Netgear WNR1000v2

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
bgn (N150)
N150 Wireless Router
Netgear WNR1000 v2
wireless router
Atheros AR7240
CPU1 Type
CPU1 Speed
400 MHz
Flash1 Chip
Macronix MX25L3205DM2I-12G
Flash1 Size
4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size
32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip
SK hynix HY5DU561622FTP-D43
ETH chip1
Atheros AR7240
Atheros AR7240
Ethernet Port Count
Stock bootloader
U-Boot 1.1.4
Stock FW OS
Linux 2.6.15 OpenWrt-deriv
Expansion IF types
12 VDC, 1 A
Connector type
2.1 mm (OD)
5.5 mm (ID)
9.5 mm (LEN)
Serial Port (UART)
yes, 4-pin header, populated, internal, 3.3V TTL, (115200 8N1), JP2

Default SSID: NETGEAR (43 addl. devices)
Default IP address:
the IP is used by 1293 additional devices
of which 105 are Netgear devices
Default login user: admin
Default login password: Password

FCC approval date 25 September 2009
ASINs B00894WP4S Flag of the United States.svg
B001UI4RTG Flag of the United States.svg
multiple uses
Country of manuf China
Radio 1
Atheros AR9285
Wireless interface OUI
00:24:B2, 00:26:F2, 30:46:9A, A0:21:B7, C0:3F:0E, C4:3D:C7, E0:91:F5
Antenna Connector Type
MIMO status
Wireless Standard
IEEE 802.11b/g/n
up to 150 Mbps
up to 54 Mbps
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
Netgear WN604PY309300122
 CPU1 brandRadio1 chip1 brandRadio1 chip2 brand
Netgear WNR1000v1AtherosAtherosAtheros
Netgear WNR1000v2AtherosAtheros
Netgear WNR1000v2h2AtherosAtheros
Netgear WNR1000v3BroadcomBroadcom
Netgear WNR1000v4MediaTekMediaTek

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.

For a list of all currently documented Netgear device with specifications, see Netgear.

150 Mbps - 1SS 2.4GHz 802.11n (40MHz chan.) = N150 class


"2976333104" is silkscreened on one production model board.

The same basic hardware is used for the Netgear WN604.
The same hardware is also used in Netgear WNR612v2.
all ports (both uplink and downlink) feature automatic MDI/crossover


The power adapter included with the device is a PI Electronics (H.K.) Ltd.

T012LF1209 16100-2LF (12V, 1A), Netgear P/N: 332-10166-01.
Centre positive 5,5mm/2,1mm barrel. Efficiency Level V,
emits high frequency squeal/high-pitched electronic whine
sound WNR1000v2 itself is silent. UL File Number: E186735.
PI Electronics T012LF1209 16100-2LF (more)
Input: 100-120 VAC ~ 50/60 Hz, 0.5 A
 Input connector: NEMA 1-15P
Output: 12 VDC, 1 A
 Output connector: barrel (center +)
 OD: 5.5 mm  ID: 2.1 mm  LEN: 9.5 mm

Links of Interest



Forum threads

JTAG-Serial Info


Serial Pinouts

---> to AR9285 Wifi Controller

         UART       JP2
(GND) (RxD) (TxD) [3.3V]

<--- to AR7140 CPU

Info derived from

boot log

boot log
U-Boot 1.1.4 (Sep  3 2009 - 20:06:10)

WNR1000v2-VC (ar7240) U-boot dni7 V0.8
#### TAP VALUE 1 = a, 2 = a
32 MB
Top of RAM usable for U-Boot at: 82000000
Reserving 269k for U-Boot at: 81fbc000
Reserving 192k for malloc() at: 81f8c000
Reserving 44 Bytes for Board Info at: 81f8bfd4
Reserving 36 Bytes for Global Data at: 81f8bfb0
Reserving 128k for boot params() at: 81f6bfb0
Stack Pointer at: 81f6bf98
Now running in RAM - U-Boot at: 81fbc000
id read 0x100000ff
flash size 4194304, sector count = 64
Flash:  4 MB
In:    serial
Out:   serial
Err:   serial
Net:   ag7240_enet_initialize...
Fetching MAC Address from 0x81febc00
Fetching MAC Address from 0x81febc00
: cfg1 0xf cfg2 0x7014
eth0: 00:26:f2:9f:a2:08
eth0 up
: cfg1 0xf cfg2 0x7214
eth1: 00:26:f2:9f:a2:07
ATHRS26: resetting s26
ATHRS26: s26 reset done
eth1 up
eth0, eth1
Trying eth1
eth1 link down
Trying eth0
eth0 link down

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Verifying Checksum ... OK
### SQUASHFS loading 'image/uImage' to 0x80800000
### SQUASHFS load complete: 623510 bytes loaded to 0x80800000
## Booting image at 80800000 ...
   Image Name:   Linux Kernel Image
   Created:      2009-09-09  16:01:04 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    623446 Bytes = 608.8 kB
   Load Address: 80002000
   Entry Point:  801c1000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 801c1000) ...
## Giving linux memsize in bytes, 33554432

Starting kernel ...

Booting AR7240(Python)...
Linux version 2.6.15 (root@anderson) (gcc version 3.4.4 
(OpenWrt-2.0)) #199 Wed Sep 9 23:10:19 CST 2009
flash_size passed from bootloader = 4
CPU revision is: 00019374
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=31:08 
rootfstype=squashfs init=/etc/preinit mtdparts=ar7240-nor0:256k(u-boot),
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 170.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30428k/32768k available (1470k kernel code, 
2324k reserved, 313k data, 100k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
Returning IRQ 48
AR7240 GPIOC major 0
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
Serial: 8250/16550 driver $Revision: #1 $ 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
9 cmdlinepart partitions found on MTD device ar7240-nor0
Creating 9 MTD partitions on "ar7240-nor0":
0x00000000-0x00040000 : "u-boot"
0x00040000-0x00050000 : "u-boot-env"
0x00050000-0x003a0000 : "rootfs"
0x003a0000-0x003b0000 : "config"
0x003b0000-0x003d0000 : "language_table"
0x003d0000-0x003e0000 : "pot"
0x003e0000-0x003f0000 : "traffic_meter"
0x003f0000-0x00400000 : "ART"
0x00050040-0x003a0000 : "mount_fs"
mtd: partition "mount_fs" doesn't start on an erase block boundary 
-- force read-only
u32 classifier
    Perfomance counters on
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 228 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
IPP2P v0.8.2 loading
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Ebtables v2.0 registered
arch/mips/ar7240/ar7240_gpio.c (ar7240_simple_config_init) 

ar7240: calling simple_config callback..
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 100k freed
Algorithmics/MIPS FPU Emulator v1.5
- init -
init started:  BusyBox v1.4.2 (2009-09-09 23:04:26 CST) multi-call binary
Loading data from /dev/mtd/3 ...
The data configuration is Valid
The data center is Running ...
ipt_CONENAT: module license 'unspecified' taints kernel.
ip_conntrack_rtsp v0.6.21 loading
ip_nat_rtsp v0.6.21 loading
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
Generating Rules...
rmmod: ip_nat_dnisip.ko: Success
rmmod: ip_conntrack_dnisip.ko: Success
POT is Running...
POT is Finished!!!
The POT-(Get/Set) Demo is Running ...
SN: 28C29C5V3C300
WAN MAC: 00:26:F2:9F:a2:08
AG7240: Length per segment 1536
AG7240: Max segments per packet 1
AG7240: Max tx descriptor count    40
AG7240: Max rx descriptor count    252
AG7240: fifo cfg 3 01f00140
AG7240CHH: Mac address for unit 0
AG7240CHH: 00:26:f2:9f:a2:08
AG7240CHH: Mac address for unit 1
AG7240CHH: 00:26:f2:9f:a2:07
INIT-SWITCH: Default WAN MAC is : 00:26:f2:9f:a2:08
ag7240_ring_alloc Allocated 640 at 0x80372000
ag7240_ring_alloc Allocated 4032 at 0x80299000
Setting PHY...
device eth1 entered promiscuous mode
number of br ports=1
ag7240_ring_alloc Allocated 640 at 0x81c0ac00
ag7240_ring_alloc Allocated 4032 at 0x81c1d000
ATHRS26: resetting s26
ATHRS26: s26 reset done

ar7240: calling simple_config callback..
Setting PHY...
udhcp server (v0.9.8) started
The attached devices demo is Running ...
killall: utelnetd: no process killed
killall: telnetenable: no process killed
The telnetenable is running ...
Deleting static route ... Done!
Adding static route ... Done!
The HNAP Demo is running on br0 : 00:26:F2:9F:A2:07
ag7240_ring_free Freeing at 0x80372000
ag7240_ring_free Freeing at 0x80299000
ag7240_ring_alloc Allocated 640 at 0x80372000
ag7240_ring_alloc Allocated 4032 at 0x80299000
Setting PHY...
ag7240_ring_free Freeing at 0x80372000
ag7240_ring_free Freeing at 0x80299000
ag7240_ring_alloc Allocated 640 at 0x80372000
ag7240_ring_alloc Allocated 4032 at 0x80299000
Setting PHY...
udhcp client (v0.9.8) started
Sending discover...
Sending discover...
Sending discover...
No lease, forking to background.
traffic_meter config_update : killall: traffic_meter: no process killed
killall: ntpclient: no process killed
time zone index is : 20
Run NTP Client with setting:
killall: miniupnpd: no process killed
Jan  1 00:00:33 miniupnpd[378]: listening on
lo        no wireless extensions.
br0       no wireless extensions.
eth0      no wireless extensions.
eth1      no wireless extensions.

/etc/rc.d/rc.wlan: /etc/rc.d/rc.wlan: 56: uname: not found
Args: 1
ath_hal: (AR5416, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc
ath_pci: (Atheros/multi-bss)
wifi0: Atheros 9285: mem=0x10000000, irq=48 hw_base=0xb0000000
wlan: mac acl policy registered
wlan_me: Version 0.1
Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved
wifi1     no private ioctls.

Creating ap for NETGEAR on
Added ath0 mode master
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
Created ath0 mode ap for NETGEAR
/etc/ath/activateVAP: /etc/ath/activateVAP: 56: uname: not found
lo        no wireless extensions.
br0       no wireless extensions.
eth0      no wireless extensions.
eth1      no wireless extensions.
wifi0     no wireless extensions.

device ath0 entered promiscuous mode
number of br ports=2
/etc/ath/activateVAP: /etc/ath/activateVAP: 1: arping: not found
>>>>> WPS MODE, 1
cat: /etc/wpa2/WSC_ath0.conf: No such file or directory
>>>>> WPS Translate, Index:0
Making Topology File . . .
Starting Firewall...
Reading topology file /var/run/topology.conf ...
time zone index is : 20
Run NTP Client with setting:
dnsmasq: started, version 2.39 cache disabled
dnsmasq: compile time options: IPv6 GNU-getopt 
ISC-leasefile no-DBus no-I18N no-TFTP
dnsmasq: using local addresses only for domain lan
dnsmasq: failed to access /tmp/dhcp.leases: No such file or directory
dnsmasq: no servers found in /tmp/resolv.conf, will retry
checksum = 0xFF, len = 131072
There is not language table in flash or language table was broken!
gui_region = English
region = English, download_region =
 Update string table successfully, memory usage: 248KB.
The httpd server is running ...
Start utelnetd by telnetenable
traffic_meter start : .
Boot up procedure is Finished!!!

Please press Enter to activate this console.

cat /proc/cpuinfo

root@WNR1000v2:/# cat /proc/cpuinfo
system type             : Atheros AR7240 (Python)
processor               : 0
cpu model               : MIPS 24K V7.4
BogoMIPS                : 225.28
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16
VCED exceptions         : not available
VCEI exceptions         : not available


root@WNR1000v2:/# ps
  PID  Uid     VmSize Stat Command
    1 root        356 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    8 root            SW< [kblockd/0]
   30 root            SW  [pdflush]
   31 root            SW  [pdflush]
   33 root            SW< [aio/0]
   32 root            SW  [kswapd0]
   44 root            SW  [mtdblockd]
  131 root        268 S   klogd
  135 root        228 S   datalib
  206 root        108 S   /usr/sbin/potval
  283 root        236 S   udhcpd /tmp/udhcpd.conf
  287 root        124 S   /usr/sbin/net-scan
  296 root        156 S   /usr/sbin/telnetenable
  300 root        112 S   /usr/sbin/hnapd
  329 root         80 S   udhcpc -b -i eth0 -h WNR1000v2 -r
  378 root        276 S   /usr/sbin/miniupnpd
 1474 root        124 S   /usr/bin/wlanlog
 1482 root        280 S   syslogd -m 0 -T GMT+8
 1494 root        220 S   /usr/sbin/ntpclient
 1499 root        348 S   crond -c /tmp/etc/crontabs -T GMT+8
 1502 root        372 S   /usr/sbin/dnsmasq -c 0 -d -h -r /tmp/resolv.conf
 1507 root        724 S   uhttpd
 1510 root        140 S   inetd
 1515 root        232 S   /usr/bin/detcable 2
 1518 root        420 S   /bin/sh /sbin/button_detecte
 1546 root        304 S   /sbin/traffic_meter
 1553 root        456 S   -sh
 2222 root        284 S   /bin/sleep 1
 2225 root        372 R   ps


root@WNR1000v2:/# lsmod
Module                  Size  Used by    Tainted: P
wlan_scan_ap            9152  0
ath_pktlog             14336  0
wlan_me                 9152  0
wlan_acl                5152  0
wlan_wep                5536  0
wlan_tkip              12608  0
wlan_ccmp               7968  0
wlan_xauth              1024  0
ath_pci                58496  0
ath_dev               123344  2 ath_pktlog,ath_pci
ath_rate_atheros       46928  2 ath_pktlog,ath_dev
wlan                  248448  11 wlan_scan_ap,ath_pktlog,wlan_me,wlan_acl,wlan_wep,
wlan_ext                3328  1 wlan
ath_hal               276928  4 ath_pktlog,ath_pci,ath_dev
ar7240gpiointr          4000  0
ar7240gpio              2720  0
ag7240_mod             32272  1 ar7240gpio
ip_nat_dnisip           6304  0
ip_conntrack_dnisip     5776  1 ip_nat_dnisip
ipt_TRIGGER             3200  1
ipt_spiadvDoS          12912  1
ipt_NETGEAR_REJECT     12320  0
ipt_urlBlock            5200  0
ipt_dnshijack           1408  1
ipt_spiDoS              3136  2
ip_nat_pptp             4528  0
ip_conntrack_pptp       7312  1 ip_nat_pptp
ip_nat_dnirtsp          6224  0
ip_conntrack_dnirtsp     8256  1 ip_nat_dnirtsp
ip_nat_dnih323          6016  0
ip_conntrack_dnih323    37440  1 ip_nat_dnih323
ip_nat_STARCRAFT        1504  0
ipt_CONENAT             1760  2
ip_nat_ftp              2464  0
ip_conntrack_ftp        5520  1 ip_nat_ftp

cat /proc/bus/pci/devices

root@WNR1000v2:/proc/bus/pci# cat devices
0000    168c002b        30      10000004        00000000        00000000  
00000000        00000000        00000000        00000000        00010000  
00000000        00000000        00000000        00000000        00000000  
00000000        ath_pci