NEC Aterm WG1800HP

multiple revisions of this device, use caution

abgn+ac (AC1750)
AC1750 Wireless Router
Homepage	Product page
WikiDevi.wi-cat.ru	NEC Aterm WG1800HP
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Supported
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	NEC Aterm WG1800HP
FCC ID	none specified
Type	wireless router
CPU1 Y	Qualcomm Atheros QCA9558
CPU1 Type	MIPS 74Kc
CPU1 Speed	720 MHz
Flash1 Chip	Macronix MX25L12845EMI
Flash1 Size	16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (SPI NOR)
RAM1 Size	128 MiB 134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br /> (DDR2)
RAM1 Chip	Nanya NT5TU32M16DG x 2
ETH chip1	Qualcomm Atheros QCA9558
Switch	Atheros AR8327
Ethernet Port Count	1-1GbE-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: 10:66:82 (1 E, 1 W) Ethernet OUI: 10:66:82 (1 E, 1 W)
Stock bootloader	U-Boot
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 1.5 A
Connector type	barrel
Serial Port (UART)	yes, 3.3V TTL, (9600 8N1)
Other
Default SSID: aterm-XXXXXX-g (1 addl. devices) , aterm-XXXXXX-a (2 addl. devices) Default IP address: 192.168.10.1 the IP 192.168.10.1 is used by 136 additional devices of which 1 are NEC devices
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Retail
Availability	Japan only
(Est.) release date	28 March 2013
(Est.) initial retail price (in USD):	$292
ASIN	B00C2FICOW
Radio 1
Chip1	Qualcomm Atheros QCA9558
Wireless interface OUI	10:66:82
Antenna Connector Type	none specified
MIMO status	3x3:3
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 450 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	Qualcomm Atheros QCA9880
Wireless interface OUI	10:66:82
Antenna Connector Type	none specified
MIMO status	3x3:3
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 1300 Mbps
802.11n	up to 450 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz
CPU1 brand Radio1 chip1 brand Radio2 chip1 brand NEC Aterm WG1800HP Qualcomm Atheros Qualcomm Atheros Qualcomm Atheros NEC Aterm WG1800HP2 Qualcomm Atheros Qualcomm Atheros Qualcomm Atheros

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented Qualcomm Atheros (QCA) chipsets with specifications, see Qualcomm Atheros.

For a list of all currently documented NEC devices with specifications, see NEC.

• 450 Mbps - 3SS 2.4GHz 802.11n (40MHz chan.),

• 1300 Mbps - 3SS 5GHz 802.11ac (80MHz chan.) = AC1750 class

Overview

Per NECs manual...

• The device appears to have a default IP of 192.168.10.1 in Router mode.
• The default SSID formats appear to be aterm-XXXXXX-g and aterm-XXXXXX-a,

where XXXXXX may be related to a MAC address used by the unit

(upper / lower case letters? ) or something completely different. I dunno

• Guest network SSIDs seem to be aterm-XXXXXX-gx and aterm-XXXXXX-ax
• WEP only SSID (2.4GHz only) is aterm-XXXXXX-gw

Links of Interest

• Manual (JP)

• Qualcomm Gives 802.11ac a Boost - QCA press release

indicates that this device is QCA based

• Review on http://internet.watch.impress.co.jp/

aterm-XXXXXX-a sample SSID (lower case letters)

• On Amazon.co.jp • ASIN: B00C2FICOW, Listed on: 2013-03-28,

Price as of 2013-04-21: ￥ 29,075 (~$292.10 USD)

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)

Target: ath79
Subtarget: generic
Package architecture: mips_24kc
Supported Since Commit
Support started version: 24.10.0
Current supported version: 25.12.5

LAN Comment: Atheros AR8327
WLAN Comment: Qualcomm Atheros QCA9558, Qualcomm Atheros QCA9880, MIMO 3x3:3 on both bands
Installation method(s):
see git-commit
Recovery method(s):
see git-commit
Comment:
USB NEC uPD720114

git • >>

ath79: add support for NEC Aterm WG1800HP NEC Aterm WG1800HP is a 2.4/5 GHz band 11ac (Wi-Fi 5) router, based on QCA9558. Specification: - SoC  : Qualcomm Atheros QCA9558 - RAM  : DDR2 128 MiB (2x Nanya NT5TU32M16DG-AC) - Flash  : SPI-NOR 16 MiB (Macronix MX25L12845EMI-10G) - WLAN  : 2.4/5 GHz - 2.4 GHz  : 3T3R (Qualcomm Atheros QCA9558 (SoC)) - 5 GHz  : 3T3R (Qualcomm Atheros QCA9880) - Ethernet  : 5x 10/100/1000 Mbps - switch  : Atheros AR8327 - LEDs/Keys (GPIO) : 12x/5x - UART  : through-hole on PCB - assignment  : 3.3V, GND, NC, TX, RX from tri-angle marking - settings  : 9600n8 - USB  : 1x USB 2.0 Type-A - hub (internal) : NEC uPD720114 - Power  : 12 VDC, 1.5 A (Max. 17 W) - Stock OS  : NetBSD based Flash instruction using initramfs-factory.bin image (StockFW WebUI): 1. Boot WG1800HP with router mode normally 2. Access to the WebUI ("http://aterm.me/" or "http://192.168.0.1/") on the device and open firmware update page ("ファームウェア更新") 3. Downgrade the stock firmware to v1.0.2 4. After downgrading, select the OpenWrt initramfs-factory.bin image and click update ("更新") button 5. After updating, the device will be rebooted and booted with OpenWrt initramfs image 6. On the initramfs image, upload (or download) uboot.bin and sysupgrade.bin image to the device 7. Replace the bootloader with a uboot.bin image mtd write <uboot.bin image> bootloader 8. Perform sysupgrade with a sysupgrade.bin image sysupgrade <sysupgrade image> 9. Wait ~120 seconds to complete flashing Flash instruction using initramfs-factory.bin image (bootloader CLI): 1. Connect and open serial console 2. Power on WG1800HP and interrupt bootloader by ESC key 3. Login to the bootloader CLI with a password "chiron" 4. Start TFTP server by "tftpd" command 5. Upload initramfs-factory.bin via tftp from your computer example (Windows): tftp -i 192.168.0.1 PUT initramfs-factory.bin 6. Boot initramfs image by "boot" command 7. On the initramfs image, back up the stock bootloader and firmware if needed 8. Upload (or download) uboot.bin and sysupgrade.bin image to the device 9. Replace the bootloader with a uboot.bin image 10. Perform sysupgrade with a sysupgrade.bin image 11. Wait ~120 seconds to complete flashing Notes: - All LEDs are connected to the TI TCA6416A (marking: PH416A) I2C Expander chip. - The stock bootloader requires an unknown filesystem on firmware area in the flash. Booting of OpenWrt from that filesystem cannot be handled, so the bootloader needs to be replaced to mainline U-Boot before OpenWrt installation. - The data length of blocks in firmware image will be checked (4M < threshold < 6M) on the stock WebUI on some versions (v1.0.28, v1.0.30(latest), ...), so needs to be downgraded before OpenWrt installation with initramfs-factory image. MAC addresses: LAN  : 10:66:82:xx:xx:04 (config, 0x6 (hex)) WAN  : 10:66:82:xx:xx:05 (config, 0xc (hex)) 2.4 GHz: 10:66:82:xx:xx:06 (config, 0x0 (hex)) 5 G  : 10:66:82:xx:xx:07 (config, 0x12 (hex))