Linksys WAP610N

abgn (AN600)
	Wireless-N Access Point with Dual-Band
Support	Support page
Wikipedia	Linksys routers
3rd Party Firmware
dd-wrt	Incompatible
OpenWrt	Incompatible
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Linksys WAP610N
Serial number prefix	PUU0
FCC ID	Q87-WAP610N
IC ID	3839A-WAP610N
Type	access point
CPU1	Cavium CNS1101
CPU1 Type	ARM FA526 ECONA
CPU1 Speed	200 MHz
Flash1 Chip	Eon EN29LV320AB-70TCP
Flash1 Size	4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	SK hynix HY5DU561622ETP-5
ETH chip1	Cavium CNS1101
ETH chip2	Realtek RTL8201CP
Ethernet Port Count	1-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
	802dot11 OUI: 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W), 68:7F:74 (13 E, 16 W), 98:FC:11 (7 E, 8 W); Ethernet OUI: 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W), 68:7F:74 (13 E, 16 W), 98:FC:11 (7 E, 8 W)
Stock bootloader	U-Boot 1.1.4
Stock FW OS	Linux 2.6.16-star
Expansion IF types	none specified
Power	12 VDC, 1 A
Connector type	barrel; 5 mm (OD); 2 mm (ID); 10 mm (LEN)
Serial Port (UART)	yes, internal, 4-pin header, unpopulated, (38400 8N1)
	Additional chips; 2.4/5GHz Power Amplifier Module;Richwave;RTC6673;886, 6673, A816;2;;24-pin QFN;4 mm x 4 mm;
Other
	Default SSID: linksys (53 addl. devices); Default login user: blank; Default login password: admin; blank:admin credentials used by 280 additional devices; of which 135 are Linksys devices
Manuf/OEM/ODM	U-MEDIA WAP-703S
Retail
FCC approval date	13 May 2009
UPC	745883587995 ; (UPC DB, On eBay);
ASIN	B002LITFTG
Country of manuf	Taiwan
Radio 1
Chip1	Metalink MtW8171
Chip2	Metalink MtW8151
Wireless interface OUI	00:23:69, 00:25:9C, 68:7F:74, 98:FC:11
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/b/g/n
802.11n	up to 300/300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 or 5 GHz

For a list of all currently documented Cavium (Star) SoC's with specifications, see Cavium.
For a list of all currently documented Metalink chipsets with specifications, see Lantiq.
For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented Linksys device with specifications, see Linksys.

• 300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

WAP610N serial numbers appear to start with PUU0.

The same basic hardware is used by the Linksys WET610N.

The PCI ID of the on-board MtW8171 is 1a30:0680, which is identified as
the Hyperion II (2nd-gen MTLK chipset) from the Wave300 driver source.

If unable to get an IP via DHCP the router MAY assume the IP of 169.254.1.226
(it's in the FCC submitted manual.. but not the one from the Linksys support site).

The included power adapter is a Bestec EA0121WAA (12V, 1A).

ID/OD/Len measurements are approximate.

Noted units

"0500-1140751000" is silkscreened on the board in the FCC photos.

"081R-WST703SN01 R05" and "MP080195000112" is printed on a label affixed to the board

in the FCC photos, seeming to indicate the device was a U-MEDIA WST-703S.

The CPU is as a Star STR9101.

"0500-2240751200" is silkscreened on production model board.

"081R-WAP703SN00 R02" and "MM 090175900909" is printed on a label affixed

to the board, seeming to indicate this device is a U-MEDIA WAP-703S.

The CPU is a Cavium Networks CNS1101M-25FP208-AD00-G,

which is a new Cavium P/N for the Star STR9101.

(Cavium acquired Star Semiconductor in 2008)

Links of Interest

Reviews

Review for the Cisco-Linksys WES610N on SmallNetBuilder
GPL code is avaiable @ Linksys's GPL Code Center and mirrored @ modem-help.co.uk

JTAG-Serial Info

Serial

Serial Pinouts

(RxD)
(TxD)
(GND)
[3.3]

Login credentials

Per the GPL code dump for the WAP610N, the relevant line on /etc/shadow is

root:$1$ZAwqf2dI$ZukbihyQtUghNDsLAQaP31:10933:0:99999:7:::,

indicating a password of wlan for the root user.

Info dervied from

boot log

U-Boot 1.1.4 (Jun 19 2008 - 14:02:55)

U-Boot code: 00000000 -> 0001C1F0  BSS: -> 00021498
CPU Clock: 200 MHz
1.8V Vdd Output: 1.793
2.5V Vdd Output: 2.531
___ PCI Device List Start ____
bus:00 device:01 function:00
    vendor:1a30 device_id:0680 class:0d80 interrupt:06
____ PCI Device List End ____
RAM Configuration:
Bank #0: 00000000 32 MB
Flash Manufacturer: EON
Flash Device: ENLV320B(4MB)
Flash:  4 MB
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
Verifying image integrity.
Good checksum
## Starting application at 0x10040000 ...
Uncompressing Linux ... done, booting the kernel.
Linux version 2.6.16-star (jacky.yang@RH001.u-media.com)
(gcc version 3.4.6) #1 Mon Jun 22 18:20:51 CST 2009
CPU: FA526id(wb) [66015261] revision 1 (ARMv4)
Machine: STAR STR9100
Memory policy: ECC disabled, Data cache writeback
CPU0: D VIVT write-back cache
CPU0: I cache: 16384 bytes, associativity 2, 16 byte lines, 512 sets
CPU0: D cache: 16384 bytes, associativity 2, 16 byte lines, 512 sets
CPU clock at 200MHz
AHB clock at 100MHz
APB clock at 50MHz
D-scratchpad of size 8192 at f7800000
Built 1 zonelists
Kernel command line: root=/dev/ram0
PID hash table entries: 256 (order: 8, 4096 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 32MB = 32MB total
Memory: 28356KB available (1736K code, 195K data, 88K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
checking if image is initramfs...it isn't (<NULL>); looks like an initrd
Freeing initrd memory: 2011K
NET: Registered protocol family 16
PCI clock at 33M
PCI: bus0: Fast back to back transfers disabled
PCI Bridge found
PCI map irq: 00:00.00 slot 0, pin 1, irq: 0
PCI map irq: 00:01.00 slot 1, pin 1, irq: 5
TC classifier action (bugs to netdev@vger.kernel.org cc hadi@cyberus.ca)
io scheduler noop registered
io scheduler deadline registered (default)
GPIO interrupt handler install ok.
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x78000000 (irq = 10) is a 16550A
RAMDISK driver initialized: 4 RAM disks of 16384K size 1024 blocksize
loop: loaded (max 8 devices)
VLAN0_VLAN_TAG: 0
init RTL8201CP
STR9100 NOR Flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
config_offset=0x3f0000
Creating 4 MTD partitions on "STR9100 NOR Flash":
0x00000000-0x00020000 : "ARMBOOT"
0x00040000-0x003f0000 : "Linux Kernel"
0x00020000-0x00030000 : "Non-volatile Config Partition"
0x003f0000-0x00800000 : "Config Partition"
mtd: partition "Config Partition" extends beyond the end of device "STR9100 NOR Flash" -- size truncated to 0x10000
GACT probability on
Mirror/redirect action on
Simple TC action Loaded
u32 classifier
    Actions configured
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
ieee80211: 802.11 data/management/control stack, git-1.1.7
ieee80211: Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>
RAMDISK: lzma compressed image found at block 0
VFS: Mounted root (ext2 filesystem) readonly.
Freeing init memory: 88K
init started: BusyBox v1.8.1 (2009-06-22 18:22:59 CST)
starting pid 610, tty '/dev/ttyS0': '/bin/sh'
U-Media, mount_config.sh: Who call me?
 (610) Got config lock
 (610) Mounting configuration filesystem
0
0
 (610) Released config lock.
0
starting pid 636, tty '/dev/ttyS0': '/bin/sh'
@@@@@@@@@@ Before disable SA learning in STAR CPU @@@@@@@@@@
dump 0x70000008
physical addr: 0x70000008 content: 0x00463d96
dump 0x7000000c
physical addr: 0x7000000c content: 0x00463d96
@@@@@@@@@@ After disable SA learning in STAR CPU @@@@@@@@@@
dump 0x70000008
physical addr: 0x70000008 content: 0x004e3d96
dump 0x7000000c
physical addr: 0x7000000c content: 0x004e3d96
open mac port 0
close mac port 0
open mac port 0
device eth0 entered promiscuous mode
1
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
br0 has the IP 192.168.1.226
Disabling SA learning in the STAR internal switch
Configure ethernet port IP to 0.0.0.0
Loaded GPIO driver
registered 0
Num LEDs to init 3
Starting upnpd monitor
15.03
The firmware version is 1.0.00 build 832
WAP610N [UUID 1c9477d4-1dd2-11b2-a242-8db32ac1cc4e] UPNP1.0 Daemon.

