Joined: 31 Jul 2021 Posts: 2146 Location: All over YOUR webs
Posted: Tue Jun 14, 2022 19:32 Post subject: Research: Flash R7000 FW into stock RT-AC68U
@twindragon, I have half a mind of flashing my RT-AC68U E1 (dd-wrt says C1) with the R7000 Firmware, Im assured its interchangeable, does it work better for you, I mean generally?
@twindragon, I have half a mind of flashing my RT-AC68U E1 (dd-wrt says C1) with the R7000 Firmware, Im assured its interchangeable, does it work better for you, I mean generally?
I actually found that the Asus CFE is better than Netgear's! Netgear's hasn't updated it in years! As far as the firmware, I just rock DD-WRT! It's been great! I tried playing with Openwrt but other than the code they use for the CFE it's a pain in the butt to use. The only time DD-WRT gets wonkey is when Brainslayer goes on a coding bender, so I just watch the SVN and flash what appears to be stable-ish. You could always try it. I have a Segger J-Link chip programmer so as far as bricking goes, there is pretty much nothing that I can't recover from. It works great for bad BIOS flashes as well.
The Asus CFE is just better period! As far as the rest of the DD-WRT firmware; It runs great, much better than anything Netgear has to offer. As far as I can tell the C1/E1 are the same so you should be okay I don't know what revision of the CFE the C1 or E1 has. For my R7000 switching from stock Netgear (V1.0.37) CFE to the C0 CFE made all the difference in the world. As far as I know nobody has built the 1.4.2.0 version from Broadcom source so maybe check first and back it up before flashing anything.
nvram show | grep version
Feel free to PM me if you have any questions.
I believe the C1/E1 use the same C0 CFE but don't quote me on this I'm not 100%. The rest of the hardware looks compatible, as a matter of fact it's pretty much the same thing.
One thing I forgot to mention, the R7000 has a lot less config burned into the CFE; they leave it up to the OS, so there is a lot of extra performance tuning crap in there you probably don't need if it's a stock one.
I don't see anything in that github repository that applies to BCM947xx SoC boards.
You have to have specific board data to compile the CFE bootloader.
I don't see anything in that github repository that applies to BCM947xx SoC boards.
You have to have specific board data to compile the CFE bootloader.
The code is really old! Broadcom purchased a company called Sibyte. The architecture is different (MIPS) so probably cross compiled for the target (ARM), you can steal the info for the specific board data for your platform from source code if they actually provided it. Asus does, Netgear doesn't other manufactures vary. The trick will be finding the information in source somewhere from somebody for the target chip and compiling it and I haven't been that bored lately.
Joined: 31 Jul 2021 Posts: 2146 Location: All over YOUR webs
Posted: Wed Jun 15, 2022 8:24 Post subject:
I took the liberty to split the conversation into this separate thread, to not only keep the build thread onpoint and also to avoid PM conversations on the subject which the general community may not benefit from, so I prefer to keep information open and accessible. I hope you dont mind.
@twindragon
Thanks for your reply, my RT-AC68U has a 100% stock CFE from Asus, Ive never fiddled with it, and dont have immediate plans to.
re: versions.
Code:
:~# nvram show | grep version
router_version=211005
os_version=49202
bl_version=1.3.0.7
This idea of flashing the r7000 DD-WRT into the RT-AC68U came from an unrelated conversation with Brainslayer to which he replied.
brainsslayer wrote:
the northstar images are combined for all northstar devices. you can also flash a r7000 image on asus and it will work
and depending on the previous installed firmware version you can only use 32 mb flash of the asus for firmware upgrades
Obviously this being my only current router in operation, Im not going to do this just now, obviously backup/backup/backup is the rule of thumb for any such fiddling to have a fallback in case something needs reverting.
I don't think and I haven't asked BS if you need a modded CFE, but I will presume you don't, you mention the r7000 CFE leaves more for the OS to handle. so I need to check the details out.
Im not averse to using HW programmers, Ive been using them for years to repair and reflash many different chips on a miriad of different hardware, mostly by removing the chips, reflashing and soldering it back as not all chips like/support being flashed in circuit.
Ill give your links a read, and bookmark them, but it is all at the moment an academic endeavor.
:~# nvram show | grep version
router_version=211005
os_version=49202
bl_version=1.3.0.7
That looks like the same C0 CFE, you might get more performance out of it by modding it. The R7000 has less hard coded config, the AC68U does have a few strings I added that aren't present in the stock R7000. It should work on both! The C0 CFE has more recovery options available which can be helpful at times.
