User Tools

Site Tools


Comtrend CT-5361

The CT-5361 is an adsl wifi router distributed by some Spanish ISP's like Movistar (white enclosure) or Jazztel (dark blue enclosure).

Supported but without ADSL

Hardware Highlights

SoC CPU speed Ram Flash Network USB Serial JTag
Broadcom 6348 256MHz 16MiB 4MiB 4 x 1 Yes Yes Yes



Flash Layout

Please check out the article Flash Layout. It contains an example and a couple of explanations.

OEM easy installation

Get the firmware openwrt-96348GW-generic-squashfs-cfe.bin

  • Unplug the power cord
  • Press the reset button, don't release it yet!
  • Plug the power cord
  • Wait 10 seconds
  • Release the reset button
  • Select .bin file
  • Upgrade the image
  • Wait for it to reboot
  • Telnet to and set a root password, or browse to if LuCI is installed.

OEM installation using the TFTP method

If you want to upgrade using TFTP you follow these steps (as an alternative to the above install process.

Upgrading OpenWrt


If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

Terminal Upgrade Process

  • Login as root via SSH on
  • Use the following commands to upgrade.

cd /tmp/
sysupgrade /tmp/openwrt-96348GW-generic-squashfs-cfe.bin

  • If sysupgrade does not support this router, use the following commands.

cd /tmp/
mtd write /tmp/openwrt-96348GW-generic-squashfs-cfe.bin linux && reboot

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration


The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi
eth0 LAN ports (1 to 4) bridged
wlan0 WiFi Disabled (bridged)

Switch Ports (for VLANs)

This is an example to configure the switch: numbers 0-2 will be lan, labeled as Ports 1-3 on the unit, number 3 will be the Internet (WAN), 5 is the internal connection to the router itself. Don't be fooled: vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port Mode
LAN 1 0 lan
LAN 2 1 lan
LAN 3 2 lan
LAN 4 3 Internet (WAN)

# path: /etc/config/network # port 4 = WAN config interface loopback option ifname lo option proto static option ipaddr option netmask config interface lan option type bridge option ifname eth0.0 option proto static option ipaddr option netmask option nat 1 config interface wan option ifname eth0.1 option macaddr 00:11:22:33:44:55 option proto dhcp option defaultroute 1 config switch eth0 option enable 1 option reset 1 option enable_vlan 1 config switch_vlan option device eth0 option vlan 0 option ports "0 1 2 5t" config switch_vlan option device eth0 option vlan 1 option ports "3 5t"

Failsafe mode


hardware.button on howto use and configure the hardware button(s).

The Comtrend 5361 has one button. It is the Reset.

Reset reset



Architecture: MIPS
Vendor: Broadcom
Bootloader: CFE
Board ID: 96348GW-11
System-On-Chip: BCM6348
CPU/Speed BMIPS3300 V0.7 / 256 MHz
Flash-Chip: MX29LV320AB
Flash size: 4 MiB
RAM-Chip: EM638165TS-7 / SDR-143
RAM size: 2x8 MiB
Wireless: Broadcom 4318 rev9, 802.11b/g (miniPCI)
Ethernet: Broadcom BCM5325 w/ vlan support swconfig
Internet: ADSL2+
USB: possible with mod
Serial: Yes


Model Number

Photo of front of the casing

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • To remove the cover do a/b/c

Photo of PCB


port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Photo of PCB with markings


port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings


Bootloader Mods

→ you could read about bootloader in general

Hardware mods

→ as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!


64MiB RAM Mod

Possible using a custom CFE bootloader.


OEM bootlog

# dmesg Linux version ( (gcc version 3.4.2) #1 Wed Nov 28 13:50:37 CST 2007 Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB Total Flash size: 4096K with 71 sectors 96348GW-11 prom init CPU revision is: 00029107 Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 64 (order 6: 512 bytes) Using 128.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13940k/16000k available (1431k kernel code, 2040k reserved, 208k data, 72k init, 0k highmem) Calibrating delay loop... 255.59 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 MPI: No Card is in the PCMCIA slot Can't analyze prologue code at 80174694 Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry bcm963xx_serial driver v2.0 NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 72k freed Algorithmics/MIPS FPU Emulator v1.5 atmapi: module license 'Proprietary' taints kernel. blaadd: blaa_detect entry adsl: adsl_init entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6348B0 Ethernet Network Device v0.3 Nov 28 2007 13:49:01 Config Ethernet Switch Through SPI Slave Select 1 dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 00:1D:20:40:C5:96 PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl0: Broadcom BCM4318 802.11 Wireless Controller dgasp: kerSysRegisterDyingGaspHandler: wl0 registered eth0 Link UP. BcmAdsl_Initialize=0xC00663F8, g_pFnNotifyCallback=0xC007F204 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003980 adsl2=0x00000000 pSdramPHY=0xA0FFFFF8, 0x1B7EE3 0xDEADBEEF AdslCoreHwReset: AdslOemDataAddr = 0xA0FFA724 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered ATM proc init !!! eth0 Link DOWN. eth0 Link UP. device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state



For some Help with the Tags, please have a look here: tags

toh/comtrend/ct5361.txt · Last modified: 2013/06/18 15:23 (external edit)