Serial Recovery

From DD-WRT Wiki

Revision as of 14:59, 30 October 2010 by Donny (Talk | contribs)
Jump to: navigation, search

Routers that have a serial port can often be recovered by using a serial adapter. This is an alternative to Jtag.

Serial ports are normally a four or five pins on the router motherboard. Usually, you have to solder to pads or remove solder from the holes and install a four or five pin header.

You connect to the router with the programs hyperterminal or putty.

Power cycle the router and while it is booting hit control C quickly. You should get a CFE>

The most common command you will use is the "nvram erase" command.

To flash the firmware

This assumes you have a ttl adapter connected and ready to go. There is reference to stock firmware. This does not apply to router that used to run vxworks. All of those, have jtag tmk..

connect that bitch (the router to your serial adapter).. 115200,8,1,n and no flow control are the com, param's

I use hyperterminal. In the terminal, boot the router.

Immediately start hitting ctrl-c. If you hit it right you will be at the cfe prompt:


Get the tftp utility ready to flash the STOCK LINKSYS firmware for your router so all you need to do it hit enter to launch.

You are going to tell the router to accept a tftp flash of firmware. It times out quickly so that is why you need to get the utility ready to launch.

Static ip on your rig.., mask, not necessary but gateway

at the cfe prompt:

flash -ctheader : flash1.trx

hit enter.. the router will want an upload of the firmware. It will time out after three tries. Don't let it time out, now launch the tftp utility. It will upload, program and then you will be back at the cfe prompt. This will take some time. You will see what is happening in the console.

You will be back at the cfe prompt when it is done:


issue a "go" command:

go [enter]

the router will launch its new firmware.

Let it boot. It will boot 2 ~ 3 times.. You are done.

Now install dd-wrt again.

Good Luck..

EDIT: the above is mostly for linksys. I have used this on others also. I also forgot to mention..

Before flashing the kernel (firmware), erase nvram so any bad nvram entries won't screw up the new kernel.

At the cfe prompt:

cfe> nvram erase [enter]

stop the boot with ctrl-c Enter this command "flash -ctheader : flash1.trx