Quote:
This idea of flashing the r7000 DD-WRT into the RT-AC68U came from an unrelated conversation with Brainslayer to which he replied.
Brainslayer wrote:
the northstar images are combined for all northstar devices. you can also flash a r7000 image on asus and it will work
and depending on the previous installed firmware version you can only use 32 mb flash of the asus for firmware upgrades
The hardware is identical.
Quote:
I don't think and I haven't asked BS if you need a modded CFE, but I will presume you don't, you mention the r7000 CFE leaves more for the OS to handle. so I need to check the details out.
You don't, (not usually anyway) the idea came to me from XWRT-VORTEX
Just don't flash their CFE It's only compatible with XWRT-VORTEX!!! Mine works with stock Netgear, DD-WRT and other variants. They take the CFE edit to an extreme which makes it incompatible with anything else! There are a few forum members that have had issues even returning to stock firmware after using XWRT-VORTEX because of the tweaks they use.
Excellent. I have a dump of my CFE already which I did via DD-WRT UI with https://ip/backup/cfe.bin, so I'll have a look around with that tool.
Thanks for the share.
No problem, in the link to the other post I shared should be all of the information you need. Stock settings, custom ones. The custom ones should work on the AC68U as well. The cfe_r7000_MOD.bin is already modified You will have to set the MAC addresses before flashing it.
ETH MAC Address = Address from sticker
WL1 MAC Address = ETH MAC Address + 2
WL2 MAC Address = ETH MAC Address + 7
For Example:
C4:04:15:**:**:35
C4:04:15:**:**:37
C4:04:15:**:**:44
Use your MAC!
Last edited by twindragon6 on Wed Jun 15, 2022 12:24; edited 1 time in total
The code is really old! Broadcom purchased a company called Sibyte. The architecture is different (MIPS) so probably cross compiled for the target (ARM), you can steal the info for the specific board data for your platform from source code if they actually provided it. Asus does, Netgear doesn't other manufactures vary. The trick will be finding the information in source somewhere from somebody for the target chip and compiling it and I haven't been that bored lately.
Then this should be able to be compiled for Broadcom 947XX MIPS and ARM SoCs, if you have all the files required and make adjustments. If we go by semantic versioning, and the included devices, this code isn't that old at v1.4.x considering the version(s) on Broadcom HND devices in question is(are) v1.0.x. _________________ "The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost
"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio
Then this should be able to be compiled for Broadcom 947XX MIPS and ARM SoCs, if you have all the files required and make adjustments. If we go by semantic versioning, and the included devices, this code isn't that old at v1.4.x considering the version(s) on Broadcom HND devices in question is(are) v1.0.x.
Yes Sir! I'll do some digging around later and see if I have the files with the relevant board data. If not I'll pull them out from Asus or some other manufactures source tree.
What exactly are those tarballs? CFE bootloader source code? Toolchains? SDK? If the "410" is a version number, those tarballs are antique code. In stock firmware, Linksys E-series uses v5.x.x SDK drivers, some similar Netgear W* and R* series MIPS devices use v6.x.x SDK drivers, and most all Broadcom ARM devices use either v6.x.x or v7.x.x SDK drivers. And to correct myself earlier, Broadcom ARM HND devices use either 1.2.x or 1.3.x version of the CFE bootloader; I was thinking of MIPS devices, possibly. _________________ "The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost
"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio
What exactly are those tarballs? CFE bootloader source code? Toolchains? SDK? If the "410" is a version number, those tarballs are antique code. In stock firmware, Linksys E-series uses v5.x.x SDK drivers, some similar Netgear W* and R* series MIPS devices use v6.x.x SDK drivers, and most all Broadcom ARM devices use either v6.x.x or v7.x.x SDK drivers. And to correct myself earlier, Broadcom ARM HND devices use either 1.2.x or 1.3.x version of the CFE bootloader; I was thinking of MIPS devices, possibly.
Look at page 86 of the CFE.pdf, This is the Broadcom SB1-ELF Toolchain required for building the CFE. You can't just use any toolchain, it won't compile. Not without issues anyway. Like I said before, the CFE code is very very old, as far as I know nobody built the later versions. It's all a offshoot or derivative of the V1.0.37 ancient code. Even the 6.XX and 7.XX CFE's make reference to being based on v1.0.37 so...
I think I'm going to try to build it. Right now I'm looking for a reference design for the Broadcom BCM4709A0
I had already answered my own question by the time you responded. I have a feeling that the answers you seek are at your fingertips. _________________ "The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost
"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio