I bought a router on ebay thinking I could fix it. But I am under the impression that this seller was trying to flash openwrt to it. so much for thinking it was power interupted during flash.
Can anyone tell me how to restore stock firmware back to this router? or is it toast?
Also, I have serial access to this router. here is a log i took via putty
https://drive.google.com/file/d/1I3lddB0s_b3vUiceCG18n3OIF5rE37ba/view?usp=sharing
your file is not accessible !
could you put it in a public area ?
give it another. forgot to make it public
also, it appears to be stuck in 10m.
any specific commands you want me to run? will be away from keyboard
You can flash it back to stock if the uboot isn't corrupted.
https://kb.netgear.com/19841/Reinstall-the-firmware-on-a-router-without-the-setup-CD-recovery-tool
It is running OpenWRT, Chaos Calmer per the wiki:
Your log looks pretty normal to OEM firmware.
Netgear uses OpenWrt based variant with kernel 4.4.60.
See my bootlog and kernel log (with Netgear firmware) from https://openwrt.org/inbox/toh/netgear/netgear_rax120_nighthawk_ax12
Your log seems pretty normal until the kernel crashes before the reboot.
You should be able to use the TFTP recovery tool built into Netgear uboot bootloader.
See e.g.
https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client?language=en_US
(That is updated version of the old article linked above. Taken from the rax120 support page)
That advice is meant for situations where the firmware doe not boot at all. Yours does, so the bootloader does not stop at the TFTP stage.
You need to trigger it with a pin at reset button at boot. I tested it last year
Similar process as Netgear R7800 exploration (IPQ8065, QCA9984) - #5 by hnyman
But note that flashing a new firmware does not help you if there is actual hardware related failure that triggers the error condition.
I did make an attempt with the tftp per your link but the power light stayed white instead of turning orange. So that was when i decided to open up the router and hook it up to my serial device to see what was wrong with it.
I even tried again while keeping a command prompt open, pinging it over and over but still showed no sign of responding back to the command prompt or the firmware recovery tool or tfp2
How can i check to see if uboot is damaged?
EDIT: also, the ethernet port is stuck at 10m. I already tested my ethernet cable and even changed cables as well. might change network adapter in a few to make sure despite already testing on my laptop and desktop wtih different adapters.
If it starts to boot, then uboot's probably intact, but the settings might have been wiped.
anyway to restore settings? or even tell if they are messed up? and my apologies, its not every day i mess with this in particular.
You need to start talking to uboot, see what's in there...
Try to interrupt the boot sequence, so you get a prompt
At
Hit any key to stop autoboot: 2 1 0
That is what I did. I cannot get TFTP working on this thing because it is complaining about ethernet ports being stuck at 10m
If it was in the log, I didn't see it, but I'm using a cell phone, which made the reading of the log hard.
How are you connected?
Direct cable?
Tried putting a switch between you and the router?
Tried forcing the port on your pc to 100mb or 1gb?
heres what i get when i try to run tftp
Hit any key to stop autoboot: 0
IPQ807x# tftp
Unknown command 'tftp' - try 'help'
IPQ807x# tftpput
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :100 Full duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
10M speed not supported
ipq807x_eth_init: done
*** Warning: no boot file name; using 'C0A80101.img'
Using eth0 device
TFTP to server 192.168.1.10; our IP address is 192.168.1.1
Filename 'C0A80101.img'.
Save address: 0x0
Save size: 0x0
Saving: *
ARP Retry count exceeded; starting again
ipq807x_eth_halt: done
IPQ807x#
I have a USB ethernet adapter plugged in directly to the router on port 4.
in windows, it shows no ethernet activity at all right now. but there are times where i do see ethernet activity but cannot figure out how and why.
It states phy0 is using 100mb, tried all the ports, including WAN?
I tried all of them without rebooting the router but no luck.
I did notice that port 1 is flashing slowly when I plug into it. still not seeing any ethernet activity in windows so far...
I wouldn't expect much life signs, until you're actually transferring the image over tftp.
But as I said, try putting a switch or some other ethernet device between you and the router.
Using an USB ethernet dongle, might also be sub optimal.
Just tried it a while ago with a mikrotik 24port switch. its still reporting 10m in the switch itself via winbox and i still cannot get the tftp to do its thing.
I also made sure that it was just my computer and the router connected to eachother on the switch itself.
Was able to get tftp recovery started using the reset button but still cannot get it to transfer. here is a putty log.
