Repair the WiFi on Your Foscam FI8904, FI8905 or Maygion IP Camera

I have three different WFfi-connected network cameras; a Foscam FI8904, an FI8905, and a “Magion” Chinese knockoff I got on DealExtreme. These cameras are all pretty similar. There are anecdotal stories that the Maygion is really just an unbranded Foscam with custom software, but I haven’t really confirmed this. They’re fairly low-end (among the least expensive in terms of WiFi outdoor security cameras), which means the image quality is mediocre, especially in the brightness extremes of outdoors.

Also, the build quality is not great. Between the three of them, there’s always something going wrong; and AC adapter failing, IR emitters burning out, etc. Replacing the AC adapter is no big deal, and you can actually find replacement IR LED arrays on DealExtreme, so I’ve had some luck replacing those, as well. Twice, now, I’ve had a camera just stop working over WiFi.  You’d think this would be a situation where the only option is to toss it out and but a new one, but it turns out it’s not! In both cases I was able to repair the WiFi..for as little as $10!  To get that cheap, I had to do some more serious hacking (as I describe near the end of this post) but my first fix was quick, safe, and cost about $35.

I both cases where the wifi quite working, there was no obvious errors in the log or anything…it just stopped reporting found wifi networks through the web admin page and no longer connected to my home hotspot.  It worked fine via 10baseT. When the first one died, on a whim I decided to crack open the case and see if it was anything obvious, but I had little optimism. The circuit boards inside consumer electronics like this tend to be a nearly incomprehensible array of surface-mounted components – impossible for an amateur like me to repair.  In this case, though, I discovered room for optimism.

Mother and Daughterboard inside Maygion camera

The rear of the camera can be removed by unscrewing four hex nuts, then carefully pulling the whole assembly out. Inside are a motherboard and a daughterboard mounted to it with a couple of stand-offs. The daughterboard guessed it..the wifi board! Shown here already removed from the stand-offs. it is connected to the antenna and to the motherboard via a 4-wire jumper. These pictures are actually from my second repair (of my Maygion camera), but the two Foscams are almost identical.

Figuring it was still a long-shot, I started googling for identifying markings on the assembly. Turns out it’s relatively easy to find direct replacements for this board! The “model number” on the white sticker, “vnt6656g6a40”, turns up multiple hits.

Maygion identifying sticker

Interestingly, the identifying product information on the Maygion camera is almost the exact same sticker! They most likely stick one to the outside of the camera because it also shows the mac address.

Although I ordered my first replacement for about $35, I recently found one here for only $15 (may be a lot of shipping, though). As of this writing, they also seem to be available here and here.

The first time I made this repair, it was to one of the Foscams. As a stopgap measure to get the “better” (bigger IR emitter array), defective one working, I actually just cracked open the other one and swapped the boards. Bingo! It worked like a charm! I was now confident that a replacement board would do the trick and would be worth the $35. Sure enough, when the new one arrived, it was essentially identical to the original – even the jumper plug was the same. I plugged in the 4-wire jumper and antenna, powered it up, and presto!

This was an easy and convenient fix, but when the wifi died on my Maygion, I started to think this could add up if wifi goes out on a camera every six months or so. Ultimately, I should probably look at a camera with slightly better build quality. There are some in the $200 price range which might be a little better, while still being affordable. Still, there’s no guarantee that these won’t use a similar cheap (and trouble-prone) wifi module. It could be that the power supplied to the daughter board by the motherboard and, indirectly, the AC adapter, is poorly regulated and may be contributing to early failure, but who knows!?

So as I mulled over spending another 35 bucks, I thought about something that had intrigued me the first time around…time for some AustinLightGuy hacking!

The description of the daughterboard on one or more sites is typically something similar to “VIA VNT6656  USB Wireless LAN Module”. Hmmm…USB… Clearly, the 4-wire jumper connecting these things to the motherboards is just a USB connection! Digging a little deeper into the specs, I also found this: “The VT6656 WLAN Controller chip on the VNT6656 USB WiFi Module supports all major Microsoft Windows and Linux operating systems.” If you examine the chip on the daughterboard, it is, in fact, a VIA VT6656, and apparently very common wifi chipset! So i got to thinking, ‘well, what if I just bought the cheapest USB wifi adapter I can find that sports the VT6656 chipset, and the tear it open?’

That’s what I did. I bought this USB stick on ebay (advertised as a “54Mbps Wireless USB Adapter For DELL Latitude, INSPIRON & XPS Laptops”, as an FYI, since I assume the link won’t last forever). It was $9.99 with free shipping. When it arrive a few days later, I immediately removed the one screw holding the case closed, and opened it up. The result is actually comical! Here are two photos showing the camera daughter board next to the wifi USB stick board.

Camera daughterboard (left) next to USB WiFi stick (right)

Camera daughterboard next to USB WiFi stick – reverse

As you can see, these boards are practically identical! Even then component layout is very, very similar. My guess would be that anyone who want to knock out a wifi module just implements one based on a “Typical Application” diagram supplied by then vendor, VIA, or something like that. Anyway, this is clearly hackable.

First, I figured out which wires were which on the camera jumper by testing voltages with my multimeter. I came up with this pinout:USB Jumper Pinout

Next, I figured out which were the corresponding pins on the USB stick by comparing the connector to a standard USB connector pinout.

USB module pins


Piece of cake. Now I just removed the USB connector from the wifi stick, cut the connector of the jumper and soldered the wire right to the stick. (Actually, I first fooled with trying to transplant the micro connector from the original daughterboard, but this surface-mount stuff is really tiny and fragile and I eventually gave up in favor of the brute force approach : )

Antenna wire soldered to antenna trace on USB stick and ground.

Antenna wire soldered to antenna trace on USB stick and ground.

Cool, now just to connect the antenna…DOH! The connector on the original module is male and the one on the stick is female! Oh well..after abandoning another effort to to reuse the old one, I just cut off the connector and soldered the antenna wire right to the board.  Next, I did an experimental power-up and, sure enough, it immediately connected to my wifi – Sweet Success! By the way, when these things boot up correctly, there is a little LED on board which lights up…goes off for just a moment about 10 or 20 seconds in to boot, then turns back on. It also flashes when in ‘discovery’ mode. On dead boards, it’s just remained on all the time.

So, I am now confident that I can repair dead wifi on both Foscam and Maygion cameras for just $10. Not a bad deal.

This entry was posted in Technical. Bookmark the permalink.

7 Responses to Repair the WiFi on Your Foscam FI8904, FI8905 or Maygion IP Camera

  1. bill fluney says:

    I have maygion ip camera, one wired & one wireless they work fine except on the master the cameras connect & diconnect by themself every minute or so. I have ddns sevice. can you help?

  2. Harry says:

    I wonder, would this also work with any other brand and chipset usb stick?
    Has anyone tried yet ?

  3. Doug Wyman says:

    In my desk is a WiFi board from a Foscam that was damaged by rain. I wanted the pin-out of the USB. Thank You for saving me the trouble. I have 3 Foscam FI8918W cameras and they seem quite durable. I have a Maygion and though I have not disassembled it, I doubt very much it is a relabeled Foscam. Very possibly a reverse engineered one but not a relabeled one. The Maygion has no travel limiters so it can’t find where it is aimed at boot up and arbitrarily sets it’s limits. To restore full travel I have to point it to appx center and reboot.

    • You’re probably right about it not being merely relabeled. All these consumer Wifi cameras (at least, the outdoor ones) bear an awfully suspicious resemblance to each other though. I’ve heard stories of situations where a company outsources building of an electronic board…or even the entire assembled a Chinese manufacturer. Their product comes out one door and identical off-brand clones come out ‘another door’.
      I’ve had less luck with replacing the WiFi recently. Another one went out, but a new daughterboard is not helping in this case. Wish I could get a look at the console output as the embedded server boots up to see if there’s any hint about what’s wrong – I think you can do this if you hook a ttl-level serial adapter up to the board, but that’s a lot of trouble.

  4. Sean Guerino says:

    Greetings, ALG. My company has a unique situation that brought me to this specific posting. We have a slew of failing cameras, and they ONLY have Wifi access. The cards in question are the exact model you’re using in the example, VT6656G6A40. The original distributor has been difficult to give us the “keys to the kingdom”, so to speak. So, inspired by your 4 pin solution, I decided to splice a male USB-A into the configuration above. I’m having limited success, and would appreciate any insight you may have. I’ve downloaded the specs from the manufacturer (I can email a copy if you’d like) and there are some discrepancies between what you have, and what is somewhat working for me. The pinout 1-6 reads as follows- 5V, D-, D+, (and then they reverse order, hard to explain) On/Off, LED, and GND. I’m getting it as far as “USB device not recognized”, so I feel I’m close. Any advice or suggestions to make this essentially a USB-plugged-in-Wifi would be fantastic.

  5. Just fixed a Hootoo IP Pan&Tilt camera (SKU 88-36206-001) in the way descibed above. WLAN chipset is also Ralink 2571WF, which you can find at a lot of WLAN USB sticks with so called RT73 chipset or under the original chipset name.
    The internal pinout to the doughterboard is like USB – no pins exchanged.

    THANKS a lot for this hint!

    • That’s awesome. The wifi seems to crap out on these consumer grade cameras a lot. Someone should start a blog just tracking which cameras use which chipset and whether they’re easily ‘hackable’.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s