User Tools

Site Tools


Netgear DGN1000

Netgear DGN1000 is currently unsupported!

A little work has been done (2016-05) in getting DGN1000SP variants to boot trunk kernels, but it's not useful yet. See the forum thread for details. This work is resurrection of a neglected device; support for most of the platform was added inbetween Attitude Adjustment and Barrier Breaker, but it fell unmaintained before Barrier Breaker froze.

Even if this effort bears fruit, only the 32/8 (e.g. DGN1000SP) variants stand a chance of being supported. 16/4 variants are too small, and the Attitude Adjustment images that would fit on them have some undiagnosed failures in the flash driver.

Supported Versions

This router has the following versions/models.

Version/Model S/N Release Date OpenWrt Version Supported Model Specific Notes

The 'B' probably denotes the ADSL Annex B variant distributed in Germany.

Hardware Highlights

Netgear N150 Wireless ADSL2+ Modem/Router

Variant CPU Ram Flash Network USB Serial JTag
DGN1000B Amazon SE@266MHz 16MB 4MB 4x 100M No Yes (unpopulated) No
DGN1000SP 32MB 8MB

See Hardware or Tags for more details.

Manufacture advertised features:


There is no image to install yet, but in case you want to experiment…

Via serial console

Once serial access has been established, U-Boot will give you a (short!) window to interrupt it with Ctrl-C:

ROM VER: 1.2.0
CFG 04

U-Boot 1.1.5-2.2 (Sep 25 2009 - 22:20:42)


Input Ctrl-c to stop autoboot:  0

Be very careful with this U-Boot; the vendor patches are minimum-effort and there are some dangerous bugs (see forum thread).



Architecture: MIPS (4KEc V6.12)
Vendor: Infineon/Lantiq
bootloader: U-Boot (v1.1.5 with vendor patches)
System-On-Chip: AMAZON-SE
CPU/Speed 266 Mhz
Flash-Chip: ST 25P64V6P
Flash size: 8 MiB (DGN1000SP)
4 MiB (DGN1000)
RAM: 32 MiB (DGN1000SP)
16 MiB (DGN1000)
Wireless: Atheros AR9271 2.4ghz 802.11bgn
Ethernet: Atheros AR8216
VLAN support: Unlikely (see forum thread)
ADSL: Integrated (Lantiq)
USB: No 1)
Power: 12V DC 1.0A
Serial: Yes (unpopulated pads)
JTAG: No 2)


PSU (power supply)

My Netgear DGN1000B came bundled with the following PSU:


Brand/Model Netgear / T012HE1209
Input 220-240V~ (50/60Hz, 0.25A)
Output 12.0V 1.0A


See the Wikidevi entry. UK units seem to use a blue PCB and have Lantiq-branded SoCs; perhaps all green ones have Infineon-branded SoCs.

Opening/closing the case

Note: This will void your warranty! The case of the DGN1000B is composed of 4 pieces:

  • Top cover (black)
  • Bottom cover (gray)
  • Front cover (transparent)
  • Black cover (black)

There are 4 TORX screws at the back of the device, under the rubber feet.

  1. Remove the rubber feet in the back and undo the screws.
  2. Now the top cover can be removed.


Come back here when you've read the generic serial access instructions.

Moving away from the network ports, the pads (J1, near the SoC and RAM) are:

  [GND] [TX] [VCC] [RX]

Gently remove any dull oxide layer from the pads, and solder wires or surface-mount pins to the pads.

Don’t forget that the TX pin of the serial port must linked to the RX pin of the router and the RX to TX!

Settings: 115200,8,N,1


How to configure LEDs in general, see the LED section in the led_configuration.

LED name LED print Internal name Trigger
Power PWR dgn1000b:green:power N/A
LAN Port 1 1 unknown N/A
LAN Port 2 2 unknown N/A
LAN Port 3 3 unknown N/A
LAN Port 4 4 unknown N/A
Wireless LAN WLAN dgn1000b:green:wlan N/A
Wide Area Network WAN dgn1000b:green:wlan N/A


hardware.button. For custom action on pressing button the easy way with 00-button script works nicely.

The Netgear DGN1000B has 3 buttons:

BUTTON Event Backfire ID Attitude Adjustment ID
Reset reset
Quick Security Setup QSS BTN_1 wps

The WLAN and QSS buttons are located at the front and can be easily pressed with a finger. The Reset button is located at the bottom and cannot be pressed with a finger, you need a small item (pen typically) to push it in.


See also generic.debrick.

Since this device is Lantiq-based, its mask ROM can boot a payload over the serial port such as a U-Boot image.


The JTAG pins of the SoC are known from the TG585v8. They're probably available on resistors R23/R26 (topside), R36/R34/R24/R25 (underside) but resistors haven't been paired to signals yet. JTAG is a poor choice for recovery on this unit; UART mode and direct SPI access to the flash are easier. There's no flash support for this SoC in common JTAG tools anyway. Debugging of this SoC has been done though, on the TG585v8 with OpenOCD.


The SoC has USB but it's hard-wired to talk to the WiFi.
JTAG pins are known but no headers/through-holes are present.
toh/netgear/dgn1000b.txt · Last modified: 2018/03/31 23:22 by bobafetthotmail