0% found this document useful (0 votes)
160 views13 pages

Linksys WRT54G2 v1-0

The document provides instructions for flashing DD-WRT firmware onto a Linksys WRT54G2 v1.0 wireless router and reverting back to the original firmware. It includes steps to download the necessary files, reset the router to defaults, use tftp to flash the DD-WRT firmware, and notes on waiting for processes to complete to avoid bricking the router. Reverting to the original firmware requires using JTAG and will result in a generic MAC address that needs to be changed.

Uploaded by

j. dijksman
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
160 views13 pages

Linksys WRT54G2 v1-0

The document provides instructions for flashing DD-WRT firmware onto a Linksys WRT54G2 v1.0 wireless router and reverting back to the original firmware. It includes steps to download the necessary files, reset the router to defaults, use tftp to flash the DD-WRT firmware, and notes on waiting for processes to complete to avoid bricking the router. Reverting to the original firmware requires using JTAG and will result in a generic MAC address that needs to be changed.

Uploaded by

j. dijksman
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd
You are on page 1/ 13

Linksys WRT54G2 v1.

0
Manuf/OEM/ODM CyberTAN
FCC approval date: 23 January 2008
Country of manuf.: China
Linksys Serial Num Prefix: CSV0
Local image
WRT54G2 v1.0

Jump to navigation Jump to search


For a list of all currently documented
Type: wireless router
Broadcom chipsets with specifications, see
Broadcom.
FCC ID: Q87-WRT54G2V1
Industry Canada ID: 3839A-WRT54G2V1
PCB ID: 3763-14143002R
Wireless-G Broadband Router
 • Support page Power: 12 VDC, 0.5 A
Connector type: barrel
• Datasheet.pdf CPU1: Broadcom BCM5354 (240 MHz)
• Quick Install.pdf FLA1: 2 MiB (Eon EN29LV160AB-70TCP)
• User Guide.pdf RAM1: 16 MiB (Hynix HY57V281620FTP-H)
Expansion IFs: none specified
Links of Interest JTAG: yes, 12-pin header, unpopulated
Serial: yes, 5-pin header, unpopulated, (115200,8,N,1)
• Listed on the WRT54G series
page on Wikipedia WI1 chip1: Broadcom BCM5354
• On the DD-WRT wiki WI1 802dot11 protocols: bg
• On the DD-WRT forums WI1 antenna connector: none
• On the DD-WRT forum ETH chip1: Broadcom BCM5354
• Teardown on iFixit Switch: Broadcom BCM5354
LAN speed: 100M
LAN ports: 4
Flashing WAN speed: 100M
WAN ports: 1
NOTE: During configuration or flashing a device, the only things that should be hooked to the device is the
computer and power. bg
Stock bootloader: BSP
Flashing DD-WRT
Stock FW OS: VxWorks
WARNING: Requires Micro for DD-WRT, Do not flash anything else!
Third party firmware supported: DD-WRT • (List)
WARNING: Requires K2.4 for
Default SSID: linksys (50 addl. devices)
DD-WRT, Do not flash
Default IP address: 192.168.1.1
anything else! the IP 192.168.1.1 is used by 1171 additional devices
  of which 147 are Linksys devices
• Linksys WRT54G2 v1.0 Default login user: blank
Default login password: admin
These are instructions for the blank:admin credentials used by 280 additional devices
WRT54G2 V.1 ONLY of which 141 are Linksys devices
802dot11 OUI: 00:1E:E5 (11 E, 21 W, 2007), 00:21:29 (9 E, 16 W,
2007), 00:22:6B (8 E, 11 W, 2007), 00:23:69 (12 E, 19 W, 2008),
00:25:9C (8 E, 15 W, 2009)
Ethernet OUI: 00:1E:E5 (11 E, 21 W, 2007), 00:21:29 (9 E, 16 W,
1. Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/VxWorksKiller-G2V1-
new.bin
2. Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/dd-wrt.v24-
10709_NEWD_micro.bin
3. Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/tftp.exe
4. Reset the router to defaults on the Linksys Admin page, and let it reboot or manually reboot
it after its finished. Read the peacock announcement
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=51486 and take special note of number 11,
(how to tftp).
5. Set your computer to a static IP address of 192.168.1.8 and 255.255.255.0 for a mask and
plug ethernet cable into LAN port of the G2v1 unit.
6. Log in admin page (username is blank, password = admin) and navigate to firmware
upgrade page. Browse to the VxWorksKiller-G2V1-new.bin file, press Upgrade and wait
120 seconds for it to reboot on its own, if it does not, then powercycle the router manually.
Wait another 12 0seconds and reboot it again. Router should now be listening for tftp
transfer of dd-wrt firmware.
7. Tftp the DD-WRT firmware to the router, use "dd-wrt.v24-10709_NEWD_micro.bin" that
you downloaded in step 2; after sucessful tftp, wait 3 min for the router to finish writing new
nvram deafults, etc... It should reboot on its own at least two times, so give it 3 min and then
go to http://192.168.1.1 (If it not reboot on its own, wait another 1 min, and then power
cycle it)
8. When if finishes booting up...do a hard reset on the unit...let it boot again, and configure.
9. Upgrade the NEWD_Micro.bin build 12548 after you have dd-wrt running, following the
steps in note 1 of the peacock announcement
10.Don't forget to set your computer back to automatically obtaining DHCP and DNS.
11.Check for recommended builds here.

Upgrading
Updating DD-WRT
If dd-wrt is already on the router follow these instructions. If stock firmware is on the router follow
the flashing instructions.
1. Check for recommended builds here first.
2. Set your computer to a static IP of 192.168.1.7. (or to whatever subnet the router is on)
Disable all firewalls and security. Disable wireless on your computer and only have the
router connected to the flashing computer by the ethernet cable between the two.
3. Hard reset or 30/30/30 (If the router supports it, if not, reset to defults in the GUI) prior to
flashing. Wait. Check for password page on re-login and change password.
4. Flash firmware. You can use the webgui except if you have a belkin router. (For belkin use
tftp.exe to flash)
5. Wait...at least three minutes. Lights should return to normal. See important2, below. Failing
to wait is how most people brick their routers.
6. Do a power cycle of the router. (Unplug the cord, count to 30 and plug it back in.)
7. Wait for the lights to return to normal usually about 2 minutes.
8. Hard reset or 30/30/30 again (If the router supports it, if not, reset to defults in the GUI).
Wait. Check for the password page and re-login to change the password. Then you can
reconfigure your settings manually.
9. Once configured set your computer back to autoIP and autoDNS.
Important1: This Hard reset or 30/30/30 works fine for Asus router, but you do have to power cycle
after the reset.
Important2: After you flash the firmware, and before you do the hard reset, the router will be
building some nvram settings. YOU MUST WAIT FOR THIS TO FINISH PRIOR TO
DOING ANYTHING WITH THE ROUTER INCLUDING A HARD RESET. Usually, you can
tell when this process is completed by the WAN light coming on, but it does take several
minutes. Go have a beer. There are starting to be more and more people who BRICK their
routers by not waiting until the nvram is rebuilt, PRIOR to doing a hard reset. YOU NEED
TO WAIT!

Reverting
Reverting to OEM Firmware from DD-WRT
Warning - There is only one way to revert at this time. Through JTAG and it has a generic mac
address that can be fixed with mac clone.
OK...anyone willing to try it with JTAG...here is a "generic" original Linksys wholeflash for the
WRT54G2V1.
It has an embedded MAC address of 00:21:29:00:00:01
This MUST be loaded back to the unit with JTAG...no exceptions.

This is an altered/edited wholeflash.bin file from my virgin unit...before dd-wrt was loaded.
[EDIT] - reported to be working.
redhawk

• generic-WHOLEFLASH.BIN - This is vworks, not linux


ridley Reverting WRT54G2 to vxworks WITHOUT JTAG

JTAG-Serial Info
JTAG

JTAG Pinouts
nTRST 1o o2 GND
TDI 3o o4 GND
TDO 5o o6 GND
TMS 7o o8 GND
TCK 9o o10 GND
nSRST 11o o12 N/C

Using Universal JTAG Adapter


white 1o o2 black
red 3o o4 GND
blue 5o o6 GND
green 7o o8 GND
yelow 9o o10 GND
orange 11o o12 N/C

• /noreset switch required


DD-WRT JTAG Recovery
1. Backup CFE x2 (Compare the files, they must match exactly or there is something wrong
with your JTAG setup)
2. Erase Wholeflash x2
3. Flash CFE
4. Unplug Power
5. Unplug JTAG Cable
TFTP:
1. Set Rig ip static 192.168.1.10
2. Plug network cable from rig to port 1
3. Get TFTP ready, server ip - 192.168.1.1, Password - blank, file - dd-
wrt.v24_micro_generic.bin
4. Plug in power
5. As soon as windows says "connected" hit upgrade. May have to use a network hub to make
sure windows is always connected.
6. Hard Reset 30\30\30

Serial

Serial Pinouts
VCC 1 o
TX 2 o
RX 3 o
N/C 4 o
GND 5 o

Hyper terminal Setup in Windows XP


In Windows XP, Click Start Button - All Programs - Accessories -
Communication - HyperTerminal
Enter a name for the connection, Click ok
Choose com port you adapter is plugged into, Click ok
Set:
Bits per second = 115200
Data Bits = 8
Parity = none
Stop bits = 1
Flow control = none
Click ok
Click File - Save As, and select a place to save it to so you
don't have to enter the settings again.

Putty Setup in Windows XP


After installing putty, run it
Serial line = The COM port your using for serial (ie. COM3)
Speed = 115200
Click on Serial under Connection
Serial line to connect to = same as above (Serial line)
Speed (baud) = 115200
Data bits = 8
Stop bits = 1
Parity = none
Flow control = none
Click Session
Enter a name for your connection under saved sessions
Click Save
Click Open

DD-WRT Serial Recovery


Modified Redhawk0 instructions
1. Connect Serial cable
2. Start one of the programs from above
3. Get TFTP ready with file selected
4. Use dd-wrt.v24_micro_generic.bin
5. Connect power to the router
6. start a rapid fire Cntl-C as you plug the router to power
7. type "nvram erase" w/o quotes, hit enter
8. type "flash -noheader : flash1.trx" w/o quotes, this starts the tftp daemon, hit enter
9. but have tftp.exe ready
10.Click go or start on TFTP
11.give it 5 minutes after it finishes
12.then power cycle....hard reset...then config
13.when it stops spitting out txt in the serial consol....hit the enter key...you should get a login
prompt...at that point, power cycle it, Hard reset or 30/30/30...then config
14.you'll see it boot up

USB Info
No USB

vlan Info
DD-WRT vlan Info
• WikiDevi:DD-WRT/VLAN Support
Confirmed the WRT54G2 v1.0 supports port-based vlans via the GUI with build 14929.
Confirmed the WRT54Gs v1.0 supports port-based vlans via nvram with build 14848 micro-plus-
ssh
WRT54G2 v1.0's ports are mapped like this:
1 2 3 4 | case labels
3 2 1 0 | nvram port numbers

Defaults
root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=4 5
vlan0ports=3 2 1 0 5*
size: 17376 bytes (15392 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
port4vlans=0
port3vlans=0
port2vlans=0
port1vlans=0
port0vlans=1
size: 17376 bytes (15392 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
vlan1hwname=et0
vlan0hwname=et0
size: 17376 bytes (15392 left)
root@DD-WRT:~# lsmod
Module Size Used by
ip_nat_pptp 2192 0 (unused)
ip_conntrack_pptp 2524 1
ip_nat_proto_gre 1552 0 (unused)
ip_conntrack_proto_gre 2312 0 [ip_nat_pptp ip_conntrack_pptp]
switch-robo 5036 0 (unused)
switch-core 5984 0 [switch-robo]
root@DD-WRT:~# ls /proc/switch
eth0
root@DD-WRT:~# cat /proc/switch/eth0/vlan/0/ports
0 1 2 3 5t*
root@DD-WRT:~# cat /proc/switch/eth0/vlan/1/ports
4 5t
root@DD-WRT:~# cat /proc/switch/eth0/vlan/2/ports
4
root@DD-WRT:~#

Commands
root@DD-WRT:~# nvram set vlan1ports="3 4 5"
root@DD-WRT:~# nvram set vlan0ports="2 1 0 5*"
root@DD-WRT:~# nvram commit
root@DD-WRT:~# reboot

nvram
root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=3 4 5
vlan0ports=2 1 0 5*
size: 17459 bytes (15309 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
port4vlans=0
port3vlans=0
port2vlans=0
port1vlans=0
port0vlans=1
size: 17459 bytes (15309 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
vlan1hwname=et0
vlan0hwname=et0
size: 17459 bytes (15309 left)
root@DD-WRT:~#

Pictures
DarkShadow's Unit

Top

Bottom

Board Top

Board Top2

JTAG MOD

Serial Hooked Up

Serial closeup

JTAG & Serial Closup


etthtech's Unit




FCCID Q87-WRT54G2V1



You might also like