*NEW* Linksys WRT54G2 Version 1

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next
Author Message
Howie69
DD-WRT User


Joined: 15 Dec 2006
Posts: 143

PostPosted: Fri Oct 31, 2008 3:40    Post subject: Reply with quote
I appreciate the vworkskiller software and drop in repalcement, but I still wonder about why not a jtag-only version first, so some of the more advanced users could use/test it?
Sponsor
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Tue Nov 25, 2008 2:47    Post subject: WRT54G2 Serial Console and other information Reply with quote
This information I am posting mostly came from me doing research and trying to load dd-wrt on the router.

WRT54G2 V1

Chipset:

BROADCOM, BCM5354KFBG 240Mhz


FLASH MEMORY: 2MB TOTAL

EN29LV160AB-70TCP - 16 MEGABIT (2048K X 8- BIT / 1024 K X 16-BIT) FLASH MEMORY - Eon Silicon Solution Inc.


RAM: 8MB TOTAL

HY57V281620FTP-H-C
128Mbit Synchronous DRAM based on 2M x 4Bank x16 I/O

************************************************************

This is the output from putty ttyS0:
VxWorks System Boot


Copyright 1984-2001 Wind River Systems, Inc.





CPU: WRT54G2
Version: VxWorks5.4.2
BSP version: 1.2/0
Creation date: Jan 9 2008, 20:17:03




Press any key to stop auto-boot...

[VxWorks Boot]: ?

? - print this list
@ - boot (load and go)
p - print boot params
c - change boot params
l - load boot file
g adrs - go to adrs
d adrs[,n] - display memory
m adrs - modify memory
f adrs, nbytes, value - fill memory
t adrs, adrs, nbytes - copy memory
e - print fatal exception
v - print version
B - change board data
S - show board data
C - clean sdram_ncdl
n netif - print network interface device address
$dev(0,procnum)host:/file h=# e=# b=# g=# u=usr [pw=passwd] f=#
tn=targetname s=script o=other
boot device: tffs=drive,removable file name: /tffs0/vxWorks
Boot flags:
0x02 - load local system symbols
0x04 - don't autoboot
0x08 - quick autoboot (no countdown)
0x20 - disable login security
0x40 - use bootp to get boot parameters
0x80 - use tftp to get boot image
0x100 - use proxy arp

available boot devices:Enhanced Network Devices
vl0 vl1 tffs

[VxWorks Boot]: p

boot device : tffs
unit number : 0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.10
user (u) : ????????
ftp password (pw) : admin
flags (f) : 0x20
target name (tn) : targetname

[VxWorks Boot]: S
magic: 57475635
cksum: 947e
bootcode version: 1000003
Model Name: WRT54G2
Hardware version: 1.3
config: 0000002b
Vendor Name: LINKSYS_en
Country: US
Serial Number: CSV01H2D1390
PIN Key: 33856728
pciid: ffff
wl0 : yes 00:1e:e5:59:66:7e
et0(vl0):yes 00:1e:e5:59:66:7c
vl1 : yes 00:1e:e5:59:66:7d
uart0: yes
uart1: no
sdram_ncdl: 0x0
[VxWorks Boot]: c

'.' = clear field; '-' = go to previous field; ^D = quit

boot device : tffs0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
inet on backplane (b):
host inet (h) : 192.168.1.10
gateway inet (g) :
user (u) : ????????
ftp password (pw) (blank = use rsh): admin
flags (f) : 0x20
target name (tn) : targetname
startup script (s) :
other (o) :

[VxWorks Boot]: C
clean sdram_ncdl ...done.

[VxWorks Boot]: d 0x80
000080:
Tlb Load Exception
Exception Program Counter: 0x808021c0
Status Register: 0x1000fc01
Cause Register: 0x80000008
Access Address : 0x00000080
Task: 0x80f950e0 "tBoot"

$0 = 0 t0 = 1000fc01 s0 = 80f95080 t8 = 0
at = 0 t1 = 1000fc00 s1 = 0 t9 = 0
v0 = 10 t2 = 4 s2 = 7f k0 = 0
v1 = 80f950e0 t3 = 0 s3 = 80 k1 = 0
a0 = 8089a618 t4 = 0 s4 = 0 gp = 808b7960
a1 = 80f94d48 t5 = 0 s5 = 0 sp = 80f94d38
a2 = 3 t6 = 0 s6 = 0 s8 = 7f
a3 = 154 t7 = 0 s7 = 0 ra = 808021c8
divlo = 80f9536 divhi = 0 sr = 1000fc01 pc = 808021c0
muxLoad failed!
save nvram...done


VxWorks System Boot


Copyright 1984-2001 Wind River Systems, Inc.





CPU: WRT54G2
Version: VxWorks5.4.2
BSP version: 1.2/0
Creation date: Jan 9 2008, 20:17:03




Press any key to stop auto-boot...

auto-booting...


boot device : tffs
unit number : 0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.10
user (u) : ????????
ftp password (pw) : admin
flags (f) : 0x8
target name (tn) : targetname

Can't load boot file!!

boot device : vl
unit number : 0
processor number : 0
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.11
flags (f) : 0x1000

Attached TCP/IP interface to vl0.
Attaching network interface lo0... done.

Management Mode vl
Warning: Required storage hook not installed.
Lease records will not be saved.
Warning: No DHCP server address cache! Later entries will not be saved.
0x80f950e0 (): dhcps: read DHCP ser1ver started.
entries from addr-pool database.
[DHCPD] addDhcpsEntry() LdsvIpStart=192.168.1.11 LdsvIpEnd=192.168.1.254
http init........

************************************************************

I copied part of this image from one I saw on this forum only because I have no camera, and my camera phone is better a phone and terrible as a camera. I scraped away the enamel coating over these traces to reveal clean copper jumper pads which I soldered wires to each and through trial and error found what works with my level converter setup.


************************************************************

Please can someone help me find the pinout for JTAG? I have never used JTAG, but I used ythe web interface to flash VxWorksPrep and now the router won['t take to any tftp uploads no matter what I set through the serial console or tftp settings. I just can't get VxWorksKiller to take. I assume I must use JTAG or buy a new router. The other set of Jumper pads in the top part of the image must be JTAG, so I will try and build a JTAG cable and solder connections to the other set of Jumper pads and see how it goes, I will be sure to keep my posts updated when I get more information. If anyone can help me with JTAG that would be great.

Thank you, Drploof



traces.jpg
 Description:
Serial Port Connections
 Filesize:  209.5 KB
 Viewed:  43025 Time(s)

traces.jpg



HY57V281620FTP.pdf
 Description:
RAM Datasheet

Download
 Filename:  HY57V281620FTP.pdf
 Filesize:  790.34 KB
 Downloaded:  1358 Time(s)


EN29LV160AB.pdf
 Description:
Flash Memory Datasheet

Download
 Filename:  EN29LV160AB.pdf
 Filesize:  410.85 KB
 Downloaded:  1028 Time(s)

Shawn360
DD-WRT Guru


Joined: 26 Jul 2008
Posts: 1237

PostPosted: Tue Nov 25, 2008 5:22    Post subject: Reply with quote
redhawk0 posted this in the pinouts guide.

Serial and JTAG on a WRT54G2 V1 unit. (new JTAG style connectors)

The pins can be cleaned of the green epoxy coating...with the 12 pin connector sandwiched on either side of the motherboard...and soldered on. The connector will still fit inside the radio's enclosure.

Also attached (in this picture) is the Serial Connector. 5 pin connector bent at a 30 degree angle so it will still fit inside the case...yet provide access to the +3.3V(pin1), Tx(Pin2), Rx(Pin3) and GND(Pin5) pins....pin4 is not connected to anything.

The JTAG connector is of normal pinout as any other Linksys unit...So is the Serial.

(we are working on JTAG recognition next...This device is currently not supported)

Hopefully, this will help someone else to connect with the same type of JTAG connection.


