Linksys WRT54G2 v1.0

Linksys WRT54G2 v1.0

Manuf (OEM/ODM): CyberTAN

FCC approval date: 23 January 2008
Country of manuf.: China
S/N prefix: CSV0

Local image

Type: wireless router

FCC ID: Q87-WRT54G2V1
IC ID: 3839A-WRT54G2V1
PCB ID: 3763-14143002R

Power: 12 VDC, 0.5 A
Connector type: barrel

CPU1: Broadcom BCM5354 (240 MHz)
FLA1: 2 MiB2,097,152 B 16,384 Kib 2,048 KiB 16 Mib 0.00195 GiB  (Eon EN29LV160AB-70TCP)
RAM1: 16 MiB16,777,216 B 131,072 Kib 16,384 KiB 128 Mib 0.0156 GiB  (Hynix HY57V281620FTP-H)

Expansion IFs: none specified
JTAG: yes, 12-pin header, unpopulated
Serial: yes, 5-pin header, unpopulated, (115200,8,N,1)

WI1 chip1: Broadcom BCM5354
WI1 802dot11 protocols: bg
WI1 antenna connector: none

ETH chip1: Broadcom BCM5354
Switch: Broadcom BCM5354
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

Stock bootloader: BSP

Stock FW OS: VxWorks

TPFirmware supported: DD-WRT • (List)

Default SSID: linksys (50 addl. devices)
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1295 additional devices
of which 153 are Linksys devices
Default login user: blank
Default login password: admin
blank:admin credentials used by 289 additional devices
of which 142 are Linksys devices

802dot11 OUI: 00:1E:E5 (13 E, 21 W), 00:21:29 (9 E, 16 W), 00:22:6B (8 E, 11 W), 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W)
Ethernet OUI: 00:1E:E5 (13 E, 21 W), 00:21:29 (9 E, 16 W), 00:22:6B (8 E, 11 W), 00:23:69 (12 E, 19 W), 00:25:9C (8 E, 15 W)

	FCC ID
Linksys WRT54GS2	Q87-WRT54G2V1

	CPU1 brand	WI1 chip1 brand
Linksys WRT54G2 v1.0	Broadcom	Broadcom
Linksys WRT54G2 v1.1	Atheros	Atheros
Linksys WRT54G2 v1.3	Broadcom	Broadcom
Linksys WRT54G2 v1.5	Atheros	Atheros

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

Wireless-G Broadband Router

• Support page

Links of Interest

Flashing

NOTE: During configuration or flashing a device, the only things that should be hooked to the device is the computer and power.

Flashing DD-WRT

WARNING: Requires Micro for DD-WRT, Do not flash anything else!

WARNING: Requires K2.4 for DD-WRT, Do not flash anything else!

Linksys WRT54G2 v1.0

These are instructions for the WRT54G2 V.1 ONLY

Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/VxWorksKiller-G2V1-new.bin
Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/dd-wrt.v24-10709_NEWD_micro.bin
Download ftp://dd-wrt.com/others/eko/WRT54G2V1%20Flashing/tftp.exe
Reset the router to defaults on the Linksys Admin page, and let it reboot or manually reboot it after its finished. Read the peacock announcement http://www.dd-wrt.com/phpBB2/viewtopic.php?t=51486 and take special note of number 11, (how to tftp).
Set your computer to a static IP address of 192.168.1.8 and 255.255.255.0 for a mask and plug ethernet cable into LAN port of the G2v1 unit.
Log in admin page (username is blank, password = admin) and navigate to firmware upgrade page. Browse to the VxWorksKiller-G2V1-new.bin file, press Upgrade and wait 120 seconds for it to reboot on its own, if it does not, then powercycle the router manually. Wait another 12 0seconds and reboot it again. Router should now be listening for tftp transfer of dd-wrt firmware.
Tftp the DD-WRT firmware to the router, use "dd-wrt.v24-10709_NEWD_micro.bin" that you downloaded in step 2; after sucessful tftp, wait 3 min for the router to finish writing new nvram deafults, etc... It should reboot on its own at least two times, so give it 3 min and then go to http://192.168.1.1 (If it not reboot on its own, wait another 1 min, and then power cycle it)
When if finishes booting up...do a hard reset on the unit...let it boot again, and configure.
Upgrade the NEWD_Micro.bin build 12548 after you have dd-wrt running, following the steps in note 1 of the peacock announcement
Don't forget to set your computer back to automatically obtaining DHCP and DNS.
Check for recommended builds here.

Upgrading

Updating DD-WRT

If dd-wrt is already on the router follow these instructions. If stock firmware is on the router follow the flashing instructions.

Check for recommended builds here first.
Set your computer to a static IP of 192.168.1.7. (or to whatever subnet the router is on) Disable all firewalls and security. Disable wireless on your computer and only have the router connected to the flashing computer by the ethernet cable between the two.
Hard reset or 30/30/30 (If the router supports it, if not, reset to defults in the GUI) prior to flashing. Wait. Check for password page on re-login and change password.
Flash firmware. You can use the webgui except if you have a belkin router. (For belkin use tftp.exe to flash)
Wait...at least three minutes. Lights should return to normal. See important2, below. Failing to wait is how most people brick their routers.
Do a power cycle of the router. (Unplug the cord, count to 30 and plug it back in.)
Wait for the lights to return to normal usually about 2 minutes.
Hard reset or 30/30/30 again (If the router supports it, if not, reset to defults in the GUI). Wait. Check for the password page and re-login to change the password. Then you can reconfigure your settings manually.
Once configured set your computer back to autoIP and autoDNS.

Important1: This Hard reset or 30/30/30 works fine for Asus router, but you do have to power cycle after the reset.

Important2: After you flash the firmware, and before you do the hard reset, the router will be building some nvram settings. YOU MUST WAIT FOR THIS TO FINISH PRIOR TO DOING ANYTHING WITH THE ROUTER INCLUDING A HARD RESET. Usually, you can tell when this process is completed by the WAN light coming on, but it does take several minutes. Go have a beer. There are starting to be more and more people who BRICK their routers by not waiting until the nvram is rebuilt, PRIOR to doing a hard reset. YOU NEED TO WAIT!

Reverting

Reverting to OEM Firmware from DD-WRT

Warning - There is only one way to revert at this time. Through JTAG and it has a generic mac address that can be fixed with mac clone.

OK...anyone willing to try it with JTAG...here is a "generic" original Linksys wholeflash for the WRT54G2V1.

It has an embedded MAC address of 00:21:29:00:00:01

This MUST be loaded back to the unit with JTAG...no exceptions.

This is an altered/edited wholeflash.bin file from my virgin unit...before dd-wrt was loaded.

[EDIT] - reported to be working.

redhawk

generic-WHOLEFLASH.BIN - This is vworks, not linux

ridley Reverting WRT54G2 to vxworks WITHOUT JTAG

JTAG-Serial Info

JTAG

JTAG Pinouts

 nTRST   1o o2	GND
   TDI   3o o4	GND
   TDO   5o o6	GND
   TMS   7o o8	GND
   TCK   9o o10	GND
 nSRST  11o o12  N/C

Using Universal JTAG Adapter

 white    1o o2	 black
   red    3o o4	 GND
  blue    5o o6	 GND
 green    7o o8	 GND
 yelow    9o o10  GND
 orange  11o o12  N/C

/noreset switch required

DD-WRT JTAG Recovery

Backup CFE x2 (Compare the files, they must match exactly or there is something wrong with your JTAG setup)
Erase Wholeflash x2
Flash CFE
Unplug Power
Unplug JTAG Cable

TFTP:

Set Rig ip static 192.168.1.10
Plug network cable from rig to port 1
Get TFTP ready, server ip - 192.168.1.1, Password - blank, file - dd-wrt.v24_micro_generic.bin
Plug in power
As soon as windows says "connected" hit upgrade. May have to use a network hub to make sure windows is always connected.
Hard Reset 30\30\30

Serial

Serial Pinouts

 VCC  1 o
  TX  2 o
  RX  3 o
 N/C  4 o
 GND  5 o

Hyper terminal Setup in Windows XP

In Windows XP, Click Start Button - All Programs - Accessories - 
   Communication - HyperTerminal
Enter a name for the connection, Click ok
Choose com port you adapter is plugged into, Click ok
Set:
 Bits per second = 115200
 Data Bits = 8
 Parity = none
 Stop bits = 1
 Flow control = none
Click ok
Click File - Save As, and select a place to save it to so you 
             don't have to enter the settings again.

Putty Setup in Windows XP

After installing putty, run it
 Serial line = The COM port your using for serial (ie. COM3)
 Speed = 115200
Click on Serial under Connection
 Serial line to connect to = same as above (Serial line)
 Speed (baud) = 115200
 Data bits = 8
 Stop bits = 1
 Parity = none
 Flow control = none
Click Session
 Enter a name for your connection under saved sessions
Click Save
Click Open

DD-WRT Serial Recovery

Modified Redhawk0 instructions

Connect Serial cable
Start one of the programs from above
Get TFTP ready with file selected
Use dd-wrt.v24_micro_generic.bin
Connect power to the router
start a rapid fire Cntl-C as you plug the router to power
type "nvram erase" w/o quotes, hit enter
type "flash -noheader : flash1.trx" w/o quotes, this starts the tftp daemon, hit enter
but have tftp.exe ready
Click go or start on TFTP
give it 5 minutes after it finishes
then power cycle....hard reset...then config
when it stops spitting out txt in the serial consol....hit the enter key...you should get a login prompt...at that point, power cycle it, Hard reset or 30/30/30...then config
you'll see it boot up

USB Info

No USB

vlan Info

DD-WRT vlan Info

WikiDevi:DD-WRT/VLAN Support

Confirmed the WRT54G2 v1.0 supports port-based vlans via the GUI with build 14929.

Confirmed the WRT54Gs v1.0 supports port-based vlans via nvram with build 14848 micro-plus-ssh

WRT54G2 v1.0's ports are mapped like this:

 1 2 3 4 | case labels
 3 2 1 0 | nvram port numbers

Defaults

root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=4 5
vlan0ports=3 2 1 0 5*
size: 17376 bytes (15392 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
port4vlans=0
port3vlans=0
port2vlans=0
port1vlans=0
port0vlans=1
size: 17376 bytes (15392 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
vlan1hwname=et0
vlan0hwname=et0
size: 17376 bytes (15392 left)
root@DD-WRT:~# lsmod
Module                  Size  Used by
ip_nat_pptp             2192   0 (unused)
ip_conntrack_pptp       2524   1
ip_nat_proto_gre        1552   0 (unused)
ip_conntrack_proto_gre    2312   0 [ip_nat_pptp ip_conntrack_pptp]
switch-robo             5036   0 (unused)
switch-core             5984   0 [switch-robo]
root@DD-WRT:~# ls /proc/switch
eth0
root@DD-WRT:~# cat /proc/switch/eth0/vlan/0/ports
0       1       2       3       5t*
root@DD-WRT:~# cat /proc/switch/eth0/vlan/1/ports
4       5t
root@DD-WRT:~# cat /proc/switch/eth0/vlan/2/ports
4
root@DD-WRT:~#

Commands

root@DD-WRT:~# nvram set vlan1ports="3 4 5"
root@DD-WRT:~# nvram set vlan0ports="2 1 0 5*"
root@DD-WRT:~# nvram commit
root@DD-WRT:~# reboot

nvram

root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=3 4 5
vlan0ports=2 1 0 5*
size: 17459 bytes (15309 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
port4vlans=0
port3vlans=0
port2vlans=0
port1vlans=0
port0vlans=1
size: 17459 bytes (15309 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
vlan1hwname=et0
vlan0hwname=et0
size: 17459 bytes (15309 left)
root@DD-WRT:~#