WRT300N V2 JTAG

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> ARM or PPC based Hardware
Goto page Previous  1, 2
Author Message
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Mon May 17, 2010 8:28    Post subject: Reply with quote
then
DavidKra one:http://davidkra.net/redboot-wrt300n-v2.bin)
is a crap redboot

_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
Sponsor
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Mon May 17, 2010 8:56    Post subject: Reply with quote
Yes that redboot is CRAP!
Bui i don't think is DavidKra's fault, he just changed some little configs.
Main fault is Linksys with crap changed source code and proprietary stuff included.

I think what we need is start from clean redboot source from intel for ixp4xx, add wrt300nV2 specific configurations and add suppor for included flash

http://www.intel.com/design/network/products/npfamily/download_ixp400.htm

http://homedownloads.cisco.com/downloads/gplcode/WRT300N-GPL-v2.00.21.tgz
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Mon May 17, 2010 10:13    Post subject: Reply with quote
SUCCESS: MAC ADDRESS FOUND ON FLASH

My device is now working 100% YEAH!!!!!!

How i got there:
This file: WRT300N-GPL-v2.00.21\wrt300n_redboot_GPL\packages\redboot\current\include\sercomm_flash.h
Code:
(...)
#define REDBOOT_SIZE      0x60000     // 384KB for bootloader

#define NODE_ADDRESS      (REDBOOT_SIZE - 0x60)
#define PID_OFFSET      (REDBOOT_SIZE - 0x56)
(...)

NODE_ADDRESS is where mac comes from!

So: 0x60000 - 0x60 = 0x5FFA0

TADAAAAAAA!!!
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Wed May 19, 2010 12:11    Post subject: Reply with quote
support topic
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=28858

_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
redbootloader
DD-WRT Novice


Joined: 30 Jun 2010
Posts: 3

PostPosted: Wed Jun 30, 2010 5:43    Post subject: Reply with quote
madaleno wrote:
Well, it looks like i was going in the wrong direction....

According to Eko: TJATG doesn't work with Intel IXP processors. Only CPU ID is detected.

After some investigation on intel xscale use @ linksys i found nslu2 which is based on the similiar architecture than my wrt300n, so after digging on nslu2 wiki i came with:

http://www.nslu2-linux.org/wiki/HowTo/RecoverFromABadFlashUsingJTAG

Well, it looks like i've been using the wrong cable and tool...

Rewiring and testing....

Hi madaleno,I have same problem with you ,can you post you photo after rewiring ,i can connect my router with JTAG ,Thank You A Lot !!
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7647

PostPosted: Wed Jun 30, 2010 7:14    Post subject: Reply with quote
redbootloader wrote:
madaleno wrote:
Well, it looks like i was going in the wrong direction....

According to Eko: TJATG doesn't work with Intel IXP processors. Only CPU ID is detected.

After some investigation on intel xscale use @ linksys i found nslu2 which is based on the similiar architecture than my wrt300n, so after digging on nslu2 wiki i came with:

http://www.nslu2-linux.org/wiki/HowTo/RecoverFromABadFlashUsingJTAG

Well, it looks like i've been using the wrong cable and tool...

Rewiring and testing....

Hi madaleno,I have same problem with you ,can you post you photo after rewiring ,i can connect my router with JTAG ,Thank You A Lot !!


Everything you need to know is in the link to nslu2-linux.org that you just quoted.
Schematic diagram for the cable and which program to use.

_________________
Kernel panic: Aiee, killing interrupt handler!
redbootloader
DD-WRT Novice


Joined: 30 Jun 2010
Posts: 3

PostPosted: Wed Jun 30, 2010 10:32    Post subject: Reply with quote
LOM wrote:
redbootloader wrote:
madaleno wrote:
Well, it looks like i was going in the wrong direction....

According to Eko: TJATG doesn't work with Intel IXP processors. Only CPU ID is detected.

After some investigation on intel xscale use @ linksys i found nslu2 which is based on the similiar architecture than my wrt300n, so after digging on nslu2 wiki i came with:

http://www.nslu2-linux.org/wiki/HowTo/RecoverFromABadFlashUsingJTAG

Well, it looks like i've been using the wrong cable and tool...

Rewiring and testing....

Hi madaleno,I have same problem with you ,can you post you photo after rewiring ,i can connect my router with JTAG ,Thank You A Lot !!


Everything you need to know is in the link to nslu2-linux.org that you just quoted.
Schematic diagram for the cable and which program to use.

Thank you for reply . i write something wrong . I connected my router with JTAG like madaleno,and but i can NOT see anything in Urjtag .so i beg somebady
can post a complete Schematic diagram .
Thank a lot
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Wed Jun 30, 2010 16:08    Post subject: CAREFUL! Reply with quote
schematic is different from the one i posted early!

