This post is a shorter version of the one found in the openwrt
mailing lists.
First steps:
1. Unplug your RouterStation (POE cable) and remove wlan cards
2. Set your computers IP to be in the same network as routerstation 192.168.1.* (Don't use the routerstation 192.168.1.20 IP)
3. Set your computer to ping the ip 192.168.1.20 continously (M$ Win cmd "ping -t 192.168.1.20") to see that the RS is there.
4. Press and hold the RS reset button. (RS powered off at this point)
5. Connect the POE cable.
6. Wait for the rf light to show up. Your RS is now in failsafe mode, waiting for tftp-connection.
7. Use
tftpd32 or some other tftp software to upload the new firmware to your RS's IP (192.168.1.20). In this software, it's the tftp Client tab. Enter IP (192.168.1.20) and select the new firmware, and press put.
8. Wait, wait, wait.
9. Eventually it should reboot.
New firmwares can be found from
Ubiquiti Forum for RouterStation. Beware, the UPGRADE version will overwrite Redboot bootloader also.
Ps. Having a serial adapter and a cable to monitor the RouterStation is a very good idea during this process.
My output from the RS serial console during the flashing process:
TFTPD: waiting for connection...
TFTPD: waiting for connection...
TFTPD: waiting for connection...
TFTPD: Incoming connection from 192.168.1.66:50758
Received: 6215536 bytes
Firmware Version: RSx.ar7100.OpenWrt.r15349
Initializing default partitions for 16M flash size.
Created 'kernel' - base: 0xBF030000, mem base; 0x80060000, entry: 0x80060000, size: 0x000E0000
Created 'rootfs' - base: 0xBF110000, mem base; 0xBF170000, entry: 0x00000000, size: 0x00560000
Created 'cfg' - base: 0xBFFD0000, mem base; 0xBFFD0000, entry: 0x00000000, size: 0x00020000
Created 'data' - base: 0xBFBD0000, mem base; 0xBFBD0000, entry: 0x00000000, size: 0x00400000
Updating FIS directory!
... Erase from 0xbfff0000-0xc0000000: .
... Program from 0x83ff0000-0x84000000 at 0xbfff0000: .
Flashing partition 'RedBoot' (size: 0x00030000, actual data: 0x00030000)
... Erase from 0xbf000000-0xbf030000: ...
... Program from 0x8006cd44-0x8009cd44 at 0xbf000000: ...
Flashing partition 'kernel' (size: 0x000E0000, actual data: 0x000E0000)
... Erase from 0xbf030000-0xbf110000: ..............
... Program from 0x8009a31c-0x8017a31c at 0xbf030000: ..............
Flashing partition 'rootfs' (size: 0x00560000, actual data: 0x004E0000)
... Erase from 0xbf110000-0xbf670000: ......................................................................................
... Program from 0x8017a35c-0x8065a35c at 0xbf110000: ..............................................................................
... Resetting.+