User Tools

Site Tools


toh:tp-link:tl-wdr4900

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
toh:tp-link:tl-wdr4900 [2013/05/17 13:10]
conxuro Added de-brick/OEM install procedure
toh:tp-link:tl-wdr4900 [2014/12/11 23:46] (current)
googol-1 [Supported Versions]
Line 1: Line 1:
 ======TP-Link TL-WDR4900====== ======TP-Link TL-WDR4900======
-Dual Band (concurrent) and Gigabit Ethernet. +{{:​media:​toh:​tp-link:​tl-wdr4900.jpg?​400|TP-Link TL-WDR4900 V2.x}}
-Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4Ghz and 5 Ghz Bands.+
  
-**There are two very different revisions:​**+Dual Band (concurrent) and Gigabit Ethernet. Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4GHz and 5 GHz Bands.
  
-V1.0 World-wide: 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), 800Mhz Freescale PPC CPU+**<color red>​There are two very different revisions</​color>​**
  
-V2.0 Chinaexternal antennas, 720Mhz Qualcomm/​Atheros SoC+  * V1.xtarget: ''​mpcC85xx''​ 800Mhz Freescale PPC P1014 CPU 3 internal antennas (2.4Ghz) and 3 external antennas ​(5Ghz)available world-wide  
 +  * V2.x: target: ''​ar71xx'' ​720Mhz Qualcomm/​Atheros SoC and 6 external antennas, available in PRC only
  
-Qualcomm SoC QCA9558-AT4A w3x3 MIMO for 2.4Ghz +Manufacturer'​s website:  
-Atheros AR9580-AR1A w3x3 MIMO for 5Ghz +  * [[http://​www.tp-link.com/en/​products/​details/?​model=TL-WDR4900]] (V1.x) 
-Atheros AR8327N-AL1A switch with "​900Mbps+"​ hardware NAT +  * [[http://​www.tp-link.com.cn/product_double_292.html]] (V2.x) 
-8M Flash + 
-128M RAM+  * Price: AliExpress ​[[http://​www.aliexpress.com/​item/​-/​997429375.html|about 100 USD]] 
 + 
 +  * Forum https://​forum.openwrt.org/​viewtopic.php?​id=42062 
 + 
 +As of May 2014, TP-Link appear to be discontinuing the TL-WDR4900 in Great Britain.
  
 ===== Supported Versions ===== ===== Supported Versions =====
 ^ Version/​Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/​Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1.0 | - | 2013 | trunk [[https://​dev.openwrt.org/​changeset/​36051|r36051]]  ​| Freescale PPC w/2 Atheros radio chips | +| v1.0 world-wide ​| - | 2013-01-22 ​Barrier Breaker 14.07 | Freescale PPC w/2 Atheros radio chips 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz) ​
-| v1.3 | - | 2013 | trunk | http://​downloads.openwrt.org/​snapshots/trunk/​mpc85xx/ ​ +| v1.3 world-wide ​| - | 2013 | Barrier Breaker 14.07 | http://​downloads.openwrt.org/​barrier_breaker/14.07/mpc85xx/generic/ ​
-| v2.0 | - | 2013 | ??? ap135 - should be supportable  ​|+| v2.0 PRC only   | - | 2013-01-22 ​Barrier Breaker 14.07 6 external antennas, available in PRC only. https://​downloads.openwrt.org/​barrier_breaker/​14.07/​ar71xx/​generic/ ​| 
 + 
 +Note that BB 14.07 comes without Luci (the Web GUI) preinstalled.
  
 ===== Hardware ===== ===== Hardware =====
 +==== Info ====
 +
 +^  ^ Version 1.x ^ Versions 2.x ^
 +| **[[wp>​Instruction set|Instruction set]]:​** ​ |  [[wp>​PowerPC]] ​ |  [[wp>​MIPS architecture|MIPS]] ​ |
 +| **Vendor:​** ​                                 | [[wp>​Freescale Semiconductor]] ​       | [[wp>​Qualcomm Atheros]] ​ |
 +| **[[doc:​techref:​Bootloader]]:​** ​             | [[doc:​techref:​bootloader:​uboot|U-Boot]] 2010.12-svn15934 for PowerPC ​ | [[doc:​techref:​bootloader:​uboot|U-Boot]] ? fork of mainline U-Boot version 1.1.4 (2005-12-17) for MIPS ? |
 +| **[[doc:​hardware:​soc|System-On-Chip]]:​** ​    | [[wp>​PowerQUICC#​PowerQUICC_III|Freescale MPC85xx]] ​     | QCA9558-AT4A ​ |
 +| **[[doc:​hardware:​cpu|CPU]]/​Speed** ​          | PPC P1014@800MHz | MIPS 74Kc Vers. 5.0 720 MHz  |
 +| **Flash-Chip:​** ​                             | [[http://​www.spansion.com/​Support/​Datasheets/​S25FL128S_256S_00.pdf|S25FL128S]] | Winbond [[http://​www.nexflash.com/​NR/​rdonlyres/​05A6F2FD-83D2-4748-8394-65909AC2A8E3/​0/​W25Q64FV.pdf|W25Q64FVSIG]] | 
 +| **Flash size:​** ​                             | 16384 KiB  | 8192 KiB  |
 +| **RAM-Chip:​** ​                               | [[http://​www.skhynix.com/​inc/​pdfDownload.jsp?​path=/​datasheet/​pdf/​graphics/​H5TQ1G63DFR(Rev1.1).pdf|H5TQ1G63DFR]] | [[http://​www.skhynix.com/​products/​consumer/​view.jsp?​info.ramKind=03&​info.serialNo=H5PS5162GFR|H5PS5162GFR]] |
 +| **RAM size:​** ​                               | 128 MiB | 128 MiB   |
 +| **Wireless1:​** ​                              | Chip: AR9381-AL1A w/ 3x3 MIMO for 2.4GHz ​ | SoC: QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz ​          |
 +| **Wireless2:​** ​                              | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz    | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz |
 +| **[[doc:​techref:​swconfig|Switch]]:​** ​        | AR8327N-AL1A ​                             | AR8327N-BL1A ​ |
 +| **USB:​** ​                                    | 2 (USB 2.0)    | 2 (USB 2.0) |
 +| **[[doc:​hardware:​port.serial|Serial]]:​** ​    | [[#​Serial|Yes]] | [[#​Serial|Yes]] |
 +| **[[doc:​hardware:​port.jtag|JTAG]]:​** ​        | Yes  | [[#​JTAG|Yes]] |
  
 ==== Photos ==== ==== Photos ====
  
-{{:​media:​tplinkwdr4900v1serial.jpg|}}+=== Version 1.x ===
  
-{{:media:tplinkwdr4900v1.jpg|}}+{{:media:toh:​tp-link:​tl-wdr4900:​v1serial.jpg?400|wdr4900v1 serial}}
  
 +{{:​media:​toh:​tp-link:​tl-wdr4900:​v1bottom.jpg?​400|wdr4900v1 bottom}}
  
-===== De-brick or OEM installation using the TFTP and RS232 (serial) method =====+=== Version 2.0 ===
  
-If you want to de-brick/​upgrade your router using TFTP you follow these steps:+{{:​media:​toh:​tp-link:​tl-wdr4900:v2serial.jpg?​400|wdr4900v2 serial}}
  
 +===== Serial console =====
  
-==== Pre-requisits ====+Serial console is available on the JP2 (v1.x) or J1 (v2.0) connector ​see PCB photos above.
  
-  ​Serial RS232 connected from your machine to TL-WDR4900 & a terminal program (e.g. minicom, screen) set to **115200 8N1**, no flow control, 3,3V. +**DO NOT CONNECT VCC**. Use only TX/RX/GND.
-  * Copy a working & full OpenWrt firmware image into your TFTP server folder (e.g: openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin). +
-  * A TFTP server started on your local machine on LAN address 192.168.1.x/24. +
-  * Connect your LAN-port to one of the routers LAN ports.+
  
 +Baud Rate: 115200\\
 +Data Bits: 8\\
 +Parity: No\\
 +Stop Bits: 1\\
  
-==== Written Flash Procedure ====+Factory firmware login credentials:​ //(v1.x only)//\\ 
 + * username: root\\ 
 + * password: 5up
  
 +''​Note:''​ be extremely careful when soldering a serial console on TP-Link TL-WDR4900 - the design of the PCB is not well suited for soldering and important paths/​connections are near the soldering points. We have now 3 Routers which are dead, just because we used too much solder...
 +
 +===== Installation =====
 +
 +OpenWRT may be installed [[doc/​howto/​generic.flashing#​method.1via.oem.firmware|via OEM firmware]] on both versions.
 +
 +v1: [[http://​downloads.openwrt.org/​barrier_breaker/​14.07/​mpc85xx/​generic/​openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin|openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin ]]
 +
 +v2: [[https://​downloads.openwrt.org/​barrier_breaker/​14.07/​ar71xx/​generic/​openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin|openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin]]
 +  * If you do not speak chinese and are not familiar with the standard TP-Link firmware, please see the screen shots below for help.
 +
 +After installation you will want to proceed with [[http://​wiki.openwrt.org/​doc/​howto/​firstlogin|first login]], [[http://​wiki.openwrt.org/​doc/​howto/​basic.config|basic configuration]]. You may also wish to install the web user interface [[doc/​howto/​luci.essentials|LuCI]],​ after which you can manage your router at http://​192.168.1.1
 +
 +=== Helpful Screenshots for installing from Chinese stock firmware ===
 +
 +{{:​media:​toh:​tp-link:​stock-fw-upgrade-step1.jpg?​500|Upgrading from Stock Firwmare - Step 1}}
 +
 +{{:​media:​toh:​tp-link:​stock-fw-upgrade-step2.jpg?​250|Upgrading from Stock Firwmare - Step 2}}
 +
 +==== VLAN ====
 +To get tagged and untagged traffic working on the same port a patch for the switch driver is needed. Refer to: https://​dev.openwrt.org/​ticket/​12181#​comment:​73
 +
 +===== De-brick or OEM installation =====
 +
 +==== Using TFTP + Serial method ====
 +
 +=== Pre-requisites ===
 +
 +  * a serial connection (e.g. TTL, RS232) from your machine to the router.
 +  * a terminal program (e.g. minicom, screen) set for 115200 Baud, 8 data bits, no parity, 1 stop bit, no flow control.
 +    * It is **strongly recommended** not to connect the 3.3V (or any) voltage line - use the router'​s own power supply instead.
 +  * a __factory__ OpenWrt firmware image into your TFTP server folder (see [[#​installation|Installation]] above)
 +  * a wired ethernet connection from your computer to one of the router'​s LAN ports.
 +    * IP address on this connection should be statically set to 192.168.1.x/​24.
 +  * a TFTP server started on your local machine
 +    * must be listening on the same link/IP address as the wired ethernet connection to the router
 +    * v1.x models prefer the server address 192.168.0.66,​ v2.0 prefers 192.168.1.100
 +
 +=== v1.x Flash Write Procedure ===
 +
 +**<color red>This section applies to v1.x only!</​color>​** ([[#​v2.0.flash.write.procedure|version 2.0 method]])
   - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.   - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.
   - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''​openwrt.bin''​ (to save some typing within the flash procedure).   - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''​openwrt.bin''​ (to save some typing within the flash procedure).
   - First goal is to get the command prompt from the U-Boot bootloader on your router.   - First goal is to get the command prompt from the U-Boot bootloader on your router.
-  - Plug in your router and be ready to type "''​vl''"​ just after you see the line ''​Autobooting in 1 seconds'':​+  - Plug in your router and be ready to type "''​vl''"​ just after you see the line ''​Autobooting in 1 seconds'' ​(Spamming "''​vl''"​ around this point helps):
  
 <​code>​ <​code>​
Line 85: Line 155:
 <​code>​=></​code>​ <​code>​=></​code>​
  
-  - Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).+  - (//​optional//​) ​Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).
   Type ''​tftpboot''​ & press ENTER …   Type ''​tftpboot''​ & press ENTER …
 <​code>​ <​code>​
Line 132: Line 202:
 Bytes transferred = 16252928 (f80000 hex) Bytes transferred = 16252928 (f80000 hex)
 </​code>​ </​code>​
- 
-// UNCOMPLETE // 
  
   - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.   - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.
-  - Now we need to erase parts of the flash memory ​to be able to copy your fresh loaded firmware into it; +  - To select ​the SPI flash memory typesf probe 0
-    just type in the prompt ''​sf erase 0xXXXXXXXX +f80000 and wait for the prompt to come back. +
 <​code>​ <​code>​
-=> sf erase 0xXXXXXXXX +7c0000 +=> sf probe 0 
-[...]+SF: Detected S25FL128S_65k with page size 256, total 16 MiB 
 +16384 KiB S25FL128S_64K at 0:0 is now current device 
 +</​code>​ 
 +  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it, 
 +    just type in the prompt ''​sf erase 0x60000 0xf80000'':​ 
 +<​code>​ 
 +=> sf erase 0x60000 0xf80000 
 +SPI flash erase successful
 </​code>​ </​code>​
  
-  - Now just copy the image to the right place by typing ''​sf write 0x1000000 ​0xXXXXXXXX ​0xf80000''​ +  - Now just copy the image to the right place by typing ''​sf write 0x1000000 ​0x60000 ​0xf80000''​
 <​code>​ <​code>​
-=> sf write 0x1000000 ​0xXXXXXXXX ​0xf80000 +=> sf write 0x1000000 ​0x60000 ​0xf80000 
-[...]+SPI flash write successful
 </​code>​ </​code>​
  
-  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk+  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk.
     Type ''​reset''​ or just un-plug and re-plug the power of your router and watch the boot process.     Type ''​reset''​ or just un-plug and re-plug the power of your router and watch the boot process.
- 
 <​code>​ <​code>​
 => reset => reset
 </​code>​ </​code>​
  
 +=== v2.0 Flash Write Procedure ===
  
 +**<color red>This section applies to v2.0 only!</​color>​** ([[#​v1.x.flash.write.procedure|version 1.x method]])
 +  - Be sure the router is powered off (there'​s a handy power switch beside the power line).
 +  - Connect your serial and ethernet cables to your computer.
 +  - Open your terminal for the serial connection.
 +  - Power on the router
 +  - When you see ''​Autobooting in 1 seconds'',​ quickly type "''​tpl''"​ to access the command line.
 +    * there is no harm at all typing "''​tpl''"​ repeatedly from the moment you power on, I often start when I see the U-Boot bootloader header. ;-)
 +  - Start the TFTP server running on your computer.
 +  - At the ''​ap135>''​ prompt, type the following commands:
 +    - ''​tftpboot 0x81000000 openwrt.bin''​ (where openwrt.bin is the name of your firmware image)
 +    - ''​erase 0x9f020000 +0x7c0000''​
 +    - ''​cp.b 0x81000000 0x9f020000 0x7c0000''​
 +    - ''​bootm 0x9f020000''​
 +  - Congratulations!
 +
 +==== Reset Button Method (no serial cable needed) ====
 +
 +If you want to de-brick/​upgrade your router using TFTP without a serial cable follow these steps:
 +
 +=== Pre-requisites ===
 +
 +  * Copy a working & full OpenWrt sysupgrade image into your TFTP server folder (e.g: https://​downloads.openwrt.org/​barrier_breaker/​14.07/​mpc85xx/​generic/​openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-sysupgrade.bin) so it will be found under the path /​wdr4900v1_tp_recovery.bin You can also use the image used for reverting to stock firmware if you prefer to do so, but it has to be placed under the same path.
 +  * A TFTP server started on your local machine on LAN address 192.168.0.66/​24.
 +  * Connect your LAN-port to one of the routers LAN 
 +
 +=== Procedure ===
 +
 +  - Router should be unplugged (power off) and TFTP server installed not yet running.
 +  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''​wdr4900v1_tp_recovery.bin''​ (as the router will search for this file).
 +  - Make sure your card has address 192.168.0.66.
 +  - Start the tftp server and make sure it is listening on 192.168.0.66 ​
 +  - Plug in your router and keep the WPS/Reset button pressed until the tftp server confirms the transfer is done
 +  - Wait for the router to reboot, the new image will then be loaded
 +  - A pack ready for doing this, containing TFTPD32 server and the latest TP-Link firmware, can be found here: https://​forum.openwrt.org/​viewtopic.php?​pid=236428#​p236428
 +  - Also there'​s a video of the process: http://​www.youtube.com/​watch?​v=54PAS0gvW2k
 +===== Failsafe / reset =====
 +After all else failed, I found [[http://​www.binaryfriend.ru/​2012/​10/​how-to-hard-reset-openwrt-on-tp-link-1043nd]]. ​ Extremely simple. ​ Please see the original page for more info.  Summary:
 +
 +  - Power the router up;
 +  - After powering up track the SYS light when it starts to blink, when it does press and hold the QSS button till SYS lights starts to blink faster – router goes to recovery mode;
 +  - Telnet to the router on 192.168.1.1 – no password needed (if your computer doesn’t gets IP address from DHCP assign it manually for i.e. 192.168.1.200 with netmask of 255.255.255.0);​
 +  - In telnet terminal type `mtd -r erase rootfs_data` to reset OpenWRT to it’s defaults.
  
 ===== Reverting to stock firmware ===== ===== Reverting to stock firmware =====
Line 164: Line 278:
 You can revert to stock firmware by following these steps: You can revert to stock firmware by following these steps:
  
-  * Download / copy with SCP or wget this firmware to the /tmp folder of the router: [[ftp://everbest.ftpserver.biz/Share/TP-Link/TL-WDR4900%20Firmware/​wdr4900nv1_en_3_14_1_up(130304)_beta.bin]]+  * Download / copy with SCP this firmware to the /tmp folder of the router: [[https://www.dropbox.com/sh/g8dyafqrato12pc/AADtSjx_MVot7asdqeRtvVVza?​dl=0]] 
 +  * Optionally check MD5 hash: 1148EFD09C6D9B07E6A01259A4EBEF72 
 +  * Rename to firmware.bin (less chance for spelling errors and unsupported characters)
   * Open a SSH session to the router, cd to /tmp   * Open a SSH session to the router, cd to /tmp
-  * Execute the following command: mtd -r write wdr4900nv1_en_3_14_1_up(130304)_beta.bin firmware+  * Execute the following command: mtd -r firmware.bin firmware
   * Wait until the router reboots   * Wait until the router reboots
  
 Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also  Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also 
 more bytes than this one. more bytes than this one.
-{{tag>​internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k atheros ​detachableantenna 3ant 128ram 802.11abgn_simultan ​gigabitethernet 2radio wip bootloader tftpd}}+{{tag>GigabitEthernet ​internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k detachableantenna ​6ant 3ant 128ram 802.11abgn_simultan ​2WNIC, soc.freescale.mpc}} 
 + 
 +===== Specific Configuration ===== 
 +==== Switch Ports (for VLANs) ==== WDR4900 v1? 
 + 
 +Numbers 2-5 are Ethernet Ports 1-4 as labeled on the unit, number 1 is "​Internet"​ (WAN) on the unit, 0 is the internal connection to the router itself. 
 +^ Port ^ Switch port ^ 
 +| CPU   | 0 | 
 +| WAN   | 1 | 
 +| LAN 1 | 2 | 
 +| LAN 2 | 3 | 
 +| LAN 3 | 4 | 
 +| LAN 4 | 5 | 
 +| (not used ?) | 6 | 
 + 
 +==== Switch Ports (for VLANs) ==== WDR4900 v2 
 + 
 +Numbers 2-5 are Ethernet Ports 1-4 as labeled on the unit, number 1 is "​Internet"​ (WAN) on the unit, 6 is the internal connection to the router itself, and 0 is another CPU, because this router has two. 
 + 
 +^ Port ^ Switch port ^ 
 +| Second CPU | 0 | 
 +| WAN   | 1 | 
 +| LAN 1 | 2 | 
 +| LAN 2 | 3 |           
 +| LAN 3 | 4 | 
 +| LAN 4 | 5 | 
 +| CPU   | 6 | 
 + 
 + 
 +==== Luci WDR4900v2 (Example Vlans tag for Movistar FTTH Spain) 
 + 
 + 
 + 
 +{{:​media:​tplink_wdr4900v2_switch_vlan_tagg.jpg?​900}} 
 + 
 + 
 +==== Port Mirroring ==== 
 +Hardware port mirroring is supported in v1/(v2?) FIXME 
 + 
 +Here's an example of configuring port mirroring in /​etc/​config/​network for mirroring port 1 to port 5 
 +(You may need to restart the router for port mirroring changes to take effect): 
 +<​code>​ 
 + 
 +config switch 
 + option name '​switch0'​ 
 + option reset '​1'​ 
 + option enable_vlan '​1'​ 
 + option enable_mirror_rx '​1'​ 
 + option enable_mirror_tx '​1'​ 
 + option mirror_source_port '​1'​ 
 + option mirror_monitor_port '​5'​ 
 + 
 +</​code>​ 
 + 
 +===== Other Information Resources ===== 
 + 
 +[[https://​forum.openwrt.org/​viewtopic.php?​id=42062&​p=22|OpenWRT Forum Thread "​Developing Support for TPLINK WDR4900"​]] 
 + 
 +[[https://​wikidevi.com/​wiki/​TP-LINK_TL-WDR4900_v1|Hardware Information at wikidevi (v1 International version)]] 
 + 
 +[[https://​wikidevi.com/​wiki/​TP-LINK_TL-WDR4900_v2|Hardware Information at wikidevi (v2 PRC-only version)]]
toh/tp-link/tl-wdr4900.1368789013.txt.bz2 · Last modified: 2013/05/17 13:10 by conxuro