[FAAZAB Auto]

CFE version 6.37.14.62 Linksys stock firmware flash...
I had to perform this procedure because both router partitions contained DD-WRT, one of which would not boot at all due to a checksum error. The good DD-WRT partition would only boot to a PuTTY serial terminal DD-WRT login (BusyBox v1.24.2), but never to the GUI. After much research, my preferred Linksys EA6350 v1 configuration is Linksys stock firmware (v1.0.5.182871) on router partition-1 and DD-WRT (07-27-2017-r32868) on partition-0. Otherwise when the router is rebooted and the partitions are reversed, an unwanted nvram bootpartition setting change automatically boots back to stock firmware occasionally
1) Open the router up
ㅤ a) Remove the four plastic feet
ㅤ b) Unscrew the four philips screws
ㅤ c) Remove the top middle grey plastic part. Start at the back of router first and work your way towards the front.
ㅤ d) Use a flat stainless steel caulking spatula to get the top cover off. There are eight tabs securing the cover (two on each side). Push ㅤ ㅤ the spatula in between the top cover and bottom housing crack. Start with any tab excluding the two rear tabs. Position spatula on ㅤ ㅤ each tab and push in to release each tab. Once all front and sides tabs are loose, the two rear tabs will be easily loosened without ㅤ ㅤ the aid of the spatula
2) Connect USB to TTL serial adapter from computer to router
ㅤ ㅤ Router Pin 2 -> TX (Adapter RX goes to router TX)
ㅤ ㅤ Router Pin 3 -> RX (Adapter TX goes to router RX)
ㅤ ㅤ Router Pin 4 -> GND
3) Setup computer static NIC (TCP/IPv4) settings
ㅤ ㅤ IP address: 192.168.1.2
ㅤ ㅤ mask: 255:255.255.0
4) Setup Tftpd32 or Tftpd64 Tftp Server settings
ㅤ ㅤ Click Browse and point to folder containing Linksys firmware
ㅤ ㅤ Select the 192.168.1.2 Server interface
ㅤ ㅤ Leave Tftp program open
5) Connect an ethernet cable between a router LAN port and computer NIC port
6) Disable Windows Firewall
7) Setup PuTTY (v0.74) serial settings
ㅤ ㅤ Serial line: COMx (x=your com port, found in Windows Device Manager)
ㅤ ㅤ Speed: 115200
ㅤ ㅤ Data bits: 8
ㅤ ㅤ Stop Bits: 1
ㅤ ㅤ Parity: none
ㅤ ㅤ Flow control: None
8) Ensure the computer Scroll Lock key is off and PuTTY Flow Control is off or none, or the boot will not stop at CFE prompt
9) Disable computer wireless card (necessary if your primary router also uses 192.168.1.1)
10) Click PuTTY Open button
11) Power on router and rapidly hitting Cntl-C as the router starts to boot up
12) At the CFE prompt, type the following (assumes firmware name is Linksys.img)…
ㅤ ㅤ CFE> ifconfig eth0 -addr=192.168.1.1
ㅤ ㅤ CFE> ifconfig eth0 -mask=255.255.255.0
ㅤ ㅤ CFE> ifconfig eth0 -dns=192.168.1.2
ㅤ ㅤ CFE> ifconfig eth0 -gw=255.255.255.0
ㅤ ㅤ CFE> flash -erase nflash1.trx2
ㅤ ㅤ ㅤ ㅤ ㅤ (This erases nflash1.trx2 partition-1, use nflash1.trx instead for partition-0)
ㅤ ㅤ CFE> flash -noheader 192.168.1.2:Linksys.img nflash1.trx2
ㅤ ㅤ ㅤ ㅤ ㅤ (This flashes firmware to router partition-1, use nflash1.trx instead for partition-0)
ㅤ ㅤ CFE> nvram unset maxpartialboots
ㅤ ㅤ CFE> nvram set bootpartition=1
ㅤ ㅤ CFE> nvram set partialboots=0
ㅤ ㅤ CFE> nvram set lan_ipaddr=192.168.1.1
ㅤ ㅤ CFE> nvram set lan_netmask=255.255.255.0
ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ CFE> reboot
13) Close Tftp program
14) Revert back to computer dynamic NIC (TCP/IPv4) setting
15) Enable Windows Firewall
16) If router doesn’t boot to 192.168.1.1 GUI, then you must reload 338 Linksys EA6350 v1 stock nvram and 209 devinfo parameters ㅤ ㅤ ㅤ and variables
ㅤ ㅤ a) Included is an excel spreadsheet that contains all of these parameters and variables
ㅤ ㅤ b) You must convert the red text items to your router’s unique characteristics. All of these can be found on the bottom tags of your ㅤ ㅤ ㅤ router
ㅤ ㅤ c) You must be fluent in hexadecimal. The way we count in hexadecimal (base 16) is; 0 1 2 3 4 5 6 7 8 9 A B C D E F
ㅤ ㅤ d) When done converting the excel spreadsheet, open PuTTY and get to the CFE prompt
ㅤ ㅤ e) Copy from each excel cell and paste into PuTTY terminal window. No keyboard enter is required. Excel seems to perform this ㅤ ㅤ ㅤ ㅤ function somehow. This step should take about an hour to complete. I usually do 50 at a time, then issue a commit command
ㅤ ㅤ ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ ㅤ ㅤ CFE> devinfo commit
ㅤ ㅤ f) When done, configure router for partition-1 and reboot
ㅤ ㅤ ㅤ ㅤ CFE> nvram unset maxpartialboots
ㅤ ㅤ ㅤ ㅤ CFE> nvram set bootpartition=1
ㅤ ㅤ ㅤ ㅤ CFE> nvram set partialboots=0
ㅤ ㅤ ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ ㅤ ㅤ CFE> reboot
ㅤ ㅤ g) The router should now boot to the Linksys (partition-1) 192.168.1.1 GUI
ㅤ ㅤ h) You will need to connect internet to the router WAN port, otherwise Linksys will not let you login
17) Optionally, install a router 3.5mm audio stereo jack so you will not have to open up the router again. Wire the USB to TTL serial ㅤ ㅤ ㅤ adapter to a 3.5mm audio stereo plug. Wire the router’s internal pins to the 3.5mm audio stereo jack. It should be a breeze with ㅤ ㅤ ㅤ the aid of an ohmmeter, soldering iron, solder, heat shrink, heat gun, glue, basic electronics knowledge and ingenuity.

DD-WRT firmware flash...
DD-WRT version 07-27-2017-r32868 seems stable, except for the issues explained in steps 7 and 8 below. The firmware will be placed on router partition-0
1) Open Linksys (partition-1) 192.168.1.1 GUI
2) Go to the Connectivity page. In the Router Firmware Update Manual section, choose the DD-WRT firmware file
3) It will complain about the file firmware being unrecognized. Just continue with the firmware upgrade. This will automatically place the ㅤ DD-WRT firmware on the opposite partition (partition-0)
4) The router will perform the upgrade and reboot to the DD-WRT firmware 192.168.1.1 GUI. If not, open PuTTY and get to the CFE ㅤ ㅤ prompt. Perform the following...
ㅤ ㅤ CFE> nvram set bootpartition=0
ㅤ ㅤ CFE> nvram set partialboots=0
ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ CFE> reboot
5) Open DD-WRT (partition-0) 192.168.1.1 GUI
6) Change DD-WRT password
7) DO NOT issue an Administration->Commands “erase nvram” command. This is how I bricked two EA6350 v1 routers and ended up ㅤ buying a third virgin stock router as a reference. It took three weeks to rebuild them. It was quite an education
8) DO NOT perform Administration->Factory Defaults. This will corrupt the Linksys nvram settings and also brick the router. In my ㅤ ㅤ ㅤ case, I had a different DD-WRT version previously installed (11-13-2015-r28139). The current DD-WRT version 07-27-2017-r32868 ㅤ seem to have some problematic issues happening. Therefore I decided to apply Administration- > Defaults, assuming DD-WRT would ㅤ function properly afterwards. Once done the router is bricked again as expected. If you are at this point, perform steps 16(d) and ㅤ ㅤ 16(e) again. Then perform the following...
ㅤ ㅤ CFE> nvram unset maxpartialboots
ㅤ ㅤ CFE> nvram set bootpartition=0
ㅤ ㅤ CFE> nvram set partialboots=0
ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ CFE> reboot
9) The router boots to DD-WRT (partition-0) 192.168.1.1 GUI and will function properly

DD-WRT client mode setup...
I’m using this router in DD-WRT client mode utilizing the 5GHz frequency band to connect to my ROKU TV box as a wired ethernet connection
1. If hidden, unhide primary router’s 5 GHz SSID
2. Open DD-WRT (partition-0) 192.168.1.1 GUI
3. Go to Wireless->Basic Settings and change the Wireless Mode to Client for Wireless Physical Interface wl0 (2.4 GHz). Set Wireless ㅤ ㅤ Network Mode to Disable
4. Go to Wireless->Basic Settings and change the Wireless Mode to Client for Wireless Physical Interface wl1 (5 GHz). Set Wireless ㅤ ㅤ ㅤ Network Mode to Mixed. Set the Wireless Network Name (SSID) exactly the same as your primary router
5. Click Save
6. Go to Wireless->Wireless Security and set the Security Mode, WPA Algorithms and WPS Shared Key for Physical Interface wl1 (5 GHz) ㅤ to match the primary router
7. Set the Security Mode to Disabled for Wireless Physical Interface wl0 (2.4 GHz)
8. Click Save
9. Go to Status->Wireless. Select Interface (wl1) for 5GHz
10. Go to Status->Wireless-> Site Survey. Find target 5 GHz SSID and click Join
11. Click Continue. Click Save on next page
12. Go to Security->Firewall and Disable SPI Firewall
13. Go to Services->Services and enable Secure Shell (SSHd)
14. Go to Administration->Management and enable SSH Management (port 22)
15. Go to Administration->Management and enable Telnet Management (port 23)
16. Go to Setup->Basic Setup and enter a router Local IP address e.g. 192.168.18.1 and Subnet mask 255.255.255.0 value. Note, if the ㅤ ㅤ primary router IP address is 192.168.A.x, you need to set the client router to an IP of 192.168.B.x. For example, if the host router ㅤ ㅤ uses 192.168.1.1, configure your client router to e.g. 192.168.2.x
17. Note, my primary host AP router uses 192.168.1.1 (identical to rebuilt EA6350 v1 partition-1) and 192.168.18.1 for the client ㅤ ㅤ ㅤ ㅤ router. I'll use these IP addresses as the procedure continues
18. Set the appropriate Time Zone and Summer Time (DST)
19. Set Server IP/Name to us.pool.ntp.org
20. Click Save, and then Apply Settings
21. If desired, hide primary router’s 5 GHz SSID
22. The router should now be accessible on (DD-WRT partition-0) 192.168.18.1 GUI. If not, open PuTTY and get to the CFE prompt. ㅤ ㅤ ㅤ Perform the following (or use the alternative method below)...
ㅤ ㅤ ㅤ CFE> nvram set lan_ipaddr=192.168.18.1
ㅤ ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ ㅤ CFE> reboot
ㅤ ㅤ Alternative method: Instead of bring the router way down to the CFE prompt (assuming the PuTTY terminal is still up), just hit ㅤ ㅤ ㅤ enter and login DD-WRT using root username and your password you set earlier. Perform the following…
ㅤ ㅤ ㅤ root@DD-WRT:~# nvram set lan_ipaddr=192.168.18.1
ㅤ ㅤ ㅤ root@DD-WRT:~# nvram commit
ㅤ ㅤ ㅤ root@DD-WRT:~# reboot

Reverting back to Linksys stock firmware AP mode from DD-WRT client mode...
1) Connect to DD-WRT using PuTTY Telnet (192.168.18.1, port 23)
2) Login as root and your password
3) Perform the following...
ㅤ ㅤ root@DD-WRT:~# nvram set lan_ipaddr=192.168.1.1
ㅤ ㅤ root@DD-WRT:~# nvram set bootpartition=1
ㅤ ㅤ root@DD-WRT:~# nvram set partialboots=0
ㅤ ㅤ root@DD-WRT:~# nvram commit
ㅤ ㅤ root@DD-WRT:~# reboot

Reverting back to DD-WRT client mode from Linksys stock firmware AP mode..
1) Open PuTTY and get to the CFE prompt. Perform the following (or use the alternative method below)...
ㅤ ㅤ CFE> nvram set lan_ipaddr=192.168.18.1
ㅤ ㅤ CFE> nvram set bootpartition=0
ㅤ ㅤ CFE> nvram set partialboots=0
ㅤ ㅤ CFE> nvram commit
ㅤ ㅤ CFE> reboot
ㅤ Alternative method: Instead of bring the router way down to the CFE prompt, login Linksys and perform the following...
ㅤ ㅤ a) Go to Connectivity-> Local Network page and change IP Address to 192.168.18.1
ㅤ ㅤ b) Click Apply
ㅤ ㅤ c) Open Linksys (partition-1) 192.168.18.1 GUI
ㅤ ㅤ d) Go to Troubleshooting-> Diagnostics page and Restore previous firmware
ㅤ ㅤ e) After reboot, open DD-WRT (partition-0) 192.168.18.1 GUI

Power off router and enable computer wireless card when finished (if previously disabled)