Hi,
i want to try to help to start support for the asus rt-ac66u, where i can start?
I found that the device has a simple to access serial port.
i tested it and there is what display the bootloader:

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: ��一 10��月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)

Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...

i compiled and used openwrt on many devices, but this is the first time that i am starting from scratch.

very interseting device!

target BCM947xx/953xx has a patch to detect RT-N66U, so it's likely to boot...
try compiling a lzma compressed ramdisk image and netboot it;

see http://wiki.openwrt.org/toh/linksys/e3000/3.0.4_bootlog in particular
'CFE> boot -tftp -elf 192.168.1.2:/incoming/vmlinux.elf' to tftpoot the image

please post a help message from cfe promt to see compiled in cfe commands and a full boot log of stock kernel too

tryed with openwrt-brcm47xx-vmlinux-initramfs.elf :

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: ��一 10��月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)

Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Invalid boot block on disk
Invalid boot block on disk
Check 2 trx result: -31, -31
Hello!! Enter Rescue Mode: (Check error)

tryed with openwrt-brcm47xx-squashfs.trx openwrt-brcm47xx-initramfs.trx :

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: ��一 10��月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)

Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Check 2 trx result: 0, 0
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 3780 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000

i think that it loads only .trx images

CFE> help
Available commands:

show devices        Display information about the installed devices.
show clocks         Show current values of the clocks.
nvram               NVRAM utility.
reboot              Reboot.
flash               Update a flash memory device
batch               Load a batch file into memory and execute it
go                  Verify and boot OS image.
boot                Load an executable file into memory and execute it
load                Load an executable file into memory without executing it
save                Save a region of memory to a remote file via TFTP
ping                Ping a remote IP host.
arp                 Display or modify the ARP Table
ifconfig            Configure the Ethernet interface
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0

here is the help, now i am making a txt of full boot log

Decompressing...done

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 一 10月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)

Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Check 2 trx result: 0, 0
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ...... 3330860 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.22.19 (root@asus) (gcc version 4.2.4) #1 Thu Oct 3 07:16:35 CST 2013
CPU revision is: 00019749
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Determined physical RAM map:
memory: 07fff000 @ 00000000 (usable)
memory: 08000000 @ 87fff000 (usable)
Built 1 zonelists.  Total pages: 585216
Kernel command line: root=/dev/mtdblock3 console=ttyS0,115200 init=/sbin/preinit
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 2048 (order: 11, 8192 bytes)
CPU: BCM5300 rev 1 pkg 0 at 600 MHz
Using 300.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 238608k/131068k available (2542k kernel code, 22660k reserved, 513k data, 196k init, 131072k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
PCI: Initializing host
PCI: Reset RC
PCI: Initializing host
PCI: Reset RC
PCI: Fixing up bus 0
PCI/PCIe coreunit 0 is set to bus 1.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
PCI/PCIe coreunit 1 is set to bus 2.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:02:00.1 (0004 -> 0006)
PCI: Fixing up bus 2
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP reno registered
highmem bounce pool size: 64 pages
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
io scheduler noop registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.18.3
PPTP driver version 0.8.5
pflash: found no supported devices
Boot partition size = 262144(0x40000)
Creating 2 MTD partitions on "sflash":
0x00000000-0x00040000 : "pmon"
0x001f0000-0x00200000 : "nvram"
Found a Zentel NAND flash with 2048B pages or 128KB blocks; total size 128MB
lookup_nflash_rootfs_offset: offset = 0x0
nflash: squash filesystem with lzma found at block 9
Creating 4 MTD partitions on "nflash":
0x00000000-0x02000000 : "linux"
0x00132ea0-0x02000000 : "rootfs"
0x04000000-0x06000000 : "linux2"
0x04132ea0-0x06000000 : "rootfs2"
NAND device: Manufacturer ID: 0x92, Chip ID: 0xf1 (Zentel NAND 128MiB 3,3V 8-bit)
Creating 3 MTD partitions on "brcmnand":
0x00000000-0x02000000 : "trx"
0x02000000-0x04000000 : "jffs2"
0x04000000-0x07f00000 : "brcmnand"
dev_nvram_init: _nvram_init
_nvram_init: allocat size= 65536
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
u32 classifier
    OLD policer on
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 16384 max)
ipt_time loading
ip_tables: (C) 2000-2006 Netfilter Core Team
net/ipv4/netfilter/tomato_ct.c [Oct  3 2013 07:15:57]
NET: Registered protocol family 1
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 196k freed
Warning: unable to open an initial console.
Failed to execute /sbin/preinit.  Attempting defaults...
set_action 0
[1 init:init_nvram +4] init_nvram for 23
RT-AC66U: swmode: router repeater ap pstanum_of_mssid_support(0x007f): [mssid] support [3] mssid
ctf: module license 'Proprietary' taints kernel.
et_module_init: passivemode set to 0x0
et_module_init: et_txq_thresh set to 0x400
bcm_robo_enable_switch: EEE is disabled
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.102.9 (r366174)
hotplug net INTERFACE=eth0 ACTION=add
PCI: Enabling device 0000:01:01.0 (0000 -> 0002)
eth1: Broadcom BCM4331 802.11 Wireless Controller 6.30.102.9 (r366174)
PCI: Enabling device 0000:02:01.0 (0000 -> 0002)
eth2: Broadcom BCM4360 802.11 Wireless Controller 6.30.102.9 (r366174)
hotplug net INTERFACE=eth1 ACTION=add
hotplug net INTERFACE=eth2 ACTION=add
Algorithmics/MIPS FPU Emulator v1.5
/ # [1 init:init_main +8] main loop signal/state=17
start_logger:
start_usb
NTFS (with native replay) support included
optimized: speed
Build_for__asus_n66u_2011-10-27_U86_r187446_b122

_ifconfig: name=eth0 flags=1043 IFUP addr=(null) netmask=(null)
hotplug net INTERFACE=vlan1 ACTION=add
start_lan 1065
update_lan_state(lan_, 0, 0)
generate_wl_para(0x0a95): unit 0 subunit -1
num_of_mssid_support(0x007f): [mssid] support [3] mssid
chanspec_fix(0x045a): unit: 0, bw_cap: 3, chanspec: 0
generate_wl_para(0x0c9d): bw: 0
generate_wl_para(0x0c9f): chanspec: 0
generate_wl_para(0x0ca0): bw_cap: 3
generate_wl_para(0x0ca6): obss_coex: 1
wlconf_pre(0x0269): set vhtmode 1
generate_wl_para(0x0a95): unit 1 subunit -1
num_of_mssid_support(0x007f): [mssid] support [3] mssid
chanspec_fix(0x045a): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x0c9d): bw: 0
generate_wl_para(0x0c9f): chanspec: 0
generate_wl_para(0x0ca0): bw_cap: 7
generate_wl_para(0x0ca6): obss_coex: 1
wlconf_pre(0x0269): set vhtmode 1
set_wltxpower(0x0550): unit: 0, txpower: 80
set_wltxpower(0x0550): unit: 1, txpower: 80
start_lan: setting up the bridge br0
hotplug net INTERFACE=br0 ACTION=add
vlan1: cmd=14: Operation not supported
_ifconfig: name=vlan1 flags=1043 IFUP addr=(null) netmask=(null)
start_lan: setting MAC of br0 bridge to D8:50:E6:CB:D5:E8
_ifconfig: name=eth1 flags=1043 IFUP addr=(null) netmask=(null)
generate_wl_para(0x0a95): unit 0 subunit -1
num_of_mssid_support(0x007f): [mssid] support [3] mssid
chanspec_fix(0x045a): unit: 0, bw_cap: 3, chanspec: 0
generate_wl_para(0x0c9d): bw: 0
generate_wl_para(0x0c9f): chanspec: 0
generate_wl_para(0x0ca0): bw_cap: 3
generate_wl_para(0x0ca6): obss_coex: 1
generate_wl_para(0x0a95): unit 0 subunit 1
generate_wl_para(0x0a95): unit 0 subunit 2
generate_wl_para(0x0a95): unit 0 subunit 3
wlconf(0x014f): unit: 0, txpower: 80
_ifconfig: name=eth2 flags=1043 IFUP addr=(null) netmask=(null)
wlc_phy_cal_init_acphy: NOT Implemented
generate_wl_para(0x0a95): unit 1 subunit -1
num_of_mssid_support(0x007f): [mssid] support [3] mssid
chanspec_fix(0x045a): unit: 1, bw_cap: 7, chanspec: 0
generate_wl_para(0x0c9d): bw: 0
generate_wl_para(0x0c9f): chanspec: 0
generate_wl_para(0x0ca0): bw_cap: 7
generate_wl_para(0x0ca6): obss_coex: 1
generate_wl_para(0x0a95): unit 1 subunit 1
generate_wl_para(0x0a95): unit 1 subunit 2
generate_wl_para(0x0a95): unit 1 subunit 3
wlconf(0x014f): unit: 1, txpower: 80
_ifconfig: name=br0 flags=1043 IFUP addr=192.168.1.1 netmask=255.255.255.0
_ifconfig: name=lo flags=1043 IFUP addr=127.0.0.1 netmask=255.0.0.0
route_manip: cmd=ADD name=lo addr=127.0.0.0 netmask=255.0.0.0 gateway=0.0.0.0 metric=0
lan_up(br0)
[1 init:stop_dnsmasq +11] begin
[1 init:stop_dnsmasq +11] end
[1 init:start_dnsmasq +11] begin
route_manip: cmd=ADD name=br0 addr=0.0.0.0 netmask=0.0.0.0 gateway=0.0.0.0 metric=0
starting ntp...
update_lan_state(lan_, 2, 0)
start_lan 1436
start_services 2907
# wanduck: nvram changed: Don't enable the USB line!
# wanduck: Got LAN(-1) information:
[1 init:start_dnsmasq +11] begin
start_lan_port(0) 1
TZ watchdog
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0x1006 (6)
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0xe02a (36/80)
start_pptpd: getpid= 1
disk_monitor: starting...
disk_monitor: Disable the disk_monitor.
vlan1: cmd=14: Operation not supported
[1 init:init_main +16] main loop signal/state=14
U2EC starting ...
Don't detect static clients!

thanks for the bootlogs!

openwrt-brcm47xx-initramfs.trx ought to be the right one...
http://www.jackslab.org/?p=280 is an good start to get confident with cfe

got no serial console cfe access to one of my routers atm, so i cannot try directly
but i believe the image can boot

tryed with openwrt-brcm47xx-squashfs.trx and openwrt-brcm47xx-initramfs.trx :

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: ��一 10��月 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes
CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)
Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Check 2 trx result: 0, 0
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 3780 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000

please use openwrt-brcm47xx-initramfs.trx or openwrt-brcm47xx-vmlinux-initramfs.elf
openwrt-brcm47xx-squashfs.trx is for flashing only

what did you try exactly? What cfe commands?

with openwrt-brcm47xx-initramfs.trx i tried with put with tftp client to the asus.
after successfull transfer and copy to flash there is the boot output:

Done. 5304320 bytes read
Download of 0x50f000 bytes completed
Write kernel and filesystem binary to FLASH
Programming...copysize=5304320, amtcopy=5304320
done. 5304320 bytes written
Programming...copysize=5304320, amtcopy=5304320
done. 5304320 bytes written
Decompressing...done

CFE version 6.30.39.29 (r338244) based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: ä¸ 10æ 15 10:41:41 CST 2012 (yau@wireless-pub2)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 32 64KB blocks; total size 2MB
Found a AMD NAND flash with 2048B pages or 128KB blocks; total size 128MB
bcm_robo_enable_switch: EEE is disabled
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.39.29 (r338244)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem:    0x80700000 - 0x8094EDE0 (2420192)
Data:       0x80738B70 - 0x8073BE10 (12960)
BSS:        0x8073BE10 - 0x8074CDE0 (69584)
Heap:       0x8074CDE0 - 0x8094CDE0 (2097152)
Stack:      0x8094CDE0 - 0x8094EDE0 (8192)
Text:       0x80700000 - 0x80738B70 (232304)

Device eth0:  hwaddr D8-50-E6-CB-D5-E8, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Null Rescue Flag.
boot the image...
Check 2 trx result: 0, 0
go load
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: TFTP Server.
Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: .. 3780 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000

then stuck.

oh man, you flashed it!
I clearly stated to *netboot* it and gave a sample of cfe command.

Again:
* get your tftp server configured and put openwrt-brcm47xx-initramfs.trx on the server
* on the asus: stop at the prompt CFE>
* type 'boot -tftp <your tftp server address>:<path to>/openwrt-brcm47xx-initramfs.trx'

CFE> boot -tftp 192.168.1.10:/openwrt-brcm47xx-initramfs.trx
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.10:/openwrt-brcm47xx-initramfs.trx Options:(null)
Loading: TFTP Client.

then stuck, on the tftp server:

Connection received from 192.168.1.1 on port 1409 [10/11 19:00:43.641]
Read request for file </openwrt-brcm47xx-initramfs.trx>. Mode octet [10/11 19:00:43.641]
Using local port 52113 [10/11 19:00:43.641]
TIMEOUT waiting for Ack block #1  [10/11 19:00:58.643]

(Last edited by Halino on 10 Nov 2013, 19:00)

it can't even download the .trx, still something wrong
please check tftp server config a/o try '192.168.1.10:openwrt-brcm47xx-initramfs.trx' (without '/')

CFE> boot -tftp 192.168.1.10:openwrt-brcm47xx-initramfs.trx
Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.10:openwrt-brcm47xx-initramfs.trx Options:(null)
Loading: TFTP Client.

stuck, on server:

Connection received from 192.168.1.1 on port 3022 [10/11 19:51:00.910]
Read request for file <openwrt-brcm47xx-initramfs.trx>. Mode octet [10/11 19:51:00.910]
Using local port 52987 [10/11 19:51:00.911]
TIMEOUT waiting for Ack block #1  [10/11 19:51:15.912]

i am using tftpd32, is the best tftp i used for flashing of embedded devices.

any suggestion?

check eth paramaters from CFE> , adjust accordingly to http://www.jackslab.org/?p=280 section 2.1
the gateway must be the ip address of your tftp server

Wifi will be the most difficult:

According to: http://wikidevi.com/wiki/ASUS_RT-AC66U

that device has a BCM4360 (802.11ac) and a BCM4331 radio

there was a post in July 2013 on the mailing list about 4331 radio:
https://lists.openwrt.org/pipermail/ope … 20653.html

4331 support is on the TODO list of brcmfmac: http://wireless.kernel.org/en/users/Drivers/brcm80211

4360 afaik has no open linux drivers yet

linux-wireless mailing list (archive: http://marc.info/?l=linux-wireless) or sublists b43-dev / brcm80211-dev

Other projects (dd-wrt...) have access to broadcom source code and can support devices with those chips easier

i imagined that ac will be a big problem for the driver, there is anything that i can do to help the developing?

I don't know - ask on the mailing list?

linux-wireless post about:
http://www.spinics.net/lists/linux-wire … 10443.html

-> get mmiotrace to mips (dont know if its possible or if there are limits of architecture/devices)

or get a BCM4360 on x86

after dumping mmiotrace: Spec writing (takes time)
then another developer have to write a driver from scratch using the spec (clean room design)

see: http://bcm-v4.sipsolutions.net/ for the specs used to write b43
(current broadcom driver is 6.xx , specs are from 4.xx)

ask on the mailing list of linux-wireless if you can help to speed up development

(Last edited by zloop on 12 Nov 2013, 11:20)

I think it may be possible to port the current GPL broadcom driver, although it may involve significant patches to get the hnd abi patched for the newer kernel(maybe look at dd-wrt sources for hints since they use the newer kernel, although a lot of their source is not all that complete so I'm not sure how helpful it would be). Broadcom is moving over the ARM devices which use a newer kernel so this may end up being the latest chipset still on mips.