On Networks (Netgear) N300R

On Networks N300R
Availability: now

Manuf (OEM/ODM): Delta Networks

FCC approval date: 24 May 2012
(Est.) release date: 20 May 2012
UPC: 606449086546 (UPC DB, On eBay)
Country of manuf.: China

Amazon image

ASIN
B0081HD3OO (, On Amazon, On CCC)

Type: wireless router

FCC ID: PY310400149

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Realtek RTL8196C (390 MHz)
FLA1: 4 MiB4,194,304 B 32,768 Kib 4,096 KiB 32 Mib 0.00391 GiB  (Macronix MX25L3206EM2I-12G)
RAM1: 32 MiB33,554,432 B 262,144 Kib 32,768 KiB 256 Mib 0.0313 GiB  (Winbond W9825G6JH-6)

Expansion IFs: none specified
Serial: yes, internal, 4-pin header, populated, 3.3V TTL, (38400,8,N,1)

WI1 chip1: Realtek RTL8192CE
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: none

ETH chip1: Realtek RTL8196C
Switch: Realtek RTL8196C
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

bgn

Stock bootloader: rtkload v2.1

Stock FW OS: Linux 2.4.18

Default SSID: OnNetworksXX
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1304 additional devices
of which 1 are On Networks devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1324 additional devices
of which 1 are On Networks devices

802dot11 OUI: 84:1B:5E (8 E, 10 W)
Ethernet OUI: 84:1B:5E (8 E, 10 W)

	FCC ID
Netgear JWNR2000v2	PY310400149

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

N300 WiFi Router

• Support page

"2976414500" is silkscreened on a sample production unit's board.

The default SSID pattern appears to be OnNetworksXX,

where XX seems to be a number.

Included PSU(s)

The power supply included with the device looks

to be an (unknown branded) T012LF1209.

unknown T012LF1209 (332-10469-01) (more)
Input: 100-240 VAC ~ 50/60 Hz, 0.5 A
Input connector: NEMA 1-15P Style: small, horiz. Manuf. in: China Eff. level: 5
Output: 12 VDC, 1 A
Output connector: barrel (center +) OD: ?? ID: ?? LEN: ??

Serial

Pinout

The pinout for the serial connection appears to be as follows...

[ RTL8196C ]

            (GND) (RxD) (TxD) (3.3)
                                   JP2

Info derived from

• boot log

4.MXIC SPI (4 MByte)!

---JWNR2000v2 at 2011.12.12-11:14+0800 version v2.1 [16bit](390MHz)

### Press down Reset button(GPIOA5) to reset the Router Configuration!! ###
no sys signature at 00010000!
system signature at 00020000!
rootfs signature at 000D0000!

### Press down Esc key to escape booting by user!! ###
Set 8196C PHY Patch OK

NMRP Client starts Listening for ADVERTISE...
NMRP timeoust exit;
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
early printk enabled
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock7 console=0
Calibrating delay loop... 389.12 BogoMIPS
Memory: 24096k/32768k available (2076k kernel code, 8672k reserved, 241k data, 56k init, 0k highmem)
Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode-cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
check_wait... unavailable.
POSIX conformance testing by UNIFIX
Initializing RT netlink socket
Starting kswapd
pty: 10 Unix98 ptys configured
state->flags=00000000
Realtek GPIO Driver for Flash Reload Default
block: 64 slots per queue, batch=16
SPI INIT
flash device: 0x200000 at 0xbd000000
probe realtek
get SPI CS0
maker:c2  type:20  sector_cnt:64
get SPI CS1
maker:0  type:0  sector_cnt:0

MXIC matched!!get SPI chip driver!
probe ends
probe realtek2
Creating 10 MTD partitions on "Physically mapped flash":
0x00000000-0x00008000 : "boot+hw_setting"
0x00008000-0x0000a000 : "pot"
0x0000a000-0x0000c000 : "pppoe"
0x0000c000-0x0000e000 : "reserve1"
0x0000e000-0x00010000 : "reserve2"
0x00010000-0x00020000 : "nvram"
0x00020000-0x000d0000 : "kernel"
0x000d0000-0x003b0000 : "root fs"
0x003b0000-0x003c0000 : "trafficmeter"
0x003c0000-0x00400000 : "language_table"
RTL8192C/RTL8188C driver version 1.4 (2010-12-22)
=====>>INSIDE rtl8192cd_init_one <<=====
vendor_deivce_id=819110ec
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
TCP: Hash tables configured (established 2048 bind 4096)
ip_conntrack version 2.1 (512 buckets, 4096 max) - 356 bytes per conntrack
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
PPTP netfilter connection tracking: registered
PPTP netfilter NAT helper: registered
ip_tables: (C) 2000-2002 Netfilter core team
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 56k freed
mount /proc file system ok!
mount /var  file system ok!
mtd = /dev/nvram
flatfsd: flat1_checkfs 4, hdr.magic=cafe2345, hdr.length=14508, hdr.chksum=1290928

flatfsd: Created 8 configuration files (14223 bytes)
Wed Jan  1 00:00:00 UTC 2003
firmware_version = V1.0.0.3_1.0.10
Using /lib/modules/2.4.18/fastpath.o
Realtek FastPath v1.18
Using /lib/modules/2.4.18/dni-qos.o
dni-qos module init at dev:eth1, real_dev:eth1
Using /lib/modules/2.4.18/ipt_CONENAT.o
Using /lib/modules/2.4.18/ipt_DNS_HIJACK.o
Using /lib/modules/2.4.18/ip_conntrack_starcraft.o
Using /lib/modules/2.4.18/ip_nat_starcraft.o
Using /lib/modules/2.4.18/lan_port_resv.o
Using /lib/modules/2.4.18/delete_conntrack.o
Using /lib/modules/2.4.18/ipt_string.o
Using /lib/modules/2.4.18/ip_conntrack_proto_esp.o
Using /lib/modules/2.4.18/ip_nat_proto_esp.o
PID:mtd = /dev/nvram
flatfsd: Wrote 14508 bytes to flash in 0 seconds
SSID:OnNetworks03PASSPHRASE:53602068Configuring LAN , lan_ifname = br0 ........
  Set 8196C PHY Patch OK

IF_handle start....
wps start
cat: /tmp/wscd_lock_stat: No such file or directory
[wsc]main 6645:daemon parameter:
wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-wlan0.fifo -daemon

Read config file:/var/wsc.conf, def:0
configured pin_timeout = 240
[wsc]init_config 6296:auth_type_flags:21
[wsc]init_config 6300:encrypt_type_flags:09

<<====WPS argument list=====>>
is_ap = 1
role = Registrar
config_state = configured
config_method = 0x2688
pin_code = 20202330
upnp = 1
wlan0_wsc_disabled=0
auth_type_flags:0x21
encrypt_type_flags:9
---wlan0 setting---
rf_band = 1; 1=2.4G ;2=5G
SSID=OnNetworks03
security mixed mode = 0
Auth_Type=32
Encrypt_Type=8
WSC_PSK = 53602068
wlan0 interface wsc is Enabled
button_hold_time = 3
SSID-prefix = OnNetworks_
disable_configured_by_exReg = 0
uuid=63041253101920061228841b5e832259
brute_force_attack_mitigation ThresHold[3]
wsc version=2.0

<<====WPS argument list=====>>
<< Start_upnp >>
WSCRegisterCallBackFunc successfully!

WiFi Simple Config v2.10-wps2.0 (2012.06.05-04:17+0000).

starting app
[util]build_probe_rsp_ie,2377:config method(0x1008)=2008
[wsc]main 6878:alarm(1)---------->
$Starting udhcpd:
error, Failure parsing line 10 of /var/udhcpd.conf
info, udhcpd (v0.9.9-pre) started
error, max_leases value (254) not sane, setting to 253 instead
error, Unable to open /tmp/udhcpd.leases for reading

The attached devices demo is Running ...

$Starting Service:
The abbreviation of English is Eng!
reload_language_table::Didn't find the language table we need!
gui_region = English
region = English, download_region =
 Update string table successfully, memory usage: 292KB.
The httpd server is running ...
$Starting syslogd:

route: SIOC[ADD|DEL]RT: No such process
$Starting miniigd:

MiniIGD v1.07 (2012.06.05-04:17+0000).
$Starting mini_upnpd:
$Starting dnsmasq:
No nameserver in /var/resolv.conf

 Static routes setting:
WAN is down
The telnetenable is running ...
device eth5 is not a slave of br0
/etc/rc.d/service_start.sh: 186: /sbin/cmd_traffic_meter: not found
$Starting /usr/sbin/lld2d:

flash:: open /tmp/upnp_portmap failed

$Starting WAN:
$Starting udhcpc:
info, udhcpc (v0.9.9-pre) started
udhcpc -i eth1 -p /var/run/udhcpc.pid -s /etc/udhcpc/udhcpc.script    -h N300R &

deconfig
interface=eth1

BusyBox v1.01 (2012.06.05-04:16+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

/ # ##POT area valid.
Start sending discover ...
#### firmware_checking  ####

ps aux

• ps aux

/ # ps aux
  PID  Uid     VmSize Stat Command
    1 root        376 S   init
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
    7 root            SW  [mtdblockd]
  547 root        500 S   wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-w
  568 root        292 S   iwcontrol wlan0
  616 root        448 S   udhcpd /var/udhcpd.conf
  620 root        248 S   net-scan
  626 root        744 S   /usr/sbin/uhttpd
  630 root        380 S   syslogd -m -1
  632 root        324 S   klogd
  651 root        388 S   miniigd -e 1 -i br0 -u 12342409-1234-1234-5678-841b5e
  661 root        340 S   mini_upnpd -wsc /tmp/wscd_config -igd /tmp/igd_config
  698 root        340 S   dnsmasq -h -n -c 0 -i br0 -r /var/resolv.conf
  763 root        224 S   /usr/sbin/telnetenable
  764 root        244 S   /usr/sbin/getdeviceinfo
  803 root        368 S   /usr/sbin/lld2d br0
  877 root        380 S   udhcpc -R -i eth1 -p /var/run/udhcpc.pid -s /etc/udhc
  882 root        412 S   /bin/sh /etc/rc.d/mon_tsk.sh
  883 root        432 S   /bin/sh /etc/rc.d/monitor.sh
  921 root        208 S   /sbin/alarm 0
  941 root        244 S   /sbin/monWsc
  942 root        240 S   /usr/sbin/potd
  943 root        196 S   /usr/sbin/set_potd
  945 root        500 S   /bin/sh
 1061 root        252 S   sleep 30
 1062 root        356 R   ps aux

lsmod

• lsmod

/ # lsmod
Module                  Size  Used by
ip_nat_proto_esp         712   0 (unused)
ip_conntrack_proto_esp    1640   0 (unused)
ipt_string              4296   0 (unused)
delete_conntrack        2504   0 (unused)
lan_port_resv           1632   0
ip_nat_starcraft        1088   0 (unused)
ip_conntrack_starcraft    1816   1
ipt_DNS_HIJACK          3072   1
ipt_CONENAT             1400   0 (unused)
dni-qos                 6896   0 (unused)
fastpath              106608   0 (unused)

cat /proc/mtd

• /proc/mtd

/proc # cat mtd
dev:    size   erasesize  name
mtd0: 00008000 00001000 "boot+hw_setting"
mtd1: 00002000 00001000 "pot"
mtd2: 00002000 00001000 "pppoe"
mtd3: 00002000 00001000 "reserve1"
mtd4: 00002000 00001000 "reserve2"
mtd5: 00010000 00001000 "nvram"
mtd6: 000b0000 00001000 "kernel"
mtd7: 002e0000 00001000 "root fs"
mtd8: 00010000 00001000 "trafficmeter"
mtd9: 00040000 00001000 "language_table"

cat /proc/meminfo

• meminfo

/proc # cat meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  24731648 12988416 11743232        0  1155072  4030464
Swap:        0        0        0
MemTotal:        24152 kB
MemFree:         11468 kB
MemShared:           0 kB
Buffers:          1128 kB
Cached:           3936 kB
SwapCached:          0 kB
Active:           1592 kB
Inactive:         5368 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        24152 kB
LowFree:         11468 kB
SwapTotal:           0 kB
SwapFree:            0 kB

cat /proc/cpuinfo

• cpuinfo

/proc # cat cpuinfo
system type             : Philips Nino
processor               : 0
cpu model               : R3000 V0.0
BogoMIPS                : 389.12
wait instruction        : yes
microsecond timers      : no
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available
ll emulations           : 0
sc emulations           : 0