LaFonera Software Flashing

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 06:15, 7 April 2008 (edit)
Ctsrts (Talk | contribs)
(Preparation - Mention release candidates)
← Previous diff
Revision as of 03:01, 30 April 2008 (edit) (undo)
Techie (Talk | contribs)
m (updated link)
Next diff →
Line 101: Line 101:
==Step 6== ==Step 6==
-Download the latest root.fs and vmlinux.bin.l7 from: the latest root.fs and vmlinux.bin.l7 from:
==Step 7== ==Step 7==

Revision as of 03:01, 30 April 2008

You are here: DD-WRT wiki mainpage / LaFonera / Software / Initial Flashing



You'll need the following for this tutorial:

  1. SSH client
    • For windows, Putty is a free and popular choice
    • For Mac OS X, SSH is built in. Open and use "ssh".
  2. Telnet client
    • For Windows, Putty again will work.
    • For Mac OS X, telnet is built in. Open and use "telnet".
  3. The following files:
    1. root.fs and vmlinux.bin.l7 from a directory of a recent beta version or a release candidate
  4. One of the following methods to serve the above files to the LaFonera:
    • Connecting the LaFonera to the Internet (note: don't connect the LaFonera to the Internet before changing the DNS as instructed, as it may auto-update its firmware).
    • Windows: Run HTTP file server on your Windows machine (it's a simple no-installer-needed HTTP server). If the link does not work, try this one.
    • Mac OS X: Start up "Personal Web Sharing" in the "Sharing" pane of System Preferences. Use the "Sites" folder in your home directory to serve files.
    • Linux: Install Apache from your distribution's package manager. You might want to have a look at webfs as well. [Simple alternatives welcome]
    • Fetching the file to another computer and copying them into LaFonera using scp.
  5. TFTP server software.
    (TFTP is not FTP; these are different protocols. TFTP, unlike FTP, is used primarily for transferring files to and from network equipment (e.g. your router, switch, hub, whatnot firmware upgrade or backup, or configuration backup and restore))
    Here are some options:
    • Simple TFTP server for Windows: Download this and run it, click the Browse button and select the folder containing the rootfs and vmlinux files from above, and use the given server interface as your redboot remote server ip.
    • If you're running Linux, here's the simplest cross-distribution way to setup a TFTP server:
      1. Build tftp-hpa by running ./configure and then make.
      2. Become root (or use sudo) and run ./tftpd/tftpd -s -L [tftpdir] where [tftpdir] is the directory containing vmlinux.bin.l7 and root.fs. Note that this directory and its content must be readable by the nobody user.
      3. Test with a command-line TFTP client, such as the one that was built with tftp-hpa.
    • If you're running Ubuntu, type "sudo apt-get install tftpd-hpa" and put files into /var/lib/tftpboot/ directory.
    • If you're running Mac OS X, you can use the integrated tftp server:
      1. Create the TFTP server root by typing sudo mkdir /private/tftpboot
      2. Start the server by typing sudo /sbin/service tftp start
      3. Test it by typing tftp localhost then get (filename) where (filename) is the name of a file you have put in /private/tftpboot
      4. Note: the above instructions only seem to work on older OS X installations. If you're having trouble with the built-in TFTP on the command line, you can use this very useful freeware to manage it with a GUI:
  6. An Ethernet cable to connect LaFonera to your computer and/or router. (LaFonera's Ethernet port is auto-sensing.)


If you have a serial connection skip to Step 6

Step 1

Start with a stock LaFonera, with the original firmware (7.x). If you're unsure your version, with the power on, hold down the reset button on the bottom of the unit for up to 30 seconds. This should reset it to the original firmware.

Some foneras will not reset once they've upgraded firmware, or may come with later versions by default. Regardless of your version (up to and including 0.7.2 r3) you can use the method detailed on this page to downgrade to 0.7.1 r1, . Basically do steps 1 to 8 and ignore the rest. That is, change your main router's IP to, sub, with static DNS as, and your la fonera's IP to, sub, gateway and dns, then reboot until you see firmware 0.7.1 r1 on the la fonera.

Step 2

Enable the built-in SSH server on the LaFonera

  • For a LaFonera with firmware 0.7.1 r1 or before: over wireless or over Ethernet (easier)
  • For a LaFonera with firmware 0.7.1 r2 use:
    • Easy deployment of the Kolofinum hack: Change the name server (DNS) of your La Fonera to, reboot and connect it to the Internet via Ethernet.
      A fake DNS server at that IP applies the hack to your router for you, and you can now connect via SSH (until the next reboot). No need to download HTML hacks and manual edi files. This should work with other firmwares, too. When done, change the name server according back to your usual ISP or LAN setup.
      • NOTE: If you reset your too early dns and allow the fonera to "phone home" it will likely run a firmware update that will bring you up to 0.7.2 r3. You don't want this to happen so it is best if you keep the dns setup until you have completed flashing
    • Alternative methosd: this works on the newest firmware that has been hard-coded on the new chips
      • Hold reset button for 30 seconds
      • Remove the power connector while still holding reset.
      • Replace power connector and continue holding reset button until "wifi" lights up and goes away again (a good 2-3 minutes of holding it).
      • Let go and wait for "wifi" to come back (2-3 minutes).
      • Now you may use the "step1.html" and "step2.html" method to turn SSH on as you would with the normal "r1" LaFonera. It will still continue to say "r2" on the LaFonera status page whilst you enjoy your SSH connection.

Step 3

Connect via SSH to the LaFonera, and execute the following commands:

cd /tmp
mtd -e vmlinux.bin.l7 write openwrt-ar531x-2.4-vmlinux-CAMICIA.lzma vmlinux.bin.l7
  • Be patient. This can take a few minutes.

After the "reboot" command, the LaFonera will reboot and you'll lose the connection.

Don't be mislead by the name of the file. This is actually a FON kernel hacked to write on the mtd partion with RedBoot. After this step the LaFonera should be able to restart without any problem. In case you are not able to connect to the Internet from the LaFonera, you can download the files locally, install an FTP or HTTP server on your PC and wget the files from the PC by entering the local server IP. Or, you can use scp to copy the file to the router over ssh.

Step 4

Again connect via SSH to the LaFonera, and execute the following commands. (Note: Your LaFonera will not boot past RedBoot anymore after this step)

cd /tmp
mtd -e "RedBoot config" write out.hex "RedBoot config"

Please note, if you get an error stating "Could not open mtd device", please make sure you have properly capitalized the word RedBoot. The name is case sensitive!

Step 5

Your LaFonera should not be able to completely boot, because the FIS directory will be erased. However, you should be able to connect to the RedBoot prompt. To connect to RedBoot you need to:

  • a) Configure your PC so you have an address like
  • b) Connect your PC and the LaFonera through a crossover ethernet cable or a switch and 2 normal cables (note: you can connect to LaFonera with either a normal cat5 ethernet cable, or with a crossover cable, as La Fonera's NIC is auto-sensing).
  • c) Disconnect and reconnect the power to your LaFonera. In the first 10 secs you can access to RedBoot via a plain Telnet connection on port 9000.
    • Open a command prompt or terminal window and type in the following:
telnet 9000
Note the 9000 after the IP. This specifies port 9000, which is the port RedBoot is listening on.
If the RedBoot> prompt is not immediately visible, try pressing enter once you've connected.
[You can use a IP/port scan program like Angry IP Scanner, and as soon as it can ping to your LaFonera you can Telnet to it for 10 seconds and you can also check if port 9000 is available]
[Sometimes you may have to use another telnet client such as Putty. Windows' built-in Telnet client may fail to show the prompt after rebooting the LaFonera]
If everything goes well you should have a "RedBoot>" prompt in telnet.

Step 6

Download the latest root.fs and vmlinux.bin.l7 from:

Step 7

Copy root.fs and vmlinux.bin.l7 to your TFTP server directory.

No matter what you use for a TFTP server, RedBoot will try to fetch the files from the root directory, e.g., /root.fs. Make sure your TFTP server is configured to do this as some are not by default.

Alternatively, if you have a web server, you can copy the files to it instead.

Step 8 - Configure Redboot

Configure RedBoot for local IP address and TFTP server in telnet.

ip_address -l [local ip address/24] -h [remote server address]
Replace "[local ip address/24]" with "" and "[remote server address]" with whatever you entered as the IP address of your TFTP server, in this case.
ip_address -l -h

If the local IP address changes from your Telnet session will die and you will need to reconnect to the newly entered IP address.

Step 9 - Flashing the La Fonera

Run these commands in telnet. Make sure that there is no firewall blocking the 'load' command. The "fis create" commands below will take a while, do not disconnect while waiting

fis init
load -r -v -b 0x80041000 root.fs
fis create -b 0x80041000 -f 0xA8030000 -l 0x002C0000 -e 0x00000000 rootfs
load -r -v -b 0x80041000 vmlinux.bin.l7
fis create -r 0x80041000 -e 0x80041000 -l 0x000E0000 vmlinux.bin.l7
fis create -f 0xA83D0000 -l 0x00010000 -n nvram
/!\ Each "fis create" commands take up to 10 minutes or so to complete, so be patient before typing the next command! There will be no output in the terminal window after the programming starts until the programming cycle has been completed. This is normal, don't panic.

There are other methods of transfering the files over to the fonera, including directly over a serial connection (if you are using one) or using HTTP (the standard web protocol). For serial users, add "-m xmodem" to the end of your load commands, find the send file option in your terminal, select the right file, and it should to the rest. If you want to use HTTP, add "-m HTTP -h your_server_ip". You may need to add a "/" to the filename, eg: "/root.fs", and the file should be in the main folder of your site. (Otherwise, try "/folder/root.fs"). If it starts printing out jibberish, wait till it stops, clear the screen, and retry the command without the "-v".

  • a) This is a sample of the output you will see.
RedBoot> fis init
About to initialize [format] FLASH image system - continue (y/n)? y
*** Initialize FLASH Image System
... Erase from 0xa83e0000-0xa83f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa83e0000: .

load -r -v -b 0x80041000 root.fs
Using default protocol (TFTP)
Raw file loaded 0x80041000-0x802e3fff, assumed entry at 0x80041000
RedBoot> fis create -b 0x80041000 -f 0xA8030000 -l 0x002C0000 -e 0x00000000 rootfs
... Erase from 0xa8030000-0xa82f0000: ............................................
... Program from 0x80041000-0x80301000 at 0xa8030000: ............................................
... Erase from 0xa83e0000-0xa83f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa83e0000: .

RedBoot> load -r -v -b 0x80041000 vmlinux.bin.l7
Using default protocol (TFTP)
Raw file loaded 0x80041000-0x80120fff, assumed entry at 0x80041000

RedBoot> fis create -r 0x80041000 -e 0x80041000 -l 0x000E0000 vmlinux.bin.l7
... Erase from 0xa82f0000-0xa83d0000: ..............
... Program from 0x80041000-0x80121000 at 0xa82f0000: ..............
... Erase from 0xa83e0000-0xa83f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa83e0000: .

RedBoot> fis create -f 0xA83D0000 -l 0x00010000 -n nvram
... Erase from 0xa83e0000-0xa83f0000: .
... Program from 0x80ff0000-0x81000000 at 0xa83e0000: .
  • b) Run this command in telnet to reboot.

That's it. Your LaFonera should reboot and start DD-WRT. It by default will DHCP an external IP address, start an open wireless network called "dd-wrt" and have management at (on port 80). The default username is "root" and the default password is "admin".

Resetting NVRAM

If the configuration is corrupted/incorrect, try resetting of the NVRAM. Power up the unit, and wait about 2 minutes, then hold down the reset button for several seconds. You must do this while the firmware is loaded, hence waiting for a minute or two after powering it up.

If that fails, try these steps:

1. Reset the LaFonera and telnet into the Redboot prompt (see Step 5 above).

2. Enter the following command to erase the NVRAM partition.

fis erase -f 0xA83D0000 -l 0x00010000

3. Load DD-WRT by typing and executing these commands:

fis load -l vmlinux.bin.l7

You're all done. DD-WRT will rebuild the NVRAM and it will be fresh as spring!

Reflashing LaFonera original firmware

  1. Download the firmware:
    • Download and unzip a pre-converted zip file:
      7.1.1 version (Enable-SSH hole is OPEN in this version): Link
      7.1.2 versions (Enable-SSH hole has been patched in this version): Link
    • If you want the firmware directly from FON, download it here: (Direct link) then follow these steps to convert it to usable files:
      1. Remove the first 520 bytes of the downloaded file.
        • On Linux, Mac OS X (or other *nixes): tail --bytes +520 fonera_0.7.1.3.fon > fonera_0.7.1.3.tar.gz
        • Windows: Use the mirrored zip files which are already converted.
      2. Change the extension of the resulting file to .tar.gz and untar it.
  2. You need 2 files from the steps above, kernel.lzma and rootfs.squashfs. Put these in your TFTP server root directory. If you don't have a TFTP server, go back the beginning of this document and set one up.
  3. Connect to the RedBoot prompt and type in the following commands:
ip_address -l -h
fis init
load -r -v -b 0x80040450 rootfs.squashfs
fis create -b 0x80040450 -f 0xA8030000 -l 0x00700000 -e 0x00000000 rootfs
load -r -b %{FREEMEMLO} kernel.lzma
fis create -r 0x80041000 -e 0x80041000 vmlinux.bin.l7
fis load -l vmlinux.bin.l7

Reboot the FON and you're done.

Recovery of a non-responsive LaFonera

If you've managed to get partway through this guild and find the LaFonera doesn't seem to respond anymore, here are a few recovery tricks.

  1. Set your computer's network card IP address to and the subnet mask to You may need to disconnect/disable all other network cards on that PC to ensure the proper route is used.
  2. Connect your LaFonera to the network card via a network cable.
  3. In a browser, try to connect to
  4. If that fails, try to establish an SSH connection to
  5. If that fails, try to establish a Telnet connection to on the standard port (23), or port 9000.
    • Power on the LaFonera, and after 2 to 4 seconds, try to start the Telnet connection to catch the RedBoot prompt.
    • When Using RedBoot, make sure you are using line mode for Telnet. In Mac OS X and Linux, enable this by creating a file named ".telnetrc" in your home folder. Add the following lines:
	mode line

If all steps above fails you can try this:

1. Change your:

IP adress to:
Subnet mask to:
Standard gateway to:
DNS: (maybe is an optional setting)

2. Open Putty and enter:

Host name:
Protocol: Telnet 
Port 9000

3. DON'T press "Open"!

4. Power on your LaFonera

5. When your computer gets an IP adress press the "Open" button in Putty

6. Hopefully you will see someting like this now:

== Executing boot script in 9.160 seconds - enter ^C to abort

7. If Putty timeout or can't connect to your LaFonera try to restart the LaFonera and try to catch the RedBoot prompt (you only have a few seconds to do that!)

If that fails, you may have to resort to a serial connection

Serial connect devices are listed in the #External_links section of this guide.

See also LaFonera_Software_Debricking.

External Links