Can't get into CFE mode

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3  Next
Author Message
nick323
DD-WRT Novice


Joined: 28 Mar 2015
Posts: 7

PostPosted: Sat Apr 21, 2018 22:14    Post subject: Reply with quote
boochi99 wrote:
Glad I could help.

Just verify your MAC's are correct.


The MACs matches. Thanks.
Sponsor
gasteadm
DD-WRT Novice


Joined: 25 Apr 2016
Posts: 3

PostPosted: Wed May 02, 2018 10:37    Post subject: Reply with quote
nick323, since i have the same problem with my r7000 cfe, can you tell me the steps you made to restore the stock CFE ?
I have a TTL cable handy and i also could use a R7000 stock cfe if someone could sent me one since i don't have a backup.
Thank you.
boochi99
DD-WRT User


Joined: 31 Jan 2012
Posts: 77
Location: North Carolina

PostPosted: Wed May 02, 2018 16:21    Post subject: Reply with quote
First install an old version of dd-wrt so that the mtd commands will work properly. It does not in current form. I originally used brainslayers first 2015 file.

I used telnet (in putty) and I entered these commands one at a time. The CFE is in the mtd0 folder.

1. mtd unlock mtd0

2. mtd write -f /tmp/stock-cfe.bin mtd0

3. erase nvram

4. reboot

Change "stock-cfe.bin" to the name of the cfe downloaded from the following post.

https://www.dd-wrt.com/phpBB2/viewtopic.php?p=919689

Finally update to current version and do a reset to factory defaults.
gasteadm
DD-WRT Novice


Joined: 25 Apr 2016
Posts: 3

PostPosted: Thu May 03, 2018 8:59    Post subject: Reply with quote
Thank you boochi99 !
cfe restored, dd-wrt saving settings at last.
Maybe this should be made a sticky for R7000 corrupted CFE's.
underwriter
DD-WRT Novice


Joined: 13 Sep 2018
Posts: 14

PostPosted: Thu Sep 20, 2018 22:56    Post subject: Reply with quote
In order to restore the CFE, what dd-wrt version do I need or must I be running? I ran mtd unlock mtd0 and it says mtd0 not supported.
boochi99
DD-WRT User


Joined: 31 Jan 2012
Posts: 77
Location: North Carolina

PostPosted: Fri Sep 21, 2018 5:58    Post subject: Reply with quote
I used brainslayer's first build from 2015. Probably any version from that year will do.
underwriter
DD-WRT Novice


Joined: 13 Sep 2018
Posts: 14

PostPosted: Fri Sep 21, 2018 7:37    Post subject: Reply with quote
I can't believe that something as simple as following your instructions would save me from this untold headache.
I have been breaking my head for the past one month trying to figure out what and how to save my R7000.
Thank you so much!
This should definitely be a Sticky.
theland1987
DD-WRT Novice


Joined: 01 Oct 2018
Posts: 30

PostPosted: Thu Oct 11, 2018 2:47    Post subject: Reply with quote
I seem to have ran into this same issue. Although I am on Kong firmware. DD-WRT v3.0-r36070M (05/31/18 )


Do I need to flash backwards to an older version of Kong first before I restore the CFE??????
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1447
Location: Belgrade

PostPosted: Thu Oct 11, 2018 7:25    Post subject: Re: Can't get into CFE mode Reply with quote
nick323 wrote:
I rapidly pressed CTRL+C and no luck getting it to work. I've tried many different patterns of pressing it.



Code:
Baud: 115200
Data bits: 8
Stop Bits: 1
Parity: none
Flow control: None


This is very important to put Flow control and Hardware control to NONE
simplez
DD-WRT Novice


Joined: 04 Nov 2018
Posts: 3

PostPosted: Wed Nov 21, 2018 21:58    Post subject: Reply with quote
Top man. Fixed my issue.

You do need older version of kong like you say

Thanks mate

boochi99 wrote:
I used telnet and I entered these commands one at a time. The CFE is in the mtd0 folder.

1. mtd unlock mtd0

2. mtd write -f /tmp/stock-cfe.bin mtd0

3. erase nvram

4. reboot
apvm
DD-WRT User


Joined: 13 May 2012
Posts: 156

PostPosted: Thu Nov 29, 2018 22:18    Post subject: Reply with quote
boochi99 wrote:
I used brainslayer's first build from 2015. Probably any version from that year will do.


Thanks, just fixed my r7000.
problem_child
DD-WRT Novice


Joined: 10 Feb 2019
Posts: 3

PostPosted: Sun Feb 10, 2019 2:16    Post subject: Reply with quote
Hi guys,

1st of all thank you all for the help and hints you've put in this topic. I also have the same case of using Merlin and then the NVRAM erase on DD WRT (any version).

Anyhow, I'm using:
- this CP2102 USB to TTL Converter: https://www.amazon.de/gp/product/B0757FQ5CX/ref=ppx_yo_dt_b_asin_title_o06__o00_s00?ie=UTF8&psc=1
- Windows 7 on one PC combined with https://www.compuphase.com/software_termite.htm as I can't get putty to work (click on open, nothing happens)
- Ubuntu 18.10 on 2nd PC combined with minikom and picocom
- Netgear r7000 running the 1st released dd wrt in 2015

I do get the serial communication working and I do see the netgear boot procedure but whenever I try to send the CTRL + C (or the ASCI ^C / HEX 03) nothing happens.

This tool (termite) even has an auto-reply function (see screenoshot: http://prntscr.com/mizz8o) with several traps to send the CTRL + C but nothing works!

We can eliminate that something is wrong withe the USB to TTL cables as I've successfully communicated with the 2 PCs (sending plain text or the famous CTRL + C) but netgear doesn't seem to respond to the command.

I would appreciate any help!
problem_child
DD-WRT Novice


Joined: 10 Feb 2019
Posts: 3

PostPosted: Sun Feb 10, 2019 2:22    Post subject: Reply with quote
here is the C/P of the communication with Netgear, the [03] is the CTRL + C command I send automatically via Terimte:

[00]Digital core power voltage set to 1.0V
Decompressing...done
Digital core power voltage set to 1.0V

SHMOO VER 1.13

PKID07DC06011801080000000000001A103F01000000

S300001AF
00001110


RDLYW0 00000004

RDENW0 00000029

RDQSW0

0000000000111111111122222222223333333333444444[03]444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 --+++++++++++++++++++++++X+++++++++++++++++++++++---------------
01 --------++++++++++++++++++++++++X+++++++++++++++++++++++--------
02 -------++++++++++++++++++++++X+++++++++++++++++++++-------------
03 ----+++++++++++++++++++++++X++++++++++++++++++++++--------------
04 -++++++++++++++++++++++X++++++++++++++++++++++------------------
05 -----++++++++++++++++++++++++X+++++++++++++++++++++++-----------
06 ---++++++++++++++++++++++X++++++++++++++++++++++----------------
07 -------+++++++++++++++++++++++X+++++++++++++++++++++++----------
08 -----++++++++++++++++++++++X++++++++++++++++++++++--------------
09 -----------+++++++++++++++++++++++X+++++++++++++++++++++++------
10 -------+++++++++++++++++++++++X++++++++++++++++++++++-----------
11 -----------+++++++++++++++++++++++X++++++++++++++++++++++-------
12 ----+++++++++++++++++++++++X+++++++++++++++++++++++-------------
13 -----------++++++++++++++++++++++X++++++++++++++++++++++--------
14 ------++++++++++++++++++++++++X+++++++++++++++++++++++----------
15 -----------++++++++++++++++++++++X++++++++++++++++++++++--------


P[00][00][00]W0

0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 ---++++++++++++++++++++++++X+++++++++++++++++++++++-------------
01 --------+++++++++++++++++++++++++X++++++++++++++++++++++++------
02 ------+++++++++++++++++++++++X++++++++++++++++++++++------------
03 ----++++++++++++++++++++++++X++++++++++++++++++++++++-----------
04 -++++++++++++++++++++++++X+++++++++++++++++++++++---------------
05 -----+++++++++++++++++++++++++X++++++++++++++++++++++++---------
06 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
07 ------+++++++++++++++++++++++++X+++++++++++++++++++++++++-------
08 -----++++++++++++++++++++++X++++++++++++++++++++++--------------
09 -----------++++++++++++++++++++++++X++++++++++++++++++++++++----
10 --------+++++++++++++++++++++++X++++++++++++++++++++++----------
11 -----------++++++++++++++++++++++++X+++++++++++++++++++++++-----
12 ----+++++++++++++++++++++++X+++++++++++++++++++++++-------------
13 ------------++++++++++++++++++++++X++++++++++++++++++++++-------
14 ------++++++++++++++++++++++++X++++++++++++++++++++++++---------
15 -----------+++++++++++++++++++++++X++++++++++++++++++++++-------


