Hawking HD45R

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Hawking HD45 R

Manuf (OEM/ODM): Edimax BR-6675nD

FCC approval date: 20 October 2011
(Est.) release date: 20 February 2012
UPC: 603992507030 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

ASIN
B007B5PR1O (Flag of the United States.svg, On Amazon, On CCC)

Type: wireless router

FCC ID: NDD9566751028

Power: 12 VDC, 1.25 A
Connector type: barrel

CPU1: Ralink RT3883 (500 MHz)
FLA1: 8 MiB 8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX29LV640EBTI-70G)
RAM1: 64 MiB 67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Winbond W9751G6JB-25)

Expansion IFs: none specified

WI1 chip1: Ralink RT3883
WI1 802dot11 protocols: an
WI1 MIMO config: 3x3:3
WI1 antenna connector: U.FL, RP-SMA
WI2 chip1: Ralink RT3092
WI2 802dot11 protocols: bgn
WI2 MIMO config: 2x2:2
WI2 antenna connector: U.FL, RP-SMA

ETH chip1: Ralink RT3883
Switch: Realtek RTL8367R-VB
LAN speed: 1G
LAN ports: 4
WAN speed: 1G
WAN ports: 1

abgn

Additional chips
5GHz Power Amplifier IC;Skyworks;SE2567L;SiGe, 2567L, 143AB;3;
2.4GHz Power Amplifier IC;unknown;unknown;1047, NEA2;2;

Stock bootloader: U-Boot 3.5.3.0 Ralink

Stock FW OS: Linux 2.6.21

TPFirmware supported: Padavan (WiP) • (List)

Default SSID: Hawking_HD45R_2.4GHz
, Hawking_HD45R_5GHz
Default IP address: 192.168.1.254
the IP 192.168.1.254 is used by 158 additional devices
of which 3 are Hawking devices
Default login user: admin
Default login password: 1234
admin:1234 credentials used by 185 additional devices
of which 4 are Hawking devices

802dot11 OUI: 00:0E:3B (2 E, 15 W)
Ethernet OUI: 00:0E:3B (2 E, 15 W)

For a list of all currently documented Ralink chipsets with specifications, see Ralink.


Hi-Gain Dual Band Wireless-N Router

Product page
Datasheet
User's manual

Specifications

  • LAN: 4x 1GbE (Auto-MDI/MDI-X)
  • WAN: 1x 1GbE (Auto-MDI/MDI-X)
  • 2.4GHz: 2T2R MIMO (300Mbps)
  • 5GHz: 3T3R MIMO (450Mbps)
  • Antenna: 3x 3dBi DualBand Dipole
  • Power Adapter: 12V, 1.25A

"1244-00000729-50Z" is silkscreened on one production model HD45R's board.
This device is an Edimax BR-6675nD. It's board is
somewhat similar to the one used by the BR-6475nD.

Per the manual, this device has two SSIDs:
Hawking_HD45R_2.4GHz and Hawking_HD45R_5GHz.

There are a few entries (6) for the 2.4GHz SSID
in WiGLE as of 03/30/2013, all with 00:0E:3B OUIs.

Additional external links

Spec. aggregators

Vendors

Serial

Pinout

It's presumably the following...

(TxD) (GND) (RxD) [3.3]
J2

Info derived from

 • boot log
U-Boot 1.1.3 (Sep 28 2011 - 14:24:27)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fa8000
************** Init GPIO Pin Start **************
************** Init GPIO Pin Done **************
flash_protect ON: from 0xBC000000 to 0xBC0254C7
flash_protect ON: from 0xBC030000 to 0xBC030FFF
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.5.3.0
--------------------------------------------
ASIC 3883_MP (MAC to REALTEK Mode)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: NOR Flash
Date:Sep 28 2011  Time:14:24:27
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 500 MHZ ####
 estimate memory size =64 Mbytes

 Realtek giga Mac init!
regData1 = 0000 regData2 = 0000, RTL8367R
(rtk_switch_init 11984) init_rgmii done

 Realtek giga Mac done!

