I appreciate the vworkskiller software and drop in repalcement, but I still wonder about why not a jtag-only version first, so some of the more advanced users could use/test it?
? - print this list
@ - boot (load and go)
p - print boot params
c - change boot params
l - load boot file
g adrs - go to adrs
d adrs[,n] - display memory
m adrs - modify memory
f adrs, nbytes, value - fill memory
t adrs, adrs, nbytes - copy memory
e - print fatal exception
v - print version
B - change board data
S - show board data
C - clean sdram_ncdl
n netif - print network interface device address
$dev(0,procnum)host:/file h=# e=# b=# g=# u=usr [pw=passwd] f=#
tn=targetname s=script o=other
boot device: tffs=drive,removable file name: /tffs0/vxWorks
Boot flags:
0x02 - load local system symbols
0x04 - don't autoboot
0x08 - quick autoboot (no countdown)
0x20 - disable login security
0x40 - use bootp to get boot parameters
0x80 - use tftp to get boot image
0x100 - use proxy arp
available boot devices:Enhanced Network Devices
vl0 vl1 tffs
[VxWorks Boot]: p
boot device : tffs
unit number : 0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.10
user (u) : ????????
ftp password (pw) : admin
flags (f) : 0x20
target name (tn) : targetname
[VxWorks Boot]: S
magic: 57475635
cksum: 947e
bootcode version: 1000003
Model Name: WRT54G2
Hardware version: 1.3
config: 0000002b
Vendor Name: LINKSYS_en
Country: US
Serial Number: CSV01H2D1390
PIN Key: 33856728
pciid: ffff
wl0 : yes 00:1e:e5:59:66:7e
et0(vl0):yes 00:1e:e5:59:66:7c
vl1 : yes 00:1e:e5:59:66:7d
uart0: yes
uart1: no
sdram_ncdl: 0x0
[VxWorks Boot]: c
'.' = clear field; '-' = go to previous field; ^D = quit
boot device : tffs0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
inet on backplane (b):
host inet (h) : 192.168.1.10
gateway inet (g) :
user (u) : ????????
ftp password (pw) (blank = use rsh): admin
flags (f) : 0x20
target name (tn) : targetname
startup script (s) :
other (o) :
[VxWorks Boot]: C
clean sdram_ncdl ...done.
[VxWorks Boot]: d 0x80
000080:
Tlb Load Exception
Exception Program Counter: 0x808021c0
Status Register: 0x1000fc01
Cause Register: 0x80000008
Access Address : 0x00000080
Task: 0x80f950e0 "tBoot"
boot device : tffs
unit number : 0
processor number : 0
host name : host
file name : /fl/vxWorks.bin
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.10
user (u) : ????????
ftp password (pw) : admin
flags (f) : 0x8
target name (tn) : targetname
Can't load boot file!!
boot device : vl
unit number : 0
processor number : 0
inet on ethernet (e) : 192.168.1.1:ffffff00
host inet (h) : 192.168.1.11
flags (f) : 0x1000
Attached TCP/IP interface to vl0.
Attaching network interface lo0... done.
Management Mode vl
Warning: Required storage hook not installed.
Lease records will not be saved.
Warning: No DHCP server address cache! Later entries will not be saved.
0x80f950e0 (): dhcps: read DHCP ser1ver started.
entries from addr-pool database.
[DHCPD] addDhcpsEntry() LdsvIpStart=192.168.1.11 LdsvIpEnd=192.168.1.254
http init........
I copied part of this image from one I saw on this forum only because I have no camera, and my camera phone is better a phone and terrible as a camera. I scraped away the enamel coating over these traces to reveal clean copper jumper pads which I soldered wires to each and through trial and error found what works with my level converter setup.
Please can someone help me find the pinout for JTAG? I have never used JTAG, but I used ythe web interface to flash VxWorksPrep and now the router won['t take to any tftp uploads no matter what I set through the serial console or tftp settings. I just can't get VxWorksKiller to take. I assume I must use JTAG or buy a new router. The other set of Jumper pads in the top part of the image must be JTAG, so I will try and build a JTAG cable and solder connections to the other set of Jumper pads and see how it goes, I will be sure to keep my posts updated when I get more information. If anyone can help me with JTAG that would be great.
Serial and JTAG on a WRT54G2 V1 unit. (new JTAG style connectors)
The pins can be cleaned of the green epoxy coating...with the 12 pin connector sandwiched on either side of the motherboard...and soldered on. The connector will still fit inside the radio's enclosure.
Also attached (in this picture) is the Serial Connector. 5 pin connector bent at a 30 degree angle so it will still fit inside the case...yet provide access to the +3.3V(pin1), Tx(Pin2), Rx(Pin3) and GND(Pin5) pins....pin4 is not connected to anything.
The JTAG connector is of normal pinout as any other Linksys unit...So is the Serial.
(we are working on JTAG recognition next...This device is currently not supported)
Hopefully, this will help someone else to connect with the same type of JTAG connection.
