Posted: Fri Feb 11, 2011 3:38 Post subject: Re: TL-WR941ND back to original firmware
dvd741 wrote:
I thought about using dd-wrt then, since turning back doesn't seem to be possible, but after each power-interrupt / reboot all setting are lost...
I guess you have WR941ND v3.2 with the Intel flash chip which dd-wrt can't write.
Therefore it can't save settings and can't write any update files to flash.
Serial console is your only chance to debrick it. _________________ Kernel panic: Aiee, killing interrupt handler!
And where can i find the manual on that exactly?
(I don't have a cable of any kind & am an absolute noob @ hardware stuff like connecting the cable with the right connectors)
And is there any chance the intel chip will become writeable in the next days/weeks/months?
The only chance to revive the TL-WR941 router with Intel Flash chip is via Serial port. For serial port pinouts you can find plenty of pictures. For cable use Nokia Ca-42. cable or something like that. Files you can find on google. Just copy and paste the complete filename. Only 2 files are needed.
1. Start the board:
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds
2. Tpye 'tpl' here, so you can go into the CLI of the bootloader.
4. Load the attached initramfs image via TFTP, and boot that with the following
command:
> ar7100> tftp 0xa0800000 openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin; bootm 0xa0800000
> set link to 100M full by lqm.
> dup 1 speed 100
> Using eth0 device
> TFTP from server 192.168.1.254; our IP address is 192.168.1.1
> Filename 'openwrt-ar71xx-generic-tl-wr941nd-v3-initramfs-uImage.bin'.
> Load address: 0xa0800000
> Loading: #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> #################################################################
> ###########################################################
> done
> Bytes transferred = 3297007 (324eef hex)
> ## Booting image at a0800000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
5. Wait until the kernel boots:
> Linux version 2.6.37-rc4 (juhosg@idared) (gcc version 4.3.3 (GCC) ) #3 Wed Dec 1 18:52:15 CET 2010
> bootconsole [early0] enabled
> CPU revision is: 00019374 (MIPS 24Kc)
> Atheros AR9132 rev 2, CPU:400.000 MHz, AHB:100.000 MHz, DDR:400.000 MHz
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> <...>
> ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
> nf_conntrack version 0.5.0 (460 buckets, 1840 max)
> ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
> Initializing USB Mass Storage driver...
> usbcore: registered new interface driver usb-storage
> USB Mass Storage support registered.
6. Press <Enter> here.
> BusyBox v1.17.3 (2010-11-26 20:05:50 CET) built-in shell (ash)
> Enter 'help' for a list of built-in commands.
>
> _______ ________ __
> | |.-----.-----.-----.| | | |.----.| |_
> | - || _ | -__| || | | || _|| _|
> |_______|| __|_____|__|__||________||__| |____|
> |__| W I R E L E S S F R E E D O M
> KAMIKAZE (bleeding edge, r24196) ------------------
> * 10 oz Vodka Shake well with ice and strain
> * 10 oz Triple sec mixture into 10 shot glasses.
> * 10 oz lime juice Salute!
> ---------------------------------------------------
> root@OpenWrt:/#
7. Download the original firmware image into /tmp via wget.
> root@OpenWrt:/# cd tmp
> root@OpenWrt:/tmp# wget ftp://192.168.1.254:2121/openwrt/wr941nv2_en_3_11_8_up\(100609\).bin
> Connecting to 192.168.1.254:2121 (192.168.1.254:2121)
> wr941nv2_en_3_11_8_u 100% |*******************************| 3840k 00:00:00 ETA
> root@OpenWrt:/#
8. Write that into the firmware partition with the mtd command:
> root@OpenWrt:/tmp# mtd write wr941nv2_en_3_11_8_up\(100609\).bin firmware
> Unlocking firmware ...
>
> Writing from wr941nv2_en_3_11_8_up(100609).bin to firmware ...
> root@OpenWrt:/tmp#
9. Reboot the device:
> root@OpenWrt:/tmp# reboot
10. Then the board should boot into the original firmware:
> root@OpenWrt:/tmp# eth0: link down
> br-lan: port 1(lan1) entering forwarding state
> device eth0 left promiscuous mode
> device lan4 left promiscuous mode
> br-lan: port 4(lan4) entering disabled state
> device lan3 left promiscuous mode
> br-lan: port 3(lan3) entering disabled state
> device lan2 left promiscuous mode
> br-lan: port 2(lan2) entering disabled state
> device lan1 left promiscuous mode
> br-lan: port 1(lan1) entering disabled state
> lan1: link down
> Restarting system.
>
>
> U-Boot 1.1.4 (Jun 18 2009 - 15:08:27)
>
> AP81 (ar7100) U-boot
> DRAM:
> sri
> 32 MB
> id read 0x100000ff
> flash size 8MB, sector count = 128
> Flash: 8 MB
> Using default environment
>
> In: serial
> Out: serial
> Err: serial
> Net: ag7100_enet_initialize...
> No valid address in Flash. Using fixed address
> eth0: 00:03:7f:09:0b:ad
> eth0 up
> eth0
> Autobooting in 1 seconds## Booting image at bf020000 ...
> Uncompressing Kernel Image ... OK
>
> Starting kernel ...
>
> Linux version 2.6.15--LSDK-6.1.1.40 gcc version 3.4.4 #1 Tue Jun 1 15:13:49 CST 2010
> flash_size passed from bootloader = 8
> CPU revision is: 00019374
> Determined physical RAM map:
> memory: 02000000 @ 00000000 (usable)
> Built 1 zonelists
> Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init
> Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
> Primary data cache 32kB, 4-way, linesize 32 bytes.
> Synthesized TLB refill handler (20 instructions).
> Synthesized TLB load handler fastpath (32 instructions).
> Synthesized TLB store handler fastpath (32 instructions).
> Synthesized TLB modify handler fastpath (31 instructions).
> ...
Posted: Sun Mar 17, 2013 3:37 Post subject: TP-Link TL-WR941ND V3.2 router unbricked !
Hi all,
As for many others my router got bricked after a bad flash with an Open WRT firmware.
There is no easy way to recover your TP-Link TL-WR941ND V3.2 router....
Basically you have to open the router and solder to its PCB a USB to Serial TTL RS232 cable.
Using a serial port communicator software, a TFTP server and a FTP server you can manage to push the stock firmware back into the router via the serial cable.
A good thing to do once the router is working again is to replace that stock firmware with DD-WRT build 15778. That's because the original one keeps dropping the Wi-Fi connections (at least in my case).
Hello I can connect, but the Putty or serialUsb both give me asteric symbols and things like that and it goes on and restarting, try winXp and win7, I hope if anyone knows any solution
I have bricked TP-Link WR-941ND (ver. 3.6) and tried to revert back to the original firmware using your tutorial.
Connection via Serial is OK, but I when I type "tpl" and then turn on the router I got these non-sense symbols (tak a look at the video in the link below)
I also tried other methods with pushed WPS/reset button but without any success My router is in bootloop and all the LEDs are still blinking again and again...
