# The original innovator # Zero-purchasing self-salvation: twisted Tenda Tenda AC9 1200M 11AC Gigabit wireless router hard to change the brush trip (pseudo tutorial)

The opening question - the protagonist of this article

Tenda AC9 1200M 11AC Gigabit Wireless Enhanced Router WiFi Wall True Gigabit 269 Yuan High-Quality, Full-Gigabit Solution, Hard-to-Change ASUS Firmware Jingdong Direct Link


Reason for purchase

With the rising standard of living, the photos of the family are growing. At the end of last year, the mother had lost a lot of treasured photos after her mobile phone was replaced. Watching her look sorry, I thought about her own hard drive with dozens of G. The video of the photo, a crappy bite, taking advantage of the New Year's holiday to give the family a group of Hui NAS, is considered to solve the family storage problem.

However, new problems have also come along. Taking into account a bunch of smart hardware, the number of wireless wired devices in the home has added up to 20 units. With NAS, the NAS is directly used as a home storage center, with frequent visits to the internal network. , pc is directly linked to the iscsi play, the original use of the millet routing generation performance has been stretched, taking into account the telecom home bandwidth is already 100M, and soon it should enter the era of ultra-100 trillion, so for a Gigabit routing Things need to be on the agenda.

For stable use, the NAS should access the router in a wired manner. If the telecommunications cat is over 100 megabits, it will also access the cable. Therefore, the newly purchased route must have a Gigabit wired port. It seems that the election, in line with the principle of being able to buy cheap not buy expensive, after referring to several articles in the station, the hardware configuration as the only standard, and finally selected Tenda AC9 as the next core of the five-year plan for home network.

Domestic "Concierge" routing - Tenda Tenda AC9 1200M five full Gigabit dual-band wireless router small test Preface Remember that it is so rare magical day, over the years dragged a half a year's grant suddenly prompted Arrived, although less than expected, it is better than none, then another card receives a subsidy that has been dragged until now in February. Finally, Zhang Aunt’s text message tells me that AC9’s test , this kind of mood must be a little to seize it. Closer to home, this is Tenda's AC9, AC15's "low version", as a nickname can be changed | Like 0 Comments 66 Favourites 54 View Details

璧 璧 瑕 瑕 瑕 家用 家用 家用 家用 家用 T T end end end end end end end end end end end end end end end end end end --------------------------------------- Divided line of broken ideas----- -------------------------------- The front row is fragmented and read: Too long to ignore the party, the landlord complains 233333 It is not a long time to register Zhang Aunt. It is more than a year. Because of severe lazy cancer patients QCfan | Like 0 Comments 121 Collections 213 View Details

In fact, when buying, I only want to say that as long as the workmanship is stable, it will be fine. As for what kind of "smart function"... More than half of them use the NAS to do better, and the other half do not use it basically, so priority is given to tradition. The brand's routers have simple firmware, but the simpler things are less likely to be bad, which is the main reason why Tenda is the brand of choice.

A twist of hard change

It took more than one month after the route was stable to use. Only a very serious problem was discovered. Without the QoS function, the bandwidth management of the firmware is basically equivalent to waste. After several battles and suddenly jumped pings and then turned to find that the leader was watching the video cheerfully, I was bitterly thinking that I couldn't sink so much again! Must act! Give this router to... brush it.

That is to say, because of hardware solutions, there is no mature third-party firmware that can be brushed on this pit of 8M flash memory. Instead, lede has an adapter firmware, but it cannot use 5G signals. 2.4G seems to be unstable. As the main route in the home, it stands proudly in the dozen or so 2.4G hotspots. No 5G is absolutely necessary. Besides, using 2.4G is not the same as the Gigabit port.

So the plan of the brush machine was put on hold until the accident happened. Recently, someone in the Ensan Forum saw that someone had directly replaced the 16M flash memory and brushed into Asus's firmware.

Although some people say that the default ASUS firmware does not have any use, but ... but TM has the QoS I dreamed of! Apart from anything else, the richest family directly took a few chips to dry.

Two days later, the quick delivery of potholes came to the programmer and other utensils. As a result, the clips were sent back to me by mistake. The goods only sent a clip. . . . .

Only clip-free clips

By now, you can only remove the chip and make a backup. . . . . It's time to show true technology!

The first step in replacing flash memory is, of course, to first open the shell and expose the router’s matte circuit board. The simple first step is simply a nightmare. I’ve been using a hair dryer to face the shell. The place where the dark buckle was blown for most of the day, the shell was still unmoved like a clam shell, and I couldn't pull my hands when I was forced. When I gasped with a screwdriver and sighed at the tightly stitched router, I couldn't help thinking about it. The famous lyrics: I want to use this iron stick!

It is unbearable tolerable, dignified seven-foot man how can be blocked by a piece of plastic, you a dignified router, with two screws is not enough to use so many dark buckles, TM work is still so good! You are self-inflicted. Lao Zi does not wait. Directly to EQ Erlian, vigorously miracles, opened the shell at the expense of three dark buckles.

Three cover buckles broken

Fortunately, the circuit board was finally seen.

The following little shot is not clear is the chip we want to replace this time

Since there is no need to remove the clip (line), it is not possible to directly back up the chip data on the board. It seems that it can only be removed as a net.

In fact, before the demolition is still a bit worried about operating something wrong and moths, fortunately, with the help of a hot air gun demolition works everything goes well.

After the demolition (this stitch feels like welding tsop48 up)

The next step is to backup the original data, plug in the programmer, and the old iron walks.

After the original firmware is backed up, the programmer replaces the 16M flash memory, writes the data just extracted, and needs to be verified after writing it. It takes about five minutes and waits patiently.

At this point, the completion of the burning of 16M flash memory, the core replacement plan has been completed half, leaving only this stuff welded back to the board, the victory in front of ah comrades!

Soldering some rosins to the tin before soldering


Desoldering artifact - hot air gun

Everything is ready, pick up the hot air gun, blow it, even if the chip is welded back, check the pins are no problem with soldering stability, it seems that for flash this kind of thing is still very easy thing.

Power on the management page, familiar with Tengda login, familiar formula, the original 8M flash memory data has been completely written into the new 16M flash memory, then only wait for me to enter the ancestral cfe, brush into the ASUS firmware can be a wave It was taken.

But when I follow the online method:

Enter the official CFE Brush method
1. Computer set static IP 192.168.0.111 LAN port
2. Run CMD, ping 192.168.0.1 -t
3. Daisy chrysanthemum, power on, wait 20 seconds to release, see PING pass, TTL=100, browser opens 192.168.0.1, clear NVRM, import firmware into

When I tried to enter the CFE, I couldn't do it anyway. No matter how many times I reset it, I couldn't even ping the router after 20 seconds of rigorous reading. After trying 10 times, I had to suspect that some of the flow just appeared. problem……

This is very embarrassing, seeing that although the route can be used, but if you can not brush the firmware I'm hard to change the flash in the end is to worry about? How can I be worthy of the three dark buckles that have just died! How to afford new programmers and clip-free!

I saw this post in desperation

The landlord said

More detailed programming steps for the programmer's firmware:
1, disassemble backup your flash, 8M must be replaced with 16M.
2. Use winhex to create a 16M file.
1. Edit -> fill in file -> fill with hexadecimal value (fill in FF) -> click OK.
2. Use winhex to open your backup firmware. Start with 0x0000 first address, (right-click on the block start) | position -> go to offset address (3FFFF), OK, right-click to select the end of the fast. Ctrl+C, go to the new 16M file, edit -> clipboard data -> write.
3, download ASUS firmware, use winhex to open, Ctrl+A, Ctrl+C. New 16M file, location -> go to offset address (40000), OK. Edit -> Clipboard Data -> Write.
4. Go to your backup firmware, location -> go to offset address (7F0000), OK, start block selection, position -> go to offset address (7FFFFF), OK, right-click on the end of the selection block. Ctrl+C, go to the newly created 16M file, position -> go to offset address (FF0000), OK, edit -> clipboard data -> write.
3, save the new 16M file. It's your own Brush Programmer firmware. Include all your own router's configuration such as MAC and wireless parts.

This method can just bypass the CFE, allowing me to bypass the CFE without knowing why it can't be used and directly flush the firmware into the chip. It is not too late to follow the tutorial.

Although I do not know what to do anyway

After the production is completed, it will be de-soldering and writing again. This time, it does not need to pass the CEF. As long as the chip is soldered, it is a firmware that has already been brushed. It can be used normally, so the speed is faster. After the chip is soldered, I will be able to use it. A breath: This time, don't give me a mess.

Fortunately, everything went well after power-up. The router turned on ASUS's management page after a series of intense lights flickered. It looked like it was all worry-free.

Finally have QoS used

At this point, the twists and turns of the brush finally came to an end.

Summary (stepped pit)

Full Gigabit is the biggest advantage of this Tenda AC9 at this price point. Thanks to its independent wireless signal amplifier and powerful chip, its stability and coverage of wireless signals also throw off one position in the middle and low end of the route. Coupled with the recent zero-yuan purchase activities and barely usable firmware, it is indeed the best choice for the price of 200 yuan.

The shell of this route is very difficult to dismantle. The small partners who plan to change hard must have the patience and the psychological preparation for the loss of several secret buttons. On the other hand, they must also have the courage to develop miracles and... The strength. The tool that I used to remove the mobile phone's plastic fins was killed in the process of shell removal... In fact, even if the broken screws are still tight after the last screw, there is no need to worry about the last thing. It's not beautiful or something.

The pad of flash memory is still quite large, and basically people who have soldered other things should be able to control this work.

Using the second method to do their own 16M firmware may be due to a variety of reasons such as operational errors and the final size does not equal to 16M, the correct firmware should be strictly equal to 16M, if you do not have the right size of the firmware ... ... that you must be wrong , start again from scratch.


The code word is really hard, if there is any error, please correct me

Tuya EU Smart Switches

Smart Life Switch,Tuya Smart Switch,Smart Power Switch,Tuya Eu Smart Switches

Shenzhen Chaoran Technology Corp. , https://www.chaoran-remote.com