written by cail • posted in How-To • 7,909 views 7 comments

41ATF38JBEL_SL500_AA280_
This is a decent router, supporting 802.11b/g .
Small, compact and easy to use.

I bought it at the end of 2006, and started using it heavily in the past year.

It was OK until last Sunday ...
* I could not establish wireless connection between the router and my iPhone - no matter what kind protocol (Ope, WEP, WPA, WPA2) I tried
* the wireless connection between the router and my laptops (windows xp, win7, mac osx) was not stable and failed most of the time, even though the connection was established

Reset the router to factory default did not fix the problem. What was happening?

I decide to give DD-WRT a try, since this router is supported. I was hoping a better firmware might fix the wireless problem.

I followed this page and tried to flash DD-WRT to it. Mine is version 1.

Linksys WTR54GS (v1, v2 and v2.1) Travel Router is now supported by DD-WRT. It can be flashed without JTAG cable following rather special procedure (using Sercomm utility).

Version 1 has 4MB flash and 16MB RAM. Version 2 or 2.1 has 2MB flash, 8MB RAM.
wtr54gsv1_111
v1: serial num.: SJH0... (no version printed)
wtr54gsv2_226
v2 & v2.1: serial num.: SJH1.... (version printed: v2 or v2.1)
(It turned out that some SJH0... bought in UK are v2 too)

Reversion to Linksys's vxWorks firmware is also possible.

* * * * FLASHING INSTRUCTIONS * * * *
- download and install Sercomm Utility (win7 is not supported)
- download and unzip WTR upgrade file
-- for v1: WTRv1_sercomm.zip
-- for v2 and v2.1: WTRv2x_sercomm.zip
- download latest dd-wrt image (from Router-Database)
-- for v1: mini or nokaid
-- for v2 and v2.1: micro
- download Linksys TFTP utility / tftpd32 (I cannot download tftp from linksys. tftpd32 client with host 192.168.1.1 - put)

1) Set your PC's IP to 192.168.16.10
2) Log into WTR at 192.168.16.1, user/password: admin/admin
3) Go to: Administration -> Factory defaults -> "Restore factory Defaults"
4) Click "Continue"
5) Close your browser window
6) Set your PC's IP to 192.168.1.10 (please notice it is 192.168.1.x not 192.168.16.x)
7) Start Sercomm "Upgrade Utility"
8) Select your ethernet adapter
9) Press "Browse target" button
10) MAC of your WTR will apear in "Devices List"
11) Press "Files", select: for v1 - WTRv1_sercomm.bin; for v2 and v2.1 - WTRv2x_sercomm.bin, press OK
12) Press "Upgrade", wait until upgrade completes, press OK
13) Important: WAIT ANOTHER 3 MINUTES
14) Start ping to 192.168.1.1 -t
15) When reply with TTL=100, start tftp (command line or Linksys TFTP utility), transfer mini or nokaid for v1, for v2 & v2.1 you can only use micro.
PS: If you don't get ping reply at 15), reboot (power cycle) and wait another 3 min.
****
16) Observe ping, when TTL=64, you have dd-wrt installed.
17) CONGRATULATIONS!

Everything was OK until step 16. When I tried to put new firmware to the router by tftpd32-client, I got an error messge saying some Block was corrupted! After it, I can no longer ping 192.168.1.1 . I tried the 30-30-30 trick and was not working! The router became a brick! Flashing to DD-WRT failed.

I started googling and found a post from here, where the author successfully de-bricked his WRT54GS. What he did was

brainiac88
DD-WRT Novice
Joined: 03 Oct 2008


Posted: Fri Oct 03, 2008 5:13 pm
Post subject: WTR54GS dead

I recently picked up a WTR54GS, and was working fine with the factory Linksys firmware.
I followed the instructions in the first post of this thread EXCEPT I had to get the Sercomm utility elsewhere because the one in the link provided was BSOD'ing on my XP SP3 system. Sercomm finally updated, and it also said that it was verified successful.
After rebooting the WTR54GS, waiting 3 minutes, I cannot ping 192.168.1.1. PC IP = 192.168.1.10, firewall off, connected using Ethernet cable, and ping results for the past hour had been "Request timed out". WTR54GS LEDs are all lit, power is orange, and there is the occasional flicker when the ping packet is sent. I also tried the Sercomm again, but now it cannot find it.
Is this thing dead / bricked? Please advise...


Posted: Fri Oct 03, 2008 5:31 pm
Post subject: OK fixed now
I had a DOS window open constantly pinging 192.168.1.1 with a timeout of 1 msec.
I also had the TFTP app all setup and ready to go. Server=192.168.1.1, password=, path was to dd-wrt.v24_micro_generic.bin
I pressed the Reset button for 30 seconds, unplugged it, waited 10 seconds, then applied power while the reset button was pressed and kept it depressed for 30 more seconds.
A minute or so later, the DOS box showed a reply with TTL=100!! I immediately started the TFTP, and the flashing took less than 5 seconds.
After a couple minutes, DD-WRT booted up and was accessible via 192.168.1.1.
Cheers everyone, and hope this helps someone else.

I was not that lucky and my router is brick as BRICK. I think it might be because I had tftp transfer started and broke in the middle of flashing...

According to the "Recover From A Bad Flash", the only way left to recover my router is using JTAG cable (my router is v1 with JTAG).

I found a more detail webpage describing to do de-brick WRT54G. There is no post about WTR54GS! I hoped that linksys's WTR54GS has the same WRT54G.

But I was wrong. I failed. Here is what I did.

  1. Use a parallel cable to build the JTAG Cable.
    Router_JTAG_Schematic
    I assumed the resistance in the figure is 100 omega. (According to here, I am positive that I made the correct JTAG cable.)
  2. I assumed WTR54GS has the same JTAG definition as WRT54G.
    nTRST  1   2 GND
    TDI    3   4 GND
    TDO    5   6 GND
    TMS    7   8 GND
    TCK    9  10 GND
    nSRST 11  12 GND

    I connected the JTAG cable as
    2009-07-29_01-50-03

    Of course, I have to disassemble the router first. There is only one screw underneath the label. Open the box and there are three screws.

    IMGP5816.JPG

    IMGP5817.JPG

    IMGP5818.JPG

    IMGP5819.JPG

    Here is the final product. I will tape the GND cable to 2,4,6,8,10.

    IMGP5820.JPG

    IMGP5821.JPG

    IMGP5824.JPG

  3. Download TJTAG program and unzip it to the Desktop.
  4. Copy the giveio.sys and loaddrv.exe to C:\windows\system32\drivers for Windows XP.
    Double click loaddrv.exe in the system32 directory.
    Append the giveio.sys onto the path in the utility
    LoadDrv
    Click the install button and then the start button. They should both confirm success.
    Leave the loaddrv.exe running.
  5. Connect the network cable to the Ethernet port and another end of the network cable to your PC.
  6. Connect the DB25 side of the JTAG cable to your PC's parallel port.
    Db25_pc
  7. Attach the router's power adapter to the outlet.
  8. Open command console by type cmd to win+r or Start > Run. cd to the unzipped TJTAG's windows directory and run tjtagv2.exe to get a list of options.
    To check the cable, run command
    tjtagv2.exe -probeonly

I cannot go further because the WRT54GS router was not identified by the software! What I got was

C:\Documents and Settings\M\Desktop\tjtagv2-1-4\windows>tjtagv2.exe  -probe
only
==========================================
 EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** Unknown or NO CPU Chip ID Detected ***
*** Possible Causes:
    1) Device is not Connected.
    2) Device is not Powered On.
    3) Improper JTAG Cable.
    4) Unrecognized CPU Chip ID.
C:\Documents and Settings\M\Desktop\tjtagv2-1-4\windows>

Any suggestion? I do want to recover it!

Previous:
Next:

Leave a Reply