[koala]

Hi,

I loaded my TP-Link TL-WDR4900 v1 with webflash file from DD-WRT and now my router stuck with no WAN IP neither able to rollback nor webrevert.

Would anyone able to assist?

Router: TL-WDR4900 v1
Firmware: DD-WRT v3.0-r31277 std (02/07/17)
Kernel: Linux 4.4.47 #179 Tue Feb 7 07:37:42 CET 2017 ppc

Problems:
- Failed to get WAN IP.
- Failed to webrevert to TP-Link firmware.
- Failed to rollback to DDWRT_v3.0 (12-15-2016-r30949).

Upgrade from: DDWRT_v3.0 (12-15-2016-r30949) ==> DD-WRT v3.0-r31277 std (02/07/17), was done through web GUI using Ethernet/cable.

30/30/30 reset has been done numerous times, rollback/upgrade via telnet also has been tried. All ends up with no good results.

Managed to successfully downloaded (wget) the BIN file into /tmp folder but failed when trying to write the file using this command:
================================================
mtd -r write wdr4900v1_webrevert.bin firmware
================================================


ERROR MESSAGES:
================================================
root@DD-WRT:/tmp# mtd -r write wdr4900v1_webrevert.bin firmware
Could not open mtd device: firmware
Can't open device for writing!
root@DD-WRT:/tmp#
root@DD-WRT:/tmp# cd firmware
root@DD-WRT:/tmp/firmware# ls
pci_wmac0.eeprom pci_wmac1.eeprom
root@DD-WRT:/tmp# ls -s
268905810 TZ 268815600 hosts 268815600 services
3213576680 ath0_hostap.conf 268815600 loginprompt 268815600 udhcpd.conf
3213576728 ath1_hostap.conf 268815600 mnt 268815600 udhcpd.leases
3213576728 cron.d 268815600 nvram 268815600 udhcpd.statics
3213576728 dnsmasq.conf 268815600 oet 268815600 var
3213576728 dnsmasq.leases 268815600 resolv.conf 268815600 www
3213576728 etc 268815600 resolv.dnsmasq
3213576728 firmware 268815600 root
root@DD-WRT:/tmp#
================================================

[hman32]

Currently it's a very bad ideas to update the WDR4900. Since the begin of this year everything is broken.

Unfortunately the only way to revert your firmware is to use TFTP. The procedure coming from the WDR4900 wiki is :

1) Router should be unplugged (power off) and TFTP server installed not yet running.
2) Copy your desired dd-wrt image for the TPlink-WDR4900 into your TFTP server folder and rename it into wdr4900v1_tp_recovery.bin (as the router will search for this file).
3) Make sure your card has address 192.168.0.66 AND netmask 255.255.255.0
4) Start the tftp server and make sure it is listening on 192.168.0.66
5) Plug in your router and power it then directly keep the WPS/Reset button pressed until the tftp server confirms the transfer is done
6) Wait for the router to reboot, the new image will then be loaded

Hope this will help you

[koala]

Thanks for the response hman32.

I did this too... power OFF the router and by keeping the WDS/Reset button pressed, power ON the router; but it seems like the WDR4900 did not try to seek file from TFTP at 192.168.0.66.

I installed Wireshark to inspect the packets and unable to find anything about 192.168.0.66.

Any tips?

[hman32]

I think you should first power up the 4900 then directly keep pressed the reset button and not keeping pressed the reset while starting the router.

Also you must directly connect your computer rj45 to one of the first four on the router (not the WAN port).

[koala]

CMIIW, my understanding is:

- Router ON, pressing RESET will set it back to default settings.
- Router OFF, pressing RESET while turning it ON will enter config/recovery mode (router seeks for BIN file from TFTP).

I am wondering what should be the correct folders and files which should exist in a recoverable router?

Below are the files and folders under TMP folder when I TELNET into it, and I have no clue whether something is missing?

================================================
root@DD-WRT:/tmp# ls -s

268905810 TZ 268815600 hosts 268815600 services
3213576680 ath0_hostap.conf 268815600 loginprompt 268815600 udhcpd.conf
3213576728 ath1_hostap.conf 268815600 mnt 268815600 udhcpd.leases
3213576728 cron.d 268815600 nvram 268815600 udhcpd.statics
3213576728 dnsmasq.conf 268815600 oet 268815600 var
3213576728 dnsmasq.leases 268815600 resolv.conf 268815600 www
3213576728 etc 268815600 resolv.dnsmasq
3213576728 firmware 268815600 root

root@DD-WRT:/tmp#
================================================

[Doppel-D]

Hi koala,
was in the same boat also couldn't bring tftp to work. If you are using windows and tftpd32 check if the firewall is allowing access,mine was blocking.

My situation was even worse than yours, I couldn't even login through GUI or SSH, nor could I trigger a reset to erase nvram to defaults.

So I ended up soldering the necessary pins for the serial connection. If you also have to, be warned it's tricky and if you are inexperienced some pitfalls are waiting.

Thru serial connection I was able to set a new password for the GUI because you can login with root without password:

nvram set http_passwd=
nvram commit

That helped a bit to change network settings to get internet access but that was only a short success because I managed to brick the device with a wrong mtd write command ;- )

From that point I continued here and now I am on openwrt ;- )

[koala]

[Doppel-D]

Too bad.....sounds like router is in some kind of self destruction mode and the more you try the worse it gets ;- )

Regarding the ARP requests: If they are from your router I would suspect it's a good life sign but why it doesn't get the tftp image from your PC?

Have you tried again 30/30/30 reset to set to defaults?

[Tamsy]

At least I am not the only person experiencing this behavior with a TL-WDR4900v1 after updating DD-WRT from r30949 to r31277.

Just ordered a USB to TTL-Converter-Module with buildin CP2102 from Amazon to recover the semi-bricked Router through tftp. What I am reading here doesn't give much hope though

[jiri.dostal]

Hi Koala,

last week I contend with the same as you describe.

Router TL-WDR4900(EU) ver. 1.3 + dd-wrt r30432 (16/08/16). I try flash last version v3.0-r31277 std (02/07/17) - result was unfunctional router.

My solution:
- NTB with Win10
- as TFTP server I download and install Solarwinds.net ver 8.7.2 link for download: http://www.stahuj.centrum.cz/internet_a_site/servery/ftp/solarwinds-tftp-server/
- after instalation the "root tmp" is located as "c:\TFTP-Root\"
- I find this FUNCTION original stock FW for WDR4900 http://www.friedzombie.com/tplink-stripped-firmware/ (revert FW from this forum doesn't work!!! in this case)
- download, unpack and rename file "TL-WDR4900-V1-FW0.0.3-stripped.bin" to "wdr4900v1_tp_recovery.bin" and copy to c:\TFTP-Root\
- disable wifi adapter at my NTB and set up static IP 192.168.0.66 NETMASK 255.255.255.0 for ethernet card
- run TFTP server (very simple SW) at status bar is tour IP 192.168.0.66
- clikc in menu File->Configure tab "security". Change to "Transmit and receive files", confirm "OK"
- connect ethernet card (RJ45) at NTB directky by wire to first LAN port at router (no WAN - blue port)
- plug in your router and power it then directly keep the WPS/Reset button pressed
- in the main window tftp server confirms the transfer wdr4900v1_tp_recovery.bin to router
- router reboot and.... original stock FW is running at IP 192.168.0.1
- after that I flash dd-wrt v3.0-30949 std (15/12/16) - you have to use factory-to-ddwrt.bin file
- my router is back in live )

I waste three evenings with this...

(sorry for my weak english)

[hman32]

[koala]

[koala]

[koala]

[koala]