Sep 21, 2018

PLDT HOME Fibr Multi-WAN

In February 2007 it was my very first time going out the country to work abroad for operation and maintenance in one of the International Airport in the  Kingdom of Saudi Arabia, I left my previous work in one of the famous University in my hometown. During that time the only fastest Internet broadband connection that you can get for residential was the twin copper wire that carries two carrier in a single physical line,  one for voice such as home phone and the other is data for the Internet. In contrast to my beloved Philippines the Digital Subscriber Loop (DSL) at that time is very expensive, I remember I have three (3)  Internet Cafe whom I work for part time job in 2001 till 2005 and one of the NetCafe only afford a dial-up Internet connection, but during those period of time Netscape is the fave browser and mIrc is the best messenger among all who we used to hang on the net everyday from morning until midnight.


So I experimented my company dial-up internet account whenever I am on the NetCafe during night time to see how it works, so there it goes, it works that credentials. From that moment in time every night time  I hang on my NetCafe I have a free dial-up internet connection. I did the same thing in Saudi Telecom but this time its a Asynchronous Digital Subscriber Line during my three years work period contract and it works because the technology infrastructure used by DSL is same as the dial-up connection the Plain Old Telephone Service (POTS), whereas DSL uses Public Telephone Switch Network (PTSN) is just an upgrade version of POTS using same carrier twin copper wire single physical line.

In the mid of 2009 I got an offered to pursue my MS degree in Electronic and Communications Engineering in Kuala Lumpur to one of the well known International University of that Asia Tiger States, so I did grabbed the opportunity and started new series of being a university student again. The mud city just started their Fiber Optic roll out over the busy town, and my Kondominium were I reside don't offer the Fiber Optic service because its a high rise building and we are on the 11th floor. That's how they pronounce it Kondominium not Condominium, this tall building is equip with xDSL communication infra own by the government the Telekom Malaysia. The good things about Very High Speed Digital Subscriber Line (VDSL) it offers a triple play, you have the voice internet and the video just like the Fiber To The Home (FTTH) the physical connection is twin copper wire of the PTSN whereas FTTH a Passive Optical Network (PON).


I am really eager on experimenting such things like this and I proved that it works as what I have done and mention on my previous case study. In this experiment on Telekom Malaysia xDSL its not only a single connection but multiple logical internet connections. I have a TP-Link WR-TL740N v1.2 reflashed it with OpenWRT firmware Attitude Adjustment 12.09 loaded it with Multi-WAN package and it works I tested up to twelve (12) WANs.

If it works on Saudi Telecom and Telekom Malaysia I thing it would be impossible if it will not work on PLDT or neither to GLOBE Telecom Infrastructure. But this time we are on the PON infra, whether or not the Philippines Giant Telco will of course not right away garbage their vintage SmartBro Canopy equipment  that they still keep on using the authentication technique for P1 wireless CPE an upgrade of SmartBro family brand whom we all know the long term MacDo free internet connection that GLOBE Telco also rival it.

On this case study I am still using my legacy Wireless Access Point (WAP) router WR-TL740N v1.2 it has one WAN port and four LAN ports no modem built but with WiFi BNG 150N Lite. The Processor is 350Mhz MIPS with 4MBit flash and 32MBit of RAM, reflashed with the third party Linux embedded firmware OpenWRT Attitude Adjustment 12.09 and of course the Multi-WAN package.


My final test proves that there is no difference whether the Telecommunication Infrastructure between POTS, PTSN and PON are same regardless to whatever the authentication technique are being implemented they will behave in the same passion, this is just on my observation. I was very unfortunate my dear Professor in that university is a Shifu in Fiberless Optical Communication which is opposite to my field of interest during that time of my study. This case study still unknown issue to the academe, perhaps already known but not yet been publish, not a threat but widely vulnerable.

Sep 15, 2018

PLDT HOME Fibr ONU Vulnerable

So long I have no any article posted on my blog a busy man like me who has two angel keeps on following on me is so difficult to be a freeman again to hang on the net for long hours. I have stumbled upon around hopping by hop, sniffing on what is going on to the PLDT HOME Fibr Optical Network Unit after I disclosed the credentials of the  "admin account unavailable" to make available it seems like smell fishy going around after they mass update the Fiberhome AN5506-04-XXX  recently.


I still went on and try to see if this is really happening by accident or by chance that the PLDT HOME Fibr subscriber ONT device information page is been there exposed to the public network and can be seen without any authentications needed, you do not need the PLDT FiberhomeSuperAdmin account or the adminpldt to open it. Upon scanning is going thru I found PLDT Fiberhome AN5506-04-F software version RP2658 is already naked to the internet, in one subnet I found one and in another subnet I found two. I am not sure if these people who owns the said AN5506-04-F is aware of it, I guess they are also trying to open their device serial communication port to gain the access of the PLDT HOME Fibr "admin account unavailable" to make it available because its on trending today on the Netizen forum that the adminplt full access is back again since the first week of September 2018.


To ordinary people like me if my phone number is being publicize to the whole world it is worthless what they gonna do with that telephone number do they can make money with it? Are you going to jail? Oh I see, there you are, YES you can go to jail if  your  residential landline identity will be used for any illegal activity masking it to the other ONU/ONT as if it is YOU will pretend to be the DOER, your phone line identity number can be spoof to the other PLDT ONU/ONT such as to any AN5506-XX-XXX for as long as the device is hook to the PLDT network it will work and can make the CALL. You knew it right you are already diving into their palace.

Enough for the slides, I intentionally blurred those information on the screenshot for the security reason. If you wish to obtain one of those above feel free to swim to the PLDT HOME Fibr networks.


I do not know if this is a sabotage of the co-employees of the PLDT company who demanded for regular position because of their long history contractualization its for another topic. As you have witnessed its not only the mac addresses of the connected client that is being compromised but also the telephone number. I heard about HTTP injection how true is it, and what about the DNS hijacking? Well lets take it to another story when we have more time to write. But wait a minute we are not done yet, am I excuse to this PLDT HOME Fibr ONU/ONT exploitation? Lets take a walk thru it WANs will investigate if my Fiberhome AN5506-04-FA software version RP2627 is also affected by this so called nakedness.


By using the same procedure sniffing on the WAN side of the ONU/ONT from the public network there is no difference with the above mention PLDT Fiberhome ONU AN5506-04-F software version RP2658, the subscriber information are always compromise and its not guaranteed that you are on safe hand. If this is not a sabotage then there is another implication of web page disclosure to everybody on the net. Perhaps the Engineering Technical Team of the PLDT company is tired of being requested to task the switching of the subscriber ONU from Routing Mode to Bridge Mode from enabling it to disabling it more over specially when you demand and request to waive the adminpldt "admin account unavailable" to be available. Perhaps this is also to lure the client of the PLDT HOME Fibr that indicating that if the AN5506-04-XXX series ONU is on routing mode its mode prone to exploits unlike if it is on bridge mode it will appear to more safer. In addition, Yes that is more favorable to the PLDT as a whole it will lessen their headache not only that but  rather a discounted bandwidth for every internet fiber broadband subscriber allocated speed.


You said it right, including me, see that! Take a look at it closer, zoom it, that is my homephone line identity number. You can dial it from anywhere, "your monthly bill is our priority we do not care about your security whether you like it or not, its only PLDT and GLOBE where you can choose from". I heard it right Sir!


Worst from what you are expecting, you can swallow your PLDT "fiberhomesuperadmin" account now its not needed, the FTP Server will not ask you that to login and it can be open from any of your favorite browser, begging the "waiver" for obtaining the permission of the adminpldt "admin account unavailable" to be granted is no longer required the FTP Server will not ask for username and password anymore. Now you are thinking if you want to be in Bridge Mode that will lock you down to your throat squeezing your allotted bandwidth as possible to 30% that you can use out of your 100% speed limit. Or stick on Routing Mode make your AN5506-04-XXX series be the public WiFi access point of your neighbor give them a FREE access of your internet without your knowing? But then what solution can I offer to my reader regarding on this matter that will hamper you as a subscriber of the PLDT HOME Fiber internet broadband.

Answer, I can not provide any either solution or suggestion  unless you are the NTC  to tell this Giant Telco to fix their bugs before those man hatted will misused leak information above mention.

Sep 5, 2018

How To Access AN5506-04-FA Serial Port Console

Its not only me and you who are in trouble on acquiring the full accessibility of the PLDT Fiberhome AN5506-04-XXX ONU/ONT device settings, this has been raise on youtube channel, online forum such as github and Symbianize but remain no gain control rather the only option is to sign for a waiver until the Fiberhome Super Admin account unveil. This is NOT a tutorial on how-to dissect your all-in-one PLDT Home Fibr equipment but rather a reference for those people like me who suffer from memory lost who always forgetful.


What we need on How-To gain the Fiberhome AN5506-XX-XXX series ONU/ONT serial communication port console? Firstly, a serial port, but nowadays PCs and Laptop comes along with no serial com port then you have to look for USB-to-TTL or USB-to-Serial Com port. Secondly, any HyperTerminal utility will do but if you are like me who wants to be comfortably I would prefer Putty. Thirdly is optional, if you feel that the cord of your USB-to-TTL is too short then you might consider USB cord extension.


So how we start it, power off your PLDT Fiberhome AN5506-04-FA/T ONU/ONT device, unplug the power supply adapter, unplug the PON optical fiber jumper cord, unplug the LAN cable if you are using wired PCs. After you disconnect all those nasty wiring from the unit equipment flip the device from top to bottom. There are four (4) rubber feet located on the surface bottom of the Optical Network Unit. Lift one by one the four rubber feet with your finger nails you will see screw under it, then take any screw driver and unscrew it to remove the tighten metal lock. After you have taken all the four screws flip the Optical Network Terminal again from bottom to top, now its time to uncover it by just lifting the cover from any side of it.


Once the it is uncovered you will then see the four pin header on the surface of the circuit board of the PLDT Home Fibr AN5506-04-FA, to recognized which pin is which, from the left it is mark as CN1 and next to the first pin is labeled as 1. From pin 1 is Vcc, next pin 2 is ground and 3 is Rx while 4 is the Tx. To hook it to the USB-to-TTL for proper data communication you will only need three(3) pins the ground, RC and the Tx. On the side of AN5506-XX-XXX series the ground is to ground of the USB-to-TTL while Rx is to TX and the Tx of the ONU it to the Rx of the USB-to-TTL.


Next thing to do is to plug the USB-to-TTL on your PC, on Microsoft Windows7 the windows will automatically load its driver you can verify on the Device Manager if it is properly working, it will gives you the com port number. If the driver is not installed properly then you have to Google it for your driver and install it to make it work.


Now we are ready to go, use any HyperTerminal or Putty utility, download it first if you do not have one on your desktop. Open Putty, click serial, the "Serial line to connect to" in my case its COM13 yours might differ fill it what your Device Manager gives. Baudrate the speed is 115200, Data bits is 8, Stop bits is 1 while Parity is None.


After filling the Putty Configuration, click on the Session you are ready to fireup your Serial Console port, click the tab button Open you will then be prompted by a black screen. Plug the power supply adapter of the PLDT Fiberhome AN5506-XX-XXX series.


Now you be seeing a logs fast booting of the AN5506-04-FA/T all-in-one device equipment. There is two (2) boots you can interrupt the first and the second boots if you wish to enter the U-Boot section utility console. In this environment you can change your MAC Addresses your PON and the Ethernet permanently. You can type reset it will reboot the device while on the second boots you can type reboot and it will halt the system and reboot it from its beginning processing.


To login inside the Serial data communication port the username and password is by defualt all Wahun Fiberhome product is gpon, that is the username and password you be logged as root. Precaution if you get into the root Shell you can wipe out the entire systems. Your ONU/ONT PLDT Home Fibr AN5506-04-XXX series will get Brick it will no longer boots up, and it need to be reflash again to make it work. To avoid any disaster will occur before doing so backup the entire thing as possible, yo can use WinSCP its a handy utility on windows you can just click and drag to copy it.

Fiber Optic Connectors Evolution of Flat, PC, UPC and APC

The evolution of Fiber Optic connectors from flat to physical contact, ultra contact and the angled contact.

When a connector is installed on the fiber end, loss will be incurred. Some light loss would be reflected back directly down the fiber towards the light source that generated it. These back reflections, or Optical Return Loss (ORL) will damage the laser light sources and also disrupt the transmitted signal. Fiber connectors with different polishing types have different back reflections (see the picture below). With the development of technology, four polishing types are available: flat-surface, Physical Contact (PC), Ultra Physical Contact (UPC), and Angled Physical Contact (APC). How one evolves into another? This article will tell the answer.


The original fiber connector is a flat-surface connection, or a flat fiber connector. The primary issue of it is that a small air gap between the two ferrules is naturally left when mated. This is partly because the relatively large end-face of the connector allows for numerous slight but significant imperfections to gather on the surface. The flat fiber connector is not suitable for single-mode fiber cables with a 9┬Ám core size, thus it is essential to evolve into Physical Contact (PC) connectors.


The Physical Contact is polished with a slight spherical design to reduce the overall size of the end-face, which helps to decrease the air gap issue faced by Flat Fiber connectors. It results in lower Optical Return Loss (ORL) with less light being sent back towards the power source.


Building on the convex end-face attributes of the PC, but utilizing an extended polishing method creates an even finer fiber surface finish: Ultra Physical Contact (UPC) connector. It has a lower back reflection (ORL) than a standard PC connector and allows more reliable signals in digital TV, telephony and data systems. UPC fiber connector could be used with both single-mode fiber and multimode fiber. Usually the UPC single-mode fiber connector is blue, but the UPC multimode fiber connector is beige. (Note: 10G UPC multimode fiber connector is aqua.)


PC and UPC connectors do have a low insertion loss, but the back reflection (ORL) depends on the the surface finish of the fiber. The finer the fiber grain structure, the lower the back reflection. When PC and UPC connectors are continually mated and unmated, the back reflection will begin to degrade. So there is a need for a connector with low back reflection and it could sustain repeated matings/unmatings without ORL degradation.


The end faces of Angled Physical Contact connectors are still curved but are angled at an industry standard eight degrees, which allows for even tighter connections and smaller end-face radii. Combined with that, any light that is redirected back towards the source is actually reflected out into the fiber cladding, again by the virtue of the 8°angled end-face. APC connector back reflection does not degrade with repeated matings/unmatings. APC fiber connector can only be used with single-mode fiber and it is green.

It is clear that all of the connector end-face options mentioned above take a place in the market. And it is hard to claim that one connector beats the others when your specification needs to consider cost and simplicity not just optical performance. Your particular need decides which one to choose. For those applications calling for high precision optical fiber signaling, APC should be the first consideration, but less sensitive digital systems will perform equally well using UPC.

Aug 27, 2018

PLDT Fiberhome Super Admin Account

As I have mention on my previous post on how to make available the "Admin Account Unavailable" that there is no need anymore to alter the 1.xml and 2.xml for the PLDT Fibr ONU AN5506-XX-XX web GUI accessible via http://192.168.1.1/fh, gaining to the web page menu setting is either by using the PLDT Fiberhome Super Admin account default username and password or thru Serial console communication port. Yes, its more complicated on the console com port because it is a Command Line Interface (CLI) unlike the fiberhomesuperadmin you are on the Graphical User Interface once you login you can just click it, to enable or disable the "Web Admin Switch" that's how easy and user friendly interface it is.


All ONU/ONT products of Wahun Fiberhome Technologies are ship with three(3) credentials, these two(2) default username and password management account remain unchanged to where ever country and ISP it will be used, but the other Administrator account such as "adminpldt" username and the password is customized by the ISP like PLDT Fibr HOME brand. The ISP Products branded with “FiberHome” have been exported to over 90 countries and regions worldwide including the Philippines. If you can not find in you ISP country the expose admin account perhaps you can Google it you may find answer at 3BB, PTCL, VietTel or maybe in Brazil, use google translate the friendly and so helpful to provide the context interpretation into your desire languages.


I am providing a screenshot again to make it probe that the "Web Admin Switch" are existing on the Management menu once you are log in as the Fiberhome Super Admin account, the username as I have said will remain unchanged as "fiberhomesuperadmin" its small caps this is case sensitive while the password is also remain unchanged as by default. But then how to access the Fiberhome Super Admin account if you do not know the default password even you have already Google the user manual of your Fiberhome ONU AN5506-XX-XX, its in a pdf format. Answer, the Serial Communication console port is there available and very accessible, you can even wipe out the entire filesystem, backup your config, likewise the firmware you can even copy via winSCP without pains.


You can try BinWalk its a powerful tool for firmware you can unpack, repack, edit, read and write even modify the cfg and the web. So many free HEXeditor that you can be use for editing not to mention the rest. The architect of this Wahun Fiberhome ONU/ONT I salute so brilliant, if just take a closer look of the internal OS and filesystem of the AN5506-XX-XXX. Just imagined it has two boots and a twin filesystem in case the first get fails the other will automatically take over.

Aug 25, 2018

PLDT Fibr AN5506-04-FA Debug

This is another episode of PLDT Fibr AN5506-04-FA ONU/ONT, today I would like to introduce to you the Debugging environment of Wahun Fiberhome AN5506-XX-XXX also applicable to this product series. What we have here upon digging into the inside of the terminal we got so many interesting stuff that we can exerciser on the command line interface, those guys who are fun of graphical interface they don't love this taste. How to get into this text envy you can login via telnet or thru the serial console.


If you want to access this terminal on telnet first thing you have to do is you must enable the "telnet switch" on the web GUI by using the FiberhomeSuperAdmin account username and default password. The other method is via console communication port. The above screenshot is the available command when you press the (?) question mark sign, or in other words its a help symbol.


On this second captured screen is another way on how to enlist all the function command for debugging the ONU/ONT Fiberhome AN5506-XX-XXX series. So much interesting text command we can try to execute here but be careful the rest of these debuggers you might be able to paralyze your all in one equipment. If you do not have the spare Optical Network Unit beside you do not desire typing those listed command you because you will interrupt your internet fiber broadband connection. There is another command line interface of this AN5506 series device which if more friendly and is safe to execute the listed commands, its the user config command line interface. Here you can also manipulate your desired config settings, you can find the startup-config and the running-config it most likely identical to CISCO IOS command line interface.

On this section is more likely for calibration purposes only and only those PLDT network engineers has more capacity to understand this category of work. If you are noob like me  take precautions on hitting those enumerated debug command.

Aug 23, 2018

PLDT Fibr AN5506 Admin Account Unavailable

It is really frustrating every time you want to do something like tuning up your ONU/ONT for the sake of your network security, gaining access to your home wireless access point, or even worst if someone can just step into your AN5506-XX-XXX without your knowing and install malicious backdoor onto it. There are so many silent *bots out there hanging around for lease and the most often victims are those residential gateway like us who owns this kind of lousy PLDT Fibr ONU/ONT equipment.

What even worst is when you are limited to access your own device supplied by your Internet Service Provider like PLDT who is monopolizing every inch of this so called Internet of Things. I am one of you who also face the same problem who's Optical Network Unit is being lock down  by Philippine Long Distance Telephone Company every time I open my web GUI I stuck on "Admin Account Unavailable".F8ck!


"You are prohibited to open the rest of the menus and settings of your own ONU/ONT because you have zero knowledge". Imagined that you have to beg for "adminpldt username and password account" for you to safeguard your entity, what the heck?  Just recently, now you must have to sign for a waiver if you want to have the admipldt account privilege otherwise when you get BRICK your PLDT Fiberhome AN5506-XX-XXX you have to pay for the replacement even if this ONU/ONT can just be reflashed by inserting a USB pendrive on its USB ports for firmware recovery. DAMN!

Try to make a call 171 to get help and your call get acknowledge after 35 minutes, yes thirty five minutes your ears will be swollen listening to the Interactive Voice Response System of my beloved PLDT. You will then be given a Ticket, for how long your issue will be solve? you have to wait until the Technical Engineering team can solve it. You still have an option is either to hire a Shifu from Symbianize or a Guru at GitHub. If you can find these two people on the said forum then you have to do it by yourself, dug into Google the biggest library on the globe hoping you can find hint for your problem.

After digging for about four months I just found some clues, I realize that there is no need to alter the 1.xml to 2.xml for you to get the adminpldt full access to navigate all the Menus and Settings. Its only the PLDT Fiberhome Super Admin account have the right key to make the adminpldt account available.


The PLDT FiberhomeSuperAdmin account can do this job, on the Management Menu you find this if you have login as fiberhomesuperadmin username at http://192.168/1/1/fh. Imagined they can just remotely switch the adminpldt account either to enable or disable it at any time any where they want it via web GUI or thru Telnet. There is more on this Menu Setting you can also find the OMCI Debug Switch and Telnet Switch if you desire to activate it or deactivate it. They can leave it for sometime open or give you an access for only three(3) days as they have given permission to those who are Netizens in GitHub forum.

If the PLDT Network Engineering Team will read this post surely they will inform their superior to immediately a mass patch this mole found on Wahun Fiberhome AN5506-XX-XXX products. This will be another headache to the PLDT concerning gaining access to the Fiberhome ONU/ONT device. Don't worry even though you can not have the privilege of FiberhomeSuperAdmin account to gain the full access setting of the web GUI, the Serial port is waiting for you its more than the privilege of fiberhomesuperadmin.

Disclaimer, this is not a tutorial this is provided as it is. I wish to have more time to write up more about PLDT FiberhomeSuperAdmin account. The Telnet Switch and the OMCI Debug Switch.

Aug 21, 2018

PLDT Fiberhome AN5506-04-FA RP2627

Today is not a surprise that once you open your PLDT Fiberhome AN5506-04-FA web GUI you have a lousy Menu settings on your ONU/ONT, the software version is updating upon upgrade are not stopping. As I open my ONU web GUI the version as I have expected will be updated again from my previous updated RP2616 now its RP2627. I login as an ordinary user account I can see nothing have change though the PLDT Engineering Team made this upgrade remotely. I usually try occasionally to login also the username adminpldt and password 6GFJdY4aAuUKJjdtSn7dC2x but not to expect that I can open this adminpldt account, because I know it always prompt me to the unavailable admin account.


When I saw my software version have change from my previous RP2616 to RP2627, I tried open the adminpldt account with the password mention above, oh Lo! It logs me in it didn't prompt me the unavailable admin account. I logout again and try to login with the same username and password. Yes it goes on and logs me in, are they forgetting something after they updates my ONU/ONT AN5506-04-FA or this is just a backlog?


As you can see on the screenshot above, its the PLDT Fiberhome AN550-04-FA web GUI status device information. I am still looking for this R:P2627 updates if what did the PLDT Engineering Team revised  inside this ONU/ONU firmware. I guess its nothing new, they just hide the parameter on the *.xml and the *.asp files so the Netizen like me have nothing to click on the pages of the PLDT Fiberhome ONU.

Here's the rest of the adminpldt account web GUI features and settings. If you take a look closely on this Menus nothing have been redo except those previous clickable apps are now mysteriously disable by default and no longer be enabled even how much clicks and apply you are going to do.


Firebug and Web Developer are still among the best css tool inspector if you want to investigate their dirty lefties program on this forbidden web pages. There is also a good way to totally penetrate this nullified access is using the Serial console, USB-to-TLL or UART microcontroller can also be use to get the access on the console port so cheap nowadays this device and can be purchase online for a few penny.


Yes this PLDT Fiberhome AN5506-04-FA ONU has a nice four pin header on the board right next to the SOC Integrated Circuit which is easily to be identified by just using a multi-metter to determined its TX and RX so you can see and read the logs. Going inside the console port you need a username ad password of course, but don't worry Wahun Fiberhome products such AN5506-XX-XXX default password can be found on the user manual just Google it. Once you are IN, then retrieving all the data inside can easily to be copied with the SCP if you do not want to mess with your USB pendrive.


On the shell your privileged  is you are the root so you can modify, read and write to any file or the filesystem, even erase it entirely so be careful before doing anything else you MUST backup the entire system in the case of disaster may occur you are safe, you may be able to upload the entire image back to the ONU, otherwise if you get BRICK you are good bye PLDT will not replace you AN5506-XX-XX.


The PLDT Fiberhome AN5506-XX-XXX is easy to be deBRICK there are bunch of way to reflash the firmware, unlike P1 CPE and HUAWEI. If you need help on your device ofcourse I can help you but I am not available at all times, I am also a busy person. I want to post on my next article by disecting this all Main Menu into their sub-Menus.


Aug 13, 2018

PLDT Fiberhome AN5506-04 Slowing After Bridge

I have been satisfied with my PLDT Fibehome internet fiber broadband connection for several months with my download speed of up to 1.2Mbits per second per download. I have no complain about my subscription plan because it is a just and fair with my monthly billing. When the PLDT Fiberhome Technical Team installed my fiber connection my ONU/ONT Fiberhome AN5506-04-FA came with older software version RP2610, the PLDT Manila NOC (Network Operation Center) advice me not to power off the 3in1 device for software updates to RP2616. Yes the AN5506-04-FA is a three in one equipment, it is an ONU/ONT bundled with digital Modem (Modulator De-modulator) similar to media converter likewise a Router for routing, and at same time a WAP (Wireless Access Point) with two Bands, one is 2.4GHz and the other is 5GHz frequency, also a four LAN port and two POTS ports for wired PCs and Telephone.


It has been long time ago that my PLDT Fiberhome internet fiber connection from the time being installed I got no worry about even though the web GUI (Graphical User Interface) has only limited settings,with the helps of those Gurus out the in gist.github.com I able to fully access and navigate the rest of the ONU/ONT web GUI Menu and settings. Early on the month of April the tricks to navigate the rest of the Menus and settings with admin username and password 1234 are unavaible already. After checking the software version, oh! RP2616 is no longer on the Status Device Information but rather an update being done now its RP2621 already. The gist.github.com and symbianize.com altering 1.xml to 2.xml will log you out and prompt you the return2login.html. In other words me and the rest of the Netizen who use the same agenda will now have to end the enjoyable downloading that we have on the previous tricks and settings.


So I make a call and dialed 171, I speak to the CSR and made a request for Bridge Mode of my lousy PLDT Fiberhome ONU/ONT AN5506-04-FA software version RP2621 hoping that from Routing Mode to Bridging will solved my problem. This is purchasing a new wireless router to served for my said purposes. One day after PLDT Technical guy calls up and talk to me and ask me what is my concerned, I said, I just need to be Bridge my ONU/ONT AN5506-04-FA I will just provide another wireless router for me needs.
He told me just to hang the phone for a while and after three (3) minutes he told me to unplug the power adaptor and plug again then power it up. Yes so quick, after he told me to verify if its already in the Bridge Mode and I said yes. I was so happy on that day that my PLDT Fiberhome AN5506-04-FA ONU/ONT is now on Bridge mode.

So finally my goal on Bridging the ONU/ONT is now done worry not because my new TP-Link WR841N can handle it, this kind of router is cheap with fair price and it is also a well know brand in data communication. So from that day I didn't check my speedtest if there is improvement or worst than before. A month have pass I notice it when I download files that my downstream now is on 50Kbits, I keep on downloading until I come to the conclusion that there is something wrong with my speed. Even for YouTube video streaming it took sometime to load the video to play. When I read on the other thread some Netizen also facing this kind problem after changing their ONU/ONT AN5506-04-FA from Router mode to Bridge mode the speed of the downstream get worsen that what they are to expected.

Reading upon research from other thread online about ONU/ONT and OLT, I came to the conclusion that on the side of Optical Network Unit or Optical Network Terminal it won't serve the purpose, you are limited and can be locked, on my observations all the supervision and management are on the side of the Optical Line Terminal (OLT). The OLT can restrict your upload and download, it has also the authority even to null your ONU/ONT LAN ports to a single PC only. Of course there is a remedy for this, remember there is no secured system made by human being there is always a way in that is why they won't stop and always keep on patching from time to time because they know its INSECURED.

Aug 5, 2018

How To Backup Fiberhome AN5506-04-FA MTD

First and foremost before doing the backup of the ONU/ONT Fiberhome AN5506-04-FA make sure you are the owner of the device, secondly you responsible for the damage you have done, doing this is a risky and you might be able to brick the equipment if mishandled incorrectly. As a precaution, preferably you have a spare ONU/ONT on your hand in the case of disaster you might not disrupt your internet connection.

How do we backup the ONU/ONT Fiberhome AN5506-04-FA mtd aka firmware?


There are two available terminal that we can gain access on AN5506-04-FA one is via Telnet terminal and the other is via Serial communication port. These two accessible console is also applicable to the other Fiberhome ONU/ONT AN5506-XX-XXX series if you want to explore your own device to prevent your Internet Fiber ONU device being remotely updated upon updated its firmware for you not to have the vast features configuration and all the other setting being hidden by your greedy ISP. To begin with, lets check if the port of Telnet is open we can use NMAP to verify it or other similar port scanner that may give us same result. If the Telnet port is close then we do not have other choice but to open the top cover of the ONU/ONT AN5506-04-FA because Serial Console header is residing on the surface of the board.



What we need for serial communication for us to be able to communicate with AN5506-04-FA Serial Console is a serial com port, or any USB-to-Serial converter device. Then a HyperTerminal, you can also use Putty,you might want to be comfy Hercules will do or any other application alike will serve for data communication between two digital devices. Once you are plugged in then the console terminal is ready. Communication baud rate is 115200 8n1, if everything is properly hooked up, once we fire up the power ON you should see the U-Boot message just started like this.

U-Boot 2010.03-svn671412 (May 27 2017 - 09:37:39)

DRAM:  128 MB
Boot From NAND Flash
CHIP ID = 51152100
NAND:  Special Nand id table Version 1.23
Nand ID: 0xC2 0xF1 0x80 0x95 0x02 0x00 0x00 0x00
Nand(Hardware): Block:128KB Page:2KB Chip:128MB*1 OOB:64B ECC:4Bytes
128 MiB
env0 ok ~~~~~~~~~~~
In:    serial
Out:   serial
Err:   serial
hi_lsw_init
hi_lsw_init_t
MEM_MODE = MEM!
tmp_cmd a =kk=112 mem=240M console=ttyAMA1,115200 root=/dev/mtdblock5 rootfstype=jffs2 mtdparts=hinand:128k(startcode),1M(u-bootA),1M(u-bootB),1M(envA),1M(envB),18M(kernel_rootfsA),18M(app_binA),20M(app_exA),18M(kernel_rootfsB),18M(app_binB),20M(app_exB),12160k(cfg)
kernel_rootfs_mtd_offset = 0x420000
Hit enter to stop autoboot:  2

This is just the first boot, let the system to goes on to the second boot until you see the message like this and then it will tell you to Press Ctrl+C to stop auto setup in 3 seconds, from 2sec to 0sec you must be quick.

CFE adapter module install successfully ...!

CFE hw_adpter_l3 module install successfully ...!

CFE module install successfully ...!
dapter multicast module install successfully, version: Jul 12 2017 10:28:18

 CFE_FH_MARK module install successfully ...!
initialize.sh...

Press Ctrl + C to stop auto setup 0

You are now in the root directory

~ #
Once you type the following Linux command like this cat /proc/mtd then you will see now the list of all MTDs.

~ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00020000 00020000 "startcode"
mtd1: 00100000 00020000 "u-bootA"
mtd2: 00100000 00020000 "u-bootB"
mtd3: 00100000 00020000 "envA"
mtd4: 00100000 00020000 "envB"
mtd5: 01200000 00020000 "kernel_rootfsA"
mtd6: 01200000 00020000 "app_binA"
mtd7: 01400000 00020000 "app_exA"
mtd8: 01200000 00020000 "kernel_rootfsB"
mtd9: 01200000 00020000 "app_binB"
mtd10: 01400000 00020000 "app_exB"
mtd11: 00be0000 00020000 "cfg"

Your USB pen drive or Flash drive must be formatted in FAT32 by default in any Microsoft Windows OS. After formatting it eject then plugged it onto the USB port of the AN5506-04-FA device. It will then pop you a message like this.


usb 1-2: new high speed USB device using hiusb-ehci and address 3
scsi1 : usb-storage 1-2:1.0
scsi 1:0:0:0: Direct-Access     TOSHIBA  TransMemory      1.00 PQ: 0 ANSI: 4
sd 1:0:0:0: [sda] 7574304 512-byte logical blocks: (3.87 GB/3.61 GiB)
sd 1:0:0:0: Attached scsi generic sg0 type 0
sd 1:0:0:0: [sda] Write Protect is off
sd 1:0:0:0: [sda] Assuming drive cache: write through
sd 1:0:0:0: [sda] Assuming drive cache: write through
 sda: sda1
sd 1:0:0:0: [sda] Assuming drive cache: write through
sd 1:0:0:0: [sda] Attached SCSI removable disk
fat
open /dev/console successed.
usb led 0  off
usb led 1  on

Verify with the df  Linux command. It will show you the list of all devices in the system.

~ # df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/root                18432      9864      8568  54% /
tmpfs                   119696         4    119692   0% /dev
none                    524288         0    524288   0% /tmp
none                    524288         4    524284   0% /var
/dev/mtdblock11          12160       856     11304   7% /fhcfg
/dev/mtdblock6           18432      5796     12636  31% /fh/bin
/dev/mtdblock7           20480     16564      3916  81% /fh/extend
/dev/sda1              3777936    215868   3562068   6% /dev/shm/usb/media/sda1

The USB flash drive is detected as sda1 device (/dev/sda1) and the mount point is located at (/dev/shm/usb/media/sda1), now we have to unmount the USB pen drive device first by not unplugging from the USB port of the AN5506-04-FA. Then mount again the USB flash drive with this following Linux command.


umount /dev/sda1

mount /dev/sda1 /dev/shm/usb/media/sda1

We are ready now for backing up all the MTDs of Fiberhome ONU/ONT AN5506-04-FA, we'll make first folder on the USB drive with this command.


mkdir /dev/shm/usb/media/sda1/backup


Now use these following Linux commands for back up the list of all the AN5506-04-FA MTDs.


~ # dd if=/dev/mtd0 of=/dev/shm/usb/media/sda1/backup/startcode.bin

256+0 records in
256+0 records out
131072 bytes (128.0KB) copied, 0.018642 seconds, 6.7MB/s


~ # dd if=/dev/mtd1 of=/dev/shm/usb/media/sda1/backup/u-bootA.bin

2048+0 records in
2048+0 records out
1048576 bytes (1.0MB) copied, 0.147251 seconds, 6.8MB/s

~ # dd if=/dev/mtd2 of=/dev/shm/usb/media/sda1/backup/u-bootB.bin

2048+0 records in
2048+0 records out
1048576 bytes (1.0MB) copied, 0.146912 seconds, 6.8MB/s

~ # dd if=/dev/mtd3 of=/dev/shm/usb/media/sda1/backup/envA.bin

2048+0 records in
2048+0 records out
1048576 bytes (1.0MB) copied, 0.147150 seconds, 6.8MB/s

~ # dd if=/dev/mtd4 of=/dev/shm/usb/media/sda1/backup/envB.bin

2048+0 records in
2048+0 records out
1048576 bytes (1.0MB) copied, 0.146535 seconds, 6.8MB/s

~ # dd if=/dev/mtd5 of=/dev/shm/usb/media/sda1/backup/kernel_rootfsA.bin

36864+0 records in
36864+0 records out
18874368 bytes (18.0MB) copied, 2.636288 seconds, 6.8MB/s

~ # dd if=/dev/mtd6 of=/dev/shm/usb/media/sda1/backup/app_binA.bin

36864+0 records in
36864+0 records out
18874368 bytes (18.0MB) copied, 3.495190 seconds, 5.1MB/s

~ # dd if=/dev/mtd7 of=/dev/shm/usb/media/sda1/backup/app_exA.bin

40960+0 records in
40960+0 records out
20971520 bytes (20.0MB) copied, 2.980738 seconds, 6.7MB/s

~ # dd if=/dev/mtd8 of=/dev/shm/usb/media/sda1/backup/kernel_rootfsB.bin

36864+0 records in
36864+0 records out
18874368 bytes (18.0MB) copied, 5.694926 seconds, 3.2MB/s

~ # dd if=/dev/mtd9 of=/dev/shm/usb/media/sda1/backup/app_binB.bin

36864+0 records in
36864+0 records out
18874368 bytes (18.0MB) copied, 2.767045 seconds, 6.5MB/s

~ # dd if=/dev/mtd10 of=/dev/shm/usb/media/sda1/backup/app_exB.bin

40960+0 records in
40960+0 records out
20971520 bytes (20.0MB) copied, 2.995862 seconds, 6.7MB/s

~ # dd if=/dev/mtd11 of=/dev/shm/usb/media/sda1/backup/cfg.bin

24320+0 records in
24320+0 records out
12451840 bytes (11.9MB) copied, 1.870105 seconds, 6.3MB/s

Now we are done, we able to backup all the MTDs of Fiberhome ONU An5506-04-FA. Soonest I post an article on How-To upload the MTD int the device incase you bricked you equipment you can repair it by you own.

Aug 1, 2018

How To Change MAC Address on Embeded System

I have just purchased an ONU/ONT Fiberhome AN5506-01-A at AliExpress a well known online store in Asia region. I decided to buy it because of my Fiber Internet Service Provider is locking down all their Optical Network Unit aka Optical Network Terminal which only allow their subscriber to a limited privileges to the CPE device settings and configurations. My ISP are updating their device remotely via OMCI and not through TR069, the updates or the ONU firmware upgrade is done without your knowing to whether it is online or offline it can be done. Exactly the updates upon updates is done prior without noticed the so called firmware!


My problem is that the ONU AN5506-01-A came in to me is with the Software Version RP0521 and the Hardware Version is HX-2.134.318A9G, this stock firmware also has a limited basic configuration settings. Meaning some of the Menus and sub-menus are being omitted, you can not set the WAN to Bridge Mode on the web Graphical User Interface (GUI) its explicitly as Router mode only. Another thing is that the LAN menu or the setting is missing from the GUI, you can not modify your desired IP configuration, enabling and disabling DHCP server and relay are out of the context. Most of all its NOT a plug and play electronics equipment.

Why do I need to change the MAC Addresses?

Unlike xDSL internet connection, your ISP will just ask you what username and password you wish or they just provide you the username and the password for you such as yourname@isp and your password, most often you can even choose your desired password as you wish for it. Then choosing and buying your own personal wireless modem router from low to mid or high class residential gateway is just on your finger nail because the device is a plug and play after you input the given username and password given by your ISP its now connected to the internet.

Now here we go, I took the fiber patch cord from my ONU/ONT ISP and then plug it to my new Fiberhome AN5506-01-A the LOS LED turns off from blinking Red, and the PON LED now don't stop from blinking Yellow. Obviously the PON LED means that the ONU is not connected to the network or to the OLT it needs an authentication, once the ONU is connected the PON LED lit will be steady in yellow color.

To get the AN5506-01-A to be connected to the OLT of my ISP we need to copy first the PON MAC address of the ONU/ONT and Serial Number of it that was provided by the ISP and replicate to the new ONU/ONT AN5506-01-A.

How do we change the PON MAC Address of the Fiberhome AN5506-01-A?

The ONU/ONT Fiberhome An5506-01-A is a ARM Linux Embeded system, going to the web GUI there is no way of changing the PON MAC Address. The chances of spoofing the Passive Optical Network MAC address is in the Linux environment, we can log in via Telnet and we can get access to its Command Line Interface (CLI), after reviewing the commands it is very reluctant to clone the MAC address. Another option is thru Serial communication port, this is a terminal also a CLI were we can get help from Busybox.

To change the PON MAC Address of AN5506-01-A heres the command.

First find the physical MAC address of your ONU/ONT device by running this following command :

# ifconfig -a | grep HWaddr
pie0  Link encap:Ethernet HWaddr 00:1A:2B:3C:4D:5E

The hexadecimal numbers in blue denote my AN5506-01-A ONU/ONT PON MAC address.

Next, type this following commands.

# ifconfig pie0 down
# ifconfig pie0 hw ether 00:A1:B2:C3:D4:E5
# ifconfig pie0 up
# ifconfig pie0 |grep HWaddr

To check again if the PON MAC Address have been change already just repeat this following command.

# ifconfig -a | grep HWaddr
pie0  Link encap:Ethernet HWaddr 00:A1:B2:C3:D4:E5

This is just a temporary solution, once the machine is being rebooting it will just go back to its original MAC address.

The final option we can do is still via Serial port but now it would be thru U-Boot Linux environment. Power ON the ONU/ONT
then you will see U-Boot started you must be quick in 3 seconds it will continue to boot to the second level of booting. You have to hit any key in 3 seconds.


U-Boot 2010.03-svn462977 (Mar 09 2016 - 17:03:30)

DRAM:  16 MB
Boot From SPI Flash
CHIP ID = 51161110
NAND:  SFC ID: 0x0
SFC : cs0 unrecognized JEDEC id 00000000, extended id 00000000
SFC ID: 0xef4018
SFC: cs1 W25Q128BV (16384 Kbytes)
SFC: Detected W25Q128BV with page size 65536, total 16777216 bytes
SFC: sfc_read flash offset 0x40000, len 0x20000, memory buf 0x81560008
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  2

Here's the following command in U-boot.

# setenv ponmac 00:A1:B2:C3:D4:E5

# saveenv

saveenv command means saving the environment variables. This will save permanently to the SPI FLASH storage.

Saving Environment to SPI Flash...
Erasing SPI flash...SFC: erase offset 0x40000, len 0x20000
erase cs 1
Writing to SPI flash...SFC: sfc_write flash to 0x40000, len 0x20000, memory buf 0x81560008
Erasing SPI flash...SFC: erase offset 0x60000, len 0x20000
erase cs 1
Writing to SPI flash...SFC: sfc_write flash to 0x60000, len 0x20000, memory buf 0x81560008
done

You must see something like this log messages.

Finally you can now use your ONU/ONT AN5506-01-A, just input the Serial Number of your device the OLT of your ISP provider will now give the authority to be connected to the system.

Jul 28, 2018

My PLDT HOME Fibr Experience

Finally I am PLDT Fibr connected already! It took me a year and three months on appliying the Internet Fiber connection after rejected and disapproved by the PLDT Fiber organic technical support Engineer. The reason are because of (1) due to long distance laying cable, my house from the PLDT pole were the NAP is located is less than 250  meters only, yes two hundred fifty meters only. I told the Technical Engineer this is a very short distance only where as the Optical Network Unit (ONU) aka ONT (Optical Network Terminal) can handle the link within 20 Kilometers without any line driver or signal amplifier or booster because the link is a passive connection. The second thing is private properties were the aerial cable lay and pass, that I have to ask consent from the property lot. In short I have to make a written letter signed by the said owner of the residential area for the fiber cable to be installed without any question. Make story short the PLDT Fiber Organic Technical Support Engineering team hesitant to install the Internet Fiber connection.


My second application for Fiber Internet from PLDT was online, I make a call via 171 quering about the status of my previous unapproved PLDT Home Fibr subscription. The Customer Service Representative were polite answering my phone call and told me to make a new application for their Internet Fiber and even offer for fiftty percent (50%) switch if I am from other Telco ISP. I said yes she told me to send my previous Bill from my other Internet Service Provider to avail the promo.

I send the requirements and after five days the Technical Support Team calls me up and said that the ports going to my area is already loaded. Meaning the NAP were the terminals are located is unavailable now this is because previous month ago the PLDT agent went on house to house and offer Bilis-Kabit PLDT Home Fiber on my residential neighbors . The supposed six port was available on the NAP before during the time of my application now has taken already.

They offer me an option for the Internet connection (1) is PLDT Home Ultera, I said no. I do not like the service of the PLDT Home Ultera this is a wireless internet connection base on SIM or without SIM. Another thing about Home Ultera the connection is intermittent, capping, and they can not provide good and reliable connectivity. To add more PLDT wireless network do not offer Public IPs, also no high bandwidth available this good for single user only.

The other Internet connection they offer me was PLDT DSL, I am yes for this time since I do not have other option but to get this because I am in need of the Internet. If I have to wait for the PLDT Fiber when they could add more NAPs on my nearest area that things the Technical Support team can not be answered even Technical Engineers have no idea too.

Another five working days passed, my mobile phone rang when I pick it up the PLDT sub-contructor now is handling the PLDT DSL connection. They search for my house and found it, the problem now is were to find the nearest available telephone terminal for my DSL Internet connection. After searching around on my area, the only nearest location of PTSN terminal is it will consume about two rolls of copper cable for the telephone line were the DSL signal caries it. So now the PLDT sub-contructor team is again reluctant to lay the copper cable with that long distance of Kilometers. I didn't argue anymore to those technical person installer why they do want to do the job.

Recently, I heard from the news that there will be a newly third Big Telco from China is already awarded to compete the Duopoly of Globe and PLDT, where as the recent third Telco from Australia and SMB was discontinued their operation. Sometime ago I went to the Mall for groceries I saw a boot of PLDT and they are giving flyers, I approach the person standing behind the boot and ask if my area is covered by their service provider. She get the list of towns of my city and show me the newly installed NAP and fiber cable and she said yes.

So I give up my IDs and said I want to subscribe the PLDT Home Fiber, she give me the application form to be filled up and sign. After filling and signing the form I give it to her, she told me to open up my mobile phone and monitor it someone from PLDT will call me after five to ten days.

To my surprised seven days later someone calls me up I thought it was the PLDT Manila, the person on the phone told me that they are going to install the PLDT Home fiber, really! are you sure? Why so fast, are they afraid of third Telco player. I instructed the guy the direction going to my house and finally they are three person equip with their installation gear. They survey the area were to lay the cable and said they need two service pole, and I must have to provide it. Two days later the two service pole already erected as per request they came again here now they are for PLDT Home Fiber cable installation already. The fiber aerial laying and the indoor cabling and drilling took them on hour and half. They divided the task, their Team leader is inside the house and the other two guys technician maybe are the one responsible laying the cable outside. After they have done the fiber cabling installation in my house, immediately the Tech guy get the ONU/ONT from the box and unboxing it. I saw ONU is white in color with four antennas, it has two POTS and four LAN ports. When I check the label at the bottom of the ONU/ONT wireless modem router its sticker written AN5506-04-FA. Yes, this is Optical Network Unit aka Optical Network Terminal its the same ONU/ONT, this device is a 3in1 it is a modem, a router and a wireless access point.

After everything is done I gave them to some cookies and drinks, I have a chance to chat with them while waiting. I thought  these guys are from PLDT Technical Support Engineering Team, yes its not PLDT organic team anymore perhaps desperately in a hurry that the China Telco will come in, they are from other company a sub-contructor of PLDT Manila, they are task for PLDT Fiber client installation only and paid per installation. Meaning they only get paid for 300Php per installation for the Team or for their group, let say if have installed one client that is 300, if it is two then that is 600 then that amount would be divided into three person.

For instance in my case I am the only client they have installed for the PLDT Fiber for the whole day so they only get 300 peso and it is divided into three (3) since they are three person. I get pity to these people, imagined it 100 peso for each person per day and no installation no pay. So I decided to give them extra amount in kind atleast to unleast their thirst and sweat.

Before they leave my house after their installation, the Team leader make a phone call to PLDT and make a report that they done they task. I signed two copies of TOS something one for me and the other is for them, He told me just to open the ONU AN5506-04-FA because it is not yet activate. Few minutes later after the Installer leave the PLDT Tech Support calls me up on my phone and said just leave the device open and do not turn off. I open my browser pointing to http://192.168.1.1 I able to navigate to the GUI. Yes it is still not yet active and I saw the AN5506-04-FA version is RP2610, after few minutes later the PLDT Tech support call again asking me if if there is Internet connection already, and I said yes there is. Opeing up the GUI again the software version immediately updated to RP2616.

Checking my Internet Speed Test shows 20Mb download and 20Mb upload, I was so happy and satisfied because my plan is 5Mbps only. Soon to write more about this AN5506-04-FA ONU/ONT.

Jul 26, 2018

AN5506-04-FA running-config

It look likes the Fiberhome AN5506-04-FA ONU/ONT running-config is similar to Cisco IOS, if you are familiar with Cisco product then it is easily for you to navigate the Command Line Interface (CLI) of the AN5506-XX-XX. Take a look closely of this ONU running-config.


Config# show running-config                                                                                                                                             
 msgrcv nReturnValue:2048 timee:5.

 ntpInterface_get_ntp_server_info:ntpMsgSndAndRcv 2048.
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!

simu_languae-filePath:/fh/extend/announce_chn.pcm
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!
[cliGetProgressSpecialTemp]:cli get_dsp_tone_mode failed!

!system config file----------------------------------------

!usermanage config---------------------------------------------

user add *edited* login-password *edited*494777e57e7016437976bdec
user role *edited* ADMIN enable-password *edited*494777e57e7016437976bdec
user add *edited* login-password *edited*ec339bf65240a43aedfc4f32
user role *edited* ADMIN enable-password *edited*ec339bf65240a43aedfc4f32

!device ip config---------------------------------------------

!fan temperature config---------------------------------------------

set electricfan run temperature 35 stop temperature 25


set ntp server enable server1 Time1.google.com server2 time.windows.com  timeout 5 update_frequence 60 ltz_hour 8 ltz_min 0 auth disable dst disable


!NGN SIP config------------------------------------
!NGN config------------------------------------
set private ignore clearcfg disenable
set callerId standard fsk-telcordia

set reboot flag disable
set dsp fm flag off
set dsp special tone temp 1 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -13
set dsp special tone temp 2 on_off 1000 4000 freq_nums 1 modulation 0 percent 0 freq_level 450 -19
set dsp special tone temp 3 on_off 350 350 freq_nums 1 modulation 0 percent 0 freq_level 450 -10
set dsp special tone temp 4 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 5 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 6 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 7 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 8 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 950 -24
set dsp special tone temp 9 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 10 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 11 on_off 400 4000 freq_nums 1 modulation 0 percent 0 freq_level 450 -10
set dsp special tone temp 12 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 13 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 14 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 15 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 16 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 17 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 18 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 19 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 20 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set codec-time flash 90 onhook 600
set codec-time pulse_break 40
set codec-time pulse_interdigit 350
set impedance 600ohm
set codec gain port 1 da 0 ad 0
set codec dcfeed port 1 48v_20ma
set codec gain port 2 da 0 ad 0
set codec dcfeed port 2 48v_20ma
set dhcp enable
set ngn signal svlan tpid 33024 cos 0 vid 1024
set ngn rtp svlan tpid 33024 cos 0 vid 1024
set ngn led standard ctc
set voice_codec default off G711A
set ipt timer 0
set ipt gain 0
set secDigit RFC2833PT 97 RFC2198PT 0

set fmtp dtmfAN enable redAN enable
set ngn voice simulate language chinese
set voip provider
set local transport udp
set local port 5060
set registrar primary hostname dvosbc.ftth.pldt.net port 5060
set registrar standby hostname dvosbc.ftth.pldt.net port 5060
set proxy primary ip *edited* port 5060
set proxy standby ip *edited* port 5060
set expire-time 3600
set register_retry_interval 30
set keepalive enable
set keepalive period 300
set keepalive max-fail 2
set signal timeout dt 60000 rt 60000 ri 60000 bt 40000 roh 60000 cw 60000 cf 15000
set signal mode dt on_off 1000 0 frequency 450
set signal mode rt on_off 1000 4000 frequency 450
set signal mode bt on_off 350 350 frequency 450
set signal mode roh on_off 1000 0 frequency 950
set signal mode cw on_off 400 4000 frequency 450
set callerId delay 1500 timing between
set dns-server 0 0.0.0.0
set dns-server 1 0.0.0.0
create profile port1
set profile port1 codec pcma silence_mode uncompress soft_noise enable second_dial common echo_cancel enable gain 0 input 0 jitter_Buffer 40 faxJitBuffer 100 pkg_interval 20
set profile port1 faxmode t30 faxmaxrate 14400 t38_tcfmode transferred t38_portadd2 disable imagedata_redlevel 0 t30ctrldata_redlevel 0
create profile port2
set profile port2 codec pcma silence_mode uncompress soft_noise enable second_dial common echo_cancel enable gain 0 input 0 jitter_Buffer 40 faxJitBuffer 100 pkg_interval 20
set profile port2 faxmode t30 faxmaxrate 14400 t38_tcfmode transferred t38_portadd2 disable imagedata_redlevel 0 t30ctrldata_redlevel 0
set port 1 phone-number *edited*
set port 1 auth-name *edited* password 1234
set call-id port 1 sdmf
set port 1 pole connected
attach port 1 to special_ring_templ 0
set call-conference port 1 disable
set call-conference port 1 mix-mode local
set call-waiting port 1 disable
set ect port 1 disable

 set jitterbuffer port 1 min 20 max 200 mode adaptive
attach profile port1 to user 1
set port 1 hotline disable
set PBX dialing port 1 disable number
set sip port 1 flash-inform normal flashReportInfo 0
set port 1 codeclist index 1 codec-type pcmu pkg_interval 0
set port 1 codeclist index 2 codec-type pcma pkg_interval 0
set port 1 codeclist index 3 codec-type g7231 pkg_interval 0
set port 1 codeclist index 4 codec-type g729 pkg_interval 0
set port 1 codeclist index 5 codec-type g722 pkg_interval 0
set mcid port 1  disable code *33#
set call-id port 2 sdmf
set port 2 pole connected
attach port 2 to special_ring_templ 0
set call-conference port 2 disable
set call-conference port 2 mix-mode local
set call-waiting port 2 disable
set ect port 2 disable
set jitterbuffer port 2 min 20 max 200 mode adaptive
attach profile port2 to user 2
set port 2 hotline disable
set PBX dialing port 2 disable number
set sip port 2 flash-inform normal flashReportInfo 0
set port 2 codeclist index 1 codec-type pcmu pkg_interval 0
set port 2 codeclist index 2 codec-type pcma pkg_interval 0
set port 2 codeclist index 3 codec-type g7231 pkg_interval 0
set port 2 codeclist index 4 codec-type g729 pkg_interval 0
set port 2 codeclist index 5 codec-type g722 pkg_interval 0
set mcid port 2  disable code *33#
set ring onmax 1000 offmin 500
set special ring temp 1 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 2 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 3 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 4 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 5 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 6 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 7 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 8 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0


 set special ring temp 9 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 10 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 11 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 12 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 13 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 14 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set special ring temp 15 initRing 1000 initStop 4000 ring 0 stop 0 lastRing 0 lastStop 0
set fax process-mode common sdp-mode add high-speed-t38 dis ans-timer 5000 faxattr disable  echo enable silence enable
set t30 attr faxmodem disable
set t30 attr echocancel enable
set t30 attr silencesupp enable
set dialplan timer short 4 long 10
set set timer_t1 500 timer_t2 4000 timer_t4 5000
set dialplan notify immediate
set vbd disable codec pcma pkt_in_interval 20 pkt_out_interval 20
set advance jing-change no
set advance cid p-field
set advance codec-pt-priority remote
set advance force2833ptin200 disable
set advance invitereplyflag disable
set advance indiamode disable
set advance force180withnosdp disable
set advance onhookdelay disable
set advance replyreinvitewithnormalsdp disable
set advance webconfig disable
set init-dsp ec off
set non-invite-retransmit t1 disable
set use codec priority in sdp response disable
set ngn signal dscp 0
set ngn rtp    dscp 0
set MWD 30
set attented transfer code  *12*
set unattent transfer code  *12*
set user sip_or_tel sip
set prompt tone flag true tone-type busy-tone
set session-timer supported disable session-expires 1800 min-se 90 refresher uas refresh-method update
set call-waiting only-flashhook no
set call-conference only-flashhook no

set sip reg-subs support enable autorefresh disable send-mode pai expire 3600
set force ringbacktone local flag  false

set callerId standard fsk-telcordia
set reboot flag disable
set dsp fm flag off
set dsp special tone temp 1 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -13
set dsp special tone temp 2 on_off 1000 4000 freq_nums 1 modulation 0 percent 0 freq_level 450 -19
set dsp special tone temp 3 on_off 350 350 freq_nums 1 modulation 0 percent 0 freq_level 450 -10
set dsp special tone temp 4 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 5 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 6 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 7 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 8 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 950 -24
set dsp special tone temp 9 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 10 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 11 on_off 400 4000 freq_nums 1 modulation 0 percent 0 freq_level 450 -10
set dsp special tone temp 12 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 13 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 14 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 15 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 16 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 17 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 18 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 19 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15
set dsp special tone temp 20 on_off 1000 0 freq_nums 1 modulation 0 percent 0 freq_level 450 -15

set codec-time flash 90 onhook 600
set codec-time pulse_break 40
set codec-time pulse_interdigit 350
set impedance 600ohm
set codec gain port 1 da 0 ad 0
set codec dcfeed port 1 48v_20ma
set codec gain port 2 da 0 ad 0
set codec dcfeed port 2 48v_20ma


!end  of config ------------------------------------------


Oct 31, 2017

For TP Routing: Modify firmware size, unlock U-boot partitions, add Fullflash partitions

TP-Link TL-WR703N factory default has only 4MB of flash and 32MB RAM, if you want to play with the OP is simply powerless, so I changed the 8M Flash and 64M RAM.

First, modify the firmware size

OpenWrt in the compile time will be based on each model profile to generate the firmware, if the generated firmware integrated too much software and more than 4MB it will be error, you will find that the firmware can not be generated.

Specific symptoms See my last Post start compiling and compiling openwrt.

Compilation passed, but did not find the firmware in ./openwrt/bin/ , turned up the compile output prompt, and found a similar

  1. [mktplinkfw] kernel length aligned to 914864
  2. [mktplinkfw] *** error: images are too big
  3. make[3]: [install] Error 255 (ignored)
Here's how to modify the default firmware size of the TP series router


Actually very simple, find the target/linux/ar71xx/image/Makefile, search for the model you want to modify, such as 703N, find the relevant 703N parameters

Then change the tplink-4mlzma to tplink-8mlzma on the line, and then

  1. define Device/tl-wr703n-v1
  2. $(Device/tplink-8mlzma)
  3. BOARDNAME := TL-WR703N
  4. DEVICE_PROFILE := TLWR703
  5. TPLINK_HWID := 0x07030101
  6. CONSOLE := ttyATH0,115200
  7. endef

After you save the exit, you can compile the 8M firmware for tl-wr703n.

Note: Some outdated tutorials on the web say that you also need to modify tools/firmware-utils/src/mktplinkfw.c after I test, the latest source code inside this file is not about 703N and other router parameters, you do not need to modify.


II. Unlocking u-boot Partitions

The horse has the hoof, the person has the slip, does not have to die u-boot how dares the confidence to play the OP? Here we will talk about U-boot, U-boot is the embedded Linux system boot, equivalent to the computer BIOS. The traditional u-boot is only responsible for booting the firmware, once the firmware does not start, then the entire router is brick, there is a TTL is also easy, no one can only on the programmer. But there is not dead u-boot, in fact, with the Web Brush Machine interface U-boot, MA Ma no longer have to worry about my machine into bricks, completely without the demolition machine can save bricks. Want to know their own Google, recommended Enshan hackpascal breed, and brush into U-boot tutorial , I do not discuss how to use u-boot, mainly brush into the u-boot will encounter

  1. could not open mtd device u-boot ,can't open device for writing

This is because OpenWrt is locked by default, unless it is unlocked when the firmware is compiled. U-boot

Locate /target/linux/ar71xx/files/drivers/mtd/tplinkpart.c, search for U-boot, find

  1. parts[0].name = "u-boot";
  2. parts[0].offset = 0;
  3. parts[0].size = offset;
  4. parts[0].mask_flags = MTD_WRITEABLE;
Then remove parts[0].mask_flags = MTD_WRITEABLE; This line will be recompiled.

WARM hint: TP series Brush finished breed must change the MAC address for a valid value, otherwise wireless will hang!

III. Add Fullflash partitions

Now the bricks can be saved, but save back the data are all gone, but also start the configuration, want to think all big ah, the good habit of nurturance is to fall roar! Add Fulllash partitions so that you can back up the entire programmer firmware with the DD command, and there is no such thing as an art loss.
Same as /target/linux/ar71xx/files/drivers/mtd/tplinkpart.c to add the following code

  1. parts[5].name = "fullflash";
  2. parts[5].offset = 0;
  3. parts[5].size = master->size;

As shown in the figure


After recompiling and brushing, you can see the Fullflash partition.

View partitions with cat /proc/mtd

Effect as shown


You can then simply back up the programmer firmware through the dd if=/dev/mtd6 of=/tmp/fullflash.bin !

5aimiku