You would have to scrape the green epoxy off both sides and then solder both sides with a pinheader or solder your wires directly.
Posted: Tue Nov 25, 2008 20:06 Post subject: JTAG Software recognition
Before I read the infor on connecting a header for JTAG I had assembled the simple JTAG cable using 4 100ohm resistors. It seems to work fine when I use the hairydairymaid debrick utility in linux, but unfortunatly the software does not recognize the chipset, is it the Broadcom chip or just the flash it does not recognise? Please help if any newer versions of a JTAG software utility to flash dd-wrt becomes available. Thank you so much. I connected the necessary pins on the top of the board for JTAG, and just scraped away some green enamel close to the pin headers on top and soldered on a ground, seems to work just the same.
Posted: Tue Nov 25, 2008 20:14 Post subject: Re: JTAG Software recognition
drploof wrote:
Before I read the infor on connecting a header for JTAG I had assembled the simple JTAG cable using 4 100ohm resistors. It seems to work fine when I use the hairydairymaid debrick utility in linux, but unfortunatly the software does not recognize the chipset, is it the Broadcom chip or just the flash it does not recognise? Please help if any newer versions of a JTAG software utility to flash dd-wrt becomes available. Thank you so much. I connected the necessary pins on the top of the board for JTAG, and just scraped away some green enamel close to the pin headers on top and soldered on a ground, seems to work just the same.
Posted: Wed Nov 26, 2008 1:57 Post subject: Flashing WRT54g2v1
Ok I have tried everything, and now the router just has 4 lights and the power led on all the time and I can't access management mode, in fact I can seem to access the serial console at all. I tried reloading the BSP.BIN and CFE.BIN after erasing the wholeflash a few times, but nothing seems to work. The MAC address of the router should be: 001EE559667C
ABOUT: This program reads/writes flash memory on the WRT54G/GS and
compatible routers via EJTAG using either DMA Access routines
or PrAcc routines (slower/more compatible). Processor chips
supported in this version include the following chips:
Supported Chips
---------------
Broadcom BCM4702 Rev 1 CPU
Broadcom BCM4704 KPBG Rev 9 CPU
Broadcom BCM4704 Rev 8 CPU
Broadcom BCM4712 Rev 1 CPU
Broadcom BCM4712 Rev 2 CPU
Broadcom BCM4785 Rev 1 CPU
Broadcom BCM5350 Rev 1 CPU
Broadcom BCM5352 Rev 1 CPU
Broadcom BCM5354 KFBG Rev 1 CPU
Broadcom BCM5354 KFBG Rev 2 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM6345 Rev 1 CPU
Broadcom BCM6348 Rev 1 CPU
Broadcom BCM6338 Rev 1 CPU
Broadcom BCM4321 RADIO STOP
TI AR7WRD TNETD7300GDU Rev 1 CPU
BRECIS MSP2007-CA-A1 CPU
TI TNETV1060GDW CPU
Linkstation 2 with RISC K4C chip
Atheros AR531X/231X CPU
NOTES: 1) If 'flashing' - the source filename must exist as follows:
CFE.BIN, NVRAM.BIN, KERNEL.BIN, WHOLEFLASH.BIN or CUSTOM.BIN
BSP.BIN
2) If you have difficulty auto-detecting a particular flash part
you can manually specify your exact part using the /fc:XX option.
3) If you have difficulty with the older bcm47xx chips or when no CFE
is currently active/operational you may want to try both the
/noreset and /nobreak command line options together. Some bcm47xx
chips *may* always require both these options to function properly.
4) When using this utility, usually it is best to type the command line
out, then plug in the router, and then hit <ENTER> quickly to avoid
the CPUs watchdog interfering with the EJTAG operations.
5) /bypass - enables Unlock bypass command for some AMD/Spansion type
flashes, it also disables polling
***************************************************************************
* Flashing the KERNEL or WHOLEFLASH will take a very long time using JTAG *
* via this utility. You are better off flashing the CFE & NVRAM files *
* & then using the normal TFTP method to flash the KERNEL via ethernet. *
***************************************************************************
I am not going to post it all as its too much. Does anyone have a wholeflash that I can use or just the bsp and cfe so I can get into management mode, or am I missing something?
Posted: Wed Nov 26, 2008 17:31 Post subject: wrt54g2v1 issues
Thank you for the CFE link, I will try it out later today, by the way if I can get this to work that would be great, and if not I will donate it to you to further the cause, haha. I decided to go ahead and order a wrt54g refurbashed unit from tigerdirect, should be here friday. I don't know what version it is, but I should have no problem putting dd-wrt on that right? I want to upgrade the antenna system as well, maybe a nice external setup... I need a link to my house from a seperate outdoor building. I was originaly thinking to usae one of the 20 or so cable modems, maybe create a link between two of them and use and coax run instead of a long cat-5e or cat-6 cable if thats possible, but I think wireless is the best answer, don't you? I just need two access points or one and a wireless router. If I can get the g2 to work then I will order another wrt54g, only time will tell. Thank you again for your help, and I will keep the forum updated on progress, and include as much info as possible to possibly help others. now if I erase the wholeflash, that erases everything right? do I need a valid BSP.BIN? or can I just load this CFE.BIN you provided and that should allow me to flash dd-wrt through management mode?
Joined: 04 Jan 2007 Posts: 11564 Location: Wherever the wind blows- North America
Posted: Wed Nov 26, 2008 19:33 Post subject: Re: wrt54g2v1 issues
drploof wrote:
Thank you for the CFE link, I will try it out later today, by the way if I can get this to work that would be great, and if not I will donate it to you to further the cause, haha. I decided to go ahead and order a wrt54g refurbashed unit from tigerdirect, should be here friday. I don't know what version it is, but I should have no problem putting dd-wrt on that right? I want to upgrade the antenna system as well, maybe a nice external setup... I need a link to my house from a seperate outdoor building. I was originaly thinking to usae one of the 20 or so cable modems, maybe create a link between two of them and use and coax run instead of a long cat-5e or cat-6 cable if thats possible, but I think wireless is the best answer, don't you? I just need two access points or one and a wireless router. If I can get the g2 to work then I will order another wrt54g, only time will tell. Thank you again for your help, and I will keep the forum updated on progress, and include as much info as possible to possibly help others. now if I erase the wholeflash, that erases everything right? do I need a valid BSP.BIN? or can I just load this CFE.BIN you provided and that should allow me to flash dd-wrt through management mode?
Once you flash the cfe128.bin file on....then you need to use tftp utility to load firmware directly. Check the peacock thread for instructions.
No BSP needed (BSP is vxworks...we are bypassing the upgrade process)
Posted: Wed Nov 26, 2008 19:59 Post subject: wrt54g2v1 tftp
Ok, I am flashing the CFE128 right now, Its kind of slow, but not to bad (using a parallel port jtag cable unbuffered). When this finishes I am going to try and tftp ddwrtmicroplus. I have a question, since I am using linux I can't execute tftpv2.exe I have atftp and tftp installed in linux, just want to confirm the settings found under peacock thread. I set my computers IP to 192.168.1.10 with gateway 192.168.1.1 mask 255.255.255.0, and I connect tftp to 192.168.1.1?
Joined: 04 Jan 2007 Posts: 11564 Location: Wherever the wind blows- North America
Posted: Wed Nov 26, 2008 20:10 Post subject: Re: wrt54g2v1 tftp
drploof wrote:
Ok, I am flashing the CFE128 right now, Its kind of slow, but not to bad (using a parallel port jtag cable unbuffered). When this finishes I am going to try and tftp ddwrtmicroplus. I have a question, since I am using linux I can't execute tftpv2.exe I have atftp and tftp installed in linux, just want to confirm the settings found under peacock thread. I set my computers IP to 192.168.1.10 with gateway 192.168.1.1 mask 255.255.255.0, and I connect tftp to 192.168.1.1?
Correct...you can use tftp command line entry from linux to flash it.
redhawk _________________ The only stupid question....is the unasked one.
Posted: Wed Nov 26, 2008 20:32 Post subject: wrt54g2v1 success loading dd-wrt
Well, I guess I won't be donating the router after all, sorry. All this finally payed off, it works perfect, I flashed the cfe, tftp'ed dd-wrt.v24-10991_NEWD_micro-plus.bin and now everything works great!
Here is some logged information and after is a screenshot of dd-wrt successfully loaded on my wrt54g2v1. Now all I have to do is modify the antenna system to be able to connect two external antenna's. I plan on adding to bnc style connectors to the back of the router, unless anyone has any other suggestions. When I finish I will post some pictures of the mod and also results of signal strength increase (or decrease if I mess up, haha). Thank you so much redhawk and anyone else for help, if it wasn't for redhawk this router would have become useless to me and I would have just donated it. Thank you so much.
linksys-tftp> put dd-wrt.v24-10991_NEWD_micro-plus.bin admin
putting dd-wrt.v24-10991_NEWD_micro-plus.bin to 192.168.1.1:dd-wrt.v24-10991_NEWD_micro-plus.bin [octet] AUTH admin
Sent 1798144 bytes in 2.5 seconds [5754061 bits/sec]
linksys-tftp>
Posted: Wed Nov 26, 2008 20:43 Post subject: wrt54g2v1
I got this unit off tigerdirect it said it was refurbished, so maybe this is one of the earlier g2's that were made. you are right about the stringlength command, when I was using the flash utility before it was set automatically to 8 and it did detect the cpu correctly. Now I can upgrade if there is one eventually, right through dd-wrt correct? What do you think about adding better antenna's? what type of connector would you add to the router casing? or would you...
I assume you are an admin in the forum if so feel free to look up my email address and email me.
