Differences

This shows you the differences between two versions of the page.

toh:tp-link:tl-wr703n [2012/07/30 13:50]
moony I completely destroyed my device at the (by Wiki) allowed 6 volts!!
toh:tp-link:tl-wr703n [2013/06/17 20:49] (current)
jmac928
Line 1: Line 1:
====== TP-Link TL-WR703N ====== ====== TP-Link TL-WR703N ======
 +See also the [[toh:tp-link:TL-MR3020]], [[toh:tp-link:TL-MR3040]] and [[toh:tp-link:TL-WR703N]]. or [[toh/tp-link/tl-mr10u|TP-Link TL-MR10U]], [[toh/tp-link/tl-mr11u|TP-Link TL-MR11U]], [[toh/tp-link/tl-mr12u|TP-Link TL-MR12U]] and [[toh/tp-link/tl-mr13u|TP-Link TL-MR13U]]\\ **''Note:''** Many of these routers are marketed as a //"3G travel router"// but  **none actually include a 3G modem** - the marketing term rather means that the OEM firmware supports USB 3G modems because it contains drivers for USB modems! Ignore that, because with OpenWrt ANY router with USB supports 3G hardware... ;-)
-The TL-WR703N is marketed as a //"3G travel router"//. **It does not include a 3G modem** - it simply means that the OEM firmware supports USB 3G modems, and that the oem firmware contains drivers for USB modems! Ridiculous, since with OpenWrt ANY router with USB supports 3G hardware... ;-) +{{:media:toh:tp-link:tl-wr703n:tl-wr703n.jpg?400|TP-Link TL-WR703N}}
- +
-The device was released in August 2011 in China. +
- +
-The device is very similiar to the [[toh:tp-link:TL-MR3020]].+
===== Supported Versions ===== ===== Supported Versions =====
Line 13: Line 10:
| v1.3 | | Trunk (29283) | [[https://forum.openwrt.org/viewtopic.php?pid=149169#p149169|Confirmed working]] | | v1.3 | | Trunk (29283) | [[https://forum.openwrt.org/viewtopic.php?pid=149169#p149169|Confirmed working]] |
| v1.5 | December 2011 | Trunk | [[https://forum.openwrt.org/viewtopic.php?pid=155769#p155769|Confirmed working]] | | v1.5 | December 2011 | Trunk | [[https://forum.openwrt.org/viewtopic.php?pid=155769#p155769|Confirmed working]] |
-| v1.6 | March 2012 | Trunk (r30753) | Confirmed working |+| v1.6 | April 2012 | Trunk (r36145) | Confirmed working
 +| v1.7 | December 2012 | AA(12.09)| AA confirmed working, trunk (r36641) broken|
Unlike many newer TP-Link devices, there appears to be no hardware differences between the version for the Chinese market and the version for the international market. Unlike many newer TP-Link devices, there appears to be no hardware differences between the version for the Chinese market and the version for the international market.
-It was the first device that utilised the AR9331 chipset to be ported to OpenWrt. Newer TP-Link devices (such as the TL-WR741ND v4.x also use AR9331).+It was the first device that utilized the AR9331 chipset to be ported to OpenWrt. Newer TP-Link devices (such as the TL-WR741ND v4.x also use AR9331). 
 +===== PirateBox and LibraryBox Support===== 
 +http://daviddarts.com/piratebox-diy-openwrt/ 
 +http://jasongriffey.net/librarybox/
-==== Features ====+===== Features =====
  * Atheros AR7240 CPU (400Mhz)   * Atheros AR7240 CPU (400Mhz)
  * Atheros AR9331 Chipset (integrated wireless)   * Atheros AR9331 Chipset (integrated wireless)
Line 26: Line 27:
  * 4 MB flash memory   * 4 MB flash memory
  * 32 MB RAM   * 32 MB RAM
-  * USB 2.0 port+  * USB 2.0 port (High-Speed only, use an external High-Speed hub for Full/Low-Speed devices)
  * Powered via micro-USB socket   * Powered via micro-USB socket
-  * Tiny form factor: 5.7cm x 5.7cm+  * Tiny form factor: 5.7cm x 5.7cm x 1.8cm
===== Installation ===== ===== Installation =====
  - Please see [[doc:howto:generic.flashing]] for a generic description of the OpenWrt installation process.   - Please see [[doc:howto:generic.flashing]] for a generic description of the OpenWrt installation process.
-  - If it ain't specific enought, see if there is a description of the procedure for a similar device. + 
-  - (There are plenty...) but in case you do not find them, consult the forum. +
-  - feel free to write one yourself, and of course, translate [[doc:howto:generic.flashing]] into your native language ;-) +
-  - enjoy+
 +===== Warnings / Gotchas =====
 +Please check the firmware version first, either:
 +  * in the Chinese webadmin interface: "Build 120925" correspond to a v1.7 firmware
 +  * on the internal sticker located on the Ethernet jack (may have 12B042)
 +  * ** DO NOT RELY ON THE VERSION GIVEN BY THE EXTERNAL STICKER ON CASE BOTTOM ** : it may report falsely "1.6", even if the firmware is actually a V1.7
 +
 +{{:meta:icons:tango:48px-dialog-warning.svg.png?nolink}} **WARNING __If you have a V1.7 firmware, current OpenWrt trunk (r36641) will brick
 +your router, unless you have access to the serial console!__ **
 +Below is the version of the new bootloader (which disables the LAN port) of a version 1.7 hardware model (bought in December 2012).
 +<code>
 +root@tpl2:~# grep -a U-Boot /dev/mtd0ro | cut -d'I' -f1
 +U-Boot 1.1.4 (Sep 25 2012 - 09:04:47)
 +</code>
 +
 +For more info visit this forum topic:
 +https://forum.openwrt.org/viewtopic.php?id=40986
==== Power consumption === ==== Power consumption ===
-This router is standardly powered via USB at 5V. The voltage regulator inside is unknown, but its input voltage should be at least between 3.7V - 5.5V, but not over 5.5V. The device will get damaged at too high voltages. Maximum current draw at 5V is 185mA (OpenWrt boot), average current draw with WiFi at 18dBm is 100mA, without WiFi 80mA. Hence the average router power consumption is 0.5W, which is incredibly low.+This router is standardly powered via USB at 5V. The voltage regulator inside is unknown, but its input voltage should be at least between 3.7V - 5.5V, but not over 5.5V. The device will get damaged at too high voltages*. Maximum current draw at 5V is 185mA (OpenWrt boot), average current draw with WiFi at 18dBm is 100mA, without WiFi 80mA. Hence the average router power consumption is 0.5W, which is incredibly low.
Power consumption will be higher if a USB device is attached to its USB port! Power consumption will be higher if a USB device is attached to its USB port!
 +
 +*Hint: If the router seems to be damaged because of a too high voltage, connect 3.3V _after_ the voltage regulator. This resets an electrical fuse or something, and the router works again.
==== Serial console ==== ==== Serial console ====
-The serial console connector does not utilise the regular TP-Link pinouts. Two pads labelled TP_OUT and TP_IN are the TX and RX signals.+The serial console connector does not utilise the regular TP-Link pinouts. Two pads labelled TP_OUT and TP_IN are the TX and RX signals. 115200 8n1
Note that the pads can very easily be lifted.  There is slightly more mechanical strength if you can solder to the surface-mount components to which the pads are connected--but this also takes care--your device could easily be destroyed.  Make sure that your connection is secured so that tension cannot be applied to the solder points when you connect to an external device. Note that the pads can very easily be lifted.  There is slightly more mechanical strength if you can solder to the surface-mount components to which the pads are connected--but this also takes care--your device could easily be destroyed.  Make sure that your connection is secured so that tension cannot be applied to the solder points when you connect to an external device.
Line 54: Line 70:
==== Flashing ==== ==== Flashing ====
- 
-Snapshot image was broken around 18/11/2011, but from 26/11/2011 that was fixed. 
- 
-Snapshot image was broken around 29/05/2012, but from 01/06/2012 that was fixed. 
- 
-**Snapshot images are always risky. Check the forum discussion for latest opinions on available images.** 
Upload the latest snapshot via the web interface (default: 192.168.1.1 / admin / admin). Upload the latest snapshot via the web interface (default: 192.168.1.1 / admin / admin).
-Download latest [[http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-factory.bin|squashfs-factory.bin]] or [[http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-sysupgrade.bin|squashfs-sysupgrade.bin]] firmware for WR703N.+Download latest [[http://downloads.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-factory.bin|squashfs-factory.bin]] or [[http://downloads.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-sysupgrade.bin|squashfs-sysupgrade.bin]] firmware for WR703N.
 +Note that the factory default web interface won't accept a file with a long name. Rename it to openwrt.bin and you won't get a "23002 Error".
-For systems without a web interface, you can flash a sysupgrade file with mtd (after downloading the file to /tmp and then "cd /tmp"):+For systems without a web interface, you can flash a sysupgrade file with mtd:
-mtd write openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-sysupgrade.bin firmware +  cd /tmp 
- +  wget http://downloads.openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-sysupgrade.bin 
-Note that this will not destroy the contents of the file system, so any old modules under /lib/modules/x.y.z will still get loaded. If you don´t get a telnet login after reboot, try rebooting again.+ sysupgrade openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-sysupgrade.bin 
 +  reboot
To flash from the Chinese web interface, at the present time you would select the last menu item on the left, and then the third submenu item.  This initiates a popup with two buttons--the upper right one allows you to browse to find the file you want to flash on your PC, the lower left one initiates the flash. To flash from the Chinese web interface, at the present time you would select the last menu item on the left, and then the third submenu item.  This initiates a popup with two buttons--the upper right one allows you to browse to find the file you want to flash on your PC, the lower left one initiates the flash.
Line 78: Line 90:
==== Failsafe mode ==== ==== Failsafe mode ====
-When the configuration no longer allows you to log in via any network connection (e.g. lost password), the OpenWrt failsafe mode can be entered via the single "Reset" button on the device. However, in contrast to the [[http://wiki.openwrt.org/doc/howto/generic.failsafe|generic failsafe instructions]], for the TL-WR703N you have to wait for ca. 12 seconds before pushing the "Reset" button after powering on the device. If the button is pushed immediately after powering on, the single blue LED will start blinking, supposedly indicating some failsafe firmware recovery mody of the embedded bootloader (not yet discovered how to use it). In this mode, the OpenWrt failsafe is not being started. Instead, wait for slightly longer than 10 seconds and - as soon as the LED starts blinking for the first time after powering on the device, push the "Reset" button for ca. 1-2 seconds. Immediately afterwards, the LED will blink rapidly (multiple Hz) and OpenWrt will be in [[http://wiki.openwrt.org/doc/howto/generic.failsafe|failsafe mode]].+When the configuration no longer allows you to log in via any network connection (e.g. lost password), the OpenWrt failsafe mode can be entered via the single "Reset" button on the device. However, in contrast to the [[http://wiki.openwrt.org/doc/howto/generic.failsafe|generic failsafe instructions]], for the TL-WR703N you have to wait for ca. 10 (10-12) seconds before pushing the "Reset" button after powering on the device. If the button is pushed immediately after powering on, the single blue LED will start blinking, supposedly indicating some failsafe firmware recovery mody of the embedded bootloader (not yet discovered how to use it). In this mode, the OpenWrt failsafe is not being started. Instead, wait for slightly longer than 10 seconds and - as soon as the LED starts blinking for the first time after powering on the device, push the "Reset" button for ca. 1-2 seconds. Immediately afterwards, the LED will blink rapidly (multiple Hz) and OpenWrt will be in [[http://wiki.openwrt.org/doc/howto/generic.failsafe|failsafe mode]].\\ 
 + - The above didn't work on a Ver 1.6 box running OpenWRT r33312. To get into failsafe mode, power up the device and wait until the LED starts flashing (about 2Hz). Once it starts flashing (within about 4 seconds) then quickly press the button. The LED will then flash much faster and the device will be in failsafe mode.
==== Back to original image ==== ==== Back to original image ====
  * Setup serial console 115200 8n1   * Setup serial console 115200 8n1
  * Enter "tpl" as soon as U-Boot announces "Autobooting in 1 seconds"   * Enter "tpl" as soon as U-Boot announces "Autobooting in 1 seconds"
-  * Download the original image: http://www.tp-link.com.cn/downloadfilesuploadfolder/2011930104462.rar extact to tftp folder+  * Download the original image: http://www.tp-link.com.cn/download/2011930104462.rar extact to tftp folder
  * Setup your eth0 to 192.168.1.100, you can check detail by 'printenv'   * Setup your eth0 to 192.168.1.100, you can check detail by 'printenv'
  * Run blow command under U-Boot:   * Run blow command under U-Boot:
Line 92: Line 105:
  bootm 9f020000   bootm 9f020000
 +  * Instructions on the [[https://forum.openwrt.org/viewtopic.php?id=37361|forum]] for flashing wr703n with mr3020 firmware which is in english and not in chinese.
 +  * Detailed instructions on the [[https://forum.openwrt.org/viewtopic.php?pid=198336#p198336|forum]] for flashing
 +
 +[[http://forums.openpilot.org/blog/52/entry-92-unbrick-wr703n-wifi-router/ | Unbrick Tutorial with TFTP and Serial]]
==== Internal images ==== ==== Internal images ====
Line 104: Line 121:
Hi Res images here : https://plus.google.com/u/0/photos/107211980242732541247/albums/5737162394063705409/5737162392085444242 Hi Res images here : https://plus.google.com/u/0/photos/107211980242732541247/albums/5737162394063705409/5737162392085444242
 +
 +===== Hardware summary =====
 +|                            ^  IC  ^  Info  ^  Datasheet  ^
 +^                  Processor | AR7240 |  | {{:toh:tp-link:atheros.ar7240.pdf|Click}}  |
 +^                  Flash ROM| Eon EN25Q32B |  | {{:toh:tp-link:EN25Q32.pdf|Click}}  | 
 +^                      SDRAM| Zentel A3S56D40FTP |  |  | 
 +^        Chipset (Wi-Fi controller)| AR9331 | 1x1 | http://see.sl088.com/w/images/6/69/AR9331.pdf |
 +
 +==== TL-WR703N Reverse Engineering ====
 +
 +The TL-WR703N has been [[http://www.kean.com.au/oshw/WR703N/teardown/|teared down]] by Kean and almost completely [[http://squonk42.github.com/TL-WR703N/|reverse-engineered]] by Squonk, including external layers layout and schematic.
 +
 +==== AR9331 Pinout ====
 +
 +{{:toh:tp-link:ar9331.pinout.bg.png|}}
 +
 +Check the details [[toh:tp-link:tl-wr703n:ar9331_pinout|here]].
 +
 +==== GPIOs ====
 +
 +The AR933x platform provides 30 GPIOs. Some of them are used by the router for status LEDs, buttons and other stuff. The table below shows the results of investigations:
 +
 +^ GPIO ^ Available on WR703N ^ AR9331 Pin ^ POR Value ^ WR703N Name ^ Description ^ MR3020 Name ^
 +|0|R4-E|A78|0| |Must have 0 value during bootstrap*|WLAN LED/LED4|
 +|1|R2-S|A77|1| |Must have 1 value during bootstrap| |
 +|2|VIA|B49| |SPI_CS_0|Used by SPI Flash|SPI_CS_0|
 +|3|VIA|B51| |SPI_CLK|Used by SPI Flash|SPI_CLK|
 +|4|VIA|A57| |SPI_MOSI|Used by SPI Flash|SPI_MOSI|
 +|5|R57-S/R60-S|B50| |SPI_MISO|Used by SPI Flash|SPI_MISO|
 +|6|R16-S|B46| |LDO|Connected to U6 LDO*|LDO|
 +|7|R15-S|A54|0| | *| |
 +|8|R18-E|A52| |USB_POWER|Control USB Host Power|USB_POWER|
 +|9|R82-N|B68|1|TP_IN|UART RXD|TP_IN|
 +|10|C55-W|A79| |TP_OUT|UART TXD|TP_OUT|
 +|11|R92-E|B48| |RESET SW|Soft Reset Switch|WPS/RESET SW|
 +|12|VIA|A56|0| |Must have 0 value during bootstrap| |
 +|13|R3-S|B66|1| |Must have 0 value during bootstrap| |
 +|14|R11-N|A76|0| |Must have 0 value during bootstrap*| |
 +|15|R12-N|B65|0| |Must have 0 value during bootstrap*| |
 +|16|R13-N|A75|0| |Must have 0 value during bootstrap| |
 +|17|R14-N|B64|1| | |LAN LED/LED5|
 +|18|NC|A28|N/A| | |SLIDE SW1|
 +|19| | | | | | |
 +|20|NC|A27|N/A| | |SLIDE SW2|
 +|21| | | | | | |
 +|22| | | | | | |
 +|23| | | | | | |
 +|24| | | | | | |
 +|25| | | | | | |
 +|26| | | | | | |
 +|27|LED2-S/LED3-S|B44| |LED2/LED3|Blue PCB LED|3G LED/LED3|
 +|28|VIA|A74|0| |Must have 0 value during bootstrap| |
 +|29|R17-S|A53|0| | | |
 +
 +* on wr703n these can be floating (i.e. resistors removed) and the unit still boots
 +
 +==== PCB details =====
 +
 +You can get additional details on the PCB in the dedicated [[toh:tp-link:tl-wr703n::pcb|PCB Details]] Wiki page.
==== Boot log (OpenWrt) ==== ==== Boot log (OpenWrt) ====
Line 601: Line 677:
</code> </code>
 +===== USB port and monitoring Serial Console via USB-Serial =====
 +The USB port on the WR703n is not compatible with USB1 devices (aka full speed) and only works properly with USB2 (aka high speed) devices. You can however plug a USB-Serial adapter as long as you plug that through a <$10 USB2. While you're at it, use another USB port to plug in a USB key and write data there (like serial console logs) so as not to wear out the built in flash.
 +
 +See this page for more tips and how to create a serial console server out of your WR703n:
 +http://marc.merlins.org/perso/linux/post_2012-12-05_Serial-Console-With-WR703N.html
 +
 +
 +===== GPS Tracking Example =====
 +
 +Here is a recipe for gps tracking using a usb gps module.
 +https://forum.openwrt.org/viewtopic.php?pid=185438
 +
 +===== Software Mods =====
 +  *[[https://forum.openwrt.org/viewtopic.php?id=42996|Use reset boutton for other things]]
 +  *[[http://www.madox.net/blog/2013/02/23/tl-wr703n-example-project-4-webcam-streaming/|Webcam streaming with wr703n]]
 +  *[[http://www.madox.net/blog/2013/01/04/tl-wr703n-example-project-3-wireless-3d-printing-or-2d-printing-or-just-simply-wireless-usb/|Wireless USB (for printing or anything else)]]
 +  *[[https://forum.openwrt.org/viewtopic.php?id=33387|PulseAudio (audio streaming much like airplay) and NAS (network attached storage)]]
 +  *[[http://hackaday.com/2013/01/18/tp-link-tl-wr703n-specialized-firmware-generator/|TP-Link TL-WR703N specialized firmware generator]]
 +  *[[http://www.minipwner.com/index.php/minipwner-build|Use small TP-LINK TL-WR703N as pen-testing drop box (Miniowner)]]
 +  *[[http://cmikavac.net/2012/06/03/tp-link-wr703n-openwrt-post-installation-tips/|TP-Link WR703N OpenWrt post installation tips]]
 +  *[[http://en.code-bude.net/2013/02/16/how-to-increase-storage-on-tp-link-wr703n-with-extroot/|How to increase storage on TP-Link WR703N with ExtRoot]]
 +  *[[http://www.digifail.com/software/bluelog.shtml|Bluelog Bluetooth scanner/logger]]
 +  *[[http://penturalabs.wordpress.com/2013/04/25/blue-for-the-pineapple/|Pineapple wifi hacking device]]
 +
 +===== DIY Projects =====
 +
 +  *[[http://vonkonow.com/wordpress/2012/01/software-for-home-automation/|Web controlled home automation]]
 +  *[[http://forums.openpilot.org/blog/52/entry-89-tp-link-wr703n-as-telemetry-link-and-camera-broadcasting-part2-software/|TP-link WR703n as telemetry link and camera broadcasting]]
 +  *[[http://www.madox.net/blog/2012/10/10/tl-wr703n-example-project-2-cute-exterminator-remote-control-toy/|Cute Exterminator (Remote Control Toy)]]
 +  *[[http://diynews.info/page/usb-over-ip-server-on-wr703n|USB over IP server on WR703N]]
 +  *[[http://www.madox.net/blog/2012/10/08/tl-wr703n-example-project-1-bitbltblade/|BitBltBlade – WiFi controlled POV lightsaber]]
 +  *[[http://www.instructables.com/id/How-to-set-up-OpenWRT-on-a-pocket-router-WR703N/|Smart home automation webserver]]
 +  *[[http://www.bitartist.org/2012/02/motion-tracking-on-wireless-router.html|Motion Tracking on a wireless wr703n router]]
 +  *[[http://davidshamblin.com/building-a-piratebox-from-a-tp-link-wr703n-router/|Building a PirateBox from a TP-Link WR703N Router]]
 +  *[[http://hackaday.com/2013/02/21/self-waking-computer-for-diy-cloud-storage/|Self-waking computer for DIY cloud storage]]
 +  *[[http://www.jedge.com/wordpress/2012/11/tp-link-wr703n-custom-pwn-plug/|TP-Link WR703N Custom Pwn Plug]]
 +  *[[https://forum.openwrt.org/viewtopic.php?pid=185438|GPS tracker with WR703N]]
 +  *[[http://www.modlog.net/?p=459|WR703N – 1.5inch Digital Photo Frame (DPF)]]
 +  *[[http://www.modlog.net/?p=467|WR703N – 1.5inch Digital Photo Frame (DPF) x2]]
 +  *[[http://hackaday.com/2013/01/07/adding-an-lcd-screen-terminal-for-tp-link-routers/|Adding an LCD screen terminal for TP-Link routers]]
 +
===== Hardware Mods ===== ===== Hardware Mods =====
  - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then even obtain some experience!   - as a beginner, you really should inform yourself about [[doc:hardware:soldering]] in general and then even obtain some experience!
 +
 +Here are some interesting hardware hacks for the TL-WR703N, from the OpenWRT forum:
 +  *[[https://forum.openwrt.org/viewtopic.php?id=34188|Internal USB hub and flashdrive upgrade]]
 +  *[[https://forum.openwrt.org/viewtopic.php?id=35682|Converting MicroB USB to USB2serial+Power on TP-WR703N]]
 +  *[[https://forum.openwrt.org/viewtopic.php?id=28343|TL-MR3420 flash modification]] (also applies to TL-WR703N)
 +  *[[http://wiki.villagetelco.org/index.php?title=Building_a_Serial_Port_for_TL-WR703N|Building an external Serial Port]] (using common 3.5mm headphone jack)
 +  *[[http://www.tl-wr703n.blogspot.com/2012/08/tl-wr703n-poe-power-over-ethernet-rj45.html|POE (Power Over Ethernet) RJ45]] and on the [[https://forum.openwrt.org/viewtopic.php?pid=176528#p176528|forum]] and on [[http://dev.wlan-si.net/wiki/Routers/TP-LINK/WR703N|wlan-si web site]]
 +  *[[https://forum.openwrt.org/viewtopic.php?pid=196884|POE and USB to serial mod]]
 +  *[[http://hackaday.com/2013/01/07/adding-an-lcd-screen-terminal-for-tp-link-routers/|Adding an LCD screen terminal for TP-Link routers]]
 +  *[[http://youtu.be/My8FMgp2ES4|Solder inside ttl for TL-WR703N (Youtube video)]]
 +  *[[http://dangerousprototypes.com/2012/07/20/hacking-and-moding-the-tp-link-wr703n-openwrt-wi-fi-router/|GPIO hack that gives you access to a software I2C port]]
 +  *[[https://forum.openwrt.org/viewtopic.php?pid=187967#p187967|Let's Get More,Make WR703 With 16M Flash]]
 +  *[[https://forum.openwrt.org/viewtopic.php?pid=200786#p200786|Allow a larger WR703 firmware image to utilize a 16 MB Flash]] 
 +  *[[http://vonkonow.com/wordpress/2011/12/serial-communication-on-a-router/|Access serial communication on a mini router (no extra connector)]]
 +  *[[https://www.youtube.com/watch?v=PYe-gI2ysrw|Youtube video - Upgrade ram to 64MB on WR703N]]
 +  * Antenna mods
 +    *[[http://blagg.tadkom.net/2012/09/15/better-wr703n-antenna-mod/|Better WR703N Antenna mod]]
 +    *[[http://blagg.tadkom.net/2012/09/01/wr-703n-external-antenna-mod-diy/|WR-703N External Antenna Mod (DIY)]]
 +    *[[https://forum.openwrt.org/viewtopic.php?pid=152457#p152457|External SMA antenna connector]]
 +    *[[http://diynews.info/page/elegantnoe-podkljuchenie-vneshnej-antenny-k-tp-link-tl-wr703n|Internal uFL antenna connector mod]]
 +
 +==== Webradio device ====
 +{{:toh:tp-link:tplink-radio-closed_medium.jpg}}
 +
 +This project implements a webradio with cheep usb soundcard and a speaker of an old mobile phone within the casing of the router. There are two analogue controllers for selecting the stream and the volume. Therefor an attiny85 is connected to the uart.
 +
 +[[http://piie.net/index.php?section=tplink-radio|Building a tiny webradio with analog volume and tune controller]]
 +
==== 64MB RAM Mod ==== ==== 64MB RAM Mod ====
-The Device uses a DDR1 16Mbit x 16bit (16Mibit*16=256 mebibit. 256 mebibit/8=32MiByte) 400MHz chip Zentel A3S56D40FTP. Replace it with any 32Mbit x 16bit chip. 333MHz instead of 400MHz also works fine. It's quite hard to find these chips. The best chance is to have a look at DDR-SODIMM. Since there are no 64Mbit x 16Bit DDR1 Chips available -> no 128 MB mod!+The Device uses a DDR1 16Mbit x 16bit (16Mibit*16=256 mebibit. 256 mebibit/8=32MiByte) 400MHz chip Zentel A3S56D40FTP. Replace it with any 32Mbit x 16bit chip. 333MHz instead of 400MHz also works fine. It's quite hard to find these chips. One of the ways to get them is to have a look at DDR SO-DIMM (because SO-DIMM modules are shipped with x16 chips). Since there are no 64Mbit x 16bit DDR1 Chips available -> no 128 MB mod!
-Working chips+The most easy approach is to seek for a 4-chip DDR 256 MB module. These all have x16 chips too. Chips only on one side (not to be confused with double-sided 256 MB modules with 4 chips on each side) and only 4 of them - that's the best chance to get some. They represent a small percent among usual 8-chip modules but this is equalized with the amount and "cheap as dirt" price of such DDR 256 MB modules.
-  * Hynix HY5DU121622DTP-D43 (From Mustang DDR-SODIMM 512 MB) +
-  * Hynix HY5DU121622CTP-D43 (From Hynix  DDR-SODIMM PC2700S-25330 512MB DDR 333MHz CL 2.5, chips are 400Mhz compatible due "D43" marking.)  +
-  * Infineon HYB25D512160BE (From Infineon DDR-SODIMM 512 MB)+
 +Working chips:
 +  * Hynix HY5DU121622DTP-D43 (From Mustang DDR SO-DIMM 512 MB)
 +  * Hynix HY5DU121622CTP-D43 (From Hynix  DDR SO-DIMM PC2700S-25330 512MB DDR 333MHz CL 2.5, chips are 400Mhz compatible due to "D43" marking.)
 +  * Infineon HYB25D512160BE (From Infineon DDR SO-DIMM 512 MB)
 +  * Elpida EDD5116ADTA-6B-E (From Elpida DDR SO-DIMM 512 MB)
**Additional list that may work:** **Additional list that may work:**
^      ^          ^ Type                  ^ ID Code                ^ Vendor  ^ ^      ^          ^ Type                  ^ ID Code                ^ Vendor  ^
-| DDR  | 32Mx16  | PC400 TSOP Pb Free    | HY5DU121622DTP-D43-C  | Hynix    |   +| DDR  | 32Mx16  | DDR 400 TSOP Pb Free    | HY5DU121622DTP-D43-C  | Hynix    |   
-| DDR  | 32Mx16  | PC400 TSOP Pb Free    | H5DU5162ETR-E3C        | Hynix    |       +| DDR  | 32Mx16  | DDR 400 TSOP Pb Free    | H5DU5162ETR-E3C        | Hynix    |       
-| DDR  | 32Mx16  | PC400 Pb Free        | K4H511638G-LCCC        | Samsung  |     +| DDR  | 32Mx16  | DDR 400 Pb Free        | K4H511638G-LCCC        | Samsung  |     
-| DDR  | 32Mx16  | PC400 Pb Free        | K4H511638J-LCCC        | Samsung  | +| DDR  | 32Mx16  | DDR 400 Pb Free        | K4H511638J-LCCC        | Samsung  | 
-| DDR  | 32Mx16  | PC400                 | A3S12D40ETP-G5        | Zentel    |     +| DDR  | 32Mx16  | DDR 400                 | A3S12D40ETP-G5        | Zentel    |     
-| DDR  | 32Mx16  | PC400                 | NT5DS32M16BS-5T        | Nanya    | +| DDR  | 32Mx16  | DDR 400                 | NT5DS32M16BS-5T        | Nanya    | 
-| DDR  | 32Mx16  | PC400 PB Free        | P3S12D40ETP-GUTT      | Mira      | +| DDR  | 32Mx16  | DDR 400 PB Free        | P3S12D40ETP-GUTT      | Mira      | 
-| DDR  | 32Mx16  | PC333 CL2.5 TSOP      | MT46V32M16TG-6T:F      | Micron    |     +| DDR  | 32Mx16  | DDR 333 CL2.5 TSOP      | MT46V32M16TG-6T:F      | Micron    |     
-| DDR  | 32Mx16  | PC333 CL2.5 TSOP      | MT46V32M16P-6T:F      | Micron    | +| DDR  | 32Mx16  | DDR 333 CL2.5 TSOP      | MT46V32M16P-6T:F      | Micron    | 
-| DDR  | 32Mx16  | PC333 PB Free TSOP    | EDD5116ADTA-6B-E      | Elpida    | +| DDR  | 32Mx16  | DDR 333 PB Free TSOP    | HYB25D512160CE-6      | Qimonda  | 
-| DDR | 32Mx16  | PC333 PB Free TSOP    | HYB25D512160CE-6      | Qimonda  | +| DDR  | 32Mx16  | DDR 333 PB Free TSOP    | HYB25D512160CEL-6      | Qimonda  | 
-| DDR  | 32Mx16  | PC333 PB Free TSOP    | HYB25D512160CEL-6      | Qimonda  | +| DDR  | 32Mx16  | DDR 333 PB Free TSOP    | HYB25D512160DE-6      | Qimonda  |
-| DDR  | 32Mx16  | PC333 PB Free TSOP    | HYB25D512160DE-6      | Qimonda  |+
                                                                          ''                                                                           ''
Line 643: Line 789:
Mem:        61864        48044        13820            0        30316 Mem:        61864        48044        13820            0        30316
</code> </code>
 +
 +==== MiniPwner Home ====
 +The MiniPwner's key features include:
 +
 +Integrated Wired and Wireless connections
 +Once plugged into a target network, the Mini-Pwner can establish an SSH tunnel through the target network, or can be accessed by wifi. In addition, the MiniPwner can be configured as a wifi sniffer and logger - wardriving in your pocket.
 +
 +Low power consumption, can be run off battery.
 +With the 1700 mAh battery included in the kit, the Mini-Pwner will run for over five hours of active wired and wireless activity. No need to find a power outlet during the pen test.
 +
 +Multiple Pen Testing Tools included
 +tcpdump, nmap, kismet, all come pre-installed
 +
 +Flexible and Expandable
 +The MiniPwner runs on the open source OpenWrt operating system. You can easily add or change the installed packages.
 +
 +Small size
 +The MiniPwner can be easily carried in a pocket, hidden behind a telephone, or hang from a jack by a short ethernet cable.
 +
 +{{:toh:tp-link:mintyopen.jpg|}}
 +
 +There are many other creative ways to use the MiniPwner. Here is a list of some of the software that comes installed:
 +  * Nmap network scanner
 +  * Tcpdump sniffer
 +  * Netcat Hacker’s swiss army knife
 +  * aircrack Wireless network analysis
 +  * kismet Wireless network analysis
 +  * perl Perl Scripting Language
 +  * openvpn VPN Client and Server
 +  * dsniff suite of sniffing and spoofing tools, including arpspoof
 +  * nbtscan NetBIOS Network Scanner
 +  * snort Sniffer, Packet Logger, Intrusion Detection System
 +  * karma Wireless Sniffing Tool - not working yet....
 +  * samba2-client Windows File Sharing Client
 +  * elinks Text Based Web Browser
 +  * yafc FTP Client
 +  * openssh-sftp-client Secure File Transfer Client
 +
 +
 +Web - http://www.minipwner.com/
==== WR703N Expander board and case ==== ==== WR703N Expander board and case ====
Line 662: Line 848:
  * See the schematic for pin outs of the GPIO and serial ports. Due to space restrictions, the extra 8 GPIO's from PORTB are not routed out.   * See the schematic for pin outs of the GPIO and serial ports. Due to space restrictions, the extra 8 GPIO's from PORTB are not routed out.
- +===== Tags ===== 
- +---- 
-===== Custom IPv6 image for wr703n ===== +{{tag>FastEthernet 1NIC 1WNIC no_switch USB 1USB Serial 802.11bgn 1Ant integrated 32RAM 4Flash MIPS MIPS32 24k AP121 AR7240 AR9331 ath9k}}
- +
-a custom image with ipv6 support: radvd, wide-dhcpv6, 3g stick support, made for RCS-RDS Fiberlink dual stack PPPoE service, +
-but should be okay for static wan settings on other ISPs: +
-http://www.ip6.ro/firmware/wr703n/ +
- +
-{{tag>1Port USB Serial 802.11bgn 1Radio AR7240 AR9331 ath9k 4Flash 32RAM MIPS MIPS32 24k}}+

Back to top

toh/tp-link/tl-wr703n.1343649042.txt.bz2 · Last modified: 2012/07/30 13:50 by moony