Full unbrick tutorial for TP-Link TL-WR941ND router???

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware
Goto page Previous  1, 2, 3
Author Message
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7632

PostPosted: Sun Dec 05, 2010 2:21    Post subject: Reply with quote
erreterr wrote:
Always kernel panic and doesn't boot up completely through TFTP protocol.


An error like this:
Uncompressing Kernel Image ... Error: Bad gzipped data
GUNZIP ERROR - must RESET board to recover

is an error with the kernel, corrupt packed data or data which is not gzipped.

A Kernel panic is likely to be from the kernel not being able to find the rootfs, ie the kernel is booting fine and from the correct address but an error later on when attempting to access the rootfs.

I suppose then that the TP-Link firmware upgrade files are not compatible for booting via U-Boot's tftpboot.
There is probably a clue in the boot log between kernel start and the panic but I haven't seen any such log from you so I don't have much to go on.

_________________
Kernel panic: Aiee, killing interrupt handler!
Sponsor
erreterr
DD-WRT Novice


Joined: 15 Oct 2010
Posts: 41

PostPosted: Mon Apr 04, 2011 21:10    Post subject: Reply with quote
I have recovered my router. Procedure is below:

The only chance to revive the TL-WR941 router with Intel Flash chip is via Serial port. For serial port pinouts you can find plenty of pictures. For cable use Nokia Ca-42. cable or something like that. Files you can find on google. Just copy and paste the complete filename. Only 2 files are needed.

1. Start the board:

> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds

2. Tpye 'tpl' here, so you can go into the CLI of the bootloader.

> Autobooting in 1 secondsar7100>
> ar7100>

3. Setup the IP addresses according to your setup

> ar7100> setenv serverip 192.168.1.254; setenv ipaddr 192.168.1.1

4. Load the attached initramfs image via TFTP, and boot that with the following
command:

> ar7100> tftp 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin; bootm 0xa0800000
> set link to 100M full by lqm.
> dup 1 speed 100
> Using eth0 device
> TFTP from server 192.168.1.254; our IP address is 192.168.1.1
> Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
> Load address: 0xa0800000
> Loading: #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> ###########################################################
> done
> Bytes transferred = 3297007 (324eef hex)
> ## Booting image at a0800000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...

5. Wait until the kernel boots:

> Linux version 2.6.37-rc4 (juhosg@idared) (gcc version 4.3.3 (GCC) ) #3 Wed Dec 1 18:52:15 CET 2010
> bootconsole [early0] enabled
> CPU revision is: 00019374 (MIPS 24Kc)
> Atheros AR9132 rev 2, CPU:400.000 MHz, AHB:100.000 MHz, DDR:400.000 MHz
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> <...>
> ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
> nf_conntrack version 0.5.0 (460 buckets, 1840 max)
> ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
> Initializing USB Mass Storage driver...
> usbcore: registered new interface driver usb-storage
> USB Mass Storage support registered.

6. Press <Enter> here.

> BusyBox v1.17.3 (2010-11-26 20:05:50 CET) built-in shell (ash)
> Enter 'help' for a list of built-in commands.
>
> _______ ________ __
> | |.-----.-----.-----.| | | |.----.| |_
> | - || _ | -__| || | | || _|| _|
> |_______|| __|_____|__|__||________||__| |____|
> |__| W I R E L E S S F R E E D O M
> KAMIKAZE (bleeding edge, r24196) ------------------
> * 10 oz Vodka Shake well with ice and strain
> * 10 oz Triple sec mixture into 10 shot glasses.
> * 10 oz lime juice Salute!
> ---------------------------------------------------
> root@OpenWrt:/#

7. Download the original firmware image into /tmp via wget.

> root@OpenWrt:/# cd tmp
> root@OpenWrt:/tmp# wget ftp://192.168.1.254:2121/openwrt/wr941nv2_en_3_11_8_up\(100609\).bin
> Connecting to 192.168.1.254:2121 (192.168.1.254:2121)
> wr941nv2_en_3_11_8_u 100% |*******************************| 3840k 00:00:00 ETA
> root@OpenWrt:/#

8. Write that into the firmware partition with the mtd command:

> root@OpenWrt:/tmp# mtd write wr941nv2_en_3_11_8_up\(100609\).bin firmware
> Unlocking firmware ...
>
> Writing from wr941nv2_en_3_11_8_up(100609).bin to firmware ...
> root@OpenWrt:/tmp#

9. Reboot the device:

> root@OpenWrt:/tmp# reboot

10. Then the board should boot into the original firmware:

> root@OpenWrt:/tmp# eth0: link down
> br-lan: port 1(lan1) entering forwarding state
> device eth0 left promiscuous mode
> device lan4 left promiscuous mode
> br-lan: port 4(lan4) entering disabled state
> device lan3 left promiscuous mode
> br-lan: port 3(lan3) entering disabled state
> device lan2 left promiscuous mode
> br-lan: port 2(lan2) entering disabled state
> device lan1 left promiscuous mode
> br-lan: port 1(lan1) entering disabled state
> lan1: link down
> Restarting system.
>
>
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds## Booting image at bf020000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
>
> Linux version 2.6.15--LSDK-6.1.1.40 gcc version 3.4.4 #1 Tue Jun 1 15:13:49 CST 2010
> flash_size passed from bootloader = 8
> CPU revision is: 00019374
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> Built 1 zonelists
> Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init
> Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
> Primary data cache 32kB, 4-way, linesize 32 bytes.
> Synthesized TLB refill handler (20 instructions).
> Synthesized TLB load handler fastpath (32 instructions).
> Synthesized TLB store handler fastpath (32 instructions).
> Synthesized TLB modify handler fastpath (31 instructions).
> ...

And read and read again the threads located here how I did serial console connection. https://forum.openwrt.org/viewtopic.php?id=18354&p=6

Procedure courtesy of Gabor Juhos from OpenWRT developing team

And the router is alive again...
gkurel
DD-WRT Novice


Joined: 06 May 2011
Posts: 1

PostPosted: Fri May 06, 2011 10:32    Post subject: tpl command not working? Reply with quote
Hi All,
sorry if i'm not posting this question at the right place since i have TL-WR741ND router, but i think this topic covers almost the same problem as i have.
I managed to brick my router and get following output on and on while connected to serial console:


U-Boot 1.1.4 (Nov 16 2009 - 09:05:59)

AP91 (ar7240) U-boot
DRAM:
sri
#### TAP VALUE 1 = a, 2 = a
32 MB
id read 0x100000ff
flash size 4194304, sector count = 64
Flash: 4 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: ag7240_enet_initialize...
No valid address in Flash. Using fixed address
: cfg1 0xf cfg2 0x7014
eth0: 00:03:7f:09:0b:ad
eth0 up
No valid address in Flash. Using fixed address
: cfg1 0xf cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
ATHRS26: resetting s26
ATHRS26: s26 reset done
eth1 up
eth0, eth1
Autobooting in 1 seconds
## Booting image at 9f020000 ...
Uncompressing Kernel Image ... Error: Bad gzipped data
GUNZIP ERROR - must RESET board to recover

Resetting...


I read a lot about unbricking, and i know i need to type "tpl" just after Autobooting in 1 seconds message. However, either "tpl" is not being sent to router or router does not react on it. It just continues to reboot. I am using prolific 2303 cable, but not exactly Nokia's CA-42, but from some old SonyEricsson mobile. I can't find CA-42 cable, otherwise i would try replacing the cable, but i do receive output from routers serial port... I also tried with 10k resistor connected between VCC and TX pin on routers serial port and VCC and RX pin (again, on routers serial port). No effect.
Does anyone have any suggestions? Is cable causing the problem?
Thanks in advance.
szj1991xp
DD-WRT Novice


