Netgear WNR3500 v2.0 Brick (solved)

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5  Next
Author Message
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7079

PostPosted: Fri Jan 13, 2012 15:34    Post subject: Reply with quote
or alternatively:

go back to the state where you have dd-wrt with wrong mac on the router.

cut off the Netgear header from stock firmware so it starts with HDR0 and update with that file in the dd-wrt gui.

_________________
I'm on a whiskey diet, lost 3 days already
Sponsor
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 15:41    Post subject: Reply with quote
LOM wrote:

You can't use -noheader switch if the firmware has a header. Wink


I get

Code:
CFE> flash -writechksum : flash1.trx
Reading :: Done. 3444794 bytes read
*** command status = -42
CFE> go
Checksum mismatch:
Image chksum: 0x8074EE40
Calc  chksum: 0x01B700CF
Invalid boot block on disk
Start TFTP server
Reading ::


and just sits there like before

_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7079

PostPosted: Fri Jan 13, 2012 15:48    Post subject: Reply with quote
well, then go for plan B
_________________
I'm on a whiskey diet, lost 3 days already
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 16:08    Post subject: Reply with quote
LOM wrote:
well, then go for plan B
no good


Code:
upgrade_ver[v24.0.0] upgrade_ver[240000] intel_ver[14108] 4712_ver[15000]
function stop_snmp not found
function stop_pppoeserver not found
function stop_olsrd not found
function stop_openvpn not found
function stop_openvpnserver not found
function stop_freeradius not found
freeram=[14524416] bufferram=[1331200]
The free memory is enough, writing image once.
write=[3444736]
linux: CRC OK44785]
Writing image to flash, waiting a moment...
write block [0] at [0x00000000]
write block [65536] at [0x00010000]
write block [131072] at [0x00020000]
write block [196608] at [0x00030000]
write block [262144] at [0x00040000]
write block [327680] at [0x00050000]
write block [393216] at [0x00060000]
write block [458752] at [0x00070000]
write block [524288] at [0x00080000]
write block [589824] at [0x00090000]
write block [655360] at [0x000A0000]
write block [720896] at [0x000B0000]
write block [786432] at [0x000C0000]
write block [851968] at [0x000D0000]
write block [917504] at [0x000E0000]
write block [983040] at [0x000F0000]
write block [1048576] at [0x00100000]
write block [1114112] at [0x00110000]
write block [1179648] at [0x00120000]
write block [1245184] at [0x00130000]
write block [1310720] at [0x00140000]
write block [1376256] at [0x00150000]
write block [1441792] at [0x00160000]
write block [1507328] at [0x00170000]
write block [1572864] at [0x00180000]
write block [1638400] at [0x00190000]
write block [1703936] at [0x001A0000]
write block [1769472] at [0x001B0000]
write block [1835008] at [0x001C0000]
write block [1900544] at [0x001D0000]
write block [1966080] at [0x001E0000]
write block [2031616] at [0x001F0000]
write block [2097152] at [0x00200000]
write block [2162688] at [0x00210000]
write block [2228224] at [0x00220000]
write block [2293760] at [0x00230000]
write block [2359296] at [0x00240000]
write block [2424832] at [0x00250000]
write block [2490368] at [0x00260000]
write block [2555904] at [0x00270000]
write block [2621440] at [0x00280000]
write block [2686976] at [0x00290000]
write block [2752512] at [0x002A0000]
write block [2818048] at [0x002B0000]
write block [2883584] at [0x002C0000]
write block [2949120] at [0x002D0000]
write block [3014656] at [0x002E0000]
write block [3080192] at [0x002F0000]
write block [3145728] at [0x00300000]
write block [3211264] at [0x00310000]
write block [3276800] at [0x00320000]
write block [3342336] at [0x00330000]
write block [3407872] at [0x00340000]
Write fake len/chksum @ 0x3AFFF8 ...done.
uploading [3444785]
BCMDOG: WDT device closed unexpectedly.  WDT will not stop!
Restarting system.
Please stand by while rebooting the system...
Decompressing..........done


CFE for WNR3500v2 version: v1.0.29
Build Date: Fri Jun 12 11:11:15 CST 2009
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a 4MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.28
CPU type 0x19740: 453MHz
Tot mem: 32768 KBytes

Device eth0:  hwaddr C0-3F-0E-AB-EC-84, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checksum mismatch:
Image chksum: 0x00000000
Calc  chksum: 0x02C0010E
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: . 0 bytes read
Failed.
Could not load flash0.os:: Error
Start TFTP server
Reading ::

_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7079

PostPosted: Fri Jan 13, 2012 16:22    Post subject: Reply with quote
Strange.. I know that cfe 1.29 is buggy and there should be a thread about it in myopenwrtrouter, I think they replaced it with an older version.


