Linksys WRT54GS v7.2

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
Wireless-G Broadband Router with SpeedBooster
Linksys WRT54GS.jpg
3rd Party Firmware
Not for 2MB Devices
Tomato any flavor
Not for 2MB Devices
Linksys WRT54GS v7.2
Serial number prefix
wireless router
Wireless class
CPU1 Type
CPU1 Speed
240 MHz
Flash1 Chip
Samsung K8D1716UBC-PI07
Flash1 Size
2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />
RAM1 Size
16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Chip
Samsung K4S281632K-UC75
nvram Size
ETH chip1
Ethernet Port Count

802dot11 OUI: 00:1E:E5 (11 E, 20 W), 00:22:6B (8 E, 11 W), 00:23:69 (12 E, 19 W)
Ethernet OUI: 00:1E:E5 (11 E, 20 W), 00:22:6B (8 E, 11 W), 00:23:69 (12 E, 19 W)

Stock bootloader
Stock FW OS
Expansion IF types
none specified
12 VDC, 0.5 A
Connector type
Serial Port (UART)
yes, 5-pin header, unpopulated, (115200 8N1)
yes, 12-pin header, unpopulated
Default IP address
Default login user
Leave blank
Default login password
Default SSID
Default Channel(s)
3rd Party Firmware Support
DD-WRT • (List)
FCC approval date 07 November 2007
Country of manuf China
Radio 1
Wireless interface OUI
Antenna Connector Type
Wireless Standard
IEEE 802.11b/g
up to 54 Mbps
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
 CPU1 brandRadio1 chip1 brandRadio1 chip2 brand
Linksys WRT54GS v1.0BroadcomBroadcomBroadcom
Linksys WRT54GS v1.1BroadcomBroadcomBroadcom
Linksys WRT54GS v2.0BroadcomBroadcomBroadcom
Linksys WRT54GS v2.1BroadcomBroadcomBroadcom
Linksys WRT54GS v3BroadcomBroadcomBroadcom
… further results

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.


Other Flash/RAM

Flash: Eon EN29LV160AB-70TCP (H28308C, 0822HSC)
RAM: SK hynix HY57V281620ETP-H (817A C)

Links of Interest[edit]


Flashing DD-WRT[edit]


Linksys WRT54GS-RM (CGNC), Same as Linksys WRT54GS v7.0


NOTE TO WINDOWS USERS: The Windows TFTP Client is disabled by default, so enable it before proceeding

(or download a third party TFTP tool).

In Windows, go to "Add or Remove Programs" (or "Programs and Features", depending on the Windows

version) then the Windows Features section, and scroll down to select TFTP Client.


Download vxworkskillerGSv7-v3.bin and a recommended build here. ONLY USE MICRO GENERIC BUILDS e.g. dd-wrt.v24-micro_generic.bin from the broadcom folder.

  1. Configure your local LAN Ethernet address to and connect your local Ethernet to your WRT54GSv7 on one of the four switch ports.
    Do not use a wlan connection! (can someone clarify how to configure your LAN Ethernet address to
  2. Disconnect the power cord from the WRT54GSv7.
  3. Push the reset button while reconnecting the power cord and hold the button for about 20 seconds.
  4. Open your browser and open
  5. Use the firmware upgrade dialogue to flash vxworkskillerGSv7-v3.bin.
  6. After the dialogue about disconnecting the power cord is shown, disconnect the power cord and reconnect it.
  7. Wait for about two minutes.
  8. Again disconnect the power cord and reconnect it.
  9. Enter "tftp -i put dd-wrt.v24-micro_generic.bin" on your local Windows console and press enter.
    1. (If you're using Windows Vista or Windows 7, you need to first enable the tftp client)
    2. (for linux, tftp; mode octet;put dd-wrt.v24-micro_generic.bin or tftp -v -m octet -c put dd-wrt.v24-micro_generic.bin).
  10. The file will now be transferred to your router and be flashed. After this is done, your router
    will boot automatically and you can reach your it at
  11. Check for recommended builds here.


I just loaded DD-WRT v24 RC7 on two of the WRT54GS v7 with an Intel flash chip. I used the latest vxworkskiller.

Below are instructions. Intel chip says JS28F160, C3BD70, and A7397147. Router is dated December 2007. S/N starts with CGNC.
  1. Manually configure your IP to
  2. Reset router to factory defaults.
  3. Update firmware to vxworkskillerGSv7-v3.bin, the update will finish.
  4. Watch the lights on the router. Wait until the Power light is solid, then unplug the router.
  5. Plug the router back in.
  6. Get "tftp -i PUT dd-wrt.v24-micro_generic.bin" ready in a command prompt and hit enter.
  7. After the tftp is finished wait and watch the router lights.
    1. The Power light will eventually come one.
    2. Shortly after that the WLAN light will come on.
  8. Try to load the web configuration page about 5 seconds later; you're done!
  9. Check for recommended builds here.

Another similar method to flash WRT54G v8 and WRT54GS v7.2 (possibly other 7.x)[edit]

I've been doing something slightly different on WRT54G v8 and this WRT54GS v7, it hasn't failed me yet, below are the instructions.

I have done this on a countless number of WRT54G v8s and just did it on a WRT54GS v7 and it worked just the same.
There is no resetting in the middle of this process, just do exactly what it says below, no more and no less.
My WRT54GS v7 has a Broadcom BCM5354KFBG CPU and an EON EN29LB160AB-70TCP flash chip and 16MB of Samsung RAM.
The FCC ID is Q87-WRT54GSV72 which maybe means it's a v7.2? Serial number starts with CGNE.

Addition: tiger12506 adds that he has successfully performed this on two WRT54GS v7.2 with CGNE serial numbers.

He felt that it was impossible, that he had bricked one of the routers at first.

Messing around with JTAG cables taught him some things, but... be sure(!) Be absolutely sure that you have tftp

set to binary or octel. If you leave tftp in ascii it will appear to work but the flash won't take.
  1. Use the web interface to reset the router to factory defaults.
  2. Manually configure network interface to (Any address from - should work)
    1. (In linux, this is sudo ifconfig eth0
  3. Use the web interface to update the firmware to vxworkskillerGSv7-v3.bin.
  4. tftp -i PUT dd-wrt.v24_micro_generic.bin (Windows only)
    1. [For linux users: use tftp. You may have to sudo apt-get install tftp or your equivalent.
      1. tftp
      2. tftp> mode binary
      3. tftp> put dd-wrt.v24_micro_generic.bin
      4. tftp> quit
  5. As soon as that is finished do this: ping /t (Windows only)
    1. This will time out repeatedly and then the router will respond between two and six times.
    2. The router will time out again a few times and then start responding to pings.
    3. [At this point, tiger12506 had a little trouble, but after a long reset, and some short resets, more
      and more lights came on until finally the WLAN light came on and the router functioned normally running DD-WRT]
  6. You're done, try to load
  7. Check for recommended builds here.


Updating DD-WRT

If dd-wrt is already on the router follow these instructions. If stock firmware is on the router follow the flashing instructions.

  1. Check for recommended builds here first.
  2. Set your computer to a static IP of (or to whatever subnet the router is on) Disable all firewalls and security. Disable wireless on your computer and only have the router connected to the flashing computer by the ethernet cable between the two.
  3. Hard reset or 30/30/30 (If the router supports it, if not, reset to defults in the GUI) prior to flashing. Wait. Check for password page on re-login and change password.
  4. Flash firmware. You can use the webgui except if you have a belkin router. (For belkin use tftp.exe to flash)
  5. least three minutes. Lights should return to normal. See important2, below. Failing to wait is how most people brick their routers.
  6. Do a power cycle of the router. (Unplug the cord, count to 30 and plug it back in.)
  7. Wait for the lights to return to normal usually about 2 minutes.
  8. Hard reset or 30/30/30 again (If the router supports it, if not, reset to defults in the GUI). Wait. Check for the password page and re-login to change the password. Then you can reconfigure your settings manually.
  9. Once configured set your computer back to autoIP and autoDNS.

Important1: This Hard reset or 30/30/30 works fine for Asus router, but you do have to power cycle after the reset.

Important2: After you flash the firmware, and before you do the hard reset, the router will be building some nvram settings. YOU MUST WAIT FOR THIS TO FINISH PRIOR TO DOING ANYTHING WITH THE ROUTER INCLUDING A HARD RESET. Usually, you can tell when this process is completed by the WAN light coming on, but it does take several minutes. Go have a beer. There are starting to be more and more people who BRICK their routers by not waiting until the nvram is rebuilt, PRIOR to doing a hard reset. YOU NEED TO WAIT!


  1. Reset to defaults
  2. goto the Admin screen firmware upgrade, and browse to VxWorksRevert-GSv7-v3.bin, and click upgrade. During this time the Web browser may say upgrade successful and to reboot -----"Do NOT REBOOT"----- Wait for 2 min's and then reboot.
  3. Goto http;// and you should see a mgmt mode screen, this is where you browse to the original Linksys Firmware, and and upgrade.
  4. Wait for 1 min, even if it say's upgrade successful and to reboot, believe me, in my tests, it has not finished yet.
  5. goto - you should have the regular Linksys Firmware.

JTAG-Serial Info[edit]


JTAG Pinouts[edit]

 nTRST   1o o2	GND
   TDI   3o o4	GND
   TDO   5o o6	GND
   TMS   7o o8	GND
   TCK   9o o10	GND
 nSRST  11o o12  N/C

Using Universal JTAG Adapter

 white    1o o2	 black
   red    3o o4	 GND
  blue    5o o6	 GND
 green    7o o8	 GND
 yelow    9o o10  GND
 orange  11o o12  N/C
  • /noreset switch required

DD-WRT JTAG Recovery[edit]


  1. Backup CFE x2 (Compare the files, they must match exactly or there is something wrong with your JTAG setup)
  2. Erase Wholeflash x2
  3. Flash CFE
  4. Unplug Power
  5. Unplug JTAG Cable


  1. Set Rig ip static
  2. Plug network cable from rig to port 1
  3. Get TFTP ready, server ip -, Password - blank, file - dd-wrt.v24_micro_generic.bin
  4. Plug in power
  5. As soon as windows says "connected" hit upgrade. May have to use a network hub to make sure windows is always connected.
  6. Hard Reset 30\30\30

DD-WRT Serial Recovery[edit]

  1. Connect Serial cable
  2. Start one of the programs from above
  3. Get TFTP ready with file selected
  4. Use dd-wrt.v24_micro_generic.bin
  5. Connect power to the router
  6. start a rapid fire Cntl-C as you plug the router to power
  7. type "nvram erase" w/o quotes, hit enter
  8. type "flash -noheader : flash1.trx" w/o quotes, this starts the tftp daemon, hit enter
  9. but have tftp.exe ready
  10. Click go or start on TFTP
  11. give it 5 minutes after it finishes
  12. then power cycle....hard reset...then config
  13. when it stops spitting out txt in the serial consol....hit the enter should get a login that point, power cycle it, Hard reset or 30/30/30...then config
  14. you'll see it boot up


Serial Pinouts[edit]

 VCC  1 o
  TX  2 o
  RX  3 o
 N/C  4 o
 GND  5 o

USB Info[edit]

vlan Info[edit]

DD-WRT vlan Info[edit]

Confirmed the WRT54GS v7.2 supports port-based vlans via the GUI.

Confirmed the WRT54GS v7.2 supports port-based vlans via nvram with build 14853 micro-plus-SSH.

WRT54GS v7.2's ports are mapped like this:

 1 2 3 4 | case labels
 3 2 1 0 | nvram port numbers


root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=4 5
vlan0ports=3 2 1 0 5*
size: 17324 bytes (15444 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
size: 17324 bytes (15444 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
size: 17324 bytes (15444 left)


root@DD-WRT:~# nvram set vlan1ports="3 4 5"
root@DD-WRT:~# nvram set vlan0ports="2 1 0 5*"
root@DD-WRT:~# nvram commint
root@DD-WRT:~# reboot


root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=3 4 5
vlan0ports=2 1 0 5*
size: 17325 bytes (15443 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
size: 17325 bytes (15443 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
size: 17325 bytes (15443 left)
root@DD-WRT:~# lsmod
Module                  Size  Used by
ip_nat_pptp             2192   0 (unused)
ip_conntrack_pptp       2524   1
ip_nat_proto_gre        1552   0 (unused)
ip_conntrack_proto_gre    2312   0 [ip_nat_pptp ip_conntrack_pptp]
switch-robo             5036   0 (unused)
switch-core             5984   0 [switch-robo]
root@DD-WRT:~# ls /proc/switch
root@DD-WRT:~# cat /proc/switch/eth0/vlan/0/ports
0       1       2       5t*
root@DD-WRT:~# cat /proc/switch/eth0/vlan/1/ports
3       4       5t
root@DD-WRT:~# cat /proc/switch/eth0/vlan/2/ports


DarkShadow's Unit FCCID Q87-WRT54GSV72 11/07/2007 FCCID Q87-WRT54GSV72 11/29/2007


[DD-WRT v24 RC3] The WRT54GS v7.0 is now fully supported (if its not an intel chip - see important note below),

but requires again a special flashing way, which is easier this time compared to the v5 and v6 vxworks killer.

All Chips are supported, just follow step by step procedure at:

WARNING: There are at least two types of flash chips that are used on the v7 router.

Using this method with an INTEL-type flash chip will brick your router.

There is not currently a solution for using vxworkskiller with the intel-chip v7 routers.

See also[edit]

I just had found this link -->

This procedure worked easy and great, the 1st bin file I installed with the admin. options in the Linksys control panel

(the upload went about half way then tryed to reboot (then bricked my WRT54GS v7), following the procedure
from the above mentioned site using this command "tftp -i put dd-wrt.v24_micro_generic.bin" from
the location of the bin file, worked fine had to HIT enter 2 times to excecute the command to install the 2nd bin
file, now my WRT54GS v7 has so many features I need to find a good post for some tweak settings.

Hardware Modification[edit]

See also[edit]