Buffalo WZR-D1800H


 * Product page •  Datasheet

"P/N: 141911620002J R0A" is silkscreened on the main board. "P/N: 141883320000J R0A" is silkscreened on the 2.4GHz wireless module.
 * This device is Broadcom based. OEM Arcadyan.

The BCM4331 wireless module uses 3x Skyworks (SiGe) SE2594L
 * (Dual Band 802.11a/b/g/n Wireless LAN Front End)

The BCM4360 wireless module uses 3x Skyworks (SiGe) SE5003L
 * (5GHz, 23dBm Power Amp w/ Power Detector)


 * On the OpenWrt wiki
 * Per the lspci dump, the BCM4360 has the PCI ID of 14e4:43a2

Reviews

 * Reviewed on C|Net
 * Review on SmallNetBuilder, part 1
 * Review on SmallNetBuilder, part 2 (10:6F:3F OUI)
 * The Arcadyan model of the device may be WG9116AAC-J6.
 * "P/N: 141911620002J R01" is silkscreened on the main board.
 * "P/N: 141883320008J" is silkscreened on the 5GHz wireless module.
 * The silkscreened manuf. date code is 1215 (third week of April).
 * Default SSIDs appear to be BUFFALO-XXXXXX_A and BUFFALO-XXXXXX_G
 * (upper case letters, LAN MAC is probably the MAC used for both).

Forum threads

 * On the DD-WRT forums, and another post with the initial test build
 * Not bundled with DD-WRT, but work has been completed to support,
 * see this thread for the latest test build.

News

 * Buffalo showcases cutting-edge wireless technology

Flashing DD-WRT
nvram shows as 256 KB with DD-WRT installed


 * .bin files are for initial flash, .trx files are for upgrading.


 * 1) Do a Hard Reset
 * 2) Upload DD-WRT via GUI
 * 3) Do a Hard Reset

Upgrading DD-WRT

 * trx files are for upgrading, bin files are for initial flash.


 * 1) Do a Hard Reset
 * 2) Upload DD-WRT via GUI
 * 3) Do a Hard Reset

Reverting from DD-WRT to OEM firmware

 * 1) Do a Hard Reset
 * 2) Upload Buffalo Firmware via GUI
 * 3) Do a Hard Reset

JTAG-Serial Info

 * Good info on opening this unit Will post here ASAP
 * De-bricking a Buffalo wifi router

Serial Pinouts

 * J9

 1 o VCC 2 o GND 3 o RX 4 o TX

Images
Buffalo's Images

jffs Issue in DD-WRT
This problem is caused by the firmware encountering an unmarked bad block during an
 * erase operation while attempting to setup a JFFS2 filesystem on device /dev/mtd/4.

Most people will probably never experience this problem. The AC66U, the D1800H, and
 * the Buffalo WLI-H4-D1300 Media Bridge use the same Samsung flash memory chip.

In case, 4 of 5 D1800H's had the problem but D1300 didn't. Neither of AC66U's had the problem.
 * One person on one of the AC66U threads reported having the problem; here's a link to his post.

If you have the problem, you will not be able to create or copy directories and files to /jffs.
 * Here are some example error messages: (this list was shortened to save space - it can go on for several pages)

Also the Status -> Router webpage will show that JFFS2 has no free space.

To fix this problem try the following at a command line prompt:

This command erases and marks bad any bad blocks encountered so that they can be "skipped"
 * and formats the partition to JFFS2 specifications.

I believe the firmware uses the mtd erase command which seems to fail at handling bad blocks.
 * The flash_erase command needs to be run only once.

- Magnetron1.1