flashed with the orginal firmware the file: openwrt-15.05-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin
then the did not boot.

here the Console LOG from WebGUI Upgrade Firmware

Erase from 0X20000 to 0X3E0000:............................................................
Program from 0X20000 to 0X3E0000:............................................................
write successfully
reboot in 8s...
file: drivers/mtd/devices/ath_flash_ioctl.c,line: 108==: set wdt, CPU will be reset in 8 seconds.
Restarting system.

sudo minicom -b 115200 -D /dev/ttyUSB1

Optionen: I18n
Übersetzt am Sep  6 2015, 19:49:19.
Port /dev/ttyUSB1, 18:42:25

U-Boot 1.1.4 (Feb  6 2015 - 13:04:06)

ap151 - Dragonfly 1.0

DRAM:  32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 140k for U-Boot at: 81fdc000
Reserving 192k for malloc() at: 81fac000
Reserving 44 Bytes for Board Info at: 81fabfd4
Reserving 36 Bytes for Global Data at: 81fabfb0
Reserving 128k for boot params() at: 81f8bfb0
Stack Pointer at: 81f8bf98
Now running in RAM - U-Boot at: 81fdc000
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x15
flash size 4MB, sector count = 64
Flash:  4 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

[    0.000000] Linux version 3.18.20 (buildbot@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46450) ) #1 Fri Sep 4 215
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] SoC: Qualcomm Atheros TP9343 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=TL-WDR3500  console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 28516K/32768K available (2621K kernel code, 129K rwdata, 344K rodata, 224K init, 194K bss, 4252K reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:750.000MHz, DDR:400.000MHz, AHB:250.000MHz, Ref:25.000MHz
[    0.000000] Calibrating delay loop... 373.55 BogoMIPS (lpj=1867776)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is TP-LINK TL-WDR3500
[    0.090000] ar71xx: invalid MDIO id 1
[    0.530000] Kernel bug detected[#1]:
[    0.530000] CPU: 0 PID: 1 Comm: swapper Not tainted 3.18.20 #1
[    0.530000] task: 81828000 ti: 81822000 task.ti: 81822000
[    0.530000] $ 0   : 00000000 00000073 00000030 00000012
[    0.530000] $ 4   : 8035da48 80360000 00000000 00000233
[    0.530000] $ 8   : 00000001 00000232 81858800 6770696f
[    0.530000] $12   : 2f757372 00000007 00000000 2f736269
[    0.530000] $16   : 80352bd4 802f0000 00000000 803a0000
[    0.530000] $20   : 00000023 80340000 8038c7c4 80368230
[    0.530000] $24   : 00000003 00000000                 
[    0.530000] $28   : 81822000 81823dd8 00000000 803741cc
[    0.530000] Hi    : 00000000
[    0.530000] Lo    : 00000000
[    0.530000] epc   : 8036e140 0x8036e140
[    0.530000]     Not tainted
[    0.530000] ra    : 803741cc 0x803741cc
[    0.530000] Status: 1100cc03 KERNEL EXL IE
[    0.530000] Cause : 00800024
[    0.530000] PrId  : 00019750 (MIPS 74Kc)
[    0.530000] Modules linked in:
[    0.530000] Process swapper (pid: 1, threadinfo=81822000, task=81828000, tls=00000000)
[    0.530000] Stack : 00000023 80340000 8038c7c4 801bc3e0 bf010000 bfff0000 bf010000 bfff0000
          bf010000 bfff0000 00000000 803741cc 81823e1c 00000001 803a229c 00000000
          c4e98483 becd6bf8 00000000 8036acf0 8038c7f4 8036ad18 80382bb4 8038c7f0
          80385ae0 8038c7f0 00000000 800694d4 00000000 000000d1 81846900 80390000
          8035eff0 801e8d3c 00846900 00000001 00000000 00000000 00000000 810401e2
          ...
[    0.530000] Call Trace:[<801bc3e0>] 0x801bc3e0
[    0.530000] [<803741cc>] 0x803741cc
[    0.530000] [<8036acf0>] 0x8036acf0
[    0.530000] [<8036ad18>] 0x8036ad18
[    0.530000] [<80382bb4>] 0x80382bb4
[    0.530000] [<80385ae0>] 0x80385ae0
[    0.530000] [<800694d4>] 0x800694d4
[    0.530000] [<801e8d3c>] 0x801e8d3c
[    0.530000] [<8009541c>] 0x8009541c
[    0.530000] [<80368c14>] 0x80368c14
[    0.530000] [<80368230>] 0x80368230
[    0.530000] [<80065208>] 0x80065208
[    0.530000] [<80065218>] 0x80065218
[    0.530000] [<80065208>] 0x80065208
[    0.530000] [<80060878>] 0x80060878
[    0.530000]
[    0.530000]
Code: 8fb00020  03e00008  27bd0030 <000c000d> 27bdffc8  afb50024  3c150001  afb7002c  afb60028
[    0.540000] ---[ end trace 95e95677f17abbc0 ]---
[    0.540000] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[    0.540000]
[    0.540000] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[    0.540000]

i tryed to reflash

ap151> setenv serverip 192.168.0.22
ap151> setenv ipaddr 192.168.0.1
ap151> tftp 0x80800000 openwrt-15.05-ar71xx-generic-tl-wr941nd-v6-squashfs-sysupgrade.bin
Trying eth1
eth1 link down
FAIL
Trying eth0
enet0 port4 up
dup 1 speed 100
Using eth0 device
TFTP from server 192.168.0.22; our IP address is 192.168.0.1
Filename 'openwrt-15.05-ar71xx-generic-tl-wr941nd-v6-squashfs-sysupgrade.bin'.
Load address: 0x80800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###
done
Bytes transferred = 3342340 (330004 hex)

ap151> printenv bootcmd
bootcmd=bootm 0x9f020000

ap151> erase.b 0x9f020000 +0x3c0000
Erasing flash...
First 0x2 last 0x3d sector size 0x10000
  61
Erased 60 sectors

ap151> cp.b 0x80800000 0x9f020000 0x3c0000
Copy to Flash... write addr: 9f020000
done

But see the same kernel panic error.

then i did the reflash again but with:

  cp.b 0x80800000 0x9f020000 0x330004

then i get this at boot:

U-Boot 1.1.4 (Feb  6 2015 - 13:04:06)

ap151 - Dragonfly 1.0

DRAM:  32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 140k for U-Boot at: 81fdc000
Reserving 192k for malloc() at: 81fac000
Reserving 44 Bytes for Board Info at: 81fabfd4
Reserving 36 Bytes for Global Data at: 81fabfb0
Reserving 128k for boot params() at: 81f8bfb0
Stack Pointer at: 81f8bf98
Now running in RAM - U-Boot at: 81fdc000
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x15
flash size 4MB, sector count = 64
Flash:  4 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80000000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

but nothing more

What did i wrong ?

Thanks

(Last edited by ds2k5 on 25 Sep 2015, 16:12)

Hello ds2k5,

I don't own the device by myself but i think you got the wrong firmware file.
I think even the wiki is wrong on that topic..

As seen by your serial console log, you flashed the sysupgrade file.
I used to flash factory firmware files when doing recovery via tftp and serial.

So you should try to do the same. As long as you don't mess with the addresses nothing SHOULD go wrong.

If you success, could you please share it with us so someone / I can update the wiki page.

Good Luck
Napsi-GER-

EDIT:

Take care of "Note #2"  here

(Last edited by Napsi-GER- on 24 Sep 2015, 19:23)

Hello Napsi-GER-,

thanks for this advice

U-Boot 1.1.4 (Feb  6 2015 - 13:04:06)

ap151 - Dragonfly 1.0

DRAM:  32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 140k for U-Boot at: 81fdc000
Reserving 192k for malloc() at: 81fac000
Reserving 44 Bytes for Board Info at: 81fabfd4
Reserving 36 Bytes for Global Data at: 81fabfb0
Reserving 128k for boot params() at: 81f8bfb0
Stack Pointer at: 81f8bf98
Now running in RAM - U-Boot at: 81fdc000
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x15
flash size 4MB, sector count = 64
Flash:  4 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is_auto_upload_firmware=0
Autobooting in 1 seconds
ap151>
ap151>
ap151> setenv serverip 192.168.0.22
ap151> setenv ipaddr 192.168.0.1
ap151>  tftp 0x80800000 openwrt-15.05-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin
Trying eth1
eth1 link down
FAIL
Trying eth0
enet0 port4 up
dup 1 speed 100
Using eth0 device
TFTP from server 192.168.0.22; our IP address is 192.168.0.1
Filename 'openwrt-15.05-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin'.
Load address: 0x80800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ######################################################
done
Bytes transferred = 3932160 (3c0000 hex)
ap151> erase.b 0x9f020000 +0x3c0000
Erasing flash...
First 0x2 last 0x3d sector size 0x10000
  61
Erased 60 sectors
ap151> cp.b 0x80800000 0x9f020000 0x330004
Copy to Flash... write addr: 9f020000
done
ap151>

but.....

ap151> reset

U-Boot 1.1.4 (Feb  6 2015 - 13:04:06)

ap151 - Dragonfly 1.0

DRAM:  32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 140k for U-Boot at: 81fdc000
Reserving 192k for malloc() at: 81fac000
Reserving 44 Bytes for Board Info at: 81fabfd4
Reserving 36 Bytes for Global Data at: 81fabfb0
Reserving 128k for boot params() at: 81f8bfb0
Stack Pointer at: 81f8bf98
Now running in RAM - U-Boot at: 81fdc000
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x15
flash size 4MB, sector count = 64
Flash:  4 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

[    0.000000] Linux version 3.18.20 (buildbot@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46450) ) #1 Fri Sep 4 215
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] SoC: Qualcomm Atheros TP9343 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Initmem setup node 0 [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=TL-WDR3500  console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 28516K/32768K available (2621K kernel code, 129K rwdata, 344K rodata, 224K init, 194K bss, 4252K reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:750.000MHz, DDR:400.000MHz, AHB:250.000MHz, Ref:25.000MHz
[    0.000000] Calibrating delay loop... 373.55 BogoMIPS (lpj=1867776)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.070000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is TP-LINK TL-WDR3500
[    0.090000] ar71xx: invalid MDIO id 1
[    0.530000] Kernel bug detected[#1]:
[    0.530000] CPU: 0 PID: 1 Comm: swapper Not tainted 3.18.20 #1
[    0.530000] task: 81828000 ti: 81822000 task.ti: 81822000
[    0.530000] $ 0   : 00000000 00000073 00000030 00000012
[    0.530000] $ 4   : 8035da48 80360000 00000000 00000233
[    0.530000] $ 8   : 00000001 00000232 81858800 6770696f
[    0.530000] $12   : 2f757372 00000007 00000000 2f736269
[    0.530000] $16   : 80352bd4 802f0000 00000000 803a0000
[    0.530000] $20   : 00000023 80340000 8038c7c4 80368230
[    0.530000] $24   : 00000003 00000000                 
[    0.530000] $28   : 81822000 81823dd8 00000000 803741cc
[    0.530000] Hi    : 00000000
[    0.530000] Lo    : 00000000
[    0.530000] epc   : 8036e140 0x8036e140
[    0.530000]     Not tainted
[    0.530000] ra    : 803741cc 0x803741cc
[    0.530000] Status: 1100cc03 KERNEL EXL IE
[    0.530000] Cause : 00800024
[    0.530000] PrId  : 00019750 (MIPS 74Kc)
[    0.530000] Modules linked in:
[    0.530000] Process swapper (pid: 1, threadinfo=81822000, task=81828000, tls=00000000)
[    0.530000] Stack : 00000023 80340000 8038c7c4 801bc3e0 bf010000 bfff0000 bf010000 bfff0000
          bf010000 bfff0000 00000000 803741cc 81823e1c 00000001 803a229c 00000000
          c4e98483 becd6bf8 00000000 8036acf0 8038c7f4 8036ad18 80382bb4 8038c7f0
          80385ae0 8038c7f0 00000000 800694d4 00000000 000000d1 81846900 80390000
          8035eff0 801e8d3c 00846900 00000001 00000000 00000000 00000000 810401e2
          ...
[    0.530000] Call Trace:[<801bc3e0>] 0x801bc3e0
[    0.530000] [<803741cc>] 0x803741cc
[    0.530000] [<8036acf0>] 0x8036acf0
[    0.530000] [<8036ad18>] 0x8036ad18
[    0.530000] [<80382bb4>] 0x80382bb4
[    0.530000] [<80385ae0>] 0x80385ae0
[    0.530000] [<800694d4>] 0x800694d4
[    0.530000] [<801e8d3c>] 0x801e8d3c
[    0.530000] [<8009541c>] 0x8009541c
[    0.530000] [<80368c14>] 0x80368c14
[    0.530000] [<80368230>] 0x80368230
[    0.530000] [<80065208>] 0x80065208
[    0.530000] [<80065218>] 0x80065218
[    0.530000] [<80065208>] 0x80065208
[    0.530000] [<80060878>] 0x80060878
[    0.530000]
[    0.530000]
Code: 8fb00020  03e00008  27bd0030 <000c000d> 27bdffc8  afb50024  3c150001  afb7002c  afb60028
[    0.540000] ---[ end trace 3dab1c26fddb23d6 ]---
[    0.540000] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[    0.540000]
[    0.540000] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[    0.540000]

if i try to flash the orginal fw: wr940nv3_wr941ndv6_en_3_16_9_up_boot(150206).bin

before prepare the image:

dd if=wr940nv3_wr941ndv6_en_3_16_9_up_boot(150206).bin of=tplink_boot.bin skip=257 bs=512

setenv serverip 192.168.0.22

setenv ipaddr 192.168.0.1

tftp 0x80800000 tplink_boot.bin

erase.b 0x9f020000 +0x3c0000
cp.b 0x80800000 0x9f020000 0x3c0000

reset

then the router works with the orginal firmware

(Last edited by ds2k5 on 26 Sep 2015, 16:54)

Console LOG from Orginal Firmware:

U-Boot 1.1.4 (Feb  6 2015 - 13:04:06)

ap151 - Dragonfly 1.0

DRAM:  32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 140k for U-Boot at: 81fdc000
Reserving 192k for malloc() at: 81fac000
Reserving 44 Bytes for Board Info at: 81fabfd4
Reserving 36 Bytes for Global Data at: 81fabfb0
Reserving 128k for boot params() at: 81f8bfb0
Stack Pointer at: 81f8bf98
Now running in RAM - U-Boot at: 81fdc000
Flash Manuf Id 0x1, DeviceId0 0x2, DeviceId1 0x15
flash size 4MB, sector count = 64
Flash:  4 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80194fd0) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

Booting QCA956x
Linux version 2.6.31 (tomcat@buildserver) (gcc version 4.3.3 (GCC) ) #44 Fri Feb 6 13:06:18 CST 2015
Ram size passed from bootloader =32M
flash_size passed from bootloader = 4
CPU revision is: 00019750 (MIPS 74Kc)
ath_sys_frequency: cpu 750 ddr 400 ahb 250
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1024k(kernel),M
PID hash table entries: 128 (order: 7, 512 bytes)
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 27140k/32768k available (1639k kernel code, 5628k reserved, 413k data, 116k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
r4k_clockevent_init: Ignoring int_usable failure
Calibrating delay loop... 374.78 BogoMIPS (lpj=749568)
Mount-cache hash table entries: 512

