Hlp to debrick RT-AC66U

[timansky]

Last update from merlin bricked my router
Problem is router is in rescue mode - not booting
if i try to reflash image it is not flashing

Spoiler: Flash log

CFE> flash -noheader 192.168.1.2:flash1.trx
flash0.0: Device not found
*** command status = -6
CFE> flash -noheader 192.168.1.2:flash1.trx flash1.trx
Reading 192.168.1.2:flash1.trx: TFTP Client.
- last blk -
Done. 29442048 bytes read
Download of 0x1c14000 bytes completed
Write kernel and filesystem binary to FLASH
Programming...nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
nflash_write: failed with status 0xff
copysize=29442048, amtcopy=-4
Failed.: I/O error

Spoiler: nvram

nvram show
pci/1/1/pa2gw1a0=0x1A2D
pci/1/1/pa2gw1a1=0x1C2D
pci/1/1/pa2gw1a2=0x1971
pci/2/1/mcslr5gmpo=0
boardrev=0x1100
et0macaddr=D8:50:E6:A9:AF:E0
Ate_power_on_off_ret=2
boot_wait=on
watchdog=3000
pci/1/1/ledbh12=7
et0mdcport=0
pmon_ver=CFE 6.30.39.16 (r331229)
vlan2ports=0 8u
pci/2/1/ccode=US
pci/2/1/boardflags=0x10000000
pci/2/1/rxgains5gtrisoa0=7
pci/2/1/rxgains5gtrisoa1=6
pci/2/1/rxgains5gtrisoa2=5
pci/2/1/mcsbw205gmpo=0x99753333
pci/1/1/legofdmbw202gpo=0x74111111
pci/1/1/ag0=0
pci/1/1/ag1=0
pci/1/1/ag2=0
gpio4=wps_button
pci/1/1/legofdmbw20ul2gpo=0x74111111
gpio7=robo_reset
pci/2/1/devid=0x43a2
sromrev=8
boardtype=0xF5B2
pci/1/1/rxchain=7
lan_netmask=255.255.255.0
ntype=0
pci/1/1/cckbw202gpo=0x1111
pci/1/1/mcsbw20ul2gpo=0xDA741111
pci/1/1/pa2gw0a0=0xFE74
pci/1/1/pa2gw0a1=0xFE85
pci/1/1/pa2gw0a2=0xFE75
pci/1/1/parefldovoltage=35
pci/2/1/mcslr5glpo=0
pci/1/1/boardflags=0x00003200
pci/2/1/macaddr=D8:50:E6:A9:AF:E4
pci/2/1/pa5ga0=0xff39,0x1a55,0xfcc7,0xff38,0x1a7f,0xfcc3,0xff33,0x1a66,0xfcc4,0xff36,0x1a7b,0xfcc2
vlan2hwname=et0
pci/2/1/pa5ga1=0xff3a,0x1b0b,0xfcba,0xff38,0x1b37,0xfcb4,0xff37,0x1aa1,0xfcc0,0xff37,0x1aef,0xfcb7
pci/1/1/tempoffset=0
pci/2/1/pa5ga2=0xff3a,0x1b28,0xfcb4,0xff38,0x1aaa,0xfcc2,0xff35,0x1a93,0xfcc1,0xff38,0x1aab,0xfcbe
pci/2/1/mcslr5ghpo=0
odmpid=ASUS
xtalfreq=25000
model=RT-AC66U
pci/1/1/boardvendor=0x14E4
pci/2/1/sb40and80lr5gmpo=0
boardflags2=0x00000000
pci/2/1/rxgains5gelnagaina0=1
pci/2/1/rxgains5gelnagaina1=1
pci/2/1/rxgains5gelnagaina2=1
pci/2/1/mcsbw205glpo=0x99753333
pci/1/1/triso2g=3
pci/1/1/sromrev=9
pci/1/1/extpagain2g=3
pci/2/1/sb20in80and160lr5gmpo=0
wait_time=3
pci/1/1/venid=0x14E4
pci/2/1/mcsbw805gmpo=0x99975333
pci/2/1/dot11agduplrpo=0
pci/2/1/mcsbw205ghpo=0x99753333
secret_code=40124841
pci/1/1/maxp2ga0=0x64
pci/1/1/maxp2ga1=0x64
pci/1/1/maxp2ga2=0x64
pci/2/1/sb40and80hr5gmpo=0
pci/2/1/mcsbw1605gmpo=0
pci/2/1/sb20in80and160hr5gmpo=0
pci/1/1/boardflags2=0x00100000
pci/1/1/tssipos2g=1
pci/2/1/mcsbw405gmpo=0x99975333
pci/1/1/ledbh0=2
pci/1/1/ledbh1=5
pci/1/1/ledbh2=4
pci/2/1/boardtype=0x621
pci/1/1/ledbh3=11
pci/1/1/mcs32po=0x9999
clkfreq=600,300,150
lan_ipaddr=192.168.1.1
vlan1hwname=et0
pci/1/1/legofdm40duppo=0x4444
serial_no=CAIAA2000001
pci/1/1/antswctl2g=0
sdram_config=0x0000
pci/2/1/sb40and80lr5glpo=0
vlan1ports=1 2 3 4 8*
pci/2/1/maxp5ga0=100,100,100,100
pci/2/1/maxp5ga1=100,100,100,100
pci/2/1/maxp5ga2=100,100,100,100
pci/1/1/txchain=7
pci/1/1/elna2g=0
pci/1/1/ATE_Brand=ASUSTek
pci/2/1/sb20in80and160lr5glpo=0
pci/1/1/aa2g=7
pci/1/1/antswitch=0
pci/2/1/sb40and80lr5ghpo=0
pci/2/1/venid=0x14e4
boardflags=0x00000110
wandevs=et0
sdram_refresh=0x0000
pci/2/1/mcsbw805glpo=0x99975333
pci/1/1/temps_hysteresis=5
sdram_ncdl=0x00000000
pci/2/1/boardvendor=0x14e4
hw_version=1.5
pci/2/1/sb20in80and160lr5ghpo=0
pci/1/1/temps_period=5
pci/2/1/mcsbw805ghpo=0x99975333
pci/1/1/cckbw20ul2gpo=0x1111
pci/1/1/leddc=0xFFFF
pci/1/1/pa2gw2a0=0xF999
pci/1/1/pa2gw2a1=0xF924
pci/1/1/pa2gw2a2=0xF9C8
pci/2/1/dot11agduphrpo=0
pci/1/1/phycal_tempdelta=0
pci/2/1/sb40and80hr5glpo=0
pci/2/1/boardnum=21059
et0phyaddr=30
bl_version=1.0.1.0
pci/2/1/sb20in40lrpo=0
pci/2/1/mcsbw1605glpo=0
pci/2/1/sb20in80and160hr5glpo=0
pci/2/1/sb40and80hr5ghpo=0
landevs=vlan1 wl0 wl1
pci/2/1/mcsbw405glpo=0x99975333
pci/2/1/boardrev=0x1305
pci/1/1/ccode=US
pci/2/1/mcsbw1605ghpo=0
pci/2/1/sb20in80and160hr5ghpo=0
pci/2/1/mcsbw405ghpo=0x99975333
sdram_init=0x0000
pci/2/1/boardflags2=0x00300002
pci/2/1/boardflags3=0x0
regulation_domain=US
pci/1/1/pdetrange2g=0
pci/1/1/regrev=0
regulation_domain_5G=US
pci/1/1/devid=0x4332
pci/2/1/regrev=0
pci/1/1/tempthresh=120
pci/1/1/macaddr=D8:50:E6:A9:AF:E0
pci/1/1/mcsbw402gpo=0xFC963333
pci/2/1/sb20in40hrrpo=0
boardnum=00
pci/2/1/rxgains5gtrelnabypa0=1
pci/2/1/rxgains5gtrelnabypa1=1
pci/2/1/rxgains5gtrelnabypa2=1
bootflags=1
pci/1/1/mcsbw202gpo=0xDA741111
size: 3861 bytes (61675 left)
*** command status = 0

 

[hggomes]

Try to nvram erase and reboot.

 

[timansky]

already tried, something wrong while progaming adn could not find any details about error

 

[tObber166]

Have you tried Firmware Restoration utility?

 

[timansky]

yes, flashing always ends with nflash_write: failed with status 0xff

 

[bbunge]

Check the version of the AC66U. There is a B1 version with front USB port that uses a different firmware.

 

[TonyH]

yes, flashing always ends with nflash_write: failed with status 0xff

Can you ping the router? If so, what is the TTL value?

 

[hggomes]

He can ping it, the router is in Recovery Mode, TTL=100.

 

[TonyH]

Then time to try tftp.

 

[Xentrk]

There are good instructions on how to tftp firmware on dd-wrt.com. I used it to flash Merlin FW on the first one I bought as I was getting error msg when trying to flash via web GUI. Worked great. Luckily, it was a one time issue and the two I purchased afterwards did not have this problem.