See 'WikiDevi' @ the Internet Archive (MW XML, Files, Images)
upgraded MW to 1.30 - maybe things are slightly less broken

Linksys WRT160N v2

From WikiDevi
Jump to: navigation, search

Linksys WRT160N v2

Manuf/OEM/ODM CyberTAN

FCC approval date: 15 May 2008
Country of manuf.: China

Amazon image

B000Z3U1P6 (Flag of the United States.svg, On Amazon, On CCC)
multiple revisions of this device, use caution

Type: wireless router

Industry Canada ID: 3839A-WRT160NV2

Power: 12 VDC, 1 A
Connector type: barrel

CPU1: Ralink RT2880 (266 MHz)
FLA1: 4 MiB
4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
(Eon EN29LV320AB-70TCP)
RAM1: 16 MiB
16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
(PSC A2V64S40CTP-G6 × 2)

Expansion IFs: none specified
JTAG: yes, looks like it, J11
Serial: yes, 5-pin header, internal, J10, (115200,8,N,1)

WI1 chip1: Ralink RT2880
WI1 chip2: Ralink RT2820
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: none

ETH chip1: Ralink RT2880
Switch: Realtek RTL8306SD
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1


Additional chips
2.4GHz Power Amplifier IC;Richwave;RTC6694;;2;SiGe;QFN24;

Third party firmware supported: OpenWrt (leitec)

Default IP address:
the IP is used by 1169 additional devices
of which 146 are Linksys devices
Default login user: blank
Default login password: admin
blank:admin credentials used by 278 additional devices
of which 141 are Linksys devices

802dot11 OUI: 00:21:29 (9 E, 16 W, 2007), 00:22:6B (8 E, 11 W, 2007), 00:23:69 (12 E, 19 W, 2008)
Ethernet OUI: 00:21:29 (9 E, 16 W, 2007), 00:22:6B (8 E, 11 W, 2007), 00:23:69 (12 E, 19 W, 2008)

 CPU1 brandWI1 chip1 brandWI1 chip2 brand
Linksys WRT160N v1.0BroadcomBroadcomBroadcom
Linksys WRT160N v1.1BroadcomBroadcomBroadcom
Linksys WRT160N v2RalinkRalinkRalink
Linksys WRT160N v3BroadcomBroadcom
For a list of all currently documented Ralink chipsets with specifications, see Ralink.

Ultra RangePlus Wireless-N Broadband Router

 • Support page  • (Template link outdated)

"3763-01001201R" is silkscreened on the board in the FCC photos.

WRT160N v2 serial numbers appear to start with CSE1.

Additional external links[edit]

Firmware projects[edit]


Forum threads[edit]

(Note: DD-WRT doesn't currently support the WRT160Nv2)



WAN Port    
        (   )
        (   )

Boot log[edit]

boot log
U-Boot 1.1.3 (Jul 26 2008 - 17:24:31)

Board: RT2880 DRAM:  16 MB
Switch Reset Occurred
The Flash ID =22F9 MAN_ID=7F
CFI QUERY flash sectors=[8],sector_size=[2000]
CFI QUERY flash sectors=[63],sector_size=[10000]
ASIC -VerB/C (MAC to 100PHY Mode)
Total memory = 16Mbytes
Date:Jul 26 2008  Time:17:24:31

--------***** Rtl8306_asicSoftReset *****-------

 --------***** Get the RTL8306SD Manufactory ID=5988 *****-------
Found valid NVRAM.
Board IP Address      
Default host ip Address
Board MAC Address               00:22:6b:78:29:ee
Boot file name                  "uboot.bin"
Boot address                    BFC40000
Deafult baud rate               115200

*** Press Ctrl-C or ESC key to stop boot run ***                                                                                         0 
3: System Boot system code via Flash.
## Booting image at bf040000 ...
   Image Name:   Linux Kernel Image
   Created:      2009-08-21   3:23:49 UTC
System Control Status = 0x02110084
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    3416064 Bytes =  3.3 MB
   Load Address: 8a000000
   Entry Point:  881d6040
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 881d6040) ...
## Giving linux memsize in MB, 16

Starting kernel ...

ramsize = 16 MBytes
rambase not set, set to default (0x08000000)
[0,88259e40]: base<08000000> size<01000000> type<Free RAM memory>

 The CPU feqenuce set to 266 MHz
CPU revision is: 0001906c
icache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0
dcache: sets:256, ways:4, linesz:16 ,total:16384, waybit:12, flags:0x0
i waysize = 4096, d waysize = 4096, i sets= 256, d sets=256
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Linux version 2.4.30 (tcy@cybertan) (gcc version 3.3.6) #9 Fri Aug 21 11:23:36 CST 2009
Determined physical RAM map:
 memory: 01000000 @ 08000000 (usable)
On node 0 totalpages: 36864
zone(0): 36864 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: console=ttyS1,115200n8 root=/dev/mtdblock2 noinitrd
cause = f080837c, status = 1000c700
calculating r4koff... 00144b50(1330000)
CPU frequency 133.00 MHz
Using 133.000 MHz high precision timer.
Calibrating delay loop... 265.42 BogoMIPS
Memory: 12376k/16384k available (1870k kernel code, 4008k reserved, 112k data, 100k init, 0k highmem)
Dentry cache hash table entries: 32768 (order: 6, 262144 bytes)
Inode cache hash table entries: 16384 (order: 5, 131072 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 8192 (order: 3, 32768 bytes)
Page-cache hash table entries: 65536 (order: 6, 262144 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
pci.c pcibios_init():840
BAR0 at slot 0 = ffffffff
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
pty: 256 Unix98 ptys configured
bootnv start=0xbf03ea00, end=0xbf03fe00
Ralink gpio driver initialized
spidrv_major = 217
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0x300500 (irq = 9) is a 16550A
ttyS01 at 0x300c00 (irq = 8) is a 16550A
HDLC line discipline: version $Revision: $, maxframe=4096
N_HDLC line discipline registered.
RA2880 Ethernet Driver Initilization. v1.01  256 rx/tx descriptors allocated!
Netlink init ok!

--------***** Rtl8306_asicSoftReset *****-------
--------***** Get the RTL8306SD Manufactory ID=5988 *****-------
rdm_major = 254
PPP generic driver version 2.4.2
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
physmap flash device: 400000 at bc400000
Pirmary Extended Table:
    Address Sensitive Unlock=0
    Erase Subspend=2
    Block Protect=4
    Block Temp Unprotect=1
    Block [Un]Protect Scheme=4
    Simultaneous Operation=0
    Burst Mode=0
    Page Mode=0
    ACC Min=165
    ACC Max=181
 Amd/Fujitsu Extended Query Table v1.1 at 0x0040
cfi_cmdset_0002(): bootloc=2
cfi_cmdset_0002(): Region=0 BlockSize 0x2000 bytes, 8 blocks
cfi_cmdset_0002(): Region=1 BlockSize 0x10000 bytes, 63 blocks
cfi_cmdset_0002(): cfi->chips[0].word_write_time=16
cfi_cmdset_0002(): cfi->chips[0].buffer_write_time=1
cfi_cmdset_0002(): cfi->chips[0].erase_time=1024
number of CFI chips: 1
Region0: SectorSize=0x2000 SectorNum=8
Region1: SectorSize=0x10000 SectorNum=63
cfi_cmdset_0002: Using word write method.
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Using physmap partition definition
Creating 4 MTD partitions on "RT2880 SOC Physically mapped flash":
0x00000000-0x00040000 : "Bootloader"
mtd: Giving out device 0 to Bootloader
0x00040000-0x003f0000 : "Kernel"
mtd: Giving out device 1 to Kernel
0x000e2464-0x003f0000 : "Rootfs"
mtd: partition "Rootfs" doesn't start on an erase block boundary -- force read-only
mtd: Giving out device 2 to Rootfs
0x003f0000-0x78633858 : "nvram"
mtd: partition "nvram" extends beyond the end of device "RT2880 SOC Physically mapped flash" -- size truncated to 0x10000
mtd: Giving out device 3 to nvram
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 1024 buckets, 8Kbytes
TCP: Hash tables configured (established 16384 bind 32768)
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.1 (1152 buckets, 9216 max) - 368 bytes per conntrack
Register conntrack protocol helper for ESP...
init IP_nat_proto_esp register.
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
ip_tables: (C) 2000-2002 Netfilter core team
ipt_random match loaded
ipt_time loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.8 Ben Greear <>
All bugs added by David S. Miller <>
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing prom memory: 0kb freed
Freeing unused kernel memory: 100k freed
console started
trying to start /sbin/init
Needed modules: rt2860v2_ap
cmd=[insmod rt2860v2_ap ]
The chipset is RA_RT2880

Hit enter to continue...
Bootloader is UBOOT.

Make date==>Year:9,Month:8,Day:20
Firmware version =>v2.0.03
killall: httpd: no process killed
Console log level set to 1
cmd=[vconfig set_name_type VLAN_PLUS_VID_NO_PAD ]
start_vlan():set eth2 hwaddr to 00:22:6b:78:29:ee
cmd=[vconfig add eth2 1 ]
ioctl: Device or resource busy
cmd=[vconfig add eth2 2 ]
cmd=[brctl addbr br0 ]
cmd=[brctl setfd br0 0 ]
name=[vlan1] lan_ifname=[br0]
start_lan():set vlan1 hwaddr to 00:22:6b:78:29:ee
cmd=[brctl addif br0 vlan1 ]
name=[ra0] lan_ifname=[br0]
cmd=[brctl addif br0 ra0 ]
lo: File exists
Set 66560 to /proc/sys/net/core/rmem_max ...
cmd=[resetbutton ]
start syslogd...
br0  86400
cmd=[udhcpd /tmp/udhcpd.conf ]
info, udhcp server (v0.9.8) started
cmd=[tftpd -s /tmp -c -l -P N160 ]
tftp server started
tftpd: standalone socket
[HTTPD Starting on /www]
cmd=[httpd ]
zebra disabled.
upnpd adding route[route add -net netmask br0]

J>>>>>> START WSC  >>>>>>>>>>>
Name to be unset = wsc_config_method=pin

led reset.....LED1 orange, LED2 Green
iwpriv cmd is iwpriv ra0 set WscConfMode=7
iwpriv cmd is iwpriv ra0 set WscConfStatus=1
cmd=[udhcpc -i vlan2 -l br0 -p /var/run/ -s /tmp/udhcpc ]
info, udhcp client (v0.9.8) started

Hit enter to continue...
HNAP:using uuid:00220022-6b78-29ef-efee-00226b7829ef
               libupnp: using UDP SSDP_PORT = 1900

Hit enter to continue...


cat /proc/mtd[edit]

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00040000 00010000 "Bootloader"
mtd1: 003b0000 00010000 "Kernel"
mtd2: 0030db9c 00010000 "Rootfs"
mtd3: 00010000 00010000 "nvram"

cat /proc/cpuinfo[edit]

# cat /proc/cpuinfo
system type             : Palmchip Surfboard
processor               : 0
cpu model               : unknown V6.12
BogoMIPS                : 265.42
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available


# lsmod
Module                  Size  Used by
rt2860v2_ap           777824   1


# ps
  PID  Uid        VSZ Stat Command
    1 root       1808 S   /sbin/init noinitrd
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
    7 root            SW  [mtdblockd]
    9 root            SW  [rtmpWscHandle]
   22 root       1764 S   resetbutton
   25 root       1192 S   syslogd -O /dev/null
   30 root       1768 S   tftpd -s /tmp -c -l -P N160
   32 root       1476 S   udhcpd /tmp/udhcpd.conf
   33 root       1200 S   crond -c /etc/cron.d
   36 root       5472 S   httpd
   40 root       1928 S   upnpd br0
   46 root       2364 S   wscd -m 1 -a
   61 root       1452 S   udhcpc -i vlan2 -l br0 -p /var/run/ -s
   63 root       2364 S   wscd -m 1 -a
   64 root       2364 S   wscd -m 1 -a
   65 root       2364 S   wscd -m 1 -a
   66 root       2364 S   wscd -m 1 -a
   68 root       2364 S   wscd -m 1 -a
   69 root       2364 S   wscd -m 1 -a
   70 root       2364 S   wscd -m 1 -a
   72 root       2364 S   wscd -m 1 -a
   73 root       2364 S   wscd -m 1 -a
   82 root       1296 S   /bin/sh
   94 root       1192 R   ps

cat /proc/meminfo[edit]

# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  12775424 10489856  2285568        0  1245184  2834432
Swap:        0        0        0
MemTotal:        12476 kB
MemFree:          2232 kB
MemShared:           0 kB
Buffers:          1216 kB
Cached:           2768 kB
SwapCached:          0 kB
Active:           1696 kB
Inactive:         2300 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        12476 kB
LowFree:          2232 kB
SwapTotal:           0 kB
SwapFree:            0 kB