SerComm H500-s lowi

multiple revisions of this device, use caution

abgn+ac (AC2100)
wireless router, dsl modem, CPE
WikiDevi.wi-cat.ru	SerComm H500-s
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Partial Support
Tomato any flavor	Status Unknown
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	SerComm H500-s lowi
FCC ID	none specified
Type	wireless router, dsl modem, CPE
CPU1 Y	Broadcom BCM63167
CPU1 Type	MIPS BMIPS4350
CPU1 Speed	400 MHz ( 2 cores )
CPU2 Y	Quantenna QT3740BC
CPU2 Type	ARC 700
CPU2 Speed	500 MHz ( 2 cores )
Flash1 Chip	Brand? Model?
Flash1 Size	128 MiB 134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br /> (NAND)
RAM1 Size	128 MiB 134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br /> (DDR3)
RAM1 Chip	Brand? Model?
ETH chip1	Broadcom BCM63167
Switch	Broadcom BCM53134S
Ethernet Port Count	4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: none specified
Stock bootloader	CFE
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 2.5 A
Connector type	barrel
Serial Port (UART)	yes, 4-pin header, 3.3V TTL, (115200 8N1)
Flags: xDSL
Other
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Radio 1
Chip1	Broadcom BCM63167
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	Quantenna QT3740BC
Wireless interface OUI	none specified
Antenna Connector Type	none specified
MIMO status	4x4:4
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 1700 Mbps
802.11n	up to 600 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz
CPU1 brand Radio1 chip1 brand Radio2 chip1 brand SerComm H500-s lowi Broadcom Broadcom Quantenna SerComm H500-s vfes Broadcom Broadcom Quantenna

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.
For a list of all currently documented Quantenna chipsets with specifications, see Quantenna.

For a list of all currently documented SerComm devices with specifications, see SerComm.

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.),

• 1733 Mbps - 4SS 5GHz 802.11ac (80MHz chan.) = AC2100 class

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)
On the OpenWrt Wiki

Target: bmips
Subtarget: bcm63268
Package architecture: mips_mips32
Supported Since Commit
Support started version: 21.02.0
Current supported version: 25.12.0

Unsupported Functions:
DSL modem, WiFi 2.4GHz
LAN Hardware: Broadcom BCM53134S
WLAN Hardware: Broadcom BCM63167, Quantenna QT3740BC
Installation method(s):
GUI generic
Recovery method(s):
see devicepage

git • >>

bcm63xx: add support for the Sercomm H500-s Sercomm H500-s is an xDSL dual band wireless router based on Broadcom BCM63167 SoC. Hardware: SoC: Broadcom BCM63167 CPU: BMIPS4350 V8.0, 400 MHz, 2 cores Flash: NAND 128 MiB RAM: DDR3 128 MiB Ethernet: 4x 10/100/1000 Mbps Switch: BCM53134S Wireless: 802.11b/g/n: BCM435f (integrated) 802.11ac: Quantenna QT3740BC (onboard SoC) USB: 1x 2.0 LEDs/Buttons: 11x / 2x Flash instruction, web UI: 1. Reset to defaults using the reset button if the admin password is unknown 2. Login into the web UI as admin. Address: http://192.168.0.1 User: admin Password: VF-ESVodafone-H-500-s or l033i-h500s 3. Go to Settings -> Firmware Update, and select the Openwrt factory firmware 4. Update the firmware. 5. Wait until it finish, the device will reboot with Openwrt installed on the alternative image partitions keeping the stock firmware in the former. Notes: - The patch also adds support for the lowi version. Only the factory firmware is different. - The integrated Wifi in the Broadcom Soc isn't still supported. - The Quantenna 802.11ac wifi works ok, but needs to be configured with the Quantenna client application. It can't be configured with Luci nor any iw command since it's a separated subsystem linked via ethernet. - The BCM53134S external switch is managed via MDIO which isn't supported in this target. Therefore it will behave as a dumb switch.