QNAP QHora-301W

abgn+ac+ax (AX36002R)
WiFi 6 10Gbe Router
Homepage	Product page
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Supported
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	QNAP QHora-301W
FCC ID	NCCCCAH20LP5350T7
Type	wireless router
CPU1 Y	Qualcomm IPQ8072A
CPU1 Type	ARM Cortex-A53
CPU1 Speed	2.0 GHz ( 4 cores ) 64-bit
Flash1 Chip	Brand? Model?
Flash1 Size	4 GiB 4,096 MiB <br />4,294,967,296 B <br />33,554,432 Kib <br />4,194,304 KiB <br />32,768 Mib <br /> (eMMC)
Flash2 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (NOR)
RAM1 Size	1 GiB 1,024 MiB <br />1,073,741,824 B <br />8,388,608 Kib <br />1,048,576 KiB <br />8,192 Mib <br /> (DDR4)
RAM1 Chip	Brand? Model?
ETH chip1	Qualcomm IPQ8072A
ETH chip2	Aquantia AQR113C
Switch	Qualcomm IPQ8072A
Ethernet Port Count	2-10GbE-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab/3bz/an
802dot11 OUI: none specified
Stock bootloader	U-Boot
Expansion IF types	USB 3.2 (Gen 1)
USB ports	2
USB Hub Compatible	Untested
Power	12 VDC, 3.33 A
Connector type	barrel
Serial Port (UART)	yes
Other
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Physical
Buttons	Power, WPS, Reset
Dimensions	250×180×48 mm
Weight	1.9kg
Radio 1
Chip1	Qualcomm QCN5024
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	4x4:4
Wireless Standard	IEEE 802.11b/g/n/ax
802.11ax	up to 1182 Mbps
802.11n	up to 600 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	Qualcomm QCN5054
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	4x4:4
Wireless Standard	IEEE 802.11a/n/ac/ax
802.11ax	up to 2475 Mbps
802.11ac	up to 1733 Mbps
802.11n	up to 600 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz

For a list of all currently documented Aquantia SoC's with specifications, see Aquantia.
For a list of all currently documented Qualcomm chipsets with specifications, see Qualcomm.

For a list of all currently documented QNAP devices with specifications, see QNAP.

• 1148 Mbps - 4SS 2.4GHz 802.11ax (40MHz chan.),

• 2402 Mbps - 4SS 5GHz 802.11ax (80MHz chan.) = AX3600 class

Overview

• CPU: Qualcomm IPQ8072A (Hawkeye 2)

Quad-core 2.2GHz 64-bit WiSoC

• Flash: 4GB (eMMC), Memory: 1GB
• Ports: 2x 10GbE (RJ45), 4x 1GbE (RJ45)

USB: 2x USB 3.2 (Gen 1) ports

• Wireless Standard: 802.11a/b/g/n/ac/ax

Frequency Band: 2.4/5GHz (Dual Band)

Wireless Speed Rating: AX3600

• Wireless Speed: 1182Mbps (2.4GHz) 4x4 (40MHz)

2475Mbps (5GHz) 4x4 (80MHz), 2x2 (160MHz)

Wireless Bandwidth: 20/40/80/160MHz

• Antenna Type: 8x internal antennas

Antenna Gain 2.4GHz: 4.5dBi

Antenna Gain 5GHz: 5.2dBi

Links of Interest

• New QNAP QHora-301W WiFi 6 10GbE Router Revealed
• FCC ID: NCC/CCAH20LP5350T7 (2020-06-29) QHora-301W

New Generation WiFi 6 and Dual 10GbE Port SD-WAN Router

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)
On the OpenWrt Wiki
On the OpenWrt Forum

Target: qualcommax
Subtarget: ipq807x
Package architecture: aarch64_cortex-a53
Supported Since Commit
Support started version: 23.05.0
Current supported version: 24.10.5