I used this one from nslu2 with success:



25 pins male ||| 5 resistors 51 ohms or 75 ohms ||| WRT300NV2

GND 17-25 <----------------------------------------------------< GND (any big metal part)

5 >---------------XXXX---------------------------------> TDI

3 >---------------XXXX---------------------------------> TMS

4 >---------------XXXX---------------------------------> TCLK

11 <--------------XXXX---------------------------------> TDO

*****************************************************************

NTRST <---------XXXX--------------------------------> 3.3V(FROM SERIAL ADAPTER, THIS IS VERY IMPORTANT, IF NOT CONNECTED IT WONT WRITE, ONLY READ)


wrt300nv2 pins here: http://www.dd-wrt.com/wiki/index.php/JTAG_pinouts#Linksys_WRT300n_v2
redbootloader
DD-WRT Novice


Joined: 30 Jun 2010
Posts: 3

PostPosted: Wed Jun 30, 2010 17:37    Post subject: Re: CAREFUL! Reply with quote
madaleno wrote:
schematic is different from the one i posted early!

I used this one from nslu2 with success:



25 pins male ||| 5 resistors 51 ohms or 75 ohms ||| WRT300NV2

GND 17-25 <----------------------------------------------------< GND (any big metal part)

5 >---------------XXXX---------------------------------> TDI

3 >---------------XXXX---------------------------------> TMS

4 >---------------XXXX---------------------------------> TCLK

11 <--------------XXXX---------------------------------> TDO

*****************************************************************

NTRST <---------XXXX--------------------------------> 3.3V(FROM SERIAL ADAPTER, THIS IS VERY IMPORTANT, IF NOT CONNECTED IT WONT WRITE, ONLY READ)


wrt300nv2 pins here: http://www.dd-wrt.com/wiki/index.php/JTAG_pinouts#Linksys_WRT300n_v2


Thanks A Lot, Madaleno I will try it ,and i have other questions :
Are you connected other pull-up or pull-down resistors except those five resistors you mention?
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Wed Jun 30, 2010 22:02    Post subject: Reply with quote
Nope, just connected like that,
TDI, TMS, TCLK AND TDO are already connected to pulldown resistor pack 103
New User
DD-WRT Novice


Joined: 20 Apr 2007
Posts: 6

PostPosted: Thu Aug 19, 2010 8:33    Post subject: Reply with quote
Do we have any member here in toronto that can JTAG the wrt300n router? i am at canuckaudiovideo at hot mail dot com (not ca)
didimond
DD-WRT Novice


Joined: 12 Feb 2010
Posts: 5

PostPosted: Sat Mar 19, 2011 22:17    Post subject: Reply with quote
hello, please to help me. please, to give fresh redboot.bin to me ( to work script set_npa_mac) for wrt300n - v2, on the site of davidka reference already not to work, I can not find. I to try to recover and load the original of fullflash, but she not loaded, decide on redboot>, is it necessary to press in consol ctrl+c and it to continue to embark, how it to correct? in the original of firmware not to work "fconfig". please to explain to me, how to do patched in redboot.bin?

to excuse for my English.
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany

PostPosted: Sun Mar 20, 2011 9:43    Post subject: Reply with quote
see the initial post of this topic
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
alvinlambert
DD-WRT Novice


Joined: 21 Mar 2011
Posts: 1

PostPosted: Mon Mar 21, 2011 8:29    Post subject: Reply with quote
madaleno wrote:
Thanks for the tip, but you suggest issuing the commands only or flashing the Actiontec MI424WR redboot into my wrt300n an then issuing the commands??

I've already tried the commands described on wiki(on original linksys redboot and DavidKra one:http://davidkra.net/redboot-wrt300n-v2.bin) :
Quote:
Configure MAC addresses (initial setup only)
fconfig npe_eth0_esa 0x00:0x01:0x02:0x03:0x04:0x05 (The "0x" tell's the redboot that its hex code.). Use the MAC address at the bottom of the unit plus 3. The one printed on the bottom is for the lan, but we need to tell RedBoot what the WAN port MAC address is.
fconfig npe_eth1_esa 0x00:0x01:0x02:0x03:0x04:0x05 tells Redboot the LAN mac. Now you can use the MAC printed on the bottom label.
All ALPHA characters in your mac address must be entered in lower case.


as you can see above:
Code:
RedBoot> fconfig npe_eth0_esa 0x00:0x18:0x39:0x23:0x38:0x2c
** entry 'npe_eth0_esa' not found


EDIT: i tried to flash MI424WR redboot and it's death again... back to jtag....



this is very helpful. thanks.
didimond
DD-WRT Novice


Joined: 12 Feb 2010
Posts: 5

PostPosted: Mon Mar 21, 2011 9:36    Post subject: Reply with quote
https://forum.openwrt.org/viewtopic.php?pid=109205#p109205 , Davidkra to lay out redboot.bin with working script "npe_eth0_esa ", reference no longer works to his site, where I can find it fresh redboot.bin?

Mod edit 10.18.23 kp69

Topic has been locked, further inquiry and discussion should be directed to the device support thread:

WRT300N V2.0 compatible now?

Associated JTAG/Debrick thread:

Bricked my WRT300n V2.0
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> ARM or PPC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum