3.5 KiB
Hacking RTL9601C1
Hacking V2801F & TWCGPON657 to suite your ISP Fiber
Issue
GPON market is a mess, plus explicit OMCI cause ONU Stick did not work
With my issue:
- V2801F
- Support OMCI explicit provision LAN port on 2/3/4...
- Support OMCI explicit provision override
OMCI_FAKE_OK 1
- Good Firmware, support many ISP (Global)
- Build not strudy
- TWCGPON657
- Not Working OMCI explicit provision LAN port on 2/3/4...
- Not Working OMCI explicit provision override
- Bad Firmware, limited ISP support
- Silm & Tight build
ISP vs Fiber Provider:
- My fiber provider can carry multiple ISP
- Fiber provider provision each ISP on different LAN port of ONU
- TWCGPON657 firmware cannot provision other LAN port to bridge
- V2801F firmware manage to override other LAN port to bridge
My goal is, Good Firmware (V2801F) + Good Hardware (TWCGPON657) = Ultimate XPON ONU STICK!
Flash
I have been using TWCGPON657 (without fan) for a month and never had an issue, so in this sections, flash V2801F firmware into TWCGPON657 stick and fix auto-reboot issue.
Steps:
- Downgrade your TWCGPON657 to version B13 or below.
- Flash with
V2801F_V1.9.0-201104.tar
and wait. - Quickly login and execute
echo 3 > /proc/fiber_mode
to avoid auto-reboot (invalidVS_AUTH_KEY
) - Disconnect fiber from module to restore telnet
- Update
VS_AUTH_KEY
acording toELAN_MAC_ADDR
andHW_HWVER
- Reboot (in telnet)
- Reflash again with
V2801F_V1.9.0-201104.tar
(must do after fixVS_AUTH_KEY
) - Enjoy!
Auto Reboot Fix
V2801F
Issue
- Invalid
VS_AUTH_KEY
- Changing MAC Address
ELAN_MAC_ADDR
can cause wrongVS_AUTH_KEY
value
Fix
- You need to generate new
VS_AUTH_KEY
when changeELAN_MAC_ADDR
andHW_HWVER
- Apperently, you have few seconds to access Telnet before rebooting
- To prevent auto reboot by entering
echo 3 > /proc/fiber_mode
(XPON Ethernet Mode)
If you can't type fast enough, use this autoit script
quick_telnet-login.au3
.Take a look some generated
VS_AUTH_KEY
here
Note
When echo 3 > /proc/fiber_mode
is set, you lose telnet acccess, you need to unplug fiber to get back
TWCGPON657
- No such problem,
VS_AUTH_KEY
does not exist.
Usage
- Please read FLASH_GETSET_INFO.md for how to configure, login, etc...
- Advance setting like duplicate ONT Info, read FLASH_GETSET_DEV.md
- For a manual for the built-in Realtek
diag
utility, see: RTKPONDiagShellUserGuide
Downgrade
If V2801F firmware not supported on TWCGPON657, you can downgrade via this url: http://192.168.1.1/upgrade.asp
Modify
You need a Linux PC/VM, Ubuntu as Operating System
Prerequisite
You need these program installed:
tar
(extract tar package)squashfs-tools
(extract/repack rootfs)qemu-user-static
(run MIPS VM)
Extract firmware
- Extract Firmware package in
tar
format, we needrootfs
file - Extract
rootfs
partition
unsquashfs rootfs
Repack firmware
- Repack
rootfs
mksquashfs squashfs-root rootfs.new -b 131072 -comp lzma
- Rename
rootfs
mv rootfs rootfs.old
mv rootfs.new rootfs
- Update
md5sum
md5sum fwu.sh rootfs uImage fwu_ver > md5.txt
- tar current folder
tar -cvf ../firmware.tar *