タグ: WN-AC1167DGR

WN-AC1167DGR

WRC-300GHBK2-Iと同様、フリマサイトを流し見ていて見つけたもの。既に投げ込んだWN-AC1600DGR2とほぼ同等の仕様と思われたことから、WRC-300GHBK2-Iと一緒に購入。
WRC-300GHBK2-Iが完了していないにも関わらず、AC1167DGRでは最初からUARTのピンが立っていることに気付いて錯乱し手を付けてしまったので、弄っていくにあたってメモ。

Switch

zone WAN LAN
port
(WN-AC1167DGR)
インターネット LAN4 LAN3 LAN2 LAN1
port
(QCA8337N)
port5 port4 port3 port2 port1

MAC

未確認

  • LAN: xx:xx:xx:xx:xx:18
  • WAN: xx:xx:xx:xx:xx:1A
  • 2.4G: xx:xx:xx:xx:xx:18
  • 5G: xx:xx:xx:xx:xx:19

U-Boot

  • help
    ath> help
    ?       - alias for 'help'
    autoscr - run script from memory
    base    - print or set address offset
    bdinfo  - print Board Info structure
    boot    - boot default, i.e., run 'bootcmd'
    bootd   - boot default, i.e., run 'bootcmd'
    bootelf - Boot from an ELF image in memory
    bootm   - boot application image from memory
    bootp   - boot image via network using BootP/TFTP protocol
    bootvx  - Boot vxWorks from an ELF image
    cmp     - memory compare
    coninfo - print console devices and information
    cp      - memory copy
    crc32   - checksum calculation
    dhcp    - invoke DHCP client to obtain IP/boot params
    echo    - echo args to console
    erase   - erase FLASH memory
    ethreg    - S26 PHY Reg rd/wr  utility
    exit    - exit script
    flinfo  - print FLASH memory information
    go      - start application at address 'addr'
    help    - print online help
    iminfo  - print header information for application image
    itest   - return true/false on integer compare
    loop    - infinite loop on address range
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing)
    mtest   - simple RAM test
    mw      - memory write (fill)
    nfs     - boot image via network using NFS protocol
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pll cpu-pll dither ddr-pll dither - Set to change CPU & DDR speed
    pll erase
    pll get
    printenv- print environment variables
    progmac - Set ethernet MAC addresses
    protect - enable or disable FLASH write protection
    rarpboot- boot image via network using RARP/TFTP protocol
    reset   - Perform RESET of the CPU
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    sleep   - delay execution for some time
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version
    ath> version
    
    U-Boot 0.1.3 (Mar 11 2013 - 16:53:10)
    

  • printenv
    ath> printenv
    bootargs=console=ttyS0,115200 root=31:02 rootfstype=squashfs,jffs2 init=/sbin/init mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART)
    bootcmd=bootm 0x9f040000
    bootdelay=2
    baudrate=115200
    ethaddr="34:76:C5:28:79:18"
    ipaddr=192.168.99.9
    serverip=192.168.99.8
    sn=0007556V2
    hw_ver=1.0.0
    hw_id=030A0061
    pro_id=000
    country=000
    domain=1
    wanaddr=34:76:C5:28:79:1A
    wlanaddr=00:AA:BB:CC:DD:12
    snextra=00000000BR10007556V2
    bootfile=uImageWN-AC1600DGR
    dir=
    lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
    lf=tftp 0x80060000 ${dir}ap136${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize
    lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize
    ethact=eth0
    op_mode=0
    uboot_ver=0.1.3.11
    stdin=serial
    stdout=serial
    stderr=serial
    
    Environment size: 896/65532 bytes
    

  • mii device
    ath> mii device
    MII devices: 'eth0' 
    Current device: 'eth0'
    

Kernel

パスワード要求されるため、コンソールにログインできない。

  • bootlog (op_mode=0)
    U-Boot 0.1.3 (Mar 11 2013 - 16:53:10)
    Product Name: WN-AC1600DGR
    ap136 - Scorpion 1.0
    DRAM:128 MB
    Now running in RAM - U-Boot at: 87fc8000
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
    Flash size 16MB, sector count = 256
    In:    serial
    Out:   serial
    Err:   serial
    reset_switch: 
    Multi Net:   
    
    ath_gmac_enet_initialize...
    
    athrs_sgmii_res_cal: cal value = 0xe
    No valid address in Flash. Using fixed address
    ath_gmac_enet_initialize: reset mask:c02200 
    Scorpion  ----> S17 PHY *
    : cfg1 0x80000000 cfg2 0x7114
    eth0: 00:03:7f:09:0b:ad
    athrs17_reg_init: SUPPORT_QCA8337 
    athrs17_reg_init: QCA8337 ID=1302
    athrs17_reg_init: complete
    eth0 up
    eth0
    athrs17_disable_all_port
    Setting 0x18116290 to 0x1830214f
    
    Please choose the operation: 
       1: Load system code to SDRAM via TFTP. 
       3: Boot system code via Flash (default).
                                                                                                                              0  
       
    3: System Boot system code via Flash.
    athrs17_set_portvlan_isolated complete
    ## Booting image at 9f040000 ...
       Image Name:   Linux Kernel Image
       Created:      2013-07-23   2:41:58 UTC
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    2936067 Bytes =  2.8 MB
       Load Address: 80002000
       Entry Point:  8024c7a0
       Verifying Checksum at 0x9f040040 ...OK
       Uncompressing Kernel Image ... OK
    
    Starting kernel ...
    
