Restore TP-Link MR3020 OEM Firmware ----------------------------------- To recover a MR3020 device to the TP-Link firmware, use the file listed below in the same way as an OpenWrt sysupgrade file. Filename: tplink-mr3020.bin MD5SUM: 0f5febac37699356b3b0b4e2d3e04903 You may install the firmware using the Firmware Upgrade page in the SECN or OpenWrt LuCI web interface, or copy the file to the /tmp directory on the device and install from the command line as folows: # sysupgrade -v -n The TP-Link firmware has DHCP and WiFi AP operating by default. SSID: TP-LINK_POCKET_3020_53051E P/W: 33954592 Encr: WPA2-AES Login: admin P/W: admin -------------------- The recovery file has been generated from the TP-Link firmware "mr3020nv1_en_3_17_2_up_boot(150921).bin" with the boot section removed as per the OpenWrt wiki page: https://wiki.openwrt.org/toh/tp-link/tl-mr3020 From the wiki page: " With the TL-MR3020 router, the stock firmware is obtained from the OEM: http://www.tplink.com/en/support/download/?model=TL-MR3020 You need to cut off parts of the image file before flashing it. An example of an image file with the word "boot" in it is "mr3020nv1_en_3_17_2_up_boot(150921).bin" Cut the first 0x20200 (that is 131,584 = 257*512) Bytes from original firmware. Save the original file in a working directory, cd to that directory and execute: $ dd if=./mr3020nv1_en_3_17_2_up_boot(150921).bin of=tplink-mr3020.bin skip=257 bs=512 $ md5sum tplink-mr3020.bin ----------------------- Manual Method Using Serial Console and TFTP (Experts) ----------------------------------------------------- Ref: https://wiki.openwrt.org/toh/tp-link/tl-mr3020 To install OpenWrt from the U-Boot console, you need to install a TFTP server on your computer (tftp-hpa is recommended). Then download OpenWrt factory image to /srv/tftp (for example), and execute the TFTP server by typing tftpd -l -s /srv/tftp. Connect the TL-MR3020 using a serial console and power up the TL-MR3020. After a 1-2 seconds it shows Autobooting in 1 seconds, when displaying this enter "tpl" immediately. Using default environment In: serial Out: serial Err: serial Net: ag7240_enet_initialize... No valid address in Flash. Using fixed address No valid address in Flash. Using fixed address : cfg1 0x5 cfg2 0x7114 eth0: 00:03:7f:09:0b:ad ag7240_phy_setup eth0 up : cfg1 0xf cfg2 0x7214 eth1: 00:03:7f:09:0b:ad athrs26_reg_init_lan ATHRS26: resetting s26 ATHRS26: s26 reset done ag7240_phy_setup eth1 up eth0, eth1 Autobooting in 1 seconds [type tpl here] ********************************* You will get a U-Boot-console, it shows as hornet>, and you must enter the following commands: hornet> setenv ipaddr hornet> setenv serverip hornet> tftpboot 0x80000000 openwrt-ar71xx-generic-tl-mr3020-v1-squashfs-factory.bin eth1 link down dup 1 speed 100 Using eth0 device TFTP from server 192.168.1.100; our IP address is 192.168.1.111 Filename 'openwrt-ar71xx-generic-tl-mr3020-v1-squashfs-factory.bin'. Load address: 0x80000000 Loading: ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ###################################################### done Bytes transferred = 3932160 (3c0000 hex) hornet> erase 0x9f020000 +0x3c0000 First 0x2 last 0x3d sector size 0x10000 61 Erased 60 sectors hornet> cp.b 0x80000000 0x9f020000 0x3c0000 Copy to Flash... write addr: 9f020000 done hornet> bootm 9f020000 ---------------- Linux Console Once the original firmware has booted up completely, you can press return to activate the Linux login prompt. The password to get a root Shell access is 5up: TL-MR3020 mips #185 Fri Oct 21 16:26:50 CST 2011 (none) TL-MR3020 login: root password: 5up --------------------------------------------------------------------------