D-Link DAP-1522 rev A1

D-Link DAP-1522 A1

Manuf (OEM/ODM): Alpha Networks WAP-ND01

FCC approval date: 19 March 2008
UPC: 790069311864 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

ASIN
B001769K3O (, On Amazon, On CCC)
multiple revisions of this device, use caution

Type: access point, bridge

FCC ID: KA2AP1522A1
IC ID: 4216A-AP1522

Power: 5 VDC, 2 A
Connector type: barrel

CPU1: Ralink RT2880
FLA1: 4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br /> (Spansion S29AL032D90TFI04)
RAM1: 32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br /> (ProMOS V54C3256164VDI7)

Expansion IFs: none specified

WI1 chip1: Ralink RT2880
WI1 chip2: Ralink RT2850
WI1 802dot11 protocols: abgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: U.FL

ETH chip1: Ralink RT2880
Switch: Realtek RTL8366SR
LAN speed: 1G
LAN ports: 4

abgn

Stock FW OS: Linux 2.4.30

Default SSID: dlink (38 addl. devices)
Default IP address: 192.168.0.50
the IP 192.168.0.50 is used by 63 additional devices
of which 63 are D-Link devices
Default login user: admin
Default login password: blank
admin:blank credentials used by 344 additional devices
of which 180 are D-Link devices

802dot11 OUI: 00:22:B0 (4 E, 10 W), 00:26:5A (10 E, 12 W), 34:08:04 (8 E, 10 W)
Ethernet OUI: 00:22:B0 (4 E, 10 W), 00:26:5A (10 E, 12 W), 34:08:04 (8 E, 10 W)

	CPU1 brand	WI1 chip1 brand	WI1 chip2 brand
D-Link DAP-1522 rev A1	Ralink	Ralink	Ralink
D-Link DAP-1522 rev B1	Ralink	Ralink

For a list of all currently documented Ralink chipsets with specifications, see Ralink.

---

Xtreme N Duo Wireless Bridge/Access Point

 • Support page

OEM/ODM: Alpha Networks WAP-ND01 (8WAPND01.1)

The third receive chain appears to be disabled (despite there being

three U.FL connectors, there are only two antennas pictured in

the FCC internal photos and the test report states 2T2R status).

GPL Code

• D-link GPL site
• dap1522_v121_gpl_20090901_full.tar.gz (79.3 MB mega.co.nz)
• dap-1522_A1_gpl_1.11_.zip (72.2 MB mega.co.nz)
• dap-1522_A1_gpl_1.11_.zip (ftp.dlink.co.uk)
• dap1522_v111_gpl.tar.bz2 (ftp.dlink.fr)

EEPROM

• RT2880_eeprom_v1_0.bin (512 B mega.co.nz)

MTD

• mtd_block.7z (3.7 MB mega.co.nz)

Serial

Pinout

Header J1

Left <--- [|Rx|___|3.3V|GND|Tx|] --> Right

57600n8

Boot log

• Boot log

U-Boot 1.1.3 (Jun 3 2008 - 15:48:40) Build 001--ALPHA_v011 Board: RT2880 DRAM: 32 MB twe0 set to <NULL> toe0 set to <NULL> Set up sector start address BC400000 ============================================ ASIC -VerB/C (MAC to MAC Mode) DRAM COMPONENT=256Mbits DRAM BUS=16BIT Total memory = 32Mbytes Date:Jun 3 2008 Time:15:48:40 ============================================ Eth0 (10/100-M) Hit any key to stop autoboot: 0 ## Booting image at bc440000 ... Image Name: 7zip Linux Kernel Created: 1970-01-01 0:00:00 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: -1 Bytes = 4096 MB Load Address: 8a000000 Entry Point: 8a000000 Uncompressing Kernel Image with LZMA ... OK Starting kernel ... THIS IS ASIC - VERSION B ramsize = 32 MBytes rambase not set, set to default (0x08000000) MEMORY DESCRIPTOR dump: [0,8a1ef950]: base<0a000000> size<02000000> type<Free RAM memory> The CPU feqenuce set to 266 MHz CPU revision is: 0001906c icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0 i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256 Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes. Primary data cache 16kB, 4-way, linesize 16 bytes. [setup_scache]:1032 Linux version 2.4.30 (freddy@RangeRover) (gcc version 3.3.5) #1 Fri Jan 14 10:42:49 CST 2011 Determined physical RAM map: memory: 02000000 @ 0a000000 (usable) On node 0 totalpages: 49152 zone(0): 49152 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock1 noinitrd cause = 70c0807c, status = 1000ff00 calculating r4koff... 002896a0(2660000) CPU frequency 266.00 MHz Using 133.000 MHz high precision timer. Calibrating delay loop... 265.42 BogoMIPS Memory: 28652k/32768k available (1518k kernel code, 4116k reserved, 92k data, 68k init, 0k highmem) Dentry cache hash table entries: 32768 (order: 6, 262144 bytes) Inode cache hash table entries: 16384 (order: 5, 131072 bytes) Mount cache hash table entries: 512 (order: 0, 4096 bytes) Buffer cache hash table entries: 16384 (order: 4, 65536 bytes) Page-cache hash table entries: 65536 (order: 6, 262144 bytes) Checking for 'wait' instruction... unavailable. POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Initializing RT netlink socket Starting kswapd devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 squashfs: version 3.1 (2006/08/19) Phillip Lougher pty: 256 Unix98 ptys configured Ralink RT2880 gpio driver initialized Serial driver version 5.05c (2001-07-08) with no serial options enabled ttyS00 at 0x300500 (irq = 9) is a 16550A ttyS01 at 0x300c00 (irq = 8) is a 16550A RA2880 Ethernet Driver Initilization. v1.01 256 rx/tx descriptors allocated! FLASH_API: MAN_ID=1 DEV_ID=22F9 SIZE=4MB Amd/Fujitsu Extended Query Table v1.1 at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling fast programming due to code brokenness. Flash device: 0x400000 at 0xbc400000 ELBOX Physically mapped flash: squashfs filesystem found at block 832 Creating 8 MTD partitions on "ELBOX Physically mapped flash": 0x000d0080-0x00400000 : "rootfs" 0x00040000-0x003e0000 : "upgrade" 0x003f0000-0x00400000 : "rgdb" 0x00030000-0x00040000 : "bdcfg" 0x003e0000-0x003f0000 : "langpack" 0x00000000-0x00400000 : "flash" 0x00000000-0x00030000 : "Boot" 0x00030000-0x00032000 : "Boot Config" NET4: Linux TCP/IP 1.0 for NET4.0 IP Protocols: ICMP, UDP, TCP IP: routing cache hash table of 2048 buckets, 16Kbytes TCP: Hash tables configured (established 16384 bind 32768) NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. NET4: Ethernet Bridge 008 for NET4.0 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Load RT2880 Timer Module(Wdg/Soft) VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing prom memory: 0kb freed Freeing unused kernel memory: 68k freed console started trying to start /sbin/init init started: BusyBox v1.00 (2011.01.14-02:45+0000) multi-call binary Starting pid 10, console /dev/tts/1: '/etc/init.d/rcS' Algorithmics/MIPS FPU Emulator v1.5 [/etc/init.d/S03config.sh] Mounting proc and var ... Inserting modules ... Start xmldb ... [/etc/scripts/misc/profile.sh] get ... [/etc/scripts/misc/defnodes.sh] ... [/etc/defnodes/S10setnodes.sh] ... PHP [/etc/defnodes/S11setnodes.php] ... PHP [/etc/defnodes/S12features.php] ... PHP [/etc/defnodes/S20setnodes.php] ... SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,5) mount: Mounting /dev/mtdblock/5 on /www/locale/alt failed: Invalid argument PHP [/etc/defnodes/S40brand.php] ... [/etc/scripts/misc/defnodes.sh] Done !! [/etc/templates/timezone.sh] ... [/etc/templates/logs.sh] ... [/var/run/logs_run.sh] ... Inserting modules ... insmod: /lib/modules/2.4.30: No such file or directory Using /lib/modules/si2c.o RTL8366SR i2cphy... Phy init failed!! Phy init retry success!! RGMII phy data=10c Set RGMII delay time SUCCESS MDIO_CFG = 1f01dc01 GDMA1_FWD_CFG = 10000 rt2880_eth_setup: DSP_EN OFF version driver [/etc/init.d/S03config.sh] done! [/etc/init.d/S10system.sh] start Layout ... [/etc/scripts/layout.sh] ... [/var/run/layout_start.sh] ... Start bridge layout ... device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: port 1(eth0) entering forwarding state br0: topology change detected, propagating start LAN ... [/etc/templates/lan.sh] ... [/var/run/lan_start.sh] ... Bridge mode selected, LAN is disabled ! start web server ... [/etc/templates/webs.sh] start ... [/var/run/webs_start.sh] ... Starting HTTPD ... start fresetd ... enable LAN ports ... Factory reset time : 5 secs System reset time : 1 secs WPS command : [/etc/templates/wps.sh pbc &] [/etc/scripts/enlan.sh] ... Generate channel table according to the country code... start WAN ... Set WAN port media type 0 Set WAN port greenethernet type 1 Enable green ethernet successed. [/etc/templates/wan.sh] start ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC() ... start telnet daemon ... Start telnetd ... start DHCP server [/etc/templates/dhcpd.sh] ... [/var/run/dhcpd_restart.sh] ... Stop DHCP server (br0) ... never heard of command [dhcp_server_enable] commands: addbr <bridge> add bridge addif <bridge> <device> add interface to bridge delbr <bridge> delete bridge delif <bridge> <device> delete interface from bridge show show a list of bridges showmacs <bridge> show a list of mac addrs showstp <bridge> show bridge stp info setageing <bridge> <time> set ageing time setbridgeprio <bridge> <prio> set bridge priority setfd <bridge> <time> set bridge forward delay setgcint <bridge> <time> set garbage collection interval sethello <bridge> <time> set hello time setmaxage <bridge> <time> set max message age setpathcost <bridge> <port> <cost> set path cost setportprio <bridge> <port> <prio> set port priority stp <bridge> <state> turn stp on/off apmode <bridge> <state> pass AP operation mode to bridge setprimaryvid <bridge> <vid> set primary vlan ID igmp_snooping <bridge> <state> turn igmp snooping on/off deliver_control <bridge> <state> turn deliver_controlk on/off setmataddr <bridge> <address> set mac cloning address setmatmode <bridge> <state> set mac cloning mode scanlanmacs <bridge> scan lan port mac address setwpsstat <bridge> set current wps work status showmataddr <bridge> show current ra0 address block_aparray <bridge> <state> set this if aparray is enabled block_neap <bridge> <state> set this if aparray is enabled Start DHCP server (br0) ... start NEAP ... [/etc/templates/neaps.sh] start ... [/var/run/neaps_start.sh] ... Start Neap Server ... start NEAPC ... [/etc/templates/neapc.sh] start ... [/var/run/neapc_start.sh] ... not pure AP mode, so disable AP ARRAY ... Start NeapC Client ... aparraymsg: not found : cannot create Stop apneaps Server ... : not found start Microsoft LLDP ... [/etc/templates/lld2d.sh] ... /var/run/wlan_stop.sh: cannot open [/etc/templates/wan.sh] restart ... [/var/run/lld2d_start.sh] ... Start LLD2 daemon ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... start NetBIOS ... [/etc/templates/netbios.sh] ... [/var/run/netbios_start.sh] ... Enable NetBIOS! [/etc/templates/wandown.sh] ... [/etc/init.d/S10system.sh] done! rcS done! Starting pid 497, console /dev/tts/1: '/bin/sh' BusyBox v1.00 (2011.01.14-02:45+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. # [/var/run/wan_down.sh] ... [/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! DHCP client on WAN(br0) CloneMAC() ... [/etc/templates/wlan.sh] ... [/etc/templates/wlan_run.sh] start ... [/var/run/wlan_start.sh] ... Start WLAN interface ra0 ... WLAN is disabled ! [/etc/templates/qos.sh] restart ... [/etc/templates/wan.sh] restart ... [/var/run/wan_stop.sh] ... Bridge mode selected ! Stop DHCP client on WAN(br0) ... [/etc/templates/wandown.sh] ... [/var/run/qos_start.sh] ... Interface is wanif=eth0 wlanif=ra0... OK Start QOS system ... QOS is disabled, because WLAN setting. [/etc/templates/trafficmgr.sh] restart ... [/var/run/wan_down.sh] ... [/etc/templates/upnpd.sh] ... [/var/run/wan_start.sh] ... Bridge mode selected ! Start WAN(br0),192.168.0.50/255.255.255.0 ... [/etc/templates/wanup.sh] ... [/var/run/wan_up.sh] ... [/etc/templates/ntp.sh] ... NTP client is disabled ... [/etc/templates/upnpd.sh] ... [/var/run/upnpd_start.sh] ... Starting UPnP ... [/var/run/trafficmgr_start.sh] ... Interface is wanif=v_eth0 wlanif=v_ra0... OK Start traffic manager system ... traffic manager is disabled.

U-boot

Menu

Type "q" to escape automatic boot and reach U-boot's prompt.

help

RT2880 # ?
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvmlinux - Boot from an vmlinux in memory
cache_set   - Specify the header segment size in byte !!
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
go      - start application at address 'addr'
rt2880_hdrlen   - Specify the header segment size in byte !!
help    - print online help

iminfo  - print header information for application image
loadb   - load binary file over serial line (kermit mode)
loop    - infinite loop on address range
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
pci   - Display to all DMA status  !!
printenv- print environment variables
protect - enable or disable FLASH write protection
pse_reset  !!
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
sdd   - Display to all DMA status  !!
sdp   -
sdram_width   - Specify the SDRAM bus width !!
setenv  - set environment variables
sleep   - delay execution for some time
tftpboot- boot image via network using TFTP protocol
version - print monitor version

printenv

RT2880 # printenv
loadstart=0x8A100000
runtimeloadstart=0x8A000000
bootstart=0xBC400000
bootsize=0x30000
bootend=0xBC42FFFF
runtimestart=0xBC440000
runtimesize=0x3B0000
runtimeend=0xBC7EFFFF
envstart=0xBC430000
envend=0xBC43FFFF
bootcmd=run runtime
bootdelay=1
baudrate=57600
ethaddr="00:AA:BB:CC:DD:11"
ipaddr=192.168.1.10
serverip=192.168.1.250
preboot=echo;echo
update_bootloader=protect off $(bootstart) $(bootend);erase $(bootstart) $(bootend);cp.b $(loadstart) $(bootstart) $(bootsize)
update_runtime=protect off $(runtimestart) $(runtimeend);erase $(runtimestart) $(runtimeend);cp.b $(loadstart) $(runtimestart) $(runtimesize)
clean_env=protect off $(envstart) $(envend); erase $(envstart) $(envend);protect on $(envstart) $(envend)
runtime=bootm $(runtimestart) $(runtimeloadstart)
ethact=Eth0 (10/100-M)
signature=wapnd01_dlink_dap1522
stdin=serial
stdout=serial
stderr=serial
Environment size: 868/8188 bytes

Partitions

dev:    size   erasesize  name
mtd0: 00400000 00010000 "ELBOX Physically mapped flash"
mtd1: 0032ff80 00010000 "rootfs"
mtd2: 003a0000 00010000 "upgrade"
mtd3: 00010000 00010000 "rgdb"
mtd4: 00010000 00010000 "bdcfg"
mtd5: 00010000 00010000 "langpack"
mtd6: 00400000 00010000 "flash"
mtd7: 00030000 00010000 "Boot"
mtd8: 00002000 00010000 "Boot Config"

Creating 8 MTD partitions on "ELBOX Physically mapped flash":
0x000d0080-0x00400000 : "rootfs"
0x00040000-0x003e0000 : "upgrade"
0x003f0000-0x00400000 : "rgdb"
0x00030000-0x00040000 : "bdcfg"
0x003e0000-0x003f0000 : "langpack"
0x00000000-0x00400000 : "flash"
0x00000000-0x00030000 : "Boot"
0x00030000-0x00032000 : "Boot Config"

mounts

rootfs / rootfs rw 0 0
/dev/root / squashfs ro 0 0
none /dev devfs rw 0 0
none /proc proc rw 0 0
ramfs /var ramfs rw 0 0

Images

• internal
• 

  Board top

• 

  Soc

• 

  WiFi

• 

  Flash

• 

  RAM

• 

  Switch

• 

  Serial:
  White - (Rx)
  Red - [3.3V]
  Green - (GND)
  Black - (Tx)
  57600n8

• 

  P/N

• 

  Board bottom