User Tools

Site Tools


EnGenius ESR-6670 / ZyXEL NBG-417N / ZyXEL NBG-4415

This router is based on the Ralink RT3052 Soc. With the original firmware it was capable to distribute internet connection from an USB HSDPA stick. It has 1 WAN and 2 LAN ports.

The PCB have the numer: 7016A0294010 V-1.10

The ZyXEL have only one antenna and no soldered Serial connector.

Currently there is no support for this device, but there are several RT3052F based devices supported.



Architecture MIPS
Vendor Ralink
Bootloader Uboot
System-On-Chip Ralink RT3052
CPU Speed 384MHz
Flash-Chip MX 29LV320DTTI - 70G
Flash size 4MB
RAM EtronTech EM63A165TS-6G 16MB 166Mhz SDRAM
Wireless Ralink RT3052 (integrated)
Ethernet Ralink RT3052 (integrated)
Serial Yes
Power supply 12V 1.25A

Opening the case

Note: This will void your warranty!

  • There is only one screw in the middle of the device. Check the board picture below for it's position.

Board images



Console port CN1 uses 3.3 V signaling at speed 57600 8n1. Header is pre-installed on EnGenius. Not pre-installed on ZyXEL.

1 2 3 4


There is a 14 pin unpopulated SMD pinhead near the reset button. it should be JTAG. The pins marked with ? are unknown currently, but research is in progress. Probably this is EJTAG 2.5 compilant.

? 1 2 GND
? 3 4 GND
? 5 6 GND
? 7 8 GND
? 9 10 GND
? 11 12 ?
? 13 14 3V3


Stock firmware startup log

U-boot Ver: 2009/09/25

Board: Ralink APSoC DRAM:  32 MB  1*32 MB
ASIC 3052_MP2 (Port5<->None)
Product Name: ESR-6670
SDRAM CAS = 3(d1835272) 

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 

LINUX started...
init started: BusyBox v1.7.5 (2010-01-11 10:07:29 CST)
starting pid 152, tty '/dev/console': '/sbin/config_init'
Config Init version: date: 2010/01/11
starting pid 209, tty '/dev/ttyS1': '/sbin/config_term'
*                                 ESR-6670                             *

KernelApp/Ramdisk Ver:			 Date:2010/01/11
console> cat: can't open '/apps/lib/modules/2.6.21/modulesApp.dep': No such file or directory
ln: /sbin/./apps_init: File exists

unfortunatelly I have not found any way to interact with the device on the serial port. Hitting 1 does not effect anything, and in the console prompt I have not find any working command. Hitting Ctrl+C kills the console, –so the communication to the device works too on the serial line– but it starts again:

process '/sbin/config_term' (pid 209) exited. Scheduling it for restart.
starting pid 460, tty '/dev/ttyS1': '/sbin/config_term'


toh/engenius/esr6670.txt · Last modified: 2018/06/17 10:25 by tmomas