Tuesday, June 29, 2010

Hacking the WGR614v10 - Part 2

"Upgrading" from 54Mpbs to 150Mpbs

Note: This tutorial is now obsolete. The official Netgear firmware for the WGR614v10 now allows Wireless-N speeds up to 150Mbps. But you're still welcome to follow along if you're interested in the "educational" factor. :)

I remember way back when caller ID first came out for landlines. I thought it was the neatest thing since socks. I just had to get myself one of those spiffy caller ID boxes. And so I did. It was a CIDCO, model something, I don't recall now. It had a 30-call memory so at the 30th call, you had to start deleting. As it turns out, it had a 90-call memory. "Eh? You just said it had a 30-call memory." Yes, I did. You see, the 30-call and 90-call boxes were essentially the same. The difference was the 30-call was intentionally "crippled" by CIDCO. But this cripple could be made, bigger, stronger, faster. Well, bigger at least. All you had to do was pop the box open and desolder one specific jumper and BAM!, you had a 90-call box for the price of 30-call. So what's this all have to do with the price of tea in China? Well, it's the same ballgame with the WGR614v10. The WGR614v10 has a top wireless speed of 54Mbps but has the same underlying hardware as a 150Mpbs capable router; it's just crippled. But we can make it faster. :) If you plan on trying out what I'm about to explain and aren't too handy with a soldering iron, don't worry, you won't need one for this; however, you should be aware this is a potentially unsafe procedure and it's possible to brick your router. With that said, I had no issues performing this procedure and my router works just fine. Now, to the "upgrading" part.

To perform the upgrade you will need 3 things:
Before starting, I would strongly recommend you either backup your existing firmware or download the latest stock version. The original stock firmware, named WGR614v10.chk, can also be located on the Netgear Resource CD that came with your router. There's also a recovery utility located on the CD if things go bad.

Ok, here we go.

  • Step 1:  Enable telnet on your router and telnet in by opening a command console and typing  telnetenable 192.168.1.1 C03F0E34675C Gearguy Geardog and press enter. You will need to replace C03F0E34675C with the mac address of your router, which can be found on the back of your router or on the box that the router came in. Next type telnet 192.168.1.1 and press enter. If everything worked correctly, you should now see something like:

  • Step 2:  Now we're going to change the nvram board_id value to U12H139T00_NETGEAR by typing burnboardid U12H139T00_NETGEAR and pressing enter. This is necessary because when we attempt to update the firmware the router will check the new firmware version against the value stored in nvram. If the values don't match, then we have a no go.
  • Step 3: Reboot the router by typing reboot and pressing enter. Wait for the router to come back online and login to the router via the web interface (http://192.168.1.1).
  • Step 4:  Now we're going to upload the new firmware via the web interface. To do so, click on the "Router Upgrade" left menu link. Click on the "Browse" button, locate and select the firmware file that you downloaded (WNR1000v3-V1.0.2.4_39.0.39.chk) then click the "Upload" button.


  • Note: The upload process will take a minute or two. DO NOT power off or reset your router until it is complete!
  • Step 5:  Reset your router to the factory default settings (per the new firmware) by pressing and holding the reset button, located on the back of your router, for approximately 5 seconds until the power light begins to blink, then release. Refer to your router's help manual if you need additional information on how to perfom a reset.
  • Step: 6  Login into your router via the web interface to configure the router's settings.

    Chances are you will be unable to connect to your router wirelessly at this point. Simply remedy this by connecting your computer to the router directly via ethernet cable. Once connected via cable, login to the web interface and change the "Region" setting, located by clicking "Wireless Settings" under the "Setup" section, to whatever region you're located in. This occurs because the firmware we're using is actually an "international" firmware and different countries/regions have different laws/regulations regarding radio frequency. The Region selection ultimately determines the operating frequency corresponding to the channel you select.

That's it! If everything went accordingly, you should now have a 150Mpbs router. Cheers! :)

12 comments:

  1. Hello! I just finished running through your instructions and it worked great. One issue I had was that the computer i updated the router with couldn't connect with the router via LAN right after the reset, but a computer reboot fixed that. Thanks for pitting this up. I've looked everywhere on the net for a easybto understand hack for this, and yours is the best I've seem. Thanks!

    ReplyDelete
  2. How has this been working for you? Do you have any tests showing N speeds from it?

    ReplyDelete
  3. There is now a MUCH easier way...

    Go to Netgear.com, get the latest firmware, and flash it thru the router's web interface.

    Can't get much easier than that...

    ReplyDelete
  4. So now all I have to do is download the latest WNR1000 firmware on my wgr614 and it will have 150mbps speed?

    ReplyDelete
  5. @Ryan Thanks. Glad you found it helpful!

    @Cubical Seems to be working fine. Haven't had any issues. I don't have any results on-hand but I tested at the time of update, the speeds were fairly good. +100M avg at least, if I recall correctly. I should note that my physical setup is somewhat limited so signal isn't quite optimal.

    @Anonymous(November 1, 2010 10:42 AM) Just to clarify, you've flashed the WGR614v10 with the WNR1000 firmware via the web interface? I'm slightly incredulous. No offense, of course. :)

    ReplyDelete
  6. Actually, Anonymous is correct. Netgear's latest firmware is identical for both routers (except for the first handful of bytes which contain the respective board IDs). Instead of changing your board ID just downoad the correct one for your router.

    ReplyDelete
  7. @Philip Ah, yes, I'm aware the WGR614 now has 150Mps speeds enabled with the newer *WGR614* fw. I was just a little confused by Anonymous's comment. I thought perhaps they were saying they flashed the WGR614 with the WNR1000 fw via the web interface, which, of course, is not possible without changing the board id.

    ReplyDelete
  8. Hi,

    I followed your steps. The telnetenable command went through fine. But I am unable to telnet into the router. I just get a blank screen. Any help?

    ReplyDelete
  9. Ok I just figured out that I need to give the MAC address in all Capitol letter! Voila.. it worked

    ReplyDelete
  10. Fantastic! With a little fiddling-around, it worked like a charm. I'm confused by the comments from last November though.. if the WGR614v10 fw now unlocks 150Mbs, is there any reason to turn it into a WNR1000v3, besides the cool factor? I see where they use almost identical firmware. Did Netgear just *shrug* and turn the WGR614v10 into an 814.11N router since people will hack it anyways, or am I missing something?

    Anyways, thanks for the tutorial Wesley, that was educational and interesting. Sometimes doing it the hard way is a lot more fun.

    ReplyDelete
  11. @Syd Thanks for the comment! Actually, no, there's really no reason to "convert" to a WNR1000v3 since the newer Netgear firmware now allows Wireless-N speeds (150Mbps). I suppose this tutorial is now rather obsolete. :(

    I'm scratching my head as to why Netgear did this, but it's a good thing I suppose.

    And I agree! Doing it "longhand" is much more fun and interesting!

    ReplyDelete
  12. @Wesley; fast-forward a few years... this conversion is still relevant, because the latest WNR1000v3 firmware (1.0.2.68 released 18Jun2014) has quite a few fixes beyond the latest WGR614v10 release (1.0.2.60 - 26Dec2013).

    -But- ...another good reason to do this is that the latest WNR .68 uses the newer telnet enable utility (http://wiki.openwrt.org/toh/netgear/telnet.console) that requires your Web GUI login/password and -not- a hard-coded backdoor login/password.

    WGR .58 actually synced up with WNR .62. However, the latest WGR .60 only added one (uPnP/NOTIFY fix) of the many updates in WNR .68. For all of them:
    http://kb.netgear.com/app/answers/detail/a_id/25126

    I initially just tried HEX editing the WNR file to match the WGR board ID, but I could never get this to work. The telnet enable and burnboardid worked fine though (after reset/reboot).

    The Web GUI seems a lot better and faster too; but could be a placebo as I didn't use the previous one for long (updated from stock to .60 when the HEX edit didn't work; only used it for ~5 minutes).

    ReplyDelete