TENDA W311R - Bad flash recover and Install dd-wrt firmware!

Post new topic   Reply to topic    DD-WRT Forum Index -> Ralink SoC based Hardware
Goto page 1, 2, 3 ... 21, 22, 23  Next
Author Message
kapastratos
DD-WRT Novice


Joined: 04 Oct 2008
Posts: 33
Location: Romania

PostPosted: Tue Jan 05, 2010 9:14    Post subject: TENDA W311R - Bad flash recover and Install dd-wrt firmware! Reply with quote
In response to http://www.dd-wrt.com/phpBB2/viewtopic.php?p=368204#368204

Hello guys,

I have a Tenda W311R and today I decided to update it`s firmware. I did an update and bricked my router (It seems that I used a different firmware for my version).

I decided to repair this router so I did some google search but no info available so I decided to figure out myself what to do (I have some experience with a wrt54gl, wrt54gs and a nslu2 units).


My unit is a W311R Version 2 or H2: 4MB Flash and 32MB RAM.



I opened the unit and I found this:





The 4MB KH29LV320CBTC-70G flash chip:



Two of 16MB HY57V281620FTP-H ram chips:



I had to find the serial output pins (RX and TX) and solder some wires to a connector like this:







I used a Z510 / Z710 modified usb cable ... it is a level converter because TENDA W311R RXD and TXD are (LV)TTL signals (0V/3.3V), not RS-232 signals (+/-12V).



You can build your own level converter or buy one from ebay.



Next setup your computer ip address to 192.168.0.2 and install a tftp server (I used the one provided by TENDA) you can find it here -> http://www.tenda.cn/uploadfile/downloads/uploadfile/200911/TENDA%20TFTP.zip

Regarding the tftp server:
Create a folder called "tftp" to your c:\ partition and extract into the "tftp" folder the content of the archive "TENDA 20TFTP.zip" (TENDA TFTP.exe file), than move into the "tftp" folder the firmware that you want to upload (let`s call it "new_firmware.bin") and run "TENDA TFTP.exe", click the "browse" button and select "c:\tftp" and hit "ok". The tftp server it runs on port 69.

Now download "putty" from here -> http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
Run "putty.exe", setup -> on "Connection type" select "Serial", on "Host name" enter "COM3" (note I have COM3 but it might be any number you can check it in Device Manager) and click OPEN.

Now, using a UTP Cable connect your computer to the switch port 1-4 of the router, next connect the serial cable (level converter...etc) to the router and the power cable to the router (power led of the router will turn green).

Back to putty window:
As soon as you see in your putty window this output press 2 (key 2) you have 1 second to do that:
Quote:
Code:
U-Boot 1.1.3 (Feb 13 2009 - 09:48:32)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fac000
flash_protect ON: from 0xBF000000 to 0xBF01FFAF
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Feb 13 2009  Time:09:48:32
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 384 MHZ ####

 SDRAM bus set to 32 bit
 SDRAM size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.


Press 2 fast (max 1 second to do that...you need to be fast)

If you got it you will see this:
Quote:
Code:
You choosed 2
                                                                                                                                                           0

 eth_register
Eth0 (10/100-M)
 enetvar=ethaddr,Eth addr:00:AA:BB:CC:DD:10
 00:AA:BB:CC:DD:10:

 eth_current->name = Eth0 (10/100-M)


2: System Load Linux Kernel then write to Flash via TFTP.
 Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)


Hit Y (key Y) and you will see this:

Quote:
Code:
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:


Write the ip of the W311R (192.168.0.1) like this and hit enter:

Quote:
Code:
       Input device IP (10.10.10.123) ==:192.168.0.1


Next you will see:

Quote:
Code:
        Input server IP (10.10.10.3) ==:


Write the ip of your computer (where the tftp server is running 192.168.0.2) like this and hit enter:

Quote:
Code:
        Input server IP (10.10.10.3) ==:192.168.0.2


Next you will see:

Quote:
Code:
        Input Linux Kernel filename () ==:


Write the firmware name that you want to upload (and it is located under c:\tftp folder ... in our case new_firmware.bin) like this and hit enter

Quote:
Code:
        Input Linux Kernel filename () ==:new_firmware.bin



Now, if you did all that I said and not other things you will see this:

Quote:
Code:
... netboot_common, argc= 3
 *************buf = 0x81fcc120
 **********NexTxPacket = 81fe4200

