User Tools

Site Tools


Buffalo WZR-600DHP2

Supported Versions

Hardware Highlights

ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M portsGbit portsModemUSB
WZR-600DHP2Broadcom BCM47081800128256Broadcom BCM43228, Broadcom BCM43217b/g/na/n/ac-5-1x 2.0




Instruction set: ARM
Vendor: Broadcom
bootloader: cfe
System-On-Chip: BCM47081A0
CPU @Frq 800MHz
Flash size: 128 MiB NAND
Flash Chip: Zentel A5U1GA31ATS-BC
RAM size: 256 MiB
RAM Chip:
Wireless No1: BCM43217 w/ 2.2:2 MIMO for 2.4GHz 802.11b/g/n
Wireless No2: BCM43228 w/ 2.2:2 MIMO for 5GHz 802.11a/n/an
switch: (Gigabit, VLAN)
USB: Yes 1 x 2.0
Serial: Yes


Opening the case

Note: This will void your warranty!


port.serial general information about the serial port, serial port cable, etc.

After opening the case, you will find jumper J14 near the cpu with the big heatsink. This is the console serial port, with pins assigned as:

Pin 1 Pin 2 Pin 3 Pin 4
VCC (3.3v) Gnd TX RX

Console serial port parameters

  • Speed (baud rate): 115200
  • Bits: 8
  • Parity: None
  • Stop Bits: 1
  • Flow Control: None (both hardware and software flow control)

Connect your serial adapter (a generic CH340 USB to TTL adapter set to 3.3v is known to work) to J14 with crossed RX/TX as follows:

J14 Pin 1 Pin 2 Pin 3 Pin 4
Serial Adapter Not Connected Gnd RX TX

After powering on the router, type Control-C to interrupt the boot sequence until you see a CFE> prompt, at which point you will be in the Broadcom Common Firmware Environment (CFE) firmware interface.

Photo of PCB with markings


port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings



toh/buffalo/wzr-600dhp2.txt · Last modified: 2018/04/27 17:44 by tmomas