NetCore NW714 v2.0路由器TTL救砖

路由器成砖状态：

1.客户端无法获取IP地址

2.客户端设置IP地址后，无法PING通路由器IP地址。

3.路由器按reset按钮，无法重置路由器。

4.路由器的指示灯只有SYS和WPS亮，WPS微亮。

5.在路由器的LAN口和WLAN口插入网线，相应的只是灯亮。

解决思路：

通过上述的路由器状态判断，只有通过TTL线刷方式才能救活路由器。

路由器外观：

路由器内部（接口和串口连接已做好）：

可以看到上图右上角，被厂家预留出了4个接线孔，VCC、RXD、TXD、GND，正好方便我用TTL刷机，这里我只需用到RXD、TXD、GND这三个线就可以。将这三个线焊接出热线针脚，然后用TTL下载器进行连接，连接示意图如下：

正式刷机：

1.将TTL下载器的线与路由器的三个阵脚进行正确连接。

2.将TTL下载器连接电脑。

3.打开设备管理器查看TTL下载器所对应的COM口。

4.打开SecureCRT，按照下图设置：

5.进入SecureCRT，查看串口信息。

6.给路由器上电，串口信息如下。

U-Boot 1.1.3 (Mar  8 2013 - 18:49:23)Board: Ralink APSoC DRAM:   8 MB
relocate_code Pointer at: 807b4000
enable ephy clock...done. rf reg 29 = 5
SSC disabled.
******************************
Software System Reset Occurred
******************************
spi_wait_nsec: 42 
spi device id: 1c 70 15 1c 70 (70151c70)
Warning: un-recognized chip ID, please update bootloader!
raspi_read: from:30000 len:1000 
*** Warning - bad CRC, using default environment============================================ 
Ralink UBoot Version: 4.0.0.0
-------------------------------------------- 
ASIC 7620_MP (Port5<->None)
DRAM component: 64 Mbits SDR
DRAM bus: 16 bit
Total memory: 8 MBytes
Flash component: SPI Flash
Date:Mar  8 2013  Time:18:49:23
============================================ 
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 600 MHZ #### estimate memory size =8 Mbytes
raspi_read: from:1f0000 len:10000 
Readstrval:755
cccc:Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default).4: Entr boot command line interface.7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP.

7.看到UBoot，我瞬间就笑了。这里我选择2，进入Load system code then write to Flash via TFTP. （Uboot刷机有很多方法，这里为了方便起见，我选择2）。

2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)

输入Y

接下来，会让你设置路由器IP、TFTP服务IP和刷机固件的名字。在此之前需要在电脑上把TFTP设置好。

2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)Please Input new ones /or Ctrl-C to discardInput device IP (192.168.1.222) ==:192.168.1.222Input server IP (192.168.1.33) ==:192.168.1.33Input Linux Kernel filename () ==:aa.bin

然后，只需要等待就可以了。

 netboot_common, argc= 3 NetTxPacket = 0x807E4C80 KSEG1ADDR(NetTxPacket) = 0xA07E4C80 NetLoop,call eth_halt ! NetLoop,call eth_init ! 
Trying Eth0 (10/100-M)Waitting for RX_DMA_BUSY status Start... doneraspi_read: from:1f0000 len:10000 
Readstrval:755
cccc:ETH_STATE_ACTIVE!! 
TFTP from server 192.168.1.33; our IP address is 192.168.1.222
Filename 'aa.bin'.TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (b8:88:e3:92:08:de)
Got it
#####################################################################################################################################################################
done
Bytes transferred = 844284 (ce1fc hex)
NetBootFileXferSize= 000ce1fc
raspi_erase_write: offs:50000, count:ce1fc
raspi_erase: offs:50000 len:c0000
............
raspi_write: to:50000 len:c0000 
............
raspi_read: from:50000 len:10000 
raspi_read: from:60000 len:10000 
raspi_read: from:70000 len:10000 
raspi_read: from:80000 len:10000 
raspi_read: from:90000 len:10000 
raspi_read: from:a0000 len:10000 
raspi_read: from:b0000 len:10000 
raspi_read: from:c0000 len:10000 
raspi_read: from:d0000 len:10000 
raspi_read: from:e0000 len:10000 
raspi_read: from:f0000 len:10000 
raspi_read: from:100000 len:10000 
raspi_read: from:110000 len:10000 
raspi_erase: offs:110000 len:10000
.
raspi_write: to:110000 len:10000 
.
raspi_read: from:110000 len:10000 
Done!
cccccccccccccccccccccccccccccccc
bbbbbbbbbb
## Booting image at bc050000 ...
raspi_read: from:50000 len:40 Image Name:   zxrouterImage Type:   MIPS Linux Standalone Program (uncompressed)Data Size:    844220 Bytes = 824.4 kBLoad Address: 80500000Entry Point:  80500000
raspi_read: from:50040 len:ce1bc 
load_addr:80500000,data_addr:50040,len:ce1bc,data:bc050040Verifying Checksum ... OK
OK
cccccccccccccccccccccccccccc1
cccccccccccccccccccccccccccc2:80500000
ZzOK
ifra305x eth0: init pnde=80278580, sc=802740b4, ifp=80274284
ifra305x: driver init
ifra305x: init numtxd=128 txd-base=800 at a029e4a0
ifra305x: init num_rxd=64 rxd_base=900 at a029eca0
ifra305x eth1: init pnde=80278590, sc=80274184, ifp=802742cc
<-- RTMPAllocAdapterBlock, Status=0
not find ok flash,use default 0
netcore_process:147
asdfaaaaaa
aaaa:
wan:r
vvvvvvvvvvvvv:1e,1
vvvvvvvvvvvvv:1,2
netcore_process:171
module:
main_loop:424 ***************** netcore(%s)CN-V2.0.5165, 2013.03.08 18:31. 
netcore(%s)CN-V2.0.5165, 2013.03.08 18:31.
________________Interface_Lan_Num_tm=0______________________
Interface_Num:-2144334544
kuaiwan ad:1
Loading Run Parametersa...
ParamInit malloc
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1d0000,pRamAddress:80300b80,Length:54
flashenhanced/src/ver1/flash_sst_read.cpp:105
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1e0000,pRamAddress:80300b80,Length:54
flashenhanced/src/ver1/flash_sst_read.cpp:105*******************************************************************EraseFlash...addr:0x001d0000. 
src/ralink.c:229
... Erase from 0x001d0000-0x001dffff: .
EraseFlash...addr:0x001e0000. 
src/ralink.c:229
... Erase from 0x001e0000-0x001effff: .
WriteFlash entry (unsigned int)pFlashAddress=1d0000,pSourceAddress=804f3f48,Length=5c
src/ralink.c:236
... Program from 0x804f3f48-0x804f3fa4 to 0x001d0000: .
ParamFinal free
Parameters Are Blank!
Loading Default Parameters...
multicast address, use default.
multicast address, use default.
multicast address, use default.
------------ wl def ----------------
wlan interface********************mstp_loaddefault:129
Loading Default Parameters out...
prep_ifaces:ifaces_found:0, dev->irq1:15
prep_ifaces:ifaces_found:1, dev->irq1:9
prep_ifaces:ifaces_found:2, dev->irq1:0
prep_ifaces:ifaces_found:3, dev->irq1:0
prep_ifaces:ifaces_found:4, dev->irq1:0
all pkt ________________________ 541
revcq init
if_start 294 iface:0
if_start 294 iface:1
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1d0000,pRamAddress:80300b68,Length:54
flashenhanced/src/ver1/flash_sst_read.cpp:105
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1d0014,pRamAddress:802f0ae0,Length:48
flashenhanced/src/ver1/flash_sst_read.cpp:105
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1d0000,pRamAddress:80300bfc,Length:54
flashenhanced/src/ver1/flash_sst_read.cpp:105
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1e0000,pRamAddress:80300b68,Length:54
flashenhanced/src/ver1/flash_sst_read.cpp:105
para size 128KB
flashenhanced/src/ver1/flash_up_function_read.cpp:31  pFlashAddress:1d0000,pRamAddress:805c9da0,Length:5c
flashenhanced/src/ver1/flash_sst_read.cpp:105
!!!!!!!!!!!!!!!!!!!!!!!!!!!!1 wireless_start !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!1
------------------- wireless start -----------------
malloc wlanbuffer..............
------------------- wireless config -----------------
#The word of "Default" must not be removed
Default
BssidNum=1
MacAddress=00:0C:35:45:0C:00
SSID=Netcore
HideSSID=0
AuthMode=OPEN
EncrypType=NONE
DefaultKeyID=0
Key1Type=0
Key1Str=
WPAPSK=
RekeyInterval=86400
AccessPolicy0=0
AccessControlList0=
WirelessMode=9
AutoChannelSelect=0
Channel=6
HT_BW=1
HT_EXTCHA=1
BeaconPeriod=100
RTSThreshold=2347
FragThreshold=2346
HT_GI=1
BGProtection=0
TxPreamble=0
NoForwarding=0
TxPower=100
WmmCapable=0
BasicRate=15
HT_MCS=33
HT_TxStream=2
HT_RxStream=2
WdsEnable=0
WdsPhyMode=HTMIX
WdsDefaultKeyID=1;1;1;1
WdsList=
WdsEncrypType=
CountryRegion=0
HT_PROTECT=1
HT_BADecline=0
HT_AutoBA=1
HT_HTC=0
HT_RDG=0
HT_AMSDU=0
HT_MpduDensity=5
HT_BAWinSize=64
HT_OpMode=0
HT_STBC=0
HT_40MHZ_INTOLERANT=0
HT_DisallowTKIP=0
HT_BSSCoexistence=0
-----------------------------------------------------
*********************************************************ra0_com_ioctl:1584
<-- RTMPAllocTxRxRingMemory, Status=0
<==== rt28xx_init, Status=0
0x1300 = 00064300
ifp->if_ioctl:801fc600
wireless interface ra0 up.
free wlanbuffer..................
netcore(%s)CN-V2.0.5165, 2013.03.08 18:31.
LAN_IP=192.168.1.1,unusemem=4096KB
reg:baddbadd baddbadd baddbadd baddbadd baddbadd baddbadd
CFG_load: flash offset=0000, len=1058
cfg_parse: add cfg item=313 (4184 bytes)
CFG_load: flash read 313 items(4184 bytes) into ram
cfg_parse: null config!
CFG_load: read-only 2 items(48 bytes) into ram
CFG_load: total 315 items(4232 bytes)
cfg_parse_wlan: parse 3028 bytes!
Parsing WIFI configuration succeeds
amain:209
Operation Mode: Gateway
bug:ifr_link_cmd:1157
interface eth0 init_net successed!
eth0_1_com_ioctl:1512 Init device 'ra305x_eth0'
eth0_1_com_ioctl:1512 Init device 'ra305x_eth0'
ifra305x0: start
ESW: Link Status Changed - Port 2 Link up
bug:ifr_link_cmd:1157
eth0_1_com_ioctl:1512 Init device 'ra305x_eth0'
eth0_1_com_ioctl:1512 Init device 'ra305x_eth0'
ifra305x1: start
ESW: Link Status Changed - Port 2 Link down
main:240
ESW: Link Status Changed - Port 2 Link up
led light error
multicast address, use default.

从反馈信息可以看出“led light error”错误，不过没关系，因为NW714的路由器的固件在网上找不到，我这里刷了一个和它配置相同的NW710的固件。

刷机完成后，赶紧登录路由器的登录地址试一试，果不其然，成功！