Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[mkresin]

Regarding OpenWRT I was lead to believe it was a total mess for our devices currently, and DSL stuff will never be officially supported?

Oh no, the lantiq xDSL chip is well supported. The 2.4 GHz atheros chip should work with the latest development version of Openwrt as well. But there is no 8980 specific image. Someone send a patch to the openwrt devel mailing list for this, but the patch was malformed and never merged.

Only the 5 GHz wave 300 chip isn't supported at the moment. As far as I know, the required source code was released by lantiq, but it needs a lot of modifications to work with current linux kernel versions. I don't know if someone is working on this.

[Rapper_skull]

Dear Crossflashers,

during my effort to analyse the new RSA signed firmware, I found a way to crossflash routers which have already a RSA signed firmware installed, without opening the devices at all. Anyone who is interested in more detailed information, can get them from https://github.com/xdarklight/mktplinkfw3/blob/master/README.md.

...
CUT
...

First of all, thank you for your work. I have some questions on the crossflashing procedure:
1. Can you elaborate more about the temporary md5 sum? Is it by design that the md5 sum have to be calculated with that placeholder string? How have you found it?
2. Flashing the TD-W9980 firmware will completely transform my 8980 in the new model, including firmware updates, right?
3. Do you confirm me that I have to operate on the full, untouched update file, and not on the stripped one?
4. Is a modified configuration file needed or I can simply do a factory reset to start using the newly flashed modem?

Thank you so much for your effort.

[digitalis]

Can someone please share with me the PDF mentioned earlier in the thread?

Thanks all xx

[burakkucat]

If the document to which you refer is hacktrix2006's guide, it might be best for you to contact him directly via a PM . . .

[hacktrix2006]

The whole lot is linked in the YouTube videos description area [1] it has the download link with everything in it. Good luck bud

Sent from my MotoG3 using Tapatalk


Moderator edited to add the URL --

[1]
https://www.youtube.com/watch?v=vjSLGEkZd_E

[Inovator]

Hello guys.
I have 8890B, and my ISP is on Annex A. A don't have that mode in DSL settings, so is there an easy way to change Annex version? Is it safe just to flash 8890 FW?

Thanks in advance

[Psygnosis]

Hi, I’m pretty desperate,
I think I do some disaster forllowing different guide on the web.
I have a tp link w8980 that was bricked, I resurrect it by crossflash the w9980 rom.
The problem is that now everything works except the 2.4 ghz band…it’s doesn’t show in any device. I try to flash openwrt, then lede, then the official w8980 and again the w9980 in any case the 2.4 band doen’t work, in the last two, only the 5ghz works :frowning:
The only reason I could think for this is that I mess the mtd partition from 7c0000 untill the end.
Can someone provide me a backup of these partition?
PLS!

[hacktrix2006]

Hi, I’m pretty desperate,
I think I do some disaster forllowing different guide on the web.
I have a tp link w8980 that was bricked, I resurrect it by crossflash the w9980 rom.
The problem is that now everything works except the 2.4 ghz band…it’s doesn’t show in any device. I try to flash openwrt, then lede, then the official w8980 and again the w9980 in any case the 2.4 band doen’t work, in the last two, only the 5ghz works :frowning:
The only reason I could think for this is that I mess the mtd partition from 7c0000 untill the end.
Can someone provide me a backup of these partition?
PLS!

I have managed to unbrick my TPlink router and another from a member on here that sent me it. Only issue because of how bad the one that was send to me the only way to recover it was to SPI dump mine once i got it back online and then SPI Flash it to the other, which now means i have to find away to Edit the Mac Addresses and serial to the correct ones now so once i have managed to figure that one out, all you'll need to do @Psygnosis is to send me a PM with your Ethernet MAC address (Inside the router on the yellow section) and then the Wifi Mac address which is on the back for one of them.

Edit: Flashed the brick firmware to the SPI Program clone and redid my steps i used on my personal router to get it working with its own proper mac address fix below.

[hacktrix2006]

Right i have Dumped the radio parition from a working TPlink W8980/9980 router.

For those that are having issues with the Radio aka Wifi not working please do the following

Download mtdblock6.bin from https://mega.nz/#!fFsyiZDD!Z_jPpjYdZkUXi5xp5ftlLxyumIDg6p5NHOwOlmPFDtc

Format a USB stick to Fat32 and copy the mtdblock6y.bin to the root of the USB Stick

Open up putty and dial into your serial connection, then press enter. Once done issue the following commands

Code: [Select]

cd /var/usbdisk/sda1
cat mtdblock6.bin > /dev/mtdblock6
reboot
If sda1 doesn't work use the following

Code: [Select]

cd /var/usbdisk/sdb1
cat mtdblock6.bin > /dev/mtdblock6
reboot
This should then bring back WiFi, no need to worry about MAC addresses changing as i have tested this on another W8980/9980 Router and MAC addresses have stayed the same.

If this doesn't work then the issue is else where.

[Psygnosis]

Right i have Dumped the radio parition from a working TPlink W8980/9980 router.

For those that are having issues with the Radio aka Wifi not working please do the following

Download mtdblock6.bin from https://mega.nz/#!fFsyiZDD!Z_jPpjYdZkUXi5xp5ftlLxyumIDg6p5NHOwOlmPFDtc

Format a USB stick to Fat32 and copy the mtdblock6y.bin to the root of the USB Stick

Open up putty and dial into your serial connection, then press enter. Once done issue the following commands

Code: [Select]

cd /var/usbdisk/sda1
cat mtdblock6.bin > /dev/mtdblock6
reboot
If sda1 doesn't work use the following

Code: [Select]

cd /var/usbdisk/sdb1
cat mtdblock6.bin > /dev/mtdblock6
reboot
This should then bring back WiFi, no need to worry about MAC addresses changing as i have tested this on another W8980/9980 Router and MAC addresses have stayed the same.

If this doesn't work then the issue is else where.

First of all THANK YOU VERY MUCH with all my heart for help.
sadly it doen't work (5ghz band works and 2.4 just doesn't show in all the devices at home) BUT, I have a log:

!!!!pan wlan_updateL2DescriptionState, name is ath0
l2_packet_receive - recvfrom: Network is down
WARNING: Fragmentation with HT mode NOT ALLOWED!!
Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device ath0 ; Invalid argument.

 DES SSID SET=TP-LINK_2.4GHz
Reading topology file /var/Wireless/2_4G_topology.conf ...
445.779: Reading radio configuration file /var/Wireless/2_4G_80211g.ap_radio ...

445.790:  ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1
Reading bss configuration file /var/Wireless/ath0.ap_bss ...

sh: grep: not found
Using interface ath0 with hwaddr ff:ff:ff:ff:ff:ff and ssid 'TP-LINK_2.4GHz'

 DES SSID SET=TP-LINK_2.4GHz
l2_packet_receive - recvfrom: Network is down
Error for wireless request "Set ESSID" (8B1A) :
    too few arguments.
l2_packet_receive - recvfrom: Network is down
Reading topology file /var/Wireless/2_4G_topolog ieee80211_ioctl_siwmode: imr.if                                m_active=197248, new mode=3, valid=1
y.conf ...
452.041: Reading radio configuration file /var/Wireless/2_4G_80211g.ap_radio ...

452.042: Reading bss configuration file /var/Wireless/ath0.ap_bss ...

sh: grep: not found
Using interface ath0 with hwaddr ff:ff:ff:ff:ff:ff and ssid 'TP-LINK_2.4GHz'

 DES SSID SET=TP-LINK_2.4GHz
l2_packet_receive - recvfrom: Network is down
Erase from 7c0000 with 6fdb bytes .
Write flash to 7c0000, len is 6fdb

This is what I have on putty everytime I change somenthing in 2.4ghz wireless section that hwaddr ff:ff:ff:ff:ff:ff makes me think that my MAC adress where lost someway...if that is the MAC adress (I'm ignorant), I doubt that it can be just FF:FF....

[hacktrix2006]

First of all THANK YOU VERY MUCH with all my heart for help.
sadly it doen't work (5ghz band works and 2.4 just doesn't show in all the devices at home) BUT, I have a log:
This is what I have on putty everytime I change somenthing in 2.4ghz wireless section that hwaddr ff:ff:ff:ff:ff:ff makes me think that my MAC adress where lost someway...if that is the MAC adress (I'm ignorant), I doubt that it can be just FF:FF....

Looking more and more likely you have busted it, I do have a spi dump of all partitions in one file but it has my Mac addresses on it to which I can't find via hexedit to null out. However have your tried openwrt just to confirm that its not the firmware causing the issue.

Sent from my SHIELD Tablet K1 using Tapatalk

[Psygnosis]

Looking more and more likely you have busted it

So...the next question is: is there any way to know what was the MAC adress and insert it through the partition image where it's stored? (I think now that the mtd6 radio partition doesn't have the wifi 2.4ghz mac adress there.)
I will try to install openwrt or lede now to see what's happend

[hacktrix2006]

Right first thing is first, using Putty and pressing T on boot so you get the VR9# part you need to print of the env use the command printenv copy and paste to the thread.

[Psygnosis]

Right first thing is first, using Putty and pressing T on boot so you get the VR9# part you need to print of the env use the command printenv copy and paste to the thread.

Before copy the printenv I have to tell you a thing:
I try to flash LEDE, using the command:

Code: [Select]

tftp lede.bin
sf erase 0x20000 0x7a0000
sf write $(loadaddr) 0x20000 0x7a0000and...also if watching the image in the attach seems that the 0% signal seems scary, my phone found the 2.4ghz wifi (5ghz is unsupported by lede/openwrt) so...i really don't understand...maybe are the pre-cutted image I use from the youtube video??
I thinking this because I try to use HxD do cut the image on myself, and there is another strange thing:
cutting the from 20000 to 7C0000 of the TD-W9980v1_0.6.0_1.13_up_boot(160125)_2016-01-25_15.45.32.bin and the image result file is 7A0001 and not 7A0000
and if I try to flash this cutted image, using the same commands as above, router gives me an error on Uncompressed -1 etc etc...
This is the printenv log:

bootcmd=run flash_flash
bootdelay=1
baudrate=115200
preboot=echo;echo run "flash_flash" to bring up the kernel;echo;
bootfile="uImage"
mem=63M
phym=64M
ipaddr=192.168.1.1
serverip=192.168.1.100
ethaddr=00:E0:92:00:01:40
netdev=eth0
console=ttyS0
tftppath=
loadaddr=0x80800000
rootpath=/mnt/full_fs
rootfsmtd=/dev/mtdblock2
nfsargs= setenv bootargs root=/dev/nfs rw nfsroot=$(serverip):$(rootpath)
ramargs=setenv bootargs root=/dev/ram rw
addip=setenv bootargs $(bootargs) ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):$(hostname):$(netdev):on
addmisc=setenv bootargs $(bootargs) console=$(console),$(baudrate) ethaddr=$(ethaddr) phym=$(phym) mem=$(mem) panic=1 mtdparts=$(mtdparts) init=/etc/preinit vpe1_load_addr=0x82000000 vpe1_mem=1M ethwan=$(ethwan)
flash_nfs=run nfsargs addip addmisc;bootm $(kernel_addr)
net_nfs=tftp $(loadaddr) $(tftppath)$(bootfile);run nfsargs addip addmisc;bootm
net_flash=tftp $(loadaddr) $(tftppath)$(bootfile); run flashargs addip addmisc; bootm
net_ram=tftp $(loadaddr) $(tftppath)$(bootfile); run ramargs addip addmisc; bootm
u-boot=u-boot.ltq
rootfs=rootfs.img
firmware=firmware.img
fullimage=fullimage.img
totalimage=totalimage.img
load=tftp $(loadaddr) $(u-boot)
update=protect off 1:0-2;era 1:0-2;cp.b $(loadaddr) B0000000 $(filesize)
flashargs=setenv bootargs root=$(rootfsmtd) rw rootfstype=squashfs
flash_flash=sf probe 3; bootm 0x80800000
update_uboot=tftp $(loadaddr) $(tftppath)$(u-boot); nand write.partial $(loadaddr) 4000 $(filesize);reset
update_kernel=tftpboot $(loadaddr) $(tftppath)$(bootfile);upgrade $(loadaddr) $(filesize)
update_bootloader=update_uboot;update gphyfirmware
update_rootfs=tftpboot $(loadaddr) $(tftppath)$(rootfs);upgrade $(loadaddr) $(filesize)
update_firmware=tftpboot $(loadaddr) $(tftppath)$(firmware);upgrade $(loadaddr) $(filesize)
update_fullimage=tftpboot $(loadaddr) $(tftppath)$(fullimage);upgrade $(loadaddr) $(filesize)
update_totalimage=tftpboot $(loadaddr) $(tftppath)$(totalimage);upgrade $(loadaddr) $(filesize)
stdin=serial
stdout=serial
stderr=serial
ver=U-Boot-2010.06-svn11047-LANTIQ-v-2.3.08
ethact=vr9 Switch

Environment size: 2105/8188 bytes

So on LEDE 2.4ghz wifi works, on w8980/w9980 (precutted images taken from youtube) only the 5ghz wifi works....

[hacktrix2006]

Just a question which country you in?

Sent from my MotoG3 using Tapatalk