Unofficial TRENDnet AC2600 (TEW-827DRU v1.0R) release v21.02.0

Device Support Status

This device is end-user ready. Wired and wireless works, LEDs work, buttons work, and factory image installation works. I have a small collection of these devices operating in personal and business environments and they have proven to be reliable.

This document applies only to the 1.0R version of hardware. Other hardware revisions are not compatible nor supported by this release.

OpenWRT/LEDE Project leaders previously rejected all of my patches and I didn't see any situation where it was possible to get them merged so I gave up trying. If someone else wants to take my work and move on with it, you are welcome to do so.

Currently Known Issues

There are no significant issues specific to this device.

Factory installation via the OEM web interface is not supported yet. However, there is a Recovery Loader in u-boot which is fairly easy to use, so we can install our image that way instead. The Recovery Loader itself isn't perfect, but it's safe and bricking this device is rather difficult to achieve.

The "LED on/off" button can't be made to work because we currently can't shut off the ethernet switch port LEDs. This may be fixed in the future if I am able to support it. The button currently does nothing, but it is configured in the DTS so you can write a script to use it if you want to. This button doesn't work under the OEM image either, so nothing lost.

I have seen some stability issues over long periods of time. Every once in awhile (30-90 days) I'll see a sudden reboot of one of the devices I manage. I don't think this issue is specific to the tew827dru hardware because I've seen similar reports on other ipq806x devices.

I am aware there are some minor bugs with the 802.11/WiFi radios. The ath10k CT firmware has a few known issues that can cause poor streaming throughput or disconnects on certain Apple and Android phones/tablets. These issues are not specific to the tew827dru hardware.


The latest builds are based off the OpenWRT v21.02.0 release. My patch set is v18.

Minimal+luci image files are here:

You can download older builds and patches here:

The Minimal+luci builds have a basic bare-bone package set just like you would get from an official OpenWRT release image except with luci-ssl added to provide a web interface. You have roughly 45MB of free space on the overlay to work with.

Recovery and Installation Instructions

Installing OpenWRT/LEDE on this device is very safe, relatively speaking, and it's easy to restore the OEM image if you want to go back.

This device offers three methods for installing images: The uboot http Recovery Loader, the OEM http upgrade tool, and console uboot tftp. However, installation by the OEM http upgrade tool is not yet fully supported.

Most users should use the uboot http Recovery Loader because it's easy and safe to use.

DO NOT use the OEM web/http upgrade page at this time. While the OEM upgrade tool will accept and install the OpenWRT/LEDE image, we don't yet support TRENDnet's "Fail Safe"/safeupgrade dual boot system, which means that the device will revert to the old OEM image after the second reboot.

Finally, you can install images via serial console uboot and tftp.

Be sure to download a copy of the OEM installation images in case you want to go back. See this post for more details.

uboot http Recovery Loader

Connect an ethernet cable from your PC/switch to any one of the ethernet jacks on the router. The Recovery Loader will not start if one of the ethernet ports doesn't go active/up during boot, so make sure you have a live cable plugged in before starting.

Manually configure your computer with an IP on the network. The router does not offer DHCP services in this mode.

Press and HOLD down the RESET button on power-up for five seconds. Then release the reset button.

The recovery page will be at at

The page should say "TRENDnet Recovery Mode" in blue text at the top and there is a "Choose File" button and "Upload" button.

If installing OpenWRT/LEDE, then upload the factory image file.

If you want to go back to the OEM image, use the OEM 1.00b11 firmware file (TEW827DRU_FW100B11.bin), then update to the latest version.

While the file is uploading, the Internet LED will blink. You can watch progress on the serial console too. Beware the progress/percent animation on the https Recovery Loader page is fake/placebo.

That's it. OpenWRT/LEDE should be up and running within 30 seconds of uploading the file. The OEM image takes about two minutes and boots very slowly (due to DFS).

If you are unable to access the Recovery Loader page, or if you upload a factory image and it doesn't install, be sure to read this post. The Recovery Loader is known to be a bit buggy.

OEM http upgrade tool

DO NOT use the OEM http upgrade tool at this time. While our factory image file conforms to the OEM requirements to be accepted and installed, we don't yet support TRENDnet's "Fail Safe"/safeupgrade redundant partition boot loader scheme. The result is that the device will successfully boot into OpenWRT/LEDE after the first reboot, but upon the second reboot it will revert to the old OEM system.

I plan to work on supporting the OEM http upgrade tool and the redundant partition system in the future, but I have not gotten around to it yet.

Console uboot tftp

The serial console on this device is fairly easy to access. A 3.3v/TTL serial port can be found in the corner next to the USB ports. You will need to soldier in header pins. Disassembling the chassis is not difficult.

JP1 = Rx
JP2 = Tx
JP3 = Ground
baud = 115200

uboot gives a 2-second "Hit any key to stop autoboot" prompt, so that's easy to break. No special key combo required.

This device uses a FIT archive file, which includes an installer script, a bootconfig image, and the UBI (kernel+squashfs+ubifs). All we really need to do is tftp the factory image into memory and execute the script embedded within it.

setenv ipaddr
setenv serverip
setenv netmask
tftpboot 0x42000000 openwrt-ipq806x-trendnet_tew827dru-squashfs-factory.bin
setenv imgaddr 0x42000000
source 0x42000000:script

Future Plans

JTAG recovery is something I want to do some day. It may be possible to recover from JTAG by booting from RAM or programming the NAND flash on this device. I've already experimented with this and had some progress but I've not yet figured everything out and I regret that I don't have time to work on it right now.

Expand the NAND partitions, or otherwise fully use the NAND flash space. The default "rootfs" partition is 64MB in size, but there is 108MB of completely-unused space on the NAND flash, outside of smem/mtd partitions. There is also an additional 64MB of space used by the redundant rootfs_1 partition. It may eventually be possible to have a rootfs file-system of 228MB in size. If you want to use that 108MB of free space right now, see this thread on how to set up and use the "freespace" partition.

Custom u-boot. This depends upon being able to safely recover. We would need either TRENDnet's broken "Fail Safe" system to be fixed, or JTAG recovery. Otherwise the risk of permanently breaking the device is too great.

Boot from USB. This is not possible right now because the OEM u-boot wasn't built with the right modules. This would require building a custom u-boot.

Previous Forum Threads and Old Development Info

In May of 2018 the old OpenWRT forum died due to negligent administration. Previously, this is where I had kept a running log of changes and updates for this device.

This new thread replaces and supersedes any information on the old forum, but you can still read the old thread for background information on how I ported the device, previous issues, and additional technical information.

The old forum thread can be read here:

The original (now potentially invalid) URL to the old forum was:

Then in 2019 the powers that be decided that it was a good idea to prevent the editing of forum posts after a short period of time, to combat spam mechanics. As a result I now start a new thread for each new release since I can no longer edit my posts.

Previous release threads can be found here:

Things to note

DSA (Distributed Switch Architecture), which replaces swconfig, isn't something we have to worry about yet. Maybe next time.

Pay attention to the network configuration syntax changes (/etc/config/network) in the changelog.

Note that sysupgrades from 18.06 to 21.02 is not supported.

Important file move: /tmp/ to /tmp/resolv.conf.d/

Notable recent commits for us:

commit 0b0bec56ea1ac97098a7a546df2ebd62f7011129
ipq806x: improve system latency
Various report and data show that the freq 384000 is too low and cause some
extra latency to the entire system. OEM qsdk code also set the min frequency
for this target to 800 mhz.
Also some user notice some instability with this idle frequency, solved by
setting the min frequency to 600mhz. Fix all these kind of problem by
introducing a boot init.d script that set the min frequency to 600mhz and set
the ondemand governor to be more aggressive. The script set these value only if
the ondemand governor is detected. 384 mhz freq is still available and user can
decide to restore the old behavior by disabling this script.

I am skeptical that this will resolve the random reboot issue, but there are some other changes in the kernel which I am hoping might address that problem.

commit 24cfa5005eb475d5a182f5e82dbfa469ccc7c071
ath10k-ct: update to latest version
- ath10k-ct: Add security fixes.
- ath10k-ct: Add 5.12 kernel version.
- ath10k-ct: Fix the beacon/mcast/bcast override issue
- ath10k-ct 5.7: Fix setting mcast/bcast/beacon rate from debugfs.
- ath10k-ct: Add 5.11 driver.

So far my radio links are looking good. There are a lot of wifi driver/firmware changes to this release.

I've noticed a couple of packages from feeds are broken. Bugs already reported. This update has a ton of changes (it went through 4 release candidates for a reason). Don't be shocked if there are bugs.

Thank you very much!

The new image works well.

Thanks jmomo, any news about the rebooting issue?

There's a new release here. I'll do a release post at some point in the near future:

I created a new thread/post here: Unofficial TRENDnet AC2600 (TEW-827DRU v1.0R)

I'm going back to the single-post method, so no more new threads for each release.