Joined: 22 Jun 2011
Posts: 3

PostPosted: Wed Jun 22, 2011 10:59    Post subject: Reply with quote
Hello everyone,
I have WR841 Router, and meanwhile I updating the firmware the electricity got cut off and then when I accessed the RS232 with the cable it booted, I tried to write a flash on the address of the firmware but ever since it didn’t boot and I bought a WR1043 instead and I tried to write a firmware on the WR841 flash but I don’t know exactly its address, and this is what I got:
erase 0xbf020000 +7c0000
tftpboot 0x81000000 code.bin
cp.b 0x81000000 0xbf020000 0x7c0000
So I thought of doing this, while it was working or on function, I dispatched the flash for the WR1043 and I’ve installed it on the WR841, I managed to write the WR841 and the file on the flash (wr841n_en_3_4_5_up_boot(090226) but it doesn’t boot because I wrote it on the wrong address, the file includes the boot sector (U-BOOT 1.1.4 feb 6 2009). So on what kind of address do I have to write it, can anyone help me out?
szj1991xp
DD-WRT Novice


Joined: 22 Jun 2011
Posts: 3

PostPosted: Tue Jun 28, 2011 11:02    Post subject: Reply with quote
See this Rolling Eyes :
http://www.szj1991.co.nr/wr841.html

How to install wireless driver for wr841 ? Question
Migelo
DD-WRT Novice


Joined: 07 Aug 2011
Posts: 1

PostPosted: Sun Aug 07, 2011 10:49    Post subject: Reply with quote
Hi everyone, I'm new to this forum and I wanted so say helo before jumping to the question. Very Happy

I just flashed my TL-WR741ND with DD-WRT with the following procedure:

-30/30/30 reset

-factory to DD-WRT

-in web interface I flashed tl-wrtnd-webflash.bin (idk why I didn't read that this was unnecessary, to make things worse, I didn't do any kind of reset)

-after waiting for 5 minutes I couldn't access 192.168.1.1 so I set my PC a static IP and pinged my router which responded

-I connected to it via TELNET and it worked, so after another 30/30/30 restart I was able to log in the webinterface and it's working now, the only problem is, that SYS light isn't lit up. Is that the way it's supposed to be?
schokolada1
DD-WRT Novice


Joined: 13 Jan 2011
Posts: 8

PostPosted: Fri Aug 12, 2011 20:50    Post subject: Reply with quote
erreterr wrote:
I have recovered my router. Procedure is below:

The only chance to revive the TL-WR941 router with Intel Flash chip is via Serial port. For serial port pinouts you can find plenty of pictures. For cable use Nokia Ca-42. cable or something like that. Files you can find on google. Just copy and paste the complete filename. Only 2 files are needed.

1. Start the board:

> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds

2. Tpye 'tpl' here, so you can go into the CLI of the bootloader.

> Autobooting in 1 secondsar7100>
> ar7100>

3. Setup the IP addresses according to your setup

> ar7100> setenv serverip 192.168.1.254; setenv ipaddr 192.168.1.1

4. Load the attached initramfs image via TFTP, and boot that with the following
command:

> ar7100> tftp 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin; bootm 0xa0800000
> set link to 100M full by lqm.
> dup 1 speed 100
> Using eth0 device
> TFTP from server 192.168.1.254; our IP address is 192.168.1.1
> Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
> Load address: 0xa0800000
> Loading: #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> ###########################################################
> done
> Bytes transferred = 3297007 (324eef hex)
> ## Booting image at a0800000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...

5. Wait until the kernel boots:

> Linux version 2.6.37-rc4 (juhosg@idared) (gcc version 4.3.3 (GCC) ) #3 Wed Dec 1 18:52:15 CET 2010
> bootconsole [early0] enabled
> CPU revision is: 00019374 (MIPS 24Kc)
> Atheros AR9132 rev 2, CPU:400.000 MHz, AHB:100.000 MHz, DDR:400.000 MHz
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> <...>
> ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
> nf_conntrack version 0.5.0 (460 buckets, 1840 max)
> ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
> Initializing USB Mass Storage driver...
> usbcore: registered new interface driver usb-storage
> USB Mass Storage support registered.