Please choose the operation:
   0: Load ucos code to SDRAM via TFTP Client.
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.

You choosed 3

flash id = 000322cb sectors = 135 count = 8388608

3: System Boot system code via Flash.
## Booting image at bc070000 ...
CSYS magic number at 0xBC070000
   Image Name:   Linux Kernel Image
   Created:      2012-03-06  11:16:03 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    4525996 Bytes =  4.3 MB
   Load Address: 80000000
   Entry Point:  80280000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80280000) ...
## Giving linux memsize in MB, 64

Starting kernel ...
LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@localhost.localdomain) 
(gcc version 3.4.2) #176 Tue Mar 6 19:11:43 CST 2012

The CPU feqenuce set to 500 MHz
CPU revision is: 0001974c
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5
Primary instruction cache 64kB, tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
cause = c0808000, status = 11000000
PID hash table entries: 256 (order: 8, 1024 bytes)
calculating r4koff... 001e8480(2000000)
CPU frequency 500.00 MHz
Using 250.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 62140k/65536k available (2086k kernel code, 
3336k reserved, 469k data, 116k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_PCI_PCICFG_ADDR = 0

*************** Ralink PCIe RC mode *************
registering PCI controller with io_map_base unset
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
2->[1][0][0][30]=0
5->[1][0][0][30]=fffffffe
2->[1][0][0][30]=0
5->[1][0][0][30]=0
PCI: Bridge: 0000:00:00.0
  IO window: disabled.
  MEM window: 20000000-200fffff
  PREFETCH window: disabled.
BAR0 at slot 0 = 0
bus=0, slot = 0x0
P2P(PCI) 0x00 = 08021814
P2P(PCI) 0x04 = 00100007
P2P(PCI) 0x08 = 06040001
P2P(PCI) 0x0c = 00010000
P2P(PCI) 0x10 = 00000000
P2P(PCI) 0x14 = 20100000
P2P(PCI) 0x18 = 00010100
P2P(PCI) 0x1c = 000000f0
P2P(PCI) 0x20 = 20002000
P2P(PCI) 0x24 = 0000fff0
P2P(PCI) 0x28 = 00000000
P2P(PCI) 0x2c = 00000000
P2P(PCI) 0x30 = 00000000
P2P(PCI) 0x34 = 00000040
P2P(PCI) 0x38 = 00000000
P2P(PCI) 0x3c = 000401ff
res[0]->start = 0
res[0]->end = 1ffffff
res[1]->start = 20100000
res[1]->end = 2010ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=1, slot = 0x0
dev III(PCIe)  0x00 = 30911814
dev III(PCIe)  0x04 = 00100000
dev III(PCIe)  0x08 = 02800000
dev III(PCIe)  0x0c = 00000000
dev III(PCIe)  0x10 = 20000000
dev III(PCIe)  0x14 = 00000000
dev III(PCIe)  0x18 = 00000000
dev III(PCIe)  0x1c = 00000000
dev III(PCIe)  0x20 = 00000000
dev III(PCIe)  0x24 = 00000000
dev III(PCIe)  0x28 = 00000000
dev III(PCIe)  0x2c = 30911814
dev III(PCIe)  0x30 = 00000000
dev III(PCIe)  0x34 = 00000040
dev III(PCIe)  0x38 = 00000000
dev III(PCIe)  0x3c = 000001ff
res[0]->start = 20000000
res[0]->end = 2000ffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ralink flash device: 0x1000000 at 0x1c000000
Ralink SoC physically mapped flash: 
Found 1 x16 devices at 0x0 in 16-bit bank

Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: 
Disabling erase-suspend-program due to code brokenness.
Creating 7 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00070000 : "Cimage"
0x00070000-0x00170000 : "Kernel"
0x00170000-0x01020000 : "RootFS"
mtd: partition "RootFS" extends beyond the end of device 
"Ralink SoC physically mapped flash" -- size truncated to 0x690000
0x00070000-0x01020000 : "Uimage"
mtd: partition "Uimage" extends beyond the end of device 
"Ralink SoC physically mapped flash" -- size truncated to 0x790000
Load Ralink DFS Timer Module
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
io scheduler noop registered (default)
pcie_portdrv_probe->Dev[1814:0802] has invalid IRQ. Check vendor BIOS 
assign_interrupt_mode Found MSI capability
***********Init LED Driver*****************
Init GPIO Pin
led_init 641 Boot from NOR flash
Init GPIO Direction
Init GPIO Interrupt

***********Init LED Driver Finishing*****************
Ralink_gpio_init_irq
LED & GPIO & LAN Status Driver LED_VERSION
spidrv_major = 217
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Ralink APSoC Hardware Watchdog Timer
Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
MAC_ADRH -- : 0x00000000
MAC_ADRL -- : 0x00000000

Ralink APSoC Ethernet Driver Initilization. 
v2.0  256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x0000000c
MAC_ADRL -- : 0x432880b8
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.2
block2mtd: version $Revision: 1.1.1.1 $
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: Product: Ralink EHCI Host Controller
usb usb1: Manufacturer: Linux 2.6.21 ehci_hcd
usb usb1: SerialNumber: rt3xxx
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
usb usb2: Product: RT3xxx OHCI Controller
usb usb2: Manufacturer: Linux 2.6.21 ohci_hcd
usb usb2: SerialNumber: rt3xxx-ohci
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
u32 classifier
    Performance counters on
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
ipt_time loading
ClusterIP Version 0.8 loaded successfully
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 116k freed
init started: BusyBox v1.15.2 (2012-03-06 19:13:02 CST)
starting pid 242, tty : /etcAlgorithmics/MIPS FPU Emulator v1.5
/rc.sh'
cannot run '/etc/rc.sh': No such file or directory

starting pid 243, tty '': '-/bin/sh'console.

BusyBox v1.15.2 (2012-03-06 19:13:02 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

Tue Mar  6 19:03:57 UTC 2012
Started WatchDog Timer.
Started WatchDog Timer.
watchdog: ioctl 0xc0045706 failed: 
Inappropriate ioctl for device
rgmii: module license 'unspecified' taints kernel.
(smi_init 311)RT2880_GPIOMODE_REG = 0000185c Init!
(smi_reset 246) smi_reset
rtk_8367b_switch_init 13707 
init_para = c007c270 init_size = 0096 data=00001010
switch_init 415 mode = 1 model = 0 vlan = 1 switch = 1010
init_rgmii 249 RTL8367R_VB
(switch_init 423) init_rgmii done
MAC_ADRH -- : 0x0000000e
MAC_ADRL -- : 0x3b66023c

phy_tx_ring = 0x03e6f000, tx_ring = 0xa3e6f000

phy_rx_ring0 = 0x03e70000, rx_ring0 = 0xa3e70000
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = C0710000
eth2.1: Setting MAC address to  00 0e 3b 66 02 3c.
VLAN (eth2.1):  Underlying device (eth2) has same MAC, 
not checking promiscious mode.
eth2.2: Setting MAC address to  00 0e 3b 66 02 3f.
device eth2 entered promiscuous mode
VLAN (eth2.2):  Setting underlying device (eth2) to promiscious mode.
Initialize ra0 interface
Initialize rai0 interface
wireless_driver


=== pAd = c0091000, size = 702064 ===

<-- RTMPAllocTxRxRingMemory, Status=0
<-- RTMPAllocAdapterBlock, Status=0
RX DESC a3a8a000  size = 2048
1. Phy Mode = 8
2. Phy Mode = 8
3. Phy Mode = 8
MCS Set = ff ff ff 00 01
Main bssid = 00:0e:3b:66:02:3e
<==== rt28xx_init, Status=0
0x1300 = 00064300
acm_msg> ACM_MEM_Alloc_Num = 1
acm_msg> ACM_MEM_Free_Num  = 1
wireless_driver