You would have to scrape the green epoxy off both sides and then solder both sides with a pinheader or solder your wires directly.

It's the same pinout as any of those Linksys WRT54G jtag cables which you can make or buy on Ebay. http://www.dd-wrt.com/phpBB2/viewtopic.php?t=38355&start=0
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Tue Nov 25, 2008 20:06    Post subject: JTAG Software recognition Reply with quote
Before I read the infor on connecting a header for JTAG I had assembled the simple JTAG cable using 4 100ohm resistors. It seems to work fine when I use the hairydairymaid debrick utility in linux, but unfortunatly the software does not recognize the chipset, is it the Broadcom chip or just the flash it does not recognise? Please help if any newer versions of a JTAG software utility to flash dd-wrt becomes available. Thank you so much. I connected the necessary pins on the top of the board for JTAG, and just scraped away some green enamel close to the pin headers on top and soldered on a ground, seems to work just the same.
Eko
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 5771

PostPosted: Tue Nov 25, 2008 20:14    Post subject: Re: JTAG Software recognition Reply with quote
drploof wrote:
Before I read the infor on connecting a header for JTAG I had assembled the simple JTAG cable using 4 100ohm resistors. It seems to work fine when I use the hairydairymaid debrick utility in linux, but unfortunatly the software does not recognize the chipset, is it the Broadcom chip or just the flash it does not recognise? Please help if any newer versions of a JTAG software utility to flash dd-wrt becomes available. Thank you so much. I connected the necessary pins on the top of the board for JTAG, and just scraped away some green enamel close to the pin headers on top and soldered on a ground, seems to work just the same.

http://www.dd-wrt.com/phpBB2/viewtopic.php?t=22655
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Wed Nov 26, 2008 1:57    Post subject: Flashing WRT54g2v1 Reply with quote
Ok I have tried everything, and now the router just has 4 lights and the power led on all the time and I can't access management mode, in fact I can seem to access the serial console at all. I tried reloading the BSP.BIN and CFE.BIN after erasing the wholeflash a few times, but nothing seems to work. The MAC address of the router should be: 001EE559667C

Here is some of the JTAG output:

root@deathstar:/home/drploof/Desktop/ddwrt# ./tjtagv2 -erase:nvram /noerase /nobreak

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00100101001101010100000101111111 (2535417F)
*** Found a Broadcom BCM5354 KFBG Rev 2 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000010000100100000100 (00810904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... Skipped
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ... Done

Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001001001001 (00002249)
*** Found a EON EN29LV160A 1Mx16 BotB (2MB) Flash Chip ***

- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00200000
- Selected Area Start ........ : 1fdf0000
- Selected Area Length ....... : 00010000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 1

Erasing block: 35 (addr = 1fdf0000)...

----------------------------------------------------------------------------------
==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

ABOUT: This program reads/writes flash memory on the WRT54G/GS and
compatible routers via EJTAG using either DMA Access routines
or PrAcc routines (slower/more compatible). Processor chips
supported in this version include the following chips:

Supported Chips
---------------
Broadcom BCM4702 Rev 1 CPU
Broadcom BCM4704 KPBG Rev 9 CPU
Broadcom BCM4704 Rev 8 CPU
Broadcom BCM4712 Rev 1 CPU
Broadcom BCM4712 Rev 2 CPU
Broadcom BCM4785 Rev 1 CPU
Broadcom BCM5350 Rev 1 CPU
Broadcom BCM5352 Rev 1 CPU
Broadcom BCM5354 KFBG Rev 1 CPU
Broadcom BCM5354 KFBG Rev 2 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM6345 Rev 1 CPU
Broadcom BCM6348 Rev 1 CPU
Broadcom BCM6338 Rev 1 CPU
Broadcom BCM4321 RADIO STOP
TI AR7WRD TNETD7300GDU Rev 1 CPU
BRECIS MSP2007-CA-A1 CPU
TI TNETV1060GDW CPU
Linkstation 2 with RISC K4C chip
Atheros AR531X/231X CPU


