EnGenius EPG600

From TechInfoDepot
Jump to navigationJump to search
abgn (AN600)
Wireless Dual Band VoIP Router
WikiDevi.wi-cat.ru EnGenius EPG600
3rd Party Firmware
dd-wrt Status Unknown
OpenWrt Partial Support
Tomato any flavor Incompatible
Gargoyle Status Unknown
Platform
BrandModelRev EnGenius EPG600
FCC ID (fcc.io) A8J-EPG600
FCC ID (fcc.report) A8J-EPG600
Board ID 7016A0758004
Type wireless router, analog phone gateway
CPU1 checkY MediaTek MT7620A
CPU1 Type MIPS 24KEc
CPU1 Speed 580 MHz 32-bit
Flash1 Chip Macronix MX25L12845EMI-10G
Flash1 Size 16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Size 64 MiB 67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip Nanya NT5TU32M16DG-AC
ETH chip1 MediaTek MT7620A
Switch Qualcomm Atheros QCA8337N
Ethernet Port Count 1-1GbE-WAN
4-1GbE-LAN
Wired Standard IEEE 802.3i/3u/3ab

802dot11 OUI: 88:DC:96 (20 E, 21 W)
Ethernet OUI: 88:DC:96 (20 E, 21 W)

Stock bootloader U-Boot
Expansion IF types USB 2.0
USB ports 1
USB Hub Compatible Untested
Power 12 VDC, 1 A
Connector type barrel
5.5 mm (OD)
2.1 mm (ID)
9.5 mm (LEN)
Serial Port (UART) yes, 4-pin header

Flags:
analog phone port, SNMP

Additional chips
VoIP chip w/ SPI interface;Silicon Labs;Si3050;Si3050-FT, 1235EM, F127;1;
VoIP line side device;Silicon Labs;Si3019;3019-FT, 1311FF, L0PL;1;
23V, 3A Synchronous Step-Down DC/DC Converter;ITE Tech;IT7663M;;1;

Other

Default SSID: EnGeniusXXXXXX (17 addl. devices)
Default IP address: 192.168.0.1
the IP 192.168.0.1 is used by 821 additional devices
of which 27 are EnGenius devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1353 additional devices
of which 50 are EnGenius devices

Manuf/OEM/ODM Senao
3rd Party Firmware Support OpenWrt • (List | Dev | DLs)
Retail
FCC approval date 06 January 2014
(Est.) release date September 2014
UPC 655216007031
(UPC DB, On eBay)
ASIN B00O1B0Q6M
Country of manuf Taiwan
Radio 1
Chip1 MediaTek MT7620A
Wireless interface OUI 88:DC:96
Antenna Connector Type U.FL
MIMO status 2x2:2
Wireless Standard IEEE 802.11b/g/n
802.11n up to 300 Mbps
802.11g up to 54 Mbps
802.11b up to 11 Mbps
WiFi Operating Frequency 2.4 GHz
Radio 2
Chip1 Ralink RT5592
Wireless interface OUI 88:DC:96
Antenna Connector Type U.FL
MIMO status 2x2:2
Wireless Standard IEEE 802.11a/n
802.11n up to 300 Mbps
802.11a up to 54 Mbps
WiFi Operating Frequency 5 GHz

For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.
For a list of all currently documented Qualcomm Atheros (QCA) chipsets with specifications, see Qualcomm Atheros.
For a list of all currently documented Ralink chipsets with specifications, see Ralink.

For a list of all currently documented EnGenius devices with specifications, see EnGenius.

300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),
300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

"EPG600-0.20 LFP" is silkscrened on the board in the FCC photos.

Default settings are per the FCC manual, default SSIDs (EnGeniusXXXXXX for both bands, 5G = 2.4 MAC + 1) + the 88:DC:96 OUI are per the FCC sample label. They may be inaccurate.

Probable PSUs

The power supply shown in the FCC photos is a Shenzhen Gongjin Electronics S24B12-120A125-04.

Shenzhen Gongjin Electronics S24B12-120A125-04 (more)
Input: 100-240 VAC ~ 50/60 Hz, 0.7 A
 Input connector: NEMA 1-15P
Style: large, vertical
Output: 12 VDC, 1.25 A
 Output connector: barrel (center +)
 OD: ??  ID: ??  LEN: ??

