Posted: Wed Jan 26, 2011 5:22 Post subject: How to debrick WRT610N v2 after tftped firmware?
Some days earlier, I updated the E3000 official firmware to my WRT610Nv2(instead of dd-wrt.v24-14896_NEWD-2_K2.6_big.bin). Yesterday, I flashed the dd-wrt.v24-14929_NEWD-2_K2.6_std_usb_ftp-e3000.bin fw via E3000's web. But I restarted my router too soon, so now it can not boot, and the power indicator keeps flashing, ping reply timeout. I upload dd-wrt.v24-14929_NEWD-2_K2.6_mini_wrt610nv2.bin with tftp to the router when I ping it and receive its reply that TTL is 100, and success(and arp -a shows the right MAC address of 192.168.1.1). I wait 10 minutes, do a 30/30/30 hard reset, and still same old thing. (dd-wrt.v24-15962_NEWD-2_K2.6_mini_wrt610nv2.bin is also tested.)
Now what I can do?
Some days earlier, I updated the E3000 official firmware to my WRT610Nv2(instead of dd-wrt.v24-14896_NEWD-2_K2.6_big.bin). Yesterday, I flashed the dd-wrt.v24-14929_NEWD-2_K2.6_std_usb_ftp-e3000.bin fw via E3000's web. But I restarted my router too soon, so now it can not boot, and the power indicator keeps flashing, ping reply timeout. I upload dd-wrt.v24-14929_NEWD-2_K2.6_mini_wrt610nv2.bin with tftp to the router when I ping it and receive its reply that TTL is 100, and success(and arp -a shows the right MAC address of 192.168.1.1). I wait 10 minutes, do a 30/30/30 hard reset, and still same old thing. (dd-wrt.v24-15962_NEWD-2_K2.6_mini_wrt610nv2.bin is also tested.)
Now what I can do?
That's essentially the proper way to brick your router.
TFTP won't work either on this router.
Okay, since you've already done the 30-30-30..
AFAIK there are only 2 alternatives:
1. Use serial, there is so-called "debug port" hidden in WRT610nv2 WAN port, you'll need custom-made adaptor. (search the forum)
2. Open your router (You'll need secured Torx screwdriver, and something thin, like putty knife or very-thin slotted screwdriver, preferably the one that's less destructive )
Later find the flash chip, use a magnifiying glass or something similar to locate 8th and 9th of the flash chip.
Short it for 5 seconds after powering on your router.
^Famously known as "Eko's 'you didn't hear this from me' trick"
Alternatives 1 is the safest.
Alternatives 2 requires less work and cost, but it will void your warranty. Additionally, it can inflict more damage to your router if you short the wrong pins.
Some days earlier, I updated the E3000 official firmware to my WRT610Nv2(instead of dd-wrt.v24-14896_NEWD-2_K2.6_big.bin). Yesterday, I flashed the dd-wrt.v24-14929_NEWD-2_K2.6_std_usb_ftp-e3000.bin fw via E3000's web. But I restarted my router too soon, so now it can not boot, and the power indicator keeps flashing, ping reply timeout. I upload dd-wrt.v24-14929_NEWD-2_K2.6_mini_wrt610nv2.bin with tftp to the router when I ping it and receive its reply that TTL is 100, and success(and arp -a shows the right MAC address of 192.168.1.1). I wait 10 minutes, do a 30/30/30 hard reset, and still same old thing. (dd-wrt.v24-15962_NEWD-2_K2.6_mini_wrt610nv2.bin is also tested.)
Now what I can do?
That's essentially the proper way to brick your router.
TFTP won't work either on this router.
Okay, since you've already done the 30-30-30..
AFAIK there are only 2 alternatives:
1. Use serial, there is so-called "debug port" hidden in WRT610nv2 WAN port, you'll need custom-made adaptor. (search the forum)
2. Open your router (You'll need secured Torx screwdriver, and something thin, like putty knife or very-thin slotted screwdriver, preferably the one that's less destructive )
Later find the flash chip, use a magnifiying glass or something similar to locate 8th and 9th of the flash chip.
Short it for 5 seconds after powering on your router.
^Famously known as "Eko's 'you didn't hear this from me' trick"
Alternatives 1 is the safest.
Alternatives 2 requires less work and cost, but it will void your warranty. Additionally, it can inflict more damage to your router if you short the wrong pins.
Kindly CMIIW.
The router worked normally with the official e3000 fw
(p.s. some days earlier, the fw 14896-nd-k2.6-big suddenly down the transmission speed even I erase nvram, after flashed the e3000 official fw, the router returned to normal )...
...and the ddwrt wrt610nv2 mini fw can be uploaded correctly, i tried 3 tftp client software, no error reported...
Sadly tftp is not an viable option (it will appear to work if your firmware file is under 3.8MB, but the upload will not be flashed).
I updated official e3000 fw from dd-wrt.v24-14896_NEWD-2_K2.6_big straightly from web, and it worked....
BUT official e3000 fw means cisco/linksys fw!
I just uploaded mini ddwrt 610nv2 fw succeed. all of my tftp software reported upload ok, one of them reported erase and write ok.(time is very very important)
Some days earlier, I updated the E3000 official firmware to my WRT610Nv2(instead of dd-wrt.v24-14896_NEWD-2_K2.6_big.bin). Yesterday, I flashed the dd-wrt.v24-14929_NEWD-2_K2.6_std_usb_ftp-e3000.bin fw via E3000's web. But I restarted my router too soon, so now it can not boot, and the power indicator keeps flashing, ping reply timeout. I upload dd-wrt.v24-14929_NEWD-2_K2.6_mini_wrt610nv2.bin with tftp to the router when I ping it and receive its reply that TTL is 100, and success(and arp -a shows the right MAC address of 192.168.1.1). I wait 10 minutes, do a 30/30/30 hard reset, and still same old thing. (dd-wrt.v24-15962_NEWD-2_K2.6_mini_wrt610nv2.bin is also tested.)
Now what I can do?
That's essentially the proper way to brick your router.
TFTP won't work either on this router.
Okay, since you've already done the 30-30-30..
AFAIK there are only 2 alternatives:
1. Use serial, there is so-called "debug port" hidden in WRT610nv2 WAN port, you'll need custom-made adaptor. (search the forum)
2. Open your router (You'll need secured Torx screwdriver, and something thin, like putty knife or very-thin slotted screwdriver, preferably the one that's less destructive )
Later find the flash chip, use a magnifiying glass or something similar to locate 8th and 9th of the flash chip.
Short it for 5 seconds after powering on your router.
^Famously known as "Eko's 'you didn't hear this from me' trick"
Alternatives 1 is the safest.
Alternatives 2 requires less work and cost, but it will void your warranty. Additionally, it can inflict more damage to your router if you short the wrong pins.
I updated official e3000 fw from dd-wrt.v24-14896_NEWD-2_K2.6_big straightly from web, and it worked...
BUT official e3000 fw means cisco/linksys fw!
I just uploaded mini ddwrt 610nv2 fw succeed. all of my tftp software reported upload ok, one of them reported erase and write ok.(time is very very important)
Wow.. Cisco actually allows its user to directly flashed E3000 FW into a stock WRT610nv2?
I thought that would be unlikely, so I just assume you were referring to the trailed build.
That's a new finding for me, sorry for being slow. :P
Peakvision wrote:
can u show me some urls about "debug port",plz?
Sure,
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=62998 http://www.dd-wrt.com/phpBB2/viewtopic.php?t=47603 _________________ Linksys WRT610nv2 converted to E3000 (AP mode) -> v24 preSP2 Mega build 15962 (Last used build)
^ Currently defecting to Tomato USB 1.28 Shibby Mod
TP-Link TL-WR740N v4 (AP mode) -> v24-sp2 Std build 22118
TP-Link TL-WR841N v8.4 (RB mode) -> v24-sp2 Std build 22102 (last used build)
^ Reverted to Stock 3.13.33 Build 130506 Rel.48660n
I'm sorry, but if I understand your post correctly, you didn't flashed e3000 cfe and went straight to flashing the "official" E300 Firmware.
and it worked..?
Please note...his router is now bricked.
No one else should try this with stock firmware and certainly not with dd-wrt unless someone who has been around for a while confirms this process. Due to the differences in sizes and therefore places of things on the chip, this should not be a safe thing to do. _________________ SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Wed Jan 26, 2011 14:01 Post subject:
Note: Bullshit!! The 610n_v2 running stock firmware will reject the stock e3000 firmware as well as dd-wrt e3000 firmware. Flashing stock e3000 firmware or dd-wrt e3000 builds to a stock 610_v2 is not possible.
Flashing an e3000 dd-wrt build to a stock v2 will also be rejected. The router will not be bricked, the upgrade will fail and the router will still be happily running stock firmware.
Flashing an e3000 build to a v2 running dd-wrt without being converted will result in a brick. dd-wrt does not verify the headers of the fw image and will allow the flash.
Same the other way around..
Lots of stories being told here. _________________ [Moderator Deleted]
Note: Bullshit!! The 610n_v2 running stock firmware will reject the stock e3000 firmware as well as dd-wrt e3000 firmware. Flashing stock e3000 firmware or dd-wrt e3000 builds to a stock 610_v2 is not possible.
Flashing an e3000 dd-wrt build to a stock v2 will also be rejected. The router will not be bricked, the upgrade will fail and the router will still be happily running stock firmware.
Flashing an e3000 build to a v2 running dd-wrt without being converted will result in a brick. dd-wrt does not verify the headers of the fw image and will allow the flash.
Same the other way around..
Lots of stories being told here.
yep, e3000 stock fw rejects stock wrt610nv2 fw or ddwrt wrt610nv2 fw, after few seconds of flashing, it will report "upgrade fail".
but it accepts ddwrt e3000 fw(no error is reported on the web page)
i flashed the stock e3000 fw from ddwrt's wrt610nv2 fw, it was ok.
you said "being converted"... do you mean i can modify the bin file to make some convert, and then the router can boot with ddwrt wrt610nv2 fw?
Last edited by Peakvision on Wed Jan 26, 2011 15:21; edited 2 times in total
I updated official e3000 fw from dd-wrt.v24-14896_NEWD-2_K2.6_big straightly from web, and it worked...
BUT official e3000 fw means cisco/linksys fw!
I just uploaded mini ddwrt 610nv2 fw succeed. all of my tftp software reported upload ok, one of them reported erase and write ok.(time is very very important)
Wow.. Cisco actually allows its user to directly flashed E3000 FW into a stock WRT610nv2?
I thought that would be unlikely, so I just assume you were referring to the trailed build.
That's a new finding for me, sorry for being slow. :P
Joined: 06 Feb 2010 Posts: 7401 Location: Little Rock
Posted: Wed Jan 26, 2011 15:23 Post subject:
barryware wrote:
Lots of stories being told here.
QFT, I pretty well pulled out of this one when a simple question of mine could never be answered, from there i felt like this could never go anywhere from the many conflicting infos provided here, so no more time waste. _________________ Wireless N Config | Linking Routers | DD-WRT Wiki | DD-WRT Builds | Peacock - Broadcom FAQ
