tag:blogger.com,1999:blog-39382459970880089302024-03-18T11:03:59.202+08:00Pakitongpakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.comBlogger1818125tag:blogger.com,1999:blog-3938245997088008930.post-34053171917878586292020-12-11T00:10:00.005+08:002020-12-11T00:10:50.992+08:00Time for PLDT Fiberhome ONU/ONT Replacement<p style="text-align: justify;"> Today I wanted to share to my reader on how-to retired my PLDT Fiberhome ONU/ONT AN5506-04-FA device, its has been there for couples of years that I wish to get rid of it and replace with SFP module that will work for my project. Googling on the net to find docs and most of all can get the most affordable SFP module that I can substitute for my ONT/ONU.</p><p style="text-align: justify;">Not just for the SFP module price is cheaper but also it will works on a budget giga Media Converter, on a giga SC switch, or on the MikroTik Hex but like on a pfSense micro ITX box. After Googling sometime I found ZISA OP151S is the most best that suit for my needs but sadly the SFP module manufacturer is no longer active duplicating the said sfp. ZISA OP151S makes it handy for having a web graphical user interface to interact the device module itself and a command line interface to tune up the settings that you need.</p><p style="text-align: justify;">Luckily, after Googling again sometime on the net I found similar SFP module that ZISA OP151S does everything do. The GPON SFP stick is from Usource Technology its DFP-34G-2C2 if you want to try searching on the net. What makes this GPON SFP stick even more better than ZISA OP151S its already a ONT/ONU on a STICK, you can plug it directly to a giga Media Converter, SC Switch with sfp port, to a MikroTik giga Switch or to a running pfSense mini ITX box just add a <a href="https://www.chelsio.com/legacy-adapters/" target="_blank">Chelso PCI card</a> with SFP module port.</p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPxtQYjqqK4gs-8k-LvxwJoJeWWnk9weyyQadb_VFwMyAPpte0bF0FFsfyRZrd3KMCMpoQpJNr9c7awbmeGIyoZS6XLzElVgyvVzhyphenhyphenxVhyphenhyphenzPnoDUNmS2oj9YqttANveb8qo8dcV_568Gli/s1376/DFP-34G-2C2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="679" data-original-width="1376" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPxtQYjqqK4gs-8k-LvxwJoJeWWnk9weyyQadb_VFwMyAPpte0bF0FFsfyRZrd3KMCMpoQpJNr9c7awbmeGIyoZS6XLzElVgyvVzhyphenhyphenxVhyphenhyphenzPnoDUNmS2oj9YqttANveb8qo8dcV_568Gli/w514-h275/DFP-34G-2C2.png" width="514" /></a></div><br /><p style="text-align: justify;">The GPON SFP module Stick DFP-34G-2C2 ONT/ONU is base on a SoC ARM v7 (ZX279125) running at 600Mhz and nearly 1200 bogomips, with 32Mb integrated RAM and a 16Mb of external (SPI?) flash (<a href="https://forum.mikrotik.com/viewtopic.php?t=116364&start=300#p771961" target="_blank">source</a>) running Linux ZTE flavour 2.6.32 in a SFP form factor. You may like to see the datasheet <a href="http://www.usourcetech.com/web/userfiles/download/GPONSTICKSFPCLASSB-2B_Rev01.pdf" target="_blank">here</a>.</p><p style="text-align: justify;">To be able to configure it there has to be some link in the optical connection, otherwise the SFP interface in your switch/router might not linkup and the SFP internal IP might not be reachable.</p><p>The default connection info is as follows:</p><p> IP: 192.168.1.1</p><p> VLAN: 1</p><p> URL: http://192.168.1.1</p><p> User: admin</p><p> Pass: admin</p><div><div style="text-align: justify;">In its web GUI you can configure PON settings and even routing mode. By default, there is no WAN connection (this means there’s no routing mode, only bridge with all vlans through the SFP interface port). You can make the SFP a router to route you house/office traffic by making a WAN connection but I prefer to keep it as bridge.</div><div><br /></div><div style="text-align: justify;">Once in the web configuration page we can configure LOID, SN and their passwords as per our ISP requirements:</div></div><div style="text-align: justify;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXzDJ1tTpjYtDgcCK3ZBHMkm8YWMW6y9JSpWWOKazY5B6I6o1pC4ctysNG4Bkf1xRh0RbZRSQehOiwaUvm38yTaBV3XPUjsTBGqs7UIIK9jfyjBNtmvt1GYGmx8eFZISCpyzB1t8SmIZIV/s1622/DFP-34G-2C2-LOID.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1066" data-original-width="1622" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXzDJ1tTpjYtDgcCK3ZBHMkm8YWMW6y9JSpWWOKazY5B6I6o1pC4ctysNG4Bkf1xRh0RbZRSQehOiwaUvm38yTaBV3XPUjsTBGqs7UIIK9jfyjBNtmvt1GYGmx8eFZISCpyzB1t8SmIZIV/w556-h306/DFP-34G-2C2-LOID.png" width="556" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5I674t1aT49hT6t88VO9KGT3sHPhSMuLXL7XinYXze1C1A_PeNlZ_YVUz3iu__AcArqvFSTsMM6UppaCsDdV7PLHF4qpAGvKVRm0pMsrb_M57bdQE6J5CDqmpBOtnPSoeHsyNj8bXLdaO/s1628/DFP-34G-2C2-SN.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1058" data-original-width="1628" height="311" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5I674t1aT49hT6t88VO9KGT3sHPhSMuLXL7XinYXze1C1A_PeNlZ_YVUz3iu__AcArqvFSTsMM6UppaCsDdV7PLHF4qpAGvKVRm0pMsrb_M57bdQE6J5CDqmpBOtnPSoeHsyNj8bXLdaO/w544-h311/DFP-34G-2C2-SN.png" width="544" /></a></div><br /><p>There is also telnet access with the following credentials:</p><p> User: root</p><p> Pass: Pon521</p><p>Telnet access is for Linux advanced users and is not recommended to tamper with.</p><p>The GPON SFP module stick DFP-34G-2C2 can get purchase online via AliExpress online store.</p>pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com9tag:blogger.com,1999:blog-3938245997088008930.post-32212583595154460292020-11-11T20:09:00.001+08:002020-11-11T20:09:07.102+08:00HOW TO GET OUT FROM PLDT CGNAT<p style="text-align: justify;"> I am one of those among the PLDT Fiberhome subscriber who have been under CGNAT for so many months until last December 18, 2019 I finally found the solution on how to UNCGNAT my own PLDT Fiberhome ONU. I did many times calling 171 and talking with different CSR (customer service representative) but I ended up with the so called Filipino terminology as "PA-ASA". So I gave my patience on calling 171 for begging the UNCGNATTING waiting on the PLDT IVRS even more than two hours but still no luck at all.</p><p style="text-align: justify;">I decided to Google on the net but of course the Giant search engine can give nothing the answer for me and my query to any related issue, except that the online monster web dictionary Wikipedia can explain what is CGNAT is and how does it works. Further digging despite reddit and twitter are well known similar scenario PLDT CGNAT is still unknown they do not have any clue on how to do it except bribe the organic crew, those people sitting in the NOC so they can take a look on your account for them to deCGNAT it.</p><p style="text-align: justify;">Once upon a time in early 2016 I have stumble upon into the PLDT Fibrhome Infra this is during my sister house being offered by the PLDT Fiberhome subscriber agent to get free installation and the device. I was the one who talk to the guy and I get the offer to have the fiber internet for my sister account. When the PLDT organic during that time they are the one who really install from the outside including the inside, I was the one who attended for the installation of my sister PLDT internet fiber connection. I was lucky I was also the first from the who use their internet fiber connection making assessment how fast really is the Giant Telco of the Philippines.</p><p style="text-align: justify;">Its not a malice thing when you wanted to probe something in your mind that you have happened did it before, so I went on and yes I stumble to the PLDT Fiberhome Infra. For sure I did not touch anything except touring around from CLI to the Shell. Yes all subscriber are listed in there and I just leave it as it is.</p><p style="text-align: justify;">I recall that once upon a time a visit that place, now the time I am jailed by this so called CGNAT perhaps it might give me an inputs on how to dismantle this crazy subjection on my ONU by me ISP.</p><p style="text-align: justify;">When I revisited the place were I stumble upon during that time I found the answer to my concerned that it was just as easy as remove the clams from its shell. So on Dcember 18, 2019 I posted on this blog that I have solved my CGNAT.</p><p style="text-align: justify;">Many of my readers asking and even begging the tutorials on how to do it, they emailed me, commented but not all of them I have given the favor to deCGNAT their ONU.</p><p style="text-align: justify;">Good, today PLDT CSR already learned how to respond on the CGNAT issue there are many PLDT subscriber already deCGNAT by calling 171 and there are also still plenty of them not given the favor and still under CGNAT.</p><p style="text-align: justify;">How to deCGNAT or UNCGNAT your PLDT Fiberhome ONU internet connection? Here is I can suggest that PLDT will take action on CGNAT issue even your account is not a Biz Plan. First, they weigh your situation if you really need the deCGANTTING. If you can convince the 1st level CSR that your request UNCGNAT is really a must then they will immediately transfer you to the 2nd level person who are authorized the deCGNATTING.</p><p style="text-align: justify;">Scenario 1, let say you have / you tend to have an IP security camera in your home that needs public IP address so you can remotely access or view from the outside world this is a vital and they will attend to your request.</p><p>Scenario 2, Alarm system such as fire alarm, or other similar alarm system that needs monitoring.</p><p>For this case they do not have any option but instead deCGNAT your ONU right away.</p><p style="text-align: justify;">Scenario 3, PLST CSR are getting reluctant on this kind of request for deCGNATTING such as , FTP Server, Web Server, Cloud or similar to this.</p><p><br /></p>pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com3tag:blogger.com,1999:blog-3938245997088008930.post-68268037270480629702020-10-10T14:22:00.005+08:002020-10-10T14:24:26.913+08:00Mercusy MW301R Cheap 300Mbps Wireless Router<p style="text-align: justify;">Mercusy is another subsidiary of TP-Link for budget wireless devices such as wireless access point and router devices. I seen this Mercusy MW301R 300Mbps cheap plastic case budget router with the price tag of 495Php online its around 10USD if we convert that from Philippine peso. The MW301R is so tiny more or less a clone of TP-Link WR820N v2.0 except that the flash of WR820N v2 is 2Mb whereas SoC and RAM exactly the same including the LAN/WAN ports.</p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzJj0N-VLkMl-bZgmYtd0omNHe1HaJV4V4RaknkJUadQKtkcErvQcByeSHrWnchS9mZ5u6Ds9YQ8gWRmlEcbDULMj-DAsxZJstReE_JjU2B3FahB3HanF4KhKiyQgTzGjRBFJdI27zttE5/s2048/MW301R.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1141" data-original-width="2048" height="357" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzJj0N-VLkMl-bZgmYtd0omNHe1HaJV4V4RaknkJUadQKtkcErvQcByeSHrWnchS9mZ5u6Ds9YQ8gWRmlEcbDULMj-DAsxZJstReE_JjU2B3FahB3HanF4KhKiyQgTzGjRBFJdI27zttE5/w640-h357/MW301R.jpg" width="640" /></a></div><p style="text-align: justify;">MW301R is equip with MediaTek MT7628KN SoC a single core 570MHz processor, RAM is not expandable it is built-in inside the SoC its 8MB whereas FLASH can be replace with any 8pin chips such 25Q series flash chip.</p><p style="text-align: justify;">I buy it for the purpose of its small form factor that I can turn it into OpenWrt IoT, I thought it was just like WR701N and WR703N were you can just desolder the RAM and the FLASH and replace it with higher capacity so OpenWrt will work with full functionality. It was a mistake because during my purchase of this Mercusy devices I can not find any docs on Google.</p><p style="text-align: justify;">The only possible thing about this MW301R is upgrade the RAM with 2Mb flash and replace with TP-Link firmware to make it WR820N v2.0 which support the following WISP, AP with smart DHCP, Reapeter or Extenbder. With Mercusys firmware MW301R this device is limited to WAN PPPoE, Dynamic and Static IP only. It has WDS but the range is not that power as such MT7628N SoC like WR840N and WR841N.</p><p style="text-align: justify;">Upon testing on the wireless access point I plug my 100Mbps fiber optic connection to the WAN ports it can only gives me around 25Mbps, direct connection on the LAN ports about 39Mbps only. Not bad for the price tag 495Php if you intend to use it at home for limited user for less than ten users only.</p><p style="text-align: justify;">Serial port is present on the circuit board its labeled with Tx, Rx and Vcc. USB port can be moded if you wish to have one for some purposes docs is available online.</p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p>pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com7tag:blogger.com,1999:blog-3938245997088008930.post-13423723416547994622020-08-21T18:01:00.002+08:002020-08-21T18:01:33.541+08:00ADO PISO WIFI VLAN NO USB LAN, NO NEWIFI3 D2, ANY OPENWRT FW WILL DO<div style="text-align: justify;">
Today I want to share to my readers this over whelming PiSo WiFi Vending machine that majority of Netizens are aiming to build or buy this kind of small business apparatus. I was intrigue by this famous low cost dual band AC1200 wireless router from forum and including on the youtube channels. Lenovo Comfast NEWIFI3 D2 is a 5 port Giga LAN/WAN that competes most well known WAPs such MikroTik, TP-Link, Linksys and others you name it.</div>
<br />
<div style="text-align: justify;">
I was just curious that I thought it was not equip with RF Amps, good enough the power output is less than 800mWatt its powerful if someone can buil a good 2.4GHz antenna. The 5GHz also can transmit at less than 200mWatt.</div>
<br />
<div style="text-align: justify;">
My purpose on getting this NEWIFI3 D2 is for my oldys PiSo vendo machine that I wanted to omit the USB LAN that need to be retired. After doing experiment with different firmware I went on sticking with OpenWRT. Now I realize that the NEWIFI3 D2 I buy is now serving only as a L2 managed switch and as a WAP (wireless access point). I did not get TP-Link SG105E and SG108E cause it is a semi managed switch.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWrE1i4SawgnpEHPPEHWhZ72_USg9aYmClMn5TL56vlqusWVBNW39yzy4ua9ZZ9EZBw4Uoy3D4ej97hfMXBqxY8gpXXW_wrKbYWAVEmFFI-I8hzkBjSze-FeZ5JsJuLM9AgGMlI_VWRm4w/s1319/adopisoft.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="350" data-original-width="1319" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWrE1i4SawgnpEHPPEHWhZ72_USg9aYmClMn5TL56vlqusWVBNW39yzy4ua9ZZ9EZBw4Uoy3D4ej97hfMXBqxY8gpXXW_wrKbYWAVEmFFI-I8hzkBjSze-FeZ5JsJuLM9AgGMlI_VWRm4w/s640/adopisoft.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
I happen to realize again that have a bunch of TP-Link wireless router that can do that task which NEWIFI3 D2 can do except my old wireless router do not have the AC WiFi.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmqnfYN0E_g7j5fr_b7oEjUvfWFagJWyPzlwuxLvVKEeu3V5kvqeTQD6_nT8WpUR8pvFGZmA6B6LhQKMrmnWAXl5SjnFfb99BLfhlLFoh0gg8vvKFDspE6zZW_83kPIMKMXKhM1l2WYybB/s1319/adopiso_vlan.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="350" data-original-width="1319" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmqnfYN0E_g7j5fr_b7oEjUvfWFagJWyPzlwuxLvVKEeu3V5kvqeTQD6_nT8WpUR8pvFGZmA6B6LhQKMrmnWAXl5SjnFfb99BLfhlLFoh0gg8vvKFDspE6zZW_83kPIMKMXKhM1l2WYybB/s640/adopiso_vlan.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
If in your case you are tight budget you can get TP-Link TL-WR740N which is more cheaper and make it as manage switch for Ado Piso WiFi vendo machine.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYdc7bf4P7e7LWrrjAb4IhVnnOpoVmaW0z2jb8ZtddCebFFL_1eHSEf8nIBYXTyjFT69I476vI4766e81ZyF5yeeDvXknVA6TcVdgoeno6Yrua3NynsxlSltjQhsvD2BARFOCRqspawU8k/s1319/aopiso_wan.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="350" data-original-width="1319" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYdc7bf4P7e7LWrrjAb4IhVnnOpoVmaW0z2jb8ZtddCebFFL_1eHSEf8nIBYXTyjFT69I476vI4766e81ZyF5yeeDvXknVA6TcVdgoeno6Yrua3NynsxlSltjQhsvD2BARFOCRqspawU8k/s640/aopiso_wan.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
This will only work if the PiSo WiFi software VLAN is editable, some other vendo wifi developer the VLAN/TAG is fix the end user do not have the permission to edit those value. </div>
<br />pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-75891429699915923952020-08-09T14:29:00.003+08:002020-08-09T14:29:44.853+08:00Is there a need for 1490 nm testing in PONs?<div style="text-align: justify;">This paper explains the difference between 1490 nm optical time domain
reflectometer (OTDR) and insertion loss testing as well as physical layer and
equipment/transmission signal testing. It also describes the technical and economical
differences between 1490 and 1550 nm when analyzing the intrinsic characteristics
of the fiber. </div><div style="text-align: justify;">Point-to-multipoint passive optical networks (PONs), such as Ethernet PON (EPON), Gigabit PON
(GPON) or Gigabit Ethernet PON (GEPON) technologies, bring imminent testing challenges, especially
at the construction stage of the fiber link when using splitters. The most recurring question concerns
the need for qualifying the fiber plant at 1490 nm, the wavelength used to transmit data from the
optical line terminal (OLT) to the optical network terminal (ONT), making it legitimate to consider
testing at this particular wavelength. But is it worth testing at this wavelength?
OTDR Testing
The OTDR helps technicians characterize fibers and optical networks. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Primarily it provides location information
regarding localized loss and reflective events, offering a pictorial and permanent record of the characteristics of a
fiber. Secondly it measures the total loss of the link, which is discussed later. When characterizing a fiber link, field
technicians also measure the insertion loss of the fiber and investigate possible issues that could occur, such as high
connector loss, splice loss, high attenuation, or possible bends.
To properly locate an event and measure the reflectance, technicians must enter the fiber specifications into the
OTDR setup. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Today the International Telecommunications Union-Telecommunications Sector (ITU-T) G.652 standard
does not require specification at 1490 nm and most fiber manufacturers provide fiber specifications for the
common 1310 and 1550 nm wavelengths. The index of refraction and backscatter coefficient settings for 1490 nm
are typically unknown, leaving users unassured of the accuracy of location and reflectance results. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Furthermore, splice/connector losses are not wavelength-dependent. A 0.2 dB splice loss at 1550 nm will exhibit a
0.2 dB loss at 1310 and 1490 nm.
Another key element of a PON system is the splitter (from a 1x4 to a 1x64). The most commonly used is the 1x32
and the loss variation between the 1490 and 1550 nm wavelengths is as low as 0.3 dB. Once again, it shows minimal
or marginal value-added information for testing at these two wavelengths.
Also the OTDR can detect and localize macro bends by comparing two OTDR shots made at different wavelengths,
typically 1310 and 1550 nm. Longer wavelengths are more sensitive to macro bends, meaning the bend-dependent
loss is higher and the location easier.</div><div><br /></div>
read more via <a href="https://www.viavisolutions.com/ru-ru/literature/there-need-1490-nm-testin-pons-white-paper-en.pdf">viavi solution</a>pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com2tag:blogger.com,1999:blog-3938245997088008930.post-44315067318078950952020-06-10T00:55:00.001+08:002020-06-10T00:55:41.719+08:00TP-Link WR940N v4/v5 Brush LEDE OpenWrtHold and press RESET button then power ON the wireless router.<br />
<br />
Set the PC LAN Ip address to 192.168.0.66<br />
<br />
<br />
Install Tftpd32 on Windows machine and rename LEDE/Openwrt to wr940nv6_tp_recovery<br />
<br />
<br />
<br />
<br />
<br />pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com9tag:blogger.com,1999:blog-3938245997088008930.post-10434677442728418452020-06-01T23:48:00.000+08:002020-06-03T23:36:33.322+08:00OpenWrt L2 Wireless Bridge Client Plus Access PointMy simple way of doing OpenWrt Layer2 Wireless Bridge Client plus Access Point.<br />
<br />
<br />
root@OpenWrt:~# cat /etc/config/wireless<br />
<br />
config wifi-device 'radio0'<br />
option type 'mac80211'<br />
option channel '11'<br />
option hwmode '11g'<br />
option path 'platform/qca953x_wmac'<br />
option htmode 'HT20'<br />
option disabled '0'<br />
option country 'US'<br />
option legacy_rates '1'<br />
<br />
config wifi-iface 'default_radio0'<br />
option device 'radio0'<br />
option mode 'ap'<br />
option encryption 'none'<br />
option ssid 'AP101'<br />
option network 'lan'<br />
<br />
config wifi-iface<br />
option ssid 'WR941ND'<br />
option encryption 'psk2'<br />
option device 'radio0'<br />
option mode 'sta'<br />
option bssid '00:23:45:67:89:AB'<br />
option key 'password'<br />
option network 'wwan'<br />
<br />
root@OpenWrt:~#<br />
<br />
<br />
<br />
root@OpenWrt:~# cat /etc/config/network<br />
<br />
config interface 'loopback'<br />
option ifname 'lo'<br />
option proto 'static'<br />
option ipaddr '127.0.0.1'<br />
option netmask '255.0.0.0'<br />
<br />
config globals 'globals'<br />
option ula_prefix 'fd53:bbc3:725d::/48'<br />
<br />
config interface 'lan'<br />
option type 'bridge'<br />
option proto 'static'<br />
option ipaddr '192.168.1.1'<br />
option netmask '255.255.255.0'<br />
option ip6assign '60'<br />
option ifname 'eth0'<br />
option delegate '0'<br />
<br />
config switch<br />
option name 'switch0'<br />
option reset '1'<br />
option enable_vlan '1'<br />
<br />
config switch_vlan<br />
option device 'switch0'<br />
option vlan '1'<br />
option vid '1'<br />
option ports '0 1 2 3 4'<br />
<br />
config interface 'wwan'<br />
option proto 'relay'<br />
list network 'lan'<br />
<br />
root@OpenWrt:~#<br />
<br />
<br />
config defaults<br />
option syn_flood '1'<br />
option input 'ACCEPT'<br />
option output 'ACCEPT'<br />
option forward 'REJECT'<br />
<br />
config zone<br />
option name 'lan'<br />
option input 'ACCEPT'<br />
option output 'ACCEPT'<br />
option forward 'ACCEPT'<br />
option network 'lan wwan'<br />
<br />
config zone<br />
option name 'wan'<br />
option input 'REJECT'<br />
option output 'ACCEPT'<br />
option forward 'REJECT'<br />
option masq '1'<br />
option mtu_fix '1'<br />
option network 'wan wan6'<br />
<br />
config forwarding<br />
option src 'lan'<br />
option dest 'wan'<br />
<br />
config rule<br />
option name 'Allow-DHCP-Renew'<br />
option src 'wan'<br />
option proto 'udp'<br />
option dest_port '68'<br />
option target 'ACCEPT'<br />
option family 'ipv4'<br />
<br />
config rule<br />
option name 'Allow-Ping'<br />
option src 'wan'<br />
option proto 'icmp'<br />
option icmp_type 'echo-request'<br />
option family 'ipv4'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-IGMP'<br />
option src 'wan'<br />
option proto 'igmp'<br />
option family 'ipv4'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-DHCPv6'<br />
option src 'wan'<br />
option proto 'udp'<br />
option src_ip 'fc00::/6'<br />
option dest_ip 'fc00::/6'<br />
option dest_port '546'<br />
option family 'ipv6'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-MLD'<br />
option src 'wan'<br />
option proto 'icmp'<br />
option src_ip 'fe80::/10'<br />
list icmp_type '130/0'<br />
list icmp_type '131/0'<br />
list icmp_type '132/0'<br />
list icmp_type '143/0'<br />
option family 'ipv6'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-ICMPv6-Input'<br />
option src 'wan'<br />
option proto 'icmp'<br />
list icmp_type 'echo-request'<br />
list icmp_type 'echo-reply'<br />
list icmp_type 'destination-unreachable'<br />
list icmp_type 'packet-too-big'<br />
list icmp_type 'time-exceeded'<br />
list icmp_type 'bad-header'<br />
list icmp_type 'unknown-header-type'<br />
list icmp_type 'router-solicitation'<br />
list icmp_type 'neighbour-solicitation'<br />
list icmp_type 'router-advertisement'<br />
list icmp_type 'neighbour-advertisement'<br />
option limit '1000/sec'<br />
option family 'ipv6'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-ICMPv6-Forward'<br />
option src 'wan'<br />
option dest '*'<br />
option proto 'icmp'<br />
list icmp_type 'echo-request'<br />
list icmp_type 'echo-reply'<br />
list icmp_type 'destination-unreachable'<br />
list icmp_type 'packet-too-big'<br />
list icmp_type 'time-exceeded'<br />
list icmp_type 'bad-header'<br />
list icmp_type 'unknown-header-type'<br />
option limit '1000/sec'<br />
option family 'ipv6'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-IPSec-ESP'<br />
option src 'wan'<br />
option dest 'lan'<br />
option proto 'esp'<br />
option target 'ACCEPT'<br />
<br />
config rule<br />
option name 'Allow-ISAKMP'<br />
option src 'wan'<br />
option dest 'lan'<br />
option dest_port '500'<br />
option proto 'udp'<br />
option target 'ACCEPT'<br />
<br />
config include<br />
option path '/etc/firewall.user'<br />
<br />
root@OpenWrt:~#<br />
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com0tag:blogger.com,1999:blog-3938245997088008930.post-48992699891898479962020-05-23T14:01:00.001+08:002020-05-23T14:09:26.896+08:00AR9341 Router TTL Line Brush MachineRecently, I have a batch of OEM PoE routers that do not have a USB interface. It is just used to study the TTL flash machine.<br />
<br />
Then connect the USB to TTL. Note here that some boards will be incompatible with garbled characters. You can try to change the baud rate. If not, just change a USB to TTL board.<br />
<br />
The computer uses SecureCRT, serial port connection, there is no character on the connection, then power on the router, the screen starts to display UBOOT, press any key to interrupt, some press TPL interrupt or ctrl + c interrupt, I first flash breed<br />
<br />
These software will be provided below to download, understand the command of FLASH before brushing<br />
<br />
2MB FLASH<br />
<br />
<br />
<span style="font-family: inherit;">Flash programmer firmware: tftp 0x80000000 full.bin</span><br />
<span style="font-family: inherit;">erase 0x9f000000 + 0x200000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f000000 0x200000 flash</span><br />
<span style="font-family: inherit;">uboot:</span><br />
<span style="font-family: inherit;">tftp 0x80000000 uboot.bin</span><br />
<span style="font-family: inherit;">erase 0x9f000000 + 0x20000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f000000 0x20000 flash</span><br />
<span style="font-family: inherit;">fw:</span><br />
<span style="font-family: inherit;">tftp</span><br />
<span style="font-family: inherit;">0x80x9fwfc.</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f020000 0x1c0000</span><br />
<span style="font-family: inherit;">brush art:</span><br />
<span style="font-family: inherit;">tftp 0x80000000 art.bin</span><br />
<span style="font-family: inherit;">erase 0x9f1f0000 + 0x10000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f1f0000 0x10000</span><br />
<br />
<br />
4MB FLASH<br />
<br />
Flash programmer firmware: tftp 0x80000000 full.bin<br />
<br />
erase 0x9f000000 + 0x400000<br />
<br />
cp.b 0x80000000 0x9f000000 0x400000 flash<br />
<br />
uboot:<br />
<br />
tftp 0x80000000 uboot.bin<br />
<br />
erase 0x9f000000 + 0x20000<br />
<br />
cp.b 0x80000000 0x9f000000 0x20000 flash<br />
<br />
fw: tftp 0x80x9 fw0f0f3<br />
<br />
cp.b 0x80000000 0x9f020000 0x3c0000<br />
<br />
brush art:<br />
<br />
tftp 0x80000000 art.bin<br />
<br />
erase 0x9f3f0000 + 0x10000<br />
<br />
cp.b 0x80000000 0x9f3f0000 0x10000<br />
<br />
<br />
8MB FLASH<br />
<br />
<span style="font-family: inherit;">Flash programmer firmware: tftp 0x80000000 full.bin</span><br />
<span style="font-family: inherit;">erase 0x9f000000 + 0x800000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f000000 0x800000 flash</span><br />
<span style="font-family: inherit;">uboot:</span><br />
<span style="font-family: inherit;">tftp 0x80000000 uboot.bin</span><br />
<span style="font-family: inherit;">erase 0x9f000000 + 0x20000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f000000 0x20000 flash</span><br />
<span style="font-family: inherit;">fw:</span><br />
<span style="font-family: inherit;">tftp</span><br />
<span style="font-family: inherit;">0x80x9 fw.f02</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f020000 0x7c0000</span><br />
<span style="font-family: inherit;">brush art:</span><br />
<span style="font-family: inherit;">tftp 0x80000000 art.bin</span><br />
<span style="font-family: inherit;">erase 0x9f7f0000 + 0x10000</span><br />
<span style="font-family: inherit;">cp.b 0x80000000 0x9f7f0000 0x10000</span><br />
<br />
<br />
16M FLASH: flash address from 0x000000 ~ 0x0FFFFFF<br />
ttl access flash address from 0x9F000000 ~ 0x9F0FFFFFF<br />
<br />
<br />
The network cable is connected to the router lan port, the computer configuration is set to 192.168.0.2, the mask is 255.255.255.0, and the gateway is 192.168.0.1<br />
<br />
Open tftp in my software package, select the network card connected to the router's network cable, it will normally display the IP 192.168.0.2, click "Show Dir" contains a firmware of breed-ar9341.bin, first flash him, execute the following command<br />
<br />
setenv ipaddr 192.168.0.1<br />
<br />
setenv serverip 192.168.0.2<br />
<br />
tftp 0x80000000 breed-ar9341.bin<br />
<br />
When done appears, it means that the brushing is successful, and then execute<br />
<br />
erase 0x9f000000 + 0x20000<br />
<br />
cp.b 0x80000000 0x9f000000 0x20000<br />
<br />
When done appears, flashing in is successful. Unplug the router and plug it in again. SecureCRT displays the Breed boot and press any key terminal. At the same time, you can see that the default lan port address is 192.168.1.1<br />
<br />
Connect the computer browser to 192.168.1.1, then you can directly use the Breed Web<br />
<br />
<br />
Enter 192.168.0.1 in the address bar of the browser and select the firmware upgrade. Here you should save the original firmware under backup. You can configure openwrt after the flashing is completed.<br />
<br />
Software download address:<br />
<br />
https://pan.baidu.com/s/1Z7PkN8ROxpDITdRZHgw3nQ<br />
<br />
Extraction code: be5mpakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-5315973170118456222020-05-22T17:01:00.000+08:002020-05-22T17:30:46.458+08:00Tenda G103 ONU works on HUAWEI OLT<br />
Today a friend from India an FTTH subscriber of <a href="https://www.railwire.co.in/" target="_blank">RailWire</a> ISP share the thoughts of his Tenda G103 ONU (Optical Network Unit) as a replacement to Huawei ONT (Optical Network Terminal).<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjz3O2EMqk34rp6QRjEZBDRHn552mQdG5qRTDVvcwZMVqIJmfB9DYTynDvRkIOdQKmdexMGM3Tp4H8vacEiy1AyEIo8D7DhPMMrA7Gn9zj92zcZ0NkjRR7oMdE0hIB6CinlFiNzdecobei8/s1600/G103.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="433" data-original-width="711" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjz3O2EMqk34rp6QRjEZBDRHn552mQdG5qRTDVvcwZMVqIJmfB9DYTynDvRkIOdQKmdexMGM3Tp4H8vacEiy1AyEIo8D7DhPMMrA7Gn9zj92zcZ0NkjRR7oMdE0hIB6CinlFiNzdecobei8/s640/G103.png" width="550" /></a></div>
<br />
Looking for serial port pin header very easy to guess just like the other wireless router that has Ground TX RX and VCC.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhw8272idlbdQ_Uw25ZjF1beBeR_srsMbh-Xa5pkjTHZOCfXdxHlhLWhTdxcDOZRaKueaIy2pKpuZaEYvKIzRznj1Dij0_A13ZypCm8BAysamY-yxSUSO-DknPRHV8P2n0u5nNqQifv2_ho/s1600/g103_SERIAL.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="347" data-original-width="539" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhw8272idlbdQ_Uw25ZjF1beBeR_srsMbh-Xa5pkjTHZOCfXdxHlhLWhTdxcDOZRaKueaIy2pKpuZaEYvKIzRznj1Dij0_A13ZypCm8BAysamY-yxSUSO-DknPRHV8P2n0u5nNqQifv2_ho/s640/g103_SERIAL.jpg" width="550" /></a></div>
<br />
The good news firmware is base on opensource OpenWrt <a href="https://archive.openwrt.org/backfire/10.03.1/lantiq_falcon/" target="_blank">image_name=openwrt-lantiq-falcon-EASY98020</a><br />
<br />
The Tenda ONU G103 is equip with 400MHz Falcon-D Lantiq Chips, with 64MB DDRAM and 8MB Flash.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNgwDTxGlNg1GBSHsRxhIA6ssmfuLlxx-8Jfr_KK10VUhTCOIs6Myz-eTOnsVx5tyS1DKcvPZJyeRdLFYCh0x4eWGNy4sO98pAqxkIyZ7go-s0x5v1fh0NieneyTYf_br0W3oFY_NkuSzh/s1600/g103_uboot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="698" data-original-width="1217" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNgwDTxGlNg1GBSHsRxhIA6ssmfuLlxx-8Jfr_KK10VUhTCOIs6Myz-eTOnsVx5tyS1DKcvPZJyeRdLFYCh0x4eWGNy4sO98pAqxkIyZ7go-s0x5v1fh0NieneyTYf_br0W3oFY_NkuSzh/s640/g103_uboot.jpg" width="550" /></a></div>
<br />
Another interesting command line interface<br />
<br />
<blockquote class="tr_bq">
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">Press SPACE to delay and Ctrl-C to abort autoboot in 5 seconds<br />
FALCON => bdinfo<br />
boot_params = 0x83F2FF98<br />
memstart = 0x80000000<br />
memsize = 0x04000000<br />
flashstart = 0xB0000000<br />
flashsize = 0xFFFF0000<br />
flashoffset = 0x00000000<br />
ethaddr = C8:3A:35:B3:E8:50<br />
ip_addr = 192.168.5.1<br />
baudrate = 115200 bps<br />
FALCON => ?<br />
? - alias for 'help'<br />
asc0_fixup- fix asc0 pins (for silent boot)<br />
askenv - get environment variables from stdin<br />
base - print or set address offset<br />
bdinfo - print Board Info structure<br />
boot - boot default, i.e., run 'bootcmd'<br />
bootd - boot default, i.e., run 'bootcmd'<br />
bootm - boot application image from memory<br />
bootp - boot image via network using BOOTP/TFTP protocol<br />
chipinfo- print chip info<br />
cmp - memory compare<br />
cp - memory copy<br />
crc32 - checksum calculation<br />
ddrlp - config DDR LowPower<br />
ddrstatus- show DDR Controller status<br />
dhcp - boot image via network using DHCP/TFTP protocol<br />
echo - echo args to console<br />
editenv - edit environment variable<br />
eeprom - EEPROM sub-system<br />
env - environment handling commands<br />
exit - exit script<br />
extphy - external PHY enable (clock and reset)<br />
false - do nothing, unsuccessfully<br />
go - start application at address 'addr'<br />
gpio - input/set/clear/toggle gpio pins<br />
help - print command description/usage<br />
httpd - start webserver<br />
i2c - I2C sub-system<br />
iminfo - print header information for application image<br />
itest - return true/false on integer compare<br />
loadb - load binary file over serial line (kermit mode)<br />
loads - load S-Record file over serial line<br />
loady - load binary file over serial line (ymodem mode)<br />
loop - infinite loop on address range<br />
md - memory display<br />
mii - MII utility commands<br />
mm - memory modify (auto-incrementing address)<br />
mmd - MMD utility commands<br />
mtest - simple RAM read/write test<br />
mw - memory write (fill)<br />
nm - memory modify (constant address)<br />
ping - send ICMP ECHO_REQUEST to network host<br />
printenv- print environment variables<br />
reset - Perform RESET of the CPU<br />
run - run commands in an environment variable<br />
saveenv - save environment variables to persistent storage<br />
setenv - set environment variables<br />
sf - SPI flash sub-system<br />
sfboot - boot from serial flash device<br />
showvar - print local hushshell variables<br />
sleep - delay execution for some time<br />
sntp - synchronize RTC via network<br />
source - run script from memory<br />
test - minimal test like /bin/sh<br />
tftpboot- boot image via network using TFTP protocol<br />
tlb - setup TLB (virtual memory) mapping<br />
true - do nothing, successfully<br />
version - print monitor, compiler and linker version<br />
wdoff - switch watchdog off<br />
wdtest - watchdog test (endless loop!)<br />
wdtime - set watchdog timeout</span></blockquote>
<br />
On the printenv<br />
<br />
<blockquote class="tr_bq">
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">FALCON => printenv<br />
act_img_addr=0xBF20003C<br />
addip=setenv bootargs ${bootargs} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}:${netdev}:off<br />
addmisc=setenv bootargs ${bootargs} ethaddr=${ethaddr} machtype=${machtype} ignore_loglevel vpe1_load_addr=0x83f00000 vpe1_mem=1M mem=63M ${mtdparts}<br />
addmtdparts0=setenv mtdparts mtdparts=sflash:256k(uboot),128k(uboot_env),3712k(linux),3712k(image1),384k(rootfs_data),8192k@0(all)<br />
addmtdparts1=setenv mtdparts mtdparts=sflash:256k(uboot),128k(uboot_env),3712k(image0),3712k(linux),384k(rootfs_data),8192k@0(all)<br />
baudrate=115200<br />
boot_image=run boot_image${c_img};<br />
boot_image0=run kernel0_from_sf flashargs addip addmtdparts0 addmisc && bootm ${ram_addr}<br />
boot_image1=run kernel1_from_sf flashargs addip addmtdparts1 addmisc && bootm ${ram_addr}<br />
boot_image_err=setenv kernel_offs ${kernel0_offs};httpd && setenv image0_is_valid 1<br />
bootcmd=run flash_flash<br />
bootdelay=5<br />
committed_image=1<br />
data_addr=0xB07a0000<br />
data_offs=0x7a0000<br />
data_size=0x60000<br />
env_offs=0x40000<br />
env_offs_redund=0x50000<br />
ethact=GPHY0<br />
ethaddr=C8:3A:35:edited<br />
ethrotate=no<br />
extphy=1<br />
fileaddr=80F00000<br />
filesize=380004<br />
flash_flash=run select_image boot_image<br />
flashargs=setenv bootargs rootfstype=squashfs,jffs2<br />
goi_config=begin-base64 644 goi_config@H4sIAGrcIVMCA+1XS0/bQBDOtfkVW3HICbOzT7tWD6hAhQoSIhE9RMja2Jtg@1c5atmnpv+84KTgPp1woFWq+i62dz/PamZ21reOj2M2n6exo5tJo+dp7WVCE@lnLxRGw+maS8B4wD5VKB0D0KXDHdI7T3CrivalMS0iudq//Ee07+RtFf7jjB@zSeDWeYmJhv037miTt2cfDJZOilN8z5Kc4uZygsyYBTkIVWHACNQH5gY9NeU@lGY+s9XGYm3zwqKm+9JGtZlkDeHRyqi0UzLglHuBTxVlwm9lN8dXJ9EkiRYU@yTwutJKKyQ1GFZtsyaEeUH/DeBIncWSKZNMn9LTK07q25Q5JVLgfW8LczdPa@la0Hl+jASqaiz4ssYkQt5QR9o9HVBSUDCAKPrktgKWFaiVUR6n2ol6JD6mkp@FOZHK6VbynnuElTw+3vpgZaKYw4Dta0GUA142pdoRigO0KUGScA9wQPFGJdS@boeADCZUVwiNJFC8KwS2sE3B577GCLptI0l7PhqVPAAssm3brLEAXbYbiWRs@TYQ10aYdv/M7pLBD6qbTyj4mH/gOvRix2qm2Q/iktdkLpnZoxVh8Lndo7RA+@aW2yzBe+rhesNRX2XW7n9UrTrbaMZFIGjCktYaVor4fD8whEQBNTfnuk4nnt@A/cpoz5HdLBXFTMRYL1iNQGwDmphSjNxWRov+eD5WJeSYuU1fqwF4fL7jZWJ@q8xKPHg6RWeZmaGadvXCueLSJRZ3eOPraVylLe/zzRDdfYCJll1nR+xK27We@JM3h8KbPf4vzv0lCvBj/Zmb/go1n5j8CmvkvtBBCaobzn2lN9/P/NUB7e/zP@WO//xdUsykxly+ZI9uLq+wv1P945dvY/KNne/ynyQAFT+/5/DRzg/YHMXU3i@u+beTuo7S0Y/C0vSBO8L6TS15fswDPvN2seL4+HpdXR9etasHODMxd+B8Zfb@8Ly+I+P8+DYcnpLx/dej5hVHCRlXt32814faE74OgUpPST+k/X3b7bHHHnv8@c/wCI53hZAAUAAA=@====@<br />
gphy0_phyaddr=0<br />
gphy1_phyaddr=1<br />
image0_addr=0xB0060000<br />
image0_is_valid=1<br />
image0_version=G10xla_v1.0.0.2_cn<br />
image1_addr=0xB0400000<br />
image1_is_valid=1<br />
image1_version=G10xla_v1.0.0.2_cn<br />
image_name=openwrt-lantiq-falcon-EASY98020<br />
ipaddr=192.168.5.1<br />
kernel0_from_sf=sf probe 0;sf read ${ram_addr} ${kernel0_offs} ${max_kernel_size}<br />
kernel0_offs=0x60000<br />
kernel1_from_sf=sf probe 0;sf read ${ram_addr} ${kernel1_offs} ${max_kernel_size}<br />
kernel1_offs=0x400000<br />
lang=en<br />
load_kernel=tftpboot ${ram_addr} ${tftppath}${image_name}-uImage<br />
load_uboot=tftpboot ${ram_addr} ${tftppath}u-boot.img<br />
machtype=EASY98020<br />
magic_addr=0xBF200038<br />
magic_val=0xDEADBEEF<br />
max_kernel_size=0x180000<br />
net_nfs=run load_kernel nfsargs addip addmtdparts0 addmisc;bootm ${ram_addr}<br />
nfsargs=setenv bootargs root=/dev/nfs rw nfsroot=${serverip}:${rootpath},${nfsoptions}<br />
nfsoptions=rsize=1024,wsize=1024<br />
omci_loid=GPONONU15<br />
ponmac=00:A1:B2:edited<br />
preboot=echo;echo Type "run flash_nfs" to mount root filesystem over NFS;echo<br />
ram_addr=0x80F00000<br />
reset_uboot_env=sf probe 0;sf erase 0x40000 0x20000<br />
restore_sta=0<br />
rgmii0_phyaddr=4<br />
rgmii1_phyaddr=5<br />
save_uboot=sf probe 0;sf erase 0 0x40000;sf write ${ram_addr} 0 ${filesize}<br />
select_image=setenv activate_image -1;if itest *${magic_addr} == ${magic_val} ; then if itest *${act_img_addr} == 0 ; then setenv activate_image 0;fi;if itest *${act_img_addr} == 1 ; then setenv activate_image 1;fi;mw ${magic_addr} 0x0;mw ${act_img_addr} 0x0;fi;if test $activate_image = -1 ; then setenv c_img $committed_image;else setenv c_img $activate_image;setenv activate_image -1;fi;if test $c_img = 0 && test $image0_is_valid = 0 ; then setenv c_img 1;fi;if test $c_img = 1 && test $image1_is_valid = 0 ; then setenv c_img 0;fi;if test $image0_is_valid = 0 && test $image1_is_valid = 0 ; then setenv c_img _err;fi;exit 0<br />
serial_number=5444544335edited<br />
serverip=192.168.1.2<br />
sgmii_inv=1<br />
sgmii_phyaddr=6<br />
stderr=serial<br />
stdin=serial<br />
stdout=serial<br />
sw_release_time=Apr 20 2015<br />
sw_ver=V1.0.0.2<br />
uboot_env_svn=144<br />
update_image0=tftpboot ${ram_addr} ${tftppath}${image_name}-squashfs.image;sf probe 0;sf erase ${kernel0_offs} +${filesize};sf write ${ram_addr} ${kernel0_offs} ${filesize}<br />
update_image1=tftpboot ${ram_addr} ${tftppath}${image_name}-squashfs.image;sf probe 0;sf erase ${kernel1_offs} +${filesize};sf write ${ram_addr} ${kernel1_offs} ${filesize}<br />
update_openwrt=run update_image0 && setenv committed_image 0 && setenv image0_is_valid 1 && saveenv && run update_rootfs_data<br />
update_rootfs_data=sf probe 0;sf erase ${data_offs} +${data_size}<br />
update_uboot=run load_uboot && run save_uboot<br />
us_vlan_id=145<br />
us_vlan_mode=0<br />
us_vlan_priority=1<br />
ver=U-Boot 2011.12-lantiq-gpon-1.2.20.1 (Sep 18 2014 - 15:38:45),uboot_svn_id=144<br />
vlan_mode=0<br />
vlan_mode_option=0<br />
Environment size: 5203/65531 bytes<br />
FALCON =></span></blockquote>
To be continue will see the command line interface of this Tenda G103, this is absolutely applicable on PLDTHOMEFIBR, we can now replace our HUAWEI ONU/ONT with this device.pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-26398396037570766032020-05-14T02:08:00.002+08:002020-05-14T02:09:29.869+08:00TP-Link WR886N Chinese Third Party Firmware<div style="text-align: justify;">
Here we go after we done moding the FLASH and RAM its time for us to Brush it with the third party firmware. This device WR886N version 3.0 is supported by OpenWrt, SuperWrt, DD-Wrt and Gargoyle Linux opensource firmware. What we need is a USB cheap 25Q FLASH programmer and USB to TTL for the serial console. Next is decide to which boot loader you want to be accustom with.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdM9WpIEahE-AnBOp-lHa3-eHxYIZCBYwTYuUJOtu5P1YPhRSH_94cBxSbVfKW2nlclOBAhjHPNUwC6Jts63R8LmaRuqOhIIyT27HcdAa7k6RPaVBjRGesoXNSzN51NBZjiCYj07nD1MIn/s1600/breed.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="523" data-original-width="819" height="408" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdM9WpIEahE-AnBOp-lHa3-eHxYIZCBYwTYuUJOtu5P1YPhRSH_94cBxSbVfKW2nlclOBAhjHPNUwC6Jts63R8LmaRuqOhIIyT27HcdAa7k6RPaVBjRGesoXNSzN51NBZjiCYj07nD1MIn/s640/breed.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The first boot loader utility is BREED aka Boot and Recovery Environment for Embedded Devices is a close source boot loader by hackpascal, its in Simplified Chinese language just use Google translate to let you understand their script. You can download it on Google filename breed-tp9343.bin.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhn_qSJVKfFpx7cMpSK-aPjXWoyP5z4gGRvqL1hmzjsNr_q3DQCLnza8FWKnJ-Cu0uC1ag6Ofy_8RRo0rIbTG1tGSgOlDUwPH0DmTGiCsix7Vr5kw-dG7JHUfq5kxZtQmG3P9OvOQ9TlosU/s1600/breed_eng.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="460" data-original-width="819" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhn_qSJVKfFpx7cMpSK-aPjXWoyP5z4gGRvqL1hmzjsNr_q3DQCLnza8FWKnJ-Cu0uC1ag6Ofy_8RRo0rIbTG1tGSgOlDUwPH0DmTGiCsix7Vr5kw-dG7JHUfq5kxZtQmG3P9OvOQ9TlosU/s640/breed_eng.png" width="640" /></a></div>
<div style="text-align: justify;">
The second boot loader is also a BREED but modified version of the Simplified Chinese language its in English version. Download on the Giant Search engine filename u-boot_tp9343.bin.</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3i7m_HIBtI367UL24knLWXk-kkOFm1BkZodlRtqau5-q9AM5KZw2vlg19hY3akk_Z5jjQZ7lUEw8lhg5gklZ4u_ZWMy5eEZSpFLAXLMg9_F0jcSz4Fcdvx5rmxck5OnrAWyhvbHJ30UZK/s1600/tp9343_uboot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="511" data-original-width="740" height="440" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3i7m_HIBtI367UL24knLWXk-kkOFm1BkZodlRtqau5-q9AM5KZw2vlg19hY3akk_Z5jjQZ7lUEw8lhg5gklZ4u_ZWMy5eEZSpFLAXLMg9_F0jcSz4Fcdvx5rmxck5OnrAWyhvbHJ30UZK/s640/tp9343_uboot.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The third boot loader is from TP-Link WR940N version 3.0 stock firmware stripped u-boot, filename is u-boot_tp-link_wr940nv3.bin.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKKgWuHI34Fbto15NX3HPGl8pl18gDAQONA0juSUtq53O6RU7daIOAFhNy9srHpvKPAwAks_SoGcsmJ9A6JqPA83iYBQNwuS3usH1M9xtrx8dmqMP9qWD2x5OyzI74T9xWr1Veq9SG1Oc4/s1600/wr940nv3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="768" data-original-width="1366" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKKgWuHI34Fbto15NX3HPGl8pl18gDAQONA0juSUtq53O6RU7daIOAFhNy9srHpvKPAwAks_SoGcsmJ9A6JqPA83iYBQNwuS3usH1M9xtrx8dmqMP9qWD2x5OyzI74T9xWr1Veq9SG1Oc4/s640/wr940nv3.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The first brushing I did is with the TP-Link stock firmware WR940N version 3.x is also identical to WR941ND version 6.x such SoC. RAM and FLASH. Likewise WR940N version 4.x and 5.x too.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsQPiQaeJfjxNeCO-MS-gbO6otzSr49eqiGKMLdQn_1l66nxThAwrNGKdeKbXppfB1-kJrKTX9a1To66NVQO-6GT5C6QXMnxPWMmv76gak5cTu6XRkpyB1KyI3t4-QbHWq_sXPTuXlnGRo/s1600/wr940nv4a.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="768" data-original-width="1366" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsQPiQaeJfjxNeCO-MS-gbO6otzSr49eqiGKMLdQn_1l66nxThAwrNGKdeKbXppfB1-kJrKTX9a1To66NVQO-6GT5C6QXMnxPWMmv76gak5cTu6XRkpyB1KyI3t4-QbHWq_sXPTuXlnGRo/s640/wr940nv4a.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
This is TP-Link stock firmware version 4.x if you want to know more about the internal web graphical user interface just visit tp-link.com for the respective wireless router emulator.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipG07JCaPjxiaIc3b8tLsx8IawaWJSWU4W-5tFtzskXAIluuvvuKFA9gkfUAeattf9NO1duDp9ZQ8mKrYTkcyNKF8f4ma47O5Hrp4Tju_ro1bAP0c89SAkMQ8JsdcQxB7uyZ8fDKvr2IaB/s1600/wr940nv4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="609" data-original-width="879" height="442" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipG07JCaPjxiaIc3b8tLsx8IawaWJSWU4W-5tFtzskXAIluuvvuKFA9gkfUAeattf9NO1duDp9ZQ8mKrYTkcyNKF8f4ma47O5Hrp4Tju_ro1bAP0c89SAkMQ8JsdcQxB7uyZ8fDKvr2IaB/s640/wr940nv4.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Brushing with third party firmware such as OpenWrt is straight forward since you can just upload via web interface if the wireless router is in the TP-Link stock firmware, TFTP is another method on brushing the firmware its usually use for device recovery from bricked devices.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTpRJjDXnGSH0ibehtQ5xbGhcGSckUqkvYCKY8-QkxG14FtIHcjFafauaYXFjEqHEhvG0ygAGv09DcvHy4P60NrvSnhE8BhZ0GgASkLTwYX_uXmfsXA3I2I6hvntHgpSG82mH7-8pmCpWH/s1600/wr941ndv6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="607" data-original-width="881" height="440" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTpRJjDXnGSH0ibehtQ5xbGhcGSckUqkvYCKY8-QkxG14FtIHcjFafauaYXFjEqHEhvG0ygAGv09DcvHy4P60NrvSnhE8BhZ0GgASkLTwYX_uXmfsXA3I2I6hvntHgpSG82mH7-8pmCpWH/s640/wr941ndv6.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
I have more favor on OpenWrt third party firmware because of its plenty packages for the wireless router. Successfully also tested on LEDE both WR940N and WR941ND. On the Chinese forum someone mention that the WR886N ver3.0 can be flashed with TP-Link WR940N version 5.x, ow true is it?</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaT4CILpk4G1HA5581TVpI4j3tlp22Fxi2DgWVY6-j89g3wRwc6j2sFzDMK79MBQ9KDVm4uRyj-QvVpY3CiddMMh1Ctzg2T1STPQseakNxUyGPvrS3BUDX2ZLEmjG4QWJDHAx2F3tYsjIt/s1600/wr940nv5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="614" data-original-width="1144" height="342" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaT4CILpk4G1HA5581TVpI4j3tlp22Fxi2DgWVY6-j89g3wRwc6j2sFzDMK79MBQ9KDVm4uRyj-QvVpY3CiddMMh1Ctzg2T1STPQseakNxUyGPvrS3BUDX2ZLEmjG4QWJDHAx2F3tYsjIt/s640/wr940nv5.png" width="640" /></a></div>
<br />
<div style="text-align: justify;">
This is TP-Link new web graphical user interface that added some features like Access Point only, Repeater or Range Extender, and WISP unlike the old version this addition function is not supported except for WDS and Wireless router only. The said added features were only exclusive for the TP-Link WA series device not on WR and WDR. The firmware option brushing may depends on the users, what I like on OpenWrt firmware is SoC TP9343 can be fully enhanced to 26dBm or 398mW of power.</div>
<br />
<div style="text-align: justify;">
If you know other third party Linux firmware that I did not mention let me know I want to brush it with your firmware that you have tried.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-29251355010921755592020-05-14T01:07:00.002+08:002020-05-14T01:07:41.167+08:00TP-Link WR886N Chinese Version 3 Mod RAM FLASHFirst we have to open the clam shell type casing of the TP-Link WR886N chinese version 3.0 it has only two small screw found at the back of the device. Unscrew it, use plastic or metal knife to open the rounded clam upper cover.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0J3khLh9TYtNdqWbtZatGBY8XDN_xeR7I81iJANekQKjhXd51uRiSXaDx9WsXyK8DHyGVoJXsXQqp97RdP8hCNqvpeNtsonE0T3qq5mmi7zCLAvwC-WIQGvIx3Hjzy61XFYpPrkHRM99G/s1600/wr886n_v3_01.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0J3khLh9TYtNdqWbtZatGBY8XDN_xeR7I81iJANekQKjhXd51uRiSXaDx9WsXyK8DHyGVoJXsXQqp97RdP8hCNqvpeNtsonE0T3qq5mmi7zCLAvwC-WIQGvIx3Hjzy61XFYpPrkHRM99G/s640/wr886n_v3_01.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Things needed basic electronics skill, hot air gun for desoldering the RAM and the FLASH. I used portable hot air gun in my case, for FLASH at least 400 to 450 C so I can lift it with the tweezers while 500 to 550 C for the RAM.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4a3FUu8PaY9zz3ryRAxNtj6tkwHkSb_27Zueow-rueXCT91tHXLt0KpxmACCUEouIoF8BjNPsHclIrkhln7iMMrZEJBjMM3eDrGgcrmsv58YB1v1EWPj9bwiybRehE0RV81sVgOLlClNC/s1600/wr886n_v3_02.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4a3FUu8PaY9zz3ryRAxNtj6tkwHkSb_27Zueow-rueXCT91tHXLt0KpxmACCUEouIoF8BjNPsHclIrkhln7iMMrZEJBjMM3eDrGgcrmsv58YB1v1EWPj9bwiybRehE0RV81sVgOLlClNC/s640/wr886n_v3_02.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
An old RAM of my Laptop PC3200 with eight chips memory module by 64MB to substitute the TP-Link WR886N 16MB memory.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFM1XvsiFpXu91QExi9WCF1SPVFwFQUF7DMnlpVifSw4xDYoqQShhjHz8OcrWk93FYSAfthHdr603qwBZkgeCv_JgT_yZpTVitsXLl418V8Fy1cpEQGOetrD_3ODhncG_fl_pLCs3xM5gj/s1600/wr886n_v3_04.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFM1XvsiFpXu91QExi9WCF1SPVFwFQUF7DMnlpVifSw4xDYoqQShhjHz8OcrWk93FYSAfthHdr603qwBZkgeCv_JgT_yZpTVitsXLl418V8Fy1cpEQGOetrD_3ODhncG_fl_pLCs3xM5gj/s640/wr886n_v3_04.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Let just swap the RAM of the memory module to the router, putting back the memory to the router is sweating it will takes time aligning it and most of the time the memory pins don't sits properly need to clean the pad and the pins before heating it back onto the circuit board.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFQ6X5wTB3vuWIpJBNk_lzdL9T6G1PsUN79MahPu0rLo5S1XMEecn_wjMqNomkrLLzhGb3ZEK3ZWVCp7QFeHjlwoExYkpAZik2KHlytgFPhgJkMYnevawCiANm4vJZpI603b56MsqUZWxV/s1600/wr886n_v3_03.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFQ6X5wTB3vuWIpJBNk_lzdL9T6G1PsUN79MahPu0rLo5S1XMEecn_wjMqNomkrLLzhGb3ZEK3ZWVCp7QFeHjlwoExYkpAZik2KHlytgFPhgJkMYnevawCiANm4vJZpI603b56MsqUZWxV/s640/wr886n_v3_03.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Once it done the FLASH and the RAM are on its place, testing and power ups so we can proceed to Brushing the third party firmware.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-36330862924936866782020-05-14T00:33:00.001+08:002020-05-14T00:35:32.134+08:00TP-Link WR886N Chinese V3 Specs<div style="text-align: justify;">
A week before went to online store and look for a second hand wireless router that I can make used of for OpenWrt plus VPN addons or similar cheap router that support it. So here I found a used TP-Link WR886N Chinese version 3.0 it looks like the device is good and very cheap and the specs is near to average for consumer.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnCZZW2_41kO5P3XnNCf1wwh11IY581BsJ0dnLc7inpwpJ_b9i5zwQBRKfuA3nPVON2uXUcinJK-wCWiwGPkyHYhCoJTQxH5nvfff6SIaHpeJlCJCk9Ve0ZuASaArZiXiWFGZtb1u_4Jcu/s1600/wr886n_shopee.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="315" data-original-width="1000" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnCZZW2_41kO5P3XnNCf1wwh11IY581BsJ0dnLc7inpwpJ_b9i5zwQBRKfuA3nPVON2uXUcinJK-wCWiwGPkyHYhCoJTQxH5nvfff6SIaHpeJlCJCk9Ve0ZuASaArZiXiWFGZtb1u_4Jcu/s640/wr886n_shopee.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Less than ten days the parcel arrived, a postmen came to deliver to the house and paid for the COD.<br />
I ordered two pieces for me the price is reasonable it only cost 354.00 Php each while the shipping is 100 Php for the two devices.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivu75RK4oul5bNWhz5WAX6YVVUtPSbPhb3viSvWYre9F-xuOuv3Sabt5ScgX1zvp-xok1mZ6xS6zjzxx5x2C3jCYqnKW5GHcXk_InaTIG8dfkhwwUYB6eAPejl7q9nK-uMFDqxPCUN-weB/s1600/wr886n.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivu75RK4oul5bNWhz5WAX6YVVUtPSbPhb3viSvWYre9F-xuOuv3Sabt5ScgX1zvp-xok1mZ6xS6zjzxx5x2C3jCYqnKW5GHcXk_InaTIG8dfkhwwUYB6eAPejl7q9nK-uMFDqxPCUN-weB/s640/wr886n.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
Looking at the physical appearance it has three 5dBi flat circuit omni directional antenna, fronting single system/power LED.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXF1DmAzruXcikmMAIwK8-0s0rwxjDg-tXWbhVguu3g2_LagJ19ibs6xGx6s3lsi39d3F2U1MYuQXkOUNbZ_r_xUmszK6GF0GJ9VZi5iVJSSE9yOGiODCDm3nzpHBOP6TAhJFRK0dsedjc/s1600/wr886n_rear.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="344" data-original-width="1199" height="182" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXF1DmAzruXcikmMAIwK8-0s0rwxjDg-tXWbhVguu3g2_LagJ19ibs6xGx6s3lsi39d3F2U1MYuQXkOUNbZ_r_xUmszK6GF0GJ9VZi5iVJSSE9yOGiODCDm3nzpHBOP6TAhJFRK0dsedjc/s640/wr886n_rear.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
At the rear face are the power input jack it has no ON/OFF switch, pin hole RESET button, single WAN port 100Mbps and four 100Mbps LAN ports.</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZmzo5A0WhWHFbYw5W95-4IMRjrj7ulbq7tVoFvzEAzeyNfR4tTqYYUzlqnm3UASttRnSJy5FrhqeoJ8NQDXSpwg4Bpnqr0tB8hW0BbHtxIy5vSzj2iwAHaSVO49urPOUcYShcnxs3T_P/s1600/wr886n_flash.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="943" data-original-width="1600" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZmzo5A0WhWHFbYw5W95-4IMRjrj7ulbq7tVoFvzEAzeyNfR4tTqYYUzlqnm3UASttRnSJy5FrhqeoJ8NQDXSpwg4Bpnqr0tB8hW0BbHtxIy5vSzj2iwAHaSVO49urPOUcYShcnxs3T_P/s640/wr886n_flash.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The FLASH is 25Q16 series this mean that the chips is 16M-bit Serial Flash or in other words its only a 2Mbytes of flash storage.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaPgASodEnp4EusG_PvYrqOq98qRIg1pOI3KtMPbGPExkTWUf_D0R8n3bInwRylAJs4BcfSGfuANqSHxoQ1EO12FS_ml2d_A-AhUq_BddrrFAwtLC5faAkNJJxwZNx5CPne1QmuIMt1Sdz/s1600/wr886n_ram.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="896" data-original-width="1600" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaPgASodEnp4EusG_PvYrqOq98qRIg1pOI3KtMPbGPExkTWUf_D0R8n3bInwRylAJs4BcfSGfuANqSHxoQ1EO12FS_ml2d_A-AhUq_BddrrFAwtLC5faAkNJJxwZNx5CPne1QmuIMt1Sdz/s640/wr886n_ram.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The RAM is from Zentel its A3S28D40JTP-50, further specs of the memory its a 128M Double Data Rate Synchronous DRAM. It has only a capacity of 16MB of RAM.</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifb1964bg3UyC6as0nBRbRs13t6wNzX4Yhld8iiTy2XmwhIqIOQ3Ppieko10KYrl0dEYIkW376t2KbqYthWs41PoG6IUOqwLs3YYBDodKWUooHVQDEQUOL4rsvVWmqGoLZ02KKtfi_4E6m/s1600/wr886n_soc.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="822" data-original-width="1600" height="328" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifb1964bg3UyC6as0nBRbRs13t6wNzX4Yhld8iiTy2XmwhIqIOQ3Ppieko10KYrl0dEYIkW376t2KbqYthWs41PoG6IUOqwLs3YYBDodKWUooHVQDEQUOL4rsvVWmqGoLZ02KKtfi_4E6m/s640/wr886n_soc.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The TP-Link WR886N Chinese version 3.0 is equip with Qualcomm Atheros TP9343-AL3A from Taiwan. The SoC has 750 Mhz processor of speed.</div>
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigi8EQr5cAzyRpbUUDob4nzoBYBLtk4hjMHWTZ4aV-DdWUQ2VIY-htey3xbPbqmz-Aoo_IAYcYhF75Z_EF3_J30DjuuYxTYyjm79r5LF9aDFVAT96VMfwvHQP6nqV9egKgdY1Q8iwNC0Fz/s1600/wr886n_ver3.0.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="832" data-original-width="1600" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigi8EQr5cAzyRpbUUDob4nzoBYBLtk4hjMHWTZ4aV-DdWUQ2VIY-htey3xbPbqmz-Aoo_IAYcYhF75Z_EF3_J30DjuuYxTYyjm79r5LF9aDFVAT96VMfwvHQP6nqV9egKgdY1Q8iwNC0Fz/s640/wr886n_ver3.0.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The internal circuitry of the TP-Link WR886N Chinese version 3.0 seems to be have many clones but different name model. According to Wikidevi which now Deviwiki this wireless router device known similar are TP-LINK TL-WA901ND v4.x and v5.x, TL-WR882N v1.x, TL-WR886N v1.x, TL-WR940N v3.x/v4.x/v5.x, WR941ND v6.x and TL-WR941HP v1.x.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVAJ2GxZIWcxraEpGDMaW7TvH2iME3jocE98rcI0MgvWW7qlhLf4fpiSpPO8h17ETvOgcpiYBxeXp6KsaPnWhHeUrH0Y9T3PNTAKoDEqRysicERdLHG7U-kUypFH2BmE708L4kvkT8Ae2z/s1600/wr886n_inside.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1019" data-original-width="1546" height="420" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVAJ2GxZIWcxraEpGDMaW7TvH2iME3jocE98rcI0MgvWW7qlhLf4fpiSpPO8h17ETvOgcpiYBxeXp6KsaPnWhHeUrH0Y9T3PNTAKoDEqRysicERdLHG7U-kUypFH2BmE708L4kvkT8Ae2z/s640/wr886n_inside.jpg" width="640" /></a></div>
<br />
<div style="text-align: justify;">
The mention above TP-Link wireless routers are identical to WR886N version 3.0 same SoC but some others vary on RAM and FLASH have more such 4MB and 32MB. For this device it will not qualify to Brush it with third party firmware wireless router such as OpenWrt, SuperWrt, DD-Wrt or Gargoyle. The remedy for this device WR886N ver3.0 is to modify the RAM and FLASH to make it fully functional third party opensource wireless router firmware.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-55645240490655902462020-04-25T13:19:00.000+08:002020-04-25T13:20:51.946+08:00PLDT Fiberhome ONU RP2684<div style="text-align: justify;">
As per request one of my commentator on this blog, a legit PLDTHOMEFIBR subscriber commented that his AN5506-04-F ONU/ONT just get recently patched with firmware RP2684 and nowhere to find the password for adminpldt account.</div>
<br />
<div style="text-align: justify;">
Yes there is few changes of this firmware RP2684 of Fiberhome ONU AN5506-04-F one of those is the prevention from gaining the adminpldt access level to do the configurations on the web user interface so PLDT can limit the subscribers from doing so to the said FTTH device.</div>
<br />
<div style="text-align: justify;">
Here a list of the command line interface that you can do or practice. Take note that any alteration done by you or by your behalf will void the warranty of your PLDT Fiberhome ONT/ONU device when malfunction occur.</div>
<br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">WRI(DEBUG_H)> list</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">0. active section [0|1]</span><br />
<span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">1. bobtest read_regs slave_addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> begin_addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> count </span><1-32><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
2. bobtest write_regs slave_addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> begin_addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> count </span><1-32><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> value1 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> {value2 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value3 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value4 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value5 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value6 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value7 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value8 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value9 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value10 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value11 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value12 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value13 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value14 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value15 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value16 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value17 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value18 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value19 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value20 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value21 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value22 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value23 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value24 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value25 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value26 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value27 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value28 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value29 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value30 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value31 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1 {value32 </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;">}*1<br />
3. clear<br />
4. clear_save gpio<br />
5. commit section [0|1]<br />
6. control opticalgenerator [enable|disable] mode [prbs7|prbs15|prbs23|prbs31|alt]<br />
7. debug cli_msg id </span><id><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
8. debug cli_msg send_buf </span><buf><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
9. del port_vlan_service </span><device><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><type><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><svid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><scos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><tvid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><tcos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><qvid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><qcos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
10. delete onuhw version<br />
11. exit<br />
12. fandebug [enable|disable]<br />
13. get image status<br />
14. get nvram </span><name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
15. get system status<br />
16. get version info<br />
17. get web [user|admin] username </span><name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
18. help<br />
19. i2c read </span><addr><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><reg><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
20. i2c write </span><addr><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><reg><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><value><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
21. list<br />
22. mibreset<br />
23. optdebug [enable|disable]<br />
24. output redirect<br />
25. printenv env_key FHSNOUI<br />
26. printenv env_key ethaddr<br />
27. quit<br />
28. read gpio </span><0-256><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
29. read i2c device page </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
30. run [local_config]<br />
31. run [omci_tl]<br />
32. set bar code [pcb|bosa] </span><barcode><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
33. set black_list </span><index><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><mac_address><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
34. set debug_level </span><level><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
35. set default-printf-to [disable|console|telnet|all]<br />
36. set dhcp_delivery [disable|enable]<br />
37. set electricfan run temperature </span><0-100><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> stop temperature </span><0-100><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
38. set nvram </span><name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><value><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
39. set oam_print [rx|tx|stop]<br />
40. set omci_status </span><status><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
41. set onuhw version </span><onuhw><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
42. set opt power [enable|disable]<br />
43. set opt rxpoweradjust1 min </span><rxmin><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> max </span><rxmax><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> offset </span><rxoffset><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
44. set opt rxpoweradjust2 min </span><rxmin><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> max </span><rxmax><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> offset </span><rxoffset><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
45. set optoutpower level </span><0-2><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
46. set optoutpower offset </span><outoffset><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
47. set optpoll [enable|disable]<br />
48. set optrxpower offset </span><outoffset><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
49. set ponrate_config_switch </span><0-1><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
50. set port_all_isolation [disable|enable]<br />
51. set port_attribute </span><device><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> [L2|L3]<br />
52. set port_igmp_state </span><device><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> [0|1]<br />
53. set port_isolation </span><device1><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><device2><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> [disable|enable]<br />
54. set port_vlan_service </span><device><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><type><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><svid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><scos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><tvid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><tcos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><qvid><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><qcos><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><flow><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><queue><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
55. set pppoe_delivery [disable|enable]<br />
56. set print_num </span><num><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
57. set queue_protect [on|off]<br />
58. set show_packets </span><device_name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> [rx|tx|rtx|stop]<br />
59. set web [user|admin] username </span><name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> password </span><value><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
60. set web default [user|admin] username </span><name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> password </span><value><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
61. setbuttondebug [disable|enable|start]<br />
62. setleddebug [disable|enable|on|off]<br />
63. setlog [omci|none] [old|pkt|timer|conf|temp|info|none|warning]<br />
64. setpmlog </span><0-1><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
65. setusbdebug<br />
66. shell<br />
67. show [ponrate_config_switch]<br />
68. show bar code [pcb|bosa]<br />
69. show black_list<br />
70. show catv rf<br />
71. show debugversion<br />
72. show electricfan work temperature<br />
73. show history<br />
74. show optoutpower level<br />
75. show optoutpower offset<br />
76. show optrxpower adjust<br />
77. show port_info </span><device_name><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
78. show power supply<br />
79. show print_num<br />
80. show queue_info<br />
81. tshell<br />
82. updateenv ethaddr </span><mac_addr><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
83. updateenv fhsnoui </span><snoui><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
84. upload ftp any </span><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><username><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><password><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><path><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><filename><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
85. write gpio </span><0-256><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> </span><0-1><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
86. write i2c device page </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> addr </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"> value </span><0-255><span style="font-family: "courier new" , "courier" , monospace; font-size: x-small;"><br />
87. write_save gpio </span><pin_num pin_num="" value=""><span style="font-size: x-small;"><br />
</span> <br />
</pin_num></0-255></0-255></0-255></0-1></0-256></filename></path></password></username></snoui></mac_addr></device_name></0-1></value></name></value></name></device_name></num></queue></flow></qcos></qvid></tcos></tvid></scos></svid></type></device></device2></device1></device></device></0-1></outoffset></outoffset></0-2></rxoffset></rxmax></rxmin></rxoffset></rxmax></rxmin></onuhw></status></value></name></0-100></0-100></level></mac_address></index></barcode></0-255></0-255></0-256></value></reg></addr></reg></addr></name></name></qcos></qvid></tcos></tvid></scos></svid></type></device></buf></id></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></0-255></1-32></0-255></0-255></1-32></0-255></0-255>pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com9tag:blogger.com,1999:blog-3938245997088008930.post-48658156139919961802020-03-05T02:17:00.003+08:002020-03-05T02:20:06.380+08:00Fiberhome HG6245D PLDTs Ultimate Solution<div style="text-align: justify;">
Early this year of January 2020 I was really eager to have the PLDT Fiberhome HG6245D ONT on hand for my mini Lab as part of my Toys collection aside from the AN5506-04-XXX series devices. Luckily its first week of March and was able to hand over me this shiny dual band Optical Network Unit. It is most likely identical to AN5506-04-FA equipment with two USB ports and two POTS ports.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqDGCKZ0XVvPBAzyPt2_KDOnT_7rTARekKntrQweeCofZBcruSwstEu8uf6v6Xt8tXXuVtmhfddYuv0r2LZaxKqeekOf3gvbGD8_gIlVKvZe27a4y93nSpjs2dY6BE2GfrQvL2qaoWYMQp/s1600/20200305_014023.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="450" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqDGCKZ0XVvPBAzyPt2_KDOnT_7rTARekKntrQweeCofZBcruSwstEu8uf6v6Xt8tXXuVtmhfddYuv0r2LZaxKqeekOf3gvbGD8_gIlVKvZe27a4y93nSpjs2dY6BE2GfrQvL2qaoWYMQp/s640/20200305_014023.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
For the specs of HG6245D will talk about it on the other post, I want to say more now on the other issues that this ONU/ONT of PLDT will most like favors the GIANT Telco and will ease the headache from those malicious subscribers who are prone from exploiting their residential gateways (RG). There are many things on this ONU have been really restricted, such the get web access username adminpldt password is now being omittedfrom ths CLI. </div>
<br />
<div style="text-align: justify;">
This ONT device have four (4) LAN ports as well like the AN5506-04 series to my surprise even if the LAN 2,3&4 are being tick you won't get any internet access on it. Oh men this is not the least, I will write more on this, the sad news about this ONU/ONT device you will NOT be able to migrate it to another OLT of the PLDT Fiberhome unless someone will activate its MAC and SN.</div>
<br />
To be continue .....pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com8tag:blogger.com,1999:blog-3938245997088008930.post-59437072967430003472020-02-29T21:57:00.002+08:002020-02-29T21:57:09.101+08:00PLDT Fiberhome HG6245D RP2602<div style="text-align: justify;">Finally I was able to find one PLDT Fiberhome ONU HG6245D around the NCR area, the good thing is that the firmware is still unchanged its RP2602 so the default Super Admin username and password for the graphical user interface (GUI) is widely known no need to guess. How about adminpldt user account and password? Its by default you can just find it on this blog its identical to AN5506-04-FA/T there's no need to worry.</div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEje0Vt6g0TNXsVls1FvNUv40GVce-NazcWfHDi2R0DP2VwxxrW4AX05QvhiFca01jFdzej8FatdWdmVglHNCqMFqmtPFLH5wNd-XnVot7zS2LIqgUSyj2yw-GtzkODsePl_Oevkk_dQ0JLv/s1600/hg6245d.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="462" data-original-width="960" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEje0Vt6g0TNXsVls1FvNUv40GVce-NazcWfHDi2R0DP2VwxxrW4AX05QvhiFca01jFdzej8FatdWdmVglHNCqMFqmtPFLH5wNd-XnVot7zS2LIqgUSyj2yw-GtzkODsePl_Oevkk_dQ0JLv/s640/hg6245d.png" width="550" /></a></div><br />
Looking at the menus I can see no difference with RP2627 and RP2631 of AN55-0406-FA but except of the IPTV sub-menu is already revealing.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0OQEPRfmbeAWX-z9v9zupy2JNI2SWQUNKfLXhBWhMGdPOvd_dHG2c2CHNWUnQ6ZG7vqTugNrvtXtTVMp621RkKQcZwxzJmXQpx25fRGBHBLVn4kb8LcaE4qzgUQYXRB6HtXBitC20lBOD/s1600/hg6245d.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="326" data-original-width="965" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0OQEPRfmbeAWX-z9v9zupy2JNI2SWQUNKfLXhBWhMGdPOvd_dHG2c2CHNWUnQ6ZG7vqTugNrvtXtTVMp621RkKQcZwxzJmXQpx25fRGBHBLVn4kb8LcaE4qzgUQYXRB6HtXBitC20lBOD/s640/hg6245d.png" width="550" /></a></div><br />
<div style="text-align: justify;">Another sub-menu we can see under the Network Menu is the VoIP Settings, this will remind us that it would be possible for us to replicate the VoIP settings and make our own relay server and use a soft phone.</div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisKfpreM4t6LGeRA2bHhnu_fvx6lL-dqq-5vq6s80tKSK9-GVxAMP88pq46gZ_DIfDPXZhp3r7ChKdIyoOHO11tkbW_ahdwZuXG554n_t0hcmw-iAX822AHC8FGd0cEX4-akzQEwVz70If/s1600/hg6245d.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="405" data-original-width="965" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisKfpreM4t6LGeRA2bHhnu_fvx6lL-dqq-5vq6s80tKSK9-GVxAMP88pq46gZ_DIfDPXZhp3r7ChKdIyoOHO11tkbW_ahdwZuXG554n_t0hcmw-iAX822AHC8FGd0cEX4-akzQEwVz70If/s640/hg6245d.png" width="550" /></a></div>On the hardware side it is also an ARMv7 Processor but Broadcom chips only a single core.<br />
<blockquote class="tr_bq">#cat /proc/cpuinfo<br />
processor : 0<br />
model name : ARMv7 Processor rev 5 (v7l)<br />
BogoMIPS : 100.00<br />
Features : half thumb fastmult edsp tls idiva idivt lpae<br />
CPU implementer : 0x41<br />
CPU architecture: 7<br />
CPU variant : 0x0<br />
CPU part : 0xc07<br />
CPU revision : 5<br />
processor : 1<br />
model name : ARMv7 Processor rev 5 (v7l)<br />
BogoMIPS : 100.00<br />
Features : half thumb fastmult edsp tls idiva idivt lpae<br />
CPU implementer : 0x41<br />
CPU architecture: 7<br />
CPU variant : 0x0<br />
CPU part : 0xc07<br />
CPU revision : 5<br />
Hardware : BCM96846<br />
Revision : 0000<br />
Serial : 0000000000000000<br />
#</blockquote>Going to the MTDs here is what we get <br />
<blockquote class="tr_bq">#cat /proc/mtd<br />
dev: size erasesize name<br />
mtd0: 03880000 00020000 "rootfsA"<br />
mtd1: 03880000 00020000 "rootfsB"<br />
mtd2: 00a00000 00020000 "data"<br />
mtd3: 00100000 00020000 "nvram"<br />
mtd4: 00200000 00020000 "PreConfigure"<br />
mtd5: 00100000 00020000 "UserLocalCT"<br />
mtd6: 08000000 00020000 "dummy1"<br />
mtd7: 08000000 00020000 "dummy2"<br />
mtd8: 01360000 0001f000 "rootfs_ubifs"<br />
mtd9: 0001f000 0001f000 "METADATA"<br />
mtd10: 0001f000 0001f000 "METADATACOPY"<br />
mtd11: 01d10000 0001f000 "app_ubifs"<br />
mtd12: 002d8484 0001f000 "filestruct_full.bin"<br />
mtd13: 01360000 0001f000 "rootfs_ubifs"<br />
mtd14: 0001f000 0001f000 "METADATA"<br />
mtd15: 0001f000 0001f000 "METADATACOPY"<br />
mtd16: 01d10000 0001f000 "app_ubifs"<br />
mtd17: 002d8484 0001f000 "filestruct_full.bin"<br />
mtd18: 007df000 0001f000 "data"<br />
#</blockquote>Trying to get the web username and password looks like not possible anymore on the <span style="font-size: x-small;"><u>config\web# list</u></span>.<br />
<blockquote class="tr_bq">Config\web# list<br />
0. cd [..|device|service|switch|codec|dsp|protocol|pon|gpon|omci|wlan|tr069|wan|igmp|gponl3|oam|ntp|mld|web]<br />
1. clear<br />
2. exit<br />
3. help<br />
4. list<br />
5. show history<br />
Config\web#</blockquote><br />
We will wait this ONU if the updates takes place will visit again to see if the CLI will most like the AN5506-04-FA/T.<br />
<br />
<br />
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com15tag:blogger.com,1999:blog-3938245997088008930.post-51245139316913705422020-02-22T02:16:00.000+08:002020-02-22T02:20:38.657+08:00SkyCable Fiberhome ONU AN5506-04-D<div style="text-align: justify;">
Another episode of Fiberhome ONU/ONT from SkyCable a semi Giant cable TV provider in the Philippines who are now integrating its CATV to a starter ISP. Interestingly I stumble upon to its FTTH devices the ONUs are left expose to the internet and with the default username and password.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5o0-W-P8TJ7qx1bI8RTOawILJKEFRvB1Wbblwrl4XmxGzOOnoWxkqBWn08BmCQ75PSf4j_8yLH7KVkjQzZqb3YaMQRWgpLW6k5eRqEk92uGCfGL8j6b0UpYaeyd0_pC43CkXlHzeuvRp6/s1600/AN5506-04-D0.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="461" data-original-width="975" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5o0-W-P8TJ7qx1bI8RTOawILJKEFRvB1Wbblwrl4XmxGzOOnoWxkqBWn08BmCQ75PSf4j_8yLH7KVkjQzZqb3YaMQRWgpLW6k5eRqEk92uGCfGL8j6b0UpYaeyd0_pC43CkXlHzeuvRp6/s640/AN5506-04-D0.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
I was looking for a Converge ONU hoping to find one for experimentation, instead what I get an ONT of SkyCable AN5506-04-D. This optic residential gateway it just identical to AN5506-04-F only with telephone port. Going to the graphical user interface its not customize firmware but rather a factory default. Have a look of the few screenshots.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSxH5XCj7d1vnaR073Ji-lAJ1XKmPCj00THD0YVHSkcFICS-GPMuehcNIMi941bWMU6MrJiAYeLQ_UbxvoJ8Rgc5Ne783ESH2yPhszewG-J5qr6xBzLjFAwttQ2fNghqeH3f7ceyl1DPs2/s1600/AN5506-04-D.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="461" data-original-width="961" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSxH5XCj7d1vnaR073Ji-lAJ1XKmPCj00THD0YVHSkcFICS-GPMuehcNIMi941bWMU6MrJiAYeLQ_UbxvoJ8Rgc5Ne783ESH2yPhszewG-J5qr6xBzLjFAwttQ2fNghqeH3f7ceyl1DPs2/s640/AN5506-04-D.jpg" width="550" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXre0a2K3EqVTbRtDKRvZ9RM5HlyDcgyyeRC3QKjC6RqX5LEtpVH9H_8D6YXw-tmvEmJEqcA7bTlC6xQ2TrsZaDoSx3ku5lIMchGSaT-c87speo6EN1CQYBL2PgnzbpjCCLmXRjgbUrzm5/s1600/AN5506-04-D1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="460" data-original-width="967" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXre0a2K3EqVTbRtDKRvZ9RM5HlyDcgyyeRC3QKjC6RqX5LEtpVH9H_8D6YXw-tmvEmJEqcA7bTlC6xQ2TrsZaDoSx3ku5lIMchGSaT-c87speo6EN1CQYBL2PgnzbpjCCLmXRjgbUrzm5/s640/AN5506-04-D1.jpg" width="550" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7Ka3F3XJRlYwfTJBGZ8fMjqpswFrfEnDN0147srT-NTuhIoZ3UgrcD5lzwZ2fd-rbqdZSx1z621Y0IvZdm1W9J8acEkLgDhaKL6XEtLdlJbK-9r7apgiTnDCX0OqjCVdoZZOP7amntOmt/s1600/AN5506-04-D2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="557" data-original-width="963" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7Ka3F3XJRlYwfTJBGZ8fMjqpswFrfEnDN0147srT-NTuhIoZ3UgrcD5lzwZ2fd-rbqdZSx1z621Y0IvZdm1W9J8acEkLgDhaKL6XEtLdlJbK-9r7apgiTnDCX0OqjCVdoZZOP7amntOmt/s640/AN5506-04-D2.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
If you are eager to to see the CLI inside, you can use Putty for easy navigation the username and password is just default and never unchanged. I suggest that the Tech guy on the SkyCable NOC should take action of their network devices someone can just exploit it if not taken action.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com3tag:blogger.com,1999:blog-3938245997088008930.post-84958062997234319552019-12-18T20:42:00.004+08:002019-12-18T20:42:52.761+08:00Globe Fiberhome HG180U VDSL<div style="text-align: justify;">
Philippines, Globe Internet Service Provider also uses the Fiberhome VDSL HG180U device for high rise building, its not using the Fiber Optic line instead the PTSN twin copper wire. The Giant Telco PLDT likewise have this Home Gateway equipment for tall building were optic cable is not possible to deploy. This device equip with 802.11ac, three LAN port and single WAN port.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8rc0beJL7iDF0q1o2qFb19QstEjJIu24Zeka67dPmYu5DmLPlAFu8AN3J_13kpk5iNsNcMYkkTCXBaRczPDVBB80ghYzrU_IoGYkXfJVLcsEnaUnLICYBO-VzhjetrfqBrHVGcCKI7TIP/s1600/HG180.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="900" data-original-width="1200" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8rc0beJL7iDF0q1o2qFb19QstEjJIu24Zeka67dPmYu5DmLPlAFu8AN3J_13kpk5iNsNcMYkkTCXBaRczPDVBB80ghYzrU_IoGYkXfJVLcsEnaUnLICYBO-VzhjetrfqBrHVGcCKI7TIP/s640/HG180.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Graphical User Interface have no differences with PLDT firmware, except for the default username and password such as admin account, and the super admin credentials.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH9uCwAthTDeTdOuTWadjFVUa2jX3jJ6AfU_SLn5_Bi7lfcZzqaAt4IG7SYcrYWfYBt-V-DYYaqSzgfFxha_6EvrtTg7zfc8oJJn-zmbcDOSrSyJJFRTUdj5WyC97MXzZMLh3NK7UbcsuR/s1600/hg180web.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="900" data-original-width="1200" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH9uCwAthTDeTdOuTWadjFVUa2jX3jJ6AfU_SLn5_Bi7lfcZzqaAt4IG7SYcrYWfYBt-V-DYYaqSzgfFxha_6EvrtTg7zfc8oJJn-zmbcDOSrSyJJFRTUdj5WyC97MXzZMLh3NK7UbcsuR/s640/hg180web.png" width="550" /></a></div>
<div style="text-align: center;">
<br /></div>
<div style="text-align: center;">
HG180 VDSL2 802.11ac Home Gateway</div>
<div style="text-align: center;">
<br /></div>
<div style="text-align: center;">
http://192.168.254.254</div>
<div style="text-align: center;">
<br /></div>
<div style="text-align: center;">
username: admin</div>
<div style="text-align: center;">
password: 3UJUh2VemEfUtesEchEC2d2e</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com12tag:blogger.com,1999:blog-3938245997088008930.post-88478505559207902892019-12-18T17:30:00.001+08:002019-12-18T17:30:15.169+08:00PLDT Home Fibr UN-CGNAT Finally SolvedToday I finally solved the PLDT Home Fibr CGNAT to UN-CGNAT it and say goodbye to the updates, so welcome back to my Dynamic Public IP addresses.pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com36tag:blogger.com,1999:blog-3938245997088008930.post-69800526652189722782019-11-16T22:42:00.000+08:002019-11-16T22:42:01.887+08:00PLDT CGNAT Forcibly Implemented To Subscribers<div style="text-align: justify;">
My Dynamic Public IP address has been for years since I migrate to the Giant Telco in the Philippines, I have been enjoying the services on hosting my Web Server, FTP, and some other stuff like IP camera alike to the public network without additional cost to my net bill. It was there for so long with the free DDNS from Duck it helps me a lot locating my online stuffs. This week a few days back all my services to the internet are all stop and no longer working. I was not well inform by my ISP that this PLDT is combating the IPv4 and has no plans to comply to the IPv6 as a major ISP in this country. </div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo_Y25SQT9fuSgUfyC0sYAW0rNcW4g055nnz6L6QwfGYdn5THsybgQTzTtCOTuGOBjMNnQ3Q8_40IFA7K57xq8V4jfgfdjqvliPO4G1ojL-kmxHTzdktDAc-CegErweLakMCAfNjR9QGvZ/s1600/cgnat.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="460" data-original-width="965" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo_Y25SQT9fuSgUfyC0sYAW0rNcW4g055nnz6L6QwfGYdn5THsybgQTzTtCOTuGOBjMNnQ3Q8_40IFA7K57xq8V4jfgfdjqvliPO4G1ojL-kmxHTzdktDAc-CegErweLakMCAfNjR9QGvZ/s640/cgnat.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
I rush to Google and check my public IP address has not been changed as it was the usual address that I am using. But wait a minute I have to login to my AN5506-04-FA Fiberhome ONU to see if there is some changes on my settings. Yes the Holy Ghost, CGNAT is already implemented on my area, I call 171 and talk to the CSR, the person whom I have the conversation is giving me some hope that my Dynamic Public IP address will be restore in 24 to 48 hours. Guess what the next following day I give a call again to 171 the next person who pick my call doesn't knows anything about what I am talking it we last about an hour on the phone he keeps me on waiting listening to the PLDT IVRS advertisement until the call drops. </div>
<br />
<div style="text-align: justify;">
The third day I made the call that hoping an Angel will rescue my Dynamic Public IP address and will be return as do I wish to be, I was hopeless, the girl on the other end of the telephone said I am sorry we do not have that capacity to do so, we are limited to the access only the second level can do that, you have to inquire it to the products and services (meaning you have to pay now for additional cost for that dynamic public IP address) if you really wanted to have it.</div>
<br />
<div style="text-align: justify;">
So the intention of my Giant ISP for IPv4 is not only for the conservation of the IP's but also in addition that can sum up for their annual revenue if you wish to have a public IP addresses. The CGNAT will do a favor to the PLDT. So whether you are a subscriber of PLDT Home Fibr, PLDTDSLBiz you are now subject to CGNAT. If you wish to have a Public IP Addresses you have to avail it as addons on their "Product and Services". As of the moment in time I still have no solution on how to regain my Dynamic Public IP address for my online services to stay up again. If you have something to share about CGNAT do not hesitate to comment below and post it.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com53tag:blogger.com,1999:blog-3938245997088008930.post-70658977556374105422019-11-08T08:48:00.002+08:002019-11-08T08:48:21.889+08:00Overwrite A5-V11 Qualcomm OEM Firmware With OpenWrt ImageHere are few steps to overwrite OEM firmware of a5-v11 router with openwrt.<br />
<br />
<div style="text-align: justify;">
1) Prepare a FAT formatted USB-Flash-Drive and unzip this a5-v11-openwrt.zip to USB-Flash-Drive. (Important: do not just copy a5-v11-openwrt.zip to flash-drive, unzip this file to USB-Flash-Drive, this folder contains openwrt-factory.bin with needed boot-loader and update scripts)</div>
<br />
2) Prepare this setup as shown in the picture below.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7mkXv4lpLExldgLAcW3GfUmirLjV5H2JurXjL-cquXfgPhZOZuYDAm9RqvpUE6Wlhva7VsicP7xex4tiBxu-51cPIXkhgiPzmqmAE3Uz2ryOgL1a_ueCKNEk_2siQNI-Q5nTGXTbehWIl/s1600/1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1200" data-original-width="1600" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7mkXv4lpLExldgLAcW3GfUmirLjV5H2JurXjL-cquXfgPhZOZuYDAm9RqvpUE6Wlhva7VsicP7xex4tiBxu-51cPIXkhgiPzmqmAE3Uz2ryOgL1a_ueCKNEk_2siQNI-Q5nTGXTbehWIl/s640/1.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
3) After applying +5v power to a5-v11, RED-LED on this router stays ON for few seconds, and then BLUE-LED starts blinking (from power-ON to blinking-blue-led-state, it takes about 1minute)</div>
<br />
<div style="text-align: justify;">
4) By this time, your PC would get the ip in the range of 192.168.100.x from the a5-v11's dhcp server.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_yzJKYq1CKsqe69AL8t3dOAC_9SplqrpJSJQDJEfWTuVVwFyPNL0PaEtm_CZDftJWUNPzNE1nHaRXhGlDBkbKbxxI3yXgpNl79R6z29XZ5GXSkyyBqIxODUAGpkL0zjLwGxHq-gNx8fOT/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="598" data-original-width="918" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_yzJKYq1CKsqe69AL8t3dOAC_9SplqrpJSJQDJEfWTuVVwFyPNL0PaEtm_CZDftJWUNPzNE1nHaRXhGlDBkbKbxxI3yXgpNl79R6z29XZ5GXSkyyBqIxODUAGpkL0zjLwGxHq-gNx8fOT/s640/2.png" width="550" /></a></div>
<br />
5) Ensure that your a5-v11 has qualcomm firmware by looking at the web-UI of this router.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAGZEJ5Kgeli3fKspjw-zNjoJxWDD6g5vTy5TNB0SXMGc-5kpX3f7KV8jXBmLtdXgD3ukZzkD7DsUncyqLfYv-rqSVdzm0r_Jb1gi7i5PhxcZBIgl4ZRc0lHcyCVZP6x4dN9eXwDh_b5pc/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="978" data-original-width="1173" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAGZEJ5Kgeli3fKspjw-zNjoJxWDD6g5vTy5TNB0SXMGc-5kpX3f7KV8jXBmLtdXgD3ukZzkD7DsUncyqLfYv-rqSVdzm0r_Jb1gi7i5PhxcZBIgl4ZRc0lHcyCVZP6x4dN9eXwDh_b5pc/s640/3.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
NOTE: Do not continue incase if your router's web-page is different than the one shown above(Qualcomm), you might have received another variant having chinese firmware, Instructions for overwriting the chinese firmware are given in my other blog.</div>
<br />
6) telnet to the a5-v11 using putty.exe(or telnet command) as shown below.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyI9LPbwyufBc0avNvUe3g9XG6fXGKWSYMkXJiP4yLW_9kMKFQjE4M3nnvp5Cd_40aN0L_hcX1GGlAav4QUkmrk37YwRYhz0Pczvsk1RFA2ghrTXzeaw4_IqFP1sxMzOnEcTbPSKKGrxkI/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="685" data-original-width="768" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyI9LPbwyufBc0avNvUe3g9XG6fXGKWSYMkXJiP4yLW_9kMKFQjE4M3nnvp5Cd_40aN0L_hcX1GGlAav4QUkmrk37YwRYhz0Pczvsk1RFA2ghrTXzeaw4_IqFP1sxMzOnEcTbPSKKGrxkI/s640/4.png" width="550" /></a></div>
<br />
6) Run the following commands as shown in the picture below<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD44aZK7hKlQ42X7Vt3oMcYTfzcqm9nCVS8Vucre4GXsVEkjJs5lvfpCQpMpXtXqrGm-qQ8ZJpRn6mQkbfJuqoVoDjPCePolCQ5qDnnQ8PFzF-KknfzoMz1qBXa5-hTTitrnkJiuPxV8N4/s1600/4a.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="371" data-original-width="640" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD44aZK7hKlQ42X7Vt3oMcYTfzcqm9nCVS8Vucre4GXsVEkjJs5lvfpCQpMpXtXqrGm-qQ8ZJpRn6mQkbfJuqoVoDjPCePolCQ5qDnnQ8PFzF-KknfzoMz1qBXa5-hTTitrnkJiuPxV8N4/s640/4a.png" width="550" /></a></div>
<br />
7) After rebooot, wait for a minute, this time, openwrt firmware would boot on a5-v11, and your PC would get the ip in the range of 192.168.1.x<br />
<br />
8)If everything goes well, your browser would show the following webUI of openwrt<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht6lC_CJPeJ44PKH5AaOgrPTDT704DqIqlrhfPuobouP05LnlgZ1JzVXfjZDE_g4nt0DIrwdouHur88n_EhErJrRE1DbE1BuPqsn1STKDt69GOZKE8nbyZfn2TOMVfgcLCNto7oOTVIznq/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="614" data-original-width="768" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht6lC_CJPeJ44PKH5AaOgrPTDT704DqIqlrhfPuobouP05LnlgZ1JzVXfjZDE_g4nt0DIrwdouHur88n_EhErJrRE1DbE1BuPqsn1STKDt69GOZKE8nbyZfn2TOMVfgcLCNto7oOTVIznq/s640/5.png" width="550" /></a></div>
<br />
9) As shown above, follow step-1 and 2 to login with default root user.<br />
<br />
10) After login you will see following page<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqjLmlcWrc9yjMRJuhdciBC_yfLZDRMGFgbTnnZUrPgkNdHP_2iGMcukPUuACmrdvGg_vXHrqj24wEQgrTKR1-zAX19m_mT-q2825zs7UNUnEAmuXjhvuDmRS9HyT4Y84xNFOTXSi8tUfG/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="614" data-original-width="768" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqjLmlcWrc9yjMRJuhdciBC_yfLZDRMGFgbTnnZUrPgkNdHP_2iGMcukPUuACmrdvGg_vXHrqj24wEQgrTKR1-zAX19m_mT-q2825zs7UNUnEAmuXjhvuDmRS9HyT4Y84xNFOTXSi8tUfG/s640/6.png" width="550" /></a></div>
<br />
<div style="text-align: justify;">
11) you can overwrite openwrt firmware with your own openwrt-variant by clicking on menu system=>Backup/Flash Firmware as shown in the picture above.Have Fun hacking your a5-v11 with opensource firmware!!!</div>
<br />
<br />pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com0tag:blogger.com,1999:blog-3938245997088008930.post-17023899718181785162019-10-22T00:54:00.004+08:002019-10-22T00:54:46.252+08:00OpenWrt Multiple SSID with VLANsMultiple SSID with VLAN<br />
<br />
<div style="text-align: justify;">
Basic idea is to make the device tl-wr1043ND with multiple virtual SSID. Each SSID using VLANs. On the switch, will be connected to a specific operator with the corresponding vlan.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPB-MsRYa0-SVJ9Qsh4fpVKKxv9pzCyjyt43c1n7o02HdTe1uUEe2vnbt4rh9d6ZAOyQDY2b2-vcuahw7VZcLfx8srRlm5g1HDYaRYHwSQC1ZQTORVM_8QsWpiCsATuqG7ZNnwGmrMcb4x/s1600/multissid1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="450" data-original-width="550" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPB-MsRYa0-SVJ9Qsh4fpVKKxv9pzCyjyt43c1n7o02HdTe1uUEe2vnbt4rh9d6ZAOyQDY2b2-vcuahw7VZcLfx8srRlm5g1HDYaRYHwSQC1ZQTORVM_8QsWpiCsATuqG7ZNnwGmrMcb4x/s400/multissid1.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Client can opt for a specific SSID, which will correlate with a particular operator. For example, the SSID OpenWrt1, is the operator “A” which is connected with VLAN10</div>
<br />
The following configuration below:<br />
<br />
root@OpenWrt:~# cat /etc/config/network<br />
<br />
config ‘interface’ ‘loopback’<br />
option ‘ifname’ ‘lo’<br />
option ‘proto’ ‘static’<br />
option ‘ipaddr’ ‘127.0.0.1’<br />
option ‘netmask’ ‘255.0.0.0’<br />
<br />
config ‘interface’ ‘lan’<br />
option ‘ifname’ ‘eth0’<br />
#option ‘type’ ‘bridge’<br />
option ‘proto’ ‘static’<br />
option ‘netmask’ ‘255.255.255.0’<br />
option ‘ipaddr’ ‘192.168.11.1’<br />
<br />
config interface vlan10<br />
option ifname eth0.10<br />
option type bridge<br />
option proto static<br />
option ipaddr 192.168.10.1<br />
option netmask 255.255.255.0<br />
config interface vlan20<br />
option ifname eth0.20<br />
option type bridge<br />
option proto static<br />
option ipaddr 192.168.20.1<br />
option netmask 255.255.255.0<br />
config interface vlan30<br />
option ifname eth0.30<br />
option type bridge<br />
option proto static<br />
option ipaddr 192.168.30.1<br />
option netmask 255.255.255.0<br />
config interface vlan40<br />
option ifname eth0.40<br />
option type bridge<br />
option proto static<br />
option ipaddr 192.168.40.1<br />
option netmask 255.255.255.0<br />
<br />
config ‘interface’ ‘wan’<br />
option ‘ifname’ ‘eth1’<br />
option ‘proto’ ‘static’<br />
option ‘ipaddr’ ‘192.168.1.9’<br />
option ‘netmask’ ‘255.255.255.240’<br />
option ‘gateway’ ‘192.168.1.1’<br />
option ‘dns’ ‘ 192.168.2.2’<br />
<br />
==========<br />
root@OpenWrt:~# cat /etc/config/wireless<br />
<br />
config ‘wifi-device’ ‘radio0’<br />
option ‘type’ ‘mac80211’<br />
option ‘macaddr’ ’00:15:6d:f8:f7:bb’<br />
option ‘htmode’ ‘HT20’<br />
list ‘ht_capab’ ‘SHORT-GI-40’<br />
list ‘ht_capab’ ‘DSSS_CCK-40’<br />
option ‘channel’ ’05’<br />
option ‘disabled’ ‘0’<br />
<br />
config ‘wifi-iface’<br />
option ‘device’ ‘radio0’<br />
option ‘mode’ ‘ap’<br />
option ‘hidden’ ‘0’<br />
option ‘encryption’ ‘none’<br />
option ‘isolate’ ‘0’<br />
option ‘bgscan’ ‘0’<br />
option ‘wds’ ‘0’<br />
option ‘macfilter’ ‘none’<br />
option ‘ssid’ ‘OpenWrt1’<br />
option ‘network’ ‘vlan10’<br />
<br />
config ‘wifi-iface’<br />
option ‘device’ ‘radio0’<br />
option ‘mode’ ‘ap’<br />
option ‘hidden’ ‘0’<br />
option ‘encryption’ ‘none’<br />
option ‘network’ ‘vlan20’<br />
option ‘ssid’ ‘OpenWrt2’<br />
option ‘isolate’ ‘0’<br />
option ‘bgscan’ ‘0’<br />
option ‘wds’ ‘0’<br />
option ‘macfilter’ ‘none’<br />
<br />
config ‘wifi-iface’<br />
option ‘device’ ‘radio0’<br />
option ‘mode’ ‘ap’<br />
option ‘hidden’ ‘0’<br />
option ‘encryption’ ‘none’<br />
option ‘network’ ‘vlan30’<br />
option ‘ssid’ ‘OpenWrt3’<br />
option ‘isolate’ ‘0’<br />
option ‘bgscan’ ‘0’<br />
option ‘wds’ ‘0’<br />
option ‘macfilter’ ‘none’<br />
<br />
config ‘wifi-iface’<br />
option ‘device’ ‘radio0’<br />
option ‘mode’ ‘ap’<br />
option ‘hidden’ ‘0’<br />
option ‘encryption’ ‘none’<br />
option ‘network’ ‘vlan40’<br />
option ‘ssid’ ‘OpenWrt4’<br />
option ‘isolate’ ‘0’<br />
option ‘bgscan’ ‘0’<br />
option ‘wds’ ‘0’<br />
option ‘macfilter’ ‘none’<br />
<br />
========<br />
root@OpenWrt:~# cat /etc/config/dhcp<br />
<br />
config ‘dnsmasq’<br />
option ‘domainneeded’ ‘1’<br />
option ‘boguspriv’ ‘1’<br />
option ‘filterwin2k’ ‘0’<br />
option ‘localise_queries’ ‘1’<br />
option ‘local’ ‘/lan/’<br />
option ‘domain’ ‘lan’<br />
option ‘expandhosts’ ‘1’<br />
option ‘nonegcache’ ‘0’<br />
option ‘authoritative’ ‘1’<br />
option ‘readethers’ ‘1’<br />
option ‘leasefile’ ‘/tmp/dhcp.leases’<br />
option ‘resolvfile’ ‘/tmp/resolv.conf.auto’<br />
<br />
config ‘dhcp’ ‘lan’<br />
option ‘interface’ ‘lan’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘0’<br />
<br />
config ‘dhcp’ ‘wan’<br />
option ‘interface’ ‘wan’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘1’<br />
<br />
config ‘dhcp’<br />
option ‘interface’ ‘vlan10’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘0’<br />
<br />
config ‘dhcp’<br />
option ‘interface’ ‘vlan20’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘0’<br />
<br />
config ‘dhcp’<br />
option ‘interface’ ‘vlan30’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘0’<br />
<br />
config ‘dhcp’<br />
option ‘interface’ ‘vlan40’<br />
option ‘start’ ‘100’<br />
option ‘limit’ ‘150’<br />
option ‘leasetime’ ‘720m’<br />
option ‘ignore’ ‘0’<br />
========pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com0tag:blogger.com,1999:blog-3938245997088008930.post-62016388007933197372019-09-10T21:14:00.005+08:002019-09-10T21:14:40.038+08:00Hack TX Power QCA9533 to 30dbm<div style="text-align: justify;">
Hack TX power family of QCA9533 chipset to 30dbm real TX power 23-24dbm </div>
<div style="text-align: justify;">
or around 200mW. </div>
<br />
<div style="text-align: justify;">
Can be applied to TL-841ND v10 / v11, TL-WR840N v2 and TL-WR740N v6 (but only tested on TL-WR841ND v10):</div>
<br />
Step 1 : <br />
<br />
<div style="text-align: justify;">
I assume the router is installed fw ddwrt, enable the ssh feature on the router in the service and administration tab, save, then apply settings, then reboot</div>
<br />
Step 2 :<br />
<br />
download the partition art that is on this link:<br />
<br />
<blockquote class="tr_bq">
<a href="http://www.mediafire.com/file/8sc11lv5l36k49i/artHACKED+%281%29.bin">http://www.mediafire.com/file/8sc11lv5l36k49i/artHACKED+%281%29.bin</a></blockquote>
<br />
Then rename it to "art.bin" without quote<br />
<br />
Step 3 : <br />
<br />
<div style="text-align: justify;">
With the WinSCP Utility send (export) to the folder / tmp router that we downloaded and renamed earlier. make sure art.bin is in the / tmp folder by checking via putty demgan command:</div>
<br />
<blockquote class="tr_bq">
ls /tmp</blockquote>
<br />
Step 4 :<br />
<br />
Execute files already in the router via putty with the command:<br />
<br />
<blockquote class="tr_bq">
mtd -r write /tmp/art.bin board_config</blockquote>
<br />
Step 5 :<br />
<br />
<div style="text-align: justify;">
Login to ddwrt, then tunning so that what we do works well, in the wireless tab, change country to "Canada", then change the TX power to 30dbm, then save, apply settings and finally reboot.</div>
<br />
NB: channels are only 1-11, do not support super channel and only work well with country code "Canada"pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com1tag:blogger.com,1999:blog-3938245997088008930.post-66945458473021108812019-07-22T14:40:00.002+08:002019-09-07T03:20:24.053+08:00Getting the PPP Username and Password for CenturyLink Zyxel C1000Z Modem<div style="text-align: justify;">My first DSL modem in 1999 required Telnetting in via serial port to USB. I had to call a network technician at Qwest, and followed by typing in what seemed like arcane commands. I had no idea what I was doing. Things have changed for the better, but most DSL modems still have the ability to log into them directly through command line interfaces. The C1000Z runs BusyBox Linux which comes loaded with your usual base Linux utilities, so if you can wield Bash, you can hack your modem.</div><br />
Grabbing your PPP username<br />
<br />
<div style="text-align: justify;">I was looking to enabled the Transparent Bridge mode for my new Netgear R6050 after a friend managed to break the internal antenna on my Zyxel C1000Z, I wasn’t home so I don’t know the physics involved. Rather than pay $99 to CenturyLink for a new modem/router I decided to buy a new WAP/Router. </div><br />
Having a little network administration under my belt, I figured I could grab the PPP Password.<br />
<br />
<div style="text-align: justify;">The following guide was indispensable and got me 95% of the way there so I suggest checking it out first and/or following it along with my more “For Dummies” guide: </div><br />
<a href="http://n8henrie.com/2015/01/how-to-find-your-centurylink-ppp-password-on-a-zyxel-c1000z-modem/" target="_blank">How to Find Your CenturyLink PPP Password on a Zyxel C1000Z Modem </a><br />
<br />
<div style="text-align: justify;">You’ll want a basic understanding of SSH and/or Telnet. OS X regardless of version come with SSH and Telnet as does (almost) every flavor of Linux. Windows users will need Putty. </div><br />
<div style="text-align: justify;">You’ll want a basic understanding of SSH and/or Telnet. OS X regardless of version come with SSH and Telnet as does (almost) every flavor of Linux. Windows users will need Putty. </div><br />
Step 1:<br />
<br />
<div style="text-align: justify;">First you’ll need to enable telnet in your Router, and you’ll need PPPoe enabled (Under WAN settings), these can easily be done through the Modem’s GUI</div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHXH0tt6TRg3gjjDgVRx6SpAryW1tlCa4RBKKcgS-Pj2N_XGS4rggCPEjisS6GUOwOl3CkaeHWiLjxOHyNp_OkIVhj7QUhoaYHLiMtSlgosbIAbCXWuvf9p0FyAKHbEVif6p5HmvY0247_/s1600/tumblr_inline_nr3rioLXga1rgy2ig_500.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="737" data-original-width="500" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHXH0tt6TRg3gjjDgVRx6SpAryW1tlCa4RBKKcgS-Pj2N_XGS4rggCPEjisS6GUOwOl3CkaeHWiLjxOHyNp_OkIVhj7QUhoaYHLiMtSlgosbIAbCXWuvf9p0FyAKHbEVif6p5HmvY0247_/s640/tumblr_inline_nr3rioLXga1rgy2ig_500.png" width="434" /></a></div><br />
Step 2: <br />
<br />
Fire up your terminal (Windows users will have to use Putty, and translate the instruction) and type:<br />
<br />
telnet YOUR-IP-ADRRESS<br />
<br />
In this example, my router’s IP address is 192.168.0.1, this is the default address so I would type:<br />
<blockquote class="tr_bq">telnet 192.168.0.1</blockquote><div style="text-align: justify;">It make take a moment for the router to respond, once it does, respond something like “BCM963268 Broadband Router” and it should ask for your username, type in the username you entered hit return and it should then ask for your password, enter the password you typed in, hit return.</div><br />
Step 3:<br />
<br />
Using the terminal we can call all the active tasks running on the modem, to do so type:<br />
<blockquote class="tr_bq">ps</blockquote><div style="text-align: justify;">Geek stuff: Users can use sh to access the BusyBox linux Bash shell and run task monitoring software like top. If you’re feeling adventurous, type sh and poke around using commands like ls and top. You can grab the process ID using top just like we do in step 4.</div><br />
Step 4:<br />
<br />
You should see a long list of responses, that read:<br />
<blockquote class="tr_bq"><code>PID USER VSZ STAT COMMAND <br />
1 admin 1556 S init <br />
2 admin 0 SW< [kthreadd] 3<br />
admin 0 SW< [migration/0] <br />
4 admin 0 SW [sirq-high/0] <br />
and so on... We’re only interested in one entry, the one that’s running the pppd (or ppp*) command. it’ll probably be at the bottom. It should read something like:<br />
3494 admin 1808 S pppd -c ppp0.1 -i ptm0.1 -u myusername@qwest.net -p **</code></blockquote>The myusername@qwest.net is your username.<br />
<br />
Step 5:<br />
<blockquote class="tr_bq"><code>cat proc/3494/cmdline </code></blockquote><div style="text-align: justify;"><br />
Next you’ll need to analyze the process ID further, take special note of the preceding number, in this example its 3494. Type in the console:</div><blockquote class="tr_bq"><code>pppd-cppp0.1-iptm0.1-umyusername@qwest.net-pjlFrVNtRMtU=-f0-D0-n1-L0-X120 ></code></blockquote><div style="text-align: justify;">The password portion of this is encoded, the tricky part here is identifying it. We know the that this is a concatenated line by gauging from the previous line. The password portion should be between <i>-p</i> and <i>-</i>. In this example, the encoded password is:</div><blockquote class="tr_bq"><code>jlFrVNtRMtU=</code></blockquote>Step 6:<br />
<br />
This password is encoded in base64, thanks to the leg work Make a new tab or new terminal window, and type:<br />
<blockquote class="tr_bq"><code>echo "jlFrVNtRMtU=" | base64 --decode</code></blockquote>It should spit back something like:<br />
<br />
<blockquote class="tr_bq"><code>ac7gkDnUmac-pro:~ user$</code></blockquote><br />
<div style="text-align: justify;">The <i>ac7gkDnU</i> will be your PPP password. Congrats! You’re now ready to enable transparent bridge mode on your router.</div><br />
Article posted by blog@greggant.compakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com0tag:blogger.com,1999:blog-3938245997088008930.post-67520875301937505892019-06-29T02:36:00.004+08:002019-10-05T13:51:26.709+08:00PLDT Fibr ONU AN5506-04-FA Backdoor Exploit<div style="text-align: justify;">
In the late year of 2016 there was a house to house PLDT agent promoting and advertising for the PLDT Home Fibr in our town particularly on my sister area, I was in my sister's resident that time and the PLDT Home Fibr promoter belling the gate of my sister house while I were there. I open up the gate, the PLDT Home Fibr advertiser introduces me their Fiber Internet broadband product that they are having the limited promo for <a href="https://pakitong.blogspot.com/2013/07/pldt-smart-4g-wimax-mybro-abot-kaya-499.html" target="_blank">FREE installation including the WiFi once you switch from other ISP's</a> or waived the installation fees plus the device if your are a new subscriber on the monthly billing. I recommend and encourages my sister to get the offer of the PLDT Home Fibr as it is very late this kind of stuff for my motherland whereas in other developed countries like Singapore or Malaysia they are far from us when it comes to technology.</div>
<br />
<div style="text-align: justify;">
I noticed the PLDT Home Fibr whenever your monthly internet bills overdue they will automatically disallow you from accessing the internet totally, your PLDT Fiber ONU is blocked and you can never ever enjoy surfing the net unless you have to pay your outstanding fees. Unlike <a href="https://pakitong.blogspot.com/2013/12/mybro-to-globe-how-to-configure-green.html" target="_blank">Globe and Smart wireless internet broadband</a> even if you device is banned from accessing the net still you can trick it with the vpn apps. I was thinking perhaps the PLDT Home Fibr is just like the old legacy <a href="https://pakitong.blogspot.com/2013/06/smartbro-motorola-canopy-subscriber.html" target="_blank">SmartBro Canopy wireless internet</a> that I have enjoyed the <a href="https://pakitong.blogspot.com/2013/11/mybro-green-packet-dv235t-stock.html" target="_blank">FREE internet for a very very long period time</a> untill the <a href="https://pakitong.blogspot.com/2014/12/mybro-dv235t-at-p1-wimax-malaysia.html" target="_blank">WiMAX replace it</a>.</div>
<br />
<div style="text-align: justify;">
I have stayed in my sister house during the weekends and the internet connection was interrupted due to late monthly bills payment. So i try to tweak with the old ways like the wireless internet <a href="https://pakitong.blogspot.com/2013/11/smartbro-how-to-setup-wireless-router.html" target="_blank">SmartBro Canopy</a> and it works and my sister said how come you have the internet and we do not have? I said this is just temporary internet connection while your PLDT account is blocked.</div>
<br />
<div style="text-align: justify;">
While I was <a href="https://pakitong.blogspot.com/2018/08/pldt-fibr-an5506-04-fa-debug.html" target="_blank">inside the PLDT Home Fibr ONU $hell</a> I tour around and see what I have to see looking for stuffs that is interesting while hopping by hops into some other PLDT subscriber's ONU $hell. I find it very interesting, just imagine you can get into the PLDT ONU fiber device and hops by hops from one onto the other ONU device and can copy paste the inside or wipe out the entire filesystem of the ONU's.</div>
<br />
<div style="text-align: justify;">
The backdoor of PLDT Home Fibr ONU devices such as <a href="https://pakitong.blogspot.com/2018/09/how-to-access-an5506-04-fa-serial-port.html" target="_blank">Fiberhome AN5506-04-F, AN5506-04-FA/T</a> is very special that I do not want to disclosed on this blog. These three Fiberhome AN5506-04-XX series of the PLDT Home Fibr ONU device is until now widely open as of the time I am writing I have tested and proven and not have been yet close for sure the PLDT Tech team will not close the backdoor where they used to enter.</div>
<br />
I write this issue because I want to differ the comment on <a href="https://gist.github.com/kbeflo/de3b1610b1879f8e92966ba106f83f97" target="_blank">kbeflo's gist.github by chudyvf</a> that.<br />
<br />
for those still have rp2627, change iptables directly.<br />
<blockquote class="tr_bq">
<pre><code>iptables -R INPUT 1 -p TCP --dport 7547 -j REJECT --reject-with tcp-reset
iptables -I INPUT 2 -i lo -p TCP --dport 443 -j ACCEPT
iptables -I INPUT 3 -i br0 -p TCP --dport 23 -j ACCEPT
iptables -I INPUT 4 ! -i br0 -p TCP --dport 443 -j REJECT --reject-with tcp-reset
iptables -I INPUT 5 ! -i br0 -p TCP --dport 23 -j REJECT --reject-with tcp-reset
</code></pre>
</blockquote>
<br />
<div style="text-align: justify;">
He commented or suggested, that the PLDT Home Fibr ONU devices aka Fiberhome AN5506-04-FA/T and AN5506-04-F to be safe from the PLDT ONU firmware updates RP2631, it is highly recommended that the above mentioned iptables command is a must for us to redo the iptables. On my own opinion as I have written and commented on kbeflo's gist.github the PLDT ONU firmware updates can not and will not be prevented from patching the firmware updates regardless of what ports you closed or iptables you redo. The PLDT can still enter your ONU deivices using the so called <a href="https://pakitong.blogspot.com/2014/01/unlock-mybro-dv235t-smart-pldt-firmware.html" target="_blank">BACKDOOR</a>, whether your are connected to the internet or NOT for as long as you are hook to the PLDT Fiberhome OLT you are bound for the firmware updates patching. As I have said I have been thru that backdoor!</div>
<br />
<div style="text-align: justify;">
My ultimate recommendation or solution to all the PLDT Home Fibr subscribers that are having or using the Fiberhome ONU devices such as AN5506-04-FA/T and AN5506-04-F is on the hardware side from being forcibly firmware updates to RP2631. But you have to be an electronics hobby, this thing needs basic soldering skill. The solution is to pull up the <a href="https://pakitong.blogspot.com/2013/11/re-programming-2wire-nand-flash-ic.html" target="_blank">write-protect pinouts of the NAND flash</a> from the circuit so that whenever there is an updates your ONU devices is protected unless you switch ON the write-protect of the NAND flash pinouts.</div>
<br />
<div style="text-align: justify;">
Your thoughts and comments are welcome, to be true I don't trust the PLDT Home Fibr ONU's better give me a fiber media converter I will provide my own wireless router access point, I rather have favor on OpenWRT, DD-Wrt or Tomato.</div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com25tag:blogger.com,1999:blog-3938245997088008930.post-70864149883099624692019-06-26T22:01:00.001+08:002019-06-26T22:01:19.440+08:00PLDT Fibr ONU AN5506-04-FA RP2631 Super Admin<div style="text-align: justify;">
Oh Well!!! Today when I woke up something strange happen to my PLDT Fibr Optical Network Unit (ONU) AN5506-04-FA as I have been expecting the so called RP2631 firmware update will be enforce and will be force to whether I like it or you don't, it will and will really be patched including YOURS and MINE.</div>
<br />
<div style="text-align: justify;">
What is new to the PLDT Fibr ONU firmware update RP2631? The Giant Telco ISP likes and wants their AN5506-04-FA/T ONU will serve <a href="https://pakitong.blogspot.com/2015/09/maxis-fibre-internet-openwrt-custom.html" target="_blank">just like a sitting duck as much as possible it would be a media converter</a> only, why because 171 is fed up already about your calls you are so annoying!!!</div>
<br />
<div style="text-align: justify;">
Here's the quick and simple summary that PLDT wants to their all-in-one device aka the Fiberhome AN5506-04-FA/T Optical Network Unit and likewise a wireless access point (WAP) router built with two WiFi frequency such as 2.4GHz and 5GHz, it is also equip with two FXS for POTS but in addition you can insert your USB media device too. SAMBA and FTP server is great on this ONU device if were not restricted on the custom PLDT Fibr firmware.</div>
<br />
<div style="text-align: justify;">
Let see on the Graphical User Interface (GUI), the <a href="https://pakitong.blogspot.com/2018/08/how-to-backup-fiberhome-onu-an5506-04.html" target="_blank">AN5506-04-FA/T RP2627 firmware</a> downward you can login on the insecure port 80 via HTTP but not here in RP2631 HTTPS is being enforce while port 443 is use.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYzrDjrti1sH6AVdIpsxocCu4bIVgyxbeU5vmfgip2o-d2ZZgLfWsEAOmEe5S5D2NqiGXn4elIvj0FKgc57Fa0nC7-hMZ1ppyD-ZiykC2JBPpFXj6vxsPCmOzPq1pLhMFFMyZZXCK5Tf3U/s1600/https.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="475" data-original-width="945" height="330" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYzrDjrti1sH6AVdIpsxocCu4bIVgyxbeU5vmfgip2o-d2ZZgLfWsEAOmEe5S5D2NqiGXn4elIvj0FKgc57Fa0nC7-hMZ1ppyD-ZiykC2JBPpFXj6vxsPCmOzPq1pLhMFFMyZZXCK5Tf3U/s640/https.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Next let see if the <a href="http://192.168.1.1/info.asp" target="_blank">http://192.168.1.1/info.asp</a> is still vulnerable without using any credential to login to the Fiberhome AN5506-04-FA/T ONU device.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgT-0gMUZQge0d-Eu_bkC14tB5KRFwfD-nZiXTP_5t-6NHj6TID8ZIDtKCoMb8u7c0_uyYy_8Qg4OQS23nXm9fLyRz8rW_bO5MvcrPCY2Vut7Z6lJYdvTVtQdxH42f4kXygAGkfvVDxOarJ/s1600/info_asp.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="227" data-original-width="535" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgT-0gMUZQge0d-Eu_bkC14tB5KRFwfD-nZiXTP_5t-6NHj6TID8ZIDtKCoMb8u7c0_uyYy_8Qg4OQS23nXm9fLyRz8rW_bO5MvcrPCY2Vut7Z6lJYdvTVtQdxH42f4kXygAGkfvVDxOarJ/s640/info_asp.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Good patching the firmware already updated, its no longer accessible unlike before you can see the details without going to login to the PLDT Fibr ONU device. Thanks for that effort!</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4C4MONVoDHICZ7PN7ZAl70BE7qxyriZaEAvrtmyI79h83v3BDGD1iiz-9A46cPb75lxe2VyS-_ZmiGtAUx4OMGgX4ffSeC1RFnFD5-UzzGhYHkMafbDdPC4j9m2ovWr9WdAIkePAmWK24/s1600/admin.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="417" data-original-width="932" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4C4MONVoDHICZ7PN7ZAl70BE7qxyriZaEAvrtmyI79h83v3BDGD1iiz-9A46cPb75lxe2VyS-_ZmiGtAUx4OMGgX4ffSeC1RFnFD5-UzzGhYHkMafbDdPC4j9m2ovWr9WdAIkePAmWK24/s640/admin.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Now the exciting one, lets login to the PLDT Fibr AN5506-04-FA/T firmware RP2631. The username "admin" with the password "1234" for ordinary user account is no longer accepted its now being omitted. So what about the account for the username "adminpldt" with the password "<span class="st">6GFJdY4aAuUKJjdtSn7dC2x" will it be still accessible? And another thing is what happen to the Super Admin Account the username "fiberhomesuperadmin" with the password "sfuhgu" will it still work here on the new firmware updates.</span></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1jk4C8cl17uf4cuPw3ExUK_jz6J-hmued6XzPeouUm1y1ykC-pa8-2W1BLDxxilJiKpzd4zwiFmeU3Meq-Y97wXkaK0EZh_sR0wgRvX3clkjidmnaLwEaJg1gtwPLUr7rii-wBn0X8aH2/s1600/admin_unavailable.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="417" data-original-width="932" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1jk4C8cl17uf4cuPw3ExUK_jz6J-hmued6XzPeouUm1y1ykC-pa8-2W1BLDxxilJiKpzd4zwiFmeU3Meq-Y97wXkaK0EZh_sR0wgRvX3clkjidmnaLwEaJg1gtwPLUr7rii-wBn0X8aH2/s640/admin_unavailable.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
As I have tested and verified all three previous username and password for PLDT Fibr ONU device AN5506-04-FA/T is no longer valid such as username "admin" password "1234", username "adminpldt" password "<span class="st">6GFJdY4aAuUKJjdtSn7dC2x" and username </span><span class="st"><span class="st">"fiberhomesuperadmin" password "sfuhgu"</span> </span>after the updates. Forget about your custom username and password that you have saved its totally gone.</div>
<br />
<div style="text-align: justify;">
When I <a href="https://pakitong.blogspot.com/2018/07/an5506-04-fa-running-config.html" target="_blank">dive and go into the shell</a> I see two account credentials is allowed to get in, only the <a href="https://pakitong.blogspot.com/2018/08/pldt-fibr-an5506-admin-account.html" target="_blank">Administrator account</a> and the Super Admin account that the PLDT Fibr ONU is giving the permission to do login into the device nothing else can access the Graphical User Interface as for moment in time for my ONU. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
To access the PLDT AN5506-04-FA/T RP2631 firmware GUI Administrator account you have to point your web browser to <a href="https://www.blogger.com/192.168.1.1/fh" target="_blank">https:/192.168.1.1/fh</a> but you have to login first as Super Admin and enable the <a href="https://pakitong.blogspot.com/2018/08/pldt-fiberhome-super-admin-account.html" target="_blank">Web Admin Switch from the Management>> Device Mangement>> Debug Switch</a>. Once enabled the Web Admin Switch logout and login again as Administrator account you can now again enjoy the privilege that have been enjoyed before of your ONU PLDT device.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimEyQwwG4kmp7BQwnQMRzPFPkeD4NDYU2X0VUaqXUyQyTrayXaeCO92PVa1q_6FMewF8E1GDXMI21VoAsCGI_4PerO8cTAp-gMEiv0I1Wdd6cbuhk9J70qMbASfFU67Eoj4daJUNHZkm1b/s1600/administrator.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="417" data-original-width="932" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimEyQwwG4kmp7BQwnQMRzPFPkeD4NDYU2X0VUaqXUyQyTrayXaeCO92PVa1q_6FMewF8E1GDXMI21VoAsCGI_4PerO8cTAp-gMEiv0I1Wdd6cbuhk9J70qMbASfFU67Eoj4daJUNHZkm1b/s640/administrator.jpg" width="550" /></a></div>
<br />
<div style="text-align: justify;">
Seen the above screenshot? Yes, that is the new PLDT Fibr ONU AN5506-04-FA/T RP2631 firmware update for the Super Admin account username "f~i!b@e#r$h%o^m*esuperadmin" its a 27 character so be careful on typo error its case sensitive. For Administrator account username still its "adminpldt" the password is no longer "1234567890" nor "0123456789" and certainly not "<span class="st">6GFJdY4aAuUKJjdtSn7dC2x" they changed it already. I am still planning to make a tutorial for the firmware downgrade from RP2631 to RP2627 will follow it soon to write.</span></div>
pakitonghttp://www.blogger.com/profile/08708104451491980772noreply@blogger.com125