Как залить прошивку через tftp на роутер

If your device is of the type that has a boot loader with a TFTP client that tries to download an image in recovery mode, then you must run a TFTP server to host the new firmware.
Detailed instructions are given on the Setting up a TFTP server for TFTP Recovery/Install wiki page.

#/bin/bash
USER=user
NETDEV=enp1s0
ip address flush dev $NETDEV
ip address add 10.1.1.10/24 dev $NETDEV
dnsmasq -i $NETDEV --dhcp-range=10.1.1.50,10.1.1.100 \
--dhcp-boot=openwrt-ar71xx-mikrotik-vmlinux-initramfs.elf \
--enable-tftp --tftp-root=/home/$USER/openwrt -d -u $USER -p0 -K --log-dhcp --bootp-dynamic

sudo apt-get install tftpd-hpa tftp
sudo cp ~/uboot/arch/arm/boot/uboot.img /var/lib/tftpboot

sudo launchctl unload -F /System/Library/LaunchDaemons/tftp.plist

sudo launchctl load -F /System/Library/LaunchDaemons/tftp.plist

sudo launchctl stop com.apple.tftpd

sudo launchctl start com.apple.tftpd

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Label</key>
	<string>com.apple.tftpd</string>
	<key>ProgramArguments</key>
	<array>
		<string>/usr/libexec/tftpd</string>
		<string>-l</string>
		<string>-s</string>
		<string>/private/tftpboot</string>
	</array>
	<key>inetdCompatibility</key>
	<dict>
		<key>Wait</key>
		<true/>
	</dict>
	<key>InitGroups</key>
	<true/>
	<key>Sockets</key>
	<dict>
		<key>Listeners</key>
		<dict>
			<key>SockServiceName</key>
			<string>tftp</string>
			<key>SockType</key>
			<string>dgram</string>
		</dict>
	</dict>
</dict>
</plist>

<key>Disabled</key>
<true/>

<string>-l</string>

/private/tftpboot

setenv ipaddr 192.168.1.1
setenv serverip 192.168.1.100
tftpboot 0x80000000 openwrt-xxx-generic-xxx-squashfs-factory.bin
erase 0x9f020000 +0x332004
cp.b 0x80000000 0x9f020000 0x332004
boot.m 0x9f020000

tftpd on MacOS 10.4 «Tiger»

bash-4.2$ sudo bash
Password:
bash-4.2# mkdir -p /private/tftpboot/
bash-4.2# cp /path/to/openwrt-image /private/tftpboot/
bash-4.2# launchctl load -F /System/Library/LaunchDaemons/tftp.plist 
bash-4.2# ps axu|grep ftp
root     23494   0.0  0.0    27696    152  ??  Ss    4:34PM   0:00.00 launchctl load -F /System/Library/LaunchDaemons/tftp.plist
root     23496   0.0  0.0    38604      4  p3  R+    4:34PM   0:00.00 grep ftp
bash-4.2# launchctl start com.apple.tftpd
bash-4.2# ps axu|grep ftp
root     23494   0.0  0.0    27696    152  ??  Ss    4:34PM   0:00.00 launchctl load -F /System/Library/LaunchDaemons/tftp.plist
root     23498   0.0  0.0    27244    464  ??  Ss    4:34PM   0:00.01 /usr/libexec/launchproxy /usr/libexec/tftpd -i /private/tftpboot
root     23500   0.0  0.0    38604      4  p3  R+    4:34PM   0:00.00 grep ftp
bash-4.2# tftp 192.168.100.72   ### just testing
tftp> get openwrt-ar71xx-generic-hornet-ub-squashfs-sysupgrade.bin
Received 7270950 bytes in 2.7 seconds
tftp>

Preparation Steps

Using atftp

Using netkit’s tftp

Using curl

using tftpd-hpa

There are multiple tftp clients that you can choose from.

TFTP command line client short Instructions

GUI TFTP clients

Example

$ tftp 192.168.1.1
tftp> trace
Packet tracing on.
tftp> binary
tftp> put openwrt-brcm-2.4-squashfs.trx
sent WRQ <file=openwrt-brcm-2.4-squashfs.trx, mode=octet>
received ACK <block=0>
sent DATA <block=1, 512 bytes>
received ACK <block=1>
sent DATA <block=2, 512 bytes>
received ACK <block=2>
sent DATA <block=3, 512 bytes>
received ACK <block=3>
sent DATA <block=4, 512 bytes>
...
received ACK <block=4742>
sent DATA <block=4743, 512 bytes>
received ACK <block=4743>
sent DATA <block=4744, 512 bytes>
received ACK <block=4744>
sent DATA <block=4745, 0 bytes>
received ACK <block=4745>
Sent 2428928 bytes in 6.2 seconds
tftp> quit
$

## Error: 'Access violation' (2), starting again!

From DD-WRT Wiki

Jump to: navigation, search

[edit] General

This article describes how to do an initial flash or a TFTP recovery flash for your device.

1. Unplug the router, get a TFTP client for the PC, and connect it via network cable to a router LAN port
2. Set a fixed IP address on the PC with the same network as your router, e.g. Router: 192.168.1.1, PC: 192.168.1.2
3. Get a known good DD-WRT release. Use the Supported_Devices, the device wiki, or the forum for recommended files.
   • For recovering a bad flash, the OEM firmware might be required
   • Use a mini build for 4+ MB flash devices (when possible) or micro build for 2 MB flash devices
4. Setup the TFTP client, then start a continuous ping (-t switch is needed for this in Windows) to the router
5. Plug in the router and start the TFTP client as soon as there is a TTL=100 ping response. The client should show transfer.
   • TTL=64 means application code has been reached. If the router isn’t responding, it is soft-bricked (use OEM firmware)
   • Read about timing problems below: TFTP flash#Special for Vista, Win7 and Win 2008

[edit] Special Asus TFTP Flashing Procedures

Some routers like the Asus WL-500xx series (WL-500G, WL-500G Premium, WL-500W, WL-500G Deluxe), need additional steps to perform a complete and proper initial flash. See this wiki page: Asus TFTP Flash

[edit] Special for Vista, Win7 and Win 2008

In order to catch the narrow window for TFTP flash, you should use platforms with simple TCP/IP implementations that don’t have CTCP implemented: Windows XP or Linux are reported to work, but some have reported significant problems with Vista, Windows 7 or Windows 2008.

• For more information see this posting

Edit: While some may have reported problems, CTCP is definitely not the issue, because it is disabled by default in Windows Vista and Windows 7. So unless people are specifically turning it on, it isn’t running. I personally just used TFTP on my router with no difficulties, although mine is a Netgear WNDR3700 that was waiting for a TFTP flash and didn’t have this race condition at boot as some of these routers seem to. But again, even if you have an issue it’s not CTCP. Check out the wikipedia article on CTCP for information on how to check if it is running and how to disable it (both are simple command line entries).

If having issues, try connecting a separate network switch between the PC and router, so the PC network port sees a connection before the router port is up. This should allow for a faster ping reply. Then follow the instructions as normal.

[edit] Special for Linksys WRT54GL Users

If the router seems to be bricked so that the power light is constantly blinking and pinging the router results in TLL=100 continuously, then there is still a great chance that tftp can help.
Firstly you must flash the router with the original firmware available at Linksys homepage www.linksys.com, since flashing it with DD-WRT probably won’t give any result at all. Then do a 30/30/30 and after that you can flash with DD-WRT Mini. The initial flashing can be done with only the mini version, perhaps later you can move on to bigger versions of it.

[edit] TFTP Tools

With TFTP, all of the information about the transfer is specified during the initial command/setup; there is very little client/server interaction compared with standard FTP.

[edit] Windows

• Windows XP command line TFTP client is by default enabled
• Vista and Win7 command line TFTP needs enabled:
  • Control Panel -> Programs and Features -> Windows Features -> then check mark TFTP Client
• Windows GUI TFTP utilities:

• Simple TFTP Utility tftp2.exe

— The server/IP address is that of the router being flashed.

— Leave the password blank.

— Navigate and select the firmware you wish to flash.

— Set retries to a number between 10 and 99.

• Philippe Journin’s tftpd64 TFTP client (plus various servers: TFTP, DHCP, Syslog, and Log viewer)

-Set the Server interface, Host IP, Local File, then click Put right after starting the router’s TFTP server

-Download page also provides tftp32

• DrayTek Router Tools: This program will run all those pesky TFTP commands with a push of a button.

ftp://ftp.draytek.com/Utility/Firmware%20Upgrade/ or https://www.draytek.com/products/utility/

• Linksys Firmware Auto-Upgrade utility https://www.linksys.com/us/support-article?articleNum=137928

[edit] Linux

• Ubuntu: install TFTP client with command sudo apt-get install tftp
• ATFTP: See install details for several different Linux flavors Using atftp on Linux as well as useage description and example below.

[edit] Mac OS X

• OS X ships with a command-line TFTP client.

connect 192.168.1.1

binary
rexmt 1
timeout 60
put dd-wrt.vXX_XXX.XXX

[edit] Windows

[edit] Command Line

This example is after a bricked update, using a Belkin f5d130uk (which has a bootloader built in, no need for redboot)

• ping the router permanently, by running in Start > Run:

 ping -t 192.168.2.1 -t

and see if it is responding, e.g. like this

 64 bytes from 192.168.2.1: icmp_seq=1 ttl=64 time=2.90 ms
 64 bytes from 192.168.2.1: icmp_seq=2 ttl=64 time=0.264 ms
 64 bytes from 192.168.2.1: icmp_seq=3 ttl=64 time=1.44 ms

• reboot the router via web-if or powercycle (the ping response will stop)
• if you see the the first ping response again …

 From 192.168.2.1 icmp_seq=1 Destination Host Unreachable
 From 192.168.2.1 icmp_seq=2 Destination Host Unreachable
 64 bytes from 192.168.2.1: icmp_seq=3 ttl=128 time=2.90 ms
 64 bytes from 192.168.2.1: icmp_seq=4 ttl=128 time=3.50 ms
 64 bytes from 192.168.2.1: icmp_seq=5 ttl=128 time=0.90 ms

… you will have to start the tftp upload in binary mode immediately after the first pings responses. The TTL of the boot tftp server will be 100 or 128. It usually does 5 pings responses, after that it will boot the firmware in flash, this is the right time to flash (the TTL of DD-WRT is only 64). If the upload doesn’t work the first time, then you have to try the first steps again. you have to be very fast!  Maybe you will have to reset the device via reset button a few times to get the tftp boot working (Siemens, Belkin and similar hardware).

 tftp -i 192.168.2.1 put dd-wrt.vXX_XXX.XXX

• wait a few seconds (be patient! don’t reset the router! keep waiting!) when the upload is successful, change your computer’s IP address to 192.168.1.10, and the router will start responding at 192.168.1.1 with DD-WRT
• user name: root, password: admin
• always do a hardware factory reset after the successful flashing!

[edit] Linksys TFTP GUI

Linksys has a GUI flash utility

Special for Vista, Win7 and Win 2008

In order to catch the narrow window for TFTP flash, you should use platforms with simple TCP/IP implementations that don’t have CTCP implemented: Windows XP or Linux are reported to work, but some have reported significant problems with Vista, Win7 or W2K8.

• For more information see this posting

Here are the setup and use instructions for the TFTP utility.
Both the Linksys original and a Linksys updated copy can be found here TFTP

1. Set your computer hardware adapter to a static IP address within the same subnet as the router’s original firmware (ex…set a static of 192.168.11.10 if your router’s default IP address is 192.168.11.1). Set the net mask to 255.255.255.0.
2. Start the TFTP utility.
   • The Server/IP address is that of the router being flashed.
   • Leave the password blank.
   • Navigate and select the firmware you wish to flash.
   • Set retries to 10.
3. Now plug the ethernet cable from your computer into a LAN port of the router.
4. Unplug the router, plug it back in, and immediately hit the Upgrade button on the TFTP utility.
   • If the router does not flash immediately stop the attempts and vary the timing from when you plug the unit in to the time you hit the start button. I have had good luck flashing within the first 1/2 second of reapplying powering the device.
   • Tip: ping the router continuously. Start > Run > ping -t 192.168.x.x -w 10. Power cycle the router (or tap the reset button) then press Upgrade as soon as you get the first ping reply.
5. Once it flashes and you receive the Success message. Wait for a full 2 minutes while the new firmware flash configures itself. DO NOT power down the router!
6. After the 2 minutes do a Hard reset or 30/30/30 on the router, then configure at 192.168.1.1 (DD-WRT’s default IP address). The default DD-WRT username/password is root/admin.

[edit] Mac OS X

OS X ships with a command-line TFTP client.

First, download the firmware file and put it in your user folder (/Users/yourusername/).

Then connect your computer directly to your router via ethernet. Go to System Preferences > Network. Click on «Ethernet» in the left panel and change «Configure IPv4» to «Manually». Then change «IP address» to 192.168.1.x (where x is any number between 2 & 255).

Then copy & paste the following text into a text editor:

 connect 192.168.1.1
 binary
 rexmt 1
 timeout 60
 put dd-wrt.vXX_XXX.XXX

Change the last line to the filename of the firmware file, which you just moved to your user folder. Copy the whole thing, including the line break after the last line.

Now open Applications > Utilities > Terminal. Enter:

 tftp

A «tftp>» command prompt will appear. Now press the reset button on your router. On the tftp command line in Terminal, paste (Cmd+v) the text you copied. Since you copied the line break at the end, tftp will execute the command at the moment you paste it. Depending on your router, you may have to paste it multiple times to get the timing right.

If it works, you’ll see something like this:

 tftp> connect 192.168.1.1
 tftp> binary
 tftp> rexmt 1
 tftp> timeout 60
 tftp> put dd-wrt.vXX_XXX.XXX
 Sent 1769472 bytes in 9.0 seconds

[edit] Linux

In Linux, tftp can generally be installed with whatever package manager your distribution uses.
on suse:

 smart install tftp

on fedora:

 yum install tftp

on ubuntu

 sudo apt-get install tftp

etc.
The tftp client for Linux and OS X is very similar. When invoked, it gives the user a prompt and takes commands from the standard input.
Binary mode can be set with command-line flags — in OS X, the «-e» flag sets binary mode (among other things which are less important), and in Linux «-m binary». Binary can be set from the prompt in either (this is done below for consistency).

Typical usage looks like:

 tftp 192.168.x.x
 > binary
 > put dd-wrt.vXX_XXX.XXX

Because the transfer must be initiated in a narrow time window during the router’s bootup, tftp’s retransmit option is useful. In the following sequence of commands, tftp will retry to send the file every second for one minute. This can be issued just before the router is booted, so that it will retry to send every second while the router boots.

 tftp 192.168.x.x
 > binary
 > rexmt 1
 > timeout 60
 > put dd-wrt.vXX_XXX.XXX

If it worked, it will say something like «Sent 1769472 bytes in 9.0 seconds»

If it didn’t work, it will say «Transfer timed out.» This is often because it cannot connect to the IP address. Make sure you have manually set your computer’s IP address to one in the router’s subnet.

You can quit tftp with the ‘quit’ command or hitting ctrl+D.

Many Linksys routers require a special version of tftp that has a simple form of authentication. You can download and compile a special version of tftp that works on these routers from: http://redsand.net/projects/linksys-tftp/linksys-tftp.php
(you will need to unpack the tarball and compile the program)

[edit] Using atftp on Linux

Another way of doing this is using atftp. You can install aftp by search it in your package manager.

On Ubuntu:

sudo aptitude install atftp

On Debian (as root):

aptitude install atftp

On Fedora (as root):

yum install atftp

On Suse (as root):

smart install atftp 

Then you go to the folder where you downloaded the official Linksys firmware, for instance if you downloaded it in your desktop:

cd ~Desktop

Unrar the file, for instance if the file is WRT54GL_v4.30.11_012_ETSI_EN_code.rar

unrar x WRT54GL_v4.30.11_012_ETSI_EN_code.rar

Rename the firmware to code.bin.

cp WRT54GL_v4.30.11_012_ETSI_EN_code.bin code.bin

Then you prepare this command (do not press enter yet):

atftp --option "mode octet" --option "timeout  60" --verbose --trace -p -l code.bin 192.168.1.1

Disconnect all your network cables from your router, only leaving one from the computer to the router. Then open another terminal and ping to 192.168.1.1

ping 192.168.1.1

Then unplug and plug back the energy supply and when you see the first ping response from the router you must hit enter in the atftp terminal. Good luck! If everything is alright, you should see a lot of output, from all the transference. At the end you should see the orange/yellow light up. Then you should wait a couple more minutes (you never know what’s happening there :D) and then try the Hard reset aka 30/30/30

About the atftp command: we are putting (-p) a local file (-l) called code.bin to the IP address 192.168.1.1 asking for fully information (verbose) and showing all packages (trace), also that it must be trying for one minute (timeout 60) and in octet mode. Remember, if you get «code pattern error», try with the official Linksys firmware. More information:

man atftp 
atftp --help

Important: you should always try atftp with the official firmware and then flashing to DD-WRT with the HTTP webpage on Administration, «Upgrade Firmware»; specially if you get «code pattern error».

Note: if you use Gnome or KDE you can get problems while trying to put your static IP address. Most of the times, applications like NetworkManager (aka nm-applet) or knetworkmanager will try to get a dynamic IP address, so you should first kill them. For example:

sudo killall NetworkManager

or

sudo killall nm-applet

[edit] If Something Goes Wrong

If your router fails to reboot (power light doesn’t stop flashing, no web interface, etc.) you will need to Recover from a bad flash.

[edit] Related Links

Recover from a Bad Flash

Flash Your Siemens SE505

TFTP Flashing a Belkin F5D7230 — more detailed notes on flashing the F5D7230 (v1000, specifically)

Asus TFTP Flash — special steps for WL-500gP, WL-500W and WL-500g Deluxe

Using Ubuntu and tftp to flash an Asus WL-500W

Skip to content

We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.

Здесь, то есть в этом обзоре, мы будем говорить о манипуляциях над роутером, которые проводятся «на свой страх и риск». Обновление встроенной программы – рекомендуют выполнять многие фирмы, однако, процедуру надо проводить в условиях СЦ. Как прошить роутер, установив альтернативное программное обеспечение – рассматривается на форумах. Но там, как правило, сразу сообщается, какие побочные эффекты возможны, и как вернуть прошивку к стандартной версии.
Мы будем рассматривать один вариант, такой, когда замену встроенной программы можно считать оправданной. Допустим, есть роутер с прошивкой оператора связи. Как правило, такие роутеры – изготовлены на базе серийных устройств фирм D-Link, ASUS, Netgear и некоторых других. Так вот, в этом случае есть возможность заменить прошивку на заводской вариант. Но, тоже, далеко не всегда (не для всех моделей, это – факт).

Для примера, будет рассмотрено, как перепрошить роутер WNR612 фирмы Netgear (если в нем в данный момент установлена прошивка «Дом.RU»). Все действия выполняются без использования графического интерфейса, с помощью программы tftp.
По поводу других роутеров – скажем следующее. Последовательность операций должна быть аналогична той, что рассматривается здесь. Сначала роутер нужно перевести в режим восстановления прошивки, когда он начнет пинговаться – запустить tftp-клиент, и т.д. Как включить на роутере режим восстановления? Смотрите в инструкции фирмы-изготовителя.
Важно знать: скачивать заводскую прошивку необходимо под определенную модель и ревизию устройства (разные ревизии – несовместимы). Далеко не все роутеры «от оператора» позволяют вернуть фирменную прошивку программно, так, как мы и рассматриваем. Пример (отрицательный) – «Дом.RU», устройство DIR-615 ревизии k1.

Установка заводской прошивки

Программа-клиент tftp

Будем считать, что заводская прошивка для роутера – скачана, и находится в разархивированном виде на «Рабочем столе». Мы для примера рассмотрим устройство WNR612 ревизии v2. Еще раз заметим: устройства разной аппаратной ревизии – не являются совместимыми в 99% случаев. Будьте внимательны!

Чтобы установить прошивку, надо узнать локальный адрес самого роутера. Можно посмотреть IP-адрес в «Состоянии» соединения с роутером, на вкладке «Поддержка» (нужна строка «Шлюз по умолчанию», значение IP – должно оканчиваться единицей).
Дальше, качаем простой «клиент» для tftp с понятным интерфейсом: halvator.ru/files/soft/tftp.exe. Можно сразу запустить эту программу. Как видим, интерфейс ее – тривиален:

В поле «Сервер» мы укажем IP-адрес роутера. Для WNR612 (V2), пароль на tftp – пустой. В строке «File» – указываем путь к прошивке (нажав кнопку с тремя точками). Собственно, это все.

Действия, выполняемые до установки прошивки

Перепрошивка роутера по tftp – не намного сложнее, чем в web-интерфейсе. Оставив в локальной сети один компьютер (подключенный к роутеру кабелем), меняем свойства соединения с роутером:

Что надо сделать:

1. В значении IP-адреса роутера – меняем последнюю цифру на «2»
2. Устанавливаем значение в строку «IP-адрес»
3. Маска – будет с последним «0», остальное заполнять не нужно (жмем «OK»)

Настроив сетевую карту, проверьте, что соединение с роутером – работает. Дальше, отключите блок питания роутера.

Как выполнить переустановку прошивки

«Залить» новую прошивку в роутер – можно так:

1. Жмем reset на выключенном роутере, включаем питание, через 5-7 сек. устройство переходит в режим восстановления (отпускаем reset)
2. Проще, после включения – сразу выполнить ping (пробел, адрес роутера), и как только придет ответ, отпускаем reset
3. В tftp-клиенте (с указанными значениями), жмем кнопку «Update»
4. Если что-то не так – повторяем действия 1-3
5. Прошивка будет устанавливаться автоматически (минут 10, не меньше)
6. В завершение, жмем reset на роутере (2-3 секунды). Пробуем зайти в web-интерфейс

Важно знать! Адрес роутера с новой прошивкой – может смениться (не открывается интерфейс – меняйте настройки сетевой карты).

Если что-то не получилось, и роутер ждет установки прошивки (не загружая web-интерфейс), пробуйте «залить» старую версию, так же по tftp. Альтернативные прошивки для роутеров – устанавливают аналогично.
Данное руководство – не для начинающих пользователей. Более надежные методы, возможно, и есть, но все действия в любом случае связаны с риском. Конечно, нельзя отключать питание в процессе «заливки» прошивок.
Есть фильм, из которого – ясно, как работает tftp.

Правда, с роутерами все действия выполняют быстрее (после появления ping – есть только 4 секунды):

Предыдущая

МегафонWi-Fi роутер LTE

Следующая

РоутерКак узнать IP-адрес роутера перед его настройкой