Mike Palmer - Latest Comments

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Michael — Sat, 21 Mar 2020 11:52:49 -0000

Thanks for this!

A couple of points I want to add on the "server" side, i.e. the machine where atftpd is installed. For me, this was my Skylake Dell Latitude E5470.

* Make sure your local network adapter is not disabled in the BIOS (obviously)

* Ensure that your local NIC shows as "UP" in the output of "ip link". If you see NO_CARRIER, it will not work.

* If you do see NO_CARRIER, try disabling powersaving on the NIC. I had enabled powertop --auto-tune, which helpfully disabled my NIC. For me, this means that the "Runtime PM for PCI Device Intel Corporation Ethernet Connection (2) I219-LM" tunable should be "BAD" to ensure that powersaving is disabled.

* If you use "ip addr" to set the IP address of the interface, make sure to specify the netmask. The following commands worked for me:

$ sudo ip addr add 192.168.1.66/24 dev enp0s31f6
$ sudo ip addr add 192.168.0.66/24 dev enp0s31f6

If you leave out the /24 part, you will get a 255.255.255.255 netmask and you will only be able to talk to yourself.

And some hints on atftpd:

* The directory in the original post has a typo. Correct version: /srv/tftp/ArcherC7v2_tp_recovery.bin

* On Ubuntu 18.04, I followed some instructions to disable inetd in /etc/default/atftpd - I am not sure if this is necessary.

* You can test your atftpd setup by running:

$ sudo apt install atftp
$ echo "get ArcherC7v2_tp_recovery.bin" | atftp
$ ls -al ArcherC7v2_tp_recovery.bin # file is in local directory

* You can watch transfer logs (on Ubuntu 18.04, possibly requires disabling INETD as above). Hint: you should see your test transfer above.

$ sudo journalctl --follow -xu atftpd

-- The start-up result is RESULT.
Mär 21 15:10:35 trabant atftpd[5424]: Serving /srv/tftp/ArcherC7v2_tp_recovery.bin to 127.0.0.1:42992

Mär 21 15:37:41 trabant atftpd[5424]: Serving ArcherC7v2_tp_recovery.bin to 192.168.0.86:1222

Many of the additional ideas for atftp I gathered here: https://www.hiroom2.com/201...

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Brock Cochran — Wed, 06 Jun 2018 14:51:05 -0000

I have version 1. I am unable to find any case online where someone could successfully flash alternative firmware for it. Mine was bricked after attempting the OpenWRT flash. I was only able to restore to stock. For v1 your computer/TFTP server IP needs to be 192.168.0.66, netmask 255.255.255.0. I had the gateway set to 192.168.0.1 although I am not sure if this is necessary. After installing atftp, it automatically created the directory /srv/tftp. (I am using Debian 9.) I did chmod 777 on both of these directories. I copied the stock image to the directory and named it ArcherC7v1_tp_recovery.bin I changed permissions on it to 666 just in case if it was necessary. I turned on my connected router and held down the reset button until I saw the WPS light on for a bit (maybe 5-10 seconds holding it down since turning on the router). (It is the led with the arrows going in a circle.) Then I released it. (I am not sure how important certain timing is.) Now wait for a bit until the lights seem to become normal again. The power light will be solid. The system light (asterisk led), wifi lights, and applicable ethernet lights will be flashing randomly. Before doing any of this be sure to disable the firewall on your computer/TFTP server. I failed a few attempts because I forgot this. Since v1 has not received any updates since 2014 it may be a good idea to buy a new router anyways with supported firmware. I just bought the TP-Link WR1043N. Only the snapshot version of OpenWRT is available currently for version 5. I am hoping it will work well.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Alex Protasenko — Tue, 19 Dec 2017 09:42:07 -0000

Helped me too. Thanks.
In my case US archer C7 V2, to get into recovery in off state I press reset and then power button, wait for 6 seconds and release reset. Mine looks for tftp on 192.168.0.66

If in doubt, fire up `sudo tcpdump -i eth0` assuming you connect lan port of the router to your eth0 interface, and look for ARP requests for the above IP or some such.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Jon — Wed, 06 Dec 2017 08:56:16 -0000

Hey I know this is a year old but I am really needing some help here. I also have an Archer C7 v1.1 and messed up trying to restore firmware after flashing openWRT. I am trying to do TFTP recovery and it appears it is sending something to the router and then nothing happens. For the v1.1 which file is it looking for? ArcherC7v1_tp_recovery.bin or ArcherC7v2_tp_recovery.bin

I have tried both with no luck.. unless I have the wrong firmware? I downloaded it from TP link website and chose the V1. Please help!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

ejoo — Thu, 13 Jul 2017 10:41:22 -0000

Thanks very much, it really worked! :) My C7 had a
different IP (192.68.0.1 instead of 192.168.1.1)

from the beginning, so I tried

192.168.0.66 instead of 192.168.1.66,

and it worked. Good luck everyone!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Mikko Salonen — Mon, 29 May 2017 07:09:20 -0000

Thank you for the instructions. My experience was not as straightforward. Here is my routine to debrick Archer C7 v2 (EU) using ethernet dongle and Ubuntu 16.04 liveusb (some/many parts here can be superflous but it works so I really don't care :D ):

- Fireup Ubuntu
- add universe repository from the software manager
- install packages, setup xinetd:
sudo apt-get install xinetd tftpd tftp
sudo gedit /etc/xinetd.d/tftp
- open gedit and copy the following

service tftp
{
protocol = udp
port = 69
socket_type = dgram
wait = yes
user = nobody
server = /usr/sbin/in.tftpd
server_args = /tftpboot
disable = no
}
- download Archer firmware version Archer C7_V2_150427 from http://static.tp-link.com/r... (NOTE!! The newer firmware prevents you from installing openwrt). Unzip the package
-create /tftpboot, copy firmware with the correct name (at least for me), and change permissions. Finally restart xinetd
sudo mkdir /tftpboot
sudo cp /home/ubuntu/Downloads/'unzippedArcherfolder'/'ArcherFirmware' /tftpboot/ArcherC7v2_tp_recovery.bin
sudo chmod -R 777 /tftpboot
sudo chown -R nobody /tftpboot
sudo service xinetd restart
cd /tftpboot/
- now continue in terminal

tftp 192.168.0.66
binary
rexmt 1
timeout 60
trace

- now you can connect the ethernet cable to the LAN1 port and change the ethernet settings in the connection settings to (wired internet settings -> IP4v manual IP - add): IP 192.168.0.66, subnet 255.255.255.0, gateway 192.168.0.1

- go back to the terminal (with tftp open) and copy (shift+control+c) the following command:
put ArcherC7v2_tp_recovery.bin

- turn the router on while holding down the wps-button, with your other hand in the terminal paste your command until it says it sent away something (e.g. "sent ...")

- wait for a good 3 minutes, and you should be able to open 192.168.0.1 for router configuration. With this older firmware you can now simply download the factory bin-file from openwrt page (change the name to something short!). Openwrt should now install without problems.

-in terminal open telnet connection and change root password
telnet
open 192.168.1.1
passwd

- open ssh connection and install stuff you need e.g athk10, cant remember all the commands but something like this
ssh root@192.168.1.1
-insert password
opkg update
opkg install lucie-ssl athk10 firmware

Check the correct athk10 and firmware commands form the beginners guide on openwrt.org. Note that wireless connection is turned off by default, easy to open using your browser (192.168.1.1). Happy surfing!!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Jordan Haugh — Fri, 31 Mar 2017 18:53:19 -0000

Mike, you have saved me quite a bit of time and I cannot thank you enough.

Like the other commenters though, I had to change my IP to 192.168.0.66, not 192.168.1.66
After awhile of banging my head on a wall and then reading the comments and trying that, I was back up and running in under 5 minutes.

Thanks again mate!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Akki Amin — Wed, 22 Feb 2017 01:21:55 -0000

Hello tiim I too have c7 v1.1 can't connect router to tftp please advice how u fixed it

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

accipter — Mon, 06 Feb 2017 18:11:38 -0000

I have a similar issue, where the router fetches the image, but fails properly boot. I have ordered as USB-to-TTL to try and debug the situation.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

vikas rao — Thu, 10 Nov 2016 00:14:11 -0000

I flashed https://goo.gl/skRXGC with https://goo.gl/TNqN9G using the router's OEM firmware flashing utility. And now I can't connect to the router through the Ethernet port. It doesn't enter recovery mode either. When I power on the machine while pressing down on the reset button, the WPS light turns on but the time the PC connects to the Ethernet (Ethernet link lighting up) the WPS light turns off and TFTP does nothing. Is there way I can unbrick it?

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Tim X — Tue, 28 Jun 2016 17:35:13 -0000

For me, it was 192.168.0.66 and 192.168.0.86. Still, my computer and the router would not communicate with each other by tftp.

Well, I finally got what I was doing wrong. And once I corrected my mistake, things went very well.

Good engineering from TP-Link to allow idiots like me to unbrick a well made router.

P.S. I got a Version 1.1, which is a bit more of a pain than Versions 2 and 3.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Ariel Barreiro — Mon, 30 May 2016 17:46:00 -0000

Thanks, I've just flashed dd-wrt on a brand new ac7 us version today, albeit not currently in the US, flashing it through the stock web UI, so apparently the lock is just some ID in the header of the firmware. dd-wrt is making US compatible firmware images, thankfully!

If interested:

ftp://ftp.dd-wrt.com/betas/... (latest as time of writing)

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Mike — Mon, 30 May 2016 17:40:39 -0000

Yes, as of this year I think that might be what you have to do now that its illegal to have direct access to your home router's wireless radios in the United States. (draw your own conclusions there) Companies like TP-Link now need to block things like OpenWRT, DD-WRT, etc via the supported methods since they provide access to all that. But that doesn't mean manufacturers are going to build different hardware. It just make the US images are going to get locked down so we can't flash over them with open source software. You will need to rename whatever image you try since that is what the lftp recovery calls out for inside the router.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Ariel Barreiro — Wed, 18 May 2016 10:31:24 -0000

Mike,

Do you think this would work for replacing a US firmware with a non-US one? To tftp a stock do I only need to rename the zip file into the recovery bin?

Thanks!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

CJ-TO — Wed, 20 Apr 2016 10:56:22 -0000

Saved my day Jeff, Mike Palmer, awesome article, but I can concur that my C7 V2 needs the IP 192.168.0.66 for the TFTP server. Please update your article!!
Many Thanks!

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Kevin Garcia — Sun, 10 Apr 2016 13:40:40 -0000

Mike, you are a life saver.

After an unsuccessful install of OpenWrt on my Archer C7 AC1750 v2, I was stuck with no installed firmware to access my router. Came across your post and after reading your step by step instructions to Meor Naim Mkz (I'm a novice so these helped a lot!) was able to get my router back in working order, with firmware.

The best part is your instructions install the OpenWrt firmware, which is what I was trying to do from the get go!

Thank you!

-Kevin

Re: Debian/Ubuntu wmi-client package with OpenVAS libwmiclient1 patches

MrBlablaologe — Wed, 09 Dec 2015 03:04:44 -0000

Hi Mike,

thank you for that great package. I wrote a little php script to manage some Windows Terminal Servers. To access WMI of the Terminal Servers, I need a Windows Web Server. Not to depend on M$ in this case, I wanted to try your package. Unfortunately there is no documentation.
If I want to use standard queries, everything works fine. But what about other namespaces? When I try to connect to other namespaces, eg for terminalservices or registry, I get errors. I think it could be a security issue like impersonationlevel or authenicationlevel. Is there any doc describing "--use-security-mechanisms" and the other parameters?
Thank you for your help.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Bablat — Thu, 26 Nov 2015 07:19:02 -0000

Thanks for the procedure, I have bricked my router by uploading the wrong (generic broadcom...) dd-wrt firmware, it got stuck in a reboot loop (all lights flashing every 2-3 seconds or so).

I managed to use your procedure above to get the router (Archer C7 v2) to download the firmware via TFTP. I attempted multiple versions, the router downloads all of them but after the file transfer is finished it never reboots on its own.

When I reboot it manually, it goes back to the same reboot loop. I believe that the firmware is not completely installed.

Any idea how I could get around this? How long does it usually take for the router to reboot after it finishes TFTPing the firmware?

Which firmware is the safest to use to get to a working router? original stripped?

Thanks,

-b

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Jeff Arnts — Tue, 24 Nov 2015 13:35:53 -0000

After banging my head against the wall for a couple hours, I set the TFTP
server to 192.168.0.66 and it found the firmware. I have an AC1750 V2,
so it should have been 1.66. Just posting in case other people have an
issue with it.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

shirtsofholland — Wed, 18 Nov 2015 13:26:46 -0000

Great post. for V1 router the IP's are in the 0.X range. IP of computer should be 192.168.0.66 (port 69) .... and a question: our boot bin only upload to 55-66% never ever more .... so the firmware is never fully uploaded .... TP LINK Archer C7 v1 ... appreciate any ideas

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

LHTC — Tue, 22 Sep 2015 20:36:34 -0000

When I try to connect with Tftp Server I cannot fix the working path permissions and I receive the prompt "Check ownership for the current TFTP server's working path" Any ideas?

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Mike — Sun, 23 Aug 2015 02:18:47 -0000

I don't have any experience with the C5 1.20 but it seems to have the same Atheros chipset I have. My 5ghz radio has been solid since chaos calmer rc2 and mostly good with trunk releases before that. I've bricked mine a few times and was always able to get it back using the recovery mode. Try using the image from tp-link and see if you can get it to boot back up normal. FWIW, I tend to do a packet dump with these things when I'm trying to do a tftp recovery. Thats the only way I know for sure that it took the entire image. I've had a couple of times where it seemed to hang up part way through recovery and I had to start over. It always eventually worked.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Bryce "PJ" — Thu, 06 Aug 2015 19:50:04 -0000

Has anyone had any luck with this on a C5 (v1.2)? Instead of 192.168.1.86, the router comes up on 192.168.0.86, sends an arp request for 192.168.0.66, then gets ArcherC5v1_tp_recovery.bin. After it grabs the file, it reboots, and the power, system, and 5ghz lights light up solid, there's absolute silence on the WAN and switch ports, as far as I can see with Wireshark. I'm trying to recovery from a bad flash with mtd from openwrt and I think I'm SOL other than JTAG.

I've had nothing but issues with this guy on openwrt and ddwrt both. The 5ghz radio absolutely refuses to play nice with either. The router still has the plastic on it and it's been out of the box for all of 48 hours, so I'm rather frustrated with it.

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Max — Fri, 27 Mar 2015 23:33:37 -0000

when I install atftpd it creates a folder /srv/tftp, not /srv/tfptd like in the article. Either way my archer c7v2 connects to 192.168.1.66, blinks a little on the ethernet port but doesn't reboot. Do I need to do this to setup atftpd? http://wiki.ubuntuusers.de/...

Re: TP-Link Archer C7 AC1750 V2 TFTP Recovery

Meor Naim Mkz — Fri, 20 Mar 2015 00:23:17 -0000

Much to my surprise, i managed to do it! Hahaha. It is now back to normal. Although i use a TPLINK one. I downloaded the V2 of the website and rename it to the recovery name. Now it is back to Factory!

THANKS MIKE! You are amazing. If i can give you a star, you'll get 10 from me. Haha