disabled ...
[/etc/templates/] ...
[/var/run/] ...
Starting UPnP ...
[/var/run/] ...
Interface is wanif=v_eth0 wlanif=v_ra0... OK
Start traffic manager system ...
traffic manager is disabled.



Type "q" to escape automatic boot and reach U-boot's prompt.


RT2880 # ?
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvmlinux - Boot from an vmlinux in memory
cache_set   - Specify the header segment size in byte !!
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
go      - start application at address 'addr'
rt2880_hdrlen   - Specify the header segment size in byte !!
help    - print online help

iminfo  - print header information for application image
loadb   - load binary file over serial line (kermit mode)
loop    - infinite loop on address range
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
pci   - Display to all DMA status  !!
printenv- print environment variables
protect - enable or disable FLASH write protection
pse_reset  !!
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
sdd   - Display to all DMA status  !!
sdp   -
sdram_width   - Specify the SDRAM bus width !!
setenv  - set environment variables
sleep   - delay execution for some time
tftpboot- boot image via network using TFTP protocol
version - print monitor version


RT2880 # printenv
bootcmd=run runtime
update_bootloader=protect off $(bootstart) $(bootend);erase $(bootstart) $(bootend);cp.b $(loadstart) $(bootstart) $(bootsize)
update_runtime=protect off $(runtimestart) $(runtimeend);erase $(runtimestart) $(runtimeend);cp.b $(loadstart) $(runtimestart) $(runtimesize)
clean_env=protect off $(envstart) $(envend); erase $(envstart) $(envend);protect on $(envstart) $(envend)
runtime=bootm $(runtimestart) $(runtimeloadstart)
ethact=Eth0 (10/100-M)
Environment size: 868/8188 bytes


dev:    size   erasesize  name
mtd0: 00400000 00010000 "ELBOX Physically mapped flash"
mtd1: 0032ff80 00010000 "rootfs"
mtd2: 003a0000 00010000 "upgrade"
mtd3: 00010000 00010000 "rgdb"
mtd4: 00010000 00010000 "bdcfg"
mtd5: 00010000 00010000 "langpack"
mtd6: 00400000 00010000 "flash"
mtd7: 00030000 00010000 "Boot"
mtd8: 00002000 00010000 "Boot Config"

Creating 8 MTD partitions on "ELBOX Physically mapped flash":
0x000d0080-0x00400000 : "rootfs"
0x00040000-0x003e0000 : "upgrade"
0x003f0000-0x00400000 : "rgdb"
0x00030000-0x00040000 : "bdcfg"
0x003e0000-0x003f0000 : "langpack"
0x00000000-0x00400000 : "flash"
0x00000000-0x00030000 : "Boot"
0x00030000-0x00032000 : "Boot Config"


rootfs / rootfs rw 0 0
/dev/root / squashfs ro 0 0
none /dev devfs rw 0 0
none /proc proc rw 0 0
ramfs /var ramfs rw 0 0