Plan C

Load the stock firmware in the same way and with the same switches as when you loaded dd-wrt. Make sure the header in the stock is of the same kind as in the header in dd-wrt.
You need to get stock firmware onto the router in some way before converting to dd-wrt.

_________________
I'm on a whiskey diet, lost 3 days already
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1716

PostPosted: Fri Jan 13, 2012 16:36    Post subject: Reply with quote
LOM, isn't checksum the culprit here? I think whenever he gets a valid checksum it will work..
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 16:57    Post subject: Reply with quote
fggs wrote:
LOM, isn't checksum the culprit here? I think whenever he gets a valid checksum it will work..
no, getting dd-wrt on here the checksums are off too.


LOM wrote:
Strange.. I know that cfe 1.29 is buggy and there should be a thread about it in myopenwrtrouter, I think they replaced it with an older version.


Plan C

Load the stock firmware in the same way and with the same switches as when you loaded dd-wrt. Make sure the header in the stock is of the same kind as in the header in dd-wrt.
You need to get stock firmware onto the router in some way before converting to dd-wrt.
will try, i erase everything before HDR0 on both dd-wrt.v24-17084_NEWD-2_K2.6_mini-WNR3500v2.chk and WNR3500v2-V1.2.2.28_25.0.85NA.chk. But I will recheck both files to make sure.
_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 17:06    Post subject: Reply with quote
17084_NEWD-2_K2.6_mini-WNR3500v2.chk header

Code:
HDR0 04 _GA


WNR3500v2-v1.2.2.28_25.0.85NA.chk header

Code:
HDR0  4 H$

_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 17:18    Post subject: Reply with quote
Where is the checksum stored and can i edit it to match?
_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1716

PostPosted: Fri Jan 13, 2012 17:33    Post subject: Reply with quote
LOM, correct me if I'm wrong, but..

The checksum value is hardcoded in CFE, the CFE has an algorithm to calc checksum of the image, I don't if it is by size or whatever.

I know that dd-wrt fakes a checksum, that's why with both dd-wrt and tomato you will always see "Checksum mismatch".
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 17:48    Post subject: Reply with quote
did a search on myopenrouter forums for 3500v2 and it only came up with threads for 3500L and 3500L v2
_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1716

PostPosted: Fri Jan 13, 2012 17:52    Post subject: Reply with quote
A-ha! This should end your problems: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=453598#453598

See what tsanga did with the help of LOM, of course!
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 18:30    Post subject: Reply with quote
fggs wrote:
A-ha! This should end your problems: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=453598#453598

See what tsanga did with the help of LOM, of course!
Good find I had looked at that thread before at the recomedation of LOM but only for the board_data file. After you reposted the link this is what happened.

In WNR3500v2-V1.2.2.28_25.0.85NA.chk I changed the header info from "U12H127T00_NETGEAR" to "U12H127T70_NETGEAR" and uploaded the file to the waiting "Reading ::". It took it and ran with it.

At this point I had OEM firmware running back on it. So I checked all the MAC's in the OEM firmware to make sure they were correct. They were.

Then loaded from the OEM GUI dd-wrt.v24-18024_NEWD-2_K2.6_mini-WNR3500v2.chk. to my amazement it loade fine. Changed the password, then checked the system info and wouldn't ya know it, all the MAC's were correct.

BIG thanks to fggs for pointing out that link again.

Even BIGGER thanks to LOM for participating in the OP.

And please Donate to TJTAG. Without it none of this would have been possible.

_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki


Last edited by Dark_Shadow on Fri Jan 13, 2012 18:53; edited 1 time in total
fggs
DD-WRT Guru


Joined: 28 Jan 2008
Posts: 1716

PostPosted: Fri Jan 13, 2012 18:45    Post subject: Reply with quote
Thanks! Glad I could help.

As a side note: I don't know if this unit is yours or from someone, but you do realise that by editing the FIRMWARE, board_data remains unfixed. Which means, if one day you or the person wants to revert, will need this stock firmware you edited.
Dark_Shadow
DD-WRT Guru


Joined: 31 Aug 2009
Posts: 2430
Location: Third Rock from the Sun

PostPosted: Fri Jan 13, 2012 18:50    Post subject: Reply with quote
fggs wrote:
Thanks! Glad I could help.

As a side note: I don't know if this unit is yours or from someone, but you do realise that by editing the FIRMWARE, board_data remains unfixed. Which means, if one day you or the person wants to revert, will need this stock firmware you edited.
Oh I guess I should have tryed to load the unedited image?

Or does the board data need to be changed to "U12H127T00_NETGEAR"

_________________
Peacock Thread-FAQ -- Firmware Recommendations -- dd-wrt Wiki

Testing Multiple Routers -- Bootloader Collection Project -- My Wiki


Last edited by Dark_Shadow on Fri Jan 13, 2012 18:55; edited 1 time in total
Goto page Previous  1, 2, 3, 4, 5  Next Display posts from previous:    Page 3 of 5
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum