On Networks (Netgear) N300R



"2976414500" is silkscreened on a sample production unit's board.

The default SSID pattern appears to be OnNetworksXX,
 * where XX seems to be a number.

Included PSU(s)
The power supply included with the device looks
 * to be an (unknown branded) T012LF1209.

Pinout
The pinout for the serial connection appears to be as follows... [ RTL8196C ]

(GND) (RxD) (TxD) (3.3) JP2

Info derived from
{{SCollapse|boot log 4.MXIC SPI (4 MByte)!

---JWNR2000v2 at 2011.12.12-11:14+0800 version v2.1 [16bit](390MHz)

no sys signature at 00010000! system signature at 00020000! rootfs signature at 000D0000!
 * 1) Press down Reset button(GPIOA5) to reset the Router Configuration!! ###

Set 8196C PHY Patch OK
 * 1) Press down Esc key to escape booting by user!! ###

NMRP Client starts Listening for ADVERTISE... NMRP timeoust exit; decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. early printk enabled Determined physical RAM map: memory: 02000000 @ 00000000 (usable) On node 0 totalpages: 8192 zone(0): 8192 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: root=/dev/mtdblock7 console=0 Calibrating delay loop... 389.12 BogoMIPS Memory: 24096k/32768k available (2076k kernel code, 8672k reserved, 241k data, 56k init, 0k highmem) Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes) Inode-cache hash table entries: 2048 (order: 2, 16384 bytes) Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 8192 (order: 3, 32768 bytes) check_wait... unavailable. POSIX conformance testing by UNIFIX Initializing RT netlink socket Starting kswapd pty: 10 Unix98 ptys configured state->flags=00000000 Realtek GPIO Driver for Flash Reload Default block: 64 slots per queue, batch=16 SPI INIT flash device: 0x200000 at 0xbd000000 probe realtek get SPI CS0 maker:c2 type:20  sector_cnt:64 get SPI CS1 maker:0 type:0  sector_cnt:0

MXIC matched!!get SPI chip driver! probe ends probe realtek2 Creating 10 MTD partitions on "Physically mapped flash": 0x00000000-0x00008000 : "boot+hw_setting" 0x00008000-0x0000a000 : "pot" 0x0000a000-0x0000c000 : "pppoe" 0x0000c000-0x0000e000 : "reserve1" 0x0000e000-0x00010000 : "reserve2" 0x00010000-0x00020000 : "nvram" 0x00020000-0x000d0000 : "kernel" 0x000d0000-0x003b0000 : "root fs" 0x003b0000-0x003c0000 : "trafficmeter" 0x003c0000-0x00400000 : "language_table" RTL8192C/RTL8188C driver version 1.4 (2010-12-22)

>>INSIDE rtl8192cd_init_one <<
vendor_deivce_id=819110ec

>>EXIT rtl8192cd_init_one <<
TCP: Hash tables configured (established 2048 bind 4096) ip_conntrack version 2.1 (512 buckets, 4096 max) - 356 bytes per conntrack ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading PPTP netfilter connection tracking: registered PPTP netfilter NAT helper: registered ip_tables: (C) 2000-2002 Netfilter core team VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 56k freed mount /proc file system ok! mount /var file system ok! mtd = /dev/nvram flatfsd: flat1_checkfs 4, hdr.magic=cafe2345, hdr.length=14508, hdr.chksum=1290928

flatfsd: Created 8 configuration files (14223 bytes) Wed Jan 1 00:00:00 UTC 2003 firmware_version = V1.0.0.3_1.0.10 Using /lib/modules/2.4.18/fastpath.o Realtek FastPath v1.18 Using /lib/modules/2.4.18/dni-qos.o dni-qos module init at dev:eth1, real_dev:eth1 Using /lib/modules/2.4.18/ipt_CONENAT.o Using /lib/modules/2.4.18/ipt_DNS_HIJACK.o Using /lib/modules/2.4.18/ip_conntrack_starcraft.o Using /lib/modules/2.4.18/ip_nat_starcraft.o Using /lib/modules/2.4.18/lan_port_resv.o Using /lib/modules/2.4.18/delete_conntrack.o Using /lib/modules/2.4.18/ipt_string.o Using /lib/modules/2.4.18/ip_conntrack_proto_esp.o Using /lib/modules/2.4.18/ip_nat_proto_esp.o PID:mtd = /dev/nvram flatfsd: Wrote 14508 bytes to flash in 0 seconds SSID:OnNetworks03PASSPHRASE:53602068Configuring LAN, lan_ifname = br0 ........ Set 8196C PHY Patch OK

IF_handle start.... wps start cat: /tmp/wscd_lock_stat: No such file or directory [wsc]main 6645:daemon parameter: wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-wlan0.fifo -daemon

Read config file:/var/wsc.conf, def:0 configured pin_timeout = 240 [wsc]init_config 6296:auth_type_flags:21 [wsc]init_config 6300:encrypt_type_flags:09

<<====WPS argument list=====>> is_ap = 1 role = Registrar config_state = configured config_method = 0x2688 pin_code = 20202330 upnp = 1 wlan0_wsc_disabled=0 auth_type_flags:0x21 encrypt_type_flags:9 ---wlan0 setting--- rf_band = 1; 1=2.4G ;2=5G SSID=OnNetworks03 security mixed mode = 0 Auth_Type=32 Encrypt_Type=8 WSC_PSK = 53602068 wlan0 interface wsc is Enabled button_hold_time = 3 SSID-prefix = OnNetworks_ disable_configured_by_exReg = 0 uuid=63041253101920061228841b5e832259 brute_force_attack_mitigation ThresHold[3] wsc version=2.0

<<====WPS argument list=====>> << Start_upnp >> WSCRegisterCallBackFunc successfully!

WiFi Simple Config v2.10-wps2.0 (2012.06.05-04:17+0000).

starting app [util]build_probe_rsp_ie,2377:config method(0x1008)=2008 [wsc]main 6878:alarm(1)--> $Starting udhcpd: error, Failure parsing line 10 of /var/udhcpd.conf info, udhcpd (v0.9.9-pre) started error, max_leases value (254) not sane, setting to 253 instead error, Unable to open /tmp/udhcpd.leases for reading

The attached devices demo is Running ...

$Starting Service: The abbreviation of English is Eng! reload_language_table::Didn't find the language table we need! gui_region = English region = English, download_region = Update string table successfully, memory usage: 292KB. The httpd server is running ... $Starting syslogd:

route: SIOC[ADD|DEL]RT: No such process $Starting miniigd:

MiniIGD v1.07 (2012.06.05-04:17+0000). $Starting mini_upnpd: $Starting dnsmasq: No nameserver in /var/resolv.conf

Static routes setting: WAN is down The telnetenable is running ... device eth5 is not a slave of br0 /etc/rc.d/service_start.sh: 186: /sbin/cmd_traffic_meter: not found $Starting /usr/sbin/lld2d:

flash:: open /tmp/upnp_portmap failed

$Starting WAN: $Starting udhcpc: info, udhcpc (v0.9.9-pre) started udhcpc -i eth1 -p /var/run/udhcpc.pid -s /etc/udhcpc/udhcpc.script   -h N300R &

deconfig interface=eth1

BusyBox v1.01 (2012.06.05-04:16+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands.

/ # ##POT area valid. Start sending discover ...
 * 1) firmware_checking  ####

}}