How-To Unbrick a Netgear R7000

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
mache
DD-WRT User


Joined: 11 Apr 2010
Posts: 311
Location: San Francisco Bay Area

PostPosted: Tue Jan 14, 2020 17:49    Post subject: How-To Unbrick a Netgear R7000 Reply with quote
I bricked a Netgear R7000 and unbricked it with a MacBook Pro using the following steps.

1. Purchase Syntech USB C to USB Adapter (2 Pack), Thunderbolt 3 to USB 3.0 Adapter Compatible with MacBook Pro - https://www.amazon.com/gp/product/B07CVX3516/ref=ppx_yo_dt_b_asin_title_o05_s00?ie=UTF8&psc=1 - $9.99

2. Purchase Ftdi - TTL-232r-3v3 - USB to Serial Converter Cable, 3.3v, 6pin - https://www.amazon.com/gp/product/B00M41OUYA/ref=ppx_yo_dt_b_asin_title_o07_s00?ie=UTF8&psc=1 - $18.99

3. Purchase Serial - Full-Featured Terminal Emulator from the MacOS App Store for $29.99

4. Power off the Netgear R7000 and attach a Thunderbolt / USB-C Ethernet adapter and Ethernet patch cord to the MacBook Pro and attach the other end of the Ethernet patch cord to a LAN port on the Netgear R7000.

5. Remove all six female pins from plastic housing of the Ftdi - TTL-232r-3v3 - USB to Serial Converter Cable, 3.3v, 6pin one at a time by lifting each plastic slat up with a steel pick and sliding out each female pin.

6. Using the Ftdi - TTL-232r-3v3 data sheet at https://www.ftdichip.com/Support/Documents/DataSheets/Cables/DS_TTL-232R_CABLES.pdf, on page 9, as well as the R7000 motherboard picture attached herein, insert in the six pin empty plastic housing of the Ftdi - TTL-232r-3v3 - USB to Serial Converter Cable, 3.3v, 6pin the following pins from right to left: the TX (orange) wire pin into position 1 of the plastic housing, the RX (yellow) wire pin into position 2 of the plastic housing, and the GND (black) wire pin into position 3 of the plastic housing. Wrap each of the three remaining loose pins individually in electrical tape to avoid shorting.

7. Open up the Netgear R7000 case to expose the motherboard. There are 5 screws of three different types on the bottom plastic plate of the case: 2 are black and long, 2 are chrome and long, and one is black and short. The 4 long screws are under the four rubber foot pads and the 5th screw is in the center. Remember where each screw type goes! Separate the case and view the motherboard as per the motherboard photo attached. You will see a row of 4 header pins labeled as J252. The three pins of interest are are from right to left TX, RX, and GND. Attach the newly rearranged plastic connector to match the header pins on the motherboard.

8. Using System Preferences, define the MacBook Pro's USB Ethernet adapter to configure its IPv4 manually, with its IP address to be: 192.168.1.44, Subnet Mask: 255.255.255.0, and Router: 192.168.1.1

9. Launch the Serial Terminal Emulator on the MacBook Pro and configure it to use the Ftdi - TTL-232r-3v3 for 115200-8-N-1. Launch Terminal on the MacBook Pro, cd to the directory that contains the factory-to-dd-wrt.chk firmware image you want to upload.

10. Into the copy/paste buffer on the MacBook Pro, copy the following list of commands:

Code:
tftp
connect 192.168.1.1
binary
rexmt 1
timeout 180
put factory-to-dd-wrt.chk

11. Shrink or close all windows except Terminal and Serial and position both to be visible on the screen. Click on the Serial window so typing is directed to that window.

12. Power up the Netgear R7000 and immediately start submitting ^Cs repeatedly to Serial until a CFE> prompt comes up.

13. When you see the CFE> prompt in the Serial window, type in tftpd into the window and return. The router hardware will start flashing a LED signaling it is ready for a tftp upload. Afterward move focus to the Terminal window and paste in the commands in item 10 that you copied earlier.

14. Wait until you see that the firmware upload was successful (about 90 seconds) and then wait for the router to fully reboot (another 150 seconds).

15. Using a browser set to 192.168.1.1 on the MacBook Pro, log into the Netgear R7000 router web configuration page. First change the userid and password, then go to Administration, Factory Defaults and click "Yes" on Restore Factory Defaults and "Apply Settings". Wait until router fully reboots again. Using System Preferences, define the MacBook Pro's USB Ethernet adapter so that IPv4 is configured to use DHCP. Using a browser set to 192.168.1.1 on the MacBook Pro, log into the Netgear R7000 router web configuration page. First change the userid and password and then continue configuring the router for general use.



R7000 Motherboard-1.jpg
 Description:
 Filesize:  55.11 KB
 Viewed:  9441 Time(s)

R7000 Motherboard-1.jpg




Last edited by mache on Wed Jan 15, 2020 22:54; edited 4 times in total
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14208
Location: Texas, USA

PostPosted: Tue Jan 14, 2020 18:40    Post subject: Reply with quote
You could insert "How-To:" at the beginning of the subject line. You can also use CoolTerm free instead of spending $30 on an app. Just one of several options:

https://pbxbook.com/other/mac-tty.html

https://pbxbook.com/other/mac-ser.html

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
mache
DD-WRT User


Joined: 11 Apr 2010
Posts: 311
Location: San Francisco Bay Area

PostPosted: Tue Jan 14, 2020 20:43    Post subject: Reply with quote
Thanks for the tip. I appreciate it. Certainly not an expert on serial terminal emulators for macos.
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7209
Location: Columbus, Ohio

PostPosted: Wed Jan 15, 2020 22:44    Post subject: Reply with quote
Way, way, way smaller picture.
_________________
I am far from a guru, I'm barely a novice.
mache
DD-WRT User


Joined: 11 Apr 2010
Posts: 311
Location: San Francisco Bay Area

PostPosted: Wed Jan 15, 2020 22:47    Post subject: Reply with quote
Sorry, need to learn how to resize. I will fix it.
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6435
Location: UK, London, just across the river..

PostPosted: Mon Mar 16, 2020 18:09    Post subject: Reply with quote
Great Guide... i hope ill never need it Razz Razz

Windows users for serial mode use either Kermit or Putty..
There used to be Putty for mac too, but Im not experienced with it...

for TFTP use tftpd32... https://tftpd32.jounin.net/

Also R7000 has a build in tftp recovery option

https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55779 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14208
Location: Texas, USA

PostPosted: Mon Mar 16, 2020 18:12    Post subject: Reply with quote
PuTTY is available for MacOS via MacPorts. The Homebrew version doesn't work.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
neoxlefou
DD-WRT Novice


Joined: 30 Apr 2020
Posts: 1

PostPosted: Thu Apr 30, 2020 10:26    Post subject: Thanks and query Reply with quote
Thanks for this tips, that allowed me to know I could tftp from OSX cli natively

My gifted EX6200 with official Netgear is now buggy, sometimes boot fine (once and I could see Genie wizard), other time serial rapidly show "decompress error 1" and by chance sometime if I hit Ctrl+C fast enough, decompress is DONE, going further up to IP setup is 192.168.1.250

put I still can't ping the machine neither tftp to it.

anyone has encountered this, do I need another thread for this case ?
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14208
Location: Texas, USA

PostPosted: Thu Apr 30, 2020 14:40    Post subject: Reply with quote
There's already two different threads about the EX6200. Look in the forum.

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=323879

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324551

Not going to have a working how-to get derailed with nonsense, especially by people who can't scroll the first page of the forum.

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Display posts from previous:    Page 1 of 1
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum