home 
wiki
wiki
Spelling: minitar
MINITAR ACCESS POINT
As with Linksys WRT54G, the Minitar's firmware is based around linux.
NEWS
* Minitar's OEM appears to be Edimax [1]. Product Link [2].
(2003-11-08)
* Source is available on the Melbourne Wireless website [3].
(2003-11-08)
* Mitch from perthwireless has discovered a working password for the
busybox login prompt (6-11-03)
* Minitar say they will now produce source for the GPL'd code in
these units. (23-10-03)
* Minitar has now released the source that they recieved from
realtek. (25-10-03)
* The kernel archive they've releasead seems to be missing a number
of important .c files the drivers for the CPU, wifi, and rom chips
particularly
WHERE TO BUY
EYO [4] (Sydney)
Warcom [5] (Melbourne)
PCRange [6] (Adelaide)
Jamie Moir [7]
Add others please.
HARDWARE
* Minitar Specifications
CPU Realtek RTL8181 [8] (200MHz MIPS) Flash 1 MB NOR Flash RAM ICSI
IC42S164007T [9] 8 MB SDRAM Antenna RP-SMA Detachable Antenna x 1
Transmit Power 18 dBm Power 12V DC, 0.5A Linear Power Adaptor
Dimension 30(H)*127(W)*96(D) mm
Actually there is 2Meg of flash but as far as I can tell the first is
taken up with the primary firmware code. (btcode)
You can get the Realtek RTL8181 pinout and register data sheet by
asking djongdjong_goh@winedge.com.sg nicely. Oh sod it. Here it is as
well as below. RTL8181 PDF [10]
You can now find the RTL8181 datasheet here
http://www.felinemenace.org/~andrewg/stuff/RTL8181.pdf (thanks to
andrewg, nevyn JTAG, dual PCI, 16 digital I/O, 32MB SDRAM) Flash
MX29LV160AB [13] 2 MB NOR Flash RAM ICSI IC42S164007T [14] 8 MB SDRAM
(room for more, see U8) Ethernet 2 x RTL3129 internal MACs (eth0 only,
missing PHY and isolation transformer for eth1 but it could be
manually added on.) JTAG JP1 (pin layout soon) Serial J1 (see below)
Radio SA2400 [15] The data sheet is hard to get so please post a link
to a PDF if you find one. SAW Filter (G W22 B004D) Unknown brand.
2.4GHz Bandpass filter.
* Images:
http://212.13.198.208/minitar-top.jpg
http://212.13.198.208/minitar-bottom.jpg
FIRMWARE
New firmware (2.20 [16]) was released with some additional features.
One can unpack the contents with this script (thanks to Mihnea)
#!/bin/bash #-- START wget
http://www.minitar.com/downloads/MIN2APB_2.20.zip unzip -jo
MIN2APB_2.20.zip dd if=general-ap_upg_2.20.bin bs=1 skip=12
count=$((0x18000)) | zcat ->webpages-ap.bin dd
if=general-ap_upg_2.20.bin bs=1 skip=$((12+0x18000)) | zcat
->vmlinux_img dd if=vmlinux_img bs=1 count=$((0x166000)) >kcoff dd
if=vmlinux_img bs=1 skip=$((0x166000)) |zcat ->tmpimg.img rm -f
vmlinux_img #-- END
Script modified for version 2.32 of the firmware.
#!/bin/bash ZIPFILE=Minitar_AP_Firmware_2.32.zip
FIRMWARE=general-ap_upg_2.32_8m.bin
DOWNLOADSITE="http://www.minitar.com/downloads/" #-- START wget
"$DOWNLOADSITE$ZIPFILE" unzip -jo $ZIPFILE dd if=$FIRMWARE bs=1
skip=12 count=$((0x18000)) | zcat ->webpages-ap.bin dd if=$FIRMWARE
bs=1 skip=$((12+0x18000)) | zcat ->vmlinux_img dd if=vmlinux_img bs=1
count=$((0x16d000)) >kcoff dd if=vmlinux_img bs=1 skip=$((0x16d000))
|zcat ->tmpimg.img rm -f vmlinux_img #-- END
"You will get 3 files: webpages-ap.bin (the web pages), kcoff (the
kernel binary, probably in ECOFF format) and tmpimg.img (the initrd).
