EnGenius EAP600

From TechInfoDepot
Jump to navigationJump to search
abgn (AN600)
Wireless-N600 Long Range Ceiling Mount Dual Concurrent Access Point
WikiDevi.wi-cat.ru EnGenius EAP600
3rd Party Firmware
dd-wrt Status Unknown
OpenWrt Supported
Tomato any flavor Incompatible
Gargoyle Status Unknown
Platform
BrandModelRev EnGenius EAP600
FCC ID (fcc.io) A8J-EAP600
FCC ID (fcc.report) A8J-EAP600
IC ID 10103A-EAP600
Type access point
CPU1 checkY Atheros AR9344
CPU1 Type MIPS 74Kc
CPU1 Speed 560 MHz 32-bit
Flash1 Chip Macronix MX25L12845EMI-10G
Flash1 Size 16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Size 128 MiB 134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br />
RAM1 Chip Nanya NT5TU32M16DG-AC x 2
ETH chip1 Atheros AR9344
ETH chip2 Atheros AR8035-A
Ethernet Port Count 1-1GbE-LAN
Wired Standard Atheros;AR8035-A;

802dot11 OUI: 00:02:6F (27 E, 62 W)
Ethernet OUI: 00:02:6F (27 E, 62 W)

Stock bootloader U-Boot
Expansion IF types none specified
PoE 802.3af, standard
Power 12 VDC, 2 A
Connector type barrel
Serial Port (UART) Yes
Other

Default SSID: EnGeniusXXXXXX-2.4G (2 addl. devices)
, EnGeniusXXXXXX-5G (2 addl. devices)
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1353 additional devices
of which 22 are EnGenius devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1353 additional devices
of which 50 are EnGenius devices

Manuf/OEM/ODM Senao
3rd Party Firmware Support OpenWrt • (List | Dev | DLs)
Retail
Availability End of Life
FCC approval date 31 July 2012
UPC 655216005372
(UPC DB, On eBay)
ASIN B009V17BYC
Country of manuf Taiwan
Radio 1
Chip1 Atheros AR9344
Wireless interface OUI 00:02:6F
Antenna Connector Type U.FL
MIMO status 2x2:2
Wireless Standard IEEE 802.11b/g/n
802.11n up to 300 Mbps
802.11g up to 54 Mbps
802.11b up to 54 Mbps
WiFi Operating Frequency 2.4 GHz
Radio 2
Chip1 Atheros AR9382
Wireless interface OUI 00:02:6F
Antenna Connector Type U.FL
MIMO status 2x2:2
Wireless Standard IEEE 802.11a/n
802.11n up to 300 Mbps
802.11a up to 54 Mbps
WiFi Operating Frequency 5 GHz
 FCC ID
Open-Mesh MR600 v1A8J-EAP600
Open-Mesh MR600 v2A8J-EAP600

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.

For a list of all currently documented EnGenius devices with specifications, see EnGenius.

300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),
300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

This datasheet (on EnGenius USA's site) indicates the device has 8MB Flash and 64MB RAM.

FCC photos show the device with a MX25L12845EMI-10G Fiash chip (128Mb / 16MB)
and two NT5TU32M16DG-AC RAM chips (DDR2-800, 64MB each).

"EAP600-0.20 LFP" is silkscreened on the board.

The device is using a HN2411CG LAN Transformer.

Default settings (including the SSID formats) are per EnGenius's manual.

The info may not be 100% accurate..

Links of Interest

On EnGenius USA
On EnGenius Singapore
Datasheet

Vendor links

On Keenan Systems

Flashing

Flashing OpenWrt

Target: ath79
Subtarget: generic
Package architecture: mips_24kc
Supported Since Commit
Support started version: 21.02.0
Current supported version: 24.10.3
LAN Comment: Atheros AR8035-A GbE Phy
WLAN Hardware: Atheros AR9344, Atheros AR9382
Installation method(s):
see git-commit
Recovery method(s):
see git-commit
git • >>
ath79: add support for Senao Engenius EAP600
FCC ID: A8J-EAP600

Engenius EAP600 is a wireless access point with 1 gigabit ethernet port,
dual-band wireless, external ethernet switch, 4 internal antennas
and 802.3af PoE.

Specification:

  - AR9344 SOC			(5 GHz, 2x2, WMAC)
  - AR9382 WLAN			(2.4 GHz, 2x2, PCIe on-board)
  - AR8035-A switch		(GbE with 802.3af PoE)
  - 40 MHz reference clock
  - 16 MB FLASH			MX25L12845EMI-10G
  - 2x 64 MB RAM		NT5TU32M16DG
  - UART at H1			(populated)
  - 5 LEDs, 1 button		(power, eth, 2.4 GHz, 5 GHz, wps) (reset)
  - 4 internal antennas

MAC addresses:

  MAC addresses are labeled MAC1 and MAC2
  The MAC address in flash is not on the label
  The OEM software reports these MACs for the ifconfig

  eth0	MAC 1	*:5e	---
  phy1	MAC 2	*:5f	---	(2.4 GHz)
  phy0	-----	*:60	art 0x0	(5 GHz)

Installation:

  2 ways to flash factory.bin from OEM:

  - if you get Failsafe Mode from failed flash:
      only use it to flash Original firmware from Engenius
      or risk kernel loop or halt which requires serial cable

  Method 1: Firmware upgrade page:

    OEM webpage at 192.168.1.1
    username and password "admin"
    Navigate to "Upgrade Firmware" page from left pane
    Click Browse and select the factory.bin image
    Upload and verify checksum
    Click Continue to confirm and wait 3 minutes

  Method 2: Serial to load Failsafe webpage:

    After connecting to serial console and rebooting...
    Interrupt uboot with any key pressed rapidly
    execute `run failsafe_boot` OR `bootm 0x9fdf0000`
    wait a minute
    connect to ethernet and navigate to
    "192.168.1.1/index.htm"
    Select the factory.bin image and upload
    wait about 3 minutes

Return to OEM:

  If you have a serial cable, see Serial Failsafe instructions
  otherwise, uboot-env can be used to make uboot load the failsafe image

  *DISCLAIMER*
  The Failsafe image is unique to Engenius boards.
  If the failsafe image is missing or damaged this will not work
  DO NOT downgrade to ar71xx this way, it can cause kernel loop or halt

  ssh into openwrt and run
  `fw_setenv rootfs_checksum 0`
  reboot, wait 3 minutes
  connect to ethernet and navigate to 192.168.1.1/index.htm
  select OEM firmware image from Engenius and click upgrade

Format of OEM firmware image:

  The OEM software of EAP600 is a heavily modified version
  of Openwrt Kamikaze. One of the many modifications
  is to the sysupgrade program. Image verification is performed
  simply by the successful ungzip and untar of the supplied file
  and name check and header verification of the resulting contents.
  To form a factory.bin that is accepted by OEM Openwrt build,
  the kernel and rootfs must have specific names...

    openwrt-senao-eap600-uImage-lzma.bin
    openwrt-senao-eap600-root.squashfs

  and begin with the respective headers (uImage, squashfs).
  Then the files must be tarballed and gzipped.
  The resulting binary is actually a tar.gz file in disguise.
  This can be verified by using binwalk on the OEM firmware images,
  ungzipping then untaring.

  The OEM upgrade script is at /etc/fwupgrade.sh

  Later models in the EAP series likely have a different platform
  and the upgrade and image verification process differs.

  OKLI kernel loader is required because the OEM software
  expects the kernel to be no greater than 1536k
  and the factory.bin upgrade procedure would
  overwrite part of the kernel when writing rootfs.

Note on PLL-data cells:

  The default PLL register values will not work
  because of the external AR8035-A switch between
  the SOC and the ethernet PHY chips.

  For AR934x series, the PLL register for GMAC0
  can be seen in the DTSI as 0x2c.
  Therefore the PLL register can be read from uboot
  for each link speed after attempting tftpboot
  or another network action using that link speed
  with `md 0x1805002c 1`.

  Unfortunately uboot did not have the best values
  so they were taken from other similar DTS files.