[AXY2S] [ECR6600] Teardown LSC Connect Smart Wall Dimmer (3207304)

jasperro 4395 71

#61 21522942 18 Apr 2025 10:52

Maximilian0017 Maximilian0017

Level 7

Helpful post? (0)

Post #61
21522942 18 Apr 2025 10:52

It looked like it was mid-development and the wifi was really bad.
Also, the config needed for this unit would be nice.

I have a couple of these, but my lab is all boxed up due to a move.....
ADVERTISEMENT
#62 21522945 18 Apr 2025 10:55

divadiow divadiow

Level 35

Helpful post? (0)

Post #62
21522945 18 Apr 2025 10:55

Maximilian0017 wrote:
and the wifi was really bad

we think that's just limited to the experience on WG236A modules used in testing. There are several people with ECR6600/BL0937 EU plugs now using OpenECR6600 seemingly without issue.
#63 21523865 19 Apr 2025 07:51

miegapele miegapele

Level 15

Helpful post? (+1)

Post #63
21523865 19 Apr 2025 07:51

Seem to be fine with wifi, for example comparison against BK7231T, two concrete walls away from router.
I have not tested long term stability though.
#64 21523878 19 Apr 2025 08:10

insmod insmod

Level 26

Helpful post? (+1)

Post #64
21523878 19 Apr 2025 08:10

>>21523865
Transmission power / dbm was more or less ok even on WG236.
It's the reception that is the problem. I had once seen -75dbm on router, but -90 on device (in log, because http stopped working already)
ADVERTISEMENT
#65 21524001 19 Apr 2025 10:07

miegapele miegapele

Level 15

Helpful post? (0)

Post #65
21524001 19 Apr 2025 10:07

Reception also looks fine. ECR6600 reports -61dBm while BK7231T reports -65dBm. Trying ping for some time gets similar averages too.
#66 21525546 20 Apr 2025 18:53

Maximilian0017 Maximilian0017

Level 7

Helpful post? (0)

Post #66
21525546 20 Apr 2025 18:53

That sounds great, do we have a config for this device?
ADVERTISEMENT
#67 21620419 29 Jul 2025 17:59

divadiow divadiow

Level 35
Helpful post? (+1)

Post #67
21620419 29 Jul 2025 17:59

>>21474686

newer ECR6600 goodies 😎

Code: Text
Log in, to see the code

Attachments:

ECR6600_AT命令开发指南V2.9_汇总.docx Download (357.49 KB)

ecr6600f_v2.1.24.11-AT.tar Download (270.47 MB)

ecr6600f_v2.1.23.16_xiaocao.tar Download (197.53 MB)
#68 21621881 31 Jul 2025 08:32

divadiow divadiow

Level 35

Helpful post? (0)

Post #68
21621881 31 Jul 2025 08:32

https://github.com/openshwprojects/OpenBK7231T_App/pull/1743

great! thank for you for trying out the ECR6600 SDKs
ADVERTISEMENT
#69 21622802 01 Aug 2025 07:55

divadiow divadiow

Level 35

Helpful post? (0)

Post #69
21622802 01 Aug 2025 07:55

Quote:
ECR6600 with v2.1.23.16 firmware size increased from 850kb to 920kb. (When i tried v2.1.24.11, it was 1222kb. Perhaps some optimization flags were missing?)

Added ECR6600 and BL602 deepsleep (ECR6600 - unknown if it works with new sdk, it didn't in the old one).
BL602 pindeepsleep (GPIO7/8 only)
ESP-IDF sdk from v5.5-beta1 to v5.5
Powersave for ECR6600
ESP deepsleep argument from ms to s
ECR6600 reset reason

https://github.com/openshwprojects/OpenBK7231T_App/pull/1743

OpenECR6600_1743_merge_d3a54bd71550 initial boot

https://github.com/openshwprojects/OpenBK7231T_App/actions/runs/16644090336
Code: Text
Log in, to see the code

reboot reason ✅
Excellent RSSI only because I have MHF4 + aerial now ✅

powersave 1 doesn't crash but don't know if it's effective
Code: Text
Log in, to see the code

deepsleep 30

Code: Text
Log in, to see the code

wakes at 30s but is weird. won't join wifi again until hard power off/on
Code: Text
Log in, to see the code

