DIR 868L刷advancedtomato忘记清nvram变砖，ttl成功修复

wz16***

    在恩山呆了这么久，基本没怎么发帖子，自己实践的机会也不多，再加上也没什么经验，故一直在潜水~~~这次心血来潮，实在受不了办公室里的wifi经常连不上或者连上无网速，就想着刷个带QOS的固件，如tomato之类的。
    国内基本查不到什么有用资料，后来谷歌了一点，就按教程操作，由于是英文版，就着四级的水准，加上谷歌翻译，差不多看懂了；
一开始一直刷不上tomato，后面找到最早的一版tomato固件，终于成功，然后web端顺利刷入advancedtomato。
看着折腾几个晚上终于刷上advancedtomato了，一高兴忘记了最后一步，也是最重要的一步——清空NVRAM，后面一断电，电源灯就一直黄灯闪闪闪~~~
    砖了，不过不是全砖，ttl=100，还能进原厂的恢复模式，只不过进了恢复模式上传固件之后，黄灯还是一直闪。
没办法，接着查资料吧，还是在国外的网站查到，是未清空nvram的缘故，且有玩家用ttl清空nvram之后成功修复，于是就有了接下来的故事···
在此之前，有购买USB-TTL线，CH340G和FT232各一个，但是从未用ttl刷过，买来之后只是短接RX和TX测试了下好坏。于是拿到公司，拆开路由，傻眼了，路由上未标记接口定义，继续谷歌，最终确认如下图：

公司的财产，不能随意带出公司，在办公室也不方便上电烙铁焊接TTL插针，故用这种简易的方式连接。。。
顺带说一句，在得到正确的线序之前，SecureCRT和putty输出乱码的问题，走了很多弯路，试了调整波特率，甚至还购买了PL2303的ttl线，鳄鱼夹，ttl插针，想着再不行就上电烙铁焊接了，今晚上调整了一下GND，此前一直接在RX右边的那个触点上，晚上试了下接在未上焊锡的那个洞里，不曾想putty终于不再输出乱码了，后面顺利输入nvram erase，成功复活。启动信息也保留了下来，放在二楼，不知道有无价值。

wz16***

1. SVN revision: 810
   
2. Decompressing...done
   
3. 
   
4. R 1.13
   
5. 07DC06011801080000000000001A103F01000000
   
6. 
   
7. S300402E3
   
8. 000023B0
   
9. 
   
10. 00000004
    
11. 00000050
    
12. 0000003100000031
    
13. 
    
14. SVN revision: 810
    
15. Decompressing...done
    
16. Found a ST compatible (Marconix) serial flash with 32 64KB blocks; total size 2MB
    
17. 
    
18. 
    
19. CFE version 6.30.163.18 (r377098) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
    
20. Build Date: Fri Mar  8 14:09:35 CST 2013 (tom_lin@RangeRover)
    
21. Copyright (C) 2000-2008 Broadcom Corporation.
    
22. 
    
23. Init Arena
    
24. Init Devs.
    
25. Boot partition size = 262144(0x40000)
    
26. Found a AMD NAND flash:
    
27. Total size:  128MB
    
28. Block size:  128KB
    
29. Page Size:   2048B
    
30. OOB Size:    64B
    
31. Sector size: 512B
    
32. Spare size:  16B
    
33. ECC level:   8-bit
    
34. Device ID: 0x01 0xf1 0x00 0x1d 0x01
    
35. DDR Clock: 533 MHz
    
36. Info: DDR frequency set from clkfreq=800,*533*
    
37. et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.30.163.18 (r377098)
    
38. CPU type 0x0: 800MHz
    
39. Tot mem: 262144 KBytes
    
40. 
    
41. CFE mem:    0x00F00000 - 0x01092CA4 (1649828)
    
42. Data:       0x00F5A758 - 0x00F5AC9C (1348)
    
43. BSS:        0x00F5ACA8 - 0x00F90CA4 (221180)
    
44. Heap:       0x00F90CA4 - 0x01090CA4 (1048576)
    
45. Stack:      0x01090CA4 - 0x01092CA4 (8192)
    
46. Text:       0x00F00000 - 0x00F4F474 (324724)
    
47. Boot:       0x01093000 - 0x010D3000
    
48. Reloc:      I:00000000 - D:00000000
    
49. 
    
50. Board Name: WRGAC02
    
51. SVN revision: 810
    
52. We disable the arp for self.
    
53. emergency web server running ...
    
54. We disable the arp for self.
    
55. Device eth0:  hwaddr 00-90-4C-0F-F0-18, ipaddr 192.168.0.1, mask 255.255.255.0
    
56.         gateway not set, nameserver not set
    
57. [ALPHA] PRESS Ctrl-C TO ENTER EMERGENCY MODE ...
    
58. Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
    
59. Loading: Failed.
    
60. Could not load :: Timeout occured
    
61. Dest=00008000, source =02000000, filename=nflash1.trx
    
62. [/home/tom_lin/dir868/bcm4708_ARM/src/cfe/cfe/arch/common/board/bcm947xx/src/ui_bcm947xx.c alpha_load 298] seama header magic mismatched
    
63. Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
    
64. Loading: .... 4144640 bytes read
    
65. Entry at 0x00008000
    
66. Closing network.
    
67. emergency web server closing ...
    
68. Starting program at 0x00008000
    
69. console [ttyS0] enabled, bootconsole disabled
    
70. serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
    
71. brd: module loaded
    
72. loop: module loaded
    
73. pflash: found no supported devices
    
74. Boot partition size = 262144(0x40000)
    
75. Creating 2 MTD partitions on "bcmsflash":
    
76. 0x000000000000-0x000000040000 : "boot"
    
77. 0x0000003f0000-0x000000400000 : "nvram"
    
78. Found a AMD NAND flash:
    
79. Total size:  128MB
    
80. Block size:  128KB
    
81. Page Size:   2048B
    
82. OOB Size:    64B
    
83. Sector size: 512B
    
84. Spare size:  16B
    
85. ECC level:   8 (8-bit)
    
86. Device ID: 0x 1 0xf1 0x 0 0x1d 0x 1 0xf1
    
87. lookup_nflash_rootfs_offset: offset = 0x0
    
88. nflash: squash filesystem with lzma found at block 13
    
89. Creating 2 MTD partitions on "nflash":
    
90. 0x000000000000-0x000002000000 : "linux"
    
91. 0x0000001a6dd8-0x000002000000 : "rootfs"
    
92. PPP generic driver version 2.4.2
    
93. PPP MPPE Compression module registered
    
94. NET: Registered protocol family 24
    
95. PPTP driver version 0.8.5
    
96. === PPTP init ===
    
97. Mirror/redirect action on
    
98. u32 classifier
    
99.     Actions configured
    
100. Netfilter messages via NETLINK v0.30.
     
101. nf_conntrack version 0.5.0 (3990 buckets, 15960 max)
     
102. xt_time: kernel timezone is -0000
     
103. ip_tables: (C) 2000-2006 Netfilter Core Team
     
104. TCP cubic registered
     
105. NET: Registered protocol family 10
     
106. ip6_tables: (C) 2000-2006 Netfilter Core Team
     
107. NET: Registered protocol family 17
     
108. L2TP core driver, V2.0
     
109. PPPoL2TP kernel driver, V2.0
     
110. 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
     
111. All bugs added by David S. Miller <davem@redhat.com>
     
112. Registering the dns_resolver key type
     
113. Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
     
114. NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
     
115. Spare area=64 eccbytes 56, ecc bytes located at:
     
116. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
     
117. Available 7 bytes at (off,len):
     
118. (1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
     
119. Scanning device for bad blocks
     
120. Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
     
121. Creating 2 MTD partitions on "brcmnand":
     
122. 0x000002000000-0x000008000000 : "brcmnand"
     
123. 0x000004000000-0x000008000000 : "jffs2"
     
124. VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
     
125. devtmpfs: mounted
     
126. Freeing init memory: 216K
     
127. 
     
128. 
     
129. Hit ENTER for console...
     
130. 
     
131. emf: module license 'Proprietary' taints kernel.
     
132. Disabling lock debugging due to kernel taint
     
133. et_module_init: passivemode set to 0x0
     
134. et_module_init: txworkq set to 0x0
     
135. et_module_init: et_txq_thresh set to 0x0
     
136. eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.86 (r456083)
     
137. wl_module_init: passivemode set to 0x0
     
138. wl_module_init: txworkq set to 0x0
     
139. PCI: Enabling device 0001:01:00.0 (0140 -> 0142)
     
140. eth1: Broadcom BCM4331 802.11 Wireless Controller 6.37.14.86 (r456083)
     
141. eth2: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.86 (r456083)
     
142. / # vlan1: cmd=14: Operation not supported
     
143. lo: File exists
     
144. vlan1: cmd=14: Operation not supported
     
145. vlan1: cmd=14: Operation not supported
     
146. vlan1: cmd=14: Operation not supported
     
147. vlan1: cmd=14: Operation not supported
     

复制代码

t***

868L

yan1***

DIR 868L刷advancedtomato忘记清nv

wtcy***

我也忘记清nvram，现在变砖了，请教大神这个要怎么拆机啊？下面三颗螺丝拆了，壳子感觉还是很牢。

nxh***

大神，这是怎么回事?也是868L

mi***

求大神恩赐准确TTL接线，现在用CH340G转接线，无论57600还是115200都没有反应，还不要说乱码了

mofa***

努力挣恩币~顶 下

nxh***

希望楼主能出个教程，造福网友

wz16***

nxh1129 发表于 2017-4-29 10:20
希望楼主能出个教程，造福网友

抱歉，上次发完帖子就换工作了，后来一直怎么上论坛，最开始的资料是谷歌找到的，不知道还能不能找到

wz16***

http://www.dd-wrt.com/wiki/index.php/D-Link_DIR-868L
这是dd-wrt官网上对868l刷机的资料，可以参考

nxh***

wz161996 发表于 2017-5-1 22:16
http://www.dd-wrt.com/wiki/index.php/D-Link_DIR-868L
这是dd-wrt官网上对868l刷机的资料，可以参考

O(∩_∩)O谢谢

zjcy***

我也不知道，在研究中..

siu***

厉害，学习·········

ahf***

楼主能不能来个详细教程  我和你一样情况 但是接TTL没有信息