TP-LINK TD-W8968 v2

multiple revisions of this device, use caution

bgn (N300)
300Mbps Wireless N USB ADSL2+ Modem Router
Wikipedia	TP-Link
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	TP-LINK TD-W8968 v2
FCC ID	TE7TDW8968V2
IC ID	8853A-W8968V2
Board ID	2011500143
Type	wireless router, dsl modem
Series	TD-W8968
CPU1	Ralink RT63365E
CPU1 Type	MIPS 34KEc
CPU1 Speed	500 MHz
Flash1 Chip	Eon Q64-104HIP
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	ESMT Model?
ETH chip1	Ralink RT63365E
Switch	Ralink RT63365E
Ethernet Port Count	4-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: none specified
Stock FW OS	Linux 2.6.22.15
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 1 A
Connector type	barrel
Flags: ADSL2+
Additional chips DSL AFE;Ralink;RT63087;RT63087N, QL8J900609, 1313AUA1;1;
Other
Default IP address: 192.168.1.1 the IP 192.168.1.1 is used by 1324 additional devices of which 111 are TP-LINK devices Default login user: admin Default login password: admin admin:admin credentials used by 1342 additional devices of which 280 are TP-LINK devices
Manuf/OEM/ODM	TP-LINK
Retail
FCC approval date	15 November 2013
Country of manuf	China
Radio 1
Chip1	Ralink RT5392L
Wireless interface OUI	none specified
Antenna Connector Type	RP-SMA
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
CPU1 brand Radio1 chip1 brand Radio1 chip2 brand TP-LINK TD-W8968 v1 TrendChip Ralink TP-LINK TD-W8968 v2 Ralink Ralink TP-LINK TD-W8968 v3 Broadcom Broadcom

For a list of all currently documented Ralink chipsets with specifications, see Ralink.

For a list of all currently documented TP-LINK device with specifications, see TP-LINK.

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class

Overview

"2011500143" is silkscreened on the board in the FCC photos.

Flash layout

Offset	size	Description
0x000000	0x010000	bootloader
0x020000	0x110000	kernel
0x130000	0x6A0000	rootfs
0x7d0000	0x010000	romfile (MAC at 0x7DF100)
0x7e0000	0x010000	config
0x7f0000	0x010000	radio

