Differences

This shows you the differences between two versions of the page.

toh:tp-link:tl-wdr4900 [2013/03/17 23:30]
tioan
toh:tp-link:tl-wdr4900 [2014/04/04 18:43] (current)
mostly
Line 1: Line 1:
======TP-Link TL-WDR4900====== ======TP-Link TL-WDR4900======
-Dual Band (concurrent) and Gigabit Ethernet. +{{:media:toh:tp-link:tl-wdr4900.jpg?400|TP-Link TL-WDR4900 V2.x}}
-Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4Ghz and 5 Ghz Bands.+
-**There are two very different revisions:**+Dual Band (concurrent) and Gigabit Ethernet. Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4GHz and 5 GHz Bands.
-V1.0 World-wide: 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), 800Mhz Freescale PPC CPU+**<color red>There are two very different revisions</color>**
-V2.0 China: 6 external antennas, 720Mhz Qualcomm/Atheros SoC+  * V1.x: target: ''mpcC85xx'' 800Mhz Freescale PPC P1014 CPU 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), available world-wide  
 +  * V2.x: target: ''ar71xx'' 720Mhz Qualcomm/Atheros SoC and 6 external antennas, available in PRC only
-Qualcomm SoC QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz +Manufacturer's website:  
-Atheros AR9580-AR1A w/ 3x3 MIMO for 5Ghz +  * [[http://www.tp-link.com/en/products/details/?model=TL-WDR4900]] (V1.x) 
-Atheros AR8327N-AL1A switch with "900Mbps+" hardware NAT + * [[http://www.tp-link.com.cn/product_double_292.html]] (V2.x) 
-8M Flash + 
-128M RAM+  * Price: AliExpress - [[http://www.aliexpress.com/item/-/997429375.html|about 100 USD]] 
 + 
 + * Forum https://forum.openwrt.org/viewtopic.php?id=42062
===== Supported Versions ===== ===== Supported Versions =====
^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1.0 | - | 2013 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips | +| v1.0 world-wide | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz) | 
-| v2.0 | - | 2013 | ??? | ap135 - should be supportable  |+| v1.3 world-wide | - | 2013 | trunk | http://downloads.openwrt.org/snapshots/trunk/mpc85xx/ 
 +| v2.0 PRC only  | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/39637|r39637]] | 6 external antennas, available in PRC only. http://downloads.openwrt.org/snapshots/trunk/ar71xx/ |
===== Hardware ===== ===== Hardware =====
 +==== Info ====
 +
 +^  ^ Version 1.x ^ Versions 2.x ^
 +| **[[wp>Instruction set|Instruction set]]:**  |  [[wp>PowerPC]]  |  [[wp>MIPS architecture|MIPS]]  |
 +| **Vendor:**                                  | [[wp>Freescale Semiconductor]]        | [[wp>Qualcomm Atheros]]  |
 +| **[[doc:techref:Bootloader]]:**              | [[doc:techref:bootloader:uboot|U-Boot]] 2010.12-svn15934 for PowerPC  | [[doc:techref:bootloader:uboot|U-Boot]] ? fork of mainline U-Boot version 1.1.4 (2005-12-17) for MIPS ? |
 +| **[[doc:hardware:soc|System-On-Chip]]:**    | [[wp>PowerQUICC#PowerQUICC_III|Freescale MPC85xx]]      | QCA9558-AT4A  |
 +| **[[doc:hardware:cpu|CPU]]/Speed**          | PPC P1014@800MHz | MIPS 74Kc Vers. 5.0 720 MHz  |
 +| **Flash-Chip:**                              | [[http://www.spansion.com/Support/Datasheets/S25FL128S_256S_00.pdf|S25FL128S]] | Winbond [[http://www.nexflash.com/NR/rdonlyres/05A6F2FD-83D2-4748-8394-65909AC2A8E3/0/W25Q64FV.pdf|W25Q64FVSIG]] |
 +| **Flash size:**                              | 16384 KiB  | 8192 KiB  |
 +| **RAM-Chip:**                                | [[http://www.skhynix.com/inc/pdfDownload.jsp?path=/datasheet/pdf/graphics/H5TQ1G63DFR(Rev1.1).pdf|H5TQ1G63DFR]] | [[http://www.skhynix.com/products/consumer/view.jsp?info.ramKind=03&info.serialNo=H5PS5162GFR|H5PS5162GFR]] |
 +| **RAM size:**                                | 128 MiB | 128 MiB  |
 +| **Wireless1:**                              | Chip: AR9381-AL1A w/ 3x3 MIMO for 2.4GHz  | SoC: QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz          |
 +| **Wireless2:**                              | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz    | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz |
 +| **[[doc:techref:swconfig|Switch]]:**        | AR8327N-AL1A                              | AR8327N-BL1A  |
 +| **USB:**                                    | 2 (USB 2.0)    | 2 (USB 2.0) |
 +| **[[doc:hardware:port.serial|Serial]]:**    | [[#Serial|Yes]] | [[#Serial|Yes]] |
 +| **[[doc:hardware:port.jtag|JTAG]]:**        | Yes  | [[#JTAG|Yes]] |
==== Photos ==== ==== Photos ====
-{{:media:tplinkwdr4900v1serial.jpg|}}+=== Version 1.x === 
 + 
 +{{:media:toh:tp-link:tl-wdr4900:v1serial.jpg?400|wdr4900v1 serial}} 
 + 
 +{{:media:toh:tp-link:tl-wdr4900:v1bottom.jpg?400|wdr4900v1 bottom}} 
 + 
 +=== Version 2.0 === 
 + 
 +{{:media:toh:tp-link:tl-wdr4900:v2serial.jpg?400|wdr4900v2 serial}} 
 + 
 +===== Serial console ===== 
 + 
 +Serial console is available on the JP2 (v1.x) or J1 (v2.0) connector - see PCB photos above. 
 + 
 +**DO NOT CONNECT VCC**. Use only TX/RX/GND. 
 + 
 +Baud Rate: 115200\\ 
 +Data Bits: 8\\ 
 +Parity: No\\ 
 +Stop Bits: 1\\ 
 + 
 +Factory firmware login credentials: //(v1.x only)//\\ 
 + * username: root\\ 
 + * password: 5up 
 + 
 +''Note:'' be extremely careful when soldering a serial console on TP-Link TL-WDR4900 - the design of the PCB is not well suited for soldering and important paths/connections are near the soldering points. We have now 3 Routers which are dead, just because we used too much solder... 
 + 
 +===== Installation ===== 
 + 
 +OpenWRT may be installed [[doc/howto/generic.flashing#method.1via.oem.firmware|via OEM firmware]] on both versions. 
 + 
 +v1: [[http://downloads.openwrt.org/snapshots/trunk/mpc85xx/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin|openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin]] 
 + 
 +v2: [[http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin|openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin]] 
 +  * If you do not speak chinese and are not familiar with the standard TP-Link firmware, please see the screen shots below for help. 
 + 
 +After installation you will want to proceed with [[http://wiki.openwrt.org/doc/howto/firstlogin|first login]], [[http://wiki.openwrt.org/doc/howto/basic.config|basic configuration]]. You may also wish to install the web user interface [[doc/howto/luci.essentials|LuCI]], after which you can manage your router at http://192.168.1.1 
 + 
 +=== Helpful Screenshots for installing from Chinese stock firmware === 
 + 
 +{{:media:toh:tp-link:stock-fw-upgrade-step1.jpg?500|Upgrading from Stock Firwmare - Step 1}} 
 + 
 +{{:media:toh:tp-link:stock-fw-upgrade-step2.jpg?250|Upgrading from Stock Firwmare - Step 2}} 
 + 
 +==== VLAN ==== 
 +To get tagged and untagged traffic working on the same port a patch for the switch driver is needed. Refer to: https://dev.openwrt.org/ticket/12181#comment:73 
 + 
 +===== De-brick or OEM installation ===== 
 + 
 +==== Using TFTP + Serial method ==== 
 + 
 +=== Pre-requisites === 
 + 
 +  * a serial connection (e.g. TTL, RS232) from your machine to the router. 
 +  * a terminal program (e.g. minicom, screen) set for 115200 Baud, 8 data bits, no parity, 1 stop bit, no flow control. 
 +    * It is **strongly recommended** not to connect the 3.3V (or any) voltage line - use the router's own power supply instead. 
 +  * a __factory__ OpenWrt firmware image into your TFTP server folder (see [[#installation|Installation]] above) 
 +  * a wired ethernet connection from your computer to one of the router's LAN ports. 
 +    * IP address on this connection should be statically set to 192.168.1.x/24. 
 +  * a TFTP server started on your local machine 
 +    * must be listening on the same link/IP address as the wired ethernet connection to the router 
 +    * v1.x models prefer the server address 192.168.1.66, v2.0 prefers 192.168.1.100 
 + 
 +=== v1.x Flash Write Procedure === 
 + 
 +**<color red>This section applies to v1.x only!</color>** ([[#v2.0.flash.write.procedure|version 2.0 method]]) 
 +  - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running. 
 +  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''openwrt.bin'' (to save some typing within the flash procedure). 
 +  - First goal is to get the command prompt from the U-Boot bootloader on your router. 
 +  - Plug in your router and be ready to type "''vl''" just after you see the line ''Autobooting in 1 seconds'' (Spamming "''vl''" around this point helps): 
 + 
 +<code> 
 +U-Boot 2010.12-svn15934 (Dec 11 2012 - 16:23:49) 
 + 
 +CPU:  P1014, Version: 1.0, (0x80f10110) 
 +Core:  E500, Version: 5.1, (0x80212151) 
 +Clock Configuration: 
 +      CPU0:800  MHz,  
 +      CCB:400  MHz, 
 +      DDR:333.333 MHz (666.667 MT/s data rate) (Asynchronous), IFC:100  MHz 
 +L1:    D-cache 32 kB enabled 
 +      I-cache 32 kB enabled 
 +Board: P1014RDB  
 +SPI:  ready 
 +DRAM:  128 MiB 
 +L2:    256 KB enabled 
 +Using default environment 
 + 
 +PCIe1: Root Complex of mini PCIe Slot, x1, regs @ 0xffe0a000 
 +  01:00.0    - 168c:abcd - Network controller 
 +PCIe1: Bus 00 - 01 
 +PCIe2: Root Complex of PCIe Slot, x1, regs @ 0xffe09000 
 +  03:00.0    - 168c:0033 - Network controller 
 +PCIe2: Bus 02 - 03 
 +In:    serial 
 +Out:  serial 
 +Err:  serial 
 +Net:  initialization for Atheros AR8327/AR8328 
 +AR8327/AR8328 v1.1 is found! 
 +eTSEC1 
 +Autobooting in 1 seconds 
 +</code> 
 + 
 +In case you failed the right timing just reboot again until the prompt appears 
 +<code>=></code> 
 + 
 +  - (//optional//) Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address). 
 +  Type ''tftpboot'' & press ENTER … 
 +<code> 
 +=> tftpboot 
 +Check for phy link status 
 +Speed: 1000, full duplex 
 +Using eTSEC1 device 
 +TFTP from server 192.168.0.104; our IP address is 192.168.0.136 
 +Filename 'uImage'. 
 +Load address: 0x1000000 
 +Loading: T T T T T T T T T T  
 +Retry count exceeded; starting again 
 +</code> 
 + 
 +  - As you can see, uboot expects a firmware image file name "''uImage''" at TFTP server address ''192.168.1.104'', 
 +  then, just change you local ip into ''192.168.1.104'' and start your TFTP server. 
 +  - Start the uBoot's TFTP client to download the image from your local machine by typing: ''tftpboot 0x1000000 openwrt.bin'' + ENTER 
 + 
 +<code> 
 +=> tftpboot 0x1000000 openwrt.bin 
 +Check for phy link status 
 +Speed: 1000, full duplex 
 +Using eTSEC1 device 
 +TFTP from server 192.168.0.104; our IP address is 192.168.0.136 
 +Filename 'openwrt.bin'. 
 +Load address: 0x1000000 
 +Loading: ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ################################################################# 
 +        ### 
 +done 
 +Bytes transferred = 16252928 (f80000 hex) 
 +</code> 
 + 
 +  - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable. 
 +  - To select the SPI flash memory type: sf probe 0 
 +<code> 
 +=> sf probe 0 
 +SF: Detected S25FL128S_65k with page size 256, total 16 MiB 
 +16384 KiB S25FL128S_64K at 0:0 is now current device 
 +</code> 
 +  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it, 
 +    just type in the prompt ''sf erase 0x60000 0xf80000'': 
 +<code> 
 +=> sf erase 0x60000 0xf80000 
 +SPI flash erase successful 
 +</code> 
 + 
 +  - Now just copy the image to the right place by typing ''sf write 0x1000000 0x60000 0xf80000'' 
 +<code> 
 +=> sf write 0x1000000 0x60000 0xf80000 
 +SPI flash write successful 
 +</code> 
 + 
 +  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk. 
 +    Type ''reset'' or just un-plug and re-plug the power of your router and watch the boot process. 
 +<code> 
 +=> reset 
 +</code> 
 + 
 +=== v2.0 Flash Write Procedure === 
 + 
 +**<color red>This section applies to v2.0 only!</color>** ([[#v1.x.flash.write.procedure|version 1.x method]]) 
 +  - Be sure the router is powered off (there's a handy power switch beside the power line). 
 +  - Connect your serial and ethernet cables to your computer. 
 +  - Open your terminal for the serial connection. 
 +  - Power on the router 
 +  - When you see ''Autobooting in 1 seconds'', quickly type "''tpl''" to access the command line. 
 +    * there is no harm at all typing "''tpl''" repeatedly from the moment you power on, I often start when I see the U-Boot bootloader header. ;-) 
 +  - Start the TFTP server running on your computer. 
 +  - At the ''ap135>'' prompt, type the following commands: 
 +    - ''tftpboot 0x81000000 openwrt.bin'' (where openwrt.bin is the name of your firmware image) 
 +    - ''erase 0x9f020000 +0x7c0000'' 
 +    - ''cp.b 0x81000000 0x9f020000 0x7c0000'' 
 +    - ''bootm 0x9f020000'' 
 +  - Congratulations! 
 + 
 +==== Reset Button Method (no serial cable needed) ==== 
 + 
 +If you want to de-brick/upgrade your router using TFTP without a serial cable follow these steps: 
 + 
 +=== Pre-requisites === 
 + 
 +  * Copy a working & full OpenWrt sysupgrade image into your TFTP server folder (e.g: http://downloads.openwrt.org/snapshots/trunk/mpc85xx/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-sysupgrade.bin) so it will be found under the path /wdr4900v1_tp_recovery.bin You can also use the image used for reverting to stock firmware if you prefer to do so, but it has to be placed under the same path. 
 +  * A TFTP server started on your local machine on LAN address 192.168.0.66/24. 
 +  * Connect your LAN-port to one of the routers LAN  
 + 
 +=== Procedure === 
 + 
 +  - Router should be unplugged (power off) and TFTP server installed not yet running. 
 +  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''wdr4900v1_tp_recovery.bin'' (as the router will search for this file). 
 +  - Make sure your card has address 192.168.0.66. 
 +  - Start the tftp server and make sure it is listening on 192.168.0.66  
 +  - Plug in your router and keep the WPS/Reset button pressed until the tftp server confirms the transfer is done 
 +  - Wait for the router to reboot, the new image will then be loaded 
 + 
 +===== Failsafe / reset ===== 
 +After all else failed, I found [[http://www.binaryfriend.ru/2012/10/how-to-hard-reset-openwrt-on-tp-link-1043nd]].  Extremely simple.  Please see the original page for more info.  Summary: 
 + 
 +  - Power the router up; 
 +  - After powering up track the SYS light when it starts to blink, when it does press and hold the QSS button till SYS lights starts to blink faster – router goes to recovery mode; 
 +  - Telnet to the router on 192.168.1.1 – no password needed (if your computer doesn’t gets IP address from DHCP assign it manually for i.e. 192.168.1.200 with netmask of 255.255.255.0); 
 +  - In telnet terminal type `mtd -r erase rootfs_data` to reset OpenWRT to it’s defaults. 
 + 
 +===== Reverting to stock firmware ===== 
 + 
 +You can revert to stock firmware by following these steps: 
 + 
 +  * Download / copy with SCP or wget this firmware to the /tmp folder of the router: [[ftp://everbest.ftpserver.biz/Share/TP-Link/TL-WDR4900%20Firmware/wdr4900nv1_en_3_14_1_up(130304)_beta.bin]] 
 +  * Open a SSH session to the router, cd to /tmp 
 +  * Execute the following command: mtd -r write wdr4900nv1_en_3_14_1_up(130304)_beta.bin firmware 
 +  * Wait until the router reboots
-{{:media:tplinkwdr4900v1.jpg|}}+Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also  
 +more bytes than this one. 
 +{{tag>GigabitEthernet internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k detachableantenna 6ant 3ant 128ram 802.11abgn_simultan 2WNIC, soc.freescale.mpc}}

Back to top

toh/tp-link/tl-wdr4900.1363559446.txt.bz2 · Last modified: 2013/03/17 23:30 by tioan