Linksys WRT610N v2

WRT610N v2 serials appear to start with CTG1.

"3763-40300105R" is silkscreened on the board in the FCC photos.

Links of Interest

 * DD-WRT Kong Mod USB/FTP/miniDLNA/Samba3 for all broadcom 47xx units with =>8MB Flash (WNR3500L, Asus RT-N16, Linksys WRT610N V2) build 15000
 * 'WRT610N' thread on the DD-WRT forums
 * 'WRT610N - Status (read first post)' thread on the DD-WRT forums
 * Change your 610n V2 into an E3000 - Amended' on the DD-WRT forums
 * 610 V2 - E3000 jtag
 * 'Unbrick / Install WRT610N V1&V2 using TFTP and DD-WRT' on the DD-WRT forums (label shot, 00:25:9C OUI)

Flashing DD-WRT
Make sure you use a firmware with wrt610nv2 in the filename for the initial installation like the one below:


 * dd-wrt.v24-14144_NEWD-2_K2.6_mini_wrt610nv2.bin


 * 1) Flash firmware through the Linksys WebGUI.
 * 2) After a couple minutes you should see an "Update Completed Succesfully" Screen.
 * 3) Wait...at least three minutes after that just to be safe.
 * 4) Do a power cycle of the router. (Unplug the cord, count to 10 and plug it back in.)
 * 5) Wait for the lights to return to normal, usually about 2 minutes.
 * 6) Do a HARD reset. Wait. Check for the password page and login to change the password.
 * 7) After you have DD-WRT on the router you can then flash the latest mega build:

Reverting to OEM Firmware from DD-WRT
To revert to the original firmware, just download and flash the current Linksys firmware file using DD-WRT GUI following the same steps outlined in the "Steps for flashing" section above.

JTAG Pinouts
JTAG Resisters missing on PCB

JTAG Recovery
JTAG Resisters missing on PCB

DD-WRT vlan Info

 * DD-WRT:VLAN Support

Defaults  nvram show | grep vlan.ports

vlan2ports=0 8 new_vlan2ports=0 8 vlan1ports=1 2 3 4 8* new_vlan1ports=1 2 3 4 8*

nvram show | grep port.vlans

port5vlans=1 2 16 port3vlans=1 port1vlans=1 port4vlans=1 port2vlans=1 port0vlans=2

nvram show | grep vlan.hwname

new_vlan1hwname=et0 vlan2hwname=et0 vlan1hwname=et0 new_vlan2hwname=et0

Pictures
Cisco's Images

Recovery (Unbricking)
A simple way to recover a bricked device is:
 * 1) unplug all ethernet ports (Important!)
 * 2) unplug power
 * 3) plug power in
 * 4) wait 2-2.5 seconds
 * 5) press the reset button and keep it pressed for 5 seconds, then release it
 * 6) reconnect ethernet (DHCP shoud give IP address to computer)
 * 7) point your browser at 192.168.1.1. You should see a "Management Firmware update" screen where you can flash the original (Linksys) firmware.

Windows Vista/7 may have trouble with TFTP. Try using Linux or Windows XP. Special for Vista.2C Win7 and Win 2008

Alt Method by redhawk0

WRT610Nv2 debricking....Info and Howto

Just an FYI thread.....

I received a 610Nv2 today that was bricked. I tried the power cycle, reset button for 5 seconds, web browser management mode method for debricking....but I was without luck.

It would respond with TTL=100 all the time....even after a successful flash of the 610nv2 trailed build.

I believe the owner indicated that it was flashed accidentally with a V24 build. These 610Nv2 require K26_NEWD2 builds.

So...I installed my Serial header to see what was going on. It said the CRC was correct (expected and calculated were the same)....but the CFE saw it as an invalid header....even though it is the trailed build that had 610N in the header.

I tried to flash the OEM firmware...but tftp.exe won't accept a file over 4Mbyte....so....I used tftpd32 server to flash the unit using the serial port and CFE commands.

I renamed the Linksys OEM 610Nv2 FW to code.bin and pointed to its directory in the tftpd32 server program.

Broke into the CFE and issued the following commands to move the firmware to the unit.

flash -ctheader 192.168.1.10:code.bin flash0.os

(where 192.168.1.10 was the static IP assigned to my laptop running the tftp server)

when it finished programming....I typed "load"

The unit finished the process and rebooted into Linksys FW. Then I could load the K26_NEWD2_mini_610nv2.bin build through the Linksys FW upgrade tab.

power cycle, hard reset, then flashed the latest K26_NEWD2_14473_big.bin file.

power cycled, hard reset again...then configured. All working great on this unit....hard reset again...and shipping it back to the owner.

Hope it helps someone else...this was one of the trickiest Debrickings that I ever had to deal with. (first time with a 610Nv2 unit)

redhawk

NVRAM Erase breaks Management Mode
Many people have difficulties getting the 610nv2 into management mode using the technique above. It appears that after the nvram is erased (via a 30-30-30 reset for example) the regular "press reset after startup" technique no longer works. Alternatives are to recover via serial console, or to short two particular pins on the flash chip (see http://www.dd-wrt.com/phpBB2/viewtopic.php?p=387245#387245) during startup. Sadly tftp is not an viable option (it will appear to work if your firmware file is under 3.8MB, but the upload will not be flashed).