1.原厂固件打开Telnet访问,参考:
https://www.mleaf.org/?id=9

2.搭好tftp,telnet登录路由器执行下面命令:
cd /tmp
tftp-hpa 192.168.1.100  -m binary -c get libjson-c_0.12-1_ar71xx.ipk;
tftp-hpa 192.168.1.100  -m binary -c get libubox_2015-11-08-10429bccd0dc5d204635e110a7a8fae7b80d16cb_ar71xx.ipk;
tftp-hpa 192.168.1.100  -m binary -c get mtd_21_ar71xx.ipk;
opkg install  libjson-c_0.12-1_ar71xx.ipk libubox_2015-11-08-10429bccd0dc5d204635e110a7a8fae7b80d16cb_ar71xx.ipk mtd_21_ar71xx.ipk ;
tftp-hpa 192.168.1.100  -m binary -c get PandoraBox-ar71xx-sbr-ac1750-factory-kfs.bin;
md5sum  PandoraBox-ar71xx-sbr-ac1750-factory-kfs.bin;
mtd -e kfs -r write PandoraBox-ar71xx-sbr-ac1750-factory-kfs.bin kfs;

3.如何恢复原厂？
直接在PandraBox升级页面上传原厂的kfs.bin即可恢复

#最后一步千万要注意文件是否下载成功！

#########unboot系列#############
#擦除内核
nand erase 0x000000200000 0x100000

#启动第二内核
nboot 0x81000000 0   0x000002600000

#原厂固件恢复
tftp 0x80060000 kfs.bin&&nand erase 0x000000200000  0x2400000 &&nand write $fileaddr 0x200000 0x2400000;bootd

#刷PandoraBox
tftp 0x80060000 PandoraBox-ar71xx-sbr-ac1750-factory-kfs.bin&&nand erase 0x000000200000  0x2400000 &&nand write $fileaddr 0x200000 0x2400000;bootd


########u-boot下恢复原厂################
#u-boot
tftp 0x80060000 u-boot.bin&&nand erase 0x0  $filesize&&nand write $fileaddr 0x0 $filesize

#boot-flag 启动参数
tftp 0x80060000 boot-flag.bin&&nand erase 0x100000 0x10000&&nand write $fileaddr 0x100000  $filesize

#art无线参数
tftp 0x80060000 art.bin&&nand erase 0x06d00000  $filesize&&nand write $fileaddr 0x06d00000 $filesize

#FT工厂参数
tftp 0x80060000 ft.bin&&nand erase 0x6a00000 $filesize &&nand write $fileaddr 0x6a00000 $filesize

#kernel
tftp 0x80060000 kernel.bin&&nand erase 0x000000200000  $filesize &&nand write $fileaddr 0x000000200000 $filesize

#rootfs
tftp 0x80060000 rootfs.bin&&nand erase 0x000000600000  $filesize &&nand write $fileaddr 0x000000600000  $filesize

#kernel2
tftp 0x80060000 kernel2.bin&&nand erase 0x000002600000 $filesize &&nand write $fileaddr 0x000002600000 $filesize

#rootfs2
tftp 0x80060000 rootfs2.bin&&nand erase 0x000002a00000 $filesize &&nand write $fileaddr 0x000002a00000 $filesize

#pki
tftp 0x80060000 pki.bin&&nand erase 0x6b00000 $filesize &&nand write $fileaddr 0x6b00000 $filesize

#opewrt
tftp 0x80060000 openwrt.bin&&nand erase 0x06600000 $filesize &&nand write $fileaddr 0x06600000 $filesize

#kfs
tftp 0x80060000 kfs.bin&&nand erase 0x0200000 $filesize &&nand write $fileaddr 0x0200000 $filesize

#kfs2
tftp 0x80060000 kfs2.bin&&nand erase  0x02600000 $filesize &&nand write $fileaddr  0x02600000 $filesize