Slickdeals is community-supported.  We may get paid by brands for deals, including promoted items.
Heads up, this deal has expired. Want to create a deal alert for this item?
expired Posted by dailydealsforme • Jan 24, 2019
expired Posted by dailydealsforme • Jan 24, 2019

T-Mobile TM-AC1900 WiFi CellSpot Router (Certified Pre-Owned)

+ Free S/H

$40

$109

63% off
T-Mobile
874 Comments 211,928 Views
Visit T-Mobile
Good Deal
Save
Share
Deal Details
Update: If item appears to show out of stock, you may try another web browser or try again later.

T-Mobile.com has T-Mobile TM-AC1900 WiFi CellSpot Router (Certified Pre-Owned) on sale for $49.99 - Extra $10 off w/ promo code CPOROUT (apply in cart) = $39.99. Shipping is free. Thanks dailydealsforme

Note, be sure to select the "No credit check" option before adding item to cart.

Includes
  • T-Mobile TM-AC1900 WiFi CellSpot Router
  • 3x External Dual-Band Detachable Antennas
  • Power Adapter
  • RJ-45 Cable

Editor's Notes

Written by Discombobulated | Staff
Be sure to apply your promo code while in cart to receive discount. Offer valid for online p purchase only - Discombobulated

Original Post

Written by dailydealsforme
Community Notes
About the Poster
Deal Details
Community Notes
About the Poster
Update: If item appears to show out of stock, you may try another web browser or try again later.

T-Mobile.com has T-Mobile TM-AC1900 WiFi CellSpot Router (Certified Pre-Owned) on sale for $49.99 - Extra $10 off w/ promo code CPOROUT (apply in cart) = $39.99. Shipping is free. Thanks dailydealsforme

Note, be sure to select the "No credit check" option before adding item to cart.

Includes
  • T-Mobile TM-AC1900 WiFi CellSpot Router
  • 3x External Dual-Band Detachable Antennas
  • Power Adapter
  • RJ-45 Cable

Editor's Notes

Written by Discombobulated | Staff
Be sure to apply your promo code while in cart to receive discount. Offer valid for online p purchase only - Discombobulated

Original Post

Written by dailydealsforme

Community Voting

Deal Score
+155
Good Deal
Visit T-Mobile
Leave a Comment
To participate in the comments, please log in.

Top Comments

If I had to write a full up-to-date guide, it would be this:
(Up to date as of 5/2/19 with suggestions in this and later threads)
How to flash TM-AC1900 to RT-AC68U:

Install WinSCP, Putty, and a file archiver (click this link to download all 3 [ninite.com]). Install the Asus Restore Utility [asus.com], mirror [filedropper.com].
Connect your computer to the *yellow* port on the router by way of an Ethernet (LAN) cable
Check if SSH can be enabled - if so, enable it and jump to step #15
Go to Administration > System > Enable SSH > Yes > Apply
Ezlink: http://192.168.29.1/Advanced_System_Content.asp
Create a folder on your desktop, name it "router".
Download this file [mega.nz] and extract it to the newly made router folder. It contains a firmware to downgrade to, a firmware to upgrade to, and mtd-write.
Download firmware version 3.0.0.4.384.20308 from here [softpedia.com] and unzip the file
Disconnect the cellspot router from the internet if you haven't already
Set static IP for PC.
start > run > ncpa.cpl > double click Ethernet > properties > IPV4 >
IP: 192.168.29.5
Subnet: Default (255.255.255.0)
Gateway: 192.168.29.1
Place router into Recovery/Restore mode
a. Hold reset button 10 seconds
b. Power off router (keep holding reset)
c. Wait 10 seconds, keep holding reset
d. Power on router holding reset for 10 more seconds
Go to 192.168.29.1 in a web browser - you should see ASUSTek CFE miniWeb Server
If Mini-CFE webpage won't load, try Chrome Incognito mode, else use Asus Restore Utility (linked in #1)
If having trouble with this step perform NVRAM Reset (see #24) and try #9 again
Flash TM-AC1900_3.0.0.4_376_1703-g0ffdbba.trx from the "router" folder you created (hit the choose button, select the file, hit upload)
Wait for reboot at least 5 mins – WiFi lights on router will turn on when boot is complete
Log in to router (admin:password)
Go to Administration > System > Enable SSH > Yes > Apply
Ezlink: http://192.168.29.1/Advanced_System_Content.asp
Open Putty and WinSCP and connect them to 192.168.29.1 using a admin:admin or admin:password
Tip: In WinSCP select SCP as file protocol, in Putty SSH
In Putty type:
cat /dev/mtd0 > original_cfe.bin
In WinSCP refresh the window on the right side and note that original_cfe.bin is present
Copy original_cfe.bin to a local drive
Download the new .bin
a. Upload original_cfe.bin to http://cfeditor.pipeline.sh/
b. Select 1.0.2.0 US AiMesh as Source CFE for Asus/Merlin builds, (1.0.2.5 recommended for DD-WRT or Tomato)
c. Click Download
Rename the new .bin file to "new_cfe.bin"
Through WinSCP, Upload new_cfe.bin & mtd-write & FW_RT_AC68U_30043763626.trx to router
In Putty type:
chmod u+x mtd-write
./mtd-write new_cfe.bin boot
mtd-write2 FW_RT_AC68U_30043763626.trx linux
Wait until the CRC OK message comes up
Perform NVRAM Reset
a. Power off router
b. Wait 10 seconds
c. Press and hold WPS button
d. Power up the router and continue to hold WPS button for 15-20 seconds until power LED starts blinking very quickly.
e. wait 5 minutes
Reset PC IP back to default
Log in to router using 192.168.1.1 and the router is now an RT-AC68U with 64MB jffs
username:/password is now: admin:admin
If router isn't showing RT-AC68U, try Chrome Incognito Mode
Enable SSH (see #14) Ezlink: http://192.168.1.1/Advanced_System_Content.asp
Reconnect Putty (see #15)
In Putty, execute the code for fixing MTD5 partition.
cat /dev/mtd5 > /jffs/mtd5_backup.bin
mkdir /tmp/asus_jffs
mount -t jffs2 /dev/mtdblock5 /tmp/asus_jffs
rm -rf /tmp/asus_jffs/*
sync && umount /tmp/asus_jffs
ln -s /sbin/rc mtd-erase
In the router page, go to Administration > Firmware and upload RT-AC68U_3.0.0.4_384_20308-gead790e.trx
This is the file you downloaded in step #6
Perform NVRAM Reset (see #24)
Enable SSH (see #14) Ezlink: http://192.168.1.1/Advanced_System_Content.asp
When going back into the router at this point, it may prompt you to update the username/password, not allowing you to go directly to enable ssh
Make sure you don't forget what you change the username/password to
Reconnect Putty (see #15)
In Putty, execute the code for fixing MTD5 partition.
mkdir /tmp/asus_jffs
mount -t jffs2 /dev/mtdblock5 /tmp/asus_jffs
rm -rf /tmp/asus_jffs/*
sync && umount /tmp/asus_jffs
ln -s /sbin/rc mtd-erase
./mtd-erase -d asus
rm -rf /jffs/.sys/RT-AC68U
nvram unset fw_check && nvram commit && reboot
You now can (and should) flash an updated firmware, such as Asus, Merlin, Advanced Tomato, Tomato, and DD-WRT firmwares.
To flash newer Asus firmwares at this point, go to the router page, go to Administration > Firmware and upload the latest firmware from this page [asus.com].
At this point, for security purposes I'd recommend to either disable SSH or change it to 'LAN only". Also, definitely change both the default login id and password.


Additional Notes:

Yes, step 34 is partially redundant, but this is the way I did it twice and it caused no issues.
If you complete all the steps successfully, but you plug in the router to your network and there is no internet, your cable/fiber modem may coincidentally be on the same default IP as the router is. To fix this, go to the router webUI and on the status page you'll see an error stating an IP conflict which you can click so the router will change itself to a different IP
if you want to set up AiMesh, follow these steps


Feel free to message me if you get stuck, I may not respond immediately but I will try to help
No, it is something Tmobile would issue to customers who had bad reception in their home. This doesn't broadcast mobile wireless signal, just regular wifi. Since TMobile uses wifi calling the idea is stronger wifi in your house will alleviate their weak network.

It does not connect to the Tmobile network, and does not require Tmobile service. It will not give you internet if you don't have an ISP. It is just a regular modem, but branded.
Seems you're mixing your metaphors. You "pulled the trigger", not the plug. And you have to jump through hoops, not over them. You jump over hurdles.

Good luck with the conversion - it's not easy but it isn't rocket surgery! (Didya see what I did there?)

874 Comments

Sign up for a Slickdeals account to remove this ad.

Jan 26, 2019
62 Posts
Joined Jul 2009
Jan 26, 2019
Silly_String
Jan 26, 2019
62 Posts
Quote from cjjson :
If you got an order number and a pending charge for $40 + tax on your credit card, I think you're good to go. That's my experience when I got my first one.

This time around, i got a pending charge but I'm still waiting for an order confirmation/number.

I ordered on the 24th and got it the 25th and received an email on the 26th saying it was delivered and they charged my CC for it, strange. Like another poster said they must have a warehouse near SW Ohio.
Jan 27, 2019
2,131 Posts
Joined Jan 2006
Jan 27, 2019
FREEALTA
Jan 27, 2019
2,131 Posts
Quote from new_yorker :
I followed "bayareatechpros" steps but the following step hung for long time.

./mtd-erase -d asus

I pressed ctrl+c and proceededed with next steps.

Also ,I applied latest firmware from Asus's website, "RT-AC68U_3.0.0.4_384_45149-g467037b" and all works fine if it helps anyone here.
I had the same problem but after seeing the following, I went back after upgrading to 45149, and executed the two commands again.
https://forums.redflagdeals.com/amazon-com-refurbished-t-mobile-rt-ac68u-dual-band-gigabit-router-us... [redflagdeals.com]

I think the instruction should be something like, using lazymocha instruction:
#Before you begin, make sure you installed CFE 1.0.2.0 AiMesh. Follow the instructions provided by Bay Tech Area Pros in the link above.
#Backup your mdt5 partition
admin@RT-AC68U:/tmp/home/root# cat /dev/mtd5 > /jffs/mtd5_backup.bin

#Use WinSCP in Windows to copy the mtd5_backup.bin off the router to a safe place.

#Remove the TMO mdt5 partition
admin@RT-AC68U:/tmp/home/root# mkdir /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# mount -t jffs2 /dev/mtdblock5 /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# rm -rf /tmp/asus_jffs/*
admin@RT-AC68U:/tmp/home/root# sync && umount /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# rm -rf /jffs/.sys/RT-AC68U
admin@RT-AC68U:/tmp/home/root# nvram unset fw_check && nvram commit && reboot

***** flash latest firmware from Asus(Version 3.0.0.4.384.45149)
***** login, enable ssh

#Write all FFs to the mdt5 (in case that didn't happen when you removed the TMO partition in the previous steps)
admin@RT-AC68U:/tmp/home/root# ln -s /sbin/rc mtd-erase
admin@RT-AC68U:/tmp/home/root# ./mtd-erase -d asus
Erasing 0x0 - 0x1ffff
Erasing 0x20000 - 0x3ffff
Erasing 0x40000 - 0x5ffff
Erasing 0x60000 - 0x7ffff
Erasing 0x80000 - 0x9ffff
Erasing 0xa0000 - 0xbffff
Erasing 0xc0000 - 0xdffff
Erasing 0xe0000 - 0xfffff
Erasing 0x100000 - 0x11ffff
Erasing 0x120000 - 0x13ffff
"asus" successfully erased.
admin@RT-AC68U:/tmp/home/root#
Jan 27, 2019
1,220 Posts
Joined Dec 2010
Jan 27, 2019
new_yorker
Jan 27, 2019
1,220 Posts
Quote from FREEALTA :
I had the same problem but after seeing the following, I went back after upgrading to 45149, and executed the two commands again.
https://forums.redflagdeals.com/amazon-com-refurbished-t-mobile-rt-ac68u-dual-band-gigabit-router-us... [redflagdeals.com]

I think the instruction should be something like, using lazymocha instruction:
#Before you begin, make sure you installed CFE 1.0.2.0 AiMesh. Follow the instructions provided by Bay Tech Area Pros in the link above.
#Backup your mdt5 partition
admin@RT-AC68U:/tmp/home/root# cat /dev/mtd5 > /jffs/mtd5_backup.bin

#Use WinSCP in Windows to copy the mtd5_backup.bin off the router to a safe place.

#Remove the TMO mdt5 partition
admin@RT-AC68U:/tmp/home/root# mkdir /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# mount -t jffs2 /dev/mtdblock5 /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# rm -rf /tmp/asus_jffs/*
admin@RT-AC68U:/tmp/home/root# sync && umount /tmp/asus_jffs
admin@RT-AC68U:/tmp/home/root# rm -rf /jffs/.sys/RT-AC68U
admin@RT-AC68U:/tmp/home/root# nvram unset fw_check && nvram commit && reboot

***** flash latest firmware from Asus(Version 3.0.0.4.384.45149)
***** login, enable ssh

#Write all FFs to the mdt5 (in case that didn't happen when you removed the TMO partition in the previous steps)
admin@RT-AC68U:/tmp/home/root# ln -s /sbin/rc mtd-erase
admin@RT-AC68U:/tmp/home/root# ./mtd-erase -d asus
Erasing 0x0 - 0x1ffff
Erasing 0x20000 - 0x3ffff
Erasing 0x40000 - 0x5ffff
Erasing 0x60000 - 0x7ffff
Erasing 0x80000 - 0x9ffff
Erasing 0xa0000 - 0xbffff
Erasing 0xc0000 - 0xdffff
Erasing 0xe0000 - 0xfffff
Erasing 0x100000 - 0x11ffff
Erasing 0x120000 - 0x13ffff
"asus" successfully erased.
admin@RT-AC68U:/tmp/home/root#
Applause I thought of doing so but didn't want to take a chance after the latest firmware flashed successfully and everything worked fine. If the step is important, I will execute it later. Thanks for sharing, good day!
Jan 27, 2019
1,570 Posts
Joined Oct 2009
Jan 27, 2019
ST1NGY
Jan 27, 2019
1,570 Posts
Quote from new_yorker :
Applause I thought of doing so but didn't want to take a chance after the latest firmware flashed successfully and everything worked fine. If the step is important, I will execute it later. Thanks for sharing, good day!
Unfortunately, you won't know if it is important until it is. Then it may be too late. The purpose of filling /dev/mtd5 with hex FF is to make your router's mtd5 exactly like a "real" RT-AC68U. At some time in the future, ASUS could use this difference to roll you back to a locked CFE and TM firmware.

So go ahead and run those two lines. It's pretty painless and you don't even need to reboot.
Last edited by ST1NGY January 28, 2019 at 05:59 AM.
Jan 27, 2019
168 Posts
Joined Nov 2013
Jan 27, 2019
MatthewM6465
Jan 27, 2019
168 Posts
Hey @ST1NGY
Quote from ST1NGY :
Unfortunately, you won't know if it is important until it is. Then it may be too late. The purpose of filling /dev/mtd5 with hex FF is to make your router's mtd5 exactly like a "real" RT-AC68U. At some time in the future, ASUS could use this to aroll you back to a locked CFE and TM firmware.

So go ahead and run those two lines. It's pretty painless and you don't even need to reboot.
So I finally successfully completed everything, including flashing 3.0.0.4.384_20308 and running the ./mtd-erase -d asus

I'm up and running successfully on 3.0.0.4.384_20308, but now I want to download and install 3.0.0.4.384.45149 from the official ASUS page.

Is there any risk at all in doing that since I successfully executed ./mtd-erase -d asus on 3.0.0.4.384_20308?
Just wanted to find out if anyone has successfully installed the latest version from the ASUS download page.

Thanks!
Jan 27, 2019
1,570 Posts
Joined Oct 2009
Jan 27, 2019
ST1NGY
Jan 27, 2019
1,570 Posts
Quote from MatthewM6465 :
Hey @ST1NGY

So I finally successfully completed everything, including flashing 3.0.0.4.384_20308 and running the ./mtd-erase -d asus

I'm up and running successfully on 3.0.0.4.384_20308, but now I want to download and install 3.0.0.4.384.45149 from the official ASUS page.

Is there any risk at all in doing that since I successfully executed ./mtd-erase -d asus on 3.0.0.4.384_20308?
Just wanted to find out if anyone has successfully installed the latest version from the ASUS download page.

Thanks!
I'm sure it will be fine if you just run the automatic update. However, I prefer to download the zip file from the ASUS support page, un-zip it, then do the manual install through the gui. One reason is I like to keep a copy of the firmware I've installed - just in case I decide to go back.

Since this would be your first update after 20308, it would be a confidence builder (if nothing else) to disconnect from WAN before updating. Just to be sure you got everything OK.
Last edited by ST1NGY January 27, 2019 at 02:36 PM.
Jan 27, 2019
1,220 Posts
Joined Dec 2010
Jan 27, 2019
new_yorker
Jan 27, 2019
1,220 Posts
Quote from ST1NGY :
Unfortunately, you won't know if it is important until it is. Then it may be too late. The purpose of filling /dev/mtd5 with hex FF is to make your router's mtd5 exactly like a "real" RT-AC68U. At some time in the future, ASUS could use this to aroll you back to a locked CFE and TM firmware.

So go ahead and run those two lines. It's pretty painless and you don't even need to reboot.
Done Boss!

Sign up for a Slickdeals account to remove this ad.

Jan 27, 2019
1,178 Posts
Joined Nov 2011
Jan 27, 2019
Zwitterion
Jan 27, 2019
1,178 Posts
For those of us with a converted AC68U (that was done a long time ago), but who didn't issue the MTD5 commands to erase the TMO certificates at the time, is it as simple as SSHing in now and running them? Is there anything special I need to do, as I'm already running Merlin's firmware? Would i need to flash back to stock ASUS (I understand that last safe Firmware is 20308) or can I just run them as is now?

Any advice would be greatly appreciated!
Jan 27, 2019
292 Posts
Joined Dec 2014
Jan 27, 2019
seanblock82
Jan 27, 2019
292 Posts
I placed my order on 1/24. They apparently were out of stock then. Garbage. They are cancelling my order.
Jan 27, 2019
1,570 Posts
Joined Oct 2009
Jan 27, 2019
ST1NGY
Jan 27, 2019
1,570 Posts
Quote from Zwitterion :
For those of us with a converted AC68U (that was done a long time ago), but who didn't issue the MTD5 commands to erase the TMO certificates at the time, is it as simple as SSHing in now and running them? Is there anything special I need to do, as I'm already running Merlin's firmware? Would i need to flash back to stock ASUS (I understand that last safe Firmware is 20308) or can I just run them as is now?

Any advice would be greatly appreciated!
The mtd5 cleanup commands are stand-alone. All you need is to have the capability to run ssh.

Those last two commands to run mtd-erase can run with any 384.xxxx version of ASUS or Merlin.
Jan 27, 2019
1,178 Posts
Joined Nov 2011
Jan 27, 2019
Zwitterion
Jan 27, 2019
1,178 Posts
Quote from ST1NGY :
The mtd5 cleanup commands are stand-alone. All you need is to have the capability to run ssh.

Those last two commands to run mtd-erase can run with any 384.xxxx version of ASUS or Merlin.
Sweet, and I can then update to latest firmware without any issue? I'm only considering doing so since Merlin's firmware doesn't have AiMesh and I am planning to buy another router to go along with my already-converted TMO to provide a mesh network for my Chromecast Audios.
Jan 28, 2019
1,570 Posts
Joined Oct 2009
Jan 28, 2019
ST1NGY
Jan 28, 2019
1,570 Posts
Quote from Zwitterion :
Sweet, and I can then update to latest firmware without any issue?
Yup!!
Jan 28, 2019
1,178 Posts
Joined Nov 2011
Jan 28, 2019
Zwitterion
Jan 28, 2019
1,178 Posts
Quote from ST1NGY :
Yup!!
Last question (since you've been so helpful): after I run the commands, how do I check to ensure that it worked? I'd hate to update firmware and find that I've been so screwed with a relocked device.
Jan 28, 2019
1,570 Posts
Joined Oct 2009
Jan 28, 2019
ST1NGY
Jan 28, 2019
1,570 Posts
Quote from Zwitterion :
Last question (since you've been so helpful): after I run the commands, how do I check to ensure that it worked? I'd hate to update firmware and find that I've been so screwed with a relocked device.
If you ran those last two commands to run mtd-erase:

admin@RT-AC68U:/tmp/home/root# ln -s /sbin/rc mtd-erase
admin@RT-AC68U:/tmp/home/root# ./mtd-erase -d asus
Erasing 0x0 - 0x1ffff
Erasing 0x20000 - 0x3ffff
Erasing 0x40000 - 0x5ffff
Erasing 0x60000 - 0x7ffff
Erasing 0x80000 - 0x9ffff
Erasing 0xa0000 - 0xbffff
Erasing 0xc0000 - 0xdffff
Erasing 0xe0000 - 0xfffff
Erasing 0x100000 - 0x11ffff
Erasing 0x120000 - 0x13ffff
"asus" successfully erased.

If it says "asus" successfully erased., you're good.

Sign up for a Slickdeals account to remove this ad.

Jan 28, 2019
1,178 Posts
Joined Nov 2011
Jan 28, 2019
Zwitterion
Jan 28, 2019
1,178 Posts
Quote from ST1NGY :
If you ran those last two commands to run mtd-erase:

admin@RT-AC68U:/tmp/home/root# ln -s /sbin/rc mtd-erase
admin@RT-AC68U:/tmp/home/root# ./mtd-erase -d asus
Erasing 0x0 - 0x1ffff
Erasing 0x20000 - 0x3ffff
Erasing 0x40000 - 0x5ffff
Erasing 0x60000 - 0x7ffff
Erasing 0x80000 - 0x9ffff
Erasing 0xa0000 - 0xbffff
Erasing 0xc0000 - 0xdffff
Erasing 0xe0000 - 0xfffff
Erasing 0x100000 - 0x11ffff
Erasing 0x120000 - 0x13ffff
"asus" successfully erased.

If it says "asus" successfully erased., you're good.
ST1NGY,
  • Before running any of this, I realize that I am to make sure that I installed CFE 1.0.2.0 AiMesh (especially as I want to run a mesh network). To be honest, at the time I initially flashed my router, which was over a year ago, I'm not sure this particular CFE was even an option at the time and even if it was, I am uncertain that I flashed the AiMesh variant
  • How can I confirm what CFE I have installed? I don't see of any way to reveal the current CFE
  • The way to flash a CFE requires pulling the original CFE off of the router, then modifying it and flashing it. However, since I already have a modified CFE on the router, I'm worried that running the steps will lead to a corrupted file if it I pull the already-modified cfe.bin and put through CFEditor


I really appreciate your help, and sorry if I'm overreaching on your kindness.
Last edited by Zwitterion January 28, 2019 at 07:30 AM.
Jan 28, 2019
1,570 Posts
Joined Oct 2009
Jan 28, 2019
ST1NGY
Jan 28, 2019
1,570 Posts
Quote from Zwitterion :
ST1NGY,
  • Before running any of this, I realize that I am to make sure that I installed CFE 1.0.2.0 AiMesh (especially as I want to run a mesh network). To be honest, at the time I initially flashed my router, which was over a year ago, I'm not sure this particular CFE was even an option at the time and even if it was, I am uncertain that I flashed the AiMesh variant
  • How can I confirm what CFE I have installed? I don't see of any way to reveal the current CFE
  • The way to flash a CFE requires pulling the original CFE off of the router, then modifying it and flashing it. However, since I already have a modified CFE on the router, I'm worried that running the steps will lead to a corrupted file if it I pull the already-modified cfe.bin and put through CFEditor


I really appreciate your help, and sorry if I'm overreaching on your kindness.
If it was over 1 yr when you converted, it is very unlikely you have the AiMesh CFE. To check, ssh into the router and run:
cat /dev/mtd0 | grep odmpid
if it says "ASUS" or something other than "RT-AC68U", then it is not the one you want.
To generate the correct one you can use any CFE file with the correct MAC addresses for your router. Just follow the instructions for creating and installing the AiMesh CFE.

Related Searches

Popular Deals

View All

Trending Deals

View All