Fon Wireless FON2501A

multiple revisions of this device, use caution

abgn (AN600)
Wireless Dual-Band Router
WikiDevi.wi-cat.ru	Fon Wireless FON2501A
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Status Unknown
Platform
Brand • Model • Rev	Fon Wireless FON2501A
FCC ID	UVAFON2501
Type	wireless router
CPU1	Broadcom BCM5358UB0
CPU1 Type	MIPS 74K
CPU1 Speed	530 MHz
Flash1 Chip	Brand? Model?
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip	Brand? Model?
ETH chip1	Broadcom BCM5358UB0
Switch	Broadcom BCM5358UB0
Ethernet Port Count	1-100MbE-WAN 2-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: none specified
Stock FW OS	Linux 2.6.22
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 1 A
Connector type	barrel
Other
Default IP address: 192.168.10.1 the IP 192.168.10.1 is used by 123 additional devices of which 3 are Fon Wireless devices Default login user: blank Default login password: admin blank:admin credentials used by 278 additional devices of which 1 are Fon Wireless devices
Manuf/OEM/ODM	Arcadyan WG8016 G22-AK
Retail
FCC approval date	29 August 2013
Country of manuf	China
Radio 1
Chip1	Broadcom BCM5358UB0
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio cor_rev	28
Radio 2
Chip1	Broadcom BCM43236B
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/n
802.11n	up to 300 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz
FCC ID Fon Wireless FON2501B UVAFON2501
CPU1 brand Radio1 chip1 brand Radio2 chip1 brand Fon Wireless FON2501A Broadcom Broadcom Broadcom Fon Wireless FON2501B Broadcom Broadcom Broadcom

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

• 300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

This device seems to be BCM5358UB0 + BCM43236B.

CPU: Broadcom BCM5358UB0KFBG (SoC, 2T2R 2.4GHz)

WLAN: Broadcom BCM43236BKMLG (USB, 2T2R 5GHz)

Antenna: 2x external 2.14dBi antennas

Port: 1x WAN, 2x LAN, FE 10/100Mbps

USB: 1x USB 2.0 Host

Buttons: 1x Reset, 1x WPS button

Links of Interest

• On OpenWrt forums

JTAG-Serial Info

Serial

Serial Pinouts

1 -> +3.3v
2 -> Tx
3 -> Rx
4 -> GND

boot log

Decompressing...done Init Arena Init Devs. Boot partition size = 131072(0x20000) Found a 8MB ST compatible serial flash et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.70.55.34 @VERSION_TYPE@ CPU type 0x19749: 530MHz Tot mem: 65536 KBytes CFE mem: 0x80700000 - 0x807A14B0 (660656) Data: 0x80736F90 - 0x8073A1D0 (12864) BSS: 0x8073A1D0 - 0x8073B4B0 (4832) Heap: 0x8073B4B0 - 0x8079F4B0 (409600) Stack: 0x8079F4B0 - 0x807A14B0 (8192) Text: 0x80700000 - 0x80736F8C (225164) Copying boot params..... DONE Bootloader version v0.03 boot_version v0.03 Project name : WG8016G22-AK Press space bar to cancel startup... Device eth0: hwaddr XX-XX-XX-XX-XX-XX, ipaddr 192.168.10.1, mask 255.255.255.0 gateway not set, nameserver not set Loader:raw Filesys:raw Dev:flash0.os File: Options:(null) Loading: ........ 4404344 bytes read Entry at 0x80001000 Closing network. Starting program at 0x80001000 Linux version 2.6.22-gbc0f0874-dirty (wenfang@localhost.localdomain) (gcc version 4.1.2) #3 Wed Sep 25 08:54:25 CST 2013 CPU revision is: 00019749 Found a 8MB ST compatible serial flash wombo_reset set to gpio 22 Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 16256 Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). PID hash table entries: 256 (order: 8, 1024 bytes) CPU: BCM5357 rev 2 at 530 MHz Using 265.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 60152k/65536k available (2947k kernel code, 5328k reserved, 1177k data, 176k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PCI: no core PCI: Fixing up bus 0 Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered gpio_init 156 VFS: Disk quotas dquot_6.5.1 Dquot-cache hash table entries: 1024 (order 0, 4096 bytes) squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher fuse init (API version 7.8) io scheduler noop registered (default) Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A loop: module loaded PPP generic driver version 2.4.2 PPP MPPE Compression module registered NET: Registered protocol family 24 pflash: found no supported devices sflash: squash filesystem with lzma found at block 1786 Creating 4 MTD partitions on "sflash": 0x00000000-0x00030000 : "boot" 0x00030000-0x007f0000 : "linux" 0x001be828-0x007f0000 : "rootfs" 0x007f0000-0x00800000 : "nvram" usbmon: debugfs is not available GACT probability on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (512 buckets, 4096 max) ctnetlink v0.93: registering with nfnetlink. BCM fast NAT: INIT ip_tables: (C) 2000-2006 Netfilter Core Team ClusterIP Version 0.8 loaded successfully arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 176k freed Warning: unable to open an initial console. Failed to execute /init

