TP-Link Archer C7 v1/v2 JTAG u-boot recovery using ST-Link v2 USB adapter clone known as Baite

Installing and Using OpenWrt
42

@Deoptim
@psyborg any suggestions ?

This does not work.

> flash write_image art.bin 0xb0ff0000
no flash bank found for address 0xb0ff0000
wrote 0 bytes from file art.bin in 0.013109s (0.000 KiB/s)

There must be an other problem in addressing the flash.

> flash write_image art.bin 0xbfff0000
writing 256 bytes to flash page @0x00ff1000
writing 256 bytes to flash page @0x00ff1100
writing 256 bytes to flash page @0x00ff1200
writing 256 bytes to flash page @0x00ff1300
writing 256 bytes to flash page @0x00ff1400
writing 256 bytes to flash page @0x00ff5000
writing 256 bytes to flash page @0x00ff5100
writing 256 bytes to flash page @0x00ff5200
writing 256 bytes to flash page @0x00ff5300
writing 256 bytes to flash page @0x00ff5400
writing 256 bytes to flash page @0x00ff5500
writing 256 bytes to flash page @0x00ff5600
writing 256 bytes to flash page @0x00ff5700
writing 256 bytes to flash page @0x00ff5800
wrote 65536 bytes from file art.bin in 73.445854s (0.871 KiB/s)

Addressing should go like this ...

> flash write_image art.bin 0xbfff0000
writing 256 bytes to flash page @0x00ff0100
writing 256 bytes to flash page @0x00ff0200
writing 256 bytes to flash page @0x00ff0300
writing 256 bytes to flash page @0x00ff0400
writing 256 bytes to flash page @0x00ff0500
etc.
43

Not sure this reply is entirely on-topic, but it relates to a bricked Archer C7 v2 that I resurrected using TFTP. I wanted to document what I did...

TL;DR: I had to switch to 192.168.1.66 to make the TFTP mode work...

  1. I bricked the Archer C7v2 attempting to load an ImageBuilder image. Not sure what was wrong. But something was - Brick City.
  2. Lights didn't work right: the system light (sun icon, second from the left) never blinked even when I tried to put it into Failsafe mode.
  3. Factory reset didn't seem to work, either.
  4. So I resolved to use TFTP mode to load new firmware.
  5. I'm using a Mac, so found Transfer, from Intuitibits which offers a nice GUI with progress indicator. (Pay them the $10 - it's worth it.)
  6. I downloaded the OpenWrt 19.07.7 FACTORY binary, changed its name to ArcherC7v2_tp_recovery.bin, and saved it in the ~/Transfer directory on my Mac (where Transfer saw it immediately).
  7. I set my Mac's Ethernet port to 192.168.0.66 as indicated in the TFTP instructions No Joy.
  8. I used tcpdump -i en7 to look at the traffic on that port (en7 is my Ethernet dongle)
  9. There were ARP requests for 192.168.1.66 - so I switched the Mac's Ethernet to that address.
  10. I re-booted the router holding the WPS/Reset switch again, and this time Transfer showed a download, and a few minutes later, the router was back at 192.168.1.1.
1 Like
44

I would not deal with art using jtag. Just restore uboot and load art via tftp and serial console. That way you avoid jtag software problems and writing speeds.