logo elektroda
logo elektroda
X
logo elektroda
Dostępna jest polska wersja

Czy wolisz polską wersję strony elektroda?

Nie, dziękuję Przekieruj mnie tam

[AXY2S] [ECR6600] Teardown LSC Connect Smart Wall Dimmer (3207304)

jasperro 8628 73
ADVERTISEMENT
  • #61 21522942
    Maximilian0017
    Level 7  
    It looked like it was mid-development and the wifi was really bad.
    Also, the config needed for this unit would be nice.

    I have a couple of these, but my lab is all boxed up due to a move.....
  • ADVERTISEMENT
  • #62 21522945
    divadiow
    Level 38  
    Maximilian0017 wrote:
    and the wifi was really bad

    we think that's just limited to the experience on WG236A modules used in testing. There are several people with ECR6600/BL0937 EU plugs now using OpenECR6600 seemingly without issue.
  • ADVERTISEMENT
  • #63 21523865
    miegapele
    Level 16  
    Seem to be fine with wifi, for example comparison against BK7231T, two concrete walls away from router.
    I have not tested long term stability though.

    A list of two OpenWrt access points showing connection info, MAC addresses, signal strengths, and link speeds.
  • #64 21523878
    insmod
    Level 31  
    >>21523865
    Transmission power / dbm was more or less ok even on WG236.
    It's the reception that is the problem. I had once seen -75dbm on router, but -90 on device (in log, because http stopped working already)
  • #65 21524001
    miegapele
    Level 16  
    Reception also looks fine. ECR6600 reports -61dBm while BK7231T reports -65dBm. Trying ping for some time gets similar averages too.
  • #66 21525546
    Maximilian0017
    Level 7  
    That sounds great, do we have a config for this device?
  • ADVERTISEMENT
  • #67 21620419
    divadiow
    Level 38  
    >>21474686

    newer ECR6600 goodies 😎

    Code: Text
    Log in, to see the code
    Attachments:
    • ECR6600_AT命令开发指南V2.9_汇总.docx (357.49 KB) You must be logged in to download this attachment.
    • ecr6600f_v2.1.23.16_xiaocao.tar (197.53 MB) You must be logged in to download this attachment.
    • ecr6600f_v2.1.24.11-AT.tar (270.47 MB) You must be logged in to download this attachment.
  • #69 21622802
    divadiow
    Level 38  
    Quote:
    ECR6600 with v2.1.23.16 firmware size increased from 850kb to 920kb. (When i tried v2.1.24.11, it was 1222kb. Perhaps some optimization flags were missing?)

    Added ECR6600 and BL602 deepsleep (ECR6600 - unknown if it works with new sdk, it didn't in the old one).
    BL602 pindeepsleep (GPIO7/8 only)
    ESP-IDF sdk from v5.5-beta1 to v5.5
    Powersave for ECR6600
    ESP deepsleep argument from ms to s
    ECR6600 reset reason

    https://github.com/openshwprojects/OpenBK7231T_App/pull/1743

    OpenECR6600_1743_merge_d3a54bd71550 initial boot

    https://github.com/openshwprojects/OpenBK7231T_App/actions/runs/16644090336
    Code: Text
    Log in, to see the code


    OpenECR6600 device interface showing system status, chip info, MAC, and control buttons

    reboot reason ✅
    Excellent RSSI only because I have MHF4 + aerial now ✅

    SKYLAb Wi-Fi module on PCB with connected wires and external antenna

    powersave 1 doesn't crash but don't know if it's effective
    Code: Text
    Log in, to see the code


    deepsleep 30

    Code: Text
    Log in, to see the code


    wakes at 30s but is weird. won't join wifi again until hard power off/on
    Code: Text
    Log in, to see the code


    Added after 7 [minutes]:

    yes weird. I get Windows device disconnect sound when it wakes too and no wifi join. but then a minute later it'll device-disconnect sound again, reboot and join wifi, then:

    Screenshot showing message “Reboot reason: 9 - UNKNOWN”

    I'll try non-PC USB port

    Added after 4 [minutes]:

    on mains-powered USB 2A port it did join wifi 9s after wake and:

    Chip temperature: 9649.0°C, WiFi RSSI: Excellent (-49dBm), Reboot reason: 9 - UNKNOWN

    Added after 12 [minutes]:
    divadiow wrote:
    powersave 1 doesn't crash but don't know if it's effective

    forgot i just bought this

    powersave 0
    USB digital tester showing 4.70V, 0.13A and 0.60W on the display
    powersave 1
    USB tester showing 4.80 V and 0.02 A on digital display

    Added after 16 [minutes]:

    not really sure what's happening with deepsleep. this is it on mains USB, no powersave, then deepsleep 10 which you can see kicking in and dropping to 0, but then it draws too quickly again, drops and rises. hmm



  • ADVERTISEMENT
  • #70 21622859
    insmod
    Level 31  
    So it can connect after deep sleep? Even if not, this is still better, that what i've had with older sdk. It failed to even find AP, stuck at scanning.
    There is also powersave 2.
  • #71 21622863
    divadiow
    Level 38  
    insmod wrote:
    So it can connect after deep sleep?

    it seems to vary. inconsistent. powersave 2 is available in build now for use? I can check later today..

    re deepsleep it probably needs a sample of 10 rounds to gauge consistency

    Added after 45 [minutes]:

    divadiow wrote:
    I can check later today..

    or now.

    powersave 2 = 0.02/0.03A - seems comparable to powersave 1

    device remains responsive. switching to powersave 1 I see no change in reading. powersave 0 = back to 0.12A
  • #72 21626131
    divadiow
    Level 38  
    1743_merge_d3a54bd71550


    pindeepsleep does nothing. this in log:
    Code: Text
    Log in, to see the code
  • Helpful post
    #74 21809988
    divadiow
    Level 38  
    @jasperro did you ever finish conversion of LSC dimmer to OpenECR6600? I notice we only have one ECR6600 device in the device list and went hunting for the others we've seen.

    Added after 47 [minutes]:

    dpIDs for your device if needed

    Code: JSON
    Log in, to see the code


    placeholder add to device list https://github.com/OpenBekenIOT/webapp/pull/2...mits/d629a4d28d0376111d1d3a07c7dc43e24ecaae61

Topic summary

✨ The discussion centers on the teardown and firmware development efforts for the LSC Connect Smart Wall Dimmer (model 3207304), which uses the AXY2S module based on the ESWIN ECR6600 chip. The ECR6600 is not currently supported by OpenBK firmware, but an SDK and flashing/backup tools (RDTool) are available on GitHub. The chip is similar to the TR6260, and ongoing porting efforts are documented in repositories such as jasperro/OpenECR6600 and OpenBK7231T_App. Users successfully extracted firmware backups via UART0 and analyzed boot logs, revealing TuyaOS V3 firmware with some changes in configuration storage compared to earlier versions. Challenges include unstable Wi-Fi reception, OTA update issues due to bootloader and OTA tool version mismatches, and limited documentation with only partial datasheets available. Various SDK versions have been obtained, including newer releases (v2.1.22 and v2.1.23.3), but integration and stability improvements remain in progress. Hardware variations include WG236 and WG236A modules, some with IPEX antenna connectors requiring modification for proper signal reception. Wi-Fi performance varies, with some users reporting poor reception and others achieving stable connections through walls and distance. Tools and code for UART, GPIO, PWM, ADC, and IRQ support are being developed and tested. The community is working on improving OTA functionality, MAC address modification, and partition management. Additional resources and SDKs have been shared from sources like SkyLab and Hi-Flying. Overall, the project is in active development with partial success in firmware porting and hardware support, but Wi-Fi stability and OTA remain key issues to resolve.

FAQ

TL;DR: Disabling amt_cal_info_obtain() lets an ECR6600 board stay reachable even at −91 dBm RSSI [Elektroda, insmod, post #21463032] “both of those platforms have wonky wifi” [Elektroda, insmod, post #21477692]

Why it matters: Stable Wi-Fi and a reliable flashing path decide whether the dimmer becomes a smart-home win or a paperweight.

Quick Facts

• MCU: Eswin ECR6600F, ARM Cortex-M33, 192 kB SRAM [Elektroda, jasperro, post #21377851] • Flash layout: 2 MB; main app partition 0x00010000–0x001DA000 (1 .73 MB) [Elektroda, insmod, post #21389718] • Tested UARTs: UART0 (P5/P6), UART1 (P1/P2) 115 200 bps [Elektroda, insmod, post #21461296] • OpenECR6600 build size: 696 kB with SDK v2.1.23 libs [Elektroda, insmod, post #21473279] • OTA success rate: 100 % in lab (1 × 1.18.57 image, 1 502 kB) [Elektroda, divadiow, post #21470619]

What toolchain and SDK version does OpenECR6600 currently use?

OpenECR6600 compiles with GCC 9.3.1 and links against Eswin SDK v2.1.23.3 static libraries patched from the Hi-Flying LPT62X0 bundle [Elektroda, insmod, post #21473279]

How do I make a full firmware backup before flashing?

  1. Desolder the AXY2S module and wire UART0 (P5→RX, P6→TX, GND).
  2. Start RDTool, set stub ECR6600F_stub_V1.3.1.bin, click Start, then power VBAT.
  3. Switch to Flash tab, press Start; a 2 048 kB .bin is saved when “READ Flash Success!” appears [Elektroda, jasperro, post #21377851]

Why does UART0 sometimes print only garbled ‘U��’ characters?

The primary boot ROM outputs at an unknown baud while the application logs on UART1. Switching to 921 600 bps or using the L_TX/L_RX pins shows the readable TuyaOS log [Elektroda, jasperro, post #21391389]

Is Wi-Fi reception still unreliable on real products?

Users of BL0937 EU plugs report −61 dBm RSSI and stable pings through two concrete walls [Elektroda, miegapele, post #21524001], indicating the weak RX mainly affects bare WG236A modules used for development.

How can I improve radio range on a WG236A dev module?

Remove the 0 Ω link feeding the PCB antenna, bridge the pad to the MHF4 footprint, and solder an external IPEX antenna. insmod measured normal GUI access after the change [Elektroda, insmod, post #21474804]

Where is the MAC address stored and can I change it?

ECR6600 modules keep the MAC in nv_amt (0x1FE000). The OpenBK mac command writes a new address; divadiow verified the change at 0x1FE308 [Elektroda, 21474814]

Why does Tuya-config extraction fail on OS 3 images?

TuyaOS 3 stores KV blocks with a new header; existing extractors flag ‘bad nextblock CRC’ and abort [Elektroda, insmod, post #21389718] A parser update is required.

What partitions must I adjust for OpenBK?

Replace the stock 0x6000 partition table with new_partition_0x6000.bin to enlarge env space; flash via UART because OTA keeps the original table [Elektroda, insmod, post #21477692]

Edge case: what breaks if I flash a 4 MB Hi-Flying image to 2 MB hardware?

The module boots to a single ‘HF-LPT6200’ banner and halts, because calibration and OTA partitions are missing [Elektroda, divadiow, post #21474750]

How do I read ECR6600 eFuses?

RDTool cannot read eFuses; you must load the AT firmware and issue AT+EFUSERD? to dump the 0x300-bit region [Elektroda, insmod, post #21488364]

Statistic: what’s the memory footprint of OpenECR6600?

Free heap after boot is 198 864 bytes (approx. 46 % of RAM) with Wi-Fi connected and MQTT disabled [Elektroda, divadiow, post #21462915]

What is the common failure during MQTT publish?

An early HAL_GetMACStr bug inserted NULL bytes into the topic, freezing the TCP stack. Fix merged on 28 Feb 2025 [Elektroda, insmod, post #21459742]

Can I request the full Eswin SDK?

Vendors provide only binary-only kits; Skylab shared v2.1.22 with no tech support, and Hi-Flying offers a static-lib package v2.1.23.3 [Elektroda, divadiow, post #21473263]
ADVERTISEMENT