OpenWrt Forum Archive

Topic: [SOLVED] Cannot flash Ubiquiti Airrouter anymore

The content of this topic has been archived on 18 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I have already used about 10 or more Ubiquiti Airrouter with OpenWRT 14.07.

I have bought two new units, tried to flash them as usual, using the same openwrt image, and I bricked both units.

By booting in recovery mode I was able to reflash original FW, but it seems that the router cannot boot anymore even with the original FW.

I will open the router and connect a serial cable tomorrow.

What happened to the Airrouter? Are the last units (November 2015)  different from the older ones? (May 2015)

(Last edited by Kurgan on 22 Apr 2016, 19:14)

Sorry I can't help with your issue but I'm just curious as to why you use those particular units?

There are other devices that are faster or cheaper (or both) and have proven OpenWRT vanilla track records.

Ubiquiti updated uboot in the later firmware which stops some of their devices from booting with Openwrt. Get the 5.5.11 and 5.6 version airos firmware from the ubnt site hook up a serial connector to the AP then flash back to 5.11 via urescue. Then use urescue to flash to 5.6 and then you should be able to access the gui to flash back to 5.11. After that flash all future Ubiquiti routers back to 5.11 before flashing with openwrt.

press any key when prompted to stop boot

urescue -f -e
tftp v 5.5.11 to 192.168.1.20

reboot

urescue -f -e

tftp v 5.6.xxx to 192.168.1.20

reboot

gui flash back to 5.5.11

(Last edited by webtron on 21 Apr 2016, 05:43)

Thanks for the prompt and complete answer. I will test this setup soon. This is crazy, anyway. I will not buy Ubiquiti anymore.

npkamen wrote:

Sorry I can't help with your issue but I'm just curious as to why you use those particular units?

There are other devices that are faster or cheaper (or both) and have proven OpenWRT vanilla track records.

Because they where easy to find here in Italy.

I'm more than willing to use different units, if I can find them. Please tell me what do you use.

Thanks Webtron, it worked. I have installed 14.07 because AFAIK 15.05 does not work on this device.

15.05 should work it does for me.

We have tried the steps outlined here, but are not having any luck.

Both firmwares go on fine via urescue and tftp, but the BulletM2 does not boot.  It just stays at "Booting..."


U-Boot 1.1.4.2-s956 (Jun 10 2015 - 10:54:50)

DRAM:  32 MB
Flash:  8 MB
PCIe WLAN Module found (#1).
Net:   eth0, eth1
Board: Ubiquiti Networks XM board (rev 1.0 e2d2)
Hit any key to stop autoboot:  0
ar7240> urescue -f -e
Using environment IP
Boot loader overwrite mode
Starting TFTP server...
Using eth0 (192.168.1.20), address: 0x81000000
Waiting for connection: -
Receiving file from 192.168.1.254:57747
Received 6896662 bytes
Firmware Version: XM.ar7240.v5.5.11.28002.150723.1344
Setting U-Boot environment variables
Un-Protected 1 sectors
Erasing Flash.... done
Erased 1 sectors
Writing to Flash... done
Protected 1 sectors
Copying partition 'u-boot' to flash memory:

First 0x0 last 0x3 sector size 0x10000
.... done
write addr: 9f000000
Copying partition 'kernel' to flash memory:

First 0x5 last 0x14 sector size 0x10000
................ done
write addr: 9f050000
Copying partition 'rootfs' to flash memory:

First 0x15 last 0x7a sector size 0x10000
...................................................................................................... done
write addr: 9f150000

Firmware update complete.

Resetting...

U-Boot 1.1.4.2-s594 (Dec  5 2012 - 15:23:07)

Board: Ubiquiti Networks XM board (rev 1.0 e2d2)
DRAM:  32 MB
Flash:  8 MB
PCIe WLAN Module found (#1).
Net:   eth0, eth1
Hit any key to stop autoboot:  0
## Booting image at 9f050000 ...
   Image Name:   MIPS Ubiquiti Linux-2.6.32.54
   Created:      2015-07-23  10:45:21 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1047481 Bytes = 1022.9 kB
   Load Address: 80002000
   Entry Point:  80002000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Booting...


U-Boot 1.1.4.2-s594 (Dec  5 2012 - 15:23:07)

Board: Ubiquiti Networks XM board (rev 1.0 e2d2)
DRAM:  32 MB
Flash:  8 MB
PCIe WLAN Module found (#1).
Net:   eth0, eth1
Hit any key to stop autoboot:  0
ar7240> urescue -f -e
Using environment IP
Boot loader overwrite mode
Starting TFTP server...
Using eth0 (192.168.1.20), address: 0x81000000
Waiting for connection: /
Receiving file from 192.168.1.254:54037
Received 7537129 bytes
Firmware Version: XM.ar7240.v5.6.4.28924.160331.1253
Setting U-Boot environment variables
Un-Protected 1 sectors
Erasing Flash.... done
Erased 1 sectors
Writing to Flash... done
Protected 1 sectors
Copying partition 'u-boot' to flash memory:
        erasing range 0x9F000000..0x9F03FFFF: .... done
Erased 4 sectors
        writing to address 0x9f000000, length 0x00040000 ...
Copying partition 'kernel' to flash memory:
        erasing range 0x9F050000..0x9F14FFFF: ................ done
Erased 16 sectors
        writing to address 0x9f050000, length 0x00100000 ...
Copying partition 'rootfs' to flash memory:
        erasing range 0x9F150000..0x9F74FFFF: ................................................................................................ done
Erased 96 sectors
        writing to address 0x9f150000, length 0x00600000 ...

Firmware update complete.

Resetting...

U-Boot 1.1.4.2-s956 (Jun 10 2015 - 10:54:50)

DRAM:  32 MB
Flash:  8 MB
PCIe WLAN Module found (#1).
Net:   eth0, eth1
Board: Ubiquiti Networks XM board (rev 1.0 e2d2)
Hit any key to stop autoboot:  0
## Booting image at 9f050000 ...
   Image Name:   MIPS Ubiquiti Linux-2.6.32.68
   Created:      2016-03-31   9:54:32 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1008243 Bytes = 984.6 kB
   Load Address: 80002000
   Entry Point:  80002000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Booting...

Anything else we can try.....?

You should be able to access the gui on 192.168.1.20

webtron wrote:

You should be able to access the gui on 192.168.1.20

We cannot ping nor access the GUI at 192.168.1.20.  The firmware does not appear to startup.  No LED activity, and the console just sits there.

However, we have tried another set of commands on the BulletM2 and have successfully gotten OpenWrt installed with the correct u-boot and all is working.

We will try on a few more Bullets to confirm our process works, and then post the results on here as well as perhaps different devices need slightly different methods.

I managed to get OpenWrt installed and working.  This is what I did.

press any key when prompted to stop boot

urescue -f -e
tftp v 5.5.11 to 192.168.1.20
reboot

urescue
tftp openwrt-factory.bin to 192.168.1.20
reboot

Router then booted correctly, and OpenWRT worked correctly.

My understanding is the -f -e options will force u-boot to be re-written with the one from 5.5, which is the one we want.  Then using urescue without options simply replaced the firmware.  And all seems well.

Hope this helps someone save some devices.

Just FYI, a patch has been created that solves compatibility with the new U-boot version so OpenWRT installs correctly without having to first load 5.5.X.  I have tested on Bullet M2's and it works fine with both old and new U-Boot.  Mathias has tested on other UBNT hardware.

https://dev.openwrt.org/ticket/20982#comment:38

The discussion might have continued from here.