Posted: Sun Apr 10, 2011 14:10 Post subject: Re: bcm3368
coco20 wrote:
he has a serial port but I eraser image2 and all leds its on and I no wat jtag I ket ase for him and I sande to you same pictures of the bourt ths
You should start another thread, as this was intended to discussions of tjtag.
But lets see :
From google, that model you mentioned is a Cisco ( real Cisco, not a linksys unit ) router. If that is the case, it probably runs Cisco IOS v.something.
Can you explain clearly what was happening, and what did you do / which was the result ?
I am in great need to revive/JTAG my bricked Linksys E4200. Right now I only have a DLC5 cable, but I just ordered a Universal JTAG adapter from TIAO. I can get communication with TJTAG 3.0.1 but the FLASH on the E4200 is not supported. With the newer RC2 TJTAG (latest out via this thread, I get nothing since it does not work with my DLC5 cable (even with the /cable:dlc5 option). Can you help out? Will I need a custom version of TJTAG? I am working on solving a nasty wireless bug on this platform and need to get going again. Thanks for any help.
BTW: My FLASH part is a MX25L12845EW1. _________________ 1 x WRT310Nv2 (400/200/100)
3 x WRT320N (480/240/120)
1 x E4200 (532/266/133)
(All running the latest DD-WRT!)
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Fri Apr 22, 2011 3:18 Post subject:
LiteUp! wrote:
Tornado,
I am in great need to revive/JTAG my bricked Linksys E4200. Right now I only have a DLC5 cable, but I just ordered a Universal JTAG adapter from TIAO. I can get communication with TJTAG 3.0.1 but the FLASH on the E4200 is not supported. With the newer RC2 TJTAG (latest out via this thread, I get nothing since it does not work with my DLC5 cable (even with the /cable:dlc5 option). Can you help out? Will I need a custom version of TJTAG? I am working on solving a nasty wireless bug on this platform and need to get going again. Thanks for any help.
BTW: My FLASH part is a MX25L12845EW1.
I'm not Tornado and I don't wanna trash this thread more than it is but I need to know.. Why does your unit need jtag? how did you destroy the bootloader (cfe)? No serial output? _________________ [Moderator Deleted]
I am in great need to revive/JTAG my bricked Linksys E4200. Right now I only have a DLC5 cable, but I just ordered a Universal JTAG adapter from TIAO. I can get communication with TJTAG 3.0.1 but the FLASH on the E4200 is not supported. With the newer RC2 TJTAG (latest out via this thread, I get nothing since it does not work with my DLC5 cable (even with the /cable:dlc5 option). Can you help out? Will I need a custom version of TJTAG? I am working on solving a nasty wireless bug on this platform and need to get going again. Thanks for any help.
BTW: My FLASH part is a MX25L12845EW1.
I'm not Tornado and I don't wanna trash this thread more than it is but I need to know.. Why does your unit need jtag? how did you destroy the bootloader (cfe)? No serial output?
Barryware,
I had something very strange happen. I was changing some wireless settings in dd-wrt while debugging a problem with a wireless client, and it died. There is nothing at all. No Ethernet lights and no response at all after I clicked Apply. _________________ 1 x WRT310Nv2 (400/200/100)
3 x WRT320N (480/240/120)
1 x E4200 (532/266/133)
(All running the latest DD-WRT!)
BTW...I have my CFE. I backed it up before all this happened. _________________ 1 x WRT310Nv2 (400/200/100)
3 x WRT320N (480/240/120)
1 x E4200 (532/266/133)
(All running the latest DD-WRT!)
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Fri Apr 22, 2011 11:45 Post subject:
LiteUp! wrote:
barryware wrote:
LiteUp! wrote:
Tornado,
I am in great need to revive/JTAG my bricked Linksys E4200. Right now I only have a DLC5 cable, but I just ordered a Universal JTAG adapter from TIAO. I can get communication with TJTAG 3.0.1 but the FLASH on the E4200 is not supported. With the newer RC2 TJTAG (latest out via this thread, I get nothing since it does not work with my DLC5 cable (even with the /cable:dlc5 option). Can you help out? Will I need a custom version of TJTAG? I am working on solving a nasty wireless bug on this platform and need to get going again. Thanks for any help.
BTW: My FLASH part is a MX25L12845EW1.
I'm not Tornado and I don't wanna trash this thread more than it is but I need to know.. Why does your unit need jtag? how did you destroy the bootloader (cfe)? No serial output?
Barryware,
I had something very strange happen. I was changing some wireless settings in dd-wrt while debugging a problem with a wireless client, and it died. There is nothing at all. No Ethernet lights and no response at all after I clicked Apply.
You should be able to fix it with serial. If Tornado does not have the router, adding support is a long tedious process for both him & you. (ask me how I know). If you can't get it to go, maybe consider donating the router to him. As said.. your cfe should be ok. I can't see how applying a wireless setting trashed the boot loader so the serial console should work. Sounds like all you need to do is erase nvram. _________________ [Moderator Deleted]
I would agree with you, but I cannot get any Ethernet link or anything. I'm going to try a few more things (including serial to see if there is any life, if I can find where the serial port is to solder to it). I know the chip is alive since I do get JTAG response from it.
BTW...I do know Eko has JTAG working on his E4200. This is another reason I am asking. _________________ 1 x WRT310Nv2 (400/200/100)
3 x WRT320N (480/240/120)
1 x E4200 (532/266/133)
(All running the latest DD-WRT!)
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Fri Apr 22, 2011 12:28 Post subject:
LiteUp! wrote:
barryware,
I would agree with you, but I cannot get any Ethernet link or anything. I'm going to try a few more things (including serial to see if there is any life, if I can find where the serial port is to solder to it). I know the chip is alive since I do get JTAG response from it.
BTW...I do know Eko has JTAG working on his E4200. This is another reason I am asking.
Ah.. yes.. I remember eko saying he had to use jtag.
Still.. the serial header: when looking at the router from the front, the serial header is the 5 pin connector (holes) on the right side of the pcb, towards the back (close to the switch ports), almost even with the antenna. You will need a ttl (3.3v) adapter.
I would agree with you, but I cannot get any Ethernet link or anything. I'm going to try a few more things (including serial to see if there is any life, if I can find where the serial port is to solder to it). I know the chip is alive since I do get JTAG response from it.
BTW...I do know Eko has JTAG working on his E4200. This is another reason I am asking.
Ah.. yes.. I remember eko saying he had to use jtag.
Still.. the serial header: when looking at the router from the front, the serial header is the 5 pin connector (holes) on the right side of the pcb, towards the back (close to the switch ports), almost even with the antenna. You will need a ttl (3.3v) adapter.
Good luck..
Yes...connected it up. Looks like the CFE is dead. Only a couple of garbage characters come out as soon as power touches. I am connected through a proper 232-TTL adapter 115200, N, 8, 1. TX-RX pins are not swapped. _________________ 1 x WRT310Nv2 (400/200/100)
3 x WRT320N (480/240/120)
1 x E4200 (532/266/133)
(All running the latest DD-WRT!)
Posted: Mon May 02, 2011 11:37 Post subject: Dlink DWL-2100AP A2 Bricked
Hi guys. i tried to change firmware to dd-wrt/openwrt on my old DWL-2100AP A2. With serial port i mange to change bootlader to redboot. Unfortunetly there was some issues with free space so i tried to flash redboot again and this time i bricked the device :/
Since then im trying to revive it with jtag (diagram from wiki.openwrt.org). But i has big problems with tjtag3.0.1 - its detecting everything properly but hanging after :
So everything seems to be ok and i tried to flash the CFE. It showed up that writing is not working (i can read/erase the flash)
I was so desperate that i soldered another flash chip (amd). Flash was not detected by tjtag so i set it manualy. It was possible to write on it but still
device didnt start :/. I soldered Atmel flash into wrt54gl board and flashed it with redboot for dlink and resoldered to the 2100AP PCB. And nothing happend :/
Thins are as it was before (cant flash anything to the rom with tjtag3.0.1 - with /bypass option its seems to be working but after checking all cells are still:
mybe its becouse the flash is 16bit and atheros is using only 8bit bus (i red about that somwhere - i dont know its true but that would explain why after flashing on wrt54gl and resoldering dlink didnt boot up)
If any one can help i would be very gratefull.
aditionaly i must add that tjtag3.0.2RC2 is not working:
Intial value of Control register is 000000C0
Intial value of status register is 000000F7
11110111 (000000F7)
Status bit 7 Busy Inverted pin 11 = 0
Status bit 6 *Ack pin 10 = 1
Status bit 5 Paper-out pin 12 = 1
Status bit 4 Select pin 13 = 1
Status bit 3 *Error pin 15 = 0
* means low = true, e.g., *Error
VCC connected
values of Control register after init 0x000000C0
value of status register after init 0x000000F7
system reset complete
Detected IR chain length = 5
Number of device(s) = 1
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***
- EJTAG IMPCODE ....... : 01000000010000000100000000000000 (40404000)
- EJTAG Version ....... : 2.6
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
[b]Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Init PrAcc ...[/b]
I don´t really know. I believe you are brazilian ( me too ) , hence the problem with the revision of hardware / firmware version.
CS would be the pin of the flash. The processor is ok.
From what I could deduce, the wrong firmware puts garbage in the start of the flash, the processor reads this, then locks up because they are instructions that don´t make sense to it. And this takes place before jtag can detect memory and put the processor in debug mode.
By keeping CS low ( you should read the datasheet to identify the pin and how it works ) , the processor don´t detect the flash, don´t read from it, and allows jtag to put it in debug mode. Then the fw could be written.
BUT...I can say that is probably the way to solve it, but have not got the time to try it. But I´m certain the firmware has something to do with the problem, because I saw it happen : was detecting the processor/flash ok with jtag when the firmware was ok. Updated with the wrong firmware, puf! no more flash detection.
What I could suggest : get a command prompt ready with the command -flash:cfe, then turn on the modem while keeping CS connected to ground.Count to 10, then simultaneously press Enter in the command prompt, and disconnect CS from ground. Probably this will need a lot of tries.
I encountered a very similar issue with a board that was working fine and after a bad flash update TJTAG 3.0.1 was no longer recognizing the flash chip (DMA READ ERRORs,
vendor id: 0), etc.
After much head scratching I followed the directions above. I masked off everything but the CE# pin on the flash chip with some electrical tape (to be safe!) and connected it to GND.
After a few tries powering the router on/off and running TJTAG with -probeonly and grouding/ungrounding CE#, hey presto the chip id appeared again. I flashed CFE back on and I have serial port access again.
BTW, I started with a homebrew JTAG cable but got it working again with a wiggler cable. Dunno if this makes a difference.
Hi, i have a bricked (leds lan on, power led flashing) WRT54GL V1.1 code CL7Bxx, i was trying to unbricked using the program tjtag3-0-1 and a passive hdm jtag cable but without success. Using the command tjtag -probeonly /noemw the program recognizes without problem de chip procesor (BCM5352 Rev 1) and flash (Sansung K8D3216UBC), also i am able to execute the commands tjtag -erase:wholeflash /noemw and tjtag -flash:cfe /noemw with success, after erase the wholeflash i made a backup of the cfe to chek if the blocks are clean (FFFFFFFFFFF) and the result was ok. After that i use the command tjtag -flash:cfe /noemw and the result it ok too but after do the power cicling the results are the same the wrt54gl continues bricked (Leds lan on power flashing).
So what do you think about it? i should place the missing 4,7K resistors in the jtag connector? should i use a wiggler jtag cable instead of hdm passive jtag cable?. Any suggestion will be welcome.
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Wed Jun 08, 2011 12:41 Post subject:
JESUS1981 wrote:
Greetings to everyone.
Hi, i have a bricked (leds lan on, power led flashing) WRT54GL V1.1 code CL7Bxx, i was trying to unbricked using the program tjtag3-0-1 and a passive hdm jtag cable but without success. Using the command tjtag -probeonly /noemw the program recognizes without problem de chip procesor (BCM5352 Rev 1) and flash (Sansung K8D3216UBC), also i am able to execute the commands tjtag -erase:wholeflash /noemw and tjtag -flash:cfe /noemw with success, after erase the wholeflash i made a backup of the cfe to chek if the blocks are clean (FFFFFFFFFFF) and the result was ok. After that i use the command tjtag -flash:cfe /noemw and the result it ok too but after do the power cicling the results are the same the wrt54gl continues bricked (Leds lan on power flashing).
So what do you think about it? i should place the missing 4,7K resistors in the jtag connector? should i use a wiggler jtag cable instead of hdm passive jtag cable?. Any suggestion will be welcome.
Thanks for you attention and patience
What caused the router to need the attention of jtag? If it was running fine and then one morning you woke up and the router took a crap, odds are it has suffered a hardware failure of some sort and is not repairable.
Flash the cfe, backup the cfe, and compare the backup with the cfe file you flashed. If they compare identical, you either flashed a bad cfe or you router is fubar. _________________ [Moderator Deleted]
