Motorola VAP2500
Jump to navigation
Jump to search
Motorola VAP2500
Manuf (OEM/ODM): Gemtek WAPQ-215AN V01
FCC approval date: 12 July 2013
Country of manuf.: China
Type: access point
FCC ID: ACQ-VAP2500
IC ID: 109AS-VAP2500
Power: 12 VDC, 1 A
Connector type: barrel
CPU1: Quantenna QT2018BC (400 MHz)
FLA1: 16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (Macronix MX25L12845EMI-10G)
RAM1: 64 MiB 67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Hynix H5PS5162GFR-S6C)
Expansion IFs: none specified
Serial: yes, internal, 4-pin header, unpopulated, 3.3V TTL, (115200,8,N,1)
WI1 chip1: Quantenna QT2018BC
WI1 chip2: Quantenna QT2518B
WI1 802dot11 protocols: an
WI1 MIMO config: 4x4:4
WI1 antenna connector: U.FL
ETH chip1: Quantenna QT2018BC
ETH chip2: Broadcom AC201A1
LAN speed: 100M
LAN ports: 1
an
Additional chips
5GHz Front End Module;Skyworks;SE5007T;SiGe, 5007T, 130LT;4;
Stock bootloader: U-Boot
Stock FW OS: Linux 2.6.30
802dot11 OUI: 30:60:23, 58:56:E8, CC:7D:37, F8:0B:BE
Ethernet OUI: 30:60:23, 58:56:E8, CC:7D:37, F8:0B:BE
For a list of all currently documented Quantenna chipsets with specifications, see Quantenna.
Wireless Video Bridge
"WAPQ-215AN_V01", "ESX-YX0-0000R RoHS", and "587019-001-00" is silkscreened on the board in the FCC photos.
This device would appear to be used by AT&T's U-verse service.
Wi-Fi Certified : WFA18369 (as of 02/06/2013)
Serial
Pinout
(Pin 1 has a square pad)
- 3v3
- TX
- Rx
- GND
Info derived from
| • boot log |
|---|
Info: data uncached: addr=0xc0000000 size=1024MB
Info: text at 0x88000000, stack at 0x8803e7fc(8192),
heap at 0x88030000(51200), uboot size 142732
Info: i-cache is enabled
Info: d-cache is enabled
Info: CPU freq is 400000000, dev freq is 125000000
Info: Quantenna U-Boot version:1.4.4
Info: build date 'Jan 25 2012', time '16:07:58'
*********************************************
* Motorola VAP2400 U-Boot Version: 00.02.01 *
*********************************************
spi clock: val=0x3 ctl=0x80018002
spi clock: val=0x0 ctl=0x80000002
SPI flash info:
name : mx25l12836e
jedec_id : 0xc22018
sector size : 65536
number of sector : 256
frequency : 104000000
flags : 0x0
lock :
Boot reached stage 13
Boot reached stage 12
env size = 0x3ffc
Valid CRC found in flash restoring env...
Boot reached stage 11
board config:etron16-160, emac0-mii, pa2
In: serial
Out: serial
Err: serial
Boot reached stage 64
PHY found on MDIO addr:3000 0
Boot reached stage 65
QTN-EMAC
Hit any key to stop autoboot: 0
get_qtnboot_envvars:
vars: safety_image_addr 0x40000 safety_image_size 0x720000
live_image_addr 0x760000 live_image_size 0x720000
do_qtnboot: setenv bootargs ${bootargs} mtdparts=${mtdparts}
do_qtnboot: spi_flash read 0x00760000 0x82800000 0x00720000
Read: flash=0x760000 mem=0x82800000 size=7471104 ret_size=7471104
do_qtnboot: bootm 0x82800000
Boot reached stage 1
## Booting kernel from Legacy Image at 82800000 ...
Boot reached stage 2
Boot reached stage 3
Image Name: ruby-linux
Image Type: arc Linux Kernel Image (lzma compressed)
Data Size: 3947621 Bytes = 3.8 MB
Load Address: 80302000
Entry Point: 80302000
Verifying Checksum ... OK
Boot reached stage 4
Boot reached stage 5
Boot reached stage 6
Boot reached stage 14
Uncompressing Kernel Image ... OK
Boot reached stage 7
Boot reached stage 8
Command line TAG setup
Params->u.cmdline.cmdline console=ttyS0,115200n8 earlyprintk=1 hw_config_id=1211 ip=192.168.1.100 mtdparts=spi_flash:128k(uboot),128k(uboot_env),7296k(linux_safety_image),7296k(linux_live_image),-(data)
p console=ttyS0,115200n8 earlyprintk=1 hw_config_id=1211 ip=192.168.1.100 mtdparts=spi_flash:128k(uboot),128k(uboot_env),7296k(linux_safety_image),7296k(linux_live_image),-(data)
