How to Debrick or Recover NETGEAR R7000, R6300v2, or R6250 Wi-Fi Routers

 

In case you have bricked your unit, or in case you need more debugging info from your router you can setup a serial console.

Prerequisites for this procedure:

  • 1 x Router either R7000/R6300v2/R6250 which have the same serial connection pins on board
  • 1 x Ethernet cable if you want to flash a new firmware in recovery mode
  • 1 x USB-TTL 3.3 V adapter cable e.g. FTDI TTL-232R-3V3
  • 1 x appropriate Screewdrivers
  • Windows or Linux with installed TFTP client
  • Windows or Linux with installed serial client e.g. Putty,Minicom

This article does not cover taking apart the routers, this is fairly easy and should not cause any trouble even for beginners. The guide applies to the R7000, R6300v2 and R6250 from NETGEAR, although pictures from the R7000 are shown.

After you open up the case you can start connecting your USB-TTL Adapter. The picture below displays the pins and how you connect them to the serial adapter. In my case, I added a 3.5" stereo jack for easier connecting. This way it can be connected without the need to open it up again. Make sure you read the documentation of your serial adapter; it will tell you which pin needs to be connected to GND/TX/RX.

Once you hook up the serial adapter you can install and setup your serial communication program.. If you are using PuTTY, you can just use the guide from the older debricking guide for the WNR3500L:

http://myopenrouter.com/article/how-debrick-your-wnr3500lv2-using-window...

If you are on Linux, you might want to use minicom. See minicom guide:

http://mstempin.free.fr/linux-ipaq/html/minicom-setup.html

Serial line: /dev/ttyUSB0

Speed: 115200

Stopbits: 8-N-1

Once your serial communication program is set up, start hooking up your TTL adapter. In order to flash a new firmware to the router you need to attach an ethernet cable to one of the switch ports. See picture below.

The default IP of you router is 192.168.1.1, thus you need to setup your computer's ethernet adapter to use an IP in the same network e.g. 192.168.1.2. If you have attached your ethernet cable and setup your computers IP you are now ready to power on your router.

You should see the following messages when you router starts booting:

 

Once you see these messages start pressing CTRL-C. If everything works out the boot process should stop at the CFE> prompt. Now type tftpd followed by enter. The routers power led will be flashing which signals it is ready for a fw upload via tftp client.

If you are on Windows, just follow this guide to flash a new image via tftp client:
http://myopenrouter.com/article/how-debrick-your-netgear-wnr3500l-using-...

 

On Linux you can use the following command:

tftp -m binary 192.168.1.1 -c put

e.g.:

tftp -m binary 192.168.1.1 -c put dd-wrt.K3_R7000.chk

After the new firmware is transferred, the router will start flashing and rebooting the unit automatically. You will be able to follow the whole boot process in your serial communication program.

Tags: 

Makise
Makise's picture
Deleted.

Deleted.

moh1t
moh1t's picture
In case you're not able to
In case you're not able to halt the boot process and get a "startup canceled", then try swapping the RX and TX wires on the router.
 
I am using a Silicon Labs CP2102 IC based USB TTL adapter and even though I followed the instructions completely, I wasn't able to get to CFE interface. Swapping the RX TX cables did the trick for me
soundsofscience
soundsofscience's picture
Thanks to all here, I

Thanks to all here, I successfully made those pita solder connections and the putty session ended with "found TRX Header on nflash!" on loop. I did not find any documentation that points me where to go next. Here's the putty log:

 

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.02.03 13:21:11 =~=~=~=~=~=~=~=~=~=~=~=
Decompressing...done

SHMOO VER 1.13

PKID07DC06011801080000000000001A103F01000000

S300402EB
00002450

RDLYW0 00000004

RDENW0 00000052

RDQSW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 01 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
 02 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 03 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 04 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 05 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 06 ---++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 07 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 08 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 09 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
 10 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 11 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
 12 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 13 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 14 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 15 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++

P   W0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 01 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
 02 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 03 --+-++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 04 ++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
 05 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 06 -+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
 07 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 08 ---++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 09 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 10 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 11 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
 12 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 13 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 14 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 15 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++

N   W0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 01 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
 02 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 03 ---++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 04 -+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++
 05 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 06 --+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
 07 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 08 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
 09 -----------++++++++++++++++++++++++++X++++++++++++++++++++++++++
 10 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 11 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++
 12 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 13 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
 14 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
 15 ------------++++++++++++++++++++++++++X+++++++++++++++++++++++++

WRDQW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 01 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 02 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 03 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 04 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 05 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 06 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 07 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 08 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 09 ---++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++-
 10 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 11 --++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-
 12 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 13 --++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-
 14 +++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++-
 15 -+++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++-

WRDMW0 00000031
WRDMW0 00000031

ADDR

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 +++++++++++++++++++++++++++++++X++++S+++++++++++++++++++++++++++

Decompressing...done

CFE for Foxconn Router version: v1.0.14
Build Date: Thu Feb 21 16:35:23 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Boot partition size = 262144(0x40000)
DDR Clock: 533 MHz
Info: DDR frequency set from clkfreq=800,*533*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.2002 (r382208)
CPU type 0x0: 800MHz
Tot mem: 262144 KBytes

Device eth0:  hwaddr 28-C6-8E-66-37-F5, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 1362216 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0x0
Linux version 3.10.44 (bluebat@opensuse) (gcc version 4.9.1 (OpenWrt/Linaro GCC 4.9-2014.06 r41266) ) #219 SMP Fri Jul 4 22:08:21 CEST 2014
CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine: Northstar Prototype
Ignoring unrecognised tag 0x00000000
Memory policy: ECC disabled, Data cache writealloc
map io
MPCORE found at 19020000 (VIRT d9020000) 18000000 d8000000
PERCPU: Embedded 7 pages/cpu @c1640000 s7040 r8192 d13440 u32768
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 65280
Kernel command line: console=ttyS0,115200 panic=10 root=/dev/mtdblock3 earlyprintk=1 rootfstype=squashfs,jffs2 noinitrd init=/bin/sh
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB 128MB = 256MB total
Memory: 255572k/255572k available, 6572k reserved, 131072K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xc8800000 - 0xff000000   ( 872 MB)
    lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
    pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    modules : 0xbf000000 - 0xbfe00000   (  14 MB)
      .text : 0xc0008000 - 0xc0357dec   (3392 kB)
      .init : 0xc0358000 - 0xc0392b80   ( 235 kB)
      .data : 0xc0394000 - 0xc03d0dc8   ( 244 kB)
       .bss : 0xc03d0dc8 - 0xc0430ee4   ( 385 kB)
Hierarchical RCU implementation.
    CONFIG_RCU_FANOUT set to non-default value of 2
NR_IRQS:256
MPCORE GIC init
External imprecise Data abort at addr=0x0, fsr=0x1c06 ignored.
MPCORE Global Timer Clock 400000000Hz on IRQ 27
sched_clock: 32 bits at 400MHz, resolution 2ns, wraps every 10737ms
register local timer
smp_twd: clock not found -2
Calibrating delay loop... 1594.16 BogoMIPS (lpj=7970816)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Calibrating local timer... 399.70MHz.
2 cores has been found
Setting up static identity map for 0xc00127f0 - 0xc0012824
L310: cache controller enabled 16 ways, CACHE_ID 0x410000c8, AUX_CTRL 0x7a130000
CPU1: Booted secondary processor
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3188.32 BogoMIPS).
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
Found a Samsung NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8 (8-bit)
Device ID: 0xec 0xf1 0x 0 0x95 0x40 0xec
found nand nvram at 80000
CCA UART Clock Config: Sel=1 Ovr=1 Div=48
CCA UART Clock rate 100000000Hz
bio: create slab <bio-0> at 0
Switching to clocksource mpcore_gtimer
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
init gpio code
PCI: no core
PCI: no core
PCI: scanning bus 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [io  0x0000-0xffffffff]
pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
PCI: Fixing up bus 0
PCIE1 link=1
PCIE1 switching to GEN2
PCIE1 link=1
PCI host bridge to bus 0001:00
pci_bus 0001:00: root bus resource [mem 0x08000000-0x0fffffff]
pci_bus 0001:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0
PCI: bus0: Fast back to back transfers disabled
PCI: Fixing up bus 1
PCI: bus1: Fast back to back transfers disabled
pci 0001:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
pci 0001:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
pci 0001:00:00.0: PCI bridge to [bus 01]
pci 0001:00:00.0:   bridge window [mem 0x08000000-0x080fffff]
PCIE2 link=1
PCIE2 switching to GEN2
PCIE2 link=1
PCI host bridge to bus 0002:00
pci_bus 0002:00: root bus resource [mem 0x40000000-0x47ffffff]
pci_bus 0002:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: Fixing up bus 0
PCI: bus0: Fast back to back transfers disabled
PCI: Fixing up bus 2
PCI: bus2: Fast back to back transfers disabled
pci 0002:00:00.0: BAR 8: assigned [mem 0x40000000-0x400fffff]
pci 0002:02:00.0: BAR 0: assigned [mem 0x40000000-0x40007fff 64bit]
pci 0002:00:00.0: PCI bridge to [bus 02]
pci 0002:00:00.0:   bridge window [mem 0x40000000-0x400fffff]
PCIE3 link=0
Error creating gpio class
squashfs: version 3.0 (2006/03/15) Phillip Lougher
msgmni has been set to 243
alg: No test for stdrng (krng)
io scheduler noop registered (default)
io scheduler cfq registered
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x18000300 (irq = 117) is a 16550
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
Found a ST compatible (Marconix) serial flash with 64 64KB blocks; total size 4MB
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000, 0x20000
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!
found TRX Header on nflash!

 

 

Thoughts, please?

cantfixanything
cantfixanything's picture
i bricked my router by

i bricked my router by overclocking to 1600 and not only that i used 5v connector with my usb ttl connector to debrick it and now it wont power on although the power light blinks faintly when i push in the power cable. One weird thing is that I can still power on the board if i use the usb cable and continue using the 5v connector, and with a little messing around with the power button and power cable sometimes i can get it to even tftp mode. Putty on the other hand wont let me control-C and break boot. Is this board done? Any way to fix it diy?

soundsofscience
soundsofscience's picture
I'm open to donating this

I'm open to donating this router at this point... to the bin if no one wants it. Have no clue how to proceed - re: TRX header error. Help?

FuShiLu
FuShiLu's picture
soundsofscience said: I'm

soundsofscience said: I'm open to donating this router at this point... to the bin if no one wants it. Have no clue how to proceed - re: TRX header error. Help?

It is important to have a plan for things before beginning. 

 

Any search prior would have told you 1600 would brick your router. The instructions to recover are detailed and precise, I have followed them 3 times now while experimenting to great success. You have not posted your detailed instructions and thus make it impossible to know at what step you faltered  

 

If you wish to donate your router PM me and I'll be happy to put it into service. 

radu
radu's picture
Hello to all, i have a

Hello to all, i have a question which is not related to this topic, how to open the case of the R7000? I am planning to use that serial interface with a microcontroller or something similar.
Thank you.

cantfixanything
cantfixanything's picture
It's weird only the 5v USB

It's weird only the 5v USB tty cable can get my router to power up. I got to the point where I can upload a firmware and it took it but after a while it didn't reboot and removing the 5v the router won't turn on normally. Im no electrician but I'm going to figure it how to fix it not giving up on it yet.

cantfixanything
cantfixanything's picture
soundsofscience said: I'm

soundsofscience said: I'm open to donating this router at this point... to the bin if no one wants it. Have no clue how to proceed - re: TRX header error. Help?

You need break boot by hitting control C rapid fire right when bootloader starts. It will stop and you get a cfe prompt. Then you can reset the nvram values and remove the overclock. Might as well tftp a stock ROM and start over too.

soundsofscience
soundsofscience's picture
cantfixanything said:

cantfixanything said:

soundsofscience said: I'm open to donating this router at this point... to the bin if no one wants it. Have no clue how to proceed - re: TRX header error. Help?

You need break boot by hitting control C rapid fire right when bootloader starts. It will stop and you get a cfe prompt. Then you can reset the nvram values and remove the overclock. Might as well tftp a stock ROM and start over too.

Not sure where people are getting the idea I overclocked. That was another user. Mine stopped booting out of the blue after running stable for years.

This last tip was great, though. I will try that after rereading the recovery instructions. Thanks!

cantfixanything
cantfixanything's picture
Yea I probably debricked

Yea I probably debricked routers like over 3 dozen times for years so I know the process but o can't seem to break boot. Something with that overclock. I like to learn how repair it, got it to accept in tftpd once couldn't dupe it again. Lights dark unless I plug in 5v and power cable anther odd problem I can't understand but trying to figure out

eych
eych's picture
Hi ,

Hi ,
Does anybody know how can I force minicom to be interactive?! Seems it doesn't accept inputs from keyboard.

thnx

ArtemR
ArtemR's picture
Push Ctrl-C instantly after

Push Ctrl-C instantly after power ON.

ArtemR
ArtemR's picture
R6300v2 restored by this

R6300v2 restored by this manual and cable from eBay below.

USB To RS232 TTL

lalord69
lalord69's picture
need help please, i followed

need help please, i followed all of the steps and i cannot revive my R7000! :( here is my log.   PLEASE HELP! i will buy you a beer for your time if anyone can help me get it going...

 

Digital core power voltage set to 1.0V
Decompressing...done
Digital core power voltage set to 1.0V
 
SHMOO VER 1.13
 
PKID07DC06011801080000000000001A103F01000000
 
S300001B7
00001150
 
 
RDLYW0 00000004
 
RDENW0 00000030
 
RDQSW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ---++++++++++++++++++++++++X++++++++++++++++++++++++------------
 01 ------++++++++++++++++++++++++X++++++++++++++++++++++++---------
 02 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 03 -++++++++++++++++++++++++X+++++++++++++++++++++++---------------
 04 -+++++++++++++++++++++++X+++++++++++++++++++++++----------------
 05 ---++++++++++++++++++++++++X++++++++++++++++++++++++------------
 06 --++++++++++++++++++++++X+++++++++++++++++++++------------------
 07 -----++++++++++++++++++++++++X++++++++++++++++++++++++----------
 08 ---++++++++++++++++++++++X+++++++++++++++++++++-----------------
 09 --------++++++++++++++++++++++++X+++++++++++++++++++++++--------
 10 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 11 --------+++++++++++++++++++++++X++++++++++++++++++++++----------
 12 ---+++++++++++++++++++++++X++++++++++++++++++++++---------------
 13 ----------+++++++++++++++++++++X+++++++++++++++++++++-----------
 14 ----+++++++++++++++++++++++X++++++++++++++++++++++--------------
 15 -------+++++++++++++++++++++++X++++++++++++++++++++++-----------
 
 
PW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ---++++++++++++++++++++++++X+++++++++++++++++++++++-------------
 01 ------++++++++++++++++++++++++X++++++++++++++++++++++++---------
 02 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 03 --++++++++++++++++++++++++X+++++++++++++++++++++++--------------
 04 ++++++++++++++++++++++++X+++++++++++++++++++++++----------------
 05 --+++++++++++++++++++++++++X++++++++++++++++++++++++------------
 06 --+++++++++++++++++++++++X++++++++++++++++++++++----------------
 07 -----++++++++++++++++++++++++X++++++++++++++++++++++++----------
 08 --++++++++++++++++++++++X++++++++++++++++++++++-----------------
 09 --------++++++++++++++++++++++++X+++++++++++++++++++++++--------
 10 --+++++++++++++++++++++++X+++++++++++++++++++++++---------------
 11 --------+++++++++++++++++++++++X++++++++++++++++++++++----------
 12 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 13 ---------++++++++++++++++++++++X++++++++++++++++++++++----------
 14 --++++++++++++++++++++++++X++++++++++++++++++++++++-------------
 15 ------+++++++++++++++++++++++X+++++++++++++++++++++++-----------
 
 
NW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ----++++++++++++++++++++++++X+++++++++++++++++++++++------------
 01 ------++++++++++++++++++++++++X++++++++++++++++++++++++---------
 02 ---++++++++++++++++++++++++X++++++++++++++++++++++++------------
 03 -++++++++++++++++++++++++X+++++++++++++++++++++++---------------
 04 -+++++++++++++++++++++++X+++++++++++++++++++++++----------------
 05 --+++++++++++++++++++++++++X++++++++++++++++++++++++------------
 06 -+++++++++++++++++++++++X++++++++++++++++++++++-----------------
 07 -----+++++++++++++++++++++++++X+++++++++++++++++++++++++--------
 08 ---+++++++++++++++++++++++X++++++++++++++++++++++---------------
 09 --------++++++++++++++++++++++++X+++++++++++++++++++++++--------
 10 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 11 --------+++++++++++++++++++++++X++++++++++++++++++++++----------
 12 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 13 ---------++++++++++++++++++++++X+++++++++++++++++++++-----------
 14 ---+++++++++++++++++++++++X+++++++++++++++++++++++--------------
 15 --------++++++++++++++++++++++X+++++++++++++++++++++------------
 
 
WRDQW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ++++++++++++++++++++++X+++++++++++++++++++++-------++++++++++++-
 01 ++++++++++++++++++++++X++++++++++++++++++++++------++++++++++++-
 02 +++++++++++++++++++++X+++++++++++++++++++++-------+++++++++++++-
 03 +++++++++++++++++++++X++++++++++++++++++++---------++++++++++++-
 04 +++++++++++++++++++X+++++++++++++++++++------------++++++++++++-
 05 +++++++++++++++++++++X+++++++++++++++++++++-------+++++++++++++-
 06 ++++++++++++++++++++X++++++++++++++++++++----------++++++++++++-
 07 +++++++++++++++++++++++X++++++++++++++++++++++-----++++++++++++-
 08 +++++++++++++++++++++X++++++++++++++++++++---------++++++++++++-
 09 -++++++++++++++++++++++X+++++++++++++++++++++----------++++++++-
 10 +++++++++++++++++++++X+++++++++++++++++++++--------++++++++++++-
 11 -++++++++++++++++++++++X+++++++++++++++++++++----------++++++++-
 12 +++++++++++++++++++++X+++++++++++++++++++++--------++++++++++++-
 13 -++++++++++++++++++++++X++++++++++++++++++++++----------+++++++-
 14 ++++++++++++++++++++++X++++++++++++++++++++++--------++++++++++-
 15 -++++++++++++++++++++++X+++++++++++++++++++++----------++++++++-
 
 
WRDMW0 00000021
WRDMW0 00000022
 
 
ADDR
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 +++++++++++++++++S+++++++++++++X++++++++++++++++++++++++++++++++
 
Decompressing...done
 
 
CFE for Foxconn Router R7000 version: v1.0.21
Build Date: Wed Aug  7 19:11:17 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes
 
Device eth0:  hwaddr C4-04-15-62-9E-B4, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .... 4185568 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 30
Creating 4 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000002000000 : "linux"
0x0000003cb610-0x000002000000 : "rootfs"
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
=== PPTP init ===
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (3990 buckets, 15960 max)
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <[email protected]>
All bugs added by David S. Miller <[email protected]>
Registering the dns_resolver key type
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 56, ecc bytes located at:
 2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Bad eraseblock 18 at 0x000000240000
Bad eraseblock 561 at 0x000004620000
Bad eraseblock 909 at 0x0000071a0000
Options: NO_AUTOINCR,NO_PADDING,CACHEPRG,COPYBACK,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 2 MTD partitions on "brcmnand":
0x000002000000-0x000008000000 : "brcmnand"
0x000004000000-0x000006000000 : "jffs2"
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing init memory: 216K
 
 
Hit ENTER for console...
 
emf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
et_module_init: passivemode set to 0x0
et_module_init: txworkq set to 0x0
et_module_init: et_txq_thresh set to 0x400
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.86 (r456083)
wl_module_init: passivemode set to 0x0
wl_module_init: txworkq set to 0x0
eth1: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.86 (r456083)
wl driver 6.37.14.86 (r456083) failed with code 22
/ # vlan1: cmd=14: Operation not supported
device vlan1 entered promiscuous mode
device eth0 entered promiscuous mode
eth2: cmd=14: No such device
eth2: No such device
eth3: cmd=14: No such device
eth3:br0: port 1(vlan1) entering forwarding state
 Nbr0: port 1(vlan1) entering forwarding state
o such device
lo: File exists
vlan2: No such process
ipt_account 0.1.21 : Piotr Gasidlo <[email protected]>, http://code.google.com/p/ipt-account/
 
gro disabled
vlan1: cmd=14: Operation not supported
eth2: cmd=14: No such device
eth3: cmd=14: No such device
 
wesli
wesli's picture
I've bricked my router by

I've bricked my router by updating DD-WRT firmware.
Router was already running with DD-WRT.
Downloaded latest DD-WRT firmware (.bin file) and updated via GUI.
After rebooting only the power led was on (orange).
I can flash the stock firmware via TFTP but get an Checksum mismatch error.

Here the log from the serial console:

CFE for Foxconn Router R7000 version: v1.0.21
Build Date: Wed Aug  7 19:11:17 CST 2013
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 400 MHz
Warning: invalid DDR setting of 0 MHz ignored. DDR frequency will be set to 400 MHz.
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes
 
Device eth0:  hwaddr XX-XX-XX-XX-XX-XX, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Startup canceled
CFE> tftpd
Start TFTP server
Reading :: Done. 20754490 bytes read
Checksum mismatch:
Image chksum: 0x3033CD50
Calc  chksum: 0xAA53CD4E
Reading ::
 
wesli
wesli's picture
Connecting vie serial and

Connecting vie serial and erasing nvram has de-bricked the router ('nvram erase').

After rebooting DD-WRT was available. Not needed to flash stock or other firmware.

Dusza
Dusza's picture
Members, can anyone give some

Members, can anyone give some tips on removing the cover of the R7000?  I removed a single screw on the back and tried to wedge a flat screwdriver along the sides but it doesn't seem to want to budge.  Right now my router is bricked b/c I tried to overclock it, I'm waiting on an Amazon order but I don't want to break things even more.  Any advice would be appreciated and I've seen a few other people ask this too.  Thanks so much!

Dusza
Dusza's picture
@hippy your command "nvram

@hippy your command "nvram erase" worked like a charm.  i was able to reset things using putty and tftpd but the router was still not 100% operational so within putty i entered "nvram erase" which worked!

@kong at some point in time i actually used the rubber pads that stick to the bottom of the router.  doing this covered up 4 screws that needed to be removed .. duh!

vpntoracc
vpntoracc's picture
Hello Every One,

Hello Every One,

1. I Have Netgear Nighthawk X6 (R8000) With DD-WRT Firmware.

2. Unfortunately I change overclocking setting from 1000MHz to 1400MHz now the router boots but I can't find Wifi Network or when I plug the wire mannualy I can't ping the default gateway which is 192.168.1.1 and even I can't  access GUI.

3. Any Suggestion what should I do, Is it possible to fix the issue by flashing the nvram?

Please Help some one. Thanks..

 

Remixthis
Remixthis's picture
Hey guys, In case anyone

Hey guys, In case anyone reads this in the next week or so I'm requesting a little guidance. I had kongs lates ddwrt(26 oct?) and it was running well. I played with the OC setting at 1600 after 1400 was stable. Now I cant seem to access the router at all. If I boot my router it shows the pwr button, skips the 2nd light then the 2.5, 5 g and usb  1+2 turn on. I also get a bright light when I have my eth0 cable plugged in. I followed the guide to get the serial cable and change to a static IP address but when starting putty I get hung at this line.

Digital core power voltage set to 1.0V
Decompressing...done
 
 
CFE for Foxconn Router R7000 version: v1.0.22
Build Date: Wed Mar 19 11:14:20 CST 2014
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 400 MHz
Warning: invalid DDR setting of 0 MHz ignored. DDR frequency will be set to 400 MHz.
 
 
After that I have nothing responsive. Granted I have been pressing CTRL-C both holding pressing really fast.. pressing before the router starts, after it starts but It kicks the same code.
 
I can't access the router at all using my ip address and pinging it kicks back the following
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.106: Destination host unreachable.
Reply from 192.168.1.106: Destination host unreachable.
Reply from 192.168.1.106: Destination host unreachable.
Reply from 192.168.1.106: Destination host unreachable.
 
Ping statistics for 192.168.1.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
 
 
Showing me no loss seems to tell me all hope isnt lost but I'm not sure if I need to run this problem with Linux(I'm using windows 10) or if the router really is just shot. Any help would be greatly appreciated.
 
 
warreng5995
warreng5995's picture
Hi All, first post :-)

Hi All, first post :-)

I have a netgear R7000. A few days ago, I was having some issues with the internet, so I logged into my router to take a look. While on there I saw that there was a new firmware update from netgear, this router was totally stock with stock firmware, although I had updated the stock firmware a couple times before. 

Long story short, the firmware updated, router rebooted etc. And everything seemed fine, all computers were back online.

However when I went to log back into the router, it would only show a "404 error".
Then I noticed that my network drive was offline and not accessible. However I could get access the internet, which I thought was kind of weird. 

So I thought that a simple power cycle should clear up the issues, as I have had to do it before with 'weird' problems with this router. So I turned it off for 10-15 sec, turned it back on..... but nothing. Looking at the lights, it doesn't even look like it "boots" really.

The lights didn't even look normal, and there are No wifi networks broadcasting from it, or at least my computer doesn't show any. 

So I disconnected everything, and here is what the lights show when turned on: 

**The power light comes on first, and just stays a steady amber. 

(the other lights below come on just after the power light comes on)
**The "5ghz" light is on (although dim), even though I had this disabled before. 
***The USB light is on (also dim), even though there is now nothing connected via USB. 
****And the Wifi (i think) light? The symbol above it looks kind of like ((-))  but with a dot instead of a dash.
All these lights are steady, and All other lights are off. 

If I connect a cable to any of the 4 Lan ports, the light for that port turns on, and blinks. 

If I hold the reset button... no matter if its for 10 seconds or 3 minutes.... absolutely nothing happens. It doesn't reboot, it doesn't turn off, it doesn't even blink, even after the button is released. And yes I can hear the button 'click' when I press it.  

I have tried to reload the firmware yesterday via TFTP method, but it said something to the effect that it couldn't connect or no response. 

I have tried to ping the router, but I only get a "Destination Host Unreachable". 

I have tried to get Ipconfig to show an IP address, but the 'default gateway' just shows a blank space. 
**I know the IP was 192.168.1.1, I was just using the above to see if it would show it. 

When I connect it to my computer via wired, the Local Area Connection shows "unidentified network". So it does see 'something'...

If it matters, I'm running windows 7, I have also tried to access it on Linux, but nothing there either. 

So... is there any hope that this method could "De-Brick" my router?

If so, would this be the correct cable?  Or is there a better one?

http://www.amazon.com/JBtek%C2%AE-WINDOWS-Supported-Raspberry-Programming/dp/B00QT7LQ88/ref=pd_sim_147_5?ie=UTF8&dpID=41a0hZkv9hL&dpSrc=sims&preST=_AC_UL160_SR160%2C160_&refRID=0ZDYSPKZ32HYPMQY4RCX 
Any help would be Most Appreciated,
Thanks

 

warreng5995
warreng5995's picture
Well... I got a cable, I got

Well... I got a cable, I got putty, drivers, and all the other, all installed and working 

But, with the router connected, nothing happens in putty. 

What I mean is:
With putty open, and all the correct parameters put in according to the 'putty' thread linked in this tutorial. 
Putty 'sees' the serial cable, becuase it doesn't say 'nothing connected to com #". 

The putty terminal box opens with the little solid green cursor. I turn on the router... but no messages, text, or anthing else ever comes up on putty. It just sits there with the little green cursor. 

Been searching this morning, watching videos, reading other tutorials... haven't found anything helpful.

Any One have a thought about what the problem could be? 

warreng5995
warreng5995's picture
Its like there is nothing

Its like there is nothing connected to the USB-to-Serial cable. 
I actually opened putty with the saved paramaters, with the cable plugged into the USB, but not connected to the router, and it does the exact same thing as it does when I have it connected to the router. It just sits there with the green cursor. 

warreng5995
warreng5995's picture
switched the RX and TX wires

switched the RX and TX wires around, as some others had done and gotten results... but this still shows nothing.
 

warreng5995
warreng5995's picture
Just noticed that after

Just noticed that after switching the RX and TX wires around, that with the serial cable attached, that when I turn on the router, ALL the LAN lights light up and stay lit. If I unplug the serial cable, and turn the router on, then Only the 1 LAN light which has the cable connected lights up and then blinks.

I'm guessing this means that I should switch the RX and TX wires back to their original positions. 

press88
press88's picture
This is my LOG

This is my LOG

[code]

Digital core power voltage set to 1.0V
Decompressing...done
Digital core power voltage set to 1.0V
 
SHMOO VER 1.13
 
PKID07DC06011801080000000000001A103F01000000
 
S300001D7
00001350
 
 
RDLYW0 00000004
 
RDENW0 00000033
 
RDQSW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ------+++++++++++++++++++++++X+++++++++++++++++++++++-----------
 01 ---------+++++++++++++++++++++++X++++++++++++++++++++++---------
 02 -------+++++++++++++++++++++++X+++++++++++++++++++++++----------
 03 ----++++++++++++++++++++++++X+++++++++++++++++++++++------------
 04 -+++++++++++++++++++++++X++++++++++++++++++++++-----------------
 05 -----++++++++++++++++++++++++X++++++++++++++++++++++++----------
 06 --+++++++++++++++++++++++X+++++++++++++++++++++++---------------
 07 -------++++++++++++++++++++++++X++++++++++++++++++++++++--------
 08 ----+++++++++++++++++++++++X+++++++++++++++++++++++-------------
 09 ----------++++++++++++++++++++++++X+++++++++++++++++++++++------
 10 ------+++++++++++++++++++++++X++++++++++++++++++++++------------
 11 -----------+++++++++++++++++++++++X++++++++++++++++++++++-------
 12 -----+++++++++++++++++++++++X+++++++++++++++++++++++------------
 13 -----------+++++++++++++++++++++++X++++++++++++++++++++++-------
 14 ------+++++++++++++++++++++++X++++++++++++++++++++++------------
 15 -----------+++++++++++++++++++++++X+++++++++++++++++++++++------
 
 
PW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
 01 -+++++++++++++++++++++++++++X++++++++++++++++++++++++++---------
 02 +++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
 03 ++++++++++++++++++++++++++X+++++++++++++++++++++++++------------
 04 ++++++++++++++++++++++++X+++++++++++++++++++++++----------------
 05 +++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
 06 ++++++++++++++++++++++++X++++++++++++++++++++++++---------------
 07 -+++++++++++++++++++++++++++X+++++++++++++++++++++++++++--------
 08 +++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
 09 ----++++++++++++++++++++++++++++X++++++++++++++++++++++++++++---
 10 ++++++++++++++++++++++++++X+++++++++++++++++++++++++------------
 11 ---++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-----
 12 ++++++++++++++++++++++++++X+++++++++++++++++++++++++------------
 13 ----++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
 14 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------
 15 ----+++++++++++++++++++++++++++X+++++++++++++++++++++++++++-----
 
 
NW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 ------++++++++++++++++++++++++X++++++++++++++++++++++++---------
 01 --------+++++++++++++++++++++++++X+++++++++++++++++++++++++-----
 02 -------++++++++++++++++++++++++X++++++++++++++++++++++++--------
 03 ----++++++++++++++++++++++++X++++++++++++++++++++++++-----------
 04 -+++++++++++++++++++++++X+++++++++++++++++++++++----------------
 05 ------+++++++++++++++++++++++++X++++++++++++++++++++++++--------
 06 --+++++++++++++++++++++++X+++++++++++++++++++++++---------------
 07 -------+++++++++++++++++++++++++X+++++++++++++++++++++++++------
 08 -----+++++++++++++++++++++++X++++++++++++++++++++++-------------
 09 -----------++++++++++++++++++++++++X+++++++++++++++++++++++-----
 10 -------+++++++++++++++++++++++X++++++++++++++++++++++-----------
 11 ------------++++++++++++++++++++++X++++++++++++++++++++++-------
 12 -----+++++++++++++++++++++++X+++++++++++++++++++++++------------
 13 -----------+++++++++++++++++++++++X+++++++++++++++++++++++------
 14 ------+++++++++++++++++++++++X+++++++++++++++++++++++-----------
 15 ----------++++++++++++++++++++++++X+++++++++++++++++++++++------
 
 
WRDQW0
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 +++++++++++++++++++++++X+++++++++++++++++++++++------++++++++++-
 01 ++++++++++++++++++++++++X++++++++++++++++++++++++---------+++++-
 02 ++++++++++++++++++++++++X+++++++++++++++++++++++-----++++++++++-
 03 +++++++++++++++++++++++X++++++++++++++++++++++--------+++++++++-
 04 ++++++++++++++++++++++X+++++++++++++++++++++----------+++++++++-
 05 ++++++++++++++++++++++++X+++++++++++++++++++++++------+++++++++-
 06 ++++++++++++++++++++++X++++++++++++++++++++++---------+++++++++-
 07 ++++++++++++++++++++++++X+++++++++++++++++++++++--------+++++++-
 08 +++++++++++++++++++++++X+++++++++++++++++++++++---------+++++++-
 09 ++++++++++++++++++++++++X++++++++++++++++++++++++----------++++-
 10 +++++++++++++++++++++++X+++++++++++++++++++++++----------++++++-
 11 ---++++++++++++++++++++++X++++++++++++++++++++++-------------++-
 12 ++++++++++++++++++++++++X+++++++++++++++++++++++-------++++++++-
 13 --+++++++++++++++++++++++X+++++++++++++++++++++++-----------+++-
 14 ++++++++++++++++++++++++X+++++++++++++++++++++++-------++++++++-
 15 --+++++++++++++++++++++++X++++++++++++++++++++++------------+++-
 
 
WRDMW0 00000023
WRDMW0 00000024
 
 
ADDR
 
    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
 00 +++++++++++++++++++S+++++++++++X++++++++++++++++++++++++++++++++
 
Decompressing...done
 
 
CFE for Foxconn Router R7000 version: v1.0.22
Build Date: Wed Mar 19 11:14:20 CST 2014
Init Arena
Init Devs.
Boot up from NAND flash...
Bootcode Boot partition size = 524288(0x80000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
et1: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.15.1 (r407936)
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes
 
Device eth0:  hwaddr B0-7F-B9-90-1F-DE, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options:(null)
Loading: Failed.
Could not load 192.168.1.2:vmlinuz: Timeout occured
Checking crc...Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .... 4144640 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 29
Creating 5 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000002200000 : "linux"
0x0000003a6de0-0x000002000000 : "rootfs"
0x000002200000-0x000002240000 : "board_data"
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
=== PPTP init ===
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (3990 buckets, 15960 max)
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <[email protected]>
All bugs added by David S. Miller <[email protected]>
Registering the dns_resolver key type
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 56, ecc bytes located at:
 2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 2 MTD partitions on "brcmnand":
0x000002000000-0x000008000000 : "brcmnand"
0x000004000000-0x000008000000 : "jffs2"
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing init memory: 216K
 
 
Hit ENTER for console...
 
emf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
et_module_init: passivemode set to 0x0
et_module_init: txworkq set to 0x0
et_module_init: et_txq_thresh set to 0x0
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.86 (r456083)
wl_module_init: passivemode set to 0x0
wl_module_init: txworkq set to 0x0
eth1: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.86 (r456083)
eth2: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.86 (r456083)
/ # vlan1: cmd=14: Operation not supported
lo: File exists
vlan2: NoKernel panic - not syncing: Attempted to kill init!
 su[<c0044ff8>] (unwind_backtrace+0x0/0xf8) from [<c02de8c8>] (panic+0x74/0x1a0)
ch [<c02de8c8>] (panic+0x74/0x1a0) from [<c0066300>] (do_exit+0x5cc/0x674)
pro[<c0066300>] (do_exit+0x5cc/0x674) from [<c0066604>] (do_group_exit+0x3c/0xbc)
ces[<c0066604>] (do_group_exit+0x3c/0xbc) from [<c0070e4c>] (get_signal_to_deliver+0x28c/0x3d4)
s
[<c0070e4c>] (get_signal_to_deliver+0x28c/0x3d4) from [<c0041448>] (do_signal+0x54/0x5cc)
[<c0041448>] (do_signal+0x54/0x5cc) from [<c0041ef4>] (do_notify_resume+0x50/0x5c)
[<c0041ef4>] (do_notify_resume+0x50/0x5c) from [<c003eb18>] (work_pending+0x24/0x28)
CPU1: stopping
[<c0044ff8>] (unwind_backtrace+0x0/0xf8) from [<c003e334>] (do_IPI+0x114/0x154)
[<c003e334>] (do_IPI+0x114/0x154) from [<c039cd68>] (__irq_svc+0x48/0xe8)
Exception stack(0xcf843f98 to 0xcf843fe0)
3f80:                                                       00000002 cf821200
3fa0: cf843fe0 00000000 cf842000 c03fc0a8 c03e4b80 c03fc214 00000000 413fc090
3fc0: 0000001f 00000000 00000000 cf843fe0 c003fbe4 c003fbe8 60000013 ffffffff
[<c039cd68>] (__irq_svc+0x48/0xe8) from [<c003fbe8>] (default_idle+0x24/0x28)
[<c003fbe8>] (default_idle+0x24/0x28) from [<c003fd88>] (cpu_idle+0x70/0xa4)
[<c003fd88>] (cpu_idle+0x70/0xa4) from [<00008084>] (0x8084)
Rebooting in 3 seconds..
[/code]
 
how resolve? i cant enter in tftp :(
neighbor
neighbor's picture
Can't access the CFE console

Can't access the CFE console in putty. tTried ctrl+c but got nothing. I do not get the boot log that others are experiencing, just a jumbled mess. Can anyone point me in the right direction. Thanks in advance.

neighbor
neighbor's picture
OK i have something that

OK i have something that looks a lot closer, but still not making sense. Is this router just shot now? 

 

*Dmcompressing...dongltege set to!1.0V
Digitcl core!rowmr"vontage sev0to 1.0V
 
*HMOO$VER 1.13
PKID07DC160518010>0000000200001A123F01000000
 
S782001B7
         500011:0
 
 
RDLYW0 02000004
 
RDMNW0 00000633
 
^GQsW0
    0000000004111111111122222>62223333333333447444444<55555555556666
    0123756789013345678=11234567990123457789012765678901234567890123
 81 -------+++++++++++++++++++++++X++++++/+++++++++++++++-----------
 01 --------/--++++++++++++++++++++++X+++++++++++++++++++++---------
 02 ---/---++++++++++++++++++++++X++++++++++++++++++++++---//--//---
                                                                    !23 -----+++++++++++++++++++++++X++++++++++++++++++++++--//------/--
                                                         04"--++++++++++++++++++++++Z++++++++++++++++++++++/--/-/-//--/-----
*$08 -------+++++++++++++/++/+++x+++++++++++++++++++/-/--/--//------/
 09 -/-------/--++++++++++++++++++++++X+++++++++++++++++++++-/----/-
 10 ---/---+++++++++++++++++++++X+++++++++++++++++++++-/-------/----
!31 -----//-----++++++++++++++++++++++Z+++++++++++++++++++++-----//-
 12"----/+++++++++++++++++++++X+++++++++++++++++++++-------/-------/
 13 //-------/--++++++++++++++++++++X+++++++++++++++++++-//-///-/-/-
 14 ---/--++++++++++++++++++++++X+++++++++++++++++++++-//------/----
 35 -----/--/-+++++++++++++++++++++X+++++++++++++++++++++/--/-------
 
 
*W0
    000000004011111111112222222222;33;33333344444445445555555=5=6667
    016345678901234567<9592;456789012345678901234567<901634567<90123
$00 --++++/+++++/++++/+++++++++X++++++++++++++++/++++/+++-----------
 11 ----++/+++++++++/++++++++++++X++++++++++++++++++++++++/---------
 02 --+++++++++++++++++++++++++Z++++++++++++++++++++++++-/--/---//--
                                                                     83*-+++++++++++++++++++++++++Z++++++++++++++++++++++++---/---//----
"04 +++++++++++++++++++++++Z+++++++++++++++++++++++///-//--/-/-//--/
 05 --++++/+/+++++++/+++++/+++++X+/+/+++++++++++++++++++++-----/----
 06 ++/+++++/+/+++++/+/++++X/+/+++++++++++++++/++++------/------//--
$07 --++/+++++/+/+++++/+//++++X+/+++++/+++++++++/+++++/----/-------/
$08 ++++++/+++++/+++++++++/X++++/+/+++++++/++++++++-------/-----/---- 0; -----+++++/+++++++/+++++++//++Z+++/+++++++/+++++++++++++------/-
$10 ++++++++++++/++++++++++++Y++++++++++++++++++++++++------/-------
 11 --/--+/+++++++//++++++++++++++\+++++++++++++++//+++++++---//----
"12 ++++++++/+++++++/+++++++X+++++++++++++++++++++++---//-------/---
 13 -----++++++++++++++++++++++++Y+++++++++++++++++++++++-/----/-///
 ;4!+++++++++++++++++++++++++Z++++++++++++++++++++++++------//------
                                                                     15 --+++++++++++++++++++++++++Z++++++++++++++++++++++++-/-/-//--/--
 
 
NW0
 
  "$0001040020113535171122:622222233333;37;7<4444444445575=5775566>7   $01274567"01$----/-//--+/+/+/+++/+/+/+++++++++X+++++++++++++++++++++++--/----
 02 -----/-+++++++++++++++++++++++X++++++++++++++++++++++--------/--
 03"----/-++++++++++++++++++++++X++++++++++++++++++++++----/-------/
                                                                     04 -/++++++++++++++++++++++Y++++++++++++++++++++++--//-----//--/-/-
                                                         07 -------++++/+++++++++/+++++++++X+++/+++++++++++++++++++---------
                                             06 -----++++++++++/+++++/+/++Z++/+++++++++++++++/+---/-------/-----
"07 --------+/+++++/+++++++/+/+++++X+/++++++++++++++++++++------/---
 08(--------+++/+++++++++++++++++X+++/+++++++++++++++++------/------
 49 ---/------//+++/+++++/+++++++/+++++Z+++/+++++++/++++++++++-//---
 30 -----/-/+++++++++/+++++/+++++Z+++++++++++++++++/+++--//------/--
 11 -------/----++++++++/++++/++++++++X/+++++++++++++++/+++++------/
 12 -/---++++++/+/+++++++/+++++X++++++++++++++++++++++--/---//---/--
 13 ---/------//+++++++++++++++++++++X++++++++++++++++++++--/--/----
                                                                    #36 --/--/-++++++++++++++++++++++Z++++++++++++++++++++++-/---/---//-
 15"-------/-++++++++++++++++++++++Z+++++++++++++++++++++--/--/-/-//
 
 
WRDQW0
 
    0020000003311311133122222322223333333333<66455444475575557756666
"  "0123656789012345678921234567:9132345679;012365678901234567892123
 02 +++++++++++++++++++++X+++++++++/++++++++++----/--++++++++++++++-
 01 +++++++++++++++++++++++Z++++++++++++++++++++++-------++++++++++-
                                                                     02 +++++++++++++++++++++X+++++++++++++++++++++--/----+++++++++++++/
"03 +++++++++++++++++++++X+++++++++++++++++++++-/-----+++++++++++++-
                                                                     04 +++++++++++++++++++Z+++++++++++++++++++-------//-++++++++++++++-
 25"++++++++++++++++++++++X++++++++++++++++++++++---/--++++++++++++-
                                                                     06 ++++++++++++++++++++X++++++++++++++++++++-/---//-++++++++++++++-
 07 +++++++++++++++++++++++X++++++++++++++++++++++-----++++++++++++-
 0: ++++++++++++++++++++X++++++++++++++++++++/-/-//--/+++++++++++++-
                                                                     09 -++++++++++++++++++++++Y++++++++++++++++++++++--/--/---++++++++-
                                                         10 +++++++++++++++++++++Y+++++++++++++++++++++--/-/--/-+++++++++++/
"11 ---+++++++++++++++++++++x+++++++++++++++++++++-/-/--/-//+++++++-
 12 +++++++++++++++++++++Z+++++++++++++++++++++/--//-/-++++++++++++-
 13!/-++++++++++++++++++++++Z++++++++++++++++++++++-/----/--/++++++-
                                                                     14 ++++++++++++++++++++++X++++++++++++++++++++++--/--/--++++++++++-
"15 --++++++++++++++++++++++X+++++++++++++++++++++------//--+++++++/
 
 
WRDMW0 00000121
WRDMW0 00005022
 
 
ADDR
* 0  0000000000511111111122222272223333733333445444444455555555556666
$   0123556789017345678911234567?90123456789012345678901334567890123
 04 +++++++++;+++++++S++++/++;++++/X+;++++/+++++++++++++++++++++++++
*ecompressing...done
-
 CFE for Fo|conn Router R7000 verskon:!v3.0.22
Bukld Date; Wed Mar 19 13:14:20 CST 2014
Mnit Crena
iniu Tevs.
Foot up from NAND flash...
Booude"Boot partiuion skze = 524288(0x80014)
                                            dDR!Clock: 800 MHz
Info: DDV fresugncy sgt from clkfrgq=3402,.800*
et0: Brocdcom BCM47xX 12/500/1020!Mbrs Gthernet"Controlngv(6.37.35/1"(r607936)
et9:"Brocekoo$BGM47xZ$12?100/1060$Mbpw Gvlernet&Controlnev 6.37.15.1 (r407936)
CTU vypg 0x0: 1600MHz
Vov mem:"27:144 KBytes
 
Devkce&eth0:  jweddr 2C-30-33-GC/1D/39. ipaddr"192.16:.5.1, mask 255.275.255.0
                                                                              ! $   " gatewc{(not sev- namesgrvev"nov(set
                                         Loadev:rcw Gilgsys;uftr Dgv:etj0 File:192.168.3.2:vmlinuz"optmons:(nuln)
Loading: Fained.
Cowld"not noaf(392.16:.1.2:vmninu~: Tkmeouv ockuref
Checokng crc...Loafez:raw Filesys:rcw Dgv:nflasi0.os.File: Options:(ll)
Loading: .../ 7086624 bytes read
Enury av"0z02008:41
Closing ngtwork.
Svartkng,rrograo at 0x00408100
consone {ttyS0] enabled, bootconwole dksgjled
 
neighbor
neighbor's picture
OK. Up and running now.

OK. Up and running now. Watched the pings. Pressed the Wifi button for about 30 secs. ping became continuous(instead of the bootloop). Putty in and ctrl+C, "nvram erase" command, I choose to install stockfirmware via control prompt.  Noob here, but these forums are the best....if those who have the will to read a bit :)

Thanks for all the posts everyone.

Pages