Buffalo WCR-GN

Overview
OEM Gemtek WRTR-262GN (WRTR-262GN_V01)

Links of Interest

 * Post detailing internal specs on the DD-WRT forums

On the DD-WRT forums
 * flashable via serial console

Internal shots

Flashing dd-wrt
access it via HyperTerminal with 57600, 8, n, 1 settings from your computer  download http://www.dd-wrt.com/routerdb/de/download/Buffalo/WCR-GN/-/firmware.tftp/3918 rename it to "firmware.bin". set network card ipv4 to router ip 192.168.11.1 computer ip 192.168.1.2 submask  ip 255.255.255.0 gatway ip 192.168.11.1 dns ip 192.168.11.1 set tftp host to 192.168.11.1 port 80 server 192.168.1.2 4 FLASH THE FIRMWARE Pull power from the WCR-GN, re apply power and quickly select menu option 2. It looks like this: pushing the reset button works too. Quote:You choosed 2  0    2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)   Pick "Y" and then enter the IP addresses of the WCR-GN and the TFTP Server. Quote:Please Input new ones /or Ctrl-C to discard do not discard. change them to the tftp. Input device IP (10.10.10.123) ==:192.168.11.1 Input server IP (10.10.10.3) ==:192.168.11.2  Enter the filename of the DD-WRT firmware. As mentioned above,named "firmware.bin":  Quote:Input Linux Kernel filename ==:firmware.bin  it takes about 3-5 tp finish.after its all done it should work. new ip 192.168.1.1 set network card ipv4 to obtain ip and dns automatically. you should be able to log into router.

Reverting dd-wrt
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=153874&highlight=wcrgn http://www.dd-wrt.com/phpBB2/download.php?id=24788 firmware upgrade in dd-wrt browser 192.168.1.1

Serial Pinouts
'''On main PCB, locate connector labeled JP1. There won't be pins soldered''' into the connector so you'll probably have to install pins to access the serial port. Note that one pad on JP1 is square. The square pad is pin4. The pinout is as follows: Pin 1 - VCC (i.e. 3.3 volts) Pin 2 - GND Pin 3 - Transmit Data Pin 4 - Recieve Data

On main PCB, locate connector labeled JP1. There won't be pins soldered into the connector so you'll have to install pins to access the serial port.Note that one pad on JP1 is square. The square pad is pin1. next to the hole on the board for the antenna wire. I didn't hookup vcc. The pinout is as follows: Pin 1 - VCC (i.e. 3.3 volts)Pin 2 - GNDPin 3 - Transmit DataPin 4 - Recieve Data access it via HyperTerminal with 57600, 8, n, 1 settings from your computer mine actually worked to change firmware to dd-wrt.

from usa

from china

driver Download CP210x Package

 Use a USB to TTL serial converter to access the port. The serial port operates 8, N, 1 ant 57600 bits per second.

Serial Recovery
The unit uses a customized version of the UBoot bootloader. Here is a dump from power on: U-Boot 1.1.3 (Sep 30 2009 - 21:47:05) Board: Ralink APSoC DRAM: 16 MB relocate_code Pointer at: 80fb4000 spi_wait_nsec: 3e spi deice id: c2 20 16 c2 20 (2016c220) find flash: mx25l3205d raspi_read: from:30000 len:1000 *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 3.3 ASIC 3052_MP2 (Port5<->Phy) DRAM component: 128 Mbits SDR DRAM bus: 16 bit Total memory: 16 MBytes Flash component: SPI Flash Date:Sep 30 2009 Time:21:47:05 ============================================ icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:128, ways:4, linesz:32 ,total:16384 ##### The CPU freq = 320 MHZ #### SDRAM bus set to 16 bit SDRAM size =16 Mbytes 4 4 You choosed 4 4: System Enter Boot Command Line Interface. U-Boot 1.1.3 (Sep 30 2009 - 21:47:05) RT3052 # RT3052 # help ?      - alias for 'help' bootm  - boot application image from memory cp     - memory copy erase  - erase SPI FLASH memory go     - start application at address 'addr' help   - print online help md     - memory display mdio  - Ralink PHY register R/W command !! mm     - memory modify (auto-incrementing) mw     - memory write (fill) nm     - memory modify (constant address) printenv- print environment variables reset  - Perform RESET of the CPU saveenv - save environment variables to persistent storage setenv - set environment variables tftpboot- boot image via network using TFTP protocol version - print monitor version Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 9: Load Boot Loader code then write to Flash via TFTP.