Linksys SPNMX56

From TechInfoDepot
Jump to navigationJump to search
abgn+ac+ax (AX30004S)
Velop 6 Dual-Band Mesh WiFi 6 Router
Wikipedia Linksys routers
3rd Party Firmware
dd-wrt Status Unknown
OpenWrt Supported
Tomato any flavor Incompatible
Gargoyle Status Unknown
Platform
BrandModelRev Linksys SPNMX56
FCC ID (fcc.io) none specified
FCC ID (fcc.report) none specified
Type wireless router
CPU1 checkY Qualcomm IPQ5018
CPU1 Type ARM Cortex-A53
CPU1 Speed 1.0 GHz ( 2 cores )
Flash1 Chip Gigadevice GD5F2GM7RExxG
Flash1 Size 256 MiB 268,435,456 B <br />2,097,152 Kib <br />262,144 KiB <br />2,048 Mib <br />0.25 GiB <br /> (NAND)
RAM1 Size 512 MiB 536,870,912 B <br />4,194,304 Kib <br />524,288 KiB <br />4,096 Mib <br />0.5 GiB <br /> (DDR3 -933)
RAM1 Chip Winbond W634GU6NB-11
ETH chip1 Qualcomm IPQ5018
ETH chip2 Qualcomm Atheros QCA8081
Switch Qualcomm Atheros QCA8337
Ethernet Port Count 1-2.5GbE-WAN
3-1GbE-LAN
Wired Standard IEEE 802.3i/3u/3ab/3bz

802dot11 OUI: none specified

Stock bootloader U-Boot
Expansion IF types none specified
Power 12 VDC, 2 A
Serial Port (UART) yes, 3.3V TTL, (115200 8N1)

Flags:
Wi-Fi 6

Other
3rd Party Firmware Support OpenWrt • (List | Dev | DLs)
Radio 1
Chip1 Qualcomm IPQ5018
Wireless interface OUI none specified
Antenna Connector Type none specified
MIMO status 2x2:2
Wireless Standard IEEE 802.11b/g/n/ax
802.11ax up to 574 Mbps
802.11n up to 300 Mbps
802.11g up to 54 Mbps
802.11b up to 11 Mbps
WiFi Operating Frequency 2.4 GHz
Radio 2
Chip1 Qualcomm QCN9024
Wireless interface OUI none specified
Antenna Connector Type none specified
MIMO status 4x4:4
Wireless Standard IEEE 802.11a/n/ac/ax
802.11ax up to 2402 Mbps
802.11ac up to 1733 Mbps
802.11n up to 600 Mbps
802.11a up to 54 Mbps
WiFi Operating Frequency 5 GHz

For a list of all currently documented Qualcomm chipsets with specifications, see Qualcomm.
For a list of all currently documented Qualcomm Atheros (QCA) chipsets with specifications, see Qualcomm Atheros.

For a list of all currently documented Linksys devices with specifications, see Linksys.

2402 Mbps - 4SS 5GHz 802.11ax (80MHz chan., 1024-QAM)
574 Mbps - 2SS 2.4GHz 802.11ax (40MHz chan., 256-QAM) = AX3000 class

Flashing

Flashing OpenWrt

Target: qualcommax
Subtarget: ipq50xx
Package architecture: aarch64_cortex-a53
Supported Since Commit
Support started version: 25.12.0
Current supported version: 25.12.1
LAN Hardware: Qualcomm Atheros QCA8337
LAN Comment: Qualcomm QCA8081 Phy for 2.5Gbit port
WLAN Hardware: Qualcomm IPQ5018, Qualcomm QCN9024
WLAN Comment: 2.4GHz: 2x2:2 MIMO, 5GHz: 4x4:4 MIMO
Installation method(s):
see git-commit
Recovery method(s):
see git-commit
git • >>
qualcommax: ipq50xx: add support for Linksys SPNMX56
The SPNMX56 is an ISP-branded and distributed device similar to the MX5500
with the same Wifi chips (IPQ5018 for 2.4G and QCN9074 for 5G) but has an
additional QCA8081 PHY providing a 2.5gbps ethernet WAN port.

Speficiations:
* SoC: Qualcomm IPQ5018 (64-bit dual-core ARM Cortex-A53 @ 1.0Ghz)
* Memory: Winbond W634GU6NB-11 (512 MiB DDR3-933)
* Serial Port: 3v3 TTL 115200n8
* Wi-Fi: IPQ5018 (2x2 2.4 Ghz 802.11b/g/n/ax)
         QCN9024 (4x4:4 5 Ghz 802.11an/ac/ax)
* Ethernet: IPQ5018 integrated virtual switch connected to an external
            QCA8337 switch (3 Ports 10/100/1000 GBASE-T) and a
            QCA8081 phy (up to 2.5 Gbps)
* Flash: Gigadevice GD5F2GM7RExxG (256 MiB)
* LEDs: 1x multi-color PWM LED
* Buttons: 1x WPS (GPIO 27 Active Low)
           1x Reset (GPIO 28 Acive Low)

Flash instructions:
1. On OEM firmware, login to the device (typically at http://192.168.1.1)
and click 'CA' in the bottom right corner -> Connectivity ->
Manual Upgrade. Alternatively, browse to http://<router IP>/fwupdate.html
Upload openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin
Optionally flash 2nd partition, after first boot check actual partition:
fw_printenv -n boot_part
and install firmware on second partition using command in case of 2:
mtd -r -e kernel -n write openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin kernel
and in case of 1:
mtd -r -e alt_kernel -n write openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin alt_kernel
2. Installation using serial connection from OEM firmware
hit Enter once booted and enter credentials (login: root, password: admin)
fw_printenv -n boot_part
In case of 2:
flash_erase /dev/mtd12 0 0
nandwrite -p /dev/mtd12 openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin
or in case of 1:
flash_erase /dev/mtd14 0 0
nandwrite -p /dev/mtd14 openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin
After first boot install firmware on second partition:
mtd -r -e kernel -n write openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin kernel
or:
mtd -r -e alt_kernel -n write openwrt-qualcommax-ipq50xx-linksys_spnmx56-squashfs-factory.bin alt_kernel
3. Back to the OEM firmware.
Download firmware from OEM website:
Firmware for this device cannot be searched for on the Linksys website.
Instead, we'd have to use serial to intercept the URL of the firmware
while it's trying to update. Firmware is ISP specific:
Toob (UK): http://download.linksys.com/updates/20241125t080737/FW_MX56TB_1.0.1.216218_prod.img

The intention is to collect URLs for different ISPs on a wiki page.

From serial or SSH:
fw_printenv boot_part
in case of 1:
mtd -r -e alt_kernel -n write FW_MX56TB_1.0.1.216218_prod.img alt_kernel
else in case of 2:
mtd -r -e kernel -n write FW_MX56TB_1.0.1.216218_prod.img kernel