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2021.07.18 15:28:00 =~=~=~=~=~=~=~=~=~=~=~=
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00110
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B - 205 - PBL, Start
B - 2749 - bootable_media_detect_entry, Start
B - 3455 - bootable_media_detect_success, Start
B - 3459 - elf_loader_entry, Start
B - 6289 - auth_hash_seg_entry, Start
B - 6549 - auth_hash_seg_exit, Start
B - 78086 - elf_segs_hash_verify_entry, Start
B - 149990 - PBL, End
B - 161070 - SBL1, Start
B - 212920 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 219386 - pm_device_init, Start
B - 339617 - PM_SET_VAL:Skip
D - 119590 - pm_device_init, Delta
B - 341844 - pm_driver_init, Start
D - 5276 - pm_driver_init, Delta
B - 348340 - clock_init, Start
D - 1525 - clock_init, Delta
B - 352458 - boot_flash_init, Start
D - 12474 - boot_flash_init, Delta
B - 368592 - boot_config_data_table_init, Start
D - 3050 - boot_config_data_table_init, Delta - (575 Bytes)
B - 376065 - Boot Setting : 0x00000618
B - 380060 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B - 387258 - sbl1_ddr_set_params, Start
B - 390766 - cpr_init, Start
D - 1067 - cpr_init, Delta
B - 395981 - Pre_DDR_clock_init, Start
B - 400068 - Pre_DDR_clock_init, End
B - 403454 - DDR Type : PCDDR3
B - 409035 - do ddr sanity test, Start
D - 976 - do ddr sanity test, Delta
B - 413976 - DDR: Start of HAL DDR Boot Training
B - 418612 - DDR: End of HAL DDR Boot Training
B - 424285 - DDR: Checksum to be stored on flash is 1897299483
B - 434442 - Image Load, Start
D - 245067 - QSEE Image Loaded, Delta - (1368672 Bytes)
B - 679601 - Image Load, Start
D - 610 - SEC Image Loaded, Delta - (2048 Bytes)
B - 687195 - Image Load, Start
D - 43188 - DEVCFG Image Loaded, Delta - (31941 Bytes)
B - 730475 - Image Load, Start
D - 22936 - RPM Image Loaded, Delta - (99896 Bytes)
B - 753441 - Image Load, Start
D - 71035 - APPSBL Image Loaded, Delta - (446536 Bytes)
B - 824598 - QSEE Execution, Start
D - 30 - QSEE Execution, Delta
B - 830362 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 836828 - SBL1, End
D - 677985 - SBL1, Delta
S - Flash Throughput, 6944 KB/s (1950340 Bytes, 280834 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 1651 MHz
U-Boot 2016.01-23637-g6be947d (Sep 26 2018 - 10:21:39 +0800)
Model: QCA, IPQ807x-HK01
U-boot dni1 V1.2 for DNI HW ID: 29765589; NAND flash 512MB; RAM 1024MB .
developed based on 'qsdk-ipq807x.ilq.8.0-spf.8.0.CS'
DRAM: smem ram ptable found: ver: 1 len: 4
1 GiB
NAND: ONFI device found
ID = 1590acef
Vendor = ef
Device = ac
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC: <NULL>: 0
*** Warning - bad CRC, using default environment
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010000
Net: MAC0 addr:38:94:ed:ae:65:05
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
eth0
Factory Reset Mode Factory Reset Mode Factory Reset Mode Factory Reset Modeipq807x_eth_halt: done
10M speed not supported
ipq807x_eth_init: done
Using eth0 device
Listening for TFTP transfer on 192.168.1.1
Load address: 0x44000000
Loading: *Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
I am thinking of RMA'ing this router I bought on ebay to Netgear just for fun if I cannot get this router working.
Says its trying in 10Mbs mode. Is this a 1Gbs connection?
Yes, this router is connected via port 4* to port 2 on my gigabit network switch (CRS326-24g-2s) to my desktops usb network adapter. I have also tried my thinkpad t440p connected to the switch as well.
Just trying to clarify as much as possible where I am at right now.
ok I butchered my previous post. here is the correct one I meant to post
U-Boot 2016.01-23637-g6be947d (Sep 26 2018 - 10:21:39 +0800)
Model: QCA, IPQ807x-HK01
U-boot dni1 V1.2 for DNI HW ID: 29765589; NAND flash 512MB; RAM 1024MB .
developed based on 'qsdk-ipq807x.ilq.8.0-spf.8.0.CS'
DRAM: smem ram ptable found: ver: 1 len: 4
1 GiB
NAND: ONFI device found
ID = 1590acef
Vendor = ef
Device = ac
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC: <NULL>: 0
*** Warning - bad CRC, using default environment
In: serial@78B3000
Out: serial@78B3000
Err: serial@78B3000
machid: 8010000
Net: MAC0 addr:38:94:ed:ae:65:05
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
eth0
Factory Reset Mode Factory Reset Mode Factory Reset Mode Factory Reset Modeipq807x_eth_halt: done
10M speed not supported
ipq807x_eth_init: done
Using eth0 device
Listening for TFTP transfer on 192.168.1.1
Load address: 0x44000000
Loading: *Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Modeeth0 PHY3 Down Speed :1000 Full duplex
10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Modeeth0 PHY3 Down Speed :1000 Full duplex
10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Modeeth0 PHY3 Down Speed :1000 Full duplex
10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Modeeth0 PHY2 Down Speed :1000 Full duplex
10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
Upgrade Mode10M speed not supported
ipq807x_eth_init: done
This is with ports 1 and 2 and I believe the wan port as well. ports 3 and 4 do not respond...afaik.
sorry for the foul up