TP-LINK RE210

abgn+ac (AC750)
AC750 Wireless Range Extender
Homepage	Product page
Wikipedia	TP-Link
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Supported
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	TP-LINK RE210
FCC ID	TE7RE210
Type	range extender
CPU1	MediaTek MT7620A
CPU1 Type	MIPS 24KEc
CPU1 Speed	580 MHz 32-bit
Flash1 Chip	Winbond W25Q64FVSIG
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip	Zentel A3R12E40CBF-8E
ETH chip1	MediaTek MT7620A
ETH chip2	Atheros AR8035-A
Ethernet Port Count	1-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: none specified
Stock bootloader	U-boot 4.1.0.0 Ralink
Stock FW OS	Linux 2.6.36
Expansion IF types	none specified
Power	100-240 VAC ~ 50/60 Hz, 0.3 A
Connector type	AC (direct)
Serial Port (UART)	yes, 4-pin header
Other
Default SSID: TP-LINK_Extender_2.4GHz (13 addl. devices) , TP-LINK_Extender_5GHz (13 addl. devices) Default IP address: 192.168.0.1 the IP 192.168.0.1 is used by 799 additional devices of which 99 are TP-LINK devices Default login user: admin Default login password: admin admin:admin credentials used by 1343 additional devices of which 280 are TP-LINK devices
Manuf/OEM/ODM	TP-LINK
3rd Party Firmware Support	OpenWrt • (List | Dev | DLs)
Retail
Availability	End of Life
FCC approval date	24 August 2015
ASIN	B00TQD2BYK
Country of manuf	China
Radio 1
Chip1	MediaTek MT7620A
Wireless interface OUI	none specified
Antenna Connector Type	U.FL
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	MediaTek MT7610EN
Wireless interface OUI	none specified
Antenna Connector Type	U.FL
MIMO status	1x1:1
Wireless Standard	IEEE 802.11a/n/ac
802.11ac	up to 433 Mbps
802.11n	up to 150 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.

For a list of all currently documented TP-LINK device with specifications, see TP-LINK.

• 433 Mbps - 1SS 5GHz 802.11ac (80MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AC750 class

Overview

"2053500117" is silkscreened on the board in the FCC photos.

Hardware appears to be very similar to the Netgear EX6100.

Unit has internal power supply and plugs directly into mains power socket.

Stock firmware only functions as an extender and client bridge and does

not support access point mode.

Basic details

To get the unit open, remove the two screws at the top. Squeeze the case in the middle

of each side t help loosen the two clips that continue to hold it together.

It takes some force to separate the two halves, but be careful not to damage the short

the antenna cables when the case finally gives.

There is a ceramic heatsink on the CPU - you can remove this to inspect it by giving

it a twist. It will remain adhesive so can be re-attached when finished.

Links of Interest

Reviews

• TP-Link AC750 Wi-Fi Range Extender (RE210) on geeklingo
• TP-Link AC750 RE210 review on help-wifi (RU)

Flashing

Flashing OpenWrt

On the OpenWrt ToH (techdata entry)
OpenWrt Target: ramips
OpenWrt Subtarget: mt7620
OpenWrt Package architecture: mipsel_24kc
Support started version: 21.02.0
Current supported version: 23.05.5

Please insert instructions here

JTAG-Serial Info

Serial

Serial Pinouts

• J1 is a serial header. Pin 1 is closest to the top

of the unit and pin 4 closest to the Ethernet port.

The pinout is as follows:

© 1 - Tx
© 2 - Rx
© 3 - Gnd
® 4 - Vcc

Connect with settings 57600 8N1. Signalling voltage is 3.3v.

Console output

Boot log

U-Boot 1.1.3 (Jun 29 2015 - 14:29:26) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83fb4000 enable ephy clock...done. rf reg 29 = 5 SSC disabled. spi_wait_nsec: 29 spi device id: ef 40 17 0 0 (40170000) find flash: W25Q64BV ============================================ Ralink UBoot Version: 4.1.0.0 This UBoot has been rewritten by TPLINK *_* -------------------------------------------- ASIC 7620_MP (Port5<->Phy) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Jun 29 2015 Time:14:29:26 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 580 MHZ #### estimate memory size =64 Mbytes Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 6: Load ART data then write to Flash via TFTP. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. 0 3: System Boot system code via Flash. ## Booting image at bc020000 ... Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8000c310) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.36+ (canjchen@ubuntu2ccj) (gcc version 3.4.2) #2 Mon Jun 29 14:31:06 CST 2015 The CPU feqenuce set to 580 MHz MIPS CPU sleep mode enabled. PCIE: bypass PCIe DLL. PCIE: Elastic buffer control: Addr:0x68 -> 0xB4 disable all power about PCIe CPU revision is: 00019650 (MIPS 24Kc) Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3 rw rootfstype=squashfs init=/sbin/init console=ttyS0 PID hash table entries: 256 (order: -2, 1024 bytes) Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes Writing ErrCtl register=0006f7aa Readback ErrCtl register=0006f7aa Memory: 62164k/65536k available (2016k kernel code, 3372k reserved, 449k data, 144k init, 0k highmem) NR_IRQS:128 MTK/Ralink System Tick Counter init... cd:80259da8, m:214748, s:32 console [ttyS1] enabled Calibrating delay loop... 386.04 BogoMIPS (lpj=772096) pid_max: default: 4096 minimum: 301 Mount-cache hash table entries: 512 NET: Registered protocol family 16 RALINK_GPIOMODE = 1a321d RALINK_GPIOMODE = 18321d PPLL_CFG1=0xe64000 MT7620 PPLL lock PPLL_DRV =0x80080504 start PCIe register access RALINK_PCI_PCICFG_ADDR = 1000f0 *************** MT7620 PCIe RC mode ************* bio: create slab <bio-0> at 0 pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff] pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff] pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff] pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff] pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff] pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff] pci 0000:00:00.0: PCI bridge to [bus 01-01] pci 0000:00:00.0: bridge window [io disabled] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff] pci 0000:00:00.0: bridge window [mem pref disabled] BAR0 at slot 0 = 0 bus=0x0, slot = 0x0 res[0]->start = 0 res[0]->end = 0 res[1]->start = 20200000 res[1]->end = 2020ffff res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=0x1, slot = 0x0 res[0]->start = 20000000 res[0]->end = 200fffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=0x1, slot = 0x0 res[0]->start = 20100000 res[0]->end = 201fffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 Switching to clocksource Ralink external timer NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 121 Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) io scheduler noop registered (default) Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A Generic platform RAM MTD, (c) 2004 Simtec Electronics deice id : ef 40 17 0 0 (40170000) W25Q64BV(ef 40170000) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (0M) .erasesize = 0x00000008 (0K) .numeraseregions = 65536 Creating 6 MTD partitions on "raspi": 0x000000000000-0x000000800000 : "ALL" NO GPIO Event! 0x000000000000-0x000000020000 : "Bootloader" 0x000000020000-0x000000120000 : "Kernel" 0x000000120000-0x0000007e0000 : "Rootfs" 0x0000007e0000-0x0000007f0000 : "UserConfig" 0x0000007f0000-0x000000800000 : "ART_Data" SMACCR1 -- : 0x0000ec08 SMACCR0 -- : 0x6b2c02a0 Ralink APSoC Ethernet Driver Initilization. v3.0 256 rx/tx descriptors allocated, mtu = 1500! SMACCR1 -- : 0x0000ec08 SMACCR0 -- : 0x6b2c02a0 PROC INIT OK! PPP generic driver version 2.4.2 TCP cubic registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly on device 31:3. Freeing unused kernel memory: 144k freed init started: BusyBox v1.01 (2015.06.29-06:32+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 Raeth v3.0 (Tasklet,SkbRecycle) phy_tx_ring = 0x03ee2000, tx_ring = 0xa3ee2000 phy_rx_ring0 = 0x03ee3000, rx_ring0 = 0xa3ee3000 SMACCR1 -- : 0x0000ec08 SMACCR0 -- : 0x6b2c02a0 CDMA_CSG_CFG = 81000000 GDMA1_FWD_CFG = 20010000 This Board use 2.6.36.x xt_time: kernel timezone is -0000 ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone nf_conntrack version 0.5.0 (973 buckets, 5120 max) Netfilter messages via NETLINK v0.30. ctnetlink v0.93: registering with nfnetlink. (none) mips #2 Mon Jun 29 14:31:06 CST 2015 (none) (none) login: device eth2.1 entered promiscuous mode device eth2 entered promiscuous mode br0: port 1(eth2.1) entering forwarding state br0: port 1(eth2.1) entering forwarding state Lan Domain: tplinkrepeater.net Lan Domain: www.tplinkrepeater.net rt2860v2_ap: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint MT7620--> === pAd = c09b1000, size = 907424 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 MT7620-->AP Driver version-2.7.1.6_edcca_monitor_20131227 MT7610-->register rtpci MT7610--> === pAd = c1002000, size = 934536 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 MT7610-->pAd->CSRBaseAddress =0xc0f00000, csr_addr=0xc0f00000! MT7610-->device_id =0x7650 MT7610-->==>MT76x0_WLAN_ChipOnOff(): OnOff:1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0xff000002 MT7610-->MACVersion = 0x76502000 MT7620-->RX DESC a3097000 size = 2048

Pictures

User Images

• 

  Main PCB with heatsink removed