[Freifunk Franken] wr1043nd wiederherstellen

[itsy]

Hallo Zusammen,

ich hatte meinen neuen WR1043ND grade mal 2 Stunden, bis ich ihn kaputt "gespielt" habe :-(
Den Wechsel von der originalen FW über OpenWRT zu DD-WRT hat er leider nicht verkraftet!

Alle Versuche ihn wieder herzustellen sind leider fehlgeschlagen!

Jetzt habe ich einen parallelen Port eingelötet und mit einem USB-zu-Seriell-Adapter mit Putty auf den Router zugegriffen.

Jetzt stehe ich vor dem ersten Problem - die Zugangsdaten.
Mit meinem gesetzten Passwort komme ich leider nicht rein, "admin" kennt er nicht, sondern nur "root" und alles was mir eingefallen ist, habe ich schon versucht. Habt Ihr eine Idee?
Wenn ich über die Weboberfläche zugreife, bekomme ich auch ne Fehlerseite, daß es Probleme mit den Zugangsdaten gibt - vielleicht hängt das ja zusammen?

Für den Failsave-Mode sollte man eigentlich den QSS-Button drücken, aber irgendwie funktioniert das auch nicht

Und wenn ich dann angemeldet bin, wie gehe ich weiter vor?
Ich habe gelesen, daß erstmal irgendwie den Speicher löschen muss, dann die original-FW hochladen soll, um diese dann zu installieren.
Aber wie mache ich das über die Console?

Kann mir jemand eine Seite mit genauer Anleitung und Befehlen empfehlen?
Ich weiß z.B. wie ich über wget über das Netz mir die FW ziehe, aber wie bekomme ich sie über den seriellen Anschluss auf den Router ?

Vielen Dank und Grüße
itsy

P.S. jetzt bekomme ich nicht mal den Loginpromt, ohne daß ich was gemacht habe ... hier mal der Inhalt meiner Console



Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
No valid address in Flash. Using fixed address
: cfg1 0xf cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Autobooting in 1 seconds## Booting image at bf020000 ...
   Uncompressing Kernel Image ... OK

Starting kernel ...

Linux version 2.6.15--LSDK-6.1.1.40 (zhongjin at rd3linux.tplink) (gcc version 3.4.4) #13 Thu Apr 5 10:46:47 CST 2012
flash_size passed from bootloader = 8
CPU revision is: 00019374
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/sbin/init mtdparts=ar7100-nor0:128k(u-boot),1024k(kernel),2816k(rootfs),64k(config),64k(art) mem=32M
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 200.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30516k/32768k available (1407k kernel code, 2236k reserved, 300k data, 112k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
Jumpstart button pressed.
SCSI subsystem initialized
AR7100 GPIOC major 0
squashfs: version 3.3 (2007/10/31) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
Serial: 8250/16550 driver $Revision: #2 $ 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
RAMDISK driver initialized: 1 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPPoX init, max protocols:3
NET: Registered protocol family 24
pppox protocol 0 register. max:3
cmdlinepart partition parsing not available
Searching for RedBoot partition table
5 RedBoot partitions found on MTD device ar7100-nor0
Creating 5 MTD partitions on "ar7100-nor0":
0x00000000-0x00020000 : "boot"
0x00020000-0x00120000 : "kernel"
0x00120000-0x007e0000 : "rootfs"
0x007e0000-0x007f0000 : "config"
0x007f0000-0x00800000 : "art"
->Oops: flash id 0x10216 .
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb at candelatech.com>
All bugs added by David S. Miller <davem at redhat.com>
ar7100wdt_init: Registering WDT success
watch dog proc create successfully.
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 112k freed
init started:  BusyBox v1.01 (2012.01.30-10:04+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5
This board use 2.6.15
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.4 (256 buckets, 5120 max) - 244 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
insmod: cannot open module `/lib/modules/2.6.15/kernel/flashid.ko': No such file or directory
pppox protocol 1 register. max:3
PPPoL2TP kernel driver, V0.17. fixed many bug. drop rcv pkts and xmit pkts while no buffer, use pass time HZ/4.only drop ip pkt. no printk. xl2tpd 15 retries xmit. 08.20
PPTP driver version 0.8.3
pppox protocol 2 register. max:3
insmod: cannot open module `/lib/modules/2.6.15/kernel/harmony.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.15/kernel/cdc-acm.ko': No such file or directory
Now flash open!

 (none) mips #13 Thu Apr 5 10:46:47 CST 2012 (none)
(none) login: Now flash open!
Realtek switch id is: 0x0
AG7100: Length per segment 1536
AG7100: Max segments per packet 1
AG7100: Max tx descriptor count    40
AG7100: Max rx descriptor count    252
AG7100: fifo cfg 3 00780008
chip ID is 0x00005937
rtl8368s_getAsicPHYRegs(0, 1, 22, &data) return is 0, data is 0x00001000
++ PVID: 0x00000001, bitmap: 0x00000021
++ PVID: 0x00000003, bitmap: 0x0000003e
++ PVID: 0x00000005, bitmap: 0x0000003e
++ PVID: 0x00000007, bitmap: 0x0000003e
++ PVID: 0x00000009, bitmap: 0x0000003e
vtable vid: 0x00000002, bitmap 0x00000022
vtable vid: 0x00000004, bitmap 0x00000024
vtable vid: 0x00000006, bitmap 0x00000026
vtable vid: 0x00000008, bitmap 0x00000028
vtable vid: 0x0000000a, bitmap 0x0000002a
vtable vid: 0x0000000c, bitmap 0x0000002c
vtable vid: 0x0000000e, bitmap 0x0000002e
vtable vid: 0x00000010, bitmap 0x00000030
vtable vid: 0x00000012, bitmap 0x00000032
vtable vid: 0x00000014, bitmap 0x00000034
vtable vid: 0x00000016, bitmap 0x00000036
vtable vid: 0x00000018, bitmap 0x00000038
vtable vid: 0x0000001a, bitmap 0x0000003a
vtable vid: 0x0000001c, bitmap 0x0000003c
vtable vid: 0x0000001e, bitmap 0x0000003e
Writing 4
SIOCETHTOOL
bridge: can't decode speed from eth0: 0
device eth0 entered promiscuous mode
Now flash open!
Writing 4
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
tp_domain: module license 'BSD' taints kernel.
ip_nat_pptp version 3.0 loaded
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
ath_hal: 0.9.17.1 (AR5416, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 0.9.4.5 (Atheros/multi-bss)
Howl Revision ID 0xb9 <6>wifi0: Atheros AR9100 WiSoC: mem=0xb80c0000, irq=2
wlan_me: Version 0.1
Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved
wlan: mac acl policy registered

TP_Flags:6****
The selected channel is 4
Country ie is US
Country ie is US
maxrate = 300000
Country ie is US
br0: port 1(eth0) entering disabled state
Writing 4
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
device ath0 entered promiscuous mode
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
br0: port 2(ath0) entering disabled state
Country ie is US
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
br0: port 2(ath0) entering disabled state

TP_Flags:6****

TP_Flags:0****
Country ie is US
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
fuse init (API version 7.8)
fuse distribution version: 2.7.4
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Port Status c000004
ar7100-ehci ar7100-ehci.0: ATH EHCI
ar7100-ehci ar7100-ehci.0: new USB bus registered, assigned bus number 1
ar7100-ehci ar7100-ehci.0: irq 3, io mem 0x1b000000
hcc_params addr 0xbb000108 val 0x6 hcs_params addr 0xbb000104 val 0x10011
ar7100-ehci ar7100-ehci.0: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
kc   88 : run_telnetDBGDServer start
kc  225 : init_DebugD end
INFO169E: NetUSB 1.161, 0002060F : Feb 22 2012 13:48:44
INFO16A0:  AUTH ISOC
INFO16A1:
usbcore: registered new driver KC NetUSB General Driver
INFO0076:  init proc : PAGE_SIZE 4096
INFO16FA: Check mac address
INFO1575:  sleep to wait br0 to wake up
INFO02D0:  use dev Name br0
INFO157E:  sleep to wait br0 end.
INFO1597:  UDP_BROAD 7437 tcpPort:625868800
INFO02D0:  use dev Name br0
INFO14CE: tcpConnector() started...
0x0f51 = 0x13
SIOCENABLEFWD
INFO13AB: Bind to br0
Inteference detected
rx_clear=100, rx_frame=0, tx_frame=0
ath_bstuck_tasklet... Calling ath_internal reset
INFO02D0:  use dev Name br0
<3>NERR03CD: NU VM     : ks_gethostbyname get ip failed
INFO1610: connect server failed