jiuweiljp 发表于 2019-2-23 15:54

编程器固件 TP-Link WDR5800 V2含ART,PL2303 win7 不蓝屏驱动

本帖最后由 jiuweiljp 于 2019-2-27 13:56 编辑

注意这是TP-Link WDR5800 v2.0 的固件,不要纠结附件的名称,













jiuweiljp 发表于 2019-2-23 15:57

原厂启动信息
---------------------------------------
U-Boot 1.1.4 (Oct 24 2016 - 12:34:59)

ap151 - Dragonfly 1.0

DRAM:64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 136k for U-Boot at: 83fdc000
Reserving 132k for malloc() at: 83fbb000
Reserving 44 Bytes for Board Info at: 83fbafd4
Reserving 36 Bytes for Global Data at: 83fbafb0
Reserving 128k for boot params() at: 83f9afb0
Stack Pointer at: 83f9af98
Now running in RAM - U-Boot at: 83fdc000
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 2048
Flash:8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
Fetching MAC Address from 0x83ff0e6c
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:0c:f0:60:dc:98
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
Autobooting in 1 seconds
## Booting image at 9f040000 ...
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 67108864

Starting kernel ...

[    0.000000] Linux version 3.3.8 (tplink@tplink-0B) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Mon Oct 24 12:37:26 CST 2016
[    0.000000] bootconsole enabled
[    0.000000] CPU revision is: 00019750 (MIPS 74Kc)
[    0.000000] SoC: Qualcomm Atheros QCA956X rev 0
[    0.000000] Clocks: CPU:775.000MHz, DDR:650.000MHz, AHB:258.333MHz, Ref:25.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone PFN ranges:
[    0.000000]   Normal   0x00000000 -> 0x00004000
[    0.000000] Movable zone start PFN for each node
[    0.000000] Early memory PFN ranges
[    0.000000]   0: 0x00000000 -> 0x00004000
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.Total pages: 16256
[    0.000000] Kernel command line:board=AP151 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 61404k/65536k available (2185k kernel code, 4132k reserved, 569k data, 180k init, 0k highmem)
[    0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:83
[    0.000000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.060000] pid_max: default: 32768 minimum: 301
[    0.060000] Mount-cache hash table entries: 512
[    0.070000] Initialized recycle list for cpu 0.
[    0.070000] NET: Registered protocol family 16
[    0.080000] gpiochip_add: registered GPIOs 0 to 22 on device: ath79
[    0.080000] MIPS: machine is Qualcomm Atheros AP151 reference board
[    0.090000] registering PCI controller with io_map_base unset
[    0.100000] bio: create slab <bio-0> at 0
[    0.110000] PCI host bridge to bus 0000:00
[    0.110000] pci_bus 0000:00: root bus resource
[    0.120000] pci_bus 0000:00: root bus resource
[    0.120000] pci 0000:00:00.0: invalid calibration data
[    0.130000] pci 0000:00:00.0: BAR 0: assigned
[    0.130000] pci 0000:00:00.0: BAR 6: assigned
[    0.140000] pci 0000:00:00.0: using irq 40 for pin 1
[    0.140000] Switching to clocksource MIPS
[    0.150000] NET: Registered protocol family 2
[    0.150000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.150000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    0.160000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[    0.160000] TCP: Hash tables configured (established 2048 bind 2048)
[    0.170000] TCP reno registered
[    0.170000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.180000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.180000] NET: Registered protocol family 1
[    0.200000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.200000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.210000] msgmni has been set to 119
[    0.220000] io scheduler noop registered
[    0.220000] io scheduler deadline registered (default)
[    0.230000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.250000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.260000] console enabled, bootconsole disabled
[    0.260000] console enabled, bootconsole disabled
[    0.270000] m25p80 spi0.0: found gd25q64CSIG, expected m25p80
[    0.280000] m25p80 spi0.0: gd25q64CSIG (8192 Kbytes)
[    0.280000] Searching for RedBoot partition table
[    0.290000] 9 RedBoot partitions found on MTD device spi0.0
[    0.290000] Creating 9 MTD partitions on "spi0.0":
[    0.300000] 0x000000000000-0x00000001d800 : "factory_boot"
[    0.300000] mtd: partition "factory_boot" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.320000] 0x00000001d800-0x00000001e000 : "factory_info"
[    0.330000] 0x00000001e000-0x000000020000 : "art"
[    0.330000] 0x000000020000-0x000000030000 : "config"
[    0.340000] 0x000000030000-0x000000040000 : "normal_boot"
[    0.340000] 0x000000040000-0x00000013d160 : "kernel"
[    0.350000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.360000] 0x00000013d160-0x000000600000 : "rootfs"
[    0.370000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    0.380000] mtd: partition "rootfs" set to be root filesystem
[    0.390000] 0x000000600000-0x000000800000 : "rootfs_data"
[    0.400000] 0x000000040000-0x000000800000 : "firmware"
[    0.400000] Registered character driver slp_flash_chrdev
[    0.410000] u32 classifier
[    0.410000]   Performance counters on
[    0.410000]   input device check on
[    0.420000]   Actions configured
[    0.420000] nf_conntrack version 0.5.0 (959 buckets, 3836 max)
[    0.430000] TCP cubic registered
[    0.430000] NET: Registered protocol family 17
[    0.440000] 8021q: 802.1Q VLAN Support v1.8
[    0.450000] Flash UID signiture check OK.
[    0.450000] ### of_selftest(): No testcase data in device tree; not running tests
[    0.460000] VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
[    0.470000] Freeing unused kernel memory: 180k freed
- preinit -
[    2.350000] JFFS2 notice: (328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
switching to jffs2
- init -

Please press Enter to activate this console. Mon Oct 24 04:37:00 UTC 2016
[    4.500000] ar71xx: invalid MDIO id 1
[    4.930000] ag71xx_mdio: probed
[    4.950000] ag71xx_mdio: probed
[    4.950000] eth0: Atheros AG71xx at 0xb9000000, irq 4
[    5.500000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.1:04
[    5.520000] eth1: Atheros AG71xx at 0xba000000, irq 5
[    6.070000] eth1: Found an AR934X built-in switch
[    7.360000] PPP generic driver version 2.4.2
[    7.670000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
[    7.680000] call therm_ctrl_hrtimer init here.
[    7.720000] ath_rate_atheros loaded
[    7.760000] reg or env therm is invalid, do not install HR Timer
[    7.810000] ath_tx99 loaded
[    7.960000] ath_dev loaded
[    9.500000] 2G Caldata: 02 02 00 02 03 04 05 06 00 00 00 00 00 00 00 00
[    9.510000] ath_tx_paprd_init sc 83350000 PAPRD Enabled
[    9.520000] ath_pci 0000:00:00.0: BAR 0: assigned
[    9.530000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   10.550000] 5G Caldata: 44 08 E8 93 04 01 00 03 7F 12 34 56 00 00 1F 00
[   10.560000] Swift firmware download
[   11.620000] ath_pktlog: module license 'unspecified' taints kernel.
[   11.630000] Disabling lock debugging due to kernel taint
[   11.660000] GRE over IPv4 demultiplexor driver
[   11.680000] GRE over IPv4 tunneling driver
[   11.690000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.830000] xt_time: kernel timezone is -0000
[   11.910000] NET: Registered protocol family 24
[   12.030000] p p t p driver version 0.8.5
[   12.410000] init conntrack_sip
[   12.430000] init nat sip
[   12.490000] nf_conntrack_rtsp v0.6.21 loading
[   12.510000] nf_nat_rtsp v0.6.21 loading
[   12.560000] Registered character driver slp_gpio_chrdev
wifi-freq
uci: Entry not found (protocol.wan.macaddr)
user did not configured wan mac, use default.
wifi-freq
[   16.580000] device eth1 entered promiscuous mode
Invalid command : st_ht_noamsdu
Invalid command : obss_rssi_th
Invalid command : obss_rx_rssi_th
[   24.000000] 8021q: adding VLAN 0 to HW filter on device ath0
[   24.000000] device ath0 entered promiscuous mode
[   24.020000] br-lan: port 2(ath0) entered forwarding state
[   24.020000] br-lan: port 2(ath0) entered forwarding state
[   24.090000] device ath2 entered promiscuous mode
[   24.100000] device wdscli0 entered promiscuous mode
Invalid command : st_ht_noamsdu
Invalid command : obss_rssi_th
Invalid command : obss_rx_rssi_th
Invalid command : vhtsubfer
Invalid command : vhtmubfer
Invalid command : vhtsubfee
Invalid command : vhtmubfee
[   25.770000] 8021q: adding VLAN 0 to HW filter on device ath1
[   25.770000] device ath1 entered promiscuous mode
[   25.780000] br-lan: port 5(ath1) entered forwarding state
[   25.780000] br-lan: port 5(ath1) entered forwarding state
[   25.840000] device wdscli1 entered promiscuous mode
[   26.020000] br-lan: port 2(ath0) entered forwarding state
[   26.290000] Lan ip: C0A80101, Lan mask: FFFFFF00
[   26.290000] wan dev name: eth0
[   26.490000] ----IGMP init begin------
[   26.490000] wan_dev_index = 255 lan_dev_name=br-lan wan_dev_name=eth0
[   26.500000] ----IGMP has been loaded------
[   27.270000] ol_vdev_start_resp_ev for vap 0 (832a0000)
[   27.280000] ol_ath_vap_join: join operation is only for STA/IBSS mode
[   27.280000] ol_ath_wmm_update:
[   27.290000] Notification to UMAC VAP layer
wlan has already started in etc/init.d/network script.
[   27.780000] br-lan: port 5(ath1) entered forwarding state
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
uci: Entry not found (guest_network.@guest_rule_2g)
uci: Entry not found (guest_network.@guest_rule_5g)
not ap mode, ignored.
not ap mode, ignored.
uci: Entry not found (guest_network.@guest_rule_2g)
uci: Entry not found (guest_network.@guest_rule_5g)
[   32.890000] br-lan: port 3(ath2) entered forwarding state
[   32.890000] br-lan: port 3(ath2) entered forwarding state
[   32.900000] 8021q: adding VLAN 0 to HW filter on device ath2
[   32.960000] br-lan: port 3(ath2) entered disabled state

starting pid 415, tty '/dev/ttyS0': '/bin/login'
SLP login:

jiuweiljp 发表于 2019-2-23 16:02

根据帖子
https://www.right.com.cn/FORUM/forum.php?mod=viewthread&tid=333060&page=1&extra=#pid3569225
知道怎么进uboot了
可以使用SecureCRT 软件用鼠标右键定义一串slp(就是让securecrt按一下右键就输入slp)
***操作方式插上电源后在securecrt 控制台中狂点鼠标右键,第一次就能进UBoot***
-----------------------------------------------
U-Boot 1.1.4 (Oct 24 2016 - 12:27:13)(COMPRESSED)

ap151 - Dragonfly 1.0

DRAM:64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 205k for U-Boot at: 83fcc000
Reserving 132k for malloc() at: 83fab000
Reserving 44 Bytes for Board Info at: 83faafd4
Reserving 36 Bytes for Global Data at: 83faafb0
Reserving 128k for boot params() at: 83f8afb0
Stack Pointer at: 83f8af98
Now running in RAM - U-Boot at: 83fcc000
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 2048
Flash:8 MB
Using default environment

Autobooting in 1 seconds
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
Fetching MAC Address from 0x83fefabc
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
GMAC: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
GMAC: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:0c:f0:60:dc:98
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
ath> slpslp

jiuweiljp 发表于 2019-2-23 16:03

本帖最后由 jiuweiljp 于 2019-2-23 21:40 编辑

WDR5800 uboot 能用的命令
---------------------------------------------------------------
ath> help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
help    - print online help
httpd   - start www server for firmware recovery
jmpaddr   - jump to a address
mct   - simple RAM test
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
progmac - Set ethernet MAC addresses
progmac2 - Set ethernet MAC addresses
reset   - Perform RESET of the CPU
setenv- set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath>

jiuweiljp 发表于 2019-2-23 16:04

本帖最后由 jiuweiljp 于 2019-2-23 16:07 编辑

显示 env参数。可以知道以下信息
1、Uboot 32kB
2、奇怪怎么有两个uboot啊
3、串口的速率就是115200不是"joeyjiaojg"在(https://www.right.com.cn/FORUM/thread-332892-1-1.html)帖子中说的128000.
4、ART在固件的最后64KB (这个好像不是很正确)
5、原厂的固件载入地址0x9f030000 (这个也有疑问,在启动信息中出现了 "Booting image at 9f040000" 我不知道uboot的载入点到底是0x9f030000还是9f040000)
6、如果如要tftp 写固件 电脑的ip需要是 192.168.1.10

----------------------------
ath> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:32k(u-boot1),32k(u-boot2),3008k(rootfs),896k(uImage),64k(mib0),64k(ART)
bootcmd=jmpaddr 0x9f030000
bootdelay=1
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
ipaddr=192.168.1.1
serverip=192.168.1.10
loadaddr=0x82000000
dir=
lu=tftp 0x80060000 ${dir}tuboot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap151${bc}-jffs2&&erase 0x9f010000 +$filesize&&cp.b $fileaddr 0x9f010000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f300000 +$filesize&&cp.b $fileaddr 0x9f300000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0

Environment size: 702/4092 byte

jiuweiljp 发表于 2019-2-23 16:11

本帖最后由 jiuweiljp 于 2019-2-25 13:15 编辑

openwrt 中能用的 art 文件




jiuweiljp 发表于 2019-2-23 16:55

在uboot 状态下输入httpd 路由器进入恢复模式,这时路由器前面板的两个蓝色灯交替闪烁。
在浏览器中输入 192.168.1.1可进到恢复模式,下面是控制台信息,在控制台中按ctrl+c 可以停止网页恢复模式。
---------------------------------------------------------
ath> httpd
HTTP server is ready!

Trying eth1
enet1 port2 up
dup 1 speed 1000
Attaching option 01 to list
Attaching option 03 to list
Attaching option 06 to list
file: apps/dhcpd/dhcpd.c,line: 870==:dhcpd init OK. --debug by HouXB
HTTP server is starting at IP: 192.168.1.1
file: lib_uip.c,line: 115==:uip set c0a8-101. --debug by HouXB
file: lib_uip.c,line: 130==:start infinite loop! --debug by HouXB
rport:54172; Request for: /
rport:54173; Request for: /logo.png
rport:54174; Request for: /favicon.ico
## Error: file not found!
rport:54175; Request for: /favicon.ico
## Error: file not found

jiuweiljp 发表于 2019-2-23 17:30

本帖最后由 jiuweiljp 于 2019-2-23 21:41 编辑

补个5800 串口图(TTL电平),可能有人需要



这是焊完插座的图,我只用个了3根针哦,vcc不用的


jiuweiljp 发表于 2019-2-23 17:55

本帖最后由 jiuweiljp 于 2019-2-23 21:42 编辑

上一些拆机图吧,主要配置如下 wdr5800 V2
---------------------------
cpu: qca9561 (介绍 http://superwrt.com/wiki/chips/qualcommatheros/qca9561)
memory: M14d5121632A (DDR2 64MB)
flash: 25Q64CS (串行8脚 8MB )
5g chip :qca 9887 (介绍 http://www.bitswrt.com/qca9887/)
5g 前端:射频前端(LNA+PA) SKY85703-11






jiuweiljp 发表于 2019-2-23 18:31

补充一下:
有时候在控制台进uboot是没有httpd命令(我挺纳闷?)
这是后输入reset 重启路由器,然后继续输入slp(方法见楼上的帖子),就有了!如下:
-------------------------------------------------------------
ath> ?
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
help    - print online help
mct   - simple RAM test
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
progmac - Set ethernet MAC addresses
progmac2 - Set ethernet MAC addresses
reset   - Perform RESET of the CPU
setenv- set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath> rteset
U-Boot 1.1.4 (Oct 24 2016 - 12:27:13)(COMPRESSED)

ap151 - Dragonfly 1.0

DRAM:64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 205k for U-Boot at: 83fcc000
Reserving 132k for malloc() at: 83fab000
Reserving 44 Bytes for Board Info at: 83faafd4
Reserving 36 Bytes for Global Data at: 83faafb0
Reserving 128k for boot params() at: 83f8afb0
Stack Pointer at: 83f8af98
Now running in RAM - U-Boot at: 83fcc000
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 2048
Flash:8 MB
Using default environment

Autobooting in 1 seconds
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
Fetching MAC Address from 0x83fefabc
ath_gmac_enet_initialize: reset mask:c02200
Dragonfly----> S27 PHY *
GMAC: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
ATHRS27: resetting s27
ATHRS27: s27 reset done
GMAC: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:0c:f0:60:dc:98
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x82
ath> help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
help    - print online help
httpd   - start www server for firmware recovery
jmpaddr   - jump to a address
mct   - simple RAM test
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
progmac - Set ethernet MAC addresses
progmac2 - Set ethernet MAC addresses
reset   - Perform RESET of the CPU
setenv- set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
ath> httpd
HTTP server is ready!

jiuweiljp 发表于 2019-2-25 15:19

这个路由器能用的openwrt 在我的 https://www.right.com.cn/FORUM/thread-469413-1-1.html

jiuweiljp 发表于 2019-2-26 21:51

本帖最后由 jiuweiljp 于 2019-2-26 21:58 编辑

最后发一个驱动 很多网友都有PL2303的ttl线,我也有还是在恩山卖的(当时用的XP系统),换电脑后在win7 下不能正常使用,找了很多驱动都没有解决。
最后买了根FTDI FT232Rl的ttl线(这个东西不错,在win7下用windows自带的驱动就可以稳定工作)

pl2303是不是就废了呢,我找了下还真有,测试了下没有问题,发出来给大家伙试试。

解决win7 win10,64位系统下PL2303 USB转串口驱动问题
      在win7 win10系统下PL2303很容易蓝屏;
      1、在更新某个USB转串口驱动后,出现了黄色叹号,无法识别设备,遇到提示"该设备无法启动(代码10)";      
      2、或者下载安装USB转串口驱动后,每次插USB转串口线,电脑就会蓝屏,终止代码:IRQL NOT LESS OR EQUAL
解决办法:
    1、下载驱动下载地址:
            
    2、拔下电脑上的PL2303 USB串口线适配器,并且运行驱动程序;
    3、当驱动提示“需要插入设备”时,再将串口适配器插入,点击继续;
    4、安装完成后,重启电脑;
    5、拔掉设备并且重新连接电脑,设备管理器设备不再显示“黄色感叹号”(且问题码为10)即可。
    注:该驱动需要微软.Net 3.5运行库,请通过Windows自行下载或通过驱动精灵的系统组件功能下载安装。
    .Net3.5下载地址:http://drivers.mydrivers.com/drivers/215_86199.htm
    注意:   
      — 运行安装该驱动前,请先卸载删除旧驱动。确定旧驱动删除后,再进行该驱动安装。
    对应硬件ID:
      usb\vid_067b&pid_2303

      通过上述商法进行操作即可解决故障正常使用PL2303

hxyxianyan 发表于 2019-4-1 15:01

膜拜一下大神。

yangsongliu1683 发表于 2019-6-19 15:16

我的WDR7800千兆版,进不了管理界面,用楼主的方法,连接TTL后输入HTTPD命令,在网页里居然能打开192.168.1.1,然后问TP客服拿了对应的固件进行升级,升级完了,满心欢喜地以为救活了,结果,路由器自动跳转登录界面不成功,还是进不去管理界面,郁闷啊,心情就像过山车一样。。。。。:Q:Q,不过还是感谢楼主提供的方法

yangsongliu1683 发表于 2019-6-19 15:47

更郁闷了,更新固件后,发现启动不了内核了,启动信息里没有了Starting kernel ...这是彻底变砖了么。。。。。。。。。。。。:'(:'(
页: [1] 2
查看完整版本: 编程器固件 TP-Link WDR5800 V2含ART,PL2303 win7 不蓝屏驱动