TP-LINK EAP613 v1

abgn+ac+ax (AX1800)
AX1800 Ceiling Mount WiFi 6 Access Point
Homepage	Product page
Wikipedia	TP-Link
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Supported
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	TP-LINK EAP613 v1
FCC ID	2AXJ4EAP610V3
Type	access point
CPU1 Y	MediaTek MT7621AT
CPU1 Type	MIPS 1004Kc
CPU1 Speed	880 MHz ( 2 cores ) 16-bit
Flash1 Chip	Brand? Model?
Flash1 Size	16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (SPI NOR)
RAM1 Size	256 MiB 268,435,456 B <br />2,097,152 Kib <br />262,144 KiB <br />2,048 Mib <br />0.25 GiB <br /> (DDR3L)
RAM1 Chip	Brand? Model?
ETH chip1	MediaTek MT7621AT
Ethernet Port Count	1-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: 48:22:54 (1 E, 1 W) Ethernet OUI: 48:22:54 (1 E, 1 W)
Stock bootloader	U-Boot
Expansion IF types	none specified
PoE	802.3at, standard
Power	48 VDC, ? A
Serial Port (UART)	yes, 3.3V TTL, (115200 8N1)
Other
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Radio 1
Chip1	MediaTek MT7905DA
Wireless interface OUI	48:22:54
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n/ax
802.11ax	up to 574 Mbps
802.11n	up to 300 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	MediaTek MT7975D
Wireless interface OUI	48:22:54
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/n/ac/ax
802.11ax	up to 1201 Mbps
802.11ac	up to 867 Mbps
802.11n	up to 300 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz

For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.

For a list of all currently documented TP-LINK devices with specifications, see TP-LINK.

• 574 Mbps - 2SS 2.4GHz 802.11ax (40MHz chan., 256-QAM),

• 1201 Mbps - 2SS 5GHz 802.11ax (80MHz chan., 1024-QAM) = AX1800 class

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)

Target: ramips
Subtarget: mt7621
Package architecture: mipsel_24kc
Supported Since Commit
Support started version: 23.05.0
Current supported version: 25.12.2

WLAN Hardware: MediaTek MT7905DA, MediaTek MT7975D
WLAN Comment: 2x2 MU-MIMO, OFDMA
Installation method(s):
see git-commit
Recovery method(s):
see git-commit

git • >>

ramips: mt7621: add TP-Link EAP613 v1 The TP-Link EAP613 v1 is a ceiling-mount 802.11ax access point. It can be powered via PoE or a DC barrel connector (12V). Connecting to the UART requires fine soldering and careful manipulation of any soldered wires. Device details: * SoC: MT7621AT * Flash: 16 MiB SPI NOR * RAM: 256 MiB DDR3L * Wi-Fi: * MT7905DA + MT7975D: 2.4 GHz + 5 GHz (DBDC), 2x2:2 * Two stamped metal antennas (ANT1, ANT2) * One PCB antenna (ANT3) * One unpopulated antenna (ANT4) * Ethernet: * 1× 10/100/1000 Mbps port with PoE * LEDs: * Array of four blue LEDs with one control line * Buttons: * Reset * Board test points: * UART: next to CPU RF-shield and power circuits * JTAG: under CPU RF-shield (untested) * Watchdog: 3PEAK TPV706 (not implemented) Althought three antennas are populated, the MT7905DA does not support the additional Rx chain for background DFS detection (or Bluetooth) according to commit 6cbcc34f50a3 ("ramips: disable unsupported background radar detection"). MAC addresses: * LAN: 48:22:54:xx:xx:a2 (device label) * WLAN 2.4 GHz: 48:22:54:xx:xx:a2 * WLAN 5 GHz: 48:22:54:xx:xx:a3 The radio calibration blob stored in flash also contains valid MAC addresses for both radio bands (OUI 00:0c:43). Factory install: 1. Enable SSH on the device via web interface 2. Log in with SSH, and run `cliclientd stopcs` 3. Upload -factory.bin image via web interface. It may be necessary to shorten the filename of the image to e.g. 'factory.bin'. Recovery: 1. Open the device by unscrewing four screws from the backside 2. Carefully remove board from the housing 3. Connect to UART (3.3V): * Find test points labelled "VCC", "GND", "UART_TX", "UART_RX" * Solder wires to test points or connect otherwise. Be careful not to damage the PCB e.g. by pulling on soldered wires. * Open console with 115200n8 settings 4. Interrupt bootloader and use tftpboot to start an initramfs: setenv ipaddr $DEVICE_IP setenv serverip $SERVER_IP tftpboot 84000000 openwrt-initramfs-kernel.bin bootm DO NOT use saveenv to store modified u-boot environment variables. The environment is saved at flash offset 0x30000, which erases part of the (secondary) bootloader. The device uses two bootloader stages. The first stage will load the second stage from a uImage stored at flash offset 0x10000. In case of a damaged second stage, the first stage should allow uploading a new image via y-modem (untested).