USAGE: tjtag [parameter] </noreset> </noemw> </nocwd> </nobreak> </noerase>
</notimestamp> </dma> </nodma>
<start:XXXXXXXX> </length:XXXXXXXX>
</silent> </skipdetect> </instrlen:XX> </fc:XX> /bypass /st5

Required Parameter
------------------
-backup:cfe
-backup:nvram
-backup:kernel
-backup:wholeflash
-backup:custom
-backup:bsp
-erase:cfe
-erase:nvram
-erase:kernel
-erase:wholeflash
-erase:custom
-erase:bsp
-flash:cfe
-flash:nvram
-flash:kernel
-flash:wholeflash
-flash:custom
-flash:bsp
-probeonly

Optional Switches
-----------------
/noreset ........... prevent Issuing EJTAG CPU reset
/noemw ............. prevent Enabling Memory Writes
/nocwd ............. prevent Clearing CPU Watchdog Timer
/nobreak ........... prevent Issuing Debug Mode JTAGBRK
/noerase ........... prevent Forced Erase before Flashing
/notimestamp ....... prevent Timestamping of Backups
/dma ............... force use of DMA routines
/nodma ............. force use of PRACC routines (No DMA)
/window:XXXXXXXX ... custom flash window base (in HEX)
/start:XXXXXXXX .... custom start location (in HEX)
/length:XXXXXXXX ... custom length (in HEX)
/silent ............ prevent scrolling display of data
/skipdetect ........ skip auto detection of CPU Chip ID
/instrlen:XX ....... set instruction length manually
/wiggler ........... use wiggler cable
/bypass ............ Unlock Bypass command & disable polling
/st5 ............... Use Speedtouch ST5xx flash routines instead of WRT routines

