User Tools

Site Tools

This wiki is read only and for archival purposes only. >>>>>>>>>> Please use the new OpenWrt wiki at <<<<<<<<<<

Linksys WRT610N

The WRT610N v1.0 is based on the Broadcom 4705 cpu running at 300MHz. It has 8 MB flash and 64 MB SDRAM (2x HY5DU561622FTP). The WNICs are a dual BCM4322 Chipset, one for 5GHz A and N and one for 2.4GHz B,G and N. The switch is a BCM53115 chip. The WRT610N runs 802.11 A, B, G, and Draft N wireless protocols. It provides 4 gigabit LAN ports, 1 WAN port and a USB 2.0 port.

Supported Versions

Version/Model S/N OpenWrt Version Supported Model Specific Notes
WRT610N v0 ? same as v1 same as v1
WRT610N v1.0 CTG01 10.03.1 (r22840), trunk (added r36099, r36461 tested) b43 works with 2.4GHz radio, wl with both
WRT610N v2.0 CTG11 trunk (added in r36099, r36342 tested) same hardware as Linksys E3000

Known issues

  • Fixed in trunk: The switch's first ethernet port is stuck in a slow mode:
  • The b43 wireless driver doesn't support 11n modes (HT) or 5Ghz. The closed-source wl can be used for both.

Hardware Highlights

Ver CPU Ram Flash Network Wireless Antenna USB Serial JTag
1 BCM4705@300MHz 64MiB 8MiB 1+4 x 1000M 2.4+5Ghz Yes (2.0) Yes ?
2 BCM4718@480MHz 64MiB 8MiB 1+4 x 1000M 2.4+5Ghz Internal, 3 per band Yes (2.0) Yes ?


Obtaining an image

Download trunk snapshot openwrt-wrt610n_v2-squashfs.bin or trunk snapshot openwrt-wrt610n_v1-squashfs.bin depending on your hardware version. These snapshots ship with b43, so 5GHz wireless will not work and only BG rates will be available.

Alternately, see instructions for building openwrt from source and set the following configuration (in 'make menuconfig')

Target System (Broadcom BCM47xx/53xx) --->
Target Profile (Broadcom SoC, all Ethernet, BCM43xx WiFi (wl, proprietary))  --->

Recovery Web Interface

From dd-wrt Linksys WRT610N documentation

  1. unplug all ethernet ports (Important!)
  2. unplug power
  3. plug power in
  4. wait 2-2.5 seconds
  5. press the reset button and keep it pressed for 5 seconds, then release it
  6. reconnect ethernet (DHCP shoud give IP address to computer)
  7. point your browser at
  8. You should see a "Management Firmware update" screen. Give it the openwrt-wrt610n_v1-squashfs.bin or openwrt-wrt610n_v2-squashfs.bin file depending on hardware version.

If you have a serial console and the above isn't working you can press ctrl-c while the router is booting to get to a CFE prompt, then either:

  1. nvram set safe_mode_upgrade=on
  2. nvram commit
  3. reboot


  1. flash -ctheader -https : flash1.trx

FIXME even though CFE says it's doing that last bit, it appears some setup is missing. Running the command manually from a canceled boot and then browsing to the upgrade page shows an immediate "Update Success" and the router reboots (CFE reports that it has run the "reboot" command).

OEM installation using the TFTP method

Upload the openwrt-wrt610n_v1-squashfs.bin or openwrt-wrt610n_v2-squashfs.bin image with TFTP.

FIXME describe actual method

Based on the CFE boot logs, it appears that the router attempts to load something via tftp with a max size of 0x32000 bytes (3.625MiB) into ram. This would limit our image size quite a bit.

Upgrading OpenWrt

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

Terminal Upgrade Process

  • Login as root via SSH on
  • Use the following commands to upgrade.

cd /tmp/
sysupgrade /tmp/openwrt-brcm-2.4-squashfs.trx

  • If sysupgrade does not support this router, use the following commands.

cd /tmp/
mtd write /tmp/openwrt-brcm-2.4-squashfs.trx linux && reboot


Info (v1)

Architecture: MIPS
Vendor: Broadcom
Bootloader: CFE
System-On-Chip: Broadcom BCM4705
CPU Speed: 300 MHz
Flash-Chip: EON EN29LV640B-90TIP - 64 Megabit (8M x 8-bit / 4M x 16-bit)
Flash size: 8 MiB
RAM: 64 MiB
Wireless: 2x Broadcom BCM4322 802.11a/b/g/n (integrated)
Ethernet: Broadcom BCM53115 Gigabit Switch
USB: 1x USB2.0 Host
Serial: Yes

For v2 see E3000

Opening the case

Note: This will void your warranty!

The case parts are hold together by plastic claws, use a screwdriver to release them.

See this form post for details.

PCB (front side):
Insert picture of PCB front side

PCB (back side):


There are 5 solder pads near the rim on the backside of the PCB, see image above. Serial port settings are 115000@8N1.


The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi
vlan0 (eth0.0) LAN ports (1 to 4) Static
vlan1 (eth0.1) WAN port DHCP
wl0 WiFi Disabled

Switch Ports (for VLANs)

Switch port numbers are currently unknown.

Failsafe mode

If you forgot your password, broke one of the startup scripts, firewalled yourself or corrupted the JFFS2 partition, you can get back in by using OpenWrt's failsafe mode.

Boot into failsafe mode

  • Unplug the router's power cord.
  • Connect the router's LAN1 port directly to your PC.
  • Configure your PC with a static IP address between and E. g. (gateway and DNS is not required).
  • Plug the power on and wait for the DMZ LED to light up.
  • While the DMZ LED is on immediately press any button (Reset and Secure Easy Setup will work) a few times .
  • If done right the DMZ LED will quickly flash 3 times every second.
  • You should be able to telnet to the router at now (no username and password)


Available buttons are currently not known.

Basic configuration

Since this part is identical for all devices, see Basic configuration.

Connect stuff to the USB port

To connect stuff to the USB port, please see Connect stuff to the USB port.

Hardware Mods


OEM Bootlog

See bootlog.

OpenWrt Bootlog

Other Info

Bug Tracking Ticket

Forum Thread

Vendor Source

OpenWrt System Information

See sysinfo.

OpenWrt SoC Status

See soc.broadcom.bcm47xx

For WIFI config with wl

Consult (don't choose an unsupported mode)


toh/linksys/wrt610n.txt · Last modified: 2017/04/17 17:09 by flamangoes