Plusnet 2704N V1
The Plusnet 2704N, aka the “Plusnet Hub Zero”, is an Broadcom MIPS-based ADSL router with 802.11bgn wireless and ADSL2+ support. It has a 4-port switch, and the wireless antenna is integrated at the front on the device. It has been a standard router for Plusnet (major UK operator) and hence widely seen (Distributor's site: http://www.plus.net/support/broadband/hardware/plusnet-2704n-setup-guide.shtml). It appears the Plusnet 2704N is a rebranded Sagemcom 2704N V1, and same hardware as TP-Link TD-W8960N V5 and TP_Link TD-W8968N V3, and may be similar to Sagemcom 1704N V1.
Supported Versions
| Model/Version | Launch Date | S/N | OpenWrt Version Supported | Model Specific Notes |
|---|---|---|---|---|
| Plusnet FAST 2704N V1 | 2014-12 | X#######A###### | Trunk - Bleeding Edge, r46562 | No openwrt ADSL support, WiFi N mode not correctly working |
Hardware Highlights
Installation
To install via the factory firmware web interface http://192.168.1.254/upload.html, you will need to make a “whole image” to the update the router... If you upload the openwrt image. The log identifies the file as a Broadcom image, but always rejects it.
You will need to add a CFE image (Pad it out to 64K if required) + the openwrt image + the 20 byte tag.
CFE
→ cfe Details about Broadcoms CFE's
Original 2704N CFE (contains some default values)
MD5=3935E3A6A1BA2557544B231F88FEF0D5
With the original CFE (above): to access the Command Line you need to hold down the space bar (for at least 32 repeats) for the prompt.
You can aquire a generic 6318 CFE/Bootloader (not a 6818) which is supplied in many GPL source codes made from 2014. Using a generic cfe will provide a bit better serial port info.
E.G: http://www.tp-link.com/resources/gpl/TD-W8960Nv5.0_consumer_release.tar.gz
OR: http://oss.sky.com/SkyHD/SKY-IHR-2-1-s-3761-R-consumer-release.tar.gz
With new/generic CFE's, the internal config/nvram will be blank (0x580 to 0x97F). So you will need to connect a serial port to the router the first time you (re)power it up. If you do not have access to the serial port. You can use the 'Original 2704N CFE' above.
If you choose to use a blank generic CFE, use these common options:
Board ID: 96318REF Number of MAC Addresses: 11 Base MAC Address: 00:10:18:00:00:01 (anything other than 00's) PSI Size: 64
Footer TAG
The 20 byte tag contains the 'NOT' CRC32 of the full image above + the 4 byte string '6318' + DWORD 0x00006318. The other 8 bytes can be left as 0x00.
There are tools which can add the 20 byte footer onto the image, like 'addvtoken' which is supplied in some GPL Source Codes.
Trunk Release CHAOS CALMER (old Version 15.0.5), requires a Wireless config adjustment
Connect via Telnet and type “vi /etc/config/wireless” (press 'escape' then 'i')
Add the mac address option in the file, under the section “config wifi-iface”
config wifi-iface option macaddr '00:10:18:00:00:01'
Also, you may want to install the LuCI web interface:
ifconfig br-lan 192.168.0.100 netmask 255.255.255.0 route add default gw 192.168.0.1 vi /etc/resolv.conf nameserver 192.168.0.1
opkg update && opkg install luci
Easy Option
If you wish to see/try a “whole image”, you can download here:
- Google Drive. This contains the original cfe, copied from a trunk snapshot (so there is no web interface) with the 20 byte footer.
- Google Drive. This is the same as above, but contains the luci web interface, added wifi mac address & changed the switch configuration to all LAN ports with individual flashing LEDs.
Upgrading OpenWrt
→ generic.sysupgrade
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| vlan1 (eth0.1) | LAN ports (2 to 4) | None |
| vlan2 (eth0.2) | WAN port (1) | None |
| wlan0 | WiFi | Disabled |
The WAN port can be switched to a LAN port via the Web Interface.
Switch port '8' is the internal Gigabit connection to the Processor, which is always vlan tagged.
The WAN/PPPoE is tested OK
Buttons
→ hardware.button on howto use and configure the hardware button(s).
| BUTTON | Event | GPIO |
|---|---|---|
| WLAN | <KEY_WLAN> (0xee) | 0 - 1 |
| WPS | <KEY_WPS_BUTTON> (0x211) | 1 - 1 |
| RESET | <KEY_RESTART> (0x198) | 1 - 2 |
Leds
| Label | GPIO |
|---|---|
| WPS, Green | 0 - 2, missing Led on the Plusnet PCB |
| LAN1, Green | 0 - 4 |
| LAN2, Green | 0 - 5 |
| LAN3, Green | 0 - 6 |
| LAN4, Green | 0 - 7 |
| INTERNET, Green | 0 - 8 |
| INTERNET, Red | 0 - 9 |
| DSL, Green | 0 - 10 |
| POWER, Red | 0 - 11 |
| POWER, Green | 1 - 15 (Requires original CFE) |
| USB, Green | 1 - 17 (Requires original CFE). On the Plusnet outer case, this is marked as the WPS Led |
The WLAN Green led is controlled independently by the WiFi chip.
Hardware
Info
| Plusnet 2704N | TP-Link W8960N V5 | |
|---|---|---|
| Instruction set | MIPS | |
| Vendor | Broadcom | |
| bootloader | cfe | |
| Board ID | F@ST2704N | 96318REF |
| System-On-Chip | BCM6318 | |
| CPU @Frq | BMIPS3300 V3.3 @333MHz | |
| Flash size | HS-SPI: 8192 KiB | 8 MiB |
| Flash Chip | Same Specs: 25L6406E | |
| RAM size | 32 MiB | 64 MiB |
| RAM Chip | W9425G6JH-5 | |
| Wireless | distinct Chip: Broadcom BCM43217 (B43) 802.11b/g/n | |
| switch | SoC-integrated: B53 common | |
| USB | 1 x 2.0, Might require a Connector | 1 x 2.0, Requires a Connector |
| PSU | 12V DC 1.5A / Wall Socket Plug S018RM1200150, uses under 4 Watts in total. 2.5mm barrel jack + inner - outer | 9V DC 0.85A |
| Serial | Yes | |
| JTAG | Probably | |
Photos
Case
Main PCB
Serial
→ port.serial general information about the serial port, serial port cable, etc.
How to connect to the serial port: Bridge the 2 thicker red lines, R327 & R328 and connect the TTL Serial Port.
Serial connection parameters: 115200, 8N1
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
It appears to have JTAG on the right hand pins of the picture above. The 10K and 3K resistors are a give away. But the pinouts are currently unknown. 
Based on another Broadcom chip (63168) made around the same time. This might not have basic JTAG Boundary Scan, because of the multi-core design. So you will need eJTAG instructions instead.
Debricking
An alternative to JTAG is to access the SPI flash directly, using a Parallel Port or another 3.3v IO device.
You will need to desolder & lift the first 2 pins (Power & Hold) to isolate them from the board. And power them with a 20ma 3.3v source. A Parallel Port can provide plenty of power.
There are many SPI Flash programmers available on the net.
| Pad Pin | Desc |
|---|---|
| 1 | NOT Hold (connect directly to the chip legs) |
| 2 | Power 3.3v (connect directly to the chip legs) |
| 7 | NOT Chip Select |
| 8 | SO (out) |
| 9 | NOT Write Protect |
| 10 | Ground |
| 15 | SI (in) |
| 16 | Clock |
Hardware mods
→ if you are a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!
To add a USB connector to the board. You will need to add/bridge resistor R18 on the underneath of the board, to provide the 5v power. And cut out the side of the case to expose the USB.
There is no WPA led fitted to the board, so if you bridge resistor R814, it can be used as an general GPIO pin.
Bootlogs
OEM bootlog
HELO CPUI L1CI DRAM ---- PHYS PHYE DDR1 333H SIZ3 SIZ2 RACE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 7.273.1 for BCM96318 (32bit,SP,BE) Build Date: Tue Nov 18 11:25:16 CST 2014 (cookiechen@sz01017.ads.local) Copyright (C) 2005-2012 SAGEMCOM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 2048 sectors Chip ID: BCM6318B0, MIPS: 333MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Total Memory: 33554432 bytes (32MB) Boot Address: 0xb8000000
That is all the bootlog. There is no more information or Command Line. You can access the command line by typing in the unique 32 characters located within the CFE.
If you corrupt the NVRAM in the CFE, you can get a bit more information:
CFE version 7.273.1 for BCM96318 (32bit,SP,BE) Build Date: Tue Nov 18 11:25:16 CST 2014 (cookiechen@sz01017.ads.local) Copyright (C) 2005-2012 SAGEMCOM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB *** Board is not initialized properly *** Press: <enter> to use current value '-' to go previous parameter '.' to clear the current value 'x' to exit this command 96318SV ------ 0 96318REF ------ 1 F@ST1704N ------ 2 F@ST2704N ------ 3 96318SV_SERLED ------ 4 96318SV_SERSW ------ 5 F@ST1744N ------ 6 F@ST1704N_VNPT ------ 7 F@ST1744NV2 ------ 8 Board Id (0-8) : 3 Number of MAC Addresses (1-32) : 11 Base MAC Address : 44:e9:dd:00:00:01 PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 Total Flash size: 8192K with 2048 sectors Chip ID: BCM6318B0, MIPS: 333MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Total Memory: 33554432 bytes (32MB) Boot Address: 0xb8000000
OpenWrt bootlog
HELO CPUI L1CI DRAM ---- PHYS PHYE DDR1 333H SIZ3 SIZ2 RACE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 7.273.1 for BCM96318 (32bit,SP,BE) Build Date: Tue Nov 18 11:25:16 CST 2014 (cookiechen@sz01017.ads.local) Copyright (C) 2005-2012 SAGEMCOM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 2048 sectors Chip ID: BCM6318B0, MIPS: 333MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Total Memory: 33554432 bytes (32MB) Boot Address: 0xb8000000 [ 0.000000] Linux version 4.1.4 (thepeople@viasatpilot) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46566) ) #1 Fri Aug 7 05:54:20 CEST 2015 [ 0.000000] strap_override_bus = fffdffff [ 0.000000] Detected Broadcom 0x6318 CPU revision b0 [ 0.000000] CPU frequency is 333 MHz [ 0.000000] 32MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: 55.46.50-55.51-46 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00029033 (Broadcom BMIPS3300) [ 0.000000] board: board name: F@ST2704N [ 0.000000] MIPS: machine is Sagem F@ST2704N [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Built 1 zonelists in Zone ord grouping on. Total pages: 8128 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Memory: 27100K/32768K available (2917K kernel code, 140K rwdata, 684K rodata, 1304K init, 188K bss, 5668K reserved, 0K cma-reserved) [ 0.000000] NR_IRQS:256 [ 0.000000] clocksource MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11479041721 ns [ 0.000020] sched_clock: 32 bits at 166MHz, resolution 6ns, wraps every 12897800188ns [ 0.008763] Calibrating delay loop... 332.54 BogoMIPS (lpj=665088) [ 0.047084] pid_max: default: 32768 minimum: 301 [ 0.052724] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.059540] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.077393] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.091027] NET: Registered protocol family 16 [ 0.343504] registering PCI controller with io_map_base unset [ 0.379866] PCI host bridge to bus 0000:00 [ 0.384164] pci_bus 0000:00: root bus resource [mem 0x10200000-0x102fffff] [ 0.391223] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.398207] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.405204] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.414154] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.423788] pci 0000:00:00.0: BAR 8: assigned [mem 0x10200000-0x102fffff] [ 0.430828] pci 0000:01:00.0: BAR 0: assigned [mem 0x10200000-0x10207fff 64bit] [ 0.438353] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.443443] pci 0000:00:00.0: bridge window [mem 0x10200000-0x102fffff] [ 0.452575] Switched to clocksource MIPS [ 0.460779] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 0.466629] PCI: Enabling device 0000:01:00.0 (0000 -> 0002) [ 0.472481] bcma: bus0: Found chip with id 43217, rev 0x01 and package 0x09 [ 0.479684] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x27, class 0x0) [ 0.488478] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1E, class 0x0) [ 0.497411] bcma: bus0: Core 2 found: PCIe (manuf 0x4BF, id 0x820, rev 0x14, class 0x0) [ 0.505765] bcma_fallback_sprom: pci bus/device num mismatch: expected 0/0, but got 1/0 [ 0.534076] bcma: bus0: Bus registered [ 0.538692] NET: Registered protocol family 2 [ 0.546326] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.553686] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.560308] TCP: Hash tables configured (established 1024 bind 1024) [ 0.567593] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.573748] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.581315] NET: Registered protocol family 1 [ 0.589046] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.601790] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.607879] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.620036] io scheduler noop registered [ 0.624186] io scheduler deadline registered (default) [ 0.632505] bcm63xx_uart.0: ttyS0 at MMIO 0xb0000100 (irq = 36, base_baud = 1562500) is a bcm63xx_uart [ 0.642250] console [ttyS0] enabled [ 0.642250] console [ttyS0] enabled [ 0.649403] bootconsole [early0] disabled [ 0.649403] bootconsole [early0] disabled [ 0.670529] m25p80 spi1.0: found mx25l6405d, expected m25p80 [ 0.676421] m25p80 spi1.0: mx25l6405d (8192 Kbytes) [ 0.682149] bcm63xxpart: CFE boot tag found with version 6 and board type F@ST2704N [ 0.690185] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.696846] bcm63xxpart: Partition 1 is kernel offset 10100 and length 13f758 [ 0.704179] bcm63xxpart: Partition 2 is rootfs offset 14f858 and length 6a07a8 [ 0.711610] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.718873] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000 [ 0.726137] 5 bcm63xxpart partitions found on MTD device spi1.0 [ 0.732233] Creating 5 MTD partitions on "spi1.0": [ 0.737193] 0x000000000000-0x000000010000 : "CFE" [ 0.744362] 0x000000010100-0x00000014f858 : "kernel" [ 0.751537] 0x00000014f858-0x0000007f0000 : "rootfs" [ 0.758662] mtd: device 2 (rootfs) set to be root filesystem [ 0.769592] 1 squashfs-split partitions found on MTD device rootfs [ 0.776010] 0x000000350000-0x0000007f0000 : "rootfs_data" [ 0.783717] 0x0000007f0000-0x000000800000 : "nvram" [ 0.790967] 0x000000010000-0x0000007f0000 : "linux" [ 0.838494] b53_common: found switch: BCM63xx, rev 0 [ 0.844472] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.855975] NET: Registered protocol family 17 [ 0.860829] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 0.873964] Bridge firewalling registered [ 0.878085] 8021q: 802.1Q VLAN Support v1.8 [ 0.905837] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.941461] Freeing unused kernel memory: 1304K (803ba000 - 80500000) [ 2.822217] init: Console is alive [ 2.826206] init: - watchdog - [ 4.864089] init: - preinit - [ 5.608466] random: procd urandom read with 108 bits of entropy available Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 9.121527] mount_root: jffs2 not ready yet, using temporary tmpfs overlay ifconfig: SIOCGIFFLAGS: No such device [ 9.175210] procd: - early - [ 9.178461] procd: - watchdog - [ 10.186706] procd: - ubus - [ 10.844646] random: nonblocking pool is initialized [ 11.202228] procd: - init - Please press Enter to activate this console. [ 12.802169] NET: Registered protocol family 10 [ 12.823439] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 12.862163] Loading modules backported from Linux version master-2015-07-21-0-g47cd203 [ 12.870423] Backport generated by backports.git backports-20150626-0-gc1a4168 [ 12.886728] ip_tables: (C) 2000-2006 Netfilter Core Team [ 12.922108] nf_conntrack version 0.5.0 (443 buckets, 1772 max) [ 13.030609] xt_time: kernel timezone is -0000 [ 13.115104] cfg80211: World regulatory domain updated: [ 13.120477] cfg80211: DFS Master region: unset [ 13.124933] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 13.134992] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 13.143230] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 13.151477] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 13.159732] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 13.169509] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 13.179280] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 13.187622] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 13.195872] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 13.404378] PPP generic driver version 2.4.2 [ 13.415233] NET: Registered protocol family 24 [ 13.494287] b43-phy0: Broadcom 43217 WLAN found (core revision 30) [ 13.501928] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 17 [ 13.508369] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2057, Revision 14, Version 0 [ 13.517180] Broadcom 43xx driver loaded [ Features: PNL ] [ 19.744955] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 1, 100Mbps, full-duplex [ 24.259269] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 24.272671] jffs2_build_filesystem(): unlocking the mtd device... done. [ 24.279432] jffs2_build_filesystem(): erasing all blocks after the end marker... [ 30.280997] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 1, 100Mbps, full-duplex [ 30.358042] device eth0.1 entered promiscuous mode [ 30.363049] device eth0 entered promiscuous mode [ 30.415919] br-lan: port 1(eth0.1) entered forwarding state [ 30.421812] br-lan: port 1(eth0.1) entered forwarding state [ 32.424617] br-lan: port 1(eth0.1) entered forwarding state [ 56.325168] done. [ 56.327188] jffs2: notice: (738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. BusyBox v1.23.2 (2015-08-07 05:26:48 CEST) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- CHAOS CALMER (Bleeding Edge, r46566) ----------------------------------------------------- * 1 1/2 oz Gin Shake with a glassful * 1/4 oz Triple Sec of broken ice and pour * 3/4 oz Lime Juice unstrained into a goblet. * 1 1/2 oz Orange Juice * 1 tsp. Grenadine Syrup ----------------------------------------------------- root@OpenWrt:/#
Related Hardware
| Model/Version | Launch Date | S/N | OpenWrt Version Supported | Model Specific Notes |
|---|---|---|---|---|
| Sagem 1704N V1 | - | - | - | Possibly same hardware, untested |
| Sagem 2704N V1 | - | - | - | Same hardware, untested |
| TD-W8960N V5 | 2014 Q3 | - | Trunk - Bleeding Edge, r46566+ | 64MiB RAM, otherwise the same |
| TD-W8968N V3 | 2014 | - | Trunk | 64MiB RAM, 1 x USB2.0, otherwise the same |
Notes
There is a modified factory firmware avaliable to expand the 'expert user' options.
External Link: Plusnet-2704N-Rev3-A