OpenWrt Forum Archive

Topic: Netgear WNR100 v2

The content of this topic has been archived between 19 Apr 2018 and 22 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I just received a nice new WNR100 v2 and I've opened it up to find:

* a cpu covered by a heat sink
* 256Mb ram chip (32MB)
* Atheros ar9285-AL1A wi fi chip
* no byte wide flash
* a serial flash chip - 25L3205DM2I-12G (32Mb or 4MB)

I also found the Netgear Open source software page. Looks like I have a chance to get OpenWRT running on this router. :-) Has anyone already done it?

No, as we don't have access to the board. The cpu should be an AR7240, so if you decide to add support for it, use the ar71xx target as a base.

Thanks, that's what I hoped for, a little shove in the right direction. :-)

It's probably the same hardware as Netgear WNR1000 v1, Trendnet TEW-632BRP and D-Link DIR-615 revision C1. These routers are all virtually identical based on the Atheros AP81 router platform with Atheros AR9102 WiFi chip (2x2 MIMO).

This router is probaby already running OpenWrt. Try login with Netgear Telnet Enable Utility.

http://www.myopenrouter.com/download/10 … e-Utility/

Working snapshots for this platform can be found here.

http://downloads.openwrt.org/snapshots/trunk/ar71xx/


You can probably download an image with ftpget and flash with mtd write like this example.

ftpget ftp.iasi.roedu.net /var/firmware /mirrors/openwrt.org/snapshots/trunk/ar71xx/openwrt-ar71xx-ap81-rootfs-squashfs.bin

mtd unlock mtd2

mtd write write /var/firmware mtd2


Maybe someone else can give you exact instructions how to upgrade your router.

(Last edited by THG on 30 Jan 2010, 08:17)

Its running Kamikaze 7.09! Yikes. Still it's enough to play. :-) I now have even more pointers toward getting the latest and greatest. Here's the boot:

U-Boot 1.1.4 (Sep  3 2009 - 20:06:10)

WNR1000v2-VC (ar7240) U-boot dni7 V0.8
DRAM:  
sri
#### TAP VALUE 1 = a, 2 = a
32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 269k for U-Boot at: 81fbc000
Reserving 192k for malloc() at: 81f8c000
Reserving 44 Bytes for Board Info at: 81f8bfd4
Reserving 36 Bytes for Global Data at: 81f8bfb0
Reserving 128k for boot params() at: 81f6bfb0
Stack Pointer at: 81f6bf98
Now running in RAM - U-Boot at: 81fbc000
id read 0x100000ff
flash size 4194304, sector count = 64
Flash:  4 MB
In:    serial
Out:   serial
Err:   serial
Net:   ag7240_enet_initialize...
Fetching MAC Address from 0x81febc00
Fetching MAC Address from 0x81febc00
: cfg1 0xf cfg2 0x7014
eth0: 00:24:b2:e1:bd:78
eth0 up
: cfg1 0xf cfg2 0x7214
eth1: 00:24:b2:e1:bd:77
ATHRS26: resetting s26
ATHRS26: s26 reset done
eth1 up
eth0, eth1
Trying eth1
eth1 link down
FAIL
Trying eth0
dup 1 speed 100

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0 
   Verifying Checksum ... OK
### SQUASHFS loading 'image/uImage' to 0x80800000
### SQUASHFS load complete: 623510 bytes loaded to 0x80800000
## Booting image at 80800000 ...
   Image Name:   Linux Kernel Image
   Created:      2009-09-09  16:01:04 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    623446 Bytes = 608.8 kB
   Load Address: 80002000
   Entry Point:  801c1000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 801c1000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

Booting AR7240(Python)...
Linux version 2.6.15 (root@anderson) (gcc version 3.4.4 (OpenWrt-2.0)) #199 Wed Sep 9 23:10:19 CST 2009
flash_size passed from bootloader = 4
CPU revision is: 00019374
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=31:08 rootfstype=squashfs init=/etc/preinit mtdparts=ar7240-nor0:256k(u-boot),64k(u-boot-env),3392k(rootfs),6)
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 170.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30428k/32768k available (1470k kernel code, 2324k reserved, 313k data, 100k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
Returning IRQ 48
AR7240 GPIOC major 0
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
Serial: 8250/16550 driver $Revision: #1 $ 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
9 cmdlinepart partitions found on MTD device ar7240-nor0
Creating 9 MTD partitions on "ar7240-nor0":
0x00000000-0x00040000 : "u-boot"
0x00040000-0x00050000 : "u-boot-env"
0x00050000-0x003a0000 : "rootfs"
0x003a0000-0x003b0000 : "config"
0x003b0000-0x003d0000 : "language_table"
0x003d0000-0x003e0000 : "pot"
0x003e0000-0x003f0000 : "traffic_meter"
0x003f0000-0x00400000 : "ART"
0x00050040-0x003a0000 : "mount_fs"
mtd: partition "mount_fs" doesn't start on an erase block boundary -- force read-only
u32 classifier
    Perfomance counters on
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 228 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
IPP2P v0.8.2 loading
DNIFILTER loading
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Ebtables v2.0 registered
arch/mips/ar7240/ar7240_gpio.c (ar7240_simple_config_init) JUMPSTART_GPIO: 12

ar7240: calling simple_config callback..
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 100k freed
Algorithmics/MIPS FPU Emulator v1.5
- init -
init started:  BusyBox v1.4.2 (2009-09-09 23:04:26 CST) multi-call binary
Loading data from /dev/mtd/3 ...
The data configuration is Valid
The data center is Running ...
ipt_CONENAT: module license 'unspecified' taints kernel.
ip_conntrack_rtsp v0.6.21 loading
ip_nat_rtsp v0.6.21 loading
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
Generating Rules...
Done!
rmmod: ip_nat_dnisip.ko: Success
rmmod: ip_conntrack_dnisip.ko: Success
POT is Running...
The POT-(Get/Set) Demo is Running ...
SN: 28C29B5715825
WAN MAC: 00:24:B2:E1:BD:78
AG7240: Length per segment 1536
AG7240: Max segments per packet 1
AG7240: Max tx descriptor count    40
AG7240: Max rx descriptor count    252
AG7240: fifo cfg 3 01f00140
AG7240CHH: Mac address for unit 0
AG7240CHH: 00:24:b2:e1:bd:78 
AG7240CHH: Mac address for unit 1
AG7240CHH: 00:24:b2:e1:bd:77 
INIT-SWITCH: Default WAN MAC is : 00:24:b2:e1:bd:78
ag7240_ring_alloc Allocated 640 at 0x80383000
ag7240_ring_alloc Allocated 4032 at 0x8029e000
Setting PHY...
AG7240: enet unit:0 phy:4 is up...Mii 100Mbps full duplex
AG7240: done cfg2 0x7115 ifctl 0x10000 miictrl  
device eth1 entered promiscuous mode
number of br ports=1
ag7240_ring_alloc Allocated 640 at 0x81c21c00
ag7240_ring_alloc Allocated 4032 at 0x81c26000
ATHRS26: resetting s26
ATHRS26: s26 reset done

ar7240: calling simple_config callback..
Setting PHY...
udhcp server (v0.9.8) started
The attached devices demo is Running ...
killall: utelnetd: no process killed
killall: telnetenable: no process killed
The telnetenable is running ...
Deleting static route ... Done!
Adding static route ... Done!
The HNAP Demo is running on br0 : 192.168.1.1 00:24:B2:E1:BD:77
ag7240_ring_free Freeing at 0x80383000
ag7240_ring_free Freeing at 0x8029e000
ag7240_ring_alloc Allocated 640 at 0x80383000
ag7240_ring_alloc Allocated 4032 at 0x8029e000
Setting PHY...
AG7240: enet unit:0 phy:4 is up...Mii 100Mbps full duplex
AG7240: done cfg2 0x7115 ifctl 0x10000 miictrl  
ag7240_ring_free Freeing at 0x80383000
ag7240_ring_free Freeing at 0x8029e000
ag7240_ring_alloc Allocated 640 at 0x80383000
ag7240_ring_alloc Allocated 4032 at 0x8029e000
Setting PHY...
AG7240: enet unit:0 phy:4 is up...Mii 100Mbps full duplex
AG7240: done cfg2 0x7115 ifctl 0x10000 miictrl  
udhcp client (v0.9.8) started
Sending discover...
Sending discover...
Sending select for 192.168.24.39...
LAN: 192.168.1.1/255.255.255.0
WAN: 192.168.24.39/255.255.255.0
WAN/LAN is NOT conflicting!
Lease of 192.168.24.39 obtained, lease time 864000
deleting routers
adding router 192.168.24.254
adding dns 192.168.24.10
adding dns 192.168.24.254
Starting Firewall...
Done!
Deleting static route ... Done!
killall: ripd: no process killed
Deleting static route ... Done!
Adding static route ... Done!
traffic_meter config_update : killall: traffic_meter: no process killed
.
killall: ntpclient: no process killed
time zone index is : 20
Run NTP Client with setting: pri:time-b.netgear.com sec:time-c.netgear.com
killall: miniupnpd: no process killed

Jan  1 00:00:28 miniupnpd[418]: listening on 192.168.1.1:5555
lo        no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

/etc/rc.d/rc.wlan: /etc/rc.d/rc.wlan: 56: uname: not found
Args: 1
ath_hal: 0.9.17.1 (AR5416, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_pci: 0.9.4.5 (Atheros/multi-bss)
wifi0: Atheros 9285: mem=0x10000000, irq=48 hw_base=0xb0000000
wlan: mac acl policy registered
wlan_me: Version 0.1
Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved
wifi1     no private ioctls.

Creating ap for NETGEAR on
Added ath0 mode master
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
Created ath0 mode ap for NETGEAR
/etc/ath/activateVAP: /etc/ath/activateVAP: 56: uname: not found
lo        no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

device ath0 entered promiscuous mode
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
number of br ports=2
/etc/ath/activateVAP: /etc/ath/activateVAP: 1: arping: not found
>>>>> WPS MODE, 1
>>>>> WPS ENABLED, PSK
cat: /etc/wpa2/WSC_ath0.conf: No such file or directory
>>>>> WPS Translate, Index:0
Making Topology File . . .
Reading topology file /var/run/topology.conf ...
Reading bss configuration file /etc/wpa2/WSC_ath0.conf ...

Starting Firewall...
br0: port 2(ath0) entering disabled state
Done!
Could not connect to kernel driver.
Using interface ath0 with hwaddr 00:24:b2:e1:bd:77 and ssid 'NETGEAR'
Country ie is US 
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
upnp_wps_device_init called
l2_packet_receive - recvfrom: Network is down
time zone index is : 20
Run NTP Client with setting: pri:time-b.netgear.com sec:time-c.netgear.com
checksum = 0xFF, len = 131072
There is not language table in flash or language table was broken!
gui_region = English
region = English, download_region =  
 Update string table successfully, memory usage: 248KB.
The httpd server is running ...
Start utelnetd by telnetenable
dnsmasq: started, version 2.39 cache disabled
dnsmasq: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N no-TFTP
dnsmasq: using local addresses only for domain lan
dnsmasq: failed to access /tmp/dhcp.leases: No such file or directory
dnsmasq: reading /tmp/resolv.conf
dnsmasq: using nameserver 192.168.24.254#53
dnsmasq: using nameserver 192.168.24.10#53
dnsmasq: using local addresses only for domain lan
traffic_meter start : .
Boot up procedure is Finished!!!

Please press Enter to activate this console. 
 CTRL-A Z for help |115200 8N1 | NOR | Minicom 2.2    | VT102 | Online 05:32                                                                                

Jan  1 00:00:28 miniupnpd[418]: listening on 192.168.1.1:5555
lo        no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

/etc/rc.d/rc.wlan: /etc/rc.d/rc.wlan: 56: uname: not found
Args: 1
ath_hal: 0.9.17.1 (AR5416, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_pci: 0.9.4.5 (Atheros/multi-bss)
wifi0: Atheros 9285: mem=0x10000000, irq=48 hw_base=0xb0000000
wlan: mac acl policy registered
wlan_me: Version 0.1
Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved
wifi1     no private ioctls.

Creating ap for NETGEAR on
Added ath0 mode master
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
Created ath0 mode ap for NETGEAR
/etc/ath/activateVAP: /etc/ath/activateVAP: 56: uname: not found
lo        no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

device ath0 entered promiscuous mode
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
number of br ports=2
/etc/ath/activateVAP: /etc/ath/activateVAP: 1: arping: not found
>>>>> WPS MODE, 1
>>>>> WPS ENABLED, PSK
cat: /etc/wpa2/WSC_ath0.conf: No such file or directory
>>>>> WPS Translate, Index:0
Making Topology File . . .
Reading topology file /var/run/topology.conf ...
Reading bss configuration file /etc/wpa2/WSC_ath0.conf ...

Starting Firewall...
br0: port 2(ath0) entering disabled state
Done!
Could not connect to kernel driver.
Using interface ath0 with hwaddr 00:24:b2:e1:bd:77 and ssid 'NETGEAR'
Country ie is US 
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
upnp_wps_device_init called
l2_packet_receive - recvfrom: Network is down
time zone index is : 20
Run NTP Client with setting: pri:time-b.netgear.com sec:time-c.netgear.com
checksum = 0xFF, len = 131072
There is not language table in flash or language table was broken!
gui_region = English
region = English, download_region =  
 Update string table successfully, memory usage: 248KB.
The httpd server is running ...
Start utelnetd by telnetenable
dnsmasq: started, version 2.39 cache disabled
dnsmasq: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N no-TFTP
dnsmasq: using local addresses only for domain lan
dnsmasq: failed to access /tmp/dhcp.leases: No such file or directory
dnsmasq: reading /tmp/resolv.conf
dnsmasq: using nameserver 192.168.24.254#53
dnsmasq: using nameserver 192.168.24.10#53
dnsmasq: using local addresses only for domain lan
traffic_meter start : .
Boot up procedure is Finished!!!

Please press Enter to activate this console. 
 CTRL-A Z for help |115200 8N1 | NOR | Minicom 2.2    | VT102 | Online 05:32                                                                                



BusyBox v1.4.2 (2009-09-09 23:04:26 CST) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 KAMIKAZE (7.09) -----------------------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
 ---------------------------------------------------
root@WNR1000v2:/#  free
              total         used         free       shared      buffers
  Mem:        30544        16932        13612            0         1556
 Swap:            0            0            0
Total:        30544        16932        13612
root@WNR1000v2:/#  df -h
Filesystem                Size      Used Available Use% Mounted on
root@WNR1000v2:/# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
none on /proc type proc (rw,nodiratime)
none on /tmp type tmpfs (rw,nosuid,nodev)
tmpfs on /dev type tmpfs (rw)
root@WNR1000v2:/# ps
  PID  Uid     VmSize Stat Command
    1 root        356 S   init       
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    8 root            SW< [kblockd/0]
   30 root            SW  [pdflush]
   31 root            SW  [pdflush]
   33 root            SW< [aio/0]
   32 root            SW  [kswapd0]
   44 root            SW  [mtdblockd]
  131 root        268 S   klogd 
  135 root        228 S   datalib 
  203 root        196 S   /usr/sbin/potd 
  206 root        108 S   /usr/sbin/potval 
  283 root        236 S   udhcpd /tmp/udhcpd.conf 
  287 root        124 S   /usr/sbin/net-scan 
  296 root        156 S   /usr/sbin/telnetenable 
  300 root        128 S   /usr/sbin/hnapd 
  369 root         84 S   udhcpc -b -i eth0 -h WNR1000v2 -r 0.0.0.0 
  418 root        284 S   /usr/sbin/miniupnpd 
 1506 root        592 S   hostapd /var/run/topology.conf 
 1515 root        124 S   /usr/bin/wlanlog 
 1523 root        332 S   syslogd -m 0 -T GMT+8 
 1538 root        304 S   /usr/sbin/ntpclient 
 1543 root        348 S   crond -c /tmp/etc/crontabs -T GMT+8 
 1545 root        380 S   /usr/sbin/dnsmasq -c 0 -d -h -r /tmp/resolv.conf 
 1550 root        724 S   uhttpd 
 1553 root        140 S   inetd 
 1558 root        216 S   /usr/bin/detcable 2 
 1560 root        420 S   /bin/sh /sbin/button_detecte 
 1587 root        304 S   /sbin/traffic_meter 
 1594 root        516 S   -sh 
 2464 root        284 S   /bin/sleep 1 
 2465 root        372 R   ps 
root@WNR1000v2:/#

Thanks, everyone for the pointers and the help! smile

I have the same model (WNR1000 V2) and would like to make it as Wireless Bridge so that I can use for Sony Bravia TV.

what image are you using ? http://downloads.openwrt.org/kamikaze/7.09/

Do you think it works with version 8.09.2 ?

How can I install and config from windows machine. I tried telnetenable tool  but it didn't work.

Thank you for your help.

ltra wrote:

I have the same model (WNR1000 V2) and would like to make it as Wireless Bridge so that I can use for Sony Bravia TV.

what image are you using ? http://downloads.openwrt.org/kamikaze/7.09/

Right now I'm still on the stock firmware. I was hoping to get a backup copy of the firmware before I started but I've not found any yet. I'm hoping I can backup what's already on there first. THen attempt to compile the Netgera firmware (which is just OpenWRT 7.09 that I downloaded from the Netgear site). I don't want to just into this without some investigation first.

Do you think it works with version 8.09.2 ?

I haven't tried it yet but I don't if there is a version that will work with it.

How can I install and config from windows machine. I tried telnetenable tool  but it didn't work.

telnetenable ???

Please excuse my ignorance if I ask stupid questions. I'm still in the learning curve wink

I found the thread shows how to config Kamikaze in client mode and just wondering if the router is currently running  Kamikaze 7.09, then can we just change the config to make it a wireless bridge or we have to re-complied to get a new firmware?

https://forum.openwrt.org/viewtopic.php?pid=52024

Thanks!

Any news on this. I have one of these devices. I've got to setup windows machine to enable telnet into it, but I would like to upgrade it to a newer version of OpenWRT

So I have just received a brand new wnr1000v2 VC.

I do not know what the VC indicates but I can only find people relating it to Comcast. That is how I got mine, for free.

As posted previously the router has an ar7240 CPU. The wireless chipset shown on the fccid pictures and posted by the original is ar9285-AL1A which is confirmed from the bootlog as an AR9285.

I confirm that telnetenable works. I am not able to change the password with the passwd command. The passwd file is read only. I could not find a text editor installed ( tried vi, vim, nano, and pico).

I have tried building from trunk svn 21527(I think). I could not get it to build with ar71xx and madwifi. But that probably my fault and for another topic.

I had a successful build from the imagebuilder-ar71xx-for-linux using backfire 10.03. I do not know if this will work because I do not know how to make the .img headers so it can be installed from the web interface.

I am going to attempt to do a tftp on boot using the tftp.exe application I found on the dd-wrt website. The build is from the image builder with the default profile and packages kmod-ath9k, wpad-mini, and luci. I do not know which of the images would be preferred so I will probably pick on at random.

I assume that if this fails I will be able to restart to normal or tftp again with a firmware from the netgear website.

Worst comes to worst I can just call comcast and say it died. lol!

(Last edited by Kanji on 22 May 2010, 07:09)

Guess I will not be. All the images prepared by the image builder are for specific routers.

I am now stuck. Any suggestions on where to go?

I also have a wnr1000v2-VC i'd like to update... has anyone cracked this yet?

ncherry, any updates on this?

I am also very much interested in getting this Netgear WNR1000 v2 to work as a bridge !!

I'm thinking that if you just change the value in the file /module_name from WNR1000v2-VC to WNR1000v2 (or maybe WNR1000v2-NA) you should be able to get past the module name check and just use the firmware update page to upload WNR1000v2-V1.0.1.1NA.img

Unfortunately the squashfs filesystem on /dev/root is marked read-only and it's not a symbolic link to a writable file. I haven't been able to figure out how to use mtd to temporarily mark the filesystem read-write so that I can change the /module_name using cat. If anyone can explicitly spell out how this might be done, it would be very helpful.

My next step is to compile the 1.0.1.1 firmware but change its module name check to WNR1000v2-VC so that it uploads correctly.

while looking things over earlier today, i noticed that the GPL firmware src on the netgear site has very few almost miniscule differences between the WNR1000v2-VC and the WNR1000v2. Most of which can probably be contributed to the software version differences.
           (downloaded both and looked through everything with winmerge)

The most notable difference is the addition of some files in the VC version, mainly custom configs, and patch files, and more importantly, the declaration of the module version / name in the makefile.. (I'm sure if i dig a little further, can figure out where and how to disable the rejection of non-VC firmware, doing this once, should allow us to flash a different version)
an easier example to get the latest netgear firmware for the WNR1000v2 on the VC version would be to download the GPL source for the normal v2, and simply tack on the " -VC " at the end of the module name declaration line here:
line#: 9
File Location:

WNR1000v2_V1.0.1.1_gpl_src/target/linux/wnr1000v2-2.6/image/Makefile

by doing so, you should be able to flash the device with normal WNR1000v2 firmware, and forgo the outdated VC version that doesn't seem to be actively developed anywhere.

now i haven't tried this as of yet, but worst case scenario, you'de have to send the router back to comcast as non-functional. If i remember right, i read somewhere that they will provide postage to ship it back.. or you could go to your local office and say " it stopped working, can i get an exchange "

(Last edited by ArcAIN6 on 27 Sep 2010, 05:55)

I am interested in trying to upgrade mine as well.. Let me know if you have any luck getting new fw on the VC version as I'm tired of having to reset router a few times each day because of disconnects.

Can anyone build a firmware image for me from the following NETGEAR GPL source code?

NETGEAR WNR1000v2-VC: ftp://downloads.netgear.com/files/GPL/W … pl_src.zip

The recommended build environment is Ubuntu 8.04, but I have Ubuntu 10.10 64-Bit. I'm not sure if I'm experiencing the make errors because of the GCC version but it exits during the preparation stage. I've tried different GCC versions 4.1 and greater but none have shown a different outcome. I would appreciate it quite a lot, if someone would attempt it and then provide me their results. I'm wanting to revive my bricked router and hopefully work on building a firmware from the Atheros AP81 branch to test. Thanks for your help.

I have acquired the WNR1000v2-VC V1.0.0.3NA firmware that can be used for recovery of these particular routers which were provided by Comcast. I attempted building the firmware in different Linux environments according to the instructions included with the GPL source code and it ended prematurely with GCC errors. After 3 weeks and 3 tiers of support, I received the firmware from Netgear. It took an "engineer" to provide me with the firmware which none of technical support could provide. This was the most horrible technical support provided by a company that I've ever experienced, especially for such a simple request of wanting the firmware for THEIR GPL source code.

I uploaded the firmware image at the DD-WRT forums. The subject for the thread is "NetGear WNR1000v2 Request".

DD-WRT: http://www.dd-wrt.com/phpBB2/viewtopic. … p;start=15

MultiUpload: http://www.multiupload.com/H3GJQCSE65

SpeedyShare: http://www.speedyshare.com/files/252260 … .0.3NA.zip

GENERAL WARNING: NETGEAR or COMCAST has modified the U-boot boot-loader and it will not boot any firmware images above V1.0.0.3 for the WNR1000v2. Hence, the added -VC to the model number. I know this because I was able to modify the header of the firmware image for V1.0.1.1 for upload to the router and it detected a corrupt kernel. According to NETGEAR technical support, the router hardware for the WNR1000v2-VC and WNR1000v2 are identical. So, if anyone has the U-Boot boot-loader for the WNR1000v2, then could you share it or retrieve a copy from your router? Also, once I have the U-Boot image then is there a way to change the boot-loader, other than JTAG? I don't believe this unit has the interface.

(Last edited by computer.technician on 29 Nov 2010, 06:02)

Is there any update to this? I just found one of these routers in my closet and would like to put OpenWrt on it.

I'm sorry to bring up what appears to be a dead thread, but I've been trying to get OpenWRT on this router and I've made some progress I wanted to share. So first of all, I have the WNR1000v2-VC version that was handed out by comcast. I'm not sure what the differences are between the VC and normal version. Someone above me mentioned something about not being able to upgrade the firmware, but I downloaded v1.0.0.12 from netgear's site and was able to update to it. In any case, what I really want is OpenWRT running on this router. Towards that end, I've actually made some progress, and I have a WNR1000v2-VC-OpenWRT.img file you can upload through the router's web interface. It boots the OpenWRT kernel but right now I'm stuck trying to determine the correct boot arguments. But before I get to that part, let me tell you guys how to build the image file yourselves.

First, download and extract the GPL sources from netgear;s gpl source site. I used this toolchain http://www.downloads.netgear.com/files/ … l_src.zip. Now, I wasn't actually able to compile any kind of firmware with this toolchain, but that's not why we need it. The important parts are the programs in the 'tools' directory. Follow the build directions in the toolchain and make changes as needed (I had to make several, and unfortunately I didn't document some of them) until the mkimage and mksquashfs-lzma programs are built. That's all you need from this toolchain.

Next, checkout the latest OpenWRT attitude_adjustment toolchain from subversion. I configured the toolchain using the console based menu, but for brevity here's a tinypaste link to the configuration file I used http://tny.cz/04cc1b8b. Go ahead and build the images using "make". Now what we have to do is use the filesystem tools from netgear's toolchain to assemble an image containing the kernel and rootfs created by the OpenWRT toolchain. Here's a script I wrote to accomplish this. Make sure to update the NETGEAR and OPENWRT variables to point to the respective SDKs.

#!/bin/bash

# settings
MODULE_NAME=WNR1000v2-VC
FW_VERSION=V1.0.0.3
FW_REGION=NA
HEAD_LENGTH=128
MAX_IMAGE_SIZE=3473408

NETGEAR=~/wnr1000v2/netgear/WNR1000v2-VC-V1.0.0.3_gpl_src
OPENWRT=~/wnr1000v2/openwrt

# copy tools
cp ${NETGEAR}/tool_build/squashfs3.0/squashfs-tools/mksquashfs-lzma .
cp ${NETGEAR}/tool_build/mkimage/mkimage .
cp ${NETGEAR}/tools/appendsum .

# kernel image
cp ${OPENWRT}/build_dir/linux-ar71xx_generic/vmlinux.elf .
KERNEL_LOAD=0x80060000
KERNEL_ENTRY=`readelf -a vmlinux.elf | grep "Entry"|cut -d":" -f 2`
rm vmlinux.elf

cp ${OPENWRT}/build_dir/linux-ar71xx_generic/vmlinux.bin.lzma .
./mkimage -A mips -O linux -T kernel -C lzma -n "Linux Kernel Image" -a ${KERNEL_LOAD} -e ${KERNEL_ENTRY} -d vmlinux.bin.lzma uImage
rm vmlinux.bin.lzma

# filesystem
cp ${OPENWRT}/build_dir/linux-ar71xx_generic/squashfs-64k/rootfs_image rootfs.squash
unsquashfs rootfs.squash
rm rootfs.squash

mkdir -p squashfs-root/image
cp uImage squashfs-root/image/uImage
./mksquashfs-lzma squashfs-root rootfs.squash -nopad -noappend -root-owned -be
rm -rf squashfs-root

./mkimage -A mips -O linux -T filesystem -C none -a 0x9f050000 -e 0x9f050000 -name "${MODULE_NAME}-${FW_VERSION}" -d rootfs.squash rootfs.bin

# firmware header
dd bs=${HEAD_LENGTH} if=/dev/zero count=1 of=head.pad
echo "device:${MODULE_NAME}" > head_info.pad
echo "version:${FW_VERSION}" >> head_info.pad
echo "region:${FW_REGION}" >> head_info.pad
cat head_info.pad head.pad | head -c ${HEAD_LENGTH} > header.bin
rm head.pad head_info.pad

# create the firmware image
cat header.bin rootfs.bin > firmware.bin
./appendsum firmware.bin ${MODULE_NAME}-OpenWRT.img

Please note that for right now the kernel load address (KERNEL_LOAD) is hardcoded into the script. I'm not sure if there's a way to auto-detect it, but I got that address from the output of the 'readelf -a vmlinux.elf' command. Once you run this script, you should have a file 'WNR1000v2-VC-OpenWRT.img'. You can upload that through the router's firmware upgrade page.

Now here's the part I'm stuck on. The kernel boots but can't find the the root partition. Here's a tinypaste link to my boot log http://tny.cz/3e8f1d20. Obviously, the boot arguments that worked for the netgear firmware aren't working for OpenWRT. I've tried to omit the root and rootfstype options hoping for some kind of auto-detect, but I get the same error (with block (0,0)). I've also tried guessing several variations, and no luck there either. Guys, we're like one step away from running OpenWRT on this router, and I could use your help.

Does anyone have any idea how we can find out the proper boot arguments to use? Also, if there's an OpenWRT developer reading this, I'd like to eventually update the OpenWRT image builder to make proper images for this board (hopefully without the outdated utilities from the netgear dsk), but I don't know how to go about doing that. Help!?

(Last edited by ctrlc-root on 5 Mar 2013, 02:54)

Ok, well I've done some digging, and it seems there's more work to do than I first though. We need to add support for a new device following http://wiki.openwrt.org/doc/devel/add.new.device. My only gripe is that the page seems to be somewhat out of date. I picked the latest support revision I could find in subversion (https://dev.openwrt.org/changeset?sfp_e … sfph_mail=) and I'll be working off that to try and add support for this board. I've extracted some information about the router from uboot, namely the flash layout, so I'll start working to add support to the openwrt build system for this board. My first goal is to get the kernel to boot. Then I'll worry about all the nice hardware like ethernet interfaces, leds, and other things. Lastly, we'll have to add support for building firmware images for these kinds of boards. I've subscribed myself to this topic, so if anyone with development experience (in particular with this not-so-fully-documented-openwrt sdk), I would appreciate the help.

Here's some of my notes on the board's flash layout http://tny.cz/59e75343 and a work-in-progress mach file http://tny.cz/8d5d8064. Hopefully, this thread won't die again until we've added hardware support for this board smile.

Have you m ade any further progress with the WNR1000 V2? I have one as well (from comcast) and would like to openwrt.

Thanks

I don't see how something as complicated as the PS3 can be hacked to run custom firmware, but this POS router from Comcast is somehow bulletproof? Wish I was more l33t!

I don't either. I have the v2 WNR1000. I ordered a Xilinx USB jtag cable that should be here tomorrow, but I'm not much of a hacker. neutral

nchall wrote:

I don't see how something as complicated as the PS3 can be hacked to run custom firmware, but this POS router from Comcast is somehow bulletproof? Wish I was more l33t!