sorenpoulsen.com header

Install OpenWRT on Linksys WRT3200ACM

Hey you with the Linksys router! OEM firmwares are chock-full of security vulnerabilities that never get fixed and blatant factory backdoors. Flash it with the OpenWRT Linux firmware now. Get it done :)

All you need is an Ethernet cable to connect your computer to the router and you're ready to flash. If you have an ultrabook with no Ethernet port, then get a cheap USB to Gigabit Ethernet adapter.

Photo of flashing OpenWRT firmware on a Linksys WRT3200ACM router

Download firmware

Go to OpenWRT's Table of Hardware.

Search for "wrt3200" in the model column.

Screenshot of Searching for Linksys WRT3200ACM in OpenWRT's Table of Hardware

Follow the link to the linksys_wrt3200acm device page and download the firmware linked in the Firmware OpenWRT Install column.

Screenshot of downloading the OpenWRT firmware for the Linksys WRT3200ACM router

Currently there is only one official hardware version of the router.

Flashing the router could brick it. The equipment manufacturer made a secret hardware revision in Nov 2017 causing an endless bootloop on new devices. This was fixed and there are currently no known issues, but there are no guarantees.

Flash the firmware

Connect your computer with an Ethernet cable to a LAN port on the router.

Don't flash the router over a wireless connection! After flashing the device, the radios are disabled. The only way to configure them, is over a wired connection, plus there is less risk of a disconnect while flashing.

You can leave the Internet port on the router connected to the Modem or Media Converter provided by your ISP, but it's not required at this point.

Open the Linksys OEM firmware on http://192.168.1.1/ and sign in with the password you saved, when the router was first set up. If you didn't follow the guided setup, the password might still be 'admin'.

Screenshot of Sign in to the Linksys WRT3200ACM EOM firmware page

Navigate to the Connectivity page, choose the OpenWRT firmware file that you downloaded previously and click Start.

Screenshot of updating the router firmware

You will get a warning of "Unrecognized file name". Just click to continue and be patient while it's flashing.

When you are asked to reboot click "Yes".

After a while you get a warning "Router is not found". That's because the old OEM web application doesn't recognize the new firmware.

You are now ready to configure OpenWRT.

Change the root password

Open OpenWRT's web console LuCI at http://192.168.1.1/ and sign in with a blank password.

Navigate to System -> Administration and change the root password.

Screenshot of changing OpenWRT's root password

Set up wireless network

Navigate to Network -> Wireless.

Each radio in the Wireless Overview is followed by a row with the wireless network that the radio is associated with.

Radio0 operates the 5 GHz band for the 802.11 n or ac wireless networks. 

Radio1 operates the 2.4GHz band for the 802.11 b, g or n wireless networks.

Radio2 is used for radar detection in the extra 5 GHz DFS channels with a small antenna that's inside the housing of the WRT3200ACM, but I believe it's not supported by the open source WiFi driver. We will leave it alone.

Screenshot of configuration of the wireless networks in OpenWRT's LuCI web console

Set up the 802.11bgn wireless network on the 2.4Ghz radio

Click the Edit button of the default wireless network with SSID: OpenWRT in the row below radio1 Marvell 88W8964 802.11bgn.

Screenshot of setting up 802.11bgn wireless network

In the popup window there are two levels of tabs, that unfortunately have the same names. Let's deal with the topmost row of tabs under Device Configuration first.

In the General Setup tab set Mode to "N", Channel to "Auto" and Width to "20 MHz".

802.11n is backwards compatible with b and g, so that should cover all our needs in the 2.4 GHz band.

In the Advanced Settings tab, set the Country Code of your country to comply with national regulation for use of radio frequencies.

Screenshot of setting up the 2.4 GHz wireless network

In the lower set of tabs under Interface Configuration pick a new name for your 2.4 GHz network in the ESSID field.

Open the Wireless Security tab.

Set Encryption to "WPA2-PSK (Strong security)".

Enter a _long_ key, preferably a passphrase of at least 3 or 4 words that one would never find together in a sentence in any book in this world.

Check "Enable key reinstallation (KRACK) countermeasures".

Finally click Save.

Screenshot of setting up wireless security

Back in the Wireless Overview page click the Save and Apply button at the very bottom of the page and then the Enable button on the wireless network you just finished configuring.

It takes about half a minute for the network to activate. Until that happens the radio still shows "Device is not active".

Set up the 802.11nac wireless network on the 5 GHz radio

In the Wireless Overview click the Edit button of the wireless network in the row just below radio0 Marvell 88W8964 802.11nac.

Screenshot of setting up 802.11nac wireless network

In the General Setup tab set Mode to "AC", Channel to "Auto" and Width to "160 MHz".

The rest of the settings are more or less the same as the 2.4 GHz wireless network.

Pick a new name for the 5 GHz band wireless network in the ESSID field and apply the same country code and security settings as the 2.4 GHz wireless network.

Finally Save and Apply on the Wireless Overview and Enable the 5 GHz network.

Congratulations you have achieved WIRELESS FREEDOM!

{{model.usr.name}}
{{cmt.user.name}}
{{cmt.user.name}}
{{childcmt.user.name}}
{{childcmt.user.name}}