Differences

This shows you the differences between two versions of the page.

toh:tp-link:tl-wdr4900 [2013/05/17 13:10]
conxuro Added de-brick/OEM install procedure
toh:tp-link:tl-wdr4900 [2014/08/27 11:12] (current)
hamy
Line 1: Line 1:
======TP-Link TL-WDR4900====== ======TP-Link TL-WDR4900======
-Dual Band (concurrent) and Gigabit Ethernet. +{{:media:toh:tp-link:tl-wdr4900.jpg?400|TP-Link TL-WDR4900 V2.x}}
-Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4Ghz and 5 Ghz Bands.+
-**There are two very different revisions:**+Dual Band (concurrent) and Gigabit Ethernet. Advertised as 900 Mbps it has simultaneous Triple-Stream (3x3) radios on both 2.4GHz and 5 GHz Bands.
-V1.0 World-wide: 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), 800Mhz Freescale PPC CPU+**<color red>There are two very different revisions</color>**
-V2.0 China: 6 external antennas, 720Mhz Qualcomm/Atheros SoC+  * V1.x: target: ''mpcC85xx'' 800Mhz Freescale PPC P1014 CPU 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz), available world-wide  
 +  * V2.x: target: ''ar71xx'' 720Mhz Qualcomm/Atheros SoC and 6 external antennas, available in PRC only
-Qualcomm SoC QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz +Manufacturer's website:  
-Atheros AR9580-AR1A w/ 3x3 MIMO for 5Ghz +  * [[http://www.tp-link.com/en/products/details/?model=TL-WDR4900]] (V1.x) 
-Atheros AR8327N-AL1A switch with "900Mbps+" hardware NAT + * [[http://www.tp-link.com.cn/product_double_292.html]] (V2.x) 
-8M Flash + 
-128M RAM+  * Price: AliExpress - [[http://www.aliexpress.com/item/-/997429375.html|about 100 USD]] 
 + 
 + * Forum https://forum.openwrt.org/viewtopic.php?id=42062 
 + 
 +As of May 2014, TP-Link appear to be discontinuing the TL-WDR4900 in Great Britain.
===== Supported Versions ===== ===== Supported Versions =====
^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^ ^ Version/Model ^ S/N ^ Release Date ^ OpenWrt Version Supported ^ Model Specific Notes ^
-| v1.0 | - | 2013 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips | +| v1.0 world-wide | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/36051|r36051]]  | Freescale PPC w/2 Atheros radio chips 3 internal antennas (2.4Ghz) and 3 external antennas (5Ghz)
-| v1.3 | - | 2013 | trunk | http://downloads.openwrt.org/snapshots/trunk/mpc85xx/ +| v1.3 world-wide | - | 2013 | Barrier Breaker RC2 | http://downloads.openwrt.org/barrier_breaker/14.07-rc2/mpc85xx/generic/
-| v2.0 | - | 2013 | ??? | ap135 - should be supportable  |+| v2.0 PRC only  | - | 2013-01-22 | trunk [[https://dev.openwrt.org/changeset/39637|r39637]] | 6 external antennas, available in PRC only. http://downloads.openwrt.org/snapshots/trunk/ar71xx/ | 
 + 
 +Barrier Breaker RC2 appears to work fine on v1.3. If you have success or problems with v1.0 or 2.0, please add information here, or post to forum. Note that BB RC2 comes without Luci (the Web GUI) preinstalled.
===== Hardware ===== ===== Hardware =====
 +==== Info ====
 +
 +^  ^ Version 1.x ^ Versions 2.x ^
 +| **[[wp>Instruction set|Instruction set]]:**  |  [[wp>PowerPC]]  |  [[wp>MIPS architecture|MIPS]]  |
 +| **Vendor:**                                  | [[wp>Freescale Semiconductor]]        | [[wp>Qualcomm Atheros]]  |
 +| **[[doc:techref:Bootloader]]:**              | [[doc:techref:bootloader:uboot|U-Boot]] 2010.12-svn15934 for PowerPC  | [[doc:techref:bootloader:uboot|U-Boot]] ? fork of mainline U-Boot version 1.1.4 (2005-12-17) for MIPS ? |
 +| **[[doc:hardware:soc|System-On-Chip]]:**    | [[wp>PowerQUICC#PowerQUICC_III|Freescale MPC85xx]]      | QCA9558-AT4A  |
 +| **[[doc:hardware:cpu|CPU]]/Speed**          | PPC P1014@800MHz | MIPS 74Kc Vers. 5.0 720 MHz  |
 +| **Flash-Chip:**                              | [[http://www.spansion.com/Support/Datasheets/S25FL128S_256S_00.pdf|S25FL128S]] | Winbond [[http://www.nexflash.com/NR/rdonlyres/05A6F2FD-83D2-4748-8394-65909AC2A8E3/0/W25Q64FV.pdf|W25Q64FVSIG]] |
 +| **Flash size:**                              | 16384 KiB  | 8192 KiB  |
 +| **RAM-Chip:**                                | [[http://www.skhynix.com/inc/pdfDownload.jsp?path=/datasheet/pdf/graphics/H5TQ1G63DFR(Rev1.1).pdf|H5TQ1G63DFR]] | [[http://www.skhynix.com/products/consumer/view.jsp?info.ramKind=03&info.serialNo=H5PS5162GFR|H5PS5162GFR]] |
 +| **RAM size:**                                | 128 MiB | 128 MiB  |
 +| **Wireless1:**                              | Chip: AR9381-AL1A w/ 3x3 MIMO for 2.4GHz  | SoC: QCA9558-AT4A w/ 3x3 MIMO for 2.4Ghz          |
 +| **Wireless2:**                              | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz    | Chip: AR9580-AR1A w/ 3x3 MIMO for 5Ghz |
 +| **[[doc:techref:swconfig|Switch]]:**        | AR8327N-AL1A                              | AR8327N-BL1A  |
 +| **USB:**                                    | 2 (USB 2.0)    | 2 (USB 2.0) |
 +| **[[doc:hardware:port.serial|Serial]]:**    | [[#Serial|Yes]] | [[#Serial|Yes]] |
 +| **[[doc:hardware:port.jtag|JTAG]]:**        | Yes  | [[#JTAG|Yes]] |
==== Photos ==== ==== Photos ====
-{{:media:tplinkwdr4900v1serial.jpg|}}+=== Version 1.x ===
-{{:media:tplinkwdr4900v1.jpg|}}+{{:media:toh:tp-link:tl-wdr4900:v1serial.jpg?400|wdr4900v1 serial}}
 +{{:media:toh:tp-link:tl-wdr4900:v1bottom.jpg?400|wdr4900v1 bottom}}
-===== De-brick or OEM installation using the TFTP and RS232 (serial) method =====+=== Version 2.0 ===
-If you want to de-brick/upgrade your router using TFTP you follow these steps:+{{:media:toh:tp-link:tl-wdr4900:v2serial.jpg?400|wdr4900v2 serial}}
 +===== Serial console =====
-==== Pre-requisits ====+Serial console is available on the JP2 (v1.x) or J1 (v2.0) connector - see PCB photos above.
-  * Serial RS232 connected from your machine to TL-WDR4900 & a terminal program (e.g. minicom, screen) set to **115200 8N1**, no flow control, 3,3V. +**DO NOT CONNECT VCC**. Use only TX/RX/GND.
-  * Copy a working & full OpenWrt firmware image into your TFTP server folder (e.g: openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin). +
-  * A TFTP server started on your local machine on LAN address 192.168.1.x/24. +
-  * Connect your LAN-port to one of the routers LAN ports.+
 +Baud Rate: 115200\\
 +Data Bits: 8\\
 +Parity: No\\
 +Stop Bits: 1\\
-==== Written Flash Procedure ====+Factory firmware login credentials: //(v1.x only)//\\ 
 + * username: root\\ 
 + * password: 5up
 +''Note:'' be extremely careful when soldering a serial console on TP-Link TL-WDR4900 - the design of the PCB is not well suited for soldering and important paths/connections are near the soldering points. We have now 3 Routers which are dead, just because we used too much solder...
 +
 +===== Installation =====
 +
 +OpenWRT may be installed [[doc/howto/generic.flashing#method.1via.oem.firmware|via OEM firmware]] on both versions.
 +
 +v1: [[http://downloads.openwrt.org/barrier_breaker/14.07-rc2/mpc85xx/generic/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin|openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-factory.bin ]]
 +
 +      * August 2014: Barrier Breaker RC2 (and RC1) reported to work fine by different users (Luci not in RC)
 +      * July 2014: Problems with unstable Trunk
 +      * June 2014: The latest known stable Trunk is r39430.
 +
 +
 +v2: [[http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin|openwrt-ar71xx-generic-tl-wdr4900-v2-squashfs-factory.bin]]
 +  * If you do not speak chinese and are not familiar with the standard TP-Link firmware, please see the screen shots below for help.
 +
 +After installation you will want to proceed with [[http://wiki.openwrt.org/doc/howto/firstlogin|first login]], [[http://wiki.openwrt.org/doc/howto/basic.config|basic configuration]]. You may also wish to install the web user interface [[doc/howto/luci.essentials|LuCI]], after which you can manage your router at http://192.168.1.1
 +
 +=== Helpful Screenshots for installing from Chinese stock firmware ===
 +
 +{{:media:toh:tp-link:stock-fw-upgrade-step1.jpg?500|Upgrading from Stock Firwmare - Step 1}}
 +
 +{{:media:toh:tp-link:stock-fw-upgrade-step2.jpg?250|Upgrading from Stock Firwmare - Step 2}}
 +
 +==== VLAN ====
 +To get tagged and untagged traffic working on the same port a patch for the switch driver is needed. Refer to: https://dev.openwrt.org/ticket/12181#comment:73
 +
 +===== De-brick or OEM installation =====
 +
 +==== Using TFTP + Serial method ====
 +
 +=== Pre-requisites ===
 +
 +  * a serial connection (e.g. TTL, RS232) from your machine to the router.
 +  * a terminal program (e.g. minicom, screen) set for 115200 Baud, 8 data bits, no parity, 1 stop bit, no flow control.
 +    * It is **strongly recommended** not to connect the 3.3V (or any) voltage line - use the router's own power supply instead.
 +  * a __factory__ OpenWrt firmware image into your TFTP server folder (see [[#installation|Installation]] above)
 +  * a wired ethernet connection from your computer to one of the router's LAN ports.
 +    * IP address on this connection should be statically set to 192.168.1.x/24.
 +  * a TFTP server started on your local machine
 +    * must be listening on the same link/IP address as the wired ethernet connection to the router
 +    * v1.x models prefer the server address 192.168.0.66, v2.0 prefers 192.168.1.100
 +
 +=== v1.x Flash Write Procedure ===
 +
 +**<color red>This section applies to v1.x only!</color>** ([[#v2.0.flash.write.procedure|version 2.0 method]])
  - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.   - Router should be unplugged (power off), your serial line connected, terminal open and TFTP server installed not yet running.
  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''openwrt.bin'' (to save some typing within the flash procedure).   - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''openwrt.bin'' (to save some typing within the flash procedure).
  - First goal is to get the command prompt from the U-Boot bootloader on your router.   - First goal is to get the command prompt from the U-Boot bootloader on your router.
-  - Plug in your router and be ready to type "''vl''" just after you see the line ''Autobooting in 1 seconds'':+  - Plug in your router and be ready to type "''vl''" just after you see the line ''Autobooting in 1 seconds'' (Spamming "''vl''" around this point helps):
<code> <code>
Line 85: Line 160:
<code>=></code> <code>=></code>
-  - Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).+  - (//optional//) Now lets check what kind of parameters the u-boot loader expects (e.g file name of firmware, IP via TFTP & load address).
  Type ''tftpboot'' & press ENTER …   Type ''tftpboot'' & press ENTER …
<code> <code>
Line 132: Line 207:
Bytes transferred = 16252928 (f80000 hex) Bytes transferred = 16252928 (f80000 hex)
</code> </code>
- 
-// UNCOMPLETE // 
  - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.   - The last line needs to show a size of f80000 hex, otherwise your image is unsuitable.
-  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it; +  - To select the SPI flash memory type: sf probe 0
-    just type in the prompt ''sf erase 0xXXXXXXXX +f80000 and wait for the prompt to come back. +
<code> <code>
-=> sf erase 0xXXXXXXXX +7c0000 +=> sf probe 0 
-[...]+SF: Detected S25FL128S_65k with page size 256, total 16 MiB 
 +16384 KiB S25FL128S_64K at 0:0 is now current device 
 +</code> 
 +  - Now we need to erase parts of the flash memory to be able to copy your fresh loaded firmware into it, 
 +   just type in the prompt ''sf erase 0x60000 0xf80000'': 
 +<code> 
 +=> sf erase 0x60000 0xf80000 
 +SPI flash erase successful
</code> </code>
-  - Now just copy the image to the right place by typing ''sf write 0x1000000 0xXXXXXXXX 0xf80000'' +  - Now just copy the image to the right place by typing ''sf write 0x1000000 0x60000 0xf80000''
<code> <code>
-=> sf write 0x1000000 0xXXXXXXXX 0xf80000 +=> sf write 0x1000000 0x60000 0xf80000 
-[...]+SPI flash write successful
</code> </code>
-  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk+  - So, in case your image is the correct one, you should do just a single reboot to have a working TL-WRD4900 back on your desk.
    Type ''reset'' or just un-plug and re-plug the power of your router and watch the boot process.     Type ''reset'' or just un-plug and re-plug the power of your router and watch the boot process.
- 
<code> <code>
=> reset => reset
</code> </code>
 +=== v2.0 Flash Write Procedure ===
 +**<color red>This section applies to v2.0 only!</color>** ([[#v1.x.flash.write.procedure|version 1.x method]])
 +  - Be sure the router is powered off (there's a handy power switch beside the power line).
 +  - Connect your serial and ethernet cables to your computer.
 +  - Open your terminal for the serial connection.
 +  - Power on the router
 +  - When you see ''Autobooting in 1 seconds'', quickly type "''tpl''" to access the command line.
 +    * there is no harm at all typing "''tpl''" repeatedly from the moment you power on, I often start when I see the U-Boot bootloader header. ;-)
 +  - Start the TFTP server running on your computer.
 +  - At the ''ap135>'' prompt, type the following commands:
 +    - ''tftpboot 0x81000000 openwrt.bin'' (where openwrt.bin is the name of your firmware image)
 +    - ''erase 0x9f020000 +0x7c0000''
 +    - ''cp.b 0x81000000 0x9f020000 0x7c0000''
 +    - ''bootm 0x9f020000''
 +  - Congratulations!
 +
 +==== Reset Button Method (no serial cable needed) ====
 +
 +If you want to de-brick/upgrade your router using TFTP without a serial cable follow these steps:
 +
 +=== Pre-requisites ===
 +
 +  * Copy a working & full OpenWrt sysupgrade image into your TFTP server folder (e.g: http://downloads.openwrt.org/snapshots/trunk/mpc85xx/openwrt-mpc85xx-generic-tl-wdr4900-v1-squashfs-sysupgrade.bin) so it will be found under the path /wdr4900v1_tp_recovery.bin You can also use the image used for reverting to stock firmware if you prefer to do so, but it has to be placed under the same path.
 +  * A TFTP server started on your local machine on LAN address 192.168.0.66/24.
 +  * Connect your LAN-port to one of the routers LAN
 +
 +=== Procedure ===
 +
 +  - Router should be unplugged (power off) and TFTP server installed not yet running.
 +  - Copy your desired openwrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into ''wdr4900v1_tp_recovery.bin'' (as the router will search for this file).
 +  - Make sure your card has address 192.168.0.66.
 +  - Start the tftp server and make sure it is listening on 192.168.0.66
 +  - Plug in your router and keep the WPS/Reset button pressed until the tftp server confirms the transfer is done
 +  - Wait for the router to reboot, the new image will then be loaded
 +  - A pack ready for doing this, containing TFTPD32 server and the latest TP-Link firmware, can be found here: https://forum.openwrt.org/viewtopic.php?pid=236428#p236428
 +  - Also there's a video of the process: http://www.youtube.com/watch?v=54PAS0gvW2k
 +===== Failsafe / reset =====
 +After all else failed, I found [[http://www.binaryfriend.ru/2012/10/how-to-hard-reset-openwrt-on-tp-link-1043nd]].  Extremely simple.  Please see the original page for more info.  Summary:
 +
 +  - Power the router up;
 +  - After powering up track the SYS light when it starts to blink, when it does press and hold the QSS button till SYS lights starts to blink faster – router goes to recovery mode;
 +  - Telnet to the router on 192.168.1.1 – no password needed (if your computer doesn’t gets IP address from DHCP assign it manually for i.e. 192.168.1.200 with netmask of 255.255.255.0);
 +  - In telnet terminal type `mtd -r erase rootfs_data` to reset OpenWRT to it’s defaults.
===== Reverting to stock firmware ===== ===== Reverting to stock firmware =====
Line 171: Line 290:
Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also Note: You can only flash this firmware version because it has no BOOT in the filename. This image and OpenWRT images are the exact same size. Other images from TP-Link do have BOOT in the filename and these files are also
more bytes than this one. more bytes than this one.
-{{tag>internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k atheros detachableantenna 3ant 128ram 802.11abgn_simultan gigabitethernet 2radio wip bootloader tftpd}}+{{tag>GigabitEthernet internalantenna 2usb 3x3 450mbps usb2.0 5ghz 5port 16flash 802.11abgn ath9k detachableantenna 6ant 3ant 128ram 802.11abgn_simultan 2WNIC, soc.freescale.mpc}} 
 + 
 +===== Specific Configuration ===== 
 +==== Switch Ports (for VLANs) ==== WDR4900 v1? 
 + 
 +Numbers 2-5 are Ethernet Ports 1-4 as labeled on the unit, number 1 is "Internet" (WAN) on the unit, 0 is the internal connection to the router itself. 
 +^ Port ^ Switch port ^ 
 +| CPU  | 0 | 
 +| WAN  | 1 | 
 +| LAN 1 | 2 | 
 +| LAN 2 | 3 | 
 +| LAN 3 | 4 | 
 +| LAN 4 | 5 | 
 +| (not used ?) | 6 | 
 + 
 +==== Switch Ports (for VLANs) ==== WDR4900 v2 
 + 
 +Numbers 2-5 are Ethernet Ports 1-4 as labeled on the unit, number 1 is "Internet" (WAN) on the unit, 6 is the internal connection to the router itself, and 0 is another CPU, because this router has two. 
 + 
 +^ Port ^ Switch port ^ 
 +| Second CPU | 0 | 
 +| WAN  | 1 | 
 +| LAN 1 | 2 | 
 +| LAN 2 | 3 |           
 +| LAN 3 | 4 | 
 +| LAN 4 | 5 | 
 +| CPU  | 6 | 
 + 
 + 
 +==== Luci WDR4900v2 (Example Vlans tag for Movistar FTTH Spain) 
 + 
 + 
 + 
 +{{:media:tplink_wdr4900v2_switch_vlan_tagg.jpg?900}} 
 + 
 + 
 +==== Port Mirroring ==== 
 +Hardware port mirroring is supported in v1/(v2?) FIXME 
 + 
 +Here's an example of configuring port mirroring in /etc/config/network for mirroring port 1 to port 5 
 +(You may need to restart the router for port mirroring changes to take effect): 
 +<code> 
 + 
 +config switch 
 + option name 'switch0' 
 + option reset '1' 
 + option enable_vlan '1' 
 + option enable_mirror_rx '1' 
 + option enable_mirror_tx '1' 
 + option mirror_source_port '1' 
 + option mirror_monitor_port '5' 
 + 
 +</code> 
 + 
 +===== Other Information Resources ===== 
 + 
 +[[https://forum.openwrt.org/viewtopic.php?id=42062&p=22|OpenWRT Forum Thread "Developing Support for TPLINK WDR4900"]] 
 + 
 +[[https://wikidevi.com/wiki/TP-LINK_TL-WDR4900_v1|Hardware Information at wikidevi (v1 International version)]] 
 + 
 +[[https://wikidevi.com/wiki/TP-LINK_TL-WDR4900_v2|Hardware Information at wikidevi (v2 PRC-only version)]]

Back to top

toh/tp-link/tl-wdr4900.1368789013.txt.bz2 · Last modified: 2013/05/17 13:10 by conxuro