This device is NOT RECOMMENDED for future use with OpenWrt due to low flash/ram.
DO NOT BUY DEVICES WITH 4MB FLASH / 32MB RAM if you intend to flash an up-to-date and secure OpenWrt version onto it! See 4/32 warning for details.

1) This device does not have sufficient resources (flash and/or RAM) to provide secure and reliable operation.
This means that even setting a password or changing simple network settings might not be possible any more, rendering the device effectively useless. See OpenWrt on 4/32 devices what you can do now.

2) OpenWrt support for this device has ended in 2022.
19.07.10 was the last official build for 4/32 devices.

WARNING: Do not confuse the DG834GT with the DG834G V4!
Also note that the Wifi chip for this router is the Atheros AR2414 chip and not the Broadcom.
SoC Ram Flash LAN USB Serial JTag
Broadcom BCM6348@256MHz 16MiB 4MiB 4 x 1 USB 1.1 Host Yes Yes

The OEM firmware is Linux, you can reach it via telnet after opening the following web page of the router: http://your_router_ip_address_here/setup.cgi?todo=debug

The DG834GT became supported in OpenWrt release 10.03 'Backfire'. The image needed to flash onto a Broadcom 63xx-series board depends on the board, method you are using to flash, and, for web-based flash, on the version of the Broadcom code your router uses. The board name is 96348GW-10 and it has CFE codeversion 3.02. However, the quickest way to get OpenWrt on the device is using a precompiled image - the image file will be named openwrt-DG834GT_DG834PN-<file_system>-cfe.bin. The Backfire 10.03.1 release is well tested. Barrier Breaker 14.07 appears to work too. Memory is tight with later releases, and you may need to reduce the number of services running and/or download package files directly using the full URL (instead of using opkg update to get the indexes).

  • There is NO support for the ADSL modem currently!
  • The image file does NOT have support for WiFi, so you'll have to add it with
    opkg update


      opkg install kmod-ath
      opkg install kmod-ath5k

Equivalent for Barrier Breaker, but consuming less RAM:

opkg install
opkg install

There are three known methods to install OpenWRT on the DG834GT:

Convert an OpenWRT build (.bin file) to Netgear format (.img), and then use either NFTP or the router's web interface to flash the new image.

Create the image

  1. Get and unzip the directory DG834GT_V1.02.16_NA_src.
  2. In DG834GT_V1.02.16_NA_src directory create an empty file named and insert the code from post 424 on
  3. Put the OpenWrt image (.bin) in the DG834GT_V1.02.16_NA_src directory.
  4. In a terminal cd into DG834GT_V1.02.16_NA_src and execute something like
    ./ DG834GT_V1.02.16.img openwrt-96348gw-10-squashfs-cfe.bin openwrt-DG834GT-

    Where first file is the Netgear supplied image, second file is OpenWrt downloaded one and third file is whatever you want to name the new image.

Install using NFTP

  1. Get code for patched NFTP program from here,5842.msg148308.html#msg1483088 then compile NFTP to get a binary.
  2. Put the newly created image e.g. named “openwrt-DG834GT-” in this example in the same folder as the binary NFTP file.
  3. Put router in flashing mode by pulling out the power plug, start pressing the reset button, inserting power and then keep pressing reset until LEDs flash alternatively. Then execute something like
    sudo ./ntfp -u eth0 openwrt-DG834GT-

    where the last file is the new image created by file earlier on.

  4. Power cycle the router around 3 times, making sure everything has initialized properly before going for the next cycle.

Install using web interface

For an easier upload method than messing around with NFTP, once you have made the openwrt-DG834GT- file, it can be uploaded through the original web interface / flash upgrade router procedure.

I used the instructions above and loaded Backfire 10.03.1 successfully.

NOTE: for users of a SKY DG834GT with the locked bootloader you still need to use NFTP to flash because the web interface will not work. The bootloader checks the image and it does not allow flashing.

On Windows you can use Netgear's supplied firmware recovery tool, but you need to make some alterations to the image file before it will be acceptable to the tool. You need to prepend the second stage bootloader to the image, then pad the image out to make it a multiple of 1024 bytes, and then ensure that the Netgear model and version information is present.

The first few parts of this are done based around the instructions found in this forum post. Roughly speaking the steps you'll need to follow are:

  1. Start with an official firmware, and extract the first 65536 bytes. head -c 65536 <netgear-firmware.img> > 2bl.bin
  2. Figure out how much padding is needed to make the file length a multiple of 1024 bytes. dd if=/dev/zero of=padding.bin bs=<bytesneeded> count=1
  3. Prepend the extracted data to the beginning of the openwrt firmware and append the padding to the end. cat 2bl.bin openwrt.bin padding.bin >file_to_flash.img
  4. Use the Broadcom Firmware Tool found from SkyUser Forum to add the Netgear information to the firmware file. This is done by loading the firmware image (file_to_flash.img) into the tool, selecting the Netgear/Sercomm tab, then adding “DG834GT” as the target platform and a version number as the “version ID”. You can then “Save As”, ensuring the file is saved as a “Netgear Firmware Image” rather than the default Broadcom Firmware Image“.
  5. Boot the DG834GT into recovery mode by holding the reset button down whilst powering it up. The power and status lights should flash alternately.
  6. Ensure the new firmware file is in the same directory as the Netgear Firmware Recovery Tool (remove the existing firmware file to avoid confusion).
  7. Use the Recovery Tool to flash the firmware on a 32bit Windows system.

If you are working on Windows, this author would strongly suggest having UNIX tools at your disposal to make life a little easier. This could be as simple as UnxUtils or as complex as Cygwin. Note that if you're using UnxUtils, you can't point dd at /dev/zero. Instead, point it at a real file, on the understanding that first few bytes (up to 1023) of the real file will turn up at the end of the image.

If you don't get the padding right, then the Firmware Recovery Tool will hang at 99%, and the power and status lights will flash quickly. Don't panic - the chances are that the firmware has flashed ok, but you'll need to power cycle the router.

The Netgear Firmware Recovery tool basically does the same as the NFTP tool, discovering the device using type 0x8888 Ethernet frames, and then communicating with the firmware using the same frame type. No TFTP is used by the Firmware Recovery tool or by NFTP.

WARNING: Some DG834GT devices appear to have problems with the bootloader and serial port. This may make the device's serial port effectively inaccessible!

The second method needs access to the device serial port. You will need a level shifter to connect an RS232 port, or alternatively you may be able to use one of the older USB to mobile phone serial connection cable, or even something like the BusPirate. The DG834GT operates at 3.3V, so whatever you use must be able to interface at this voltage. The UART connection is a row of four pads below the WiFi card connector, see below for pinout. You will need to solder either pins or wires to the pads.

  1. Connect to the serial port on the DG834GT with the power off on the device.
  2. Set your PC to have a static IP address in the range.
  3. Start a TFTP server on your PC, and put the OpenWrt firmware file in it's root directory. (E.G. openwrt-DG834GT_DG834PN-squashfs-cfe.bin)
  4. Ensure you have your terminal software set to 115200 baud, 8N1.
  5. Power the DG834GT up, and quickly hit any key on your terminal.
  6. This should get you the CFE> prompt. If you just got random rubbish on the screen, you have a DG834GT that has problems with the serial port and bootloader. You may have to try using NFTP or the Netgear Firmware Recovery tool instead.
  7. In the serial terminal, type
    flashimage [your_pc_ip_address]:openwrt-DG834GT_DG834PN-squashfs-cfe.bin

After the flashing has finished your router reboots. Wait for about two minutes until OpenWrt has booted, get a static IP address in range and then connect to the router at via telnet. This is the default address for a fresh OpenWrt installation. Set the password with passwd and log out using exit. Telnet will not work anymore from this point on, but SSH will.

Beside SSH you can now access the web interface on to complete basic configuration of your new router.

The OpenWrt image file does NOT have support for WiFi, so you'll have to install the necessary kernel modules. To do so the router needs internet access, which you can get in two ways:

Assigning a WAN port with DHCP

The OpenWrt image has a static IP address ( which may not be in the subnet of the network the DG834GT is plugged into. To circumvent this you can use the VLAN functionality to separate one of the switch ports for usage as WAN port with DHCP. To do so replace the /etc/config/network with the following:

config 'switch' 'eth1'
	option 'enable' '1'
	option 'enable_vlan' '1'
	option 'reset' '1'

config 'switch_vlan' 'vlan0'
	option 'vlan' '0'
	option 'device' 'eth1'
	option 'ports' '1 2 3 5*'

config 'switch_vlan' 'vlan1'
	option 'vlan' '1'
	option 'device' 'eth1'
	option 'ports' '0 5t'

config 'interface' 'loopback'
	option 'ifname' 'lo'
	option 'proto' 'static'
	option 'ipaddr' ''
	option 'netmask' ''

config 'interface' 'lan'
	option 'type' 'bridge'
	option 'ifname' 'eth1.0'
	option 'proto' 'static'
	option 'ipaddr' ''
	option 'netmask' ''
	option 'nat' '1'
	option 'mtu' '1500'

config 'interface' 'wan'
	option 'ifname' 'eth1.1'
	option 'mtu' '1492'
	option 'proto' 'dhcp'

This configuration by misteroX separates port number 4 of the switch to be used as a WAN interface. It will try to automatically get an IP address using DHCP.

Connect the router to your wired network using port 4 and use one of the remaining ports to connect to your PC. Reboot the router and use ifconfig to check if you have an IP assigned for eth1.1. If so you can proceed to Installing the driver.

Using a GNU/Linux PC to forward internet

During the Installation of the wireless driver the device self-reboots. This works around that. The following assumes that you have left the default IP address on the DG834GT.

On the GNU/Linux PC configure the ethernet controller to the DG834GT with a static IP so you can telnet then SSH to it.

sudo ifconfig eth0 netmask
Configure DG834GT to use PC as internet provider

Modify /etc/config/network so the gateway is the laptop. Add the following gateway line to the config interface lan section.

config interface lan
	option type     bridge
	option ifname   eth1
	option gateway

Add to the System;Startup;Local Startup post boot script (via web interface) so it appends an external nameserver to resolve.conf. Alternatively you could edit /etc/rc.local. is a valid name server.

echo search lan > /etc/resolv.conf
echo nameserver >> /etc/resolv.conf
exit 0
PC forwarding

Configure the GNU/Linux PC to forward traffic from the ethernet to the internet with the following script. Tailor the interfaces to your environment.

#assumes PC eth0 is connected to DG834GT and will have IP
#allow the netgear to get info from the inet via this laptop.

function verbose 
    echo $*

echo 1 > /proc/sys/net/ipv4/ip_forward


#setup static IP on interface to the netgear
verbose ifconfig eth0 $IP netmask

#set up routing
verbose iptables -t nat -A POSTROUTING -o $EXT -j MASQUERADE
#allow router to connect out and remote servers to respond
verbose iptables -A FORWARD -i $INT -o $EXT -j ACCEPT
verbose iptables -A FORWARD -i $EXT -o $INT -m state    --state RELATED,ESTABLISHED -j ACCEPT
PC looses internet

Occasionally the PC may loose the internet. It might prioritize routing traffic through the DG834GT rather than the interface to the internet. In the following replace with your router's IP.

sudo route del default
sudo route add default gw

Installing the driver

At the shell:

opkg update
opkg install kmod-ath
opkg install kmod-ath5k

The DG834GT can appear to hang, as the files being downloaded and configured are large. Downloading the dependencies separately is unnecessary, but gives more feedback. Note that the device may reboot between drivers.

After the installation has finished edit /etc/config/wireless and comment out or delete the line:

option disabled 1

Enter command wifi. You should now see a wireless network with SSID “OpenWrt” (if you did not change the default settings). The web interface will now have Network;Wifi available.

If you used the internet forwarding method with a PC undo the changes to /etc/config/network and System;Startup;Local Startup.

Hi everyone, i am a 16 year old who found it very frustrating when it came to creating the image for this router i had many obstacles in my way, i had to install linux and my pc is very picky with oses, modifying the code to work with new source/image etc. i've spent many hours on trying to build the image, then finally kaboom i built the image, i am sharing the pre-built image i have made because there is no trace of a fully built openwrt for the dg834gt lurking on the internet, i hope you all benefit from my work, and also if you have the sky router (i have the sky router) the image can be flashed from the upgrade tab in the settings so no need to use nftp etc. the image : My github is ishi0 so go and have a look if you are interested

Architecture: MIPS big endian
Vendor: Broadcom
bootloader: CFE
Board Id: 96348GW-10
System-On-Chip: BCM6348KPBG
CPU/Speed BMIPS3300 V0.7 / 256 MHz
Flash-Chip: MX 29LV320BTC-70G
Flash size: 4 MiB
RAM chip: IC42S32400
RAM size: 16 MiB (1Mx4x32bit)
Wireless: Atheros AR2414 MiniPCI (802.11bg)
Ethernet: BCM5325 w/ vlan support swconfig
Internet: ADSL2+
USB: Yes USB 1.1 unpopulated
Serial: Yes

Serial console is J503, below the Wifi card connector. No pins are pre-soldered.

Settings are: 115200, 8N1

pin signal
2 TX
3 3V3
4 RX

Jtag Port is J201; this port is verified.

Disposition on the board:

2 4 6 8 10 12
1 3 5 7 9 11

JTAG signals and pins

TCK 9 10 GND
nSRST 11 12 GND

nTRST and nSRST are internally connected

See port.jtag for more JTAG details.

I have traced all the GPIO signals on my device. The connected means that there is a trace connected to the pad. The nc means the pad is not connected. Any placement notifications are mentioned in the LAN ports upper orientation.

GPIO BGA pad connected
GPIO_0 AB5 _ (Power LED)
GPIO_1 AC5 LED 2 (Orange Tick LED)
GPIO_2 AD1 connected (Orange ADSL LED)
GPIO_3 AD2 LED 4 (Wireless LED)
GPIO_4 AD4 connected reset
GPIO_5 AD3 LED 3 (Hidden LED)
GPIO_6 AE3 connected
GPIO_7 AD5 connected via left from the R514 label (Green ADSL LED)
GPIO_8 AE5 connected
GPIO_9 AE4 connected
GPIO_10 AF4 connected near the GPIO_13 via
GPIO_11 AF3 connected via under the BGA
GPIO_12 AB9 connected
GPIO_13 AF5 connected via at the C511 upper left corner
GPIO_14 AC9 connected
GPIO_15 AD9 connected
GPIO_16 H4 connected via near at the right upper corner of R204
GPIO_17 J2 connected the trace goes under the R617
GPIO_19 J4 connected th the via near the J letter at the left side of the CPU
GPIO_29 AC3 connected
GPIO_32 AF9 connected
GPIO_33 Y24 NC
GPIO_34 Y25 NC
GPIO_35 W24 NC
GPIO_36 W25 NC

With access to Serial Console is possible to restore the firmware on the router from bootloader CFE. CFE can download the image with TFTP see the installation method 2.

Attention to use the command e for erase the whole flash when CFE can't read the tag it delete all flash also the CFE. For example if the flash is empty by dd if=/dev/zero of=/dev/mtd1 the tag not exist. When the CFE is erased the only method to restore it is the JTAG Port. Dump of the CFE with dd if=/dev/mtd2 is in format BigEndian, but the dump with JTag Cable is in format LittleEndian so for restore a CFE need convert the image file.

Without access to Serail Console, if you wish to restore the unit to OPENWRT's defaults, you can execute the command ” mtd -r erase rootfs_data “, as a side note, DO NOT erase 'rootfs' or the device will be semi bricked, and your probably going to need to use a serial cable to recover it, as I do. I was hoping to trigger CFE to drop into a mode it might accept tftp, but instead Im pretty sure its stalling after the bootloader has finished, but cant find where to move onto next.

There is an unpopulated USB port near right from reset button.


If you want to use it you need to solder the USB connector and the following parts:

C515 Polarized capacitor, 470 uF
C516 Capacitor 100nF size: 0805
FB1 Resistor 0 Ohm size: 0805
C124 Capacitor 100nF size: 1210
U102 5 Volt voltage regulator SOT-223 package
J502 Simply short it with a wire

Warning!Be careful with the voltage regulator! If you want to use an USB device which is powered from the USB port (usb stick, webcamera, etc.), you should not use SOT-223 package regulator, because it could not dissipate the amount of power.

Let's calculate. The input voltage is 12 Volt (or a bit more) the output is 5 Volt. So the regulator will dissipate (12-5)*current power. For example my webcam need 100 mA power according to it's description. So the regulator in my case will dissipate 7 V *0,1A = 0,7 W power. This amount of power cannot be handled by an SOT-223 package. Regulators in TO-220 package will do it better. The best choice is a small switching mode DC-DC converter.


Unfortunatelly there are some hardly solderable 0402 size parts are missing too.

R515, R514 between 16 and 44 Ohm
R516, R517 15 KOhm
C511, C512 47 or 50 pF

There is an other thing what is have to be done: You have to pull the BCM6348's USB_FLT pin to the 3V3. This pin is connected to a via located in the half way between C702 and C423.


Solder a thin Cuz wire to it and connect it to the 3V3. The easiest place to find the 3V3 is the serial connector (J503) third pin. Connect to it with an 2K resistor.

Power up your device, and do

cat /proc/bus/usb/devices

and you should see your olugged in usb devices details there.

There is a place to an unpopulated footprint for an SPI flash: the U504 right to the main flash.


SPI_SSB (Chip select) 1 2 3V3
SPI_MISO 3 4 3V3

This pinout is verified on a board with desoldered CPU using this pad layout which is generated from the CPU's BSDL file:

I think it is possible to attach SPI devices to it, but until this time I have not succeded with the spidevtest. The spi device file could be created with:

mknod /dev/spi0 c 153 0 
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2021/12/05 11:52
  • by tmomas