JTAG-Serial Info

Boot log

boot log

RT63365 at Fri Mar 21 17:18:12 HKT 2014 version 1.0 Memory size 32MB flash base: b0000000 Found SPI Flash 8MiB Winbond W25Q64 at 0xb0000000 stop macDrvStop here!! TCSUPPORT_MULTI_UPGRADE 1 Search PHY addr and found PHY addr=0 2 Press any key in 0.1 secs to enter boot command mode. .. Invalid Power GPIO, just return and don't turn on Power LED Decompress to 80020000 free_mem_ptr=80600000 free_mem_ptr_end=80780000 Uncompressing [LZMA] ... done. Linux version 2.6.22.15 (root@localhost.localdomain) (gcc version 4.3.4 (GCC) ) #111 SMP Mon May 11 13:23:49 HKT 2015 ISPRAM0: PA=00288000,Size=00008000,enabled Enable SRAM=1c000001 Ralink RT63365 SOC prom init CPU revision is: 00019555 Determined physical RAM map: memory: 02000000 @ 00000000 (usable) 3 available secondary CPU TC(s) Built 1 zonelists. Total pages: 8128 Kernel command line: console=ttyS0 rootfstype=squashfs es=1 Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (23 instructions). Synthesized TLB load handler fastpath (37 instructions). Synthesized TLB store handler fastpath (37 instructions). Synthesized TLB modify handler fastpath (36 instructions). Cache parity protection disabled PID hash table entries: 128 (order: 7, 512 bytes) CPU frequency 498.00 MHz Using 250.000 MHz high precision timer. console handover: boot [early0] -> real [ttyS0] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 28916k/32768k available (2496k kernel code, 3852k reserved, 487k data, 156k init, 0k highmem) SLUB: Genslabs=17, HWalign=32, Order=0-1, MinObjects=4, CPUs=4, Nodes=1 Mount-cache hash table entries: 512 34K sync es set to 1. Config7: 0x80080500 FPU Affinity set after 1105 emulations Limit of 4 TCs set TLB of 64 entry pairs shared by 2 VPEs VPE 0: TC 0 1 2, VPE 1: TC 3 IPI buffer pool of 32 buffers CPU revision is: 00019555 TC 1 going on-line as CPU 1 CPU revision is: 00019555 TC 2 going on-line as CPU 2 CPU revision is: 00019555 TC 3 going on-line as CPU 3 Brought up 4 CPUs migration_cost=10000 NET: Registered protocol family 16 RT63365_pcie_init registering PCI controller with io_map_base unset PCI: Bridge: 0000:00:00.0 IO window: disabled. MEM window: 20000000-200fffff PREFETCH window: disabled. NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 Time: MIPS clocksource has been installed. IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 12288 bytes) TCP bind hash table entries: 1024 (order: 1, 8192 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered TC3162 hardware watchdog module loaded. squashfs: version 3.0 (2006/03/15) Phillip Lougher fuse init (API version 7.8) io scheduler noop registered io scheduler deadline registered (default) ttyS0 at I/O 0xbfbf0003 (irq = 1) is a TC3162 RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize PPP generic driver version 2.4.2 NET: Registered protocol family 24 Register flash device:flash0 tc3162: flash device 0x01000000 at 0x10000000 tc3162: Found SPIFLASH 8MiB Winbond W25Q64 Creating 6 MTD partitions on "tc3162": 0x00000000-0x00020000 : "boot" 0x00020000-0x00130000 : "kernel" 0x00130000-0x007d0000 : "rootfs" 0x007d0000-0x007e0000 : "romfile" 0x007e0000-0x007f0000 : "config" 0x007f0000-0x00800000 : "radio" RT3xxx EHCI/OHCI init. Mirror/redirect action on u32 classifier Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (256 buckets, 5120 max) ctnetlink v0.93: registering with nfnetlink. IPv4 over IPv4 tunneling driver ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 1 NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered ebt_ftos registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 156k freed starting pid 124, tty '': '/etc/init.d/rcS' module_sel: module license 'unspecified' taints kernel. SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x1fbb0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb1: configuration #1 chosen from 1 choice 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detecpted args:usb .....pid 182: wait the running hotplug to end itself....... rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x1fba0000 usb usb2: configuration #1 chosen from 1 choice hotplug, args:usb hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected hotplug, args:usb Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. TC3162 LED Manager 0.1 init tcledctrl version: tcledctrl V1.1.0.0 (May 11 2015-13:24:46). tccicmd V1.1.0.0 (Feb 11 2015-17:01:16) /etc/init.d/rcS: line 60: ftpd: not found femac.c:v1.00-NAPI 29.Mar.2011 eth0: FE MAC Ethernet address: 0C:D6:BD:D4:54:70 init eth_vlan proc. init eth_forward proc. ADSL DMT initialization starting Begin AdslTaskInit..... End AdslTaskInit Begin to request IRQ 20 DMT:Succeed to request IRQ 20 Initializing ADSL F/W 3.20.31.0 ...... Reset dmt .....pid 182: wait the running hotplug to end itself....... Check DMT version =b2 ........ Initializing ADSL F/W ........ done ADSL HW version: b2, HCLK 166 .....pid 182: wait the running hotplug to end itself....... TSARM: TC3162 ATM SAR driver 1.5 init tc3162sar V1.2.0.0 (May 11 2015-13:24:44) register autopvc cmd to sys TSARM: TC3162 ATM SAR driver 1.5 done dns_init eth0: starting interface. alloc_sram p=bc000800 free=7800 alloc_sram p=bc002800 free=5800 TC2105MJ, Please press Enter to activate this console. .....pid 182: wait the running hotplug to end itself....... [ dm_readFile ] 2042: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml [ getWanpAddress ] 200: No IP address cannot be found, ifName= [ getWanpAddress ] 200: No IP address cannot be found, ifName= [ getWanpAddress ] 200: No IP address cannot be found, ifName= sendto: No such file or directory pid 278 send 2001 error ioctl: No such device <7>eth0.3: add 33:33:00:00:00:01 mcast address to master interface eth0.3: dev_set_promiscuity(master, 1) device eth0 entered promiscuous mode device eth0.3 entered promiscuous mode br0: port 1(eth0.3) entering learning state br0: topology change detected, propagating br0: port 1(eth0.3) entering forwarding state eth0.4: dev_set_promiscuity(master, 1) device eth0.4 entered promiscuous mode br0: port 2(eth0.4) entering learning state br0: topology change detected, propagating br0: port 2(eth0.4) entering forwarding state eth0.5: dev_set_promiscuity(master, 1) device eth0.5 entered promiscuous mode br0: port 3(eth0.5) entering learning state br0: topology change detected, propagating br0: port 3(eth0.5) entering forwarding state [ rsl_initLanIgmpSnoopObj ] 181: We need vlan if we want igmp snooping The remaining IMEM space cannot accommodate section .text.imem !! Remaining IMEM space: -520 bytes Section Size: 728 bytes PCI: Enabling device 0000:01:00.0 (0000 -> 0002) .....pid 182: wait the running hotplug to end itself....... .....pid 182: wait the running hotplug to end itself....... WLAN-Start wlNetlinkTool Waiting for Wireless Events from interfaces... .....pid 182: wait the running hotplug to end itself....... eeFlashId = 0x5392! eeFlashId is valid. Eeprom is OK. 0x1300 = 00064300 jiffies=ffff90f1, POLLING_MODE_DETECT_INTV=300 !!pan !! eeFlashId = 0x9253! !!pan !! eeFlashId = 0x9253! device ra0 entered promiscuous mode br0: port 4(ra0) entering learning state br0: topology change detected, propagating br0: port 4(ra0) entering forwarding state device apcli0 entered promiscuous mode br0: port 5(apcli0) entering learning state br0: topology change detected, propagating br0: port 5(apcli0) entering forwarding state Ralink DOT1X daemon, version = '2.6.0.0'; prefix name ra [DOT1X] No any valid radius ip address [DOT1X] 1 errors for radius setting [DOT1X] Not enough necessary parameters are found, flag = d [DOT1X] Could not allocate memory for rtapd->conf iptables: Bad rule (does a matching rule exist in that chain?) [ modifyL2BridgingFromLantoWan ] 119: Fail to get LANDevice object (eth0.2), ret = 9806 [ rsl_initEwanObj ] 193: Initialize EWAN failed! radvd starting eth0.2: Setting MAC address to 0c d6 bd d4 54 71. [ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid. [ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid. rmmod: can't unload 'nf_nat_ftp': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_conntrack_ftp': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_nat_pptp': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_nat_proto_gre': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_nat_tftp': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_conntrack_tftp': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_nat_h323': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_conntrack_h323': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_nat_sip': unknown