See 'WikiDevi' @ the Internet Archive (MW XML, Files, Images)
upgraded MW to 1.30 - maybe things are slightly less broken

Edimax BR-6478AC

From WikiDevi
Jump to: navigation, search

Edimax BR-6478AC V1.0A

FCC approval date: 30 April 2013
(Est.) release date: 10 April 2013
UPC: 649659019805 (UPC DB, On eBay)
EAN: 4710700929469 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

ASIN
B00CEEP3DE (Flag of the United States.svg, On Amazon, On CCCmultiple uses)
multiple revisions of this device, use caution

Type: wireless router

FCC ID: NDD9564781213

Power: 5 VDC, 2 A
Connector type: barrel

CPU1: Realtek RTL8197D (660 MHz)
FLA1: 4 MiB
4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
(Macronix MX25L3206EM2I-12G)
RAM1: 64 MiB
67,108,864 B
524,288 Kib
65,536 KiB
512 Mib
0.0625 GiB
(Nanya NT5TU32M16DG-AC)

Expansion IFs: Mini PCIe
Mini PCIe slots: 1
Serial: yes, internal, unpopulated, 3.3V TTL, 4-pin header, J1, (38400,8,N,1)

WI1 module: Edimax EW-7822MAC
WI1 module IF: Mini PCIe (half)
WI1 chip1: Realtek RTL8812AR
WI1 802dot11 protocols: an+ac
WI1 MIMO config: 2x2:2
WI1 antenna connector: U.FL
WI2 chip1: Realtek RTL8192CE
WI2 802dot11 protocols: bgn
WI2 MIMO config: 2x2:2
WI2 antenna connector: U.FL

ETH chip1: Realtek RTL8197D
Switch: Realtek RTL8367RB
LAN speed: 10/100/1000
LAN ports: 4
WAN speed: 10/100/1000
WAN ports: 1

abgn+ac

Additional chips
5 GHz SPDT Switch w/ LNA;Skyworks;SKY85601;SKY, 85601, 229CU;2;;16-pin QFN;2.5x2.5mm;

Stock bootloader: rtkload

Stock FW OS: Linux 2.6.30

Default SSID: edimax.setup (3 addl. devices)
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 271 additional devices
of which 55 are Edimax devices
Default login user: admin
Default login password: 1234
admin:1234 credentials used by 144 additional devices
of which 68 are Edimax devices

802dot11 OUI: 80:1F:02 (6 E, 14 W, 2011)
Ethernet OUI: 80:1F:02 (6 E, 14 W, 2011)

 FCC ID
Comtrend WR-5887L9VWR5887
NDD9564781213
Edimax EW-7822MACNDD9564781213
Manhattan 525480NDD9564781213
SparkLAN WPET-232ACNTX2-RTL8812AE
NDD9564781213
ZyXEL X650NDD9564781213
For a list of all currently documented Realtek chipsets with specifications, see Realtek.
Regarding third party firmware support, Realtek SoC support in OpenWrt
+ (success) RTL8196C port status. on the OpenWrt Forum
and the Realtek thread on the DD-WRT Forum may be of interest.


AC1200 Wireless Concurrent Dual-Band Gigabit Router

 • Product page  • Datasheet

The FCC test report indicates that the Edimax GR-478AC
and the ZyXEL X650 are also covered by the same FCC ID.

  • "1244-010000842-50Z" is silkscreened on the main board of the FCC EUT.
"1244-00000861-50Z_ES" is silkscreened on the wireless module of the same device.
  • "1244-010000892-50Z" is silkscreened on the main board of a production model.
"1244-00000861-50Z" is silkscreened on the wireless module of the same device.

This device is likely using RTL8367R as the Switch IC.

By default, the device broadcasts the SSID of edimax.setup on both bands.

  • The power adapter included with the device is likely a DVE
DSA-12PFA-05 FUS 050200 (100-240V 50/60Hz, 0.5A -> 5VDC 2A).

Reviews[edit]

CPU: Realtek RTL8197D @660MHz
Switch: Realtek RTL8367RB GbE
RAM: Nanya NT5TU32M16DG 64MB
Flash: Macronix MX25L3206E 4MB
WLAN 2.4GHz: Realtek RTL8192CE 2T2R 802.11bgn
WLAN 5GHz: Realtek RTL8812AR 2T2R 802.11ac
USB: 2x USB 2.0 (unpopulated, unsoldered)

Serial[edit]

Pinout[edit]

The pinout used would seem to be a standard one used by Edimax..

J1 [3.3] (RxD) (GND) (TxD)

----> to PCIe WI module

Info derived from[edit]

boot log
Booting...
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
@ chip__no chip__id mfr___id dev___id cap___id size_sft dev_size chipSize
@ 0000000h 0c22016h 00000c2h 0000020h 0000016h 0000000h 0000016h 0400000h
@ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt chip_clk chipName
@ 0010000h 0000040h 0001000h 0000400h 0000100h 0000010h 000002dh MX25L3205D
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

---RealTek(RTL8196D)at 2013.01.02-14:19+0800 v0.6 [16bit](659MHz)
no rootfs signature at 000E0000!
no rootfs signature at 000F0000!
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x80003470
CPU revision is: 0000dc02
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1
icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B
NR_IRQS:48
PID hash table entries: 256 (order: 8, 1024 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 49936k/65536k available (2692k kernel code,
15524k reserved, 712k data, 108k init, 0k highmem)
Calibrating delay loop... 658.63 BogoMIPS (lpj=3293184)
Mount-cache hash table entries: 512
net_namespace: 528 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.11)
msgmni has been set to 97
io scheduler noop registered
io scheduler cfq registered (default)
Realtek GPIO Driver for Flash Reload Default
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V1.0
Realtek WLAN driver - version 1.6 (2013-02-21)
 wlan_index:0  0, 134,0xba000000,0xb8b30000,14
=====>>INSIDE rtl8192cd_init_one <<=====
PCIE reset (0)
Do MDIO_RESET
Find Port=1 Device:Vender ID=881210ec
vendor_deivce_id=881210ec

 found 8812 !!!
8812 mp chip !!
wlan0 (): not using net_device_ops yet
wlan0-wds0 (): not using net_device_ops yet
wlan0-wds1 (): not using net_device_ops yet
wlan0-wds2 (): not using net_device_ops yet
wlan0-wds3 (): not using net_device_ops yet
wlan0-wds4 (): not using net_device_ops yet
wlan0-wds5 (): not using net_device_ops yet
wlan0-wds6 (): not using net_device_ops yet
wlan0-wds7 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan0-vxd (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan0-va0 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan0-va1 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan0-va2 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan0-va3 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
 wlan_index:1  0, 134,0xb9000000,0xb8b10000,11
=====>>INSIDE rtl8192cd_init_one <<=====
PCIE reset (0)
Do MDIO_RESET
Find Port=0 Device:Vender ID=819110ec
vendor_deivce_id=819110ec
wlan1 (): not using net_device_ops yet
wlan1-wds0 (): not using net_device_ops yet
wlan1-wds1 (): not using net_device_ops yet
wlan1-wds2 (): not using net_device_ops yet
wlan1-wds3 (): not using net_device_ops yet
wlan1-wds4 (): not using net_device_ops yet
wlan1-wds5 (): not using net_device_ops yet
wlan1-wds6 (): not using net_device_ops yet
wlan1-wds7 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan1-vxd (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan1-va0 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan1-va1 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan1-va2 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
wlan1-va3 (): not using net_device_ops yet
=====>>EXIT rtl8192cd_init_one <<=====
pwlan0 (): not using net_device_ops yet

Probing RTL8186 10/100 NIC-kenel stack size order[3]...
chip name: 8196C, chip revid: 0
NOT YET
-----share pin reg back to gpio mode-----
eth0 (): not using net_device_ops yet
eth0 added. vid=9 Member port 0x1...
eth1 (): not using net_device_ops yet
eth1 added. vid=8 Member port 0x10...
eth2 (): not using net_device_ops yet
eth2 added. vid=9 Member port 0x2...
eth3 (): not using net_device_ops yet
eth3 added. vid=9 Member port 0x4...
eth4 (): not using net_device_ops yet
eth4 added. vid=9 Member port 0x8...
eth7 (): not using net_device_ops yet
eth5 added. vid=9 Member port 0x0...
peth0 (): not using net_device_ops yet
[peth0] added, mapping to [eth1]...
SPI INIT
 ------------------------- Force into Single IO Mode ------------------------
|No chipID  Sft chipSize blkSize secSize pageSize sdCk opCk      chipName    |
| 0 c22016h  0h  400000h  10000h   1000h     100h   50    0        MX25L3206E|
 ----------------------------------------------------------------------------
SPI flash(MX25L3206E) was found at CS0, size 0x400000
Creating 2 MTD partitions on "flash_bank_1":
0x000000000000-0x000000400000 : "boot+cfg+linux"
0x000000130000-0x000000400000 : "root fs"
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
dnshijack
Netlink[Kernel] create socket for igmp ok.
Realtek FastPath:v1.03
VFS: Mounted root (squashfs filesystem) readonly on device 31:1.
Freeing unused kernel memory: 108k freed
init started: BusyBox v1.11.1 (2013-10-31 22:06:17 CST)
starting pid 17, tty '': '/etc/init.d/rcS'
mount: mounting none on /dev/pts failed: No such device
insmod: cannot insert '/bin/islpci.o': Cannot allocate memory

starting pid 22, tty '': '-/bin/sh' console.

BusyBox v1.11.1 (2013-10-31 22:06:17 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/bin/init.sh: line 82: cannot create /proc/sw_nat: nonexistent directory
flash default
==> Flash Default <==
==> init WAN MTU
kill: you need to specify whom to kill
Close Wan Interface!!
==> WAN MTU 1500
********************************************
*
* Initialize wlan0 interface
*
********************************************
----> set 5G interface=wlan0
==> Set Tx power high level
==>US and EUR middle+high use US Table
set 5G TX Power: 0
C1: 0 txpower.sh
5G wlan0 MIB SYNC!
5G wlan0 init done!
********************************************
*
* Initialize wlan1 interface
*
********************************************
-----> IsVAP=wlan1 VAP=
==> Set Tx power high level
==>US and EUR middle+high use US Table
set 2.4G TX Power: 0
A1: 0 B1: 0 C1: 0 txpower.sh
Setup BRIDGE interface
==> Router bridge
==> COMMAND:bridge.sh br0 eth0 wlan0 wlan1 wlan0-va0 wlan0-va1 
   wlan0-va2 wlan0-va3 wlan1-va0 wlan1-va1 wlan1-va2 wlan1-va3
ifconfig: ioctl 0x8913 failed: No such device
ifconfig: ioctl 0x8913 failed: No such device
bridge br0 doesn't exist; can't delete it
Setup bridge...
device eth0 entered promiscuous mode
device wlan0 entered promiscuous mode
CP: MacInit_8812===>>=====>LLT_table_init_8812
LLT_table_init_8812<=====
BEQ_DESA = 0x0043f000 0x0043f000
DONE
[PHY_ConfigMACWithParaFile][MAC_REG_8812_n]
[PHY_ConfigBBWithParaFile][PHY_REG_8812_n_extlna]
[PHY_ConfigBBWithParaFile][PHY_REG_PG_8812_new]
[PHY_ConfigBBWithParaFile][AGC_TAB_8812_n_extlna]
[phy_RF6052_Config_ParaFile][RadioA_8812_n_extlna]
[phy_RF6052_Config_ParaFile][RadioB_8812_n_extlna]
 <=== FirmwareDownload8812()
[PHY_ConfigTXPwrTrackingWithParaFile][REG_TXPWR_TRK_8812]
0x55d = 0x1
8812 Enable Tx 2 Path
0x838 B(1)= 0, 0x456 = 0x32
device wlan1 entered promiscuous mode
[PHY_ConfigMACWithParaFile][MACPHY_REG_92C]
===> Load_92C_Firmware
<=== Load_92C_Firmware
[PHY_ConfigTXPwrTrackingWithParaFile][REG_TXPWR_TRK]
0x55d = 0xff
br0: port 3(wlan1) entering forwarding state
br0: port 2(wlan0) entering forwarding state
br0: port 1(eth0) entering forwarding state
Static DHCP Leases disable!
br0: port 1(eth0) entering disabled state
br0: port 1(eth0) entering forwarding state
Setup WAN interface
kill: you need to specify whom to kill
Close Wan Interface!!
-->WAN_MODE:0
device eth1 is not a slave of br0
device eth0 is already a member of a bridge; can't enslave it to bridge br0.
**********************************************************************
*                          Enable WSC_UPnP                           *
**********************************************************************
**********************************************************************
*                            Enable LLTD                             *
**********************************************************************
**********************************************************************
*                       Enable GPIO Interrupt                        *
**********************************************************************
udhcpc (v1.11.1) started
into eth1.deconfig
killall: radiusd: no process killed
RADIUS server disable !!
killall: webs: no process killed
Generated PIN = 48751384

WiFi Simple Config v2.12.1-wps2.0 (2013.07.26-03:42+0000).

Register to wlan1
Register to wlan0
route: ioctl 0x890c failed: No such process
iwcontrol RegisterPID to (wlan1)
iwcontrol RegisterPID to (wlan0)
**********************************************************************
*                       FREE Page,Dentries and Inodes Cache          *
**********************************************************************
IEEE 802.11f (IAPP) using interface br0 (v1.8)
MemFree:           36460 kB
Cached:             2344 kB
dns_hijack_enabled = 1
killall: nbnsd: no process killed
--iQsetup_set--
kill: you need to specify whom to kill
addcgiext .lua,.lp,.php
axhttpd/1.4.9: listening on ports 80 (http) and 443 (https)
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
--iQsetup set done--
No dnrd daemon found.  Exiting.
Notice: caching turned off
ping: sendto: Network is unreachable
kill: you need to specify whom to kill
Notice: caching turned off
ping: sendto: Network is unreachable
boa: server version Boa/0.94.14rc21
boa: server built Oct 31 2013 at 22:06:10.
boa: starting server pid=1978, port 80
Run check_iqv2_work

Flash Information[edit]

Address Layout:

0x0 Bootloader
0x6000 Flash Hardware settings
0x8000 Flash Default Settings
0x10000 Linux image flash offset start
0x40000 Linux image flash offset end
0xE0000 Root image offset start
0x150000 Root image offset end
0x400000 End of 4096KB flash

There's a datasheet for the flash used: MX25L3206E

Can confirm that the flash chip on here works when connected to
a raspberry pi and spi modules are loaded with flashrom 0.9.8. [1]
This system shares the same bootloader as the RTL8651c. In fact, in
Edimax's GPL release, their embedded instructions are for said system.

Images[edit]