    Booting QCA955x
    Linux version 2.6.31 (root@localhost.localdomain) (gcc version 4.3.4 (Buildroot 2010.05) ) #2 Tue Jul 23 10:41:45 CST 2013
    flash_size passed from bootloader = 16
    arg 1: console=ttyS0,115200
    arg 2: root=31:02
    arg 3: rootfstype=squashfs,jffs2
    arg 4: init=/sbin/init
    arg 5: mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART)
    arg 6: mem=128M
    CPU revision is: 00019750 (MIPS 74Kc)
    cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 240
    Determined physical RAM map:
     memory: 02000000 @ 00000000 (usable)
    User-defined physical RAM map:
     memory: 08000000 @ 00000000 (usable)
    Initrd not found or empty - disabling initrd
    Zone PFN ranges:
      Normal   0x00000000 -> 0x00008000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
        0: 0x00000000 -> 0x00008000
    Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs,jffs2 init=/sbin/init mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART) mem=128M 
    PID hash table entries: 512 (order: 9, 2048 bytes)
    Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    Writing ErrCtl register=00000000
    Readback ErrCtl register=00000000
    Memory: 104704k/131072k available (2376k kernel code, 26184k reserved, 681k data, 7532k init, 0k highmem)
    NR_IRQS:128
    plat_time_init: plat time init done
    Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
    Mount-cache hash table entries: 512
    
    ****************ALLOC***********************
     Packet mem: 80a6dbc0 (0xe00000 bytes)
    ********************************************
    
    NET: Registered protocol family 16
    ath_pcibios_init: bus 0
    ***** Warning PCIe 0 H/W not found !!!
    registering PCI controller with io_map_base unset
    ath_pcibios_init: bus 1
    ath_pcibios_init(232): PCI 1 CMD write: 0x356
    registering PCI controller with io_map_base unset
    bio: create slab  at 0
    SCSI subsystem initialized
    usbcore: registered new interface driver usbfs
    usbcore: registered new interface driver hub
    usbcore: registered new device driver usb
    pci 0000:01:00.0: PME# supported from D0 D1 D3hot
    pci 0000:01:00.0: PME# disabled
    pcibios_map_irq: IRQ 76 for bus 1
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
    TCP: Hash tables configured (established 4096 bind 4096)
    TCP reno registered
    NET: Registered protocol family 1
    ATH GPIOC major 0
    squashfs: version 4.0 (2009/01/31) Phillip Lougher
    NTFS driver 2.1.29 [Flags: R/O].
    JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
    fuse init (API version 7.12)
    msgmni has been set to 204
    alg: No test for stdrng (krng)
    io scheduler noop registered
    io scheduler deadline registered (default)
    Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
    serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
    console [ttyS0] enabled
    brd: module loaded
    loop: module loaded
    PPP generic driver version 2.4.2
    PPP Deflate Compression module registered
    PPP BSD Compression module registered
    PPP MPPE Compression module registered
    NET: Registered protocol family 24
    PPTP driver version 0.8.4
    IMQ driver loaded successfully.
            Hooking IMQ after NAT on PREROUTING.
            Hooking IMQ before NAT on POSTROUTING.
    usbcore: registered new interface driver asix
    Creating 9 MTD partitions on "ath-nor0":
    0x000000000000-0x000001000000 : "ALL"
    0x000000000000-0x000000030000 : "Bootloader"
    0x000000030000-0x000000040000 : "Config"
    0x000000040000-0x000000e90000 : "Kernel"
    0x000000310000-0x000000e90000 : "apps"
    0x000000e90000-0x000000f90000 : "manufacture"
    0x000000f90000-0x000000fa0000 : "backup"
    0x000000fa0000-0x000000ff0000 : "storage"
    0x000000ff0000-0x000001000000 : "caldata"
    usbmon: debugfs is not available
    ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    Port Status 1c000004 
    ath-ehci ath-ehci.0: ATH EHCI
    ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
    usb usb1: configuration #1 chosen from 1 choice
    hub 1-0:1.0: USB hub found
    hub 1-0:1.0: 1 port detected
    Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: ATH EHCI
    ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
    usb usb2: configuration #1 chosen from 1 choice
    hub 2-0:1.0: USB hub found
    hub 2-0:1.0: 1 port detected
    Netfilter messages via NETLINK v0.30.
    ip_conntrack version 0.5.0 (3750 buckets, 30000 max 29800 max0 200 reserved) - 4 bytes per conntrack
    CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
    nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
    sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
    xt_time: kernel timezone is -0000
    ip_tables: (C) 2000-2006 Netfilter Core Team
    TCP cubic registered
    NET: Registered protocol family 17
    802.1Q VLAN Support v1.8 Ben Greear 
    All bugs added by David S. Miller 
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 16
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 17
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 0
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 15
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 1
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 19
    
    button_irq: simple_config callback.. ignorepb 1, jiffies 4294892560, gpio 19
    ath_otp_init: Registering OTP success
    Freeing unused kernel memory: 7532k freed
    init started: BusyBox v1.7.5 (2013-07-23 10:38:06 CST)
    starting pid 731, tty '/dev/console': '/sbin/config_init'
    mknod: /dev/ttyS0: File exists
    mknod: /dev/ttyS1: File exists
    Config Init version: 1.00.000.128 date: 2013/07/23
    Tue Jan  1 00:00:00 UTC 2013
    ln: /lib/./modules: File exists
    WAN connect type creat
    955x_GMAC: qca955x_gmac_attach
    955x_GMAC: qca955x_set_gmac_caps
    Currently in polling mode unit0
    mac:0 Registering S17....
    qca955x_GMAC: RX TASKLET - Pkts per Intr:100
    qca955x_GMAC: Max segments per packet :   1
    qca955x_GMAC: Max tx descriptor count :   5
    qca955x_GMAC: Max rx descriptor count :   128
    qca955x_GMAC: Mac capability flags    :   2A00
    starting pid 792, tty '/dev/ttyS0': '/sbin/config_term'
    ************************************************************************
    *                             WN-AC1167DGR                             *
    ************************************************************************
    
    KernelApp/Ramdisk Ver:1.00.000.128                       Date:2013/07/23
    password: +HWT
    -HWT
    HTC Service:0x0300 ep:1 TX flow control disabled
    VAP device ath0 created 
    VAP device ath1 created 
    VAP device ath2 created 
    VAP device ath3 created
    

  • bootlog (op_mode=1)
    U-Boot 0.1.3 (Mar 11 2013 - 16:53:10)
    Product Name: WN-AC1600DGR
    ap136 - Scorpion 1.0
    DRAM:128 MB
    Now running in RAM - U-Boot at: 87fc8000
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
    Flash size 16MB, sector count = 256
    In:    serial
    Out:   serial
    Err:   serial
    reset_switch: 
    Multi Net:   
    
    ath_gmac_enet_initialize...
    
    athrs_sgmii_res_cal: cal value = 0xe
    No valid address in Flash. Using fixed address
    ath_gmac_enet_initialize: reset mask:c02200 
    Scorpion  ----> S17 PHY *
    : cfg1 0x80000000 cfg2 0x7114
    eth0: 00:03:7f:09:0b:ad
    athrs17_reg_init: SUPPORT_QCA8337 
    athrs17_reg_init: QCA8337 ID=1302
    athrs17_reg_init: complete
    eth0 up
    eth0
    athrs17_disable_all_port
    Setting 0x18116290 to 0x1830214f
    
    Please choose the operation: 
       1: Load system code to SDRAM via TFTP. 
       3: Boot system code via Flash (default).
                                                                                                                              0  
       
    3: System Boot system code via Flash.
    athrs17_set_portvlan_isolated complete
    ## Booting image at 9f040000 ...
       Image Name:   Linux Kernel Image
       Created:      2013-07-23   2:41:58 UTC
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    2936067 Bytes =  2.8 MB
       Load Address: 80002000
       Entry Point:  8024c7a0
       Verifying Checksum at 0x9f040040 ...OK
       Uncompressing Kernel Image ... OK
    
    Starting kernel ...
    
    Booting QCA955x
    Linux version 2.6.31 (root@localhost.localdomain) (gcc version 4.3.4 (Buildroot 2010.05) ) #2 Tue Jul 23 10:41:45 CST 2013
    flash_size passed from bootloader = 16
    arg 1: console=ttyS0,115200
    arg 2: root=31:02
    arg 3: rootfstype=squashfs,jffs2
    arg 4: init=/sbin/init
    arg 5: mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART)
    arg 6: mem=128M
    CPU revision is: 00019750 (MIPS 74Kc)
    cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 240
    Determined physical RAM map:
     memory: 02000000 @ 00000000 (usable)
    User-defined physical RAM map:
     memory: 08000000 @ 00000000 (usable)
    Initrd not found or empty - disabling initrd
    Zone PFN ranges:
      Normal   0x00000000 -> 0x00008000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
        0: 0x00000000 -> 0x00008000
    Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs,jffs2 init=/sbin/init mtdparts=ath-nor0:192k(u-boot),64k(u-boot-env),2752k(rootfs),1408k(uImage),64k(NVRAM),64k(ART) mem=128M 
    PID hash table entries: 512 (order: 9, 2048 bytes)
    Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    Writing ErrCtl register=00000000
    Readback ErrCtl register=00000000
    Memory: 104704k/131072k available (2376k kernel code, 26184k reserved, 681k data, 7532k init, 0k highmem)
    NR_IRQS:128
    plat_time_init: plat time init done
    Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
    Mount-cache hash table entries: 512
    
