D-Link DAP-1522 rev A1

multiple revisions of this device, use caution

abgn (AN600)
Xtreme N Duo Wireless Bridge/Access Point
Support	Support page
Wikipedia	D-Link
WikiDevi.wi-cat.ru	D-Link DAP-1522 rev A1
3rd Party Firmware
dd-wrt	Incompatible
OpenWrt	Was Supported
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	D-Link DAP-1522 A1
FCC ID	KA2AP1522A1
IC ID	4216A-AP1522
Type	access point, bridge
CPU1	Ralink RT2880
CPU1 Type	MIPS 4KEc
CPU1 Speed	266 MHz
Flash1 Chip	Spansion S29AL032D90TFI04
Flash1 Size	4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	ProMOS V54C3256164VDI7
ETH chip1	Ralink RT2880
Switch	Realtek RTL8366SR
Ethernet Port Count	4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: 00:22:B0 (4 E, 10 W), 00:26:5A (10 E, 12 W), 34:08:04 (8 E, 10 W) Ethernet OUI: 00:22:B0 (4 E, 10 W), 00:26:5A (10 E, 12 W), 34:08:04 (8 E, 10 W)
Stock bootloader	U-Boot
Stock FW OS	Linux 2.4.30
Expansion IF types	none specified
Power	5 VDC, 2 A
Connector type	barrel
Serial Port (UART)	yes, (57600 8N1)
Other
Default SSID: dlink (37 addl. devices) Default IP address: 192.168.0.50 the IP 192.168.0.50 is used by 62 additional devices of which 62 are D-Link devices Default login user: admin Default login password: blank admin:blank credentials used by 365 additional devices of which 193 are D-Link devices
Manuf/OEM/ODM	Alpha Networks WAP-ND01
3rd Party Firmware Support	OpenWrt (Was)
Retail
FCC approval date	19 March 2008
UPC	790069311864 (UPC DB, On eBay)
ASIN	B001769K3O
Country of manuf	China
Radio 1
Chip1	Ralink RT2880
Chip2	Ralink RT2850
Wireless interface OUI	00:22:B0, 00:26:5A, 34:08:04
Antenna Connector Type	U.FL
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 or 5 GHz
CPU1 brand Radio1 chip1 brand Radio1 chip2 brand D-Link DAP-1522 rev A1 Ralink Ralink Ralink D-Link DAP-1522 rev B1 Ralink Ralink

For a list of all currently documented Ralink chipsets with specifications, see Ralink.
For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented D-Link device with specifications, see D-Link.

• 300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

OEM/ODM: Alpha Networks WAP-ND01 (8WAPND01.1)

The third receive chain appears to be disabled (despite there being

three U.FL connectors, there are only two antennas pictured in

the FCC internal photos and the test report states 2T2R status).

Links of Interest

GPL Code

• D-link GPL site
• dap1522_v121_gpl_20090901_full.tar.gz (79.3 MB mega.co.nz)
• dap-1522_A1_gpl_1.11_.zip (72.2 MB mega.co.nz)
• dap-1522_A1_gpl_1.11_.zip (ftp.dlink.co.uk)
• dap1522_v111_gpl.tar.bz2 (ftp.dlink.fr)

EEPROM

• RT2880_eeprom_v1_0.bin (512 B mega.co.nz)

MTD

• mtd_block.7z (3.7 MB mega.co.nz)

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)
OpenWrt Target: ramips
OpenWrt Subtarget: rt288x
OpenWrt Package architecture: mipsel_mips32r2
Support started version: 18.06.0
Current supported version: 19.07.10
Image too big: snapshot
Comment:
Image build disabled in master with commit d7d46da938e3