symbol in module, or unknown parameter rmmod: can't unload 'nf_conntrack_sip': unknown symbol in module, or unknown parameter .....pid 182: wait the running hotplug to end itself....... ip6tables: Bad rule (does a matching rule exist in that chain?) [ rsl_initDslIptvCfgObj ] 1828: DSL IPTV not enable or not firstInit. [ rsl_setStorageServiceObj ] 1140: mountFlag is 3,We start usb server killall: ushare: no process killed ........pid 179: pPlugDevId[0]=, plugDevClass[0]=, plugAction[0]=......... uShare (version 1.1a), a lightweight UPnP A/V and DLNA Media Server. Benjamin Zores (C) 2005-2007, for GeeXboX Team. See http://ushare.geexbox.org/ for updates. iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) ........pid 182: pPlugDevId[0]=, plugDevClass[0]=, plugAction[0]=......... insmod: can't insert '/lib/modules/GPL_NetUSB.ko': No such file or directory Symbol usb_register_driver is being used by a non-GPL module, which will not be allowed in the future Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details. Symbol usb_deregister is being used by a non-GPL module, which will not be allowed in the future Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details. kc 90 : run_telnetDBGDServer start kc 227 : init_DebugD end INFO17E0: NetUSB 1.02.65.5, 00020616 : Apr 22 2015 11:34:36 INFO17E2: 7437: TD-W8968 v2 :TD-W8968 v2 INFO17E3: AUTH ISOC INFO17E4: filterAudio usbcore: registered new interface driver KC NetUSB General Driver INFO0145: init proc : PAGE_SIZE 4096 INFO16D4: infomap c03bbe94 INFO16D7: sleep to wait br0 to wake up INFO15A7: tcpConnector() started... : br0 INFO155A: Bind to br0 igmpd# Msg: V2 igmp router occured! Not matching ours V3. iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) igmpd# Msg: V2 igmp router occured! Not matching ours V3. iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) igmpd# Msg: V2 igmp router occured! Not matching ours V3. igmpd# Msg: V2 igmp router occured! Not matching ours V3. iptables: No chain/target/match by that name iptables: Bad rule (does a matching rule exist in that chain?) igmpd# Msg: V2 igmp router occured! Not matching ours V3. igmpd# Msg: V2 igmp router occured! Not matching ours V3. c starting pid 279, tty '': '/sbin/getty -L ttyS0 115200 vt100' TD-W8968 login: admin Password: 1234 Jan 1 00:04:27 login[279]: root login on 'console' ~ # cat /proc/cpuinfo system type : Ralink RT63365 SOC processor : 0 cpu model : MIPS 34K V5.5 BogoMIPS : 332.59 wait instruction : yes microsecond timers : yes tlb_entries : 64 extra interrupt vector : yes hardware watchpoint : yes ASEs implemented : mips16 dsp mt shadow register sets : 1 VCED exceptions : not available VCEI exceptions : not available unaligned accesses : 20028 processor : 1 cpu model : MIPS 34K V5.5 BogoMIPS : 249.85 wait instruction : yes microsecond timers : yes tlb_entries : 64 extra interrupt vector : yes hardware watchpoint : yes ASEs implemented : mips16 dsp mt shadow register sets : 1 VCED exceptions : not available VCEI exceptions : not available unaligned accesses : 20028 processor : 2 cpu model : MIPS 34K V5.5 BogoMIPS : 249.85 wait instruction : yes microsecond timers : yes tlb_entries : 64 extra interrupt vector : yes hardware watchpoint : yes ASEs implemented : mips16 dsp mt shadow register sets : 1 VCED exceptions : not available VCEI exceptions : not available unaligned accesses : 20028 processor : 3 cpu model : MIPS 34K V5.5 BogoMIPS : 249.03 wait instruction : yes microsecond timers : yes tlb_entries : 64 extra interrupt vector : yes hardware watchpoint : yes ASEs implemented : mips16 dsp mt shadow register sets : 1 VCED exceptions : not available VCEI exceptions : not available unaligned accesses : 20028 ~ # cat /proc/interrupts CPU0 CPU1 CPU2 CPU3 1: 3365 4232 2148 0 MIPS TC3162 UART 9: 176 232 112 1478 MIPS SMTC_IPI 10: 0 0 0 0 MIPS watchdog 14: 0 0 0 0 MIPS performance 18: 0 0 1 0 MIPS ehci_hcd:usb1, ohci_hcd:usb2 20: 575836 557084 125940 0 MIPS dmt20 22: 964 1466 255 0 MIPS eth0 23: 0 0 0 0 MIPS TSARM 25: 19811 19231 4577 0 MIPS ra0 31: 77300 13034 5267 95509 MIPS timer 33: 0 0 0 0 MIPS bus timeout ERR: 0 ~ # cat /proc/version Linux version 2.6.22.15 (root@localhost.localdomain) (gcc version 4.3.4 (GCC) ) #111 SMP Mon May 11 13:23:49 HKT 2015 ~ #