WRT54GL Memory Mod (hardware mod)

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Hardware DIY / Hardware Mods
Goto page Previous  1, 2, 3, 4, 5
Author Message
DD-WRT Novice

Joined: 20 Feb 2013
Posts: 3

PostPosted: Sun Mar 03, 2013 21:52    Post subject: Reply with quote
Did somebody try use 64Mbx16? MT46V64M16?
DD-WRT Novice

Joined: 02 Oct 2012
Posts: 16

PostPosted: Wed Sep 04, 2013 9:46    Post subject: Reply with quote
CaScAdE wrote:
cdkiller wrote:
but to tell you the truth I am too scared to try it because not enough information is given so how can I decide what to set the init value. If you have any luck please report back.

I soldered a single chip from a KVR400X64SC3A/256 to my wrt54gl and used
nvram set sdram_init=0x0113
nvram set sdram_ncdl=0x000

and got the full 64MB. I first tried a different setting and had to solder a jtag cable (my old one had been 15km away at 4am in the morning so it was easier to solder a new one *g*) and clear nvram and than tried the settings above and voila, 64MB.

Some pics of the somehow rude version of doing stuff... just used a hot-air fan to remove the chip (covered the rest using a bit of tinfoil but still removed the one cap accidentially *g*) and a standard soldering-station to apply the new one, so no special SMD-Tools were used...

I'm looking at doing the 64mb upgrade is there another memory module I could butcher as the one you used doesn't seem readily available in the UK.

Or can anyone recommend a chip that will go straight in ie without the need for extra jumpers.
DD-WRT Novice

Joined: 24 Jun 2012
Posts: 5

PostPosted: Tue Apr 01, 2014 10:02    Post subject: Re: Spansion S29GL128P Reply with quote
Hello elvicomte,

I soldered a S29GL128N chip that seems to me similar.
I need some help with jtag definitions. I use wrt54g.exe (I also could use a linux version) jtag utility, can you help me with the definitions?

Thanks in advance !

elvicomte wrote:
Ok,I also tried with a 16MB flash chip:
This is a Spansion S29GL128P.

datasheet: http://www.farnell.com/datasheets/105629.pdf

The chip is a 56-TSOP package, but it can be soldered on the 48-TSOP footprint of the original flash chip. For this, pin 3 of the
S29GL128 has to coincide with pad 1 of the footprint (see pic). This is possible because pins 3 to 26 and pins 31 to 54 have the same assignment
as the original chip, pins 1 to 24 resp. 25 to 48. (see datasheet). Before soldering the chip, I slightly bended up the remaining pins
(1,2,27,28,29,30,55, 56), to avoid any risk of shortcut. This is barley visible on the picture.

Now, there are still pins of the S29GL128 that need to be connected: pin 2 (A22), pin 15 (A21) and pin 29 (Vio).

We can use small wires to connect them directly to traces or pads present on the board:
For A21, I used the same connection I made for the S29GL064A (prev. post).
For A22, this signal can be found on a trace close to the pin (upper left side of the picture).
And for Vio, I connected it directly to VCC found on pin 43. I also added a 100nF decoupling cap (just in case...)

Before being able to flash anything to this chip thru JTAG, I added the following line to the tjtagv2 source code chip definitions:

  { 0x017E, 0x2101, size16MB, CMD_TYPE_AMD, "Spansion S29GL128P    (16MB)"   ,128,size128K,     0,0,   0,0,        0,0        },

Here is the probing result:

# ./tjtag -probeonly /wiggler

 EJTAG Debrick Utility v2.1.4-Tornado-MOD

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom BCM5352 Rev 1 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ... Done

Flash Vendor ID: 00000000000000000000000101111110 (0000017E)
Flash Device ID: 00000000000000000010000100000001 (00002101)
*** Found a Spansion S29GL128P    (16MB) Flash Chip ***

    - Flash Chip Window Start .... : 1c000000
    - Flash Chip Window Length ... : 01000000
    - Selected Area Start ........ : 00000000
    - Selected Area Length ....... : 00000000

After flashing the CFE, I've been able to tftp a new firmware image. I tried first OpenWRT WhiteRussian and then DD-WRT v24 mega.
DD-WRT Novice

Joined: 24 Jun 2012
Posts: 5

PostPosted: Wed Apr 02, 2014 5:46    Post subject: S29GL128N Working ! Reply with quote

I managed to get S29GL128N working.
First was detected as:
Probing Flash at (Flash Window: 0x1fc00000) ... Done

Flash Vendor ID: 00000000000000000000000000000001 (00000001)
Flash Device ID: 00000000000000000010001000000001 (00002201)
*** Found a AMD 29lv320MT 2Mx16 TopB   (4MB) Flash Chip ***

Then I recompiled the tjtagv2 with the definitions from elvicomte, flash was detected as S29GL128P.
Done a -erase:wholeflash, flashed the cfe, then updated to dd-wrt initial over tftp.

Thank you elvicomte for the tutorial!
Now I'm running a mega build:
DD-WRT Novice

Joined: 06 Mar 2018
Posts: 9

PostPosted: Wed Aug 15, 2018 12:28    Post subject: WRT54GL Flash IC pad pinouts Reply with quote
I have created some documentation for the pinouts of all the different flash IC pads on the WRT54GL. I created a new topic here: WRT54GL V1.1 Flash IC pad pinouts
Goto page Previous  1, 2, 3, 4, 5 Display posts from previous:    Page 5 of 5
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Hardware DIY / Hardware Mods All times are GMT


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum