EnGenius ESR1221N2?

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Senao Devices
Author Message
FantasyDivine
DD-WRT Novice


Joined: 16 Jan 2013
Posts: 5

PostPosted: Wed Jan 16, 2013 18:13    Post subject: EnGenius ESR1221N2? Reply with quote
This one: http://www.newegg.com/Product/Product.aspx?Item=N82E16833168086

I just got it and while I found out EnGenius is Senao. I've only seen so many models listed. This one seems a bit newer. I think it would work but is there a documentation I should use specifically or anything? Or can I just use the guides on this section of the forum?
Sponsor
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17638
Location: Hesse/Germany

PostPosted: Wed Jan 16, 2013 18:50    Post subject: Reply with quote
do
http://www.dd-wrt.com/site/support/router-detection

_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
FantasyDivine
DD-WRT Novice


Joined: 16 Jan 2013
Posts: 5

PostPosted: Wed Jan 16, 2013 18:54    Post subject: Reply with quote
Ok I will. Not enough time for all of this for now. But thanks! I will do this later tonight probably and post the info/whatever I find out.
FantasyDivine
DD-WRT Novice


Joined: 16 Jan 2013
Posts: 5

PostPosted: Fri Jan 18, 2013 21:56    Post subject: Reply with quote
http://www.wikidevi.com/wiki/EnGenius_ESR1221N

http://www.dd-wrt.com/phpBB2/viewtopic.php?p=531828

FCC ID: U2M-SR1221N10

Post more info later. I really need to wrt this router.
FantasyDivine
DD-WRT Novice


Joined: 16 Jan 2013
Posts: 5

PostPosted: Sat Jan 19, 2013 2:04    Post subject: Reply with quote
Hey!

EnGenius ESR1221N

The FCC test report lists the Sitecom WL-340 v2 003

http://www.dd-wrt.com/wiki/index.php/Supported_Devices#Sitecom

WL340 v2 U2M-SR97908005 Ralink RT3050@320 16 4 1 b/g/n - 1 ? 4 LAN 1 WAN 12V/1A ESR9753 ODM donated router needed

So I use that method? I would guess it is compatible! Just lead me the way to the formware I can use!
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7622

PostPosted: Sat Jan 19, 2013 13:37    Post subject: Reply with quote
http://www.dd-wrt.com/wiki/index.php/Known_incompatible_devices#List_of_Incompatible_Devices
_________________
Kernel panic: Aiee, killing interrupt handler!
FantasyDivine
DD-WRT Novice


Joined: 16 Jan 2013
Posts: 5

PostPosted: Thu Jan 31, 2013 5:14    Post subject: Reply with quote
I got it sending back. Thanks...
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Wed Jun 05, 2013 16:48    Post subject: Reply with quote
I picked one yesterday. It comes with older firmware and will not upgrade to any firmware listed on Engenius or Sitecom web pages.

ESR1221N2 is equivalent to WL-341v.2-003
Firmware is combination of Apps.sqsh+uImage+header. I downloaded their GPL firmware and looked at firmware script that creates the final image.

Code:
./header.x86 -s uImage -d firmare.dlf -a -t kernel -z -c appsESR1221N_1221N2.sqsh -b 4096


-s source file (/ISD2/MIPS32/linux-2.6.30/images)
-d destination file
-a auto set parameter
-t type (bootloader,kernel,kernelapp,app etc.)
-z zero padding
-c use cat command to combine files
-b flash sector size

I will post more when Serial to TTL cable arrives.

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Wed Jun 05, 2013 21:54    Post subject: Reply with quote
I couldn't figure out if header.x86 can really decode .dlf files or not based on the switches from the help output.
It does, but leaves 192 bytes behind.

Code:
./header.x86 -s ESR1221N_1221N2-V1-1-0-58.dlf -d ESR1221TEST -a


hexdump -C -n 16 ESR1221TEST
00000000 00 00 00 00 00 00 01 01 00 00 00 23 31 32 33 00 |...........#123.|


After stripping 192 bytes I can see correct signature 63 72 36 63 cr6c for uImage
Code:
dd if=ESR1221TEST of=ESR1221 bs=1 skip=192


hexdump -C -n 16 ESR1221
00000000 63 72 36 63 80 50 00 00 00 00 e0 00 00 0f 8c 02 |cr6c.P..........|

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Sun Jun 09, 2013 13:43    Post subject: Reply with quote
Somehow in the process I soft-bricked the router. It still works but emergency mode is very limited and will not work with official firmware images.
Hardware is ver.1.0.0 with following specifications:

MX25L3206E - 4MB flash
RTL8196C
RTL8192CE
A3V56S40FTP-G6 32MB RAM

Serial port pins
^ Vcc
GND
RX
TX
Connected using only 3 and my initial output looked like this:

Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.

8196C(390MHz)
New Header
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x800034c0
RTL8192C/RTL8188C driver version 1.6 (2011-07-18)
You are using 8192C
init started: BusyBox v1.7.5 (2012-05-23 10:57:56 CST)
starting pid 14, tty '/dev/console': '/sbin/config_init'
Config Init version: 1.0.0.309 date: 2012/05/23
starting pid 69, tty '/dev/ttyS0': '/sbin/config_term'
************************************************************************
* ESR1221NX *
************************************************************************

KernelApp/Ramdisk Ver:1.0.0.309 Date:2012/05/23
password: cat: can't open '/apps/lib/modules/2.6.30/modulesApp.dep': No such file or directory
ln: /sbin/./apps_init: File exists
ln: /sbin/./eraseall: File exists
ln: /sbin/./opmode.sh: File exists
sh: cannot create /proc/senao/ip_conntrack_interface: nonexistent directory
sh: cannot create /proc/senao/ip_conntrack_interface: nonexistent directory
sh: cannot create /proc/senao/ip_conntrack_interface: nonexistent directory




I tried sn2450 as a password. It didn't work. After hitting 1 on boot router presented me with different output:



Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.

8196C(390MHz)
New Header
User Press [1]

---Escape booting by user
<Senao Networks>help
----------------- COMMAND MODE HELP ------------------
HELP (?) : Print this help message
D <Address> <Len>
IPCONFIG:<TargetAddress>


Now the bricked router presents me only with emergency mode:

Booting...

RTL-boot Ver:1.0.4.175 2011/06/28 +-----------------------------+
Please choose the operation:
1: Load system code to SDRAM via TFTP.

8196C(390MHz)
Original Header
no sys signature at 00018000!
<Senao Networks>help
----------------- COMMAND MODE HELP ------------------
HELP (?) : Print this help message
D <Address> <Len>
IPCONFIG:<TargetAddress>
<Senao Networks>ipconfig
Target Address=192.168.99.9
Http Address=192.168.99.9
<Senao Networks>


Router only proceeds with flashing if valid file is received. Web interface accepts only .dlf files, TFTP image needs dlf decoded with header.x86 and first 192 bytes stripped.

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9


Last edited by hanskloss on Sun Jun 09, 2013 14:40; edited 1 time in total
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Sun Jun 09, 2013 14:28    Post subject: Reply with quote
I've managed to create working environment to compile somehow valid images. They are accepted by the router but still not work.
I've adapted Zyxel GPL installation guide (opensource.zyxel.com/NBG-417N/NBG417N_GPL%20Installation%20Guide_Final.txt) to my needs:

Download GPL release from engenius
http://www.engeniustech.com/resources/GPL_RELEASE_ESR1221N2.tar.gz
Perform following steps as a root (sudo su)

1. Uncompress GPL package and install ISD in root directory
Step 1: tar -zxvf GPL_RELEASE_ESR1221N2.tar.gz
Step 2: cd GPL_RELEASE/
Step 3: mv ISD2 /

2. Install toolchains in opt directory
Step 1: cd /ISD2/toolchains/
Step 2: tar -zxvf rsdk-1.3.6-4181-EB-2.6.30-0.9.30-2011-0518.tar.gz
Step 3: mv rsdk-1.3.6-4181-EB-2.6.30-0.9.30 /opt
Step 4: export PATH=/opt/rsdk-1.3.6-4181-EB-2.6.30-0.9.30/bin:$PATH

3. Copy target ramdisk directory in root directory
Step 1: cp /ISD2/TARGET_RAMDISK / -R

4. Generate firmwares
Step 1:mkdir /tftpboot
Step 2: cd /ISD2/scripts/
Step 3: make -f Makefile.IMG
(Note: firmwares are generated in /tftpboot directory)


Note: User may build kernel or desired open source library respectively and install
the objects into TARGET_RAMDISK directory. Followings are examples for building up kernel
image and busybox library object respectively.

For example: Build up kernel image
Step 1: mkdir /tftpboot
Step 2: cd /ISD2/MIPS32/linux-2.6.30/
Step 3: make -f Makefile.ISD clean all
Step 4: make -f Makefile.ISD install

For example: Build up busybox library
Step 1: cd /ISD2/MIPS32_KNLAPPS/busybox-1.7.x/
Step 2: make -f Makefile.ISD clean all
Step 3: make -f Makefile.ISD install

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Sun Jun 09, 2013 18:05    Post subject: Reply with quote
Little step forward
I've got password for the serial console login by doing strings on /ISD2/TARGET_RAMDISK/MIPS32_STAGE/sbin/config_term

password for Senao/Engenius ESR1221N2 is: lin17

I also modified kernel config sources /ISD2/configs/kernel_def_config from 0xE000 to 0x18000

# this offset MUST between 0x10000~0x40000.
#
CONFIG_RTL_LINUX_IMAGE_OFFSET=0x18000


recompiled the firmware and this allowed me to boot the router with some errors


<Senao Networks>.............................................................................................................
#web upload success!

Linux kernel (root-fs) upgrade.
checksum Ok !
Copy all, burn Addr =0x18000! srcAddr=0x80500000 len =0x1dd03e
.............................................................................................................................
Write Successed!

reboot.......

Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.

8196C(390MHz)
New Header
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x800034c0
RTL8192C/RTL8188C driver version 1.6 (2011-07-18)
You are using 8192C
init started: BusyBox v1.7.5 (2013-06-09 10:25:28 EDT)
starting pid 14, tty '/dev/console': '/sbin/config_init'
Config Init version: 1.2.2.303 date: 2012/06/22
check storage NOT OK! mtdStorageNum 6, erase the mtd, please wait!
sh: setconfig: not found
Uboot config error!!! Go to check the backup partation.
sh: setconfig: not found
RF config error!!! Go to check the backup RF data partation.
start_manufactureAPP
get factoryappsESR1221N_1221N2.sqsh timeout!!
starting pid 113, tty '/dev/ttyS0': '/sbin/config_term'
************************************************************************
* ESR1221NX *
************************************************************************

KernelApp/Ramdisk Ver:1.2.2.303 Date:2012/06/22
password:


BusyBox v1.7.5 (2013-06-09 10:25:28 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
hanskloss
DD-WRT User


Joined: 30 May 2010
Posts: 98

PostPosted: Mon Jun 10, 2013 18:18    Post subject: Reply with quote
Success Very Happy

My router as identified on the label is ESR1221N2(4M_32M) must be pre-release of ESR150H / ESR300H

In my search I downloaded and tried several images for RTL8196C routers. Headers look very similar

63 72 36 63 Senao ESR1221N
63 72 36 64 Edimax BR-6258n
63 72 36 65 Edimax BR-6228nS_nC
63 72 37 30 Edimax BR-6428n
63 72 36 62 Trendnet TEW-652BRPv2
63 72 36 63 Trendnet TEW-652BRPv3

One of the links for ESR1221N informed me that product has been discontinued and replaced by ESR150H. Firmware was much larger and header looked very promising

00000000 63 72 36 63 80 50 00 00 00 01 80 00 00 11 04 02 |cr6c.P..........|
00000010 53 4e 45 47 00 00 00 01 00 01 80 00 80 50 00 00 |SNEG.........P..|

Indeed, firmware v1.3.1.4 loaded correctly. Serial console password changed to sn2450 with that version
Then, I used web interface to upgrade to v1.3.8.27. Console password changed again to lin17

Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.

8196C(390MHz)
New Header
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x80003630
RTL8192C/RTL8188C driver version 1.6 2011-07-18
You are using 8192C
init started: BusyBox v1.7.5 (2012-10-31 14:21:14 CST)
starting pid 18, tty '/dev/console': '/sbin/config_init'
mknod: /dev/ttyS0: File exists
mknod: /dev/ttyS1: File exists
Config Init version: 1.3.8.27 date: 2012/10/31
Sun Jan 1 00:00:00 UTC 2012
mount: can't find /sys in /etc/fstab
ln: /lib/./modules: File exists
starting pid 109, tty '/dev/ttyS0': '/sbin/config_term'
************************************************************************
* ESR150H *
************************************************************************

KernelApp/Ramdisk Ver:1.3.8.27 Date:2012/10/31
password:

BusyBox v1.7.5 (2012-10-31 14:21:14 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.



I might consider of doing full flash dump now.

_________________
Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Senao Devices All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum