Netgear WNDR3400 v1

Wikidevi Notes
V1 Serial numbers start with: 2BL, 2R8, 2PF, 2BK, 2R7, 2HT, 2RB, 2F0 (Not sure if should be zero or the letter "O"), and 2R9.

These serial numbers are written on the outside of the box. You can also contact Netgear support and give them the serial number on the box and they will be able tell you if it's a V1 or V2

Links of Interest

 * installing dd-wrt on netgear wndr3400 n600
 * WNDR3400 5g LED doesn't flash with activity
 * Netgear WNDR3300 v2 and WNDR3400
 * GURU's Netgear wndr 3400 uodate
 * Netgear WNDR3400 support - Can I help?

Flashing DD-WRT
Source

Step 1: Backup your current router configuration


 * 1) Login to your router… probably at http://192.168.1.1
 * 2) Find the maintenance group in the left menu and click on ‘Backup Settings‘
 * 3) Click the button labeled ‘Back Up’  You’ll be prompted to download a file, save it and stick it on your desktop or someplace safe in case you need it later.

Step 2: Download factory firmware (just in case!!)

As a precaution, I chose to download the factory firmware ahead of time so I could have it on hand if this entire process fails and I need to revert everything.


 * Download: Recovery Instructions from Netgear
 * Download: WNDR3400v1 Firmware

Note: These recovery instructions have not been tested by me, use at your own risk.

Step 3: Download the DD-WRT firmware

Downloading via the normal DD-WRT process didn’t work out because it stated the router wasn’t compatible and therefore wouldn’t provide a link.

There is now a WNDR3400 chk file included in the official SVN stream, you can browse the 12/08/2011 release files here.


 * Download: dd-wrt.v24-17990_NEWD-2_K2.6_mini-WNDR3400.chk

Step 4: Flash DD-WRT on to the router

Before flashing the firmware on your router, it’s highly highly suggested to do a 30-30-30 reset. You can find instructions for this here: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=51486

Quoting from the “peacock” thread in the DD-WRT forums:


 * “Failing to do a hard reset and failing to wait after flashing are the two most common NOOB errors that lead them to a world of unnecessary dd-wrt pain! This is not a minor optional step. The firmware writes information to the Nvram. This step clears that information. If you don’t clear it properly, parts of the old information be present with the new firmware, which can make it not operate properly. Don’t cut corners. Doing it before you upgrade can be very important; a hard reset is not just for after upgrades.”

After performing the 30-30-30 reset, log back in to the router and flash it via the web gui.


 * 1) Do NOT use a wireless connection to upload firmware. Use a wired (LAN) connection.
 * 2) Login to your router… probably at http://192.168.1.1
 * 3) Find the maintenance group in the left menu and click on “Router Upgrade”
 * 4) Click the browse button and find dd-wrt.v24-17990_NEWD-2_K2.6_mini-WNDR3400.chk




 * 1) Click the “Upload” button and wait for the process to complete.
 * 2) After the process is done and the router reboots, you can connect to http://192.168.1.1 and should see DD-WRT loaded successfully.
 * 3) Perform another 30-30-30 reset.
 * 4) After the reset procedue is done, login to the router and set a username & password.

Step 5: Upgrade to latest version of DD-WRT:

Now we have DD-WRT running on our WNDR3400v1, we can upgrade to the latest release using the normal flash method via the web gui.

With the latest release, I attmpted to load the “mega” file and it was a success…


 * Download: dd-wrt.v24-17990_NEWD-2_K2.6_mega-nv64k.bin

The upgrade process is pretty simple at this point. Some suggest doing a hard reset before and after upgrading. Since I just did a hard reset after installing DD-WRT, it’s not really needed again unless you make some configuration changes before you upgrade.


 * 1) Do a 30-30-30 reset if you need to.
 * 2) Do NOT use a wireless connection to upload firmware. Use a wired (LAN) connection.
 * 3) Login to your router… probably at http://192.168.1.1
 * 4) Click on the Administration tab and then click on Firmware Upgrade:




 * 1) Choose the option to Reset to Defaults after flashing.
 * 2) Click browse and find dd-wrt.v24-17990_NEWD-2_K2.6_mega-nv64k.bin
 * 3) Click the “Upgrade” button at the bottom of the page and wait….
 * 4) *The router will take a few minutes to upload the file and flash the firmware. During this time, the power light will flash.
 * 5) *A new page will open confirming that the upload was successful.
 * 6) *It’s advised to wait at least 5 minutes before clicking continue.
 * 7) Do a 30-30-30 reset.
 * 8) After the reset procedue is done, login to the router and set a username & password.

You should now see something like the screen below that shows the 17990 firmware loaded on your WNDR3400v1:



I’ve been running this on my router for a couple of days and all the features I need are active and working. Your mileage may vary….

Flashing Tomato
Netgear WNDR3400 v1 - (beta)Tomato support


 * Note: Intial flash must be done from the OEM firmware. If your running dd-wrt, revert to the OEM firmware first.
 * 1) restore default settings
 * 2) flash using tomato image via GUI
 * 3) after flash leave router for 5–7 minutes until ping 192.168.1.1 will return
 * 4) log into Tomato and first of all erase nvram!!
 * 5) after erase 2nd radio will disapear. Dont panic :) Just make reboot one more time
 * 6) log into tomato and Have fun

TomatoUSB Support Details:
 * - both radios works
 * - usb works
 * - power led and usb led works correct
 * - wps and reset buttons works
 * - VLANs are not supported yet
 * - wireless leds may not work correct
 * - upgrade router via GUI will brick router!!

Image: tomato-Netgear-3400v1-K26USB-1.28.RT-101.chk

Flashing OpenWRT

 * So far tests indicate no WebUI, No Wireless, it has telnet access.

Currently, there is a development version of OpenWRT for this router located at: http://downloads.openwrt.org/snapshots/trunk/brcm47xx/openwrt-wndr3400_v1-squashfs.chk

Also, this is not beginner firmware. If you've never dealt with a console, avoid!

To flash:
 * 1) Do a 30/30/30 reset.
 * 2) With the stock firmware, flash that build.
 * 3) Do a 30/30/30 reset again.

By default, OpenWRT does not include a web interface and as such, must be installed using opkg or must be compiled with it included.

Telnet is available. Once the password is changed, telnet becomes unavailable and ssh becomes available.

Support for this model is still in development so not everything works. The build linked above is using kernel version 3.6 as of this writing. I've been told that 3.8 works much better for it. Unconfirmed however.

Wireless is disabled by default. To enable, type in the console: uci set wireless.@wifi-device[0].disabled=0

Reverting to OEM Firmware from DD-WRT
Per Eko There is simple way to flash original firmware. -with router running dd-wrt, telnet in, do "mtd erase linux", wait until finished (2-3 min), then type "reboot" -now router waits for new firmware - tftp the original .chk file (with your PC set to static IP 192.168.1.10 etc) -when tftp transfer finishes, wait 3-4 min...

Reverting to OEM Firmware from TomatoUSB

 * 1) flash ofw image via GUI
 * 2) after flash router wuill brick and power led will blink green light
 * 3) flash ofw image one more time using tftp client
 * 4) after flash make 30-30-30 reset

Original image: WNDR3400-V1.0.0.50_20.0.59-OFW.chk

JTAG Pinouts
J14 - DO NOT HOOK UPTO J10  nTRST 1o o2  GND TDI 3o o4  GND TDO 5o o6  GND TMS 7o o8  GND TCK 9o o10 GND nSRST 11o o12 N/C Using Universal JTAG Adapter  white 1o o2  black red 3o o4  GND blue 5o o6  GND green 7o o8  GND yellow 9o o10 GND orange 11o o12 N/C

Serial Pinouts
JP1 = 3.3v TTL Serial, 115200/8/N, 1 row of six pins  GND 6 o RX 5 o N/C 4 o N/C 3 o TX  2 o VCC 1 o this setup was tested on the 3/20/2013, some other websites are showing the RX and TX opposite and this why does not work for this type of router

Serial Recovery
As of March 2013 it took me a while to sort out this router but i finally did it doing it this way.
 * 1) After Setting up the Putty session, power up your router with the USB serial TTL cable you should see some info scrolling on the screen, press control-c rapidly and it will come with a promt CFE>
 * 2) type on this prompt tftpd to start the tftpd server, you should see the message saying the command START TFTP SERVER and the message READING::: ts ready to send the new firmware.
 * 3) assuming you have download the latest Firmware from Netgear do the following, open a cmd terminal and go to the folder you have save the firmware, type the following : tftp -i 192.168.1.1 put FIRMWARE_FILE.chk, you should see some comments about this on the putty session like reading processing and programing.
 * 4) the router will start itself give it some time until finish

DD-WRT vlan Info

 * DD-WRT:VLAN Support Testing Needed

Pictures
Netgear Images

Boot Log
 Decompressing..........done

CFE for WNDR3400 version: v1.0.8 Build Date: Thu Apr 22 16:51:23 CST 2010 Init Arena Init Devs. Boot partition size = 262144(0x40000) Found a 8MB ST compatible serial flash et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.28 CPU type 0x19740: 453MHz Tot mem: 65536 KBytes Device eth0: hwaddr E0-46-9A-7F-85-D7, ipaddr 192.168.1.1, mask 255.255.255.0 gateway not set, nameserver not set Loader:raw Filesys:tftp Dev:eth0 File:192.168.1.2:vmlinuz Options: (null) Loading: Failed. Could not load 192.168.1.2:vmlinuz: Timeout occured Linux version 2.6.22.19 (root@tomato) (gcc version 4.2.4) #7 Thu Sep 13 18:53:59 CEST 2012 CPU revision is: 00019740 Found a 8MB ST compatible serial flash Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 16256 Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200 Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). PID hash table entries: 256 (order: 8, 1024 bytes) CPU: BCM4716 rev 1 pkg 10 at 453 MHz Using 226.500 MHz high precision timer. console [ttyS0] enabled Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 61828k/65536k available (33k kernel code, 3644k reserved, 2726k data, 116k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 PCI: Using membase 8000000 PCI: Initializing host PCI: Reset RC PCI: Fixing up bus 0 PCI: Fixing up bridge PCI: Fixing up bridge PCI: Enabling device 0000:01:00.1 (0004 -> 0006) PCI: Fixing up bus 1 NET: Registered protocol family 2 Time: MIPS clocksource has been installed. IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered squashfs: version 3.0 (2006/03/15) Phillip Lougher io scheduler noop registered (default) HDLC line discipline: version $Revision: 4.8 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0xb8000300 (irq = 8) is a 16550A PPP generic driver version 2.4.2 MPPE/MPPC encryption/compression module registered NET: Registered protocol family 24 PPPoL2TP kernel driver, V0.18.3 PPTP driver version 0.8.5 pflash: found no supported devices Creating 6 MTD partitions on "sflash": 0x00000000-0x00040000 : "pmon" 0x00040000-0x00790000 : "linux" 0x00151238-0x00640000 : "rootfs" 0x00640000-0x00780000 : "jffs2" 0x007f0000-0x00800000 : "nvram" 0x007e0000-0x007f0000 : "board_data" u32 classifier OLD policer on Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (512 buckets, 4096 max) ip_tables: (C) 2000-2006 Netfilter Core Team ipt_account 0.1.21 : Piotr Gasidlo , http://www.barbara.eu.org/~quaker/ipt_account/ net/ipv4/netfilter/tomato_ct.c [Sep 13 2012 16:17:11] NET: Registered protocol family 1 NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear  All bugs added by David S. Miller  VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 116k freed Warning: unable to open an initial console. emf: module license 'Proprietary' taints kernel. eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.147.0 eth1: Broadcom BCM4329 802.11 Wireless Controller 5.10.147.0 PCI: Enabling device 0000:01:01.0 (0000 -> 0002) Netgear WNDR3400 eth2: Broadcom BCMa8d8 802.11 Wireless Controller 5.10.147.0 / # lo: File exists

DD-WRT Notes
The WNDR3400 CVNA (Cablevision edition) default username and password is admin/optimum

Hardware Modification
WNDR3400v2 model will feature the BCM5358 chipset.

Antenna Mod

 * No solder antenna upgrade kit