## Transferring control to Linux (at address 80302000) ATAG parameters 880341a8 - 8803426c...
[ 0.000000] Linux version 2.6.30 (root@udp089655uds.w1.bcs.mot.com)
(gcc version 4.2.1 (ARC_2.3)) #2 Mon Jun 24 10:56:44 PDT 2013
[ 0.000000] Parsing ATAG parameters from bootloader
[ 0.000000] ATAG_CORE: successful parsing
[ 0.000000] ATAG_CMDLINE: command line = console=ttyS0,115200n8 earlyprintk=1 hw_config_id=1211 ip=192.168.1.100
mtdparts=spi_flash:128k(uboot),128k(uboot_env),7296k(linux_safety_image),7296k(linux_live_image),-(data)
[ 0.000000] Board id: 1211
[ 0.000000]
[ 0.000000] Processor Family: ARC 700, Core ID: 0
[ 0.000000] CPU speed : 400.00 Mhz
[ 0.000000] Timers: TIMER1 TIMER0
[ 0.000000] Interrupt Vect Base: 0x8800ec00
[ 0.000000] Peripheral Base: 0x0
[ 0.000000] Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB
[ 0.000000] ARC700 MMU Ver [2]
[ 0.000000] uDTLB 8 entr, uITLB 4 entr, JTLB 128 entry/way, 2 ways
[ 0.000000] TLB Refill "will NOT" Flush uTLBs
[ 0.000000] Detected I-cache :
[ 0.000000] Type=2 way set-assoc, Line length=32, Size=16K (enabled)
[ 0.000000] Detected D-cache :
[ 0.000000] Type=4 way set-assoc, Line length=32, Size=16K (enabled)
[ 0.000000] Extensions:
[ 0.000000] Multiplier: 32x32 with ANY Result Reg MAC Multiplier: Dual 16 x 16 and 32 x 16
[ 0.000000] CRC Instrn: NA, SWAP Instrn: Present NORM Instrn: Present
[ 0.000000] Min-Max Instrn: Present, Barrel Shift Rotate Instrn: Present
[ 0.000000] Ext Arith Instrn: Present
[ 0.000000] On node 0 totalpages: 8192
[ 0.000000] free_area_init_node: node 0, pgdat 80f0a59c, node_mem_map 81000000
[ 0.000000] Normal zone: 36 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 8156 pages, LIFO batch:0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8156
[ 0.000000] Kernel command line: console=ttyS0,115200n8 earlyprintk=1 hw_config_id=1211 ip=192.168.1.100
mtdparts=spi_flash:128k(uboot),128k(uboot_env),7296k(linux_safety_image),7296k(linux_live_image),-(data)
[ 0.000000] console [ruby_early0] enabled
[ 0.000000] RCU-based detection of stalled CPUs is enabled.
