Hello.Thank you for reply.The working AP is exactly the same model.After I wrote the fulflash on the bricked AP , I checked with the serial console and nothing happens.I did checked the information from the flash with the backup from the good AP and looks to be the same.What could be the problem? Thank you.
Do you have some backup from before you deleted or wrote anything to the AP? Compare it and see if the beginning of the file is similar.
After writing with jtag, you did a backup from the bricked AP, and compared it to the file you used to flash, is that right ? And it was the same file ?
You mention to have used tjtag and brjtag. Do both operations ( backup from the good AP, write to the bad AP ) with the same software.
Before trying to write the image to the bad AP, open it in a hex editor and see if it really is a good backup. You should find some strings from the bootloader, etc. Since both softwares can´t detect the flash type, it is possible you are just creating a file with garbage, and writing part ( or even nothing ) of it to the bad AP.
By the way, I re-read the thread, and saw you never did post information about what was in the serial console. That could have prevented the need to work with jtag and troubles detecting flash memory.
Also please, with the ground of the meter in the side of the power connector, measure the voltages at the pins of VR2, C529 ( near LED1 ) , C282 ( near the Atheros chip ) .
Also, from my notes, in a Planet WAP-4000 the serial was 9600 8N1, but just showed the lines
do the backup from the good one with tjtag.
erase wholeflash from the bad one with tjtag
read from the bad one. See if it comes all zeros or FF´s.
Write to the bad one with tjtag
read from the bad one, make a binary comparision to the file you flashed to see it it is equal.
If something doesn´t work, try ALL steps with brjtag
But really, you should be trying with other jtag software, and maybe researching at their forums to see if it is possible to add your flash chip to the detection.
Hello.I can write to the flash only with brjtag using /fc:002 and ONLY with /spirev .With tjtag it does write nothing,it start but is not moving.I saw in the flash list of brjtag that for /fc:002 I have vendor ID = 00C2 and device ID = 22DA. For my flash which is MX29LV800BTC-90 the device ID is 005b .Could this be the problem.Later today I will all teh steps you told me.Please remember that with tjtag I can ONLY read and erase and with brjtag I can write but using /spirev switch.Thank you very much.
News.I tried to erase the flash with tjtag3,tjtag3.0.1,brjtag but it does not erase the entire flash.I can see that at the "begining" of the flash backup that I have 00ff.At 2% of the flash backup file I can still see data.If I want to replace the actual flash chip what are the similar chips?I allready have another 2 new flash chips : AM29LV800BT-90EF that I ordered from ebay because urjtag supports them.Any ideeas?
Hello.I am using brjtag v2.0.5-hugebird. I did a erase:wholeflash with /wx8 switch and after that I did a backup using teh same switches including /wx8 and it shows at the beggining at the flash only FFFFF and at 2% I can see data.I used a buffered wiggler cable.
Hello.I am using brjtag v2.0.5-hugebird. I did a erase:wholeflash with /wx8 switch and after that I did a backup using teh same switches including /wx8 and it shows at the beggining at the flash only FFFFF and at 2% I can see data.I used a buffered wiggler cable.
ok, but you used /fc:002 which is for a Bottom Boot block MX29LV800 while your flash is a Top Boot block type.
Use /fc:001 !
Can you attach the brjtag 2.05 in a pm to me? I can only find up to version 1.9 on the net.
Using the /wx8 and /spi parameters of brjtag, can the program detect the flash type on its own? Or it will also state "Flash chip unknown " ?
Try with /unlock or /bypass. But until you can correctly write to the chip, you will not be able to ressurrect it.
As for changing the flash chip, you would need to be sure they have the same pinout, and use the same peripheral circuits.
On a side note, besides as a research project ( I too hate throwing away good hardware ) , this is a weak AP to use. You could buy another for about US$ 20, with more ram/cpu power.
By the way, I forgot to answer, the voltages you measured are similar to those in my notes.
Hi.Brjtag does not have support for atheros.I have to use skipdetect.I tried to detect the flash with brjtag using all the switches that you recommnend me.I used a wiggler buffered cable.The result is a brjtag programm error.Check the photo from attachment.
