TP-LINK TL-WR841ND

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:48, 22 June 2012 (edit)
Glenn (Talk | contribs)
(+ Category:TP-Link guides)
← Previous diff
Revision as of 14:15, 13 December 2017 (edit) (undo)
Ian5142 (Talk | contribs)
(Hacking)
Next diff →
Line 7: Line 7:
[[Image:Tlwr841nvers71serial.png]] [[Image:Tlwr841nvers71serial.png]]
-=Hacking=+==Hacking==
-==Serial Port==+===Serial Port===
In the pictures above there are schematics for soldering an Serial port. In the pictures above there are schematics for soldering an Serial port.
The serial runs at 115200 8N1. The serial runs at 115200 8N1.
Line 43: Line 43:
. .
-==Hardware Hacks==+===Hardware Hacks===
I already managed to solder an USB Hub on that router, with an 7805 as power supply. I already managed to solder an USB Hub on that router, with an 7805 as power supply.
-I´ll write somthing about it, next time!!+I'll write somthing about it, next time!!
[[Category:TP-Link guides]] [[Category:TP-Link guides]]

Revision as of 14:15, 13 December 2017

Contents

Hardware

V7.1

  • Atheros AR7241 @ 400Mhz
  • Atheros AR9287 wifi circuit
  • Spansion FL032PIF 32Mbit (4Mb) Flash
  • Zentel A3S56D40FTP -G5 (32Mb) Ram

Image:Tlwr841nvers71serial.png

Hacking

Serial Port

In the pictures above there are schematics for soldering an Serial port. The serial runs at 115200 8N1.

To get into the U-Boot prompt, you have to type >tpl< while booting.

Flashing an alternate firmware from TFTP

First setup a TFTP server which is serving the firmware file. (Only flash "factory-to-"ddwrt/openwrt files)

Then we have to setup the network settings. Type the following things into the bootloader prompt. Replace ROUTERIP and SERVERIP with the right IPs.

setenv ipaddr ROUTERIP

setenv serverip SERVERIP

Now we have to load the firmware into the memory!. Replace FACTORY-TO-OPENWRT/DDWRT.bin with the right filename of the image!

ar7240> tftpboot 0x80000000 FACTORY-TO-OPENWRT/DDWRT.bin

You will read something like that. The size is very important. Note it. It can differ to the example.


Bytes transferred = 3932160 (3c0000 hex)

The last steps are erasing the flash and writing the new image to the right address. Replace 3c0000 with the address you noted before.

ar7240> erase 0x9f020000 +0x3c0000

ar7240> cp.b 0x80000000 0x9f020000 0x3c0000

ar7240> bootm 0x9f020000

.

Hardware Hacks

I already managed to solder an USB Hub on that router, with an 7805 as power supply.

I'll write somthing about it, next time!!