Please insert instructions here

JTAG-Serial Info

Serial

Serial Pinouts

Header J1

Left <--- [|Rx|___|3.3V|GND|Tx|] --> Right

57600n8

Serial info

Boot log Boot log U-Boot 1.1.3 (Jun 3 2008 - 15:48:40) Build 001--ALPHA_v011 Board: RT2880 DRAM: 32 MB twe0 set to <NULL> toe0 set to <NULL> Set up sector start address BC400000 ============================================ ASIC -VerB/C (MAC to MAC Mode) DRAM COMPONENT=256Mbits DRAM BUS=16BIT Total memory = 32Mbytes Date:Jun 3 2008 Time:15:48:40 ============================================ Eth0 (10/100-M) Hit any key to stop autoboot: 0 ## Booting image at bc440000 ... Image Name: 7zip Linux Kernel Created: 1970-01-01 0:00:00 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: -1 Bytes = 4096 MB Load Address: 8a000000 Entry Point: 8a000000 Uncompressing Kernel Image with LZMA ... OK Starting kernel ... THIS IS ASIC - VERSION B ramsize = 32 MBytes rambase not set, set to default (0x08000000) MEMORY DESCRIPTOR dump: [0,8a1ef950]: base<0a000000> size<02000000> type<Free RAM memory> The CPU feqenuce set to 266 MHz CPU revision is: 0001906c icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256 Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes. Primary data cache 16kB, 4-way, linesize 16 bytes. [setup_scache]:1032 Linux version 2.4.30 (freddy@RangeRover) (gcc version 3.3.5) #1 Fri Jan 14 10:42:49 CST 2011 Determined physical RAM map: memory: 02000000 @ 0a000000 (usable) On node 0 totalpages: 49152 zone(0): 49152 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock1 noinitrd cause = 70c0807c, status = 1000ff00 calculating r4koff... 002896a0(2660000) CPU frequency 266.00 MHz Using 133.000 MHz high precision timer. Calibrating delay loop... 265.42 BogoMIPS Memory: 28652k/32768k available (1518k kernel code, 4116k reserved, 92k data, 68k init, 0k highmem) Dentry cache hash table entries: 32768 (order: 6, 262144 bytes) Inode cache hash table entries: 16384 (order: 5, 131072 bytes) Mount cache hash table entries: 512 (order: 0, 4096 bytes) Buffer cache hash table entries: 16384 (order: 4, 65536 bytes) Page-cache hash table entries: 65536 (order: 6, 262144 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Starting kswapd devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 squashfs: version 3.1 (2006/08/19) Phillip Lougher pty: 256 Unix98 ptys configured Ralink RT2880 gpio driver initialized Serial driver version 5.05c (2001-07-08) with no serial options enabled ttyS00 at 0x300500 (irq = 9) is a 16550A ttyS01 at 0x300c00 (irq = 8) is a 16550A RA2880 Ethernet Driver Initilization. v1.01 256 rx/tx descriptors allocated! FLASH_API: MAN_ID=1 DEV_ID=22F9 SIZE=4MB Amd/Fujitsu Extended Query Table v1.1 at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling fast programming due to code brokenness. Flash device: 0x400000 at 0xbc400000 ELBOX Physically mapped flash: squashfs filesystem found at block 832 Creating 8 MTD partitions on "ELBOX Physically mapped flash": 0x000d0080-0x00400000 : "rootfs" 0x00040000-0x003e0000 : "upgrade" 0x003f0000-0x00400000 : "rgdb" 0x00030000-0x00040000 : "bdcfg" 0x003e0000-0x003f0000 : "langpack" 0x00000000-0x00400000 : "flash" 0x00000000-0x00030000 : "Boot" 0x00030000-0x00032000 : "Boot Config" NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP IP: routing cache hash table of 2048 buckets, 16Kbytes TCP: Hash tables configured (established 16384 bind 32768) NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Load RT2880 Timer Module(Wdg/Soft) VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing prom memory: 0kb freed Freeing unused kernel memory: 68k freed console started trying to start /sbin/init init started: BusyBox v1.00 (2011.01.14-02:45+0000) multi-call binary Starting pid 10, console /dev/tts/1: '/etc/init.d/rcS' Algorithmics/MIPS FPU Emulator v1.5 [/etc/init.d/S03config.sh] Mounting proc and var ... Inserting modules ... Start xmldb ... [/etc/scripts/misc/profile.sh] get ... [/etc/scripts/misc/defnodes.sh] ... [/etc/defnodes/S10setnodes.sh] ... PHP [/etc/defnodes/S11setnodes.php] ... PHP [/etc/defnodes/S12features.php] ... PHP [/etc/defnodes/S20setnodes.php] ... SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,5) mount: Mounting /dev/mtdblock/5 on /www/locale/alt failed: Invalid argument PHP [/etc/defnodes/S40brand.php] ... [/etc/scripts/misc/defnodes.sh] Done !! [/etc/templates/timezone.sh] ... [/etc/templates/logs.sh] ... [/var/run/logs_run.sh] ... Inserting modules ... insmod: /lib/modules/2.4.30: No such file or directory Using /lib/modules/si2c.o RTL8366SR i2cphy... Phy init failed!! Phy init retry success!! RGMII phy data=10c Set RGMII delay time SUCCESS MDIO_CFG = 1f01dc01 GDMA1_FWD_CFG = 10000 rt2880_eth_setup: DSP_EN OFF version driver [/etc/init.d/S03config.sh] done! [/etc/init.d/S10system.sh] start Layout ... [/etc/scripts/layout.sh] ... [/var/run/layout_start.sh] ... Start bridge layout ... device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: port 1(eth0) entering forwarding state br0: topology change detected, propagating start LAN ... [/etc/templates/lan.sh] ... [/var/run/lan_start.sh] ... Bridge mode selected, LAN is disabled ! start web server ... [/etc/templates/webs.sh] start ... [/var/run/webs_start.sh] ... Starting HTTPD ... start fresetd ... enable LAN ports ... Factory reset time : 5 secs System reset time : 1 secs WPS command : [/etc/templates/wps.sh pbc &] [/etc/scripts/enlan.sh] ... Generate channel table according to the country code... start WAN ... Set WAN port media type 0 Set WAN port greenethernet type 1 Enable green ethernet successed. [/etc/templates/wan.sh] start ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC() ... start telnet daemon ... Start telnetd ... start DHCP server [/etc/templates/dhcpd.sh] ... [/var/run/dhcpd_restart.sh] ... Stop DHCP server (br0) ... never heard of command [dhcp_server_enable] commands: addbr <bridge> add bridge addif <bridge> <device> add interface to bridge delbr <bridge> delete bridge delif <bridge> <device> delete interface from bridge show show a list of bridges showmacs <bridge> show a list of mac addrs showstp <bridge> show bridge stp info setageing <bridge> <time> set ageing time setbridgeprio <bridge> <prio> set bridge priority setfd <bridge> <time> set bridge forward delay setgcint <bridge> <time> set garbage collection interval sethello <bridge> <time> set hello time setmaxage <bridge> <time> set max message age setpathcost <bridge> <port> <cost> set path cost setportprio <bridge> <port> <prio> set port priority stp <bridge> <state> turn stp on/off apmode <bridge> <state> pass AP operation mode to bridge setprimaryvid <bridge> <vid> set primary vlan ID igmp_snooping <bridge> <state> turn igmp snooping on/off deliver_control <bridge> <state> turn deliver_controlk on/off setmataddr <bridge> <address> set mac cloning address setmatmode <bridge> <state> set mac cloning mode scanlanmacs <bridge> scan lan port mac address setwpsstat <bridge> set current wps work status showmataddr <bridge> show current ra0 address block_aparray <bridge> <state> set this if aparray is enabled block_neap <bridge> <state> set this if aparray is enabled Start DHCP server (br0) ... start NEAP ... [/etc/templates/neaps.sh] start ... [/var/run/neaps_start.sh] ... Start Neap Server ... start NEAPC ... [/etc/templates/neapc.sh] start ... [/var/run/neapc_start.sh] ... not pure AP mode, so disable AP ARRAY ... Start NeapC Client ... aparraymsg: not found : cannot create Stop apneaps Server ... : not found start Microsoft LLDP ... [/etc/templates/lld2d.sh] ... /var/run/wlan_stop.sh: cannot open [/etc/templates/wan.sh] restart ... [/var/run/lld2d_start.sh] ... Start LLD2 daemon ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... start NetBIOS ... [/etc/templates/netbios.sh] ... [/var/run/netbios_start.sh] ... Enable NetBIOS! [/etc/templates/wandown.sh] ... [/etc/init.d/S10system.sh] done! rcS done! Starting pid 497, console /dev/tts/1: '/bin/sh' BusyBox v1.00 (2011.01.14-02:45+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. # [/var/run/wan_down.sh] ... [/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC() ... [/etc/templates/wlan.sh] ... [/etc/templates/wlan_run.sh] start ... [/var/run/wlan_start.sh] ... Start WLAN interface ra0 ... WLAN is disabled ! [/etc/templates/qos.sh] restart ... [/etc/templates/wan.sh] restart ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... [/etc/templates/wandown.sh] ... [/var/run/qos_start.sh] ... Interface is wanif=eth0 wlanif=ra0... OK Start QOS system ... QOS is disabled, because WLAN setting. [/etc/templates/trafficmgr.sh] restart ... [/var/run/wan_down.sh] ... [/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! Start WAN(br0),192.168.0.50/255.255.255.0 ... [/etc/templates/wanup.sh] ... [/var/run/wan_up.sh] ... [/etc/templates/ntp.sh] ... NTP client is disabled ... [/etc/templates/upnpd.sh] ... [/var/run/upnpd_start.sh] ... Starting UPnP ... [/var/run/trafficmgr_start.sh] ... Interface is wanif=v_eth0 wlanif=v_ra0... OK Start traffic manager system ... traffic manager is disabled. U-boot Menu Type "q" to escape automatic boot and reach U-boot's prompt. help RT2880 # ? ? - alias for 'help' base - print or set address offset bdinfo - print Board Info structure boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootm - boot application image from memory bootp - boot image via network using BootP/TFTP protocol bootvmlinux - Boot from an vmlinux in memory cache_set - Specify the header segment size in byte !! cmp - memory compare coninfo - print console devices and information cp - memory copy crc32 - checksum calculation echo - echo args to console erase - erase FLASH memory flinfo - print FLASH memory information go - start application at address 'addr' rt2880_hdrlen - Specify the header segment size in byte !! help - print online help iminfo - print header information for application image loadb - load binary file over serial line (kermit mode) loop - infinite loop on address range md - memory display mdio - Ralink PHY register R/W command !! mm - memory modify (auto-incrementing) mtest - simple RAM test mw - memory write (fill) nm - memory modify (constant address) pci - Display to all DMA status !! printenv- print environment variables protect - enable or disable FLASH write protection pse_reset !! rarpboot- boot image via network using RARP/TFTP protocol reset - Perform RESET of the CPU run - run commands in an environment variable saveenv - save environment variables to persistent storage sdd - Display to all DMA status !! sdp - sdram_width - Specify the SDRAM bus width !! setenv - set environment variables sleep - delay execution for some time tftpboot- boot image via network using TFTP protocol version - print monitor version printenv RT2880 # printenv loadstart=0x8A100000 runtimeloadstart=0x8A000000 bootstart=0xBC400000 bootsize=0x30000 bootend=0xBC42FFFF runtimestart=0xBC440000 runtimesize=0x3B0000 runtimeend=0xBC7EFFFF envstart=0xBC430000 envend=0xBC43FFFF bootcmd=run runtime bootdelay=1 baudrate=57600 ethaddr="00:AA:BB:CC:DD:11" ipaddr=192.168.1.10 serverip=192.168.1.250 preboot=echo;echo update_bootloader=protect off $(bootstart) $(bootend);erase $(bootstart) $(bootend);cp.b $(loadstart) $(bootstart) $(bootsize) update_runtime=protect off $(runtimestart) $(runtimeend);erase $(runtimestart) $(runtimeend);cp.b $(loadstart) $(runtimestart) $(runtimesize) clean_env=protect off $(envstart) $(envend); erase $(envstart) $(envend);protect on $(envstart) $(envend) runtime=bootm $(runtimestart) $(runtimeloadstart) ethact=Eth0 (10/100-M) signature=wapnd01_dlink_dap1522 stdin=serial stdout=serial stderr=serial Environment size: 868/8188 bytes Partitions dev: size erasesize name mtd0: 00400000 00010000 "ELBOX Physically mapped flash" mtd1: 0032ff80 00010000 "rootfs" mtd2: 003a0000 00010000 "upgrade" mtd3: 00010000 00010000 "rgdb" mtd4: 00010000 00010000 "bdcfg" mtd5: 00010000 00010000 "langpack" mtd6: 00400000 00010000 "flash" mtd7: 00030000 00010000 "Boot" mtd8: 00002000 00010000 "Boot Config" Creating 8 MTD partitions on "ELBOX Physically mapped flash": 0x000d0080-0x00400000 : "rootfs" 0x00040000-0x003e0000 : "upgrade" 0x003f0000-0x00400000 : "rgdb" 0x00030000-0x00040000 : "bdcfg" 0x003e0000-0x003f0000 : "langpack" 0x00000000-0x00400000 : "flash" 0x00000000-0x00030000 : "Boot" 0x00030000-0x00032000 : "Boot Config" mounts rootfs / rootfs rw 0 0 /dev/root / squashfs ro 0 0 none /dev devfs rw 0 0 none /proc proc rw 0 0 ramfs /var ramfs rw 0 0

Pictures

User Images

• 

  Board top

• 

  Soc

• 

  WiFi

• 

  Flash

• 

  RAM

• 

  Switch

• 

  Serial:
  White - (Rx)
  Red - [3.3V]
  Green - (GND)
  Black - (Tx)
  57600n8

• 

  P/N

• 

  Board bottom