=== pAd = c0171000, size = 639216 ===

<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xc0160000, csr_addr=0xc0160000!
RX DESC a3e79000  size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
Main bssid = 00:0e:3b:66:02:3c
<==== rt28xx_init, Status=0
0x1300 = 00064380
acm_msg> ACM_MEM_Alloc_Num = 1
acm_msg> ACM_MEM_Free_Num  = 1
Setup BRIDGE interface
ifconfig: ioctl 0x8913 failed: No such device
bridge br0 doesn't exist; can't delete it
Setup bridge...
eth2.1: dev_set_promiscuity(master, 1)
device eth2.1 entered promiscuous mode
route: ioctl 0x890c failed: No such process
eth2.2: dev_set_promiscuity(master, 1)
device eth2.2 entered promiscuous mode
route: ioctl 0x890c failed: No such process
RX DESC a3a8a000  size = 2048
1. Phy Mode = 8
2. Phy Mode = 8
3. Phy Mode = 8
MCS Set = ff ff ff 00 01
Main bssid = 00:0e:3b:66:02:3e
<==== rt28xx_init, Status=0
0x1300 = 00064300
route: ioctl 0x890c failed: No such process
device ra0 entered promiscuous mode
RX DESC a37af000  size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
Main bssid = 00:0e:3b:66:02:3c
<==== rt28xx_init, Status=0
0x1300 = 00064380
route: ioctl 0x890c failed: No such process
device rai0 entered promiscuous mode
br0: port 4(rai0) entering learning state
br0: port 3(ra0) entering learning state
br0: port 2(eth2.2) entering learning state
br0: port 1(eth2.1) entering learning state
br0: topology change detected, propagating
br0: port 4(rai0) entering forwarding state
br0: topology change detected, propagating
br0: port 3(ra0) entering forwarding state
br0: topology change detected, propagating
br0: port 2(eth2.2) entering forwarding state
br0: topology change detected, propagating
br0: port 1(eth2.1) entering forwarding state
route: ioctl 0x890c failed: No such process
route: ioctl 0x890c failed: No such process
------> 802.1x--------->Enter
------> 802.1x------>Exit

Static DHCP Leases disable!
route: ioctl 0x890c failed: No such process
Setup WAN interface
Close Wan(eth2.2) Interface!!
device eth2 is not a slave of br0
device eth2.1 is already a member of a bridge; 
can't enslave it to bridge br0.
switch reg write offset=14, value=405555
ioctl: Operation not supported
switch reg write offset=50, value=2001
ioctl: Operation not supported
switch reg write offset=98, value=7f3f
ioctl: Operation not supported
switch reg write offset=e4, value=3f
ioctl: Operation not supported
switch reg write offset=40, value=1001
ioctl: Operation not supported
switch reg write offset=44, value=1001
ioctl: Operation not supported
switch reg write offset=48, value=1002
ioctl: Operation not supported
switch reg write offset=70, value=ffff506f
ioctl: Operation not supported
ioctl: Operation not supported

udhcpc (v1.15.2) started
**********************************************************************
*                          Enable WSC_UPnP                           *
**********************************************************************
into eth2.2.deconfig
killall: snmpd: no process killed
**********************************************************************
*                            Enable LLTD                             *
**********************************************************************
killall: lld2d: no process killed
killall: radiusd: no process killed
RADIUS server disable !!
libupnp: using UDP SSDP_PORT = 1900
kill: you need to specify whom to kill
libupnp: using UDP SSDP_PORT = 1900
/bin/init.sh: line 710: 
can't create /proc/pppoe_pass: nonexistent directory

**********************************************************************
*                       FREE Page,Dentries and Inodes Cache          *
**********************************************************************
killall: gpio: no process killed
ralink_gpio:ioctl GPIO REG
info.irq = 7
ralink_gpio:ioctl GPIO REG
info.irq = 9
boa: server version Boa/0.94.14rc21
boa: server built Mar  6 2012 at 19:14:10.
boa: starting server pid=729, port 80
MemFree:         47852 kB
Cached:           2652 kB