Netgear WNDR4000

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 16:42, 28 June 2018 (edit)
Jeremywh7 (Talk | contribs)
(add serial pinout link)
← Previous diff
Revision as of 22:05, 28 June 2018 (edit) (undo)
Jeremywh7 (Talk | contribs)
m (datasheet correction)
Next diff →
Line 90: Line 90:
*NOTE: based on several reports, there are two different board layouts for the "WNDR4000" *NOTE: based on several reports, there are two different board layouts for the "WNDR4000"
[https://www.dd-wrt.com/phpBB2/viewtopic.php?p=875645 Pin short recovery] '''NOT RECOMMENDED EXCEPT AS A LAST RESORT'''<br> [https://www.dd-wrt.com/phpBB2/viewtopic.php?p=875645 Pin short recovery] '''NOT RECOMMENDED EXCEPT AS A LAST RESORT'''<br>
-*That said, the procedure is to short the [http://www.macronix.com/Lists/Datasheet/Attachments/6681/MX25L6406E,%203V,%2064Mb,%20v1.9.pdf MX25L6406E serial flash] ''Clock Input'' (SCLK) & ''Serial Data I/O'' (SI) pins+*That said, the procedure is to short the [https://www.netcheif.com/Reviews/PLA5405/PDF/MX25L3206E.pdf MX25L3206E serial flash] ''Clock Input'' (SCLK) & ''Serial Data I/O'' (SI) pins
**These are the two pins diagonally opposite to pin 1 (indicated by the SOP package dot impression) **These are the two pins diagonally opposite to pin 1 (indicated by the SOP package dot impression)
**They are both TTL signal inputs, so there is no danger ''except in the user shorting the wrong pins''. **They are both TTL signal inputs, so there is no danger ''except in the user shorting the wrong pins''.
Line 97: Line 97:
*#The power LED should go off upon short removal, then start blinking green, which means TFTP is running *#The power LED should go off upon short removal, then start blinking green, which means TFTP is running
*#TFTP OEM firmware, then after loading the router should reboot. The trailed k2.6 mini may also work. *#TFTP OEM firmware, then after loading the router should reboot. The trailed k2.6 mini may also work.
- 
=Forum= =Forum=

Revision as of 22:05, 28 June 2018

Contents

Hardware Specs

CPU Broadcom BCM4718
CPU Speed 480 MHz
Flash ROM 8 MB
RAM 64 MB
Radios 2.4 GHz and 5 GHz
WLAN Support a/b/g/n
WLAN Max Speed N750: 300 Mb/s (2.4Ghz)
450 Mb/s (5Ghz)
Antenna Location Internal
Switch 4x GbE + 1 GbE WAN
USB 1x USB 2.0

Initial Flashing Instructions

Read the Peacock Thread for reference on Broadcom routers.

  • Flashing from OEM firmware requires the initial trailed build mini .chk file (with WNDR4000 in the name)
  • Upgrades use the nv64k (or trailed) build and not the nv60k nor generic builds.

See Where do I download firmware? for links.

  • Do not use latest builds without first researching the new build threads

Initial install: download the K2.6_mini-WNDR4000.chk trailed build from the broadcom_K26 folder

  1. Set a static IP on the PC (e.g. 192.168.1.8, subnet 255.255.255.0, gateway 192.168.1.1)
  2. Connect the PC to a router LAN port (recommended to disconnect all other ports)
  3. Reset the router.
  4. In your web browser, go to http://192.168.1.1
  5. Click on "Router Upgrade".
  6. Upload the .chk trailed build, downloaded above.
  7. Wait 5 minutes after the router says it is done, then perform another reset.
  8. Set a strong password to login
  • To use DHCP IP assignment, remember to unset the static IP set in the above instructions.

Upgrading DD-WRT

Image:Warning.png

Verify the build you plan to flash is less than 7995392 bytes (7808 KB) or you risk bricking.

Use the broadcom_K26 or broadcom_K3X nv64k build (or trailed build with WNDR4000 in the name).
To upgrade from a K26 to K3X builds it is recommended to use a trailed build.
Upgrade DD-WRT from the Administration->Firmware Upgrade page, and reset if any issues are encountered.

Build Information

Only use builds with nv64k or WNDR4000 in the name for upgrading, or you risk bricking.
Always verify builds are less than 7995392 bytes (7808 KB) or it may brick the router.
For build links, see Where do I download firmware?

Overclocking

The WNDR4000 CFE supports "overclocking" (the BCM4718 is rated for 533 MHz, but this model is underclocked to 480 MHz), though it is advised to add a heat sink or otherwise improve cooling or airflow. The DD-WRT GUI should be able to select between the original 480 MHz along with 500 and 533 options. The SoC references the pll20mhz_table from hndmips.c and can be manually set using the following:

  • nvram set clkfreq=480,240,120 (OEM speed)
  • nvram set clkfreq=500,250,125
  • nvram set clkfreq=530,265,132
  • nvram set clkfreq=533,266,133 (OEM speed of the E4200v1)

Verify this setting with `nvram get clkfreq` then run the following to apply:

  • nvram commit && reboot

Note: DD-WRT uses an 'overclocking' nvram parameter which can override the manual settings after boot. In this case, unset this parameter or change it to match your CPU speed (only the first setting, e.g. 533).

Unbricking

For more information:

Pin short recovery NOT RECOMMENDED EXCEPT AS A LAST RESORT

  • That said, the procedure is to short the MX25L3206E serial flash Clock Input (SCLK) & Serial Data I/O (SI) pins
    • These are the two pins diagonally opposite to pin 1 (indicated by the SOP package dot impression)
    • They are both TTL signal inputs, so there is no danger except in the user shorting the wrong pins.
    1. When the router is powered on, the power LED lights, then all LEDs light then go out (LED check)
    2. As soon as the LED check goes out, carefully short the pins (5 and 6) for 3 seconds then remove
    3. The power LED should go off upon short removal, then start blinking green, which means TFTP is running
    4. TFTP OEM firmware, then after loading the router should reboot. The trailed k2.6 mini may also work.

Forum

The original device thread disappeared in late 2015: latest archive.org snapshot

  • This has replaced it.

Broken reset button (WNDR3700v3 is identical)