Added after 7 [minutes]:

yes weird. I get Windows device disconnect sound when it wakes too and no wifi join. but then a minute later it'll device-disconnect sound again, reboot and join wifi, then:

I'll try non-PC USB port

Added after 4 [minutes]:

on mains-powered USB 2A port it did join wifi 9s after wake and:

Added after 12 [minutes]:
divadiow wrote:
powersave 1 doesn't crash but don't know if it's effective

forgot i just bought this

powersave 0

powersave 1

Added after 16 [minutes]:

not really sure what's happening with deepsleep. this is it on mains USB, no powersave, then deepsleep 10 which you can see kicking in and dropping to 0, but then it draws too quickly again, drops and rises. hmm
#70 21622859 01 Aug 2025 09:00

insmod insmod

Level 26

Helpful post? (0)

Post #70
21622859 01 Aug 2025 09:00

So it can connect after deep sleep? Even if not, this is still better, that what i've had with older sdk. It failed to even find AP, stuck at scanning.
There is also powersave 2.
#71 21622863 01 Aug 2025 09:52

divadiow divadiow

Level 35

Helpful post? (0)

Post #71
21622863 01 Aug 2025 09:52

insmod wrote:
So it can connect after deep sleep?

it seems to vary. inconsistent. powersave 2 is available in build now for use? I can check later today..

re deepsleep it probably needs a sample of 10 rounds to gauge consistency

Added after 45 [minutes]:

divadiow wrote:
I can check later today..

or now.

powersave 2 = 0.02/0.03A - seems comparable to powersave 1

device remains responsive. switching to powersave 1 I see no change in reading. powersave 0 = back to 0.12A
#72 21626131 04 Aug 2025 23:22

divadiow divadiow

Level 35

Helpful post? (0)

Post #72
21626131 04 Aug 2025 23:22

1743_merge_d3a54bd71550

pindeepsleep does nothing. this in log:
Code: Text
Log in, to see the code
Create an account, log in and become active in a forum and ads will not appear. You will receive points by participating in discussions.
Join this discussion.

Install the application

Topic summary

The discussion centers on the teardown and firmware development efforts for the LSC Connect Smart Wall Dimmer (model 3207304), which uses the AXY2S module based on the ESWIN ECR6600 chip. The ECR6600 is not currently supported by OpenBK firmware, but an SDK and flashing/backup tools (RDTool) are available on GitHub. The chip is similar to the TR6260, and ongoing porting efforts are documented in repositories such as jasperro/OpenECR6600 and OpenBK7231T_App. Users successfully extracted firmware backups via UART0 and analyzed boot logs, revealing TuyaOS V3 firmware with some changes in configuration storage compared to earlier versions. Challenges include unstable Wi-Fi reception, OTA update issues due to bootloader and OTA tool version mismatches, and limited documentation with only partial datasheets available. Various SDK versions have been obtained, including newer releases (v2.1.22 and v2.1.23.3), but integration and stability improvements remain in progress. Hardware variations include WG236 and WG236A modules, some with IPEX antenna connectors requiring modification for proper signal reception. Wi-Fi performance varies, with some users reporting poor reception and others achieving stable connections through walls and distance. Tools and code for UART, GPIO, PWM, ADC, and IRQ support are being developed and tested. The community is working on improving OTA functionality, MAC address modification, and partition management. Additional resources and SDKs have been shared from sources like SkyLab and Hi-Flying. Overall, the project is in active development with partial success in firmware porting and hardware support, but Wi-Fi stability and OTA remain key issues to resolve.
Summary generated by the language model.

Home page
/
Forum
/
Smart Home
/
Smart Home IoT
/
[AXY2S] [ECR6600] Teardown LSC Connect Smart Wall Dimmer (3207304)

FAQ

TL;DR: Disabling amt_cal_info_obtain() lets an ECR6600 board stay reachable even at −91 dBm RSSI [Elektroda, insmod, post #21463032] “both of those platforms have wonky wifi” [Elektroda, insmod, post #21477692]

Why it matters: Stable Wi-Fi and a reliable flashing path decide whether the dimmer becomes a smart-home win or a paperweight.

Quick Facts

• MCU: Eswin ECR6600F, ARM Cortex-M33, 192 kB SRAM [Elektroda, jasperro, post #21377851]
• Flash layout: 2 MB; main app partition 0x00010000–0x001DA000 (1 .73 MB) [Elektroda, insmod, post #21389718]
• Tested UARTs: UART0 (P5/P6), UART1 (P1/P2) 115 200 bps [Elektroda, insmod, post #21461296]
• OpenECR6600 build size: 696 kB with SDK v2.1.23 libs [Elektroda, insmod, post #21473279]
• OTA success rate: 100 % in lab (1 × 1.18.57 image, 1 502 kB) [Elektroda, divadiow, post #21470619]

What toolchain and SDK version does OpenECR6600 currently use?

OpenECR6600 compiles with GCC 9.3.1 and links against Eswin SDK v2.1.23.3 static libraries patched from the Hi-Flying LPT62X0 bundle [Elektroda, insmod, post #21473279]

How do I make a full firmware backup before flashing?

Desolder the AXY2S module and wire UART0 (P5→RX, P6→TX, GND).
Start RDTool, set stub ECR6600F_stub_V1.3.1.bin, click Start, then power VBAT.
Switch to Flash tab, press Start; a 2 048 kB .bin is saved when “READ Flash Success!” appears [Elektroda, jasperro, post #21377851]

Why does UART0 sometimes print only garbled ‘U��’ characters?

The primary boot ROM outputs at an unknown baud while the application logs on UART1. Switching to 921 600 bps or using the L_TX/L_RX pins shows the readable TuyaOS log [Elektroda, jasperro, post #21391389]

Is Wi-Fi reception still unreliable on real products?

Users of BL0937 EU plugs report −61 dBm RSSI and stable pings through two concrete walls [Elektroda, miegapele, post #21524001], indicating the weak RX mainly affects bare WG236A modules used for development.

How can I improve radio range on a WG236A dev module?

Remove the 0 Ω link feeding the PCB antenna, bridge the pad to the MHF4 footprint, and solder an external IPEX antenna. insmod measured normal GUI access after the change [Elektroda, insmod, post #21474804]

Does the build support OTA updates?

Yes. Classic HTTP OTA works; a 1 553→1.18.57 upgrade reached 97 % then rebooted cleanly [Elektroda, divadiow, post #21470619] MQTT-triggered OTA is disabled because large posts crashed older stacks [Elektroda, insmod, post #21459742]

Where is the MAC address stored and can I change it?

ECR6600 modules keep the MAC in nv_amt (0x1FE000). The OpenBK mac command writes a new address; divadiow verified the change at 0x1FE308 [Elektroda, 21474814]

Why does Tuya-config extraction fail on OS 3 images?

TuyaOS 3 stores KV blocks with a new header; existing extractors flag ‘bad nextblock CRC’ and abort [Elektroda, insmod, post #21389718] A parser update is required.

What partitions must I adjust for OpenBK?

Replace the stock 0x6000 partition table with new_partition_0x6000.bin to enlarge env space; flash via UART because OTA keeps the original table [Elektroda, insmod, post #21477692]

Which pins support ADC and BL0937 IRQ?

ADC0 (P14) and ADC1 (P15) exist in silicon, but reading always returns ~3.3 V; code therefore exposes VBAT as a pseudo-pin only [Elektroda, insmod, post #21461296] BL0937 IRQ on P22 works after HAL update [Elektroda, 21461296]

Edge case: what breaks if I flash a 4 MB Hi-Flying image to 2 MB hardware?

The module boots to a single ‘HF-LPT6200’ banner and halts, because calibration and OTA partitions are missing [Elektroda, divadiow, post #21474750]

How do I read ECR6600 eFuses?

RDTool cannot read eFuses; you must load the AT firmware and issue AT+EFUSERD? to dump the 0x300-bit region [Elektroda, insmod, post #21488364]

Statistic: what’s the memory footprint of OpenECR6600?

Free heap after boot is 198 864 bytes (approx. 46 % of RAM) with Wi-Fi connected and MQTT disabled [Elektroda, divadiow, post #21462915]

What is the common failure during MQTT publish?

An early HAL_GetMACStr bug inserted NULL bytes into the topic, freezing the TCP stack. Fix merged on 28 Feb 2025 [Elektroda, insmod, post #21459742]

Can I request the full Eswin SDK?

Vendors provide only binary-only kits; Skylab shared v2.1.22 with no tech support, and Hi-Flying offers a static-lib package v2.1.23.3 [Elektroda, divadiow, post #21473263]