User Tools

Site Tools


Mikrotik RouterBoard RB2011-UiAS-2HnD-IN


05/2015: Barrier Breaker & Trunk can boot this device, but the built-in 5 * GigE switch does not connect correctly to the CPU. Compiling the OpenWrt kernel with a patch is required (see below).

05/2015: The SFP port (not populated) periodically claims to go down/up/down. Uncommenting the SFP lines in /etc/config/network avoids this.

If you can confirm that OpenWrt is running on this device (i.e. you or someone else has tested it), please update the data accordingly. → Click View/Edit data

Hardware info

vendor supplied hardware diagram

Architecture: MIPS
Vendor: MikroTik
Bootloader: RouterBOOT
System-On-Chip: AR9344 SoC
CPU Speed: 600 Mhz - can be overclocked from boot monitor
Flash size: 128 MiB NAND Flash
RAM: 128 MiB DDR2
Wireless: AR9380 802.11b/g/n dual chain (on SoC)
Ethernet: AR8327 - 5x 10/100/1000MBit/s BASE-T* + 1x SFP (separate chip)
AR8227 - 5x 10/100MBit/s BASE-T (on SoC)
USB: 1x 2.0 micro (host/device, OTG cable included)
Serial: CISCO/Lantronix pinout RJ45 console port.
JTAG: no?
other 2" color touch display

The RB2011-UiAS-2HnD-IN differs from its predecessor RB2011-UAS-2HnD-IN supposedly only by supporting Mikrotik passive PoE on ETH10, but it is also identified to the OpenWrt linux kernel as a new model (2011r5 instead of 2011G) which is why it is not recognized by older OpenWrt kernels that do recognize the RB2011-UAS-2HnD-IN. The -IN refers to the indoor enclosure. The routerboard is also available without enclosure as RB2011-UiAS-2HnD.


Please refer to Common Procedures for Mikrotik RouterBoard Products.

As of 05/2015, you need to compile a 14.07 or trunk version of OpenWrt with the following patch applied:

The author of this wiki did only manage to make the patch work by using the value 0x6f000000 instead of 0x3e000000 for register ath79_eth0_pll_data.pll_1000.

How to remove RouterOS and install OpenWrt

1. What you need ?

→ (Source) Second OpenWrt router with Extroot for image files,

→ (Target) MikroTik RouterBoard RB2011-UiAS-2HnD-IN router

2. Images

You must check version of your MikroTik device.

For 64M version you have to install lede-XX.XX.X-ar71xx-mikrotik-nand-64m-squashfs-sysupgrade.bin

For more than 64MB version you have to install lede-XX.XX.X-ar71xx-mikrotik-nand-large-squashfs-sysupgrade.bin

Where XX.XX.X is the latest release version number.

lede-XX.XX.X-ar71xx-mikrotik-vmlinux-initramfs-lzma.elf file you need to upload to the source device, this file is used to run in MikroTik memory.

3. How the installation proceeds (elucidation)

LEDE installation takes place in two stages - first we write LEDE to the device's memory, then install image to the target device NAND.

We need to configure the tftp server on the source device, giving the path to the image file that will be sent to the target device memory.

Connecting target device (eth1) to the source device (any switch port) image will be sent to the target device's memory.

Sound signal informs about the completed procedure of transferring the image to the target device memory.

Now it is possible to log into the target device via ssh (user root, no password)

If everything went well, you can now start the installation to the NAND memory of the target device.

You need to setup basic HTTP web server on your laptop or PC.

4. Step by step installation

Edit source device configuration /etc/config/dhcp adding

option enable_tftp'1' option tftp_root '/tftpboot' option dhcp_boot 'filename.elf'

at the end of this file add

config 'host' option 'name' 'mikrotik' option 'ip' '' option 'mac' '54:8d:8c:15:df:00'

where 'mac' is your target device mac address.

Save changes and wget lede-XX.XX.X-ar71xx-mikrotik-vmlinux-initramfs-lzma.elf into /tftpboot folder.

Reboot your source device.

Power on your target device with reset button pushed until Ether Boot message appears.

Ether boot mode try to download image from your network device.

Connect target device (eth1) to the source device (any switch port) image will be sent to the target device's memory.

One short signal from your target device informs about the completed procedure.

On your source device syslog should contain:

  Mon Jan  8 19:15:09 2018 dnsmasq-dhcp[1073]: BOOTP(br-lan) 54:8d:8c:15:df:00 
  Mon Jan  8 19:15:11 2018 dnsmasq-tftp[1073]: sent /tftpboot/lede-17.01.4-ar71xx-mikrotik-vmlinux-initramfs-lzma.elf to
  Mon Jan  8 19:15:25 2018 odhcpd[787]: Using a RA lifetime of 0 seconds on br-lan

On your Laptop or PC manualy configure static IP with subnet and gate

Disconnect cable from source device. Connect your laptop or PC to the ETH10 port on your target device (from this point target device can not be reset, OpenWrt is running in memory).

SSH into target device (user root, no password)

You should now see OpenWrt command line. Next step is to download image file *.bin to the /tmp directory of your target device.

  # cd /tmp
  # wget
  # sysupgrade -n /tmp/lede-XX.XX.X-ar71xx-mikrotik-nand-XX-squashfs-sysupgrade.bin

Where is your Laptop or PC basic web server. Yep, you need to download *.bin image to the root folder of your web server.

The sysupgrade command flash your nand target device and reboot your MikroTik router automatically.

Tracking reported experience with suggested patch for the 5 GigE Ports

user platform Unpatched (0x06000000) 0x3e000000 0x6f000000 Notes
davey RB951G-2HnD NOK OK not tested Original patch for mach-rb95x.c
baptiste RB951G-2HnD NOK NOK not tested AR9344 rev 3. Using 0x3e000000 works, but the router crashes every ~10 days.
chris RB2011UiAS-2HnD NOK OK OK AR9344 rev 2. Davey's patch on mach-rb2011.c. WiFi only tested with unpatched
matt 2011UiAS-2HnD NOK NOK OK
soren RB2011UiAS-RM OK OK OK AR9344 rev 2. No WiFi on this model
toerless RB2011UiAS-2HnD NOK NOK OK AR9344 rev 3. WiFi works with all options
jbergstroem RB2011UiAS-2HnD NOK NOK OK AR9344 rev 3
ventYl RB951G-2HnD not tested NOK OK Using 0x3e000000 works but reboot crashes each ~10 days or loses ethernet connectivity

Register layout

31 TX_INVERT - Decides whether to select the inversion of the GTX clock after the delay line
30 GIGE_QUAD - Decides whether to allow a 2 ns shift (clock in the middle of a data transfer) to the GTX clock. This bit is only effective when bit 25 is set
29:28 RX_DELAY - The delay buffers in the Rx clock path to adjust against the edge/middle- aligned RGMII inputs
27:26 TX_DELAY - Delay line for the GTX clock that goes along with the data
25 GIGE - Set only after a 1000 Mbps connection has been negotiated
24 OFFSET_PHASE - Used to select if the start is from the positive or negative phase (or whether to have a 180 degree change in addition to the phase-delay in [11:8].
0x6f: 30 29    27 26 25 24
0x3e:    29 28 27 26 25


toh/mikrotik/rb2011uias.txt · Last modified: 2018/01/15 12:18 by tmomas