The Zyxel NSA325 is a Kirkwood based NAS (aka Network Attached Storage) with two HDD bay using SATA.

We require a USB stick (FAT32 formatted, single partition) and a 3.3V USB to serial adapter. We will then copy the required files to the USB stick and command the device through a terminal (using serial) to load and flash our files to NAND.

Copy the u-boot.kwb and -factory.bin files to a FAT32 formatted USB stick with msdos partition table (single partition). Rename the -factory.bin to something simple like nsa325.bin.

Attention: the u-boot.kwb from 19.x.x release is bugged and won't allow access to any mass storage. Use the latest u-boot.kwb from the 18.x.x release instead.

:!: Please note that to write to NAND you have to erase the NAND first, which means all data on the NAND will be deleted! Meaning stock firmware, bootloader, settings and everything will be gone! So make sure you got the proper files ready before you start as it's vital that you flash the new bootloader before you restart your device as it would otherwise get soft-bricked.

:!: Make sure to write down your device's MAC address as we need to set it later! Otherwise it would get lost!

After plugging in the USB stick into the NAS with the correct files and booting into u-boot, first step is to install OpenWrt's u-boot:

usb reset
fatload usb 0 0x1000000 u-boot.kwb
nand erase 0x0 0x100000
nand write 0x1000000 0x00000 0x100000

Now we set the correct environment variables:

setenv mtdparts 'mtdparts=orion_nand:0x00c0000(uboot),0x80000(uboot_env),0x7ec0000(ubi)'
setenv bootcmd 'run setenv bootargs; ubi part ubi; ubi read 0x800000 kernel; bootm 0x800000'

After the device reboots into the OpenWrt u-boot we adjust the device's MAC address (adjust the values, see the sticker under the NAS case):

setenv ethaddr AB:CD:EF:00:00:00

Then we proceed to flashing OpenWrt itself (which we called nsa325.bin for less typing):

usb reset
fatload usb 0 0x2000000 nsa325.bin
nand erase.part ubi
nand write 0x2000000 ubi 0x600000

Note that the number at the end indicates the size to write in hex. In this case up to 6 MiB. Increasing this number should work but has not been tested.

And now we reboot to OpenWrt:


hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.

The device has the following buttons:

Power power
Reset reset
Copy copy
           |    |    |
 |3.3V| TX | RX |    | GND|
 +----+----+----+    +----+


Serial connection parameters 3.3V, 115200 Baud
# screen /dev/ttyUSB0 115200
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2020/12/18 21:06
  • by danitool