Wi-Fi Halow 801.11AH - Cheap Aliexpress bridge / TX-AH-R900PNR module

[dmahony]

I was searching for Wi-Fi Halow devices and found this fairly priced kit on Aliexpress:
https://www.aliexpress.com/item/1005005701215525.html?spm=a2g0o.order_list.order_list_main.183.53701802dswxPD

I have had it for a couple of weeks and initially wrote it off as just a simple transparent Wi-Fi bridge.
It looks like there are no configuration options but after searching for info I found a tool that lets you use AT commands. I used the commands to lower the bit rate / Modulation Coding Scheme to 150Kbps!

Here is some more information about this device if anyone is interested:
https://fcc.report/FCC-ID/2AXPI-R900/5139047.pdf
lots of tools and an SDK on the developers website, apparently able to be downloaded once registered:
https://en.taixin-semi.com/Product?prouctSubClass=33
*confirmed, lots of good stuff there.

Thread with lots of good info:
https://discuss.ardupilot.org/t/802-11ah-halow-iot-wifi-920mhz/92988/16

I think it has some potential to be used for Reticulum, especially the Wi-Fi Halow built in features like repeater modes and meshing.

Has anyone else here tried these devices? or any other Halow Devices? I have these and several others, I will post more if people are interested.

Here is a quick recording of running an Iperf3 Speed test, Reticulum Shell and Internet speed test:

https://youtu.be/6nL4PhyddSk

[dmahony]

I got a different device working with these:

Looks to be the same module but in a barebones version.

Link I purchased from:
https://www.aliexpress.com/item/1005004589176264.html?spm=a2g0o.order_list.order_list_main.118.7bf41802xOYjgy

[dmahony]

Seems to be having issues using 1Mhz mode, so used 2Mhz:

[4847889]
LMAC STATUS:
local: ba: 4:59:6d:57:50 AID=0
freq= 927.0 bw=2 chn=3 bgr=-108 iq=0:50:-1:0 dc=-2:-3 tx=*5 dly=65:0:93 sif:rsp=0:0(0)
chn:  916.0  918.0  921.0  923.0  925.0  927.0
bgr:   -108   -108   -109   -108   -105   -109
buf: free=94 tq=0 sq=0 ac=0:0:0:0 agg=0:0:0:0 statq=0 rxq=0 skb=-1:0
irq: ac=40 bkn=12 bo(rts:frm)=0:13:0:0:27 to(rts:frm)=0:0 rx=54
tx : cnt=55 dly=2:10ms cts_be=0:0 agg=1(6010,40:0) data=4KB(5kbps) dur=36ms cca=175 per=0% fail=0 drop=0
rx : cnt=54 bus=1ms cts_bm=0:0 pks=30 data=2KB(3kbps) dur= 25ms err(phy:fcs)=0:0 ecode=0x0
dbg: dtmd=0:0:0 stamap=0x6 flag=0x0 rxdp=0 kerr=0 mic=0 lerr=0 kick=0 csc=0 rst=0 ovf=0 nob=0 tsnr=34 rssi=-54 rxdut=61% txp=0 rxg=5
cca: 4s st12= 0:0 mid1224= 0:0:0:0 ed1224= 0:0:0:0
chip-temperature:41, vcc:3.23, vdd13b:1.31, vdd13c:1.32

STA2: 06:bf:00:5c:84:60
tx2: mcs=0 bw=2MHz snr=34 cnt=12 agg=1 data=0KB(0kbps) dur=7ms dut=17% txq=0 cca=48 ack=0KB(12) drop=0KB(0) per= 0% est_rate=678kbps
rx2: mcs=1 bw=2MHz evm(avg:std)=-18:1 rssi=-49 agc=7773 cnt=16 agg=1 data=1KB(1kbps) dur=14ms dut=35% fcsErr=0, freqDev=-1644Hz adv_bw=0:83:0:0

STA1: ba:04:59:96:71:20
tx1: mcs=0 bw=2MHz snr=34 cnt=12 agg=1 data=0KB(0kbps) dur=7ms dut=17% txq=0 cca=48 ack=0KB(12) drop=0KB(0) per= 0% est_rate=678kbps
rx1: mcs=1 bw=2MHz evm(avg:std)=-25:2 rssi=-54 agc=7773 cnt=14 agg=1 data=1KB(1kbps) dur=11ms dut=28% fcsErr=0, freqDev=1450Hz adv_bw=0:100:0:0

[redfast00]

Can you set a frequency band on these modules? In Europe, we have to use 863 - 868 MHz.

[dmahony]

Yes you can set the frequency, You can even set multiple channels to avoid interference:
AT commands for use with netat.exe :

AT+FREQ_RANGE:8630-8680

AT+CHAN_LIST:8630,8680

[dmahony]

Can anyone assist with finding out how netat.exe communicates with these devices?
It looks like it sends UDP packets to 255.255.255.255 broadcast address.

In Wireshark I can see the commands I enter and their response just not how it initially 'connects' to the device to use AT commands.

[dmahony]

The bare module can be purchased on its own here:
https://www.alibaba.com/product-detail/Customize-730Mhz-950Mhz-802-11-ah_1600543103586.html?spm=a2756.order-detail-ta-ta-b.0.0.202a2fc29lrCUG

[markqvist]

Really cool to see the video you posted demonstrating this working! And thanks for collecting info, notes and resources here in this thread. It looks like these modules have great potential for Reticulum!

[dmahony]

Thanks Mark! If you want to play around with them I can set up remote access for you.

[tutugreen]

Coincidentally, I have also recently watched related videos and am very interested in this plan.

But currently, the ready-made bridge products I've see seem to be paired with "one click", and it is unclear how their encryption keys are exchanged and whether they are secure.

It seems that there are also some enterprise level product solutions that support web manage, WPA3, and even 802.1x. Does anyone found way to customize encryption/keys by using AT commands and other methods?

Edit 1 : I've talk to some "taobao" seller, they claim the key will random generate and exchange when pairing, but consider 900Mhz is can reach 1km range, not sure that exchange over the air is a secure solution.

they said their module , can be programmed and use custom keys, I've check the page, looks excatly like @dmahony alibaba ones.

Edit 2 : after a deep search, found another module https://detail.1688.com/offer/747960673579.html 4108E-S, using MM6108, looks better, aim for 32.5Mbps, and that Block Diagram looks excatly (again :) ) like the AzureWave https://www.azurewave.com/wireless-modules-11ah.html ones:

https://www.azurewave.com/img/802.11ah/AW-HM581_DS_DF_C_STD.pdf
https://www.azurewave.com/img/802.11ah/AW-HM581_Reference%20Design%20Guide_Rev01_20220926.pdf
https://www.azurewave.com/img/802.11ah/AW-HM581_V01_Layout%20Guide_20220927.pdf

[dmahony]

I have ordered 2 of those bare Morse Micro modules, they are due to arrive on Monday. It is also an Australian company, so should be easier to communicate with the devs.

[dmahony]

[tutugreen]

Thank you for the clarification. I found this discussion by searching for 802.11ah bridge, and I wasn't familiar with Reticulum before until now. It's a cool project.

[tutugreen]

I have no experience in embedded/pcb development. I asked about 1688’s 4108E-S module seller, They don’t do finished products.

But Taobao’s TaiXin does, I've ordered a pair of “AH netbridge demo box", based on TX-AH-R900Pxx, not cheap (298CNY * 2), but ready to use, wait to see how it performs.

Seller says it can do AT command through serial port.

Translated seller item description:

[dmahony]

Thanks for sharing! these look similar to the set I have but with added external debug port. Hopefully you can sent the AT commands to that port instead of having to use Windows and netat.exe

Do you know of a way for English speaker to use TaoBao? or do you speak a bit of Chinese?
I ordered 2 of the bare modules from there so will see if it works for me.

I spotted this development board for sale:
https://item.taobao.com/item.htm?id=738569462168&spm=pc_detail.27183998.202208.2.255c7dd6olWX5k

I have ordered this one from Alibaba but they are taking their time sending it. Looks to be very interesting as it exposes all the different ways to connect to the board, including USB to use directly with a Linux host. You can set the mode of operation via the jumper pins.

[dmahony]

AT command guide translated into English via Google Translate:
AH module AT command development guide_ ENGLISH.pdf

[markqvist]

If everything can be controlled via an AT command set, and all the AT commands can be mapped out, it should be pretty simple to create a fully functional interface driver for Reticulum.

[dmahony]

Nice! the AT command set is used with the AH- modules when they are attached to a dev board. There are also options to use the bare module directly with a host MCU. Ideally a way to attach these directly to Linux as the host would give us the most flexibility.
They have a linux driver on their site, will be giving this a shot when I receive the bare modules.

[dmahony]

Portable node setup:
Milk-V duo board could be used as a simple host device, it has pins at the bottom of the module for wiring directly into the Ethernet connection of these AH modules:

I cant wire this in at the moment as the module is not configurable from Linux.
The serial port on the AH module unfortunately only shows the output of netlog.exe ( log output, no serial input for AT commands )

The Milk-V uses a USB RNDIS connection this same USB connection can power the AH module via the 3v pins.

[dmahony]

Some of the Linux Wifi driver manual translated into English:
(泰芯Linux_WiFi_FMAC驱动开发指南.pdf)

The TaiXin Linux WiFi FMAC driver supports running the WiFi protocol stack inside the WiFi module, eliminating the need for the host to handle the WiFi protocol stack. The FMAC driver is compatible with the AH module and supports low-power modes, with corresponding WiFi firmware of type vx.x.x.5.

Linux Kernel Compilation Configuration
The FMAC driver supports both SDIO and USB interfaces. During kernel compilation, the following features need to be enabled:

For SDIO interface: Enable Device Driver → MMC/SD/SDIO card support and the corresponding MMC host driver.
For USB interface: Enable Device Driver → USB support and the corresponding USB host driver.
Note: If an "mmc_card_disable_cd" undefined error occurs during driver compilation, open the "if_sdio.c" file and define the "mmc_card_disable_cd" code as shown in the provided image.

FMAC Driver Development (hgic_fmac)
hgic_fmac Driver Files
The hgic_fmac driver is released in source code form for user compilation. When compiling the fmac driver, you can choose to support either SDIO or USB interfaces. Use the make command to view the compilation instructions. The "tools/test_app" directory provides auxiliary tools and driver encapsulation APIs. Execute "build_ahtool.sh" to compile auxiliary tools like hgpriv and hgicf.

hgic_fmac Loading Process

Load the fmac driver: insmod hgicf.ko.
When loading the driver, specify the following parameters if needed:

ifname: Specify the network interface name; the driver defaults to creating the "hg0" interface. For example: insmod hgicf.ko ifname="wlan%d", creating the "wlanx" interface.
conf_file: Specify the parameter configuration file; the default is /etc/hgicf.conf. This can be used in two ways:
Specify a specific file path, e.g., insmod hgicf.ko conf_file=/etc/hgicf.conf.
Specify a directory path, e.g., insmod hgicf.ko conf_file=/etc. In this case, the driver will read /etc/hg0.conf for "hg0" parameters.
fw_file: Specify the AH module firmware name; the driver defaults to loading hgicf.bin. See section 3.3 for firmware download instructions.
Example: insmod hgicf.ko fw_file=xxxx.bin (Note: fw_file should only be the filename, not the full path).

Configure the hg0 interface: Set IP address, bring the interface up.

Use the hgpriv tool for parameter configuration (or use encapsulated APIs).

Basic parameter settings using hgpriv:

hgpriv hg0 set freq_range=9080,9240,8: Set AH module working frequency range and bandwidth.
hgpriv hg0 set bss_bw=8: Set BSS bandwidth to 8M, options are 1/2/4/8, consistent with the bandwidth above.
hgpriv hg0 set tx_mcs=255: Set tx mcs to automatic mode.
hgpriv hg0 set key_mgmt=NONE: Disable encryption.
hgpriv hg0 set ssid=ah_test_ssid: Set SSID.
hgpriv hg0 set mode=ap: Set working mode to AP.
Parameter setting order: Set frequency/bandwidth information, set encryption method/password, set working mode.

Driver Configuration File (Optional)
If quick loading of parameters at startup is needed, create a parameter configuration file for the hgicf driver. Specify the conf_file parameter when loading the driver, and it will automatically load the set parameters. The file content should be in the format of hgpriv commands.

Example file content:

makefile
Copy code
freq_range=9080,9240,8
bss_bw=8
tx_mcs=25
key_mgmt=NONE
ssid=ah_test_ssid
mode=ap
hgpriv Configuration Explanation
Note: The hgpriv tool is recommended for manual input; in code, use the driver's encapsulated API for more convenient integration into applications.

Networking Basic Parameters

hgpriv hg0 set mode=xx: Set the WiFi module's operating mode to AP, STA, Group, or APSTA.

mode=ap: Operate in AP mode.
mode=sta: Operate in STA mode.
mode=group: Operate in broadcast group mode.
mode=apsta: Operate in relay mode. Devices in relay mode connect as STA to a higher-level AP and serve as AP for other STAs. Use r_ssid and r_psk commands to set the connection parameters for the higher-level AP.
(Set other networking parameters first, then set the mode parameter.)
hgpriv hg0 set ssid=xx: Set the AH module's SSID, with a maximum of 32 characters.

hgpriv hg0 set key_mgmt=xx: Set the WiFi module's encryption mode.

NONE: Disable encryption.
WPA-PSK: Enable encryption. (Requires setting wpa_psk.)
hgpriv hg0 set wpa_psk=64_hexchar: Set the WiFi module encryption key, a 64-character hex value. This value can be generated using the wpa_passphrase tool.

[dmahony]

I was just trying to compile the Linux driver and accidently stumbled across a Linux script to send AT commands!

here is the script:
https://github.com/dmahony/TX-AH-R900PNR-module-config
You run the script with your interface name eg,
./libnetat eth0

[dmahony]

It works!

[markqvist]

Oooh, that is very nice!

[tnk3r]

I was just trying to compile the Linux driver and accidently stumbled across a Linux script to send AT commands!

here is the script: https://github.com/dmahony/TX-AH-R900PNR-module-config You run the script with your interface name eg, ./libnetat eth0

Nice Nice!

[dmahony]

MM610X-001 Wi-Fi HaLow Sub-GHz Wireless Module:

[redfast00]

Did you ask AsiaRF for more datasheets? I emailed them, but they would only give a more detailed datasheet after ordering. With the information you linked below, I don't think there's enough info to implement for example an AP/client combination.

[dmahony]

The chip they are using is from Morse Micro. I have tried to sign up for the customer portal on https://www.morsemicro.com/
But still have not been given access. I will try to reach out to them again.
Perhaps not being taken seriously because I'm not a large corporation.

[redfast00]

I've sent multiple mails to Morse Micro, and used their contact form; I haven't received any replies, not even an acknowledgement that my email was received.

[dmahony]

Looks like we have a lot of info for the TX-AH-R900PNR module at least. It is unfortunate that they aren't supporting the maker community. I could imagine something like the LilyGo / TTGO boards but with WiFi HaLow instead.. would sell millions.

[Avamander]

https://www.morsemicro.com/ja/wpdm%E3%83%86%E3%82%B9%E3%83%88/

I haven't stumbled upon any other documents that would shed more light on the modules they provide unfortunately. I don't understand the secrecy considering all the details for example TaiXin shares.

[dmahony]

MMX610X-001 Documents:

cf1a4017037dfde2f4f789d4772658242cfc1256944ff4f982eeaa55354a32f2_optim.pdf
MM610X-001 Reference Design Guide_V1.pdf
MM610X-001_V2_compressed.pdf
MM610X-001_V2-4P_231201.pdf
mm610x-001-wifi-halow-module-manual.pdf
Morse-Micro_MM6108_Product-Brief_v03-5.pdf

[dmahony]

Another Morse Micro device but this one has an OpenWRT web GUI:
UG MM6108-Web GUI User Guide 2.2.2.pdf

[Erethon]

I just want to say thank you @dmahony for doing all of this work/investigation. I'll most likely wait a week or two to see what works best and buy some modules too.

[dmahony]

Error when setting 1Mhz BSS BW:

[4678903]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678904]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678904]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678905]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678905]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678906]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678906]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678906]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678907]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678907]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678908]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678908]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678909]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678909]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678910]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678910]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678910]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678911]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678911]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678912]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678912]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678913]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678913]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678914]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678914]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678914]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684
[4678915]lmac error!!!len= 640 bw= 1M mcs= 10 syms= 856 too long for non-mcs10, max 684

[dmahony]

Looks like the firmware update on the manufacturers website is newer than what is supplied:

https://www.taixin-semi.com/Product?prouctSubClass=33
But the changelog doesn't seem too exciting:

2023/11/29 Ver26347

1. Improved the scan ap mechanism;

2023/10/20 Ver：25403

1. Fixed the problem of small RSSI at 860M frequency;
2. Fixed the problem of test box occasionally failing;
3. Fixed the problem that caused STA to disconnect during pairing;

2023/7/24 Ver：24032

[dmahony]

The OTA tool is the only way I know to check firmware versions for the Taixin based boards:

[Avamander]

Do you know if flashing a different firmware allows changing the frequency band? I've read conflicting sources online.

[dmahony]

You don't need to flash different firmware to change Frequency, but there are 2 or 3 different modules with different frequency ranges.
Have you tried using libnetat program to change settings?

[redfast00]

It seems that recently, 802.11ah is picking up a lot of traction; LILYGO is also making a 802.11ah dev board (seems to also have an ESP32 onboard) https://twitter.com/lilygo9/status/1749745456417292672

[dmahony]

Holy shit! it feels like you ask for something and it happens. How did you find this?

[redfast00]

They make nice hardware, I follow them. I've been looking into 802.11ah for a specific application in the past few weeks, but it seems that it is pretty handicapped here because of the radio regulations in Europe for that specific frequency; we can only use 25 mW, but more importantly, there is a maximum transmit duty cycle of 2.8% (per hour, so you can only transmit 2.8% of the time, which I don't need to explain, is very bad). For more details about European regulations, see https://biblio.ugent.be/publication/8630442

[teledatics]

We released a HaLow devkit based on the Azurewave NRC7292 module in 2021.

We're currently readying release of a new product line based on the NRC7394 and our own 1W HaLow module design.

https://teledatics.com

https://github.com/teledatics

[teledatics]

@teledatics i am also searching for a 1W AH module for a drone telemetry usecase, can you already share more info on the product?

This is the 1W TD-HALOC m.2 card mounted on an m.2 carrier we created for drone telemetry next to a 500mW Holybro Sik v3.

The TD-TLM1 sends data either over USB or direct UART and has a SPI bus option for higher speed. You can also use it as a Linux USB Wi-Fi HaLow dongle.

https://www.teledatics.com/TD-TLM1_drone_telemetry.png

[cobraPA]

Nice, what's the availability of that setup (TD-HALOC and carrier) for development use?

[julled]

Thanks this format looks very interesting! Can the UART (e.g. flightcontroller ) and USB (e.g. live images via companioncomputer) used in parallel?

When will it be released?

[teledatics]

We're launching our new product line on Crowd Supply this Summer.

UART and SPI can be used independently.

[buhalo1]

Do you plan to make modules for 868 MHz?
Is it possible to use these modules in the usual way, like regular WiFi modules? I mean the possibility of simply replacing a regular WiFi module with HaLow for use in mesh networks like BATMAN-ADV.

[teledatics]

There a preview on our Discord server under the TD-WRLS category.

https://discord.com/invite/WpguKNMR7H

[tnk3r]

Has Anyone found a AT command to remove connected Stations?
For example because maximum stations 8 have been reached and new Stations need to be added?

[dmahony]

at+unpair=f6:de:09:75:a3:61

[fab1an2]

meybe using this https://extrowerk.com/2022-07-31/OpenStick.html too?
usb send data from radio

[dmahony]

That is really cool, I ordered 2 to play with. Thanks!

[aliosa27]

I have been using LicheeRV Nano's because the have wifi6 and in testing they seem to work well with the devboards via usb that @dmahony linked above, I ordered a few from aliexpress. anywho, this combination seems to work so much better then the ah/wifi repeater boards you can source from aliexpress as well. over wifi speeds were much lower then the link rate. I patched the driver for 5.10>above kernels when I was debugging with a raspberry pi(ill post a commit for that)

I built a gui around hgpriv that I have uploaded over to
https://github.com/aliosa27/taixin_tool

the wifi stuff is specific to the rvnano and the buildroot builds the sdk builds but the rest of the interface assuming youve gotten hgpriv in sbin, should work.

this combo nets around 7-10mbps up/down which for some of my test links is fantastic for the actual need.

[aliosa27]

https://github.com/aliosa27/taixin_fmac/tree/main

this should work with newer pi kernels. I compiled it against the latest after making some modifications that changed after kernel 5.17

[aliosa27]

@dmahony I added basic support for libnetat, switchable in the web interface or mode.conf. I modified libnetat to support a new non interactive mode to script against. you'll need to compile that version. some things are not supported yet like the site survey/etc, since it seems libnetat doesnt return data when you run AT+SCAN_AP=2 and then follow it up with AT+BSSLIST, more to come.

[cyberumut]

I have been using LicheeRV Nano's because the have wifi6 and in testing they seem to work well with the devboards via usb that @dmahony linked above, I ordered a few from aliexpress. anywho, this combination seems to work so much better then the ah/wifi repeater boards you can source from aliexpress as well. over wifi speeds were much lower then the link rate. I patched the driver for 5.10>above kernels when I was debugging with a raspberry pi(ill post a commit for that)

I built a gui around hgpriv that I have uploaded over to https://github.com/aliosa27/taixin_tool

the wifi stuff is specific to the rvnano and the buildroot builds the sdk builds but the rest of the interface assuming youve gotten hgpriv in sbin, should work.

this combo nets around 7-10mbps up/down which for some of my test links is fantastic for the actual need.

I have been using LicheeRV Nano's because the have wifi6 and in testing they seem to work well with the devboards via usb that @dmahony linked above, I ordered a few from aliexpress. anywho, this combination seems to work so much better then the ah/wifi repeater boards you can source from aliexpress as well. over wifi speeds were much lower then the link rate. I patched the driver for 5.10>above kernels when I was debugging with a raspberry pi(ill post a commit for that)

I built a gui around hgpriv that I have uploaded over to https://github.com/aliosa27/taixin_tool

the wifi stuff is specific to the rvnano and the buildroot builds the sdk builds but the rest of the interface assuming youve gotten hgpriv in sbin, should work.

this combo nets around 7-10mbps up/down which for some of my test links is fantastic for the actual need.

https://github.com/aliosa27/taixin_tool this tool allows us to interact with halow via ip, right?

[Jookia]

Yes, it supports netat.

[cyberumut]

Yes, it supports netat.

thank you

[dmahony]

The LilyGo T-Halow boards are out, has anyone tried them? I'm waiting for mine to arrive in the mail.

https://www.lilygo.cc/products/t-halow

[aliosa27]

yep I ordered a few! cant wait to port this over to the esp32

[dmahony]

I can't get them working using the ESP mode, need more time for this.
This device requires using an external flash programmer to install the Taixin firmware to the TX-AH part of the module.
I got that sorted but the 2 devices will not connect to each other.
https://github.com/Xinyuan-LilyGO/T-Halow

[aliosa27]

So I can get esp mode to work, which effectively is the usb firmware, with the only difference being the serial pin's changing. With the bridge firmware the serial port on the taixin chip changes and its only accessible via the second usb. My current gripe is that they should of added a switch or something to switch serial port wiring between modes, so that the chip would remain accessible in both modes from the esp32. If you are using it as a bridge, you can even automate configuration or anything since you can't even use the esp32 to send commands to it

[cyberumut]

So I can get esp mode to work, which effectively is the usb firmware, with the only difference being the serial pin's changing. With the bridge firmware the serial port on the taixin chip changes and its only accessible via the second usb. My current gripe is that they should of added a switch or something to switch serial port wiring between modes, so that the chip would remain accessible in both modes from the esp32. If you are using it as a bridge, you can even automate configuration or anything since you can't even use the esp32 to send commands to it

do you have any update ? i would like to use t-halow esp32 with ip mode (MODE 1)I cannot define ip address when using MODE 1

[Jookia]

Just for anyone curious, you CAN use AT commands over UART using manual UNIX commands:

In one window run this:

stty -F /dev/ttyUSB0 raw 115200
cat /dev/ttyUSB0

Then in another window run the commands using echo:

echo 'AT+SYSDBG=LMAC,0' > /dev/ttyUSB0

I'm not sure exactly what Linux is doing differently here but writing a program to run commands and print output couldn't be too hard.

[aliosa27]

I added a crap ton of features to the libnetat code they provided over here at https://github.com/aliosa27/taixin_tools

[cyberumut]

https://github.com/aliosa27/taixin_tools this tool allows us to interact with halow via ip, right?

[aliosa27]

Correct. It does support communication via MAC address

[cyberumut]

Correct. It does support communication via MAC address

can we configure ipv6 or ipv4 address instead of mac address ?

[julled]

https://www.youtube.com/watch?v=Hl06mkjlpXI

some review on the current state of affairs on taixin usage on DEFCON

[aliosa27]

I’ll give it a try. This may require some modification to the firmware on the device. There is a built in dhcp client however netat doesnt seem to listen. In another quick test , I can send udp packets directly to an ip address which in this case was 169 address and it will run what it’s sent, it just responds back to 0.0.0.0 which defeats the point in this case. I think the netat code is an object in the firmware sources so it might not be possible to add a direct mode. I’ll take a look and see what I can do Sent from [Proton Mail](https://proton.me/mail/home) for iOS

…

On Mon, Sep 16, 2024 at 7:21 AM, cyberumut ***@***.***(mailto:On Mon, Sep 16, 2024 at 7:21 AM, cyberumut <<a href=)> wrote: > Correct. It does support communication via MAC address can we configure ipv6 or ipv4 address instead of mac address ? — Reply to this email directly, [view it on GitHub](#421 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/ADZD3IRPM4R7UYUQ5LXN5ALZW3LORAVCNFSM6AAAAABBPSY23OVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTANRVHE3TANA). You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[LinaAlf]

Hi All
Im a student currently working on a project trying to measure Wifi Halow devices by chinese company, anjielo. @dmahony your software was given to us by the professor to communicate with the devices and it works perfectly. Now we would like to log the data over multiple measurements. Would it be possible to save it into a csv file? Im asking bc i cant figure out if there is a non exe version of the netlog.exe
Thank you for any help in adavance
kind Regards a student

[aliosa27]

you should be able to use my python version on linux to log. in non interactive mode it just spits everything out to stdout. you can combine something like ./libnetat.py eth1 at+ssid 00:00:00:00:06:33 >log to log output.

[LinaAlf]

Thank you for your reply
we both have a windows laptop, but we could dual boot so no issue there.
I can then copy the values from the stdout in the Terminal?
We want to measure the difference over different distances, so it would also be handy to be able to plug in either a timestamp or GPS data(maybe possible with python?)

what do you think would be the best method?