D-Link DAP-1522 rev A1



OEM/ODM: Alpha Networks WAP-ND01 (8WAPND01.1)

The third receive chain appears to be disabled (despite there being
 * three U.FL connectors, there are only two antennas pictured in
 * the FCC internal photos and the test report states 2T2R status).

GPL Code

 * D-link GPL site
 * dap1522_v121_gpl_20090901_full.tar.gz (79.3 MB mega.co.nz)
 * dap-1522_A1_gpl_1.11_.zip (72.2 MB mega.co.nz)
 * dap-1522_A1_gpl_1.11_.zip (ftp.dlink.co.uk)
 * dap1522_v111_gpl.tar.bz2 (ftp.dlink.fr)

EEPROM

 * RT2880_eeprom_v1_0.bin (512 B mega.co.nz)

MTD

 * mtd_block.7z (3.7 MB mega.co.nz)

Pinout
Header J1 Left <--- [|Rx|___|3.3V|GND|Tx|] --> Right 57600n8

Boot log
{{SCollapse|Boot log U-Boot 1.1.3 (Jun 3 2008 - 15:48:40) Build 001--ALPHA_v011 Board: RT2880 DRAM: 32 MB        twe0 set to  toe0 set to  Set up sector start address BC400000

=
=============================== ASIC -VerB/C (MAC to MAC Mode) DRAM COMPONENT=256Mbits DRAM BUS=16BIT Total memory = 32Mbytes Date:Jun 3 2008  Time:15:48:40

=
=============================== Eth0 (10/100-M) Hit any key to stop autoboot: 0 Image Name:  7zip Linux Kernel Created:     1970-01-01   0:00:00 UTC Image Type:  MIPS Linux Kernel Image (lzma compressed) Data Size:   -1 Bytes = 4096 MB   Load Address: 8a000000 Entry Point: 8a000000 Uncompressing Kernel Image with LZMA ... OK
 * 1) Booting image at bc440000 ...

Starting kernel ... THIS IS ASIC - VERSION B ramsize = 32 MBytes rambase not set, set to default (0x08000000) MEMORY DESCRIPTOR dump: [0,8a1ef950]: base size type

The CPU feqenuce set to 266 MHz CPU revision is: 0001906c icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256 Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes. Primary data cache 16kB, 4-way, linesize 16 bytes. [setup_scache]:1032 Linux version 2.4.30 (freddy@RangeRover) (gcc version 3.3.5) #1 Fri Jan 14 10:42:49 CST 2011 Determined physical RAM map: memory: 02000000 @ 0a000000 (usable) On node 0 totalpages: 49152 zone(0): 49152 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock1 noinitrd cause = 70c0807c, status = 1000ff00 calculating r4koff... 002896a0(2660000) CPU frequency 266.00 MHz Using 133.000 MHz high precision timer. Calibrating delay loop... 265.42 BogoMIPS Memory: 28652k/32768k available (1518k kernel code, 4116k reserved, 92k data, 68k init, 0k highmem) Dentry cache hash table entries: 32768 (order: 6, 262144 bytes) Inode cache hash table entries: 16384 (order: 5, 131072 bytes) Mount cache hash table entries: 512 (order: 0, 4096 bytes) Buffer cache hash table entries: 16384 (order: 4, 65536 bytes) Page-cache hash table entries: 65536 (order: 6, 262144 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Starting kswapd devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 squashfs: version 3.1 (2006/08/19) Phillip Lougher pty: 256 Unix98 ptys configured Ralink RT2880 gpio driver initialized Serial driver version 5.05c (2001-07-08) with no serial options enabled ttyS00 at 0x300500 (irq = 9) is a 16550A ttyS01 at 0x300c00 (irq = 8) is a 16550A RA2880 Ethernet Driver Initilization. v1.01 256 rx/tx descriptors allocated! FLASH_API: MAN_ID=1 DEV_ID=22F9 SIZE=4MB Amd/Fujitsu Extended Query Table v1.1 at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling fast programming due to code brokenness. Flash device: 0x400000 at 0xbc400000 ELBOX Physically mapped flash: squashfs filesystem found at block 832 Creating 8 MTD partitions on "ELBOX Physically mapped flash": 0x000d0080-0x00400000 : "rootfs" 0x00040000-0x003e0000 : "upgrade" 0x003f0000-0x00400000 : "rgdb" 0x00030000-0x00040000 : "bdcfg" 0x003e0000-0x003f0000 : "langpack" 0x00000000-0x00400000 : "flash" 0x00000000-0x00030000 : "Boot" 0x00030000-0x00032000 : "Boot Config" NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP IP: routing cache hash table of 2048 buckets, 16Kbytes TCP: Hash tables configured (established 16384 bind 32768) NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 802.1Q VLAN Support v1.8 Ben Greear  All bugs added by David S. Miller  Load RT2880 Timer Module(Wdg/Soft) VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing prom memory: 0kb freed Freeing unused kernel memory: 68k freed console started trying to start /sbin/init init started: BusyBox v1.00 (2011.01.14-02:45+0000) multi-call binary Starting pid 10, console /dev/tts/1: '/etc/init.d/rcS' Algorithmics/MIPS FPU Emulator v1.5 [/etc/init.d/S03config.sh] Mounting proc and var ... Inserting modules ... Start xmldb ... [/etc/scripts/misc/profile.sh] get ... [/etc/scripts/misc/defnodes.sh] ... [/etc/defnodes/S10setnodes.sh] ... PHP [/etc/defnodes/S11setnodes.php] ... PHP [/etc/defnodes/S12features.php] ... PHP [/etc/defnodes/S20setnodes.php] ... SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,5) mount: Mounting /dev/mtdblock/5 on /www/locale/alt failed: Invalid argument PHP [/etc/defnodes/S40brand.php] ... [/etc/scripts/misc/defnodes.sh] Done !! [/etc/templates/timezone.sh] ... [/etc/templates/logs.sh] ... [/var/run/logs_run.sh] ... Inserting modules ... insmod: /lib/modules/2.4.30: No such file or directory Using /lib/modules/si2c.o RTL8366SR i2cphy... Phy init failed!! Phy init retry success!! RGMII phy data=10c Set RGMII delay time SUCCESS MDIO_CFG = 1f01dc01 GDMA1_FWD_CFG = 10000 rt2880_eth_setup: DSP_EN OFF version driver [/etc/init.d/S03config.sh] done! [/etc/init.d/S10system.sh] start Layout ... [/etc/scripts/layout.sh] ... [/var/run/layout_start.sh] ... Start bridge layout ... device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: port 1(eth0) entering forwarding state br0: topology change detected, propagating start LAN ... [/etc/templates/lan.sh] ... [/var/run/lan_start.sh] ... Bridge mode selected, LAN is disabled ! start web server ... [/etc/templates/webs.sh] start ... [/var/run/webs_start.sh] ... Starting HTTPD ... start fresetd ... enable LAN ports ... Factory reset time : 5 secs System reset time : 1 secs WPS command : [/etc/templates/wps.sh pbc &] [/etc/scripts/enlan.sh] ... Generate channel table according to the country code... start WAN ... Set WAN port media type 0 Set WAN port greenethernet type 1 Enable green ethernet successed. [/etc/templates/wan.sh] start ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC ... start telnet daemon ... Start telnetd ... start DHCP server [/etc/templates/dhcpd.sh] ... [/var/run/dhcpd_restart.sh] ... Stop DHCP server (br0) ... never heard of command [dhcp_server_enable] commands: addbr                         add bridge addif                 add interface to bridge delbr                         delete bridge delif                 delete interface from bridge show                                   show a list of bridges showmacs                      show a list of mac addrs showstp                       show bridge stp info

setageing               set ageing time setbridgeprio           set bridge priority setfd                   set bridge forward delay setgcint                set garbage collection interval sethello                set hello time setmaxage               set max message age setpathcost       set path cost setportprio       set port priority stp                    turn stp on/off apmode                 pass AP operation mode to bridge setprimaryvid            set primary vlan ID        igmp_snooping                   turn igmp snooping on/off deliver_control                turn deliver_controlk on/off setmataddr           set mac cloning address setmatmode             set mac cloning mode scanlanmacs                   scan lan port mac address setwpsstat                    set current wps work status showmataddr                   show current ra0 address block_aparray                  set this if aparray is enabled block_neap                     set this if aparray is enabled Start DHCP server (br0) ... start NEAP ... [/etc/templates/neaps.sh] start ... [/var/run/neaps_start.sh] ... Start Neap Server ... start NEAPC ... [/etc/templates/neapc.sh] start ... [/var/run/neapc_start.sh] ... not pure AP mode, so disable AP ARRAY ... Start NeapC Client ... aparraymsg: not found
 * cannot create

Stop apneaps Server ...
 * not found

start Microsoft LLDP ... [/etc/templates/lld2d.sh] ... /var/run/wlan_stop.sh: cannot open [/etc/templates/wan.sh] restart ... [/var/run/lld2d_start.sh] ... Start LLD2 daemon ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... start NetBIOS ... [/etc/templates/netbios.sh] ... [/var/run/netbios_start.sh] ... Enable NetBIOS! [/etc/templates/wandown.sh] ... [/etc/init.d/S10system.sh] done! rcS done! Starting pid 497, console /dev/tts/1: '/bin/sh'

BusyBox v1.00 (2011.01.14-02:45+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands.

[/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC ... [/etc/templates/wlan.sh] ... [/etc/templates/wlan_run.sh] start ... [/var/run/wlan_start.sh] ... Start WLAN interface ra0 ... WLAN is disabled ! [/etc/templates/qos.sh] restart ... [/etc/templates/wan.sh] restart ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... [/etc/templates/wandown.sh] ... [/var/run/qos_start.sh] ... Interface is wanif=eth0 wlanif=ra0... OK Start QOS system ... QOS is disabled, because WLAN setting. [/etc/templates/trafficmgr.sh] restart ... [/var/run/wan_down.sh] ... [/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! Start WAN(br0),192.168.0.50/255.255.255.0 ... [/etc/templates/wanup.sh] ... [/var/run/wan_up.sh] ... [/etc/templates/ntp.sh] ... NTP client is disabled ... [/etc/templates/upnpd.sh] ... [/var/run/upnpd_start.sh] ... Starting UPnP ... [/var/run/trafficmgr_start.sh] ... Interface is wanif=v_eth0 wlanif=v_ra0... OK Start traffic manager system ... traffic manager is disabled. }}
 * 1) [/var/run/wan_down.sh] ...

Menu
Type "q" to escape automatic boot and reach U-boot's prompt.

help
RT2880 # ? ?      - alias for 'help' base   - print or set address offset bdinfo - print Board Info structure boot   - boot default, i.e., run 'bootcmd' bootd  - boot default, i.e., run 'bootcmd' bootm  - boot application image from memory bootp  - boot image via network using BootP/TFTP protocol bootvmlinux - Boot from an vmlinux in memory cache_set  - Specify the header segment size in byte !! cmp    - memory compare coninfo - print console devices and information cp     - memory copy crc32  - checksum calculation echo   - echo args to console erase  - erase FLASH memory flinfo - print FLASH memory information go     - start application at address 'addr' rt2880_hdrlen  - Specify the header segment size in byte !! help   - print online help

iminfo - print header information for application image loadb  - load binary file over serial line (kermit mode) loop   - infinite loop on address range md     - memory display mdio  - Ralink PHY register R/W command !! mm     - memory modify (auto-incrementing) mtest  - simple RAM test mw     - memory write (fill) nm     - memory modify (constant address) pci  - Display to all DMA status  !! printenv- print environment variables protect - enable or disable FLASH write protection pse_reset !! rarpboot- boot image via network using RARP/TFTP protocol reset  - Perform RESET of the CPU run    - run commands in an environment variable saveenv - save environment variables to persistent storage sdd  - Display to all DMA status  !! sdp  - sdram_width  - Specify the SDRAM bus width !! setenv - set environment variables sleep  - delay execution for some time tftpboot- boot image via network using TFTP protocol version - print monitor version

printenv
RT2880 # printenv loadstart=0x8A100000 runtimeloadstart=0x8A000000 bootstart=0xBC400000 bootsize=0x30000 bootend=0xBC42FFFF runtimestart=0xBC440000 runtimesize=0x3B0000 runtimeend=0xBC7EFFFF envstart=0xBC430000 envend=0xBC43FFFF bootcmd=run runtime bootdelay=1 baudrate=57600 ethaddr="00:AA:BB:CC:DD:11" ipaddr=192.168.1.10 serverip=192.168.1.250 preboot=echo;echo update_bootloader=protect off $(bootstart) $(bootend);erase $(bootstart) $(bootend);cp.b $(loadstart) $(bootstart) $(bootsize) update_runtime=protect off $(runtimestart) $(runtimeend);erase $(runtimestart) $(runtimeend);cp.b $(loadstart) $(runtimestart) $(runtimesize) clean_env=protect off $(envstart) $(envend); erase $(envstart) $(envend);protect on $(envstart) $(envend) runtime=bootm $(runtimestart) $(runtimeloadstart) ethact=Eth0 (10/100-M) signature=wapnd01_dlink_dap1522 stdin=serial stdout=serial stderr=serial Environment size: 868/8188 bytes

Partitions
dev:   size   erasesize  name mtd0: 00400000 00010000 "ELBOX Physically mapped flash" mtd1: 0032ff80 00010000 "rootfs" mtd2: 003a0000 00010000 "upgrade" mtd3: 00010000 00010000 "rgdb" mtd4: 00010000 00010000 "bdcfg" mtd5: 00010000 00010000 "langpack" mtd6: 00400000 00010000 "flash" mtd7: 00030000 00010000 "Boot" mtd8: 00002000 00010000 "Boot Config"

Creating 8 MTD partitions on "ELBOX Physically mapped flash": 0x000d0080-0x00400000 : "rootfs" 0x00040000-0x003e0000 : "upgrade" 0x003f0000-0x00400000 : "rgdb" 0x00030000-0x00040000 : "bdcfg" 0x003e0000-0x003f0000 : "langpack" 0x00000000-0x00400000 : "flash" 0x00000000-0x00030000 : "Boot" 0x00030000-0x00032000 : "Boot Config"

mounts
rootfs / rootfs rw 0 0 /dev/root / squashfs ro 0 0 none /dev devfs rw 0 0 none /proc proc rw 0 0 ramfs /var ramfs rw 0 0