Recovery of CISCO Linksys E2500 router
At the weekend, the CISCO Linksys E2500 router, which was killed by an unsuccessful firmware, brought us to the servis; today we finally reached it. As I understood, they did not successfully upload the alternative firmware dd-wrt, but which one and how - I will not lie, I did not flood it.
The router was in a cyclic reboot, it started, even managed to issue an address via DHCP, and then immediately rebooted, and so, approximately every 30 seconds.
Having registered the static address 192.168.1.2 on the network card, it was possible to have time to ping it and even try to start the tftp upload.
')
Tips for holding the reset button for 30 seconds on, then 30 on the router off, and another 30 on the power on again, did not bring any result.
There is an option to see what's inside.
On the E2500, under the rubber plugs, there are three screws on the bottom.
Having examined the device, there was a UART there, instead of pins connectors there were holes, and there were two connectors, DJ2 and DJ6 .
To restore you need DJ2 , DJ6 as I understood it is JTAG (maybe I am confusing something, I don’t really understand these things).
The first problem was with the fact that soldering there wires or connector was very problematic. Tin did not want to go there, I had to use orthophosphoric acid (they say it is dangerous, especially on multilayer boards, it can eat up all).
That's what happened.
I used the Arduino as a USB-UART adapter, I got information from a wonderful article about HDD resurrection http://habrahabr.ru/post/140289/ , there are other analogs of converters in the same place.
On the connectors on the one hand, the figure “1” is indicated, starting from it such a circuit is obtained.
From the recovery software you will need:
- The official firmware for the router, in my case it is here http://homedownloads.cisco.com/downloads/firmware/1224666609554/FW_E2500_1.0.05.002_US_20120413.bin link to information about the device, if the direct will not work http: // homesupport.cisco.com/en-us/support/routers/E2500/downloads
- tftp take here http://www.winagents.com/downloads/tftp.exe
- PuTTY take here http://putty.org
On the interface of the network card, we manually write the following parameters:
We put the firmware file in one folder with tftp.exe.
It is desirable to register such a line immediately in cmd, so that at the right time you can immediately start the process:
Now the PuTTY settings. For CISCO Linksys, I found them on the http://mirwifi.org/ forum.
In PuTTY we select the Serial mode and specify the port on which our converter is located (arduino), for example, COM7
On the left, at the very bottom, in the Serial category, specify the following port parameters:
We connect everything in order.
A router over the LAN (I used the first LAN port, although in my opinion there is no difference) to the computer on the network card where the address is registered manually.
Converter (arduino) to the computer and to the console connector of the router.
We connect the power to the router, but do not turn it on yet.
Open the session in PuTTY and get ready to press CTR + C.
We turn on the router, if everything is properly connected, a lot of information will run, press CTR + C many times until we get to CFE, the whistle stops and the most important thing is to stop the reboot.
Honestly, I was too lazy to understand and delve into it, so I can't tell you anything worthwhile about this console.
You can type help to see which commands are available to us.
At random was found a way to flash
Directly the firmware itself, open cmd with such a line, do not press enter yet
In PuTTY we write
- the router is waiting for the firmware and retry
Trying not to slow down, send firmware from cmd
At the end tftp informs us that the firmware was successfully transferred .
At this time something like this will happen in PuTTY .
Here we are also informed that the process was completed successfully.
Reboot
Cyclic freezes have stopped
We are trying to log in at 192.168.1.1 and see "Welcome Linksys E2500" interface of native firmware
I did not correctly specify the speed in PuTTY, noise was output to the console, I spent a lot of time until I noticed.
I hope my manual will help someone.
Related Links:
“Resurrecting” HDD http://habrahabr.ru/post/140289/ painted about UART converters;
The World of Wi-Fi website http://mirwifi.org from here I took the basic information to restore;
CISCO website http://homesupport.cisco.com/en-eu/support/linksys .
The router was in a cyclic reboot, it started, even managed to issue an address via DHCP, and then immediately rebooted, and so, approximately every 30 seconds.
Having registered the static address 192.168.1.2 on the network card, it was possible to have time to ping it and even try to start the tftp upload.
')
Tips for holding the reset button for 30 seconds on, then 30 on the router off, and another 30 on the power on again, did not bring any result.
There is an option to see what's inside.
On the E2500, under the rubber plugs, there are three screws on the bottom.
Having examined the device, there was a UART there, instead of pins connectors there were holes, and there were two connectors, DJ2 and DJ6 .
To restore you need DJ2 , DJ6 as I understood it is JTAG (maybe I am confusing something, I don’t really understand these things).
The first problem was with the fact that soldering there wires or connector was very problematic. Tin did not want to go there, I had to use orthophosphoric acid (they say it is dangerous, especially on multilayer boards, it can eat up all).
That's what happened.
I used the Arduino as a USB-UART adapter, I got information from a wonderful article about HDD resurrection http://habrahabr.ru/post/140289/ , there are other analogs of converters in the same place.
Iron
On the connectors on the one hand, the figure “1” is indicated, starting from it such a circuit is obtained.
- 1 - do not use
- 2 - TX
- 3 - RX
- 4 - do not use
- 5 - GND (land)
Soft
From the recovery software you will need:
- The official firmware for the router, in my case it is here http://homedownloads.cisco.com/downloads/firmware/1224666609554/FW_E2500_1.0.05.002_US_20120413.bin link to information about the device, if the direct will not work http: // homesupport.cisco.com/en-us/support/routers/E2500/downloads
- tftp take here http://www.winagents.com/downloads/tftp.exe
- PuTTY take here http://putty.org
On the interface of the network card, we manually write the following parameters:
IPv4-. . . . . . . . . . . . : 192.168.1.2() . . . . . . . . . . : 255.255.255.0 . . . . . . . . . : 192.168.1.1 We put the firmware file in one folder with tftp.exe.
It is desirable to register such a line immediately in cmd, so that at the right time you can immediately start the process:
tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.binNow the PuTTY settings. For CISCO Linksys, I found them on the http://mirwifi.org/ forum.
In PuTTY we select the Serial mode and specify the port on which our converter is located (arduino), for example, COM7
On the left, at the very bottom, in the Serial category, specify the following port parameters:
- speed 115200
- data bits 8
- stop bits 1
- parity none
- flow control none
Recovery process
We connect everything in order.
A router over the LAN (I used the first LAN port, although in my opinion there is no difference) to the computer on the network card where the address is registered manually.
Converter (arduino) to the computer and to the console connector of the router.
We connect the power to the router, but do not turn it on yet.
Open the session in PuTTY and get ready to press CTR + C.
We turn on the router, if everything is properly connected, a lot of information will run, press CTR + C many times until we get to CFE, the whistle stops and the most important thing is to stop the reboot.
Honestly, I was too lazy to understand and delve into it, so I can't tell you anything worthwhile about this console.
You can type help to see which commands are available to us.
CFE> help Available commands: et Broadcom Ethernet utility. nvram NVRAM utility. reboot Reboot. flash Update a flash memory device go Verify and boot OS image. boot Load an executable file into memory and execute it load Load an executable file into memory without executing it upgrade Upgrade Firmware. ifconfig Configure the Ethernet interface show devices Display information about the installed devices. help Obtain help for CFE commands For more information about a command, enter 'help command-name' *** command status = 0 At random was found a way to flash
CFE> upgrade Usage: upgrade code.bin upgrade boot.bin upgrade mfg.bin client upgrade mfg.bin (same as "upgrade mfg.bin server") *** command status = -2 Directly the firmware itself, open cmd with such a line, do not press enter yet
D:\tftp>tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.bin In PuTTY we write
CFE> upgrade code.bin Reading :: Failed.: Timeout occured Try 1 ... - the router is waiting for the firmware and retry
Trying not to slow down, send firmware from cmd
D:\tftp>tftp.exe -i 192.168.1.1 put FW_E2500_1.0.05.002_US_20120413.bin WinAgents TFTP Client version 2.0b Copyright (c) 2004-2011 by Tandem Systems, Lt d. http://www.winagents.com - Software for network administrators Transfering file FW_E2500_1.0.05.002_US_20120413.bin to server in octet mode... Transferring data from 192.168.1.1... File FW_E2500_1.0.05.002_US_20120413.bin was transferred successfully. 7103488 bytes transfered for 43 seconds, 0 bytes/second At the end tftp informs us that the firmware was successfully transferred .
At this time something like this will happen in PuTTY .
CFE> upgrade code.bin Reading :: Failed.: Timeout occured Try 1 ... Reading :: Failed.: Timeout occured Try 2 ... Reading :: Failed.: Timeout occured Try 3 ... Reading :: Failed.: Timeout occured Try 4 ... Reading :: CODE Pattern is CORRECT! upgrade_ver[v1.0.5] upgrade_ver[10005] 4712_ver[0] Done. 7103488 bytes read fname=flash1.trx CODE Pattern is correct! (E25X) Programming...done. 7103456 bytes written Upgrade successfully ... *** command status = 0 CFE> Here we are also informed that the process was completed successfully.
Reboot
CFE> reboot Cyclic freezes have stopped
We are trying to log in at 192.168.1.1 and see "Welcome Linksys E2500" interface of native firmware
Rake on which I attacked
I did not correctly specify the speed in PuTTY, noise was output to the console, I spent a lot of time until I noticed.
I hope my manual will help someone.
Related Links:
“Resurrecting” HDD http://habrahabr.ru/post/140289/ painted about UART converters;
The World of Wi-Fi website http://mirwifi.org from here I took the basic information to restore;
CISCO website http://homesupport.cisco.com/en-eu/support/linksys .
Source: https://habr.com/ru/post/146194/
All Articles