N[00][00][00]W0

0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 -++++++++++++++++++++++++X+++++++++++++++++++++++---------------
01 -------++++++++++++++++++++++++X++++++++++++++++++++++++--------
02 -----+++++++++++++++++++++++X++++++++++++++++++++++-------------
03 --++++++++++++++++++++++++X+++++++++++++++++++++++--------------
04 +++++++++++++++++++++++X++++++++++++++++++++++------------------
05 ---+++++++++++++++++++++++++X++++++++++++++++++++++++-----------
06 -+++++++++++++++++++++++X+++++++++++++++++++++++----------------
07 -----++++++++++++++++++++++++X++++++++++++++++++++++++----------
08 ---++++++++++++++++++++++++X+++++++++++++++++++++++-------------
09 ----------++++++++++++++++++++++++X+++++++++++++++++++++++------
10 ------+++++++++++++++++++++++X+++++++++++++++++++++++-----------
11 ----------+++++++++++++++++++++++X+++++++++++++++++++++++-------
12 ---++++++++++++++++++++++++X++++++++++++++++++++++++------------
13 ----------+++++++++++++++++++++++X++++++++++++++++++++++--------
14 -----++++++++++++++++++++++++X+++++++++++++++++++++++-----------
15 ---------+++++++++++++++++++++++X+++++++++++++++++++++++--------


WRDQW0

0000000000111111111122222222223333333333444444444455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 +++++++++++++++++++++X+++++++++++++++++++++------+++++++++++[03]+++-
01 +++++++++++++++++++++++X++++++++++++++++++++++------+++++++++++-
02 ++++++++++++++++++++++X+++++++++++++++++++++-----++++++++++++++-
03 +++++++++++++++++++++X+++++++++++++++++++++------++++++++++++++-
04 ++++++++++++++++++++X+++++++++++++++++++----------+++++++++++++-
05 ++++++++++++++++++++++X++++++++++++++++++++++----++++++++++++++-
06 ++++++++++++++++++++X+++++++++++++++++++---------++++++++++++++-
07 +++++++++++++++++++++++X++++++++++++++++++++++---++++++++++++++-
08 +++++++++++++++++++++X++++++++++++++++++++--------+++++++++++++-
09 ++++++++++++++++++++++X++++++++++++++++++++++----------++++++++-
10 +++++++++++++++++++++X+++++++++++++++++++++-------+++++++++++++-
11 -++++++++++++++++++++++X+++++++++++++++++++++----------++++++++-
12 +++++++++++++++++++++X+++++++++++++++++++++------++++++++++++++-
13 ++++++++++++++++++++++X++++++++++++++++++++++---------+++++++++-
14 ++++++++++++++++++++++X++++++++++++++++++++++-----+++++++++++++-
15 ++++++++++++++++++++++X++++++++++++++++++++++--------++++++++++-


WRDMW0 00000021
WRDMW0 00000021

[03][03]
ADDR

00000000001111111111222222222233333333334444444[03]44455555555556666
0123456789012345678901234567890123456789012345678901234567890123
00 +++++++++++++++++S+++++++++++++X++++++++++++++++++++++++++++++++

Decompressing...done


CFE for Foxconn Router R7000 version: v1.0.22
Build Date:[03] Wed Mar 19 11:14:20 CST 2014
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size [03][03][03]= 524288(0x80000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
et1: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes

Device eth0: hwaddr A0-40-A0-89-9D-E7, ipaddr 192.168.1.1, mask 255.255.255.0
gatewa[03][03]y not set, nameserver not set
Checking crc...
problem_child
DD-WRT Novice


Joined: 10 Feb 2019
Posts: 3

PostPosted: Sun Feb 10, 2019 18:38    Post subject: Reply with quote
also, what is quite strange is that the wiring to the UART port on the router motherboard is different than on the tutorial as presented here:

https://www.myopenrouter.com/article/how-debrick-or-recover-netgear-r7000-r6300v2-or-r6250-wi-fi-routers

basically, the GND is the 4th pin (if you count from left of the metal plate) while in the tutorial it is the 2nd pin.. I got my current setup by trial and error and this is the only way that I got the read-out on the serial port when the router boots.

jerknerkel
DD-WRT Novice


Joined: 15 Mar 2019
Posts: 2

PostPosted: Fri Mar 15, 2019 3:49    Post subject: Reply with quote
Hey everyone,

I'm having the same issue with factory defaulting coming from Merlin.

I'm trying to login with Putty via Telnet (I've only used putty once before) and it's asking me for a username and password, however the ones I set for the default router login aren't working?

Does anyone know the default username / password when using telnet?

I haven't flashed to an older DDwrt just yet and I thought I'd see if I could even get in first (if I had any hope of fixing it).

I've just got the R7000 setup with dd-wrt exactly how I want it with a guest network and vlan on an AP mode setup. Then this!

Does Boochi's method bypass the need for a TTL cable? or is this the steps you need to take after you've got the TTL cable plugged in?
If anyone cares to explain in more details to a noob the steps for Boochi's fix I would much appreciate that.

edit: just got in via Telnet, the username is "root" but the admin password is still the one you use.
Goto page Previous  1, 2, 3  Next Display posts from previous:    Page 2 of 3
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum