User Tools

Site Tools


EnGenius ESR-6670 / ZyXEL NBG-417N / ZyXEL NBG-4415

This router is based on the Ralink RT3052 Soc. With the original firmware it was capable to distribute internet connection from an USB HSDPA stick. It has 1 WAN and 2 LAN ports.

The PCB have the numer: 7016A0294010 V-1.10

The ZyXEL have only one antenna and no soldered Serial connector.

Currently there is no support for this device, but there are several RT3052F based devices supported.

Hardware info

Architecture: MIPS
Vendor: Ralink
Bootloader: Uboot
System-On-Chip: Ralink RT3052
CPU Speed: 384Mhz
Flash-Chip:MX 29LV320DTTI - 70G
Flash size: 4MB
RAM: EtronTech EM63A165TS-6G 16MB 166Mhz SDRAM
Wireless: Ralink RT3052 (integrated)
Ethernet: Ralink RT3052 (integrated)
Serial: Yes
Power supply: 12V 1.25A

Opening the case

Note: This will void your warranty!

  • There is only one screw in the middle of the device. Check the board picture below for it's position.

Board images



Console port CN1 uses 3.3 V signaling at speed 57600 8n1. Header is pre-installed on EnGenius. Not pre-installed on ZyXEL.

1 2 3 4


There is a 14 pin unpopulated SMD pinhead near the reset button. it should be JTAG. The pins marked with ? are unknown currently, but research is in progress. Probably this is EJTAG 2.5 compilant.

? 1 2 GND
? 3 4 GND
? 5 6 GND
? 7 8 GND
? 9 10 GND
? 11 12 ?
? 13 14 3V3

Stock firmware startup log

U-boot Ver: 2009/09/25

Board: Ralink APSoC DRAM:  32 MB  1*32 MB
ASIC 3052_MP2 (Port5<->None)
Product Name: ESR-6670
SDRAM CAS = 3(d1835272) 

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 

LINUX started...
init started: BusyBox v1.7.5 (2010-01-11 10:07:29 CST)
starting pid 152, tty '/dev/console': '/sbin/config_init'
Config Init version: date: 2010/01/11
starting pid 209, tty '/dev/ttyS1': '/sbin/config_term'
*                                 ESR-6670                             *

KernelApp/Ramdisk Ver:			 Date:2010/01/11
console> cat: can't open '/apps/lib/modules/2.6.21/modulesApp.dep': No such file or directory
ln: /sbin/./apps_init: File exists

unfortunatelly I have not found any way to interact with the device on the serial port. Hitting 1 does not effect anything, and in the console prompt I have not find any working command. Hitting Ctrl+C kills the console, –so the communication to the device works too on the serial line– but it starts again:

process '/sbin/config_term' (pid 209) exited. Scheduling it for restart.
starting pid 460, tty '/dev/ttyS1': '/sbin/config_term'


For some Help with the Tags, please have a look here: tags

toh/engenius/esr6670.txt · Last modified: 2015/10/18 20:01 by tmomas