Linksys WAP54G

From DD-WRT Wiki

Revision as of 17:58, 11 January 2019 by Jeremywh7 (Talk | contribs)
Jump to: navigation, search

Linksys WAP54G Hardware Spec

Contents


Installation

WARNING - DD-WRT was not originally intended to be loaded on a WAP unit. It was found that it will run but it is a tricky unit to load and have function correctly. Below are a compilation of methods/instructions to assist you with creating a DD-WRT-loaded WAP unit.

Hard reset does not work on this device so it is not possible to clear the NVRAM using the reset button. This can be problematic if you need to reset the device in order to access it. If this happens you can reinstall the linksys firmware using the tftp method and then reset it.

LOAD AT YOUR OWN RISK.

MAC ADDRESS CHANGES - redhawk

If you really want your WAP to have the correct MAC address when it boots up there are 2 methods....one simple but not permanent, and one not so simple but permanent.

Method 1

For V1.x only On the Administration>>Commands tab enter

nvram set et1macaddr=<your MAC address minus 1 here> (due to the port swap) (i.e. 00:11:22:33:44:54)
nvram commit

Run then Save as Startup....now reboot the unit for the new MAC to take effect.

For V2 units - This unit version has a unique motherboard flag and should be recognized as a WAP on the Status tab.

For MAC alterations on a V2.0- V3.x - follow the same step above except substitute the et1macaddr with et0macaddr and don't use the minus 1, use your actual MAC address. (i.e. 00:11:22:33:44:55)

This will need to be re-entered if you do a hard reset (like when doing firmware upgrades).

Example of startup script for a V1:

 nvram set et1macaddr=00:11:22:33:44:54
 nvram set boardnum=2
 nvram commit

Example of startup script for a V2.0:

 nvram set et0macaddr=00:11:22:33:44:55
 nvram commit

Example of startup script for a V3.X:

 nvram set et0macaddr=00:11:22:33:44:55
 nvram set WAPver=3
 nvram commit

Once the script is run and saved as a startup....power cycle the unit. It should then be recognized as a WAP unit on the status tab.

Method 2 - Works for all WAPs (For V2.0 and V3.X use actual MAC and MAC+1)

Extract your CFE, edit in your MAC address, et0macaddr = MAC, and il0macaddr=MAC+1. (For V1.x... Use your MAC-1 for the lan_hwaddr and your MAC for the wan_hwaddr), then put the CFE back on using the HairyDairyMaid or TJTAG utility. This method is risky. You could potentially turn your router into a brick. Once this is reinstalled on the unit and the firmware has been loaded, your unit will have its own MAC addresses permanently embedded and will show every time you boot.


[note] - for the V1s, search for the embedded text string "hwaddr" using your hex editor. This will find the two MAC addresses that are embedded. Again due to the port swap the LAN MAC address needs to be entered as MAC-1 and wan_hwaddr needs to be entered as the MAC for the V1.X only

[note] - my WAP 1.0 required 192.168.1.1 using tftp.exe for the firmware load the first time... my V2.0 and 3.1 required 192.168.1.245 using tftp.exe for the firmware load the first time.

For loading firmware on the WAP54G V1.X=

WARNING - Use only [1] firmware builds on v1.x WAP units.

- Has fixed LED displays starting with V24 RC5. - redhawk - Builds earlier than Dec/17/2017 are vulnerable to WPA2 KRACK - liverpoolatnight

  • Connect PC to LAN port on WAP
  • Configure PC for STATIC IP as 192.168.1.2 Mask 255.255.255.0, Gateway 192.168.1.245
  • Press and hold Reset Button on WAP unit for 30 seconds, unplug unit, Plug back in still holding reset button an additional 30 seconds.
  • Open Browser, URL = http://192.168.1.245
  • Login as: Username/Password <blank>/admin
  • Navigate to Administration Tab. Change the DD-WRT micro_special_generic.bin file to xxx_generic.trx
  • Upload the new xxx_generic.trx file to the router.
  • Wait 5 minutes after it says it completes successfully.
  • Unplug WAP unit, plug it back in.
  • Press and hold Reset Button on WAP unit for 30 seconds, unplug unit, Plug back in still holding reset button an additional 30 seconds.
  • Now use URL = http://192.168.1.1
  • Go to the Administration>>Commands tab.
  • Enter the following
nvram show | grep boardnum

then click on "Run Commands"

If it returns blank then issue the following commands... if it returns a boardnum=2 then you won't have to.

nvram set boardnum=2
nvram commit
  • Click "Run" button and then: "Save Startup" button. - (only if you had to enter boardnum=2 manually)
  • Power cycle the WAP unit.
  • Check the Status page... it should now display the unit as a "Linksys WAP54G v1.x"
  • Configure as you would any other router.

Power = Power, Diag = Diag or Commit

WLAN - Link LED is now a Radio On/Off indicator, Act = Wireless Activity

LAN - Link = Link, Full/Col = Full, 100 = 100

Thanks goes to Eko for making this unit display correctly.

For loading the firmware on the WAP v2.0

WARNING - Use Micro build on the WAP v2.0 and 3.X units.

- follow the steps for the WAP v3.x below... except don't include the nvram variable for WAPver=3. The v2 units have a unique board and should be already recognized by the RC5 and later firmware. Eko informed me that there are no special variables needed for the v2 units[redhawk - 11/16/07]

NOTE: On my V2.0 unit, it has original 2.07 Linksys firmware installed... this FW would not upgrade to DD-WRT. I first downloaded the latest 3.04 FW from the Linksys site and upgraded to it first. Then it would accept the DD-WRT micro_generic build (renamed to .trx extension) directly from the web GUI in the Linksys pages.

If you receive a error message saying "Unable to downgrade firmware" go to http://192.168.1.245/fw-conf.asp, set pull-down menu "DownGrade Header :" to disable and click [apply]. If this setting executed successful you see a message "Your changes have been saved". [ddvelzen - 18/01/08]

- I have also included an updated DD-WRT FW due to the vulnerable KRACK, I have tryed this myself and tested with r35927 see https://imgur.com/a/A0hgCzj [liverpoolatnight 14/July/2018]

For loading the firmware on the WAP54G v3.X

WARNING - Use the 14929 Micro build on the WAP v2.0 and 3.X units.

Use V24-RC5 or later for Reset button function

  • Connect PC to LAN port on WAP
  • Configure PC ethernet port to IP: 192.168.1.2, SM: 255.255.255.0, GW: 192.168.1.245
  • Powerup the router, then perform a 30/30/30 hard reset on it
  • Open your favorite browser (I used Firefox) and go to: http://192.168.1.245
  • Login using:
    • User: <blank>
    • Password: admin

Go to the Administration tab and upload the MICRO firmware.

  • Wait 5 minutes after it says it completes successfully.
  • Perform a 30/30/30 hard reset
  • Open http://192.168.1.1 in your browser and login with the default DD-WRT user/password
  • Go to the Administration->Commands (or see Telnet section below)
  • Type in the following 'only for v3.x WAP units': do not use on a v2.0 unit (with V24-RC5 and later firmware)

'NOTE: review the MAC ADDRESS CHANGESsection, in case the et0macaddr needs added too

nvram set WAPver=3
nvram commit

IT IS VERY IMPORTANT TO USE THESE COMMANDS ON A V.3.X UNIT OR YOU WILL LOSE THE RESET BUTTON!

  • Click on "Run Commands" and wait for it to return without error. Some builds don't handle the Commands properly.
    • It was once noted to also save to "Startup" but many report this resets nvram, plus a reset removes Startup anyway.
  • Reboot the router then configure.

If you did NOT set the WAPver=3, and are now locked out of your router, try these instructions from Redhawk0 to get your router working again, and then set the instructions set out above:

  • use tftp.exe program....but use the default linksys address to flash it again with a micro_generic.bin file.
  • use tftp at 192.168.1.245 to talk to the unit....set a static IP on your computer first to 192.168.1.10
  • Follow the tftp flash instructions in the peacock thread...but use 1.245 for the WAP address.

If the firmware update on a WAP54G v3.1 gives an "upgrade failed" message, perform a 30/30/30 hard reset then try to TFTP the micro build as above.

For trouble reconnecting after firmware upgrade, the arp table could be caching the old MAC address. Try:

netsh interface ip delete arpcache

Reference: this forum post.

IMPORTANT: DD-WRT firmware will turn these units into NAT routers, similar to a 2MB flash WRT54G. However, the wireless interface and the ethernet interface are reversed. The firmware considers the wireless interface the WAN interface, and the ethernet interface the LAN interface. Thus, you cannot substitute one of these units for a regular WRT54G in NAT mode. ' You CAN use it as a gateway router, routing between subnets with NAT switched off, or as an access point, or as a LAN-to-wireless bridge.

  • Reverse it by changing the WAN port assignment.
  • Go to Setup -> Networking -> Port Setup
  • Change the WAN port assignment twice: first to br0, and then change it again to vlan0.
  • Now the ethernet is the WAN, and wireless is the LAN.

Unbrick via Pin Short

This is not recommended. If TFTP fails to work with no pings received at powerup, and the power and link LEDs are stuck on, a pin short can be tried for unbricking. Short the flash memory pins 15 & 16 using the Linksys WRT54G Revival method. Tested on a WAP54G v3.1: locate the flash memory located on the circuit board bottom. Shorting the pins with a paperclip should enable pings and web interface access.

Telnet for WAPver

Use these commands, noting the quotation marks, and each line ends with enter:

nvram set WAPver=3
nvram rc_startup="nvram set WAPver=3
nvram commit"
nvram commit
reboot

WAP54G v2.0 Headers

  • Serial: J5
  • JTAG: CONN1

Image:WAP54Gv2.jpg