Recover bricked TL-MR3020 via serial console


Recently, I’ve flashed my MR3020 in attempt to make my own Wifi Pineapple. But.. You know. Shit happen. :p

In other word, i screwed up my MR3020 and bricked it. All the LED is keep on blinking, some is on and not blinking, and the network is getting connected and disconnected randomly. Guess that’s a sign you’ve mess up with the device. XD

But I’m lucky because you still can recover the device via serial console and tftpd32 method. (yeay!)

Bear in mind that this method will VOID your warranty. So, don’t do this unless you willing to sacrifice for the sake of knowledge. 🙂

Things that you need:

  • Tftpd32: A free tftp and dhcp server for windows, freeware tftp server. Very efficient for booting over LAN.
  • PuTTY: SSH and telnet client, free and open-source terminal emulator, serial console and network file transfer application.
  • USB to UART converter (3.3V). I’m using this converter that I bought at Cytron Technologies.
  • A 10K resistor
  • Female to Female OR Female to Male Jumper Wires

UC00B USB-UART Converter

UC00B USB-UART Converter


So, as you can see, my USB-UART converter come with 6 ways header pin for interfacing. The voltage selector must set to 3.3V since the TL-MR3020 router have its I/O pins working at 3.3V.

Connection Diagram
* Do not connect the router VCC to USB-UART VCC, it may break your adapter or your router

For the picture of the connection diagram, refer to first picture above.

No Serial Port
So, in my case, my MR3020 is version 1.9. As you can see picture above, mine doesn’t have any serial port to connect to using female jump wire. So I use female (attach to USB-UART) to male (attach to MR3020) as picture below:
Male Jump Wire to MR3020

Male Jump Wire to MR3020

Male Jump Wire to MR3020
Take note that I only put the resistor and jumper wire without soldering. You can do a soldering to your jump wire and resistor to the port with in this tutorial, I skip with that. :p

After you have all things in place, you can start installing the UC00B (USB-UART) driver to your computer. After finished, restart your computer, and check your Device Manager. You should see something like this:

UC00B USB-UART on Device Manager

UC00B USB-UART on Device Manager


which indicated that the driver and the converter is detected by computer and the driver is properly installed.

Setting up network IP address
Assign a static IP address to the computer, using IP address 192.168.1.2 since the router IP address is 192.168.1.1. No need for Internet connection in this process.

REMEMBER! Ensure that you have disable you windows firewall. Or else, the next step will might not work.

Install OpenWRT from the U-Boot console
Download the latest OpenWRT firmware and save it to C:\Program Files\Tftpd32 (Tftpd32 default installation folder) as shown in figure below:

TFTPD

TFTPD


You also can click the “Show Dir” button and check if the file is there or not.

Run Putty, select Serial option, on Serial Line, I’m using COM3 since my USB-UART driver detected as COM3, for Speed option, I use 115200. Then click Open. Example like picture below:

Putty example for Serial COM3

Putty example for Serial COM3

After that, power up your MR3020. On Putty console, you should see something like this:

The moment after you see “Autobooting in 1 seconds“, type in word “tpl” immediately.

If everything is correct, you should see “hornet>” in your console. if you missed it, close and open back your Putty, follow the instruction above until you see the word “hornet>

Now you are in U-Boot-console, as it shows “hornet>” on your console. Now enter the following commands:
setenv ipaddr is the MR3020 IP address,
setenv serverip is the computer IP address,

Then enter this command to download openwrt .bin file:

you should see something like this:

Then enter this command to erase old firmware:

The output must be like this:

Then enter this command to start flashing:

And the output is:

After that, lets try to boot to the new firmware:

And the result is:

And.. Thats it. You’ve recover you almost-dead MR3020 to life! 🙂
The device new IP is at 192.168.1.1. Happy hacking!

  • Credit to this blog for this tutorial.

15 thoughts on “Recover bricked TL-MR3020 via serial console

    1. zam Post author

      Ah. I totally forgot about that. I’ve already disable the firewall at the first place. Thanks for pointing that out! 🙂

      Reply
  1. Zimm

    My firewall is disabled. I’ve confirmed the ftp server is working correctly, but I’m getting T T T before it says it has exceeded tries. Please help

    Reply
  2. arayarock

    i make all the steps, but when i power the mr3020 dont show anything :C the chip is broken? or what?

    Reply
  3. Valentin

    I did everything like in tutorial and it worked ok, but now the router no longer boots Linux, and I can not connect to the serial.
    What can be the reason?

    Reply
  4. Nahar

    Salam… Saya gagal utk type TPL sbb dia cepat sangat booting image… Ada tip?
    Tpl tu kena tekan enter sekali ke?
    Thanks

    Reply
  5. life2ezar

    Salam
    Ada cara tak utk key in TPL tu… Cepat sangat x sempat.
    Dia terus auto reboot….
    Mcm keyboard x berfungsi atau ada masalah lain pun x tau.

    Reply
  6. Pingback: asus rt-n16 PL2303 TA USB TTL线救砖备忘录 | 一半君的总结纸

  7. muhackl

    When I try to type in tpl, nothing happens. It’s like it does not accepty any input. I tried on Windows like described above and with linux and gtkterm – no input possible. What can be wrong?

    Reply
  8. marwan

    hi. i bricked my mr3020. very happy to find your post. i need to know can i not use 10k resistor? what is it function? i dont have now.

    Reply
      1. Benoit

        Could you please explain why the 10k resistor is mandatory ? is there any way to do without it ?

        Reply

Any Comments?