LAN Hardware: Qualcomm Atheros QCA8075
LAN Comment: 2x Aquantia AQR113C 10Gbe Phy
WLAN Hardware: Qualcomm QCN5024, Qualcomm QCN5054
WLAN Comment: 8 internal 5dBi Antennas / Dual-Band 5G (2475Mbps): 4x4 (80MHz), 2x2 (160MHz) 2.4G (1182Mbps): 4x4 (40MHz)
Installation method(s):
Serial
Recovery method(s):
Serial

git • >>

ipq807x: add QNAP 301w QNAP 301w is a AX WIFI router with 4 1G and 2 10G ports. Specifications: • CPU: Qualcomm IPQ8072A Quad core Cortex-A53 2.2GHz • RAM: 1024MB of DDR3 • Storage: 4GB eMMC (contains kernel and rootfs) / 8MB NOR (contains art and u-boot-env) • Ethernet: 4x 1G RJ45 ports + 2 10G ports (Aquantia AQR113C) • WLAN: 2.4GHz: Qualcomm QCN5024 4x4 (40 MHz) 802.11b/g/n/ax 1174 Mbps PHY rate 5GHz: Qualcomm QCN5054 4x4 (80 MHz) or 2x2 (160 MHz) 802.11a/b/g/n/ac/ax 2402 PHY rate • LEDs: 7 x GPIO-controlled dual color LEDs + 2 GPIO-controlled single color LEDs • Buttons: 1x soft reset / 1x WPS • Power: 12V DC jack A poulated serial header is onboard. RX/TX is working, bootwait is active, secure boot is not enabled. SSH can be activated in the stock firmware, hold WPS button til the second beep (yes the router has a buzzer) SSH is available on port 22200, login with user admin and password "mac address of the router". Installation Instructions: • obtain serial access (https://openwrt.org/inbox/toh/qnap/301w#serial) • stop auto boot • setenv serverip 192.168.10.1 • setenv ipaddr 192.168.10.10 • tftpboot the initramfs image (openwrt-ipq807x-generic-qnap_301w-initramfs-fit-uImage.itb) • bootm • make sure that current_entry is set to "0": "fw_printenv -n current_entry" should be print "0". If not, do "fw_setenv current_entry 0" • copy openwrt-ipq807x-generic-qnap_301w-squashfs-sysupgrade.bin to the device to /tmp folder • sysupgrade -n /tmp/openwrt-ipq807x-generic-qnap_301w-squashfs-sysupgrade.bin this flashes openwrt to the first kernel and rootfs partition (mmcblk0p1 / mmcblk0p4) • reboot Note: this leaves the second kernel / rootfs parition untouched. So if you want to go back to stock, stop u-boot autoboot, "setenv current_entry 1" , "saveenv", "bootipq". Stock firmware should start from the second partition. Then do a firmwareupgrade in the stock gui, that should overwrite the openwrt in the first partitions Make 10G Aquantia phy's work: The aquantia phy's need a firmware to work. This can either be loaded in linux with a userspace tool or in u-boot. I was not successfull to load the firmware in linux (aq-fw-download) but luckily there is aq_load_fw available in u-boot. But first the right firmware needs to write to the 0:ETHPHYFW mtd partition (it is empty on my device) Grab the ethphy firmware image from: https://github.com/kirdesde/nbg7815_gpl/blob/master/target/linux/ipq/ipq807x_64/prebuilt_images/AQR_ethphyfw.mbn and scp that to openwrt. Check the 0:ETHPHYFW partition number: cat /proc/mtd|grep "0:ETHPHYFW", should be mtd10. Backup the 0:ETHPHYFW partition: dd if=/dev/mtd10 of=/tmp/ethphyfw.backup, scp ethphyfw.backup to a save place. Write the new firmware image to the 0:ETHPHYFW partition: "mtd erase /dev/mtd10", "mtd -n write AQR_ethphyfw.mbn /dev/mtd10". Reboot to u-boot. Check if aq_load_fw is working: "aq_load_fw 0", that checks the firmware and if successfull, loads iram and dram to one of the aquantia phy's. If that worked, add the aq_load_fw to the bootcmd: setenv bootcmd "aq_load_fw 0 && aq_load_fw 8 && bootipq" "saveenv" "reset" Board reboots and the firmware load to both phy's should start and then openwrt boots. Check if the 10G ports work. Note: lan port labeled "10G-2" is configured as WAN port as per default. All other port are in the br-lan. This can be changed in the network config.