Hawking HD45R

abgn (AN750)
Hi-Gain Dual Band Wireless-N Router
Homepage	Product page
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Gargoyle	Status Unknown
Platform
Brand • Model • Rev	Hawking HD45 R
FCC ID	NDD9566751028
Type	wireless router
CPU1	Ralink RT3883
CPU1 Type	MIPS 74Kc
CPU1 Speed	500 MHz
Flash1 Chip	Macronix MX29LV640EBTI-70G
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip	Winbond W9751G6JB-25
ETH chip1	Ralink RT3883
Switch	Realtek RTL8367R-VB
Ethernet Port Count	1-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: 00:0E:3B (2 E, 14 W) Ethernet OUI: 00:0E:3B (2 E, 14 W)
Stock bootloader	U-Boot 3.5.3.0 Ralink
Stock FW OS	Linux 2.6.21
Expansion IF types	none specified
Power	12 VDC, 1.25 A
Connector type	barrel
Additional chips 5GHz Power Amplifier IC;Skyworks;SE2567L;SiGe, 2567L, 143AB;3; 2.4GHz Power Amplifier IC;unknown;unknown;1047, NEA2;2;
Other
Default SSID: Hawking_HD45R_2.4GHz , Hawking_HD45R_5GHz Default IP address: 192.168.1.254 the IP 192.168.1.254 is used by 157 additional devices of which 3 are Hawking devices Default login user: admin Default login password: 1234 admin:1234 credentials used by 185 additional devices of which 4 are Hawking devices
Manuf/OEM/ODM	Edimax BR-6675nD
3rd Party Firmware Support	Padavan (WiP) • (List)
Retail
FCC approval date	20 October 2011
(Est.) release date	20 February 2012
UPC	603992507030 (UPC DB, On eBay)
ASIN	B007B5PR1O
Country of manuf	China
Radio 1
Chip1	Ralink RT3883
Wireless interface OUI	00:0E:3B
Antenna Connector Type	U.FL, RP-SMA
MIMO status	3x3:3
Wireless Standard	IEEE 802.11a/n
802.11n	up to 450 Mbps
802.11a	up to 54 Mbps
WiFi Operating Frequency	5 GHz
Radio 2
Chip1	Ralink RT3092
Wireless interface OUI	00:0E:3B
Antenna Connector Type	U.FL, RP-SMA
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
FCC ID Edimax BR-6675nD NDD9566751028 Intellinet 450N (524988) NDD9566751028

For a list of all currently documented Ralink chipsets with specifications, see Ralink.
For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented Hawking device with specifications, see Hawking.

• 450 Mbps - 3SS 5GHz 802.11n (40MHz chan.),

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = AN750 class

Overview

Specifications

• LAN: 4x 1GbE (Auto-MDI/MDI-X)
• WAN: 1x 1GbE (Auto-MDI/MDI-X)
• 2.4GHz: 2T2R MIMO (300Mbps)
• 5GHz: 3T3R MIMO (450Mbps)
• Antenna: 3x 3dBi DualBand Dipole
• Power Adapter: 12V, 1.25A

"1244-00000729-50Z" is silkscreened on one production model HD45R's board.
This device is an Edimax BR-6675nD. It's board is
somewhat similar to the one used by the BR-6475nD.

Per the manual, this device has two SSIDs:
Hawking_HD45R_2.4GHz and Hawking_HD45R_5GHz.

There are a few entries (6) for the 2.4GHz SSID
in WiGLE as of 03/30/2013, all with 00:0E:3B OUIs.

Links of Interest

Datasheet
User's manual

Spec. aggregators

• On SpeedGuide.net

Vendors

• On Newegg

JTAG-Serial Info

Serial

Serial Pinouts

It's presumably the following...

(TxD) (GND) (RxD) [3.3]
J2

Info derived from

boot log

U-Boot 1.1.3 (Sep 28 2011 - 14:24:27) Board: Ralink APSoC DRAM: 64 MB relocate_code Pointer at: 83fa8000 ************** Init GPIO Pin Start ************** ************** Init GPIO Pin Done ************** flash_protect ON: from 0xBC000000 to 0xBC0254C7 flash_protect ON: from 0xBC030000 to 0xBC030FFF *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 3.5.3.0 -------------------------------------------- ASIC 3883_MP (MAC to REALTEK Mode) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: NOR Flash Date:Sep 28 2011 Time:14:24:27 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 500 MHZ #### estimate memory size =64 Mbytes Realtek giga Mac init! regData1 = 0000 regData2 = 0000, RTL8367R (rtk_switch_init 11984) init_rgmii done Realtek giga Mac done! Please choose the operation: 0: Load ucos code to SDRAM via TFTP Client. 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP. You choosed 3 flash id = 000322cb sectors = 135 count = 8388608 3: System Boot system code via Flash. ## Booting image at bc070000 ... CSYS magic number at 0xBC070000 Image Name: Linux Kernel Image Created: 2012-03-06 11:16:03 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 4525996 Bytes = 4.3 MB Load Address: 80000000 Entry Point: 80280000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80280000) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.21 (root@localhost.localdomain) (gcc version 3.4.2) #176 Tue Mar 6 19:11:43 CST 2012 The CPU feqenuce set to 500 MHz CPU revision is: 0001974c Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 16256 Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5 Primary instruction cache 64kB, tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). cause = c0808000, status = 11000000 PID hash table entries: 256 (order: 8, 1024 bytes) calculating r4koff... 001e8480(2000000) CPU frequency 500.00 MHz Using 250.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 62140k/65536k available (2086k kernel code, 3336k reserved, 469k data, 116k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 RALINK_PCI_PCICFG_ADDR = 0 *************** Ralink PCIe RC mode ************* registering PCI controller with io_map_base unset SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb 2->[1][0][0][30]=0 5->[1][0][0][30]=fffffffe 2->[1][0][0][30]=0 5->[1][0][0][30]=0 PCI: Bridge: 0000:00:00.0 IO window: disabled. MEM window: 20000000-200fffff PREFETCH window: disabled. BAR0 at slot 0 = 0 bus=0, slot = 0x0 P2P(PCI) 0x00 = 08021814 P2P(PCI) 0x04 = 00100007 P2P(PCI) 0x08 = 06040001 P2P(PCI) 0x0c = 00010000 P2P(PCI) 0x10 = 00000000 P2P(PCI) 0x14 = 20100000 P2P(PCI) 0x18 = 00010100 P2P(PCI) 0x1c = 000000f0 P2P(PCI) 0x20 = 20002000 P2P(PCI) 0x24 = 0000fff0 P2P(PCI) 0x28 = 00000000 P2P(PCI) 0x2c = 00000000 P2P(PCI) 0x30 = 00000000 P2P(PCI) 0x34 = 00000040 P2P(PCI) 0x38 = 00000000 P2P(PCI) 0x3c = 000401ff res[0]->start = 0 res[0]->end = 1ffffff res[1]->start = 20100000 res[1]->end = 2010ffff res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 bus=1, slot = 0x0 dev III(PCIe) 0x00 = 30911814 dev III(PCIe) 0x04 = 00100000 dev III(PCIe) 0x08 = 02800000 dev III(PCIe) 0x0c = 00000000 dev III(PCIe) 0x10 = 20000000 dev III(PCIe) 0x14 = 00000000 dev III(PCIe) 0x18 = 00000000 dev III(PCIe) 0x1c = 00000000 dev III(PCIe) 0x20 = 00000000 dev III(PCIe) 0x24 = 00000000 dev III(PCIe) 0x28 = 00000000 dev III(PCIe) 0x2c = 30911814 dev III(PCIe) 0x30 = 00000000 dev III(PCIe) 0x34 = 00000040 dev III(PCIe) 0x38 = 00000000 dev III(PCIe) 0x3c = 000001ff res[0]->start = 20000000 res[0]->end = 2000ffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered ralink flash device: 0x1000000 at 0x1c000000 Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank Amd/Fujitsu Extended Query Table at 0x0040 number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. Creating 7 MTD partitions on "Ralink SoC physically mapped flash": 0x00000000-0x00030000 : "Bootloader" 0x00030000-0x00040000 : "Config" 0x00040000-0x00050000 : "Factory" 0x00050000-0x00070000 : "Cimage" 0x00070000-0x00170000 : "Kernel" 0x00170000-0x01020000 : "RootFS" mtd: partition "RootFS" extends beyond the end of device "Ralink SoC physically mapped flash" -- size truncated to 0x690000 0x00070000-0x01020000 : "Uimage" mtd: partition "Uimage" extends beyond the end of device "Ralink SoC physically mapped flash" -- size truncated to 0x790000 Load Ralink DFS Timer Module RT3xxx EHCI/OHCI init. squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro io scheduler noop registered (default) pcie_portdrv_probe->Dev[1814:0802] has invalid IRQ. Check vendor BIOS assign_interrupt_mode Found MSI capability ***********Init LED Driver***************** Init GPIO Pin led_init 641 Boot from NOR flash Init GPIO Direction Init GPIO Interrupt ***********Init LED Driver Finishing***************** Ralink_gpio_init_irq LED & GPIO & LAN Status Driver LED_VERSION spidrv_major = 217 HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Ralink APSoC Hardware Watchdog Timer Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A loop: loaded (max 8 devices) rdm_major = 254 MAC_ADRH -- : 0x00000000 MAC_ADRL -- : 0x00000000 Ralink APSoC Ethernet Driver Initilization. v2.0 256 rx/tx descriptors allocated, mtu = 1500! MAC_ADRH -- : 0x0000000c MAC_ADRL -- : 0x432880b8 PROC INIT OK! PPP generic driver version 2.4.2 PPP BSD Compression module registered NET: Registered protocol family 24 PPPoL2TP kernel driver, V0.17 PPTP driver version 0.8.2 block2mtd: version $Revision: 1.1.1.1 $ rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb1: Product: Ralink EHCI Host Controller usb usb1: Manufacturer: Linux 2.6.21 ehci_hcd usb usb1: SerialNumber: rt3xxx usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000 usb usb2: Product: RT3xxx OHCI Controller usb usb2: Manufacturer: Linux 2.6.21 ohci_hcd usb usb2: SerialNumber: rt3xxx-ohci usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected u32 classifier Performance counters on nf_conntrack version 0.5.0 (512 buckets, 4096 max) ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone ipt_time loading ClusterIP Version 0.8 loaded successfully arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 116k freed init started: BusyBox v1.15.2 (2012-03-06 19:13:02 CST) starting pid 242, tty : /etcAlgorithmics/MIPS FPU Emulator v1.5 /rc.sh' cannot run '/etc/rc.sh': No such file or directory starting pid 243, tty '': '-/bin/sh'console. BusyBox v1.15.2 (2012-03-06 19:13:02 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. Tue Mar 6 19:03:57 UTC 2012 Started WatchDog Timer. Started WatchDog Timer. watchdog: ioctl 0xc0045706 failed: Inappropriate ioctl for device rgmii: module license 'unspecified' taints kernel. (smi_init 311)RT2880_GPIOMODE_REG = 0000185c Init! (smi_reset 246) smi_reset rtk_8367b_switch_init 13707 init_para = c007c270 init_size = 0096 data=00001010 switch_init 415 mode = 1 model = 0 vlan = 1 switch = 1010 init_rgmii 249 RTL8367R_VB (switch_init 423) init_rgmii done MAC_ADRH -- : 0x0000000e MAC_ADRL -- : 0x3b66023c phy_tx_ring = 0x03e6f000, tx_ring = 0xa3e6f000 phy_rx_ring0 = 0x03e70000, rx_ring0 = 0xa3e70000 CDMA_CSG_CFG = 81000007 GDMA1_FWD_CFG = C0710000 eth2.1: Setting MAC address to 00 0e 3b 66 02 3c. VLAN (eth2.1): Underlying device (eth2) has same MAC, not checking promiscious mode. eth2.2: Setting MAC address to 00 0e 3b 66 02 3f. device eth2 entered promiscuous mode VLAN (eth2.2): Setting underlying device (eth2) to promiscious mode. Initialize ra0 interface Initialize rai0 interface wireless_driver === pAd = c0091000, size = 702064 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 RX DESC a3a8a000 size = 2048 1. Phy Mode = 8 2. Phy Mode = 8 3. Phy Mode = 8 MCS Set = ff ff ff 00 01 Main bssid = 00:0e:3b:66:02:3e <==== rt28xx_init, Status=0 0x1300 = 00064300 acm_msg> ACM_MEM_Alloc_Num = 1 acm_msg> ACM_MEM_Free_Num = 1 wireless_driver === pAd = c0171000, size = 639216 === <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc0160000, csr_addr=0xc0160000! RX DESC a3e79000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff 00 00 01 SYNC - BBP R4 to 20MHz.l Main bssid = 00:0e:3b:66:02:3c <==== rt28xx_init, Status=0 0x1300 = 00064380 acm_msg> ACM_MEM_Alloc_Num = 1 acm_msg> ACM_MEM_Free_Num = 1 Setup BRIDGE interface ifconfig: ioctl 0x8913 failed: No such device bridge br0 doesn't exist; can't delete it Setup bridge... eth2.1: dev_set_promiscuity(master, 1) device eth2.1 entered promiscuous mode route: ioctl 0x890c failed: No such process eth2.2: dev_set_promiscuity(master, 1) device eth2.2 entered promiscuous mode route: ioctl 0x890c failed: No such process RX DESC a3a8a000 size = 2048 1. Phy Mode = 8 2. Phy Mode = 8 3. Phy Mode = 8 MCS Set = ff ff ff 00 01 Main bssid = 00:0e:3b:66:02:3e <==== rt28xx_init, Status=0 0x1300 = 00064300 route: ioctl 0x890c failed: No such process device ra0 entered promiscuous mode RX DESC a37af000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff 00 00 01 SYNC - BBP R4 to 20MHz.l Main bssid = 00:0e:3b:66:02:3c <==== rt28xx_init, Status=0 0x1300 = 00064380 route: ioctl 0x890c failed: No such process device rai0 entered promiscuous mode br0: port 4(rai0) entering learning state br0: port 3(ra0) entering learning state br0: port 2(eth2.2) entering learning state br0: port 1(eth2.1) entering learning state br0: topology change detected, propagating br0: port 4(rai0) entering forwarding state br0: topology change detected, propagating br0: port 3(ra0) entering forwarding state br0: topology change detected, propagating br0: port 2(eth2.2) entering forwarding state br0: topology change detected, propagating br0: port 1(eth2.1) entering forwarding state route: ioctl 0x890c failed: No such process route: ioctl 0x890c failed: No such process ------> 802.1x--------->Enter ------> 802.1x------>Exit Static DHCP Leases disable! route: ioctl 0x890c failed: No such process Setup WAN interface Close Wan(eth2.2) Interface!! device eth2 is not a slave of br0 device eth2.1 is already a member of a bridge; can't enslave it to bridge br0. switch reg write offset=14, value=405555 ioctl: Operation not supported switch reg write offset=50, value=2001 ioctl: Operation not supported switch reg write offset=98, value=7f3f ioctl: Operation not supported switch reg write offset=e4, value=3f ioctl: Operation not supported switch reg write offset=40, value=1001 ioctl: Operation not supported switch reg write offset=44, value=1001 ioctl: Operation not supported switch reg write offset=48, value=1002 ioctl: Operation not supported switch reg write offset=70, value=ffff506f ioctl: Operation not supported ioctl: Operation not supported udhcpc (v1.15.2) started ********************************************************************** * Enable WSC_UPnP * ********************************************************************** into eth2.2.deconfig killall: snmpd: no process killed ********************************************************************** * Enable LLTD * ********************************************************************** killall: lld2d: no process killed killall: radiusd: no process killed RADIUS server disable !! libupnp: using UDP SSDP_PORT = 1900 kill: you need to specify whom to kill libupnp: using UDP SSDP_PORT = 1900 /bin/init.sh: line 710: can't create /proc/pppoe_pass: nonexistent directory ********************************************************************** * FREE Page,Dentries and Inodes Cache * ********************************************************************** killall: gpio: no process killed ralink_gpio:ioctl GPIO REG info.irq = 7 ralink_gpio:ioctl GPIO REG info.irq = 9 boa: server version Boa/0.94.14rc21 boa: server built Mar 6 2012 at 19:14:10. boa: starting server pid=729, port 80 MemFree: 47852 kB Cached: 2652 kB