WNR3500l v2 dead

Discussion in 'Tomato Firmware' started by capnemo, Feb 2, 2012.

  1. capnemo

    capnemo Networkin' Nut Member

    i did a stupid thing! tried to flash whit original firmware when i had tomato on it. orange lamp is on and i cant login whit when telnet its says.could not open conn on port 23. firewal disconnected. any ideas? thx for any help
  2. Oleg Repin

    Oleg Repin Networkin' Nut Member

  3. eahm

    eahm LI Guru Member

  4. shibby20

    shibby20 Network Guru Member

    1st way) set static ip on PC and download tftpd SERVER.
    put firmware into tftpd server directory and rename in to vmlinuz (without extension)

    Power on router. router should himself download new firmware from tftpd server and flash.

    2nd) you need usb-serial cable.
    Serial connection: http://openlinksys.info/images/3500lv2/IMAG0364.jpg

    on right: GND, RX, TX

    set static ip on PC and ping a router:
    ping -t

    run putty serial, select your COM port, speed 115200 and open. Plug power to router you should see bootlog. Pressing CTRL+C until you will see cfe>
    then write tftpd. Server tftpd on router will be running and yuo will see answer for ping.

    Now send firmware from PC via tftpd:
    tftpd -i put <firmware>

    lloydd and eahm like this.
  5. lloydd

    lloydd Serious Server Member

    Hello Shibby20,
    I've been doing the whole procedure and I'm able to contact the router with Putty but from there I think I'm encountering a problem I can't resolve as I'm not able to sent the firmware from pc via tftpd. Using Windows 7 I get the following message when doing Ctrl+C and maybe you know what I'm doing wrong here. Hope you can help.


    CFE for WNR3500L version: v1.0.36
    Build Date: Tue Aug 11 15:09:14 CST 2009
    Init Arena
    Init Devs.
    Boot partition size = 262144(0x40000)
    Found a 8MB ST compatible serial flash
    et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller
    CPU type 0x19740: 453MHz
    Tot mem: 65536 KBytes

    Device eth0: hwaddr 20-4E-7F-22-F2-A0, ipaddr, mask
    gateway not set, nameserver not set
    Loader:raw Filesys:tftp Dev:eth0 File: Options:(null)
    Loading: Failed.
    Could not load Timeout occured
    Checksum mismatch:
    Image chksum: 0xE9950927
    Calc chksum: 0x895989DB
    Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
    Loading: .. 5192 bytes read
    Entry at 0x80001000
    Closing network.
    Starting program at 0x80001000
    Linux version (root@tomato) (gcc version 4.2.4) #7 Sun Mar 4 21:23:05 ICT 2012
    CPU revision is: 00019740
    Found a 8MB ST compatible serial flash
    Determined physical RAM map:
    memory: 04000000 @ 00000000 (usable)
    Zone PFN ranges:
    Normal 0 -> 16384
    HighMem 16384 -> 16384
    early_node_map[1] active PFN ranges
    0: 0 -> 16384
    Built 1 zonelists. Total pages: 16384
    Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
    Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, linesize 32 bytes.
    Synthesized TLB refill handler (20 instructions).
    Synthesized TLB load handler fastpath (32 instructions).
    Synthesized TLB store handler fastpath (32 instructions).
    Synthesized TLB modify handler fastpath (31 instructions).
    PID hash table entries: 512 (order: 9, 2048 bytes)
    CPU: BCM4716 rev 1 pkg 10 at 453 MHz
    Using 226.500 MHz high precision timer.
    console [ttyS0] enabled
    Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
    Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
    Memory: 61360k/65536k available (33k kernel code, 4112k reserved, 2669k data, 124k init, 0k highmem)
    Mount-cache hash table entries: 512
    NET: Registered protocol family 16
    PCI: Using membase 8000000
    PCI: Disabled
    PCI: Fixing up bus 0
    PCI: Fixing up bus 1
    NET: Registered protocol family 2
    Time: MIPS clocksource has been installed.
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 2048 (order: 2, 16384 bytes)
    TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
    TCP: Hash tables configured (established 2048 bind 2048)
    TCP reno registered
    squashfs: version 3.0 (2006/03/15) Phillip Lougher
    io scheduler noop registered (default)
    HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
    N_HDLC line discipline registered.
    Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing disabled
    serial8250: ttyS0 at MMIO 0xb8000300 (irq = 8) is a 16550A
    PPP generic driver version 2.4.2
    MPPE/MPPC encryption/compression module registered
    NET: Registered protocol family 24
    PPPoL2TP kernel driver, V0.17
    PPTP driver version 0.8.5
    pflash: found no supported devices
    Creating 6 MTD partitions on "sflash":
    0x00000000-0x00040000 : "pmon"
    0x00040000-0x00790000 : "linux"
    0x00124400-0x006f0000 : "rootfs"
    0x006f0000-0x00780000 : "jffs2"
    0x007f0000-0x00800000 : "nvram"
    0x007e0000-0x007f0000 : "board_data"
    u32 classifier
    OLD policer on
    Netfilter messages via NETLINK v0.30.
    nf_conntrack version 0.5.0 (512 buckets, 4096 max)
    ip_tables: (C) 2000-2006 Netfilter Core Team
    ipt_account 0.1.21 : Piotr Gasidlo , http://www.barbara.eu.org/~quaker/ipt_account/
    net/ipv4/netfilter/tomato_ct.c [Mar 4 2012 21:19:54]
    NET: Registered protocol family 1
    NET: Registered protocol family 10
    ip6_tables: (C) 2000-2006 Netfilter Core Team
    NET: Registered protocol family 17
    802.1Q VLAN Support v1.8 Ben Greear
    All bugs added by David S. Miller
    VFS: Mounted root (squashfs filesystem) readonly.
    Freeing unused kernel memory: 124k freed
    Warning: unable to open an initial console.
  6. lefty

    lefty Networkin' Nut Member

    It looks like you are not being fast enough to break into the CFE, if you were fast enough, it wouldn't even hardly have any output within the CFE.
  7. lolcat

    lolcat Reformed Router Member

    czescz shibby.. well jestem polka tescz ale niekty tam mieskalem.. ok, I am polish but mnever lived there xD

    Small correction to Shibby's notes. This is on linux, and/or if you have a blinking green liught... the orange one is not a problem either, just need to do some hard resets... dont think this one can get bricked form flashing.. only if well it gets damaged, not from fl;ashing.

    no serial cable needed, just LAN cable.

    U can either do like shibby says, in 1) auto flash it from tftpd. Or as a tftp client too,

    u dont need to change any name.

    deps: iproute2 + tftp-hpa

    eg, iface eth0:

    sudo su
    ip link set dev eth0 up
    ip addr add dev eth0
    ip route add default via dev eth0
    ping (need to get rsponse from router.. if you don't, then you still need to reset it or play with it, till you do).

    cd /path/to/flashfile.chk
    (file) name-of-the-firmware-file.chk
    wait till it reboots

    Probably need ot repeat the process of setting the ip for your iface, since the router is in default mode, then you can log in via
    user: root
    pw: admin
    easy peasy
    enjoy :)

    this is with arch linux but any proper linux distro will do.. yes.. even mint and ubuntu.. they can also get packages, just the users aint always the brightest.

  8. matzsn

    matzsn Reformed Router Member

    Hello Malina,

    i have been trying to be able to ping the router but now after a lot of attemtps i dont think this will work the way u described.
    The only time when i get a route to is when i hold the reset button in power off/on and release the button, thats when i get

    From icmp_seq=510 Destination Host Unreachable
    From icmp_seq=511 Destination Host Unreachable
    From icmp_seq=512 Destination Host Unreachable
    From icmp_seq=513 Destination Host Unreachable
    From icmp_seq=514 Destination Host Unreachable
    64 bytes from icmp_req=515 ttl=100 time=2967 ms
    64 bytes from icmp_req=516 ttl=100 time=1967 ms
    64 bytes from icmp_req=518 ttl=100 time=0.481 ms
    64 bytes from icmp_req=519 ttl=100 time=0.605 ms
    64 bytes from icmp_req=520 ttl=100 time=0.554 ms

    any other suggestions? i have the same problem as the op but with a orange light on power LED.

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice