On Networks (Netgear) N300R

bgn (N300)
N300 WiFi Router
Downloads	Download page
3rd Party Firmware
dd-wrt	Incompatible
OpenWrt	Incompatible
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	On Networks N300R
FCC ID	PY310400149
Type	wireless router
CPU1	Realtek RTL8196C
CPU1 Type	Lexra RLX4181
CPU1 Speed	390 MHz
Flash1 Chip	Macronix MX25L3206EM2I-12G
Flash1 Size	4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	Winbond W9825G6JH-6
ETH chip1	Realtek RTL8196C
Switch	Realtek RTL8196C
Ethernet Port Count	1-100MbE-WAN 4-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: 84:1B:5E (8 E, 10 W) Ethernet OUI: 84:1B:5E (8 E, 10 W)
Stock bootloader	rtkload v2.1
Stock FW OS	Linux 2.4.18
Expansion IF types	none specified
Power	12 VDC, 1 A
Connector type	barrel
Serial Port (UART)	yes, internal, 4-pin header, populated, 3.3V TTL, (38400 8N1)
Other
Default SSID: OnNetworksXX Default IP address: 192.168.1.1 the IP 192.168.1.1 is used by 1324 additional devices of which 1 are On Networks devices Default login user: admin Default login password: admin admin:admin credentials used by 1342 additional devices of which 1 are On Networks devices
Manuf/OEM/ODM	Delta Networks
Retail
FCC approval date	24 May 2012
(Est.) release date	20 May 2012
UPC	606449086546 (UPC DB, On eBay)
ASIN	B0081HD3OO
Country of manuf	China
Radio 1
Chip1	Realtek RTL8192CE
Wireless interface OUI	84:1B:5E
Antenna Connector Type	none specified
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
FCC ID Netgear JWNR2000v2 PY310400149

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class

Overview

"2976414500" is silkscreened on a sample production unit's board.

The default SSID pattern appears to be OnNetworksXX,

where XX seems to be a number.

Included PSU(s)

The power supply included with the device looks

to be an (unknown branded) T012LF1209.

unknown T012LF1209 (332-10469-01) (more)
Input: 100-240 VAC ~ 50/60 Hz, 0.5 A
Input connector: NEMA 1-15P Style: small, horiz.  Eff. level: 5
Output: 12 VDC, 1 A
Output connector: barrel (center +)  OD: ??  ID: ??  LEN: ??

JTAG-Serial Info

Serial

Serial Pinouts

The pinout for the serial connection appears to be as follows...

[ RTL8196C ]

            (GND) (RxD) (TxD) (3.3)
                                   JP2

Info derived from

boot log

4.MXIC SPI (4 MByte)! ---JWNR2000v2 at 2011.12.12-11:14+0800 version v2.1 [16bit](390MHz) ### Press down Reset button(GPIOA5) to reset the Router Configuration!! ### no sys signature at 00010000! system signature at 00020000! rootfs signature at 000D0000! ### Press down Esc key to escape booting by user!! ### Set 8196C PHY Patch OK NMRP Client starts Listening for ADVERTISE... NMRP timeoust exit; decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. early printk enabled Determined physical RAM map: memory: 02000000 @ 00000000 (usable) On node 0 totalpages: 8192 zone(0): 8192 pages. zone(1): 0 pages. zone(2): 0 pages. Kernel command line: root=/dev/mtdblock7 console=0 Calibrating delay loop... 389.12 BogoMIPS Memory: 24096k/32768k available (2076k kernel code, 8672k reserved, 241k data, 56k init, 0k highmem) Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes) Inode-cache hash table entries: 2048 (order: 2, 16384 bytes) Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 8192 (order: 3, 32768 bytes) check_wait... unavailable. POSIX conformance testing by UNIFIX Initializing RT netlink socket Starting kswapd pty: 10 Unix98 ptys configured state->flags=00000000 Realtek GPIO Driver for Flash Reload Default block: 64 slots per queue, batch=16 SPI INIT flash device: 0x200000 at 0xbd000000 probe realtek get SPI CS0 maker:c2 type:20 sector_cnt:64 get SPI CS1 maker:0 type:0 sector_cnt:0 MXIC matched!!get SPI chip driver! probe ends probe realtek2 Creating 10 MTD partitions on "Physically mapped flash": 0x00000000-0x00008000 : "boot+hw_setting" 0x00008000-0x0000a000 : "pot" 0x0000a000-0x0000c000 : "pppoe" 0x0000c000-0x0000e000 : "reserve1" 0x0000e000-0x00010000 : "reserve2" 0x00010000-0x00020000 : "nvram" 0x00020000-0x000d0000 : "kernel" 0x000d0000-0x003b0000 : "root fs" 0x003b0000-0x003c0000 : "trafficmeter" 0x003c0000-0x00400000 : "language_table" RTL8192C/RTL8188C driver version 1.4 (2010-12-22) =====>>INSIDE rtl8192cd_init_one <<===== vendor_deivce_id=819110ec =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== TCP: Hash tables configured (established 2048 bind 4096) ip_conntrack version 2.1 (512 buckets, 4096 max) - 356 bytes per conntrack ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading PPTP netfilter connection tracking: registered PPTP netfilter NAT helper: registered ip_tables: (C) 2000-2002 Netfilter core team VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 56k freed mount /proc file system ok! mount /var file system ok! mtd = /dev/nvram flatfsd: flat1_checkfs 4, hdr.magic=cafe2345, hdr.length=14508, hdr.chksum=1290928 flatfsd: Created 8 configuration files (14223 bytes) Wed Jan 1 00:00:00 UTC 2003 firmware_version = V1.0.0.3_1.0.10 Using /lib/modules/2.4.18/fastpath.o Realtek FastPath v1.18 Using /lib/modules/2.4.18/dni-qos.o dni-qos module init at dev:eth1, real_dev:eth1 Using /lib/modules/2.4.18/ipt_CONENAT.o Using /lib/modules/2.4.18/ipt_DNS_HIJACK.o Using /lib/modules/2.4.18/ip_conntrack_starcraft.o Using /lib/modules/2.4.18/ip_nat_starcraft.o Using /lib/modules/2.4.18/lan_port_resv.o Using /lib/modules/2.4.18/delete_conntrack.o Using /lib/modules/2.4.18/ipt_string.o Using /lib/modules/2.4.18/ip_conntrack_proto_esp.o Using /lib/modules/2.4.18/ip_nat_proto_esp.o PID:mtd = /dev/nvram flatfsd: Wrote 14508 bytes to flash in 0 seconds SSID:OnNetworks03PASSPHRASE:53602068Configuring LAN , lan_ifname = br0 ........ Set 8196C PHY Patch OK IF_handle start.... wps start cat: /tmp/wscd_lock_stat: No such file or directory [wsc]main 6645:daemon parameter: wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-wlan0.fifo -daemon Read config file:/var/wsc.conf, def:0 configured pin_timeout = 240 [wsc]init_config 6296:auth_type_flags:21 [wsc]init_config 6300:encrypt_type_flags:09 <<====WPS argument list=====>> is_ap = 1 role = Registrar config_state = configured config_method = 0x2688 pin_code = 20202330 upnp = 1 wlan0_wsc_disabled=0 auth_type_flags:0x21 encrypt_type_flags:9 ---wlan0 setting--- rf_band = 1; 1=2.4G ;2=5G SSID=OnNetworks03 security mixed mode = 0 Auth_Type=32 Encrypt_Type=8 WSC_PSK = 53602068 wlan0 interface wsc is Enabled button_hold_time = 3 SSID-prefix = OnNetworks_ disable_configured_by_exReg = 0 uuid=63041253101920061228841b5e832259 brute_force_attack_mitigation ThresHold[3] wsc version=2.0 <<====WPS argument list=====>> << Start_upnp >> WSCRegisterCallBackFunc successfully! WiFi Simple Config v2.10-wps2.0 (2012.06.05-04:17+0000). starting app [util]build_probe_rsp_ie,2377:config method(0x1008)=2008 [wsc]main 6878:alarm(1)----------> $Starting udhcpd: error, Failure parsing line 10 of /var/udhcpd.conf info, udhcpd (v0.9.9-pre) started error, max_leases value (254) not sane, setting to 253 instead error, Unable to open /tmp/udhcpd.leases for reading The attached devices demo is Running ... $Starting Service: The abbreviation of English is Eng! reload_language_table::Didn't find the language table we need! gui_region = English region = English, download_region = Update string table successfully, memory usage: 292KB. The httpd server is running ... $Starting syslogd: route: SIOC[ADD|DEL]RT: No such process $Starting miniigd: MiniIGD v1.07 (2012.06.05-04:17+0000). $Starting mini_upnpd: $Starting dnsmasq: No nameserver in /var/resolv.conf Static routes setting: WAN is down The telnetenable is running ... device eth5 is not a slave of br0 /etc/rc.d/service_start.sh: 186: /sbin/cmd_traffic_meter: not found $Starting /usr/sbin/lld2d: flash:: open /tmp/upnp_portmap failed $Starting WAN: $Starting udhcpc: info, udhcpc (v0.9.9-pre) started udhcpc -i eth1 -p /var/run/udhcpc.pid -s /etc/udhcpc/udhcpc.script -h N300R & deconfig interface=eth1 BusyBox v1.01 (2012.06.05-04:16+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. / # ##POT area valid. Start sending discover ... #### firmware_checking ####

ps aux

ps aux

/ # ps aux PID Uid VmSize Stat Command 1 root 376 S init 2 root SW [keventd] 3 root SWN [ksoftirqd_CPU0] 4 root SW [kswapd] 5 root SW [bdflush] 6 root SW [kupdated] 7 root SW [mtdblockd] 547 root 500 S wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-w 568 root 292 S iwcontrol wlan0 616 root 448 S udhcpd /var/udhcpd.conf 620 root 248 S net-scan 626 root 744 S /usr/sbin/uhttpd 630 root 380 S syslogd -m -1 632 root 324 S klogd 651 root 388 S miniigd -e 1 -i br0 -u 12342409-1234-1234-5678-841b5e 661 root 340 S mini_upnpd -wsc /tmp/wscd_config -igd /tmp/igd_config 698 root 340 S dnsmasq -h -n -c 0 -i br0 -r /var/resolv.conf 763 root 224 S /usr/sbin/telnetenable 764 root 244 S /usr/sbin/getdeviceinfo 803 root 368 S /usr/sbin/lld2d br0 877 root 380 S udhcpc -R -i eth1 -p /var/run/udhcpc.pid -s /etc/udhc 882 root 412 S /bin/sh /etc/rc.d/mon_tsk.sh 883 root 432 S /bin/sh /etc/rc.d/monitor.sh 921 root 208 S /sbin/alarm 0 941 root 244 S /sbin/monWsc 942 root 240 S /usr/sbin/potd 943 root 196 S /usr/sbin/set_potd 945 root 500 S /bin/sh 1061 root 252 S sleep 30 1062 root 356 R ps aux

lsmod

lsmod
/ # lsmod Module Size Used by ip_nat_proto_esp 712 0 (unused) ip_conntrack_proto_esp 1640 0 (unused) ipt_string 4296 0 (unused) delete_conntrack 2504 0 (unused) lan_port_resv 1632 0 ip_nat_starcraft 1088 0 (unused) ip_conntrack_starcraft 1816 1 ipt_DNS_HIJACK 3072 1 ipt_CONENAT 1400 0 (unused) dni-qos 6896 0 (unused) fastpath 106608 0 (unused)

cat /proc/mtd

/proc/mtd
/proc # cat mtd dev: size erasesize name mtd0: 00008000 00001000 "boot+hw_setting" mtd1: 00002000 00001000 "pot" mtd2: 00002000 00001000 "pppoe" mtd3: 00002000 00001000 "reserve1" mtd4: 00002000 00001000 "reserve2" mtd5: 00010000 00001000 "nvram" mtd6: 000b0000 00001000 "kernel" mtd7: 002e0000 00001000 "root fs" mtd8: 00010000 00001000 "trafficmeter" mtd9: 00040000 00001000 "language_table"

cat /proc/meminfo

meminfo
/proc # cat meminfo total: used: free: shared: buffers: cached: Mem: 24731648 12988416 11743232 0 1155072 4030464 Swap: 0 0 0 MemTotal: 24152 kB MemFree: 11468 kB MemShared: 0 kB Buffers: 1128 kB Cached: 3936 kB SwapCached: 0 kB Active: 1592 kB Inactive: 5368 kB HighTotal: 0 kB HighFree: 0 kB LowTotal: 24152 kB LowFree: 11468 kB SwapTotal: 0 kB SwapFree: 0 kB

cat /proc/cpuinfo

cpuinfo
/proc # cat cpuinfo system type : Philips Nino processor : 0 cpu model : R3000 V0.0 BogoMIPS : 389.12 wait instruction : yes microsecond timers : no tlb_entries : 32 extra interrupt vector : no hardware watchpoint : no VCED exceptions : not available VCEI exceptions : not available ll emulations : 0 sc emulations : 0