[ 0.000000] ---IRQ Request (24) ISR
[ 0.000000] ---IRQ Request (25) ISR
[ 0.000000] ---IRQ Request (26) ISR
[ 0.000000] PID hash table entries: 256 (order: 8, 1024 bytes)
[ 0.000000] clockevent mode switch to [1]
[ 0.000000] clockevent mode switch to [2]
[ 0.000000] ---IRQ Request (3) ISR
[ 0.000000] Dentry cache hash table entries: 8192 (order: 2, 32768 bytes)
[ 0.005000] Inode-cache hash table entries: 4096 (order: 1, 16384 bytes)
[ 0.025000] Memory: 49848KB available (1837K code,393K data, 10192K init)
[ 0.030000] Calibrating delay loop... 265.42 BogoMIPS (lpj=663552)
[ 0.145000] Mount-cache hash table entries: 1024
[ 0.155000] Starting ksoftirqd, stack (thread_info) at 88002000 cpu 0
[ 0.160000] net_namespace: 720 bytes
[ 0.165000] NET: Registered protocol family 16
[ 0.170000] Ruby heap in SRAM from 88010000 to 8801ffe0
[ 0.175000] Quantenna I2C device register
[ 0.185000] bio: create slab <bio-0> at 0
[ 0.195000] NET: Registered protocol family 2
[ 0.200000] IP route cache hash table entries: 2048 (order: 0, 8192 bytes)
[ 0.210000] TCP established hash table entries: 2048 (order: 1, 16384 bytes)
[ 0.215000] TCP bind hash table entries: 2048 (order: 0, 8192 bytes)
[ 0.220000] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.225000] TCP reno registered
[ 0.225000] NET: Registered protocol family 1
[ 0.915000] JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[ 0.920000] msgmni has been set to 97
[ 0.925000] io scheduler noop registered (default)
[ 0.930000] io scheduler anticipatory registered
[ 1.470000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
[ 1.480000] serial8250.0: ttyS0 at MMIO 0xf0000000 (irq = 48) is a 16550A
[ 1.485000] console handover: boot [ruby_early0] -> real [ttyS0]
[ 1.495000] brd: module loaded
[ 1.505000] loop: module loaded
[ 1.510000] 5 cmdlinepart partitions found on MTD device spi_flash
[ 1.515000] Creating 5 MTD partitions on "spi_flash":
[ 1.520000] 0x000000000000-0x000000020000 : "uboot"
[ 1.525000] 0x000000020000-0x000000040000 : "uboot_env"
[ 1.530000] 0x000000040000-0x000000760000 : "linux_safety_image"
[ 1.540000] 0x000000760000-0x000000e80000 : "linux_live_image"
[ 1.545000] 0x000000e80000-0x000001000000 : "data"
[ 1.555000] spi_flash: SPI flash driver initialized successfully!
[ 1.560000] emac_eth version 1.0 Quantenna Communications Inc.
[ 1.565000] Random stuff D6
[ 2.210000] emac_eth_mii: probed
[ 2.210000] emac_eth:eth1_emac0: phy_id=0x143bc31 addr=0
[ 2.235000] eth1_emac0: attached PHY driver [Generic PHY] (mii_bus:phy_addr=mdio_bus, irq=-1)
[ 2.350000] eth1_emac0: Arasan Ethernet found at 0xed000000, irq 19
[ 2.355000] emac_eth version 1.0 Quantenna Communications Inc.
[ 2.360000] u32 classifier
[ 2.365000] input device check on
[ 2.370000] Actions configured
[ 2.370000] Netfilter messages via NETLINK v0.30.
[ 2.375000] nf_conntrack version 0.5.0 (986 buckets, 3944 max)
[ 2.380000] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 2.385000] TCP cubic registered
[ 2.390000] NET: Registered protocol family 17
[ 2.395000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
[ 2.400000] All bugs added by David S. Miller <davem@redhat.com>
[ 2.410000] Freeing unused kernel memory: 10192k freed [80302000] TO [80cf6000]
[ 2.415000] ---IRQ Request (48) ISR
init started: BusyBox v1.10.3 (2013-06-24 10:42:08 PDT)
starting pid 31, tty '': '/etc/init.d/rcS'
Initializing random number generator... done.
Starting network...
emac0 is eth1_0, emac1 is unused
Using IP address "192.168.1.100".
Using Net Mask "".
[ 3.480000] ---IRQ Request (19) ISR
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCSIFADDR: No such device
[ 3.895000] ---IRQ Request (19) ISR
Telnet disabled
[ 4.265000] device eth1_0 entered promiscuous mode
sh: /etc/firmware/qtn_driver.cal_ruby.0.bin: unknown operand
Starting wireless...
Checking if configuration files need to be upgraded...
Loading modules
[ 4.655000] qtn_debug: module license 'unspecified' taints kernel.
[ 4.660000] Disabling lock debugging due to kernel taint
[ 4.775000] se95-i2c : I2C driver register code = 0
[ 6.890000] qtn-i2c-bus i2c_read_block timed out
[ 6.890000] temp_sensor : id = 0x0
[ 8.900000] qtn-i2c-bus i2c_read_block timed out
[ 8.900000] temp_sensor.c : over temp thresh = 0 0
[ 10.910000] qtn-i2c-bus i2c_read_block timed out
[ 10.910000] temp_sensor.c : hysteresis = 0 0
[ 11.105000] wlan using SRAM (offset:0x880100d8, size:0x498)
[ 11.300000] wlan: 0.8.4.2 (0.9.3.3)
[ 11.455000] qdrv using SRAM (offset:0x88010578, size:0x985c)
Loading MuC driver (qtn_driver.qtn_ruby.0.bin)
Waiting for Wireless Events from interfaces...
Getting device opeation mode
motoApp_autoConfig=>Starting device in AP mode...defined in boot cfg [ap]
VAP mode selected = ap
Starting qtn_dri[ 13.275000] ---IRQ Request (8) ISR
ver.qtn_ruby.0.b[ 13.280000] ---IRQ Request (10) ISR
in...
[ 13.285000] ---IRQ Request (30) ISR
[ 13.285000] qdrv: firmware: requesting rdsp_driver.0.bin
[ 13.380000] qdrv: firmware: requesting qtn_driver.qtn_ruby.0.bin
[ 14.075000] muc_print_initialise_shared_data linux buf 57980280
[ 14.080000] MuC: MuC build date=Wed Apr 10 18:23:35 PDT 2013
[ 14.085000] MuC: slow heap begin=0xae220 end=0x12e220
[ 14.090000] MuC: fast heap begin=0x80030000 end=0x80038000
[ 14.095000] MuC: stack start=0x8003e7a0 sp=0x8003ff08
[ 14.100000] MuC: scancnt 0
[ 14.105000] MuC: g_slow_eth_war=0
[ 14.235000] MuC: HAL fd start @ 0xe5040300, count 48, size per 100, end 0xe50415c0
[ 14.240000] MuC: Selected TX QoS schedule : 0
[ 14.245000] MuC: Dynamic one-bit autocorrelation enabled
[ 14.250000] MuC: *** Enable IRQs
[ 14.275000] scancnt 0
[ 16.285000] qtn-i2c-bus i2c_read_block timed out
[ 16.285000] temp_sensor : id = 0x0
[ 16.290000] init_tx_power_cal: ERROR - Failed to get Temperature sensor
[ 16.300000] MuC boot succeeded 2.270 seconds
Valid bootval wpa_pass_str, set WPA_PASSPHRASE to 24008826048842408648688248!
/scripts/hostapd.conf ssid and wpa_passphrase customized ...
[ 16.735000] wifi0 (): not using net_device_ops yet
[ 16.760000] VAP create succeeded 0.010 seconds
Jan 1 00:00:17 iwevent: 00:00:17.338099 wifi0 Set Channel=0
Using regulatory region us
region is NOT none
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 11 for WiFi channels 36 to 48
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 17 for WiFi channels 52 to 56
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 13 for WiFi channels 60 to 64
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 10 for WiFi channels 100 to 104
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 18 for WiFi channels 108 to 116
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 15 for WiFi channels 132 to 136
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 18 for WiFi channels 140 to 161
Jan 1 00:00:18 Set Region[316]: Configuring TX power to 19 for WiFi channels 165 to 165
[ 18.270000] device wifi0 entered promiscuous mode
[ 18.465000] Enabling SSDP flooding
wpa_passphrase_web_list is
SCS BRCM rxif mac f8:0b:be:ad:ac:82
SCS using interface wifi0
[ 20.115000] qdrv_wps_button_init: WARNING - WPS push button is using GPIO pin 4
[ 20.125000] qdrv_wps_button_init: WARNING - monitored using polling
[ 20.130000] qdrv_wps_button_init: WARNING - active logic is low
[ 20.135000] qdrv_polling_wps_button_init: ERROR - wifi0: Failed to request GPIO4 for GPIO reset
[ 20.140000] br0: port 2(wifi0) entering forwarding state
Beamforming enabled.
[ 20.830000] qdrv_sch_red: allocated 1536 511
[ 20.835000] qdrv_sch_red: attached to wifi0
[ 20.835000] *****
[ 20.860000] qdrv_sch_red: allocated 512 127
[ 20.865000] qdrv_sch_red: attached to eth1_0
[ 20.865000] *****
[ 21.305000] [2]Comparing register set Global control
[ 21.330000] [6]Comparing register set BB Global regs
[ 21.875000] SCS: Setup comparing timer
Jan 1 00:00:21 iwevent: 00:00:21.935104 wifi0 Custom driver event:SCS: channel sampling disabled
complete
complete
Reentry start
/sbin/mini_httpd: started as root without requesting chroot(), warning only
********************************************************
***** Motorola VAP2500 SW Release AT.08.00 ***
********************************************************
starting pid 448, tty '/dev/ttyS0': '/bin/sh -l'
BusyBox v1.10.3 (2013-06-24 10:42:08 PDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.
complete
complete
quantenna # complete
motoApp_dhcp=>device_mode bootcfg set to = [ap]
[OPTION12=ATT_Motorola_AP_ADAC82]
[OPTION60=Motorola_AP]
[OPTION125=0x7d:00:00:0d:e9:23:01:06:30:30:32:34:41:30:02:0C:4D:39:31:33:31
:34:53:41:34:31:35:38:03:0b:4d:6f:74:6f:72:6f:6c:61:5f:41:50]
motoApp_dhcp=>Run DHCP request...
udhcpc (v1.19.4) started
Sending discover...
