On Networks (Netgear) N300R

From TechInfoDepot
Jump to navigationJump to search
bgn (N300)
N300 WiFi Router
Downloads
3rd Party Firmware
dd-wrt
OpenWrt
Incompatible
Tomato any flavor
Incompatible
Platform
BrandModelRev
On Networks N300R
FCC ID
Type
wireless router
CPU1
CPU1 Type
Lexra RLX4181
CPU1 Speed
390 MHz
Flash1 Chip
Macronix MX25L3206EM2I-12G
Flash1 Size
4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br />
RAM1 Size
32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip
Winbond W9825G6JH-6
ETH chip1
Switch
Ethernet Port Count
1-100MbE-WAN
4-100MbE-LAN
Wired Standard
IEEE 802.3i/3u

802dot11 OUI: 84:1B:5E (8 E, 10 W)
Ethernet OUI: 84:1B:5E (8 E, 10 W)

Stock bootloader
rtkload v2.1
Stock FW OS
Linux 2.4.18
Expansion IF types
none specified
Power
12 VDC, 1 A
Connector type
barrel
Serial Port (UART)
yes, internal, 4-pin header, populated, 3.3V TTL, (38400,8,N,1)
Other

Default SSID: OnNetworksXX
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1304 additional devices
of which 1 are On Networks devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1330 additional devices
of which 1 are On Networks devices

Manuf/OEM/ODM
Retail
FCC approval date 24 May 2012
(Est.) release date 20 May 2012
UPC 606449086546
(UPC DB, On eBay)
ASIN B0081HD3OO Flag of the United States.svg
Country of manuf China
Radio 1
Chip1
Realtek RTL8192CE
Wireless interface OUI
84:1B:5E
Antenna Connector Type
none specified
MIMO status
2x2:2
Wireless Standard
IEEE 802.11b/g/n
802.11n
up to 300 Mbps
802.11g
up to 54 Mbps
802.11b
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
 FCC ID
Netgear JWNR2000v2PY310400149

For a list of all currently documented Realtek chipsets with specifications, see Realtek.

300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class


Overview

"2976414500" is silkscreened on a sample production unit's board.

The default SSID pattern appears to be OnNetworksXX,

where XX seems to be a number.

Included PSU(s)

The power supply included with the device looks

to be an (unknown branded) T012LF1209.
unknown T012LF1209 (332-10469-01) (more)
Input: 100-240 VAC ~ 50/60 Hz, 0.5 A
 Input connector: NEMA 1-15P
Style: small, horiz.  Eff. level: 5
Output: 12 VDC, 1 A
 Output connector: barrel (center +)
 OD: ??  ID: ??  LEN: ??

JTAG-Serial Info

Serial

Serial Pinouts

The pinout for the serial connection appears to be as follows...

[ RTL8196C ]

            (GND) (RxD) (TxD) (3.3)
                                   JP2

Info derived from

boot log
4.MXIC SPI (4 MByte)!

---JWNR2000v2 at 2011.12.12-11:14+0800 version v2.1 [16bit](390MHz)

### Press down Reset button(GPIOA5) to reset the Router Configuration!! ###
no sys signature at 00010000!
system signature at 00020000!
rootfs signature at 000D0000!

### Press down Esc key to escape booting by user!! ###
Set 8196C PHY Patch OK

NMRP Client starts Listening for ADVERTISE...
NMRP timeoust exit;
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
early printk enabled
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock7 console=0
Calibrating delay loop... 389.12 BogoMIPS
Memory: 24096k/32768k available (2076k kernel code, 8672k reserved, 241k data, 56k init, 0k highmem)
Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode-cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
check_wait... unavailable.
POSIX conformance testing by UNIFIX
Initializing RT netlink socket
Starting kswapd
pty: 10 Unix98 ptys configured
state->flags=00000000
Realtek GPIO Driver for Flash Reload Default
block: 64 slots per queue, batch=16
SPI INIT
flash device: 0x200000 at 0xbd000000
probe realtek
get SPI CS0
maker:c2  type:20  sector_cnt:64
get SPI CS1
maker:0  type:0  sector_cnt:0

MXIC matched!!get SPI chip driver!
probe ends
probe realtek2
Creating 10 MTD partitions on "Physically mapped flash":
0x00000000-0x00008000 : "boot+hw_setting"
0x00008000-0x0000a000 : "pot"
0x0000a000-0x0000c000 : "pppoe"
0x0000c000-0x0000e000 : "reserve1"
0x0000e000-0x00010000 : "reserve2"
0x00010000-0x00020000 : "nvram"
0x00020000-0x000d0000 : "kernel"
0x000d0000-0x003b0000 : "root fs"
0x003b0000-0x003c0000 : "trafficmeter"
0x003c0000-0x00400000 : "language_table"
RTL8192C/RTL8188C driver version 1.4 (2010-12-22)
=====>>INSIDE rtl8192cd_init_one <<=====
vendor_deivce_id=819110ec
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
TCP: Hash tables configured (established 2048 bind 4096)
ip_conntrack version 2.1 (512 buckets, 4096 max) - 356 bytes per conntrack
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
PPTP netfilter connection tracking: registered
PPTP netfilter NAT helper: registered
ip_tables: (C) 2000-2002 Netfilter core team
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 56k freed
mount /proc file system ok!
mount /var  file system ok!
mtd = /dev/nvram
flatfsd: flat1_checkfs 4, hdr.magic=cafe2345, hdr.length=14508, hdr.chksum=1290928

flatfsd: Created 8 configuration files (14223 bytes)
Wed Jan  1 00:00:00 UTC 2003
firmware_version = V1.0.0.3_1.0.10
Using /lib/modules/2.4.18/fastpath.o
Realtek FastPath v1.18
Using /lib/modules/2.4.18/dni-qos.o
dni-qos module init at dev:eth1, real_dev:eth1
Using /lib/modules/2.4.18/ipt_CONENAT.o
Using /lib/modules/2.4.18/ipt_DNS_HIJACK.o
Using /lib/modules/2.4.18/ip_conntrack_starcraft.o
Using /lib/modules/2.4.18/ip_nat_starcraft.o
Using /lib/modules/2.4.18/lan_port_resv.o
Using /lib/modules/2.4.18/delete_conntrack.o
Using /lib/modules/2.4.18/ipt_string.o
Using /lib/modules/2.4.18/ip_conntrack_proto_esp.o
Using /lib/modules/2.4.18/ip_nat_proto_esp.o
PID:mtd = /dev/nvram
flatfsd: Wrote 14508 bytes to flash in 0 seconds
SSID:OnNetworks03PASSPHRASE:53602068Configuring LAN , lan_ifname = br0 ........
  Set 8196C PHY Patch OK

IF_handle start....
wps start
cat: /tmp/wscd_lock_stat: No such file or directory
[wsc]main 6645:daemon parameter:
wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-wlan0.fifo -daemon

Read config file:/var/wsc.conf, def:0
configured pin_timeout = 240
[wsc]init_config 6296:auth_type_flags:21
[wsc]init_config 6300:encrypt_type_flags:09

<<====WPS argument list=====>>
is_ap = 1
role = Registrar
config_state = configured
config_method = 0x2688
pin_code = 20202330
upnp = 1
wlan0_wsc_disabled=0
auth_type_flags:0x21
encrypt_type_flags:9
---wlan0 setting---
rf_band = 1; 1=2.4G ;2=5G
SSID=OnNetworks03
security mixed mode = 0
Auth_Type=32
Encrypt_Type=8
WSC_PSK = 53602068
wlan0 interface wsc is Enabled
button_hold_time = 3
SSID-prefix = OnNetworks_
disable_configured_by_exReg = 0
uuid=63041253101920061228841b5e832259
brute_force_attack_mitigation ThresHold[3]
wsc version=2.0

<<====WPS argument list=====>>
<< Start_upnp >>
WSCRegisterCallBackFunc successfully!

WiFi Simple Config v2.10-wps2.0 (2012.06.05-04:17+0000).

starting app
[util]build_probe_rsp_ie,2377:config method(0x1008)=2008
[wsc]main 6878:alarm(1)---------->
$Starting udhcpd:
error, Failure parsing line 10 of /var/udhcpd.conf
info, udhcpd (v0.9.9-pre) started
error, max_leases value (254) not sane, setting to 253 instead
error, Unable to open /tmp/udhcpd.leases for reading

The attached devices demo is Running ...

$Starting Service:
The abbreviation of English is Eng!
reload_language_table::Didn't find the language table we need!
gui_region = English
region = English, download_region =
 Update string table successfully, memory usage: 292KB.
The httpd server is running ...
$Starting syslogd:

route: SIOC[ADD|DEL]RT: No such process
$Starting miniigd:

MiniIGD v1.07 (2012.06.05-04:17+0000).
$Starting mini_upnpd:
$Starting dnsmasq:
No nameserver in /var/resolv.conf

 Static routes setting:
WAN is down
The telnetenable is running ...
device eth5 is not a slave of br0
/etc/rc.d/service_start.sh: 186: /sbin/cmd_traffic_meter: not found
$Starting /usr/sbin/lld2d:

flash:: open /tmp/upnp_portmap failed

$Starting WAN:
$Starting udhcpc:
info, udhcpc (v0.9.9-pre) started
udhcpc -i eth1 -p /var/run/udhcpc.pid -s /etc/udhcpc/udhcpc.script    -h N300R &

deconfig
interface=eth1

BusyBox v1.01 (2012.06.05-04:16+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

/ # ##POT area valid.
Start sending discover ...
#### firmware_checking  ####

ps aux

ps aux
/ # ps aux
  PID  Uid     VmSize Stat Command
    1 root        376 S   init
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
    7 root            SW  [mtdblockd]
  547 root        500 S   wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-w
  568 root        292 S   iwcontrol wlan0
  616 root        448 S   udhcpd /var/udhcpd.conf
  620 root        248 S   net-scan
  626 root        744 S   /usr/sbin/uhttpd
  630 root        380 S   syslogd -m -1
  632 root        324 S   klogd
  651 root        388 S   miniigd -e 1 -i br0 -u 12342409-1234-1234-5678-841b5e
  661 root        340 S   mini_upnpd -wsc /tmp/wscd_config -igd /tmp/igd_config
  698 root        340 S   dnsmasq -h -n -c 0 -i br0 -r /var/resolv.conf
  763 root        224 S   /usr/sbin/telnetenable
  764 root        244 S   /usr/sbin/getdeviceinfo
  803 root        368 S   /usr/sbin/lld2d br0
  877 root        380 S   udhcpc -R -i eth1 -p /var/run/udhcpc.pid -s /etc/udhc
  882 root        412 S   /bin/sh /etc/rc.d/mon_tsk.sh
  883 root        432 S   /bin/sh /etc/rc.d/monitor.sh
  921 root        208 S   /sbin/alarm 0
  941 root        244 S   /sbin/monWsc
  942 root        240 S   /usr/sbin/potd
  943 root        196 S   /usr/sbin/set_potd
  945 root        500 S   /bin/sh
 1061 root        252 S   sleep 30
 1062 root        356 R   ps aux

lsmod

lsmod
/ # lsmod
Module                  Size  Used by
ip_nat_proto_esp         712   0 (unused)
ip_conntrack_proto_esp    1640   0 (unused)
ipt_string              4296   0 (unused)
delete_conntrack        2504   0 (unused)
lan_port_resv           1632   0
ip_nat_starcraft        1088   0 (unused)
ip_conntrack_starcraft    1816   1
ipt_DNS_HIJACK          3072   1
ipt_CONENAT             1400   0 (unused)
dni-qos                 6896   0 (unused)
fastpath              106608   0 (unused)

cat /proc/mtd

/proc/mtd
/proc # cat mtd
dev:    size   erasesize  name
mtd0: 00008000 00001000 "boot+hw_setting"
mtd1: 00002000 00001000 "pot"
mtd2: 00002000 00001000 "pppoe"
mtd3: 00002000 00001000 "reserve1"
mtd4: 00002000 00001000 "reserve2"
mtd5: 00010000 00001000 "nvram"
mtd6: 000b0000 00001000 "kernel"
mtd7: 002e0000 00001000 "root fs"
mtd8: 00010000 00001000 "trafficmeter"
mtd9: 00040000 00001000 "language_table"

cat /proc/meminfo

meminfo
/proc # cat meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  24731648 12988416 11743232        0  1155072  4030464
Swap:        0        0        0
MemTotal:        24152 kB
MemFree:         11468 kB
MemShared:           0 kB
Buffers:          1128 kB
Cached:           3936 kB
SwapCached:          0 kB
Active:           1592 kB
Inactive:         5368 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        24152 kB
LowFree:         11468 kB
SwapTotal:           0 kB
SwapFree:            0 kB

cat /proc/cpuinfo

cpuinfo
/proc # cat cpuinfo
system type             : Philips Nino
processor               : 0
cpu model               : R3000 V0.0
BogoMIPS                : 389.12
wait instruction        : yes
microsecond timers      : no
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available
ll emulations           : 0
sc emulations           : 0