[OpenWrt Wiki] NETGEAR WNDR4700 and WNDR4720 (2024)

Note: This router has a slot for a 3,5“ SATA HDD, but only WNDR4720 package contents HDD SATA 2TB. WNDR4700 does not include a HDD.

Supported Versions

Hardware Highlights

SD Card Reader: Yes

Installation

Install OpenWrt (generic explanation)

[OpenWrt Wiki] NETGEAR WNDR4700 and WNDR4720 (1) Please add the installation procedure here.

The filename for Firmware OpenWrt Upgrade shows http://downloads.openwrt.org/releases/19.07.2/targets/apm821xx/nand/openwrt-19.07.2-apm821xx-nand-netgear_wndr4700-squashfs-sysupgrade.tar

it should be http://downloads.openwrt.org/releases/19.07.2/targets/apm821xx/nand/openwrt-19.07.2-apm821xx-nand-netgear_wndr4700-squashfs-sysupgrade.bin

Thanks.

Flash Layout

[WNDR4700]# cat /proc/mtddev: size erasesize namemtd0: 08000000 00020000 "NAND 128MiB 3,3V 8-bit"mtd1: 00180000 00020000 "uboot"mtd2: 00020000 00020000 "device-tree"mtd3: 001e0000 00020000 "kernel"mtd4: 01660000 00020000 "rootfs"mtd5: 00080000 00020000 "config"mtd6: 00080000 00020000 "pot"mtd7: 00300000 00020000 "traffic_meter"mtd8: 001c0000 00020000 "language"mtd9: 06020000 00020000 "ecos"mtd10: 00040000 00020000 "wifi_data"mtd11: 01860000 00020000 "firmware"

Bootlogs

OEM bootlog

Auto calibration ---U-Boot 2009.08 (Jul 03 2012 - 13:04:31)CPU: AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz) Security support Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND 32 kB I-Cache 32 kB D-CacheDNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTGI2C: readyDRAM: 256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3)NAND: 128 MiB*** Warning - bad CRC, using default environmentConfigure Max Payload 256BPCIE0: successfully set as root-complex 03 00 168c 0030 0280 ff 02 02 111d 803a 0604 00 04 00 168c 0033 0280 ff 02 03 111d 803a 0604 00 05 00 1912 0015 0c03 00 02 04 111d 803a 0604 00 01 00 111d 803a 0604 00 131072 bytes read: OKNet: ppc_4xx_eth0AR8327 GigaSW initialize...doneENET Speed is 1000 Mbps - FULL duplex connection (EMAC0) Client starts...[Listening] for ADVERTISE...TTTRetry count exceeded; boot the image as usual nmrp server is stopped or failed !Type run flash_nfs to mount root filesystem over NFsh*t any key to stop autoboot: 0Loading from device 0: NAND 128MiB 3,3V 8-bit (offset 0x180000)** check device-tree image ** Verifying Checksum ... OK** check kernel image ** Verifying Checksum ... OK** check rootfs image ** Verifying Checksum ... OKNAND read: device 0 offset 0x180000, size 0x20000 131072 bytes read: OK## Booting kernel from Legacy Image at 00500000 ... Image Name: PowerPC OpenWrt Linux-2.6.32 Image Type: PowerPC Linux Kernel Image (lzma compressed) Data Size: 1870601 Bytes = 1.8 MB Load Address: 00000000 Entry Point: 00000000 Verifying Checksum ... OK## Flattened Device Tree blob at 00800040 Booting using the fdt blob at 0x800040 Uncompressing Kernel Image ... OKUsing PowerPC 44x Platform machine descriptionLinux version 2.6.32.11-wndr4700 (torby.tong@dni-l-sw01) (gcc version 4.5.1 (GCC) ) #2 Sat May 4 00:43:25 CST 2013Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00001000Movable zone start PFN for each nodeearly_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000MMU: Allocated 1088 bytes of context maps for 255 contextsBuilt 1 zonelists in Zone order, mobility grouping off. Total pages: 4094Kernel command line: root=/dev/mtdblock4 rootfstype=squashfs ip=192.168.1.1:192.168.1.7::255.255.255.0:wndr4700:eth0:off panic=1 console=ttyS0,115200PID hash table entries: 1024 (order: -4, 4096 bytes)Dentry cache hash table entries: 32768 (order: 1, 131072 bytes)Inode-cache hash table entries: 16384 (order: 0, 65536 bytes)Memory: 255744k/262144k available (5248k kernel code, 6400k reserved, 512k data, 85k bss, 384k init)Kernel virtual memory layout: * 0xfffe0000..0xffff0000 : fixmap * 0xfd800000..0xfe000000 : consistent mem * 0xfd800000..0xfd800000 : early ioremap * 0xd1000000..0xfd800000 : vmalloc & ioremapHierarchical RCU implementation.NR_IRQS:512UIC0 (32 IRQ sources) at DCR 0xc0UIC1 (32 IRQ sources) at DCR 0xd0UIC2 (32 IRQ sources) at DCR 0xe0UIC3 (32 IRQ sources) at DCR 0xf0clocksource: timebase mult[400000] shift[22] registeredMount-cache hash table entries: 8192NET: Registered protocol family 16OCM1: 32768 Bytes (enabled)OCM1: 32768 Bytes (non-cached)OCM1: 0 Bytes (cached)256k L2-cache enabledPCIE0: Checking link...PCIE0: Device detected, waiting for link...PCIE0: link is up !PCI host bridge /plb/pciex@d00000000 (primary) ranges: MEM 0x0000000e00000000..0x0000000e7fffffff -> 0x0000000080000000 MEM 0x0000000f00000000..0x0000000f000fffff -> 0x0000000000000000 IO 0x0000000f80000000..0x0000000f8000ffff -> 0x0000000000000000 Removing ISA hole at 0x0000000f000000004xx PCI DMA offset set to 0x00000000/plb/pciex@d00000000: Legacy ISA memory support enabledDisabling INTX for MSI testing.Setting for 64-bit MSI and 4 MSI messages.PCIE0: successfully set as root-complexPCI: Probing PCI hardwarePCI: Hiding 4xx host bridge resources 0000:40:00.0pci 0000:41:00.0: PME# supported from D0 D3hot D3coldpci 0000:41:00.0: PME# disabledpci 0000:42:02.0: PME# supported from D0 D3hot D3coldpci 0000:42:02.0: PME# disabledpci 0000:42:03.0: PME# supported from D0 D3hot D3coldpci 0000:42:03.0: PME# disabledpci 0000:42:04.0: PME# supported from D0 D3hot D3coldpci 0000:42:04.0: PME# disabledpci 0000:43:00.0: PME# supported from D0 D1 D3hotpci 0000:43:00.0: PME# disabledpci 0000:44:00.0: PME# supported from D0 D1 D3hotpci 0000:44:00.0: PME# disabledpci 0000:45:00.0: PME# supported from D0 D3hotpci 0000:45:00.0: PME# disabledpci 0000:42:02.0: PCI bridge, secondary bus 0000:43pci 0000:42:02.0: IO window: disabledpci 0000:42:02.0: MEM window: 0x80000000-0x800fffffpci 0000:42:02.0: PREFETCH window: 0x80300000-0x803fffffpci 0000:42:03.0: PCI bridge, secondary bus 0000:44pci 0000:42:03.0: IO window: disabledpci 0000:42:03.0: MEM window: 0x80100000-0x801fffffpci 0000:42:03.0: PREFETCH window: 0x80400000-0x804fffffpci 0000:42:04.0: PCI bridge, secondary bus 0000:45pci 0000:42:04.0: IO window: disabledpci 0000:42:04.0: MEM window: 0x80200000-0x802fffffpci 0000:42:04.0: PREFETCH window: disabledpci 0000:41:00.0: PCI bridge, secondary bus 0000:42pci 0000:41:00.0: IO window: disabledpci 0000:41:00.0: MEM window: 0x80000000-0x802fffffpci 0000:41:00.0: PREFETCH window: 0x80300000-0x804fffffpci 0000:40:00.0: PCI bridge, secondary bus 0000:41pci 0000:40:00.0: IO window: disabledpci 0000:40:00.0: MEM window: 0x80000000-0x802fffffpci 0000:40:00.0: PREFETCH window: 0x80300000-0x804fffffCPM0: pm-iic-device resource /plb/opb/i2c@ef600700CPM0: pm-emac-device resource /plb/opb/ethernet@ef600c00CPM0: pm-monitor-event property not definedCPM0: DCR at 0x160CPM: ocm suspend address 0xd1040000CPM: ocm resume address 0xd1040400CPM: ocm data address 0xd10407d0bio: create slab <bio-0> at 0SCSI subsystem initializedusbcore: registered new interface driver usbfsusbcore: registered new interface driver hubusbcore: registered new device driver usbmod_init:1052ppc460ex_dma_per_chan_init:1064cfg80211: Calling CRDA to update world regulatory domainSwitching to clocksource timebaseNET: Registered protocol family 2IP route cache hash table entries: 16384 (order: 0, 65536 bytes)TCP established hash table entries: 8192 (order: 0, 65536 bytes)TCP bind hash table entries: 8192 (order: -1, 32768 bytes)TCP: Hash tables configured (established 8192 bind 8192)TCP reno registeredNET: Registered protocol family 1pci 0000:45:00.0: xHCI HW not ready after 5 sec (HC bug?) status = 0x801Probing AMCC DMA driverPPC4xx PLB DMA engine IRQ 24PPC460ex PLB DMA engine @0x00_00000100 size 263new_chan->chan_id 0x0new_chan->chan->chan_id 0x0PCIE-MSI: Setting up MSI ...PCIE-MSI: MSI reg base c10000000 - c100000ffPCIE-MSI: MSI sdr base 0000036cPCIE-MSI: PE_IHS h 0000000c l 10000002kcpm: can't read pm-monitor-appkcpm: unable to parse device tree; abortingsquashfs: version 4.0 (2009/01/31) Phillip Loughermsgmni has been set to 496async_tx: api initialized (async)io scheduler noop registeredio scheduler anticipatory registeredio scheduler deadline registeredio scheduler cfq registered (default)PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5PCIE-MSI: vendor aaa0PCIE-MSI: hwirq requested 0, virt 37PCIE-MSI: message: h 0000000c l 10000080 data 00004440PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5PCIE-MSI: vendor 111dPCIE-MSI: hwirq requested 1, virt 38PCIE-MSI: message: h 0000000c l 10000080 data 00004441PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5PCIE-MSI: vendor 111dPCIE-MSI: hwirq requested 2, virt 39PCIE-MSI: message: h 0000000c l 10000080 data 00004442PCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5PCIE-MSI: vendor 111dPCIE-MSI: hwirq requested 3, virt 40PCIE-MSI: message: h 0000000c l 10000080 data 00004443Generic non-volatile memory driver v1.1Serial: 8250/16550 driver, 4 ports, IRQ sharing enabledserial8250.0: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 16550Aconsole [ttyS0] enabledserial8250.0: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550A4ef600300.serial: ttyS0 at MMIO 0x4ef600300 (irq = 22) is a 165504ef600400.serial: ttyS1 at MMIO 0x4ef600400 (irq = 23) is a 16550brd: module loadedloop: module loaded/plb/sata@bffd1000: Port disabled via device-treesata-dwc 4bffd1800.sata: Gettting DMA channel 1sata-dwc 4bffd1800.sata: id 0, controller version 1.91sata-dwc 4bffd1800.sata: DMA initializedsata-dwc 4bffd1800.sata: DMA CFG = 0x00000001dma_register_interrupt register irq (41)ata4294967295: sata_dwc_port_start: setting burst size in DBTSR: 0x00100010sata-dwc 4bffd1800.sata: **** GEN II speed rate negotiatedscsi0 : sata-dwcata1: SATA max UDMA/133 irq 42of-flash 4e4000000.nor_flash: do_map_probe() failedNAND device: Manufacturer ID: 0xad, Chip ID: 0xf1 (Hynix NAND 128MiB 3,3V 8-bit)Scanning device for bad blocksBad eraseblock 657 at 0x000005220000Creating 12 MTD partitions on "4e4000000.ndfc.nand":0x000000000000-0x000008000000 : "NAND 128MiB 3,3V 8-bit"0x000000000000-0x000000180000 : "uboot"0x000000180000-0x0000001a0000 : "device-tree"0x0000001a0000-0x000000380000 : "kernel"0x000000380000-0x0000019e0000 : "rootfs"mtd: find squashfs magic at 0x380000 of "4e4000000.ndfc.nand"the correct location of partition "rootfs": 0x000000380000-0x0000019e00000x0000019e0000-0x000001a60000 : "config"0x000001a60000-0x000001ae0000 : "pot"0x000001ae0000-0x000001de0000 : "traffic_meter"0x000001de0000-0x000001fa0000 : "language"0x000001fa0000-0x000007fc0000 : "ecos"0x000007fc0000-0x000008000000 : "wifi_data"0x000000180000-0x0000019e0000 : "firmware"APM MTD access Wrapper initialized.e1000e: Intel(R) PRO/1000 Network Driver - 1.0.2-k2e1000e: Copyright (c) 1999-2008 Intel Corporation.PPC 4xx OCP EMAC driver, version 3.54mal0: descriptor-memory = ocmMAL: Enabled Interrupt Coal TxCnt: 32 RxCnt: 8 TxTimer: 100000 RxTimer: 5000MAL v2 /plb/mcmal, 1 TX channels, 1 RX channelsRGMII /plb/opb/emac-rgmii@ef601500 initialized with MDIO supportTAH /plb/opb/emac-tah@ef601350 initialized/plb/opb/emac-rgmii@ef601500: input 0 in RGMII modePHY ID: 0x004dd034eth0: EMAC-0 /plb/opb/ethernet@ef600c00, MAC 20:e5:2a:68:dd:87eth0: found Generic MII PHY (0x00)Intel(R) Gigabit Ethernet Network Driver - version 1.3.16-k2Copyright (c) 2007-2009 Intel Corporation.tun: Universal TUN/TAP device driver, 1.6tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>xhci_hcd 0000:45:00.0: xHCI Host Controllerxhci_hcd 0000:45:00.0: new USB bus registered, assigned bus number 1pci_bus 0000:45: firmware: using built-in firmware renesas/K2013080.memxhci_hcd 0000:45:00.0: irq 21, io mem 0xe00200000xhci_hcd 0000:45:00.0: Failed to enable MSI-XPCIE-MSI:ppc4xx_msi_check_device called. vec 1 type 5PCIE-MSI: vendor 1912PCIE-MSI: hwirq requested 4, virt 52PCIE-MSI: message: h 0000000c l 10000080 data 00004444usb usb1: config 1 interface 0 altsetting 0 endpoint 0x81 has no SuperSpeed companion descriptorusb usb1: New USB device found, idVendor=1d6b, idProduct=0003usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1usb usb1: Product: xHCI Host Controllerusb usb1: Manufacturer: Linux 2.6.32.11-wndr4700 xhci_hcdusb usb1: SerialNumber: 0000:45:00.0usb usb1: configuration #1 chosen from 1 choicehub 1-0:1.0: USB hub foundhub 1-0:1.0: 4 ports detectedInitializing USB Mass Storage driver...usbcore: registered new interface driver usb-storageUSB Mass Storage support registered.usbcore: registered new interface driver libusualdwc_otg: version 2.60a 22-NOV-2006dwc_otg: Using DMA modedwc_otg dwc_otg.0: DWC OTG Controllerdwc_otg dwc_otg.0: new USB bus registered, assigned bus number 2dwc_otg dwc_otg.0: irq 34, io mem 0x00000000dwc_otg: Init: Port Power? op_state=1dwc_otg: Init: Power Port (0)usb usb2: New USB device found, idVendor=1d6b, idProduct=0002usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1usb usb2: Product: DWC OTG Controllerusb usb2: Manufacturer: Linux 2.6.32.11-wndr4700 dwc_otg_hcdusb usb2: SerialNumber: dwc_otg.0ata1: Softreset on PMP port 15usb usb2: configuration #1 chosen from 1 choicehub 2-0:1.0: USB hub foundhub 2-0:1.0: 1 port detectedi2c /dev entries driveribm-iic 4ef600700.i2c: using standard (100 kHz) modeibm-iic 4ef600800.i2c: using standard (100 kHz) modeapm82181-adma: Probing AMCC APM82181 ADMA engines...AMCC(R) APM82181 ADMA Engine found [1]: ( capabilities: memcpy )--------------- dma_async_device_register: 683-------------------------apm82181 adma1: allocated 512 descriptor slotsAMCC(R) APM82181 ADMA Engine found [2]: ( capabilities: memcpy )--------------- dma_async_device_register: 683-------------------------apm82181 adma2: allocated 512 descriptor slotsAMCC(R) APM82181 ADMA Engine found [3]: ( capabilities: memcpy )--------------- dma_async_device_register: 683-------------------------apm82181 adma3: allocated 512 descriptor slotsAMCC(R) APM82181 ADMA Engine found [4]: ( capabilities: xor int )--------------- dma_async_device_register: 683-------------------------apm82181 adma4: allocated 819 descriptor slotsNetfilter messages via NETLINK v0.30.nf_conntrack version 0.5.0 (3996 buckets, 15984 max)ip_tables: (C) 2000-2006 Netfilter Core TeamTCP cubic registeredNET: Registered protocol family 10ip6_tables: (C) 2000-2006 Netfilter Core TeamIPv6 over IPv4 tunneling driverNET: Registered protocol family 17Ebtables v2.0 registered802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>All bugs added by David S. Miller <davem@redhat.com>lib80211: common routines for IEEE802.11 driversdrivers/rtc/hctosys.c: unable to open rtc device (rtc0)ata1: SATA link up 3.0 Gbps (SStatus 123 SControl F0300)ata1.00: ATA-9: WDC WD20EFRX-68AX9N0, 80.00A80, max UDMA/133ata1.00: 3907029168 sectors, multi 0: LBA48 NCQ (depth 1/32)ata1.00: configured for UDMA/133blk_queue_max_hw_segments: set to minimum 1scsi 0:0:0:0: Direct-Access ATA WDC WD20EFRX-68A 80.0 PQ: 0 ANSI: 5sd 0:0:0:0: [sda] 3907029168 512-byte logical blocks: (2.00 TB/1.81 TiB)sd 0:0:0:0: [sda] 4096-byte physical blockssd 0:0:0:0: Attached scsi generic sg0 type 0sd 0:0:0:0: [sda] Write Protect is offsd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: unknown partition tablesd 0:0:0:0: [sda] Attached SCSI diskusb 2-1: new high speed USB device using dwc_otg and address 2usb 2-1: New USB device found, idVendor=05e3, idProduct=0723usb 2-1: New USB device strings: Mfr=3, Product=4, SerialNumber=0usb 2-1: Product: USB Storageusb 2-1: Manufacturer: Genericusb 2-1: configuration #1 chosen from 1 choicescsi1 : SCSI emulation for USB Mass Storage deviceseth0: link is up, 1000 FDXIP-Config: Complete: device=eth0, addr=192.168.1.1, mask=255.255.255.0, gw=255.255.255.255, host=wndr4700, domain=, nis-domain=(none), bootserver=192.168.1.7, rootserver=192.168.1.7, rootpath=VFS: Mounted root (squashfs filesystem) readonly on device 31:4.Freeing unused kernel memory: 384k initWarning: unable to open an initial console.init started: BusyBox v1.4.2 (2013-04-26 18:37:36 CST) multi-call binaryLoading data from /dev/mtd5 ...Done!The data center is Running ...PPP generic driver version 2.4.2NET: Registered protocol family 24nf_nat_STARCRAFT: module license 'unspecified' taints kernel.Disabling lock debugging due to kernel taintnf_conntrack_rtsp v0.6.21 loadingnf_nat_rtsp v0.6.21 loadingnf_conntrack_proto_esp loadedNET: Registered protocol family 27PPPoL2TP kernel driver, V0.16.1PPTP-GRE-v1.13 2007 (C) Delta Networks Inc.dni-qos module init.Generating Rules...Done!/etc/rc.common: /etc/rc.common: 83: /sbin/cmd_sipalg: not foundlan mac: 20:e5:2a:68:dd:87wan mac: 20:e5:2a:68:dd:88wlan5g mac: 20:e5:2a:68:dd:89sn:31K12A5400640SN: 31K12A5400640hw_id:HW_IDmodel_id:MODEL_IDThe region number is: 0x0002REGION: WW/sbin/ip_mac: /sbin/ip_mac: 20: cannot create /proc/sys/net/ipv4/conf/br0/arp_drop_reply: Directory nonexistentcp: cannot stat '/etc/wpa2.orig/*': No such file or directorywpspin:20117047Starting network...ln: /tmp/www/cgi-bin/RMT_invite.htm: No such file or directoryln: /tmp/www/cgi-bin/RMT_invite.cgi: No such file or directoryln: /tmp/www/cgi-bin/func.sh: No such file or directorypowerpc_emac_initphy_mode = 0x4phy_map = 0x0phy_address = 0xffffffffreg = 0x7949######## S17 SSDK init succeeded! ########athrs17_reg_init:done SSDK Init scsi 1:0:0:0: Direct-Access Generic STORAGE DEVICE 9454 PQ: 0 ANSI: 0OK!opsd 1:0:0:0: Attached scsi generic sg1 type 0erate done.sd 1:0:0:0: [sdb] Attached SCSI removable disk SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done. SSDK Init OK!operate done./etc/net6conf/6proc: /etc/net6conf/6proc: 33: cannot create /proc/sys/net/ipv6/ipv6_srcrt_type_2: Directory nonexistentdevice eth0.2 entered promiscuous modedevice eth0 entered promiscuous modeNET-LAN: Default LAN MAC is : 20:E5:2A:68:DD:87br0: port 1(eth0.2) entering forwarding statebr0: port 1(eth0.2) entering disabled statebr0: port 1(eth0.2) entering forwarding stateudhcp server (v0.9.8) startedThe attached devices demo is Running ...check minidlna ...killall: minidlna: no process killedgrep: /tmp/etc/minidlna.conf: No such file or directorymknod: /dev/ptmx: File existskillall: utelnetd: no process killedkillall: telnetenable: no process killedThe telnetenable is running ...killall: smbd: no process killedDeleting static route ... Done!Adding static route ... Done!NET-WAN: Default WAN MAC is : 20:e5:2a:68:dd:88dni-qos attached on eth0.1.killall: ntpclient: no process killedudhcp client (v0.9.8) startedDeleting static route ... Done!Deleting static route ... Done!Adding static route ... Done!start rip processstart initial datatime zone index is : 0Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.comkillall: ez-ipupdate: no process killedkillall: updatednsip: no process killedkillall: updatednsip: no process killedkillall: phddns: no process killedkillall: noip2: no process killedkillall: crond: no process killedkillall: miniupnpd: no process killedSending discover...Sending select for 192.168.1.102...ioctl: Cannot assign requested addressLAN: 10.0.0.1/255.255.255.0WAN: 192.168.1.102/255.255.255.0WAN status: 1000M/FullWAN status: 1000M/FullWAN/LAN is NOT conflicting!Lease of 192.168.1.102 obtained, lease time 86400adding dns 192.168.1.1LAN: 10.0.0.1/255.255.255.0WAN: 192.168.1.102/255.255.255.0WAN status: 1000M/FullWAN status: 1000M/FullWAN/LAN is NOT conflicting!Initializing random number generator... read-only file system detected...doneminiupnpd[1559]: listening on 10.0.0.1:5555Starting Firewall...lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0Done!/etc/rc.common: /etc/rc.common: 83: /bin: Permission denieddeleting routersadding router 192.168.1.1time zone index is : 0Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.comStarting Firewall...lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0Done!Deleting static route ... Done!Deleting static route ... Done!Adding static route ... Done!start rip processstart initial databoundkillall: igmpproxy: no process killedcp: cannot stat '/usr/config/shadow': No such file or directoryChanging password for adminNew password:NTPST: one NTP Sync Timestamp existed in POT partition, it's 06:16:57, Dec 10, 2012Bad password: too weakRetype password:Password for admin changed by rootSaving Data...Done!Saving Data...Done!Saving Data...Done!Saving Data...Done!/dev/sda: unknown volume type[vol_id_1]get_disk_volume error, goto ret!!!killall: proftpd: no process killedStart utelnetd by telnetenablePOT is Running...POT is Finished!!!The POT-(Get/Set) Demo is Running ...Changing password for adminNew password:Bad password: too weakRetype password:Password for admin changed by root/dev/sda: unknown volume type[Waring]: This HDD format failed to support the Time Machine!!!!!!/dev/sda: unknown volume type[vol_id_2]get_disk_volume error, goto ret!!!ufsd: driver 8.5 (NTFS4LINUX_U85_014_S[2011-07-25-15:14:27])Evaluation version - not for resale! LBD=ON with delayalloc with ioctl loaded at d7d40000NTFS read/write support includedBig endian platformHfs+/HfsX read/write support includedBuilt for: Netgear_apm_82181_2011-07-20[rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'.[rules_get_value / status / action]: Malformed rule - missing parameter terminator ';'.cat: /tmp/usbdisknum: No such file or directoryADDRCONF(NETDEV_UP): sit0: link is not ready/dev/sdb: error open volumeThis partition type is !disk name is sdb last partition issh: =: argument expectedrm: cannot remove '/tmp/umount_result': No such file or directorySorry, rule does not exist.Sorry, rule does not exist.Sorry, rule does not exist.Sorry, rule does not exist.Sorry, rule does not exist./sbin/wlan: /sbin/wlan: 1: pidnum: not foundsh: 1: unknown operand/sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not found/sbin/update-wifi: /sbin/update-wifi: 1: /sbin/fetchPIN: not foundArgs: 1ath_hal: 0.9.17.1 (AR5416, AR9380, DEBUG, REGOPS_FUNC, WRITE_EEPROM, 11D)ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reservedath_dfs: Version 2.0.0Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reservedath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reservedath_pci: 9.2.0_U10.1020 (Atheros/multi-bss)Caldata = cfce0000 slot=0__ath_attach: Set global_scn[0]ACBKMinfree = 48ACBEMinfree = 32ACVIMinfree = 16ACVOMinfree = 0CABMinfree = 48UAPSDMinfree = 0ar9300RadioAttach: Need analog access recipe!!Restoring Cal data from Flashdfs_attach: use DFS enhancementsDFS min filter rssiThresh = 18DFS max pulse dur = 151 ticksath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0wifi0: Atheros 9380: mem=0xe00000000, irq=19 hw_base=0xd6a80000Caldata = cfce4000 slot=1__ath_attach: Set global_scn[1]ACBKMinfree = 48ACBEMinfree = 32ACVIMinfree = 16ACVOMinfree = 0CABMinfree = 48UAPSDMinfree = 0ar9300RadioAttach: Need analog access recipe!!Restoring Cal data from Flashdfs_attach: use DFS enhancementsDFS min filter rssiThresh = 18DFS max pulse dur = 151 ticksath_get_caps[5110] rx chainmask mismatch actual 7 sc_chainmak 0ath_get_caps[5085] tx chainmask mismatch actual 7 sc_chainmak 0wifi1: Atheros 9580: mem=0xe00100000, irq=20 hw_base=0xd6b00000DFS min filter rssiThresh = 15DFS max pulse dur = 151 ticksDFS min filter rssiThresh = 15DFS max pulse dur = 151 ticksCreating ap for NETGEAR96 onwlan_vap_create : enter. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1wlan_vap_create : exit. devhandle=0xc83902e0, opmode=IEEE80211_M_HOSTAP, flags=0x1.VAP device ath0 createdAdded ath0 mode masterInvalid command : bgscan DES SSID SET=NETGEAR96 ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1/etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistentWARNING: Fragmentation with HT mode NOT ALLOWED!!Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath0 ; Invalid argument.Invalid command : setVowExtInvalid command : setKeySrchAlwaysInvalid command : mcastenhanceInvalid command : acparamsInvalid command : set_vsp_enableInterface doesn't accept private ioctl...setPhyRestartWar (8BE0): Operation not permittedInvalid command : setVowExtStatsCreated ath0 mode ap for NETGEAR96lo no wireless extensions.eth0 no wireless extensions.sit0 no wireless extensions.br0 no wireless extensions.eth0.1 no wireless extensions.eth0.2 no wireless extensions.wifi0 no wireless extensions.wifi1 no wireless extensions.Modules already loadedCreating ap for NETGEAR96-5G onwlan_vap_create : enter. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1wlan_vap_create : exit. devhandle=0xcf06c2e0, opmode=IEEE80211_M_HOSTAP, flags=0x1.VAP device ath1 createdAdded ath1 mode masterInvalid command : bgscanInvalid command : extoffset DES SSID SET=NETGEAR96-5G ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1/etc/ath/makeVAP: /etc/ath/makeVAP: 443: cannot create /proc/sys/dev/ath/htdupieenable: Directory nonexistentWARNING: Fragmentation with HT mode NOT ALLOWED!!Error for wireless request "Set Fragmentation Threshold" (8B24) : SET failed on device ath1 ; Invalid argument.Invalid command : setVowExtInvalid command : setKeySrchAlwaysInvalid command : mcastenhanceInvalid command : acparamsInvalid command : set_vsp_enableInterface doesn't accept private ioctl...setPhyRestartWar (8BE0): Operation not permittedInvalid command : setVowExtStatsCreated ath1 mode ap for NETGEAR96-5Glo no wireless extensions.eth0 no wireless extensions.sit0 no wireless extensions.br0 no wireless extensions.eth0.1 no wireless extensions.eth0.2 no wireless extensions.wifi0 no wireless extensions.wifi1 no wireless extensions.lo no wireless extensions.eth0 no wireless extensions.sit0 no wireless extensions.br0 no wireless extensions.eth0.1 no wireless extensions.eth0.2 no wireless extensions.wifi0 no wireless extensions.wifi1 no wireless extensions.device ath0 entered promiscuous modebr0: port 2(ath0) entering forwarding statearping: bind: Cannot assign requested address>>>>> WPS MODE, 2>>>>> WPS ENABLED, PSKcat: /etc/wpa2/WSC_ath0.conf: No such file or directory>>>>> WPS Translate, Index:0lo no wireless extensions.eth0 no wireless extensions.sit0 no wireless extensions.br0 no wireless extensions.eth0.1 no wireless extensions.eth0.2 no wireless extensions.wifi0 no wireless extensions.wifi1 no wireless extensions.device ath1 entered promiscuous modebr0: port 3(ath1) entering forwarding statearping: bind: Cannot assign requested address>>>>> WPS MODE, 2>>>>> WPS ENABLED, PSKcat: /etc/wpa2/WSC_ath1.conf: No such file or directory>>>>> WPS Translate, Index:2CHH: System ConfigurationAP_IPADDR:=192.168.1.2AP_NETMASK:=255.255.255.0WAN_MODE:=bridgedWAN_IPADDR:=192.168.2.1WAN_NETMASK:=255.255.255.0WAN_IF:=eth1LAN_IF:=eth0WLAN_ON_BOOT:=nAP_STARTMODE:=dualAP_RADIO_ID:=0AP_RADIO_ID_2:=1AP_PRIMARY_CH:=11ngAP_CHMODE:=11NGHT20AP_PRIMARY_CH_2:=44AP_CHMODE_2:=11NAHT40PLUSPUREG:=0PUREN:=0TXQUEUELEN:=1000SHORTGI:=1SHORTGI_2:=1AMPDUENABLE:=1AMPDUENABLE_2:=1AMPDUFRAMES:=32AMPDUFRAMES_2:=32AMPDULIMIT:=50000AMPDULIMIT_2:=50000AMPDUMIN:=32768AMPDUMIN_2:=32768CWMMODE:=1CWMMODE_2:=1RATECTL:=autoMANRATE:=0x8c8c8c8cMANRETRIES:=0x04040404RX_CHAINMASK:=7RX_CHAINMASK_2:=7TX_CHAINMASK:=7TX_CHAINMASK_2:=7AP_SSID:=NETGEAR96AP_SSID_2:=NETGEAR96-5GAP_PRIMARY_KEY_0:=1AP_PRIMARY_KEY_1:=1AP_WEP_MODE_0:=1AP_WEP_MODE_1:=1AP_MODE:=apAP_SECMODE:=WPAAP_SECFILE:=PSKWPS_ENABLE:=2AP_MODE_2:=apAP_SECMODE_2:=WPAAP_SECFILE_2:=PSKWPS_ENABLE_2:=2AP_MODE_3:=apAP_SECMODE_3:=NoneAP_SECFILE_3:=PSKWPS_ENABLE_3:=0AP_MODE_4:=apAP_SECMODE_4:=NoneAP_SECFILE_4:=PSKWPS_ENABLE_4:=0AP_MODE_5:=apAP_SECMODE_5:=NoneAP_SECFILE_5:=PSKWPS_ENABLE_5:=0AP_MODE_6:=apAP_SECMODE_6:=NoneAP_SECFILE_6:=PSKWPS_ENABLE_6:=0AP_MODE_7:=apAP_SECMODE_7:=NoneAP_SECFILE_7:=PSKWPS_ENABLE_7:=0AP_MODE_8:=apAP_SECMODE_8:=NoneAP_SECFILE_8:=PSKWPS_ENABLE_8:=0AP_MODE_9:=apAP_SECMODE_9:=NoneAP_SECFILE_9:=PSKWPS_ENABLE_9:=0AP_MODE_10:=apAP_SECMODE_10:=NoneAP_SECFILE_10:=PSKWPS_ENABLE_10:=0AP_MODE_11:=apAP_SECMODE_11:=NoneAP_SECFILE_11:=PSKWPS_ENABLE_11:=0AP_MODE_12:=apAP_SECMODE_12:=NoneAP_SECFILE_12:=PSKWPS_ENABLE_12:=0AP_MODE_13:=apAP_SECMODE_13:=NoneAP_SECFILE_13:=PSKWPS_ENABLE_13:=0AP_MODE_14:=apAP_SECMODE_14:=NoneAP_SECFILE_14:=PSKWPS_ENABLE_14:=0AP_MODE_15:=apAP_SECMODE_15:=NoneAP_SECFILE_15:=PSKWPS_ENABLE_15:=0AP_MODE_16:=apAP_SECMODE_16:=NoneAP_SECFILE_16:=PSKWPS_ENABLE_16:=0ATH_countrycode:=276AP_G_BAND_TPSCALE:=0AP_A_BAND_TPSCALE:=0WSC_MANUFACTURER:=NTGRWSC_MODEL_NAME:=WNDR4700WSC_MODEL_NUMBER:=nWSC_SERIAL_NUMBER:=20e52a68dd87WSC_UPNP_AD_PERIOD:=1800WSC_UPNP_AD_TTL:=4WSC_CONF_RELOAD_TIME:=3WSC_AP_PIN_ATTACK_CHECK:=1WSC_AP_PIN_ATTACK_NUM:=3WSC_AP_PIN_HISTORY_FAILURES:=0WSC_UUID_MAC:=20:e5:2a:68:dd:87WSC_CONFIGURED:=1WSC_AP_SETUP_LOCKED:=0WSC_AP_AUTO_LOCKED:=0WSC_NAME:=WNDR4700(Wireless AP)AP_ANYSSID_HACK:=1AP_WPA:=2AP_CYPHER:=CCMPPSK_KEY:=youngcomet870WPA_IS_HEX:=0AP_WPA_GROUP_REKEY:=86400AP_HIDE_SSID:=0AP_RTS:=2347AP_FRAG:=2346AP_WMM:=1AP_SHPREAMBLE:=1AP_COUNTRY_IE:=0BINTVAL:=100DTIM:=2WSC_PIN:=20117047AP_DOTH:=0AP_DISABLECOEXT:=0WSC_CONFIGURED_2:=1WSC_AP_SETUP_LOCKED_2:=0WSC_AP_AUTO_LOCKED_2:=0WSC_NAME_2:=WNDR4700(Wireless AP)AP_ANYSSID_HACK_2:=1AP_WPA_2:=2AP_CYPHER_2:=CCMPPSK_KEY_2:=youngcomet870WPA_IS_HEX_2:=0AP_WPA_GROUP_REKEY_2:=86400AP_HIDE_SSID_2:=0AP_RTS_2:=2347AP_FRAG_2:=2346AP_WMM_2:=1AP_SHPREAMBLE_2:=1AP_COUNTRY_IE_2:=0BINTVAL_2:=100DTIM_2:=2WSC_PIN_2:=20117047AP_DISABLECOEXT_2:=1WPS_LED_BEHAVIOR:=1WIRED_STRING_HACK:=1DEBUGMODE:=0LED_CUSTOM:=8IGMP_ENABLE_ORNOT:=0CUR_APNAME:=ath1Configur ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1ation file: /etc/wpa2/WSC_ath0.confbr0: port 2(ath0) entering disabled state DEVICE IS DOWN ifname=ath0Co DEVICE IS DOWN ifname=ath0uld not connect to kernel driver.Using interface ath0 with hwaddr 20:e5:2a:68:dd:87 and ssid 'NETGEAR96'random: Only 19/20 bytes of strong random data available from /dev/randomrandom: Not enough entropy pool available for secure operationsWPA: Not enough entropy in random pool for secure operations - update keys later when the first station connectsbr0: port 2(ath0) entering forwarding stateConfigu ieee80211_ioctl_siwmode: imr.ifm_active=852608, new mode=3, valid=1ration file: /etc/wpa2/WSC_ath1.confbr0: port 3(ath1) entering disabled state DEVICE IS DOWN ifname=ath1Co DEVICE IS DOWN ifname=ath1uld not connect to kernel driver.Using interface ath1 with hwaddr 20:e5:2a:68:dd:89 and ssid 'NETGEAR96-5G'random: Cannot read from /dev/random: Resource temporarily unavailablerandom: Only 19/20 bytes of strong random data available from /dev/randomrandom: Not enough entropy pool available for secure operationsWPA: Not enough entropy in random pool for secure operations - update keys later when the first station connectsbr0: port 3(ath1) entering forwarding stateIgnore turn off WPS LED in apup$Shutting down igmpproxy:killall: igmpproxy: no process killedSorry, rule does not exist.Sorry, rule does not exist.killall: igmpproxy: no process killedStarting Firewall...lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0Done!traffic_meter start : .killall: igmpproxy: no process killed GPL NetUSB up!kc 90 : run_telnetDBGDServer startkc 227 : init_DebugD endINFO177E: NetUSB 1.02.25, 00020620 : Nov 6 2012 16:37:41INFO1780: AUTH ISOCINFO1781: MOVE_HEAD filterAudiousbcore: registered new interface driver KC NetUSB General DriverINFO0AA0: --- checkSBusTimeoutThread start ---INFO0110: init proc : PAGE_SIZE 65536INFO1652: infomap d84b640cINFO1655: sleep to wait br0 to wake upINFO02D0: use dev Name br0INFO165E: sleep to wait br0 end.INFO1677: UDP_BROAD 7423 tcpPort:625868800INFO02D0: use dev Name br0INFO155E: tcpConnector() started...killall: check_HDD_capacity: no process killedThe region number is: 0x0002REGION: WWGenerating RSA private key, 1024 bit long modulusGenerating selfsigned certificate with subject 'C=DE;ST=Saxony;L=Leipzig;CN=OpenWrt;' and validity 2013-08-08 13:05:48-2015-08-08 13:05:48/etc/rc.common: /etc/rc.common: 83: detplc: not foundStarting Firewall...lan_ipv4_addr 167772161, wan_ipv4_address 3232235878, second_wan_ipv4_address 0Done!Boot up procedure is Finished!!!

Specific Configuration

OEM Configuration

Interfaces

[WNDR4700]# ifconfigath0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1263 errors:0 dropped:57738 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:503937 (492.1 KiB)ath1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 inet6 addr: fe80::22e5:2aff:fe68:dd89/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:57732 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)br0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet addr:10.0.0.1 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140422 errors:0 dropped:0 overruns:0 frame:0 TX packets:108580 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:33533139 (31.9 MiB) TX bytes:61246727 (58.4 MiB)eth0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:274732 errors:0 dropped:0 overruns:0 frame:0 TX packets:199712 errors:346 dropped:0 overruns:346 carrier:0 collisions:692 txqueuelen:1000 RX bytes:95284038 (90.8 MiB) TX bytes:88059466 (83.9 MiB) Interrupt:50eth0.1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:88 inet addr:192.168.1.102 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::22e5:2aff:fe68:dd88/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:134303 errors:0 dropped:0 overruns:0 frame:0 TX packets:91123 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:57341369 (54.6 MiB) TX bytes:26377505 (25.1 MiB)eth0.2 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 inet6 addr: fe80::22e5:2aff:fe68:dd87/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:140426 errors:0 dropped:0 overruns:0 frame:0 TX packets:108584 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:34095621 (32.5 MiB) TX bytes:61681471 (58.8 MiB)lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:299700 errors:0 dropped:0 overruns:0 frame:0 TX packets:299700 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:11856396 (11.3 MiB) TX bytes:11856396 (11.3 MiB)wifi0 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:87 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:172604 errors:0 dropped:0 overruns:0 frame:0 TX packets:465033 errors:507 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:19 Memory:d6640000-d6660000wifi1 Link encap:Ethernet HWaddr 20:E5:2A:68:DD:89 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:191 errors:0 dropped:0 overruns:0 frame:0 TX packets:461893 errors:191 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) Interrupt:20 Memory:d66c0000-d66e0000

Wireless

[WNDR4700]# iwconfiglo no wireless extensions.eth0 no wireless extensions.sit0 no wireless extensions.br0 no wireless extensions.eth0.1 no wireless extensions.eth0.2 no wireless extensions.wifi0 no wireless extensions.wifi1 no wireless extensions.ath0 IEEE 802.11ng ESSID:"NETGEAR96" Mode:Master Frequency:2.462 GHz Access Point: 20:E5:2A:68:DD:87 Bit Rate:216.7 Mb/s Tx-Power:17 dBm RTS thr=2347 B Fragment thr:off Encryption key:1013-6C54-1265-3495-67D5-24EB-A359-A504 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:28 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0ath1 IEEE 802.11na ESSID:"NETGEAR96-5G" Mode:Master Frequency:5.22 GHz Access Point: 20:E5:2A:68:DD:89 Bit Rate:450 Mb/s Tx-Power:19 dBm RTS thr=2347 B Fragment thr:off Encryption key:25DE-884C-9D4B-F95E-9FA7-74A5-5933-10C0 [2] Security mode:open Power Management:off Link Quality=94/94 Signal level=-96 dBm Noise level=-95 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0

VLAN

[WNDR4700]# cat /proc/net/vlan/configVLAN Dev name | VLAN IDName-Type: VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PADeth0.1 | 1 | eth0eth0.2 | 2 | eth0

Test and Performance

Note: All benchmarks and test were carried out on the original firmware. The results would be much better in the current branch of OpenWrt.

Benchmark: OpenSSL v0.9.8p

Note: OpenSSL v0.9.8p from SDK

OpenSSL Version MD5 SHA-1 SHA-256 SHA-512 DES 3DES AES-128 AES-192 AES-256 RSA Sign RSA Verify DSA Sign DSA Verify
0.9.8p 87764520 23929930 18292650 10642240 10366780 3586110 18779740 16537780 14734770 10.9 408.0 41.2 33.9

Benchmark: Cpubench v0.6

Note: Source code here.

[WNDR4700]# ./cpubenchThis is CPU and memory benchmark for OpenWRT v0.6. This will then take some time... (typically 30-60 seconds on a 200MHz computer)Overhead for getting time: 1usTime to run memory bench: 1.65[secs]Time to run computation of pi (2400 digits, 10 times): 4.16[secs]Time to run computation of e (9009 digits): 5.10[secs]Time to run float bench: 0.02[secs]Total time: 10.9s

You can copy/paste the following line in the wiki table at: HardwarePerformance

2013-08-27 Author 1.6s 4.2s 5.1s 0.0s v0.6 OS DeviceModel CPU model CPU Frequency LinkToHwPage

Note: Tests were performed on non-optimized software and built by hand, using only the sole and conclusive construction environment what is available at the moment. Manufacturer's SDK using the native libraries-definitely not reflect actual achievements and possibilities of this equipment.

Test: Internal HDD - NASTester 1.4

Note: The test was carried out on WD RED 2TB WD20EFRX and Windows 7 x64 on protocol samba.

Test HDD ext2:

Test HDD ext4:

Test HDD ntfs:

Note: NTFS is much better than ext2 and ext4 because Netgear probably added something.

Test: USB 3.0 - NASTester 1.4

Note: The test was carried out on pendrive Patriot Supersonic 32GB USB 3.0 and Windows 7 x64 on protocol samba:

Test USB 3.0 ext2:

[WNDR4700]# hdparm -t /dev/sdb1/dev/sdb1: Timing buffered disk reads: 280 MB in 3.00 seconds = 93.27 MB/sec

Test USB 3.0 ext4:

[WNDR4700]# hdparm -t /dev/sdb1/dev/sdb1: Timing buffered disk reads: 260 MB in 3.00 seconds = 86.54 MB/sec

Test USB 3.0 fat32:

Test USB 3.0 ntfs:

Hardware

Info

Architecture: RISC PowerPC
Vendor: Applied Micro
bootloader: U-Boot
System-On-Chip: APM82181 (RISC)
CPU/Speed 1000 MHz
Flash-Chip: Hynix H27U1G8F2BTR
Flash size: 128 MiB NAND
RAM-Chip: Nanya NT5TU64M16GG-AC x 2
RAM: 256 MiB
Wireless: Atheros AR9381 2.4GHz 802.11bgn Atheros AR9380 5GHz 802.11an
RegDomain: US ? US ?
Ethernet: Atheros AR8327N Gigabit Switch
USB: Yes 2 x 3.0
SD Card: Yes
Serial: Yes
JTAG: Yes

Button

Reset WPS WiFi Backup
Kamikaze _ _ _ _

Note: ------------------------

Photos look

Photo of front of the casing

Photo of back of the casing

Opening the case

Note: This will void your warranty!Note2: complete disassembly description

  • The stand of the router can be removed with two screws from the bottom. Just slide off the stand

  • You can now see two more screws, remove also

  • With a bit of force (or use a spatula/flat screwdriver) you can start at the lower edges and unclip the front piece

  • remove three screws close to the antennas to remove the circuit board - carefully lift it sideways, USB port side stays, other side moves up

  • unclip the fan and SATA connector

  • remove the circuit board

  • remove the connector

  • remove the fan

  • carefully unclip the buttons from the backside of the chassis

  • remove the radio insulation (or whatever the metal foil is supposed to be

Fan problems

There are frequent reports that this model has a very noisy fan. It is less a constant wirr and more of a hickupy wromm. Not easy to listen to, especially if you plan to put this machine in a living area. You can exchange the stock fan (radial fan, small size, no air movement whatsoever) for probably a different model with the same dimensions and same fixture points. Or you can remove the back of the router and put in a 12cm chassis fan and run it on 5V. Unfortunately the PWM does not provide enough voltage/power so any fan will spin up. If you are not using the SATA bay you can highjack GND,+5,+12 from the SATA power. After installation carefully monitor the temperature from ssh/telnet with

while true;do a=`cat /sys/class/hwmon/hwmon0/temp1_input`;b=`cat /sys/class/hwmon/hwmon0/temp2_input`;d=`date +"%H:%M:%S"`;echo $d cputemp=$(($a/1000))" "ddrtemp=$(($b/1000));sleep 2;done

This will show you a continuous stream of live temperature in °C updating every other second.

Main PCB

Photo of PCB

Telnet

Telnet: /proc/cpuinfo

[WNDR4700]# cat /proc/cpuinfo processor : 0cpu : APM82181clock : 1000.000010MHzrevision : 28.131 (pvr 12c4 1c83)bogomips : 2000.00timebase : 1000000010platform : PowerPC 44x Platformmodel : amcc,wdnr4700Memory : 256 MB

Telnet: /proc/bus/usb/devices

[WNDR4700]# cat /proc/bus/usb/devicesT: Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=480 MxCh= 1B: Alloc= 0/800 us ( 0%), #Int= 0, #Iso= 0D: Ver= 2.00 Cls=09(hub ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1P: Vendor=1d6b ProdID=0002 Rev= 2.06S: Manufacturer=Linux 2.6.32.11-wndr4700 dwc_otg_hcdS: Product=DWC OTG ControllerS: SerialNumber=dwc_otg.0C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mAI:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hubE: Ad=81(I) Atr=03(Int.) MxPS= 4 Ivl=256msT: Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#= 2 Spd=480 MxCh= 0D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1P: Vendor=05e3 ProdID=0723 Rev=94.54S: Manufacturer=GenericS: Product=USB StorageC:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mAI:* If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storageE: Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0msE: Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0msT: Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=?? MxCh= 4B: Alloc= 0/900 us ( 0%), #Int= 0, #Iso= 0D: Ver= 3.00 Cls=09(hub ) Sub=00 Prot=03 MxPS= 9 #Cfgs= 1P: Vendor=1d6b ProdID=0003 Rev= 2.06S: Manufacturer=Linux 2.6.32.11-wndr4700 xhci_hcdS: Product=xHCI Host ControllerS: SerialNumber=0000:45:00.0C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mAI:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hubE: Ad=81(I) Atr=03(Int.) MxPS= 4 Ivl=12ms

Telnet: /proc/bus/pci/devices

[WNDR4700]# cat /proc/bus/pci/devices4000 aaa0bed0 25 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport4100 111d803a 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport4210 111d803a 26 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport4218 111d803a 27 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport4220 111d803a 28 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pcieport4300 168c0030 13 e00000004 0 0 0 0 0 e00300000 20000 0 0 0 0 0 10000 ath_pci4400 168c0033 14 e00100004 0 0 0 0 0 e00400000 20000 0 0 0 0 0 10000 ath_pci4500 19120015 34 e00200004 0 0 0 0 0 0 2000 0 0 0 0 0 0 xhci_hcd

Telnet: mount

[WNDR4700]# cat /proc/mountsrootfs / rootfs rw 0 0/dev/root / squashfs ro,relatime 0 0none /proc proc rw,relatime 0 0sysfs /sys sysfs rw,relatime 0 0none /tmp tmpfs rw,nosuid,nodev,relatime 0 0tmpfs /dev tmpfs rw,relatime,size=128k 0 0none /proc/bus/usb usbfs rw,relatime 0 0

U-boot starting

Auto calibration ---U-Boot 2009.08 (Jul 03 2012 - 13:04:31)CPU: AMCC PowerPC APM82181 Rev. E at 1000 MHz (PLB=166, OPB=83, EBC=83 MHz) Security support Bootstrap Option D - Boot ROM Location NAND wo/ECC 2k page (8 bits), booting from NAND 32 kB I-Cache 32 kB D-CacheDNI HW ID: 29763875 NAND flash 128MB RAM 256MB U-Boot 2009.08 dni1 V1.4Board: AMCC APM82181 Evaluation Board, PCIE0/SATA1, 1*USB OTGI2C: readyDRAM: 256 MB (ECC not enabled, 500 Mb/s, 32-bit, CL3)NAND: 128 MiB*** Warning - bad CRC, using default environmentConfigure Max Payload 256BPCIE0: successfully set as root-complex 03 00 168c 0030 0280 ff 02 02 111d 803a 0604 00 04 00 168c 0033 0280 ff 02 03 111d 803a 0604 00 05 00 1912 0015 0c03 00 02 04 111d 803a 0604 00 01 00 111d 803a 0604 00 131072 bytes read: OKNet: ppc_4xx_eth0AR8327 GigaSW initialize...doneENET Speed is 1000 Mbps - FULL duplex connection (EMAC0) Client starts...[Listening] for ADVERTISE...TTTRetry count exceeded; boot the image as usual nmrp server is stopped or failed !Type run flash_nfs to mount root filesystem over NFsh*t any key to stop autoboot: 0

U-boot menu

=> help? - alias for 'help'askenv - get environment variables from stdinautoscr - DEPRECATED - use "source" command insteadbase - print or set address offsetbdinfo - print Board Info structureboard_hw_id_set- Set board_hw_idboard_hw_id_show- Show board_hw_idboard_model_id_set- Set board_model_idboard_model_id_show- Show board_model_idboard_parameters_set- Set WPS PIN code, Serial number, SSID, Passphrase, MAC addressboard_passphrase_set- Set passphrase on boardboard_passphrase_show- Show board_passphraseboard_ssid_set- Set ssid on boardboard_ssid_show- Show board_ssidboot - boot default, i.e., run 'bootcmd'bootd - boot default, i.e., run 'bootcmd'bootelf - Boot from an ELF image in memorybootm - boot application image from memorybootp - boot image via network using BOOTP/TFTP protocolbootvx - Boot vxWorks from an ELF imagechip_config- program the I2C bootstrap EEPROMchk_dniimg- chk_dniimg - check integrity of dni firmware image.cmp - memory compareconinfo - print console devices and informationcp - memory copycpuclk - cpuclk - change cpu clock frequencycrc32 - checksum calculationdcache - enable or disable data cachedhcp - boot image via network using DHCP/TFTP protocolecho - echo args to consoleeeprom - EEPROM sub-systemexit - exit scriptext2load- load binary file from a Ext2 filesystemext2ls - list files in a directory (default /)fatinfo - print information about filesystemfatload - load binary file from a dos filesystemfatls - list files in a directory (default /)fdt - flattened device tree utility commandsfw_recovery- fw_recovery - start tftp server to recovery dni firmware image.getdcr - Get an AMCC PPC 4xx DCR's valuegetidcr - Get a register value via indirect DCR addressinggo - start application at address 'addr'help - print online helpi2c - I2C sub-systemicache - enable or disable instruction cacheiminfo - print header information for application imageimxtract- extract a part of a multi-imageinterrupts- enable or disable interruptsirqinfo - print information about IRQsitest - return true/false on integer compareloadb - load binary file over serial line (kermit mode)loadn_dniimg- loadn_dniimg - load dni firmware image from NAND.loads - load S-Record file over serial lineloady - load binary file over serial line (ymodem mode)loop - infinite loop on address rangeloopw - infinite write loop on address rangemacset - Set ethernet MAC addressmacshow - Show ethernet MAC addressesmd - memory displaymdc - memory display cyclicmii - MII utility commandsmm - memory modify (auto-incrementing address)mtest - simple RAM read/write testmw - memory write (fill)mwc - memory write cyclicnand - NAND sub-systemnboot - boot from NAND devicendfc - ndfc - enable|disable NDFCnfs - boot image via network using NFS protocolnm - memory modify (constant address)pci - list and access PCI Configuration Spaceping - send ICMP ECHO_REQUEST to network hostprintenv- print environment variablesrarpboot- boot image via network using RARP/TFTP protocolreginfo - print register informationreset - Perform RESET of the CPUrnset - set region numberrnshow - Show Region Number on Boardrun - run commands in an environment variablesata - SATA sub systemsaveenv - save environment variables to persistent storagesdram_config- sdram_config - Configure SDRAM as 32-bit or 16-bitsetdcr - Set an AMCC PPC 4xx DCR's valuesetenv - set environment variablessetidcr - Set a register value via indirect DCR addressingshowvar - print local hushshell variablessleep - delay execution for some timesnset - Set serial numbersource - run script from memorytest - minimal test like /bin/shtftpboot- boot image via network using TFTP protocolversion - print monitor versionwmacset - Set wlan MAC addresswpspinset- Set wpspin number

U-boot: printenv

=> printenvbootcmd=if loadn_dniimg 0 0x180000 0x4e0000 && chk_dniimg 0x4e0000; then nand read 0x800000 0x180000 0x20000;bootm 0x500000 - 0x800040;else fw_recovery; fibootdelay=2baudrate=115200loads_echo=preboot=echo;echo Type "run flash_nfs" to mount root filesystem over NFS;echohostname=wndr4700netdev=eth0nfsargs=setenv bootargs root=/dev/nfs rw nfsroot=${serverip}:${rootpath}ramargs=setenv bootargs root=/dev/ram ramdisk_size=${ramdisk_size} rwaddip=setenv bootargs ${bootargs} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}:${netdev}:off panic=1addtty=setenv bootargs ${bootargs} console=ttyS0,${baudrate}addmisc=setenv bootargs ${bootargs}initrd_high=30000000kernel_addr_r=400000fdt_addr_r=800000ramdisk_size=200000rootpath=/opt/eldk/ppc_4xxflash_self=run ramargs addip addtty addmisc;bootm ${kernel_addr} ${ramdisk_addr} ${fdt_addr}flash_nfs=run nfsargs addip addtty addmisc;bootm ${kernel_addr} - ${fdt_addr}net_nfs=tftp ${kernel_addr_r} ${bootfile}; tftp ${fdt_addr_r} ${fdt_file}; run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}fdt_file=wndr4700/wndr4700.dtbload=tftp 200000 wndr4700/wndr4700_u-boot.binupdate=protect off 0x01000000 FFFFFFFF;era 0x01000000 FFFFFFFF;cp.b ${fileaddr} 0x01000000 ${filesize};setenv filesize;saveenvupd=run load updatenload=tftp 200000 wndr4700/wndr4700_u-boot-nand.binnupdate=nand erase 0 100000;nand write 200000 0 100000;setenv filesize;saveenvnupd=run nload nupdatekernel_addr=fc000000fdt_addr=fc1e0000ramdisk_addr=fc200000pciconfighost=1pcie_mode=RP:RPboardtype=pcieusr_dir=wndr4700set_images=setenv bootfile ${usr_dir}/wndr4700_uImage.bin;setenv fdt_file ${usr_dir}/wndr4700.dtb;setenv mtd_file ${usr_dir}/wndr4700_rootfs.jffs2;setenv udiag_file ${usr_dir}/wndr4700/uDiag_wndr4700.imgsata_controller=sata1bootfile=wndr4700/wndr4700_uImage.binmtd_addr_r=0x4000000mtd_file=wndr4700/wndr4700_rootfs.jffs2udiag_file=wndr4700/uDiag_wndr4700.imgkernel_size=0x400000fdt_size=0x25000ramdisk_file_size=0x1000000ramdisk_addr_r=0x2000000nupd1=tftp ${kernel_addr_r} ${bootfile};nand erase clean 0x1700000 0xE00000;nand write.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size}nupd2=tftp ${fdt_addr_r} ${fdt_file};nand erase clean 0x2500000 0xb00000;nand write.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size}nupd3=echo Clean up some memory...Please wait for a momen\t;mw.b ${mtd_addr_r} 0xff 0x3400000;tftp ${mtd_addr_r} ${mtd_file};nand erase clean 0x4000000 0x3400000;nand write.jffs2 ${mtd_addr_r} 0x4000000 ${filesize}nupd4=tftp ${ramdisk_addr_r} ${ramdisk_file};nand erase clean 0x3000000 0x1000000;nand write.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size}nupdu=tftp 200000 ${udiag_file};nand erase clean 0x7500000 0xB00000;nand write.jffs2 200000 0x7500000 0x200000mtd_args=setenv bootargs root=/dev/mtdblock6 rw rootfstype=jffs2mtd_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run mtd_args addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}nfs_self=nand read ${kernel_addr_r} 0x1700000 ${kernel_size};nand read ${fdt_addr_r} 0x2500000 ${fdt_size};run nfsargs addip addtty addmisc;bootm ${kernel_addr_r} - ${fdt_addr_r}net_self=tftp ${kernel_addr_r} ${bootfile};tftp ${fdt_addr_r} ${fdt_file};tftp ${ramdisk_addr_r} ${ramdisk_file};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}nand_self=nand read.jffs2 ${kernel_addr_r} 0x1700000 ${kernel_size};nand read.jffs2 ${fdt_addr_r} 0x2500000 ${fdt_size};nand read.jffs2 ${ramdisk_addr_r} 0x3000000 ${ramdisk_file_size};run ramargs addip addtty addmisc;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r}env_clear=nand erase 0x40000 0x40000udiag=nand read 0x100000 0x7500000 0x200000; go 102100ipaddr=192.168.1.1serverip=192.168.1.7bootcmd1=nand readimg 400000 0x120000;nand read 800000 0x100000 0x20000;bootm 400000 - 800040bootcmd0=nand read 400000 0x120000 0x300000;nand read 800000 0x100000 0x20000;bootm 400000 - 800000stdin=serialstdout=serialstderr=serialethaddr=20:e5:2a:68:dd:87ethact=ppc_4xx_eth0ver=U-Boot 2009.08 (Jul 03 2012 - 13:04:31)Environment size: 4135/131067 bytes

U-Boot: nand

help nandnand - NAND sub-systemUsage:nand info - show available NAND devicesnand device [dev] - show or set current devicenand readimg - addr off read a image starting at offset 'off' to memory address 'addr', skipping bad blocks.nand read - addr off|partition sizenand write - addr off|partition size read/write 'size' bytes starting at offset 'off' to/from memory address 'addr', skipping bad blocks.nand erase [clean] [off size] - erase 'size' bytes from offset 'off' (entire device if not specified)nand bad - show bad blocksnand dump[.oob] off - dump pagenand scrub - really clean NAND erasing bad blocks (UNSAFE)nand markbad off [...] - mark bad block(s) at offset (UNSAFE)nand biterr off - make a bit error at offset (UNSAFE)

U-boot: sata

=> help satasata - SATA sub systemUsage:sata sata init - init SATA sub systemsata info - show available SATA devicessata device [dev] - show or set current devicesata part [dev] - print partition tablesata read addr blk# cntsata write addr blk# cnt

Note: With high probability it is possible to boot up using the picture firmware via SATA, here is a description of how to do it

Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:Pins are in place GND, TX, RX, VCC

Photo of PCB with markings

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

Notes

Telnet (original firmware)

Many Netgear routers have telnet support built-in, but gaining access to it requires an extra step of sending a specially formatted payload to the telnet daemon before it will allow users to log in. Netgear provides the executable called telnetenable.exe for doing just this. It is only available for the “other OS”. However, people not employed by Netgear wrote two alternative Programs that do run under Unix. One is written in C and is under the GPLv2 and the other written in Python and is under the MIT License.

  • please follow ⇒ Unlocking the Netgear Telnet Console

Resources

Tags

How to add tags

apm821xx, APM82181, 128flash, 256ram, 802.11abgn simultan, 802.11abgn, powerpc, 3x3, NAS

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies

[OpenWrt Wiki] NETGEAR WNDR4700 and WNDR4720 (2024)
Top Articles
Latest Posts
Article information

Author: Stevie Stamm

Last Updated:

Views: 5395

Rating: 5 / 5 (60 voted)

Reviews: 83% of readers found this page helpful

Author information

Name: Stevie Stamm

Birthday: 1996-06-22

Address: Apt. 419 4200 Sipes Estate, East Delmerview, WY 05617

Phone: +342332224300

Job: Future Advertising Analyst

Hobby: Leather crafting, Puzzles, Leather crafting, scrapbook, Urban exploration, Cabaret, Skateboarding

Introduction: My name is Stevie Stamm, I am a colorful, sparkling, splendid, vast, open, hilarious, tender person who loves writing and wants to share my knowledge and understanding with you.