TP-LINK TD-W8970 v3

multiple revisions of this device, use caution

bgn (N300)
300Mbps Wireless N Gigabit ADSL2+ Modem Router
Homepage	Product page
Wikipedia	TP-Link
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Status Unknown
Platform
Brand • Model • Rev	TP-LINK TD-W8970 v3
FCC ID	TE7TDW8970V3
IC ID	8853A-W8970
Board ID	2011500170
Type	wireless router, dsl modem
CPU1	Broadcom BCM6362
CPU1 Type	MIPS32
CPU1 Speed	400 MHz ( 2 cores )
Flash1 Chip	Winbond W25Q128BVFG
Flash1 Size	16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Size	64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br />
RAM1 Chip	Winbond W9751G6KB-25
ETH chip1	Broadcom BCM6362
Switch	Broadcom BCM53125
Ethernet Port Count	1-1GbE-WAN 4-1GbE-LAN
Wired Standard	IEEE 802.3i/3u/3ab
802dot11 OUI: none specified
Stock bootloader	CFE
Stock FW OS	Linux 2.6.30
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	12 VDC, 1.5 A
Connector type	barrel
Serial Port (UART)	yes, 4-pin header, 3.3V TTL, (115200 8N1), J3
Flags: ADSL2+
Other
Default IP address: 192.168.1.1 the IP 192.168.1.1 is used by 1323 additional devices of which 111 are TP-LINK devices Default login user: admin Default login password: admin admin:admin credentials used by 1340 additional devices of which 280 are TP-LINK devices
Manuf/OEM/ODM	TP-LINK
Retail
FCC approval date	27 August 2014
ASIN	B00A122XG6
Country of manuf	China
Radio 1
Chip1	Broadcom BCM6362
Wireless interface OUI	none specified
Antenna Connector Type	RP-SMA
MIMO status	2x2:2
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 300 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
CPU1 brand Radio1 chip1 brand Radio1 chip2 brand TP-LINK TD-W8970 v1 Lantiq (Intel) Atheros TP-LINK TD-W8970 v3 Broadcom Broadcom

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

For a list of all currently documented TP-LINK device with specifications, see TP-LINK.

• 300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class

Overview

"2011500170" is silkscreened on the board in the FCC photos.

Antenna: 2x 5dBi @2.4GHz

USB port: 1x USB 2.0

JTAG-Serial Info

Serial

Serial Pinouts

The pinout would appear to be the following...

J3
[TxD]
(RxD)
(GND)
(3.3)
|
| to USB port
v

Hint: You have to short two missing resistors beside Tx & Rx

as shown in fcc photos of refernce board.

Boot log

bootlog • >>

HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN 300H PHYE DINT LASY USYN MSYN LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 1.0.38-114.185 for BCM96362 (32bit,SP,BE) Build Date: Fri Apr 24 09:43:48 CST 2015 (lmc@localhost.localdomain) Copyright (C) 2000-2011 Broadcom Corporation. HS Serial flash device: name ID_W25X64, id 0xef17 size 8192KB Total Flash size: 8192K with 128 sectors Flash not used for Auxillary File System External switch id = 53125 Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-13) : 96361I2 Number of MAC Addresses (1-32) : 11 Base MAC Address : 02:10:18:01:00:01 PSI Size (1-64) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 *** Press 't' to stop auto run (0.1 seconds) *** Code Address: 0x80010000, Entry Address: 0x802e0020 Decompression OK! Entry at 0x802e0020 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Starting program at 0x802e0020 Linux version 2.6.30 (lmc@localhost.localdomain) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #368 SMP PREEMPT Fri Apr 24 09:44:37 CST 2015 HS Serial flash device: name ID_W25X64, id 0xef17 size 8192KB 96361I2 prom init CPU revision is: 0002a070 (Broadcom4350) DSL SDRAM reserved: 0x100000 Determined physical RAM map: memory: 03f00000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00003f00 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00003f00 On node 0 totalpages: 16128 free_area_init_node: node 0, pgdat 80396d90, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 94 pages used for memmap Normal zone: 11938 pages, LIFO batch:1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16002 Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 wait instruction: enabled Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes NR_IRQS:128 PID hash table entries: 256 (order: 8, 1024 bytes) console [ttyS0] enabled Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 59252k/64512k available (2911k kernel code, 5240k reserved, 718k data, 156k init, 0k highmem) Calibrating delay loop... 399.36 BogoMIPS (lpj=199680) Mount-cache hash table entries: 512 --Kernel Config-- SMP=1 PREEMPT=1 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 Broadcom Logger v0.1 Jul 15 2014 10:54:21 CPU revision is: 0002a070 (Broadcom4350) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Calibrating delay loop... 402.43 BogoMIPS (lpj=201216) Brought up 2 CPUs net_namespace: 1120 bytes NET: Registered protocol family 16 Total Flash size: 8192K with 128 sectors Flash not used for Auxillary File System registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10005fff] pci 0000:00:00.0: supports D1 D2 pci 0000:00:00.0: PME# supported from D0 D3hot D3cold pci 0000:00:00.0: PME# disabled pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff] pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: disabled pci 0000:01:00.0: PREFETCH window: disabled PCI: Setting latency timer of device 0000:01:00.0 to 64 skbFreeTask created successfully BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 Jul 21 2014 17:47:07 initialized Broadcom GBPM v0.1 Jul 21 2014 17:54:37 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 2, 16384 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher squashfs: version 4.0 with LZMA457 ported by BRCM fuse init (API version 7.11) msgmni has been set to 115 io scheduler noop registered (default) PCI: Setting latency timer of device 0000:01:00.0 to 64 Driver 'sd' needs updating - please use bus_type methods PPP generic driver version 2.4.2 NET: Registered protocol family 24 bcm963xx_mtd driver v2.0 Registered device mtd[BCM63XX RootFS] dev[0] Flash[0xb814d8e0,6807552] brcmboard: brcm_board_init entry kerSysScreenPciDevices: 0x14e4:0x435f:(slot 0) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 9) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 10) detected kerSysScreenPciDevices: 0x14e4:0x6362:(slot 0) detected SES: Button Interrupt 0x1 is enabled sesBtn_mapIntr: is_sesBtn_irq_shared=0, sesBtn_irq=1 SES: LED GPIO 0x8004 is enabled WIFI: Button Interrupt 0x2 is enabled wifiBtn_mapIntr: wifiBtn_irq=2 PCIe: No device found - Powering down brcm_board_init: isShared=0, rstToDflt_irq=0 Register flash device: flash0 Serial: BCM63XX driver $Revision: 3.00 $ Magic SysRq enabled (type ^ h for list of supported commands) ttyS0 at MMIO 0xb0000100 (irq = 11) is a BCM63XX ttyS1 at MMIO 0xb0000120 (irq = 12) is a BCM63XX Total # RxBds=1592 bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized bcmxtmrt: Broadcom BCM6362B0 ATM/PTM Network Device v0.3 Apr 3 2015 15:26:21 GACT probability NOT on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1008 buckets, 5120 max) ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered ebt_ftos registered ebt_wmm_mark registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> pppox_fastpath_init! VFS: Mounted root (squashfs filesystem) readonly on device 31:0. Freeing unused kernel memory: 156k freed starting pid 193, tty '': '/etc/init.d/rcS' ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: EHCI Host Controller ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500 ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver PCI: Enabling device 0000:00:09.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: OHCI Host Controller ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. chipinfo: module license 'proprietary' taints kernel. Disabling lock debugging due to kernel taint brcmchipinfo: brcm_chipinfo_init entry Broadcom Ingress QoS Module Char Driver v0.1 Apr 3 2015 17:03:23 Registered<243> Broadcom Ingress QoS ver 0.1 initialized BPM: tot_mem_size=67108864B (64MB), buf_mem_size=6710880B (6MB), num of buffers=3153, buf size=2128 Broadcom BPM Module Char Driver v0.1 Apr 3 2015 17:03:22 Registered<244> [NTC bpm] bpm_set_status: BPM status : enabled NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v2.2 Apr 3 2015 17:03:24 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. Constructed Broadcom Packet Flow Cache v2.2 Apr 3 2015 17:03:24 bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM6362B0 Ethernet Network Device v0.1 Apr 3 2015 17:48:40 ETH Init: Ch:0 - 200 tx BDs at 0xa3add000 ETH Init: Ch:0 - 1261 rx BDs at 0xa3a10000 eth0.2: MAC Address: C4:E9:84:6A:F6:8C eth0.3: MAC Address: C4:E9:84:6A:F6:8C eth0.4: MAC Address: C4:E9:84:6A:F6:8C eth0.5: MAC Address: C4:E9:84:6A:F6:8C Broadcom 802.1Q VLAN Interface, v0.1 dns_init PPP MPPE Compression module registered PPTP driver version 0.8.5 pptp fastpath module init ... PPPoL2TP kernel driver, V1.0 pppol2tp_fastpath_init! Please press Enter to activate this console. [ dm_readFile ] 2061: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml [ initKernelMonitmonitor task is initialized pid= 391 orFd ] 468: kernelMonitorFd=6 [ initKernelMonitorFd ] 486: registered fd 6 with kernel monitor [ oal_sys_getOldTZInfo ] 431: Open TZ file error! Success ioctl: No such device ADDRCONF(NETDEV_UP): eth0.2: link is not ready device eth0.2 entered promiscuous mode ADDRCONF(NETDEV_UP): eth0.3: link is not ready device eth0.3 entered promiscuous mode ADDRCONF(NETDEV_UP): eth0.4: link is not ready device eth0.4 entered promiscuous mode Note: Loading 6300 MDK (default) driver for 6362 chip Note: Forcing 53115 driver for 53125 Switch MDK: num_switches = 2 Switch MDK: unit = 0; phy_pbmp = 0x0ADDRCONF(NETDEV_UP): eth0.5: link is not ready ; config_pbmp = 0x10 device eth0.5 entered promiscuous mode Switch MDK link poll thread: unit=1; phypbmp=0x1e Initializing unitBcmAdsl_Initialize=0xC01AFB90, g_pFnNotifyCallback=0xC01E1C94 0 in unmanaged request_irq failed for irq=23 (brcm_23) retval=-16 mode pSdramPHY=0xA3FFFFF8, 0xABCB1 0xDEADBEEF *** XfaceOffset: 0x21F90 => 0x21F90 *** *** PhySdramSize got adjusted: 0x90870 => 0xA693C *** AdslCoreSharedMemInit: shareMemSize=366237(366240) AdslCoreHwReset: pLocSbSta=829f8000 bkupThreshold=1600 AdslCoreHwReset: AdslOemDataAddr = 0xA3F8526C ***BcmDiagsMgrRegisterClient: 0 *** XTM Init: 315 rx BDs at 0xa3b0b000 XTM Init: 16 rx BDs at 0xa3b23880 --SMP support wl: dsl_tx_pkt_flush_len=338 wl: high_wmark_tot=2049 PCI: Setting latency timer of device 0000:00:00.0 to 64 wl: passivemode=1 wl: napimode=0 wl0: allocskbmode=1 currallocskbsz=256 Neither SPROM nor OTP has valid image wl:srom/otp not programmed, using main memory mapped srom info(wombo board) wl:loading /etc/wlan/bcm6362_map.bin wl: updating srom from flash... wl: updating srom from flash... srom rev:8 wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=16 wl0: Broadcom BCM435f 802.11 Wireless Controller 6.30.102.7.cpe4.12L08.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Chanspec set to 0x1806 wlctl: Unsupported wlctl: Bad Argument wl0: WLC_SET_VAR(bsscfg:join_pref): Invalid argument wl0: WLC_GET_VAR(psta_if): Invalid argument device wl0 entered promiscuous mode brctl: iface wl0.1: No such device brctl: iface wl0.3: No such device brctl: iface wl0.4: No such device brctl: iface wl0.2: No such device iptables: Bad rule (does a matching rule exist in that chain?). radvd starting ifconfig: ioctl 0x8913 failed: No such device [ wan_conn_pppoeConn ] 089: L2 interface not exist(up), don't start pppd! [ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid. [ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid. iptables: Bad rule (does a matching rule exist in that chain?). iptables: Bad rule (does a matching rule exist in that chain?). iptables: Bad rule (does a matching rule exist in that chain?). ip6tables: Bad rule (does a matching rule exist in that chain?). [ rsl_initDslIptvCfgObj ] 2014: DSL IPTV not enable or not firstInit. [ rsl_setStorageServiceObj ] 1251: mountFlag is 3,We start usb server killall: ushare: no process killed uShare (version 1.1a), a lightweight UPnP A/V and DLNA Media Server. Benjamin Zores (C) 2005-2007, for GeeXboX Team. See http://ushare.geexbox.org/ for updates.