Amped Wireless AP20000G

abgn (AN600)
High Power Wireless-N 600mW Gigabit Dual Band Access Point
Homepage	Product page
WikiDevi.wi-cat.ru	Amped Wireless AP20000G
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Amped Wireless AP20000G
FCC ID	ZTT-AP20000G
IC ID	10233A-AP20000G
Type	wireless router
CPU1	Realtek RTL8198
CPU1 Type	Lexra RLX5281
CPU1 Speed	620 MHz
Flash1 Chip	Macronix MX25L6406EM2I-12G
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip	SK hynix H5PS5162GFR-S6C
ETH chip1	Realtek RTL8198
Switch	Realtek RTL8198
Ethernet Port Count	1-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: F8:7B:8C (7 E, 9 W) Ethernet OUI: F8:7B:8C (7 E, 9 W)
Stock bootloader	rtkload
Stock FW OS	Linux
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 1 A
Connector type	barrel
Serial Port (UART)	yes, (38400 8N1)
Other
Default SSID: Amped_AP_2.4GHz , Amped_AP_5.0GHz Default IP address: 192.168.80.240 the IP 192.168.80.240 is used by 2 additional devices of which 2 are Amped Wireless devices Default login user: admin Default login password: admin admin:admin credentials used by 1341 additional devices of which 7 are Amped Wireless devices
Manuf/OEM/ODM	Loopcomm
Retail
FCC approval date	11 September 2012
(Est.) release date	15 September 2012
UPC	850214003423 (UPC DB, On eBay)
ASIN	B008WJ6ISY
Country of manuf	Taiwan
Radio 1
Chip1	Realtek RTL8192DR
Wireless interface OUI	F8:7B:8C
Antenna Connector Type	RP-SMA
MIMO status	2x2:2
Wireless Standard	IEEE 802.11a/n
802.11n	up to 300 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	2.4 GHz
Radio 2
Chip1	Realtek RTL8192CE
Wireless interface OUI	F8:7B:8C
Antenna Connector Type	RP-SMA
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented Amped Wireless device with specifications, see Amped Wireless.

• 300 Mbps - 2SS 5GHz 802.11n (40MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN600 class

Overview

"LOO0070 REV: 1.3" is silkscreened on the board.

The board is using all Tocon capacitors.

The device uses 2x Skyworks (SiGe) SE5004L / 5004L power amplifiers for the 5GHz radio and 2x Skyworks (SiGe) SE2576L / 2576L power amplifiers for the 2.4GHz radio.

Device recovery

If the device has been misflashed and is unable to boot, recovery (without serial) should be manageable by switching the device into recovery mode (hold 'reset' button while connecting power until LAN ports stay solid blue). The device is then flashable via TFTP @ 192.168.1.6.

Firmware would seem to be accepted in the standard Realtek format.

You will need to split the vendor's firmware into the three constituent files (using binwalk would be highly recommended).. and then likely upload in the following order..

• the webpages bin (unk. name, don't care enough to find out now)
• root.bin
• linux.bin

Additionally, the firmware of other devices sharing the same board (i.e. the SR20000G and R20000G) appears to be easily flashable using this method (functionallity was not tested aside from noting successful boot and persistence of previous AP mode settings).

See conjur's post on the Realtek thread on the DD-WRT Forum and, presumably, the RTK SDK code and documentation for more details.