From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 15:46, 26 May 2009 (edit)
Donny (Talk | contribs)
(How to Jtag a bricked router)
← Previous diff
Revision as of 15:47, 26 May 2009 (edit) (undo)
Donny (Talk | contribs)
Next diff →
Line 14: Line 14:
1. Replacing a CFE 1. Replacing a CFE
2. Erasing the NVRAM or kernel. 2. Erasing the NVRAM or kernel.

Revision as of 15:47, 26 May 2009

Jtag is a program for fixing your router if it is in an otherwise unrecoverable state. Jtag is done with a calbe hooked from a computer to an electrical connection on your router called a jtag port. There are sometimes two similar ports on a router; one is the jtag port and the other is a serial port.

In order to understand jtag, you need to understand the three parts of the program that runs inside your router (known as the router's firmware). The firmware is composed of a bootloader, (that starts up the router's operating system), the NVRAM, (where information particular to your router are stored, like it's IP address and your ssid name) and the kernel which is the program that your router uses.

These three parts together are known as the WHOLEFLASH.

The bootloader on a DD-wrt is a linux bootloader, known as a CFE. Linksys also used a VXworks bootloader on some routers that has to be replaced with a CFE linux bootloader using a VXKiller program. So, when people talk about the CFE of the router, they are talking about the bootloader. Every router has it's own particular CFE. It has the MAC addresses embedded in it for your router, so each one is a little different. That is why it is so important not to ever delete this without backing it up. If you delete it, you at least have to find another one that is for your make and model of router. This can be tricky in some cases, so ""don't delete the bootloader!""

The nvram is the place where variable information is stored. This is often where things get mucked up and is often the reason why people need to jtag their router. You can erase the nvram by doing a HARD reset of the router but sometimes the router will not respond. Then it is jtag time. If you delete the nvram, and have a proper CFE and kernel on the router, the nvram will rebuild itself. You don't need to jtag the nvram.

The kernel is the firmware. This is what you flash when you flash dd-wrt. DD-wrt IS the kernel. Again, if you have a CFE on the router, you don't need to flash the kernel with Jtag. If the CFE is working, you can flash using TFTP.exe or an equivalent program. Although you CAN flash the kernel using JTAG, it takes a LONG time and flashing using a jtag cable is not completely reliable, so you can end up with problems. You should not need to do this.

So if you have followed the bouncing ball, you should now understand that you should use JTAG primarily for two things:

1. Replacing a CFE

2. Erasing the NVRAM or kernel.

With that understanding, we can now turn to the tjtag program.

To jtag a router you can download a copy of tornado's program from the tornado subdirectory:

You will note that there is a version 2.14, and a folder for a v.3.0. The 3.0 supports more router chipsets, but you have to rename it .exe from .bin.

You have to, on a Windows system, load giveio.sys. First you have to put it in the system32 folder of your windows folder and then you have to load it using the loaddrv.exe program.

You should check to make sure your cable is working with a probeonly command:

tjtag -probeonly

If you get a response that recognizes your chipset, the next command should always be to backup your CFE first, even if you think it is FUBAR. Better safe then sorry.

This is done with the command:

tjtag -backup:cfe

Do this twice and make sure the files match.

To replace the CFE, you must rename the CFE file CFE.bin, and then use this command

tjtag -flash:cfe

Sometimes, in order to get things to flash correctly, you have to use switches like the /noemw or /noreset. You can get a list of these switches by typeing tjtag /?

A jtag cable can be bought off ebay, or made very inexpensively. Here is a picture of how to make one:[[1]]

Articles in category "Jtag"

There are 6 articles in this category.