****************ALLOC***********************
Packet mem: 802324a0 (0x300000 bytes)
********************************************

NET: Registered protocol family 16
ath_pcibios_init: bus 0
***** Warning PCIe 0 H/W not found !!!
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
net_link: create socket ok.
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 53
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTD device ath-nor0
Creating 5 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000120000 : "kernel"
0x000000120000-0x0000003e0000 : "rootfs"
0x0000003e0000-0x0000003f0000 : "config"
0x0000003f0000-0x000000400000 : "art"
->Oops: flash id 0x10215 .
Ooops, why the devices couldn't been initialed?
TCP cubic registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 116k freed
init started:  BusyBox v1.01 (2015.02.06-05:09+0000) multi-call binary
This Board use 2.6.31
xt_time: kernel timezone is -0000
nf_conntrack version 0.5.0 (512 buckets, 5120 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.3
insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/af_key.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xfrm_user.ko': No such file or directory
qca956x_GMAC: Length per segment 1536
956x_GMAC: qca956x_gmac_attach
956x_GMAC: qca956x_set_gmac_caps
GPIO LED SETTINGS ....done
Currently in interrupt mode unit1
qca956x_set_gmac_caps  CHECK DMA STATUS
mac:1 Registering S27....
qca956x_GMAC: RX TASKLET - Pkts per Intr:32
qca956x_GMAC: Max segments per packet :   1
qca956x_GMAC: Max tx descriptor count :   128
qca956x_GMAC: Max rx descriptor count :   128
qca956x_GMAC: Mac capability flags    :   2401
956x_GMAC: qca956x_gmac_attach
956x_GMAC: qca956x_set_gmac_caps
Currently in interrupt mode unit0
qca956x_set_gmac_caps  CHECK DMA STATUS
mac:0 Registering S27....
qca956x_GMAC: RX TASKLET - Pkts per Intr:32
qca956x_GMAC: Max segments per packet :   1
qca956x_GMAC: Max tx descriptor count :   128
qca956x_GMAC: Max rx descriptor count :   128
qca956x_GMAC: Mac capability flags    :   2401

(none) mips #44 Fri Feb 6 13:06:18 CST 2015 (none)
(none) login: athr_gmac_ring_alloc Allocated 2048 at 0x81c4f000
sram_desc_cnt 1536,mac Unit 1,Tx r->ring_desc 0xbd000000
athr_gmac_ring_alloc Allocated 2048 at 0x81e5c800
sram_desc_cnt 3072,mac Unit 1,Rx r->ring_desc 0xbd000600
956x_GMAC: eth1 in RGMII MODE
Dragonfly -----> S27 PHY
ATHRS27: resetting s27
ATHRS27: s27 reset done
++++ athrs27_igmp_setup once---
++ PVID: 0x0000000b, bitmap: 0x0000001f
++ PVID: 0x00000003, bitmap: 0x0000001f
++ PVID: 0x00000005, bitmap: 0x0000001f
++ PVID: 0x00000007, bitmap: 0x0000001f
++ PVID: 0x00000009, bitmap: 0x0000001f
vtable vid: 0x00000002, bitmap 0x00000003
vtable vid: 0x00000004, bitmap 0x00000005
vtable vid: 0x00000006, bitmap 0x00000007
vtable vid: 0x00000008, bitmap 0x00000009
vtable vid: 0x0000000a, bitmap 0x0000000b
vtable vid: 0x0000000c, bitmap 0x0000000d
vtable vid: 0x0000000e, bitmap 0x0000000f
vtable vid: 0x00000010, bitmap 0x00000011
vtable vid: 0x00000012, bitmap 0x00000013
vtable vid: 0x00000014, bitmap 0x00000015
vtable vid: 0x00000016, bitmap 0x00000017
vtable vid: 0x00000018, bitmap 0x00000019
vtable vid: 0x0000001a, bitmap 0x0000001b
vtable vid: 0x0000001c, bitmap 0x0000001d
vtable vid: 0x0000001e, bitmap 0x0000001f
vtable vid: 0x00000020, bitmap 0x00000021
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
athr_gmac_ring_alloc Allocated 2048 at 0x81e78800
sram_desc_cnt 4608,mac Unit 0,Tx r->ring_desc 0xbd000c00
athr_gmac_ring_alloc Allocated 2048 at 0x81e78000
sram_desc_cnt 6144,mac Unit 0,Rx r->ring_desc 0xbd001200
956x_GMAC: eth0 in MII MODE
Dragonfly -----> S27 PHY
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
956x_GMAC: Enet Unit:0 PHY:4 is UP eth0 MII 100Mbps full duplex
956x_GMAC: done cfg2 0x7135 ifctl 0x10000 miictrl 
Setting Drop CRC Errors, Pause Frames and Length Error frames
device eth0 entered promiscuous mode
athr_gmac_ring_free Freeing at 0x81e78800
athr_gmac_ring_free Freeing at 0x81e78000
athr_gmac_ring_alloc Allocated 2048 at 0x81e78000
sram_desc_cnt 6144,mac Unit 0,Tx r->ring_desc 0xbd000c00
athr_gmac_ring_alloc Allocated 2048 at 0x81e78800
sram_desc_cnt 6144,mac Unit 0,Rx r->ring_desc 0xbd001200
956x_GMAC: eth0 in MII MODE
Dragonfly -----> S27 PHY
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
956x_GMAC: Enet Unit:0 PHY:4 is UP eth0 MII 100Mbps full duplex
956x_GMAC: done cfg2 0x7135 ifctl 0x10000 miictrl 
Setting Drop CRC Errors, Pause Frames and Length Error frames
athr_gmac_ring_free Freeing at 0x81c4f000
athr_gmac_ring_free Freeing at 0x81e5c800
athr_gmac_ring_alloc Allocated 2048 at 0x81e5c800
sram_desc_cnt 6144,mac Unit 1,Tx r->ring_desc 0xbd000000
athr_gmac_ring_alloc Allocated 2048 at 0x81c4f000
sram_desc_cnt 6144,mac Unit 1,Rx r->ring_desc 0xbd000600
956x_GMAC: eth1 in RGMII MODE
Dragonfly -----> S27 PHY
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
adf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2.162.3 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
Enterprise mode: 0x03bda000
Restoring Cal data from Flash
------read crc is:0x00000000, calculate crc is:0xb15f2b3d.
caldata crc check error.
ath_get_caps[6146] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[6121] tx chainmask mismatch actual 7 sc_chainmak 0
ATH_RESERVED_TXBUF = 1000
wifi0: Atheros 956X: mem=0xb8100000, irq=2
VAP device ath0 created
Setting Max Stations:32

DES SSID SET=TP-LINK_BECC
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
athr_gmac_ring_free Freeing at 0x81e5c800
athr_gmac_ring_free Freeing at 0x81c4f000
br0: port 1(eth0) entering disabled state
athr_gmac_ring_alloc Allocated 2048 at 0x81c4f000
sram_desc_cnt 6144,mac Unit 1,Tx r->ring_desc 0xbd000000
athr_gmac_ring_alloc Allocated 2048 at 0x81e5c800
sram_desc_cnt 6144,mac Unit 1,Rx r->ring_desc 0xbd000600
956x_GMAC: eth1 in RGMII MODE
Dragonfly -----> S27 PHY
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
device ath0 entered promiscuous mode
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1
br0: port 2(ath0) entering disabled state

DES SSID SET=TP-LINK_BECC
br0: port 2(ath0) entering forwarding state
blockWps_proc_write 861: write value = 0

TL-WR940N/TL-WR941ND mips #44 Fri Feb 6 13:06:18 CST 2015 (none)
TL-WR940N/TL-WR941ND login:

but not login as user: admin possible on console, only on WebGUI

(Last edited by ds2k5 on 25 Sep 2015, 16:33)

Hello ds2k5,

So the good news is, that you doesn't brick the router after the flashing

The bad ones are,
did you realize that in the process of flashing openwrt factory the cp.b parameters were wrong? you need to copy exactly the size of your firmware (0x3c0000 hex instead of 0x330004). Or was this intended?

In the original tplink firmware try username root with password either "5up", or "sohoadmin" , without quotes.

I would try reflashing the openwrt factory using:

cp.b 0x80800000 0x9f020000 0x3c0000 # please double check these addresses , you don't want to brick your router!

But remember, as i don't own the device by myself I am not responsible for a bricked device . Flash with caution.

Happy flashing!

Napsi-GER-

EDIT:

Or try flashing openwrt factory via the web interface of original FW again. Maybe it works this time...

(Last edited by Napsi-GER- on 25 Sep 2015, 18:25)

Hi,

> cp.b 0x80800000 0x9f020000 0x3c0000 # please double check these addresses , you don't want to brick your router!

thanks for helping me

here the Console LOG from WebGUI Upgrade Firmware

Erase from 0X20000 to 0X3E0000:............................................................
Program from 0X20000 to 0X3E0000:............................................................
write successfully
reboot in 8s...
file: drivers/mtd/devices/ath_flash_ioctl.c,line: 108==: set wdt, CPU will be reset in 8 seconds.
Restarting system.

There are other addresses ...
but the command: printenv bootcmd
    bootcmd=bootm 0x9f020000

size is: 0x330004

Bytes transferred = 3342340 (330004 hex)

>But remember, as i don't own the device by myself I am not responsible for a bricked device . Flash with caution.

sure! thanks!

but i found this, i think that is the problem:
http://wiki.openwrt.org/toh/tp-link/tl-wr941nd
see section: Supported Versions

" WARNING IMAGE IS FAULTY! WILL BRICK YOUR ROUTER "

is this still the truth ???

Hello ds2k5,

yes, a faulty image was my next guess also.
See here Post #1 for further information.

Seems like you should stay on the OEM firmware, the v6 is currently not supported (unless you own a Chinese device). I'v made this info more visible on the device page.

Napsi-GER-

may be the wrong address like you say ???

ap151> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:32k(u-boot1),32k(u-boot2),3008k(rootfs),8)
bootcmd=bootm 0x9f020000
bootdelay=1
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
dir=
lu=tftp 0x80060000 ${dir}tuboot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap151${bc}-jffs2&&erase 0x9f010000 +$filesize&&cp.b $fileaddr 0x9f010000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f300000 +$filesize&&cp.b $fileaddr 0x9f300000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0
filesize=3c0000
fileaddr=80800000
ipaddr=192.168.0.1
serverip=192.168.0.66

Hello ds2k5,

you can flash whatever you like, as long as you write only to the space where the openwrt/OEM firmware is kept.
This space is 0x3c0000 starting at 0x9f020000, see Post #4 in this thread.

So please redo the OEM flash with the openwrt factory image for v6. If it doesn't boot after that, we have a 100% guarantee that the firmware is broken.

Happy flashing!

Napsi-GER-

here the diff between orginal and openwrt firmware

$ binwalk wr940nv3_wr941ndv6_en_3_16_9_up_boot\(150206\).bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
4             0x4             TP-Link firmware header, firmware version: 3.16.9, image version: "ver. 1.0", product ID: 0x9410006, product version: 1, kernel load address: 0x80002000, kernel entry point: 0x80194FD0, kernel offset: 512, kernel length: 775150, rootfs offset: 1048576, rootfs length: 2883584, bootloader offset: 0, bootloader length: 59061
15552         0x3CC0          U-Boot version string, "U-Boot 1.1.4 (Feb  6 2015 - 13:04:08)"
16900         0x4204          uImage header, header size: 64 bytes, header CRC: 0x76C31EDE, created: Fri Feb  6 05:04:09 2015, image size: 42609 bytes, Data Address: 0x80010000, Entry Point: 0x80010000, data CRC: 0x73FC403, OS: Linux, CPU: MIPS, image type: Firmware Image, compression type: lzma, image name: "u-boot image"
16964         0x4244          LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 112920 bytes
131588        0x20204         TP-Link firmware header, firmware version: 3.16.9, image version: "ver. 1.0", product ID: 0x9410006, product version: 1, kernel load address: 0x80002000, kernel entry point: 0x80194FD0, kernel offset: 512, kernel length: 775150, rootfs offset: 1048576, rootfs length: 2883584, bootloader offset: 0, bootloader length: 0
132096        0x20400         LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 2220476 bytes
1180160       0x120200        Squashfs filesystem, little endian, version 4.0, compression:lzma, size: 2313982 bytes,  553 inodes, blocksize: 131072 bytes, created: Fri Feb  6 05:11:12 2015

$ binwalk openwrt-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
512           0x200           LZMA compressed data, properties: 0x6D, dictionary size: 8388608 bytes, uncompressed size: 3753996 bytes
942053        0xE5FE5         TIFF image data, little-endian
1234540       0x12D66C        Squashfs filesystem, little endian, version 4.0, compression:lzma (non-standard type definition), size: 2121254 bytes,  689 inodes, blocksize: 262144 bytes, created: Tue Sep  8 22:04:26 2015

hop i did you understand right

1. flashed the orginal firmware
2. boot the router
3. login on web gui
4. do a fimware update with: openwrt-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin
5. reboot
6. kernel panic

Hello ds2k5,

Yes, as it seems you did understand me.

There is a problem with openwrt CC for v6 version of this device.
Please look at this. You have to build your own image or flash the oem one to operate your device properly.

Napsi-GER-

thanks a lot, then i still wait for at firmware for the " europe " version of the WR941ND

So is it possible to run Open-wrt on this router or not? I dont understand

Как использовать этот патч все файлы есть что с ними делать не понятно.
How to use this patch all the files have something to do with them is not clear.

Openwrt for TL-WR941ND V6 with luci webinterface (based on 21-Apr-2016 snapshot)
factory:
https://drive.google.com/file/d/0B9-2_I … sp=sharing
sysupgrade:
https://drive.google.com/file/d/0B9-2_I … sp=sharing

Back to stock tplink firmware
https://drive.google.com/file/d/0B9-2_I … sp=sharing

For one to make a working image for 941nd v6 / 940n v3 router, you have to download ImageBuilder from trunk.Then make image with correct profile (TLWR941).
The output should produce "cn" and "default" image.

Hi all, I have bought a WR940N v3 and I'm new to OpenWrt. I've used dd-wrt and tomato for the past decade or so.

Question:
Do you recommend to use freebit's version from April, the latest snapshot version (afaik: /snapshots/trunk/ar71xx/generic/openwrt-ar71xx-generic-tl-wr941nd-v6-squashfs-factory.bin), or do I really have to build the latest working image myself?

Thank you in advance.

(Last edited by FIST on 15 Jun 2016, 11:01)

Need a GUI?  Specification of 32/4MB means CC.  That a USB port is not present means Image Generator / trunk should the deployment require additional features (packages).

N.B. the GUI and additional features are (almost) mutually exclusive in terms of MTD storage

Thanks for your quick answer.
Yes, I'd like to have a GUI. I guess trunk is not ideal then.

I think I will start with freebit's version (unless there's a newer, already built version with luci included available) and wait for the next rc/final release.

OpenWrt is EOL with CC.

Sure, but I meant I wait for a final/rc release of DD. Or is there another problem with that I'm not aware of?

CC is EOL as well as OpenWrt (is the post not proper English?).

Sorry, perhaps I misunderstood. This means there won't be any new releases anymore? (With EOL you mean End Of Life, right?)

/edit: perhaps I'll look for a different router then. Can you recommend the WR1043ND as an alternative?

(Last edited by FIST on 16 Jun 2016, 13:00)