mirror of
https://git.openwrt.org/openwrt/openwrt.git
synced 2026-02-21 15:12:25 +01:00
88f3c67eb2
This commit adds support for the Cisco Meraki MR70/Go GR60. The Meraki MR70 is a Cisco 802.11ac/WiFi 5 outdoor AP with 1 Ethernet port. It can be powered by a 12V DC barrel jack (5.5x2.5mm, center positive) or via 802.3af POE. The Meraki Go GR60 (codename: Dungbeetle Omni) is identical to the MR70 (codename: Toe Biter Omni), so this document will refer to both devices as the MR70. MR70 hardware info: * CPU: Qualcomm IPQ4029 * RAM: 256MB DDR3 * Storage: 128 MB (TSOP48 NAND, 3.3V) * Networking: 1 Gigabit Ethernet * WiFi: QCA4019 802.11b/g/n/ac * Serial: Internal header (J10, 2.54mm, unpopulated) This device ships with secure boot, and cannot be flashed without external programmers (TSOP48 NAND and I2C EEPROM)! Disassembly: Note: This is an outdoor device that is ultrasonically welded and glued to weather seal it. Disassembly will compromise the weather seal! Start by removing the product label on the rear metal mounting plate. There are four Torx T8 screws under the sticker, remove the screws and the mounting plate. Remove the two Philips screws under the plate. Using a chisel (or razor blade) and hammer, cut around the circumfrence of the device. You need to cut through approximately 2mm of ultrasonically welded plastic. After cutting through the plastic, heat the device using a hair drier (or similar) to soften the glue. A heatgun is NOT recommended as it will damage the plastic. It is only required to heat the device until warm (~40C-50C). Using a plastic pry tool, insert it along the cut you made around the edge and gently separate. Insert a guitar pick into the opening while gently lifting the front to cut the glue. The device is glued around the entire circumfrence. Once you have removed the plastic front, remove the 4 Philips screws holding down the main PCB. Release the two WiFi antennas by gently bending the antenna PCBs to the middle of the unit and pulling up. Lift the top of the PCB gently while pushing the Ethernet port into the housing to release it. Turn the PCB over and remove the three Philips screws holding the metal heat spreader. The TSOP48 NAND flash (U9, S34ML01G200 or W29N01HV) is located under the metal heat spreader. To flash, you need to desolder the TSOP48 or use a 360 clip. You also need to reprogram the I2C EEPROM (U20, Atmel 24c64). It is not necessary to desolder the I2C EEPROM, a ch341a USB programmer and SOP-8 clip are inexpensive (~$10) and work well. Installation: The dumps to flash can be found in this repository: https://github.com/halmartin/meraki-openwrt-docs/tree/main/mr70_gr60 The device has the following flash layout (offsets with OOB data): ``` 0x000000000000-0x000000100000 : "sbl1" 0x000000100000-0x000000200000 : "mibib" 0x000000200000-0x000000300000 : "bootconfig" 0x000000300000-0x000000400000 : "qsee" 0x000000400000-0x000000500000 : "qsee_alt" 0x000000500000-0x000000580000 : "cdt" 0x000000580000-0x000000600000 : "cdt_alt" 0x000000600000-0x000000680000 : "ddrparams" 0x000000700000-0x000000900000 : "u-boot" 0x000000900000-0x000000b00000 : "u-boot-backup" 0x000000b00000-0x000000b80000 : "ART" 0x000000c00000-0x000007c00000 : "ubi" ``` * Dump your original NAND (if using nanddump, include OOB data). * Decompress `u-boot.bin.gz` dump from the GitHub repository above (dump contains OOB data) and overwrite the `u-boot` portion of NAND from `0x738000`-`0x948000` (length `0x210000`). Offsets here include OOB data. * Decompress `ubi.bin.gz` dump from the GitHub repository above (dump contains OOB data) and overwrite the `ubi` portion of NAND from `0xc60000-0x7fe0000` (length `0x7380000`). Offsets here include OOB data. * Dump your original EEPROM. Change the byte at offset `0x49` to `0x1e` (originally `0x2d` or `0x26`). Remember to re-write the EEPROM with the modified data. * This can be done on Linux via the following command: `printf "\x1e" | dd of=/tmp/eeprom.bin bs=1 seek=$((0x49)) conv=notrunc` **Note**: the device will not boot if you modify the board major number and have not yet overwritten the `ubi` and `u-boot` regions of NAND. * Resolder the NAND after overwriting the `u-boot` and `ubi` regions. OpenWrt Installation: * After flashing NAND and EEPROM with external programmers. Plug in an Ethernet cable and power up the device. * The new U-Boot build uses the space character `" "` (without quotes) to interrupt boot. * Interrupt U-Boot and `tftpboot` the OpenWrt initramfs image from your tftp server ``` dhcp setenv serverip <your_tftp> tftpboot openwrt-ipq40xx-generic-meraki_mr70-initramfs-uImage.itb ``` * Once booted into the OpenWrt initramfs, created the `ART` ubivol with the WiFi radio calibration from the mtd partition: ``` cat /dev/mtd10 > /tmp/ART.bin ubiupdatevol /dev/ubi0_1 /tmp/ART.bin ``` * `scp` the `sysupgrade` image to the device and run the normal `sysupgrade` procedure: ``` scp -O openwrt-ipq40xx-generic-meraki_mr70-squashfs-sysupgrade.bin root@192.168.1.1:/tmp/ ssh root@192.168.1.1 "sysupgrade -n /tmp/openwrt-ipq40xx-generic-meraki_mr70-squashfs-sysupgrade.bin" ``` * OpenWrt should now be installed on the device. Signed-off-by: Hal Martin <hal.martin@gmail.com> Link: https://github.com/openwrt/openwrt/pull/22050 Signed-off-by: Robert Marko <robimarko@gmail.com> |
||
|---|---|---|
| .. | ||
| airoha | ||
| apm821xx | ||
| armsr | ||
| at91 | ||
| ath79 | ||
| bcm27xx | ||
| bcm47xx | ||
| bcm53xx | ||
| bcm4908 | ||
| bmips | ||
| d1 | ||
| econet | ||
| gemini | ||
| generic | ||
| imx | ||
| ipq40xx | ||
| ipq806x | ||
| ixp4xx | ||
| kirkwood | ||
| lantiq | ||
| layerscape | ||
| loongarch64 | ||
| malta | ||
| mediatek | ||
| microchipsw | ||
| mpc85xx | ||
| mvebu | ||
| mxs | ||
| octeon | ||
| omap | ||
| pistachio | ||
| qoriq | ||
| qualcommax | ||
| qualcommbe | ||
| ramips | ||
| realtek | ||
| rockchip | ||
| sifiveu | ||
| siflower | ||
| starfive | ||
| stm32 | ||
| sunxi | ||
| tegra | ||
| uml | ||
| x86 | ||
| zynq | ||
| Makefile | ||