DD-WRT Support for the Dynex DX-NRUTER Router

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2, 3 ... 9, 10, 11  Next
Author Message
akcam2006
DD-WRT User


Joined: 21 Jan 2009
Posts: 60

PostPosted: Wed Jan 21, 2009 6:09    Post subject: DD-WRT Support for the Dynex DX-NRUTER Router Reply with quote
Hello,

I am currently running DD-WRT on my Microsoft MN-700 router. Recently I purchased a Dynex DX-NUTER to help speed up my internal lan but the firmware on it stinks. I would like to install DD-WRT but there is no support for this router yet. I am hoping that by providing the following information you can help me find a firmware that will work.

Router
http://www.dynexproducts.com/pc-735-4-dynex-wireless-n-router.aspx

ROM
http://www.macronix.com/QuickPlace/hq/PageLibrary4825740B00298A3B.nsf/h_Index/96870FB61512140D4825741600327F81/?OpenDocument

RAM
http://www.qimonda.com/consumer-dram/ddr/index.html?wsref=Consumer%20DRAM%2FConsumer%20DRAM%20DDR%3A1

CPU
http://www.broadcom.com/products/Wireless-LAN/802.11-Wireless-LAN-Solutions/BCM4703

Thanks for the help,

akcam2006



IMG_4085.JPG
 Description:
 Filesize:  1.96 MB
 Viewed:  22958 Time(s)

IMG_4085.JPG



IMG_4081.JPG
 Description:
 Filesize:  2.26 MB
 Viewed:  22958 Time(s)

IMG_4081.JPG



IMG_4079.JPG
 Description:
 Filesize:  2.31 MB
 Viewed:  22958 Time(s)

IMG_4079.JPG


Sponsor
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17442
Location: Hesse/Germany

PostPosted: Wed Jan 21, 2009 8:53    Post subject: Reply with quote
do
http://www.dd-wrt.com/wiki/index.php/Broadcom_detection

_________________
GEGEN die EEG-UMLAGE auf EIGENVERBRAUCH!
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
Eko
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 5772

PostPosted: Sun Jan 25, 2009 7:08    Post subject: Reply with quote
Hi,
we will need serial console log.

_________________
Professional debrick service for EU countries for small fee.
Send inquiries to: debrick at dd-wrt dot si

Have a brick you don't need?

Paypal & Amazon.com gift cards are welcome. Every $ or € counts. Email: donate at dd-wrt dot si
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Mon Sep 28, 2009 16:15    Post subject: Reply with quote
Hi,

I own the same router. Here are the specs on mine:

256MB DDR SDRAM - SAMSUNG K4H561638J
4MB FLASH MEMORY - MX29LV320DBTI-70G

The same Broadcom chipset as in the pictures above.
My version is Ver. 1.001 on the label.

Any chance this can run DD-WRT?
Is there any info on how to set up the board to be able to obtain the console log?

Thanks,
Boris
Mordak
DD-WRT Guru


Joined: 27 Dec 2007
Posts: 931
Location: Orange, MA

PostPosted: Mon Sep 28, 2009 16:32    Post subject: Reply with quote
It looks like the J21 in the last photo on the bottom right side, is the serial connection spot. So you'll need to have a serial ttl converter to access a serial console.
_________________

6 X WRT54G-TM
1 X WRT54G V1.0
1 X WRT54G V2.2
1 X WRT54G V5.0
2 X WRT54GS V1.0
2 X WRT54GS V1.1
1 X WRT54GS V2.0
1 X WRT160NL v1.0
1 X WRT320N
2 X WRT350N
1 X WRT600N v1.0
2 X WRT610N v1.0
1 X E1500
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Sun Oct 04, 2009 14:24    Post subject: Reply with quote
Mordak,

Thanks for your answer. I'm kinda new at this so bare with me. I'm trying to get to the serial console to post a dump of it here. I purchased the following JTAG Adapter but from what you're saying it seems like it's not sufficient and that I need a Serial - TTL converter (like one of these).
So, if I buy one of the TTL-Serial converters, I do not need the JTAG? or does it work in conjunction with the JTAG cable?

Thanks in advance for any details... if you have a different suggestion on what I would need to procure to connect this router to the serial port, please share it :)

Thanks again,
Boris
Mordak
DD-WRT Guru


Joined: 27 Dec 2007
Posts: 931
Location: Orange, MA

PostPosted: Sun Oct 04, 2009 18:43    Post subject: Reply with quote
Those will work Boris. It's always better to have serial ttl and jtag it opens up your recovery options if you brick your router. I have a USB to TTL Serial converter and a very similar jtag cable. Good luck.
_________________

6 X WRT54G-TM
1 X WRT54G V1.0
1 X WRT54G V2.2
1 X WRT54G V5.0
2 X WRT54GS V1.0
2 X WRT54GS V1.1
1 X WRT54GS V2.0
1 X WRT160NL v1.0
1 X WRT320N
2 X WRT350N
1 X WRT600N v1.0
2 X WRT610N v1.0
1 X E1500
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Sun Oct 04, 2009 19:22    Post subject: Reply with quote
Let me make sure I understood. You're saying that I should be able to connect the JTAG cable directly to J21 and the DB25 connector to the computer's LPT port, correct?

Also, as far as I understand, the difference between a JTAG and a Serial cable is that the JTAG is used to connect to a JTAG "slot" on the circuit board and allows for writing directly to the EEPROM, bypassing the CPU, whereas the serial cable is supposed to be connected to a serial port slot on the circuit board and helps interface with the microcontroller and obtain console logs, among other things.

If this is correct, then the JTAG cable cannot be used to obtain a console output, right?

How would I be able to establish what kind of slot the J21 provides: serial or JTAG ? Is there anything I can measure with a multimeter that would conclusively distinguish the two?

If you happen to know the answers to these questions, please enlighten me Smile

Thanks a bunch!

Boris

PS: Can you share where you got your USB-TTL serial converter from?
Mordak
DD-WRT Guru


Joined: 27 Dec 2007
Posts: 931
Location: Orange, MA

PostPosted: Sun Oct 04, 2009 19:46    Post subject: Reply with quote
borice wrote:
Let me make sure I understood. You're saying that I should be able to connect the JTAG cable directly to J21 and the DB25 connector to the computer's LPT port, correct?

Also, as far as I understand, the difference between a JTAG and a Serial cable is that the JTAG is used to connect to a JTAG "slot" on the circuit board and allows for writing directly to the EEPROM, bypassing the CPU, whereas the serial cable is supposed to be connected to a serial port slot on the circuit board and helps interface with the microcontroller and obtain console logs, among other things.

If this is correct, then the JTAG cable cannot be used to obtain a console output, right?

How would I be able to establish what kind of slot the J21 provides: serial or JTAG ? Is there anything I can measure with a multimeter that would conclusively distinguish the two?

If you happen to know the answers to these questions, please enlighten me Smile

Thanks a bunch!

Boris

PS: Can you share where you got your USB-TTL serial converter from?
Here's the USB Serial Converter I bought: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=360171719350

You will have to solder the header into the J21 slot. The J6 slot is for serial connection but I'm not sure which pins go to what.

And yes you will have to connect it (jtag) to the computers printer port. An d yeah you get console output through serial only. Jtag is always as far as I know 12 pins for these types of routers I have seen some with more ports but this looks just like jtag to me.

_________________

6 X WRT54G-TM
1 X WRT54G V1.0
1 X WRT54G V2.2
1 X WRT54G V5.0
2 X WRT54GS V1.0
2 X WRT54GS V1.1
1 X WRT54GS V2.0
1 X WRT160NL v1.0
1 X WRT320N
2 X WRT350N
1 X WRT600N v1.0
2 X WRT610N v1.0
1 X E1500
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Tue Oct 06, 2009 1:45    Post subject: Reply with quote
Just an update:

I connected the JTAG to the router, and used the latest tjtag.exe and got the following, when issuing the -probeonly command:

Quote:

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done

Probing Flash at (Flash Window: 0x1fc00000) ...
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


Still waiting for the console cable to arrive.
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Tue Oct 06, 2009 2:03    Post subject: Reply with quote
Hmm... I tried to back up the NVRAM and CFE, but it wouldn't work as the flash chip hasn't been properly detected. The closest approximate was to use the /fc:40 or /fc:41 but none of them worked... it seemed to work for a little bit, but then it would start giving:

Quote:

[ 1% Backed Up] 1fc00be0: 00000000 00000000 00000000 00000000
[ 1% Backed Up] 1fc00bf0: 00000000 00000000 00000000 00000000
[ 1% Backed Up] 1fc00c00: 00000000 00000000 00000000 00000000
[ 1% Backed Up] 1fc00c10: 00000000 00000000 00000000 00000000
[ 1% Backed Up] 1fc00c20: 00000000 00000000 00000000 00000000
[ 1% Backed Up] 1fc00c30: 00000000 00000000 00000000 DMA Read Addr = 1fc00c3c
Data = (00000000)ERROR ON READ
00000000
[ 1% Backed Up] 1fc00c40: DMA Read Addr = 1fc00c40 Data = (00000000)ERROR ON
READ
00000000 DMA Read Addr = 1fc00c44 Data = (00000000)ERROR ON READ
00000000 DMA Read Addr = 1fc00c48 Data = (00000000)ERROR ON READ
00000000 DMA Read Addr = 1fc00c4c Data = (00000000)ERROR ON READ
00000000


Any ideas where I can obtain info about the flash chip to manually specify the start address...etc? Or what else I can try?
barryware
DD-WRT Guru


Joined: 26 Jan 2008
Posts: 12842
Location: Behind The Reset Button

PostPosted: Tue Oct 06, 2009 2:39    Post subject: Reply with quote
do a probeonly using the /flash_debug switch and post the debug info.
_________________
[Moderator Deleted] Shocked
Mordak
DD-WRT Guru


Joined: 27 Dec 2007
Posts: 931
Location: Orange, MA

PostPosted: Tue Oct 06, 2009 2:57    Post subject: Reply with quote
Check your solder points and reflow the solder if needed. This is a common mistake I've done it myself. Also try tjtag -probeonly /noemw . Also review this article for more hints: http://www.dd-wrt.com/wiki/index.php/Category:Jtag
_________________

6 X WRT54G-TM
1 X WRT54G V1.0
1 X WRT54G V2.2
1 X WRT54G V5.0
2 X WRT54GS V1.0
2 X WRT54GS V1.1
1 X WRT54GS V2.0
1 X WRT160NL v1.0
1 X WRT320N
2 X WRT350N
1 X WRT600N v1.0
2 X WRT610N v1.0
1 X E1500
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Tue Oct 06, 2009 3:47    Post subject: Reply with quote
Here's the output from -probeonly /flash_debug

Quote:

C:\Temp\tjtag3-0-1\tjtag3-0-1\Windows32>tjtag3.exe -probeonly /flash_debug

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
spi_flash_read 0x1fc00000
spi_flash_mmr 0x00000000
spi_flash_mmr_size 0x00000000
spi_flash_ctl 0x18000040
spi_flash_opcode 0x18000044
spi_flash_data 0x18000048
spi_ctl_start 0x80000000
spi_ctl_busy 0x80000000

Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000100000010111 (00000817)
Debug AMD Devdid : 00000000000000000001000000000000 (00001000)

Debug SST Vendid : 00000000000000000000100000010111 (00000817)
Debug SST Devdid : 00000000000000000001000000000000 (00001000)

Debug BSC-SCS Vendid :00010000000000000000100000010111 (10000817)
Debug BCS-SCS Devdid :00000000000000000000000000000000 (00000000)
REGREAD32 data 0x00000000 spi_flash_mmr 0x00000000 reg 0x18000040
REG 0x18000044 REGWRITE32 0x0000049f
SPI_FLASH_OPCODE 0x18000044 PTR_OPCODE 0x0000049f
REG 0x18000040 REGWRITE32 0x8000049f
SPI_FLASH_CTL SEND -> 0x18000040 reg 0x8000049f
REGREAD32 data 0x0000049f spi_flash_mmr 0x00000000 reg 0x18000040
REGREAD32 data 0x00000000 spi_flash_mmr 0x00000000 reg 0x18000048

Debug SPI id : 00000000000000000000000000000000 (00000000)

Debug SPI Vendid : 00000000000000000000000000000000 (00000000)
Debug SPI Devdid : 00000000000000000000000000000000 (00000000)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***



This is the output from -probeonly /noemw

Quote:

C:\Temp\tjtag3-0-1\tjtag3-0-1\Windows32>tjtag3.exe -probeonly /noemw

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done

Probing Flash at (Flash Window: 0x1fc00000) ...
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


I'm pretty sure the connection is good.
borice
DD-WRT Novice


Joined: 28 Sep 2009
Posts: 23

PostPosted: Tue Oct 06, 2009 4:46    Post subject: Reply with quote
Well - seems like I'm lucky... after trying the /fc:40 and /fc:41 without success, I decided to try a few others that seemed to match the specifications of my flash... so next I tried /fc:38 which seemed to work. I was able to use the /backup:cfe and subsequently nvram and kernel, and did it twice for each and results were consistent. I no longer got READ ERROR problems.

I guess the only way to know is to try and flash DD-WRT and see what happens, and use the backups to restore back to original if anything goes wrong Smile
Goto page 1, 2, 3 ... 9, 10, 11  Next Display posts from previous:    Page 1 of 11
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum