ePMP 2000 - all SM to sector


how is it possible?

ePMP 2000 3.0.1 and SM Force 200, all CPE on sector antenna.

Is that normal that no cpe go on the uplink panel antenna?


No it is not usual behavior.

Do you see Smart Antenna connected status on ePMP2000 UI?

Do you have photos of your deployment?

Could you please try 3.1-RC30 on ePMP2000?

Thank you.

+1 on trying 3.1RC30.  We saw numbers of clients connected to smart antenna drop with 3.0.1 (40%) and 3.1RC24 (5%), now with 3.1RC30 we're seeing 95%+ connecting to smart antenna again.  (more often than not it's 100% using smart antenna)



I tried also the 3.1rc30 with no important differencies.

The smart antenna is correctly connected and detected.

I have also other epmp2000 systems deployed but also they have the same behaviour.

this particular install have two problems:

1st: it reboots every 10minutes - it replaced an EPMP1000 AP that was working fine.

2nd: everyone on sector.

it is on a belltower at 35mt high, 


Could you see if you get a crashlog (use command "debug crashlog" from the CLI)?


hello no crasholog. Today the epmp2000 brand new ceased to exist.

Today we are going to replace it. It died.

I have also updated 3.1 on all SM and AP but my EPMP2000 are ALL using sector!

Time: 1478353652.232565
Modules: tdd_umac@c0c62000+132972 tdd_link_test@c0aa2000+eeb tdd_dev@c0a4c000+403e4 tdd_spectral@c09dc000+9db3 tdd_dfs@c0920000+a1ca4 tdd_hal@c0855000+a4fb9 tdd_acm@c07c2000+1e26 tdd_unblockSA@c07b3000+2b5 tdd_pps@c07a4000+312f gpslic@c0793000+46f tdd_cdf@c0786000+111c tdd_adf@c0777000+26c5 tdd_asf@c0767000+1b93 athrs_gmac@c0721000+9627 tdd_netlink_socket@c0444000+20b macvlan@c0437000+1140 nf_conntrack_netlink@c0427000+2820 ebt_ulog@c0416000+1080 ebt_ip@c0409000+520 ebt_arp@c03fd000+650 ebt_vlan@c03f1000+650 ebt_pkttype@c03e4000+260 ebt_limit@c03d8000+400 ebt_802_3@c03cc000+2f0 ebtable_filter@c03ba000+3b0 ebtable_broute@c03a8000+300 ebtables@c0399000+3ac5 nfnetlink@c0388000+7df nf_conntrack_tftp@c036f000+9b0 xt_HL@c0355000+560 xt_hl@c0349000+3e0 ipt_ECN@c033d000+580 xt_CLASSIFY@c0331000+240 xt_tcpmss@c0325000+430 xt_statistic@c0319000+380 xt_DSCP@c030d000+5d0 xt_dscp@c0301000+440 xt_quota@c02f5000+340 xt_pkttype@c02e9000+2a0 xt_physdev@c02dd000+590 xt_owner@c02d1000+300 ipt_REDIRECT@c02c5000+2f0 ipt_NETMAP@c02b9000+2f0 ipt_MASQUERADE@c02ad000+440 iptable_nat@c02a1000+9b8 nf_nat@c0292000+2db0 xt_CONNMARK@c0282000+360 xt_recent@c0275000+1600 xt_helper@c0266000+390 xt_conntrack@c025a000+830 xt_connmark@c024d000+2e0 xt_connbytes@c0241000+530 xt_NOTRACK@c0235000+270 iptable_raw@c0229000+2e0 xt_state@c021d000+350 nf_conntrack_ipv4@c0210000+1fb2 nf_defrag_ipv4@c0200000+306 nf_conntrack@c01e9000+a219 pppoe@c01cc000+20c0 pppox@c01bd000+59a ipt_REJECT@c01b0000+710 xt_TCPMSS@c01a3000+7a0 ipt_LOG@c0195000+1110 xt_multiport@c0187000+750 xt_mac@c017b000+2a0 xt_limit@c016f000+440 iptable_mangle@c0163000+430 iptable_filter@c0156000+350 ip_tables@c0147000+2255 xt_tcpudp@c0138000+730 x_tables@c012a000+279e ppp_async@c0119000+1960 ppp_generic@c0106000+4b55 slhc@c00f1000+112b ts_fsm@c00e4000+a80 ts_bm@c00d7000+600 ts_kmp@c00cb000+590 crc_ccitt@c00bb000+42b cambium_iprst@c00a8000+cd0 leds_gpio@c0097000+5c0 button_hotplug@c008a000+a70 gpio_buttons@c007d000+880 input_polldev@c0070000+643 input_core@c005e000+469e
<5>Linux version (builder@builder) (gcc version 4.3.3 (GCC) ) #1 Thu Nov 3 16:48:41 EET 2016
<4>Board SKU provided by bootloader = A
<4>flash_size passed from bootloader = 16
<4>arg 1: console=ttyS0,115200
<4>arg 2: root=31:02
<4>arg 3: noinitrd
<4>arg 4: mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),384K(config),7808K(uImageI),7808K(uImage),64k(ART)
<4>arg 5: mem=128M
<6>CPU revision is: 00019750 (MIPS 74Kc)
<4>cpu apb ddr apb hawk_ath_sys_frequency: cpu 720 ddr 600 ahb 200
<6>Determined physical RAM map:
<6> memory: 02000000 @ 00000000 (usable)
<6>User-defined physical RAM map:
<6> memory: 08000000 @ 00000000 (usable)
<6>Initrd not found or empty - disabling initrd
<4>Zone PFN ranges:
<4> Normal 0x00000000 -> 0x00008000
<4>Movable zone start PFN for each node
<4>early_node_map[1] active PFN ranges
<4> 0: 0x00000000 -> 0x00008000
<7>On node 0 totalpages: 32768
<7>free_area_init_node: node 0, pgdat 802d2fc0, node_mem_map 81b9f000
<7> Normal zone: 256 pages used for memmap
<7> Normal zone: 0 pages reserved
<7> Normal zone: 32512 pages, LIFO batch:7
<4>Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
<5>Kernel command line: console=ttyS0,115200 root=31:02 noinitrd mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),384K(config),7808K(uImageI),7808K(uImage),64k(ART) mem=128M
<6>PID hash table entries: 512 (order: -1, 2048 bytes)
<6>Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
<6>Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
