View Issue Details

IDProjectCategoryView StatusLast Update
0007465NetworksHardwarepublic2025-07-22 14:41
ReporterDigitalMy 
PrioritynormalSeverityminorReproducibilityhave not tried
Status assignedResolutionopen 
Summary0007465: Tp-link MR600v2 U-boot TFTP missing
DescriptionDevice: Tp-link MR600 v2
Board: Ralink APSoC
DRAM: 128 MB
Wireless chip: MT7603E
CPU (freq = 880 MHz) ASIC MT7621A DualCore
U-Boot 1.1.3
Ralink UBoot Version: 5.0.0.0
Linux version 3.10.14 (tp-link@Sohoidev) (gcc version 4.6.3 (Buildroot 2012.11.1) ) #1

Connected to serial (RX TX GND) 3-pin by PC USB adapter
admin 1234

-sh: tftpboot: not found
-sh: bootm: not found
-sh: setenv: not found
TagsNo tags attached.

Activities

DigitalMy

2024-09-07 12:59

administrator   ~0014367

Last edited: 2024-09-07 15:53

View 5 revisions

Failed to execute manual:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;h=78110c3b5fce119d13cd45dadd33ca396c8ce197

Firmware Version:?1.7.0 0.9.1 v0001.0 Build 220826 Rel.58057n Hardware Version:?Archer MR600 v2 00000003
spam a lot to console

Firmware Version:?1.6.0 0.9.1 v0001.0 Build 220105 Rel.58321n
same error, but much better - no spam

and cannot downgrade lower to 1.5.0 (made by Tp-link on purpose)
 rsl_sys_verifyFirmware 2425: Firmware Additional HardwareVersion check failed

but can reset power after login, and it switched to U-Boot console!

DigitalMy

2024-09-07 15:15

administrator   ~0014368

Found supported commands in main console:
ls
cat
env
top

DigitalMy

2024-09-07 15:19

administrator   ~0014369

Last edited: 2024-09-07 16:08

View 3 revisions

TFTP server load image test.bin

Connected to the serial console: RX TX GND

Fast interrupt the boot procedure after power on (type `tpl`)

Server (PC, static) 192.168.0.5/24
Client (router, default) 192.168.0.1/24

tftpboot

bootm

change PC adapter to DHCP, login to web interface 192.168.1.1 and update firmware openwrt-23.05.4-ramips-mt7621-tplink_mr600-v2-eu-squashfs-sysupgrade.bin



TFTP_MR600v2.jpg (90,012 bytes)
TFTP_MR600v2.jpg (90,012 bytes)

DigitalMy

2024-09-07 16:05

administrator   ~0014370

flash manufacture id: 20, device id 70 18
find flash: XM25QH128A
*** Warning - bad CRC, using default environment

DigitalMy

2024-09-07 16:27

administrator   ~0014371

Last edited: 2025-07-22 13:08

View 3 revisions

After add protocols
opkg install luci-proto-qmi kmod-usb-net-qmi-wwan uqmi

config interface 'wwan'
        option proto 'qmi'
        option device '/dev/cdc-wdm0'
        option apn 'internet'
        option pdptype 'ip'
        option dhcp '0'

uqmi can manage modem:
uqmi -s -d /dev/cdc-wdm0 -t 1000 --uim-get-sim-state
uqmi -d /dev/cdc-wdm0 --get-data-status
uqmi -d /dev/cdc-wdm0 --get-signal-info

DigitalMy

2025-07-21 00:19

administrator   ~0014470

Last edited: 2025-07-21 17:57

View 4 revisions

MR600v2 internal modem test
Android device Qualcomm MDM9240 integrated in MR600 routers by Tp-link
it has cdc-wdm0 interface for data and no serial USB port for communication, but connected as USB:
cat /sys/kernel/debug/usb/devices

opkg install kmod-usb-serial
opkg install kmod-usb-serial-option
opkg install kmod-usb-serial-wwan
opkg install kmod-usb-net-qmi-wwan
opkg install kmod-usb-serial-qualcomm
opkg install uqmi
opkg install luci-proto-qmi
opkg install picocom

opkg install adb
adb shell

have inside Android...
ttyGS0
ttyHS0
ttyHSL0

opkg install modemmanager
mmcli -L
mmcli -m 0
mmcli -m 0 -e

To get list of SMS:
 mmcli -m 0 --messaging-list-sms
To read a specific SMS:
 mmcli -m 0 --sms 1
Create and send message:
mmcli -m 0 --messaging-create-sms="text='Hello world',number='+1234567890'"
mmcli -s 1 --send

mmcli -m 0 --command='AT^DEBUG?'
mmcli --modem 0 --3gpp-scan --timeout=300



MDM9240_MR600.jpg (64,619 bytes)
MDM9240_MR600.jpg (64,619 bytes)

DigitalMy

2025-07-21 00:55

administrator   ~0014471

Last edited: 2025-07-22 14:41

View 4 revisions

in adb shell:
netstat -atnp
df -h
ps -T
showed that "getty -L ttyHSL0 115200 console"

cat /misc/imei
ls /dev

adb shell uci show product.info

DigitalMy

2025-07-22 12:57

administrator   ~0014472

activate USB serial devices:
echo "05c6 9025" > /sys/bus/usb-serial/drivers/option1/new_id
list them:
ls /dev/ttyUSB*