Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Sat Oct 22, 2011 20:41 Post subject: E1000 V1 - Wrt160N V3 Jtag
As most know.. The wrt160n v3 & the E1000 v1 are identical in regards to hardware.
As most know, Linksys has disabled the jtag circuit in these routers by leaving out smt components (just like the 610 v2 & E3000)
I'll link this in another thread where a dd-wrt member needs jtag for this router.
I traced the jtag header to the missing components. What needs to be done, is to bridge the pads on the pcb. There are 5 pads that need to be bridged.
Four can be found on the bottom of the pcb, and one on the top.
They are marked R64, R65, R66, R67, & R68.
R67 is on the top side of the pcb, and the rest on the bottom.
Attached are pics showing the pads that need to be bridged as well as the jtag output doing a -probeonly.
The ribbon cable you will see in one of the pics, is connected to a serial header I hot glued to the side of the pcb. This router I purchased to assist the devs (Eko) in porting dd-wrt to this router. Cuz we bricked it many times, pogo pins to the serial pads would not do. I needed something I could connect to many times.
Intial value of Control register is 000000CC
Intial value of status register is 0000007F
01111111 (0000007F)
Status bit 7 Busy Inverted pin 11 = 1
Status bit 6 *Ack pin 10 = 1
Status bit 5 Paper-out pin 12 = 1
Status bit 4 Select pin 13 = 1
Status bit 3 *Error pin 15 = 1
* means low = true, e.g., *Error
VCC connected
values of Control register after init 0x000000CC
value of status register after init 0x0000007F
system reset complete
Detected IR chain length = 32
Number of device(s) = 1
idcode 0x000a817f 32
Jtag is in LV mode
switching to MIPS mode
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00010000000010001100000101111111 (1008C17F)
*** Found a Broadcom BCM5356A1 KFGB REV 1 CPU chip ***
- EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
- EJTAG Version ....... : 3.1
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32
Chip ID b83a
Chip Rev 0
Package Options 2
Number of Cores 5
Core Revision 63
Core Type 8830
Core Vendor ID 15200000
Flash Type 100
Flash Type = SFLASH_ST
Dest is bits 0
Dest is bits1 0
Dest is bits 0
Flash is byteswapped 0
Endian Type is LE 0
PLL Type 00000000
00000000000000000000000000000000 (00000000)
00000000000000000000000000000000 (00000000)
00000000000000000000000000010010 (00000012)
Done
Flash Vendor ID: 00000000000000000000000011000010 (000000C2)
Flash Device ID: 00000000000000000010000000010110 (00002016)
*** Found a Macronix MX25L3205D (4MB) Serial Flash Chip ***
I am not sure most will understand what you have done.
But, as always, very fine work BW! This is exceptionally useful. _________________ SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
Wikis have been updated to link to this thread. _________________ SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
Posted: Wed Jan 11, 2012 10:56 Post subject: Linksys E1000 v1
Guy please help... my E1000 v1 bricked randomly after a reset. and I'm a moron and burnt out the RX and TX connections on the board so I can't solder to them, is there any other rx and tx connection points on this board. so I can debrick? or should i just toss this in the trash?
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Wed Jan 11, 2012 13:37 Post subject:
There is no other "serial" connection points. This thread explains how to enable jtag on the router.
All you need to do is erase nvram and kernel, then flash the right firmware via tftp.
Take no offense but if you don't quite have the skills for a serial connection, you may not be successful enabling and using jtag without further pcb damage.
You may want to consider sending your router to someone to fix. There are many on the forum that do this. It would depend on where you are located. _________________ [Moderator Deleted]
when i was soldering to the serial connection one of the pads just came off right away as soon as i touched it.. then i burnt it trying to get a connection.
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Thu Jan 12, 2012 14:17 Post subject:
lameandboard wrote:
when i was soldering to the serial connection one of the pads just came off right away as soon as i touched it.. then i burnt it trying to get a connection.
Yea.. I messed up one also before I started using pogo pins on these routers. It is easy to do (lift a pad off the pcb). _________________ [Moderator Deleted]