<4>Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
<4>Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
<6>Writing ErrCtl register=00000000
<6>Readback ErrCtl register=00000000
<6>Memory: 101460k/131072k available (2008k kernel code, 29424k reserved, 502k data, 25256k init, 0k highmem)
<6>SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
<6>Hierarchical RCU implementation.
<4>plat_time_init: plat time init done
<6>Calibrating delay loop... 359.62 BogoMIPS (lpj=1798144)
<4>Mount-cache hash table entries: 512
<6>NET: Registered protocol family 16
<4>bio: create slab <bio-0> at 0
<6>Switching to clocksource MIPS
<6>NET: Registered protocol family 2
<6>IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
<6>TCP established hash table entries: 4096 (order: 3, 32768 bytes)
<6>TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
<6>TCP: Hash tables configured (established 4096 bind 4096)
<6>TCP reno registered
<6>NET: Registered protocol family 1
<4>ATH GPIOC major 0
<6>squashfs: version 4.0 (2009/01/31) Phillip Lougher
<4>Registering mini_fo version $Id$
<6>JFFS2 version 2.2 (NAND) (SUMMARY) (ZLIB) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
<4>yaffs Nov 3 2016 16:48:39 Installing.
<6>msgmni has been set to 198
<6>io scheduler noop registered
<6>io scheduler deadline registered (default)
<4>Serial: Atheros High-Speed UART
<4>step 0x54e scale 0x8
<6>Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
<6>serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
<6>console [ttyS0] enabled
<4>Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
<4>16MB Flash Detected
<4>Set ART offset to 0xFF0000
<5>6 cmdlinepart partitions found on MTD device ath-nor0
<5>Creating 6 MTD partitions on "ath-nor0":
<5>0x000000000000-0x000000040000 : "u-boot"
<5>0x000000040000-0x000000050000 : "u-boot-env"
<5>0x000000050000-0x0000000b0000 : "config"
<5>0x0000000b0000-0x000000850000 : "uImageI"
<5>0x000000850000-0x000000ff0000 : "uImage"
<5>0x000000ff0000-0x000001000000 : "ART"
<4>*** ar8216_init ***
<6>TCP westwood registered
<6>NET: Registered protocol family 17
<5>Bridge firewalling registered
<6>802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
<6>All bugs added by David S. Miller <davem@redhat.com>
<4>athwdt_init: Registering WDT success
<4>ath_otp_init: Registering OTP success
<4>ath_clksw_init: Registering Clock Switch Interface success
<4>apPx_spi_init: initialize Cambium New SPI Driver....
<4>Board SKU .... 0xa
<4>(all SKU responses: 0xa:5)
<4>uC Firmware.... 0x20
<4>Entering ath_934x_config_init()
<4>Initialize GPIO PINs
<4>GPIO :22 XLNA MUX with:38
<4>Init Hawkeye GPIOs
<4>Configure LO with GPIOs LO_STROBE:16 SPI_CLK:15 SPI_MOSI:13
<4>Open file:/etc/fpga_bin/MACHX02.sea /etc/fpga_bin/MACHX02.sed
<4>Checking FPGA ID... OK
<6>FPGA already has latest firmware. Continue boot process
<4>Correct Beam Steer SKU:5 Turn ON BSA OFF sector antenna
<4>apPx_rst_button_init: platform_device_regsiter: hawkeye_keys_device status = 0
<6>Freeing unused kernel memory: 25256k freed
<6>Button Hotplug driver version 0.3.1
<4>gpio_keys_probe: Initialize RST_BUTTON Driver....GPIO(23)
<4>gpio_keys_probe:gpio_keys_isr registered to IRQ = 55
<6>input: gpio-keys as /devices/platform/gpio-keys/input/input0
<4>**** drop_caches_sysctl_handler: all done timer added ...****
<6>PPP generic driver version 2.4.2
<4>GPS getVerCnt = 2
<6>ip_tables: (C) 2000-2006 Netfilter Core Team
<6>NET: Registered protocol family 24
<4>nf_conntrack version 0.5.0 (1982 buckets, 7928 max)
<4>CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
<4>nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
<4>sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
<4>nf_nat_ftp: Unknown symbol nf_nat_ftp_hook
<4>Netfilter messages via NETLINK v0.30.
<6>Ebtables v2.0 registered
<4>ctnetlink v0.93: registering with nfnetlink.
<4>tdd_netlink_socket: module license 'Proprietary' taints kernel.
<4>Disabling lock debugging due to kernel taint
<4>ATHR_GMAC: Length per segment 1722
<4>ATHR_GMAC: fifo cfg 3 01f00140
<4>ATHR_GMAC: mac number:0
<4>ATHR_GMAC: RX TASKLET - Pkts per Intr:64
<4>ATHR_GMAC: Mac address for unit 0:bfff0000
<4>ATHR_GMAC: 00:04:56:d2:50:cb
<4>ATHR_GMAC: Max segments per packet : 1
<4>ATHR_GMAC: Max tx descriptor count : 128
<4>ATHR_GMAC: Max rx descriptor count : 128
<4>ATHR_GMAC: Mac capability flags : 2381
<4>athr_gmac_ring_alloc Allocated 2048 at 0x85a38000
<4>athr_gmac_ring_alloc Allocated 2048 at 0x85a38800
<4>SCORPION ----> AR8035 PHY
<4>Setting Drop CRC Errors, Pause Frames and Length Error frames
<6>camb_mii_bus: probed
<4>mac:0 Registering AR8035...
<4>Setting PHY...0
<4>Wait for Autoneg to complete
<4>AR8035_PHY: Port 0, Neg Success
<4>AR8035_PHY: unit 0 phy addr 0 checking for the az feature of 8035...
<4>Disabling 802.3az feature...
<4>Restart auto-negotiation
<4>ATHR_GMAC: UNKNOWN intr eth0 isr 0x80000010 imr 0xd8
<6>device eth0 entered promiscuous mode
<4>TXFCTL enabled in Mac:0
<6>tdd_hal: (AR9380, DEBUG, WRITE_EEPROM, 11D)
<6>tdd_dfs: Version 2.0.0
<6>Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
<6>tdd_spectral: Version 2.0.0
<6>Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
<6>SPECTRAL module built on Nov 3 2016 16:35:11
<6>tdd_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
<6>ath_ahb: 9.2.0_U10.5.13 (Atheros/multi-bss)
<4>AH_CAL_IN_FLASH_AHB defined
<4>__ath_attach: Set global_scn[0]
<7> CHECKSUM fail $GPGGA,134605.000,4428.0016,N,01205.1400,E,1,9,1.70,48.6,M,46,17,11,19,01,,,,,,,0.91*1E chksum = 2A chksumstr = 2A len= 88
<4>TxBuf flow control is disabled
<4>hal_conf_parm.calInFlash 1
<7> CHECKSUM fail $GNGSA,A,,,,,,,,,1.93,1.70PGSV,3,1,11,23,7403,69,055,,22,53,080,,01,40,148,19*79 chksum = 1C chksumstr = 1C len= 81
<6>Bootstrap clock 40MHz
<6>Enterprise mode: 0x50000000
<7> CHECKSUM fail $GPGSV,3,2,11,09,33,26,17,34,266,26,19,32,287,24,31,22,050,*70 chksum = 6B chksumstr = 6B len= 63
<6>ar9300RadioAttach: Need analog access recipe!!
<6>Restoring Cal data from Flash
<6>Restoring Cal data from Second Radio in Flash
<4>Allow 5.9 channels: cal peer[7]=5950
<7>dfs_attach: use DFS enhancements
<7>DFS min filter rssiThresh = 11
<7>DFS max pulse dur = 201 ticks
<4>ath_get_caps[6025] rx chainmask mismatch actual 3 sc_chainmak 0
<4>ath_get_caps[6000] tx chainmask mismatch actual 3 sc_chainmak 0
<4>tdd_classifier_init: ic=85bc02c0 classifier=85bd8020
<4>ath_descdma_setup: tx DMA: 1024 buffers 1 desc/buf 128 desc_len
<4>ath_descdma_setup: tx DMA map: 815c0000 (135168) -> 15c0000 (135168)
<4>ath_descdma_setup: success, name = tx, nbuf = 1024
<4>ath_descdma_setup: beacon DMA: 8 buffers 1 desc/buf 128 desc_len
<4>ath_descdma_setup: beacon DMA map: a1423000 (4096) -> 1423000 (4096)
<4>ath_descdma_setup: success, name = beacon, nbuf = 8
<6>wifi0: Atheros 9557: mem=0xb8100000, irq=2
<4>TXFCTL enabled in Mac:0
<7>dfs_init_radar_filters: Unknown dfs domain 0
<4>camb_debug_print_setup: type=63, counter=3
<4>wlan_vap_create : enter. devhandle=0x85bc02c0, opmode=IEEE80211_M_HOSTAP, flags=0x1
<4>tdd_calc_cell_prop_delay: Cell_Radius_Size = 65500 m, prop_delay = 218484 ns
<4>tdd_calc_cell_prop_delay: Cell_Radius_Size = 96540 m, prop_delay = 322022 ns
<4>tdd_calc_frame_params: FrameD=5000 DL=2241 TTRG=478 UL=2241 RTTG=40 CW=599 max_inar_duration=152000 mcs=96540 STXOP_MUL=2
<4>latency control is ON, latency value is 150000000
<4>wlan_vap_create : exit. devhandle=0x85bc02c0, opmode=IEEE80211_M_HOSTAP, flags=0x1.
<4>_register_mc_bypass_hndl: Register MultiCast bypass [eth0] -> [ath0]
<4>ATHR_GMAC:__set_mc_bypass_ath_dev: Setting MultiCast bypass [eth0] -> [ath0]
<4>SWB: CAC time = 67000 MILLIseconds
<4>ATH_MAC_TIMER: enet unit:0 is up...
<4>RGMii 1000Mbps full duplex
<4>ATH_MAC_TIMER: done cfg2 0x7215 ifctl 0x0 miictrl
<6>br-lan: port 1(eth0) entering forwarding state
<4>SWB: NOP time = 1800000 MILLIseconds
<4>50, 30, 20
<4>SWB: validated channel = 96 (5480MHz)
<4>SWB: Primary channel = 96 (5480 MHz)
<4>Setting Max Stations:60
<4>unable to setup uplink factorization for GPS mode
<6>PPS Stabilizer is active
<6>Clock drift detector is active
<6>Clock drift compensator is active
<6>Frame Duration Controller is active
<6>1PPS Sync Manager is active
<6>Sync Multiplexor is active
<3>GPS Sync Lost. (00:00:06:289987)
<4>SSID lengh is ZERO do not start AP if no ssid is set
<6>device ath0 entered promiscuous mode
<6>br-lan: port 2(ath0) entering forwarding state
<4> ieee80211_ioctl_siwmode: imr.ifm_active=0x450280, new mode=0x3, valid=1
<4>Checking for node leak: OK
<6>br-lan: port 2(ath0) entering disabled state
<4>try to stop bss
<4>Current channel: 96 (5480 MHz)
<4>try to start bss...
<4>_hbs_starting_tmr: Invalid BSA SKU 0x0
<4>Setting Max Stations:120
<6>TDD Sync Enable called without disable
<4>Flags 0, Scheduler Mode 0
<7>dfs_re_init_radar_filters: Unknown dfs domain 0
<7>dfs_correction_4radar_filters: Unknown dfs domain 0
<4>interface is UP
<6>br-lan: port 2(ath0) entering forwarding state
<4>TSF alignment: 1
<4>Wait for Autoneg to complete
<4>AR8035_PHY: Port 0, Neg Success
<4>AR8035_PHY: unit 0 phy addr 0 ATH_MAC_TIMER: unit 0: phy 0 not up carrier 1
<6>br-lan: port 1(eth0) entering disabled state
<3>GPS Sync Restored. (00:00:11:460969)
<4>ATH_MAC_TIMER: enet unit:0 is up...
<4>RGMii 1000Mbps full duplex
<4>ATH_MAC_TIMER: done cfg2 0x7215 ifctl 0x0 miictrl
<6>br-lan: port 1(eth0) entering forwarding state
<4>[ 46.970000] Adding WDS entry for c8:3a:35:4b:07:50, through ni=00:04:56:fd:2a:2b
<4>[ 47.070000] Adding WDS entry for c8:3a:35:4b:0e:b8, through ni=00:04:56:fd:2a:2b
<4>[ 47.330000] Adding WDS entry for c8:3a:35:4b:0e:90, through ni=00:04:56:fd:2a:2b
<3>[ 94.790000] Assertion failed! remaining_gpf_size >= 0:tdd_gpf_fill_data_with_limit_stage2 /home/builder/jenkins/workspace/ePMP-Release-3.1.0/backfire_lsdk/package/cambium-tdd/drivers/wlan/os/linux/../../umac/tdd/tdd_gpf.c:1411
<4>[ 94.820000] Call Trace:
<4>[ 94.820000] [<80253044>] dump_stack+0x8/0x34
<4>[ 94.820000] [<c0c882c8>] tdd_gpf_fill_data_with_limit_stage2+0x874/0x8a0 [tdd_umac]
<4>[ 94.830000] [<c0c6622c>] ath_tdd_scheduler_start_ap+0xb20/0x17a8 [tdd_umac]
<4>[ 94.840000] [<c0a55cbc>] ath_tdd_sta_ul_stop_timer_handler+0xd0/0x47c [tdd_dev]
<4>[ 94.850000]
<0>[ 94.850000] Kernel panic - not syncing: Take care of the assert first
<0>[ 94.850000]

Hello Maggiore81,

Thanks for the crashlog. We've been able to reproduce this issue in our lab and we are currently investigating it. Are you running with a 2.5ms frame? Going back to 5ms frame should prevent this. Sorry for the inconvenience.