Help in unbricking TP-Link Archer C60 V3

heinduplessis · May 3, 2020, 9:10pm

I've successfully installed and ran OpenWrt on my new Archer C60 V3 (EU) but then decided to revert to the stock firmware. I used the update firmware feature of the Luci interface to (force) install the firmware I found here: https://www.tp-link.com/no/support/download/archer-c60/v3/#Firmware

After leaving it for 5 minutes, only the router's power LED comes on (after the initial all-LED flash). I've tried the TFTP recovery method but I don't know what the file name should be, but worse, if I plug in my lan cable from the router into my laptop, my laptop tells me it's not plugged in.. not a good sign, right?

Is it worth while trying to find a way to recover the router? Or is the fact that the lan port is not picked up proof that it's beyond hope. It'll be a pity because i bought the router specifically for openWrt

Thanks for any help!

trendy · May 3, 2020, 11:36pm

Looks likeyou'll have to connect to the serial port and see if you can salvage it.

heinduplessis · May 4, 2020, 12:50pm

Thank you! For some reason I could not find that page. I've soldered on the pins, but my 3.3v programmer has been borrowed grrrr.. Will do tomorrow.

heinduplessis · May 4, 2020, 11:49pm

Hi again, I can't quite figure out what to do next. I'm connected via TTL to the router and I get the following boot log:



U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:44:04)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 402k for U-Boot at: 83f98000
Reserving 32832k for malloc() at: 81f88000
Reserving 44 Bytes for Board Info at: 81f87fd4
Reserving 36 Bytes for Global Data at: 81f87fb0
Reserving 128k for boot params() at: 81f67fb0
Stack Pointer at: 81f67f98
Now running in RAM - U-Boot at: 83f98000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :50
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :50
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :50
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

factory boot check integer ok.

load fs uboot at 0x10000.
Autobooting in 1 seconds
## Starting application at 0x80010000 ...


U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:43:52)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 120k for U-Boot at: 83fe0000
Reserving 32832k for malloc() at: 81fd0000
Reserving 44 Bytes for Board Info at: 81fcffd4
Reserving 36 Bytes for Global Data at: 81fcffb0
Reserving 128k for boot params() at: 81faffb0
Stack Pointer at: 81faff98
Now running in RAM - U-Boot at: 83fe0000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Hit any key to stop autoboot:  0 
## Booting image at 9f030000 ...
Bad Magic Number
ath>

How do I get it to load the OpenWRT or stock formware from here? It seems the bootloader is working.

Oh, when I type help I get:

ath> help
help

?       - alias for 'help'
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
help    - print online help
mct   - simple RAM test
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
ping	- send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath>

heinduplessis · May 5, 2020, 12:55am

Ok got it to load firmware by keeping the reset button in, then it tries to tftp from 192.168.0.66 as documented, however, I've renamed the openwrt-19.07.2-ath79-generic-tplink_archer-c60-v1-squashfs-factory.bin file to tp_update.bin and it loads, but then says firmware is invalid:

TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename 'tp_recovery.bin'.
Load address: 0x80800000
Loading: #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #####
done
Bytes transferred = 4684496 (477ad0 hex)
Firmware recovery: FLASH_SIZE = 8 filesize = 0x477ad0.
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

File Length:4684496
fw type name : .
Firmware process common.

Image verify OK!

Firmware file Verify ok!

[Error]sysmgr_proinfo_buildStruct():  647 @ unknown id(device_name), skip it.
[Error]sysmgr_proinfo_buildStruct():  540 @ should be 2 args (1).
[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

Firmwave not supports, check failed.

[NM_Error](nm_checkUpdateContent) 01172: the firmware is not for this model

[NM_Error](nm_buildUpgradeStruct) 01274: checkUpdateContent failed.

Firmware Invalid!

I think I'm so close!! Help??

Sti · May 5, 2020, 7:51am

Use stock firmware file in the tp-link site and rename to tp_update.bin flash with tftp server. After successful flash wait coupe of minutes and reset nvram from reset button from the back of the device. After you access the stock web interface you can flash openwrt again.

Edit: You wrote you used archer c60v1 firmware please be careful about file names. You must use Archer c60v3 firmware

C60v3 firmware is only in snapshots now or you can wait 19.07.3

heinduplessis · May 10, 2020, 5:27pm

Thank you, @Sti!

I've now used what I think should be the correct firmware from https://www.tp-link.com/no/support/download/archer-c60/v3/#Firmware and downloaded and extracted Archer C60(EU)_V3.0_190115.zip. I had to rename it tp_recovery.bin, not tp_update.bin as you said otherwise I get a file not found error on the serial log. Does that mean the router is in the wrong mode? Either way, it still complains about firmware mismatch, see below. Any help appreciated!

Trying eth0
eth0 link down
FAIL
Trying eth1
enet1 port2 up
dup 1 speed 1000
Using eth1 device
TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename 'tp_recovery.bin'.
Load address: 0x80800000
Loading: #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
done
Bytes transferred = 7982768 (79ceb0 hex)
Firmware recovery: FLASH_SIZE = 8 filesize = 0x79ceb0.
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

File Length:7982768
fw type name : Cloud.
Firmware process common.

Image verify OK!

Firmware file Verify ok!

[Error]sysmgr_proinfo_buildStruct():  647 @ unknown id(device_name), skip it.
[Error]sysmgr_proinfo_buildStruct():  540 @ should be 2 args (1).
[Error]sysmgr_cfg_checkSupportList():  971 @ 00000000 NOT Match.

Firmwave supports, check OK.

 (curFw_ver, newFw_ver) == (3.0, 1.0) 

[NM_Error](nm_checkSoftVer) 00960: Firmwave not supports, check failed.

[NM_Error](nm_checkUpdateContent) 01182: the firmware software version dismatched

[NM_Error](nm_buildUpgradeStruct) 01274: checkUpdateContent failed.

Firmware Invalid!

U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:44:04)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 402k for U-Boot at: 83f98000
Reserving 32832k for malloc() at: 81f88000
Reserving 44 Bytes for Board Info at: 81f87fd4
Reserving 36 Bytes for Global Data at: 81f87fb0
Reserving 128k for boot params() at: 81f67fb0
Stack Pointer at: 81f67f98
Now running in RAM - U-Boot at: 83f98000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :50
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :50
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :50
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

factory boot check integer ok.

load fs uboot at 0x10000.
Autobooting in 1 seconds
## Starting application at 0x80010000 ...


U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:43:52)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 120k for U-Boot at: 83fe0000
Reserving 32832k for malloc() at: 81fd0000
Reserving 44 Bytes for Board Info at: 81fcffd4
Reserving 36 Bytes for Global Data at: 81fcffb0
Reserving 128k for boot params() at: 81faffb0
Stack Pointer at: 81faff98
Now running in RAM - U-Boot at: 83fe0000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Hit any key to stop autoboot:  0 
## Booting image at 9f030000 ...
Bad Magic Number
ath>

cspiby · May 11, 2020, 12:30am

This looks similar to the issue I'm having with trying to revert to stock firmware on my C6, I notice it complains that the version you're trying to flash is less than that what it thinks you have.

heinduplessis · May 11, 2020, 6:06pm

Yes I opened the bin file and there is a section: {product_name:Archer C60,product_ver:3.0.0,special_id:45550000} ) <?xml version="1.0" encoding="utf-8"?>
But if I change that version number from 1.0 to 3.1 the checksum fails

cspiby · May 17, 2020, 3:54pm

It's a shame nobody else has been able to offer help, what if you try the very first firmware?

https://static.tp-link.com/2019/201902/20190219/Archer%20C60(EU)_V3.0_190115.zip

heinduplessis · May 17, 2020, 5:55pm

Thanks, I think I have, but I'll give it a try, again!

tmomas · May 17, 2020, 6:38pm

Seems to be difficult to go back to C60 v3 stock firmware:

adrianschmutzler · May 17, 2020, 6:59pm

When I wrote support for the C60 v3, I also found that flashing vendor images via TFTP is not possible.
However, using OpenWrt factory images with TFTP worked for me. I documented that in the commit message here:

Since I did not have a serial console back then, it's quite interesting what you revealed here. So, as I suspected, it looks like TP-Link actually messed something up with their image or u-boot ...

zamana · May 18, 2020, 5:22pm

Hi!

Is this log available without a serial connection?

zamana · May 18, 2020, 5:26pm

I tried both (EU and US), but no success.

In my specific case, things are a little worse, because there's no proper firmware for the Brazilian version yet:

heinduplessis · May 18, 2020, 7:46pm

Ok I've tried (re) re-flashing OpenWrt for the Archer V3 (http://downloads.openwrt.org/releases/19.07.2/targets/ath79/generic/openwrt-19.07.2-ath79-generic-tplink_archer-c60-v2-squashfs-factory.bin) but no success, herewith error just for completion:

TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename 'tp_recovery.bin'.
Load address: 0x80800000
Loading: #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #################################################################
	 #####
done
Bytes transferred = 4684496 (477ad0 hex)
Firmware recovery: FLASH_SIZE = 8 filesize = 0x477ad0.
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

File Length:4684496
fw type name : .
Firmware process common.

Image verify OK!

Firmware file Verify ok!

[Error]sysmgr_proinfo_buildStruct():  647 @ unknown id(device_name), skip it.
[Error]sysmgr_proinfo_buildStruct():  540 @ should be 2 args (1).
[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

[Error]sysmgr_cfg_checkSupportList():  990 @ 2.0.0 NOT Match.

Firmwave not supports, check failed.

[NM_Error](nm_checkUpdateContent) 01172: the firmware is not for this model

[NM_Error](nm_buildUpgradeStruct) 01274: checkUpdateContent failed.

Firmware Invalid!ÿ

U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:44:04)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 402k for U-Boot at: 83f98000
Reserving 32832k for malloc() at: 81f88000
Reserving 44 Bytes for Board Info at: 81f87fd4
Reserving 36 Bytes for Global Data at: 81f87fb0
Reserving 128k for boot params() at: 81f67fb0
Stack Pointer at: 81f67f98
Now running in RAM - U-Boot at: 83f98000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :50
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :50
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :50
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Reading Partition Table from NVRAM ... OK

Parsing Partition Table ... OK

factory boot check integer ok.

load fs uboot at 0x10000.
Autobooting in 1 seconds
## Starting application at 0x80010000 ...


U-Boot 1.1.4-gd490e1c1-dirty (Aug 21 2019 - 18:43:52)

ap151 - Dragonfly 1.0

DRAM:  64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 120k for U-Boot at: 83fe0000
Reserving 32832k for malloc() at: 81fd0000
Reserving 44 Bytes for Board Info at: 81fcffd4
Reserving 36 Bytes for Global Data at: 81fcffb0
Reserving 128k for boot params() at: 81faffb0
Stack Pointer at: 81faff98
Now running in RAM - U-Boot at: 83fe0000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Hit any key to stop autoboot:  0 
## Booting image at 9f030000 ...
Bad Magic Number
ath>

So I think I'm stuck with this router. I've purchased Archer C7 and it works really well, but I'm not going to risk it again

I'll check back in a few months and see if there's new stock or openwrt firmware available.

Thanks for everybody's help, it's really comforting!

Regards,
Hein

David.S.Mckellen · May 18, 2020, 7:51pm

Seems Image version 19.07.3 is released for this device (V3)
Check it out
https://downloads.openwrt.org/releases/19.07.3/targets/ath79/generic/

britock · August 5, 2020, 2:31pm

friend, the same thing happened to me. my device and Archerc60 v3 (BR)
I tried to install the (EU) version. was in the same boat as you. the solution was to reinstall the version provided by friend @JamesT42 (Archer C60 v3 - is possible to install OpenWrt firmware?), because the version (BR) is not yet available. I followed the steps:

connect serial and type "tpl" in the putty;
configure your ip at 192.168.1.100;
setenv ipaddr 192.168.1.111
setenv serverip 192.168.1.100
open tftp, add the downloaded firmware with the name "firm.bin" in the current directory location (default location)
tftpboot 0x81000000 firm.bin
erase 0x9f030000 +0x4400b2
cp.b 0x81000000 0x9f030000 0x4400b2
reset

ready, the router will restart and then configure your ip in automatic and go to page 192.168.1.1

adrianschmutzler · August 5, 2020, 3:28pm

(curFw_ver, newFw_ver) == (3.0, 1.0)

Is is possible that TP-Link just put the wrong version string into their firmware?

adrianschmutzler · August 5, 2020, 3:37pm

Yes, unbelievable:

C60 v3:

soft_ver:1.0.0 Build 20190115 rel.57239
fw_id:2FEE9F99CEC156429C9861FB268A71E2
SupportList:
{product_name:Archer C60,product_ver:3.0.0,special_id:00000000}
{product_name:Archer C60,product_ver:3.0.0,special_id:45550000}

C60v2:

soft_ver:2.0.0 Build 20161206 rel.60287
fw_id:9B5A36C5BF02AFEAFF5491BE7BACFED3
SupportList:
{product_name:Archer C60,product_ver:2.0.0,special_id:00000000}
{product_name:Archer C60,product_ver:2.0.0,special_id:45550000}