E3000 brick after K3.x upgrade

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Author Message
Anton7m
DD-WRT Novice


Joined: 02 Aug 2015
Posts: 5

PostPosted: Mon Aug 03, 2015 23:54    Post subject: E3000 brick after K3.x upgrade Reply with quote
I did all the instructions, but it does not work.

1 - K2.6_21676_mini_e3000 ....wait 5 minutes....hard reset.....next load from the GUI
2 - K2.6_21676_mega_nv60K ....wait 5 minutes....hard reset.....next load from the GUI
3 - K3.x_21676_mega_nv60K...wait 5 minutes....hard reset.
4 - power led flashing

It pinging, webgui not working, tftp not working, serial not working.
tftp sees the firmware, but then crashes
I tried to flash ddwrt mini, mega and linksys original firmware - tftp error

Any help? Rolling Eyes



1.PNG
 Description:
 Filesize:  201.09 KB
 Viewed:  830 Time(s)

1.PNG


Sponsor
Magnetron1.1
DD-WRT User


Joined: 21 Nov 2010
Posts: 242
Location: North America

PostPosted: Tue Aug 04, 2015 3:59    Post subject: Reply with quote
@Anton7m

I had no problem flashing the dd-wrt.v24-21676_NEWD-2_K3.x_mega-e3000.bin firmware using the TFTP client in Ubuntu Linux ver. 15.04 to the E3000 router.

I used some different commands in the CFE.

CFE> nvram set safe_mode_upgrade=on <<= This is not normally needed, but could help in your case.
*** command status = 0

CFE> nvram commit
*** command status = 0

CFE> upgrade code.bin <<= Will wait in a loop until PC is ready to send the file.
Reading :: Failed.: Timeout occured
Try 1 ...
Reading :: Failed.: Timeout occured
Try 2 ...
Reading :: Failed.: Timeout occured
Try 3 ...
Reading :: Failed.: Timeout occured
Try 4 ...
Reading :: Failed.: Timeout occured
Try 5 ...
Reading :: CODE Pattern is CORRECT!
upgrade_ver[v4.20.6] upgrade_ver[42006] 4712_ver[0]
Done. 7832576 bytes read
fname=flash1.trx
CODE Pattern is correct! (61XN)
Programming...done. 7832544 bytes written
Upgrade successfully ...
*** command status = 0

CFE> reboot


CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Wed Jan 27 16:32:01 CST 2010 (ljh@team2-complier)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.

No DPN
This is a Parallel Flash
Boot partition size = 262144(0x40000)
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.51
CPU type 0x19740: 480MHz
Tot mem: 65536 KBytes

CFE mem: 0x80700000 - 0x8079DAC0 (645824)
Data: 0x80732A20 - 0x80737080 (18016)
BSS: 0x80737080 - 0x80737AC0 (2624)
Heap: 0x80737AC0 - 0x8079BAC0 (409600)
Stack: 0x8079BAC0 - 0x8079DAC0 (8192)
Text: 0x80700000 - 0x80732A1C (207388)

Boot version: v4.2
The boot is CFE

mac_init(): Find mac [68:7F:74:AA:1A:28] in location 0
Nothing...
No country code find
Device eth0: hwaddr 68-7F-74-AA-1A-28, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Check CRC of image1
Header CRC: 0x4AF5C238
Calculate CRC: 0x4AF5C238
Image 1 is OK
Try to load image 1.
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3708 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00019740 (MIPS 74Kc)
found nvram at 7E0000
map 60K cfe nvram at 801000
etc. , etc........


If you are using the TFTP32 program in Windows, I have seen cases where it couldn't deal with firmware files that had a string of hexadecimal FF's at the end, such as most of the E3000 firmwares. If you still can't successfully flash firmwares, I'll test using TFTP32 in Windows7.


- Magnetron1.1
st1000
DD-WRT Novice


Joined: 13 Aug 2011
Posts: 28

PostPosted: Tue Aug 04, 2015 7:54    Post subject: Reply with quote
FYI

I debrick my e3000 by follow below instruction, but if short the wrong pin will burn your flash! be careful !

Turn off and disassemble router, find flash chip

short pins 8-9 and turn on, after 5 sec unshort pins, try to ping 192.168.1.1, TTL should be 100, upload firmware with TFTP, and wait for the router reboot.
Anton7m
DD-WRT Novice


Joined: 02 Aug 2015
Posts: 5

PostPosted: Tue Aug 04, 2015 13:53    Post subject: Reply with quote
Magnetron1.1 wrote:
@Anton7m

I had no problem flashing the dd-wrt.v24-21676_NEWD-2_K3.x_mega-e3000.bin firmware using the TFTP client in Ubuntu Linux ver. 15.04 to the E3000 router.

I used some different commands in the CFE.

CFE> nvram set safe_mode_upgrade=on <<= This is not normally needed, but could help in your case.
*** command status = 0

CFE> nvram commit
*** command status = 0

CFE> upgrade code.bin <<= Will wait in a loop until PC is ready to send the file.

It does not work Crying or Very sad

Magnetron1.1 wrote:
If you are using the TFTP32 program in Windows, I have seen cases where it couldn't deal with firmware files that had a string of hexadecimal FF's at the end, such as most of the E3000 firmwares


TFTP32 and windows 7 tftp client - same result

st1000 wrote:

I debrick my e3000 by follow below instruction, but if short the wrong pin will burn your flash! be careful !


Already did it, did not help



error.PNG
 Description:
 Filesize:  200.91 KB
 Viewed:  718 Time(s)

error.PNG


Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12297

PostPosted: Tue Aug 04, 2015 14:34    Post subject: Reply with quote
Flash stock linksys firmware with serial. Pin shorting might have ruined your router though.
_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor. So See these:


LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
Anton7m
DD-WRT Novice


Joined: 02 Aug 2015
Posts: 5

PostPosted: Wed Aug 05, 2015 12:27    Post subject: Reply with quote
Murrkf wrote:
Flash stock linksys firmware with serial


i did

Murrkf wrote:
Pin shorting might have ruined your router though.
It seems
st1000
DD-WRT Novice


Joined: 13 Aug 2011
Posts: 28

PostPosted: Thu Aug 06, 2015 3:38    Post subject: Reply with quote
Sorry to hear that,but i did debrick my e3000 by that method

Did u got 100 when you ping 192.168.1.1 after short the pins 8 & 9?
if yes, just use the TFTP to upload the stock firmware.
Anton7m
DD-WRT Novice


Joined: 02 Aug 2015
Posts: 5

PostPosted: Sun Aug 09, 2015 0:06    Post subject: Reply with quote
st1000 wrote:
Did u got 100 when you ping 192.168.1.1 after short the pins 8 & 9?
yes

st1000 wrote:
just use the TFTP to upload the stock firmware.

I have already done so. It doesn't work, the router crashes after the beginning of the firmware download. Most likely I damaged the chip when short the pins 8 and 9 Crying or Very sad
TeutonJon78
DD-WRT Novice


Joined: 11 Mar 2014
Posts: 25

PostPosted: Mon Aug 10, 2015 20:50    Post subject: Reply with quote
If you can get serial access, it's never a good idea to the extreme of shorting flash pins.

If you can't get it working from serial (stock is always a safe bet -- if stock doesn't work, then there's big problems), only then is it really worth trying to short out the pins.

_________________
Linksys E3000 v1 - r27506, K3.x

Previous Stable Builds: 21676/K3.x/mega
Bad Builds: r23838/K3.x (issues with flashing/NVRAM, seems to work once there)

E3000 WAN Serial Cable
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum