June 20, 2012 at 22:06Recovering CISCO Linksys E2500 Router
At the weekend, a CISCO Linksys E2500 router, killed by unsuccessful firmware, was brought to our service , today it finally got to it. As I understand it, the alternative dd-wrt firmware was not successfully uploaded, but I won’t lie which one and how - I didn’t fill it.
The router was in a cyclic reboot, it started, even managed to issue an address via DHCP and then rebooted, and so every 30 seconds approximately.
Having registered the static address 192.168.1.2 on the network card, you could have time to ping it and even try to start pouring by tftp.
Tips for holding the reset button for 30 seconds on, then 30 on the turned off router, and another 30 on again, did not bring any result.
There was an option to see what was inside it.
The E2500 has three screws underneath the rubber plugs.
Having disassembled the device, UART was found there , instead of the connector pins there were holes, and there were two connectors, DJ2 and DJ6 .
To restore, you need DJ2 , DJ6, as I understand it, is JTAG (maybe I'm confusing something , I'm not very good at these matters).
The first problem was that soldering wires or a connector there was very problematic. Tin didn’t want to lie down there, I had to use phosphoric acid (they say it is dangerous, especially on multi-layer boards, it can corrode everything).
Here's what happened.
I used Arduino as a USB-UART adapter; I got information from a wonderful article about “resurrecting a HDD” http://habrahabr.ru/post/140289/ , there are other analogs of converters in the same place.
On the connectors, on the one hand, the number “1” is indicated, starting from it, such a scheme is obtained.
From recovery software, you will need:
- The official firmware for the router, in my case it is here http://homedownloads.cisco.com/downloads/firmware/1224666609554/FW_E2500_1.0.05.002_US_20120413.bin link to information about the device, if not direct http://homesupport.cisco.com/en-us/support/routers/E2500/downloads will work
- tftp we take here http://www.winagents.com/downloads/tftp.exe
- we take PuTTY here http: // putty.org
On the network interface, we manually set the following parameters:
In the same folder with tftp.exe we put the firmware file.
It is advisable to immediately write such a line in cmd so that you can immediately start the process at the right time:
Now PuTTY settings. For CISCO Linksys, I found them on the forum http://mirwifi.org/ .
In PuTTY we select the Serial mode, indicate the port on which our converter (arduino) is located, for example, COM7
At the very bottom in the Serial category, specify the following port parameters:
We connect everything in order.
A router on a LAN (I used the first LAN port, although in my opinion there is no difference) to a computer on a network card where the address is manually entered.
Converter (arduino) to the computer and to the console connector of the router.
We connect power to the router, but do not turn it on yet.
We open the session in PuTTY and get ready to press CTR + C.
We turn on the router, if everything is correctly connected, a bunch of information will run, press CTR + C many times until we get into CFE, the whistle stops and most importantly, the constant reboot stops.
Honestly, laziness was to understand and delve into, so I can’t tell anything good about this console.
You can by typing help see which commands are available to us.
Using a spear method, a firmware method was found
Directly the firmware itself, open cmd with such a line, enter until we press
In PuTTY we write
- the router is waiting for the firmware and will try again
Trying not to slow down, send the firmware from cmd
At the end, tftp tells us that the firmware was successfully transmitted .
At this time, something like this will happen in PuTTY .
Here, we are also informed that the process was completed successfully.
Reboot
Cyclic freezes stopped
Trying to log on 192.168.1.1 and see "Linksys E2500 welcomes you" interface of native firmware
The speed was not correctly indicated in PuTTY, noise was output to the console, I spent a lot of time until I noticed it.
I hope my manual will help someone.
Related links:
“Resurrect” HDD http://habrahabr.ru/post/140289/ painted about UART converters;
The Wi-Fi World site http://mirwifi.org from here I took the basic information for recovery;
CISCO website http://homesupport.cisco.com/en-eu/support/linksys .
The router was in a cyclic reboot, it started, even managed to issue an address via DHCP and then rebooted, and so every 30 seconds approximately.
Having registered the static address 192.168.1.2 on the network card, you could have time to ping it and even try to start pouring by tftp.
Tips for holding the reset button for 30 seconds on, then 30 on the turned off router, and another 30 on again, did not bring any result.
There was an option to see what was inside it.
The E2500 has three screws underneath the rubber plugs.
Having disassembled the device, UART was found there , instead of the connector pins there were holes, and there were two connectors, DJ2 and DJ6 .
To restore, you need DJ2 , DJ6, as I understand it, is JTAG (maybe I'm confusing something , I'm not very good at these matters).
The first problem was that soldering wires or a connector there was very problematic. Tin didn’t want to lie down there, I had to use phosphoric acid (they say it is dangerous, especially on multi-layer boards, it can corrode everything).
Here's what happened.
I used Arduino as a USB-UART adapter; I got information from a wonderful article about “resurrecting a HDD” http://habrahabr.ru/post/140289/ , there are other analogs of converters in the same place.
Iron
On the connectors, on the one hand, the number “1” is indicated, starting from it, such a scheme is obtained.
- 1 - do not use
- 2 - TX
- 3 - RX
- 4 - do not use
- 5 - GND (ground)
Software
From recovery software, you will need:
- The official firmware for the router, in my case it is here http://homedownloads.cisco.com/downloads/firmware/1224666609554/FW_E2500_1.0.05.002_US_20120413.bin link to information about the device, if not direct http://homesupport.cisco.com/en-us/support/routers/E2500/downloads will work
- tftp we take here http://www.winagents.com/downloads/tftp.exe
- we take PuTTY here http: // putty.org
On the network interface, we manually set the following parameters:
IPv4-адрес. . . . . . . . . . . . : 192.168.1.2(Основной)
Маска подсети . . . . . . . . . . : 255.255.255.0
Основной шлюз. . . . . . . . . : 192.168.1.1
In the same folder with tftp.exe we put the firmware file.
It is advisable to immediately write such a line in cmd so that you can immediately start the process at the right time:
tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.binNow PuTTY settings. For CISCO Linksys, I found them on the forum http://mirwifi.org/ .
In PuTTY we select the Serial mode, indicate the port on which our converter (arduino) is located, for example, COM7
At the very bottom in the Serial category, specify the following port parameters:
- speed 115200
- data bits 8
- stop bits 1
- parity none
- flow control none
Recovery process.
We connect everything in order.
A router on a LAN (I used the first LAN port, although in my opinion there is no difference) to a computer on a network card where the address is manually entered.
Converter (arduino) to the computer and to the console connector of the router.
We connect power to the router, but do not turn it on yet.
We open the session in PuTTY and get ready to press CTR + C.
We turn on the router, if everything is correctly connected, a bunch of information will run, press CTR + C many times until we get into CFE, the whistle stops and most importantly, the constant reboot stops.
Honestly, laziness was to understand and delve into, so I can’t tell anything good about this console.
You can by typing help see which commands are available to us.
CFE> help
Available commands:
et Broadcom Ethernet utility.
nvram NVRAM utility.
reboot Reboot.
flash Update a flash memory device
go Verify and boot OS image.
boot Load an executable file into memory and execute it
load Load an executable file into memory without executing it
upgrade Upgrade Firmware.
ifconfig Configure the Ethernet interface
show devices Display information about the installed devices.
help Obtain help for CFE commands
For more information about a command, enter 'help command-name'
*** command status = 0
Using a spear method, a firmware method was found
CFE> upgrade
Usage:
upgrade code.bin
upgrade boot.bin
upgrade mfg.bin client
upgrade mfg.bin (same as "upgrade mfg.bin server")
*** command status = -2
Directly the firmware itself, open cmd with such a line, enter until we press
D:\tftp>tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.bin
In PuTTY we write
CFE> upgrade code.bin
Reading :: Failed.: Timeout occured
Try 1 ...
- the router is waiting for the firmware and will try again
Trying not to slow down, send the firmware from cmd
D:\tftp>tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.bin
WinAgents TFTP Client version 2.0b Copyright (c) 2004-2011 by Tandem Systems, Lt
d.
http://www.winagents.com - Software for network administrators
Transfering file FW_E2500_1.0.05.002_US_20120413.bin to server in octet mode...
Transferring data from 192.168.1.1...
File FW_E2500_1.0.05.002_US_20120413.bin was transferred successfully.
7103488 bytes transfered for 43 seconds, 0 bytes/second
At the end, tftp tells us that the firmware was successfully transmitted .
At this time, something like this will happen in PuTTY .
CFE> upgrade code.bin
Reading :: Failed.: Timeout occured
Try 1 ...
Reading :: Failed.: Timeout occured
Try 2 ...
Reading :: Failed.: Timeout occured
Try 3 ...
Reading :: Failed.: Timeout occured
Try 4 ...
Reading :: CODE Pattern is CORRECT!
upgrade_ver[v1.0.5] upgrade_ver[10005] 4712_ver[0]
Done. 7103488 bytes read
fname=flash1.trx
CODE Pattern is correct! (E25X)
Programming...done. 7103456 bytes written
Upgrade successfully ...
*** command status = 0
CFE>
Here, we are also informed that the process was completed successfully.
Reboot
CFE> reboot
Cyclic freezes stopped
Trying to log on 192.168.1.1 and see "Linksys E2500 welcomes you" interface of native firmware
The rake that I stepped on
The speed was not correctly indicated in PuTTY, noise was output to the console, I spent a lot of time until I noticed it.
I hope my manual will help someone.
Related links:
“Resurrect” HDD http://habrahabr.ru/post/140289/ painted about UART converters;
The Wi-Fi World site http://mirwifi.org from here I took the basic information for recovery;
CISCO website http://homesupport.cisco.com/en-eu/support/linksys .