ipq40xx: add support for Cisco Meraki Go GX20
authorHal Martin <[email protected]>
Sun, 19 Oct 2025 10:13:54 +0000 (12:13 +0200)
committerRobert Marko <[email protected]>
Sun, 19 Oct 2025 17:33:18 +0000 (19:33 +0200)
This commit adds support for the Cisco Meraki Go GX20. The Go GX20 is a wired
router with 5 port Gigabit switch. It shares the same PCB as the Meraki Z3,
but without the WiFi radios.

GX20 hardware info:
* CPU: Qualcomm IPQ4029
* RAM: 512MB DDR3
* Storage: 128 MB (S34ML01G200TFV00)
* Networking: QCA8075 internal switch (5x 1GbE ports)
* USB: 1x USB3.0
* Serial: Internal header (J8, 2.54mm, populated)

Port 5 has POE output (802.3af). The Internet/WAN port is used for tftp booting
in U-Boot.

This device ships with secure boot, and cannot be flashed without
external programmers (TSOP48 NAND and I2C EEEPROM)!

Disassembly:

* Remove the four T8 screws on the bottom of the device under the rubber feet.

* Using a guitar pick or similar plastic tool, insert it on the side between
the bottom case and the side, pry up gently. The plastic bottom has several
latches around the perimeter (but none on the rear by the Ethernet ports).

* The TSOP48 NAND flash (U30, Spansion S34ML01G200TFV00) is located on the
bottom side of the PCB (facing you as you remove the bottom plastic).
To flash, you will need to desolder the TSOP48. Attempts to flash in-circuit
using a 360 clip were unsuccessful.

* The SOIC8 I2C EEPROM (U32, Atmel 24C64) is located on the bottom side of
the PCB (facing you as you remove the bottom plastic). It can be flashed in
circuit using a SOIC8 chip clip.

Installation:

The dumps to flash can be found in this repository:
https://github.com/halmartin/meraki-openwrt-docs/tree/main/z3_gx20

The device has the following flash layout (offsets with OOB data):
```
0x000000000000-0x000000100000 : "sbl1"
0x000000100000-0x000000200000 : "mibib"
0x000000200000-0x000000300000 : "bootconfig"
0x000000300000-0x000000400000 : "qsee"
0x000000400000-0x000000500000 : "qsee_alt"
0x000000500000-0x000000580000 : "cdt"
0x000000580000-0x000000600000 : "cdt_alt"
0x000000600000-0x000000680000 : "ddrparams"
0x000000700000-0x000000900000 : "u-boot"
0x000000900000-0x000000b00000 : "u-boot-backup"
0x000000b00000-0x000000b80000 : "ART"
0x000000c00000-0x000007c00000 : "ubi"
```

* Dump your original NAND (if using nanddump, include OOB data).

* Decompress `u-boot.bin.gz` dump from the GitHub repository above (dump
contains OOB data) and overwrite the `u-boot` portion of NAND from
`0x738000`-`0x948000` (length `0x210000`). Offsets here include OOB data.

* Decompress `ubi.bin.gz` dump from the GitHub repository above (dump
contains OOB data) and overwrite the `ubi` portion of NAND from
`0xc60000`-`0x8400000` (length `0x77a0000`). Offsets here include OOB data.

* Dump your original EEPROM. Change the byte at offset `0x49` to `0x1e`
(originally `0x2b`). Remember to re-write the EEPROM with the modified data.
    * This can be done on Linux via the following command:
    `printf "\x1e" | dd of=/tmp/eeprom.bin bs=1 seek=$((0x49)) conv=notrunc`

**Note**: the device will not boot if you modify the board major number and
have not yet overwritten the `ubi` and `u-boot` regions of NAND.

* Resolder the NAND after overwriting the `u-boot` and `ubi` regions.

OpenWrt Installation:

* After flashing NAND and EEPROM with external programmers. Plug an Ethernet
cable into the Internet/WAN port. Power up the device.

* The new U-Boot build uses the space character `" "` (without quotes) to
interrupt boot.

* Interrupt U-Boot and `tftpboot` the OpenWrt initramfs image from your
tftp server
```
dhcp
setenv serverip <your_tftp>
tftpboot openwrt-ipq40xx-generic-meraki_gx20-initramfs-uImage.itb
```

* Once booted into the OpenWrt initramfs, `scp` the `sysupgrade` image to
the device and run the normal `sysupgrade` procedure:
```
scp -O openwrt-ipq40xx-generic-meraki_gx20-squashfs-sysupgrade.bin [email protected]:/tmp/
ssh [email protected] "sysupgrade -n /tmp/openwrt-ipq40xx-generic-meraki_gx20-squashfs-sysupgrade.bin"
```

* OpenWrt should now be installed on the device.

Signed-off-by: Hal Martin <[email protected]>
Link: https://github.com/openwrt/openwrt/pull/17026
Signed-off-by: Robert Marko <[email protected]>
target/linux/ipq40xx/base-files/etc/board.d/01_leds
target/linux/ipq40xx/base-files/etc/board.d/02_network
target/linux/ipq40xx/base-files/etc/board.d/03_gpio_switches
target/linux/ipq40xx/base-files/lib/upgrade/platform.sh
target/linux/ipq40xx/files-6.12/arch/arm/boot/dts/qcom/qcom-ipq4029-gx20.dts [new file with mode: 0644]

index 9fd42a56ead0b44f7627decadf041411db7cea7b..96ad90324481849791fe48772c4b832f8b36202c 100644 (file)
@@ -96,6 +96,7 @@ mobipromo,cm520-79f)
        ucidef_set_led_netdev "lan1" "LAN1" "blue:lan1" "lan1"
        ucidef_set_led_netdev "lan2" "LAN2" "blue:lan2" "lan2"
        ;;
+meraki,gx20 |\
 meraki,z3)
        ucidef_set_led_netdev "wan_link" "WAN (link)" "green:wan-0" "wan" "link"
        ucidef_set_led_netdev "wan_act" "WAN (txrx)" "green:wan-1" "wan" "tx rx"
index 3f4ca99b0f4dd90c451927272e6e2ccd0ddd34de..af92401a304e2e535a4991dbf3f77ecaeccae3d0 100644 (file)
@@ -29,6 +29,7 @@ ipq40xx_setup_interfaces()
        zyxel,nbg6617)
                ucidef_set_interfaces_lan_wan "lan1 lan2 lan3 lan4" "wan"
                ;;
+       meraki,gx20|\
        meraki,z3)
                ucidef_set_interfaces_lan_wan "lan2 lan3 lan4 lan5" "wan"
                ;;
index fc43ae3d0f4696375b2be50f357343f0b8287136..003fd685b98a1506b2d9a5b00d927ac304a87cef 100644 (file)
@@ -21,6 +21,7 @@ cilab,meshpoint-one)
 compex,wpj428)
        ucidef_add_gpio_switch "sim_card_select" "SIM card select" "3" "0"
        ;;
+meraki,gx20|\
 meraki,z3)
        ucidef_add_gpio_switch "lan5_poe_disable" "LAN5 PoE disable" "540" "0"
        ;;
index 298ba6eb9c94dc76dbb1985d85506104d4d5d140..cea5b0ce6964dae214873bfb16bc8212cccfdcef 100644 (file)
@@ -183,6 +183,7 @@ platform_do_upgrade() {
                CI_KERNPART="part.safe"
                nand_do_upgrade "$1"
                ;;
+       meraki,gx20|\
        meraki,z3)
                # DO NOT set CI_KERNPART to part.safe,
                # that is used for chain-loading an unlocked u-boot
diff --git a/target/linux/ipq40xx/files-6.12/arch/arm/boot/dts/qcom/qcom-ipq4029-gx20.dts b/target/linux/ipq40xx/files-6.12/arch/arm/boot/dts/qcom/qcom-ipq4029-gx20.dts
new file mode 100644 (file)
index 0000000..0c951e5
--- /dev/null
@@ -0,0 +1,109 @@
+// SPDX-License-Identifier: GPL-2.0-only
+// Device Tree Source for Meraki Go GX20 (Fairyfly)
+
+#include "qcom-ipq4029-wired-qca-common.dtsi"
+
+/ {
+       model = "Meraki Go GX20 Router";
+       compatible = "meraki,gx20";
+
+       leds {
+               compatible = "gpio-leds";
+
+               power_orange: power {
+                       color = <LED_COLOR_ID_AMBER>;
+                       function = LED_FUNCTION_POWER;
+                       gpios = <&tlmm 49 GPIO_ACTIVE_LOW>;
+                       panic-indicator;
+               };
+
+               led-1 {
+                       /* WAN left */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_WAN;
+                       function-enumerator = <0>;
+                       gpios = <&tlmm 46 GPIO_ACTIVE_LOW>;
+               };
+
+               led-2 {
+                       /* WAN right */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_WAN;
+                       function-enumerator = <1>;
+                       gpios = <&tlmm 30 GPIO_ACTIVE_LOW>;
+               };
+
+               led-3 {
+                       /* port 2 left */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <2>;
+                       gpios = <&tlmm 23 GPIO_ACTIVE_LOW>;
+               };
+
+               led-4 {
+                       /* port 2 right */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <3>;
+                       gpios = <&tlmm 22 GPIO_ACTIVE_LOW>;
+               };
+
+               led-5 {
+                       /* port 3 left */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <4>;
+                       gpios = <&tlmm 25 GPIO_ACTIVE_LOW>;
+               };
+
+               led-6 {
+                       /* port 3 right */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <5>;
+                       gpios = <&tlmm 24 GPIO_ACTIVE_LOW>;
+               };
+
+               led-7 {
+                       /* port 4 left */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <6>;
+                       gpios = <&tlmm 29 GPIO_ACTIVE_LOW>;
+               };
+
+               led-8 {
+                       /* port 4 right */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <7>;
+                       gpios = <&tlmm 26 GPIO_ACTIVE_LOW>;
+               };
+
+               led-9 {
+                       /* port 5 left */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <8>;
+                       gpios = <&tlmm 33 GPIO_ACTIVE_LOW>;
+               };
+
+               led-10 {
+                       /* port 5 right */
+                       color = <LED_COLOR_ID_GREEN>;
+                       function = LED_FUNCTION_LAN;
+                       function-enumerator = <9>;
+                       gpios = <&tlmm 32 GPIO_ACTIVE_LOW>;
+               };
+       };
+};
+
+/* GX20 does not have WiFi radios */
+&wifi0 {
+       status = "disabled";
+};
+
+&wifi1 {
+       status = "disabled";
+};