Joined: 04 Jan 2007 Posts: 11563 Location: Wherever the wind blows- North America
Posted: Wed Jun 11, 2008 23:21 Post subject: JTAG and the WHR-G54S w/ pictures
Hi guys,
For all of you wondering about how to JTAG a Buffalo WHR-G54S unit. I know anectine17 covered it pretty extensively....and his ground-breaking work is VERY much appreciated.
So...I finally got around to working on one of these units that was bricked. I installed the JTAG header on the unit from the top of the board...but anectine17 was savy enough to figure out that this orientation is upside-down on the board....if the header was installed on the bottom of the motherboard then the JTAG cable could be plugged right on.
so...here was my solution....install the header on the top of the motherboard (normal configuration) but install the JTAG cable on backwards on only one row (data pin side) and bring a ground wire over to the ground pin of the JTAG cable.
I was able to -erase:nvram and -erase:kernel and recover this router. The next step was to do a -backup:cfe...this was also successful (doing it 3 times and comparing files for validation)
The unit would then take a tftp of the dd-wrt firmware...and is running great.
hope this helps someone else
redhawk
JTAG#3.jpg
Description:
Filesize:
316.23 KB
Viewed:
28008 Time(s)
JTAG#2.jpg
Description:
Filesize:
356.19 KB
Viewed:
28008 Time(s)
_________________ The only stupid question....is the unasked one.
Last edited by redhawk0 on Thu Jun 12, 2008 15:26; edited 1 time in total
Ah. That's good to know. You are a clever one, redhawk! _________________ WRT54G v3 - v24 r14471M NEWD Eko - AP
WRT350N v1.0
WRT600N v1.1 - halfway there!
Se7en is Darker...
that ground wire. where is it going to? appears to be shorting the ground to one of the data pins but from the pictures I can't tell which pin it's soldiered to under the jtag. thanks
Joined: 04 Jan 2007 Posts: 11563 Location: Wherever the wind blows- North America
Posted: Tue Dec 09, 2008 0:44 Post subject:
loco wrote:
that ground wire. where is it going to? appears to be shorting the ground to one of the data pins but from the pictures I can't tell which pin it's soldiered to under the jtag. thanks
Its going to pin 6 on the JTAG cable connector.
It is the only ground and only one is needed.
redhawk _________________ The only stupid question....is the unasked one.
Joined: 13 Nov 2008 Posts: 5266 Location: CENTRAL Midnowhere
Posted: Tue Dec 09, 2008 4:42 Post subject: Re: JTAG and the WHR-G54S w/ pictures
redhawk0 wrote:
So...I finally got around to working on one of these units that was bricked.
Does this mean that the deer are now safe, but we have to now watch the advice that we haphazardly hand out? You're back?
I take it that if this was the only unit that one was going to jtag, this proves they could make a custom jtag specifically for this unit? Nice work. _________________ Warning: I'm "out of my element!"
http://www.youtube.com/watch?v=MjYJ7zZ9BRw&NR=1
Unfortunately, I did something stupid and bought first and asked questions (looked at this post) later.
I am attaching a schematic of the JTAG that I purchased on ebay. I wrote the seller but he didn't know how to use it with the WHR-G54s only the Linksys model. It was advertised on the ebay listing, however.
Can I use this JTAG with th G54s? If so how do I plug it into the board?
I already have the router opened and the debricking software ready to run.
Joined: 04 Jan 2007 Posts: 11563 Location: Wherever the wind blows- North America
Posted: Thu Jul 30, 2009 17:06 Post subject:
no..turn it around only one row of pins...pin 1 of the connector plugs onto pin 11 of the header on the mobo.
don't forget to add a wire for your ground.
See the picture above.
If you really want to connect the header to the bottom of the board...go ahead...but you won't be able to put the board back in the case when you are done without modifying the router's case....my solution above requires no modifications...and you can leave the header soldered to the board.
redhawk _________________ The only stupid question....is the unasked one.
Joined: 04 Jan 2007 Posts: 11563 Location: Wherever the wind blows- North America
Posted: Thu Jul 30, 2009 18:21 Post subject:
Erase both nvram and kernel. (do NOT erase wholeflash or CFE)
once you erase the nvram and kernel...then tftp the firmware to it again.
follow the peacock thread step #11 for tftp flashing.
Oh...BTW...the IP address for a buffalo is 192.168.11.1 not 1.1 ...it will be 192.168.1.1 only after dd-wrt is installed.
so for the static IP setup for tftp you would make your pc static set to 192.168.11.10 and 255.255.255.0....then flash it to 192.168.11.1 in the tftp utility.
redhawk _________________ The only stupid question....is the unasked one.