Edimax BR-6478AC

Edimax BR-6478AC V1.0A

FCC approval date: 30 April 2013
(Est.) release date: 10 April 2013
UPC: 649659019805 (UPC DB, On eBay)
EAN: 4710700929469 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

ASIN
B00CEEP3DE (, On Amazon, On CCC, multiple uses)
multiple revisions of this device, use caution

Type: wireless router

FCC ID: NDD9564781213

Power: 5 VDC, 2 A
Connector type: barrel

CPU1: Realtek RTL8197D (660 MHz)
FLA1: 4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br /> (Macronix MX25L3206EM2I-12G)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Nanya NT5TU32M16DG-AC)

Expansion IFs: Mini PCIe
Mini PCIe slots: 1
Serial: yes, internal, unpopulated, 3.3V TTL, 4-pin header, J1, (38400,8,N,1)

WI1 module: Edimax EW-7822MAC
WI1 module IF: Mini PCIe (half)
WI1 chip1: Realtek RTL8812AR
WI1 802dot11 protocols: an+ac
WI1 MIMO config: 2x2:2
WI1 antenna connector: U.FL
WI2 chip1: Realtek RTL8192CE
WI2 802dot11 protocols: bgn
WI2 MIMO config: 2x2:2
WI2 antenna connector: U.FL

ETH chip1: Realtek RTL8197D
Switch: Realtek RTL8367RB
LAN speed: 1G
LAN ports: 4
WAN speed: 1G
WAN ports: 1

abgn+ac

Additional chips
5 GHz SPDT Switch w/ LNA;Skyworks;SKY85601;SKY, 85601, 229CU;2;;16-pin QFN;2.5x2.5mm;

Stock bootloader: rtkload

Stock FW OS: Linux 2.6.30

Default SSID: edimax.setup (4 addl. devices)
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 294 additional devices
of which 57 are Edimax devices
Default login user: admin
Default login password: 1234
admin:1234 credentials used by 185 additional devices
of which 73 are Edimax devices

802dot11 OUI: 80:1F:02 (6 E, 14 W)
Ethernet OUI: 80:1F:02 (6 E, 14 W)

	FCC ID
Comtrend WR-5887	L9VWR5887 NDD9564781213
Edimax EW-7822MAC	NDD9564781213
Manhattan 525480	NDD9564781213
SparkLAN WPET-232ACN	TX2-RTL8812AE NDD9564781213
ZyXEL X650	NDD9564781213

	CPU1 brand	WI1 chip1 brand	WI2 chip1 brand
Edimax BR-6478AC	Realtek	Realtek	Realtek
Edimax BR-6478AC v2	MediaTek	MediaTek	MediaTek

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

---

AC1200 Wireless Concurrent Dual-Band Gigabit Router

 • Product page  • Datasheet

The FCC test report indicates that the Edimax GR-478AC
and the ZyXEL X650 are also covered by the same FCC ID.

• "1244-010000842-50Z" is silkscreened on the main board of the FCC EUT.

"1244-00000861-50Z_ES" is silkscreened on the wireless module of the same device.

• "1244-010000892-50Z" is silkscreened on the main board of a production model.

"1244-00000861-50Z" is silkscreened on the wireless module of the same device.

This device is likely using RTL8367R as the Switch IC.

By default, the device broadcasts the SSID of edimax.setup on both bands.

• The power adapter included with the device is likely a DVE

DSA-12PFA-05 FUS 050200 (100-240V 50/60Hz, 0.5A -> 5VDC 2A).

Reviews

• Reviewed on SmallNetBuilder
• Reviewed on VR-Zone
• Reviewed on NetCheif

CPU: Realtek RTL8197D @660MHz

Switch: Realtek RTL8367RB GbE

RAM: Nanya NT5TU32M16DG 64MB

Flash: Macronix MX25L3206E 4MB

WLAN 2.4GHz: Realtek RTL8192CE 2T2R 802.11bgn

WLAN 5GHz: Realtek RTL8812AR 2T2R 802.11ac

USB: 2x USB 2.0 (unpopulated, unsoldered)

Serial

Pinout

The pinout used would seem to be a standard one used by Edimax..

J1 [3.3] (RxD) (GND) (TxD)

----> to PCIe WI module

Info derived from

• boot log

Booting... @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @ chip__no chip__id mfr___id dev___id cap___id size_sft dev_size chipSize @ 0000000h 0c22016h 00000c2h 0000020h 0000016h 0000000h 0000016h 0400000h @ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt chip_clk chipName @ 0010000h 0000040h 0001000h 0000400h 0000100h 0000010h 000002dh MX25L3205D @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ---RealTek(RTL8196D)at 2013.01.02-14:19+0800 v0.6 [16bit](659MHz) no rootfs signature at 000E0000! no rootfs signature at 000F0000! Jump to image start=0x80500000... decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. start address: 0x80003470 CPU revision is: 0000dc02 Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1 icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B NR_IRQS:48 PID hash table entries: 256 (order: 8, 1024 bytes) console handover: boot [early0] -> real [ttyS0] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 49936k/65536k available (2692k kernel code, 15524k reserved, 712k data, 108k init, 0k highmem) Calibrating delay loop... 658.63 BogoMIPS (lpj=3293184) Mount-cache hash table entries: 512 net_namespace: 528 bytes NET: Registered protocol family 16 bio: create slab <bio-0> at 0 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher fuse init (API version 7.11) msgmni has been set to 97 io scheduler noop registered io scheduler cfq registered (default) Realtek GPIO Driver for Flash Reload Default Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A PPP generic driver version 2.4.2 MPPE/MPPC encryption/compression module registered NET: Registered protocol family 24 PPPoL2TP kernel driver, V1.0 Realtek WLAN driver - version 1.6 (2013-02-21) wlan_index:0 0, 134,0xba000000,0xb8b30000,14 =====>>INSIDE rtl8192cd_init_one <<===== PCIE reset (0) Do MDIO_RESET Find Port=1 Device:Vender ID=881210ec vendor_deivce_id=881210ec found 8812 !!! 8812 mp chip !! wlan0 (): not using net_device_ops yet wlan0-wds0 (): not using net_device_ops yet wlan0-wds1 (): not using net_device_ops yet wlan0-wds2 (): not using net_device_ops yet wlan0-wds3 (): not using net_device_ops yet wlan0-wds4 (): not using net_device_ops yet wlan0-wds5 (): not using net_device_ops yet wlan0-wds6 (): not using net_device_ops yet wlan0-wds7 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan0-vxd (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan0-va0 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan0-va1 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan0-va2 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan0-va3 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== wlan_index:1 0, 134,0xb9000000,0xb8b10000,11 =====>>INSIDE rtl8192cd_init_one <<===== PCIE reset (0) Do MDIO_RESET Find Port=0 Device:Vender ID=819110ec vendor_deivce_id=819110ec wlan1 (): not using net_device_ops yet wlan1-wds0 (): not using net_device_ops yet wlan1-wds1 (): not using net_device_ops yet wlan1-wds2 (): not using net_device_ops yet wlan1-wds3 (): not using net_device_ops yet wlan1-wds4 (): not using net_device_ops yet wlan1-wds5 (): not using net_device_ops yet wlan1-wds6 (): not using net_device_ops yet wlan1-wds7 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan1-vxd (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan1-va0 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan1-va1 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan1-va2 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== wlan1-va3 (): not using net_device_ops yet =====>>EXIT rtl8192cd_init_one <<===== pwlan0 (): not using net_device_ops yet Probing RTL8186 10/100 NIC-kenel stack size order[3]... chip name: 8196C, chip revid: 0 NOT YET -----share pin reg back to gpio mode----- eth0 (): not using net_device_ops yet eth0 added. vid=9 Member port 0x1... eth1 (): not using net_device_ops yet eth1 added. vid=8 Member port 0x10... eth2 (): not using net_device_ops yet eth2 added. vid=9 Member port 0x2... eth3 (): not using net_device_ops yet eth3 added. vid=9 Member port 0x4... eth4 (): not using net_device_ops yet eth4 added. vid=9 Member port 0x8... eth7 (): not using net_device_ops yet eth5 added. vid=9 Member port 0x0... peth0 (): not using net_device_ops yet [peth0] added, mapping to [eth1]... SPI INIT ------------------------- Force into Single IO Mode ------------------------ |No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName | | 0 c22016h 0h 400000h 10000h 1000h 100h 50 0 MX25L3206E| ---------------------------------------------------------------------------- SPI flash(MX25L3206E) was found at CS0, size 0x400000 Creating 2 MTD partitions on "flash_bank_1": 0x000000000000-0x000000400000 : "boot+cfg+linux" 0x000000130000-0x000000400000 : "root fs" Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1024 buckets, 4096 max) CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or sysctl net.netfilter.nf_conntrack_acct=1 to enable it. xt_time: kernel timezone is -0000 ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered NET: Registered protocol family 17 dnshijack Netlink[Kernel] create socket for igmp ok. Realtek FastPath:v1.03 VFS: Mounted root (squashfs filesystem) readonly on device 31:1. Freeing unused kernel memory: 108k freed init started: BusyBox v1.11.1 (2013-10-31 22:06:17 CST) starting pid 17, tty '': '/etc/init.d/rcS' mount: mounting none on /dev/pts failed: No such device insmod: cannot insert '/bin/islpci.o': Cannot allocate memory starting pid 22, tty '': '-/bin/sh' console. BusyBox v1.11.1 (2013-10-31 22:06:17 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. /bin/init.sh: line 82: cannot create /proc/sw_nat: nonexistent directory flash default ==> Flash Default <== ==> init WAN MTU kill: you need to specify whom to kill Close Wan Interface!! ==> WAN MTU 1500 ******************************************** * * Initialize wlan0 interface * ******************************************** ----> set 5G interface=wlan0 ==> Set Tx power high level ==>US and EUR middle+high use US Table set 5G TX Power: 0 C1: 0 txpower.sh 5G wlan0 MIB SYNC! 5G wlan0 init done! ******************************************** * * Initialize wlan1 interface * ******************************************** -----> IsVAP=wlan1 VAP= ==> Set Tx power high level ==>US and EUR middle+high use US Table set 2.4G TX Power: 0 A1: 0 B1: 0 C1: 0 txpower.sh Setup BRIDGE interface ==> Router bridge ==> COMMAND:bridge.sh br0 eth0 wlan0 wlan1 wlan0-va0 wlan0-va1 wlan0-va2 wlan0-va3 wlan1-va0 wlan1-va1 wlan1-va2 wlan1-va3 ifconfig: ioctl 0x8913 failed: No such device ifconfig: ioctl 0x8913 failed: No such device bridge br0 doesn't exist; can't delete it Setup bridge... device eth0 entered promiscuous mode device wlan0 entered promiscuous mode CP: MacInit_8812===>>=====>LLT_table_init_8812 LLT_table_init_8812<===== BEQ_DESA = 0x0043f000 0x0043f000 DONE [PHY_ConfigMACWithParaFile][MAC_REG_8812_n] [PHY_ConfigBBWithParaFile][PHY_REG_8812_n_extlna] [PHY_ConfigBBWithParaFile][PHY_REG_PG_8812_new] [PHY_ConfigBBWithParaFile][AGC_TAB_8812_n_extlna] [phy_RF6052_Config_ParaFile][RadioA_8812_n_extlna] [phy_RF6052_Config_ParaFile][RadioB_8812_n_extlna] <=== FirmwareDownload8812() [PHY_ConfigTXPwrTrackingWithParaFile][REG_TXPWR_TRK_8812] 0x55d = 0x1 8812 Enable Tx 2 Path 0x838 B(1)= 0, 0x456 = 0x32 device wlan1 entered promiscuous mode [PHY_ConfigMACWithParaFile][MACPHY_REG_92C] ===> Load_92C_Firmware <=== Load_92C_Firmware [PHY_ConfigTXPwrTrackingWithParaFile][REG_TXPWR_TRK] 0x55d = 0xff br0: port 3(wlan1) entering forwarding state br0: port 2(wlan0) entering forwarding state br0: port 1(eth0) entering forwarding state Static DHCP Leases disable! br0: port 1(eth0) entering disabled state br0: port 1(eth0) entering forwarding state Setup WAN interface kill: you need to specify whom to kill Close Wan Interface!! -->WAN_MODE:0 device eth1 is not a slave of br0 device eth0 is already a member of a bridge; can't enslave it to bridge br0. ********************************************************************** * Enable WSC_UPnP * ********************************************************************** ********************************************************************** * Enable LLTD * ********************************************************************** ********************************************************************** * Enable GPIO Interrupt * ********************************************************************** udhcpc (v1.11.1) started into eth1.deconfig killall: radiusd: no process killed RADIUS server disable !! killall: webs: no process killed Generated PIN = 48751384 WiFi Simple Config v2.12.1-wps2.0 (2013.07.26-03:42+0000). Register to wlan1 Register to wlan0 route: ioctl 0x890c failed: No such process iwcontrol RegisterPID to (wlan1) iwcontrol RegisterPID to (wlan0) ********************************************************************** * FREE Page,Dentries and Inodes Cache * ********************************************************************** IEEE 802.11f (IAPP) using interface br0 (v1.8) MemFree: 36460 kB Cached: 2344 kB dns_hijack_enabled = 1 killall: nbnsd: no process killed --iQsetup_set-- kill: you need to specify whom to kill addcgiext .lua,.lp,.php axhttpd/1.4.9: listening on ports 80 (http) and 443 (https) iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. --iQsetup set done-- No dnrd daemon found. Exiting. Notice: caching turned off ping: sendto: Network is unreachable kill: you need to specify whom to kill Notice: caching turned off ping: sendto: Network is unreachable boa: server version Boa/0.94.14rc21 boa: server built Oct 31 2013 at 22:06:10. boa: starting server pid=1978, port 80 Run check_iqv2_work

Flash Information

Address Layout:

0x0	Bootloader
0x6000	Flash Hardware settings
0x8000	Flash Default Settings
0x10000	Linux image flash offset start
0x40000	Linux image flash offset end
0xE0000	Root image offset start
0x150000	Root image offset end
0x400000	End of 4096KB flash

There's a datasheet for the flash used: MX25L3206E

Can confirm that the flash chip on here works when connected to

a raspberry pi and spi modules are loaded with flashrom 0.9.8. [1]

This system shares the same bootloader as the RTL8651c. In fact, in

Edimax's GPL release, their embedded instructions are for said system.

Images

• from Edimax
• Error creating thumbnail: File with dimensions greater than 12.5 MP

  front

• Error creating thumbnail: File with dimensions greater than 12.5 MP

  angled

• 

  back

• 

  back, labeled

• internal images
• 

  board top, orig.

• 

  board top, SoC heat spreader removed

• 

  RTL8197D SoC

• 

  RAM section

• 

  board bottom, Flash

• 

  RTL8812AR 11ac IC

• 

  board top, left side components

• 

  2.4GHz RF section (w/ RTL8192CE)

• 

  unpopulated RF section

• 

  11ac wireless module in slot, orig.

• 

  11ac wireless module in slot, label off

• 

  wireless module, OOS, back

• 

  board top, caps, inside view

• 

  board top, caps, outside view

• 

  board bottom

• 

  board bottom, Edimax P/N

• additional external images
• 

  angled

• 

  top

• 

  front panel

• 

  back, ports

• 

  bottom, w/ top off

• 

  main label

• 

  MAC labels