"
I have some doubt about the kernel binary that this procedure
returns. it has far too many 0's at the start for my liking.
Mount it:
mount -t ext2 -o loop tmpimg.img /mnt/floppy -o
ro,nodev,nosuid,noexec
directory listing MinitarLs [17]
MEMORY
Unpopulated component U8 looks to be space for a second SDRAM IC.
Related components around U8 seem to be populated, so it wont be too
hard to add more ram to your minitar.
I will try this out when I get mine running again.
The RTL8181 supports 1 bank of 32bit ram or 2 banks of 16bit ram. The
IC42S164007T is a 64Mbit / 16bit device, adding another to U8 would be
very straight forward.
EJTAG
With the help of the late release of the RTL8181 datasheet, we
noticed the controller supports EJTAG, the interface seems to be wired
to JP1.
The JTAG interface is not normally active, JTAG CLK doubles as the
WLAN activity led indicator (LED2?) - some jumpers need to be set to
disable WLAN activity can't delete it Setup bridge...
Algorithmics/MIPS FPU Emulator v1.5 device eth1 entered promiscuous
mode device wlan0 entered promiscuous mode This is 8305SB eth1:
Promiscuous mode enabled. eth1: Promiscuous mode enabled. eth1:
Promiscuous mode enabled. eth1: Promiscuous mode enabled. SIOCDELRT:
No such process SIOCDELRT: No such process br0: port 2(wlan0) entering
listening state br0: port 1(eth1) entering listening state br0: port
2(wlan0) entering learning state br0: port 2(wlan0) entering
forwarding state br0: topology change detected, propagating br0: port
1(eth1) entering learning state br0: port 1(eth1) entering forwarding
state br0: topology change detected, propagating SIOCDELRT: No such
process SIOCDELRT: No such process udhcp server (v0.9.9-pre) started
iappauth.sh: not found ********** run Diagd ********** setting: port:
31727 running in daemon mode 251
[?3l[2J[20;1H--------------------------------------------------------------
-----------------[21;1H[7m[21;1H Select Exit
Enter[0m[4;10HPlease enter your Name and Password[8;2H[7mUser
Name[0m[8;14H:^A
* Reboot:
The system is going down NOW !! Sending SIGTERM to all processes.
Terminated # Sending Please stand by while rebooting the system.
Restarting system. Enable Watch Dog to Reset whole system
--
--
to get a root console:
login: super
password: lance@edimax.com.au
you have no 'ls', so you need to 'echo *' to do useful things like
see files
# cat cpuinfo system type : Philips Nino processor : 0 cpu model :
R3000 V0.0 BogoMIPS [21] : 204.39 wait instruction : no microsecond
timers : no tlb_entries : 64 extra interrupt vector : no hardware
watchpoint : no VCED exceptions : not available VCEI exceptions : not
available ll emulations : 0 sc emulations : 0
# cat meminfo total: used: free: shared: buffers: cached: Mem:
6651904 4444160 2207744 0 61440 2338816 Swap: 0 0 0 MemTotal [22]:
6496 kB MemFree [23]: 2156 kB MemShared [24]: 0 kB Buffers: 60 kB
Cached: 2284 kB SwapCached [25]: 0 kB Active: 636 kB Inactive: 2140 kB
HighTotal [26]: 0 kB HighFree [27]: 0 kB LowTotal [28]: 6496 kB
LowFree [29]: 2156 kB SwapTotal [30]: 0 kB SwapFree [31]: 0 kB
# df Filesystem 1k-blocks Used Available Use% Mounted on /dev/root
1373 1317 56 96% /
# cd /proc/rtl8180/ # echo * PCI_IO ap_status bssdb rxdesc stats
status txdesc
# cat ap_status ************ wlan_sta_tbl ************ There are 0
stations in table. ************ wlan_wep_KM_tbl ************
************ wlan_macaddr_filter ************ macaddr_filter_num = 0
deny_macaddr_filter_num = 0 ************ Broadcase skb tx queue
************ wCtx->ps_brstQ.qnum = 0
# cat status ************ Current driver status ************
rtl8180_pci_driver loaded. MacAddr [32] = 00:50:fc:d4:b1:dd ioaddr =
0xbd400000 irq = 2
-- RTL8180 Link status --
Channel number = 11 beacon period = 100 BSSID = 0x00 0x50 0xfc 0xd4
0xb1 0xdd SSID = 0x66(f) 0x7a(z) 0x6a(j) 0x2d(-) 0x77(w) 0x69(i)
0x72(r) 0x65(e) 0x6c(l) 0x65(e) 0x73(s) 0x73(s) 0x2d(-) 0x6f(o) 0
Capability = 0x00 AID = 0x00 Operational rate = Mbps
QUESTIONS
Does somebody has the BDSL def file?