/root/mtlk/etc
END CREATE LINKS IN TMP
END MAKE DEVICE PIN
[4294684196] <6>mtlk: Using D-scratchpad for hot context (hw = 784 bytes)
[4294684906] mtlk0 (_mtlk_pci_init_card:1150): PCI: PCI self test status: 0x00000004
[4294687076] <6>mtlk: wlan0 at PCI-0000:00:01.0
cp= 0xc028dcc0 l=256
0000:  fc 1b cd 00 00 00 01 00  80 0d 00 00 00 00 00 00
0010:  30 1a 80 06 00 00 00 00  08 f0 ff ff 08 00 e0 ff
0020:  06 08 7e 00 30 1a 80 06  ff ff ff ff ff ff ff ff
0030:  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff
0040:  c0 00 00 00 00 00 01 03  80 10 b5 41 27 02 44 00
0050:  23 69 7b 11 03 00 00 01  01 08 43 41 00 16 24 09
0060:  0d d0 89 9f 63 dc 8b aa  63 00 01 01 00 00 00 00
0070:  00 00 00 00 34 0b 0a d0  84 a0 5e ee 8c b5 68 00
0080:  00 01 00 00 aa 5d 00 00  00 00 64 0a 86 f5 84 b6
0090:  60 0a 8e be 66 00 01 01  00 00 b3 5d 00 00 00 00
00a0:  84 0c 88 fc 85 bc 5f 19  8f c4 65 00 01 00 00 00
00b0:  b8 5c 00 00 00 00 9d 85  84 12 8f ca 6c 17 95 c6
00c0:  6f 00 00 01 bd 63 ac 5c  00 00 00 00 05 2f 11 d3
00d0:  9e 93 80 a6 99 88 88 00  00 00 7c 6f 73 77 00 00
00e0:  00 00 00 00 00 00 07 6e  10 d6 a1 9d 84 a9 9b 77
00f0:  75 00 00 01 86 72 00 00  00 00 00 00 00 00 00 00
[4294689916] <6>mtlk: Options mask is 0x02
[4294689926] mtlk0 (mtlk_core_start:8080): DFS (SM-required) channels will not be used
[4294689936] <6>mtlk: wlan0 at PCI-0000:00:01.0 with EEPROM MAC-address 00:23:69:7b:11:03
[4294689946] <6>mtlk: EEPROM version = 0x301 (769)
[4294689966] <6>mtlk:
Driver version: 2.3.5.19.6.7048.branches/REL_2.3.5.Release
MAC/PHY versions:
ap_upper.bin: @@@ VERSION INFO @@@ version number: REL_2.3.5_r788 MIPS: Upper CPU(TMC AGG AP) interface: PCI  phy type: real phy on May 12 2009 at 17:53:15@@@ END @@@
contr_lm.bin: @@@ VERSION INFO @@@ version number: REL_2.3.5_r788 MIPS: Lower MAC  interface: --  phy type: real phy on May 12 2009 at 17:52:49@@@ END @@@

/root/mtlk/etc
END INSMOD DRIVER
Configuring Linux QoS Queues
END QOS
008,200
Error : unrecognised wireless request "s:"
Error : unrecognised wireless request "s:"
Error : unrecognised wireless request "s:"
Error : unrecognised wireless request "s:"
DriverSET Param is DONE
END DRIVER PARAMS
END HW LINITS
END WRITE MAC ADDRESS
DFSDisabled=1
Configuring wireless bridging
ifconfig: SIOCSIFFLAGS: Bad address
device wlan0 entered promiscuous mode
Start apps init
1
1
0
chmod: /tmp/config.conf: No such file or directory
grep: /tmp/wsc_config.txt: No such file or directory
/root/mtlk/etc
Finished apps init
call drvhlpr
start drvhlpr with param
Starting BCL Server...
[0030108493] drvhlpr: Metalink Driver Helper (version 1.3.18.exported)
Starting Web Server...
Configuring wireless bridging
drvhlpr uses obsolete (PF_INET,SOCK_PACKET)
[0033255590] drvhlpr: Waiting for kernel messages

starting pid 934, tty '/dev/ttyS0': '/sbin/getty'

#############################################
Welcome to the Metalink Dongle STAR platform,
also known as

   D O R A N G O

(Dongle on Dorado)
#############################################

WAP610N login: br0: port 2(wlan0) entering learning state
br0: topology change detected, propagating
br0: port 2(wlan0) entering forwarding state
mtlk_linkstat_event.sh:Wireless Link is UP
WET610N will roll-back to default IP and netmask setting, IP: 192.168.1.226, netmask: 255.255.255.0
On DHCP startup status, skip to recover IP to default one
delay for autoip ..
delay for autoip ..
Configure IP to 169.254.181.54 ..
Current IP Address is - 192.168.1.226

cat /proc/cpuinfo

# cat /proc/cpuinfo
Processor       : FA526id(wb) rev 1 (v4l)
BogoMIPS        : 153.19
Features        : swp half
CPU implementer : 0x66
CPU architecture: 4
CPU variant     : 0x0
CPU part        : 0x526
CPU revision    : 1
Cache type      : write-back
Cache clean     : cp15 c7 ops
Cache lockdown  : format B
Cache format    : Harvard
I size          : 16384
I assoc         : 2
I line length   : 16
I sets          : 512
D size          : 16384
D assoc         : 2
D line length   : 16
D sets          : 512

Hardware        : STAR STR9100
Revision        : 0000
Serial          : 0000000000000000

cat /proc/mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00400000 00010000 "STR9100 NOR Flash"
mtd1: 00020000 00010000 "ARMBOOT"
mtd2: 003b0000 00010000 "Linux Kernel"
mtd3: 00010000 00010000 "Non-volatile Config Partition"
mtd4: 00010000 00010000 "Config Partition"

cat /proc/bus/pci/devices

# cat /proc/bus/pci/devices
0000    eeee0000        0       00000000        00000000        00000000        00000000        00000000        00000000        00000000        00000000  00000000 00000000        00000000        00000000        00000000        00000000
0008    1a300680        5       b0a00008        b0800008        00000000        00000000        00000000        00000000        00000000        00001000  00200000 00000000        00000000        00000000        00000000        00000000        mtlk

