Tornado
Was wondering if the person with the serial consul was able to send you any data for the wrt54gs v7 models yet? I not sure as to what post it was mentioned in.
Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Sun Nov 25, 2007 8:52 Post subject:
@labrat_x,
Ok, with this Flash chip also use the /bypass command when flashing it with Tjtag. This chip will be detected as a AMD 29lv160DB or AMD 29lv160DT, because it is already a defined chip and has the same Manufacturer ID and Device ID as the Spansion S29AL016D.
So, what I recommend with this chip is:
Tjtag -flash:cfe /noreset /bypass
@Wingit
No, they have not gotton back to me yet, holiday weekend and ll I suppose. _________________ Want JTAG support - Donate a router
or Donate with PayPal !
Posted: Tue Nov 27, 2007 12:03 Post subject: CFE for bticked WRT54GS v7...
Hello, i've got another bricked WRT54GS v7 with a BCM5354KFBG REV 1 and 28F160, and i've beign trying to recover it from a bad flash using tjtag. Everything goes fine, it detects the chip, it seems it erases de NVRAM, the CFE and the WHOLEFLASH. But when i try to flash the CFE.bin it starts quick but i can´t get it working more than 2% or simetimes 4%.
The CFE.bin i'm using is oen i've created using the Skynet Repairkit, but it is for WRT54GS v5. Should this CFE.bin work? If not, how can i get a proper one?
I've got another original WRT54GS v7. Could i just dump the CFE.bin from it and then put it on the bricked one? Wouldn't it be a MAC conflict if they are in the same network?
Thanks a lot. Great work here! _________________ INFORMATION IS POWER. SHARE IT!
Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Tue Nov 27, 2007 12:14 Post subject:
Oscar,
We are having some problems with your specific flash chip, and are working on a fix for it. You cannot take and original CFE off of a Gv8 or GSv7, becuase they don't have CFE's on them, they have a boot loader from VxWorks - We call a BSP. _________________ Want JTAG support - Donate a router
or Donate with PayPal !
Posted: Tue Nov 27, 2007 22:56 Post subject: WRT54GSv7 Still Bricked
I've continued to try TJTAG with all possible /switches to load both the BSP and a variety of CFE's. I've used several different PC's and three different cables. All "seem" to work in one or more combination of switches with TJTAG. The BCM and the flash are "correctly" detected, and the backups look fine. Still 5 lan lights, no ping.
Hang in there guys -- you will get it! Let me know when you have a new solution to try.
Long time not see you. You still having problem with your same unit? My one already working with DD-WRT, thank to Tornado. I think you need to go back to original linksys firmware and than flash again to DD-WRT(Just follow this instruction from this post) http://www.dd-wrt.com/phpBB2/viewtopic.php?p=123672#123672
Posted: Tue Nov 27, 2007 23:59 Post subject: WRT54GSv7 Still Bricked
xircommy,
Yes, the GSv7 is still dead. I have several others running, (GV2, GV3, GV4, GV5, and GLV1) no problems, but this box is a problem.
Thanks for the idea- but I tried both the BSP from your post and another one from Tornado. Everything looks like it goes in OK, but I still can not ping or get to the management console. All LAN lights stay lit.
I thought it is possible that the chip is fried, but I can do -erase:wholeflash and then backup:BSP and it is blank.
Then I can -flash:BSP and then the -backup:BSP is correct, so it seems to be working.
There is another bug in some of the chipsets, I think!
Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Wed Nov 28, 2007 5:18 Post subject:
@natural*engineer
Can you do a type of binary diff of the BSP you put on and the one you backup, if using linux vbindiff is a good tool, or you could send them to me. _________________ Want JTAG support - Donate a router
or Donate with PayPal !
Posted: Wed Nov 28, 2007 12:13 Post subject: WRT54GSv7 BSP not Writing
Tornado,
You are right! The BSP did not write to the chip. It looks like it does, but when I actually compare the files, the backup version is all "ffffffff", while the BSP has a variety of other characters.
I have to do the erase and the flash separately or it hangs, and I have to use the /noreset or it hangs.
This was the sequence:
Tjtag -erase:wholeflash /noreset
=====>>>>>>
It looks good, EMW is OK, chip ID is OK, etc
wait for 39 blocks to erase, then 5 minutes, then power cycle, then power off
Tjtag -flash:BSP /noerase /noreset
It looks good, EMW is OK, chip ID is OK, etc
It looks good -- writing lots of characters, quickly
=====>>>>>>>
wait 640 seconds to flash, then 5 min, then power cycle
No ping
Tjtag -backup:BSP /noreset
======>>>>>
It is very fast -- but writing all "ffffffff"
wait 100 seconds for the backup to download
I can send the files, but it looks like either the chip is shot or the EMW is not actually enabling the write.
Posted: Sat Dec 01, 2007 2:26 Post subject: Tjtag - EJTAG tool with Gv8/GSv7 support
This may be off topic for the broadcom forum, but on topic for an EJTAG tool.
I'm trying to find a flash tool that can work with the Atheros WiSOC, in particular the WRT55AG, which is an AR5312 chipset and in my case (V2), the flash is a Macronix MX 29LV320.
What info would be needed to add the atheros chipset to supported CPUs, and the flash chips as well? I'd be happy to do legwork and research this, and even take a stab at sample code if there is any hope of making it work...
Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Sat Dec 01, 2007 6:21 Post subject:
That paticular chip is already defined in wrt54g and Tjtag, what are the pinout for your JTAG on that board ? have you tried Tjtag on that board ? read only ? _________________ Want JTAG support - Donate a router
or Donate with PayPal !
That paticular chip is already defined in wrt54g and Tjtag, what are the pinout for your JTAG on that board ? have you tried Tjtag on that board ? read only ?
I spent a while testing, and never got very far. I have a JTAG setup that has previously worked with a bunch of WRT54G and GS routers, but it doesn't seem to work here.
The 55AG has a 14 pin header, and my JTAG cable doesn't have tRST- so perhaps I don't have a usable setup for the 14 pin flash header, or need to connect one of the rst lines...
CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ....... : 11111111111111111111111111111111 (FFFFFFFF)
- EJTAG Version ....... : Unknown (7 is a reserved value)
- EJTAG DMA Support ... : No
CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ....... : 11111111111111111111111111111111 (FFFFFFFF)
- EJTAG Version ....... : Unknown (7 is a reserved value)
- EJTAG DMA Support ... : No