BEFSR41 ver. 3

Discussion in 'Cisco/Linksys Wireless Routers' started by renard, Feb 18, 2010.

  1. renard

    renard Addicted to LI Member

    I got an old BEFSR41 v3 router. Its power LED is only blinking. I tried to connect to router on its LAN ports, but it is impossible, because its firmware is corrupt (I'm sure), so ping, tftp and http wont work. The only way to download the good firmware into the router is its JTAG connector. I have a good JTAG inteface (Wiggler on LPT), and I can connect to router with many applications (for example H-JTAG, JtagUtility v1.3 by ToM), and the applications can recognize the ARM CPU of the router (the core is ARM922T, the type is KENDIN KS8695), but I don't know the following required parameters to programming the flash memory with H-Flash:
    - Flash Start Address (type: MX 29LV800BTC-90)
    - RAM Start Address (type: V54C316162VCT)
    - Initial scripts
    Could anybody help me?
  2. Disman_ca

    Disman_ca Super Moderator Staff Member Member

    Wow and old BEFSR41, I've got a couple lying around but I don't know anything about JTAG parms. I hope someone knows, if not may Google can help a friend out.
  3. renard

    renard Addicted to LI Member

    Thanks... you can find by Google many solutions to debrick Linksys routers, but those routers have Broadcom CPU (BCM4702, 4710, 4712, 4532...). The authors of those applications know the memory organization of the routers, because those routers have many kind of open source firmwares. Usually the core of the CPU in a broadband router is ARM. This CPU has an MMU. This is the problem. The MMU translates virtual addresses into physical addresses. How does the CPU handle the memory in the BEFSR41 v3 router? I don't know... The Google couldn't help me...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice