Hi guys, I am writing through an interpreter, please help to restore the native firmware of TP-Link. do everything according to instructions but he always goes to reboot, if not difficult to lay out detailed instructions

TD-W8970 ver 1.2

Hit any key to stop autoboot:  0
VR9 # tftpboot 0x80800000 TD-W8970v1_0.6.0_2.1_up(130415).bin
8192 KiB W25Q64 at 0:3 is now current device
Using vr9 Switch device
TFTP from server 192.168.1.100; our IP address is 192.168.1.1
Filename 'TD-W8970v1_0.6.0_2.1_up(130415).bin'.
Load address: 0x80800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #########################
done
Bytes transferred = 7995392 (7a0000 hex)
VR9 # sf erase 0x20000 0x7a0000

................................................................................                                             ..........................................
Successfully erased 7995392 bytes @ 0x20000
VR9 # sf write 0x80800000 0x20000 0x680004

................................................................................                                             ........................
Successfully programmed 6815748 bytes @ 0x20000
VR9 # reset
ROM VER: 1.1.4
CFG 05

DDR autotuning Rev 0.3d
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...

U-Boot 2010.06-LANTIQ-v-2.0.40-svn3131 (Apr 08 2013 - 11:13:09)

CLOCK CPU 500M RAM 250M
DRAM:  64 MiB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   Internal phy(GE) firmware version: 0x841d
vr9 Switch8192 KiB W25Q64 at 0:3 is now current device

Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0
8192 KiB W25Q64 at 0:3 is now current device
8192 KiB W25Q64 at 0:3 is now current device
        Uncompressing ...
Starting kernel ...

Lantiq xDSL CPE VR9
mips_hpt_frequency = 250000000, counter_resolution = 2
Linux version 2.6.32.32 (wuzhiqin@localhost.localdomain) (gcc version 4.3.3 (GCC                                             ) ) #15 Mon Apr 8 16:02:07 CST 2013
phym = 04000000, mem = 04000000, max_pfn = 00004000
Reserving memory for CP1 @0xa4000000, size 0x00000000
CPU revision is: 00019556 (MIPS 34Kc)
Determined physical RAM map:
User-defined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: root=/dev/mtdblock2 rw rootfstype=squashfs ip=192.168.1.1:1                                             92.168.1.2::::eth0:on console=ttyS0,115200 ethaddr=AC:9A:96:F0:28:39 phym=64M me                                             m=64M panic=1 mtdparts=ifx_sflash:128k(boot),1280k(kernel),6528k(rootfs),64k(con                                             fig),64k(romfile),64k(rom),64k(radio) init=/sbin/init ethwan=
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00040610
Readback ErrCtl register=00040610
Memory: 60632k/65536k available (2855k kernel code, 4832k reserved, 820k data, 1                                             84k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:185
Lantiq ICU driver, version 3.0.1, (c) 2001-2011 Lantiq Deutschland GmbH
console [ttyS0] enabled
Calibrating delay loop... 332.59 BogoMIPS (lpj=1662976)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Lantiq PCIe Root Complex driver, version 1.5.3, (c) 2001-2011 Lantiq Deutschland                                              GmbH
bio: create slab <bio-0> at 0
ifx_pcie_rc_class_early_fixup: fixed pcie host bridge to pci-pci bridge
pci 0000:00:00.0: PME# supported from D0 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: PME# supported from D0 D1 D3hot
pci 0000:01:00.0: PME# disabled
pci 0000:00:00.0: PCI bridge, secondary bus 0000:01
pci 0000:00:00.0:   IO window: disabled
pci 0000:00:00.0:   MEM window: 0x1c000000-0x1c0fffff
pci 0000:00:00.0:   PREFETCH window: 0x1c100000-0x1c1fffff
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
gptu: totally 6 16-bit timers/counters
gptu: misc_register on minor 63
gptu: succeeded to request irq 118
gptu: succeeded to request irq 119
gptu: succeeded to request irq 120
gptu: succeeded to request irq 121
gptu: succeeded to request irq 122
gptu: succeeded to request irq 123
IFX DMA driver, version ifxmips_dma_core.c:v1.0.17
,(c)2009 Infineon Technologies AG
Lantiq CGU driver, version 1.1.27, (c) 2001-2011 Lantiq Deutschland GmbH
vpe1_mem = 0
Wired TLB entries for Linux read_c0_wired() = 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
fuse init (API version 7.13)
msgmni has been set to 118
Line: 127, function: deu_init
DMA Referenced PAGE_SIZE = 4096
Infineon Technologies DEU driver version 2.0.0
IFX DEU DES initialized (multiblock) (DMA).
IFX DEU AES initialized (multiblock) (DMA).
IFX DEU ARC4 initialized (multiblock) (DMA).
IFX DEU SHA1 initialized (DMA).
IFX DEU MD5 initialized (DMA).
IFX DEU SHA1_HMAC initialized (DMA).
IFX DEU MD5_HMAC initialized (DMA).
io scheduler noop registered (default)
ifx_pmu_init: Major 252
Lantiq PMU driver, version 1.2.2, (c) 2001-2011 Lantiq Deutschland GmbH
Lantiq GPIO driver, version 1.2.14, (c) 2001-2011 Lantiq Deutschland GmbH
Infineon Technologies RCU driver version 1.0.8
Lantiq LED Controller driver, version 1.0.6, (c) 2001-2011 Lantiq Deutschland Gm                                             bH
MEI CPE Driver, Version 1.2.0

(c) Copyright 2009, Infineon Technologies AG

### MEI CPE - MEI CPE - MEI CPE - MEI CPE ###

ttyS0 at MMIO 0xbe100c00 (irq = 105) is a IFX_ASC
Register ASC (UART) to PMCU.
Lantiq ASC (UART) driver, version 1.0.9, (c) 2001-2011 Lantiq Deutschland GmbH
brd: module loaded
loop: module loaded
Lantiq SSC driver, version 2.2.6, (c) 2001-2011 Lantiq Deutschland GmbH
Register flash device:flash0
7 cmdlinepart partitions found on MTD device ifx_sflash
Creating 7 MTD partitions on "ifx_sflash":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007c0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007c0000-0x0000007d0000 : "config"
0x0000007d0000-0x0000007e0000 : "romfile"
0x0000007e0000-0x0000007f0000 : "rom"
0x0000007f0000-0x000000800000 : "radio"
Lantiq SPI flash driver, version 1.1.9, (c) 2001-2011 Lantiq Deutschland GmbH
ifxmips_gpio: Pin ID 10 (port 0, pin 10) has been reserved by module SFLASH from                                              kernel module!
ifx_dataflash_init status error 255
PPP generic driver version 2.4.2
NET: Registered protocol family 24
IFX SWITCH API, Version 1.1.7.2
SWAPI: Registered character device [switch_api] with major no [81]
Switch API: PCE MicroCode loaded !!
Init IFX_ETHSW_Switch_API_procModule successfully.
Switch Auto Polling value = 0
GPHY FW load for A2x !!
GPHY FIRMWARE LOAD SUCCESSFULLY AT ADDR : 400000
IFX GPHY driver GE Mode, version ifxmips_vr9_gphy: V0.9 - Firmware: 841d
Registered led device: broadband_led
Registered led device: internet_led
Registered led device: usb1_link_led
Registered led device: usb2_link_led
Lantiq LED driver, version 1.0.17, (c) 2001-2011 Lantiq Deutschland GmbH
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (948 buckets, 5120 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Ebtables v2.0 registered
NET: Registered protocol family 8
atmpvc_init() failed with -17
KOAM is loaded successfully.
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
SQUASHFS error: squashfs_read_data failed to read block 0x5ae492
SQUASHFS error: Unable to read metadata cache entry [5ae492]
SQUASHFS error: Unable to read inode 0x10b1027e
------------[ cut here ]------------
WARNING: at fs/inode.c:712 unlock_new_inode+0x34/0x5c()
Modules linked in:
Call Trace:
[<8000b828>] dump_stack+0x8/0x34
[<8002d558>] warn_slowpath_common+0x70/0xb0
[<8009b77c>] unlock_new_inode+0x34/0x5c
[<8009d9d8>] iget_failed+0x1c/0x30
[<800d9e28>] squashfs_fill_super+0x5a4/0x678
[<80089a58>] get_sb_bdev+0x134/0x1ac
[<800d97b4>] squashfs_get_sb+0x20/0x2c
[<80088620>] vfs_kern_mount+0x68/0xfc
[<80088718>] do_kern_mount+0x54/0x124
[<800a214c>] do_mount+0x654/0x708
[<800a2294>] sys_mount+0x94/0xe4
[<80399df4>] mount_block_root+0x144/0x318
[<8039a24c>] prepare_namespace+0x208/0x23c
[<80399388>] kernel_init+0x124/0x148
[<80015e84>] kernel_thread_helper+0x10/0x18

---[ end trace e92530010580f6fb ]---
VFS: Cannot open root device "mtdblock2" or unknown-block(31,2)
Please append a correct "root=" boot option; here are the available partitions:
1f00             128 mtdblock0 (driver?)
1f01            1280 mtdblock1 (driver?)
1f02            6528 mtdblock2 (driver?)
1f03              64 mtdblock3 (driver?)
1f04              64 mtdblock4 (driver?)
1f05              64 mtdblock5 (driver?)
1f06              64 mtdblock6 (driver?)
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,2)
Rebooting in 1 seconds..

Hi gupetulya,
would you mind to explain why you want to go back?
it is easy and you could figure it out by yourself, maybe you did already.
Bytes transferred = 7995392 (7a0000 hex) TP-Link Image
Bytes transferred = 6815748 (680004 hex) OpenWRT-BB Image
I wonder why your erase command is correct but the write is not.
"sf write 0x80800000 0x20000 0x680004" should be "sf write 0x80800000 0x20000 0x7a0000"
so some bits are missing at the end ;-)
did you had rebooting issues with OpenWRT? it is not totally clear from your first post, maybe you can send the console output for your OpenWRT flashed device too, you can switch between the versions as you like.

(Last edited by Wingman2k on 5 Apr 2015, 20:26)

the fact is that I am almost 2 days sitting and could not understand what I'm doing wrong ... but you're a genius, all done without any problem, for it thank you, and why did you decide to flash back, I like to experiment)))

now not working wifi

Hit any key to stop autoboot:  0
VR9 # tftpboot 0x80800000 TD-W8970v1_0.6.0_2.1_up(130415).bin
8192 KiB W25Q64 at 0:3 is now current device
MAC: 00-00-a0-bb-cc-ff
Using vr9 Switch device
TFTP from server 192.168.1.100; our IP address is 192.168.1.1
Filename 'TD-W8970v1_0.6.0_2.1_up(130415).bin'.
Load address: 0x80800000
Loading: T #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #########################
done
Bytes transferred = 7995392 (7a0000 hex)
VR9 # sf erase 0x20000 0x7a0000
Erasing SPI flash...
..........................................................................................................................
Successfully erased 7995392 bytes @ 0x20000
Done
VR9 # sf write 0x80800000 0x20000 0x7a0000

..........................................................................................................................
Successfully programmed 7995392 bytes @ 0x20000
VR9 # reset
ROM VER: 1.1.4
CFG 05

DDR autotuning Rev 1.0
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...

U-Boot 2010.06-svn4806-LANTIQ-v-2.3.08 (Sep 29 2014 - 11:32:13)

CLOCK CPU 500M RAM 250M
DRAM:  64 MiB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   Internal phy(GE) firmware version: 0x8434
vr9 Switch8192 KiB W25Q64 at 0:3 is now current device
MAC: 00-00-a0-bb-cc-ff

run "flash_flash" to bring up the kernel

Hit any key to stop autoboot:  0
8192 KiB W25Q64 at 0:3 is now current device
8192 KiB W25Q64 at 0:3 is now current device
        Uncompressing ...
Starting kernel ...

Lantiq xDSL CPE VR9
mips_hpt_frequency = 250000000, counter_resolution = 2
Linux version 2.6.32.32 (wuzhiqin@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #15 Mon Apr 8 16:02:07 CST 2013
phym = 04000000, mem = 04000000, max_pfn = 00004000
Reserving memory for CP1 @0xa4000000, size 0x00000000
CPU revision is: 00019556 (MIPS 34Kc)
Determined physical RAM map:
User-defined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: root=/dev/mtdblock2 rw rootfstype=squashfs ip=192.168.1.1:192.168.1.2::::eth0:on console=ttyS0,115200 ethaddr=AC:9A:96:F0:28:39 phym=64M mem=64M panic=1 mtdparts=ifx_sflash:128k(boot),1280k(kernel),6528k(rootfs),64k(config),64k(romfile),64k(rom),64k(radio) init=/sbin/init ethwan=
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=0004161c
Readback ErrCtl register=0004161c
Memory: 60632k/65536k available (2855k kernel code, 4832k reserved, 820k data, 184k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:185
Lantiq ICU driver, version 3.0.1, (c) 2001-2011 Lantiq Deutschland GmbH
console [ttyS0] enabled
Calibrating delay loop... 332.59 BogoMIPS (lpj=1662976)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Lantiq PCIe Root Complex driver, version 1.5.3, (c) 2001-2011 Lantiq Deutschland GmbH
bio: create slab <bio-0> at 0
ifx_pcie_rc_class_early_fixup: fixed pcie host bridge to pci-pci bridge
pci 0000:00:00.0: PME# supported from D0 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: PME# supported from D0 D1 D3hot
pci 0000:01:00.0: PME# disabled
pci 0000:00:00.0: PCI bridge, secondary bus 0000:01
pci 0000:00:00.0:   IO window: disabled
pci 0000:00:00.0:   MEM window: 0x1c000000-0x1c0fffff
pci 0000:00:00.0:   PREFETCH window: 0x1c100000-0x1c1fffff
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
gptu: totally 6 16-bit timers/counters
gptu: misc_register on minor 63
gptu: succeeded to request irq 118
gptu: succeeded to request irq 119
gptu: succeeded to request irq 120
gptu: succeeded to request irq 121
gptu: succeeded to request irq 122
gptu: succeeded to request irq 123
IFX DMA driver, version ifxmips_dma_core.c:v1.0.17
,(c)2009 Infineon Technologies AG
Lantiq CGU driver, version 1.1.27, (c) 2001-2011 Lantiq Deutschland GmbH
vpe1_mem = 0
Wired TLB entries for Linux read_c0_wired() = 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
fuse init (API version 7.13)
msgmni has been set to 118
Line: 127, function: deu_init
DMA Referenced PAGE_SIZE = 4096
Infineon Technologies DEU driver version 2.0.0
IFX DEU DES initialized (multiblock) (DMA).
IFX DEU AES initialized (multiblock) (DMA).
IFX DEU ARC4 initialized (multiblock) (DMA).
IFX DEU SHA1 initialized (DMA).
IFX DEU MD5 initialized (DMA).
IFX DEU SHA1_HMAC initialized (DMA).
IFX DEU MD5_HMAC initialized (DMA).
io scheduler noop registered (default)
ifx_pmu_init: Major 252
Lantiq PMU driver, version 1.2.2, (c) 2001-2011 Lantiq Deutschland GmbH
Lantiq GPIO driver, version 1.2.14, (c) 2001-2011 Lantiq Deutschland GmbH
Infineon Technologies RCU driver version 1.0.8
Lantiq LED Controller driver, version 1.0.6, (c) 2001-2011 Lantiq Deutschland GmbH
MEI CPE Driver, Version 1.2.0

(c) Copyright 2009, Infineon Technologies AG

### MEI CPE - MEI CPE - MEI CPE - MEI CPE ###

ttyS0 at MMIO 0xbe100c00 (irq = 105) is a IFX_ASC
Register ASC (UART) to PMCU.
Lantiq ASC (UART) driver, version 1.0.9, (c) 2001-2011 Lantiq Deutschland GmbH
brd: module loaded
loop: module loaded
Lantiq SSC driver, version 2.2.6, (c) 2001-2011 Lantiq Deutschland GmbH
Register flash device:flash0
7 cmdlinepart partitions found on MTD device ifx_sflash
Creating 7 MTD partitions on "ifx_sflash":
0x000000000000-0x000000020000 : "boot"
0x000000020000-0x000000160000 : "kernel"
0x000000160000-0x0000007c0000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
0x0000007c0000-0x0000007d0000 : "config"
0x0000007d0000-0x0000007e0000 : "romfile"
0x0000007e0000-0x0000007f0000 : "rom"
0x0000007f0000-0x000000800000 : "radio"
Lantiq SPI flash driver, version 1.1.9, (c) 2001-2011 Lantiq Deutschland GmbH
ifxmips_gpio: Pin ID 10 (port 0, pin 10) has been reserved by module SFLASH from kernel module!
ifx_dataflash_init status error 255
PPP generic driver version 2.4.2
NET: Registered protocol family 24
IFX SWITCH API, Version 1.1.7.2
SWAPI: Registered character device [switch_api] with major no [81]
Switch API: PCE MicroCode loaded !!
Init IFX_ETHSW_Switch_API_procModule successfully.
Switch Auto Polling value = 0
GPHY FW load for A2x !!
GPHY FIRMWARE LOAD SUCCESSFULLY AT ADDR : 400000
IFX GPHY driver GE Mode, version ifxmips_vr9_gphy: V0.9 - Firmware: 841d
Registered led device: broadband_led
Registered led device: internet_led
Registered led device: usb1_link_led
Registered led device: usb2_link_led
Lantiq LED driver, version 1.0.17, (c) 2001-2011 Lantiq Deutschland GmbH
Mirror/redirect action on
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (948 buckets, 5120 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Ebtables v2.0 registered
NET: Registered protocol family 8
atmpvc_init() failed with -17
KOAM is loaded successfully.
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 184k freed
starting pid 187, tty '': '/etc/init.d/rcS'
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
IFXUSB: ifxusb_hcd: version 3.2 B120208
Chip Version :0002 BurstSize=4
IFXUSB: USB core #0 soft-reset
IFXUSB: USB core #0 soft-reset
ifxusb_hcd ifxusb_hcd: IFX USB Controller
ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 1
ifxusb_hcd ifxusb_hcd: irq 54, io mem 0xbe101000
IFXUSB: Init: Power Port (0)
hotplug, argusb usb1: configuration #1 chosen from 1 choice
s:usb
hotplug, args:usb
.....pidhub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
228: wait the running hotplug to end itself.......
IFXUSB: USB core #1 soft-reset
IFXUSB: USB core #1 soft-reset
ifxusb_hcd ifxusb_hcd: IFX USB Controller
ifxusb_hcd ifxusb_hcd: new USB bus registered, assigned bus number 2
ifxusb_hcd ifxusb_hcd: irq 83, io mem 0xbe106000
IFXUSB: Init: Power Port (0)
hotplug, argsusb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
:usb
hotplug, args:usb

Please press Enter to activate this console. .....pid 228: wait the running hotplug to end itself.......
[ dm_readFile ] 2042:  can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
[ parseConfigNode ] 526:  Meet unrecognized parameter node "X_TPLINK_IsFD", skip the node
Loading A5 (MII0/1 + ATM) driver ...... MAC-0: 00-00-a0-bb-cc-ff
MAC-1: 00-00-a0-bb-cd-00
Succeeded!
PPE datapath driver info:
  Version ID: 64.3.7.1.0.1.4
  Family    : VR9
  DR Type   : Normal Data Path | Indirect-Fast Path
  Interface : MII0 | MII1 | ATM
  Mode      : Routing
  Release   : 0.1.4
PPE firmware info:
  Version ID: 7.2.4.6.2.0
  Family    : VR9
  FW Type   : Acceleration
  Interface : MII0/1 + ATM
  Mode      : Bridging + IPv4 Routing
  Release   : 2.0
IFXOS, Version 1.5.14 (c) Copyright 2009, Lantiq Deutschland GmbH

Lantiq CPE API Driver version: DSL CPE API V4.11.4

Predefined debug level: 3
ifx_ppa_api: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
PPA API --- init successfully
.....pid 228: wait the running hotplug to end itself.......
ifx_ppa_init - init succeeded
sendto: No such file or directory
send 2001 error 244, -1
ath0      no private ioctls.

ath1      no private ioctls.

ioctl: No such device
device eth0.2 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.2) entering forwarding state
device eth0.3 entered promiscuous mode
br0: port 2(eth0.3) entering forwarding state
device eth0.4 entered promiscuous mode
br0: port 3(eth0.4) entering forwarding state
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entering forwarding state
[ rsl_initLanIgmpSnoopObj ] 181:  We need vlan if we want igmp snooping
*********cal_data*******
020500023537707500000000*********end*******
.....pid 228: ath_hal: 0.9.17.1 (AR5212, AR5416, AR9380, RF5111, RF5112, RF2413, RF5413, RF2316, RF2317, REGOPS_FUNC, WRITE_EEPROM, 11D)
wait the running hotplug to end itself.......
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_pci: 9.2.0_U10.1020 (Atheros/multi-bss)
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
__ath_attach: Set global_scn[0]
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
Restoring Cal data from Flash
dfs_attach: use DFS enhancements
DFS min filter rssiThresh = 18
DFS max pulse dur = 151 ticks
ath_get_caps[5105] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[5080] tx chainmask mismatch actual 7 sc_chainmak 0
.....pid 228: wait the running hotplug to end itself.......
Register wlan WPS function, dev=0x82ed4000
Register wlan button on function
Register wlan button off function
wifi0: Atheros ???: mem=0x1c000000, irq=136 hw_base=0xbc000000
ath_netdev_set_macaddr: ffffffff:ffffffff:ffffffff:ffffffff:ffffffff:ffffffff
wlan_vap_create : enter. devhandle=0x82ed42c0, opmode=IEEE80211_M_HOSTAP, flags=0x1
wlan_vap_create : exit. devhandle=0x82ed42c0, opmode=IEEE80211_M_HOSTAP, flags=0x1.
VAP device ath0 created
ath0
DFS min filter rssiThresh = 15
DFS max pulse dur = 151 ticks
ath_netdev_set_macaddr: ffffffff:ffffffff:ffffffff:ffffffff:ffffffff:ffffffff
WARNING: Fragmentation with HT mode NOT ALLOWED!!
Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device ath0 ; Invalid argument.
wlan_setAllCfgFile bridgeName br0
Reading topology file /var/Wireless/topology.conf ...
014.513: Reading radio configuration file /var/Wireless/80211g.ap_radio ...

014.514: Reading bss configuration file /var/Wireless/ath0.ap_bss ...

ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
014.545: upnp_wps_device_init called
l2_packet_receive - recvfrom: Network is down
ni aponly is null!
ni aponly is null!
.....pid 228: wait the running hotplug to end itself.......
ni aponly is null!
.....pid 228: wait the running hotplug to end itself.......
.....pid 228: wait the running hotplug to end itself.......
l2_packet_receive - recvfrom: Network is down
Before hook ppa
PPA REG DONE, if_id=3, dev_if_index = 15
ath1      no private ioctls.

device ath0 entered promiscuous mode
device ath0 left promiscuous mode
brctl: bridge br0: Invalid argument
brctl: iface ath1: No such device
sendto: No such file or directory
send 2030 error 244, -1
ni aponly is null!
.....pid 228: wait the running hotplug to end itself.......
[ apiSetAdslTypeAndAnnexType ] 1369:  /firmware/dsl_cpe_pipe.sh g997xtusecs 05 00 04 00 04 01 00 00
nReturn=0

nReturn=0

nReturn=0 nDirection=0

nReturn=0 nDirection=1

nReturn=4 nDirection=0

nReturn=0 nDirection=1

nReturn=0

iptables: Bad rule (does a matching rule exist in that chain?)
radvd starting
[ oal_dsl_createMainAtmIf ] 2209:  br2684ctl -b -p 1 -c 0 -e 0 -q ubr,aal5:max_pcr=0,min_pcr=0 -a 0.8.35
.....pid 228: wait the running hotplug to end itself.......
........pid 226: pPlugDevId[0]=, plugDevClass[0]=, plugAction[0]=.........
[ oal_dsl_createMainAtmIf ] 2253:  ifconfig nas0 hw ether 7F:FF:FF:FF:FF:00
Interface "nas0" created sucessfully
ifconfig: SIOCSIFHWADDR: Cannot assign requested address
[ oal_dsl_addAtmIf ] 2038:  br2684ctl -b -p 1 -x 1 -c 0 -e 0 -q ubr,aal5:max_pcr=0,min_pcr=0 -a 0.8.35
optarg : ubr,aal5:max_pcr=0,min_pcr=0Interface "nas0_1" created sucessfully
ifconfig: SIOCSIFHWADDR: Cannot assign requested address
ifconfig: SIOCSIFHWADDR: Cannot assign requested address
ifconfig: ioctl 0x8914 failed: Cannot assign requested address
device nas0_1 entered promiscuous mode
device nas0_1 left promiscuous mode
brctl: bridge br0: Invalid argument
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/zebra.pid.
[ getPidFromPidFile ] 112:  Cann't open file: /var/run/ripd.pid.
ifx_ppa_init - init succeeded
iptables: Bad rule (does a matching rule exist in that chain?)
ifx_ppa_init - init succeeded
iptables: Bad rule (does a matching rule exist in that chain?)
ifx_ppa_init - init succeeded
iptables: Bad rule (does a matching rule exist in that chain?)
ip6tables: Bad rule (does a matching rule exist in that chain?)
[ rsl_setStorageServiceObj ] 1140:  mountFlag is 3,We start usb server

killall: ushare: no process killed
........pid 228: pPlugDevId[0]=, plugDevClass[0]=, plugAction[0]=.........
uShare (version 1.1a), a lightweight UPnP A/V and DLNA Media Server.
Benjamin Zores (C) 2005-2007, for GeeXboX Team.
See http://ushare.geexbox.org/ for updates.
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
GPL NetUSB up!
kc   86 : run_telnetDBGDServer start
kc  223 : init_DebugD end
INFO176C: NetUSB 1.02.06, 00020620 : Jun 13 2012 16:37:47
INFO176E:  AUTH ISOC
INFO176F:  filterAudio
usbcore: registered new interface driver KC NetUSB General Driver
INFO0076:  init proc : PAGE_SIZE 4096
INFO17C8: Check mac address
INFO1640:  infomap c13e0994
INFO1643:  sleep to wait br0 to wake up
INFO02D0:  use dev Name br0
INFO164C:  sleep to wait br0 end.
INFO1665:  UDP_BROAD 7437 tcpPort:625868800
INFO02D0:  use dev Name br0
Enable forwarding
INFO154C: tcpConnector() started...
INFO1429: Bind to br0

router works but Wi fi does not work, I'm doing wrong?

Maybe nothing, but maybe you did already. First question is, did you erase the radio partition by accident?
it holds necessary data for the wifi chips, this is atheros related. you might have an backup of your chip stored somewhere.
0x0000007f0000-0x000000800000 : "radio"
without this there is no wifi unless you put valid data back into the radio partition.

root@TD-W8970:~# hexdump  /dev/mtdblock6 -C
00000000  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
0000f100  XX XX XX XX XX XX ff ff  ff ff ff ff ff ff ff ff  |................|
0000f110  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
0000f200  02 a5 6e 9e 00 00 00 00  ff ff ff ff ff ff ff ff  |..n.............|
0000f210  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00010000  88 88 88 88 00 14 22 04  00 14 21 04 00 56 65 04  |......"...!..Ve.|
00010010  00 56 66 04 00 00 00 28  00 00 00 28 00 00 00 00  |.Vf....(...(....|
00010020  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00021000  02 05 00 02 03 04 05 06  00 30 3a 30 32 3a 30 33  |.........0:02:03|
00021010  3a 30 34 3a 30 35 3a 30  36 00 72 6f 00 00 1f 00  |:04:05:06.ro....|
00021020  77 03 00 00 00 00 05 00  00 00 0d 14 06 00 08 ff  |w...............|
00021030  01 00 00 00 00 10 01 00  00 22 22 02 00 50 01 50  |.........""..P.P|
00021040  01 50 01 00 00 00 00 00  00 32 00 a4 00 00 00 00  |.P.......2......|
00021050  ff 00 00 00 00 00 00 00  00 00 00 00 00 00 cd 00  |................|
00021060  0e 0e 03 00 2c e2 01 02  0e 1c 80 c0 80 0c 80 c0  |....,...........|
00021070  80 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00021080  00 00 00 00 00 00 00 00  de de 70 89 a2 f1 00 93  |..........p.....|
00021090  00 00 00 f0 00 93 00 00  00 ee 00 93 00 00 00 f5  |................|
000210a0  00 90 00 00 00 f5 00 92  00 00 00 f5 00 92 00 00  |................|
000210b0  00 f8 00 93 00 00 00 f7  00 94 00 00 00 f5 00 93  |................|
000210c0  00 00 00 70 ac 70 8e ac  70 8e ac 7a 93 a2 1e 1e  |...p.p..p..z....|
000210d0  1e 1e 1e 1e 1e 1e 1e 1e  1c 1a 1e 1e 1c 1a 1e 1e  |................|
000210e0  1c 1a 1e 1e 1e 1e 1e 1c  1c 1a 1a 1a 1a 1a 1a 18  |................|
000210f0  1e 1e 1e 1e 1e 1c 1c 1a  1a 1a 1a 1a 1a 18 1e 1e  |................|
00021100  1e 1e 1e 1c 1c 1a 1a 1a  1a 1a 1a 18 1e 1e 1e 1e  |................|
00021110  1c 1a 1a 1a 1a 1a 1a 1a  1a 18 1e 1e 1e 1e 1c 1a  |................|
00021120  1a 1a 1a 1a 1a 1a 1a 18  1e 1e 1e 1e 1c 1a 1a 1a  |................|
00021130  1a 1a 1a 1a 1a 18 11 12  15 17 41 42 45 47 31 32  |..........ABEG12|
00021140  35 37 70 75 a2 b8 70 75  a2 b8 70 75 a2 b8 70 75  |57pu..pu..pu..pu|
00021150  a2 b8 70 75 ac b8 70 75  ac b8 70 75 ac b8 70 75  |..pu..pu..pu..pu|
00021160  ac b8 70 75 ac b8 70 75  ac b8 70 75 ac b8 70 75  |..pu..pu..pu..pu|
00021170  ac b8 22 62 22 62 18 5c  1a 5a 18 5c 1a 5a 11 55  |.."b"b.\.Z.\.Z.U|
00021180  15 55 3c 7c 3c 7c 3c 7c  3c 7c 3c 7c 3c 7c 3c 7c  |.U<|<|<|<|<|<|<||
00021190  3c 7c 18 58 18 58 18 58  18 58 18 58 18 58 18 58  |<|.X.X.X.X.X.X.X|
000211a0  18 58 10 01 00 00 22 22  02 00 00 00 00 00 00 00  |.X....""........|
000211b0  00 00 00 00 00 00 44 0f  50 58 00 00 00 ff 00 00  |......D.PX......|
000211c0  00 00 00 00 00 00 00 00  00 00 00 de 00 0e 0e 03  |................|
000211d0  00 2d e2 00 02 0e 1c e0  e0 f0 0c e0 e0 f0 6c 00  |.-............l.|
000211e0  00 00 00 00 00 00 00 00  00 43 53 00 00 00 00 00  |.........CS.....|
000211f0  00 00 00 00 00 00 00 4c  54 68 78 8c a0 b4 c5 00  |.......LThx.....|
00021200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00021280  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 4c  |...............L|
00021290  5c 68 8c a0 b4 bd cd 4c  5c 68 8c a0 b4 bd cd 4e  |\h.....L\h.....N|
000212a0  5e 66 8e 9e ae bf c7 20  20 1c 1a 20 20 1c 1a 20  |^f.....  ..  .. |
000212b0  20 1c 1a 20 20 1a 18 20  20 1a 18 20 20 18 16 1e  | ..  ..  ..  ...|
000212c0  1e 18 16 1e 1e 18 16 20  20 20 20 1c 1a 20 1c 1a  |.......    .. ..|
000212d0  18 18 18 16 16 20 20 20  20 1c 1a 20 1c 1a 18 18  |.....    .. ....|
000212e0  18 16 16 20 20 20 20 1c  1a 20 1c 1a 18 18 18 16  |...    .. ......|
000212f0  16 20 20 20 20 1c 1a 20  1a 18 16 16 16 14 14 20  |.    .. ....... |
00021300  20 20 20 1c 1a 20 1a 18  16 14 12 10 10 20 20 20  |   .. .......   |
00021310  20 1c 1a 20 18 14 10 12  10 0e 0e 1e 1e 1e 1e 1c  | .. ............|
00021320  1a 1e 18 14 10 12 10 0e  0e 1e 1e 1e 1e 1c 1a 1e  |................|
00021330  18 14 10 12 10 0e 0e 20  20 20 1e 1c 1a 1e 1c 1a  |.......   ......|
00021340  18 18 18 16 16 20 20 20  1e 1c 1a 1e 1c 1a 18 18  |.....   ........|
00021350  18 16 16 20 20 20 1e 1c  1a 1e 1c 1a 18 18 18 16  |...   ..........|
00021360  16 20 20 20 1e 1c 1a 1e  1a 18 16 16 16 14 14 20  |.   ........... |
00021370  20 20 1e 1c 1a 1e 1a 18  16 14 12 10 10 20 20 20  |  ...........   |
00021380  1e 1c 1a 1e 16 14 10 12  10 0e 0e 1e 1e 1e 1e 1c  |................|
00021390  1a 1e 16 14 10 12 10 0e  0e 1e 1e 1e 1e 1c 1a 1e  |................|
000213a0  16 14 10 12 10 0e 0e 10  16 18 40 46 48 30 36 38  |..........@FH068|
000213b0  4c 54 68 78 8c a0 b9 cd  4c 54 68 78 8c a0 b9 cd  |LThx....LThx....|
*
000213f0  4c 54 68 78 8c a0 b9 cd  3c 7c 3c 7c 3c 7c 3c 7c  |LThx....<|<|<|<||
00021400  3c 7c 3c 7c 3c 7c 3c 7c  3c 7c 3c 7c 3c 7c 3c 7c  |<|<|<|<|<|<|<|<||
*
00021440  ff ff ff ff ff ff ff ff  ff ff ff ff ff ff ff ff  |................|
*
00030000

mine is looking like this, hope it is ok to post it that way, the MAC is stored in there too masked mine with XX XX XX XX XX XX

I did not specifically erased, this router has given me my friend request on his openvrt not right here, and I had to restore .. I'm not good at these things so much. so if you can help me how to get it back in full operation

that incorrect write command is here http://www.pierovdfn.it/2014/08/09/tp-l … 0-openwrt/ which is very high in google searches for openwrt w8970

I'm a little lost with my new TD-W8970B. I connected a serial console and I'm able to tftpboot images.

My problem now is, that I can't find the image 'openwrt-lantiq-xrx200-TDW8970-uImage-initramfs' for the method described in the openwrt wiki. I can't find an image with initramfs/ramdisk support at all :-(

I tried  W8970.img and luci-lantiq-xrx200-TDW8970-sysupgrade.image from here http://tplink-forum.pl/porady-serwisowe/w8970-openwrt/

.. but they also seem to be just sysupgrade images and without initramfs support, because both end up after bootm with:
[...]
[    1.972000] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

Do people exist on this planet, that had success in finding an initramfs-image  and using the method from the wiki??
http://wiki.openwrt.org/toh/tp-link/td-w8970

Thanks

Firmware Version:0.6.0 2.5 v000d.0 Build 140320 Rel.67818n
Hardware Version:TD-W8970B v1 00000000

I've never found or used the "initramfs-image". I was using the boot loader for flashing, described with
the rylos image (load image to ram, erase flash, copy image to flash).

(Last edited by asc on 22 Apr 2015, 22:47)

Ok, thank you, then it obviously does not exist in public. I will try to build/compile  an "initramfs-image" for 14.07 by myself (allthough I never tried that before).  If it fails, then I'll try the procedure with the "rylos-image". I had read about it, but it seemed to be a little dated (2013?), so I wasn't aware, that rylos is still the only available image for the first flash.

you can flash the openwrt-lantiq-xrx200-TDW8970-sysupgrade.image standard image via ftp

#setenv ipaddr 192.168.1.1    #IP of Router
#setenv serverip 192.168.1.254    #IP of tftp Server
#tftpboot 0x80800000 openwrt-lantiq-xrx200-TDW8970-sysupgrade.image
#sf erase 0x20000 0x7a0000    #size of image is 680004 but erase 7a0000
#sf write 0x80800000 0x20000 0x680004    #write image to flash

you can flash the sysupgrade image directly to your router no need for rylos-image for me.

Thank you very much, Wingman2k, for me it comes a little too late, because I build an image with initramfs today and was able to follow the wiki-method. But to other users your howto will be a big simplification and a great help!

Personally  I'm now at the point of searching the firmware-blob vdsl.bin for Annex B. I found a script on my new openwrt-router (BB14.07) named /sbin/vdsl_fw_install.sh, which seems to be a good starting point:

#!/bin/sh
. /lib/functions.sh

FW="/tmp/Firmware_Speedport_W921V_1.20.000.bin"
URL="http://hilfe.telekom.de/dlp/eki/downloads/Speedport/Speedport%20W%20921V/Firmware_Speedport_W921V_1.20.000.bin"
FW_TAPI="vr9_tapi_fw.bin"
FW_DSL="vr9_dsl_fw_annex_b.bin"
MD5_FW="4d812f2c3476dadd738b022c4767c491"
MD5_TAPI="06b6ab3481b8d3eb7e8bf6131f7f6b7f"
MD5_DSL="59dd9dc81195c6854433c691b163f757"

[ -f /lib/firmware/vdsl.bin] && exit 0
[...]

Seems that your "vdsl_fw_install.sh" script is not up to date, the current one is downloading and installing "Firmware_Speedport_W921V_1.21.000.bin" (which is downloadable at the referenced URL). The modem firmware is the same in both versions (same md5sum).

  http://hilfe.telekom.de/dlp/eki/downloa … 21.000.bin

MD5 (vr9_dsl_fw_annex_b.bin) = 59dd9dc81195c6854433c691b163f757

It's also possible to extract the dsl firmware with your PC and put it manually to the router.

If you are interested, you can join the IRC channel #openwrt-td-w8970 at freenode. It's a try to establish this channel (dedicated to TD-W8970).

(Last edited by asc on 23 Apr 2015, 23:29)

Thank you, asc, you pushed me in the right direction. I had success with the excellent work of member s7a7ic here in the thread:
https://forum.openwrt.org/viewtopic.php … 64#p261864

In short: I fetched Firmware_Speedport_W921V_1.21.000.bin from the telekom site and copied it with scp on my router under the fake name /tmp/Firmware_Speedport_W921V_1.20.000.bin, so that the tool /sbin/w921v_fw_cutter on the router can find it (the 1.20-filename is hardcoded in that tool in BB 14.07).

It cuts the vdsl-firmware:

 root@OpenWrt:/tmp# w921v_fw_cutter
Arcadyan Firmware cutter v0.1
-----------------------------
This tool extracts the different parts of an arcadyan firmware update file
This tool is for private use only. The Firmware that gets extracted has a license that forbids redistribution
Please only run this if you understand the risks

I understand the risks ? (y/N)
y
Found partition at 0x00000000 with size 2884608
        This is not lzma
Found partition at 0x002C0400 with size 704512
        This is not lzma
Found partition at 0x0036C400 with size 346112
        Wrote 761108 bytes to /tmp/vr9_dsl_fw_annex_b.bin
Found partition at 0x003C0C00 with size 364544
        Wrote 526476 bytes to /tmp/vr9_tapi_fw.bin

I checked the checksum and copied it in place:

root@OpenWrt:/tmp# md5sum vr9_dsl_fw_annex_b.bin
59dd9dc81195c6854433c691b163f757  vr9_dsl_fw_annex_b.bin

root@OpenWrt:/tmp# cp vr9_dsl_fw_annex_b.bin /lib/firmware/vdsl.bin

For annex b I edited the default /etc/config/network to:

config vdsl 'dsl'
        option annex 'b'
        option firmware '/lib/firmware/vdsl.bin'
        option tone 'bv'
        option xfer_mode 'atm'

I can't test an ADSL connection before monday, but everything looks ok at the moment, the pppd is waiting for responding PADO packets:

logread
[...]
Wed Oct  1 14:21:39 2014 daemon.warn pppd[2300]: Timeout waiting for PADO packets
Wed Oct  1 14:21:39 2014 daemon.err pppd[2300]: Unable to complete PPPoE Discovery
Wed Oct  1 14:21:39 2014 daemon.info pppd[2300]: Exit.

By the way, I found a newer firmware 1.22 at telekom (Firmware_Speedport_W921V_1.22.000.bin) and the contained blob has the same checksum as in 1.20 and 1.21:
59dd9dc81195c6854433c691b163f757  vr9_dsl_fw_annex_b.bin

Great forum, thanks to all!

Hey Hank,
you are one of the few Annex B users here, it would be nice to hear if you are successful.

Hi Hank, good news so far, depending on your Country or ISP you have either atm or ptm if you have ptm (Germany-Telekom) you need to install kmod-ltq-ptm-vr9 and set "option xfer_mode 'ptm'. Maybe also VLAN settings for the pppoe connection later on (Telekom-VDSL), try to check it before to prevent headache.
Good Luck

It works. I had the W8970B on an annex b line today (plain ADSL based on ATM from a german city carrier).

A summary of my first settings:

/etc/config/network:
[...]
config atm-bridge 'atm'                        
        option vpi '1'                         
        option vci '32'                   
        option encaps 'llc'               
        option payload 'bridged'
[...]
config interface 'wan'                    
        option ifname 'nas0'              
        option proto 'pppoe'              
        option ipv6 '1'                   
        option macaddr 'e8:de:27:2e:XX:XX'
        option username 'XXXXXX'      
        option password 'XXXXXX'
[...]
config vdsl 'dsl'                         
        option annex 'b'                  
        option firmware '/lib/firmware/vdsl.bin'
        option tone 'bv'                        
        option xfer_mode 'atm'

The LuCI GUI shows:
TP-LINK TD-W8970
Firmware Version    OpenWrt Barrier Breaker 14.07 / LuCI Trunk (0.12+svn-r10530)
Kernel Version    3.10.49

The sync-LED is on and status-page shows:
ADSL Status   

ADSL     Status: UP
Line State: showtime_tc_sync [0x801]
Line Speed: 4.096 Mb/s / 544 Kb/s
Line Attenuation: 38.4 dB / 27 dB
Noise Margin: 6.2 dB / 9 dB

Although it seems to be synced with 4096 kbps, a first download-test gave me just 1280 kbps, so eventually there is space for some tweaking.

cheers

PS: 28.04.2015
On a high-quality ADSL2+ line I get full speed, so everything is OK with the modem:
ADSL    Status: UP
Line State: showtime_tc_sync [0x801]
Line Speed: 23.608 Mb/s / 1.456 Mb/s
Line Attenuation: 1.1 dB / 0.1 dB
Noise Margin: 9 dB / 10.2 dB

wget: 20mb-testfile.bin        100%[=======================>]  20.00M  2.38MB/s   in 8.5s

(Last edited by Hank on 28 Apr 2015, 14:51)

Hello there, so far still No One has managed to tweak the SNR margin? All my attempts has failed so far and i dont find any good documentation about that. Same about tweaking interleaving delay. There must be a way to do it, maybe through the Modem CLI shell but the documentation is poor about that.

is there anyone using Ambrosa's w8970 chaos calmer builds https://github.com/ambrosa/openwrt-TPLI … ster/BUILD , I cant get it to authenticate using PPPoA, sync is perfect, but the lack of authentication means I cant get online

Not a secret, for a "correct" use take a look to  lantiq_dsl.sh   and get the idea.

For a complete list ssh to your router and type

  /sbin/vdsl_cpe_control --help 

and

  # /sbin/vdsl_cpe_control --console 

(it opens a cli for parameter management, type help)

 DSL_CPE#>help

i try long time ago several ways to change snr, i belive is something like

 DSL_CPE#> locs 0 -20
 DSL_CPE#>acs 2
 DSL_CPE#>quit 

and take a look

  /etc/init.d/dsl_control lucistat 

hi joseba_g

I have a router with firmware openwrt w8971 but I can not change the value snr
I ask you, please, if you can make a more detailed guide, thanks for your help.