User Tools

Site Tools


toh:netgear:wpn824v1

NETGEAR WPN824v1

No OpenWrt support: Insufficient RAM + Flash.

This is a 802.11b/g router similar to Netgear's v2, v3, and WPN824N, which in turn are similar to WNR612 V2, WNR1000 V2 and WNR2000 V3

NETGEAR Open Source Code for Programmers (GPL)

Forum thread

Versions

Version/Model Launchdate S/N OpenWrt Version Supported Model Specific Notes
1
2
3

Hardware Highlights

These devices are listed in the Table of Hardware:

HW Version CPU Ram Flash Network Wireless USB Serial JTag Wiki FCC
1 Atheros AR2313A 16MB 2MB 1x WAN 4x LAN AR2313A [bg] none Yes Yes here here
2 Atheros AR2316A 16MB 2MB 1x WAN 4x LAN AR2316A [bg] none Yes Yes here here
3 Atheros AR2316A 16MB 2MB 1x WAN 4x LAN AR2316A [bg] none Yes Yes here here

Installation

  1. obtain.firmware and Latest OpenWrt Release - Currently work in progress to get it into Trunk and possibly backport to Chaos Calmer 15.05.
  2. generic.flashing Now write this firmware-file onto the flash-chip of your device

The trunk, code named Designated Driver, contains bleeding edge source code for OpenWrt.

The development branch contains everything from documentation to experimental patches! Bleeding edge OpenWrt supports additional hardware; however, it's considered unstable, and sometimes won't compile.
  • Download Factory image if you want to install OpenWrt on router with OEM firmware.
  • Download Upgrade image if you already have OpenWrt installed.

Downloads for WPN824v1

Branch Type Download link
Stable (Chaos Calmer) Factory To be done
Upgrade To be done
Trunk (Designated Driver) Factory To be done
Upgrade To be done

Flash Layout

Please read the article Flash.Layout for a better understanding. It contains a couple of explanations. Then let's have a quick view at flash layout of this particular device:

Netgear WPN824v1 Flash Layout stock firmware
Layer0 m25p80 spi0.0: s25l032p 4096KiB
Layer1 mtd0 u-boot 256KiB mtd1 u-boot-env 64KiB mtd2 rootfs 3392KiB mtd3 config 64KiB mtd4 language_table 128KiB mtd5 pot 64KiB mtd6 art 64KiB
Layer2 64B mtd7 mount_fs 3392KiB
mountpoint none none none / none none none
filesystem none none none squashfs none none none
Netgear WPN824v1 Flash Layout
Layer0 m25p80 spi0.0: s25l032p 4096KiB
Layer1 mtd0 u-boot 256KiB mtd1 u-boot-env 64KiB mtd2 firmware 3712KiB mtd3 art 64KiB
Layer2 mtd4 kernel dynamic size mtd5 rootfs dynamic size
mountpoint /
filesystem overlayfs
Layer3 dynamic size mtd6 rootfs_data remaining space
mountpoint none none none /rom /overlay none
filesystem none none SquashFS JFFS2 none

ART = Atheros Radio Test - it contains mac addresses and calibration data for the wifi (EEPROM). If it is missing or corrupt, ath9k won't come up anymore.

Firmware flashing

Flashing / Recovery using tftp only (without serial console)

If your device doesn't even boot (e.g. due to a bad flash), and only the two left LEDs are flashing, your Router is in TFTP Server Firmware Recovery mode. It is listening on port 69 at IP address 192.168.1.1 for firmware image. Follow this guide to push a new image.

Flashing / Recovery using the serial console

You can connect to the routers serial console. Inside the bootloader, you can choose to transfer the firmware via TFTP or the serial line (Y-modem or Kermit mode).

Requirements:

  • terminal program set to 115200 8N1, no flow control
  • the new firmware.bin file.

To enter the boot prompt:

Press any key when you see the line:

Hit any key to stop autoboot:  2  1  0

1) Commands when using tftp (lan) for firmware transfer

Warning!Untested! You are on your own, so be very careful.

Setup your TFTP server and put your firmware file as firmware.bin. In U-Boot configure IP addresses of your client (the router) and the TFTP server using setenv (printenv helps to find the appropriate variables).

tftpboot 0x80000000 firmware.bin
erase 0x9f050000 +3a0000 # 3a0000: maximum size of the firmware
cp.b 0x80000000 0x9f050000 0x3a0000 # 3a0000: you can use the actual firmware file size instead
bootm 0x9f050000

2) Commands when using Kermit (serial console) for firmware transfer

Warning!Untested! You are on your own, so be very careful.

It may be quicker and easier to transfer the firmware image via serial line (about 8 minutes) than setting up a TFTP server.

loadb 0x80000000
Now use your prefered program to send the firmware file using the Kermit protocol (Minicom is a terminal program with all kinds of transfer modes built in). After successful transfer, erase the appropriate flash area and copy the firmware to flash memory:
erase 0x9f050000 +3a0000 # 3a0000: maximum size of the firmware
cp.b 0x80000000 0x9f050000 0x3a0000 # 3a0000: you can use the actual firmware file size instead
bootm 0x9f050000

Upgrading OpenWrt

Back to original firmware

Basic configuration

After flashing, proceed with Basic configuration.
Set up your Internet connection, configure wireless, etc.

Specific configuration

Interfaces

The OpenWrt default configuration of the network interfaces is as follows:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
eth1 LAN ports (1 to 4) none
wlan0 WiFi disabled
eth0 WAN port DHCP

Switch Ports (for VLANs)

Port Switch port
eth1 4
LAN 1 3
LAN 2 2
LAN 3 1
LAN 4 0

Failsafe mode

See OpenWrt Failsafe Mode for general information.

  • Power up your router. When the 'POWER' LED starts to blink, press the WPS push button repeatedly until the blinking of 'POWER' LED gets faster. Done = You made OpenWrt boot into OpenWrt failsafe mode. Proceed with In OpenWrt Failsafe Mode

FIXME Does this work?

Hardware

Info

Type HW ver. 1
Instruction set: MIPS32
Vendor: Qualcomm Atheros
Bootloader: U-Boot 1.1.4
System-On-Chip: ¿AR2313A
CPU/Frq ¿24Kc V7.4 360 MHz
Target name
Flash-Chip: ¿Spansion FL031PIF
Flash size: 2048 KiB
RAM: 16 MiB
Wireless: Atheros AR2313A 2.4 GHz 802.11bg
Wireless Power: FIXME
802.11b/g: ¿1 x 1 : 1
Switch: ¿AR7240 internal switch
swconfig: yes
USB: no
Power: 12V DC 1A
Serial: Yes
JTAG: Yes

Performance

Power

Power Consumption

PSU (power supply)

Specifications:

WPN824v1
Brand/Model NETGEAR/¿
Input 100-120V~ (50/60Hz, 0.5A)
Output 12V 1A

Power consumption on DC-Side

Photos

Photos of v1 PCB:

FIXME # netgear_wpn824v1_board_top.jpg FIXME # netgear_wpn824v1_board_bot.jpg

Content from WikiDevi, contributed there by user M86 (Talk | contribs) under Creative Commons Attribution Share Alike unless otherwise noted.

Opening/closing the case

6x Torx (T-8) screws. Four of which are under the rubber feet.

Putting it back together

FIXME

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to Serial Port:

The device uses TTL @ 3.3V. Bits per second: 115200
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None

FIXME Pinout (with picture?)

JTAG

port.JTAG general information about the JTAG port, JTAG cable, etc. FIXME JTAG available? - Yes, see at the bottom of this page.

GPIOs

port.GPIO The AR7240 provides 18 GPIOs. Some of them are used by the router for status LEDs and buttons. The table below shows the results of some investigation:

Voltage level at GPIO in output-mode gpioX/value in input-mode when GPIO is:
GPIO Common Name PCB Name gpioX/value=1 gpioX/value=0 Floating Pulled to GND Pulled to Vcc
0 WAN AMBER D4
1 STATUS AMBER D1
2
3
4
5
6 LAN1 AMBER
7 LAN2 AMBER
8 LAN3 AMBER
9
10 WPS button SW4
11
12 LAN4 Amber D8
13 LAN1 GREEN
14 LAN2 GREEN
15 LAN3 GREEN
16 LAN4 GREEN
17 WAN GREEN

To make the GPIOs available via sysfs, the required ones have to be exported to userspace, as it is explained on a page of the Squidge-Project. Kernel modules occupying that resource need to be removed before (e.g. "leds-gpio" and "gpio-buttons"). In output-mode, voltage levels of the GPIOs were measured against GND, after the value 1 or 0 had been written to /sys/class/gpio/gpioX/value. In input-mode, the value of the file /sys/class/gpio/gpioX/value was read when the GPIO was floating (initial state), pulled to GND or pulled to Vcc.

Additionally, the AR9285 wifi chip provides 12 GPIOs, some of them are connected to LEDs and buttons.

Voltage level at GPIO in output-mode gpioX/value in input-mode when GPIO is:
GPIO Common Name PCB Name gpioX/value=1 gpioX/value=0 Floating Pulled to GND Pulled to Vcc
0 POWER GREEN D1
1 WLAN BLUE D3
2
3
4
5 WPS1 BLUE D2
6 button?
7 RESET button SW1
8 WLAN button WSLS SW3
9 WPS2 BLUE D12
10 TEST AMBER D13
11

There is not yet a GPIO driver available for the AR9285, only the LEDs are currently usable.

LEDs

How to configure LEDs in general, see the LED section in the system.

The WPN824v1 has got 11 LEDs:

LED name LED print Internal name Trigger
Power PWR netgear:green:power heartbeat?
Status STATUS netgear:amber:status N/A
Test TEST netgear:amber:test N/A
Wireless LAN WLAN netgear:blue:wlan netdev:phy0tpt
Wide Area Network WAN negear:amber:wan netdev:eth0
LAN Port 1 LAN 1 unknown N/A
LAN Port 2 LAN 2 unknown N/A
LAN Port 3 LAN 3 unknown N/A
LAN Port 4 LAN 4 unknown N/A
Wireless Protection Setup 1 WPS 1 netgear:blue:wps1 N/A
Wireless Protection Setup 2 WPS 2 netgear:blue:wps2 N/A

Buttons

hardware.button.

The WPN824v1 has two buttons:

BUTTON Event ID
RESET N/A N/A
WLAN N/A N/A

Debricking

Bootloader Mods

  1. you could read about bootloader in general and about Das U-Boot/Configuration of U-Boot in particular.
  2. also see ftp://ftp.denx.de/pub/u-boot/ and compare the versions.
  3. you may be able to cross compile the code with the OpenWrt toolchain Buildroot. See build for guidance. But you may need to use other toolchain to crosscompile, like the ELDK (Embedded Linux Development Kit).

Hardware Mods

As a beginner, you really should inform yourself about soldering in general and then even obtain some experience!

Bootlogs

OEM bootlog

TBD


OpenWrt bootlog

TBD


Notes

From OldWiki:

Serial port is JP1, pinout as follows:

      1
      o o - VCC
 RX - o o
      o o
      o o
 TX - o o
GND - o o
      JP1

Description of serial port on WPN824

WPN824v2

Specs

Hardware (opening enclosure):

  • 2MB serial Flash by macronix, typ MX25L1605 or MX25L1605A (Marconix)
  • Marvell Commercial Grade 88E6060 - 6-Port Fast Ethernet Switch (Marvell)
  • 16-BIT Transparent D-type Latch 74LVCH16373A (via Digichip)
  • SAMSUNG K4S281632I-UC75 16Mo RAM
  • cpu is covered

Information from telnet session

OS: [[oldwiki:vxworks|VxWorks]] (for Netgear WPN824v2) version VxWorks5.4.2.

Kernel: WIND version 2.5. Made on Oct  2 2006, 19:10:19.

wlan: Atheros Access Point Rev 4.0.0.167 AP software 4.0.0.167

wlan0 -> get hardware

wlan0 revisions: mac 11.0 phy 4.8 analog 7.0

  * PCI Vendor ID: 0x168c, Device ID: 0x13
  * Sub Vendor ID: 0x168c, Sub Device ID: 0x13
chip is AR5315

WPN824v3

Specs

Probably the same as v2 but haven't looked.

Information from telnet session

/ # cat /proc/cpuinfo
system type             : Atheros AR531X_COBRA
processor               : 0
cpu model               : unknown V6.4
BogoMIPS                : 183.50
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available

/ # cat /proc/version
Linux version 2.4.27 (root@linux-server) (gcc version 3.3.3) #2 Thu Nov 1 17:33:11 CST 2007

/ # cat proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  14753792 10797056  3956736        0  1110016  4182016
Swap:        0        0        0
MemTotal:        14408 kB
MemFree:          3864 kB
MemShared:           0 kB
Buffers:          1084 kB
Cached:           4084 kB
SwapCached:          0 kB
Active:           3696 kB
Inactive:         2652 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        14408 kB
LowFree:          3864 kB
SwapTotal:           0 kB
SwapFree:            0 kB

/ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 0001f800 00010000 "RedBoot"
mtd1: 00000400 00010000 "FIS directory"
mtd2: 00000400 00010000 "RedBoot config"
mtd3: 00070000 00010000 "vmlinux.bin.gz"
mtd4: 00150000 00010000 "rootfs"
mtd5: 00010000 00010000 "user_config"

Tags

toh/netgear/wpn824v1.txt · Last modified: 2017/02/26 12:19 by Jalakas