Linksys EA2700

Manufacturer's site: http://support.linksys.com/ea2700

There is another way to Flash your device, without using a serial connection.
These steps are to be used if you are running the factory cisco firmware.

Prepare:

• Download older crippled linksys firmware here
• Downgrade to a crippled version of the linksys firmware (FW_EA2700_1.0.14.129982) (see the linksys official guide to downgrading the EA2700)
• In the old style linksys GUI at http://192.168.1.1, you can now flash a new firmware

The stock layout (of the 64MiB flash chip):

00:00.0 FLASH memory: Broadcom Corporation Sentry5 Chipcommon I/O Controller (rev 02)
00:01.0 Network controller: Broadcom Corporation BCM4321 802.11b/g/n (rev 02)
00:02.0 Ethernet controller: Broadcom Corporation BCM47xx Sentry5 USB / Ethernet Controller (rev 02)
00:04.0 USB controller: Broadcom Corporation Device 471a (rev 02)
00:04.1 USB controller: Broadcom Corporation Device 471a (rev 02)
00:05.0 RAM memory: Broadcom Corporation Device 082e (rev 02)
00:06.0 Multimedia audio controller: Broadcom Corporation BCM47xx Sentry5 iLine32 HomePNA 2.0 (rev 02)
00:07.0 RAM memory: Broadcom Corporation Device 080e (rev 02)

bcm_robo_enable_switch: EEE is enabled
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.89.21 (r524987)
roboswitch: Probing device 'eth0'
roboswitch: trying a 53125! at eth0
roboswitch: found a 53125! at eth0

ÿ Decompressing...done
Decompressing...done
Found chip type AI (0x18a25357)
Chipc: rev 38, caps 0x90480109, chipst 0x3e512 pmurev 9, pmucaps 0x28a42a09
Found a Hynix NAND flash with 512B pages or 16KB blocks; total size 64MB
No PLL init done for chip 5357 rev 2 pmurev 9
si_kattach done. ccrev = 38, wd_msticks = 32


CFE version 5.119.138.2006 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fri Feb 17 08:48:15 CST 2012 (sip@datacom)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
si_doattach: incoming bus is PCI but it's a lie, switching to SI devid:0x4715
Found chip type AI (0x18a25357)
Chipc: rev 38, caps 0x90480109, chipst 0x3e512 pmurev 9, pmucaps 0x28a42a09
No PLL init done for chip 5357 rev 2 pmurev 9
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.119.138.2006
CPU type 0x19749: 480MHz
Tot mem: 65536 KBytes

CFE mem:    0x80700000 - 0x8086A0B0 (1482928)
Data:       0x80753D00 - 0x80757110 (13328)
BSS:        0x80757110 - 0x807680B0 (69536)
Heap:       0x807680B0 - 0x808680B0 (1048576)
Stack:      0x808680B0 - 0x8086A0B0 (8192)
Text:       0x80700000 - 0x80753D00 (343296)
Boot:       0x0086B000 - 0x008AB000
Reloc:      I:00000000 - D:00000000

Boot version: v1.3.1

Device eth0:  hwaddr 20-AA-4B-76-96-DE, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Booting(0): boot -raw -z -addr=0x80001000 -max=0x6ff000 nflash0.os:
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ........ 4808837 bytes read
Entry at 0x80001000
Closing network.
et0: link down
Starting program at 0x80001000
Linux version 2.6.22 (root@ubuntu) (gcc version 4.2.3) #1 PREEMPT Fri Feb 17 23:08:07 PST 2012
CPU revision is: 00019749
Found a Hynix NAND flash with 512B pages or 16KB blocks; total size 64MB
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal          0 ->    16384
  HighMem     16384 ->    16384
early_node_map[1] active PFN ranges
    0:        0 ->    16384
Built 1 zonelists.  Total pages: 16384
Kernel command line: root=/dev/mtdblock3 console=ttyS0,115200 init=/sbin/preinit
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 512 (order: 9, 2048 bytes)
CPU: BCM5357 rev 2 at 480 MHz
Using 240.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 59220k/65536k available (3876k kernel code, 6252k reserved, 571k data, 248k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 3.4 (2008/08/26) Phillip Lougher
NTFS driver 2.1.28 [Flags: R/W].
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.8)
io scheduler noop registered (default)
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: module loaded
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
pflash: found no supported devices
Found an ST compatible serial flash with 0 64KB blocks; total size 0MB
sflash: found no supported devices
The first offset=200000, 2nd offset=1400000
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 246
2nd offset 1400000
lookup_nflash_rootfs_offset: offset = 0x1400000
nflash: squash filesystem with lzma found at block 1398
Creating 6 MTD partitions on "nflash":
0x00000000-0x00080000 : "boot"
0x00080000-0x00200000 : "nvram"
0x00200000-0x01400000 : "linux"
0x003db4dc-0x01400000 : "rootfs"
0x01400000-0x02600000 : "linux2"
0x015db4dc-0x02600000 : "rootfs2"
Creating 1 MTD partitions on "brcmnand":
0x02600000-0x03f00000 : "brcmnand"
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
IPv4 over IPv4 tunneling driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
ebt_ulog: not logging via ulog since somebody else already registered for PF_BRIDGE
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 248k freed
Failed to execute /init
Failed to execute /sbin/preinit.  Attempting defaults...
Algorithmics/MIPS FPU Emulator v1.5
*******************************************************************

                   |           |
                 .|||.       .|||.
             ..:|||||||:...:|||||||:..
             C i s c o   S y s t e m s

   Copyright (c) 2011 by Cisco Systems, Inc. All Rights Reserved.   
   Booting bentley (firmware version 1.0.12.128947)
*******************************************************************
[utopia][init] System Initialization
No MTD partition located for /tmp, using tmpfs




bdutil board utility kernel module, version 1.2
bdutil board utility buttons kernel module, version 1.2
bdutil board utility LEDs kernel module, version 1.2
chmod: /tmp/etc/.root/passwd: No such file or directory
chmod: /tmp/etc/.root/shadow: No such file or directory
chmod: /tmp/etc/.root/group: No such file or directory
[utopia][init] Cannot find syscfg partition, assuming /dev/mtd6
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
[utopia][init] Late loading usb drivers
[utopia][init] Setting any unset system values to default
0xb000000 0x1000000
system_state-normal|/etc/led/solid.sh ; system_state-error|/etc/led/blink_15_sec.sh ; system_state-heartbeat|/etc/led/blink.sh ; fwupd-start|/etc/led/blink.sh ; fwupd-success|/etc/led/solid.sh ; fwupd-failed|/etc/led/blink_15_sec.sh ; wps-running|/etc/led/blink.sh ; wps-success|/etc/led/solid.sh ; wps-failed|/etc/led/blink_15_sec.sh ; wps-stopped|/etc/led/solid.sh ; led_ethernet_on|/etc/led/rear_all_default.sh ; led_ethernet_off|/etc/led/rear_all_off.sh ;\
0xc000000 0x1000000
0xd000000 0x1000000
0xe000000 0x1000000
0xf000000 0x1000000
0x10000000 0x1000000
0x11000000 0x1000000
0x12000000 0x1000000
0x13000000 0x1000000
0x14000000 0x1000000
0x15000000 0x1000000
0x16000000 0x1000000
0x17000000 0x1000000
0x18000000 0x1000000
[utopia][init] Starting bdutil daemon
BDUTIL daemon mode
Wed Jun 29 17:10:00 UTC 2011


(none) login: Device is Broadcom Router


(none) login:

(none) login: admin
Password: configuring interfaces for IGMP filtering

Lighttpd Model Base: EA2700
LUA does not exist: copy lighttpd.conf to /etc folder
Setting SSID: "Cisco10925"
Login incorrect
Cisco10925 login:
Cisco10925 login: Auto channel do not set chanspec, Warning

Cisco10925 login: Build temporary www configuration directory:
adminTSLIIHauhEfGE

Password:
login: can't chdir to home directory '/tmp/home/admin'
/ $ Setting SSID: "Cisco10925"
Restarting nfqrecv service... 

How to add tags