Differences

This shows you the differences between two versions of the page.

toh:tp-link:tl-wdr4900 [2013/05/17 13:10]
conxuro Added de-brick/OEM install procedure
toh:tp-link:tl-wdr4900 [2014/04/04 18:43] (current)
mostly
Line 1: Line 1:
======TP-Link TL-WDR4900====== ======TP-Link TL-WDR4900======
-Dual Band (concurrent) and Gigabit Ethernet. +{{:media:toh:tp-link:tl-wdr4900.jpg?400|TP-Link TL-WDR4900 V2.x}}
-Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4Ghz and 5 Ghz Bands.+
-**There are two very different revisions:**+Dual Band (concurrent) and Gigabit Ethernet. Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4GHz and 5 GHz Bands.
-V1.0 World-wide: 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), 800Mhz Freescale PPC CPU+**<color red>There are two very different revisions</color>**
-V2.0 China: 6 external antennas, 720Mhz Qualcomm/Atheros SoC+  * V1.x: target: ''mpcC85xx'' 800Mhz Freescale PPC P1014 CPU 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), available world-wide  
 +  * V2.x: target: ''ar71xx'' 720Mhz Qualcomm/Atheros SoC and 6 external antennas, available in PRC only
-Qualcomm SoC QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz +Manufacturer's website:  
-Atheros AR9580-AR1A w/ 3x3 MIMO for 5Ghz +  * [[http://www.tp-link.com/en/products/details/?model=TL-WDR4900]] (V1.x) 
-Atheros AR8327N-AL1A switch with "900Mbps+" hardware NAT + * [[http://www.tp-link.com.cn/product_double_292.html]] (V2.x) 
-8M Flash + 
-128M RAM+  * Price: AliExpress - [[http://www.aliexpress.com/item/-/997429375.html|about 100 USD]] 
 + 
 + * Forum https://forum.openwrt.org/viewtopic.php?id=42062
===== Supported Versions ===== ===== Supported Versions =====
^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1.0 | - | 2013 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips | +| v1.0 world-wide | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz)
-| v1.3 | - | 2013 | trunk | http://downloads.openwrt.org/snapshots/trunk/mpc85xx/  | +| v1.3 world-wide | - | 2013 | trunk | http://downloads.openwrt.org/snapshots/trunk/mpc85xx/  | 
-| v2.0 | - | 2013 | ??? | ap135 - should be supportable  |+| v2.0 PRC only  | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/39637|r39637]] | 6 external antennas, available in PRC only. http://downloads.openwrt.org/snapshots/trunk/ar71xx/ |
===== Hardware ===== ===== Hardware =====
 +==== Info ====
 +
 +^  ^ Version 1.x ^ Versions 2.x ^
 +| **[[wp>Instruction set|Instruction set]]:**  |  [[wp>PowerPC]]  |  [[wp>MIPS architecture|MIPS]]  |
 +| **Vendor:**                                  | [[wp>Freescale Semiconductor]]        | [[wp>Qualcomm Atheros]]  |
 +| **[[doc:techref:Bootloader]]:**              | [[doc:techref:bootloader:uboot|U-Boot]] 2010.12-svn15934 for PowerPC  | [[doc:techref:bootloader:uboot|U-Boot]] ? fork of mainline U-Boot version 1.1.4 (2005-12-17) for MIPS ? |
 +| **[[doc:hardware:soc|System-On-Chip]]:**    | [[wp>PowerQUICC#PowerQUICC_III|Freescale MPC85xx]]      | QCA9558-AT4A  |
 +| **[[doc:hardware:cpu|CPU]]/Speed**          | PPC P1014@800MHz | MIPS 74Kc Vers. 5.0 720 MHz  |
 +| **Flash-Chip:**                              | [[http://www.spansion.com/Support/Datasheets/S25FL128S_256S_00.pdf|S25FL128S]] | Winbond [[http://www.nexflash.com/NR/rdonlyres/05A6F2FD-83D2-4748-8394-65909AC2A8E3/0/W25Q64FV.pdf|W25Q64FVSIG]] |
 +| **Flash size:**                              | 16384 KiB  | 8192 KiB  |
 +| **RAM-Chip:**                                | [[http://www.skhynix.com/inc/pdfDownload.jsp?path=/datasheet/pdf/graphics/H5TQ1G63DFR(Rev1.1).pdf|H5TQ1G63DFR]] | [[http://www.skhynix.com/products/consumer/view.jsp?info.ramKind=03&info.serialNo=H5PS5162GFR|H5PS5162GFR]] |
 +| **RAM size:**                                | 128 MiB | 128 MiB  |
 +| **Wireless1:**                              | Chip: AR9381-AL1A w/ 3x3 MIMO for 2.4GHz  | SoC: QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz          |
 +| **Wireless2:**                              | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz    | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz |
 +| **[[doc:techref:swconfig|Switch]]:**        | AR8327N-AL1A                              | AR8327N-BL1A  |
 +| **USB:**                                    | 2 (USB 2.0)    | 2 (USB 2.0) |
 +| **[[doc:hardware:port.serial|Serial]]:**    | [[#Serial|Yes]] | [[#Serial|Yes]] |
 +| **[[doc:hardware:port.jtag|JTAG]]:**        | Yes  | [[#JTAG|Yes]] |
==== Photos ==== ==== Photos ====
-{{:media:tplinkwdr4900v1serial.jpg|}}+=== Version 1.x ===
-{{:media:tplinkwdr4900v1.jpg|}}+{{:media:toh:tp-link:tl-wdr4900:v1serial.jpg?400|wdr4900v1 serial}}
 +{{:media:toh:tp-link:tl-wdr4900:v1bottom.jpg?400|wdr4900v1 bottom}}
-===== De-brick or OEM installation using the TFTP and RS232 (serial) method =====+=== Version 2.0 ===
-If you want to de-brick/upgrade your router using TFTP you follow these steps:+{{:media:toh:tp-link:tl-wdr4900:v2serial.jpg?400|wdr4900v2 serial}}
 +===== Serial console =====
-==== Pre-requisits ====+Serial console is available on the JP2 (v1.x) or J1 (v2.0) connector - see PCB photos above.
-  * Serial RS232 connected from your machine to TL-WDR4900 & a terminal program (e.g. minicom, screen) set to **115200 8N1**, no flow control, 3,3V. +**DO NOT CONNECT VCC**. Use only TX/RX/GND.
-  * Copy a working & full OpenWrt firmware image into your TFTP server folder (e.g: openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin). +
-  * A TFTP server started on your local machine on LAN address 192.168.1.x/24. +
-  * Connect your LAN-port to one of the routers LAN ports.+
 +Baud Rate: 115200\\
 +Data Bits: 8\\
 +Parity: No\\
 +Stop Bits: 1\\
-==== Written Flash Procedure ====+Factory firmware login credentials: //(v1.x only)//\\ 
 + * username: root\\ 
 + * password: 5up
 +''Note:'' be extremely careful when soldering a serial console on TP-Link TL-WDR4900 - the design of the PCB is not well suited for soldering and important paths/connections are near the soldering points. We have now 3 Routers which are dead, just because we used too much solder...
 +
 +===== Installation =====
 +
 +OpenWRT may be installed [[doc/howto/generic.flashing#method.1via.oem.firmware|via OEM firmware]] on both versions.
 +
 +v1: [[http://downloads.openwrt.org/snapshots/trunk/mpc85xx/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin|openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin]]
 +
 +v2: [[http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin|openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin]]
 +  * If you do not speak chinese and are not familiar with the standard TP-Link firmware, please see the screen shots below for help.
 +
 +After installation you will want to proceed with [[http://wiki.openwrt.org/doc/howto/firstlogin|first login]], [[http://wiki.openwrt.org/doc/howto/basic.config|basic configuration]]. You may also wish to install the web user interface [[doc/howto/luci.essentials|LuCI]], after which you can manage your router at http://192.168.1.1
 +
 +=== Helpful Screenshots for installing from Chinese stock firmware ===
 +
 +{{:media:toh:tp-link:stock-fw-upgrade-step1.jpg?500|Upgrading from Stock Firwmare - Step 1}}
 +
 +{{:media:toh:tp-link:stock-fw-upgrade-step2.jpg?250|Upgrading from Stock Firwmare - Step 2}}
 +
 +==== VLAN ====
 +To get tagged and untagged traffic working on the same port a patch for the switch driver is needed. Refer to: https://dev.openwrt.org/ticket/12181#comment:73
 +
 +===== De-brick or OEM installation =====
 +
 +==== Using TFTP + Serial method ====
 +
 +=== Pre-requisites ===
 +
 +  * a serial connection (e.g. TTL, RS232) from your machine to the router.
 +  * a terminal program (e.g. minicom, screen) set for 115200 Baud, 8 data bits, no parity, 1 stop bit, no flow control.
 +    * It is **strongly recommended** not to connect the 3.3V (or any) voltage line - use the router's own power supply instead.
 +  * a __factory__ OpenWrt firmware image into your TFTP server folder (see [[#installation|Installation]] above)
 +  * a wired ethernet connection from your computer to one of the router's LAN ports.
 +    * IP address on this connection should be statically set to 192.168.1.x/24.
 +  * a TFTP server started on your local machine
 +    * must be listening on the same link/IP address as the wired ethernet connection to the router
 +    * v1.x models prefer the server address 192.168.1.66, v2.0 prefers 192.168.1.100
 +
 +=== v1.x Flash Write Procedure ===
 +
 +**<color red>This section applies to v1.x only!</color>** ([[#v2.0.flash.write.procedure|version 2.0 method]])
  - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.   - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.
  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''openwrt.bin'' (to save some typing within the flash procedure).   - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''openwrt.bin'' (to save some typing within the flash procedure).
  - First goal is to get the command prompt from the U-Boot bootloader on your router.   - First goal is to get the command prompt from the U-Boot bootloader on your router.
-  - Plug in your router and be ready to type "''vl''" just after you see the line ''Autobooting in 1 seconds'':+  - Plug in your router and be ready to type "''vl''" just after you see the line ''Autobooting in 1 seconds'' (Spamming "''vl''" around this point helps):
<code> <code>
Line 85: Line 151:
<code>=></code> <code>=></code>
-  - Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).+  - (//optional//) Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).
  Type ''tftpboot'' & press ENTER …   Type ''tftpboot'' & press ENTER …
<code> <code>
Line 132: Line 198:
Bytes transferred = 16252928 (f80000 hex) Bytes transferred = 16252928 (f80000 hex)
</code> </code>
- 
-// UNCOMPLETE // 
  - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.   - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.
-  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it; +  - To select the SPI flash memory type: sf probe 0
-    just type in the prompt ''sf erase 0xXXXXXXXX +f80000 and wait for the prompt to come back. +
<code> <code>
-=> sf erase 0xXXXXXXXX +7c0000 +=> sf probe 0 
-[...]+SF: Detected S25FL128S_65k with page size 256, total 16 MiB 
 +16384 KiB S25FL128S_64K at 0:0 is now current device 
 +</code> 
 +  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it, 
 +   just type in the prompt ''sf erase 0x60000 0xf80000'': 
 +<code> 
 +=> sf erase 0x60000 0xf80000 
 +SPI flash erase successful
</code> </code>
-  - Now just copy the image to the right place by typing ''sf write 0x1000000 0xXXXXXXXX 0xf80000'' +  - Now just copy the image to the right place by typing ''sf write 0x1000000 0x60000 0xf80000''
<code> <code>
-=> sf write 0x1000000 0xXXXXXXXX 0xf80000 +=> sf write 0x1000000 0x60000 0xf80000 
-[...]+SPI flash write successful
</code> </code>
-  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk+  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk.
    Type ''reset'' or just un-plug and re-plug the power of your router and watch the boot process.     Type ''reset'' or just un-plug and re-plug the power of your router and watch the boot process.
- 
<code> <code>
=> reset => reset
</code> </code>
 +=== v2.0 Flash Write Procedure ===
 +
 +**<color red>This section applies to v2.0 only!</color>** ([[#v1.x.flash.write.procedure|version 1.x method]])
 +  - Be sure the router is powered off (there's a handy power switch beside the power line).
 +  - Connect your serial and ethernet cables to your computer.
 +  - Open your terminal for the serial connection.
 +  - Power on the router
 +  - When you see ''Autobooting in 1 seconds'', quickly type "''tpl''" to access the command line.
 +    * there is no harm at all typing "''tpl''" repeatedly from the moment you power on, I often start when I see the U-Boot bootloader header. ;-)
 +  - Start the TFTP server running on your computer.
 +  - At the ''ap135>'' prompt, type the following commands:
 +    - ''tftpboot 0x81000000 openwrt.bin'' (where openwrt.bin is the name of your firmware image)
 +    - ''erase 0x9f020000 +0x7c0000''
 +    - ''cp.b 0x81000000 0x9f020000 0x7c0000''
 +    - ''bootm 0x9f020000''
 +  - Congratulations!
 +
 +==== Reset Button Method (no serial cable needed) ====
 +
 +If you want to de-brick/upgrade your router using TFTP without a serial cable follow these steps:
 +
 +=== Pre-requisites ===
 +
 +  * Copy a working & full OpenWrt sysupgrade image into your TFTP server folder (e.g: http://downloads.openwrt.org/snapshots/trunk/mpc85xx/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-sysupgrade.bin) so it will be found under the path /wdr4900v1_tp_recovery.bin You can also use the image used for reverting to stock firmware if you prefer to do so, but it has to be placed under the same path.
 +  * A TFTP server started on your local machine on LAN address 192.168.0.66/24.
 +  * Connect your LAN-port to one of the routers LAN
 +
 +=== Procedure ===
 +
 +  - Router should be unplugged (power off) and TFTP server installed not yet running.
 +  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''wdr4900v1_tp_recovery.bin'' (as the router will search for this file).
 +  - Make sure your card has address 192.168.0.66.
 +  - Start the tftp server and make sure it is listening on 192.168.0.66
 +  - Plug in your router and keep the WPS/Reset button pressed until the tftp server confirms the transfer is done
 +  - Wait for the router to reboot, the new image will then be loaded
 +
 +===== Failsafe / reset =====
 +After all else failed, I found [[http://www.binaryfriend.ru/2012/10/how-to-hard-reset-openwrt-on-tp-link-1043nd]].  Extremely simple.  Please see the original page for more info.  Summary:
 +  - Power the router up;
 +  - After powering up track the SYS light when it starts to blink, when it does press and hold the QSS button till SYS lights starts to blink faster – router goes to recovery mode;
 +  - Telnet to the router on 192.168.1.1 – no password needed (if your computer doesn’t gets IP address from DHCP assign it manually for i.e. 192.168.1.200 with netmask of 255.255.255.0);
 +  - In telnet terminal type `mtd -r erase rootfs_data` to reset OpenWRT to it’s defaults.
===== Reverting to stock firmware ===== ===== Reverting to stock firmware =====
Line 171: Line 280:
Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also
more bytes than this one. more bytes than this one.
-{{tag>internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k atheros detachableantenna 3ant 128ram 802.11abgn_simultan gigabitethernet 2radio wip bootloader tftpd}}+{{tag>GigabitEthernet internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k detachableantenna 6ant 3ant 128ram 802.11abgn_simultan 2WNIC, soc.freescale.mpc}}

Back to top

toh/tp-link/tl-wdr4900.1368789013.txt.bz2 · Last modified: 2013/05/17 13:10 by conxuro