Model :

Hardware Version :

Firmware Version :

ISP :

Hello,


I got a MR200 from an ISP on Spain (AC750 Wireless Dual Band 4G LTE Router
Archer MR200, it's the official name)


The ISP is using their own firmware on the router, named FlyBox (but the hardware is just the same, it's the official router from TPLink), and it really sux (full of bugs, etc)


I want to put at first stock firmware from TP-Link, I downloaded it from official web and removed the header of tplink and the lte firmware, I got a file of 8000 kb (bootloader 128kb + firmware 7872kb).


Tried to flash by tftp (because via web, the flybox software won't allow to do that), but it just tries to get the file until 10 retries and then starts to boot normal.


Log from tftp server:


[code]accepting requests..
Open TFTP Server MultiThreaded Version 1.64 Windows Built 2001


starting TFTP...
alias / is mapped to C:\OpenTFTPServer\
permitted clients: all
server port range: all
max blksize: 65464
default blksize: 512
default timeout: 3
file read allowed: Yes
file create allowed: No
file overwrite allowed: No
thread pool size: 1
detecting Interfaces..
Listening On: 127.0.0.1:69
Listening On: 192.168.0.66:69
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout
Client 192.168.1.1:1040 C:\OpenTFTPServer\ArcherC2V1_tp_recovery.bin, Timeout[/code]


Log from router (with serial cable connected to the board):


[code] ETH_STATE_ACTIVE!!
TFTP from server 192.168.0.66; our IP address is 192.168.1.1
Filename 'ArcherC2V1_tp_recovery.bin'.


TIMEOUT_COUNT=10,Load address: 0x80060000
Loading: Got ARP REPLY, set server/gtwy eth addr (70:4d:7b:85:85:de)
Got it
T T T T T T T T T T
Retry count exceeded; starting again
## Booting image at bc020000 ...
Uncompressing Kernel Image ... OK[/code]


I tried many tftp servers on 3 diferent pc's, is not firewall problem or something, I think also the software from ISP is protecting to make this.


Also when router boots, from putty via serial it says:


[code]Archer MR200 login:[/code]


I can log in with user "admin" and pass "1234"


My question is, what I can do to flash bootloader and firmware, any ideas?


Thanks in advance