Buffalo AirStation WZR-D1800H

Wikidevi Notes
This device is Broadcom based. OEM Arcadyan. Not bundled with DD-WRT, but work has been completed to support the device, see this thread for the latest test build

On the OpenWrt wiki
 * Per the lspci dump, the BCM4360 in this device has the PCI ID of 14e4:43a2

Review on SmallNetBuilder, part 1 and part 2
 * 10:6F:3F OUI
 * The Arcadyan model of the device may be WG9116AAC-J6.
 * "P/N: 141911620002J R01" (w/ an RoHS logo to the right) appears to be silkscreened on the main board.
 * "P/N: 141883320008J" is silkscreened on the BCM4360 wireless module.
 * The silkscreened manuf. date code is 1215 (third week of April, 9th to the 15th).
 * Default SSIDs appear to be BUFFALO-XXXXXX_A and BUFFALO-XXXXXX_G (upper case letters, LAN MAC is probably the MAC used for both)

On the DD-WRT forums, and another post with the initial test build

"P/N: 141911620002J R0A" is silkscreened on the main board, per the FCC photos.
 * .. and "P/N: 141883320000J REV:0A" is silkscreened on the BCM4331 wireless module in the same photos.

The BCM4331 wireless module uses 3x Skyworks (SiGe) SE2594L (Dual Band 802.11a/b/g/n Wireless LAN Front End). The BCM4360 wireless module uses 3x Skyworks (SiGe) SE5003L (5 GHz, 23dBm Power Amp w/ Power Detector).

Reviewed on CNET

Links of Interest

 * http://codechief.wordpress.com/2013/06/06/de-bricking-a-buffalo-wifi-router-with-an-arduino/
 * Buffalo showcases cutting-edge wireless technology
 * on DD-WRT forum

Flashing DD-WRT

 * .bin files are for initial flash, .trx files are for upgrading.


 * 1) Do a Hard Reset
 * 2) Upload DD-WRT via GUI
 * 3) Do a Hard Reset

Upgrading DD-WRT

 * trx files are for upgrading, bin files are for initial flash.


 * 1) Do a Hard Reset
 * 2) Upload DD-WRT via GUI
 * 3) Do a Hard Reset

Reverting from DD-WRT to OEM firmware

 * 1) Do a Hard Reset
 * 2) Upload Buffalo Firmware via GUI
 * 3) Do a Hard Reset

JTAG-Serial Info
Good info on opening this unit Will post here ASAP

Serial Pinouts

 * J9

 1 o VCC 2 o GND 3 o RX 4 o TX

Pictures
Buffalo's Images

jffs Issue in DD-WRT
This problem is caused by the firmware encountering an unmarked bad block during an erase operation while attempting to setup a JFFS2 filesystem on device /dev/mtd/4.

Most people will probably never experience this problem. The AC66U, the D1800H, and the Buffalo WLI-H4-D1300 Media Bridge use the same Samsung flash memory chip. In my case, 4 of my 5 D1800H's had the problem but my D1300 didn't. Neither of my AC66U's had the problem. One person on one of the AC66U threads reported having the problem; here's a link to his post.

If you have the problem, you will not be able to create or copy directories and files to /jffs. Here are some example error messages:(this list was shortened to save space - it can go on for several pages)

Also the Status -> Router webpage will show that JFFS2 has no free space.

To fix this problem try the following at a command line prompt:

This command erases and marks bad any bad blocks encountered so that they can be "skipped" and formats the partition to JFFS2 specifications. I believe the firmware uses the mtd erase command which seems to fail at handling bad blocks. The flash_erase command needs to be run only once.

- Magnetron1.1