Buffalo AIRSTATION WBR-G54 User manual

... WLA-G54C, WBR2-G54, WBR2-G54S
WARNING: Use only dd-wrt v23 final (25.dec.2005) or v23 SP1 final (16.may.2006). Some beta versions
are buggy and will brick your router.
WARNING: The WAN port and LAN ports could be temporarily swapped
WARNING: Some routers' status lights (LEDs) will not work
WARNING: Reset button will not work
WARNING: Currently no way to go back to original firmware (I did it once, but could not reproduce)
1) Flashing using TFTP [Suggested Method]
Before flashing be sure to restore to factory defaults. Also check if you can connect to the router wirelessly.
Follow directions under Installation#Flashing_the_Buffalo_WHR-G54S_and_WHR-HP-G54
Note for WBR2-G54 users: Users have reported that once they install DD-Wrt, they have been unable to
restore the original Buffalo 2.30 firmware (even via tftp after removing the first 35 bytes). A few users have
reported success with a later version of Buffalo firmware, 2.32, that they obtained through Buffalo Tech
Support; they were able to tftp this 2.32 version, after they had adjusted the header as shown below.
2) Flashing using Buffalo's WEB interface [Alternate Method]
Use the DD-WRT generic version with the added Buffalo header. After successful transfer please wait 2-3
min., or until router reboots.
Inspecting the original Buffalo firmware one can see the custom header (before HDR0).
WBR-G54, WBR-B11 (34 bytes)
00h: 57 42 52 2D 42 31 31 20 32 2E 32 30 20 31 2E 31 ; WBR-B11 2.20 1.1
01h: 36 0A 66 69 6C 65 6C 65 6E 3D 33 32 31 39 34 35 ; 6.filelen=321945
02h: 36 0A ; 6.
WLA-G54 (34 bytes)
00h: 57 4C 41 2D 47 35 34 20 32 2E 30 35 20 31 2E 30 ; WLA-G54 2.05 1.0
01h: 32 0A 66 69 6C 65 6C 65 6E 3D 32 35 34 37 37 31 ; 2.filelen=254771
02h: 32 0A ; 2.
WLA-G54C (35 bytes)
00h: 57 4C 41 2D 42 31 31 43 20 32 2E 32 30 20 31 2E ; WLA-B11C 2.20 1.
01h: 30 35 0A 66 69 6C 65 6C 65 6E 3D 32 37 31 31 35 ; 05.filelen=27115
????Buffalo_WBR-G54?WLA-G54?WBR2-G54?WBR2-G54S...
... WLA-G54C, WBR2-G54, WBR2-G54S 1

02h: 35 32 0A ; 52.
WBR2-G54 (35 bytes)
00h: 57 42 52 32 2D 47 35 34 20 32 2E 33 30 20 36 2E ; WBR2-G54 2.30 6.
01h: 30 33 0A 66 69 6C 65 6C 65 6E 3D 33 35 35 39 34 ; 03.filelen=35594
02h: 32 34 0A ; 24.
WBR2-G54S (36 bytes)
00h: 57 42 52 32 2D 47 35 34 53 20 32 2E 33 30 20 36 ; WBR2-G54S 2.30 6
01h: 2E 31 30 0A 66 69 6C 65 6C 65 6E 3D 33 35 32 36 ; .10.filelen=3526
02h: 36 35 36 0A ; 656.
You will need to insert (prepend) these bytes onto the DD-WRT generic firmware if you want to flash using
Buffalo's WEB interface. You generally need to adjust the "filelen=" number to reflect the size of DD-WRT
(though it may work without these "filelen=" adjustments).
3) Buffalo's default IP address: 192.168.11.1. Router will also listen to this address during boot. It will
answer to pings with TTL=128. (DD-WRT answers with TTL=64)
Buffalo WBR2-G54/WBR2-G54S users: Remember to set the IP address to 192.168.1.1 before continuing.
These white soap boxes' hardware use this IP address in their bootloader. If you have trouble, flash it first with
Generic DD-WRT -firmware, turn off after first boot, and after plugging the power cord back in, wait 2
seconds, press Reset-button, let it enter troubleshoot mode (couple minutes), then power off second time, and
power back on and it should work. Note: Do not turn on device while holding the Reset-button, since that
might signal the bootloader to erase some vital configurations which are known only inside Buffalo Tech. Just
wait 2 seconds and then start holding the button, this signals the WRT firmware to use troubleshoot-mode and
it kind of repairs the NVRAM... (worked for me, Esa Häkkinen 2006-02-02 <[email protected]>)
4) After flash:
You will be able to access the router at 192.168.11.1. Do not restore to factory defaults, but you can erase
the nvram. Telnet to the router (username: root , password: admin , mtd erase nvram [enter], reboot [enter].
Please note: If you do restore to factory defaults, the router will respond at 192.168.1.1. Maybe you will no
longer be able to access the router via LAN ports. Try using the WAN port, or through the wireless
connection (ssid = linksys, ch.6, no encryption). Once you are connected, please telnet to the router and erase
nvram (username: root , password: admin , mtd erase nvram [enter], reboot [enter]. This will bring back the
LAN ports at 192.168.11.1.
Please note: Clearing nvram will also change the MAC addresses from 00:07:40:xx:xx:xx (Melco Inc.) to
00:90:4c:xx:xx:xx (Epigram Inc.). If you need original MACs back, telnet to the router and do the following:
(Use LAN MAC address from the label from router's back side)
nvram set et0macaddr=xx:xx:xx:xx:xx:xx
nvram commit
reboot
You can also clone WAN and WLAN MACs using the GUI interface ("Setup"->"MAC Address Clone")
????Buffalo_WBR-G54?WLA-G54?WBR2-G54?WBR2-G54S...
... WLA-G54C, WBR2-G54, WBR2-G54S 2

You can now enjoy your DD-WRT....
5) Upgrading to new DD-WRT version
Once the router runs DD-WRT, please use the generic version when upgrading firmware. (Starts with HDR0,
i.e. dd-wrt.v23_generic.bin).
last revision: 14.june.2006
????Buffalo_WBR-G54?WLA-G54?WBR2-G54?WBR2-G54S...
... WLA-G54C, WBR2-G54, WBR2-G54S 3