    ****************ALLOC***********************
     Packet mem: 80a6dbc0 (0xe00000 bytes)
    ********************************************
    
    NET: Registered protocol family 16
    ath_pcibios_init: bus 0
    ***** Warning PCIe 0 H/W not found !!!
    registering PCI controller with io_map_base unset
    ath_pcibios_init: bus 1
    ath_pcibios_init(232): PCI 1 CMD write: 0x356
    registering PCI controller with io_map_base unset
    bio: create slab  at 0
    SCSI subsystem initialized
    usbcore: registered new interface driver usbfs
    usbcore: registered new interface driver hub
    usbcore: registered new device driver usb
    pci 0000:01:00.0: PME# supported from D0 D1 D3hot
    pci 0000:01:00.0: PME# disabled
    pcibios_map_irq: IRQ 76 for bus 1
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
    TCP: Hash tables configured (established 4096 bind 4096)
    TCP reno registered
    NET: Registered protocol family 1
    ATH GPIOC major 0
    squashfs: version 4.0 (2009/01/31) Phillip Lougher
    NTFS driver 2.1.29 [Flags: R/O].
    JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
    fuse init (API version 7.12)
    msgmni has been set to 204
    alg: No test for stdrng (krng)
    io scheduler noop registered
    io scheduler deadline registered (default)
    Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
    serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
    console [ttyS0] enabled
    brd: module loaded
    loop: module loaded
    PPP generic driver version 2.4.2
    PPP Deflate Compression module registered
    PPP BSD Compression module registered
    PPP MPPE Compression module registered
    NET: Registered protocol family 24
    PPTP driver version 0.8.4
    IMQ driver loaded successfully.
            Hooking IMQ after NAT on PREROUTING.
            Hooking IMQ before NAT on POSTROUTING.
    usbcore: registered new interface driver asix
    Creating 9 MTD partitions on "ath-nor0":
    0x000000000000-0x000001000000 : "ALL"
    0x000000000000-0x000000030000 : "Bootloader"
    0x000000030000-0x000000040000 : "Config"
    0x000000040000-0x000000e90000 : "Kernel"
    0x000000310000-0x000000e90000 : "apps"
    0x000000e90000-0x000000f90000 : "manufacture"
    0x000000f90000-0x000000fa0000 : "backup"
    0x000000fa0000-0x000000ff0000 : "storage"
    0x000000ff0000-0x000001000000 : "caldata"
    usbmon: debugfs is not available
    ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    Port Status 1c000004 
    ath-ehci ath-ehci.0: ATH EHCI
    ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
    usb usb1: configuration #1 chosen from 1 choice
    hub 1-0:1.0: USB hub found
    hub 1-0:1.0: 1 port detected
    Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: ATH EHCI
    ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000
    ehci_reset Intialize USB CONTROLLER in host mode: 13
    ehci_reset Port Status 1c000000 
    ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
    usb usb2: configuration #1 chosen from 1 choice
    hub 2-0:1.0: USB hub found
    hub 2-0:1.0: 1 port detected
    Netfilter messages via NETLINK v0.30.
    ip_conntrack version 0.5.0 (3750 buckets, 30000 max 29800 max0 200 reserved) - 4 bytes per conntrack
    CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
    nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
    sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
    xt_time: kernel timezone is -0000
    ip_tables: (C) 2000-2006 Netfilter Core Team
    TCP cubic registered
    NET: Registered protocol family 17
    802.1Q VLAN Support v1.8 Ben Greear 
    All bugs added by David S. Miller 
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 16
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 17
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 0
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 15
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 1
    arch/mips/atheros/gpio_senao_qca955x.c (sn_init_irq) irq: 19
    
    button_irq: simple_config callback.. ignorepb 1, jiffies 4294892560, gpio 19
    ath_otp_init: Registering OTP success
    Freeing unused kernel memory: 7532k freed
    init started: BusyBox v1.7.5 (2013-07-23 10:38:06 CST)
    starting pid 731, tty '/dev/console': '/sbin/config_init'
    mknod: /dev/ttyS0: File exists
    mknod: /dev/ttyS1: File exists
    Config Init version: 1.00.000.128 date: 2013/07/23
    Tue Jan  1 00:00:00 UTC 2013
    ln: /lib/./modules: File exists
    WAN connect type creat
    955x_GMAC: qca955x_gmac_attach
    955x_GMAC: qca955x_set_gmac_caps
    Currently in polling mode unit0
    mac:0 Registering S17....
    qca955x_GMAC: RX TASKLET - Pkts per Intr:100
    qca955x_GMAC: Max segments per packet :   1
    qca955x_GMAC: Max tx descriptor count :   5
    qca955x_GMAC: Max rx descriptor count :   128
    qca955x_GMAC: Mac capability flags    :   2A00
    starting pid 790, tty '/dev/ttyS0': '/sbin/config_term'
    ************************************************************************
    *                             WN-AC1167DGR                             *
    ************************************************************************
    
    KernelApp/Ramdisk Ver:1.00.000.128                       Date:2013/07/23
    Application Ver:1.00.000.126             Date:2013/07/23
    
    password: cat: can't open '/apps/lib/modules/2.6.31/modulesApp.dep': No such file or directory
    ln: /sbin/apps_init: File exists
    ln: /sbin/factory_apps_init: File exists
    ln: /sbin/opmode.sh: File exists
    createShareMem keyid 7001 shmId 0
    Set Str value fail but len not in 1 to 32
    checkpApCfg i=28 [ap2ssid]
    Set Str value fail but len not in 1 to 32
    checkpApCfg i=46 [ap3ssid]
    checkpApCfg error!!
    MSGQ_GETID: Cannot get message queue for key[fwmanager]!
    MSGQ_CREATE: create message queue for key[fwmanager], msgQ Id 0
    CTRL_INTERFACE:[/var/sysconfd_if]  CTRL_INTERFACE_IF:[if0]
    
    System Monitoring
    *********************************************************************
    Initializing system environment
    Setting up /tmp directory ...
    Setting up loopback device ...
    ***************************************************
    Radio_1 is in   Access Point[0]
    Radio_2 is in   Access Point[0]
    System is in    AP Router[0]
    ***************************************************
    SEM_GETID got id -1
    Mac: 0, rtcTime:1356998402
    Open file err: /var/cpumhz!
    Starting system logging daemon ...OK
    Setting up Ethernet deviceTo set s17 LOOKUP_CTRL_REG registers, flag 0 
    s ...
    athr_gmac_ring_alloc Allocated 80 at 0x86d349e0
    athr_gmac_ring_alloc Allocated 2048 at 0x80617800
    device id=1302
    /proc/qca_switch/nf_athrs17_hnat is created
    /proc/qca_switch/nf_athrs17_hnat_wan_type is created
    /proc/qca_switch/nf_athrs17_hnat_ppp_id is created
    /proc/qca_switch/nf_athrs17_hnat_udp_thresh is created
    /proc/qca_switch/nf_athrs17_hnat_wan_ip is created
    /proc/qca_switch/nf_athrs17_hnat_ppp_peer_ip is created
    /proc/qca_switch/nf_athrs17_hnat_ppp_peer_mac is created
    /proc/qca_switch/nf_athrs17_hnat_wan_mac is created
    Registering IPv6 hooks... 
    Adding ACL rules 15 - upnp_ssdp_add_acl_rules
    ACL is not yet enabled. Enabling... 
    Adding ACL rules 7 - ipv6_snooping_solicted_node_add_acl_rules
    Adding ACL rules 11 - ipv6_snooping_sextuple0_group_add_acl_rules
    Adding ACL rules 13 - ipv6_snooping_quintruple0_1_group_add_acl_rules
    Hello, nat helper module for 1.1!
    
    ######## S17 SSDK init succeeded! ########
    ### s17 : set 0x610=0x001bd560 
    ### s17 : set 0x614=0x80010002 
    ### s17 : set 0x610=0x001b7fe0 
    ### s17 : set 0x614=0x80020002 
    _athrs17_mac0_intf done
    athrs17_reg_init:done
    S17_P0PAD_MODE_REG 0x87680000
    athrs17_reg_init:done
    955x_GMAC: eth0 in RGMII MODE
    Scorpion -----> S17 PHY
    Setting Drop CRC Errors, Pause Frames and Length Error frames 
    Setting PHY...
    Phy setup Complete
    To set s17 LOOKUP_CTRL_REG registers, flag 1 
    device eth0 entered promiscuous mode
    OK
    Configuring Bridge device ...          OK
    Setting the host&domain name ...Finished.
    Configuring net ...          OK
    device eth0.1 entered promiscuous mode
    br0: port 1(eth0.1) entering learning state
    Configuring LAN device ...          OK
    
    
    #############################################
    Initialize Radio setting ... OK
    Configuring radio1 setting ... 
    Configuring Atheros device index:0... wifiname=wifi0 , macaddr=34:76:C5:28:79:18athSetWep[761] iNumofSsid: [3]
    Encryption using WEP ...      
    athSetWepforAP[1035] pApIf: [ath0]
    Encryption using WEP ...      
    athSetWepforAP[1035] pApIf: [ath1]
    Encryption usiadf: module license 'Proprietary' taints kernel.
    ng WEP ...      Disabling lock debugging due to kernel taint
    
    athSetWepforAP[1035] pApIf: [ath2]
     ... finished.
    Set Atheros power to 25 (dBm)
    Encryption using WPAWPA2_PSK ...
    Encryption using TKIP CCMP ...
    Encryption using WPAWPA2_PSK ...
    Encryption using TKIP Cbr0: port 1(eth0.1) entering forwarding state
    CMP ...
    Encryption using WPAWPA2_PSK ...
    Encryption using TKIP CCMP ...
    Starting Hostapd ...            OK
    ath_hal: 0.9.17.1 (AR5416, AR9380, WRITE_EEPROM, 11D)
    ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
    ath_dfs: Version 2.0.0
    Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
    ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
    ath_ahb: 10.1.357 (Atheros/multi-bss)
    __ath_attach: Set global_scn[0]
    Enterprise mode: 0x40000000
    Restoring Cal data from Flash
    Green-AP : Green-AP : Attached
    
    ath_get_caps[5928] rx chainmask mismatch actual 3 sc_chainmak 0
    ath_get_caps[5903] tx chainmask mismatch actual 3 sc_chainmak 0
    _ieee80211_resmgr_create: Multi-Channel Scheduler unavailable since no TSF Timer.
    Error: _ieee80211_resmgr_create: no Multi-chan hw caps. Disabling Off Channel scheduler.
    ath_attach_dfs[11818] dfsdomain 1
    SC Callback Registration for wifi0
    wifi0: Atheros ???: mem=0xb8100000, irq=2
    ath_pci: 10.1.357 (Atheros/multi-bss)
    ath_pci_probe
    PCI device id is 003c :003c
    ath_pci 0000:01:00.0: ath DEBUG: sc=0x87db2400
    
     ol_ath_pci_configure : num_desired MSI set to 0
    
     Using PCI Legacy Interrupt
    __ol_ath_attach: ath_attach TODO
    ol_ath_attach() BMI inited.
    ol_ath_attach() BMI Get Target Info.
    ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
    NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    ol_ath_attach() configure Target .
    qc98xx_verify_checksum: flash checksum passed: 0x5162
    ol_transfer_bin_file 1688: Download Flash data len 2116
    ol_transfer_bin_file 1635: Download Firmware data len 184004
    ol_ath_attach() Download FW. 
    ol_ath_attach() HT Create .
    ol_ath_attach() HIF Claim.
    ol_ath_attach() BMI Done. 
    ol_ath_attach() WMI attached. wmi_handle 80740000 
    +HWT
    CE_recv_buf_enqueue 457 Populate last entry 512 for CE 5
    CE_recv_buf_enqueue 466 CE 5 wi 511 dest_ptr 0xe7d3e0 nbytes 0 recv_ctxt 0x8077b260
    -HWT
    HTC Service:0x0300 ep:1 TX flow control disabled
    CE_pkt_dl_len_set CE 4 Pkt download length 42
    TXRX: Created pdev 8077ce00
    wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
    num_rf_chain : 00000002
    ht_cap_info: : 0000085b
    vht_cap_info : 338001b2
    vht_supp_mcs : 0000fffa
    LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256
    idx 0 req 1  num_units 0 num_unit_info 2 unit size 404 actual units 145 
    chunk 0 len 58580 requested ,ptr  0x7e0000 
    FIRMWARE:P 145 V 16 T 443
     
    wmi_ready_event_rx:  WMI UNIFIED READY event 
    ol_ath_connect_htc() WMI is ready
    ol_ath_set_host_app_area TODO
    target uses HTT version 2.1; host uses 2.1
    ol_ath_attach() connect HTC. 
    ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
    Skipping VHT80 channel 5825
    ol_ath_phyerr_attach: called
    OL Resmgr Init-ed
    Green-AP : Green-AP : Attached
    
    Green-AP : Attached
    ol_if_dfs_setup: called 
    ol_if_dfs_attach: called; ptr=807f1974, radar_info=86cefbe8
    ol_ath_rtt_meas_report_attach: called
    ol_ath_attach() UMAC attach . 
    ol_if_dfs_configure: called
    ol_if_dfs_configure: FCC domain
    ol_if_dfs_disable: called
    __ol_ath_attach: init tx/rx TODO
    __ol_ath_attach: hard_header_len reservation 58
    __ol_ath_attach: dev name wifi1
    SC Callback Registration for wifi1
    ath_attach_dfs[11818] dfsdomain 1
    VAP device ath0 created 
    VAP device ath1 created 
    VAP device ath2 created 
    
    Enet:0 port3 up
    955x_GMAC: enet unit:0 is up...
    eth0  RGMII  1000Mbps  full duplex
    955x_GMAC: qca955x_soc_gmac_set_mac_duplex 
    955x_GMAC: qca955x_soc_gmac_set_link Done
    955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl  
     
     DES SSID SET=AirPort31000 
     
     DES SSID SET=Guest31000 
     
     DES SSID SET=Copy31000 
    Setting Max Stations:127
    Setup LAN interface entry done!
    Setup WAN interface entry done!
    device ath0 entered promiscuous mode
    device ath1 entered promiscuous mode
    device ath2 entered promiscuous mode
    br0: port 2(ath0) entering learning state
    br0: port 2(ath0) entering forwarding state
    br0: port 3(ath1) entering learning state
    br0: port 3(ath1) entering forwarding state
    br0: port 4(ath2) entering learning state
     ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1 
    br0: port 4(ath2) entering forwarding state
    br0: port 2(ath0) entering disabled state
     DEVICE IS DOWN ifname=ath0
     DEVICE IS DOWN ifname=ath0
    br0: port 2(ath0) entering learning state
    br0: port 2(ath0) entering forwarding state
    br0: port 2(ath0) entering disabled state
     ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1 
    br0: port 3(ath1) entering disabled state
     DEVICE IS DOWN ifname=ath1
     DEVICE IS DOWN ifname=ath1
    br0: port 4(ath2) entering disabled state
    br0: port 2(ath0) entering learning state
    br0: port 2(ath0) entering forwarding state
    br0: port 3(ath1) entering learning state
    br0: port 3(ath1) entering forwarding state
    System Debug : gWlan24GOff[-1].
    System Debug : gWlan5GOff[-1].
    athOpen OK
    OK
    
    
    #############################################
    Initialize Radio setting ... OK
    Configuring radio2 setting ... 
    Configuring Atheros device index:1... wifiname=wifi1 , macaddr=34:76:C5:28:79:19athSetWep[761] iNumofSsid: [1]
    Encryption using WEP ...      
    athSetWepforAP[1035] pApIf: [ath3]
     .isCountryCodeValid: EEPROM regdomain 0x0
    .. finished.
    Seol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    t Atheros power ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    to 25 (dBm)
    Encol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    ryption using WPol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    A2-PSK ...
    Encrol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    yption using AESol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
     ...
    Starting Hol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    ostapd ...      ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
          OK
    Skipping VHT80 channel 5660
    Skipping VHT80 channel 5680
    Skipping VHT80 channel 5700
    ath_ioctl: SIOC80211IFCREATE CALLED
    wmi_unified_vdev_create_send: ID = 0 VAP Addr = 34:76:c5:28:79:19:
    TXRX: Created vdev 807c8560 (34:76:c5:28:79:19)
    VAP device ath3 created 
    TXRX: ol_txrx_peer_find_add_id: peer 86f0b000 ID 192
    TXRX: ol_txrx_peer_find_add_id: peer 86f0b000 ID 176
    Setting vdev param = 20, value = 2
    Setting vdev param = f, value = 0
    Setting vdev param = 13, value = 2
    Setting vdev param = 1a, value = 1
    Setting vdev param = 1b, value = 1
    Setting vdev param = 1e, value = 1
     
     DES SSID SET=Stream31000 
    OL vap_stop +
    wmi_unified_vdev_stop_send 
    OL vap_stop -
    STOPPED EVENT for vap 0 
    Setting vdev param = 3, value = 100
    Setting vdev param = d, value = 1
    ol_ath_vap_set_param: VAP param unsupported param:7 value:0
    ol_ath_vap_set_param: VAP param unsupported param:41 value:1
    ol_ath_vap_set_param: VAP param unsupported param:35 value:0
    Setting vdev param = 12, value = 1
    Setting vdev param = 2a, value = 2
    ol_ath_vap_set_param: VAP param is now supported param:62 value:2
    ol_ath_vap_set_param: VAP param unsupported param:74 value:0
    device ath3 entered promiscuous mode
    OL vap_stop +
    wmi_unified_vdev_stop_send 
    OL vap_stop -
    STOPPED EVENT for vap 0 
    OL vap_start +
    OL vap_start -
    ol_vdev_start_resp_ev
    ol_ath_vap_join: join operation is only for STA/IBSS mode
    ol_ath_wmm_update:
    Setting vdev param = 3, value = 100
    Notification to UMAC VAP layer
    br0: port 5(ath3) entering learning state
     ieee80211_ioctl_siwmode: imr.ifm_active=131738, new mode=3, valid=1 
    wmi_unified_vdev_stop_send 
    STOPPED EVENT for vap 0 
    br0: port 5(ath3) entering forwarding state
    br0: port 5(ath3) entering disabled state
    ol_ath_vap_set_param: VAP param unsupported param:32 value:0
     DEVICE IS DOWN ifname=ath3
     DEVICE IS DOWN ifname=ath3
    ol_ath_vap_set_param: VAP param unsupported param:32 value:0
    ol_ath_vap_set_param: VAP param unsupported param:17 value:1
    ol_ath_vap_set_param: VAP param unsupported param:74 value:1
     Group Keyidx set=1 
     wmi_unified_vdev_install_key_send Setting Key for Macaddress:0x197928c57634 
    Keyix=1 Keylen=16 Keyflags=1 Cipher=4 
     Keydata=0x51 0x7b 0xe8 0xd3 0xd9 0x40 0xd4 0x8 0xa6 0x13 0xcd 0xe2 0xf1 0x6b 0xa9 0x9f 
    ol_ath_vap_set_param: VAP param unsupported param:74 value:0
    TXRX: ol_txrx_peer_find_add_id: peer 86f0b000 ID 144
    TXRX: sec spec for peer 86f0b000 (34:76:c5:28:79:19): mcast key of type 6
    Setting vdev param = 1f, value = 1
    ol_ath_vap_set_param: VAP param unsupported param:32 value:1
    OL vap_stop +
    wmi_unified_vdev_stop_send 
    OL vap_stop -
    STOPPED EVENT for vap 0 
    OL vap_start +
    OL vap_start -
    ol_vdev_start_resp_ev
    ol_ath_vap_join: join operation is only for STA/IBSS mode
    ol_ath_wmm_update:
    Setting vdev param = 3, value = 100
    Notification to UMAC VAP layer
    br0: port 5(ath3) entering learning state
    br0: port 5(ath3) entering forwarding state
    System Debug : gWlan24GOff[-1].
    System Debug : gWlan5GOff[-1].
    athOpen OK
    OK
    Wan Manager...
    Configuring WAN device[WAN0] ...
    Connect to ISP using PPPoE ... No PHY Link
    Set Domain Routing for FLET'S Square Connection...            
    Starting DNS Proxy ...            FAILED
    Starting DHCP(udhcpd) server ...            OK
    Starting FW manager ...           OK
    Starting ntpclient ...            
    Setup tc for QoS ... Disabled
    
