Posted: Fri Feb 11, 2011 3:38 Post subject: Re: TL-WR941ND back to original firmware
dvd741 wrote:
I thought about using dd-wrt then, since turning back doesn't seem to be possible, but after each power-interrupt / reboot all setting are lost...
I guess you have WR941ND v3.2 with the Intel flash chip which dd-wrt can't write.
Therefore it can't save settings and can't write any update files to flash.
Serial console is your only chance to debrick it. _________________ Kernel panic: Aiee, killing interrupt handler!
And where can i find the manual on that exactly?
(I don't have a cable of any kind & am an absolute noob @ hardware stuff like connecting the cable with the right connectors)
And is there any chance the intel chip will become writeable in the next days/weeks/months?
The only chance to revive the TL-WR941 router with Intel Flash chip is via Serial port. For serial port pinouts you can find plenty of pictures. For cable use Nokia Ca-42. cable or something like that. Files you can find on google. Just copy and paste the complete filename. Only 2 files are needed.
1. Start the board:
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds
2. Tpye 'tpl' here, so you can go into the CLI of the bootloader.
4. Load the attached initramfs image via TFTP, and boot that with the following
command:
> ar7100> tftp 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin; bootm 0xa0800000
> set link to 100M full by lqm.
> dup 1 speed 100
> Using eth0 device
> TFTP from server 192.168.1.254; our IP address is 192.168.1.1
> Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
> Load address: 0xa0800000
> Loading: #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> ###########################################################
> done
> Bytes transferred = 3297007 (324eef hex)
> ## Booting image at a0800000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
5. Wait until the kernel boots:
> Linux version 2.6.37-rc4 (juhosg@idared) (gcc version 4.3.3 (GCC) ) #3 Wed Dec 1 18:52:15 CET 2010
> bootconsole [early0] enabled
> CPU revision is: 00019374 (MIPS 24Kc)
> Atheros AR9132 rev 2, CPU:400.000 MHz, AHB:100.000 MHz, DDR:400.000 MHz
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> <...>
> ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
> nf_conntrack version 0.5.0 (460 buckets, 1840 max)
> ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
> Initializing USB Mass Storage driver...
> usbcore: registered new interface driver usb-storage
> USB Mass Storage support registered.
6. Press <Enter> here.
> BusyBox v1.17.3 (2010-11-26 20:05:50 CET) built-in shell (ash)
> Enter 'help' for a list of built-in commands.
>
> _______ ________ __
> | |.-----.-----.-----.| | | |.----.| |_
> | - || _ | -__| || | | || _|| _|
> |_______|| __|_____|__|__||________||__| |____|
> |__| W I R E L E S S F R E E D O M
> KAMIKAZE (bleeding edge, r24196) ------------------
> * 10 oz Vodka Shake well with ice and strain
> * 10 oz Triple sec mixture into 10 shot glasses.
> * 10 oz lime juice Salute!
> ---------------------------------------------------
> root@OpenWrt:/#
7. Download the original firmware image into /tmp via wget.
> root@OpenWrt:/# cd tmp
> root@OpenWrt:/tmp# wget ftp://192.168.1.254:2121/openwrt/wr941nv2_en_3_11_8_up\(100609\).bin
> Connecting to 192.168.1.254:2121 (192.168.1.254:2121)
> wr941nv2_en_3_11_8_u 100% |*******************************| 3840k 00:00:00 ETA
> root@OpenWrt:/#
8. Write that into the firmware partition with the mtd command:
> root@OpenWrt:/tmp# mtd write wr941nv2_en_3_11_8_up\(100609\).bin firmware
> Unlocking firmware ...
>
> Writing from wr941nv2_en_3_11_8_up(100609).bin to firmware ...
> root@OpenWrt:/tmp#
9. Reboot the device:
> root@OpenWrt:/tmp# reboot
10. Then the board should boot into the original firmware:
> root@OpenWrt:/tmp# eth0: link down
> br-lan: port 1(lan1) entering forwarding state
> device eth0 left promiscuous mode
> device lan4 left promiscuous mode
> br-lan: port 4(lan4) entering disabled state
> device lan3 left promiscuous mode
> br-lan: port 3(lan3) entering disabled state
> device lan2 left promiscuous mode
> br-lan: port 2(lan2) entering disabled state
> device lan1 left promiscuous mode
> br-lan: port 1(lan1) entering disabled state
> lan1: link down
> Restarting system.
>
>
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds## Booting image at bf020000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
>
> Linux version 2.6.15--LSDK-6.1.1.40 gcc version 3.4.4 #1 Tue Jun 1 15:13:49 CST 2010
> flash_size passed from bootloader = 8
> CPU revision is: 00019374
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> Built 1 zonelists
> Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init
> Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
> Primary data cache 32kB, 4-way, linesize 32 bytes.
> Synthesized TLB refill handler (20 instructions).
> Synthesized TLB load handler fastpath (32 instructions).
> Synthesized TLB store handler fastpath (32 instructions).
> Synthesized TLB modify handler fastpath (31 instructions).
> ...
Posted: Sun Mar 17, 2013 3:37 Post subject: TP-Link TL-WR941ND V3.2 router unbricked !
Hi all,
As for many others my router got bricked after a bad flash with an Open WRT firmware.
There is no easy way to recover your TP-Link TL-WR941ND V3.2 router....
Basically you have to open the router and solder to its PCB a USB to Serial TTL RS232 cable.
Using a serial port communicator software, a TFTP server and a FTP server you can manage to push the stock firmware back into the router via the serial cable.
A good thing to do once the router is working again is to replace that stock firmware with DD-WRT build 15778. That's because the original one keeps dropping the Wi-Fi connections (at least in my case).
Hello I can connect, but the Putty or serialUsb both give me asteric symbols and things like that and it goes on and restarting, try winXp and win7, I hope if anyone knows any solution
I have bricked TP-Link WR-941ND (ver. 3.6) and tried to revert back to the original firmware using your tutorial.
Connection via Serial is OK, but I when I type "tpl" and then turn on the router I got these non-sense symbols (tak a look at the video in the link below)
I also tried other methods with pushed WPS/reset button but without any success My router is in bootloop and all the LEDs are still blinking again and again...
Posted: Fri Nov 26, 2021 12:56 Post subject: wr491nd v3.2 all leds are always ON
hi, I follow to upgrade the firmware to my tp link TL-WR941ND v3.2 router via serial communication,
but after the upgrade it did not work at all LEDs are turned on all the time, also unable to go in setup using tpl command, is there any way to flash firmware something like pulling the flash memory and program it?
