Linksys WRT610N v1

Wikidevi Notes
WRT610N v1 serial numbers appear to start with CTG0.

"3763-04000106R" is silkscreened on the board.

Links of Interest

 * Need help to unbrick WRT160N v1.0 - Problem Solved - Quikfix
 * 'WRT610N' thread on the DD-WRT forums
 * 'WRT610N - Status (read first post)' thread on the DD-WRT forums
 * Reviewed on SmallNetBuilder
 * Per SmallNetBuilder's screenshots, the default SSIDS may be 'linksys' (2.4 GHz) and 'linksys_media' (5 GHz).


 * 'Inside Story: Linksys WRT610N vs. WRT600N' on SmallNetBuilder

Flashing DD-WRT

 * 1) hard reset (30/30/30 method)
 * 2) navigate to the firmware update tab in the Linksys or dd-wrt GUI
 * 3) initial flash use the trailed build dd-wrt.v24_mega_wrt610n.bin (610n in the filename) - subsequent loads don't require the trailed build)
 * 4) wait 5 minutes after flashing
 * 5) power cycle the router
 * 6) hard reset again (30/30/30 method)
 * 7) configure the router

Reverting to OEM Firmware from DD-WRT
To revert to the original firmware, just download and flash the current Linksys firmware file using DD-WRT GUI following the same steps outlined in the "Steps for flashing" section above.

JTAG Pinouts
nTRST  1o o2	GND TDI  3o o4	GND TDO  5o o6	GND TMS  7o o8	GND TCK  9o o10	GND nSRST 11o o12  N/C N/C 13o o14  N/C Marked by a yellow box in the pics below.

Serial Pinouts
VCC 1 o  TX  2 o  RX  3 o N/C  4 o GND  5 o

DD-WRT vlan Info

 * DD-WRT:VLAN Support

balblas wrote: Confirmed WRT610Nv1 works, also for dot1q trunking:

1 2 3 4 | Case labels 1 2 3 4 | NVRAM ports

vlan1 and vlan2 use different nvram settings (compared to an E2000). Variable "vlan1ports=1 2 3 4 8*" does not seem to be used. It is reset whenever the router is rebooted, but the actual setting being used is new_vlan1ports, which survives a reboot. See example below (I disabled vlan1 on the switch completely as it's the management vlan on my Cisco routers/switches which gives issues when trunking between DD-WRT routers and Cisco):

nvram show | egrep "vlan.ports|vlan.hwname" | sort size: 32203 bytes (565 left) new_vlan1hwname=et0 new_vlan1ports= new_vlan2hwname=et0 new_vlan2ports=0 8 vlan1hwname=et0 vlan1ports=1 2 3 4 8* vlan2hwname=et0 vlan2ports=0 8 vlan3hwname=et0 vlan3ports=4t 3t 8 vlan4hwname=et0 vlan4ports=4t 3t 2 1 8*

Pictures
Cisco's Images

Overview
The WRT610N is the previous top-of-the-line consumer device from Linksys (replaced with the E3000) with the following features:


 * Dual-radio (two BCM4322) allows to operate 2.4 GHz B/G/N and 5 GHz A/N simultaneously
 * 4+1 port Gigabit switch (BCM53115)
 * v1 300 MHz (BCM4705) / v2 533 MHz (BCM4718) or 480 MHz (BCM4716)
 * USB 2.0 host port
 * 64 MByte RAM, 8 MByte Flash

CFE Versions
The CFE is basically the BIOS of the WRT610N. It's responsible for initial hardware configuration and subsequently for booting the actual firmware. There are at least two variants of the WRT610N CFE. To find the CFE versions from within dd-wrt, use:

root@ap-ssn:~# nvram show|egrep 'bootnv|pmon' bootnv_ver=6 pmon_ver=CFE 4.175.64.12

either via telnet or from the Web GUI via "Administration->Commands->Run Commands"

The versions are


 * bootnv_ver=6, pmon_ver=CFE 4.175.64.12 (subsequently called CFE .12)
 * bootnv_ver=7, pmon_ver=CFE 4.175.64.16 (subsequently called CFE .16)

'Builds between 12387 and 12424 do not work on CFE .12 models. DD-WRT will start, but immediately reboot, requiring debricking. Your mileage may vary. See http://svn.dd-wrt.com:8000/dd-wrt/ticket/1149

This is fixed in EKO build 12427, available here: http://www.dd-wrt.com/dd-wrtv2/downloads/others/eko/V24_TNG/svn12424/dd-wrt.v24-12427_mega-wrt610n.bin

Information
If you are installing DD-WRT for the first time on your WRT610N, you need to use a hardware-specific build.

edit: This doesn't seem to be true anymore... information is in dispute.

First time flash for v1 use: ftp://dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/03-24-10-r14144/broadcom/dd-wrt.v24_mega_wrt610n.bin

First time flash for v2 use: ftp://dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/03-24-10-r14144/broadcom_K26/dd-wrt.v24-14144_NEWD-2_K2.6_mini_wrt610nv2.bin

LINUX KERNEL 2.6 BUILDS
DD-WRT v24 is currently built under two different branches, one using the 2.4 kernel and the new one having the 2.6 kernel. You can install the K2.4 builds on v1, but not v2. K2.6 supports both v1 and v2. To identify the difference, K2.4 builds aren't usually marked with any special identification, and K2.6 builds are in a different folder with K26 in the folder name and K2.6 will be in the filename.

For example:

are 2.4 kernel builds and will only work on v1 routers
 * ftp.dd-wrt.com/others/eko/V24_TNG/svn14471/dd-wrt.v24-14471_big-wrt610n.bin and
 * ftp.dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/04-16-10-r14289/broadcom/dd-wrt.v24_mega_wrt610n.bin

are 2.6 kernel builds and will work on v2 as well as v1.
 * ftp.dd-wrt.com/others/eko/V24-K26/svn14471/dd-wrt.v24-14471_NEWD-2_K2.6_big.bin and
 * ftp.dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/04-16-10-r14289/broadcom_K26/dd-wrt.v24-14289_NEWD-2_K2.6_big.bin

So be careful not to use K2.4 on v2 or you will brick your router!!!

Latest version
Keep checking ftp://dd-wrt.com/others/eko/ for updates to either the BrainSlayer or eko builds.

Support for the WRT610N is currently only available via SVN builds. You can download such builds either
 * from Eko (normal and MEGA-Builds):
 * from Brainslayer (only MEGA-Builds):

(The differences between those builds are described here: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=45891—basically, BS' builds contain Asterisk, Eko's don't)

Look for the files labeled "WRT610N". Those builds have a special header and can be flashed directly using the stock Linksys firmware's "Update Firmware" option. A factory reset after the flash is recommended. (see steps for flashing below)

The WRT610N has two radio modules and thus two wireless devices with distinct configuration in DD-WRT: Note that Draft-N can operate in both the 2.4 and 5 GHz bands.
 * wl0 is the 2.4 GHz band radio (supporting 802.11b/g/n)
 * wl1 is the 5 GHz band radio (supporting 802.11a/n)

GPIO
gpio enable 0  result = 01   USB LED Off gpio disable 0 result = 01   USB LED On

gpio enable 1  result = 00   Power LED stops flashing gpio disable 1 result = 00   Power LED starts flashing

gpio enable 2  result = 01   No activity gpio disable 2 result = 01   No activity

gpio enable 3  result = 01   LED on top of the WPS Button turns off gpio disable 3 result = 01   LED on top of the WPS Button turns Amber

gpio enable 4  result = 01   No activity gpio disable 4 result = 01   No activity

gpio enable 5  result = 01   No activity gpio disable 5 result = 01   No activity

gpio enable 6  result = 01   No activity gpio disable 6 result = 01   No activity gpio poll 6 result = 01, 00 at button press = Reset button

01 = No button press 00 = At button press

gpio enable 7  result = 01   No activity gpio disable 7 result = 01   No activity

gpio enable 8  result = 01   No activity gpio disable 8 result = 01   No activity gpio poll 8 result = 01, 00 at button press = WPS button

gpio enable 9  result = 01   LED on top of the WPS Button turns off gpio disable 9 result = 01   LED on top of the WPS Button turns Blue

gpio enable 10  result = 01   No activity gpio disable 10 result = 01   No activity

gpio enable 11  result = 01   No activity gpio disable 11 result = 01   No activity

gpio enable 12  result = 01   No activity gpio disable 12 result = 01   No activity

gpio enable 13  result = 01   No activity gpio disable 13 result = 01   No activity

gpio enable 14  result = 01   No activity gpio disable 14 result = 01   No activity

gpio enable 15  result = 01   No activity gpio disable 15 result = 01   No activity

gpio enable 16  result = 00   No activity gpio disable 16 result = 00   No activity

gpio enable 17  result = 00   No activity gpio disable 17 result = 00   No activity

gpio enable 18  result = 00   No activity gpio disable 18 result = 00   No activity

gpio enable 19  result = 00   No activity gpio disable 19 result = 00   No activity

gpio enable 20  result = 00   No activity gpio disable 20 result = 00   No activity

.. ..

gpio enable 32  result = 01   USB LED Off gpio disable 32 result = 01   USB LED On

gpio enable 33  result = 00   Power LED stops flashing gpio disable 33 result = 00   Power LED starts flashing .. ..

Recovery (Unbricking)
A simple way to recover a bricked device (confirmed to work with both CFE.12 and CFE.16) is:
 * 1) unplug all ethernet ports (Important!)
 * 2) unplug power
 * 3) plug power in
 * 4) wait 2-2.5 seconds
 * 5) press the reset button and keep it pressed for 5 seconds, then release it
 * 6) reconnect ethernet (DHCP shoud give IP address to computer)
 * 7) point your browser at 192.168.1.1. You should see a "Management Firmware update" screen where you can flash the original firmware or dd-wrt directly (even mega builds).

Alternative Method 1:


 * 1) manually assign 192.168.1.10 to your computer
 * 2) unplug power
 * 3) plug power in
 * 4) wait 0.5-1.0 seconds
 * 5) press the reset button and keep it pressed for 1 second, then release it
 * 6) point your browser at 192.168.1.1.

Alternative Method 2:


 * 1) manually assign 192.168.1.10 to your computer
 * 2) unplug power
 * 3) plug power in
 * 4) wait for all lights blink
 * 5) press the reset button and keep it pressed for 1 second or 3/4 flashes of the power-light, then release it
 * 6) point your browser at 192.168.1.1.

The alternative methods are reported to work well on the wrt-610Nv1 CTGxxxx series (mostly works at the first attempt); these series are using CFE .16

The management mode can also be activated from the serial console using nvram set safe_mode_upgrade=on nvram commit reboot

Random reboots/WLAN lockups
As of build 12427, the router will randomly reboot, sometimes after minutes, sometimes after hours. Using only the 2.4 GHz radio seems to make the problem occur less often. Developers are aware of the problem and are working on it.

A possible workaround seems to be disabling the interference mitigation mode using

wl -i eth0 interference 0 wl -i eth1 interference 0

either from telnet or from Administration->Commands.

See here (signature) for real world uptimes of 3 different WRT610N devices, including their respective configurations.

Fixed Wireless MAC
Until build 12360, the 2.4 GHz wireless radio MAC is always 00:90:4C:4E:00:2A. This causes weird client behavior if you have more than one WRT610N in one network. As a workaround, you can manually set the mac address using the shell commands nvram set "pci/1/1/macaddr"=00:90:4C:D6:02:2a nvram commit This is fixed in 12427 for CFE.16 devices. For CFE.12 devices, the situation is now reversed: The 5 GHz MAC always has 00:90:4C:4E:00:2A, and the 2.4 GHz MAC is fine.

VLAN support
See vlan Info

There currently is no kernel driver for the broadcom switch in the device. This makes all of the VLAN settings dysfunctional. There is no workaround. Basic switch operation (i.e., similiar to the Linksys firmware) works fine, though. Note that due to the default configuration of the broadcom chip, the switch will strip all forwarded packets of their VLAN tags. The option "Assign WAN Port to Switch", which actually works at the kernel IP level by adding the Internet "vlan2" device to the main bridge, works.

5 GHz specific issues

 * For certain builds the 5 GHz radio (wl1) may only work when the wireless mode is set to NA-Mixed. Later builds e.g. 13972-mega do not exhibit this behaviour.


 * Neither Site Survey nor Wizviz Survey currently work for the 5 GHz band.

No TFTP recovery
(not really an issue anymore) Due to a problem in the CFE, it is not possible to recover a bricked device using the commonly recommended boot-wait TFTP process (i.e. by waiting for the device to react to pings to 192.168.1.1 and TFTP a firmware file to it). TFTP transfers to the device which are larger than 3.8MB (i.e., the stock firmware) will fail, other TFTP transfers will seemingly succeed, but the CFE will not flash them. See above for a much simpler way to unbrick using management mode. Debricking via serial port is also possible. Note that the serial port is externally accessible inside the "Internet" ethernet jack. Instructions for serial recovery are available here: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=209668#209668

USB
USB support works, including Hubs, for all kind of devices, even when Linksys only advertises this as a "Storage Link". Note that there are known Linux USB issues with USB 2.0, Hubs and Full/Low speed devices, notably the often used FTDI serial converters. Use USB 1.1 only as a workaround.

5 GHz channels
Not specific to the WRT610N, but with the 5 GHz band, the channel limitations per regulatory domain are much broader than with 2.4 GHz channels. Since dd-wrt doesn't limit the 5 GHz channel selection, you run a much higher chance of setting the router to a channel which your client device (which does honor regulatory limits) doesn't support. See http://en.wikipedia.org/wiki/List_of_WLAN_channels#5.C2.A0GHz_.28802.11a.2Fh.2Fj.2Fdraft-n.29 for a list of available 5 GHz band channels.