 NetTxPacket = 0x81FE4200

 NetRxPackets[0] = 0x81FE4800

 NetRxPackets[1] = 0x81FE4E00

 NetRxPackets[2] = 0x81FE5400

 NetRxPackets[3] = 0x81FE5A00

 NetRxPackets[4] = 0x81FE6000

 NetRxPackets[5] = 0x81FE6600

 NetRxPackets[6] = 0x81FE6C00

 NetRxPackets[7] = 0x81FE7200

 NetRxPackets[8] = 0x81FE7800

 NetRxPackets[9] = 0x81FE7E00

 NetRxPackets[10] = 0x81FE8400

 NetRxPackets[11] = 0x81FE8A00

 NetRxPackets[12] = 0x81FE9000

 NetRxPackets[13] = 0x81FE9600

 NetRxPackets[14] = 0x81FE9C00

 NetRxPackets[15] = 0x81FEA200

 NetRxPackets[16] = 0x81FEA800

 NetRxPackets[17] = 0x81FEAE00

 NetRxPackets[18] = 0x81FEB400

 NetRxPackets[19] = 0x81FEBA00

 KSEG1ADDR(NetTxPacket) = 0xA1FE4200

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done

 Header Payload scatter function is Disable !!

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.0.2; our IP address is 192.168.0.1
Filename 'new_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (xx:xx:xx:xx:xx:xx)
Got it
T #
 first block received
################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #####################################################
done
Bytes transferred = 2263332 (228924 hex)
NetBootFileXferSize= 00228924
Erase linux kernel block !!
From 0xBF050000 To 0xBF27FFFF

 b_end =BF3FFFFF
Erase Flash from 0xbf050000 to 0xbf27ffff in Bank # 1

 erase sector  = 12
sect = 12,s_last = 46,erase poll = 1162313

 erase sector  = 13
*sect = 13,s_last = 46,erase poll = 1129504

 erase sector  = 14
sect = 14,s_last = 46,erase poll = 1140228

 erase sector  = 15
*sect = 15,s_last = 46,erase poll = 1157035

 erase sector  = 16
sect = 16,s_last = 46,erase poll = 1139250

 erase sector  = 17
*sect = 17,s_last = 46,erase poll = 1129126

 erase sector  = 18
sect = 18,s_last = 46,erase poll = 1139748

 erase sector  = 19
*sect = 19,s_last = 46,erase poll = 1129480

 erase sector  = 20
sect = 20,s_last = 46,erase poll = 1139490

 erase sector  = 21
*sect = 21,s_last = 46,erase poll = 1143826

 erase sector  = 22
*sect = 22,s_last = 46,erase poll = 1162855

 erase sector  = 23
sect = 23,s_last = 46,erase poll = 1128879

 erase sector  = 24
*sect = 24,s_last = 46,erase poll = 1139675

 erase sector  = 25
sect = 25,s_last = 46,erase poll = 1129157

 erase sector  = 26
*sect = 26,s_last = 46,erase poll = 1139747

 erase sector  = 27
sect = 27,s_last = 46,erase poll = 1129426

 erase sector  = 28
*sect = 28,s_last = 46,erase poll = 1166804

 erase sector  = 29
sect = 29,s_last = 46,erase poll = 1129289

 erase sector  = 30
*sect = 30,s_last = 46,erase poll = 1139221

 erase sector  = 31
sect = 31,s_last = 46,erase poll = 1129088

 erase sector  = 32
*sect = 32,s_last = 46,erase poll = 1139862

 erase sector  = 33
*sect = 33,s_last = 46,erase poll = 1129024

 erase sector  = 34
sect = 34,s_last = 46,erase poll = 1140403

 erase sector  = 35
*sect = 35,s_last = 46,erase poll = 1129116

 erase sector  = 36
sect = 36,s_last = 46,erase poll = 1155807

 erase sector  = 37
*sect = 37,s_last = 46,erase poll = 1152082

 erase sector  = 38
sect = 38,s_last = 46,erase poll = 1157580

 erase sector  = 39
*sect = 39,s_last = 46,erase poll = 1134264

 erase sector  = 40
sect = 40,s_last = 46,erase poll = 1130220

 erase sector  = 41
*sect = 41,s_last = 46,erase poll = 1130296

 erase sector  = 42
sect = 42,s_last = 46,erase poll = 1130919

 erase sector  = 43
*sect = 43,s_last = 46,erase poll = 1118854

 erase sector  = 44
*sect = 44,s_last = 46,erase poll = 1130192

 erase sector  = 45
sect = 45,s_last = 46,erase poll = 1118694

 erase sector  = 46
*sect = 46,s_last = 46,erase poll = 1185088
 done
Erased 35 sectors
 Copy linux image[2263332 byte] to Flash[0xBF050000]....
Copy to Flash...
 Copy 2263332 byte to Flash...
 addr = 0xBF0A33B6 ,cnt=1922414
 addr = 0xBF0F6762 ,cnt=1581506
 addr = 0xBF149AE6 ,cnt=1240638
 addr = 0xBF19CE7E ,cnt=899750
 addr = 0xBF1F01F8 ,cnt=558892
 addr = 0xBF243588 ,cnt=218012 done
## Booting image at bf050000 ...
   Image Name:   linkn Kernel Image
   Created:      2009-02-09  13:26:01 UTC

 System Control Status = 0x20440000
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    2263268 Bytes =  2.2 MB
   Load Address: 80000000
   Entry Point:  803cd000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 803cd000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@linux-6091) (gcc version 3.4.2) #452 Mon Feb 9 21:25:31 CST 2009

 The CPU feqenuce set to 384 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Built 1 zonelists.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/ram0
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 800068, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00177000(1536000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 27328k/32768k available (3378k kernel code, 5440k reserved, 510k data, 1116k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
detected lzma initramfs
detected lzma initramfs
initramfs: LZMA lc=3,lp=0,pb=2,dictSize=1048576,origSize=3976704
LZMA initramfs by Ming-Ching Tiew <mctiew@yahoo.com>.............................................................Load RT2880 Timer Module(Wdg/Soft)
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
io scheduler noop registered (default)
FLASH_API: MAN_ID=C2 DEV_ID=22A8 SIZE=4MB
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
loop: loaded (max 8 devices)
rdm_major = 254
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v1.60  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
GDMA1_MAC_ADRH -- : 0x00000100
GDMA1_MAC_ADRL -- : 0x000c4330
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
2860 version : 2.0.0.0 (Feb  9 2009)


=== pAd = c0000000, size = 485320 ===

<-- RTMPAllocAdapterBlock, Status=0
ralink flash device: 0x1000000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 4 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00400000 : "Kernel"
block2mtd: version $Revision: 1.1.1.1 $
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
arp_tables: (C) 2002 David S. Miller
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Fully Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 1116k freed
init started: BusyBox v1.12.1 (2009-02-09 21:19Algorithmics/MIPS FPU Emulator v1.5
:29 CST)
starting pid 14, tty '': '/etc_ro/rcS'
devpts: called with bogus options
mount: mounting none on /proc/bus/usb failed: No such file or directory
Welcome to
     _______  _______  ___     __  ____   _kernel reg pid 21 success .
  _   ___
    |  ___  \|   __  ||   |   |__||    \ | || | /  /
    | |___| ||  |__| ||   |__  __ |     \| || |/  /
    |   _   /|   _   ||      ||  || |\     ||     \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

                     =System Architecture Department=



Yes:

      ****** WeLoveLinux ******

 Welcome to ...
httpd Reg gpio hook success .
starting pid 25, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2009-02-09 21:19:29 RX DESC a04ad000  size = 2048
CST) built-in shell (ash)
Enter<-- RTMPAllocTxRxRingMemory, Status=0
 'help' for a list of built-in commands.

# 1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
Main bssid = 00:b0:0c:01:45:78
The UUID Hex string is:2880288028801880a88000b00c014578
The UUID ASCII string is:28802880-2880-1880-a880-00b00c014578!
<==== RTMPInitialize, Status=0
0x1300 = 00064380
getIfLive: device eth2.1 not found.
Commit crc = d253c90f
maclist:
WLan[00:B0:0C:01:45:78]
Lan[00:B0:0C:01:45:78]
Wan[00:B0:0C:GDMA1_MAC_ADRH -- : 0x00000100
01:45:7d]
GDMA1_MAC_ADRL -- : 0x00b00c01

phy_tx_ring = 0x01d81000, tx_ring = 0xa1d81000, size: 16 bytes

phy_rx_ring = 0x01d82000, rx_ring = 0xa1d82000, size: 16 bytes
GDMA1_FWD_CFG = 10000
eth2.1: Setting MAC address to  xx xx xx xx xx xx.
VLAN (eth2.1):  Underlying device (eth2) has same MAC, not checking promiscious mode.
eth2.2: Setting MAC address to  xx xx xx xx xx xx.
device eth2 entered promiscuous mode
VLAN (eth2.2):  Setting underlying device (eth2) to promiscious mode.
getIfLive: device br0 not found.
eth2.1: dev_set_promiscuity(master, 1)
device eth2.1 entered promiscuous mode
Router ip address config success.
br0: port 1(eth2.1) entering learning state
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
libupnp: using UDP SSDP_PORT = 1900
br0: topology change detected, propagating
br0: port 1(eth2.1) entering forwarding state
br0: topology change detected, propagating
br0: port 2(ra0) entering forwarding state
killall: udhcpd: no process killed
ND -> Bad_Sig_entry [18]...
httpd listen ip = 192.168.0.1 port = 80
MfgThread start loop.
TendaLog -> ok rtn.
macBcast uses obsolete (PF_INET,SOCK_PACKET)
IsSameNET [192.168.0.1/255.255.255.0][192.168.1.1/255.255.255.0]
sntp: host not found
killall: dnrd: no process killed
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
route: ioctl 0x890b failed: File exists
libupnp: using UDP SSDP_PORT = 1900
upnpd[289]: UPnP SDK Successfully Initialized.
Mar 29 09:36:22 upnpd[289]: UPnP SDK Successfully Initialized.
upnpd[289]: Succesfully set the Web Server Root Directory.
Mar 29 09:36:22 upnpd[289]: Succesfully set the Web Server Root Directory.
upnpd[289]: IGD root device successfully registered.
Mar 29 09:36:23 upnpd[289]: IGD root device successfully registered.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
Startnat end.
upnpd[289]: Advertisements Sent.  Listening for requests ...
Mar 29 09:36:25 upnpd[289]: Advertisements Sent.  Listening for requests ...
............ wan unlink ..4.
............ wan unlink ..5.


Now your router is back on track and it can be accessed from http://192.168.0.1 with user: admin and password: admin . Don`t forget to do a "reset to default" to be sure that all settings are set to default.

(On the putty window I am able to execute linux commands...like cat /proc/cpuinfo , cat /proc/meminfo , ls...)

I am able to do some tests and maybe we can install dd-wrt on it (I have no idea how so I need to be guided...).

Please excuse my english...

I hope that my tutorial will help a few people...if someone needs help please ask!


Last edited by kapastratos on Fri Jan 27, 2012 20:24; edited 3 times in total
Sponsor
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Tue Jan 05, 2010 18:57    Post subject: Reply with quote
Thank you for finding that out! Had the same problem with wrong firmware-update. I saw the two pads on the backside of the PCB but had no time to test on them. I think it should be possible to load the DD-WRT of DIR300 Rev.B on the unit. Have to solder a serial cable first to get my unit alive again.

shivas
kapastratos
DD-WRT Novice


Joined: 04 Oct 2008
Posts: 33
Location: Romania

PostPosted: Tue Jan 05, 2010 21:32    Post subject: Reply with quote
Today I will try to flash the dd-wrt firmware for the DIR-300 B1 router to my Tenda W311R H2 router. Both units are using the RT3050 chipset so it might work. I will let you know in a few hours!


======LATER EDIT======


Ok, I did some tests and I was able to flash my Tenda W311R with dd-wrt firmware for DIR-300 B1 but it wasn`t booting because I got this error "Bad Magic Number":

Quote:
Code:
U-Boot 1.1.3 (Feb 13 2009 - 09:48:32)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fac000
flash_protect ON: from 0xBF000000 to 0xBF01FFAF
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Feb 13 2009  Time:09:48:32
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 384 MHZ ####

 SDRAM bus set to 32 bit
 SDRAM size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.                                                                                                  0

3: System Boot system code via Flash.
## Booting image at bf050000 ...
Bad Magic Number,48445230


I did a forum search and I found this: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55600. I hexedit the firmware using XVI32 and I flashed my router again and it seems to boot a few steps then it stops:

Quote:
Code:
U-Boot 1.1.3 (Feb 13 2009 - 09:48:32)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fac000
flash_protect ON: from 0xBF000000 to 0xBF01FFAF
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Feb 13 2009  Time:09:48:32
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 384 MHZ ####

 SDRAM bus set to 32 bit
 SDRAM size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.                                                                                                  0

3: System Boot system code via Flash.
## Booting image at bf050000 ...
   Image Name:   DD-WRT v24 Linux Kernel Image
   Created:      2009-10-10   9:41:26 UTC

 System Control Status = 0x20440000
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    864813 Bytes = 844.5 kB
   Load Address: 80000000
   Entry Point:  8026d000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8026d000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.23.17 (root@dd-wrt) (gcc version 4.1.2) #969 Sat Oct 10 11:37:40 CEST 2009

 The CPU frequency set to 384 MHz
32M RAM Detected!
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists in Zone order.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 800078, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 003a9800(3840000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
console [ttyS1] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29480k/32768k available (2159k kernel code, 3288k reserved, 320k data, 120k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
Load RT2880 Timer Module(Wdg/Soft)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
rt3052 access driver initialization.
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V1.0
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ralink flash device: 0x1000000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.

found squashfs at 124000
Creating 6 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "uboot"
0x00030000-0x00040000 : "uboot-config"
0x00040000-0x00050000 : "factory-defaults"
0x00050000-0x003f0000 : "linux"
0x00124000-0x003f0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
IPP2P v0.8.2 loading
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.00  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
GDMA1_MAC_ADRH -- : 0x0000000c
GDMA1_MAC_ADRL -- : 0x43305277
PROC INIT OK!
decode /dev/mtdblock4
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 120k freed
starting Architecture code for rt2880
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
sh: ead: not found
wland: No such file or directory
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
vlan2: No such process
iptables-restore: line 69 failed
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
wland: No such file or directory


So my dd-wrt tests has stopped because I have no idea what to do next.

I had to test a dir-300 b1 original firmware to this router and the router is working with this firmware (DIR300B1_FW201WWB01.bin) but it seems that the wan port it is recognized as a switch port...anything it`s working (wireless is working) so it can be used as an access point with 5 switch ports...I don`t know if it is stable. I had to hexedit the firmware as described above.

If I do more tests I will let people know!


======LATER EDIT======

Back with some news, I flashed again to DIR-300 B1 V.2.01 firmware to run more tests and I found out that the ports are in a different order and that the wan port it is working...the order is like this:

Switch port 4 changed to WAN Port
Switch port 3 changed to Switch port 1
Switch port 2 changed to Switch port 2
Switch port 1 changed to Switch port 3
WAN Port changed to Switch port 4

I tested both...wireless and cable connection and it is working 100% and it is stable.

So now my TENDA W311R H2 router is a DIR-300 B1 router.

I am unable to find why the dd-wrt firmware designed for DIR-300 B1 it is not working on W311R H2 and why the d-link firmware designed for DIR-300 B1 it is working on W311R H2.

I will continue testing this "brain washed" router.


======LATER EDIT======

I successfully installed DD-WRT FIRMWARE to my Tenda W311R Router. It was working from the first time but I was checking for the router on 192.168.0.1 and the router flashed with dd-wrt was on 192.168.1.1 ... I had to sleep for a few hours and when I woke up it camed "check for the router on 192.168.1.1 or check if any wireless network called "dd-wrt" it`s there" , I checked and it was there, waiting for my ping Very Happy .

Now I have to do some tests to see if it is stable and if everything it is working. The firmware that I used is DD-WRT for dir-300 B1 version but I had to hexedit it te get rid of that "bad magic number" (check above) how can be done!
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Wed Jan 06, 2010 14:33    Post subject: Reply with quote
Again good news! I think the Developers can fix the problem with the "bad magic number" permanently but don´t know if they put the W311R to the supported device list if they don´t have any device for themselves. Let´s see...
kapastratos
DD-WRT Novice


Joined: 04 Oct 2008
Posts: 33
Location: Romania

PostPosted: Fri Jan 08, 2010 9:18    Post subject: Reply with quote
DD-WRT is working great on this TENDA W311R router...it is stable and I get great speeds. I will buy a tenda W306R V3 and install dd-wrt on it also!
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Thu Jan 14, 2010 21:12    Post subject: Reply with quote
Ok, i did it, build a serial adapter with a MAX232 and two resistors on the tx-output for the W311R (to get 3,3V) It´s working again! Flashed it with DD-WRT, yeah ...

@kapastratos

You can only get serial connection at 57600 Baud, you forget to mention in your discription...
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Sat Jan 16, 2010 12:22    Post subject: Reply with quote
Ok, i flashed my second Tenda with the same procedure but now got a problem. The NVRAM settings seems to be corrupt, but i don´t know how to reset them. Hardware-Reset doesn´t help. I tried to run "erase 0x003f0000 0x00400000" on U-Boot but does not work. Any advice on this?
kapastratos
DD-WRT Novice


Joined: 04 Oct 2008
Posts: 33
Location: Romania

PostPosted: Sat Jan 16, 2010 16:51    Post subject: Reply with quote
shivasdream wrote:
@kapastratos

You can only get serial connection at 57600 Baud, you forget to mention in your discription...


Check above Shocked

Quote:
Code:
Kernel command line: console=ttyS1,57600n8 root=/dev/ram0


shivasdream wrote:
Ok, i flashed my second Tenda with the same procedure but now got a problem. The NVRAM settings seems to be corrupt, but i don´t know how to reset them. Hardware-Reset doesn´t help. I tried to run "erase 0x003f0000 0x00400000" on U-Boot but does not work. Any advice on this?


Can you post some output from the serial port?
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Sat Jan 16, 2010 18:27    Post subject: Reply with quote
Here is the log
Quote:

============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Feb 13 2009 Time:09:48:32
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

##### The CPU freq = 384 MHZ ####

SDRAM bus set to 32 bit
SDRAM size =32 Mbytes

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP. 0

3: System Boot system code via Flash.
## Booting image at bf050000 ...
Image Name: DD-WRT v24 Linux Kernel Image
Created: 2009-12-28 12:13:02 UTC

System Control Status = 0x20440000
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 864847 Bytes = 844.6 kB
Load Address: 80000000
Entry Point: 8026d000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8026d000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

THIS IS ASIC
Linux version 2.6.23.17 (root@dd-wrt) (gcc version 4.1.2) #1474 Mon Dec 28 13:09:23 CET 2009

The CPU frequency set to 384 MHz
32M RAM Detected!
CPU revision is: 0001964c
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists in Zone order. Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 90800060, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 003a9800(3840000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
console [ttyS1] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29480k/32768k available (2159k kernel code, 3288k reserved, 320k data, 120k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
Load RT2880 Timer Module(Wdg/Soft)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
rt3052 access driver initialization.
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V1.0
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ralink flash device: 0x1000000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.

found squashfs at 124000
Creating 6 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "uboot"
0x00030000-0x00040000 : "uboot-config"
0x00040000-0x00050000 : "factory-defaults"
0x00050000-0x003f0000 : "linux"
0x00124000-0x003f0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
IPP2P v0.8.2 loading
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length 128 bytes
PF_RING: ring slots 4096
PF_RING: sample rate 1 [1=no sampling]
PF_RING: capture TX No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.00 256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
GDMA1_MAC_ADRH -- : 0x0000000c
GDMA1_MAC_ADRL -- : 0x43305277
PROC INIT OK!
decode /dev/mtdblock4
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 120k freed
start service
starting Architecture code for rt2880
rt2860v2_ap: module license 'unspecified' taints kernel.
Invalid nvram magic 5471 48534C46

phy_tx_ring = 0x01d76000, tx_ring = 0xa1d76000, size: 16 bytes

phy_rx_ring = 0x01d77000, rx_ring = 0xa1d77000, size: 16 bytes
RT305x_ESW: Link Status Changed
GDMA1_FWD_CFG = 10000
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
Invalid nvram magic 5471 48534C46
Algorithmics/MIPS FPU Emulator v1.5
device vlan1 entered promiscuous mode
device eth2 entered promiscuous mode
sh: ead: not found
RtmpOSNetDevDetach(): RtmpOSNetDeviceDetach(), dev->name=ra0!
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
0x1300 = 00064380
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
Invalid nvram magic 5471 48534C46
0x1300 = 00064380
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
br0: port 1(vlan1) entering learning state
wland: No such file or directory
device vlan2 entered promiscuous mode
device vlan2 left promiscuous mode
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGSbr0: topology change detected, propagating
: No such devicebr0: port 2(ra0) entering forwarding state

br0: topology change detected, propagating
br0: port 1(vlan1) entering forwarding state
SIOCGIFFLAGS: No such device
etherip: Ethernet over IPv4 tunneling driver
Invalid nvram magic 5471 48534C46


There´s no wireless working, but access to Webinterface is normal. This W311R has an abnormal behavior even with the original firmware, i think the device was not really new as i received it

and here the settings read by dd-wrt from telnet

Quote:
sputnik_done=0
vlans=0
samba_mount=0
wl_wep_last=
wl0.1_key3=
wl_wme_ap_vo=3 7 1 3264 1504 off
wan_gateway_buf=0.0.0.0
wl0.1_key4=
wan_dial=0
warn_connlimit=500
oet6_shaper=0
resetbutton_enable=1
block_cookie=0
wan_vdsl=0
chilli_dns1=0.0.0.0
rc_firewall=
wl_frameburst=off
ezc_enable=1
wd_maclist=
NC_enable=0
wl0_nmode_protection=auto
wl0_br1_ipaddr=0.0.0.0
eth5_bridged=1
wl0.1_bridged=1
upnp_wan_proto=
smtp_redirect_destination=0.0.0.0
svqos_port3prio=10
wl0.2_radius_key=
dhcp_num=50
filter_web_url1=
wan_ipaddr=0.0.0.0
oet3_bridged=1
filter_web_url2=
reconnect_hours=0
filter_web_url3=
et0macaddr_safe=00:0C:43:30:52:77
af_country=
oet2_ip=1.2.3.4
wl0_rts=2347
filter_web_url4=
af_ssid_name=AnchorFree WiFi
wd_sslport=443
ospfd_copt=0
zebra_conf=
filter_web_url5=
fon_enable=0
port2vlans=0
wl_ifname=
filter_web_url6=
wan_wins=0.0.0.0
oet9_comp=0
snmpd_syscontact=root
wds1.1=
wl0_wds4_enable=0
ipv6_enable=0
ntp_mode=auto
wl_wep=disabled
http_enable=1
filter_web_url7=
wds1.2=
wl0_wds5_if=
wl0_radauth=0
l2tp_pass=1
filter_web_url8=
oet8_en=0
eth9_bridged=1
sputnik_mode=standard
svqos_ips=
wds1.3=
ddns_dyndnstype=
wl0.2_auth_mode=disabled
pppoe_username=
filter_web_url9=
os_version=4.150.10.5
oet7_bridged=1
wds1.4=
l2tp_use_dhcp=0
wl_gmode_protection=auto
eth4_ipaddr=0.0.0.0
wds1.5=
sshd_rsa_host_key=
wl0_wpa_gtk_rekey=3600
wds1.6=
mac_clone_enable=0
wl0_sta_retry_time=5
ppp_get_srv=
oet1_id=1
wds1.7=
wl0_wds3_hwaddr=
wl_frag=2346
wds1.8=
wan_mtu=1500
wl_wep_gen=
wl0_key=1
eth1_netmask=0.0.0.0
wds1.9=
filter_macmode=deny
oet1_mssfix=0
wd_httpdname=WiFiDog
wl0_wds9_hwaddr=
wl0.2_closed=0
svqos_port1prio=10
ppp_compression=0
console_loglevel=7
NC_LoginTimeout=86400
port0vlans=1
sshd_wanport=22
dnsmasq_options=
time_zone=+01
oet7_comp=0
reconnect_minutes=0
wan_get_domain=
af_state=
ttraff_enable=1
oet7_mssfix=0
wl0_wds2_ipaddr=
wl0.1_netmask=0.0.0.0
wan_ifname=vlan2
eth5_netmask=0.0.0.0
wl_wme_sta_be=15 1023 3 0 0 off
sshd_authorized_keys=
radvd_enable=0
upnp_max_age=180
squid_proxy_server_port=3128
oet3_netmask=255.255.255.0
oet1_ip=1.2.3.4
wl_radioids=
gozila_action=0
af_ssid=0
wl0_dfs_postism=60
wan_hostname=
wl0_wds8_ipaddr=
wl0_radio=1
wl_corerev=
ppp_mtu=1500
af_address=
sv_restore_defaults=0
zebra_enable=1
wl0_wds0=
info_passwd=0
wl0.1_wpa_psk=
DD_BOARD=Dlink-DIR300 rev b
svqos_port3bw=FULL
wl0_wds4_if=
wl0_wds1=
wl0_wds2_netmask=
oet10_comp=0
oet7_en=0
wl_wme_sta_bk=15 1023 7 0 0 off
manual_boot_nv=0
wl0_wds2=
wl0_bcn=100
snmpd_conf=See http://www.net-snmp.org for expert snmpd.conf options
wl0_wds3=
pptpd_auth=
radio0_on_time=111111111111111111111111
macupd_interval=10
wl0_wds4=
block_multicast=1
wl_afterburner=off
wl_radio=1
wl0_hwaddr=00:0C:43:30:52:79
ppp_static=0
filter_tod1=
dtag_vlan8=0
oet5_comp=0
eth9_netmask=0.0.0.0
log_rejected=0
dyn_default=0
wl0_wds5=
filter_tod2=
oet7_netmask=255.255.255.0
wl0_wds6=
filter_tod3=
oet1_shaper=0
wl0_wds7=
filter_tod4=
ezc_version=2
oet9_rem=192.168.90.1
wl0_wds8=
ddns_passwd_buf=
wk_mode=gateway
wl0_gmode_protection=auto
filter_tod5=
wl0_wds9=
rc_shutdown=
wl0.2_akm=disabled
wl0.1_wpa_gtk_rekey=3600
filter_tod6=
NC_GatewayMode=Open
wl0_wds6_netmask=
filter_tod7=
wl0_radmacpassword=0
wl_rts=2347
filter_tod8=
oet7_shaper=0
wl0_wds9_desc=
filter_tod9=
vlan0hwname=et0
wl_ap_isolate=0
lan_wins=
wd_path=/wifidog
dhcp_dnsmasq=1
NC_IdleTimeout=0
ip_conntrack_udp_timeouts=120
dhcpd_options=
wl_mac_list=
lan_hwnames=
dhcpd_usejffs=0
static_leases=
wl_wme_no_ack=off
wds_watchdog_enable=0
pppoe_demand=0
wd_auth=0
local_dns=0
wl0.3_auth=0
oet3_comp=0
wl0_wds10_desc=
wl0_radius_key=
filter_dport_grp10=
wl0_wme_ap_be=15 63 3 0 0 off
wl0_wds10_netmask=
ddns_username_buf=
wd_enable=0
wl0_nmcsidx=-1
wl0_lazy_wds=
refresh_time=3
wl0_wds3_if=
wl0_channel=6
oet6_en=0
wl0_wds5_enable=0
pptp_encrypt=0
oet10_en=0
NC_ForcedRedirect=0
ddns_wan_ip=0
oet7_rem=192.168.90.1
wl0_wme_ap_bk=15 1023 7 0 0 off
schedule_hour_time=1
wl0_wds7_desc=
wl0_wds10_enable=0
dr_setting=0
upnp_enable=0
wl_wme_txp_be=7 3 4 2 0
hs_redirect=
http_redirect_destination=0.0.0.0
eth5_ipaddr=0.0.0.0
dhcpc_vendorclass=
wol_hostname=
wl0_wds4_hwaddr=
pptpd_lip=
filter_rule10=
eth2_bridged=1
forwardspec_entries=0
rflow_if=br0
wl_dfs_preism=60
wl0.1_auth=0
oet1_comp=0
wl_wme_txp_bk=7 3 4 2 0
NC_AllowedWebHosts=
def_whwaddr=00:00:00:00:00:00
wl0_auth_mode=disabled
oet2_mssfix=0
dhcpc_requestip=
status_auth=1
wl0.3_closed=0
autofw_port0=
boardnum=0x0
warn_enabled=0
language=english
wl0_crypto=off
def_hwaddr=00:00:00:00:00:00
oet8_mssfix=0
wl_bcn=100
wl0_wds9_ospf=
wl0_wds5_desc=
wl0_wds3_ipaddr=
hotss_operatorid=
macupd_enable=0
wl_wep_buf=
wl_reg_mode=off
wl0.2_bridged=1
oet10_mssfix=0
eth6_bridged=1
wd_username=
mmc_enable0=0
oet4_bridged=1
rflow_ip=0.0.0.0
upnp_config=1
wl0.2_radius_ipaddr=
filter_dport_grp1=
oet5_rem=192.168.90.1
oet1_fragment=0
pptpd_client_mru=1450
wl0_wds9_ipaddr=
rc_custom=
filter_dport_grp2=
size: 17627 bytes (47909 left)
root@DD-WRT:~# nvram
usage: nvram [get name] [set name=value] [unset name] [show]
root@DD-WRT:~#
BrainSlayer
Site Admin


Joined: 06 Jun 2006
Posts: 7463
Location: Dresden, Germany

PostPosted: Sun Jan 17, 2010 18:03    Post subject: Reply with quote
shivasdream wrote:
Ok, i flashed my second Tenda with the same procedure but now got a problem. The NVRAM settings seems to be corrupt, but i don´t know how to reset them. Hardware-Reset doesn´t help. I tried to run "erase 0x003f0000 0x00400000" on U-Boot but does not work. Any advice on this?


thats the right way to erase the nvram sector. dd-wrt will the recover any bad setting.

_________________
"So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
shivasdream
DD-WRT Novice


Joined: 06 Nov 2009
Posts: 9

PostPosted: Mon Jan 18, 2010 7:52    Post subject: Reply with quote
Finally i managed it, after flashing several firmwares that problem is gone. But now there`s another one:

Both Router seems to have exactly the same MAC-Adresses for WAN, LAN and Wireless (not the ones noted on the Router)

I found this thread
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=64460

about the same issue on the WHR-G300N. Changing the MAC´s with the startup-script does not to work...
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Mon Jan 18, 2010 8:50    Post subject: Reply with quote
no answers..no support Exclamation
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
newman_kg
DD-WRT Novice


Joined: 22 Jan 2010
Posts: 5

PostPosted: Fri Jan 22, 2010 17:58    Post subject: Reply with quote
btw, how to identify h1/h2 models of this router without taking it apart?
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Sat Jan 23, 2010 9:14    Post subject: Reply with quote
guys what build have u flashed and what is NOT working?!
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
kapastratos
DD-WRT Novice


Joined: 04 Oct 2008
Posts: 33
Location: Romania

PostPosted: Sat Feb 06, 2010 0:31    Post subject: Reply with quote
Sash wrote:
guys what build have u flashed and what is NOT working?!


I don`t understand your question!
Goto page 1, 2, 3 ... 21, 22, 23  Next Display posts from previous:    Page 1 of 23
Post new topic   Reply to topic    DD-WRT Forum Index -> Ralink SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum