AC750 MR200 tftp NOT working

Hello,

I got a MR200 from an ISP on Spain (AC750 Wireless Dual Band 4G LTE Router
Archer MR200, it's the official name)

The ISP is using their own firmware on the router, named FlyBox (but the hardware is just the same, it's the official router from TPLink), and it really sux (full of bugs, etc)

I want to put at first stock firmware from TP-Link, I downloaded it from official web and removed the header of tplink and the lte firmware, I got a file of 8000 kb (bootloader 128kb + firmware 7872kb).

Tried to flash by tftp (because via web, the flybox software won't allow to do that), but it just tries to get the file until 10 retries and then starts to boot normal.

Log from tftp server:

[code]accepting requests..
Open TFTP Server MultiThreaded Version 1.64 Windows Built 2001

starting TFTP...
alias / is mapped to C:\OpenTFTPServer
permitted clients: all
server port range: all
max blksize: 65464
default blksize: 512
default timeout: 3
file read allowed: Yes
file create allowed: No
file overwrite allowed: No
thread pool size: 1
detecting Interfaces..
Listening On: 127.0.0.1:69
Listening On: 192.168.0.66:69
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout[/code]

Log from router (with serial cable connected to the board):

[code] ETH_STATE_ACTIVE!!
TFTP from server 192.168.0.66; our IP address is 192.168.1.1
Filename 'ArcherC2V1_tp_recovery.bin'.

TIMEOUT_COUNT=10,Load address: 0x80060000
Loading: Got ARP REPLY, set server/gtwy eth addr (70:4d:7b:85:85:de)
Got it
T T T T T T T T T T
Retry count exceeded; starting again

Booting image at bc020000 ...

Uncompressing Kernel Image ... OK[/code]

I tried many tftp servers on 3 diferent pc's, is not firewall problem or something, I think also the software from ISP is protecting to make this.

Also when router boots, from putty via serial it says:

Archer MR200 login:

I can log in with user "admin" and pass "1234"

My question is, what I can do to flash bootloader and firmware, any ideas?

Thanks in advance

The uboot client ip isn't within the subnet of the (tftp) server ip. Set the client ip to something matching before doing the tftp using:

setenv ipaddr 192.168.0.10

I am trying to achieve the same, how did you cut the firmware? Official documentation says

dd bs=512 obs=512 skip=1 count=256 if=ArcherMR200_stock_firmware.bin of=ArcherMR200_bootloader.bin 
cat ArcherMR200_bootloader.bin lede-17.01.4-ramips-mt7620-ArcherMR200-squashfs-sysupgrade.bin > ArcherC2V1_tp_recovery.bin

https://openwrt.org/toh/tp-link/archer-mr200