/fc:XX = Optional (Manual) Flash Chip Selection
-----------------------------------------------
/fc:01 ............. MX29LV800BTC 512kx16 TopB (1MB)
/fc:02 ............. MX29LV800BTC 512kx16 BotB (1MB)
/fc:03 ............. AMD 29lv160DB 1Mx16 BotB (2MB)
/fc:04 ............. AMD 29lv160DT 1Mx16 TopB (2MB)
/fc:05 ............. EON EN29LV160A 1Mx16 BotB (2MB)
/fc:06 ............. EON EN29LV160A 1Mx16 TopB (2MB)
/fc:07 ............. MBM29LV160B 1Mx16 BotB (2MB)
/fc:08 ............. MBM29LV160T 1Mx16 TopB (2MB)
/fc:09 ............. MX29LV160CB 1Mx16 BotB (2MB)
/fc:10 ............. MX29LV160CT 1Mx16 TopB (2MB)
/fc:11 ............. K8D1716UTC 1Mx16 TopB (2MB)
/fc:12 ............. K8D1716UBC 1Mx16 BotB (2MB)
/fc:13 ............. ST M29W160EB 1Mx16 BotB (2MB)
/fc:14 ............. ST M29W160ET 1Mx16 TopB (2MB)
/fc:15 ............. Macronix MX25L160A (2MB)
/fc:16 ............. K8D3216UTC 2Mx16 TopB (4MB)
/fc:17 ............. K8D3216UBC 2Mx16 BotB (4MB)
/fc:18 ............. AMD 29lv320MB 2Mx16 BotB (4MB)
/fc:19 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:20 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:21 ............. TC58FVB321 2Mx16 BotB (4MB)
/fc:22 ............. TC58FVT321 2Mx16 TopB (4MB)
/fc:23 ............. AT49BV/LV16X 2Mx16 BotB (4MB)
/fc:24 ............. AT49BV/LV16XT 2Mx16 TopB (4MB)
/fc:25 ............. MBM29DL323BE 2Mx16 BotB (4MB)
/fc:26 ............. MBM29DL323TE 2Mx16 TopB (4MB)
/fc:27 ............. AMD 29lv320DB 2Mx16 BotB (4MB)
/fc:28 ............. AMD 29lv320DT 2Mx16 TopB (4MB)
/fc:29 ............. MBM29LV320BE 2Mx16 BotB (4MB)
/fc:30 ............. MBM29LV320TE 2Mx16 TopB (4MB)
/fc:31 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:32 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:33 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:34 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:35 ............. ST 29w320DB 2Mx16 BotB (4MB)
/fc:36 ............. ST 29w320DT 2Mx16 TopB (4MB)
/fc:37 ............. W19B(L)320ST 2Mx16 TopB (4MB)
/fc:38 ............. W19B(L)320SB 2Mx16 BotB (4MB)
/fc:39 ............. W19B(L)320SB 2Mx16 BotB (4MB)
/fc:40 ............. M29DW324DT 2Mx16 TopB (4MB)
/fc:41 ............. M29DW324DB 2Mx16 BotB (4MB)
/fc:42 ............. TC58FVM6T2A 4Mx16 TopB (8MB)
/fc:43 ............. TC58FVM6B2A 4Mx16 BopB (8MB)
/fc:44 ............. K8D6316UTM 4Mx16 TopB (8MB)
/fc:45 ............. K8D6316UBM 4Mx16 BotB (8MB)
/fc:46 ............. Intel 28F160B3 1Mx16 BotB (2MB)
/fc:47 ............. Intel 28F160B3 1Mx16 TopB (2MB)
/fc:48 ............. Intel 28F160C3 1Mx16 BotB (2MB)
/fc:49 ............. Intel 28F160C3 1Mx16 TopB (2MB)
/fc:50 ............. Intel 28F320B3 2Mx16 BotB (4MB)
/fc:51 ............. Intel 28F320B3 2Mx16 TopB (4MB)
/fc:52 ............. Intel 28F320C3 2Mx16 BotB (4MB)
/fc:53 ............. Intel 28F320C3 2Mx16 TopB (4MB)
/fc:54 ............. Sharp 28F320BJE 2Mx16 BotB (4MB)
/fc:55 ............. Intel 28F640B3 4Mx16 BotB (8MB)
/fc:56 ............. Intel 28F640B3 4Mx16 TopB (8MB)
/fc:57 ............. Intel 28F640C3 4Mx16 BotB (8MB)
/fc:58 ............. Intel 28F640C3 4Mx16 TopB (8MB)
/fc:59 ............. Intel 28F160S3/5 1Mx16 (2MB)
/fc:60 ............. Intel 28F320J3 2Mx16 (4MB)
/fc:61 ............. Intel 28F320J5 2Mx16 (4MB)
/fc:62 ............. Intel 28F320S3/5 2Mx16 (4MB)
/fc:63 ............. Intel 28F640J3 4Mx16 (8MB)
/fc:64 ............. Intel 28F640J5 4Mx16 (8MB)
/fc:65 ............. Intel 28F128J3 8Mx16 (16MB)
/fc:66 ............. SST39VF1601 1Mx16 BotB (2MB)
/fc:67 ............. SST39VF1602 1Mx16 TopB (2MB)
/fc:68 ............. SST39VF3201 2Mx16 BotB (4MB)
/fc:69 ............. SST39VF3202 2Mx16 TopB (4MB)
/fc:70 ............. SST39VF6401 4Mx16 BotB (8MB)
/fc:71 ............. SST39VF6402 4Mx16 TopB (8MB)
/fc:72 ............. SST39VF6401B 4Mx16 BotB (8MB)
/fc:73 ............. SST39VF6402B 4Mx16 TopB (8MB)
/fc:74 ............. Spansion S29GL032M BotB (4MB)
/fc:75 ............. Spansion S29GL032M TopB (4MB)
/fc:76 ............. Spansion S29GL064M BotB (8MB)
/fc:77 ............. Spansion S29GL064M TopB (8MB)
/fc:78 ............. Winbond W19B320AB BotB (4MB)
/fc:79 ............. Winbond W19B320AT TopB (4MB)
/fc:80 ............. EON EN29LV320 2Mx16 BotB (4MB)
/fc:81 ............. EON EN29LV320 2Mx16 TopB (4MB)


NOTES: 1) If 'flashing' - the source filename must exist as follows:
CFE.BIN, NVRAM.BIN, KERNEL.BIN, WHOLEFLASH.BIN or CUSTOM.BIN
BSP.BIN

2) If you have difficulty auto-detecting a particular flash part
you can manually specify your exact part using the /fc:XX option.

3) If you have difficulty with the older bcm47xx chips or when no CFE
is currently active/operational you may want to try both the
/noreset and /nobreak command line options together. Some bcm47xx
chips *may* always require both these options to function properly.

4) When using this utility, usually it is best to type the command line
out, then plug in the router, and then hit <ENTER> quickly to avoid
the CPUs watchdog interfering with the EJTAG operations.

5) /bypass - enables Unlock bypass command for some AMD/Spansion type
flashes, it also disables polling

***************************************************************************
* Flashing the KERNEL or WHOLEFLASH will take a very long time using JTAG *
* via this utility. You are better off flashing the CFE & NVRAM files *
* & then using the normal TFTP method to flash the KERNEL via ethernet. *
***************************************************************************

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00100101001101010100000101111111 (2535417F)
*** Found a Broadcom BCM5354 KFBG Rev 2 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000010000100100000100 (00810904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ... Done

Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001001001001 (00002249)
*** Found a EON EN29LV160A 1Mx16 BotB (2MB) Flash Chip ***

- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00200000
- Selected Area Start ........ : 1fc00000
- Selected Area Length ....... : 00200000

*** You Selected to Flash the WHOLEFLASH.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 35

Erasing block: 1 (addr = 1fc00000)...Done
Erasing block: 2 (addr = 1fc04000)...Done
Erasing block: 3 (addr = 1fc06000)...Done
Erasing block: 4 (addr = 1fc08000)...Done
Erasing block: 5 (addr = 1fc10000)...Done
Erasing block: 6 (addr = 1fc20000)...Done
Erasing block: 7 (addr = 1fc30000)...Done
Erasing block: 8 (addr = 1fc40000)...Done
Erasing block: 9 (addr = 1fc50000)...Done
Erasing block: 10 (addr = 1fc60000)...Done
Erasing block: 11 (addr = 1fc70000)...Done
Erasing block: 12 (addr = 1fc80000)...Done
Erasing block: 13 (addr = 1fc90000)...Done
Erasing block: 14 (addr = 1fca0000)...Done
Erasing block: 15 (addr = 1fcb0000)...Done
Erasing block: 16 (addr = 1fcc0000)...Done
Erasing block: 17 (addr = 1fcd0000)...Done
Erasing block: 18 (addr = 1fce0000)...Done
Erasing block: 19 (addr = 1fcf0000)...Done
Erasing block: 20 (addr = 1fd00000)...Done
Erasing block: 21 (addr = 1fd10000)...Done
Erasing block: 22 (addr = 1fd20000)...Done
Erasing block: 23 (addr = 1fd30000)...Done
Erasing block: 24 (addr = 1fd40000)...Done
Erasing block: 25 (addr = 1fd50000)...Done
Erasing block: 26 (addr = 1fd60000)...Done
Erasing block: 27 (addr = 1fd70000)...Done
Erasing block: 28 (addr = 1fd80000)...Done
Erasing block: 29 (addr = 1fd90000)...Done
Erasing block: 30 (addr = 1fda0000)...Done
Erasing block: 31 (addr = 1fdb0000)...Done
Erasing block: 32 (addr = 1fdc0000)...Done
Erasing block: 33 (addr = 1fdd0000)...Done
Erasing block: 34 (addr = 1fde0000)...Done
Erasing block: 35 (addr = 1fdf0000)...Done

Loading WHOLEFLASH.BIN to Flash Memory...



I am not going to post it all as its too much. Does anyone have a wholeflash that I can use or just the bsp and cfe so I can get into management mode, or am I missing something?
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11489
Location: Wherever the wind blows- North America

PostPosted: Wed Nov 26, 2008 13:13    Post subject: Reply with quote
Try this cfe.

use command line for tjtag as follows

tjtagv2 -erase:wholeflash /noreset /instrlen:8 /skipdetect


then

tjtagv2 -flash:cfe128 /noreset /instrlen:8 /skipdetect

Unplug the unit and have the command ready...plug it in and immediately start the command.

attached is a cfe you can use....change the name to cfe128.bin and put it in your tjtag/windows directory (where the tjtagv2 program is located)

redhawk

_________________
I do NOT provide personal assistance through chat or phone....so please don't ask.


Last edited by redhawk0 on Wed Nov 26, 2008 20:37; edited 1 time in total
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Wed Nov 26, 2008 17:31    Post subject: wrt54g2v1 issues Reply with quote
Thank you for the CFE link, I will try it out later today, by the way if I can get this to work that would be great, and if not I will donate it to you to further the cause, haha. I decided to go ahead and order a wrt54g refurbashed unit from tigerdirect, should be here friday. I don't know what version it is, but I should have no problem putting dd-wrt on that right? I want to upgrade the antenna system as well, maybe a nice external setup... I need a link to my house from a seperate outdoor building. I was originaly thinking to usae one of the 20 or so cable modems, maybe create a link between two of them and use and coax run instead of a long cat-5e or cat-6 cable if thats possible, but I think wireless is the best answer, don't you? I just need two access points or one and a wireless router. If I can get the g2 to work then I will order another wrt54g, only time will tell. Thank you again for your help, and I will keep the forum updated on progress, and include as much info as possible to possibly help others. now if I erase the wholeflash, that erases everything right? do I need a valid BSP.BIN? or can I just load this CFE.BIN you provided and that should allow me to flash dd-wrt through management mode?
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11489
Location: Wherever the wind blows- North America

PostPosted: Wed Nov 26, 2008 19:33    Post subject: Re: wrt54g2v1 issues Reply with quote
drploof wrote:
Thank you for the CFE link, I will try it out later today, by the way if I can get this to work that would be great, and if not I will donate it to you to further the cause, haha. I decided to go ahead and order a wrt54g refurbashed unit from tigerdirect, should be here friday. I don't know what version it is, but I should have no problem putting dd-wrt on that right? I want to upgrade the antenna system as well, maybe a nice external setup... I need a link to my house from a seperate outdoor building. I was originaly thinking to usae one of the 20 or so cable modems, maybe create a link between two of them and use and coax run instead of a long cat-5e or cat-6 cable if thats possible, but I think wireless is the best answer, don't you? I just need two access points or one and a wireless router. If I can get the g2 to work then I will order another wrt54g, only time will tell. Thank you again for your help, and I will keep the forum updated on progress, and include as much info as possible to possibly help others. now if I erase the wholeflash, that erases everything right? do I need a valid BSP.BIN? or can I just load this CFE.BIN you provided and that should allow me to flash dd-wrt through management mode?


Once you flash the cfe128.bin file on....then you need to use tftp utility to load firmware directly. Check the peacock thread for instructions.

No BSP needed (BSP is vxworks...we are bypassing the upgrade process)

http://www.dd-wrt.com/dd-wrtv2/down.php?path=downloads%2Fothers%2Ftornado%2FWindows-TFTP/

Use the utility to flash a NEWD micro+ build of firmware from here.

http://www.dd-wrt.com/dd-wrtv2/down.php?path=downloads%2Fothers%2Feko%2FV24_TNG%2Fsvn10991/

redhawk

_________________
I do NOT provide personal assistance through chat or phone....so please don't ask.
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Wed Nov 26, 2008 19:59    Post subject: wrt54g2v1 tftp Reply with quote
Ok, I am flashing the CFE128 right now, Its kind of slow, but not to bad (using a parallel port jtag cable unbuffered). When this finishes I am going to try and tftp ddwrtmicroplus. I have a question, since I am using linux I can't execute tftpv2.exe I have atftp and tftp installed in linux, just want to confirm the settings found under peacock thread. I set my computers IP to 192.168.1.10 with gateway 192.168.1.1 mask 255.255.255.0, and I connect tftp to 192.168.1.1?
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11489
Location: Wherever the wind blows- North America

PostPosted: Wed Nov 26, 2008 20:10    Post subject: Re: wrt54g2v1 tftp Reply with quote
drploof wrote:
Ok, I am flashing the CFE128 right now, Its kind of slow, but not to bad (using a parallel port jtag cable unbuffered). When this finishes I am going to try and tftp ddwrtmicroplus. I have a question, since I am using linux I can't execute tftpv2.exe I have atftp and tftp installed in linux, just want to confirm the settings found under peacock thread. I set my computers IP to 192.168.1.10 with gateway 192.168.1.1 mask 255.255.255.0, and I connect tftp to 192.168.1.1?


Correct...you can use tftp command line entry from linux to flash it.


redhawk

_________________
I do NOT provide personal assistance through chat or phone....so please don't ask.
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Wed Nov 26, 2008 20:32    Post subject: wrt54g2v1 success loading dd-wrt Reply with quote
Well, I guess I won't be donating the router after all, sorry. All this finally payed off, it works perfect, I flashed the cfe, tftp'ed dd-wrt.v24-10991_NEWD_micro-plus.bin and now everything works great!

Here is some logged information and after is a screenshot of dd-wrt successfully loaded on my wrt54g2v1. Now all I have to do is modify the antenna system to be able to connect two external antenna's. I plan on adding to bnc style connectors to the back of the router, unless anyone has any other suggestions. When I finish I will post some pictures of the mod and also results of signal strength increase (or decrease if I mess up, haha). Thank you so much redhawk and anyone else for help, if it wasn't for redhawk this router would have become useless to me and I would have just donated it. Thank you so much.


Done (CFE128.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 759 seconds


*** REQUESTED OPERATION IS COMPLETE ***


linksys-tftp> put dd-wrt.v24-10991_NEWD_micro-plus.bin admin
putting dd-wrt.v24-10991_NEWD_micro-plus.bin to 192.168.1.1:dd-wrt.v24-10991_NEWD_micro-plus.bin [octet] AUTH admin
Sent 1798144 bytes in 2.5 seconds [5754061 bits/sec]
linksys-tftp>



ddwrt_working.jpg
 Description:
 Filesize:  323.8 KB
 Viewed:  42866 Time(s)

ddwrt_working.jpg


redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11489
Location: Wherever the wind blows- North America

PostPosted: Wed Nov 26, 2008 20:34    Post subject: Reply with quote
Glad to have helped...nice work.

Anything else...just ask....the forum is here to help.

redhawk

_________________
I do NOT provide personal assistance through chat or phone....so please don't ask.
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11489
Location: Wherever the wind blows- North America

PostPosted: Wed Nov 26, 2008 20:36    Post subject: Reply with quote
Very interesting side note...your G2v1 unit is indicating it has a 5354 rev2 processor...mine has a 5354 rev3 processor.

It looks like TJTAG can detect yours correctly.

so the /skipdetect and the /instrlen:8 part of the command probably wasn't necessary.

redhawk

_________________
I do NOT provide personal assistance through chat or phone....so please don't ask.
drploof
DD-WRT Novice


Joined: 25 Nov 2008
Posts: 7

PostPosted: Wed Nov 26, 2008 20:43    Post subject: wrt54g2v1 Reply with quote
I got this unit off tigerdirect it said it was refurbished, so maybe this is one of the earlier g2's that were made. you are right about the stringlength command, when I was using the flash utility before it was set automatically to 8 and it did detect the cpu correctly. Now I can upgrade if there is one eventually, right through dd-wrt correct? What do you think about adding better antenna's? what type of connector would you add to the router casing? or would you...

I assume you are an admin in the forum if so feel free to look up my email address and email me.
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next Display posts from previous:    Page 7 of 8
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum