NETGEAR WNDR4700 and WNDR4720
Note: This router has a slot for a 3,5“ SATA HDD, but only WNDR4720 package contents HDD SATA 2TB. WNDR4700 does not include a HDD.
Supported Versions
Hardware Highlights
SD Card Reader: Yes
Installation
→ Install OpenWrt (generic explanation)
Please add the installation procedure here.
The filename for Firmware OpenWrt Upgrade shows http://downloads.openwrt.org/releases/19.07.2/targets/apm821xx/nand/openwrt-19.07.2-apm821xx-nand-netgear_wndr4700-squashfs-sysupgrade.tar
Thanks.
Flash Layout
[WNDR4700]# cat /proc/mtd dev: size erasesize name mtd0: 08000000 00020000 "NAND 128MiB 3,3V 8-bit" mtd1: 00180000 00020000 "uboot" mtd2: 00020000 00020000 "device-tree" mtd3: 001e0000 00020000 "kernel" mtd4: 01660000 00020000 "rootfs" mtd5: 00080000 00020000 "config" mtd6: 00080000 00020000 "pot" mtd7: 00300000 00020000 "traffic_meter" mtd8: 001c0000 00020000 "language" mtd9: 06020000 00020000 "ecos" mtd10: 00040000 00020000 "wifi_data" mtd11: 01860000 00020000 "firmware"
Bootlogs
OEM bootlog
Auto calibration --- U-Boot 2009.08 (Jul 03 2012 - 13:04:31) CPU: AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz) Security support Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND 32 kB I-Cache 32 kB D-Cache DNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4 Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTG I2C: ready DRAM: 256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3) NAND: 128 MiB *** Warning - bad CRC, using default environment Configure Max Payload 256B PCIE0: successfully set as root-complex 03 00 168c 0030 0280 ff 02 02 111d 803a 0604 00 04 00 168c 0033 0280 ff 02 03 111d 803a 0604 00 05 00 1912 0015 0c03 00 02 04 111d 803a 0604 00 01 00 111d 803a 0604 00 131072 bytes read: OK Net: ppc_4xx_eth0 AR8327 GigaSW initialize...done ENET Speed is 1000 Mbps - FULL duplex connection (EMAC0) Client starts...[Listening] for ADVERTISE...TTT Retry count exceeded; boot the image as usual nmrp server is stopped or failed ! Type run flash_nfs to mount root filesystem over NFS Hit any key to stop autoboot: 0 Loading from device 0: NAND 128MiB 3,3V 8-bit (offset 0x180000) ** check device-tree image ** Verifying Checksum ... OK ** check kernel image ** Verifying Checksum ... OK ** check rootfs image ** Verifying Checksum ... OK NAND read: device 0 offset 0x180000, size 0x20000 131072 bytes read: OK ## Booting kernel from Legacy Image at 00500000 ... Image Name: PowerPC OpenWrt Linux-2.6.32 Image Type: PowerPC Linux Kernel Image (lzma compressed) Data Size: 1870601 Bytes = 1.8 MB Load Address: 00000000 Entry Point: 00000000 Verifying Checksum ... OK ## Flattened Device Tree blob at 00800040 Booting using the fdt blob at 0x800040 Uncompressing Kernel Image ... OK Using PowerPC 44x Platform machine description Linux version 2.6.32.11-wndr4700 (torby.tong@dni-l-sw01) (gcc version 4.5.1 (GCC) ) #2 Sat May 4 00:43:25 CST 2013 Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00001000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000 MMU: Allocated 1088 bytes of context maps for 255 contexts Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4094 Kernel command line: root=/dev/mtdblock4 rootfstype=squashfs ip=192.168.1.1:192.168.1.7::255.255.255.0:wndr4700:eth0:off panic=1 console=ttyS0,115200 PID hash table entries: 1024 (order: -4, 4096 bytes) Dentry cache hash table entries: 32768 (order: 1, 131072 bytes) Inode-cache hash table entries: 16384 (order: 0, 65536 bytes) Memory: 255744k/262144k available (5248k kernel code, 6400k reserved, 512k data, 85k bss, 384k init) Kernel virtual memory layout: * 0xfffe0000..0xffff0000 : fixmap * 0xfd800000..0xfe000000 : consistent mem * 0xfd800000..0xfd800000 : early ioremap * 0xd1000000..0xfd800000 : vmalloc & ioremap Hierarchical RCU implementation. NR_IRQS:512 UIC0 (32 IRQ sources) at DCR 0xc0 UIC1 (32 IRQ sources) at DCR 0xd0 UIC2 (32 IRQ sources) at DCR 0xe0 UIC3 (32 IRQ sources) at DCR 0xf0 clocksource: timebase mult[400000] shift[22] registered Mount-cache hash table entries: 8192 NET: Registered protocol family 16 OCM1: 32768 Bytes (enabled) OCM1: 32768 Bytes (non-cached) OCM1: 0 Bytes (cached) 256k L2-cache enabled PCIE0: Checking link... PCIE0: Device detected, waiting for link... PCIE0: link is up ! PCI host bridge /plb/pciex@d00000000 (primary) ranges: MEM 0x0000000e00000000..0x0000000e7fffffff -> 0x0000000080000000 MEM 0x0000000f00000000..0x0000000f000fffff -> 0x0000000000000000 IO 0x0000000f80000000..0x0000000f8000ffff -> 0x0000000000000000 Removing ISA hole at 0x0000000f00000000 4xx PCI DMA offset set to 0x00000000 /plb/pciex@d00000000: Legacy ISA memory support enabled Disabling INTX for MSI testing. Setting for 64-bit MSI and 4 MSI messages. PCIE0: successfully set as root-complex PCI: Probing PCI hardware PCI: Hiding 4xx host bridge resources 0000:40:00.0 pci 0000:41:00.0: PME# supported from D0 D3hot D3cold pci 0000:41:00.0: PME# disabled pci 0000:42:02.0: PME# supported from D0 D3hot D3cold pci 0000:42:02.0: PME# disabled pci 0000:42:03.0: PME# supported from D0 D3hot D3cold pci 0000:42:03.0: PME# disabled pci 0000:42:04.0: PME# supported from D0 D3hot D3cold pci 0000:42:04.0: PME# disabled pci 0000:43:00.0: PME# supported from D0 D1 D3hot pci 0000:43:00.0: PME# disabled pci 0000:44:00.0: PME# supported from D0 D1 D3hot pci 0000:44:00.0: PME# disabled pci 0000:45:00.0: PME# supported from D0 D3hot pci 0000:45:00.0: PME# disabled pci 0000:42:02.0: PCI bridge, secondary bus 0000:43 pci 0000:42:02.0: IO window: disabled pci 0000:42:02.0: MEM window: 0x80000000-0x800fffff pci 0000:42:02.0: PREFETCH window: 0x80300000-0x803fffff pci 0000:42:03.0: PCI bridge, secondary bus 0000:44 pci 0000:42:03.0: IO window: disabled pci 0000:42:03.0: MEM window: 0x80100000-0x801fffff pci 0000:42:03.0: PREFETCH window: 0x80400000-0x804fffff pci 0000:42:04.0: PCI bridge, secondary bus 0000:45 pci 0000:42:04.0: IO window: disabled pci 0000:42:04.0: MEM window: 0x80200000-0x802fffff pci 0000:42:04.0: PREFETCH window: disabled pci 0000:41:00.0: PCI bridge, secondary bus 0000:42 pci 0000:41:00.0: IO window: disabled pci 0000:41:00.0: MEM window: 0x80000000-0x802fffff pci 0000:41:00.0: PREFETCH window: 0x80300000-0x804fffff pci 0000:40:00.0: PCI bridge, secondary bus 0000:41 pci 0000:40:00.0: IO window: disabled pci 0000:40:00.0: MEM window: 0x80000000-0x802fffff pci 0000:40:00.0: PREFETCH window: 0x80300000-0x804fffff CPM0: pm-iic-device resource /plb/opb/i2c@ef600700 CPM0: pm-emac-device resource /plb/opb/ethernet@ef600c00 CPM0: pm-monitor-event property not defined CPM0: DCR at 0x160 CPM: ocm suspend address 0xd1040000 CPM: ocm resume address 0xd1040400 CPM: ocm data address 0xd10407d0 bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb mod_init:1052 ppc460ex_dma_per_chan_init:1064 cfg80211: Calling CRDA to update world regulatory domain Switching to clocksource timebase NET: Registered protocol family 2 IP route cache hash table entries: 16384 (order: 0, 65536 bytes) TCP established hash table entries: 8192 (order: 0, 65536 bytes) TCP bind hash table entries: 8192 (order: -1, 32768 bytes) TCP: Hash tables configured (established 8192 bind 8192) TCP reno registered NET: Registered protocol family 1 pci 0000:45:00.0: xHCI HW not ready after 5 sec (HC bug?) status = 0x801 Probing AMCC DMA driver PPC4xx PLB DMA engine IRQ 24 PPC460ex PLB DMA engine @0x00_00000100 size 263 new_chan->chan_id 0x0 new_chan->chan->chan_id 0x0 PCIE-MSI: Setting up MSI ... PCIE-MSI: MSI reg base c10000000 - c100000ff PCIE-MSI: MSI sdr base 0000036c PCIE-MSI: PE_IHS h 0000000c l 10000002 kcpm: can't read pm-monitor-app kcpm: unable to parse device tree; aborting squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 496 async_tx: api initialized (async) io scheduler noop registered io scheduler anticipatory registered io scheduler deadline registered io scheduler cfq registered (default) PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor aaa0 PCIE-MSI: hwirq requested 0, virt 37 PCIE-MSI: message: h 0000000c l 10000080 data 00004440 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 1, virt 38 PCIE-MSI: message: h 0000000c l 10000080 data 00004441 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 2, virt 39 PCIE-MSI: message: h 0000000c l 10000080 data 00004442 PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 111d PCIE-MSI: hwirq requested 3, virt 40 PCIE-MSI: message: h 0000000c l 10000080 data 00004443 Generic non-volatile memory driver v1.1 Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled serial8250.0: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 16550A console [ttyS0] enabled serial8250.0: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550A 4ef600300.serial: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 16550 4ef600400.serial: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550 brd: module loaded loop: module loaded /plb/sata@bffd1000: Port disabled via device-tree sata-dwc 4bffd1800.sata: Gettting DMA channel 1 sata-dwc 4bffd1800.sata: id 0, controller version 1.91 sata-dwc 4bffd1800.sata: DMA initialized sata-dwc 4bffd1800.sata: DMA CFG = 0x00000001 dma_register_interrupt register irq (41) ata4294967295: sata_dwc_port_start: setting burst size in DBTSR: 0x00100010 sata-dwc 4bffd1800.sata: **** GEN II speed rate negotiated scsi0 : sata-dwc ata1: SATA max UDMA/133 irq 42 of-flash 4e4000000.nor_flash: do_map_probe() failed NAND device: Manufacturer ID: 0xad, Chip ID: 0xf1 (Hynix NAND 128MiB 3,3V 8-bit) Scanning device for bad blocks Bad eraseblock 657 at 0x000005220000 Creating 12 MTD partitions on "4e4000000.ndfc.nand": 0x000000000000-0x000008000000 : "NAND 128MiB 3,3V 8-bit" 0x000000000000-0x000000180000 : "uboot" 0x000000180000-0x0000001a0000 : "device-tree" 0x0000001a0000-0x000000380000 : "kernel" 0x000000380000-0x0000019e0000 : "rootfs" mtd: find squashfs magic at 0x380000 of "4e4000000.ndfc.nand" the correct location of partition "rootfs": 0x000000380000-0x0000019e0000 0x0000019e0000-0x000001a60000 : "config" 0x000001a60000-0x000001ae0000 : "pot" 0x000001ae0000-0x000001de0000 : "traffic_meter" 0x000001de0000-0x000001fa0000 : "language" 0x000001fa0000-0x000007fc0000 : "ecos" 0x000007fc0000-0x000008000000 : "wifi_data" 0x000000180000-0x0000019e0000 : "firmware" APM MTD access Wrapper initialized. e1000e: Intel(R) PRO/1000 Network Driver - 1.0.2-k2 e1000e: Copyright (c) 1999-2008 Intel Corporation. PPC 4xx OCP EMAC driver, version 3.54 mal0: descriptor-memory = ocm MAL: Enabled Interrupt Coal TxCnt: 32 RxCnt: 8 TxTimer: 100000 RxTimer: 5000 MAL v2 /plb/mcmal, 1 TX channels, 1 RX channels RGMII /plb/opb/emac-rgmii@ef601500 initialized with MDIO support TAH /plb/opb/emac-tah@ef601350 initialized /plb/opb/emac-rgmii@ef601500: input 0 in RGMII mode PHY ID: 0x004dd034 eth0: EMAC-0 /plb/opb/ethernet@ef600c00, MAC 20:e5:2a:68:dd:87 eth0: found Generic MII PHY (0x00) Intel(R) Gigabit Ethernet Network Driver - version 1.3.16-k2 Copyright (c) 2007-2009 Intel Corporation. tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> xhci_hcd 0000:45:00.0: xHCI Host Controller xhci_hcd 0000:45:00.0: new USB bus registered, assigned bus number 1 pci_bus 0000:45: firmware: using built-in firmware renesas/K2013080.mem xhci_hcd 0000:45:00.0: irq 21, io mem 0xe00200000 xhci_hcd 0000:45:00.0: Failed to enable MSI-X PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5 PCIE-MSI: vendor 1912 PCIE-MSI: hwirq requested 4, virt 52 PCIE-MSI: message: h 0000000c l 10000080 data 00004444 usb usb1: config 1 interface 0 altsetting 0 endpoint 0x81 has no SuperSpeed companion descriptor usb usb1: New USB device found, idVendor=1d6b, idProduct=0003 usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb1: Product: xHCI Host Controller usb usb1: Manufacturer: Linux 2.6.32.11-wndr4700 xhci_hcd usb usb1: SerialNumber: 0000:45:00.0 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 4 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usbcore: registered new interface driver libusual dwc_otg: version 2.60a 22-NOV-2006 dwc_otg: Using DMA mode dwc_otg dwc_otg.0: DWC OTG Controller dwc_otg dwc_otg.0: new USB bus registered, assigned bus number 2 dwc_otg dwc_otg.0: irq 34, io mem 0x00000000 dwc_otg: Init: Port Power? op_state=1 dwc_otg: Init: Power Port (0) usb usb2: New USB device found, idVendor=1d6b, idProduct=0002 usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb2: Product: DWC OTG Controller usb usb2: Manufacturer: Linux 2.6.32.11-wndr4700 dwc_otg_hcd usb usb2: SerialNumber: dwc_otg.0 ata1: Softreset on PMP port 15 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected i2c /dev entries driver ibm-iic 4ef600700.i2c: using standard (100 kHz) mode ibm-iic 4ef600800.i2c: using standard (100 kHz) mode apm82181-adma: Probing AMCC APM82181 ADMA engines... AMCC(R) APM82181 ADMA Engine found [1]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma1: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [2]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma2: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [3]: ( capabilities: memcpy ) --------------- dma_async_device_register: 683------------------------- apm82181 adma3: allocated 512 descriptor slots AMCC(R) APM82181 ADMA Engine found [4]: ( capabilities: xor int ) --------------- dma_async_device_register: 683------------------------- apm82181 adma4: allocated 819 descriptor slots Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (3996 buckets, 15984 max) ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> lib80211: common routines for IEEE802.11 drivers drivers/rtc/hctosys.c: unable to open rtc device (rtc0) ata1: SATA link up 3.0 Gbps (SStatus 123 SControl F0300) ata1.00: ATA-9: WDC WD20EFRX-68AX9N0, 80.00A80, max UDMA/133 ata1.00: 3907029168 sectors, multi 0: LBA48 NCQ (depth 1/32) ata1.00: configured for UDMA/133 blk_queue_max_hw_segments: set to minimum 1 scsi 0:0:0:0: Direct-Access ATA WDC WD20EFRX-68A 80.0 PQ: 0 ANSI: 5 sd 0:0:0:0: [sda] 3907029168 512-byte logical blocks: (2.00 TB/1.81 TiB) sd 0:0:0:0: [sda] 4096-byte physical blocks sd 0:0:0:0: Attached scsi generic sg0 type 0 sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: unknown partition table sd 0:0:0:0: [sda] Attached SCSI disk usb 2-1: new high speed USB device using dwc_otg and address 2 usb 2-1: New USB device found, idVendor=05e3, idProduct=0723 usb 2-1: New USB device strings: Mfr=3, Product=4, SerialNumber=0 usb 2-1: Product: USB Storage usb 2-1: Manufacturer: Generic usb 2-1: configuration #1 chosen from 1 choice scsi1 : SCSI emulation for USB Mass Storage devices eth0: link is up, 1000 FDX IP-Config: Complete: device=eth0, addr=192.168.1.1, mask=255.255.255.0, gw=255.255.255.255, host=wndr4700, domain=, nis-domain=(none), bootserver=192.168.1.7, rootserver=192.168.1.7, rootpath= VFS: Mounted root (squashfs filesystem) readonly on device 31:4. Freeing unused kernel memory: 384k init Warning: unable to open an initial console. init started: BusyBox v1.4.2 (2013-04-26 18:37:36 CST) multi-call binary Loading data from /dev/mtd5 ... Done! The data center is Running ... PPP generic driver version 2.4.2 NET: Registered protocol family 24 nf_nat_STARCRAFT: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading nf_conntrack_proto_esp loaded NET: Registered protocol family 27 PPPoL2TP kernel driver, V0.16.1 PPTP-GRE-v1.13 2007 (C) Delta Networks Inc. dni-qos module init. Generating Rules... Done! /etc/rc.common: /etc/rc.common: 83: /sbin/cmd_sipalg: not found lan mac: 20:e5:2a:68:dd:87 wan mac: 20:e5:2a:68:dd:88 wlan5g mac: 20:e5:2a:68:dd:89 sn:31K12A5400640 SN: 31K12A5400640 hw_id:HW_ID model_id:MODEL_ID The region number is: 0x0002 REGION: WW /sbin/ip_mac: /sbin/ip_mac: 20: cannot create /proc/sys/net/ipv4/conf/br0/arp_drop_reply: Directory nonexistent cp: cannot stat '/etc/wpa2.orig/*': No such file or directory wpspin:20117047 Starting network... ln: /tmp/www/cgi-bin/RMT_invite.htm: No such file or directory ln: /tmp/www/cgi-bin/RMT_invite.cgi: No such file or directory ln: /tmp/www/cgi-bin/func.sh: No such file or directory powerpc_emac_init phy_mode = 0x4 phy_map = 0x0 phy_address = 0xffffffff reg = 0x7949 ######## S17 SSDK init succeeded! ######## athrs17_reg_init:done SSDK Init scsi 1:0:0:0: Direct-Access Generic STORAGE DEVICE 9454 PQ: 0 ANSI: 0 OK! opsd 1:0:0:0: Attached scsi generic sg1 type 0 erate done. sd 1:0:0:0: [sdb] Attached SCSI removable disk SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. SSDK Init OK! operate done. /etc/net6conf/6proc: /etc/net6conf/6proc: 33: cannot create /proc/sys/net/ipv6/ipv6_srcrt_type_2: Directory nonexistent device eth0.2 entered promiscuous mode device eth0 entered promiscuous mode NET-LAN: Default LAN MAC is : 20:E5:2A:68:DD:87 br0: port 1(eth0.2) entering forwarding state br0: port 1(eth0.2) entering disabled state br0: port 1(eth0.2) entering forwarding state udhcp server (v0.9.8) started The attached devices demo is Running ... check minidlna ... killall: minidlna: no process killed grep: /tmp/etc/minidlna.conf: No such file or directory mknod: /dev/ptmx: File exists killall: utelnetd: no process killed killall: telnetenable: no process killed The telnetenable is running ... killall: smbd: no process killed Deleting static route ... Done! Adding static route ... Done! NET-WAN: Default WAN MAC is : 20:e5:2a:68:dd:88 dni-qos attached on eth0.1. killall: ntpclient: no process killed udhcp client (v0.9.8) started Deleting static route ... Done! Deleting static route ... Done! Adding static route ... Done! start rip process start initial data time zone index is : 0 Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com killall: ez-ipupdate: no process killed killall: updatednsip: no process killed killall: updatednsip: no process killed killall: phddns: no process killed killall: noip2: no process killed killall: crond: no process killed killall: miniupnpd: no process killed Sending discover... Sending select for 192.168.1.102... ioctl: Cannot assign requested address LAN: 10.0.0.1/255.255.255.0 WAN: 192.168.1.102/255.255.255.0 WAN status: 1000M/Full WAN status: 1000M/Full WAN/LAN is NOT conflicting! Lease of 192.168.1.102 obtained, lease time 86400 adding dns 192.168.1.1 LAN: 10.0.0.1/255.255.255.0 WAN: 192.168.1.102/255.255.255.0 WAN status: 1000M/Full WAN status: 1000M/Full WAN/LAN is NOT conflicting! Initializing random number generator... read-only file system detected...done miniupnpd[1559]: listening on 10.0.0.1:5555 Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! /etc/rc.common: /etc/rc.common: 83: /bin: Permission denied deleting routers adding router 192.168.1.1 time zone index is : 0 Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! Deleting static route ... Done! Deleting static route ... Done! Adding static route ... Done! start rip process start initial data bound killall: igmpproxy: no process killed cp: cannot stat '/usr/config/shadow': No such file or directory Changing password for admin New password:NTPST: one NTP Sync Timestamp existed in POT partition, it's 06:16:57, Dec 10, 2012 Bad password: too weak Retype password: Password for admin changed by root Saving Data... Done! Saving Data... Done! Saving Data... Done! Saving Data... Done! /dev/sda: unknown volume type [vol_id_1]get_disk_volume error, goto ret!!! killall: proftpd: no process killed Start utelnetd by telnetenable POT is Running... POT is Finished!!! The POT-(Get/Set) Demo is Running ... Changing password for admin New password: Bad password: too weak Retype password: Password for admin changed by root /dev/sda: unknown volume type [Waring]: This HDD format failed to support the Time Machine!!!!!! /dev/sda: unknown volume type [vol_id_2]get_disk_volume error, goto ret!!! ufsd: driver 8.5 (NTFS4LINUX_U85_014_S[2011-07-25-15:14:27]) Evaluation version - not for resale! LBD=ON with delayalloc with ioctl loaded at d7d40000 NTFS read/write support included Big endian platform Hfs+/HfsX read/write support included Built for: Netgear_apm_82181_2011-07-20 [rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'. [rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'. cat: /tmp/usbdisknum: No such file or directory ADDRCONF(NETDEV_UP): sit0: link is not ready /dev/sdb: error open volume This partition type is ! disk name is sdb last partition is sh: =: argument expected rm: cannot remove '/tmp/umount_result': No such file or directory Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. /sbin/wlan: /sbin/wlan: 1: pidnum: not found sh: 1: unknown operand /sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not found /sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not found Args: 1 ath_hal: 0.9.17.1 (AR5416, AR9380, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D) ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved ath_dfs: Version 2.0.0 Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved ath_pci: 9.2.0_U10.1020 (Atheros/multi-bss) Caldata = cfce0000 slot=0 __ath_attach: Set global_scn[0] ACBKMinfree = 48 ACBEMinfree = 32 ACVIMinfree = 16 ACVOMinfree = 0 CABMinfree = 48 UAPSDMinfree = 0 ar9300RadioAttach: Need analog access recipe!! Restoring Cal data from Flash dfs_attach: use DFS enhancements DFS min filter rssiThresh = 18 DFS max pulse dur = 151 ticks ath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0 wifi0: Atheros 9380: mem=0xe00000000, irq=19 hw_base=0xd6a80000 Caldata = cfce4000 slot=1 __ath_attach: Set global_scn[1] ACBKMinfree = 48 ACBEMinfree = 32 ACVIMinfree = 16 ACVOMinfree = 0 CABMinfree = 48 UAPSDMinfree = 0 ar9300RadioAttach: Need analog access recipe!! Restoring Cal data from Flash dfs_attach: use DFS enhancements DFS min filter rssiThresh = 18 DFS max pulse dur = 151 ticks ath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0 wifi1: Atheros 9580: mem=0xe00100000, irq=20 hw_base=0xd6b00000 DFS min filter rssiThresh = 15 DFS max pulse dur = 151 ticks DFS min filter rssiThresh = 15 DFS max pulse dur = 151 ticks Creating ap for NETGEAR96 on wlan_vap_create : enter. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1 wlan_vap_create : exit. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1. VAP device ath0 created Added ath0 mode master Invalid command : bgscan DES SSID SET=NETGEAR96 ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1 /etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistent WARNING: Fragmentation with HT mode NOT ALLOWED!! Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath0 ; Invalid argument. Invalid command : setVowExt Invalid command : setKeySrchAlways Invalid command : mcastenhance Invalid command : acparams Invalid command : set_vsp_enable Interface doesn't accept private ioctl... setPhyRestartWar (8BE0): Operation not permitted Invalid command : setVowExtStats Created ath0 mode ap for NETGEAR96 lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. Modules already loaded Creating ap for NETGEAR96-5G on wlan_vap_create : enter. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1 wlan_vap_create : exit. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1. VAP device ath1 created Added ath1 mode master Invalid command : bgscan Invalid command : extoffset DES SSID SET=NETGEAR96-5G ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1 /etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistent WARNING: Fragmentation with HT mode NOT ALLOWED!! Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath1 ; Invalid argument. Invalid command : setVowExt Invalid command : setKeySrchAlways Invalid command : mcastenhance Invalid command : acparams Invalid command : set_vsp_enable Interface doesn't accept private ioctl... setPhyRestartWar (8BE0): Operation not permitted Invalid command : setVowExtStats Created ath1 mode ap for NETGEAR96-5G lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. device ath0 entered promiscuous mode br0: port 2(ath0) entering forwarding state arping: bind: Cannot assign requested address >>>>> WPS MODE, 2 >>>>> WPS ENABLED, PSK cat: /etc/wpa2/WSC_ath0.conf: No such file or directory >>>>> WPS Translate, Index:0 lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. device ath1 entered promiscuous mode br0: port 3(ath1) entering forwarding state arping: bind: Cannot assign requested address >>>>> WPS MODE, 2 >>>>> WPS ENABLED, PSK cat: /etc/wpa2/WSC_ath1.conf: No such file or directory >>>>> WPS Translate, Index:2 CHH: System Configuration AP_IPADDR:=192.168.1.2 AP_NETMASK:=255.255.255.0 WAN_MODE:=bridged WAN_IPADDR:=192.168.2.1 WAN_NETMASK:=255.255.255.0 WAN_IF:=eth1 LAN_IF:=eth0 WLAN_ON_BOOT:=n AP_STARTMODE:=dual AP_RADIO_ID:=0 AP_RADIO_ID_2:=1 AP_PRIMARY_CH:=11ng AP_CHMODE:=11NGHT20 AP_PRIMARY_CH_2:=44 AP_CHMODE_2:=11NAHT40PLUS PUREG:=0 PUREN:=0 TXQUEUELEN:=1000 SHORTGI:=1 SHORTGI_2:=1 AMPDUENABLE:=1 AMPDUENABLE_2:=1 AMPDUFRAMES:=32 AMPDUFRAMES_2:=32 AMPDULIMIT:=50000 AMPDULIMIT_2:=50000 AMPDUMIN:=32768 AMPDUMIN_2:=32768 CWMMODE:=1 CWMMODE_2:=1 RATECTL:=auto MANRATE:=0x8c8c8c8c MANRETRIES:=0x04040404 RX_CHAINMASK:=7 RX_CHAINMASK_2:=7 TX_CHAINMASK:=7 TX_CHAINMASK_2:=7 AP_SSID:=NETGEAR96 AP_SSID_2:=NETGEAR96-5G AP_PRIMARY_KEY_0:=1 AP_PRIMARY_KEY_1:=1 AP_WEP_MODE_0:=1 AP_WEP_MODE_1:=1 AP_MODE:=ap AP_SECMODE:=WPA AP_SECFILE:=PSK WPS_ENABLE:=2 AP_MODE_2:=ap AP_SECMODE_2:=WPA AP_SECFILE_2:=PSK WPS_ENABLE_2:=2 AP_MODE_3:=ap AP_SECMODE_3:=None AP_SECFILE_3:=PSK WPS_ENABLE_3:=0 AP_MODE_4:=ap AP_SECMODE_4:=None AP_SECFILE_4:=PSK WPS_ENABLE_4:=0 AP_MODE_5:=ap AP_SECMODE_5:=None AP_SECFILE_5:=PSK WPS_ENABLE_5:=0 AP_MODE_6:=ap AP_SECMODE_6:=None AP_SECFILE_6:=PSK WPS_ENABLE_6:=0 AP_MODE_7:=ap AP_SECMODE_7:=None AP_SECFILE_7:=PSK WPS_ENABLE_7:=0 AP_MODE_8:=ap AP_SECMODE_8:=None AP_SECFILE_8:=PSK WPS_ENABLE_8:=0 AP_MODE_9:=ap AP_SECMODE_9:=None AP_SECFILE_9:=PSK WPS_ENABLE_9:=0 AP_MODE_10:=ap AP_SECMODE_10:=None AP_SECFILE_10:=PSK WPS_ENABLE_10:=0 AP_MODE_11:=ap AP_SECMODE_11:=None AP_SECFILE_11:=PSK WPS_ENABLE_11:=0 AP_MODE_12:=ap AP_SECMODE_12:=None AP_SECFILE_12:=PSK WPS_ENABLE_12:=0 AP_MODE_13:=ap AP_SECMODE_13:=None AP_SECFILE_13:=PSK WPS_ENABLE_13:=0 AP_MODE_14:=ap AP_SECMODE_14:=None AP_SECFILE_14:=PSK WPS_ENABLE_14:=0 AP_MODE_15:=ap AP_SECMODE_15:=None AP_SECFILE_15:=PSK WPS_ENABLE_15:=0 AP_MODE_16:=ap AP_SECMODE_16:=None AP_SECFILE_16:=PSK WPS_ENABLE_16:=0 ATH_countrycode:=276 AP_G_BAND_TPSCALE:=0 AP_A_BAND_TPSCALE:=0 WSC_MANUFACTURER:=NTGR WSC_MODEL_NAME:=WNDR4700 WSC_MODEL_NUMBER:=n WSC_SERIAL_NUMBER:=20e52a68dd87 WSC_UPNP_AD_PERIOD:=1800 WSC_UPNP_AD_TTL:=4 WSC_CONF_RELOAD_TIME:=3 WSC_AP_PIN_ATTACK_CHECK:=1 WSC_AP_PIN_ATTACK_NUM:=3 WSC_AP_PIN_HISTORY_FAILURES:=0 WSC_UUID_MAC:=20:e5:2a:68:dd:87 WSC_CONFIGURED:=1 WSC_AP_SETUP_LOCKED:=0 WSC_AP_AUTO_LOCKED:=0 WSC_NAME:=WNDR4700(Wireless AP) AP_ANYSSID_HACK:=1 AP_WPA:=2 AP_CYPHER:=CCMP PSK_KEY:=youngcomet870 WPA_IS_HEX:=0 AP_WPA_GROUP_REKEY:=86400 AP_HIDE_SSID:=0 AP_RTS:=2347 AP_FRAG:=2346 AP_WMM:=1 AP_SHPREAMBLE:=1 AP_COUNTRY_IE:=0 BINTVAL:=100 DTIM:=2 WSC_PIN:=20117047 AP_DOTH:=0 AP_DISABLECOEXT:=0 WSC_CONFIGURED_2:=1 WSC_AP_SETUP_LOCKED_2:=0 WSC_AP_AUTO_LOCKED_2:=0 WSC_NAME_2:=WNDR4700(Wireless AP) AP_ANYSSID_HACK_2:=1 AP_WPA_2:=2 AP_CYPHER_2:=CCMP PSK_KEY_2:=youngcomet870 WPA_IS_HEX_2:=0 AP_WPA_GROUP_REKEY_2:=86400 AP_HIDE_SSID_2:=0 AP_RTS_2:=2347 AP_FRAG_2:=2346 AP_WMM_2:=1 AP_SHPREAMBLE_2:=1 AP_COUNTRY_IE_2:=0 BINTVAL_2:=100 DTIM_2:=2 WSC_PIN_2:=20117047 AP_DISABLECOEXT_2:=1 WPS_LED_BEHAVIOR:=1 WIRED_STRING_HACK:=1 DEBUGMODE:=0 LED_CUSTOM:=8 IGMP_ENABLE_ORNOT:=0 CUR_APNAME:=ath1 Configur ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1 ation file: /etc/wpa2/WSC_ath0.conf br0: port 2(ath0) entering disabled state DEVICE IS DOWN ifname=ath0 Co DEVICE IS DOWN ifname=ath0 uld not connect to kernel driver. Using interface ath0 with hwaddr 20:e5:2a:68:dd:87 and ssid 'NETGEAR96' random: Only 19/20 bytes of strong random data available from /dev/random random: Not enough entropy pool available for secure operations WPA: Not enough entropy in random pool for secure operations - update keys later when the first station connects br0: port 2(ath0) entering forwarding state Configu ieee80211_ioctl_siwmode: imr.ifm_active=852608, new mode=3, valid=1 ration file: /etc/wpa2/WSC_ath1.conf br0: port 3(ath1) entering disabled state DEVICE IS DOWN ifname=ath1 Co DEVICE IS DOWN ifname=ath1 uld not connect to kernel driver. Using interface ath1 with hwaddr 20:e5:2a:68:dd:89 and ssid 'NETGEAR96-5G' random: Cannot read from /dev/random: Resource temporarily unavailable random: Only 19/20 bytes of strong random data available from /dev/random random: Not enough entropy pool available for secure operations WPA: Not enough entropy in random pool for secure operations - update keys later when the first station connects br0: port 3(ath1) entering forwarding state Ignore turn off WPS LED in apup $Shutting down igmpproxy: killall: igmpproxy: no process killed Sorry, rule does not exist. Sorry, rule does not exist. killall: igmpproxy: no process killed Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! traffic_meter start : . killall: igmpproxy: no process killed GPL NetUSB up! kc 90 : run_telnetDBGDServer start kc 227 : init_DebugD end INFO177E: NetUSB 1.02.25, 00020620 : Nov 6 2012 16:37:41 INFO1780: AUTH ISOC INFO1781: MOVE_HEAD filterAudio usbcore: registered new interface driver KC NetUSB General Driver INFO0AA0: --- checkSBusTimeoutThread start --- INFO0110: init proc : PAGE_SIZE 65536 INFO1652: infomap d84b640c INFO1655: sleep to wait br0 to wake up INFO02D0: use dev Name br0 INFO165E: sleep to wait br0 end. INFO1677: UDP_BROAD 7423 tcpPort:625868800 INFO02D0: use dev Name br0 INFO155E: tcpConnector() started... killall: check_HDD_capacity: no process killed The region number is: 0x0002 REGION: WW Generating RSA private key, 1024 bit long modulus Generating selfsigned certificate with subject 'C=DE;ST=Saxony;L=Leipzig;CN=OpenWrt;' and validity 2013-08-08 13:05:48-2015-08-08 13:05:48 /etc/rc.common: /etc/rc.common: 83: detplc: not found Starting Firewall... lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0 Done! Boot up procedure is Finished!!!
Specific Configuration
OEM Configuration
Interfaces
[WNDR4700]# ifconfig ath0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1263 errors:0 dropped:57738 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:503937 (492.1 KiB) ath1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 inet6 addr: fe80::22e5:2aff:fe68:dd89/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:57732 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet addr:10.0.0.1 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140422 errors:0 dropped:0 overruns:0 frame:0 TX packets:108580 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:33533139 (31.9 MiB) TX bytes:61246727 (58.4 MiB) eth0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:274732 errors:0 dropped:0 overruns:0 frame:0 TX packets:199712 errors:346 dropped:0 overruns:346 carrier:0 collisions:692 txqueuelen:1000 RX bytes:95284038 (90.8 MiB) TX bytes:88059466 (83.9 MiB) Interrupt:50 eth0.1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:88 inet addr:192.168.1.102 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd88/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:134303 errors:0 dropped:0 overruns:0 frame:0 TX packets:91123 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:57341369 (54.6 MiB) TX bytes:26377505 (25.1 MiB) eth0.2 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140426 errors:0 dropped:0 overruns:0 frame:0 TX packets:108584 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:34095621 (32.5 MiB) TX bytes:61681471 (58.8 MiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:299700 errors:0 dropped:0 overruns:0 frame:0 TX packets:299700 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:11856396 (11.3 MiB) TX bytes:11856396 (11.3 MiB) wifi0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:172604 errors:0 dropped:0 overruns:0 frame:0 TX packets:465033 errors:507 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:19 Memory:d6640000-d6660000 wifi1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:191 errors:0 dropped:0 overruns:0 frame:0 TX packets:461893 errors:191 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:20 Memory:d66c0000-d66e0000
Wireless
[WNDR4700]# iwconfig lo no wireless extensions. eth0 no wireless extensions. sit0 no wireless extensions. br0 no wireless extensions. eth0.1 no wireless extensions. eth0.2 no wireless extensions. wifi0 no wireless extensions. wifi1 no wireless extensions. ath0 IEEE 802.11ng ESSID:"NETGEAR96" Mode:Master Frequency:2.462 GHz Access Point: 20:E5:2A:68:DD:87 Bit Rate:216.7 Mb/s Tx-Power:17 dBm RTS thr=2347 B Fragment thr:off Encryption key:1013-6C54-1265-3495-67D5-24EB-A359-A504 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:28 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0 ath1 IEEE 802.11na ESSID:"NETGEAR96-5G" Mode:Master Frequency:5.22 GHz Access Point: 20:E5:2A:68:DD:89 Bit Rate:450 Mb/s Tx-Power:19 dBm RTS thr=2347 B Fragment thr:off Encryption key:25DE-884C-9D4B-F95E-9FA7-74A5-5933-10C0 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0
VLAN
[WNDR4700]# cat /proc/net/vlan/config VLAN Dev name | VLAN ID Name-Type: VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD eth0.1 | 1 | eth0 eth0.2 | 2 | eth0
Test and Performance
Note: All benchmarks and test were carried out on the original firmware. The results would be much better in the current branch of OpenWrt.
Benchmark: OpenSSL v0.9.8p
Note: OpenSSL v0.9.8p from SDK
Benchmark: Cpubench v0.6
Note: Source code here.
[WNDR4700]# ./cpubench This is CPU and memory benchmark for OpenWRT v0.6. This will then take some time... (typically 30-60 seconds on a 200MHz computer) Overhead for getting time: 1us Time to run memory bench: 1.65[secs] Time to run computation of pi (2400 digits, 10 times): 4.16[secs] Time to run computation of e (9009 digits): 5.10[secs] Time to run float bench: 0.02[secs] Total time: 10.9s
You can copy/paste the following line in the wiki table at: HardwarePerformance
| 2013-08-27 | Author | 1.6s | 4.2s | 5.1s | 0.0s | v0.6 | OS | DeviceModel | CPU model | CPU Frequency | LinkToHwPage |
Note: Tests were performed on non-optimized software and built by hand, using only the sole and conclusive construction environment what is available at the moment. Manufacturer's SDK using the native libraries-definitely not reflect actual achievements and possibilities of this equipment.
Test: Internal HDD - NASTester 1.4
Note: The test was carried out on WD RED 2TB WD20EFRX and Windows 7 x64 on protocol samba.
Test HDD ext2:
Test HDD ext4:
Test HDD ntfs:
Note: NTFS is much better than ext2 and ext4 because Netgear probably added something.
Test: USB 3.0 - NASTester 1.4
Note: The test was carried out on pendrive Patriot Supersonic 32GB USB 3.0 and Windows 7 x64 on protocol samba:
Test USB 3.0 ext2:
[WNDR4700]# hdparm -t /dev/sdb1 /dev/sdb1: Timing buffered disk reads: 280 MB in 3.00 seconds = 93.27 MB/sec
Test USB 3.0 ext4:
[WNDR4700]# hdparm -t /dev/sdb1 /dev/sdb1: Timing buffered disk reads: 260 MB in 3.00 seconds = 86.54 MB/sec
Test USB 3.0 fat32:
Test USB 3.0 ntfs:
Hardware
Info
| Architecture: | RISC PowerPC | |
| Vendor: | Applied Micro | |
| bootloader: | U-Boot | |
| System-On-Chip: | APM82181 (RISC) | |
| CPU/Speed | 1000 MHz | |
| Flash-Chip: | Hynix H27U1G8F2BTR | |
| Flash size: | 128 MiB NAND | |
| RAM-Chip: | Nanya NT5TU64M16GG-AC x 2 | |
| RAM: | 256 MiB | |
| Wireless: | Atheros AR9381 2.4GHz 802.11bgn | Atheros AR9380 5GHz 802.11an |
| RegDomain: | US ? | US ? |
| Ethernet: | Atheros AR8327N Gigabit Switch | |
| USB: | Yes 2 x 3.0 | |
| SD Card: | Yes | |
| Serial: | Yes | |
| JTAG: | Yes |
Button
| Reset | WPS | WiFi | Backup | |
|---|---|---|---|---|
| Kamikaze | _ | _ | _ | _ |
Note: ------------------------
Photos look
Photo of front of the casing
Photo of back of the casing
Opening the case
Note: This will void your warranty! Note2: complete disassembly description
- The stand of the router can be removed with two screws from the bottom. Just slide off the stand
- You can now see two more screws, remove also
- With a bit of force (or use a spatula/flat screwdriver) you can start at the lower edges and unclip the front piece
- remove three screws close to the antennas to remove the circuit board - carefully lift it sideways, USB port side stays, other side moves up
- unclip the fan and SATA connector
- remove the circuit board
- remove the connector
- remove the fan
- carefully unclip the buttons from the backside of the chassis
- remove the radio insulation (or whatever the metal foil is supposed to be
Fan problems
There are frequent reports that this model has a very noisy fan. It is less a constant wirr and more of a hickupy wromm. Not easy to listen to, especially if you plan to put this machine in a living area. You can exchange the stock fan (radial fan, small size, no air movement whatsoever) for probably a different model with the same dimensions and same fixture points. Or you can remove the back of the router and put in a 12cm chassis fan and run it on 5V. Unfortunately the PWM does not provide enough voltage/power so any fan will spin up. If you are not using the SATA bay you can highjack GND,+5,+12 from the SATA power. After installation carefully monitor the temperature from ssh/telnet with
while true; do a=`cat /sys/class/hwmon/hwmon0/temp1_input`; b=`cat /sys/class/hwmon/hwmon0/temp2_input`; d=`date +"%H:%M:%S"`; echo $d cputemp=$(($a/1000))" "ddrtemp=$(($b/1000)); sleep 2; done
This will show you a continuous stream of live temperature in °C updating every other second.
Main PCB
Photo of PCB
Telnet
Telnet: /proc/cpuinfo
[WNDR4700]# cat /proc/cpuinfo processor : 0 cpu : APM82181 clock : 1000.000010MHz revision : 28.131 (pvr 12c4 1c83) bogomips : 2000.00 timebase : 1000000010 platform : PowerPC 44x Platform model : amcc,wdnr4700 Memory : 256 MB
Telnet: /proc/bus/usb/devices
[WNDR4700]# cat /proc/bus/usb/devices T: Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=480 MxCh= 1 B: Alloc= 0/800 us ( 0%), #Int= 0, #Iso= 0 D: Ver= 2.00 Cls=09(hub ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1 P: Vendor=1d6b ProdID=0002 Rev= 2.06 S: Manufacturer=Linux 2.6.32.11-wndr4700 dwc_otg_hcd S: Product=DWC OTG Controller S: SerialNumber=dwc_otg.0 C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub E: Ad=81(I) Atr=03(Int.) MxPS= 4 Ivl=256ms T: Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#= 2 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1 P: Vendor=05e3 ProdID=0723 Rev=94.54 S: Manufacturer=Generic S: Product=USB Storage C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mA I:* If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage E: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms T: Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=?? MxCh= 4 B: Alloc= 0/900 us ( 0%), #Int= 0, #Iso= 0 D: Ver= 3.00 Cls=09(hub ) Sub=00 Prot=03 MxPS= 9 #Cfgs= 1 P: Vendor=1d6b ProdID=0003 Rev= 2.06 S: Manufacturer=Linux 2.6.32.11-wndr4700 xhci_hcd S: Product=xHCI Host Controller S: SerialNumber=0000:45:00.0 C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub E: Ad=81(I) Atr=03(Int.) MxPS= 4 Ivl=12ms
Telnet: /proc/bus/pci/devices
[WNDR4700]# cat /proc/bus/pci/devices 4000 aaa0bed0 25 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport 4100 111d803a 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport 4210 111d803a 26 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport 4218 111d803a 27 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport 4220 111d803a 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport 4300 168c0030 13 e00000004 0 0 0 0 0 e00300000 20000 0 0 0 0 0 10000 ath_pci 4400 168c0033 14 e00100004 0 0 0 0 0 e00400000 20000 0 0 0 0 0 10000 ath_pci 4500 19120015 34 e00200004 0 0 0 0 0 0 2000 0 0 0 0 0 0 xhci_hcd
Telnet: mount
[WNDR4700]# cat /proc/mounts rootfs / rootfs rw 0 0 /dev/root / squashfs ro,relatime 0 0 none /proc proc rw,relatime 0 0 sysfs /sys sysfs rw,relatime 0 0 none /tmp tmpfs rw,nosuid,nodev,relatime 0 0 tmpfs /dev tmpfs rw,relatime,size=128k 0 0 none /proc/bus/usb usbfs rw,relatime 0 0
U-boot starting
Auto calibration ---
U-Boot 2009.08 (Jul 03 2012 - 13:04:31)
CPU: AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz)
Security support
Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND
32 kB I-Cache 32 kB D-Cache
DNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4
Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTG
I2C: ready
DRAM: 256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3)
NAND: 128 MiB
*** Warning - bad CRC, using default environment
Configure Max Payload 256B
PCIE0: successfully set as root-complex
03 00 168c 0030 0280 ff
02 02 111d 803a 0604 00
04 00 168c 0033 0280 ff
02 03 111d 803a 0604 00
05 00 1912 0015 0c03 00
02 04 111d 803a 0604 00
01 00 111d 803a 0604 00
131072 bytes read: OK
Net: ppc_4xx_eth0
AR8327 GigaSW initialize...done
ENET Speed is 1000 Mbps - FULL duplex connection (EMAC0)
Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual
nmrp server is stopped or failed !
Type run flash_nfs to mount root filesystem over NFS
Hit any key to stop autoboot: 0
U-boot menu
=> help ? - alias for 'help' askenv - get environment variables from stdin autoscr - DEPRECATED - use "source" command instead base - print or set address offset bdinfo - print Board Info structure board_hw_id_set- Set board_hw_id board_hw_id_show- Show board_hw_id board_model_id_set- Set board_model_id board_model_id_show- Show board_model_id board_parameters_set- Set WPS PIN code, Serial number, SSID, Passphrase, MAC address board_passphrase_set- Set passphrase on board board_passphrase_show- Show board_passphrase board_ssid_set- Set ssid on board board_ssid_show- Show board_ssid boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootelf - Boot from an ELF image in memory bootm - boot application image from memory bootp - boot image via network using BOOTP/TFTP protocol bootvx - Boot vxWorks from an ELF image chip_config- program the I2C bootstrap EEPROM chk_dniimg- chk_dniimg - check integrity of dni firmware image. cmp - memory compare coninfo - print console devices and information cp - memory copy cpuclk - cpuclk - change cpu clock frequency crc32 - checksum calculation dcache - enable or disable data cache dhcp - boot image via network using DHCP/TFTP protocol echo - echo args to console eeprom - EEPROM sub-system exit - exit script ext2load- load binary file from a Ext2 filesystem ext2ls - list files in a directory (default /) fatinfo - print information about filesystem fatload - load binary file from a dos filesystem fatls - list files in a directory (default /) fdt - flattened device tree utility commands fw_recovery- fw_recovery - start tftp server to recovery dni firmware image. getdcr - Get an AMCC PPC 4xx DCR's value getidcr - Get a register value via indirect DCR addressing go - start application at address 'addr' help - print online help i2c - I2C sub-system icache - enable or disable instruction cache iminfo - print header information for application image imxtract- extract a part of a multi-image interrupts- enable or disable interrupts irqinfo - print information about IRQs itest - return true/false on integer compare loadb - load binary file over serial line (kermit mode) loadn_dniimg- loadn_dniimg - load dni firmware image from NAND. loads - load S-Record file over serial line loady - load binary file over serial line (ymodem mode) loop - infinite loop on address range loopw - infinite write loop on address range macset - Set ethernet MAC address macshow - Show ethernet MAC addresses md - memory display mdc - memory display cyclic mii - MII utility commands mm - memory modify (auto-incrementing address) mtest - simple RAM read/write test mw - memory write (fill) mwc - memory write cyclic nand - NAND sub-system nboot - boot from NAND device ndfc - ndfc - enable|disable NDFC nfs - boot image via network using NFS protocol nm - memory modify (constant address) pci - list and access PCI Configuration Space ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol reginfo - print register information reset - Perform RESET of the CPU rnset - set region number rnshow - Show Region Number on Board run - run commands in an environment variable sata - SATA sub system saveenv - save environment variables to persistent storage sdram_config- sdram_config - Configure SDRAM as 32-bit or 16-bit setdcr - Set an AMCC PPC 4xx DCR's value setenv - set environment variables setidcr - Set a register value via indirect DCR addressing showvar - print local hushshell variables sleep - delay execution for some time snset - Set serial number source - run script from memory test - minimal test like /bin/sh tftpboot- boot image via network using TFTP protocol version - print monitor version wmacset - Set wlan MAC address wpspinset- Set wpspin number
U-boot: printenv
=> printenv
bootcmd=if loadn_dniimg 0 0x180000 0x4e0000 && chk_dniimg 0x4e0000; then nand read 0x800000 0x180000 0x20000;bootm 0x500000 - 0x800040;else fw_recovery; fi
bootdelay=2
baudrate=115200
loads_echo=
preboot=echo;echo Type "run flash_nfs" to mount root filesystem over NFS;echo
hostname=wndr4700
netdev=eth0
nfsargs=setenv bootargs root=/dev/nfs rw nfsroot=${serverip}:${rootpath}
ramargs=setenv bootargs root=/dev/ram ramdisk_size=${ramdisk_size} rw
addip=setenv bootargs ${bootargs} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}:${netdev}:off panic=1
addtty=setenv bootargs ${bootargs} console=ttyS0,${baudrate}
addmisc=setenv bootargs ${bootargs}
initrd_high=30000000
kernel_addr_r=400000
fdt_addr_r=800000
ramdisk_size=200000
rootpath=/opt/eldk/ppc_4xx
flash_self=run ramargs addip addtty addmisc;bootm ${kernel_addr} ${ramdisk_addr} ${fdt_addr}
flash_nfs=run nfsargs addip addtty addmisc;bootm ${kernel_addr} - ${fdt_addr}
net_nfs=tftp ${kernel_addr_r} ${bootfile}; tftp ${fdt_addr_r} ${fdt_file}; run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
fdt_file=wndr4700/wndr4700.dtb
load=tftp 200000 wndr4700/wndr4700_u-boot.bin
update=protect off 0x01000000 FFFFFFFF;era 0x01000000 FFFFFFFF;cp.b ${fileaddr} 0x01000000 ${filesize};setenv filesize;saveenv
upd=run load update
nload=tftp 200000 wndr4700/wndr4700_u-boot-nand.bin
nupdate=nand erase 0 100000;nand write 200000 0 100000;setenv filesize;saveenv
nupd=run nload nupdate
kernel_addr=fc000000
fdt_addr=fc1e0000
ramdisk_addr=fc200000
pciconfighost=1
pcie_mode=RP:RP
boardtype=pcie
usr_dir=wndr4700
set_images=setenv bootfile ${usr_dir}/wndr4700_uImage.bin;setenv fdt_file ${usr_dir}/wndr4700.dtb;setenv mtd_file ${usr_dir}/wndr4700_rootfs.jffs2;setenv udiag_file ${usr_dir}/wndr4700/uDiag_wndr4700.img
sata_controller=sata1
bootfile=wndr4700/wndr4700_uImage.bin
mtd_addr_r=0x4000000
mtd_file=wndr4700/wndr4700_rootfs.jffs2
udiag_file=wndr4700/uDiag_wndr4700.img
kernel_size=0x400000
fdt_size=0x25000
ramdisk_file_size=0x1000000
ramdisk_addr_r=0x2000000
nupd1=tftp ${kernel_addr_r} ${bootfile};nand erase clean 0x1700000 0xE00000;nand write.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size}
nupd2=tftp ${fdt_addr_r} ${fdt_file};nand erase clean 0x2500000 0xb00000;nand write.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size}
nupd3=echo Clean up some memory...Please wait for a momen\t;mw.b ${mtd_addr_r} 0xff 0x3400000;tftp ${mtd_addr_r} ${mtd_file};nand erase clean 0x4000000 0x3400000;nand write.jffs2 ${mtd_addr_r} 0x4000000 ${filesize}
nupd4=tftp ${ramdisk_addr_r} ${ramdisk_file};nand erase clean 0x3000000 0x1000000;nand write.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size}
nupdu=tftp 200000 ${udiag_file};nand erase clean 0x7500000 0xB00000;nand write.jffs2 200000 0x7500000 0x200000
mtd_args=setenv bootargs root=/dev/mtdblock6 rw rootfstype=jffs2
mtd_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run mtd_args addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
nfs_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}
net_self=tftp ${kernel_addr_r} ${bootfile};tftp ${fdt_addr_r} ${fdt_file};tftp ${ramdisk_addr_r} ${ramdisk_file};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}
nand_self=nand read.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size};nand read.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size};nand read.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}
env_clear=nand erase 0x40000 0x40000
udiag=nand read 0x100000 0x7500000 0x200000; go 102100
ipaddr=192.168.1.1
serverip=192.168.1.7
bootcmd1=nand readimg 400000 0x120000;nand read 800000 0x100000 0x20000;bootm 400000 - 800040
bootcmd0=nand read 400000 0x120000 0x300000;nand read 800000 0x100000 0x20000;bootm 400000 - 800000
stdin=serial
stdout=serial
stderr=serial
ethaddr=20:e5:2a:68:dd:87
ethact=ppc_4xx_eth0
ver=U-Boot 2009.08 (Jul 03 2012 - 13:04:31)
Environment size: 4135/131067 bytes
U-Boot: nand
help nand
nand - NAND sub-system
Usage:
nand info - show available NAND devices
nand device [dev] - show or set current device
nand readimg - addr off
read a image starting at offset 'off'
to memory address 'addr', skipping bad blocks.
nand read - addr off|partition size
nand write - addr off|partition size
read/write 'size' bytes starting at offset 'off'
to/from memory address 'addr', skipping bad blocks.
nand erase [clean] [off size] - erase 'size' bytes from
offset 'off' (entire device if not specified)
nand bad - show bad blocks
nand dump[.oob] off - dump page
nand scrub - really clean NAND erasing bad blocks (UNSAFE)
nand markbad off [...] - mark bad block(s) at offset (UNSAFE)
nand biterr off - make a bit error at offset (UNSAFE)
U-boot: sata
=> help sata sata - SATA sub system Usage: sata sata init - init SATA sub system sata info - show available SATA devices sata device [dev] - show or set current device sata part [dev] - print partition table sata read addr blk# cnt sata write addr blk# cnt
Note: With high probability it is possible to boot up using the picture firmware via SATA, here is a description of how to do it
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the Serial Port of this specific device: Pins are in place GND, TX, RX, VCC
Photo of PCB with markings
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
How to connect to the JTAG Port of this specific device:
Photo of PCB with markings
Notes
Telnet (original firmware)
Many Netgear routers have telnet support built-in, but gaining access to it requires an extra step of sending a specially formatted payload to the telnet daemon before it will allow users to log in. Netgear provides the executable called telnetenable.exe for doing just this. It is only available for the “other OS”. However, people not employed by Netgear wrote two alternative Programs that do run under Unix. One is written in C and is under the GPLv2 and the other written in Python and is under the MIT License.
- please follow ⇒ Unlocking the Netgear Telnet Console
Resources
- OEM source code and toolchain: Netgear KB Article 2649 - Netgear Open Source Code for Programmers - GPL
- Netgear provides SDK (sources) to the router, but NAND is in this image is read-only.
- v.1.0.0.52 (348M)
- v.1.0.0.50 (346M)
- v.1.0.0.34 (342M)
- v.1.0.0.32 (342M)
- v.1.0.0.28 (342M)