I just got it and while I found out EnGenius is Senao. I've only seen so many models listed. This one seems a bit newer. I think it would work but is there a documentation I should use specifically or anything? Or can I just use the guides on this section of the forum?
I picked one yesterday. It comes with older firmware and will not upgrade to any firmware listed on Engenius or Sitecom web pages.
ESR1221N2 is equivalent to WL-341v.2-003
Firmware is combination of Apps.sqsh+uImage+header. I downloaded their GPL firmware and looked at firmware script that creates the final image.
-s source file (/ISD2/MIPS32/linux-2.6.30/images)
-d destination file
-a auto set parameter
-t type (bootloader,kernel,kernelapp,app etc.)
-z zero padding
-c use cat command to combine files
-b flash sector size
I will post more when Serial to TTL cable arrives. _________________ Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
I couldn't figure out if header.x86 can really decode .dlf files or not based on the switches from the help output.
It does, but leaves 192 bytes behind.
Code:
./header.x86 -s ESR1221N_1221N2-V1-1-0-58.dlf -d ESR1221TEST -a
Somehow in the process I soft-bricked the router. It still works but emergency mode is very limited and will not work with official firmware images.
Hardware is ver.1.0.0 with following specifications:
I tried sn2450 as a password. It didn't work. After hitting 1 on boot router presented me with different output:
Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.
8196C(390MHz)
New Header
User Press [1]
---Escape booting by user
<Senao Networks>help
----------------- COMMAND MODE HELP ------------------
HELP (?) : Print this help message
D <Address> <Len>
IPCONFIG:<TargetAddress>
Now the bricked router presents me only with emergency mode:
Booting...
RTL-boot Ver:1.0.4.175 2011/06/28 +-----------------------------+
Please choose the operation:
1: Load system code to SDRAM via TFTP.
8196C(390MHz)
Original Header
no sys signature at 00018000!
<Senao Networks>help
----------------- COMMAND MODE HELP ------------------
HELP (?) : Print this help message
D <Address> <Len>
IPCONFIG:<TargetAddress>
<Senao Networks>ipconfig
Target Address=192.168.99.9
Http Address=192.168.99.9
<Senao Networks>
Router only proceeds with flashing if valid file is received. Web interface accepts only .dlf files, TFTP image needs dlf decoded with header.x86 and first 192 bytes stripped. _________________ Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
Last edited by hanskloss on Sun Jun 09, 2013 14:40; edited 1 time in total
I've managed to create working environment to compile somehow valid images. They are accepted by the router but still not work.
I've adapted Zyxel GPL installation guide (opensource.zyxel.com/NBG-417N/NBG417N_GPL%20Installation%20Guide_Final.txt) to my needs:
4. Generate firmwares
Step 1:mkdir /tftpboot
Step 2: cd /ISD2/scripts/
Step 3: make -f Makefile.IMG
(Note: firmwares are generated in /tftpboot directory)
Note: User may build kernel or desired open source library respectively and install
the objects into TARGET_RAMDISK directory. Followings are examples for building up kernel
image and busybox library object respectively.
For example: Build up kernel image
Step 1: mkdir /tftpboot
Step 2: cd /ISD2/MIPS32/linux-2.6.30/
Step 3: make -f Makefile.ISD clean all
Step 4: make -f Makefile.ISD install
For example: Build up busybox library
Step 1: cd /ISD2/MIPS32_KNLAPPS/busybox-1.7.x/
Step 2: make -f Makefile.ISD clean all
Step 3: make -f Makefile.ISD install _________________ Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
Linux kernel (root-fs) upgrade.
checksum Ok !
Copy all, burn Addr =0x18000! srcAddr=0x80500000 len =0x1dd03e
.............................................................................................................................
Write Successed!
reboot.......
Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.
8196C(390MHz)
New Header
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x800034c0
RTL8192C/RTL8188C driver version 1.6 (2011-07-18)
You are using 8192C
init started: BusyBox v1.7.5 (2013-06-09 10:25:28 EDT)
starting pid 14, tty '/dev/console': '/sbin/config_init'
Config Init version: 1.2.2.303 date: 2012/06/22
check storage NOT OK! mtdStorageNum 6, erase the mtd, please wait!
sh: setconfig: not found
Uboot config error!!! Go to check the backup partation.
sh: setconfig: not found
RF config error!!! Go to check the backup RF data partation.
start_manufactureAPP
get factoryappsESR1221N_1221N2.sqsh timeout!!
starting pid 113, tty '/dev/ttyS0': '/sbin/config_term'
************************************************************************
* ESR1221NX *
************************************************************************
BusyBox v1.7.5 (2013-06-09 10:25:28 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands. _________________ Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9
One of the links for ESR1221N informed me that product has been discontinued and replaced by ESR150H. Firmware was much larger and header looked very promising
Indeed, firmware v1.3.1.4 loaded correctly. Serial console password changed to sn2450 with that version
Then, I used web interface to upgrade to v1.3.8.27. Console password changed again to lin17
Booting...
RTL-boot Ver:1.0.4.175 2011/06/28
Please choose the operation:
1: Load system code to SDRAM via TFTP.
8196C(390MHz)
New Header
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x80003630
RTL8192C/RTL8188C driver version 1.6 2011-07-18
You are using 8192C
init started: BusyBox v1.7.5 (2012-10-31 14:21:14 CST)
starting pid 18, tty '/dev/console': '/sbin/config_init'
mknod: /dev/ttyS0: File exists
mknod: /dev/ttyS1: File exists
Config Init version: 1.3.8.27 date: 2012/10/31
Sun Jan 1 00:00:00 UTC 2012
mount: can't find /sys in /etc/fstab
ln: /lib/./modules: File exists
starting pid 109, tty '/dev/ttyS0': '/sbin/config_term'
************************************************************************
* ESR150H *
************************************************************************
BusyBox v1.7.5 (2012-10-31 14:21:14 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
I might consider of doing full flash dump now. _________________ Asus RT-AC66R Target:brcm47xx SubTarget:mips74k Packages:mipsel_74kc
Netgear R7000 Target:bcm53xx Packages:arm_cortex-a9