Hi, 

i have an Eap220 that not booting.

You obtain the IP from the DHCP but the web console is not available.

From the console port i have this error:

--------------------------------------------

TP-LINK SafeLoader (Build time: Jun 24 2015 - 16:10:25)
CPU: 560MHz AHB: 480MHz DDR: 64MB
Performing LED check.  PASS
Press CTRL+B to enter SafeLoader: 1
open user-config failed.
open user-config failed.
Allocated memory for elf segment ok: addr: 0x80270000, size 0x4e06e0
Loading .text @ 0x8027ad20 (4848 bytes)
Loading .rodata.str1.4 @ 0x8027c010 (212 bytes)
Loading .data @ 0x8027c0f0 (861660 bytes)
Clearing .bss @ 0x8034e6d0 (4202512 bytes)

Starting kernel

[?25hBooting Atheros AR934x
  Linux version 2.6.31 (smbrouter@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #1 PREEMPT Fri Apr 1 17:48:37 CST 2016
flash_size passed from bootloader = 0
CPU revision is: 0001974c (MIPS 74Kc)
ath_sys_frequency: cpu srif ddr srif cpu 560 ddr 480 ahb 240
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/init mtdparts=ath-nor0:128k(u-boot),64k(pation-table),64k(product-info),1536k(kernel),14336k(rootfs),192k(config),64k(ART) mem=64M
PID hash table entries: 256 (order: 8, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 62284k/65536k available (1909k kernel code, 3180k reserved, 503k data, 116k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 279.55 BogoMIPS (lpj=559104)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
ath_pcibios_init: bus 0
ath_pcibios_init(581): PCI 0 CMD write: 0x356
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pcibios_map_irq: IRQ 70 for bus 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
net_link: create socket ok.
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/O].
msgmni has been set to 121
alg: No test for lzma (lzma-generic)
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
7 cmdlinepart partitions found on MTD device ath-nor0
Creating 7 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000030000 : "pation-table"
0x000000030000-0x000000040000 : "product-info"
0x000000040000-0x0000001c0000 : "kernel"
0x0000001c0000-0x000000fc0000 : "rootfs"
0x000000fc0000-0x000000ff0000 : "config"
0x000000ff0000-0x000001000000 : "ART"
TCP cubic registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
athwdt_timer_init: Starting WDT.
ath_otp_init: Registering OTP success
ath_clksw_init: Registering Clock Switch Interface success
VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Freeing unused kernel memory: 116k freed
init started:  BusyBox v1.01 (2015.06.11-11:22+0000) multi-call binary
~~~~~~~~~~~~~~~~~~~~~~~~~~pcie_debug=00004111~~~~~~~~~~~~~~~~~~~~~~~~~~
This Board use 2.6.31
xt_time: kernel timezone is -0000
nf_conntrack version 0.5.0 (1024 buckets, 30720 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.3
---elect module open ok
---redir module open ok
---portal module open ok
 (none) mips #1 PREEMPT Fri Apr 1 17:48:37 CST 2016 (none)
(none) login: [flow]opSysModInit 62: Begin opLanInit!
[spectrum_error: opSpectrumInit:68]Begin opSpectrum
[flow]opRegionInit 813: Begin opRegionInit

[flow]opMacFilterExtInit 63: Begin opMacFilterExt
[flow]opSearchInit 222: Begin opSearchInit
[flow]opWScheduleInit 61: Begin opWScheduleInit

Monitor Thread pid(148), tid(5126) created.
opClusterInit

unlzma/peek_old_byte: position 1359327 out of range
unlzma/peek_old_byte: position 4505 out of range
SQUASHFS error: crypto_decompress_update returned -57534, data probably corrupt
SQUASHFS error: squashfs_read_data failed to read block 0x2de28e
SQUASHFS error: Unable to read data cache entry [2de28e]
SQUASHFS error: Unable to read page, block 2de28e, size 11428

----------------------------------------------

i have try with ctrl+b and 2 then 1  for firmware upgrade throught tftp but i have an error when i put TL-EAP220v1_eu_2.1.0_[20171109-rel72971]_up_signed.bin

Probably this file is not correct.

Where is the correct image for recovery from serial console?

I have find anywhere without result.

My model is

eap 220 V1 s/n 2164302001245

Thanks