[ 27.340000] MuC: WMM AC 0: 3 4 6 0
[ 27.345000] MuC: WMM AC 1: 7 4 10 0
[ 27.345000] MuC: WMM AC 2: 1 3 4 94
[ 27.350000] MuC: WMM AC 3: 1 2 3 47
No lease, failing
motoApp_dhcp=>wait for 2 seconds to retry
motoApp_dhcp=>Run DHCP request...
udhcpc (v1.19.4) started
Sending discover...
No lease, failing
motoApp_dhcp=>wait for 2 seconds to retry
motoApp_dhcp=>Run DHCP request...
udhcpc (v1.19.4) started
Sending discover...
|
cat /proc/cpuinfo
quantenna # cat /proc/cpuinfo Processor Family: ARC 700, Core ID: 0 CPU speed : 400.00 Mhz Timers: TIMER1 TIMER0 Interrupt Vect Base: 0x8800ec00 Peripheral Base: 0x0 Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB Bogo MIPS : 266.24 ARC700 MMU Ver [2] uDTLB 8 entr, uITLB 4 entr, JTLB 128 entry/way, 2 ways Detected I-cache : Type=2 way set-assoc, Line length=32, Size=16K (enabled) Detected D-cache : Type=4 way set-assoc, Line length=32, Size=16K (enabled) Extensions: Multiplier: 32x32 with ANY Result Reg MAC Multiplier: Dual 16 x 16 and 32 x 16 CRC Instrn: NA, SWAP Instrn: Present NORM Instrn: Present Min-Max Instrn: Present, Barrel Shift Rotate Instrn: Present Ext Arith Instrn: Present
netstat -l
quantenna # netstat -l Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 192.168.1.100:49152 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:www 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:https 0.0.0.0:* LISTEN netstat: no kernel support for AF INET6 (tcp) udp 0 0 0.0.0.0:49300 0.0.0.0:* udp 0 0 0.0.0.0:44639 0.0.0.0:* udp 0 0 0.0.0.0:1900 0.0.0.0:* netstat: no kernel support for AF INET6 (udp) netstat: no kernel support for AF INET6 (raw) Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node Path
ps
quantenna # ps
PID USER VSZ STAT COMMAND
1 root 1824 S init
2 root 0 SW< [kthreadd]
3 root 0 SW< [ksoftirqd/0]
4 root 0 SW< [events/0]
5 root 0 SW< [khelper]
6 root 0 SW< [async/mgr]
7 root 0 SW< [kblockd/0]
8 root 0 SW [pdflush]
9 root 0 SW [pdflush]
10 root 0 SW< [kswapd0]
11 root 0 SW< [mtdblockd]
24 root 0 SWN [jffs2_gcd_mtd4]
154 root 1296 S iwevent --syslog
355 root 2720 S hostapd -B /mnt/jffs2//hostapd.conf
435 root 2832 S /sbin/mini_httpd -u root -C /mnt/jffs2/minihttpd.conf
438 root 1816 S /bin/sh /scripts/motoApp_init
449 root 1824 S /bin/sh -l
451 root 1816 S /sbin/syslogd -n -i eth1_0 -L -m 0
452 root 1816 S /sbin/klogd -n
476 root 2904 S monitor_reset_device 5 0
478 root 2904 S motoApp_ctrlLEDPosWifi
479 root 2904 S motoApp_ctrlLEDPosEth
480 root 2904 S motoApp_ctrlLEDPosWifi
483 root 1824 S /bin/sh /scripts/motoApp_dhcp
484 root 2904 S motoApp_ctrlLEDPosEth
712 root 1816 R ps
714 root 1824 S /bin/sh /scripts/motoApp_dhcp
715 root 1816 R ps
716 root 1816 S grep udhcpc
717 root 1816 S grep -v grep
