NetCore NW714 v2.0路由器TTL救砖
路由器成砖状态：
1.客户端无法获取IP地址
2.客户端设置IP地址后，无法PING通路由器IP地址。
3.路由器按reset按钮，无法重置路由器。
4.路由器的指示灯只有SYS和WPS亮，WPS微亮。
5.在路由器的LAN口和WLAN口插入网线，相应的只是灯亮。
解决思路：
通过上述的路由器状态判断，只有通过TTL线刷方式才能救活路由器。
路由器外观：
路由器内部（接口和串口连接已做好）：
可以看到上图右上角，被厂家预留出了4个接线孔，VCC、RXD、TXD、GND，正好方便我用TTL刷机，这里我只需用到RXD、TXD、GND这三个线就可以。将这三个线焊接出热线针脚，然后用TTL下载器进行连接，连接示意图如下：
正式刷机：
1.将TTL下载器的线与路由器的三个阵脚进行正确连接。
2.将TTL下载器连接电脑。
3.打开设备管理器查看TTL下载器所对应的COM口。
4.打开SecureCRT，按照下图设置：
5.进入SecureCRT，查看串口信息。
6.给路由器上电，串口信息如下。
U-Boot 1.1.3 (Mar 8 2013 - 18:49:23) Board: Ralink APSoC DRAM: 8 MB relocate_code Pointer at: 807b4000 enable ephy clock...done. rf reg 29 = 5 SSC disabled. ****************************** Software System Reset Occurred ****************************** spi_wait_nsec: 42 spi device id: 1c 70 15 1c 70 (70151c70) Warning: un-recognized chip ID, please update bootloader! raspi_read: from:30000 len:1000 *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 4.0.0.0 -------------------------------------------- ASIC 7620_MP (Port5<->None) DRAM component: 64 Mbits SDR DRAM bus: 16 bit Total memory: 8 MBytes Flash component: SPI Flash Date:Mar 8 2013 Time:18:49:23 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 600 MHZ #### estimate memory size =8 Mbytes raspi_read: from:1f0000 len:10000 Readstrval:755 cccc: Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP.
7.看到UBoot，我瞬间就笑了。这里我选择2，进入Load system code then write to Flash via TFTP. （Uboot刷机有很多方法，这里为了方便起见，我选择2）。2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)输入Y接下来，会让你设置路由器IP、TFTP服务IP和刷机固件的名字。在此之前需要在电脑上把TFTP设置好。
2: System Load Linux Kernel then write to Flash via TFTP. Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N) Please Input new ones /or Ctrl-C to discard Input device IP (192.168.1.222) ==:192.168.1.222 Input server IP (192.168.1.33) ==:192.168.1.33 Input Linux Kernel filename () ==:aa.bin然后，只需要等待就可以了。
netboot_common, argc= 3 NetTxPacket = 0x807E4C80 KSEG1ADDR(NetTxPacket) = 0xA07E4C80 NetLoop,call eth_halt ! NetLoop,call eth_init ! Trying Eth0 (10/100-M) Waitting for RX_DMA_BUSY status Start... done raspi_read: from:1f0000 len:10000 Readstrval:755 cccc: ETH_STATE_ACTIVE!! TFTP from server 192.168.1.33; our IP address is 192.168.1.222 Filename 'aa.bin'. TIMEOUT_COUNT=10,Load address: 0x80100000 Loading: Got ARP REPLY, set server/gtwy eth addr (b8:88:e3:92:08:de) Got it ################################################################# ################################################################# ################################### done Bytes transferred = 844284 (ce1fc hex) NetBootFileXferSize= 000ce1fc raspi_erase_write: offs:50000, count:ce1fc raspi_erase: offs:50000 len:c0000 ............ raspi_write: to:50000 len:c0000 ............ raspi_read: from:50000 len:10000 raspi_read: from:60000 len:10000 raspi_read: from:70000 len:10000 raspi_read: from:80000 len:10000 raspi_read: from:90000 len:10000 raspi_read: from:a0000 len:10000 raspi_read: from:b0000 len:10000 raspi_read: from:c0000 len:10000 raspi_read: from:d0000 len:10000 raspi_read: from:e0000 len:10000 raspi_read: from:f0000 len:10000 raspi_read: from:100000 len:10000 raspi_read: from:110000 len:10000 raspi_erase: offs:110000 len:10000 . raspi_write: to:110000 len:10000 . raspi_read: from:110000 len:10000 Done! cccccccccccccccccccccccccccccccc bbbbbbbbbb ## Booting image at bc050000 ... raspi_read: from:50000 len:40 Image Name: zxrouter Image Type: MIPS Linux Standalone Program (uncompressed) Data Size: 844220 Bytes = 824.4 kB Load Address: 80500000 Entry Point: 80500000 raspi_read: from:50040 len:ce1bc load_addr:80500000,data_addr:50040,len:ce1bc,data:bc050040 Verifying Checksum ... OK OK cccccccccccccccccccccccccccc1 cccccccccccccccccccccccccccc2:80500000 ZzOK ifra305x eth0: init pnde=80278580, sc=802740b4, ifp=80274284 ifra305x: driver init ifra305x: init numtxd=128 txd-base=800 at a029e4a0 ifra305x: init num_rxd=64 rxd_base=900 at a029eca0 ifra305x eth1: init pnde=80278590, sc=80274184, ifp=802742cc <-- RTMPAllocAdapterBlock, Status=0 not find ok flash,use default 0 netcore_process:147 asdfaaaaaa aaaa: wan:r vvvvvvvvvvvvv:1e,1 vvvvvvvvvvvvv:1,2 netcore_process:171 module: main_loop:424 ***************** netcore(%s)CN-V2.0.5165, 2013.03.08 18:31. netcore(%s)CN-V2.0.5165, 2013.03.08 18:31. ________________Interface_Lan_Num_tm=0______________________ Interface_Num:-2144334544 kuaiwan ad:1 Loading Run Parametersa... ParamInit malloc flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1d0000,pRamAddress:80300b80,Length:54 flashenhanced/src/ver1/flash_sst_read.cpp:105 flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1e0000,pRamAddress:80300b80,Length:54 flashenhanced/src/ver1/flash_sst_read.cpp:105 *******************************************************************EraseFlash...addr:0x001d0000. src/ralink.c:229 ... Erase from 0x001d0000-0x001dffff: . EraseFlash...addr:0x001e0000. src/ralink.c:229 ... Erase from 0x001e0000-0x001effff: . WriteFlash entry (unsigned int)pFlashAddress=1d0000,pSourceAddress=804f3f48,Length=5c src/ralink.c:236 ... Program from 0x804f3f48-0x804f3fa4 to 0x001d0000: . ParamFinal free Parameters Are Blank! Loading Default Parameters... multicast address, use default. multicast address, use default. multicast address, use default. ------------ wl def ---------------- wlan interface********************mstp_loaddefault:129 Loading Default Parameters out... prep_ifaces:ifaces_found:0, dev->irq1:15 prep_ifaces:ifaces_found:1, dev->irq1:9 prep_ifaces:ifaces_found:2, dev->irq1:0 prep_ifaces:ifaces_found:3, dev->irq1:0 prep_ifaces:ifaces_found:4, dev->irq1:0 all pkt ________________________ 541 revcq init if_start 294 iface:0 if_start 294 iface:1 flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1d0000,pRamAddress:80300b68,Length:54 flashenhanced/src/ver1/flash_sst_read.cpp:105 flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1d0014,pRamAddress:802f0ae0,Length:48 flashenhanced/src/ver1/flash_sst_read.cpp:105 flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1d0000,pRamAddress:80300bfc,Length:54 flashenhanced/src/ver1/flash_sst_read.cpp:105 flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1e0000,pRamAddress:80300b68,Length:54 flashenhanced/src/ver1/flash_sst_read.cpp:105 para size 128KB flashenhanced/src/ver1/flash_up_function_read.cpp:31 pFlashAddress:1d0000,pRamAddress:805c9da0,Length:5c flashenhanced/src/ver1/flash_sst_read.cpp:105 !!!!!!!!!!!!!!!!!!!!!!!!!!!!1 wireless_start !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!1 ------------------- wireless start ----------------- malloc wlanbuffer.............. ------------------- wireless config ----------------- #The word of "Default" must not be removed Default BssidNum=1 MacAddress=00:0C:35:45:0C:00 SSID=Netcore HideSSID=0 AuthMode=OPEN EncrypType=NONE DefaultKeyID=0 Key1Type=0 Key1Str= WPAPSK= RekeyInterval=86400 AccessPolicy0=0 AccessControlList0= WirelessMode=9 AutoChannelSelect=0 Channel=6 HT_BW=1 HT_EXTCHA=1 BeaconPeriod=100 RTSThreshold=2347 FragThreshold=2346 HT_GI=1 BGProtection=0 TxPreamble=0 NoForwarding=0 TxPower=100 WmmCapable=0 BasicRate=15 HT_MCS=33 HT_TxStream=2 HT_RxStream=2 WdsEnable=0 WdsPhyMode=HTMIX WdsDefaultKeyID=1;1;1;1 WdsList= WdsEncrypType= CountryRegion=0 HT_PROTECT=1 HT_BADecline=0 HT_AutoBA=1 HT_HTC=0 HT_RDG=0 HT_AMSDU=0 HT_MpduDensity=5 HT_BAWinSize=64 HT_OpMode=0 HT_STBC=0 HT_40MHZ_INTOLERANT=0 HT_DisallowTKIP=0 HT_BSSCoexistence=0 ----------------------------------------------------- *********************************************************ra0_com_ioctl:1584 <-- RTMPAllocTxRxRingMemory, Status=0 <==== rt28xx_init, Status=0 0x1300 = 00064300 ifp->if_ioctl:801fc600 wireless interface ra0 up. free wlanbuffer.................. netcore(%s)CN-V2.0.5165, 2013.03.08 18:31. LAN_IP=192.168.1.1,unusemem=4096KB reg:baddbadd baddbadd baddbadd baddbadd baddbadd baddbadd CFG_load: flash offset=0000, len=1058 cfg_parse: add cfg item=313 (4184 bytes) CFG_load: flash read 313 items(4184 bytes) into ram cfg_parse: null config! CFG_load: read-only 2 items(48 bytes) into ram CFG_load: total 315 items(4232 bytes) cfg_parse_wlan: parse 3028 bytes! Parsing WIFI configuration succeeds amain:209 Operation Mode: Gateway bug:ifr_link_cmd:1157 interface eth0 init_net successed! eth0_1_com_ioctl:1512 Init device 'ra305x_eth0' eth0_1_com_ioctl:1512 Init device 'ra305x_eth0' ifra305x0: start ESW: Link Status Changed - Port 2 Link up bug:ifr_link_cmd:1157 eth0_1_com_ioctl:1512 Init device 'ra305x_eth0' eth0_1_com_ioctl:1512 Init device 'ra305x_eth0' ifra305x1: start ESW: Link Status Changed - Port 2 Link down main:240 ESW: Link Status Changed - Port 2 Link up led light error multicast address, use default.从反馈信息可以看出“led light error”错误，不过没关系，因为NW714的路由器的固件在网上找不到，我这里刷了一个和它配置相同的NW710的固件。
刷机完成后，赶紧登录路由器的登录地址试一试，果不其然，成功！
此过程涉及工具：
TFTT软件，TTL下载器，网线，电脑，固件，SecureCRT
博客名称：王乐平博客
博客地址：http://blog.lepingde.com
CSDN博客地址：http://blog.csdn.net/lecepin