Comfast CF-WR302S | Wi-Fi extender (repeater)



Rep: (7)
Comfast CF-WR302S - Discussion
Attached Image


A photo
Attached Image
Attached Image
Attached Image
Attached Image

Equipment
Attached Image

Specification
Attached Image

Purchase
Useful
Full reset or HARD RESET
Hold the RESET button until the lights blink. If it does not help, the same thing, but with the twisted pair disconnected. You can also try to pull out for 1-2 minutes from the network before resetting.
Working firmware
Post # 214 Important! In order to avoid problems, it is recommended to flash through the cable and not through the air.

Firmware
Device firmware via cable
Setting up the device as a repeater / repeater


Post has been editedAndrewP_1 - 04.01.19, 16:18
Reason for editing: Configuring the device as a repeater / repeater



Rep: (120)
WR-302s. In repeater mode, IPTV does not work. What to do?



Rep: (5)
I've already seen a post with a message, but there were no answers. What to do with this error? Is this firmware not from this board?

image invalid! oversize len = 482776 avaliable 262144

Current firmware: Firmware Version: CF-WR302S-V1.0.0.0
I download any others, for example CF-WR302S-V2.3.0.4.bin



Rep: (13)
And you do not have an hour v1 version of a piece of iron?



Rep: (5)
And you do not have an hour v1 version of a piece of iron?


perhaps. There are no signs anywhere.

Connected uart

flash gethw HW_BOARD_VER
HW_BOARD_VER = 1


what is available through the console
Booting ...

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
@ chip__no chip__id mfr___id dev___id cap___id size_sft dev_size chipSize
@ 0000000h 0c84015h 00000c8h 0000040h 0000015h 0000000h 0000015h 0200000h
@ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt chip_clk chipName
@ 0010000h 0000020h 0001000h 0000200h 0000100h 0000010h 000004eh GD25Q16
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

--- RealTek (RTL8196E) at 2015.01.20-09: 06 + 0800 v1.5 [16bit] (400MHz)
check_image_header return_addr: 05010000 bank_offset: 00000000
no sys signature at 00010000!
no sys signature at 00020000!
no sys signature at 00030000!
no sys signature at 00011000!
no sys signature at 00012000!
no sys signature at 00013000!
no sys signature at 00014000!
no sys signature at 00015000!
no sys signature at 00016000!
no sys signature at 00017000!
no sys signature at 00018000!
no sys signature at 00019000!
no sys signature at 0001A000!
no sys signature at 0001B000!
no sys signature at 0001C000!
no sys signature at 0001D000!
no sys signature at 0001E000!
no sys signature at 0001F000!
no sys signature at 00021000!
no sys signature at 00022000!
no sys signature at 00023000!
no sys signature at 00024000!
no sys signature at 00025000!
no sys signature at 00026000!
no sys signature at 00027000!
no sys signature at 00028000!
no sys signature at 00029000!
no sys signature at 0002A000!
no sys signature at 0002B000!
no sys signature at 0002C000!
no sys signature at 0002D000!
no sys signature at 0002E000!
no sys signature at 0002F000!
no sys signature at 00031000!
no sys signature at 00032000!
no sys signature at 00033000!
no sys signature at 00034000!
no sys signature at 00035000!
no sys signature at 00036000!
no sys signature at 00037000!
no sys signature at 00038000!
no sys signature at 00039000!
no sys signature at 0003A000!
no sys signature at 0003B000!
no sys signature at 0003C000!
no sys signature at 0003D000!
no sys signature at 0003E000!
no sys signature at 0003F000!
no sys signature at 00040000!
no sys signature at 00041000!
no sys signature at 00042000!
no sys signature at 00043000!
no sys signature at 00044000!
no sys signature at 00045000!
no sys signature at 00046000!
no sys signature at 00047000!
no sys signature at 00048000!
no sys signature at 00049000!
no sys signature at 0004A000!
no sys signature at 0004B000!
no sys signature at 0004C000!
no sys signature at 0004D000!
no sys signature at 0004E000!
no sys signature at 0004F000!
Jump to image start = 0x80500000 ...
decompressing kernel:
Uncompressing ... done, booting the kernel.
done decompressing kernel.
start address: 0x800004c4
0xc84015 GD25Q16
[cyg_net_init] Init: mbinit (0x00000000)
[cyg_net_init] Init: cyg_net_init_devs (0x00000000)
Init device 'rltk819x_eth0'
Init device 'rltk819x_eth1'
Init device 'rltk819x_eth2'
Init device 'rltk819x_eth3'
Init device 'rltk819x_eth4'
[peth0] added, mapping to [eth1] ...
Init device 'rltk819x_peth0'
Init device 'rltk819x_eth7'
Init device 'rltk819x_wlan0'
[pwlan0] added ...
Init device 'rltk819x_pwlan0'
Init device 'rltk819x_wlan0-wds0'
Init device 'rltk819x_wlan0-wds1'
Init device 'rltk819x_wlan0-wds2'
Init device 'rltk819x_wlan0-wds3'
Init device 'rltk819x_wlan0-va0'
Init device 'rltk819x_wlan0-vxd'
[cyg_net_init] Init: loopattach (0x00000000)
[cyg_net_init] Init: cyg_ppp_pppattach (0x00000000)
[cyg_net_init] Init: ifinit (0x00000000)
[cyg_net_init] Init: domaininit (0x00000000)
[cyg_net_init] Init: cyg_net_add_domain (0x801fd72c)
New domain internet at 0x00000000
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to deny, logging disabled
Realtek FastPath: v1.03
[cyg_net_init] Init: cyg_net_add_domain (0x801fd40c)
New domain route at 0x00000000
[cyg_net_init] Init: call_route_init (0x00000000)
[cyg_net_init] Init: sysctl_register_all (0x00000000)
[cyg_net_init] Done
Creating Init Thread ...
Realtek GPIO init