cpu info

# cat /proc/cpuinfo system type : Broadcom BCM5357 chip rev 2 processor : 0 cpu model : MIPS 74K V4.9 BogoMIPS : 264.60 wait instruction : no microsecond timers : yes tlb_entries : 64 extra interrupt vector : no hardware watchpoint : yes ASEs implemented : mips16 dsp VCED exceptions : not available VCEI exceptions : not available unaligned_instructions : 19 dcache hits : 2147483648 dcache misses : 3578002286 icache hits : 2147483648 icache misses : 2836364265 instructions : 2147483648

Partitions
# cat /proc/mtd dev: size erasesize name mtd0: 00030000 00010000 "boot" mtd1: 007c0000 00010000 "linux" mtd2: 006317d8 00010000 "rootfs" mtd3: 00010000 00010000 "nvram"

lsmod
# lsmod Module Size Used by Tainted: P pppol2tp 33456 0 act_connmark 2944 4 ohci_hcd 26384 0 wl_high 1148144 0 ehci_hcd 46496 0 usb_storage 45296 0 wl 1780800 0 et 59328 0

netstat

# netstat -l Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN tcp 0 0 192.168.168.1:1780 0.0.0.0:* LISTEN tcp 0 0 192.168.169.1:1780 0.0.0.0:* LISTEN tcp 0 0 fonera.fon:1780 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3989 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3990 0.0.0.0:* LISTEN netstat: no support for 'AF INET6 (tcp)' on this system udp 0 0 localhost.localdomain:38032 0.0.0.0:* udp 0 0 localhost.localdomain:1817 0.0.0.0:* udp 0 0 localhost.localdomain:40100 0.0.0.0:* udp 0 0 localhost.localdomain:40101 0.0.0.0:* udp 0 0 localhost.localdomain:40102 0.0.0.0:* udp 0 0 0.0.0.0:53 0.0.0.0:* udp 0 0 0.0.0.0:67 0.0.0.0:* udp 0 0 0.0.0.0:67 0.0.0.0:* udp 0 0 0.0.0.0:67 0.0.0.0:* udp 0 0 0.0.0.0:39000 0.0.0.0:* udp 0 0 0.0.0.0:1900 0.0.0.0:* udp 0 0 0.0.0.0:38000 0.0.0.0:* netstat: no support for 'AF INET6 (udp)' on this system raw 0 0 0.0.0.0:2 0.0.0.0:* 7 raw 0 0 0.0.0.0:255 0.0.0.0:* 7 netstat: no support for 'AF INET6 (raw)' on this system Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node Path

wl revinfo

# wl -i eth1 revinfo vendorid 0x14e4 deviceid 0x4329 radiorev 0x52057000 chipnum 0x5357 chiprev 0x2 chippackage 0x8 corerev 0x1c boardid 0x550 boardvendor 0x14e4 boardrev P200 driverrev 0x5463722 ucoderev 0x256013e bus 0x0 phytype 0x4 phyrev 0x9 anarev 0x0 # wl -i eth1 revinfo vendorid 0x14e4 deviceid 0x4329 radiorev 0x52057000 chipnum 0x5357 chiprev 0x2 chippackage 0x8 corerev 0x1c boardid 0x550 boardvendor 0x14e4 boardrev P200 driverrev 0x5463722 ucoderev 0x256013e bus 0x0 phytype 0x4 phyrev 0x9 anarev 0x0