The BSDL file hasn't been as forthcoming as the data sheet from the
rep (I have asked for it) and may never will. It's not always one of
those things that get given out without an NDA. Keep hassling Realtek.
Q: Can somebody gave the FCC-ID of this AP? Apparently it's being
approved and will get one for sale in the US of A.
A: FWIW, there is a RTL8181-based design for a Network Everywhere
product under the FCCID of Q87-NWR11B --JerrittCollord
Links:
------
[1] http://www.edimax.com/
[2] http://www.edimax.com.tw/html/english/products/EW-7206APB.htm
[3] http://melbourne.wireless.org.au/pub/
[4] http://www.eyo.com.au
[5] http://www.warcom.com.au
[6] http://www.pcrange.com.au
[7] http://www.jmcs.net.au
[8]
http://www.realtek.com.tw/products/products1-2.aspx?modelid=2003052
[9]
http://web.icsi.com.tw/domino/packinfo.nsf/WebDSProcNum/(ADB311E3EC53802EC4CC49AE52D1632C)?OpenDocument
[10] http://www.wireless.org.au/~jhecker/RTL8181spec_1.pdf
[11] http://melbournewireless.org.au/?RokLobsta
[12]
http://www.realtek.com.tw/products/products1-2.aspx?modelid=2003052
[13]
http://www.mxic.com.tw/web/P_flash.nsf/bf3add4f68988391c825667100209fa5/785e059690440530482569d1000d3acc?OpenDocument
[14]
http://web.icsi.com.tw/domino/packinfo.nsf/WebDSProcNum/(ADB311E3EC53802EC4CC49AE52D1632C)?OpenDocument
[15]
http://www.semiconductors.philips.com/technologies/wirelessconnectivity/sa2400/
[16] http://www.minitar.com/downloads/MIN2APB_2.20.zip
[17] http://melbournewireless.org.au/?MinitarLs
[18] http://openwince.sourceforge.net/jtag/
[19]
http://www.mips.com/content/Documentation/MIPSDocumentation/EJTAG/doclibrary
[20] http://melbournewireless.org.au/?BogoMIPS
[21] http://melbournewireless.org.au/?BogoMIPS
[22] http://melbournewireless.org.au/?MemTotal
[23] http://melbournewireless.org.au/?MemFree
[24] http://melbournewireless.org.au/?MemShared
[25] http://melbournewireless.org.au/?SwapCached
[26] http://melbournewireless.org.au/?HighTotal
[27] http://melbournewireless.org.au/?HighFree
[28] http://melbournewireless.org.au/?LowTotal
[29] http://melbournewireless.org.au/?LowFree
[30] http://melbournewireless.org.au/?SwapTotal
[31] http://melbournewireless.org.au/?SwapFree
[32] http://melbournewireless.org.au/?MacAddr
[EditText] [Spelling] [Current] [Raw] [Code] [Diff] [Subscribe] [VersionHistory] [Revert] [Delete] [RecentChanges]