************* Initialize MAC / PHY parameter *************
[MAC_REG_8192Emp]
[PHY_REG_8192Emp]
[PHY_REG_PG_8192E_new]
[AGC_TAB_8192Emp]
RadioA_8192Emp
[RadioB_8192Emp]
[REG_TXPWR_TRK_8192E]
eth0: promiscuous mode enabled
wlan0: promiscuous mode enabled
wlan0-vxd0: promiscuous mode enabled
bridge0: flags = 8842<BROADCAST, RUNNING, SIMPLEX, MULTICAST>
Interfaces:
wlan0-vxd0 flags = 3<LEARNING, DISCOVER>
wlan0 flags = 3<LEARNING, DISCOVER>
eth0 flags = 3<LEARNING, DISCOVER>
Addresses (max cache: 100, timeout: 300):
Creating httpd Thread ...
enter dhcpd_startup
Starting DHCPD thread
config_wan, 2720, start config wan
pppoe_init 1437 #######
pppoe_init 1441 #######
config_wan, 2740, start config wan
pnite nWtAeNr Idnhtceprcf_asctea.r.t.u

Starting WAN DHCPC thread
rtl_setDoubleAliasIp 528 aliasAddress2.s_addr = 0x0
start dst loop ...
cyg_dns_proxy_daemon-->734, DNSPROXY Start ......
IEEE 802.11f (IAPP) using interface eth0 (CF-WR302S-V1.0.0.0)
brute_force_attack_mitigation ThresHold [10]

WiFi Simple Config v2.14-wps2.0 (2015.05.26-06: 15 + 0000).


# help
Commands Descriptions Usage
-------- ------------ -----
db db<Address><Len>
dw dw<Address><Len>
eth eth
wlan0 wlan0
wlan0-va0 wlan0-va0
wlan0-vxd wlan0-vxd
eb eb<Address><Value1><Value2>...
ew ew<Address><Value1><Value2>...
alg alg
brconfig brconfig
cat
cpuload cpuload
date show system local time
excep cause exception
fastpath fastpath
flash flash
getmib getmib
help displays a list of commands
? Displays a list of commands
hexcat
dump Shows a memory dump
ib ib
idd idd
ifconfig ifconfig
ipfw ipfw
irf irf
iw iw
iwpriv iwpriv
l2tp set l2tp wan type
ll
mac mac<ifname>[mac addr]
mroute mroute
ob ob
od od
orf orf
ow ow
pdump dump a thread
ping ping
port_fwd port_fwd
pppoe set pppoe wan type
version Shows build version
ps Shows a list of threads
reboot reset the system
reinit reinit
reset Reset the system
route set static route
rssi rssi
alias show alias table
rtl_vlan rtl_vlan
sp Sets a threads priority [thread ID]
setmib setmib
show show
tcpstats tcpstats
test_skb test_skb
kill Kills a running thread [thread ID]
release thread
trigger_port trigger_port
uled uled
uptime Shows system uptime
watchdog on / off / res / reboot
wlschedule wlschedule
wsc wsc


# show
show meminfo
show cluster
show route
show mallinfo
show intr
show network
show skb
show spl
show schlock
show idle
show mrvif
show mrcache
show stack
show PHY
show qos




show meminfo

Network stack mbuf stats:
mbufs 16, clusters 546, free clusters 34
Failed to get 0 times
Waited to get 0 times
Drained queues to get 0 times
VM zone 'ripcb':
Total: 32, Free: 31, Allocs: 4, Frees: 3, Fails: 0
VM zone 'divcb':
Total: 2, Free: 2, Allocs: 0, Frees: 0, Fails: 0
VM zone 'tcpcb':
Total: 64, Free: 62, Allocs: 4, Frees: 2, Fails: 0
VM zone 'udpcb':
Total: 64, Free: 52, Allocs: 56, Frees: 44, Fails: 0
VM zone 'socket':
Total: 64, Free: 49, Allocs: 64, Frees: 49, Fails: 0
Misc mpool: total 1572864, free 840592, max free block 839588
Mbufs pool: total 392960, free 388608, blocksize 256
Clust pool: total 1900544, free 885312, blocksize 1856
F show cluster
ee clusters:
Clusters:
total = 1024 free = 34 (34)
# show route
Routing tables
Destination Gateway Mask Flags Interface
0.0.0.0 0.0.0.0 255.0.0.0 U eth1
127.0.0.0 127.0.0.1 255.0.0.0 UG lo0
127.0.0.1 127.0.0.1 255.255.255.255 UH lo0
192.168.10.0 192.168.10.0 255.255.255.0 U eth0
Interface statistics
eth0 IP: 192.168.10.1, Broadcast: 192.168.10.255, Netmask: 255.255.255.0
UP BROADCAST RUNNING PROMISC MULTICAST MTU: 1500, Metric: 0
Rx - Packets: 0, Bytes: 0, Tx - Packets: 20, Bytes: 5356
eth1 IP: 0.0.0.0, Broadcast: 255.255.255.255, Netmask: 0.0.0.0
UP BROADCAST RUNNING MULTICAST MTU: 1500, Metric: 0
Rx - Packets: 0, Bytes: 0, Tx - Packets: 67, Bytes: 21976
lo0 IP: 127.0.0.1, Broadcast: 127.0.0.1, Netmask: 255.0.0.0
UP LOOPBACK RUNNING MULTICAST MTU: 16384, Metric: 0
Rx - Packets: 0, Bytes: 0, Tx - Packets: 0, Bytes: 0

# show mallinfo
arena: 915448
ordblks: 10
smblks: 0
hblks: 0
hblkhd: 0
usmblks: 0
fsmblks: 0
wordblks: 79952
fordblks: 835476
keepcost: 0
maxfree: 664844
# show intr
ISR Count State
0 0 Free
1 0 Free
2 0 Free
3 0 Free
4 0 Free
5 0 Free
6 0 Free
7 0 Free
8 0 Free
9 0 Free
10 0 Free
11 0 Free
12 0 Free
13 0 Free
14 0 Free
15 0 Free
16 0 Free
17 0 Free
18 0 Free
19 0 Free
20 0 Free
21 0 Free
22 0 Free
23 0 Free
24 0 Free
25 0 Free
26 0 Free
27 0 Free
28 0 Free
29 0 Free
30 0 Free
31 0 Free
32 0 In Use
33 0 Free
34 93 In Use
35 19601 In Use
36 0 In Use
37 0 Free
STATUS = 9000ec15
CAUSE = 00000000
GIMR = 00209100
GISR = 00000004
IRR0 = 00000000
IRR1 = 50030007
# show network

eth0:
Flags UP BROADCAST RUNNING PROMISCUOUS SIMPLEX MULTICAST
Address 192.168.10.1 Mask 192.168.10.1 Broadcast 192.168.10.255
eth1:
Flags UP BROADCAST RUNNING SIMPLEX MULTICAST
Address 0.0.0.0 Mask 0.0.0.0 Broadcast 255.255.255.255
lo0:
Flags UP LOOPBACK RUNNING MULTICAST
Address 127.0.0.1 Mask 127.0.0.1
IPv4:
Rx Total: 0 Bad: 0 Reassembled: 0 Delivered: 0
Tx Total: 93 Raw: 0 Fragmented: 0
ICMPv4:
Rx ECHO: 0 ECHO REPLY: 0 UNREACH: 0 REDIRECT: 0 Other: 0 Bad: 0
Tx ECHO: 0 ECHO REPLY: 0 UNREACH: 0 REDIRECT: 0 Other: 0
UDP:
Rx Total: 0 Bad: 0
Tx Total: 89
TCP:
Rx Packets: 0 Data Packets: 0 Bytes: 0
Tx Packets: 0 Data Packets: 0 Bytes: 0
Connections:
Initiated: 0 Accepted: 0 Established: 0 Closed: 25
Mbufs:
Summary:
Mbufs: 16 Clusters: 546 Free Clusters: 34 Drops: 0 Waits: 0 Drains: 0 Copy Fails: 0 Pullup Fails: 0
Types:
FREE: 15 DATA: 1 HEADER: 0 SONAME: 0 FTABLE: 0
o show skbt
al = 1074
max_skbbuf_used_num = 545
skbbuf_used_num = 512
skb_malloc_fail_num = 0
cluster_malloc_fail_num = 0
p show spls
_state = 0x0
splx_thread = 0x0
splx_mutex.owner = 0x00000000
splx_mutex.locked = 0x0
splx_mutex.protocol = 1
splx_mutex.ceiling = 0
splx_mutex: lock success
# show schlock
scheduler lock = 0
# show idle
idle_thread_loops [0] = 0x91a46393
# show mrvifI
nterface BytesIn PktsIn BytesOut PktsOut Flags Local Remote
r show mrcacheG
up Origin Iif Pkts Bytes Wrong Oifs
# show stack
---------- -- ------ ---------------------- -- -- ---------- ---------- ----------
Handle ID State Name SP CP Stack Base Stack Size Stack Used
---------- -- ------ ---------------------- -- -- ---------- ---------- ----------
0x80348218 1 RUN Idle Thread 31 31 0x80348310 0x00000800 0x00000434
0x807067f8 2 SLEEP Network alarm support 6 6 0x807027f8 0x00004000 0x000005ec
0x80351508 3 SLEEP Network support 7 7 0x8034d504 0x00004000 0x00000758
0x803494d8 4 SUSP pthread.00000800 15 15 0x803495dc 0x00001eac 0x00000158
0x80227278 6 SLEEP sys_init 8 8 0x8021b270 0x0000c000 0x00001928
0x80721b68 7 SLEEP Cleanup Thread 5 5 0x80721c88 0x00001000 0x00000128
0x80722cb0 8 RUN Shell 28 28 0x80214ea4 0x00005000 0x000008b4
0x8022a678 9 SLEEP HTTPD Thread 16 16 0x8022a780 0x000054d0 0x00000580
0x80327768 10 SLEEP dhcpd eth0 16 16 0x80325764 0x00002000 0x00000768
0x80329870 11 SLEEP dhcpc eth1 16 16 0x8032786c 0x00002000 0x00000c2c
0x8033f500 12 SLEEP DNSproxy Thread 14 14 0x8033f5fc 0x00002000 0x00000540
0x80319aa8 13 ​​SLEEP wscd 16 16 0x80313aa4 0x00006000 0x00001d64
0x80321ad8 14 SLEEP iapp 16 16 0x8031dad4 0x00004000 0x0000088c
0x80344300 15 SLEEP iw 16 16 0x803422fc 0x00002000 0x0000051c
0x80324bd8 16 SLEEP iapp recv 17 17 0x80321bd0 0x00003000 0x00000148
0x8031cba8 17 SLEEP wsc_upnp 16 16 0x80319ba0 0x00003000 0x00000364
Total Stack Size: 236412
Total Stack Used: 33760
# show PHY

ort0:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port1:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port2:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port3:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port4:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port5:
LINK: DOWN
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
Port6:
Link: UP Duplex: FULL Speed: 1000M
Rx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 113 Discard: 113
Tx Total bytes: 0, Unicast: 0, Multicast: 0 Broadcast: 0 Bad: 0 Discard: 0
# show qos

osForNatd:
# arp: 0x80566044 is using my IP address 0.0.0.0!
arp: 0x80590284 is using my IP address 0.0.0.0!
arp: 0x805926c4 is using my IP address 0.0.0.0!
arp: 0x80555b44 is using my IP address 0.0.0.0!


Well, and a photo of the board.
Attached Image


Post has been editedavlubimov - 18.04.19, 15:16



Rep: (13)
In the evening I’ll see what is written on my board - I don’t remember how much I can do it if no one gets ahead;)

BUT, it seems written _VER1.2

P.S. On my still sticker was from the side of the plug (under which is a screw) - there specifically is the inscription "v2".



Rep: (5)
P.S. On my still sticker was from the side of the plug (under which is a screw) - there specifically is the inscription "v2".


No, I have a sticker with a mac address only.

sticker
Attached Image



Rep: (13)
My model is different (

The board says R116R_VER1.2

Attached images
Attached Image



Rep: (5)
As I understand it, they have one firmware, that is, one rtl8196eu chipset.

And your included 5G range? And mine only has 2.4.

Does anyone have the opportunity to dump flash memory?
I'm just sure that the firmware comes from a specific offset address and if I just flash it into the chip with a programmer, then nothing will come of it.

Post has been editedavlubimov - 19.04.19, 11:38



Rep: (13)
Yes, I had both ranges, until the flash seems to be covered, and with it the web muzzle (

Now it’s just lying in a disassembled form ... I would just give it to you if you were in Moscow time, but I just have the firmware inside broken (

By the way, 5g can possibly be turned on by telnet - when I dumped the values ​​of the variables - there it was all set up ... Maybe you also, because they don’t allow you to configure in the face ...



Rep: (5)
Yes, I had both ranges, until the flash seems to be covered, and with it the web muzzle (


Well, it’s interesting to compare the boards. Because I have a range of only 2.4 GHz. It is unclear whether there are differences in the iron circuit or not.

Now it’s just lying in a disassembled form ... I would just give it to you if you were in Moscow time, but I just have the firmware inside broken (


Yes, I'm in Moscow time. If it’s not a pity, I would try to remove the USB flash drive and read its file. To your device, as I understand it, there is firmware in the form of a file from the site, which was registered there. You can try to compare with what offset it lies in the chip dump. There is generally no firmware on my board as a file.


By the way, 5g can possibly be turned on by telnet - when I dumped the values ​​of the variables - there it was all set up ... Maybe you also, because they don’t allow you to configure in the face ...


Well, in my firmware there is no telnet, but through uart everything is the same and it is dumped and 5g parameters are there. I just don’t see the point yet, it’s too painful for me to have a firmware curve. I simply can’t even configure it in the access point mode. The network for clients is only separate for the nat, dhcp is for clients and it does not work.



Rep: (0)
I have had a great CF WR311S flight for a year now, all this winter I stood in the attic shook up with a garbage bag))) there I have a minus a little less than on the street. It happens once a month to restart it. Just now the restart, and I think let me look at the new firmware) I go to the comfast’s official site and it is literally in 2019, I downloaded it now, I’m going to understand it ??? But then again, the chinaseses could be released again, well, with a tendency that often happens.



Rep: (0)
I updated my CF WR311S firmware from the site of v.2.3.0. It seems that the Internet has earned faster))) well, that's it. Updated by air. Before that, I reset it to the factory ones, I thought directly, but I could not go into the menu. Sconect with netom and all the rules passed!



Rep: (13)
My board looks like this (last time it was dark - neither of which was clearly visible in the pictures)

Attached images
Attached Image



Rep: (5)
Opossum74 @ 04/20/19, 13:43*
My board looks like this (last time it was dark - neither of which was clearly visible in the pictures)


I see the board is a little different.
uart on the other hand, the winbond chip is from somewhere a 5G antenna.
We must try to see what is there



Rep: (5)
It seems to have configured the board, but the last touch does not work.

I can’t figure out how to keep the value of the bridge

Through brconfig bridge0 add eth1 I add the interface to the bridge, everything works, great. But only until reboot. How to save the setting?

I dumped everything that flash gives out, there is nothing at all about breeches ...



Rep: (13)
I didn’t dig that deep (



Rep: (32)
Has anyone encountered inadequate speed on the CF-WR302S? For returns under 90 megabits, for a maximum of 20 reception, rarely up to 25 megabits. The latest firmware is 2.3.0.4. It works in the AP mode, is connected to the main router by a wire, DHCP is disabled, addressing is from the main one. The SSID of the Wi-fi network is the same as on the main channel are spaced.



Rep: (0)
Is it possible to use it to amplify the signal from the radio nanny? Radio nanny lemantino vcl-01. As a wifi network it is not. It simply uses 2.4 GHz fhss to transmit video audio from a child’s camera to a portable parent screen. Will the subject recognize this signal and repeat?



Rep: (0)
Hello. I purchased this device as a repeater, but my speed cuts DOWNLOAD / UPLOAD: from 50Mbps / 57Mbps to 20Mbps / 27Mbps, respectively. Tell me what the problem is. I tried to measure the speed at different distances of the repeater from the modem, the result does not change. Firmware Version V2.0.2.2.

Post has been editedNurary - 03.06.19, 02:17



Rep: (13)
* Nurary So it should be!


Full version    

Help     rules

Now: 09/13/19, 1:40 p.m.