Install OpenWRT on Linksys WRT3200ACM

Hey you with the Linksys router! OEM firmwares are chock-full of security vulnerabilities that never get fixed and blatant factory backdoors. Flash it with the OpenWRT Linux firmware now. Get it done :)

All you need is an Ethernet cable to connect your computer to the router and you're ready to flash. If you have an ultrabook with no Ethernet port, then get a cheap USB to Gigabit Ethernet adapter.

Download firmware

Go to OpenWRT's Table of Hardware.

Search for "wrt3200" in the model column.

Follow the link to the linksys_wrt3200acm device page and download the firmware linked in the Firmware OpenWRT Install column.

Currently there is only one official hardware version of the router.

Flashing the router could brick it. The equipment manufacturer made a secret hardware revision in Nov 2017 causing an endless bootloop on new devices. This was fixed and there are currently no known issues, but there are no guarantees.

Flash the firmware

Connect your computer with an Ethernet cable to a LAN port on the router.

Don't flash the router over a wireless connection! After flashing the device, the radios are disabled. The only way to configure them, is over a wired connection, plus there is less risk of a disconnect while flashing.

You can leave the Internet port on the router connected to the Modem or Media Converter provided by your ISP, but it's not required at this point.

Open the Linksys OEM firmware on http://192.168.1.1/ and sign in with the password you saved, when the router was first set up. If you didn't follow the guided setup, the password might still be 'admin'.

Navigate to the Connectivity page, choose the OpenWRT firmware file that you downloaded previously and click Start.

You will get a warning of "Unrecognized file name". Just click to continue and be patient while it's flashing.

When you are asked to reboot click "Yes".

After a while you get a warning "Router is not found". That's because the old OEM web application doesn't recognize the new firmware.

You are now ready to configure OpenWRT.

Change the root password

Open OpenWRT's web console LuCI at http://192.168.1.1/ and sign in with a blank password.

Navigate to System -> Administration and change the root password.

Set up wireless network

Navigate to Network -> Wireless.

Each radio in the Wireless Overview is followed by a row with the wireless network that the radio is associated with.

Radio0 operates the 5 GHz band for the 802.11 n or ac wireless networks. 

Radio1 operates the 2.4GHz band for the 802.11 b, g or n wireless networks.

Radio2 is used for radar detection in the extra 5 GHz DFS channels with a small antenna that's inside the housing of the WRT3200ACM, but I believe it's not supported by the open source WiFi driver. We will leave it alone.

Set up the 802.11bgn wireless network on the 2.4Ghz radio

Click the Edit button of the default wireless network with SSID: OpenWRT in the row below radio1 Marvell 88W8964 802.11bgn.

In the popup window there are two levels of tabs, that unfortunately have the same names. Let's deal with the topmost row of tabs under Device Configuration first.

In the General Setup tab set Mode to "N", Channel to "Auto" and Width to "20 MHz".

802.11n is backwards compatible with b and g, so that should cover all our needs in the 2.4 GHz band.

In the Advanced Settings tab, set the Country Code of your country to comply with national regulation for use of radio frequencies.

In the lower set of tabs under Interface Configuration pick a new name for your 2.4 GHz network in the ESSID field.

Open the Wireless Security tab.

Set Encryption to "WPA2-PSK (Strong security)".

Enter a _long_ key, preferably a passphrase of at least 3 or 4 words that one would never find together in a sentence in any book in this world.

Check "Enable key reinstallation (KRACK) countermeasures".

Finally click Save.

Back in the Wireless Overview page click the Save and Apply button at the very bottom of the page and then the Enable button on the wireless network you just finished configuring.

It takes about half a minute for the network to activate. Until that happens the radio still shows "Device is not active".

Set up the 802.11nac wireless network on the 5 GHz radio

In the Wireless Overview click the Edit button of the wireless network in the row just below radio0 Marvell 88W8964 802.11nac.

In the General Setup tab set Mode to "AC", Channel to "Auto" and Width to "160 MHz".

The rest of the settings are more or less the same as the 2.4 GHz wireless network.

Pick a new name for the 5 GHz band wireless network in the ESSID field and apply the same country code and security settings as the 2.4 GHz wireless network.

Finally Save and Apply on the Wireless Overview and Enable the 5 GHz network.

Congratulations you have achieved WIRELESS FREEDOM!