    SCHEDULE, ServiceWlanLowRateInit ...service_index[0].
    
    SCHEDULE, ServiceWlsRadioOffInit ...service_index[1].
    
    SCHEDULE, Service5GWlanLowRateInit ...service_index[2].
    
    SCHEDULE, Service5GWlsRadioOffInit ...service_index[3].
    
    SCHEDULE, ServiceLedOffInit ...service_index[4].
    Port led blink on
    
    SCHEDULE, ServiceLanOffInit ...service_index[5].
    
    SCHEDULE, ServiceWanOffInit ...service_index[6].
    
    SCHEDULE, ServiceLanLowRateInit ...service_index[7].
    Force Low Rate Off
    
    SCHEDULE, ServicePowerLedInit ...service_index[8].
    
    
    Schedule starting  [scheduleOpen], ...wait result..
    Schedule result :[Disable (No rules)]. 
    Configuring network routing and filtering ...Iptable restart VPN ACL ...VPN ACL ...
    
    Enet:0 port:3 down
    955x_GMAC: unit 0: phy 0 not up carrier 1
    OK
    Ebtables v2.0 registered
    Configuring Bridge filtering ...OK
    Starting SiteBlock server ...            
    Netpacket Filter Open ....              sysGetKernelInfo: netv :1.0
    Kernel netpkt ver netv: 1.0
    bsfdrv_major = 235
    OK
    Starting UPNPD  ...  WAN Speed = 10 Mbps
    FAILED
    IGMP Proxy is disabled...  Starting HTTPD server ...           OK
    Starting DDNS  ...  Disabled
    Staring ALG...           OK
    Starting LLTD ...           OK
    usbcore: registered new interface driver usblp
    Initializing USB Mass Storage driver...
    usbcore: registered new interface driver usb-storage
    USB Mass Storage support registered.
    Initialization has completed
    *We used 24.940000 seconds to initialize all modules*
    pSEM_GETID got id 65538
    [RMGMT DBG] RMGMT_VERSION: 3.42.32
    br0: port 2(ath0) entering disabled state
    br0: port 3(ath1) entering disabled state
    Invoking ACS module for Best channel selection 
    br0: port 2(ath0) entering learning state
    br0: port 2(ath0) entering forwarding state
    Invoking ACS module for Best channel selection 
    br0: port 3(ath1) entering learning state
    br0: port 3(ath1) entering forwarding state
    
    Enet:0 port3 up
    955x_GMAC: enet unit:0 is up...
    eth0  RGMII  1000Mbps  full duplex
    955x_GMAC: qca955x_soc_gmac_set_mac_duplex 
    955x_GMAC: qca955x_soc_gmac_set_link Done
    955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl  
    wmi_unified_vdev_stop_send 
    STOPPED EVENT for vap 0 
    br0: port 5(ath3) entering disabled state
    OL vap_stop +
    wmi_unified_vdev_stop_send 
    OL vap_stop -
    STOPPED EVENT for vap 0 
    OL vap_stop +
    wmi_unified_vdev_stop_send 
    OL vap_stop -
    STOPPED EVENT for vap 0 
    Invoking ACS module for Best channel selection 
    br0: port 5(ath3) entering learning state
    br0: port 5(ath3) entering forwarding state
    Function ieee80211_acs_find_best_11na_centerchan best 5G channel is 48
    OL vap_start +
    OL vap_start -
    ol_vdev_start_resp_ev
    ol_ath_vap_join: join operation is only for STA/IBSS mode
    ol_ath_wmm_update:
    Setting vdev param = 3, value = 100
    Notification to UMAC VAP layer
    *** PROCESS MANAGER Starts ***
    Processmanager update modules
    Reload WAN: ppp0 ...
    Close WAN: ppp0 ...
    Configuring WAN device[WAN0] ...
    Connect to ISP using PPPoE ... No PHY Link
    VPN Disconnect ...
    Phy(eth0.2) link disconnected ...Wait for link recover
    Restarting Iptables ....Clean iptable...OK
    Configuring network routing and filtering ...Iptable restart VPN ACL ...VPN ACL ...
    OK
    OK
    Reloading dnsProxy ...            Stopping DNS Proxy ...            OK
    Set Domain Routing for FLET'S Square Connection...            
    Starting DNS Proxy ...            OK
    Processmanager update modules