6. Press <Enter> here.

> BusyBox v1.17.3 (2010-11-26 20:05:50 CET) built-in shell (ash)
> Enter 'help' for a list of built-in commands.
>
> _______ ________ __
> | |.-----.-----.-----.| | | |.----.| |_
> | - || _ | -__| || | | || _|| _|
> |_______|| __|_____|__|__||________||__| |____|
> |__| W I R E L E S S F R E E D O M
> KAMIKAZE (bleeding edge, r24196) ------------------
> * 10 oz Vodka Shake well with ice and strain
> * 10 oz Triple sec mixture into 10 shot glasses.
> * 10 oz lime juice Salute!
> ---------------------------------------------------
> root@OpenWrt:/#

7. Download the original firmware image into /tmp via wget.

> root@OpenWrt:/# cd tmp
> root@OpenWrt:/tmp# wget ftp://192.168.1.254:2121/openwrt/wr941nv2_en_3_11_8_up\(100609\).bin
> Connecting to 192.168.1.254:2121 (192.168.1.254:2121)
> wr941nv2_en_3_11_8_u 100% |*******************************| 3840k 00:00:00 ETA
> root@OpenWrt:/#

8. Write that into the firmware partition with the mtd command:

> root@OpenWrt:/tmp# mtd write wr941nv2_en_3_11_8_up\(100609\).bin firmware
> Unlocking firmware ...
>
> Writing from wr941nv2_en_3_11_8_up(100609).bin to firmware ...
> root@OpenWrt:/tmp#

9. Reboot the device:

> root@OpenWrt:/tmp# reboot

10. Then the board should boot into the original firmware:

> root@OpenWrt:/tmp# eth0: link down
> br-lan: port 1(lan1) entering forwarding state
> device eth0 left promiscuous mode
> device lan4 left promiscuous mode
> br-lan: port 4(lan4) entering disabled state
> device lan3 left promiscuous mode
> br-lan: port 3(lan3) entering disabled state
> device lan2 left promiscuous mode
> br-lan: port 2(lan2) entering disabled state
> device lan1 left promiscuous mode
> br-lan: port 1(lan1) entering disabled state
> lan1: link down
> Restarting system.
>
>
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds## Booting image at bf020000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
>
> Linux version 2.6.15--LSDK-6.1.1.40 gcc version 3.4.4 #1 Tue Jun 1 15:13:49 CST 2010
> flash_size passed from bootloader = 8
> CPU revision is: 00019374
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> Built 1 zonelists
> Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init
> Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
> Primary data cache 32kB, 4-way, linesize 32 bytes.
> Synthesized TLB refill handler (20 instructions).
> Synthesized TLB load handler fastpath (32 instructions).
> Synthesized TLB store handler fastpath (32 instructions).
> Synthesized TLB modify handler fastpath (31 instructions).
> ...

And read and read again the threads located here how I did serial console connection. https://forum.openwrt.org/viewtopic.php?id=18354&p=6

Procedure courtesy of Gabor Juhos from OpenWRT developing team

And the router is alive again...


Hi erreterr,I´m now 2 days busy trying your advice to repair my 941nd 3.2 with intel flash .
I use Hyperterminal in WinXp and Putty in WinXp also Tftp32 v4.0.The uImage I got from
http://www.ozo.com/airo/openwrt/firmware/latest/2.6/ar71xx
I have a serial Siemens ip40 cable and a Nokia ca42 cable,but with both it stops after sending the uImage to the Router and change to temp Directory and try to wget via Ftp there is no Network connection.
Please have a look to this Configuration,is there something wrong?
U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)

AP81 (ar7100) U-boot
DRAM:
sri
32 MB
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
No valid address in Flash. Using fixed address
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Autobooting in 1 secondsar7100> setenv serverip 192.168.1.169; setenv ipaddr 192.168.1.10
ar7100> tftpboot 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin; bootm 0xa0800000
set link to 100M full by lqm.
dup 1 speed 100
Using eth0 device
TFTP from server 192.168.1.169; our IP address is 192.168.1.10
Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
Load address: 0xa0800000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
###########
done
Bytes transferred = 1718574 (1a392e hex)
## Booting image at a0800000 ...
Uncompressing Kernel Image ... OK

Starting kernel ...

Linux version 2.6.33.3 (alex@motard) (gcc version 4.4.3 (GCC) ) #2 Sat May 8 08:
13:11 EEST 2010
bootconsole [early0] enabled
CPU revision is: 00019374 (MIPS 24Kc)
Atheros AR9132 rev 2, CPU:400.000 MHz, AHB:100.000 MHz, DDR:400.000 MHz
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0x00000000 -> 0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
Kernel command line: board=TL-WR941ND rootfstype=squashfs,yaffs,jffs2 noinitrd
console=ttyS0,115200
PID hash table entries: 128 (order: -3, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 29060k/32768k available (1869k kernel code, 3708k reserved, 350k data, 7
16k init, 0k highmem)
NR_IRQS:56
Calibrating delay loop... 266.24 BogoMIPS (lpj=1331200)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
MIPS: machine is TP-LINK TL-WR941ND
bio: create slab <bio-0> at 0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006
Red Hat, Inc.
msgmni has been set to 56
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
console [ttyS0] enabled, bootconsole disabled
console [ttyS0] enabled, bootconsole disabled
Atheros AR71xx SPI Controller driver version 0.2.4
m25p80 spi0.0: found 320s33b, expected m25p80
m25p80 spi0.0: 320s33b (8192 Kbytes)
Searching for RedBoot partition table in spi0.0 at offset 0x7e0000
Searching for RedBoot partition table in spi0.0 at offset 0x7f0000
No RedBoot partition table detected in spi0.0
spi0.0: no WRT160NL signature found
Creating 5 MTD partitions on "spi0.0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000003f0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
split_squashfs: no squashfs found in "spi0.0"
0x0000003f0000-0x000000400000 : "art"
0x000000020000-0x0000003f0000 : "firmware"
ag71xx_mdio: probed
eth0: Atheros AG71xx at 0xb9000000, irq 4
Atheros AR71xx hardware watchdog driver version 0.1.0
TCP westwood registered
NET: Registered protocol family 17
Freeing unused kernel memory: 716k freed
eth0: link up (100Mbps/Full duplex)
- preinit -
Press the [f] key and hit [enter] to enter failsafe mode

- regular preinit -
eth0: link down
- init -

Please press Enter to activate this console. eth0: link up (100Mbps/Full duplex)




BusyBox v1.16.1 (2010-05-07 17:50:49 EEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
KAMIKAZE (bleeding edge, r21397) ------------------
* 10 oz Vodka Shake well with ice and strain
* 10 oz Triple sec mixture into 10 shot glasses.
* 10 oz lime juice Salute!
---------------------------------------------------
root@OpenWrt:/# cd tmp
root@OpenWrt:/tmp# wget ftp://192.168.1.169:2121/openwrt/wr941nv2_en_3_11_8_up\(100609\).bin
Connecting to 192.168.1.169:2121 (192.168.1.169:2121)
wget: can't connect to remote host (192.168.1.169): Network is unreachable
root@OpenWrt:/tmp#

Thanks for reading
schokolada
roby11
DD-WRT Novice


Joined: 02 Oct 2011
Posts: 1

PostPosted: Sun Oct 02, 2011 10:06    Post subject: Reply with quote
Hy
I have a zt_e f625 but don know the password , i connected to computer with a rs232 (web console is down) can access with telnet te 192.168.1.1 :
F625A
Login:
user is root , but password dont know
with rs232 at boot is this message:

U-Boot 1.2.0 (Feb 28 2011 - 15:44:48)

CPU : 449 MHz, 16k/16k I/D-Cache, BUS at 56 MHz
Board: ZXA10 DHome Series, Chip Version is A1
DRAM : 64 MB
Flash: 16 MB
Net : SMII EMAC1

Type 'help' or '?' for on-line help

1 - Load Version using TFTP Protocol
2 - Upgrade Boot using TFTP Protocol

Hit enter to stop autoboot: 0
And I have pressed enter
Hit enter to stop autoboot: 0
=> help
? - alias for 'help'
askenv - get environment variables from stdin
bootm - boot application image from memory
cp - memory copy
cpureg - Read form or write to dedicated register
downver - download image file from TFTP server
erase - erase FLASH memory
go - start application at address 'addr'
help - print online help
ioctl - configure GPIOs & CPLD register
loady - load binary file over serial line (ymodem mode)
md - memory display
phyreg - Perform READ/WRITE of PHY internal register
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
tftp - boot image via network using TFTP protocol
=>




this is partitions at this ont

0x00000000-0x01000000 : "whole flash"
0x00c00000-0x00c60000 : "bootloader"
0x00fa0000-0x00fe0000 : "parameter tags"
0x00d20000-0x00e60000 : "kernel0"
0x00000000-0x00600000 : "rootfs0"
0x00c60000-0x00d20000 : "usercfg"
0x00e60000-0x00fa0000 : "kernel1"
0x00600000-0x00c00000 : "rootfs1"
0x00fe0000-0x01000000 : "others"

At this adress is the user config partition : 0x00c60000-0x00d20000 : "usercfg"

Does anyone know how to read the password from flash?

i use this command at uboot to read the adress : md 0x00c60000 400

sorry for my bad english
Linuxser
DD-WRT Novice


Joined: 24 Nov 2012
Posts: 6

PostPosted: Mon Dec 17, 2012 1:42    Post subject: Reply with quote
Hello,

After reading all this tutorial and related links...

Couple week ago I bricked this router by testing openwrt, the same that comes with reset button disabled and no warnings Mad

Router does not boot and current router is

Power light blinking
Sys light blinking
Lan in use blinking

I also tried by hit QSS just after SYS light blinks and the led starts to blinks faster.

But no ping or telnet on 192.161.1.1 or 192.168.0.1

The only way is to go for Jtag cable?

Thanks in advance
Mtkr125
DD-WRT Novice


Joined: 05 Nov 2018
Posts: 6

PostPosted: Sat Nov 17, 2018 19:18    Post subject: Reply with quote
Hola
No function comand TPL
and rebooting
krste
DD-WRT Novice


Joined: 16 Mar 2019
Posts: 3

PostPosted: Sun Mar 17, 2019 12:59    Post subject: Reply with quote
Somebody help me.
It's going to go with me like this and I can not bricked me router tplink wr941nd ver. 3.6..
It only writes to me and does not go anymore, can anyone tell me where to go wrong?

AP81 (ar7100) U-boot
DRAM:
sri
32 MB
id read 0x100000ff
flash size 4MB, sector count = 64
Flash: 4 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
No valid address in Flash. Using fixed address
bsingle_phy = 0
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Autobooting in 1 seconds## Booting image at bf020000 ...
Uncompressing Kernel Image ... Error: Bad gzipped data
GUNZIP ERROR - must RESET board to recover

Autobooting in 1
ar7100>

ar7100> tftp 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin
set link to 100M full by lqm.
dup 1 speed 100
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
Load address: 0xa0800000
Loading 0x08
checksum bad
checksum bad
checksum bad
T T T T T T T T T T T
Retry count exceeded; starting again
set link to 100M full by lqm.
Using eth0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
Load address: 0xa0800000
Loading 0x08 T T T T T
Goto page Previous  1, 2, 3 Display posts from previous:    Page 3 of 3
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum