Atheros AP81 reference design with USB & 802.11 b/g/n WiFi.
|Version/Model||S/N||OpenWrt Version Supported||Model Specific Notes|
|v1||CUR01||Kamikaze trunk r17250 & later||WORK IN PROGRESS|
|v6||CUR06||Backfire trunk r33556 & later||WORKS|
|Seems to be fine with 10.03.1 - FLASHING WITHOUT SERIAL CONSOLE PER LINKSYS-WEBINTERFACE MAY WORK, USE AT OWN RISK (See Note3) !|
Supported since 10.03.1
opkg update; opkg install kmod-ath9k rm -rf /etc/config/wireless; wifi detect > /etc/config/wireless
…and to add wpa encryption if you plan to use it.
Warning: If have some of those models, that belong to version 'CUR06', the 10.03 and 10.03.1 release of backfire WILL NOT work (kernel panic!), because of the newer u-Boot version (1.6.1). There were some changes of the memory layout. To get it working you must use the image from backfire trunk release by now!
People who want more up-to-date OpenWrt may build a copy of trunk with the WRT160NL profile selected.
Can be flashed from the original web interface with file openwrt-ar71xx-wrt160nl-squashfs.bin
Set a PC on same network to some address in IP range 192.168.1.[2-254]. Download either Linksys or OpenWrt firmware image (openwrt-ar71xx-wrt160nl-squashfs-factory.bin), store as code.bin. From serial console abort the U-boot process. Enter this on u-boot command line
ar7100> upgrade code.bin check link duplex:Full/speed:100 dup 1 speed 100 Tftpd start listening on port! Load address: 0×80060000
Send file from windows PC with TFTP:
C:\tmp> tftp -i 192.168.1.1 put code.bin
For linux TFTP
tftp -m binary 192.168.1.1 69 tftp> put code.bin
You should see this on console wait for flash to finish:
Receiving firmware [code.bin] from [192.168.1.10] Write File : CODE.BIN
Once U-boot command prompt returns enter
ar7100 > go
Hint: The special "linksys-tftp" client that can be found in portage of Gentoo Linux seems not to work. Please use atftp if you're using Gentoo Linux or some other distribution that is based on portage:
root@host ~ $ atftp > mode octet > connect 192.168.1.1 69 > put code.bin
This step has helped me to unbrick the router http://wiki.openwrt.org/doc/howto/generic.flashing.tftp#linuxbsd . You can try something like this (from a GNU/Linux computer):
1. Turn off the power to the router and leave it off until the final step. 2. Make sure your computer has a static IP address from 192.168.1.x (eg. 192.168.1.4) 3. Make sure the ethernet cable is plugged into one of router's LAN ports and the other end into computer's ethernet port 3. cd to the folder where you have the image 4. change the name of the new firmware to code.bin , then type : 5. echo -e "binary\nrexmt 1\ntimeout 60\ntrace\nput code.bin\n" | tftp 192.168.1.1 6. plug the power into the router, it should flash.
In trunk changeset 17202 sysupgrade got enabled for the WRT160NL. (There remains some question that this will JustWork. See ticket #8960 for details)
cd /tmp wget ... sysupgrade -n openwrt-ar71xx-wrt160nl-squashfs.bin
-n command line switch tells sysupgrade to not keep the configuration files.
cd /tmp wget ... mtd -r write /tmp/openwrt-ar71xx-wrt160nl-squashfs.bin firmware
cd /tmp wget ... mtd -r write /tmp/openwrt-ar71xx-wrt160nl-squashfs-factory.bin linux
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
|Architecture: Atheros AP81|
|Bootloader: U-boot 1.1.5 / 1.1.6|
|CPU: Atheros 9130-BC1E 400 Mhz|
|Flash-Chip: cFeon EN25P64 8 MiB|
|RAM: Samsung K4H561638J-LCCC 32 MiB|
|Wireless: Atheros 9102 802.11 b/g/n (integrated)|
|antenna: 2 removable external RP-SMA dipoles|
|USB: Yes 1x 2.0|
|System:Atheros AR9130 rev 2|
|Processor:MIPS 24Kc V7.4|
|Firmware: Backfire (r22689)|
Annotated photos available here
Circuit Board - Front:
Circuit Board - Back:
Note: This will void your warranty!
Typical 3.3 volt TTL serial console present in 3 locations. The parameters are 115200 8-N-1
Location J3 on PCB with pin-header installed:
Initial successful efforts used a short Nokia DKU-5/CA-42 cable, these Atheros platforms seem to be difficult to work with using FTDI long cables.See more details here. EDIT - If you don't want to short your cable, use an old lynksys non-switching power adapter with transformer (switching adapters are generating noise which breaking serial console comunication)
There are duplicate serial console contact points inside WAN & LAN4 ports on PCB edge. You can modify an RJ45 plug with wires in the appropriate spots to access serial console without cracking open the case. Here is an example crafted by users retracile and EraZor:
There is a micro-JTAG connector present.
The programmer needed to access the SPI flash through the Jtag points is a USBJTAG NT from http://www.usbjtag.com/.
The JTAG should be 2mm spacing. IR length 5 The pinout is the same as regular 14 pin JTAG.
To read the flash you need to send a poke command bf000000,1 (using TJTAG) not needed in NT software as it is already implemented. Programming can only be done by USBJTAG NT for now.
http://www.usbjtag.com/jtagnt/router/wrt160nl.php shows a rough connection to Jtag points. More information can be found on the USBJTAG forums.
As reported here
and here (in Polish)
there are two easily accessible spare gpios. Gpio13 is the RX pin on the serial header (so you can't use it at the same time as the serial port obviously), and gpio0 is at the bottom left of the board, where there are pads for a fourth LED which has not been soldered in. The author of the first link above reported that gpio13 would only work as an output, not as an input. I did not have that problem.
The default network configuration is:
|Interface Name||Description||Default configuration|
|br-lan||LAN & WiFi||192.168.1.1/24|
|eth0||LAN ports (1 to 4)||None|
Port 4 is the internal/cpu port. Port 5 (tagged 'CPU' in LUCI) is probably unconnected.
Note that, at least for 12.09, switch support seems to have issues: switch configuration changes don't "take" until a reboot, and when configuring tagged and untagged VLANs, outgoing traffic for the untagged VLAN is still tagged. This needs to be further investigated.
If you don't need the switch, consider swapping the WAN and LAN ports as eth1 is directly connected.
If you forgot your password, broken one of the startup scripts, firewalled yourself or corrupted the JFFS2 partition, you can get back in by using OpenWrt's failsafe mode.
NOTE: The root file system in failsafe mode is the SquashFS partition mounted in readonly mode. To switch to the normal writable root file system run mount_root and make any changes. Run mount_root now.
1. Forgot/lost your password and you like to set a new one
2. Forgot the routers IP address
uci get network.lan.ipaddr
3. You accidentally run 'ipkg upgrade' or filled up the flash by installing to big packages (clean the JFFS2 partition and start over)
mtd -r erase rootfs_data
If you are done with failsafe mode power cycle the router and boot in normal mode.
There are 2 buttons. They are Reset and WiFi Protected Setup. The buttons can be used with hotplug events. E. g. [#wifitoggle WiFi toggle].
|WiFi Protected Setup||wps|
The supplied short dipole antennas can be easily replaced with large omni or directional antenna.
Original exploration thread https://forum.openwrt.org/viewtopic.php?id=20298&p=1