Netgear WNDR4700

Supported Versions

Version/Model Launch Date S/N Router firmware version OpenWrt Version Model Specific Notes
v1 2013-06 - V1.0.1.52, OpenWRT Linux version 2.6.32.11 very old version Kamikaze - moded to NETGEAR kernel support

Note: WNDR4700 on wikidevi.com here

Note: On OpenWRT.org forum is the thread this router here.

Note: Netgear provides SDK to the router, but NAND is in this image is redy-only. (download last SDK here).

Note: This router has slot to Hard Drive Disk SATA 2,5" or 3,5" !!!

Hardware Highlights

CPU Flash RAM Network WAN USB SD Card Reader SATA Serial JTag VLANs
Applied Micro APM82181@1000MHz 128MiB NAND 256MB 4x1 GigE 1x1 GigE WAN x2 v3.0 Yes Yes Yes Yes Yes

Flash Layout

[WNDR4700]# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 08000000 00020000 "NAND 128MiB 3,3V 8-bit"
mtd1: 00180000 00020000 "uboot"
mtd2: 00020000 00020000 "device-tree"
mtd3: 001e0000 00020000 "kernel"
mtd4: 01660000 00020000 "rootfs"
mtd5: 00080000 00020000 "config"
mtd6: 00080000 00020000 "pot"
mtd7: 00300000 00020000 "traffic_meter"
mtd8: 001c0000 00020000 "language"
mtd9: 06020000 00020000 "ecos"
mtd10: 00040000 00020000 "wifi_data"
mtd11: 01860000 00020000 "firmware"

Bootlogs

OEM bootlog

Auto calibration --- U-Boot 2009.08 (Jul 03 2012 - 13:04:31) CPU: AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz) Security support Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND 32 kB I-Cache 32 kB D-Cache DNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4 Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTG I2C: ready DRAM: 256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3) NAND: 128 MiB *** Warning - bad CRC, using default environment Configure Max Payload 256B PCIE0: successfully set as root-complex 03 00 168c 0030 0280 ff 02 02 111d 803a 0604 00 04 00 168c 0033 0280 ff 02 03 111d 803a 0604 00 05 00 1912 0015 0c03 00 02 04 111d 803a 0604 00 01 00 111d 803a 0604 00 131072 bytes read: OK Net: ppc_4xx_eth0 AR8327 GigaSW initialize...done ENET Speed is 1000 Mbps - FULL duplex connection (EMAC0) Client starts...[Listening] for ADVERTISE...TTT Retry count exceeded; boot the image as usual nmrp server is stopped or failed ! Type run flash_nfs to mount root filesystem over NFS Hit any key to stop autoboot: 0 Loading from device 0: NAND 128MiB 3,3V 8-bit (offset 0x180000) ** check device-tree image ** Verifying Checksum ... OK ** check kernel image ** Verifying Checksum ... OK ** check rootfs image ** Verifying Checksum ... OK NAND read: device 0 offset 0x180000, size 0x20000 131072 bytes read: OK ## Booting kernel from Legacy Image at 00500000 ... Image Name: PowerPC OpenWrt Linux-2.6.32 Image Type: PowerPC Linux Kernel Image (lzma compressed) Data Size: 1870601 Bytes = 1.8 MB Load Address: 00000000 Entry Point: 00000000 Verifying Checksum ... OK ## Flattened Device Tree blob at 00800040 Booting using the fdt blob at 0x800040 Uncompressing Kernel Image ... OK Using PowerPC 44x Platform machine description Linux version 2.6.32.11-wndr4700 (torby.tong@dni-l-sw01) (gcc version 4.5.1 (GCC) ) #2 Sat May 4 00:43:25 CST 2013 Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00001000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000 MMU: Allocated 1088 bytes of context maps for 255 contexts Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4094 Kernel command line: root=/dev/mtdblock4 rootfstype=squashfs ip=192.168.1.1:192.168.1.7::255.255.255.0:wndr4700:eth0:off panic=1 console=ttyS0,115200 PID hash table entries: 1024 (order: -4, 4096 bytes) Dentry cache hash table entries: 32768 (order: 1, 131072 bytes) Inode-cache hash table entries: 16384 (order: 0, 65536 bytes) Memory: 255744k/262144k available (5248k kernel code, 6400k reserved, 512k data, 85k bss, 384k init) Kernel virtual memory layout: * 0xfffe0000..0xffff0000 : fixmap * 0xfd800000..0xfe000000 : consistent mem * 0xfd800000..0xfd800000 : early ioremap * 0xd1000000..0xfd800000 : vmalloc & ioremap Hierarchical RCU implementation. NR_IRQS:512 UIC0 (32 IRQ sources) at DCR 0xc0 UIC1 (32 IRQ sources) at DCR 0xd0 UIC2 (32 IRQ sources) at DCR 0xe0 UIC3 (32 IRQ sources) at DCR 0xf0 clocksource: timebase mult[400000] shift[22] registered Mount-cache hash table entries: 8192 NET: Registered protocol family 16 OCM1: 32768 Bytes (enabled) OCM1: 32768 Bytes (non-cached) OCM1: 0 Bytes (cached) 256k L2-cache enabled PCIE0: Checking link... PCIE0: Device detected, waiting for link... PCIE0: link is up ! PCI host bridge /plb/pciex@d00000000 (primary) ranges: MEM 0x0000000e00000000..0x0000000e7fffffff -> 0x0000000080000000 MEM 0x0000000f00000000..0x0000000f000fffff -> 0x0000000000000000 IO 0x0000000f80000000..0x0000000f8000ffff -> 0x0000000000000000 Removing ISA hole at 0x0000000f00000000 4xx PCI DMA offset set to 0x00000000 /plb/pciex@d00000000: Legacy ISA memory support enabled Disabling INTX for MSI testing. Setting for 64-bit MSI and 4 MSI messages. PCIE0: successfully set as root-complex PCI: Probing PCI hardware PCI: Hiding 4xx host bridge resources 0000:40:00.0 pci 0000:41:00.0: PME# supported from D0 D3hot D3cold pci 0000:41:00.0: PME# disabled pci 0000:42:02.0: PME# supported from D0 D3hot D3cold pci 0000:42:02.0: PME# disabled pci 0000:42:03.0: PME# supported from D0 D3hot D3cold pci 0000:42:03.0: PME# disabled pci 0000:42:04.0: PME# supported from D0 D3hot D3cold pci 0000:42:04.0: PME# disabled pci 0000:43:00.0: PME# supported from D0 D1 D3hot pci 0000:43:00.0: PME# disabled pci 0000:44:00.0: PME# supported from D0 D1 D3hot pci 0000:44:00.0: PME# disabled pci 0000:45:00.0: PME# supported from D0 D3hot pci 0000:45:00.0: PME# disabled pci 0000:42:02.0: PCI bridge, secondary bus 0000:43 pci 0000:42:02.0: IO window: disabled pci 0000:42:02.0: MEM window: 0x80000000-0x800fffff pci 0000:42:02.0: PREFETCH window: 0x80300000-0x803fffff pci 0000:42:03.0: PCI bridge, secondary bus 0000:44 pci 0000:42:03.0: IO window: disabled pci 0000:42:03.0: MEM window: 0x80100000-0x801fffff pci 0000:42:03.0: PREFETCH window: 0x80400000-0x804fffff pci 0000:42:04.0: PCI bridge, secondary bus 0000:45 pci 0000:42:04.0: IO window: disabled pci 0000:42:04.0: MEM window: 0x80200000-0x802fffff pci 0000:42:04.0: PREFETCH window: disabled pci 0000:41:00.0: PCI bridge, secondary bus 0000:42 pci 0000:41:00.0: IO window: disabled pci 0000:41:00.0: MEM window: 0x80000000-0x802fffff pci 0000:41:00.0: PREFETCH window: 0x80300000-0x804fffff pci 0000:40:00.0: PCI bridge, secondary bus 0000:41 pci 0000:40:00.0: IO window: disabled pci 0000:40:00.0: MEM window: 0x80000000-0x802fffff pci 0000:40:00.0: PREFETCH window: 0x80300000-0x804fffff CPM0: pm-iic-device resource /plb/opb/i2c@ef600700 CPM0: pm-emac-device resource /plb/opb/ethernet@ef600c00 CPM0: pm-monitor-event property not defined CPM0: DCR at 0x160 CPM: ocm suspend address 0xd1040000 CPM: ocm resume address 0xd1040400 CPM: ocm data address 0xd10407d0 bio: create slab at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb mod_init:1052 ppc460ex_dma_per_chan_init:1064 cfg80211: Calling CRDA to update world regulatory domain Switching to clocksource timebase NET: Registered protocol family 2 IP route cache hash table entries: 16384 (order: 0, 65536 bytes) TCP established hash table entries: 8192 (order: 0, 65536 bytes) TCP bind hash table entries: 8192 (order: -1, 32768 bytes) TCP: Hash tables configured (established 8192 bind 8192) TCP reno registered NET: Registered protocol family 1 pci 0000:45:00.0: xHCI HW not ready after 5 sec (HC bug?) status = 0x801 Probing AMCC DMA driver PPC4xx PLB DMA engine IRQ 24 PPC460ex PLB DMA engine @0x00_00000100 size 263 new_chan->chan_id 0x0 new_chan->chan->chan_id 0x0 PCIE-MSI: Setting up MSI ... PCIE-MSI: MSI reg base c10000000 - c100000ff PCIE-MSI: MSI sdr base 0000036c PCIE-MSI: PE_IHS h 0000000c l 10000002 kcpm: can't read pm-monitor-app kcpm: unable to parse device tree; aborting squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 496 async_tx: api initialized (async) io scheduler noop registered io scheduler anticipatory registered io scheduler deadline registered io scheduler cfq registered (default) PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor aaa0 PCIE-MSI: hwirq requested 0, virt 37 PCIE-MSI: message: h 0000000c l 10000080 data 00004440 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 1, virt 38 PCIE-MSI: message: h 0000000c l 10000080 data 00004441 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 2, virt 39 PCIE-MSI: message: h 0000000c l 10000080 data 00004442 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 3, virt 40 PCIE-MSI: message: h 0000000c l 10000080 data 00004443 Generic non-volatile memory driver v1.1 Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled serial8250.0: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 16550A console [ttyS0] enabled serial8250.0: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550A 4ef600300.serial: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 16550 4ef600400.serial: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550 brd: module loaded loop: module loaded /plb/sata@bffd1000: Port disabled via device-tree sata-dwc 4bffd1800.sata: Gettting DMA channel 1 sata-dwc 4bffd1800.sata: id 0, controller version 1.91 sata-dwc 4bffd1800.sata: DMA initialized sata-dwc 4bffd1800.sata: DMA CFG = 0x00000001 dma_register_interrupt register irq (41) ata4294967295: sata_dwc_port_start: setting burst size in DBTSR: 0x00100010 sata-dwc 4bffd1800.sata: **** GEN II speed rate negotiated scsi0 : sata-dwc ata1: SATA max UDMA/133 irq 42 of-flash 4e4000000.nor_flash: do_map_probe() failed NAND device: Manufacturer ID: 0xad, Chip ID: 0xf1 (Hynix NAND 128MiB 3,3V 8-bit) Scanning device for bad blocks Bad eraseblock 657 at 0x000005220000 Creating 12 MTD partitions on "4e4000000.ndfc.nand": 0x000000000000-0x000008000000 : "NAND 128MiB 3,3V 8-bit" 0x000000000000-0x000000180000 : "uboot" 0x000000180000-0x0000001a0000 : "device-tree" 0x0000001a0000-0x000000380000 : "kernel" 0x000000380000-0x0000019e0000 : "rootfs" mtd: find squashfs magic at 0x380000 of "4e4000000.ndfc.nand" the correct location of partition "rootfs": 0x000000380000-0x0000019e0000 0x0000019e0000-0x000001a60000 : "config" 0x000001a60000-0x000001ae0000 : "pot" 0x000001ae0000-0x000001de0000 : "traffic_meter" 0x000001de0000-0x000001fa0000 : "language" 0x000001fa0000-0x000007fc0000 : "ecos" 0x000007fc0000-0x000008000000 : "wifi_data" 0x000000180000-0x0000019e0000 : "firmware" APM MTD access Wrapper initialized. e1000e: Intel(R) PRO/1000 Network Driver - 1.0.2-k2 e1000e: Copyright (c) 1999-2008 Intel Corporation. PPC 4xx OCP EMAC driver, version 3.54 mal0: descriptor-memory = ocm MAL: Enabled Interrupt Coal TxCnt: 32 RxCnt: 8 TxTimer: 100000 RxTimer: 5000 MAL v2 /plb/mcmal, 1 TX channels, 1 RX channels RGMII /plb/opb/emac-rgmii@ef601500 initialized with MDIO support TAH /plb/opb/emac-tah@ef601350 initialized /plb/opb/emac-rgmii@ef601500: input 0 in RGMII mode PHY ID: 0x004dd034 eth0: EMAC-0 /plb/opb/ethernet@ef600c00, MAC 20:e5:2a:68:dd:87 eth0: found Generic MII PHY (0x00) Intel(R) Gigabit Ethernet Network Driver - version 1.3.16-k2 Copyright (c) 2007-2009 Intel Corporation. tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky xhci_hcd 0000:45:00.0: xHCI Host Controller xhci_hcd 0000:45:00.0: new USB bus registered, assigned bus number 1 pci_bus 0000:45: firmware: using built-in firmware renesas/K2013080.mem xhci_hcd 0000:45:00.0: irq 21, io mem 0xe00200000 xhci_hcd 0000:45:00.0: Failed to enable MSI-X PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 1912 PCIE-MSI: hwirq requested 4, virt 52 PCIE-MSI: message: h 0000000c l 10000080 data 00004444 usb usb1: config 1 interface 0 altsetting 0 endpoint 0x81 has no SuperSpeed companion descriptor usb usb1: New USB device found, idVendor=1d6b, idProduct=0003 usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb1: Product: xHCI Host Controller usb usb1: Manufacturer: Linux 2.6.32.11-wndr4700 xhci_hcd usb usb1: SerialNumber: 0000:45:00.0 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 4 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usbcore: registered new interface driver libusual dwc_otg: version 2.60a 22-NOV-2006 dwc_otg: Using DMA mode dwc_otg dwc_otg.0: DWC OTG Controller dwc_otg dwc_otg.0: new USB bus registered, assigned bus number 2 dwc_otg dwc_otg.0: irq 34, io mem 0x00000000 dwc_otg: Init: Port Power? op_state=1 dwc_otg: Init: Power Port (0) usb usb2: New USB device found, idVendor=1d6b, idProduct=0002 usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb2: Product: DWC OTG Controller usb usb2: Manufacturer: Linux 2.6.32.11-wndr4700 dwc_otg_hcd usb usb2: SerialNumber: dwc_otg.0 ata1: Softreset on PMP port 15 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected i2c /dev entries driver ibm-iic 4ef600700.i2c: using standard (100 kHz) mode ibm-iic 4ef600800.i2c: using standard (100 kHz) mode apm82181-adma: Probing AMCC APM82181 ADMA engines... AMCC(R) APM82181 ADMA Engine found [1]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma1: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [2]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma2: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [3]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma3: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [4]: ( capabilities: xor int ) --------------- dma_async_device_register: 683------------------------- apm82181 adma4: allocated 819 descriptor slots Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (3996 buckets, 15984 max) ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller lib80211: common routines for IEEE802.11 drivers drivers/rtc/hctosys.c: unable to open rtc device (rtc0) ata1: SATA link up 3.0 Gbps (SStatus 123 SControl F0300) ata1.00: ATA-9: WDC WD20EFRX-68AX9N0, 80.00A80, max UDMA/133 ata1.00: 3907029168 sectors, multi 0: LBA48 NCQ (depth 1/32) ata1.00: configured for UDMA/133 blk_queue_max_hw_segments: set to minimum 1 scsi 0:0:0:0: Direct-Access ATA WDC WD20EFRX-68A 80.0 PQ: 0 ANSI: 5 sd 0:0:0:0: [sda] 3907029168 512-byte logical blocks: (2.00 TB/1.81 TiB) sd 0:0:0:0: [sda] 4096-byte physical blocks sd 0:0:0:0: Attached scsi generic sg0 type 0 sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: unknown partition table sd 0:0:0:0: [sda] Attached SCSI disk usb 2-1: new high speed USB device using dwc_otg and address 2 usb 2-1: New USB device found, idVendor=05e3, idProduct=0723 usb 2-1: New USB device strings: Mfr=3, Product=4, SerialNumber=0 usb 2-1: Product: USB Storage usb 2-1: Manufacturer: Generic usb 2-1: configuration #1 chosen from 1 choice scsi1 : SCSI emulation for USB Mass Storage devices eth0: link is up, 1000 FDX IP-Config: Complete: device=eth0, addr=192.168.1.1, mask=255.255.255.0, gw=255.255.255.255, host=wndr4700, domain=, nis-domain=(none), bootserver=192.168.1.7, rootserver=192.168.1.7, rootpath= VFS: Mounted root (squashfs filesystem) readonly on device 31:4. Freeing unused kernel memory: 384k init Warning: unable to open an initial console. init started: BusyBox v1.4.2 (2013-04-26 18:37:36 CST) multi-call binary Loading data from /dev/mtd5 ... Done! The data center is Running ... PPP generic driver version 2.4.2 NET: Registered protocol family 24 nf_nat_STARCRAFT: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading nf_conntrack_proto_esp loaded NET: Registered protocol family 27 PPPoL2TP kernel driver, V0.16.1 PPTP-GRE-v1.13 2007 (C) Delta Networks Inc. dni-qos module init. Generating Rules... Done! /etc/rc.common: /etc/rc.common: 83: /sbin/cmd_sipalg: not found lan mac: 20:e5:2a:68:dd:87 wan mac: 20:e5:2a:68:dd:88 wlan5g mac: 20:e5:2a:68:dd:89 sn:31K12A5400640 SN: 31K12A5400640 hw_id:HW_ID model_id:MODEL_ID The region number is: 0x0002 REGION: WW /sbin/ip_mac: /sbin/ip_mac: 20: cannot create /proc/sys/net/ipv4/conf/br0/arp_drop_reply: Directory nonexistent cp: cannot stat '/etc/wpa2.orig/*': No such file or directory wpspin:20117047 Starting network... ln: /tmp/www/cgi-bin/RMT_invite.htm: No such file or directory ln: /tmp/www/cgi-bin/RMT_invite.cgi: No such file or directory ln: /tmp/www/cgi-bin/func.sh: No such file or directory powerpc_emac_init phy_mode = 0x4 phy_map = 0x0 phy_address = 0xffffffff reg = 0x7949 ######## S17 SSDK init succeeded! ######## athrs17_reg_init:done SSDK Init scsi 1:0:0:0: Direct-Access Generic STORAGE DEVICE 9454 PQ: 0 ANSI: 0 OK! opsd 1:0:0:0: Attached scsi generic sg1 type 0 erate done. sd 1:0:0:0: [sdb] Attached SCSI removable disk SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. /etc/net6conf/6proc: /etc/net6conf/6proc: 33: cannot create /proc/sys/net/ipv6/ipv6_srcrt_type_2: Directory nonexistent device eth0.2 entered promiscuous mode device eth0 entered promiscuous mode NET-LAN: Default LAN MAC is : 20:E5:2A:68:DD:87 br0: port 1(eth0.2) entering forwarding state br0: port 1(eth0.2) entering disabled state br0: port 1(eth0.2) entering forwarding state udhcp server (v0.9.8) started The attached devices demo is Running ... check minidlna ... killall: minidlna: no process killed grep: /tmp/etc/minidlna.conf: No such file or directory mknod: /dev/ptmx: File exists killall: utelnetd: no process killed killall: telnetenable: no process killed The telnetenable is running ... killall: smbd: no process killed Deleting static route ... Done! Adding static route ... Done! NET-WAN: Default WAN MAC is : 20:e5:2a:68:dd:88 dni-qos attached on eth0.1. killall: ntpclient: no process killed udhcp client (v0.9.8) started Deleting static route ... Done! Deleting static route ... Done! Adding static route ... Done! start rip process start initial data time zone index is : 0 Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com killall: ez-ipupdate: no process killed killall: updatednsip: no process killed killall: updatednsip: no process killed killall: phddns: no process killed killall: noip2: no process killed killall: crond: no process killed killall: miniupnpd: no process killed Sending discover... Sending select for 192.168.1.102... ioctl: Cannot assign requested address LAN: 10.0.0.1/255.255.255.0 WAN: 192.168.1.102/255.255.255.0 WAN status: 1000M/Full WAN status: 1000M/Full WAN/LAN is NOT conflicting! Lease of 192.168.1.102 obtained, lease time 86400 adding dns 192.168.1.1 LAN: 10.0.0.1/255.255.255.0 WAN: 192.168.1.102/255.255.255.0 WAN status: 1000M/Full WAN status: 1000M/Full WAN/LAN is NOT conflicting! Initializing random number generator... read-only file system detected...done miniupnpd[1559]: listening on 10.0.0.1:5555 Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! /etc/rc.common: /etc/rc.common: 83: /bin: Permission denied deleting routers adding router 192.168.1.1 time zone index is : 0 Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! Deleting static route ... Done! Deleting static route ... Done! Adding static route ... Done! start rip process start initial data bound killall: igmpproxy: no process killed cp: cannot stat '/usr/config/shadow': No such file or directory Changing password for admin New password:NTPST: one NTP Sync Timestamp existed in POT partition, it's 06:16:57, Dec 10, 2012 Bad password: too weak Retype password: Password for admin changed by root Saving Data... Done! Saving Data... Done! Saving Data... Done! Saving Data... Done! /dev/sda: unknown volume type [vol_id_1]get_disk_volume error, goto ret!!! killall: proftpd: no process killed Start utelnetd by telnetenable POT is Running... POT is Finished!!! The POT-(Get/Set) Demo is Running ... Changing password for admin New password: Bad password: too weak Retype password: Password for admin changed by root /dev/sda: unknown volume type [Waring]: This HDD format failed to support the Time Machine!!!!!! /dev/sda: unknown volume type [vol_id_2]get_disk_volume error, goto ret!!! ufsd: driver 8.5 (NTFS4LINUX_U85_014_S[2011-07-25-15:14:27]) Evaluation version - not for resale! LBD=ON with delayalloc with ioctl loaded at d7d40000 NTFS read/write support included Big endian platform Hfs+/HfsX read/write support included Built for: Netgear_apm_82181_2011-07-20 [rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'. [rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'. cat: /tmp/usbdisknum: No such file or directory ADDRCONF(NETDEV_UP): sit0: link is not ready /dev/sdb: error open volume This partition type is ! disk name is sdb last partition is sh: =: argument expected rm: cannot remove '/tmp/umount_result': No such file or directory Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. /sbin/wlan: /sbin/wlan: 1: pidnum: not found sh: 1: unknown operand /sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not found /sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not found Args: 1 ath_hal: 0.9.17.1 (AR5416, AR9380, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D) ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved ath_dfs: Version 2.0.0 Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved ath_pci: 9.2.0_U10.1020 (Atheros/multi-bss) Caldata = cfce0000 slot=0 __ath_attach: Set global_scn[0] ACBKMinfree = 48 ACBEMinfree = 32 ACVIMinfree = 16 ACVOMinfree = 0 CABMinfree = 48 UAPSDMinfree = 0 ar9300RadioAttach: Need analog access recipe!! Restoring Cal data from Flash dfs_attach: use DFS enhancements DFS min filter rssiThresh = 18 DFS max pulse dur = 151 ticks ath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0 wifi0: Atheros 9380: mem=0xe00000000, irq=19 hw_base=0xd6a80000 Caldata = cfce4000 slot=1 __ath_attach: Set global_scn[1] ACBKMinfree = 48 ACBEMinfree = 32 ACVIMinfree = 16 ACVOMinfree = 0 CABMinfree = 48 UAPSDMinfree = 0 ar9300RadioAttach: Need analog access recipe!! Restoring Cal data from Flash dfs_attach: use DFS enhancements DFS min filter rssiThresh = 18 DFS max pulse dur = 151 ticks ath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0 wifi1: Atheros 9580: mem=0xe00100000, irq=20 hw_base=0xd6b00000 DFS min filter rssiThresh = 15 DFS max pulse dur = 151 ticks DFS min filter rssiThresh = 15 DFS max pulse dur = 151 ticks Creating ap for NETGEAR96 on wlan_vap_create : enter. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1 wlan_vap_create : exit. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1. VAP device ath0 created Added ath0 mode master Invalid command : bgscan DES SSID SET=NETGEAR96 ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1 /etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistent WARNING: Fragmentation with HT mode NOT ALLOWED!! Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath0 ; Invalid argument. Invalid command : setVowExt Invalid command : setKeySrchAlways Invalid command : mcastenhance Invalid command : acparams Invalid command : set_vsp_enable Interface doesn't accept private ioctl... setPhyRestartWar (8BE0): Operation not permitted Invalid command : setVowExtStats Created ath0 mode ap for NETGEAR96 lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. Modules already loaded Creating ap for NETGEAR96-5G on wlan_vap_create : enter. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1 wlan_vap_create : exit. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1. VAP device ath1 created Added ath1 mode master Invalid command : bgscan Invalid command : extoffset DES SSID SET=NETGEAR96-5G ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1 /etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistent WARNING: Fragmentation with HT mode NOT ALLOWED!! Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath1 ; Invalid argument. Invalid command : setVowExt Invalid command : setKeySrchAlways Invalid command : mcastenhance Invalid command : acparams Invalid command : set_vsp_enable Interface doesn't accept private ioctl... setPhyRestartWar (8BE0): Operation not permitted Invalid command : setVowExtStats Created ath1 mode ap for NETGEAR96-5G lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. device ath0 entered promiscuous mode br0: port 2(ath0) entering forwarding state arping: bind: Cannot assign requested address >>>>> WPS MODE, 2 >>>>> WPS ENABLED, PSK cat: /etc/wpa2/WSC_ath0.conf: No such file or directory >>>>> WPS Translate, Index:0 lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. device ath1 entered promiscuous mode br0: port 3(ath1) entering forwarding state arping: bind: Cannot assign requested address >>>>> WPS MODE, 2 >>>>> WPS ENABLED, PSK cat: /etc/wpa2/WSC_ath1.conf: No such file or directory >>>>> WPS Translate, Index:2 CHH: System Configuration AP_IPADDR:=192.168.1.2 AP_NETMASK:=255.255.255.0 WAN_MODE:=bridged WAN_IPADDR:=192.168.2.1 WAN_NETMASK:=255.255.255.0 WAN_IF:=eth1 LAN_IF:=eth0 WLAN_ON_BOOT:=n AP_STARTMODE:=dual AP_RADIO_ID:=0 AP_RADIO_ID_2:=1 AP_PRIMARY_CH:=11ng AP_CHMODE:=11NGHT20 AP_PRIMARY_CH_2:=44 AP_CHMODE_2:=11NAHT40PLUS PUREG:=0 PUREN:=0 TXQUEUELEN:=1000 SHORTGI:=1 SHORTGI_2:=1 AMPDUENABLE:=1 AMPDUENABLE_2:=1 AMPDUFRAMES:=32 AMPDUFRAMES_2:=32 AMPDULIMIT:=50000 AMPDULIMIT_2:=50000 AMPDUMIN:=32768 AMPDUMIN_2:=32768 CWMMODE:=1 CWMMODE_2:=1 RATECTL:=auto MANRATE:=0x8c8c8c8c MANRETRIES:=0x04040404 RX_CHAINMASK:=7 RX_CHAINMASK_2:=7 TX_CHAINMASK:=7 TX_CHAINMASK_2:=7 AP_SSID:=NETGEAR96 AP_SSID_2:=NETGEAR96-5G AP_PRIMARY_KEY_0:=1 AP_PRIMARY_KEY_1:=1 AP_WEP_MODE_0:=1 AP_WEP_MODE_1:=1 AP_MODE:=ap AP_SECMODE:=WPA AP_SECFILE:=PSK WPS_ENABLE:=2 AP_MODE_2:=ap AP_SECMODE_2:=WPA AP_SECFILE_2:=PSK WPS_ENABLE_2:=2 AP_MODE_3:=ap AP_SECMODE_3:=None AP_SECFILE_3:=PSK WPS_ENABLE_3:=0 AP_MODE_4:=ap AP_SECMODE_4:=None AP_SECFILE_4:=PSK WPS_ENABLE_4:=0 AP_MODE_5:=ap AP_SECMODE_5:=None AP_SECFILE_5:=PSK WPS_ENABLE_5:=0 AP_MODE_6:=ap AP_SECMODE_6:=None AP_SECFILE_6:=PSK WPS_ENABLE_6:=0 AP_MODE_7:=ap AP_SECMODE_7:=None AP_SECFILE_7:=PSK WPS_ENABLE_7:=0 AP_MODE_8:=ap AP_SECMODE_8:=None AP_SECFILE_8:=PSK WPS_ENABLE_8:=0 AP_MODE_9:=ap AP_SECMODE_9:=None AP_SECFILE_9:=PSK WPS_ENABLE_9:=0 AP_MODE_10:=ap AP_SECMODE_10:=None AP_SECFILE_10:=PSK WPS_ENABLE_10:=0 AP_MODE_11:=ap AP_SECMODE_11:=None AP_SECFILE_11:=PSK WPS_ENABLE_11:=0 AP_MODE_12:=ap AP_SECMODE_12:=None AP_SECFILE_12:=PSK WPS_ENABLE_12:=0 AP_MODE_13:=ap AP_SECMODE_13:=None AP_SECFILE_13:=PSK WPS_ENABLE_13:=0 AP_MODE_14:=ap AP_SECMODE_14:=None AP_SECFILE_14:=PSK WPS_ENABLE_14:=0 AP_MODE_15:=ap AP_SECMODE_15:=None AP_SECFILE_15:=PSK WPS_ENABLE_15:=0 AP_MODE_16:=ap AP_SECMODE_16:=None AP_SECFILE_16:=PSK WPS_ENABLE_16:=0 ATH_countrycode:=276 AP_G_BAND_TPSCALE:=0 AP_A_BAND_TPSCALE:=0 WSC_MANUFACTURER:=NTGR WSC_MODEL_NAME:=WNDR4700 WSC_MODEL_NUMBER:=n WSC_SERIAL_NUMBER:=20e52a68dd87 WSC_UPNP_AD_PERIOD:=1800 WSC_UPNP_AD_TTL:=4 WSC_CONF_RELOAD_TIME:=3 WSC_AP_PIN_ATTACK_CHECK:=1 WSC_AP_PIN_ATTACK_NUM:=3 WSC_AP_PIN_HISTORY_FAILURES:=0 WSC_UUID_MAC:=20:e5:2a:68:dd:87 WSC_CONFIGURED:=1 WSC_AP_SETUP_LOCKED:=0 WSC_AP_AUTO_LOCKED:=0 WSC_NAME:=WNDR4700(Wireless AP) AP_ANYSSID_HACK:=1 AP_WPA:=2 AP_CYPHER:=CCMP PSK_KEY:=youngcomet870 WPA_IS_HEX:=0 AP_WPA_GROUP_REKEY:=86400 AP_HIDE_SSID:=0 AP_RTS:=2347 AP_FRAG:=2346 AP_WMM:=1 AP_SHPREAMBLE:=1 AP_COUNTRY_IE:=0 BINTVAL:=100 DTIM:=2 WSC_PIN:=20117047 AP_DOTH:=0 AP_DISABLECOEXT:=0 WSC_CONFIGURED_2:=1 WSC_AP_SETUP_LOCKED_2:=0 WSC_AP_AUTO_LOCKED_2:=0 WSC_NAME_2:=WNDR4700(Wireless AP) AP_ANYSSID_HACK_2:=1 AP_WPA_2:=2 AP_CYPHER_2:=CCMP PSK_KEY_2:=youngcomet870 WPA_IS_HEX_2:=0 AP_WPA_GROUP_REKEY_2:=86400 AP_HIDE_SSID_2:=0 AP_RTS_2:=2347 AP_FRAG_2:=2346 AP_WMM_2:=1 AP_SHPREAMBLE_2:=1 AP_COUNTRY_IE_2:=0 BINTVAL_2:=100 DTIM_2:=2 WSC_PIN_2:=20117047 AP_DISABLECOEXT_2:=1 WPS_LED_BEHAVIOR:=1 WIRED_STRING_HACK:=1 DEBUGMODE:=0 LED_CUSTOM:=8 IGMP_ENABLE_ORNOT:=0 CUR_APNAME:=ath1 Configur ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1 ation file: /etc/wpa2/WSC_ath0.conf br0: port 2(ath0) entering disabled state DEVICE IS DOWN ifname=ath0 Co DEVICE IS DOWN ifname=ath0 uld not connect to kernel driver. Using interface ath0 with hwaddr 20:e5:2a:68:dd:87 and ssid 'NETGEAR96' random: Only 19/20 bytes of strong random data available from /dev/random random: Not enough entropy pool available for secure operations WPA: Not enough entropy in random pool for secure operations - update keys later when the first station connects br0: port 2(ath0) entering forwarding state Configu ieee80211_ioctl_siwmode: imr.ifm_active=852608, new mode=3, valid=1 ration file: /etc/wpa2/WSC_ath1.conf br0: port 3(ath1) entering disabled state DEVICE IS DOWN ifname=ath1 Co DEVICE IS DOWN ifname=ath1 uld not connect to kernel driver. Using interface ath1 with hwaddr 20:e5:2a:68:dd:89 and ssid 'NETGEAR96-5G' random: Cannot read from /dev/random: Resource temporarily unavailable random: Only 19/20 bytes of strong random data available from /dev/random random: Not enough entropy pool available for secure operations WPA: Not enough entropy in random pool for secure operations - update keys later when the first station connects br0: port 3(ath1) entering forwarding state Ignore turn off WPS LED in apup $Shutting down igmpproxy: killall: igmpproxy: no process killed Sorry, rule does not exist. Sorry, rule does not exist. killall: igmpproxy: no process killed Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! traffic_meter start : . killall: igmpproxy: no process killed GPL NetUSB up! kc 90 : run_telnetDBGDServer start kc 227 : init_DebugD end INFO177E: NetUSB 1.02.25, 00020620 : Nov 6 2012 16:37:41 INFO1780: AUTH ISOC INFO1781: MOVE_HEAD filterAudio usbcore: registered new interface driver KC NetUSB General Driver INFO0AA0: --- checkSBusTimeoutThread start --- INFO0110: init proc : PAGE_SIZE 65536 INFO1652: infomap d84b640c INFO1655: sleep to wait br0 to wake up INFO02D0: use dev Name br0 INFO165E: sleep to wait br0 end. INFO1677: UDP_BROAD 7423 tcpPort:625868800 INFO02D0: use dev Name br0 INFO155E: tcpConnector() started... killall: check_HDD_capacity: no process killed The region number is: 0x0002 REGION: WW Generating RSA private key, 1024 bit long modulus Generating selfsigned certificate with subject 'C=DE;ST=Saxony;L=Leipzig;CN=OpenWrt;' and validity 2013-08-08 13:05:48-2015-08-08 13:05:48 /etc/rc.common: /etc/rc.common: 83: detplc: not found Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! Boot up procedure is Finished!!!

Specific Configuration

OEM Configuration

Interfaces

[WNDR4700]# ifconfig ath0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1263 errors:0 dropped:57738 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:503937 (492.1 KiB) ath1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 inet6 addr: fe80::22e5:2aff:fe68:dd89/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:57732 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet addr:10.0.0.1 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140422 errors:0 dropped:0 overruns:0 frame:0 TX packets:108580 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:33533139 (31.9 MiB) TX bytes:61246727 (58.4 MiB) eth0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:274732 errors:0 dropped:0 overruns:0 frame:0 TX packets:199712 errors:346 dropped:0 overruns:346 carrier:0 collisions:692 txqueuelen:1000 RX bytes:95284038 (90.8 MiB) TX bytes:88059466 (83.9 MiB) Interrupt:50 eth0.1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:88 inet addr:192.168.1.102 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd88/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:134303 errors:0 dropped:0 overruns:0 frame:0 TX packets:91123 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:57341369 (54.6 MiB) TX bytes:26377505 (25.1 MiB) eth0.2 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140426 errors:0 dropped:0 overruns:0 frame:0 TX packets:108584 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:34095621 (32.5 MiB) TX bytes:61681471 (58.8 MiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:299700 errors:0 dropped:0 overruns:0 frame:0 TX packets:299700 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:11856396 (11.3 MiB) TX bytes:11856396 (11.3 MiB) wifi0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:172604 errors:0 dropped:0 overruns:0 frame:0 TX packets:465033 errors:507 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:19 Memory:d6640000-d6660000 wifi1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:191 errors:0 dropped:0 overruns:0 frame:0 TX packets:461893 errors:191 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:20 Memory:d66c0000-d66e0000

Wireless

[WNDR4700]# iwconfig lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. ath0 IEEE 802.11ng ESSID:"NETGEAR96" Mode:Master Frequency:2.462 GHz Access Point: 20:E5:2A:68:DD:87 Bit Rate:216.7 Mb/s Tx-Power:17 dBm RTS thr=2347 B Fragment thr:off Encryption key:1013-6C54-1265-3495-67D5-24EB-A359-A504 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:28 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0 ath1 IEEE 802.11na ESSID:"NETGEAR96-5G" Mode:Master Frequency:5.22 GHz Access Point: 20:E5:2A:68:DD:89 Bit Rate:450 Mb/s Tx-Power:19 dBm RTS thr=2347 B Fragment thr:off Encryption key:25DE-884C-9D4B-F95E-9FA7-74A5-5933-10C0 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0

VLAN

[WNDR4700]# cat /proc/net/vlan/config VLAN Dev name | VLAN ID Name-Type: VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD eth0.1 | 1 | eth0 eth0.2 | 2 | eth0

Test and Performance

Note: All benchmarks and test were carried out on the original firmware. The results would be much better in the current branch of OpenWrt.

Benchmark: OpenSSL v0.9.8p

Note: OpenSSL v0.9.8p from SDK

OpenSSL Version MD5 SHA-1 SHA-256 SHA-512 DES 3DES AES-128 AES-192 AES-256 RSA Sign RSA Verify DSA Sign DSA Verify
0.9.8p 87764520 23929930 18292650 10642240 10366780 3586110 18779740 16537780 14734770 10.9 408.0 41.2 33.9

Benchmark: Cpubench v0.6

Note: Source code here.

[WNDR4700]# ./cpubench This is CPU and memory benchmark for OpenWRT v0.6. This will then take some time... (typically 30-60 seconds on a 200MHz computer) Overhead for getting time: 1us Time to run memory bench: 1.65[secs] Time to run computation of pi (2400 digits, 10 times): 4.16[secs] Time to run computation of e (9009 digits): 5.10[secs] Time to run float bench: 0.02[secs] Total time: 10.9s You can copy/paste the following line in the wiki table at: http://wiki.openwrt.org/HardwarePerformance || 2013-08-27 || ''Author'' || 1.6s || 4.2s || 5.1s || 0.0s || v0.6 || ''OS'' || ''DeviceModel'' || ''CPU model'' || ''CPU Frequency'' || ''LinkToHwPage'' ||

Note: Tests were performed on non-optimized software and built by hand, using only the sole and conclusive construction environment what is available at the moment. Manufacturer's SDK using the native libraries-definitely not reflect actual achievements and possibilities of this equipment.

Test: Internal HDD - NASTester 1.4

Note: The test was carried out on WD RED 2TB WD20EFRX and Windows 7 x64 on protocol samba.

Test HDD ext2:

Test HDD ext4:

Test HDD ntfs:

Note: NTFS is much better than ext2 and ext4 because Netgear probably added something.

Test: USB 3.0 - NASTester 1.4

Note: The test was carried out on pendrive Patriot Supersonic 32GB USB 3.0 and Windows 7 x64 on protocol samba:

Test USB 3.0 ext2:

[WNDR4700]# hdparm -t /dev/sdb1
/dev/sdb1:
 Timing buffered disk reads:  280 MB in  3.00 seconds = 93.27 MB/sec

Test USB 3.0 ext4:

[WNDR4700]# hdparm -t /dev/sdb1
/dev/sdb1:
 Timing buffered disk reads:  260 MB in  3.00 seconds = 86.54 MB/sec

Test USB 3.0 fat32:

Test USB 3.0 ntfs:

Hardware

Info

Architecture: RISC PowerPC
Vendor: Applied Micro
Bootloader: U-Boot
System-On-Chip: APM82181 (RISC)
CPU/Speed 1000 MHz
Flash-Chip: Hynix H27U1G8F2BTR
Flash size: 128 MiB NAND
RAM-Chip: Nanya NT5TU64M16GG-AC x 2
RAM: 256 MiB
Wireless: Atheros AR9381 2.4GHz 802.11bgn Atheros AR9380 5GHz 802.11an
RegDomain: US ? US ?
Ethernet: Atheros AR8327N Gigabit Switch
USB: Yes 2 x 3.0
SD Card: Yes
Serial: Yes
JTAG: Yes

Button

Reset WPS WiFi Backup
Kamikaze _ _ _ _

Note: ————————

Photos look

Photo of front of the casing

Photo of back of the casing

Opening the case

Note: This will void your warranty!

  • Description in brief …

Main PCB

imag0812.jpg

Photo of PCB

Telnet

Telnet: /proc/bus/usb/devices

[WNDR4700]# cat /proc/bus/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 2.06
S:  Manufacturer=Linux 2.6.32.11-wndr4700 dwc_otg_hcd
S:  Product=DWC OTG Controller
S:  SerialNumber=dwc_otg.0
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480 MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=05e3 ProdID=0723 Rev=94.54
S:  Manufacturer=Generic
S:  Product=USB Storage
C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=??  MxCh= 4
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 3.00 Cls=09(hub  ) Sub=00 Prot=03 MxPS= 9 #Cfgs=  1
P:  Vendor=1d6b ProdID=0003 Rev= 2.06
S:  Manufacturer=Linux 2.6.32.11-wndr4700 xhci_hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=0000:45:00.0
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=12ms

Telnet: /proc/bus/pci/devices

[WNDR4700]# cat /proc/bus/pci/devices
4000    aaa0bed0        25                     0                       0                       0                       0                       0                       0                       0                   0                0                       0                       0                       0                       0                       0        pcieport
4100    111d803a        0                      0                       0                       0                       0                       0                       0                       0                   0                0                       0                       0                       0                       0                       0        pcieport
4210    111d803a        26                     0                       0                       0                       0                       0                       0                       0                   0                0                       0                       0                       0                       0                       0        pcieport
4218    111d803a        27                     0                       0                       0                       0                       0                       0                       0                   0                0                       0                       0                       0                       0                       0        pcieport
4220    111d803a        28                     0                       0                       0                       0                       0                       0                       0                   0                0                       0                       0                       0                       0                       0        pcieport
4300    168c0030        13             e00000004                       0                       0                       0                       0                       0               e00300000               20000                0                       0                       0                       0                       0                   10000        ath_pci
4400    168c0033        14             e00100004                       0                       0                       0                       0                       0               e00400000               20000                0                       0                       0                       0                       0                   10000        ath_pci
4500    19120015        34             e00200004                       0                       0                       0                       0                       0                       0                2000                0                       0                       0                       0                       0                       0        xhci_hcd

Telnet: mount

[WNDR4700]# cat /proc/mounts
rootfs / rootfs rw 0 0
/dev/root / squashfs ro,relatime 0 0
none /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /tmp tmpfs rw,nosuid,nodev,relatime 0 0
tmpfs /dev tmpfs rw,relatime,size=128k 0 0
none /proc/bus/usb usbfs rw,relatime 0 0

U-boot starting

Auto calibration ---

U-Boot 2009.08 (Jul 03 2012 - 13:04:31)

CPU:   AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz)
       Security support
       Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND
       32 kB I-Cache 32 kB D-Cache
DNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4
Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTG
I2C:   ready
DRAM:  256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3)
NAND:  128 MiB
*** Warning - bad CRC, using default environment

Configure Max Payload 256B
PCIE0: successfully set as root-complex
        03  00  168c  0030  0280  ff
        02  02  111d  803a  0604  00
        04  00  168c  0033  0280  ff
        02  03  111d  803a  0604  00
        05  00  1912  0015  0c03  00
        02  04  111d  803a  0604  00
        01  00  111d  803a  0604  00
 131072 bytes read: OK
Net:   ppc_4xx_eth0
AR8327 GigaSW initialize...done
ENET Speed is 1000 Mbps - FULL duplex connection (EMAC0)

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Type run flash_nfs to mount root filesystem over NFS

Hit any key to stop autoboot:  0

U-boot menu

=> help
?       - alias for 'help'
askenv  - get environment variables from stdin
autoscr - DEPRECATED - use "source" command instead
base    - print or set address offset
bdinfo  - print Board Info structure
board_hw_id_set- Set board_hw_id
board_hw_id_show- Show board_hw_id
board_model_id_set- Set board_model_id
board_model_id_show- Show board_model_id
board_parameters_set- Set WPS PIN code, Serial number, SSID, Passphrase, MAC address
board_passphrase_set- Set passphrase on board
board_passphrase_show- Show board_passphrase
board_ssid_set- Set ssid on board
board_ssid_show- Show board_ssid
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
chip_config- program the I2C bootstrap EEPROM
chk_dniimg- chk_dniimg - check integrity of dni firmware image.

cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
cpuclk  - cpuclk - change cpu clock frequency

crc32   - checksum calculation
dcache  - enable or disable data cache
dhcp    - boot image via network using DHCP/TFTP protocol
echo    - echo args to console
eeprom  - EEPROM sub-system
exit    - exit script
ext2load- load binary file from a Ext2 filesystem
ext2ls  - list files in a directory (default /)
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
fdt     - flattened device tree utility commands
fw_recovery- fw_recovery - start tftp server to recovery dni firmware image.

getdcr  - Get an AMCC PPC 4xx DCR's value
getidcr - Get a register value via indirect DCR addressing
go      - start application at address 'addr'
help    - print online help
i2c     - I2C sub-system
icache  - enable or disable instruction cache
iminfo  - print header information for application image
imxtract- extract a part of a multi-image
interrupts- enable or disable interrupts
irqinfo - print information about IRQs
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loadn_dniimg- loadn_dniimg  - load dni firmware image from NAND.

loads   - load S-Record file over serial line
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
loopw   - infinite write loop on address range
macset  - Set ethernet MAC address
macshow - Show ethernet MAC addresses
md      - memory display
mdc     - memory display cyclic
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mtest   - simple RAM read/write test
mw      - memory write (fill)
mwc     - memory write cyclic
nand    - NAND sub-system
nboot   - boot from NAND device
ndfc    - ndfc - enable|disable NDFC

nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reginfo - print register information
reset   - Perform RESET of the CPU
rnset   - set region number
rnshow  - Show Region Number on Board
run     - run commands in an environment variable
sata    - SATA sub system
saveenv - save environment variables to persistent storage
sdram_config- sdram_config - Configure SDRAM as 32-bit or 16-bit

setdcr  - Set an AMCC PPC 4xx DCR's value
setenv  - set environment variables
setidcr - Set a register value via indirect DCR addressing
showvar - print local hushshell variables
sleep   - delay execution for some time
snset   - Set serial number
source  - run script from memory
test    - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
version - print monitor version
wmacset - Set wlan MAC address
wpspinset- Set wpspin number

U-boot: printenv

=> printenv
bootcmd=if loadn_dniimg 0 0x180000 0x4e0000 && chk_dniimg 0x4e0000; then nand read 0x800000 0x180000 0x20000;bootm 0x500000 - 0x800040;else fw_recovery; fi
bootdelay=2
baudrate=115200
loads_echo=
preboot=echo;echo Type "run flash_nfs" to mount root filesystem over NFS;echo
hostname=wndr4700
netdev=eth0
nfsargs=setenv bootargs root=/dev/nfs rw nfsroot=${serverip}:${rootpath}
ramargs=setenv bootargs root=/dev/ram ramdisk_size=${ramdisk_size} rw
addip=setenv bootargs ${bootargs} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}:${netdev}:off panic=1
addtty=setenv bootargs ${bootargs} console=ttyS0,${baudrate}
addmisc=setenv bootargs ${bootargs}
initrd_high=30000000
kernel_addr_r=400000
fdt_addr_r=800000
ramdisk_size=200000
rootpath=/opt/eldk/ppc_4xx
flash_self=run ramargs addip addtty addmisc;bootm ${kernel_addr} ${ramdisk_addr} ${fdt_addr}
flash_nfs=run nfsargs addip addtty addmisc;bootm ${kernel_addr} - ${fdt_addr}
net_nfs=tftp ${kernel_addr_r} ${bootfile}; tftp ${fdt_addr_r} ${fdt_file}; run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
fdt_file=wndr4700/wndr4700.dtb
load=tftp 200000 wndr4700/wndr4700_u-boot.bin
update=protect off 0x01000000 FFFFFFFF;era 0x01000000 FFFFFFFF;cp.b ${fileaddr} 0x01000000 ${filesize};setenv filesize;saveenv
upd=run load update
nload=tftp 200000 wndr4700/wndr4700_u-boot-nand.bin
nupdate=nand erase 0 100000;nand write 200000 0 100000;setenv filesize;saveenv
nupd=run nload nupdate
kernel_addr=fc000000
fdt_addr=fc1e0000
ramdisk_addr=fc200000
pciconfighost=1
pcie_mode=RP:RP
boardtype=pcie
usr_dir=wndr4700
set_images=setenv bootfile ${usr_dir}/wndr4700_uImage.bin;setenv fdt_file ${usr_dir}/wndr4700.dtb;setenv mtd_file ${usr_dir}/wndr4700_rootfs.jffs2;setenv udiag_file ${usr_dir}/wndr4700/uDiag_wndr4700.img
sata_controller=sata1
bootfile=wndr4700/wndr4700_uImage.bin
mtd_addr_r=0x4000000
mtd_file=wndr4700/wndr4700_rootfs.jffs2
udiag_file=wndr4700/uDiag_wndr4700.img
kernel_size=0x400000
fdt_size=0x25000
ramdisk_file_size=0x1000000
ramdisk_addr_r=0x2000000
nupd1=tftp ${kernel_addr_r} ${bootfile};nand erase clean 0x1700000 0xE00000;nand write.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size}
nupd2=tftp ${fdt_addr_r} ${fdt_file};nand erase clean 0x2500000 0xb00000;nand write.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size}
nupd3=echo Clean up some memory...Please wait for a momen\t;mw.b ${mtd_addr_r} 0xff 0x3400000;tftp ${mtd_addr_r} ${mtd_file};nand erase clean 0x4000000 0x3400000;nand write.jffs2 ${mtd_addr_r} 0x4000000 ${filesize}
nupd4=tftp ${ramdisk_addr_r} ${ramdisk_file};nand erase clean 0x3000000 0x1000000;nand write.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size}
nupdu=tftp 200000 ${udiag_file};nand erase clean 0x7500000 0xB00000;nand write.jffs2 200000 0x7500000 0x200000
mtd_args=setenv bootargs root=/dev/mtdblock6 rw rootfstype=jffs2
mtd_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run mtd_args addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
nfs_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
net_self=tftp ${kernel_addr_r} ${bootfile};tftp ${fdt_addr_r} ${fdt_file};tftp ${ramdisk_addr_r} ${ramdisk_file};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}
nand_self=nand read.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size};nand read.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size};nand read.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}
env_clear=nand erase 0x40000 0x40000
udiag=nand read 0x100000 0x7500000 0x200000; go 102100
ipaddr=192.168.1.1
serverip=192.168.1.7
bootcmd1=nand readimg 400000 0x120000;nand read 800000 0x100000 0x20000;bootm 400000 - 800040
bootcmd0=nand read 400000 0x120000 0x300000;nand read 800000 0x100000 0x20000;bootm 400000 - 800000
stdin=serial
stdout=serial
stderr=serial
ethaddr=20:e5:2a:68:dd:87

ethact=ppc_4xx_eth0
ver=U-Boot 2009.08 (Jul 03 2012 - 13:04:31)

Environment size: 4135/131067 bytes

U-Boot: nand

help nand
nand - NAND sub-system

Usage:
nand info - show available NAND devices
nand device [dev] - show or set current device
nand readimg - addr off
    read a image starting at offset 'off'
    to memory address 'addr', skipping bad blocks.
nand read - addr off|partition size
nand write - addr off|partition size
    read/write 'size' bytes starting at offset 'off'
    to/from memory address 'addr', skipping bad blocks.
nand erase [clean] [off size] - erase 'size' bytes from
    offset 'off' (entire device if not specified)
nand bad - show bad blocks
nand dump[.oob] off - dump page
nand scrub - really clean NAND erasing bad blocks (UNSAFE)
nand markbad off [...] - mark bad block(s) at offset (UNSAFE)
nand biterr off - make a bit error at offset (UNSAFE)

U-boot: sata

=> help sata
sata - SATA sub system

Usage:
sata sata init - init SATA sub system
sata info - show available SATA devices
sata device [dev] - show or set current device
sata part [dev] - print partition table
sata read addr blk# cnt
sata write addr blk# cnt

Note: With high probability it is possible to boot up using the picture firmware via SATA, here is a description of how to do it

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device: Pins are in place GND, TX, RX, VCC

Photo of PCB with markings

imag0813.jpg

3ev3.jpg

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

Notes

Telnet (original firmware)

Many Netgear routers have telnet support built-in, but gaining access to it requires an extra step of sending a specially formatted payload to the telnet daemon before it will allow users to log in. Netgear provides the executable called telnetenable.exe for doing just this. It is only available for the "other OS". However, people not employed by Netgear wrote two alternative Programs that do run under Unix. One is written in C and is under the GPLv2 and the other written in Python and is under the MIT License.

Flashing tftp method

Resources

  1. OEM source code and toolchain: ftp://downloads.netgear.com/files/GPL/

Tags

Back to top

toh/netgear/wndr4700.txt · Last modified: 2014/10/09 13:52 by theoradicus