OpenWrt Forum Archive

Topic: TP-Link TL-WR1043ND - totally bricked?

The content of this topic has been archived on 30 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi Guys,

i obviously destroyed my router.

I had an dd-wrt installed on it and tried to switch to openwrt.
The documentation said, i've got flash first stock and afterwards openwrt itself.

So i copied TL-WR1043ND-V1-FW0.0.3-stripped.bin to dd-wrt and tried to write it by mtd to the hardware.
It started flashing and after a while it restarted.....and only the power led was lid....no blinking...nothing.

I also connected a serial console meanwhile....but it seems it doesnt even finds a clean bootloader; it loops here:
U-Boot 1.1.4 (Apr 28 2013 - 16:01:02)

AP83 (ar9100) U-boot 0.0.11
DRAM: 
sri
32 MB
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB

So ...does anybody have a better solution than desolder the hardware? the openwrt wiki also says theres no debrick by JTAG.....

I would be thankfull for any help......

cheerio,

soralanthanas

you can use this device to write
https://scontent-hkg3-1.xx.fbcdn.net/v/t1.0-9/13102771_1202880376403461_829277982923527947_n.jpg?oh=74b4617b748ade5fa9f8b79244643973&oe=57AB5317

uh-oh

How is this called ?

And how do i use it? Over serial from PC? Which firmware.bin can i flash that way?

(Last edited by soralanthanas on 12 May 2016, 13:19)

Thank you!

Does S25FL064P not have 16 pins? Don't i need SOP16/SOIC16 clip?

Is'nt there any downloadable firmware-file, cause i don't have a second 1043ND ....

Ok Guys, i got all the stuff from china after a while.

I got a ch341a programmer with the right tool (i guess). I clip it to the chip, which is a spansion s25fl064pif.
But the tool cannot identify the chip rather than read or write from or to it....

What am i doing wrong?

You can most likely debrick via JTAG:

See https://wiki.openwrt.org/doc/recipes/de … using.jtag

I used this method successfully with the Buffalo G300NH https://wiki.openwrt.org/toh/buffalo/wzr-hp-g300h -- which is the same ar91xx platform as the WR1043ND.

Also see my related post here https://forum.openwrt.org/viewtopic.php … 40#p320240 and some more posts in this thread.


For the ch341a, I tried this with a TPLink WDR3600, but it was not working with the in-line programming clip. It's actually quite easy to de-solder the 8pin Flash-Chip there. I just used a lot of excess tin-solder and thin enamel-wire to lift up the chip while heating up the tin-solder with the iron.
Might be worth a shot even with 16pins...

(Last edited by freezer2k on 22 Jul 2016, 01:57)

Hey,
As far as i read (https://wiki.openwrt.org/toh/tp-link/tl-wr1043nd#jtag) there's no possibility to unbrick the wr1043nd via jtag.....i would have tried this in first place anyway :-/
Ok, what's the difference between desolder and clip the chip? My ch341a has two 8 pin programer ...one for 24er and one for 25er hardware chip, so i cannot put the chip on the programer directly?

Am i wrong? (please let me be wrong...all would be so easy)

hi guys. have same problems with tp-link archer c7 v2.0(ru). after openwrt upgrade serial console show only


U-Boot 1.1.4 (Jul  8 2014 - 18:08:32)

ap135 - Scorpion 1.0DRAM:
sri
Scorpion 1.0
ath_ddr_initial_config(178): (32bit) ddr2 init
tap = 0x00000003
Tap (low, high) = (0x3, 0x1c)
Tap values = (0xf, 0xf, 0xf, 0xf)
128 MB

and nothing else.
Can anybody help me?

soralanthanas wrote:

Hey,
As far as i read (https://wiki.openwrt.org/toh/tp-link/tl-wr1043nd#jtag) there's no possibility to unbrick the wr1043nd via jtag.....i would have tried this in first place anyway :-/
Ok, what's the difference between desolder and clip the chip? My ch341a has two 8 pin programer ...one for 24er and one for 25er hardware chip, so i cannot put the chip on the programer directly?

Am i wrong? (please let me be wrong...all would be so easy)

Didn't your Clip come with this little adapter PCB, like shown in the picture in one of the earlier post?
I soldered the flash directly on it, then plugged it into the ch341a, and it worked fast and flawlessly.

I'm not sure why it was not working while the Chip was soldered to the board, could be that the in-line programming cable is too bad quality e.g.


I see that they say JTAG does not work in the wiki, but they also seem to use a different software for this. The solution I posted is using OpenOCD and a RaspberryPi or Buspirate can be used as JTAG-Interface.
Might be worth a shot!

(Last edited by freezer2k on 25 Jul 2016, 15:45)

I debrick my wr740n from flash dump found from the Internet

The discussion might have continued from here.