Amped Wireless AP20000G

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Amped Wireless AP20000G

Manuf (OEM/ODM): Loopcomm

FCC approval date: 11 September 2012
(Est.) release date: 15 September 2012
UPC: 850214003423 (UPC DB, On eBay)
Country of manuf.: Taiwan

Amazon image

B008WJ6ISY (Flag of the United States.svg, On Amazon, On CCC)

Type: wireless router

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Realtek RTL8198 (620 MHz)
FLA1: 8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX25L6406EM2I-12G)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Hynix H5PS5162GFR-S6C)

Expansion IFs: USB 2.0
USB ports: 1
Serial: yes, (38400,8,N,1)

WI1 chip1: Realtek RTL8192DR
WI1 802dot11 protocols: an
WI1 MIMO config: 2x2:2
WI1 antenna connector: RP-SMA
WI2 chip1: Realtek RTL8192CE
WI2 802dot11 protocols: bgn
WI2 MIMO config: 2x2:2
WI2 antenna connector: RP-SMA

ETH chip1: Realtek RTL8198
Switch: Realtek RTL8198
LAN speed: 1G
LAN ports: 4
WAN speed: 1G
WAN ports: 1


Stock bootloader: rtkload

Stock FW OS: Linux

Default SSID: Amped_AP_2.4GHz
, Amped_AP_5.0GHz
Default IP address:
the IP is used by 2 additional devices
of which 2 are Amped Wireless devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1281 additional devices
of which 7 are Amped Wireless devices

802dot11 OUI: F8:7B:8C (7 E, 9 W)
Ethernet OUI: F8:7B:8C (7 E, 9 W)

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

High Power Wireless-N 600mW Gigabit Dual Band Access Point
Product page

"LOO0070 REV: 1.3" is silkscreened on the board.

The board is using all Tocon capacitors.

The device uses 2x Skyworks (SiGe) SE5004L / 5004L power amplifiers for the 5GHz radio and 2x Skyworks (SiGe) SE2576L / 2576L power amplifiers for the 2.4GHz radio.

Device recovery

If the device has been misflashed and is unable to boot, recovery (without serial) should be manageable by switching the device into recovery mode (hold 'reset' button while connecting power until LAN ports stay solid blue). The device is then flashable via TFTP @

Firmware would seem to be accepted in the standard Realtek format.

You will need to split the vendor's firmware into the three constituent files (using binwalk would be highly recommended).. and then likely upload in the following order..
  • the webpages bin (unk. name, don't care enough to find out now)
  • root.bin
  • linux.bin

Additionally, the firmware of other devices sharing the same board (i.e. the SR20000G and R20000G) appears to be easily flashable using this method (functionallity was not tested aside from noting successful boot and persistence of previous AP mode settings).

See conjur's post on the Realtek thread on the DD-WRT Forum and, presumably, the RTK SDK code and documentation for more details.