ps

# ps
  PID  Uid        VSZ Stat Command
    1 root        940 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
   12 root            SW< [kblockd/0]
   33 root            SW  [pdflush]
   34 root            SW  [pdflush]
   36 root            SW< [aio/0]
   35 root            SW  [kswapd0]
  552 root            SW< [cqueue/0]
  572 root            SW  [mtdblockd]
  621 root            SW< [loop0]
  694 root        936 S N /bin/sh ./mtlk_upnpd_monitor.sh
  695 root        932 S   /bin/sh ./mtlk_pbc_reboot.sh
  696 root        928 S   cat /dev/gpio3
  894 root       3004 S   ./wsccmd 1 2 3 4
  895 root        936 S   /bin/sh ./WPS_PBC.sh 1 2
  902 root        940 S   /bin/sh /etc/mtlk_init_start.sh
  904 root        784 R N /root/mtlk/bcl/BclSockServer
  906 root        736 S   ./drvhlpr -a eth0 -a eth1 -r 1 -i wlan0
  907 root        736 S   ./drvhlpr -a eth0 -a eth1 -r 1 -i wlan0
  908 root       3004 S   ./wsccmd 1 2 3 4
  910 root       3004 S   ./wsccmd 1 2 3 4
  911 root       3004 S   ./wsccmd 1 2 3 4
  912 root       3004 S   ./wsccmd 1 2 3 4
  913 root        784 S N /root/mtlk/bcl/BclSockServer
  914 root        784 S N /root/mtlk/bcl/BclSockServer
  915 root       1788 S N /root/mtlk/web/webs -c 0
  918 root       3004 S   ./wsccmd 1 2 3 4
  920 root        736 S   ./drvhlpr -a eth0 -a eth1 -r 1 -i wlan0
  921 root        784 R N /root/mtlk/bcl/BclSockServer
  922 root       3004 S   ./wsccmd 1 2 3 4
  923 root       3004 S   ./wsccmd 1 2 3 4
  924 root       3004 S   ./wsccmd 1 2 3 4
  925 root       3004 S   ./wsccmd 1 2 3 4
  927 root        928 S   cat /dev/gpio13
  928 root        736 S   ./drvhlpr -a eth0 -a eth1 -r 1 -i wlan0
  929 root        784 S N /root/mtlk/bcl/BclSockServer
  931 root       2204 S   ./hostapd -t hostapd.conf -ddK
 1038 root        788 S N /bin/autoip br0
 1065 root       1516 S N upnpd
 1068 root        948 S N udhcpc -i br0 -H WAP610N -s /etc/udhcpc/dhcp.tcl -b
 1287 root        944 S   -sh
 1383 root        928 S N sleep 120
 1416 root        936 R   ps

Linksys WAP610N

Overview

Noted units

Links of Interest

Reviews

JTAG-Serial Info

Serial

Serial Pinouts

Login credentials

Info dervied from

cat /proc/cpuinfo

cat /proc/mtd

cat /proc/bus/pci/devices

ps

Navigation menu

Page actions

Page actions

Personal tools

Search

Navigation

data/misc

Tools

query forms

ShoutWiki messages

abgn (AN600)
Wireless-N Access Point with Dual-Band

Support	Support page
Wikipedia	Linksys routers
3rd Party Firmware
dd-wrt	Incompatible
OpenWrt	Incompatible
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Linksys WAP610N
Serial number prefix	PUU0
FCC ID	Q87-WAP610N
IC ID	3839A-WAP610N
Type	access point
CPU1	Cavium CNS1101
CPU1 Type	ARM FA526 ECONA
CPU1 Speed	200 MHz
Flash1 Chip	Eon EN29LV320AB-70TCP
Flash1 Size	4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	SK hynix HY5DU561622ETP-5
ETH chip1	Cavium CNS1101
ETH chip2	Realtek RTL8201CP
Ethernet Port Count	1-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W), 68:7F:74 (13 E, 16 W), 98:FC:11 (7 E, 8 W) Ethernet OUI: 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W), 68:7F:74 (13 E, 16 W), 98:FC:11 (7 E, 8 W)
Stock bootloader	U-Boot 1.1.4
Stock FW OS	Linux 2.6.16-star
Expansion IF types	none specified
Power	12 VDC, 1 A
Connector type	barrel 5 mm (OD) 2 mm (ID) 10 mm (LEN)
Serial Port (UART)	yes, internal, 4-pin header, unpopulated, (38400 8N1)
Additional chips 2.4/5GHz Power Amplifier Module;Richwave;RTC6673;886, 6673, A816;2;;24-pin QFN;4 mm x 4 mm;
Other
Default SSID: linksys (53 addl. devices) Default login user: blank Default login password: admin blank:admin credentials used by 280 additional devices of which 135 are Linksys devices
Manuf/OEM/ODM	U-MEDIA WAP-703S
Retail
FCC approval date	13 May 2009
UPC	745883587995 (UPC DB, On eBay)
ASIN	B002LITFTG
Country of manuf	Taiwan
Radio 1
Chip1	Metalink MtW8171
Chip2	Metalink MtW8151
Wireless interface OUI	00:23:69, 00:25:9C, 68:7F:74, 98:FC:11
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/b/g/n
802.11n	up to 300/300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 or 5 GHz