The WRT610N v1.0 is based on the Broadcom 4705 cpu running at 300MHz. It has 8 MB flash and 64 MB SDRAM (2x HY5DU561622FTP). The WNICs are a dual BCM4322 Chipset, one for 5GHz A and N and one for 2.4GHz B,G and N. The switch is a BCM53115 chip. The WRT610N runs 802.11 A, B, G, and Draft N wireless protocols. It provides 4 gigabit LAN ports, 1 WAN port and a USB 2.0 port.
|Version/Model||S/N||OpenWrt Version Supported||Model Specific Notes|
|WRT610N v0||?||same as v1||same as v1|
|WRT610N v1.0||CTG01||10.03.1 (r22840), trunk (added r36099, r36461 tested)||b43 works with 2.4GHz radio, wl with both|
|WRT610N v2.0||CTG11||trunk (added in r36099, r36342 tested)||same hardware as Linksys E3000|
- Fixed in trunk:
The switch's first ethernet port is stuck in a slow mode: https://dev.openwrt.org/ticket/13315
- The b43 wireless driver doesn't support 11n modes (HT) or 5Ghz. The closed-source wl can be used for both.
|1||BCM4705@300MHz||64MiB||8MiB||1+4 x 1000M||2.4+5Ghz||Yes (2.0)||Yes||?|
|2||BCM4718@480MHz||64MiB||8MiB||1+4 x 1000M||2.4+5Ghz||Internal, 3 per band||Yes (2.0)||Yes||?|
Download trunk snapshot openwrt-wrt610n_v2-squashfs.bin or trunk snapshot openwrt-wrt610n_v1-squashfs.bin depending on your hardware version. These snapshots ship with b43, so 5GHz wireless will not work and only BG rates will be avaliable.
Alternately, see instructions for building openwrt from source and set the following configuration (in 'make menuconfig')
Target System (Broadcom BCM947xx/953xx) ---> Target Profile (Broadcom SoC, all Ethernet, BCM43xx WiFi (wl, proprietary)) --->
- unplug all ethernet ports (Important!)
- unplug power
- plug power in
- wait 2-2.5 seconds
- press the reset button and keep it pressed for 5 seconds, then release it
- reconnect ethernet (DHCP shoud give IP address to computer)
- point your browser at http://192.168.1.1.
- You should see a "Management Firmware update" screen. Give it the
openwrt-wrt610n_v2-squashfs.binfile depending on hardware version.
If you have a serial console and the above isn't working you can press ctrl-c while the router is booting to get to a CFE prompt, then either:
- nvram set safe_mode_upgrade=on
- nvram commit
- flash -ctheader -https : flash1.trx
even though CFE says it's doing that last bit, it appears some setup is missing. Running the command manually from a canceled boot and then browsing to the upgrade page shows an imediate "Update Success" and the router reboots (CFE reports that it has run the "reboot" command).
openwrt-wrt610n_v2-squashfs.bin image with TFTP.
desrcibe actual method
Based on the CFE boot logs, it appears that the router attempts to load something via tftp with a max size of 0x32000 bytes (3.625MiB) into ram. This would limit our image size quite a bit.
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
- Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
- Upload TRX file to LuCI
- Wait for reboot
- Login as root via SSH on 192.168.1.1
- Use the following commands to upgrade.
cd /tmp/ wget http://downloads.openwrt.org/latest/brcm-2.4/openwrt-brcm-2.4-squashfs.trx sysupgrade /tmp/openwrt-brcm-2.4-squashfs.trx
- If sysupgrade does not support this router, use the following commands.
cd /tmp/ wget http://downloads.openwrt.org/latest/brcm-2.4/openwrt-brcm-2.4-squashfs.trx mtd write /tmp/openwrt-brcm-2.4-squashfs.trx linux && reboot
|System-On-Chip: Broadcom BCM4705|
|CPU Speed: 300 Mhz|
|Flash-Chip: EON EN29LV640B-90TIP - 64 Megabit (8M x 8-bit / 4M x 16-bit)|
|Flash size: 8 MiB|
|RAM: 64 MiB|
|Wireless: 2x Broadcom BCM4322 802.11a/b/g/n (integrated)|
|Ethernet: Broadcom BCM53115 Gigabit Switch|
|USB: 1x USB 2.0 Host|
Note: This will void your warranty!
The case parts are hold together by plastic claws, use a screwdriver to release them.
See this form post for details.
Main PCB (back side)
There are 5 solder pads near the rim on the backside of the PCB, see image above. Serial port settings are 115000@8N1.
The default network configuration is:
|Interface Name||Description||Default configuration|
|br-lan||LAN & WiFi||192.168.1.1/24|
|vlan0 (eth0.0)||LAN ports (1 to 4)||Static|
|vlan1 (eth0.1)||WAN port||DHCP|
Switch port numbers are currently unknown.
If you forgot your password, broken one of the startup scripts, firewalled yourself or corrupted the JFFS2 partition, you can get back in by using OpenWrt's failsafe mode.
- Unplug the router's power cord.
- Connect the router's LAN1 port directly to your PC.
- Configure your PC with a static IP address between 192.168.1.2 and 192.168.1.254. E. g. 192.168.1.2 (gateway and DNS is not required).
- Plug the power on and wait for the DMZ LED to light up.
- While the DMZ LED is on immediately press any button (Reset and Secure Easy Setup will work) a few times .
- If done right the DMZ LED will quickly flash 3 times every second.
- You should be able to telnet to the router at 192.168.1.1 now (no username and password)
Available buttons are currently not known.
Since this part is identical for all devices, see Basic configuration.
To connect stuff to the USB port, please see Connect stuff to the USB port.
Bug Tracking Ticket
Original Firmware Boot Log
OpenWrt System Information
OpenWrt SoC Status
For WIFI config with wl
Consult https://dev.openwrt.org/ticket/5788 (don't choose an unsupported mode)
toh/linksys/wrt610n.txt · Last modified: 2014/04/24 20:53 by danitool