Buffalo WZR-HP-AG300H

→ Install OpenWrt (generic explanation)

The easiest way to install OpenWrt is by using the firmware utility of the OEM web interface:

1. Connect to the WebInterface at http://192.168.11.1 and go to “Administration” → “Firmware Upgrade”
2. Upload the OpenWrt factory image you want to install
3. Make your PC obtain a new IP address from OpenWrt (dhclient eth0 or pump -i eth0 or ipconfig /renew)
4. proceed with checks_and_troubleshooting to complete installation

NOTE: It may happen, that the squashfs-factory.bin does not work for this device, if the factory image is based on DD-WRT. See this thread. Please update the thread with your experience or file a bug if you run into a problem. According to the user, for installation from DD-WRT the instructions on the WZR-600DHP page worked for him.

→ generic.flashing.tftp

Here is a link to the console output of the boot process, with all led's in view for reference http://www.youtube.com/watch?v=mAZNTKhpHig

• If your router has two red flashes of the DIAG LED followed by no flash and repeats then the flash failed or the image given is corrupt.
  • You can still recover with tftp. Start over and try again.
• The red “DIAG”-LED begins to flash rapidly when the router has received the image and is currently booting the new firmware.
• Successful flashes via tftp using Windows 7 directly plugged into the router have been done. It helps to add arp entries and disable media sensing as per the generic tftp instructions.
• Flash should have reset all settings as well. The IP address of the router should be 192.168.1.1 now since 192.168.11.1 is only for the bootloader at boot-time

Doing a power cycle may trigger a disconnect of the Ethernet which causes a reset the ARP info. Workaround:

• In one terminal have (but do not yet execute)
• ip address add 192.168.11.2/24 dev enps20; arp -s 192.168.11.1 02:aa:bb:cc:dd:20; curl -T openwrt-tftp.bin tftp//:192.168.11.1
  • Change enps20 out for your eth name ip address show
  • Change openwrt-tftp.bin for the version you downloaded
• Power on the router
• Count to 3
• Press enter on the terminal command from before
• Wait

Alternatively, use a switch in between your PC and the router, to prevent the link from going down while rebooting the router.

→ generic.sysupgrade

→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Press the 'USB/eject' button while the red 'DIAG' LED is blinking to enter Failsafe mode.

→ failsafe_and_factory_reset

If you want to trigger a LED as soon as an USB-Device is connected to your USB-Port, add this to /etc/config/system:

This switches on the little red circle of the DIAG-LED everytime you connect something to your USB-Port.

• It's very unlikely that you completely bricked the device, so first try the TFTP Method above. Note that a red diagnostics light blinking twice means your flash failed, but the device is ok and tftp will work (keep trying). If you still get nowhere, more drastic measures:

→ generic.debrick

root@OpenWrt:~# lspci -vv
00:11.0 Network controller: Atheros Communications Inc. AR922X Wireless Network Adapter (rev 01)
	Subsystem: Atheros Communications Inc. Device a097
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 168, Cache Line Size: 32 bytes
	Interrupt: pin A routed to IRQ 72
	Region 0: Memory at 10000000 (32-bit, non-prefetchable) [size=64K]
	Capabilities: [44] <chain broken>
	Kernel driver in use: ath9k

00:12.0 Network controller: Atheros Communications Inc. AR922X Wireless Network Adapter (rev 01)
	Subsystem: Atheros Communications Inc. Device a096
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 168, Cache Line Size: 32 bytes
	Interrupt: pin A routed to IRQ 73
	Region 0: Memory at 10010000 (32-bit, non-prefetchable) [size=64K]
	Capabilities: [44] Power Management version 2
		Flags: PMEClk- DSI- D1- D2- AuxCurrent=100mA PME(D0+,D1-,D2-,D3hot+,D3cold-)
		Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
	Kernel driver in use: ath9k

→flash.layout has an example flash layout and all explanations required to understand this. Here the naked hex-values for the WZR-HP-AG300H:

A collection of photos on how to open the case, of the PCB and the serial port can be found on https://picasaweb.google.com/111743287730172647732/BuffaloWZRHPAG300HHardwarePhotos .

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

Correct serial pinout:

1. Open case
2. Locate serial port pads next to the Movie Engine switch
3. Pinouts beginning from the square pad: vcc, gnd, tx, rx
4. Sends at 115200 8N1 as shipped
5. Voltage is 3.3 V

For USB/Serial I used a B&B Electronics TTL convertor with a ATEN UC232A. The VCC is not needed. Don't forget TX on the TTL goes to RX on the PCB etc. CuteCom on Linux works great (if you chmod 777 /dev/ttyUSB0)

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

→ hardware.button on how to use and configure the hardware buttons.

How to add tags