Flashing

Flashing OpenWrt

Target: ramips
Subtarget: mt7620
Package architecture: mipsel_24kc
Supported Since Commit
Support started version: 23.05.0
Current supported version: 24.10.5
Unsupported Functions:
Si3050-FT + Si3019-FT Voice DAA, SPI control, PCM data, Phone Ports
LAN Hardware: Qualcomm Atheros QCA8337N
WLAN Hardware: MediaTek MT7620A, Ralink RT5592
Installation method(s):
see git-commit
Recovery method(s):
see git-commit
git • >>
ramips: add support for Senao Engenius EPG600
FCC ID: A8J-EPG600

Engenius EPG600 is an indoor wireless router with
1 Gb ethernet switch, dual-band wireless,
internal antenna plates, USB, and phone lines (not supported)

this board is a Senao device:
the hardware is equivalent to EnGenius ESR600 (except for phone lines)
the software is Senao SDK which is based on openwrt and uboot
which uses the legacy Senao header with Vendor / Product IDs
to verify the firmware upgrade image.

**Specification:**

  - MT7620 SOC		MIPS 24kec, 2.4 GHz WMAC, 2x2
  - RT5592N WLAN	PCI chip, 5 GHz, 2x2
  - QCA8337N Gb SW	RGMII GbE, SW P0 -- SOC P5, 5 LEDs
  - 40 MHz clock
  - 16 MB FLASH		MX25L12845EMI-10G
  - 64 MB RAM		NT5TU32M16
  - UART console	J2, populated
  - USB 2.0 port	direct to SOC
  - 6 GPIO LEDs		power, 2G, 5G, wps2g, wps5g, line
  - 3 buttons		reset, wps, "reg" (registeration)
  - 4 antennas		internal omni-directional plates

NOT YET SUPPORTED: VoIP

  - Si3050-FT + Si3019-FT	Voice DAA, SPI control, PCM data
  - Phone Ports "TEL", "LINE"	RJ11, 4P2C (2 pins)

**MAC addresses:**

  MAC address labeled as MAC ADDRESS
  MACs present in both wifi cal data and uboot environment

  eth0.1/phy1	----	*:82	rf 0x4
  phy0		----	*:83	factory 0x4
  eth0.2	MAC	*:b8	"wanaddr"

**Installation:**

  Method 1: Firmware upgrade page:

    (if you cannot access the APs webpage)
    factory reset with the reset button
    connect ethernet to a computer
    OEM webpage at 192.168.0.1
    username and password 'admin'

    Navigate to gear icon, "Device Management", "Tools"
    select the factory.dlf image
    Upload and verify checksum

  Method 2: Serial to upload initramfs:

    Follow directions for TFTP recovery
    upload and boot initramfs and do a sysupgrade

**TFTP recovery:**

  Requires UART serial console, reset button does nothing

  rename initramfs-kernel.bin to 'uImageEPG600'
  make available on TFTP server at 192.168.99.8
  power board, interrupt boot with "4"
  execute `tftpboot` and `bootm` (with the load address)

**Return to OEM:**

  Images from OEM are provided, but not compatible
  with openwrt sysupgrade. So it must be modified.

  Alternatively, back up all mtd partitions before flashing

**Note on switch registers:**

  The necessary registers needed for the QCA8337 switch
  can be read from interrupted boot (tftpboot, bootm)
  by using the following lines in the switch driver ar8327.c
  in the function 'ar8327_hw_config_of'
  where 'qca,ar8327-initvals' is parsed from DTS
  before the new register values are written:

    pr_info("0x04 %08x\n", ar8xxx_read(priv, AR8327_REG_PAD0_MODE));
    pr_info("0x08 %08x\n", ar8xxx_read(priv, AR8327_REG_PAD5_MODE));
    pr_info("0x0c %08x\n", ar8xxx_read(priv, AR8327_REG_PAD6_MODE));
    pr_info("0x10 %08x\n", ar8xxx_read(priv, AR8327_REG_POWER_ON_STRAP));

Pictures

Retail Images
User Images