Unbranded Ralink SoC RT3052 based router

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Ralink SoC based Hardware
Goto page 1, 2, 3, 4, 5, 6, 7  Next
Author Message
ReWoP
DD-WRT Novice


Joined: 14 Nov 2009
Posts: 3

PostPosted: Sat Nov 14, 2009 20:12    Post subject: Unbranded Ralink SoC RT3052 based router Reply with quote
Hi all,
this is my first time here so be gentle :P

I've bougth a router from dealextreme and its firmware has some bugs, it doesn't do UPNP, Port Forwarding and DMZ so i want to put a DD-WRT firmware but since its unbranded i have no idea which on shall i use....

So here's what i've got:

* URL to the router: here

* Flash memory 4MB -> MX29LV320BTC-90G - 32 BIT 4M X 8 / 2M X 16 ] SINGLE VOLTAGE 3V

* 16MB SDRAM -> 2x EM639165 - 8Mega x 16bits SDRAM
8Mega x 16bits SDRAM

* Ralink RT3052 with a Ralink RT2860V2 wireless interface (not sure about the wireless interface)

* 2T2R board setup (although it has 3 antennas only two are connected to the PCB (china stuff...Rolling Eyes) but on the PCB there are 3 spots to solder antennas... hum....)

* PCB - XDX RN502 V2.0 (that's what's written on it)

* Linux version 2.6.21 (gcc version 3.4.2)

* BusyBox v1.12.1 (this is what i get using the touch command)

* Web interface uses GoAhead WebServer

* Has the telnetd loaded but when i try to connect "Connection to host lost."

* Web interface has a Run a system command page so i can run system commands as root

* Has a WPS button (but dont know if works)

* Has Upload Firmware page its possible to Update Firmware and Update Bootloader separately (there is also an option to Force upgrade firmware via mem)

* Has an option to Upgrade firmware from USB but pull-down box is empty since there is no USB port on the router

* SDK Version 3.2.0.0 (Jan 6 2009)

* Mac Address 00:13:13:00:0A:0B

* Weird interfaces names: eth2, eth2.1, eth2.2, lo, gre0, ra0, wds0, wds1, wds2, wds3, apcli0, br0

* There is an SDK history and has this information:
Ralink AP SDK - History
Version 3.2.0.0
- [Switch setting] set XOR48 and enable aging by default
- [Phy setting] Improve Ethernet conformance
- [Ethernet] [RT305x] Improve multicast efficiency.
- [USB] power-saving design for USB interface. (Release the corresponding Application Note in parallel.)
- [Wifi] AP version 2.0.0.0
- [Wifi] STA version 1.8.0.0
- [Wifi] MCS12->MCS11, not MCS12->MCS4.
- [Wifi] Low threshold of rate adaption table: 25->15 @ (SGI & MCS 15)
- [Wifi] 20M/40M power delta issue
- [SDK] Increase core voltage for system stability
- [SDK] Disable mdc/mdio by default
- [SDK] MTD-based Flash API
- [SDK] Mesh AP support
- [SDK] Turn off wireless by timer in WebUI (GreenAP).
- [SDK] change to mips-gcc 3.4.2 cross-compiler (optimize for size)
- [SDK] RT3050/RT3051 support
- [SDK] Samba with FAT32 bug fix

Version 3.1.0.0
- [Wifi Driver] AP version 1.9.0.0
- [Wifi Driver] STA version 1.7.0.0
- [Raeth Driver] fix RT3052 multicast issue
- [System] Fix web firmware upgrade issue for Spansion flash
- [System] USB Performance tuning
- [App] Wireless Tool v29

Version 3.0.0.0
- [System] RT3052 MP/MP2 Support
- [WebUI] Upgrade firmware from USB
- [WebUI] Layer7 QoS & Content Filter
- [WebUI] FTP/Samba Server
- [System] support Spansion 4MB flash S29GL032N
- [System] support Spansion 8MB flash S29GL064N, this feature need Uboot support (ver >= 2.0)
- [System] support Mxic 8MB flash MX29LV640B, this feature need Uboot support (ver >= 2.0)


If necessary i can post a picture of the PCB.

Hope anyone can help me Very Happy
Thanks in advanced.
Sponsor
emirim
DD-WRT Novice


Joined: 17 Nov 2009
Posts: 1

PostPosted: Tue Nov 17, 2009 8:57    Post subject: Reply with quote
Same seller, same device and same problem... I'm also looking for advice.
ReWoP
DD-WRT Novice


Joined: 14 Nov 2009
Posts: 3

PostPosted: Tue Nov 17, 2009 14:55    Post subject: More info Reply with quote
I've found a model from this router my have been cloned, its from Winstars Technology
and the model is the WS-WR511N2 Wireless 802. 11N Router (2T2R 300M), product page here.

This router may even been actually manufactured by Winstars Technology it self since the router's serial number starts with 'WS' (WS12A091000092).

I've post an PCB image as Attachment.
sir-enmity
DD-WRT Novice


Joined: 07 Nov 2009
Posts: 32

PostPosted: Thu Nov 19, 2009 10:42    Post subject: Reply with quote
What about trying to flash this router with dd-wrt firmware, which developed for airlink routers?
What do you think?
ReWoP
DD-WRT Novice


Joined: 14 Nov 2009
Posts: 3

PostPosted: Thu Nov 19, 2009 14:30    Post subject: Reply with quote
sir-enmity wrote:
What about trying to flash this router with dd-wrt firmware, which developed for airlink routers?
What do you think?


Hum... i think that from airlink the only one that could be compatible was the AR670W but the hardware is not that similar...



It has that IC+ chip that i don't have on my router and has 32MB of RAM (donno if that matters anyway) , so don't think its compatible...

In fact my PCB is much similar to the reference board from Ralink (RT3052 Product Brief)
Vayun
DD-WRT Novice


Joined: 12 Dec 2009
Posts: 1

PostPosted: Sat Dec 12, 2009 15:06    Post subject: Reply with quote
Hi,

I happened to have this piece of hardware. I want to try to use dd-wrt with it.

I managed to connect to telnet and tried to dump mtd blocks for backup/rev engineer purposes. But I've got a little problem here.

There are only two suitable commands for this: 'telnet' and 'cat' available. The telnet changes 0x0a to 0x0d0x0a, but it is not the only problem.

The device has several files in /dev which look like mtd blocks:
Code:
brw-rw----    1 0        0         31,   4 /dev/mtdblock4
brw-rw----    1 0        0         31,   3 /dev/mtdblock3
brw-rw----    1 0        0         31,   2 /dev/mtdblock2
brw-rw----    1 0        0         31,   1 /dev/mtdblock1
brw-rw----    1 0        0         31,   0 /dev/mtdblock0
crw-rw----    1 0        0         90,   9 /dev/mtd4ro
crw-rw----    1 0        0         90,   8 /dev/mtd4
crw-rw----    1 0        0         90,   7 /dev/mtd3ro
crw-rw----    1 0        0         90,   6 /dev/mtd3
crw-rw----    1 0        0         90,   5 /dev/mtd2ro
crw-rw----    1 0        0         90,   4 /dev/mtd2
crw-rw----    1 0        0         90,   3 /dev/mtd1ro
crw-rw----    1 0        0         90,   2 /dev/mtd1
crw-rw----    1 0        0         90,   1 /dev/mtd0ro
crw-rw----    1 0        0         90,   0 /dev/mtd0


cat /proc/mtd shows
Code:
dev:    size   erasesize  name
mtd0: 00030000 00010000 "Bootloader"
mtd1: 00010000 00010000 "Config"
mtd2: 00010000 00010000 "Factory"
mtd3: 000e0000 00010000 "Kernel"
mtd4: 002d0000 00010000 "RootFS"


So I tried to save "RootFS" block, but I'm getting slightly different files from "/dev/mtd4", "/dev/mtd4ro" and "/dev/mtdblock4".
They seem to contain squashfs-lzma (start with magic 'shsq'), but in some strange format
(I checked the beginning in hexeditor, it looks a bit different from the original squashfs superblock).

I'm getting this error "Filesystem on dev_mtdblock4 is (124:0),
which is a later filesystem version than I support!" if I try to unpack them.

So the questions:
1. Why are there so many copies of mtd devices and what is the difference between them. Which one is better to dump?

2. Can I get somewhere a statically linked version of 'nc' (netcat) tool for MIPS architecture,
which could be used to dump those files instead of 'telnet+cat'?

3. Could it be that squashfs images are somehow encrypted? Or may be it is some other not known to me squashfs variation?

I will greatly appreciate any help or advice.
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17338
Location: Hesse/Germany

PostPosted: Sun Dec 13, 2009 1:31    Post subject: Reply with quote
for now u can try to flash the uimage of a whr.-g300n via serial
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
_________________
Andreas Baumert: "Kundige Menschen befragen Fachleute, ohne ihnen auf die Nerven zu gehen. Sie stellen keine Fragen, die sie mit etwas Fleiß und Lektüre selber beantworten können. Sie wissen, auf welche Quellen es ankommt,und wie man sich Zugang zu ihnen verschafft."
withoutpointer
DD-WRT Novice


Joined: 04 Jan 2010
Posts: 2

PostPosted: Mon Jan 04, 2010 15:13    Post subject: Bad Magic Number,27051956 with unbranded Ralink SoC Reply with quote
Hey friends,

I have got Unbranded Ralink SoC router RT3050@384MHZ from china and its seems to be same hardware as it has with Buffalo WHR-G300N.

But this device has one USB port too and probably its from WINSTAR company in China.It came with default firmware which is from Ralink itself.(Very bad GUI) Sad

Now I gone through DD-WRT Forum and came to know that Brian's WHR-G300N firmware might work with this hardware and I downloaded firmware.tftp and loaded through serial/tftp.

it gives below error,

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
5: Load ucos code to SDRAM via TFTP.
0

3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956


I dont know whether I am right or wrong ,but I feel there is some Magic code in Uboot bootloader of My unbranded board which is not matching with dd-wrt firmware's magic code.
is anybody having such problem?is there any solution?

can we change magic number of dd-wrt WHR-G300N firmware's magic number using dd-wrt firmware modification kit?Because I feel I am not able to change magic number of Uboot of this undranded board.

Is there any other way to run DD-WRT on this Ralink board?

Your suggestions is highly appreciable.
changeway
DD-WRT Novice


Joined: 30 Dec 2009
Posts: 21

PostPosted: Tue Jan 05, 2010 8:41    Post subject: Re: Bad Magic Number,27051956 with unbranded Ralink SoC Reply with quote
withoutpointer wrote:
Hey friends,

I have got Unbranded Ralink SoC router RT3050@384MHZ from china and its seems to be same hardware as it has with Buffalo WHR-G300N.

But this device has one USB port too and probably its from WINSTAR company in China.It came with default firmware which is from Ralink itself.(Very bad GUI) Sad

Now I gone through DD-WRT Forum and came to know that Brian's WHR-G300N firmware might work with this hardware and I downloaded firmware.tftp and loaded through serial/tftp.

it gives below error,

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
5: Load ucos code to SDRAM via TFTP.
0

3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956


I dont know whether I am right or wrong ,but I feel there is some Magic code in Uboot bootloader of My unbranded board which is not matching with dd-wrt firmware's magic code.
is anybody having such problem?is there any solution?

can we change magic number of dd-wrt WHR-G300N firmware's magic number using dd-wrt firmware modification kit?Because I feel I am not able to change magic number of Uboot of this undranded board.

Is there any other way to run DD-WRT on this Ralink board?

Your suggestions is highly appreciable.


I have the same problem, I think we can try to change the bootloader to
WHR-G300N 's bootloader, then follow the WHR-G300N dd-wrt flashing steps

But, I do not have the bootloader file of WHR-G300N to try.
withoutpointer
DD-WRT Novice


Joined: 04 Jan 2010
Posts: 2

PostPosted: Tue Jan 05, 2010 9:09    Post subject: Reply with quote
Hey Changeway,


Thanks for the response changeway,

I think you are right ,but where to get WHR-G300N's bootloader file?

Did you compiled DD-WRT source code for WHR-G300N?

I have tried to open Brains's WHR-G300N firmware with DD-WRT firmware modification kit to change Magic number, but its not supporting firmware format,so no luck Sad Sad
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17338
Location: Hesse/Germany

PostPosted: Tue Jan 05, 2010 16:46    Post subject: Reply with quote
i see this very bad hw.
ddwrt wont run out of the box since of the ram.
we need a donated unit here in germany

_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
_________________
Andreas Baumert: "Kundige Menschen befragen Fachleute, ohne ihnen auf die Nerven zu gehen. Sie stellen keine Fragen, die sie mit etwas Fleiß und Lektüre selber beantworten können. Sie wissen, auf welche Quellen es ankommt,und wie man sich Zugang zu ihnen verschafft."
Borage
DD-WRT User


Joined: 26 Nov 2006
Posts: 420

PostPosted: Wed Jan 13, 2010 21:57    Post subject: Re: Unbranded Ralink SoC RT3052 based router Reply with quote
ReWoP wrote:

SDK Version 3.2.0.0 (Jan 6 2009)


I have a simlar router with SDK Version 3.2.4.0 (Jan 21 2009). The manual show a screenshot of SDK Version 3.3.0.0 (May 27 2009). There are no downloadable firmwares from the makers homepage, so where the heck is version 3.3.0.0? I have a printed manual, and there is a lot of differences between version 3.2.4.0 and 3.3.0.0.

Does anobody know where to get the new firmware? I asked the maker and got no answer.

Link to the user manual: http://www.mtn-china.com/Upfiles/down/200911796780.doc


Last edited by Borage on Fri Jan 15, 2010 13:39; edited 1 time in total
laffitepeu
DD-WRT Novice


Joined: 15 Jan 2010
Posts: 1

PostPosted: Fri Jan 15, 2010 5:16    Post subject: Maybe Aceex firmware works Reply with quote
I'm searching about this router, and, in dealextreme forum

Reading this link: http://www.dealextreme.com/forums/Default.dx/sku.29662~threadid.483088 I've found this alt. firm. for this router:

Brand: Aceex
Model: NR22/Y

Aceex NR22/Y is dd-wrt compatible, so, can you try the Aceex dd-wrt firmware and tell us?
changeway
DD-WRT Novice


Joined: 30 Dec 2009
Posts: 21

PostPosted: Fri Jan 15, 2010 6:29    Post subject: Reply with quote
withoutpointer wrote:
Hey Changeway,


Thanks for the response changeway,

I think you are right ,but where to get WHR-G300N's bootloader file?

Did you compiled DD-WRT source code for WHR-G300N?

I have tried to open Brains's WHR-G300N firmware with DD-WRT firmware modification kit to change Magic number, but its not supporting firmware format,so no luck Sad Sad


I try to remove some header of "WHR-G300N-webflash.bin"


Then use boot loader tftp upgrade via Serial...

The image check passed !!

But the kernel start fail during initial filesystem mount.
changeway
DD-WRT Novice


Joined: 30 Dec 2009
Posts: 21

PostPosted: Fri Jan 15, 2010 7:04    Post subject: Re: Bad Magic Number,27051956 with unbranded Ralink SoC Reply with quote
withoutpointer wrote:
H
it gives below error,

3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956


I found the Magic code is the starting 4 byte of the firmware image.
The boot loader will check the magic code, header checksum and data checksum.

Your boot loader magic is not "27051956" but, mine router and dd-wrt firmware magic code are both the same "27051956". Though my boot loader magic code check pass , my router is still in problem.
Goto page 1, 2, 3, 4, 5, 6, 7  Next Display posts from previous:    Page 1 of 7
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Ralink SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum