Linksys E1200 Bricked

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2  Next
Author Message
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Mon May 09, 2016 12:36    Post subject: Linksys E1200 Bricked Reply with quote
http://www.dd-wrt.com/wiki/index.php/Linksys_E1200v2

I bricked the router this morning and want to learn about serial pinout of it and how to connect by usb-ttl cable on computer?

In fact the weekend I set up different firmwares openwrt 15.05.1, tomato shibby 1.36, latest linksys generic firmwares but finally went to ddwrt 29519 mega with success (with all flashes).

My intention was to set up a Hotspot by using Hotspot system on ddwrt GUI. Though I have done properly subsciription to service and setup on the router I could not finalize the hotspot.

Installation guide of Hotspot System was saying

"recommend build 22118 or later (coovachilli based dd-wrt). Following versions are supported: mini_hotspot (broadcom_K26 non-nv60k , non-nv64k!), nokaid, standard, big or mega. Other versions (like mini or micro) don't contain the hotspot module so they cannot be used for hotspot purposes."
(Ref: http://www.hotspotsystem.com/installation-guide-dd-wrt )

then I decided to go through dd-wrt.v24-29519_NEWD-2_K2.6_mini_hotspot.bin firmware instead of dd-wrt.v24-29519_NEWD-2_K3.x_mega-e1200v2.bin

After I flashed it everything PUUFFF and several tries by hard 30/30/30 reset but nothing is responding by telnet tftp etc...

I need kindly assistances because I was amazed of the boot up and respose time of the router on ddwrt firmware till I killed her! Cool
Sponsor
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 5310
Location: Texas

PostPosted: Mon May 09, 2016 14:12    Post subject: Reply with quote
You can usually access the router by wireless and reinstall firmware.
Also if the E1200v2 loses connection from any ports after a reset it will sometimes get them back by doing a simple reboot or a 30/30/30 let it sit for a few unplugged then power up.

But I have reinstalled a k2.6 firmware on mine several times via wireless. Choose option not to reset.
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Mon May 09, 2016 19:31    Post subject: Reply with quote
mrjcd wrote:
You can usually access the router by wireless and reinstall firmware.
Also if the E1200v2 loses connection from any ports after a reset it will sometimes get them back by doing a simple reboot or a 30/30/30 let it sit for a few unplugged then power up.

But I have reinstalled a k2.6 firmware on mine several times via wireless. Choose option not to reset.


Dude I do not even see wifi signal on air. After I ve done hard reset many times just leds turned off and router probably not even booting. That is why I could not connect through ethernet on lan or wifi through wlan.
It was because of I might not have waited for 5 minutes or so after flashed new firmware and went quickly hard reset!
The only option seem me to check router If can be still saved by serial connection. I checked serial pinout diagram on net but have no chance for that Sad
SinCalChewy
DD-WRT User


Joined: 09 Nov 2014
Posts: 311
Location: Bakersfield, CA

PostPosted: Mon May 09, 2016 19:37    Post subject: Reply with quote
These Linksys e1200s have a firmware recovery mode, should something go wrong. A lot of times it will boot into that. Have you tried setting a static IP of say 192.168.1.5 and then trying to browse to 192.168.1.1? A lot of times (such as upgrading), it will give you a recovery page that lets you select a build and upload from there.

If you can't get that going, you'd have to go serial or another method to unbrick the router.

_________________

Deployed Routers:
Netgear R7000 - 4x build 44236M (Gateway: DoT/DoH, CAKE QoS, USB /w Entware)
Linksys E3000 - 1x build 44236M (Client Bridges)

Spares/Backups/Collection:
Too many to list. I have old routers, bricked routers, weird routers. You name it.
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Mon May 09, 2016 20:44    Post subject: Reply with quote
SinCalChewy wrote:
These Linksys e1200s have a firmware recovery mode, should something go wrong. A lot of times it will boot into that. Have you tried setting a static IP of say 192.168.1.5 and then trying to browse to 192.168.1.1? A lot of times (such as upgrading), it will give you a recovery page that lets you select a build and upload from there.

If you can't get that going, you'd have to go serial or another method to unbrick the router.


I knew that recovery mode by reset button at bottom but no chance so far! I even tried by wps button at back of router but again no chance. After I pluged the power cord and power on router wps led blink once and all led lights goes off. I have no chance by wire and no ssid on air as ddwrt or so.
Yeah I manually tried to enter IP 192.168.1.x and also 192.168.0.x but no life indicate Sad

It definetly seem to go through serial and I am already looking for usb-ttl adapter and cables but strongly need the pinout for proper serial connection.
Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12676

PostPosted: Tue May 10, 2016 11:57    Post subject: Reply with quote
Read the serial recovery wiki article. Among other things it tells you how to sort out the pins.
_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Tue May 10, 2016 13:07    Post subject: Reply with quote
Murrkf wrote:
Read the serial recovery wiki article. Among other things it tells you how to sort out the pins.


Thanks, Is this the wiki article you meant?
http://www.dd-wrt.com/wiki/index.php/Serial_Recovery

There is still no info for my router e1200vs at the following link;
http://www.dd-wrt.com/wiki/index.php/Serial_port_pinouts
Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12676

PostPosted: Tue May 10, 2016 16:57    Post subject: Reply with quote
uisik34 wrote:
Murrkf wrote:
Read the serial recovery wiki article. Among other things it tells you how to sort out the pins.


Thanks, Is this the wiki article you meant?
http://www.dd-wrt.com/wiki/index.php/Serial_Recovery

There is still no info for my router e1200vs at the following link;
http://www.dd-wrt.com/wiki/index.php/Serial_port_pinouts


You need an ohm meter to sort out the pins. That will tell you power and ground. tx and rx is by guess as you will not harm anything by getting tx and rx backwards.

_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Tue May 10, 2016 19:26    Post subject: Reply with quote
Murrkf wrote:

You need an ohm meter to sort out the pins.


I can ask a freind for an ohm meter, no problem.
I already ordered usb to ttl dongle and male to female wires online as following.

http://www.geekfactory.mx/wp-content/uploads/2013/06/converdidor_usb_ttl_rs232_pl_2303hx_01.jpg
https://images-na.ssl-images-amazon.com/images/I/713HSj2ZdOL._SL1100_.jpg

Are these fine for serial connection or jtag? there are five pin hole and six pin hole two rows (total 12) on router board. I guess I will use five pin holes.

http://vignette3.wikia.nocookie.net/infodepot/images/8/87/Linksys_E1200_f.jpg/revision/latest?cb=20110710171034

I have linux laptop and putty and filezilla (for tftp) installed but what else will I need for flashing? should I find windows os for any software only available for windows?

I know too much questions but I am really lost on so detailed pages on internet so a brief titles will be so instructive for me.
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Wed May 11, 2016 18:12    Post subject: Reply with quote
Decompressing...done
Start to blink diag led ...


CFE version 5.100.138.11 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 07/30/12 12:18:33 HKT (cjc@t.sw3)
Copyright (C) 2000-2008 Broadcom Corporation.

Initializing Arena
Initializing Devices.

No DPN
This is a Serial Flash
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 128 64KB blocks; total size 8MB
Partition information:
boot #00 00000000 -> 0003FFFF (262144)
trx #01 00040000 -> 0004001B (2Cool
os #02 0004001C -> 007EFFFF (8060900)
nvram #03 007F0000 -> 007FFFFF (65536)
Partition information:
boot #00 00000000 -> 0003FFFF (262144)
trx #01 00040000 -> 007EFFFF (8060928)
nvram #02 007F0000 -> 007FFFFF (65536)
BCM47XX_GMAC_ID
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.11
CPU type 0x19749: 300MHz
Total memory: 32768 KBytes

CFE mem: 0x80700000 - 0x807AE0F0 (712944)
Data: 0x80743360 - 0x80747440 (16608)
BSS: 0x80747440 - 0x807480F0 (3248)
Heap: 0x807480F0 - 0x807AC0F0 (409600)
Stack: 0x807AC0F0 - 0x807AE0F0 (8192)
Text: 0x80700000 - 0x80743360 (275296)

Boot version: v5.3.7
The boot is CFE
mac_init(): Find mac [c8:xx:xx:05:xx:xx] in location 0
Nothing...

### CLKDIV= 0x8080842, SFlashClkDiv=8 clkdivsf=2 ###

### Change it to 0x2080842 (2) ###
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
Device eth0: hwaddr C8-xx-xx-05-xx-xx, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
CMD: [go;]
Check CRC of image1
Len: 0x400000 (4194304) (0xBC040000)
Offset0: 0x1C (2Cool (0xBC04001C)
Offset1: 0x9D0 (2512) (0xBC0409D0)
Offset2: 0x15D400 (1430528) (0xBC19D400)
Header CRC: 0x3D554C74
Calculate CRC: 0x3D554C74
Image 1 is OK
Try to load image 1.
Waiting for 3 seconds to upgrade ...
CMD: [load -raw -addr=0x807ae0f0 -max=0x1851f10 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3

### Start=228991988 E=555303627 Delta=326311639 ###
Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x6ff000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3916 bytes read

### Start=558391185 E=559062099 Delta=670914 ###
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.24.111 (root@nmndev) (gcc version 4.1.2) #29454 Mon Apr 25 01:09:04 CEST 2016
CPU revision is: 00019749
Found a 8MB ST compatible serial flash
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0 -> 8192
HighMem 8192 -> 8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0 -> 8192
Built 1 zonelists in Zone order. Total pages: 8192
Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCMd144 rev 1 at 300 MHz
Using 150.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 25996k/32768k available (3482k kernel code, 6756k reserved, 1369k data, 188k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = Cool is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
et_module_init: passivemode set to 0x0
pflash: found no supported devices
bootloader size: 262144
nvram size: 32768
sflash: Filesystem type: squashfs, size=0x295bca
partition size = 2763776
Creating 5 MTD partitions on "sflash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x007f0000 : "linux"
0x0019d400-0x00440000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x007f0000-0x00800000 : "nvram"
0x00440000-0x007f0000 : "ddwrt"
Broadcom Watchdog Timer: 0.07 initialized.
u32 classifier
Performance counters on
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length 128 bytes
PF_RING: ring slots 4096
PF_RING: sample rate 1 [1=no sampling]
PF_RING: capture TX No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode 1f02
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 188k freed
start service
starting Architecture code for broadcom
done
Booting device: Linksys WRT54G/GL/GS
get_wl_instance doesnt return the right value 0
No such device
roboswitch: Probing device eth0: No such device
roboswitch: Probing device eth1: No such device
roboswitch: Probing device eth2: No such device
roboswitch: Probing device eth3: No such device
boardflags are 0x0388
cannot open /proc/switch/eth0/reset
cannot open /proc/switch/eth0/enable_vlan
cannot open /proc/switch/eth0/vlan/0/ports
cannot open /proc/switch/eth0/vlan/1/ports
/etc/preinit: line 44: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
/etc/preinit: line 44: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
cannot open /proc/sys/net/bridge/bridge-nf-call-arptables
cannot open /proc/sys/net/bridge/bridge-nf-call-ip6tables
cannot open /proc/sys/net/bridge/bridge-nf-call-iptables
get_wl_instance doesnt return the right value 0
wl:-i down ->wl driver adapter not found
Write wireless mac fail : : No such device
wl:-i up ->wl driver adapter not found
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
/bin/sh: can't create /sys/devices/virtual/net/br0/bridge/multicast_snooping: nonexistent directory
device br0 entered promiscuous mode
device br0 left promiscuous mode
device br0 entered promiscuous mode
device br0 left promiscuous mode
get_wl_instance doesnt return the right value 0
wl:-i vlan_mode 0 ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
wl:-i radio on ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
wl:-i down ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
wl:-i up ->wl driver adapter not found
function start_hwmon not found
get_wl_instance doesnt return the right value 0
No such device
cannot open /proc/sys/net/ipv4/netfilter/ip_conntrack_udp_timeouts
get_wl_instance doesnt return the right value 0
wl:-i radio off ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
Radio: 0 currently turned off
get_wl_instance doesnt return the right value 0
wl:-i radio off ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
wl:-i radio on ->wl driver adapter not found
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
get_wl_instance doesnt return the right value 0
No such device
Radio: 0 currently turned off
/opt/etc/init.d/rcS: No such file or directory
/jffs/etc/init.d/rcS: No such file or directory
/mmc/etc/init.d/rcS: No such file or directory
/etc/config/conntrack.startup: line 8: can't create /proc/sys/net/ipv4/ip_conntrack_max: nonexistent directory
/mnt/smbshare
get_wl_instance doesnt return the right value 0
No such device
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Wed May 11, 2016 18:14    Post subject: Reply with quote
Ctrl + c is not stopping tftpd screen. Do I make something wrong?
SinCalChewy
DD-WRT User


Joined: 09 Nov 2014
Posts: 311
Location: Bakersfield, CA

PostPosted: Wed May 11, 2016 19:26    Post subject: Reply with quote
uisik34 wrote:
Ctrl + c is not stopping tftpd screen. Do I make something wrong?


You have to catch it during the -very small- window to hit Ctrl + C. It will probably take a few times to get it going, just keep trying a bit.

_________________

Deployed Routers:
Netgear R7000 - 4x build 44236M (Gateway: DoT/DoH, CAKE QoS, USB /w Entware)
Linksys E3000 - 1x build 44236M (Client Bridges)

Spares/Backups/Collection:
Too many to list. I have old routers, bricked routers, weird routers. You name it.
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Wed May 11, 2016 19:55    Post subject: Reply with quote
A few times Very Happy
It had been hundred times I could not catch, possibly still something wrong...
If the screen flows does it mean I did the serial pin connections in right order?
Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12676

PostPosted: Thu May 12, 2016 16:59    Post subject: Reply with quote
If the router is not receiving a signal, control c will not work. However, you often have to be faster than you would believe possible. Get someone to assist by hitting cntl-c while you power up the router. if that doesn't work, check the connection by connectng rx-tx and seeing your screen output as described in the serial recovery wiki.
_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
uisik34
DD-WRT User


Joined: 13 Feb 2015
Posts: 61

PostPosted: Thu May 12, 2016 18:48    Post subject: Reply with quote
I messed up everything and was so close to the result maybe couple of minutes. It is now in worse condition maybe because of my impatience; I closed the router before it complete the things to flash and reboot(2-3 times).

Let me tell where I failed before, all of the above explantions and it was told me that I need an ohmeter now I am confused, because I really do not understand why I need an ohmeter If I only need rx tx and grnd port for serial connection. I was connecting 3.3v vcc tx and rx and getting screen output I posted above here but I should have only needed grnd instead of vcc to run ctrl+c. After I pin on router port grnd connection ctrl+c has worked and CFE has come for command. I run in order as following what wiki says;
nvram erase
flash -ctheader : flash1.trx
ping on router and responded ttl=100 (on another screen)
Patched the mini ddwrt 2.6 kernel version as ddwrt wiki says through tftpd software on 192.168.1.1
Putty serial screen has told me It is flashed and then did what wiki said
Go + Enter
It was stucked on the router saying it is rebooting and it stayed around 1-2 minutes on same screen and I thought to manually power of and power on reboot thing from agining and I messed everything!
I thought even someting goes wrong I found already serial way to go command and patch other firmwares through it but it did not happen as I thought.

Now all led lights are dim and serial is also not responsive. 30/30/30 reset not working, serial is not working, lan wan ports are not working and probably it is dead now!
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum