WikiDevi will be going offline 2019-10-31. For historical dumps of the database, see 'WikiDevi' @ the Internet Archive (MW XML, Files, Images).
Final dumps will be made available after the site goes offline.
There is no chance the data will not live on, in some form - even if it isn't 'WikiDevi' anymore. For example, see TechInfoDepot.

Linksys WRT54GS v7.2

From WikiDevi
Jump to: navigation, search

Linksys WRT54GS v7.2

Manuf/OEM/ODM CyberTAN

FCC approval date: 07 November 2007
Country of manuf.: China
Serial Num Prefix: CGNE
Series: WRT54GS

Local image
Linksys WRT54GS.png

Type: wireless router

Industry Canada ID: 3839A-WRTGSV72

Power: 12 VDC, 0.5 A
Connector type: barrel

CPU1: Broadcom BCM5354
FLA1: 2 MiB
2,097,152 B
16,384 Kib
2,048 KiB
16 Mib
0.00195 GiB
(Samsung K8D1716UBC-PI07)
RAM1: 16 MiB
16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
(Samsung K4S281632K-UC75)

Expansion IFs: none specified
JTAG: yes, 12-pin header, unpopulated
Serial: yes, 5-pin header, unpopulated, (115200,8,N,1)

WI1 chip1: Broadcom BCM5354
WI1 802dot11 protocols: bg
WI1 antenna connector: none

ETH chip1: Broadcom BCM5354
Switch: Broadcom BCM5354
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1


Stock bootloader: BSP

Stock FW OS: VxWorks

Third party firmware supported: DD-WRT • (List)

Default SSID: linksys (50 addl. devices)
Default IP address:
the IP is used by 1173 additional devices
of which 147 are Linksys devices
Default login user: blank
Default login password: admin
blank:admin credentials used by 282 additional devices
of which 141 are Linksys devices

802dot11 OUI: 00:1E:E5 (11 E, 21 W, 2007), 00:22:6B (8 E, 11 W, 2007), 00:23:69 (12 E, 19 W, 2008)
Ethernet OUI: 00:1E:E5 (11 E, 21 W, 2007), 00:22:6B (8 E, 11 W, 2007), 00:23:69 (12 E, 19 W, 2008)

 CPU1 brandWI1 chip1 brandWI1 chip2 brand
Linksys WRT54GS v1.0BroadcomBroadcomBroadcom
Linksys WRT54GS v1.1BroadcomBroadcomBroadcom
Linksys WRT54GS v2.0BroadcomBroadcomBroadcom
Linksys WRT54GS v2.1BroadcomBroadcomBroadcom
Linksys WRT54GS v3BroadcomBroadcomBroadcom
Linksys WRT54GS v4BroadcomBroadcomBroadcom
Linksys WRT54GS v5.0BroadcomBroadcomBroadcom
Linksys WRT54GS v5.1BroadcomBroadcomBroadcom
Linksys WRT54GS v6.0BroadcomBroadcomBroadcom
Linksys WRT54GS v7.0BroadcomBroadcom
Linksys WRT54GS v7.2BroadcomBroadcom
For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

Wireless-G Broadband Router with SpeedBooster

 • Support page

Other Flash/RAM

Flash: Eon EN29LV160AB-70TCP (H28308C, 0822HSC)
RAM: Hynix HY57V281620ETP-H (817A C)

Links of Interest[edit]


Flashing DD-WRT[edit]

Flashing DD-WRT

Linksys WRT54GS-RM (CGNC), Same as Linksys WRT54GS v7.0


NOTE TO WINDOWS USERS: The Windows TFTP Client is disabled by default, so enable it before proceeding

(or download a third party TFTP tool).

In Windows, go to "Add or Remove Programs" (or "Programs and Features", depending on the Windows

version) then the Windows Features section, and scroll down to select TFTP Client.


Download vxworkskillerGSv7-v3.bin and a recommended build here. ONLY USE MICRO GENERIC BUILDS e.g. dd-wrt.v24-micro_generic.bin from the broadcom folder.

  1. Configure your local LAN Ethernet address to and connect your local Ethernet to your WRT54GSv7 on one of the four switch ports.
    Do not use a wlan connection! (can someone clarify how to configure your LAN Ethernet address to
  2. Disconnect the power cord from the WRT54GSv7.
  3. Push the reset button while reconnecting the power cord and hold the button for about 20 seconds.
  4. Open your browser and open
  5. Use the firmware upgrade dialogue to flash vxworkskillerGSv7-v3.bin.
  6. After the dialogue about disconnecting the power cord is shown, disconnect the power cord and reconnect it.
  7. Wait for about two minutes.
  8. Again disconnect the power cord and reconnect it.
  9. Enter "tftp -i put dd-wrt.v24-micro_generic.bin" on your local Windows console and press enter.
    1. (If you're using Windows Vista or Windows 7, you need to first enable the tftp client)
    2. (for linux, tftp; mode octet;put dd-wrt.v24-micro_generic.bin or tftp -v -m octet -c put dd-wrt.v24-micro_generic.bin).
  10. The file will now be transferred to your router and be flashed. After this is done, your router
    will boot automatically and you can reach your it at
  11. Check for recommended builds here.


I just loaded DD-WRT v24 RC7 on two of the WRT54GS v7 with an Intel flash chip. I used the latest vxworkskiller.

Below are instructions. Intel chip says JS28F160, C3BD70, and A7397147. Router is dated December 2007. S/N starts with CGNC.
  1. Manually configure your IP to
  2. Reset router to factory defaults.
  3. Update firmware to vxworkskillerGSv7-v3.bin, the update will finish.
  4. Watch the lights on the router. Wait until the Power light is solid, then unplug the router.
  5. Plug the router back in.
  6. Get "tftp -i PUT dd-wrt.v24-micro_generic.bin" ready in a command prompt and hit enter.
  7. After the tftp is finished wait and watch the router lights.
    1. The Power light will eventually come one.
    2. Shortly after that the WLAN light will come on.
  8. Try to load the web configuration page about 5 seconds later; you're done!
  9. Check for recommended builds here.

Another similar method to flash WRT54G v8 and WRT54GS v7.2 (possibly other 7.x)

I've been doing something slightly different on WRT54G v8 and this WRT54GS v7, it hasn't failed me yet, below are the instructions.

I have done this on a countless number of WRT54G v8s and just did it on a WRT54GS v7 and it worked just the same.
There is no resetting in the middle of this process, just do exactly what it says below, no more and no less.
My WRT54GS v7 has a Broadcom BCM5354KFBG CPU and an EON EN29LB160AB-70TCP flash chip and 16MB of Samsung RAM.
The FCC ID is Q87-WRT54GSV72 which maybe means it's a v7.2? Serial number starts with CGNE.

Addition: tiger12506 adds that he has successfully performed this on two WRT54GS v7.2 with CGNE serial numbers.

He felt that it was impossible, that he had bricked one of the routers at first.

Messing around with JTAG cables taught him some things, but... be sure(!) Be absolutely sure that you have tftp

set to binary or octel. If you leave tftp in ascii it will appear to work but the flash won't take.
  1. Use the web interface to reset the router to factory defaults.
  2. Manually configure network interface to (Any address from - should work)
    1. (In linux, this is sudo ifconfig eth0
  3. Use the web interface to update the firmware to vxworkskillerGSv7-v3.bin.
  4. tftp -i PUT dd-wrt.v24_micro_generic.bin (Windows only)
    1. [For linux users: use tftp. You may have to sudo apt-get install tftp or your equivalent.
      1. tftp
      2. tftp> mode binary
      3. tftp> put dd-wrt.v24_micro_generic.bin
      4. tftp> quit
  5. As soon as that is finished do this: ping /t (Windows only)
    1. This will time out repeatedly and then the router will respond between two and six times.
    2. The router will time out again a few times and then start responding to pings.
    3. [At this point, tiger12506 had a little trouble, but after a long reset, and some short resets, more
      and more lights came on until finally the WLAN light came on and the router functioned normally running DD-WRT]
  6. You're done, try to load
  7. Check for recommended builds here.


Upgrade DD-WRT

Updating DD-WRT

If dd-wrt is already on the router follow these instructions. If stock firmware is on the router follow the flashing instructions.

  1. Check for recommended builds here first.
  2. Set your computer to a static IP of (or to whatever subnet the router is on) Disable all firewalls and security. Disable wireless on your computer and only have the router connected to the flashing computer by the ethernet cable between the two.
  3. Hard reset or 30/30/30 (If the router supports it, if not, reset to defults in the GUI) prior to flashing. Wait. Check for password page on re-login and change password.
  4. Flash firmware. You can use the webgui except if you have a belkin router. (For belkin use tftp.exe to flash)
  5. least three minutes. Lights should return to normal. See important2, below. Failing to wait is how most people brick their routers.
  6. Do a power cycle of the router. (Unplug the cord, count to 30 and plug it back in.)
  7. Wait for the lights to return to normal usually about 2 minutes.
  8. Hard reset or 30/30/30 again (If the router supports it, if not, reset to defults in the GUI). Wait. Check for the password page and re-login to change the password. Then you can reconfigure your settings manually.
  9. Once configured set your computer back to autoIP and autoDNS.

Important1: This Hard reset or 30/30/30 works fine for Asus router, but you do have to power cycle after the reset.

Important2: After you flash the firmware, and before you do the hard reset, the router will be building some nvram settings. YOU MUST WAIT FOR THIS TO FINISH PRIOR TO DOING ANYTHING WITH THE ROUTER INCLUDING A HARD RESET. Usually, you can tell when this process is completed by the WAN light coming on, but it does take several minutes. Go have a beer. There are starting to be more and more people who BRICK their routers by not waiting until the nvram is rebuilt, PRIOR to doing a hard reset. YOU NEED TO WAIT!


Reverting to OEM Firmware from DD-WRT

  1. Reset to defaults
  2. goto the Admin screen firmware upgrade, and browse to VxWorksRevert-GSv7-v3.bin, and click upgrade. During this time the Web browser may say upgrade successful and to reboot -----"Do NOT REBOOT"----- Wait for 2 min's and then reboot.
  3. Goto http;// and you should see a mgmt mode screen, this is where you browse to the original Linksys Firmware, and and upgrade.
  4. Wait for 1 min, even if it say's upgrade successful and to reboot, believe me, in my tests, it has not finished yet.
  5. goto - you should have the regular Linksys Firmware.

JTAG-Serial Info[edit]


JTAG Pinouts[edit]

 nTRST   1o o2	GND
   TDI   3o o4	GND
   TDO   5o o6	GND
   TMS   7o o8	GND
   TCK   9o o10	GND
 nSRST  11o o12  N/C

Using Universal JTAG Adapter

 white    1o o2	 black
   red    3o o4	 GND
  blue    5o o6	 GND
 green    7o o8	 GND
 yelow    9o o10  GND
 orange  11o o12  N/C
  • /noreset switch required

DD-WRT JTAG Recovery[edit]

JTAG Recovery

  1. Backup CFE x2 (Compare the files, they must match exactly or there is something wrong with your JTAG setup)
  2. Erase Wholeflash x2
  3. Flash CFE
  4. Unplug Power
  5. Unplug JTAG Cable


  1. Set Rig ip static
  2. Plug network cable from rig to port 1
  3. Get TFTP ready, server ip -, Password - blank, file - dd-wrt.v24_micro_generic.bin
  4. Plug in power
  5. As soon as windows says "connected" hit upgrade. May have to use a network hub to make sure windows is always connected.
  6. Hard Reset 30\30\30

DD-WRT Serial Recovery[edit]

Modified Redhawk0 instructions

  1. Connect Serial cable
  2. Start one of the programs from above
  3. Get TFTP ready with file selected
  4. Use dd-wrt.v24_micro_generic.bin
  5. Connect power to the router
  6. start a rapid fire Cntl-C as you plug the router to power
  7. type "nvram erase" w/o quotes, hit enter
  8. type "flash -noheader : flash1.trx" w/o quotes, this starts the tftp daemon, hit enter
  9. but have tftp.exe ready
  10. Click go or start on TFTP
  11. give it 5 minutes after it finishes
  12. then power cycle....hard reset...then config
  13. when it stops spitting out txt in the serial consol....hit the enter should get a login that point, power cycle it, Hard reset or 30/30/30...then config
  14. you'll see it boot up


Serial Pinouts[edit]

 VCC  1 o
  TX  2 o
  RX  3 o
 N/C  4 o
 GND  5 o
Hyper terminal Setup in Windows XP
In Windows XP, Click Start Button - All Programs - Accessories - 
   Communication - HyperTerminal
Enter a name for the connection, Click ok
Choose com port you adapter is plugged into, Click ok
 Bits per second = 115200
 Data Bits = 8
 Parity = none
 Stop bits = 1
 Flow control = none
Click ok
Click File - Save As, and select a place to save it to so you 
             don't have to enter the settings again.
Putty Setup in Windows XP
After installing putty, run it
 Serial line = The COM port your using for serial (ie. COM3)
 Speed = 115200
Click on Serial under Connection
 Serial line to connect to = same as above (Serial line)
 Speed (baud) = 115200
 Data bits = 8
 Stop bits = 1
 Parity = none
 Flow control = none
Click Session
 Enter a name for your connection under saved sessions
Click Save
Click Open


DarkShadow's Unit FCCID Q87-WRT54GSV72 11/07/2007 FCCID Q87-WRT54GSV72 11/29/2007]

vlan Info[edit]

DD-WRT vlan Info[edit]

Confirmed the WRT54GS v7.2 supports port-based vlans via the GUI.

Confirmed the WRT54GS v7.2 supports port-based vlans via nvram with build 14853 micro-plus-SSH.

WRT54GS v7.2's ports are mapped like this:

 1 2 3 4 | case labels
 3 2 1 0 | nvram port numbers


root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=4 5
vlan0ports=3 2 1 0 5*
size: 17324 bytes (15444 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
size: 17324 bytes (15444 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
size: 17324 bytes (15444 left)


root@DD-WRT:~# nvram set vlan1ports="3 4 5"
root@DD-WRT:~# nvram set vlan0ports="2 1 0 5*"
root@DD-WRT:~# nvram commint
root@DD-WRT:~# reboot


root@DD-WRT:~# nvram show | grep vlan.ports
vlan1ports=3 4 5
vlan0ports=2 1 0 5*
size: 17325 bytes (15443 left)
root@DD-WRT:~# nvram show | grep port.vlans
port5vlans=0 1 16
size: 17325 bytes (15443 left)
root@DD-WRT:~# nvram show | grep vlan.hwname
size: 17325 bytes (15443 left)
root@DD-WRT:~# lsmod
Module                  Size  Used by
ip_nat_pptp             2192   0 (unused)
ip_conntrack_pptp       2524   1
ip_nat_proto_gre        1552   0 (unused)
ip_conntrack_proto_gre    2312   0 [ip_nat_pptp ip_conntrack_pptp]
switch-robo             5036   0 (unused)
switch-core             5984   0 [switch-robo]
root@DD-WRT:~# ls /proc/switch
root@DD-WRT:~# cat /proc/switch/eth0/vlan/0/ports
0       1       2       5t*
root@DD-WRT:~# cat /proc/switch/eth0/vlan/1/ports
3       4       5t
root@DD-WRT:~# cat /proc/switch/eth0/vlan/2/ports


DD-WRT Notes

[DD-WRT v24 RC3] The WRT54GS v7.0 is now fully supported (if its not an intel chip - see important note below),

but requires again a special flashing way, which is easier this time compared to the v5 and v6 vxworks killer.

All Chips are supported, just follow step by step procedure at:

WARNING: There are at least two types of flash chips that are used on the v7 router.

Using this method with an INTEL-type flash chip will brick your router.

There is not currently a solution for using vxworkskiller with the intel-chip v7 routers.

See also

I just had found this link -->

This procedure worked easy and great, the 1st bin file I installed with the admin. options in the Linksys control panel

(the upload went about half way then tryed to reboot (then bricked my WRT54GS v7), following the procedure
from the above mentioned site using this command "tftp -i put dd-wrt.v24_micro_generic.bin" from
the location of the bin file, worked fine had to HIT enter 2 times to excecute the command to install the 2nd bin
file, now my WRT54GS v7 has so many features I need to find a good post for some tweak settings.