These instructions function as a TP-Link firmware recovery utility, for when your TP-Link router is bricked.
When to use this:
- Your router failed to boot after a firmware upgrade
- You want to change between regional firmware releases (America/Europe/Asia/Australasia, etc)
- You want to revert back to, or change away from, official TP-Link firmware
- Your TP-Link firmware upgrade is stuck
- You need to perform wrong firmware recovery
Requirements:
- Firmware from the TP-Link website (must use the correct hardware version)
- A TFTP server which supports logging (this example uses TFTPD32/TFTPD64: https://tftpd32.jounin.net)
- Ethernet cable (preferably crossover cable)
- Computer or laptop
- The TP-Link router must be on the same LAN segment as your computer
Method:
Step 1) Download the firmware for your router from the TP-Link website, and then unzip the firmware file (.BIN file) into a suitable folder.
In this example, I have opened the ZIP file from the TP-Link website, extractred the .BIN file and placed it in the folder “C:\temp\”.
I am using a TP-Link AC1750 (Archer C7) router, hardware version is v2, and the firmware filename is “ArcherC7v2_en_eu_3_15_3_up_boot(180305).bin”.
Step 2) You must manually set the IP address of your computer/laptop according to the product you have:
Most TP-Link products:
Set the IPv4 address of the wired Ethernet interface on your computer to 192.168.0.66, and subnet mask to 255.255.255.0
TP-Link Pharos products:
Set the IPv4 address of the wired Ethernet interface on your computer to 192.168.0.100, and subnet mask to 255.255.255.0
Other TP-Link products:
Set the IPv4 address of the wired Ethernet interface on your computer to 192.168.0.225, and subnet mask to 255.255.255.0
Step 3) Start the TFTP server, use the “Browse” button, and browse to the same folder from step #1, where the unzipped router firmware is (“C:\temp\”).
NOTE: You can either have the TFTP server listening on all interfaces by choosing “127.0.0.1”, or only on the specific Ethernet interface which we are using “192.168.0.66 or 192.168.0.100”.
Step 4) Make sure that your computer has an Ethernet cable going to the TP-Link router.
NOTE: The router can actually be anywhere on the same LAN segment (plugged in to a switch or router), but since TFTP uses UDP as a transport protocol, the firmware file transfer will be more reliable if have the computer wired directly to the TP-Link router with an Ethernet cable.
Step 5) Ensure the TP-Link router is powered off. Hold down the reset button on the router and keep it depressed. Power the router on, wait for 5 seconds, and then release the reset button.
Step 6) Now, the router will now attempt to do a TFTP boot from your server at 192.168.0.66. You must use the TFTP server “log viewer” tab to see the filename which was requested by the router. When you have the filename, you will need to rename the firmware .BIN file to match what the router is requesting.
Each filename is specific to your model of TP-Link router, so ensure that you actually follow this process to determine the correct filename to use. Don’t use the filename in my example, otherwise it won’t work and you’ll be wasting time.
In this example, we can see that the router is requesting a file named “ArcherC7v2_tp_recovery.bin”.
Connection received from 192.168.0.86 on port 1957 [28/12 21:50:04.060]
Read request for file <ArcherC7v2_tp_recovery.bin>. Mode octet [28/12 21:50:04.060]
File <ArcherC7v2_tp_recovery.bin> : error 2 in system call CreateFile The system cannot find the file specified. [28/12 21:50:04.062]
Step 7) Now that we know which filename the router is looking for, we must rename our downloaded firmware file to whatever our router is requesting. This is how we effectively force the router to replace its current firmware.
In this example, the original filename of the firmware file which we downloaded from the official TP-Link website, is “ArcherC7v2_en_eu_3_15_3_up_boot(180305).bin”, but we will rename it to “ArcherC7v2_tp_recovery.bin”, as per the information we discovered in step #6.
Step 8) Repeat step #5 of the process so that the router attempts another TFTP boot.
Step 9) Confirm in your TFTP server that the firmware was successfully downloaded by the router.
Step 10) A few minutes after the firmware transfer, your router should install the new firmware. You can now set your computer/laptop network card to get an IP address via DHCP (which it will get from the router, if this process was successful) and you’ll be able to access the router’s web interface by using the factory-default settings:
— IP address: 192.168.0.1
— Username: admin
— Password: admin
does the same process work on tp-link cpe210
Hi Japheth,
Yes, but the CPE product range connects to the IP address 192.168.0.100/255.255.255.0 and the filename it requests is “recovery.bin”.
Kind Regards,
Jason 🙂
Tp-link archer c6 I can’t see anything with tftpd64, can anyone help me? Thank you!
Hello. What have you done, compared to what the instructions say?
Finally got it to work! Differently from the tutorials here, the TFTP only worked when i plugged the Ethernet cable on the WAN port, instead of LAN port. Then it flashed the firmware normally and rebooted. I changed the file name to tp_recovery.bin and used the IP 192.168.0.66, although my router gateway was 192.168.1.1
Thanks for this forum and all people who helped solving these issues. I spent last night trying to do this, and luckily in my last attempt (i was about to throw it on the garbage) it finally worked! Dont give up hahah
The WAN port? I am surprised but also happy for you. Good job!
Also want to say that I needed to use the WAN port as well on an Archer A6 v2.
I’m surprised by this. Will have to do some research to find out why that is…
Hi. I flashed by mistake an CA firmware to an EAP US 225… can I rollback to US firm? thanks
Hello.
Thank you for the clear guide.
I have done this on the Archer C7, but now I have another C5 AC1200 v2. I am able to start the recovery mode, holding down the WPS button…
When in recovery mode I am able to ping 192.168.0.86, I have my USB ethernet adapter set up with .66 and GW: .1
I start tfptd32 as admin, select either its root folder, where I have the ArcherC5v1_tp_recovery.bin, or another folder on C: with the same file.
I select the USB ethernet adapter with the set IP.
No logs at all, no query, not a single line of logs. Sometime the interface selection hops back to 127.0.0.1, not sure why.
Is there a tftpd alternative I could use? Or some other tips ?
This is driving me crazy.
Thank you.
Hi Ati,
Yes, this process can be used on the Archer C5 AC1200. This model also uses the IP address of 192.168.0.66, and the firmware filename for this model is, I think, “tp_recovery.bin”. Just follow the normal instructions to make sure that filename applies to your model.
Thanks 🙂
Hello.
Thank you for your reply, however as i described the problem is that the router does not request anything from tftp. I can ping it’s .86 address from cmd during recovery but tftpd does not show any communication. I don’t even get to the router asking for a file.
Hi,
How do you know the router’s IP address is .86? when it’s in recovery mode?
I have TP-Link TD-W8961ND.
https://community.tp-link.com/en/home/forum/topic/222458
Should I set my IP as…
IP Address-192.168.1.2
Subnet Mask-255.255.255.0
Default Gateway-192.168.1.1
Hi Mahadevan,
No, you should set your IP address to 192.168.0.66. You do not need to configure a default gateway for this process because all the network traffic happens within the local subnet. Let me know how it goes!
Thank you for the reply 🙂 .
Hola , converti un tp link 7510 a openwrt y ahora quiero volver a firmware de fabrica , si lo hago por fttp m e tomara de nuevo el archivo , renombrando a recovery.bin? desde ya muchas gracias.
Hola. Yes, you can revert the firmware from OpenWRT to TP-link using the instructions on this page. 🙂 Every router uses a different filename, so you should follow the instructions exactly.
Hola. Sí, puede revertir el firmware de OpenWRT a TP-link siguiendo las instrucciones de esta página. 🙂 Cada enrutador usa un nombre de archivo diferente, por lo que debe seguir las instrucciones exactamente.
Buenisimo , hoy lo hice con un tplink 7210 y salio bien , me quedaron de fabrica , firmware tplink , pero no sabia si con el 7510 se podia , entonces : voy hacer los mismos pasos que el otro y espero revertir a fabrica tplink , Muchas Gracias.
Hola , eh intentado revertir el 7510 y no tuve exito , sigue con el firmware de openwrt . si tiene alguna sugerencia , desde ya muchas gracias .
Hi German, try the IP address of 192.168.1.2 on your computer/laptop, and then do the firmware recovery instructions.
Hola alemán, prueba la dirección IP 192.168.1.2 en tu computadora / laptop y luego sigue las instrucciones de recuperación del firmware.
Hello, I have tp-link tl-mr3420 and I can’t connect via tftp sever. Do you know wichi IP I need to set to my device? Thanks in advance
For that model, it looks as though it varies by hardware revision, so try these IP addresses on your computer/laptop:
– 192.168.0.225
– 192.168.1.27
– 192.168.1.100
– 192.168.0.66
hi there, is this procedure also work for tp-link switch, i have bricked tl-sg2008, or can you help with different method
thank you
Hi Rud. Is it definitely bricked, or the an upgrade just wipe the config? The default IP address of that switch is 192.168.0.1 so, if you haven’t already tried it, you should set your computer/laptop to an IP in that subnet and see whether you can access the web interface. I’ll try and find out whether it has a firmware recovery option…
Hola , sigo sin poder tener comunicacion tftp entre la pc y el tplink 7510v1 , ya probe todas las ip que me pasaste y nada sigue en openwrt , alguna otra prueba que yo pueda hacer , desde ya muchas gracias por su ayuda.
Hola. You should try the 30-30-30 method: https://www.router-reset.com/30-30-30-reset-factory-defaults-wireless-router
I have a TP-Link WR840N should this work?
Hi Efren, yes it should.
Hi, I was doing some testing, and I found out that you can actually reset the firmware to the original one using Putty.exe to access the router via Telnet and then type reset 2 or 3 times, then pushing the reset button to fully reset the router OS. I did it connected to one of the Lan ports direct to my PC, no WAN needed.
Hope it helps.
What state was the router in when you did this — was it already bricked, or was it fully functional? Since the telnet service is a function of the firmware, I would suggest that this doesn’t work when the firmware is corrupt. 🙂
Thanks man! Worked on an Archer A6 v2 US.
Thank you for sharing your knowledge.
Bom dia, como você conseguiu? Eu alterei meu Archer C6 v2 para o OpenWRT e depois quando fui voltar para o firmware original ele morreu de vez. Nem chega a comunicar com o TFTP64.
Agradeço desde já
Did you set your computer IP address to 192.168.0.66? Did you do step #5?
“Ensure the TP-Link router is powered off. Hold down the reset button on the router and keep it depressed. Power the router on, wait for 5 seconds, and then release the reset button.”
Hi, I was trying with a mr3420 V1 but id didn’t work. I’ve tested with all this IP addresses:
– 192.168.0.225
– 192.168.1.27
– 192.168.1.100
– 192.168.0.66
without luck.
I could see on the eth interface that with 192.168.0.225 attempt to connect but inmediately return to “unplugged” status.
Any clue about how to follow?
Thank you!!!
Hi Marcelo,
The TL-MR3420 looks for a TFTP server with the IP address 192.168.0.66. Have you tried using all of the Ethernet ports?
Hi I have a bricked MR200 v1, tried installing the latest firmware from Tp-Link site using TFTP64 and it uploaded OK but now the router doesnt turn on. I tried your method and a single white light flashes but TFTP has no movement.. What can I do?
What IP address did you set your computer to?
Hi, thanks for your answer. I’ve tried with 192.168.0.66 with all Eth ports on the router but it didn’t work. Only connecting on WAN port the connection changes to “enabled”, then to “unidentified network” and then to “network cable unplugged”.
Not sure if I’m missing anything…
Thanks.
Regards.
Marcelo
Hi. Are you doing the reset process correctly? Power it off, push in the reset button and keep it in, power the router on, release the reset button?
Yes, I’m doing in that way…
thanks.
Good evening, I have a TP link MR200 v1 router. I set the ip address of my computer to 192.168.1.100 and when I follow your procedure nothing happens at the level of the TFTP server, the reset indicator lights up continuously.
Hi Vianny. The MR200 doesn’t use 192.168.1.100 as its TFTP. It uses 192.168.0.66.
Hallo there.
I followed the entire procedure and all works fine.
But I have not fixed the problem.
At the reboot the router sends the same messages sent before the process by Tftpd 32: “error 2 in system …..”
There something other that I can do?
Thank you.
Lorenzo
moreover I saw that the file transfert of the firmware file .bin ends at 89% of the total…..
Okay, that is bad:
– Are you using the correct firmware for your hardware revision; v1, v2, v3, v4, etc? (Each hardware revision has a variable amount of flash memory, so it could fill up the flash disk if you use the wrong firmware)
– Disconnect all other network devices and remove the default gateway setting from your laptop to ensure that it can’t send Internet traffic while you do the firmware upgrade. The reason for this is that TFTP uses UDP as a transport-layer protocol, and TFTP/UDP can’t tolerate any packet loss.
Hello..
I’m trying to recover a “bricked” TL-MR6400 V4 3G/4G Router. I figured out that the that IP address probed by the router for a new firmware is 192.168.0.225. I downloaded the firmware image corresponding to the router, renamed it to tp_recovery.bin (as requested by the router). Rebooted the router in recovery mode, and the file did transfer successfully. However, the router is not rebooting and now stuck in a boot loop. All the indicator LEDs are flashing simultaneously.
Any ideas or suggestions to help with this would be greatly appreciated.
Did you use the v4 firmware? Try a regular reset on it: Press and hold the “WPS/RESET” button until the Power LED starts flashing.
I just tried what you suggested. Holding down the WPS/Reset button stops that LED flashing for about 6-8 seconds. Then the flashing resumes. While the flashing of LEDs is paused, the power LED is lit steady.
Also – I did use a V4 Firmware.
Hi!
My TL-MR6400 V4 behaves the very same after a failed atteemt to flash back stock fimware.
Found the way to get it into recovery mode?
Behaves the same as what?
Hello!
I’ve been trying to unbrick my TL-WR741ND V 4.3 with this method, but I find myself completely unsuccessful as my computer doesn’t even seem to recognise there’s something connected through the Ethernet cable.
The issue is that my router reported to be V4 in the settings page, and V4.3 on the sticker. However, on TP-LInk page there just is either V4 or V4.2, so I flashed the V4 firmware onto it and now it’s gone. Please, I’d really appreciate any help you could give me.
Thanks!
When you connect the router and laptop with an Ethernet cable, does the status light for that port light up on the router?
Hi. I have an AX1500 and am having trouble getting it to make a request to my tftp server. I have a static IP of 192.168.0.66 set in my network interface and confirmed my tftp server is running by trying to connect to it at the same address with a command-line client. My computer is connected to the router with an ethernet cable, and I have tftp allowed through the windows firewall for both public and private networks. When I have the tftp server running, I power off the router, wait about 30 seconds, then hold the reset button and power the router on. It never requests anything from the server, nothing gets logged.
Anything I should check, or do differently?
I’m not sure that the AX1500 supports TFTP firmware recovery but the process you followed should have reverted it to factory defaults. Can you connect to your router’s admin page on the IP address 192.168.0.1?
Yes, I can connect to the admin page. The router did not revert to factory defaults, though… Are you aware of any variations in the TFTP recovery process? There is also a WPS button next to the reset button…
Different TP-Link products look for different IP addresses when doing the TFTP firmware recovery process. Try setting these IP addresses on your computer:
– 192.168.0.66
– 192.168.0.225
– 192.168.1.27
– 192.168.1.100
I’m not aware of any other reset process for the AX1500. If you can’t get it to recover via TFTP by using the above addresses, then open your router’s casing and look for JTAG pins. If it has them, you should be able to upload firmware via a JTAG programmer.
Thank you so much. I am not a techie but tried to install a 3rd party firmware in my Archer C60 TP Link and completely wrecked it. Then I came acriss your site and followed the instructions step by step. And it’s back to the original firmware and working as it was. Thanks again.
You are welcome. 🙂 I’m glad it worked for you.
No luck here. tp-link archer c60. I flashed it with openwrt then reflashed it with stock firmware but bricked it.
Which step in these instructions did you get stuck on?
Set the IP to 192.168.0.66
Press and hold reset button then power the router up—-Nothing happened in the TFTP.
only the router’s power light on. No light on LAN indicator
Ethernet connection—-unidentified network.
I’m using USB to ethernet adapter since my old laptop doesn’t have RJ45 port.
The IP 192.168.0.66 assigned to USB to ethernet adapter #2 in TFTP.
If the LAN light indicator doesn’t light up then try a different port and repeat the TFTP process. It looks like your router attempts to download the file named “tp_recovery.bin”
hi. i have tp-link archer c7 v2 and i used tftpd64 to install the firmware it worked at first for open-wrt but i wasnt happy so i flashed it back to stock but it wouldnt do it tftpd64 sends the file to the router it takes it but dosent do anything leds are working normali but i cannot connect to it the network card shows unidentified network i have tried changing ips but nothing can you help me?
After the firmware has been sent to the router, you need to set your computer’s Ethernet adaptor to obtain an IP via DHCP. That’s because, after the reset, the router will use its factory default IP address.
yes i know tried that it dosent work. i have tried running ip scaner but it cannot detect anything its like router isnt outputing anything no ip no data but the leds are showing normal behavior, even on my network card if i click status there is no data coming through. have tried different cabels but no luck
What IP does your computer then get assigned? 169.254.x.x?
196.254.152.54 this is what i get every time
169.254.x.x is an auto-addressing (“APIPA”) range for when a computer attempted to get a DHCP address, but no DHCP server responded. I would remove the AC power from the router, then toggle the power button to the ‘ON’ position, leave for 30 seconds, plug it back in, then do another factory reset (without doing TFTP recovery). If that doesn’t work, then do one more TFTP recovery. If that doesn’t work, you’ll need to open the router’s casing and use a JTAG programmer to upload the firmware via serial cable.
the TFTP recovery dosent work anymore. how do i use JTAG to upload the firmware im not familiar with?
thanks
First you buy a screwdriver to remove the screws from the router casing, then you open the case and look for a “JTAG” connector on the router board, then you buy a JTAG programmer, then you connect one end of the JTAG programmer to your router board and the other end to your computer, then you use a terminal emulator (Putty) to interface with the router via the JTAG interface.
https://blog.senr.io/blog/jtag-explained
Hi i have tplink td-w9970 v3 modem. ISP customized modem. Only power led and lan 4 port led is solid green. I try your suggest IP but can’t get resonse from tftp. Could you suggest to me differnt IP or method for this modem? Thanks
Did you try the correct reset process for your modem? “With the modem router powered on, press and hold the WPS/RESET button on the modem router until all the LEDs turn on momentarily, then release the button”
Yes modem has reset hole, i press it 5-10-30 seconds but nothing happened. When power on modem power led lights and nothing happens.
Press the reset button in, power the router on while keeping the reset button pressed in, wait for 5 seconds, and then release the reset button, then see if it tries to download a file via TFTP from 192.168.0.66
Unfortunately no response. Tftpd has no log etc. and modem ise just steady power and Lan 4 light and nothing happens. I have hope maybe i can recover it because of lan 4 light is on when i connected to pc with lan port but can’t get response.
Does your PC get an IP address from the router via DHCP?
No, i disable my wifi and connect to modem directly with cable and do not get an ip. It shows unidentifeid network then i open network setting and set 192.168.0.66
what ip?
tp link 8970?
Looks like the IP for TFTP boot is: 192.168.1.100
hola tengo un cpe 210 instale open wrt pido la ipconfig por cmd y me la da 192.168.1.1 pero no me deja acceder a open wrt sale conecion refuse que instale intente recuperar por tft y no me reconose un ayuda por favor
Hi , I have Tp -link archer vr300 and i did exactly like you told , i tried 192.168.0.66 , 192.168.1.66 , 192.168.1.100 and 192.168.0.100 . tftp show nothing
Sorry, I can’t find any information on that model. I don’t know whether it supports firmware recovery via TFTP.
Hello i have a TP-Link MR200 v1, after Firmaware update with TFTP router Bricked, TFTP now not Work, when power the router on;y signal led open for 2-3 seconds and nothing !!! I try to Hold down the reset button on the router and keep it depressed. Power the router on, wait for 5 seconds, and then release the reset button but nothing also, any help to recover my router???
Hi, I have a Archer C5400 v2 router and I cannot seem to get it to TFTP boot. Does this router support it and if so what IP should I be using and if not how do I put on a working firmware?
Yes, it looks like the C5400 supports TFTP recovery using the IP address .66, as in the instructions. 🙂 Try and let me know how it goes!
Hi, try as I might I cannot get the C5400 to TFTP boot. I have tried with a crossover cable, a normal network cable, all the IP addresses listed, LAN and WAN ports, the 30-30-30 method, booting from reset & configured and none of these work. I have tested the TFTP site and that works fine on my machine. Any ideas on what to try next please?
From the information I can find, the C5400 uses a Broadcom chipset which doesn’t support TFTP boot. You have two options: (1) See if your PC gets an IP address from the router’s DHCP server and then connect to http://192.168.1.1 to see if you can upload new firmware. (2) Use a 3.3Volt USB to UART adaptor, and access the shell on the router.
thanks for the help
totally bricked Tplink AC1500 mesh
now up and running with new firmware
Good news!
Hi, I have a Archer D7 v1 I done a firmware update via browser interface and when it’s finished the process just turned of and just the power led is on, nothing else. I tried 30-30-30 but nothing seems to happen. Dot it support recovery mode or I can bin it?
Which step in these instructions did you get stuck on?
I tried all the mentioned ip addresses 192.168.0.66, 192.168.0.225, 192.168.1.27, 192.168.1.100 with the TFTP server but I didn’t got any connection request from the router side.
Does the LAN light come on when you plug an Ethernet cable between your computer and the router?
Nope, when I power on the router it’s blinking all the lights for 1-2 second and just the power light is remaining on.
Try another LAN port. If that doesn’t work then you will need to take the cover off the router and use a serial cable to access the router, and there are lots of steps involved.
Doesn’t work at any LAN port and in my knowledge with the serial cable I will need a jtag programmer, right? I yes it doesn’t worth the router that much.
Your model doesn’t use JTAG, it uses a 3.3Volt TTL Serial connector. Yes, you would have to buy an adaptor like this: https://www.amazon.com/Serial-Adapter-Signal-Prolific-Windows/dp/B07R8BQYW1/ref=pd_sbs_6?pd_rd_w=JHFCl&pf_rd_p=3ec6a47e-bf65-49f8-80f7-0d7c7c7ce2ca&pf_rd_r=W8CSF94P5AZB944N89QB&pd_rd_r=236c19b5-212d-42a7-8f8c-59031d0a4208&pd_rd_wg=FSuFF&pd_rd_i=B07R8BQYW1&psc=1
Ok, and from this point I need to use some kind of emulator to access the router or how I will proceed forward?
Yes, a terminal emulator like ‘Putty’. Then you’ll have to enter the relevant commands (if the router responds) to upload the firmware. This gives you an idea of what’s involved so I’d be happy to help via email if you decide to try it:
https://forum.openwrt.org/t/archer-d7-support/15790/9
I managed to acces with Putty the router, but the issue came after that when I installed the OEM firmware it’s says “Uncompressing Kernel Image … Too big uncompressed streamLZMA ERROR 1 – must RESET board to recover”.
I done a little research and I found out that I need to modify the OEM firmware to can install https://github.com/openwrt/openwrt/pull/2079, but I dont have any idea where to execute the following command:
“dd if=”Archer_D7v1_1.6.0_0.9.1_up_boot(160216)_2016-02-16_15.55.48.bin” of=”Archer_D7v1_1.6.0_0.9.1_up_boot(160216)_2016-02-16_15.55.48.bin.mod” skip=257 bs=512 count=31872″
Do you have any advise?
Yes, that person is using a linux OS to cut out an unused portion of the firmware to reduce the filesize because your router only has 16MB of flash memory.
I’d be happy to do it for you – just send me an email, or you could instead try the next method: “5b. Flash it using the U-Boot and UART connection.”
Thanks for the good advices, up and running!
1st I flashed using U-Boot and UART connection but I got error that is too big, so I was forced to stripped down. Quick I downloaded Ubuntu and run in VM, run the code that I mentioned earlier, than I flash it using the U-Boot and UART connection.
This was my first experience running VM and working in ubuntu also whit UART. I start to like this linux stuff :))
Thanks again, without your guides I will be still struggling.
That’s great! I’m really proud of your determination to fix your router. I only guided you and you fixed it mostly without my help! You should be proud.
Kind Regards, Jason 🙂
For tplink Archerc20 v4
Yes, same process.
its not working firmware ka naam kya rkhna ?
router model par naam nirbhar karata hai. Look at instructions, step #6: TFTP server logs will give you firmware name.
Hi,
I’m trying to connect to my TP-Link c3200 router. I’ve tried the 192.168.0.66 and 192.168.0.1.
Nothing showing up in log when poewring up with reset (tried 3, 5, 10 & 15 seconds).
Also nothing with powerup with WPS button pressed.
What can I try next?
Thanks in advance!
From the information I can find, the AC3200 uses a Broadcom chipset which doesn’t support TFTP boot. You have three options: (1) See if your PC gets an IP address from the router’s DHCP server and then connect to http://192.168.1.1 to see if you can upload new firmware. (2) Use a 3.3Volt USB to UART adaptor, and access the shell on the router. (3) Find another router of the same model and hardware version, and move the SPI chip from the other router, to your router.
(Sorry – not all TP-Link products are the same)
Hi,
Thanks for your quick replay.
It seems I get no IP-Address from the router. After some tries it ends up on 169.254.176.197.
Can you explain step 2 in more detail?
Hello. I have changed the wording to make it clearer. 🙂
Hi,
Thanks for your quick replay.
It seems I get no IP-Address from the router. After some tries it ends up on 169.254.176.197.
Can you explain step 2 in more detail?
If your PC gets an IP of 169.254.x.x, it means that no DHCP server is running on the router. Step two means you would have to buy an adaptor like this: https://www.amazon.com/Serial-Adapter-Signal-Prolific-Windows/dp/B07R8BQYW1/ref=pd_sbs_6?pd_rd_w=JHFCl&pf_rd_p=3ec6a47e-bf65-49f8-80f7-0d7c7c7ce2ca&pf_rd_r=W8CSF94P5AZB944N89QB&pd_rd_r=236c19b5-212d-42a7-8f8c-59031d0a4208&pd_rd_wg=FSuFF&pd_rd_i=B07R8BQYW1&psc=1
Hello.
I have a TD-W8970 with no dhcp server running.
This method works if i buy the USB to TTL adaptor you mentioned earlier?
Thank you!
No guarantees, but you can try it.
Here is what you would be doing: https://openwrt.org/toh/tp-link/td-w8970_v1
Thank you!
Buenas noches, actualice un TP-LINK TL-wr741nd ver 4.20 CON UN FIRMWARE 4.0 Y SE QUEDO EL BOMBILLO DE POWER ENCENDIDO SOLAMENTE, LOS DEMAS ESTAN APAGADOS, PODRIAN AYUDARME? NO ME DA DIRECCION IP NI NADA, SALE COMO EL CABLE DE RED DESCONECTADO, ESTE PROCESO PUEDE AYUDARME A RESOLVER ESTO? EL CABLE DE RED TIENE QUE SER CRUZADO?
Try it, but I don’t think it will work. Let me know if it works, otherwise, you will probably need to to buy a serial cable to connect to the motherboard of the router, and try to make it do a TFTP boot.
SAVED MY ASS THANK YOU SO MUCHHHHH YOU ARE THE BEST
lol, you’re welcome!
Hey there,
I have an Archer MR200 V1. Everything is ok with TFTP and the file is requested but nothing is transferred. all I get in log is:
Connection received from 192.168.1.1 on port 1241 [09/03 21:10:31.218]
Read request for file . Mode octet [09/03 21:10:31.218]
OACK: [09/03 21:10:31.218]
Using local port 55972 [09/03 21:10:31.218]
TIMEOUT waiting for Ack block #0 [09/03 21:10:32.073]
Sorry for the long comment. But I just wanted to include the full log.
The file name is missed in this line: “Read request for file . Mode octet [09/03 21:26:02.203]”
It is : “Read request for file [lt]ArcherC2V1_tp_recovery.bin[gt]. Mode octet [09/03 21:26:02.203]”
Hi MJ. Your router is looking for the file “ArcherC2V1_tp_recovery.bin” – did you download the latest firmware for your hardware revision, rename it as above, and put it in the TFTP directory?
Yes I did. I get the file transfer window but the client only says timeout.
Are you using the correct firmware for your hardware revision (V1)?
This processed worked on a Archer C2300, but the router will not install an older version of the firmware. It succeeds in downloading, does the factory reset, asks for info on boot, but still has the original ‘current’ firmware before reset. It will not take an older version overtop of a newer one, using this process.
Interesting. Are you using the correct firmware for your hardware revision?
Hello from New York….
Archer A7
What I did….download stock FW(1-25-21)….Renamed it to ArcherC7v5_tp_recovery.bin
TFTP was successful as it said transferred XXXXXX blocks….XXXXXXXbytes
But nothing happens for 5 , 10, 15 minutes
All I have is Green Power Light & Amber Internet
What can I try?
Thxs
1) The LAN light which your computer is connected to, doesn’t come on? If it comes on, and you set your computer to obtain an IP via DHCP, does it get an IP address other than 169.254.x.x?
2) Did you check the sticker on the underside of your router to ensure that V5 is your hardware revision?
Thanks
Hi, l have a tp-link archer c6. I installed openwrt and want to reinstall original firmware. I tried everything but the original firmware doesn’t install but it shows that it was installed using tftpd32. What else can I do?
tftpd doesn’t show whether it was installed successfully; it only shows that the router downloaded the firmware from your computer. What state is the router is now? Does it give your computer an IP address via DHCP?
My problem is fixed….I believe installing DD WRT screwed up the flash and I couldn’t do anything to recover…
First download “FIRMWARE OPENWRT INSTALL”…….https://openwrt.org/toh/tp-link/archer_a7_v5
Re-Name file to ArcherC7v5_tp_recovery.bin (YES C7)
Rename PC adapter to 192.168.0.66….255.255.255.0…..
OPEN TFTP ….Chose DIR where File is and change Server Interfaces line to 192.168.0.66
Plug Ethernet into LAN #4
With router in off position stick paper clip in RESET and hold it there…..Turn power ON……release paper clip in 3 seconds
Watch, in relief , software installing ….give it about 3-4 minutes…
DONE
After getting router working….you can go back to stock by:
Download firmware from TP Link site..
Re-name it to ArcherC7v5_tp_recovery.bin
Flash as above….
I got back to stock AFTER installing Open WRT
Very good. I really love the TFTP boot feature in TP-Link products. It can save lots of hassles.
Hello,
i have a mr600 and try to tftp to install openwrt . Do you know if the address to use is 192.168.0.66 like the mr200 ?
The MR600 supports TFTP boot but I can’t confirm that the IP address is 192.168.0.66. There are really only 4x possible IP addresses to try so, start with .66 and make it through the list:
– 192.168.0.66
– 192.168.0.225
– 192.168.1.27
– 192.168.1.100
thanks for your answer 🙂
I have read the post and I have not been able to update the firmware of my tp-link eap225 v1 version 1.0.0.Buil 20160909 Rel 41822 could you give me some help, please? When resetting it, it generates two networks TP-LINK_2.4GHZ_497088 and TP-LINK_5GHZ_497089 without a password, you can navigate normally, but I cannot change names or put keys, I use the latest Omada Controller v3.2.14 detects it but is not able to configure it. it stays in “approving” after that the networks disappear and the program indicates “disconnected”. I understand that I must take it to the latest firmware. I have tried with FTFP without results. I do not know the correct name of the recovery file. I appreciate the help. Greetings from Peru
The EAP responds to name request for this URL – have you accessed this page? tplinkeap.net
The username & password are both “admin”. The set up video shows that the configuration is probably on the “Wireless” or “Management” tab of the EAP’s admin webpage.
Thanks for the support!. I tried the access by url tplinkeap.net and I do not have access by web. Also try the IP assigned is 192.168.100.223, and the Omada discovery finds it with MAC Address 50-C7-BF-49-70-88 status “pending” I can activate it with the “Manage” but when I use the Omada Controller already it runs out of signal and disconnects it. I have to restart it to return to have wireless networks by default in free mode without password
You’re welcome. You don’t need Internet access to go to tplinkeap.net, because the web server is on the EAP. I just read that “The web interface of a specific EAP is not available once this EAP is adopted by the EAP Controller.” Since you can’t access it even by IP address, I assume that the EAP thinks it has already been adopted, despite the controller showing “pending”.
I think you should do this: (1) Turn off the controller (2) Do a hardware reset on the EAP225, with the “reset” button (3) Find its IP address and try accessing it via web browser
I appreciate the help. at the end of so much battle:
(1) turn off the Wifi and bluetooth connections, leaving only the Ethernet in 192.168.0.66, reset the router and it generates 192.168.0.254
(2) use omaba discovery apply “manage” with the
url information: tplinkeap .net
user: admin
password: admin
I configure it perfect
(3) use the omaba Controller and you can change the name, update the firmware to the latest version in V1, and voila it is operational.
now if the url works: tplinkeap.net !!
thanks for the light in the dark! Greetings from Peru
Perfect 🙂 Good job.
Hello!
I use Archer C20. I tried to upgrade the stock firmware but for some reason, it was rejected by the router. I made sure the firmware was for V4.
So far, the router was working fine.
I followed your instructions to the dot. That bricked it :-D. And I take full responsibility, it’s not on you.
So I went ahead and downloaded openwrt for V4. Same process. But now it has gone in infinite loop.
How do I fix this mess up? Its not taking either the V4 version from the Indian site – nor is it taking the OpenWRT thing. Is there a way I could revert to the original / factory settings – although I am pretty sure there isn’t.
Thanks.
Your hardware version is v4? Try a factory reset with the ‘reset’ button, and then another TFTP boot with the latest firmware (inside the ZIP file “Archer C20(EU)_V4_181213.zip”)
Hi
Great info.
I’ve tried everything to get this working. I tried DD-WRT on my Archer C7v5 and it was great except it kept losing connection to USB storage I use for recording live TV, so I reverted back to TP-Link firmware. A couple of months and new DD-WRT firmware was released with fixes so I flashed to DD-WRT again. It has now started doing funny things and I suspect it need to go back for warranty replacement but I can’t shift the DD-WRT.
It just refuses to go into recovery mode. I tried holding the reset button down for 5/10/15/20 & 25 repectively seconds but to no avail.
The router defaults to 192.168.1.1 but I’ve also tried setting it to 192.168.0.1 whilst my laptop is set to x.x.1.66 or x.x.0.66.
I’ve tried it with Solarwinds tftp server and tftpd64 onwindows 10 pro as well as TFTPD Server and ATFTPD on ubuntu server.
Any ideas to help me here? I even tried the 30 30 30 reset but it just goes back to DD-WRT reset and asks me to set user password to get back nto it. I’ve tried renaming current firmware to and (recovery.bin, tp_recovery.bin, ArcherC7v5_tp_recovery, ArcherC7v2_tp_recovery.bin) and also tried renaming Archer v2 firmware to ArcherC7v2*.*
I can’t help feeling it’s something really simple I’m missing…
Hello, thanks for the detailed info on what you’ve already tried. I’m concerned about the filenames you are using for the firmware: you’ve used both v5 and v2. You should never do that. You look at the sticker on the underside of the router to find the hardware revision, and you only use firmware for that exact revision.
You also don’t need to set the IP address manually on the router for the TFTP process. What do the TFTP server logs show you? Can you see a connection request from the router, and does it show a filename?
Hello.
I followed the method step by step and reached for the Firmware to be passed to the router. After this, ALL lights on the router went out. I left it for a few minutes, but nothing happened.
I turned it off and back on, but it’s still the same. As soon as it starts, it turns the Internet light in orange and then everything off. Try holding the reset button and nothing.
Try the TFTP method again but this time, it no longer works. It is as if the router has died. Is there a possibility of reviving it?
Hi. Did you install the correct firmware for your hardware version? Anyway, you will now need to buy a serial cable to connect to your router. Tell me what model router you have and then I’ll tell you what cable to buy.
Hi.
Thanks for the answer.
Yes. Im pretty sure that is the correct FW. The router is an TP-Link C50 V1. It is possible to revive it with a Serial cable?
Thanks in advance
The TFTP logs now show that the router doesn’t attempt to download the file?
Exactly. I rerun the step by step, but never looking to download the file.
Don’t do the serial cable method. Your router doesn’t have the usual connector so you will have to solder the serial cable wires into the router motherboard.
Olá Instalei o firmware OpenWrt no meu Archer C5w V4 com o programa TFTP, mas queria voltar ao firmware TP-Link original.Também tentei remover os primeiros 512 bytes antes de fazer o flash e também não funcionou.
Hi. Which part did not work? Do you mean the TFTP upload process did not work?
hello, i have a archer C7V2 bricked. i tested TFTP on windows xp with tftp32. i successfully uploaded firmware Archer C7(EU)_V2_180305 ( downloaded from https://www.tp-link.com/fr/support/download/archer-c7/v2/#Firmware )
but i’m on infinite boot loop.
do you have an idea?
regards.
Hi. The router keeps rebooting? You should probably do a factory reset (the reset button). Let me know if that fixes it.
yes router keeps rebooting.
i tested factory reset with wps/reset button during 15seconds do nothing.
the router still reboooting . infinite boot loop 🙁
Can you get it to do another TFTP boot? If not, then you’ll need to buy a serial cable and force it that way (let me know if).
i have tried another TFTP upload firmware and i have the same problem.
tftp 32 detect my router, transfert of firmware is done 100% and after router reboot on infinite loop.
i tested with RS232>TTL adapter but there is no signal.
i have tried with putty COM3 (value found on windows device Manager) , 115200 baud , 8bit data, 1 bit stop, parity none, flow control none.
can y buy this ? USB >UART adapter with Solderless Flexible ?
https://fr.aliexpress.com/item/1005001587731393.html?spm=a2g0o.productlist.0.0.75bf45fa5d5FJq&algo_pvid=68681c4d-2203-44c7-be26-79a3ba3f4efd&algo_expid=68681c4d-2203-44c7-be26-79a3ba3f4efd-0&btsid=2100bddb16184090776888904eff50&ws_ab_test=searchweb0_0,searchweb201602_,searchweb201603_
https://www.aliexpress.com/item/1005001596974370.html?spm=a2g0o.productlist.0.0.795e6e22CbsZ5s&algo_pvid=83c85616-e98e-4667-bc66-688c72d42341&algo_expid=83c85616-e98e-4667-bc66-688c72d42341-13&btsid=0b0a0ae216184098256313123e44f2&ws_ab_test=searchweb0_0,searchweb201602_,searchweb201603_
regards
Can you do the TFTP process again, and show me the logs from the TFTP server? You can use the “PasteBin” website if you want.
After you’ve obtained the TFTP logs for me, also follow the pin layout in this video: https://www.youtube.com/watch?v=t35Pei_eb6o
i have made another tftp test and i recorded it on vimeo : https://vimeo.com/537139237
as you can see, “syslog server” is empty.
i found this on “log viewer” :
Connection received from 192.168.0.86 on port 3529 [15/04 09:03:26.593]
Read request for file . Mode octet [15/04 09:03:26.593]
OACK: [15/04 09:03:26.593]
Using local port 1034 [15/04 09:03:26.593]
: sent 31745 blks, 16252928 bytes in 16 s. 0 blk resent [15/04 09:03:42.343]
Okay, so the router isn’t totally broken because it still does TFTP boot! (The syslog tab won’t populate because that’s something totally unrelated which your router won’t send log messages to).
1) Try doing one more TFTP with these two images (download them and rename them, one at a time, to “ArcherC7v2_tp_recovery.bin”):
https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/2019/02-06-2019-r38581/tplink_archer-c7-v2/factory-to-ddwrt-IL.bin
http://downloads.openwrt.org/releases/19.07.7/targets/ath79/generic/openwrt-19.07.7-ath79-generic-tplink_archer-c7-v2-squashfs-factory.bin
2) If neither of those work, you need to forget about TFTP and get the serial headers working:
https://i.imgur.com/tSuDMaA.jpg
i tested the 2 firmwares with the name “ArcherC7v2_tp_recovery.bin” and it doesn’t work.
when i upload openwrt-19.07.7-ath79-generic-tplink_archer-c7-v2-squashfs-factory.bin to the router , i have the bootloop after upload transfert 100%.
when it upload factory-to-ddwrt-IL.bin do the router , i have something different. power , sun and wifi led still powered on after tftp upload. i wait 2 hours and i can’t connect to router on 192.168.0.1. ping to 192.168.0.1 don’t work. when i set my network adapter (on my pc) do dhcp, the router don’t give me an ip. i don’t see the wireless network name with my wifi card. so after 2 hours i power off the router. when i power it on, there is the infinite boot loop 🙁
Okay. Should I wait to hear from you, when you’re ready to get the serial connection working?
ok. can y buy this ? USB >UART adapter with Solderless Flexible ?
https://fr.aliexpress.com/item/1005001587731393.html?spm=a2g0o.productlist.0.0.75bf45fa5d5FJq&algo_pvid=68681c4d-2203-44c7-be26-79a3ba3f4efd&algo_expid=68681c4d-2203-44c7-be26-79a3ba3f4efd-0&btsid=2100bddb16184090776888904eff50&ws_ab_test=searchweb0_0,searchweb201602_,searchweb201603_
https://www.aliexpress.com/item/1005001596974370.html?spm=a2g0o.productlist.0.0.795e6e22CbsZ5s&algo_pvid=83c85616-e98e-4667-bc66-688c72d42341&algo_expid=83c85616-e98e-4667-bc66-688c72d42341-13&btsid=0b0a0ae216184098256313123e44f2&ws_ab_test=searchweb0_0,searchweb201602_,searchweb201603_
You need the voltage of 3.3V. Any ‘UART TTL’ adaptor @ 3.3V will be okay:
https://www.aliexpress.com/item/32965292523.html?spm=a2g0o.productlist.0.0.656563ecwtVMVL&algo_pvid=d3113cfe-b9c9-4076-a53b-004e592b23fa&algo_expid=d3113cfe-b9c9-4076-a53b-004e592b23fa-52&btsid=0b0a556116187791261214803e0dcd&ws_ab_test=searchweb0_0,searchweb201602_,searchweb201603_
Ok thanks. Il will buy it and i will keep you informed.
hello i received my usb uart ttl. but i don’t see full messages from router.
do you have an idea?
i made a video test here
https://vimeo.com/544532927
Can you try another baud rate? Maybe 9800
not working .
i have tested with 9600, 115200, 128000.
i can’t type nothing.
i only see this :
▒
U-Boot 1.1.4 (Ap▒ 24 2015 – 13:53:0t)
apq35 – Scor▒▒▒n 1.0DR▒▒:
▒▒▒
Scorp▒▒▒ 1.0
a▒▒▒ddr_ini▒▒▒l_confi▒(211): (s2b▒▒) ddr1 i▒▒▒
Okay, now you need to interrupt the boot sequence with the command “tpl”. I’ll tell you the best way to do it, since Putty allows pasting text with the right-click of the mouse:
1) Open Notepad or Notepad++
2) Type: tpl
3) Press enter to get a new line underneath it
4) Use the key combination to copy the text plus the carriage return (“enter”) underneath it
5) Open Putty on your COM port
6) Power on the router
7) Paste it as soon as the power button is pressed, and continue it every second until you get to a prompt…
It’s not working.
I have no scrolling text. Is there a problem encoding character?
It’s not possible to type text with keyboard or mouse right click.
Hi,
I have tried this method on my Tp-Link Archer C20(EU) AC750 version-4 but it doesn’t work
Hi. Which step didn’t work?
Hello,
I am trying the above procedure to a tplink Mr200 v1 eu , i set the ip address 192.168.0.66 exactly as the example but i get the following error message :
“Connection received from 192.168.1.1 on port 2922
Error : connect returns 10051: ”
I disabled windows firewall and Antivirus but nothing changed – do you have any ideas?
The whole message is : Connection received from 192.168.1.1 on port 2922
Error : connect returns 10051: <A socket operation was attempted to an unreachable network
That’s an interesting scenario; the router’s IP is on a different subnet to your laptop, hence the 10051 error (FYI, TCP/IP isn’t designed to work that way).
Try doing a factory reset on the router, using the reset button, and try the process again…
Hi, is TP-Link RE200 valid for AC 750 model?
When I do these operations, I can’t see any logs, it’s like it doesn’t see any connections. I tried 192.168.0.66 – 192.168.0.100 – 192.168.0.10, and got the same result in all of them. there is no power off button, I just hold the reset button for a while and it resets. But no log records appear in TFTP.
I have TP link WR 720n. This method doesnt work. When I press the reset button, nothing happens on TFTP. Please help
No.
does the same process work on tp-link TD-W9960
Hi there
Looks like things are still active on here so will ask if theres any way to get my TD-W8980 back using TFTP at all? Currently when powering on I get the two wifi symbols flashing and obviously a LAN one if I connect via LAN. Connecting via LAN I get a 169 ip address on auto IP, if i connect a wireless device to the wifi, i automatically get 192.168.1.100. I am unable to browse to 192.168.1.1 on either wifi or if I try any manual IP in the 192.168.1.x range on the lan connection specifying the subnet and default gateway (I get ‘unidentified network’ when setting a manual IP). So trying the factory reset button at the rear of the router with a paperclip – I can see all the lights come on briefly when holding it in but then it just goes back to the normal lights again (2 wifi and a lan if i have the cable connected). Tried all 4 ports (LAN1 to 3 and the one labelled LAN4/WAN – no difference so downloaded the firmware for it (UK v1) and TFTP. Set ip to 192.168.0.66, powered up with the paper clip being held in on the reset button whilst connected to the LAN ports but nothing at all in the log viewer page on the tftpd64 page. Tried all 4 IPs listed earlier in the thread and all 4 lan ports but nothing at all. Ive tried the 30-30-30 procedure as well but still nothing on the log viewer. When powering up and holding in the reset button with the paperclip, its just lighting all the lights for a few seconds then goes to what looks like normal operation so is TFTP even possible on this router or is it JTAG time? If so, I will bin it – not worth messing with soldering things onto boards etc – I only want to use it as a wifi repeater anyway as Ive now got fibre broadband – just thought i could save money by using this as a repeater. Any advice or suggestions would be very welcome 🙂
You have already tried everything that I would. Sounds like it’s soldering time (or rubbish time!) 🙂
I have TP-link Wr940N V1.2 but I can’t connect TFTP using 192.168.0.66, not working. Please help.
Tengo un router WR940N V1.2, tratando de subir el firmware se briqueó (no sé si se escribe de esa manera), estoy haciendo todo lo del tutorial pero no consigo que lo lea a traves del la ip 192.168.0.66, será tiene otro IP o no se puede de esta manera.
i have model tl-wr840n(EU) does not want to connect at all to the TFTP program as the middle light just keep flashing green and no respond from the tplink i try the ip address as set but stil doesnt connect to the laptop
Hola, tengo un Archer C60 que está brickeado, tenia instalado openwrt y al querer volver al firmaware stock quedó interrumpido el proceso y no funciona.
Intenté usar TFTP y no funciona, es decir, carga el archivo tp_recovery.bin (renombrado así luego de descargar el firmware oficial desde la página de TP Link. Una vez que se envia el archivo al router, queda solo la luz de power encendida y no hace nada más.
Espero puedan ayudarme. Gracias desde ya.
Translate:
Hello, I have an Archer C60 that is bricked, I had openwrt installed and when I wanted to return to the stock firmware, the process was interrupted and it does not work.
I tried to use TFTP and it doesn’t work, that is, it loads the file tp_recovery.bin (renamed like this after downloading the official firmware from the TP Link page. Once the file is sent to the router, only the power light remains on and it does nothing else.
I hope you can help me. Thanks since now.
Did you download the correct firmware for the ‘hardware revision’ of your router?
Hi Folks,
I have a TL-MR100 V1 that appears to do all the right things, dishes out an address via DHCP, a port scan shows the web server running on port 80, responds to pings all day, but I can’t access the web management portal.
I’ve tried getting it to boot with the tftp server running, I tested both the LAN1 and LAN2/WAN ports with all the IP combos from earlier in the thread and didn’t get a response in the logs. I suspect this device isn’t capable of tftp booting.
I CAN access a session if I use putty to telnet into the router, but can’t make heads or tails of it from there.
I’m at a loss where to go next and would appreciate any suggestions.
Telnet to the router again, and try the command: restoredefault
——————————————————————————–
Welcome To Use TP-Link COMMAND-LINE Interface Model.
——————————————————————————–
TP-Link(conf)#restoredefault
Command not found:restoredefault
TP-Link(conf)#
No Luck unfortunately.
I delved into just about every command available in the ‘help’ section, and there is nothing in there about backing up/restoring/installing firmware in there at all.
I think it’s dead!
I have a Tp-link wr940n (ES) v5 I made the mistake of updating the firmware via wifi and it stopped working when I turn it on, all the buttons hang for 1-2 seconds and then only the power button remains on. I have the same problem that the usuari Balazs had with your router. I use the tftp server but the tftpd64 does nothing, when I connect the ethernet cable to the LAN port it does not turn on the light in any of the 4 LANs. when I power on the router it’s blinking all the lights for 1-2 second and just the power light is remaining on.
I did all the steps as the post says but it doesn’t work. please help
Hello. Balazs used one of the cables I suggested to him, to revive the router. Good luck!
Ive flashed my archer c59 v2 but the directions work just the same. Ill note that my router seems to only tftp with a crossover. So if you have one around and not having any luck with a straight through then u might as well give it a few tries
Thank you, that’s good advice. (Goodness only know what goes on with these TP-link routers!) Aside from the cable, were there any other differences for your TFTP process?
Hi! Thanks for this post. I’ve performed the tutorial steps and I was able to make my TP-Link to download the firmware file.
However, after that, it gets all its lights shut, like it was dead.
Now, even when I try to power off/on I can see only a light with the “connection” symbol quickly blink, and all seems dead again.
The process didn’t work anymore. I’m using an image downloaded from the TP_Link site. I payed attention to the hardware version of my device, but it seems that this update was like poison to my router.
By the way, it is an Archer C20 AC750 V1.0
Can you guys help me further or the situation hints to a new device? 🙂
Thanks!!
TP-Link Archer A7 Ver 5 US region – Atheros based.
I currently have openwrt installed but I want to go back to stock firmware. The originally installed stock firmware was the latest version, which seems to do version checking and doesn’t allow flashing back to lower versions.
TFTP flash back to stock fails. The image downloads fine, verifies OK, but the current version number (7.0 for openwrt) is greater than the new version number (1.1 for stock) so I get a version mismatch error and a “recovery failed” error (seen via serial link).
I also acquired a SPI chip programmer (CH341a). After flashing the stock firmware file with the programmer, the router just hangs. So I flash back to the previously saved bin and then have openwrt back, so the programmer works, but if I read the internet correctly, I need a “full dump” bin file of the stock firmware for the programmer to work. Or someway to edit the stock firmware file for a chip programmer to work.
Do you have any advice on how to get back to stock firmware with this router? I have 2 of them, both stuck on openwrt.
See excerpt from the serial port log of the tftp session:
_______________________________________________________________________
TFTP from server 192.168.0.66; our IP address is 192.168.0.86
Filename ‘ArcherC7v5_tp_recovery.bin’.
Load address: 0x80060000
Loading: #################################################################
#################################################################
—–SNIP——
#####################################
done
Bytes transferred = 15496635 (ec75bb hex)
Firmware downloaded… filesize = 0xec75bb fileaddr = 0x80060000.
Firmware Recovery file length : 15496635
Firmware process id 2.
handle_fw_cloud 138
Image verify OK!
Firmware file Verify ok!
[Error]sysmgr_proinfo_buildStruct(): 659 @ unknown id(device_name), skip it.
[Error]sysmgr_proinfo_buildStruct(): 659 @ unknown id(country), skip it.
[Error]sysmgr_proinfo_buildStruct(): 659 @ unknown id(hw_ver), skip it.
[Error]sysmgr_cfg_checkSupportList(): 1023 @ specialId 45550000 NOT Match.
Firmware supports, check OK.
(curFw_ver, newFw_ver) == (7.0, 1.0)
[NM_Error](nm_checkSoftVer) 00962: Firmwave not supports, check failed.
[NM_Error](nm_checkUpdateContent) 01219: the firmware software version dismatched
[NM_Error](nm_buildUpgradeStruct) 01314: checkUpdateContent failed.
recovery failed.
now restart…
____________________________________________________________________
Thank you.
Hi there. Have you tried the suggested firmware on the DD-WRT page under the section “TFTP RECOVERY TO REVERT BACK TO STOCK”?
https://wiki.dd-wrt.com/wiki/index.php/TP_Link_Archer_A7v5#TFTP_RECOVERY_TO_REVERT_BACK_TO_STOCK
I don’t know if that firmware differs from the one you’ve already tried. I have seen some people who’ve had to use dd (the linux tool) to trim firmware, starting from a certain block, before uploading. I think the reason for that was to workaround the flash chip capacity but, now that I think about it, that doesn’t make sense if you’re uploading manufacturer firmware. I’ll see what I can find and post an update…
I have the TP-link Archer A7, I flashed it with open-wrt a while ago however when I tried to flash it back with tp link stock firmware it bricked my router. When I flash it using TFTP using either tp link firmware or open-wrt firmware it sends and receives the file and i can see it on the tftp tab saying 100% successful but then it disappears after a couple seconds. The router does not then do anything and I cannot see it on 192.168.0.1 or 192.168.1.1 so it must have failed?
Any ideas?
Try doing a reset using the ‘reset’ button and let mw know what happens. I don’t know which hardware version you have but, after doing a reset, connect your computer to it with an Ethernet cable, set your computer to obtain an IP via DHCP, and if your computer get a class C IP address (192.168.x.x) then try accessing the URL: http://tplinkwifi.net (Internet connection not required)
Thank you for replying, The router is A7 v5, I used the reset button with ethernet direct to pc. once network adapter is set back to dhcp it only receives the 169 address not 192.
Since a config reset didn’t fix it, I would try flashing firmware onto as a previous person has (search for “Balazs” on this page for details).
Works but only same region…in this case TL-WR941HP v2
Other regions complete operation but it remains actual firmware
That is interesting to know. After doing the recovery, you should be able to change regional firmware the normal way.
hello, I have a TL-WR941HP(BR) v2, and the firmware is quite outdated, I would like to use TFTPD and switch to TL-WR941HP(UN) v2 with newer firmware. But I’m afraid to kill the router.
I have changed between regional firmware and it worked. I actually wrote that at the top of the page: “You want to change between regional firmware releases (America/Europe/Asia/Australasia etc)”. What matters is the hardware version number of your router, and ensuring that the firmware version matches.
The main reason why regional firmware exists (aside from language), are for legal purposes in terms of WiFi channel usage. Different countries permit the usage of different frequencies, even on the 2.4 GHz bands. I’ve seen that sometimes manufacturers include different options for WAN encapsulation, because there are regional differences.
Hello, I tried to install the firmware of TL-WR941HP(UN).v2 on TL-WR941HP(BR).v2, TFTPD loads the file, but the firmware is not changed, it may have hardware difference or some encoding.
It could. Both firmwares are nearly the same size: (UN) 8,015,477 (BR) 8,013,965. Can you confirm that unzipped the archive, extracted the file ‘TL-WR941HPv2_un_up-2-0-1-20171225rel60160.bin’, renamed it to whatever the router asked for, pointed TFTPD to the file, and that the uploaded progress went to 100%?
In all attempts, TFTPD loaded the file 100%, I tested it by connecting through the WAN and LAN ports. Firmware is not changed, continues (BR)20180305rel54795. I tested with versions (UN)20171225rel60160, (UN)20170602rel78300 and (UN)20191125rel54756.
Log: Connection received from 192.168.0.86 on port 3086 [26/08 18:26:43.641]
Read request for file . Mode octet [26/08 18:26:43.641]
OACK: [26/08 18:26:43.642]
Using local port 52649 [26/08 18:26:43.642]
: sent 15656 blks, 8015477 bytes in 16 s. 0 blk resent [08/26 18:26:59.540]
Try the earliest available firmware “TL-WR941HP(UN)_V2_170603” from 2017-06-03 (8,009,753 bytes)
It was one of the ones I tested, TLWR941HPv2_un-up-ver2-0-0-P1[20170602-rel78300]_2017-06-03_04.56.13.bin. Unfortunately it didn’t work. Maybe need to do some cutting with the DD command.
log: Connection received from 192.168.0.86 on port 3158 [26/08 18:39:25.037]
Read request for file -TLWR941HPv2_tp_recovery.bin-. Mode octet [26/08 18:39:25.037]
OACK: -timeout=3,- [26/08 18:39:25.037]
-TLWR941HPv2_tp_recovery.bin-: sent 15645 blks, 8009753 bytes in 18 s. 0 blk resent [08/26 18:39:43.362]
Hi,
Im so glad i found this blog post.
I have a TPLINK mr3220_v2 ( i know, its really old) which i had flashed openwrt or ddwrt i couldnt remember; but i tried to flash stock firmware from tplink and followed the instructions.. I can see the last block was sent and acknowledged on wireshark but i cant tell if the file is being flashed and when the flashing is done .. also the router blinks all indicators for 1 second then only padlock for 2 seconds.. it keeps doing that and does not boot into tplink stock firmware.. please does anyone have an idea of whats happening ?
Have you tried with one of the earlier versions of TP-Link firmware?
Hello,
Thank you very much for the article and answers.
After the unsuccessful installation of OpenWRT I am attempting to flash Archer C6 AC1200 with recovery firmware. I am able to connect via SSH but cannot enter TFTP recovery mode: I have tried all LAN ports and WAN, different delays when holding the reset button, but I do not see any signs of connection in WireShark or in Tftpd log viewer.
What can you recommend in this situation?
Hi,
i tried your method.
i use machine is TL_MR6400 V5.2
But when i set ip at 192.168.0.66,it is not work
so i changed to 192.168.0.225,and…it work!
but i get a error,my machine continue to brick,below is the error message
”
Connection received from 192.168.0.2 on port 3335 [12/10 21:55:06.491]
Read request for file . Mode octet [12/10 21:55:06.491]
OACK: [12/10 21:55:06.491]
Using local port 63129 [12/10 21:55:06.491]
Ack block 977 ignored (received twice) [12/10 21:55:07.711]
Ack block 22999 ignored (received twice) [12/10 21:55:12.903]
Ack block 46274 ignored (received twice) [12/10 21:55:30.668]
Ack block 59721 ignored (received twice) [12/10 21:55:34.271]
TIMEOUT waiting for Ack block #128926 [12/10 21:55:40.969]
“
Thank you for the advice! I’ll update the article soon to include this IP address. As for the duplicate blocks occuring during the TFTP transfer, are there any other devices between your computer and the router (an Ethernet switch, etc), and have you tried using a different Ethernet cable?
hi.
im using a MR-6400 v5.2
i just installed a OpenWrt recovery on router and for some reason it didnt worked with some functions and i tried to change it back to the orginal tplink firmware
im using TFTP way the file upload as good but it does not install and after reboot all lights keep blinking ,but the openwrt recovery file can be install again and work fine ,
is there any other way to rollback my router to orginal firmware?
Hey I have an archer-20 V5 but it is installed with 3rd party software which is not allowing me to access the default gateway page(192.168.1.1/tplinkwifi.net) any idea how can I install the firmware without having access to the router’s GUI. like using CLI or winSCP software.
Thanks
AFTER MANY ATTEMPTS THROUGH TFTP+LAN …. IT WORKED THROUGH TFTP + WAN … THANK YOU FOR THE ADVICE!!
This is what worked for my MR6400(EU)_V5 !!!
Download the firmware from TP-Link website https://static.tp-link.com/2020/202011/20201116/TL-MR6400(EU)_V5_200511.zip 172, unzip the file and rename the TL-MR6400v5_1.1.0_0.9.1_up_boot(200511)_2020-05-11_12.28.03.bin file into original.bin
prepare the file using the command dd if=original.bin of=tp_recover.bin skip=1 bs=512 count=16000
setup yout PC ethernet card with IP 192.168.0.225, sub: 255.255.255.0
connect the router to PC with ethernet cable
open TFTP sw, choose the folder where copied tp_recover.bin file and select the ethernet card
TFTP
TFTP
switch off the router
press and keep pressed the WPS/RESET button
switch on the router and continue keep pressed the WPS/RESET button until the file transfer start
release the button and wait for router restart
Restore the PC ethernet card to receive IP address from DHCP (router has address 192.168.1.1)
The router now has been restore to stock firmware.