Linksys E1000 v1

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
bgn (N300)
Wireless-N Router
Linksys E1000 001.jpg
3rd Party Firmware
Tomato any flavor
Status Unknown
Linksys E1000 v1
Serial number prefix
Board ID
wireless router
Broadcom BCM4716B0
CPU1 Type
CPU1 Speed
300 MHz
Flash1 Chip
Macronix MX25L3205DM2I-12G
Flash1 Size
4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size
32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip
SK hynix HY5DU561622FTP-D43
ETH chip1
Broadcom BCM4716B0
Broadcom BCM5325E
Ethernet Port Count

802dot11 OUI: 68:7F:74 (13 E, 16 W), C0:C1:C0 (12 E, 13 W)
Ethernet OUI: 68:7F:74 (13 E, 16 W), C0:C1:C0 (12 E, 13 W)

Expansion IF types
none specified
12 VDC, 0.5 A
Connector type
Serial Port (UART)
yes, 4-pin header, unpopulated, JP12, (?,8,N,1)

Additional chips
2.4GHz Power Amplifier IC;Skyworks;SE2528L;SiGe, 2528L, 850CM;2;


Default SSID: CiscoXXXXX (6 addl. devices)
Default IP address:
the IP is used by 1292 additional devices
of which 153 are Linksys devices
Default login user: blank
Default login password: admin
blank:admin credentials used by 263 additional devices
of which 134 are Linksys devices

3rd Party Firmware Support
DD-WRT • (List)
, OpenWrt • (List | Dev | DLs)
, TomatoUSB • (List | DLs)
Availability common
FCC approval date 29 December 2009
Country of manuf China
Radio 1
Broadcom BCM4716B0
Wireless interface OUI
68:7F:74, C0:C1:C0
Antenna Connector Type
none specified
MIMO status
Wireless Standard
IEEE 802.11b/g/n
up to 300 Mbps
up to 54 Mbps
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
Cisco Valet M10 v1Q87-M10
 CPU1 brandRadio1 chip1 brandRadio1 chip2 brand
Linksys E1000 v1BroadcomBroadcom
Linksys E1000 v2.0BroadcomBroadcom
Linksys E1000 v2.1BroadcomBroadcom

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

For a list of all currently documented Linksys device with specifications, see Linksys.

300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class


"3763-01010105R" is silkscreened on the board of some / all production model units.
E1000 v1 serial numbers appear to start with CVN0.

The default SSID is CiscoXXXXX where XXXXX is the last 5 digits of the serial number. If the device has been configured with Cisco Connect the device will probably have a randomly generated SSID. A sample serial number is CVN01K6E1346.

Links of Interest


Flashing dd-wrt

WARNING: This is only for version 1 hardware. For version 2: Linksys E1000 v2.0

Install Procedure

  1. Read the Peacock Announcement.
  2. Download a trailed mini build (named mini_e1000v1.bin) from the broadcom_K26 folder.
    • Old builds are named mini_e1000.bin, before the v2 hardware was supported
    • If you wish to experiment with a newer build, read it's build thread before flashing!
  3. Set a static IP on your computer e.g. and subnet mask
  4. Connect an ethernet cable from your computer to a router LAN port. Do NOT use wireless!
    • Recommended to disconnect other cables.
  5. Perform a hard reset.
  6. Navigate to for the Linksys web GUI
  7. Go to the Linksys Administration->Firmware Upgrade page. Do not give the reboot command. You will use this page to upgrade your firmware.
  8. Browse to the downloaded firmware and click Upload.
  9. Do not touch anything. The page will tell you that the upgrade was successful and the router is now rebooting. Your router may take upwards of a couple minutes to reboot. Watch the lights... once the wireless and power indicators are on steadily for several seconds, your router is fully rebooted and you can click "Continue" in your browser window.
  10. If the DD-WRT password change page displays, your upgrade has been successful, and you must now perform another hard reset. This time, when you navigate to, click "Reboot" and wait for the router to come online again so you can configure it.
  • Make sure all builds you flash are less than 8 000 000 bytes in size or you will brick the router.

If the DD-WRT password change page does not display, your page request times out, or you can't ping, make sure both wireless and power lights are on steadily first, then do a hard power cycle (unplug the power from the router—do not do a 30/30/30 reset). Wait a few seconds and plug the power back into the router. Wait until both wireless and power lights are on steadily, then navigate to in your browser of choice again. If the DD-WRT password change page displays, your upgrade has been successful, and you must now perform another hard 30/30/30. This time, when you navigate to, click "Reboot" and wait for the router to come online again so you can configure it.

You can also flash the same firmware of TomatoUSB as described for WRT160N_v3.0

Firmware version 33555 dated 10/20/17 runs on this router, but doesn't have the final Broadcom fix for the KRACK vulnerability in WPA2. KRACK fixes for Broadcom were completed in ​SVN 33678, but build 33679 is missing many files, so it is recommended to use 33772 or newer, after reviewing New Build threads.

See Where do I download firmware? for build links.

Performing a Hard Reset

Procedure for an E1000v1:

  1. Perform a normal 30/30/30 reset.
  2. Login to and you will see the Linksys - Management Mode page.
  3. Click "Reboot" then after a moment, you will see "Command reboot completed." and reboot again.
  4. When the lights return to their normal state, click "Continue" to the router GUI main page.

Flashing Tomato

  1. Use a wired connection only. (disable wireless to be in the safe side)
  2. Make sure you disable firewall in Windows.
  3. Disable the virus guard.
Let's Begin!
  1. Download and extract the K26-MIPSR2 Tomato USB Firmware. Mini, STD or VPN version is up to you. With this router you can only use certain builds. It's flash size is only 4MB. (Get them Here)
  2. Connect your computer's using network cable to one of the LAN ports of the Asus router. Manually set your computer IP address (in the TCP/IP properties of the LAN connection) to, network mask
  3. Upgrade to dd-wrt first.
  4. After upgrade, go to the router by typing, after setting the username and password go to administration then firmware upgrade. Click browse and find the TomatoUSB firmware file. Click upgrade.
  5. After upgrading is complete open your browser, go to the router by typing, when prompted for a username and password enter "root" and "admin". Go to Administration > Configuration > Restore Default Configuration, select "Erase all data in NVRAM memory (thorough)" and click OK. To insure that the processor has time to complete addressing all NVRAM variables it's best to wait about 5 minutes before making any changes.

You are now ready to start using your Asus router with Tomato.

JTAG-Serial Info


JTAG Recovery

JTAG for the E1000_V1 (and WRT160Nv3): Barryware JTAG thread


Serial Recovery

First familiarize yourself with Serial Recovery and reference the serial pinout (E1000v2).

Once at the prompt you need to assign an IP/Subnet mask to eth0. I'm not sure if eth0 is the routers interface to the switch or one specific port but I had a CAT5 cable hooked up to port 1 on the router and it worked.

If you type "ifconfig eth0" you will see that there is no address assigned to the interface. The following command will assign an address/mask.

CFE> ifconfig eth0 addr= mask=

Now you can flash using a TFTP client from your computer, which is plugged in to port 1 on the router, just like the Serial Recovery page says.

flash -ctheader : flash1.trx


Retail Images
User Images
FCCID Q87-E1000