RTL960x/README.md

Hacking RTL9601C1

Hacking V2801F & TWCGPON657 to suite your ISP Fiber

Issue

GPON market is a mess, plus explicit OMCI cause ONU Stick did not work

With my issue:

• V2801F
  • Support OMCI explicit provision LAN port on 2/3/4...
  • Support OMCI explicit provision override OMCI_FAKE_OK 1
  • Good Firmware, support many ISP (Global)
  • Build not strudy
• TWCGPON657
  • Not Working OMCI explicit provision LAN port on 2/3/4...
  • Not Working OMCI explicit provision override
  • Bad Firmware, limited ISP support
  • Silm & Tight build

Single Fiber, Multiple ISP Problem

Fiber Provider can carry Multiple ISP by provision different LAN Port ONU, example:

ONU SFP ⬇️ / Huawei HG8240H LAN Port ➡️	1️⃣	2️⃣	3️⃣	4️⃣
DFP-34G-2C2 (ZTE)	✔️	❌	❌	❌
DFP-34X-2C2 (ZTE)	✔️	❌	❌	❌
TWCGPON657	✔️	❌	❌	❌
V2801F	✔️	✔️	✔️	✔️

✔️ = Can Bridge

❌ = Cannot Bridge (No Internet)

• V2801F firmware can automatically bridge everyting!
• If your ISP on LAN 2 ONU, V2801F firmware can bridge it with no settings!
• Most GPON ONU Stick like DFP-34X-2C2 cannot bridge ONU LAN Port 2 - 4 for Other ISP

My Goal Is,

Good Firmware (V2801F) + Good Hardware (TWCGPON657) = Ultimate XPON ONU STICK!

Flash

I have been using TWCGPON657 (without fan) for a month and never had an issue, so in this sections, flash V2801F firmware into TWCGPON657 stick and fix auto-reboot issue.

Steps:

• Downgrade your TWCGPON657 to version B13 or below.
• Flash with V2801F_V1.9.0-201104.tar and wait.
• Quickly login and execute echo 3 > /proc/fiber_mode to avoid auto-reboot (invalid VS_AUTH_KEY)
• Disconnect fiber from module to restore telnet
• Update VS_AUTH_KEY acording to ELAN_MAC_ADDR and HW_HWVER
• Reboot (in telnet)
• Reflash again with V2801F_V1.9.0-201104.tar (must do after fix VS_AUTH_KEY)
• Enjoy!

Auto Reboot Fix

V2801F

Issue

• Invalid VS_AUTH_KEY
• Changing MAC Address ELAN_MAC_ADDR can cause wrong VS_AUTH_KEY value

Fix

• You need to generate new VS_AUTH_KEY when change ELAN_MAC_ADDR and HW_HWVER
• Apperently, you have few seconds to access Telnet before rebooting
• To prevent auto reboot by entering echo 3 > /proc/fiber_mode (XPON Ethernet Mode)

If you can't type fast enough, use this autoit script quick_telnet-login.au3.

Take a look some generated VS_AUTH_KEY here

Note

When echo 3 > /proc/fiber_mode is set, you lose telnet acccess, you need to unplug fiber to get back

TWCGPON657

• No such problem, VS_AUTH_KEY does not exist.

Usage

• Please read FLASH_GETSET_INFO.md for how to configure, login, etc...
• Advance setting like duplicate ONT Info, read FLASH_GETSET_DEV.md
• For a manual for the built-in Realtek diag utility, see: RTKPONDiagShellUserGuide
  • Source: https://usermanual.wiki/Pdf/RTKPONDiagShellUserGuideV001.291982779/html

Downgrade

If V2801F firmware not supported on TWCGPON657, you can downgrade via this url: http://192.168.1.1/upgrade.asp

Modify

You need a Linux PC/VM, Ubuntu as Operating System

Prerequisite

You need these program installed:

• tar (extract tar package)
• squashfs-tools (extract/repack rootfs)
• qemu-user-static (run MIPS VM)

Extract firmware

• Extract Firmware package in tar format, we need rootfs file
• Extract rootfs partition

unsquashfs rootfs

Repack firmware

• Repack rootfs

mksquashfs squashfs-root rootfs.new -b 131072 -comp lzma

• Rename rootfs

mv rootfs rootfs.old
mv rootfs.new rootfs

• Update md5sum

md5sum fwu.sh rootfs uImage fwu_ver > md5.txt

• tar current folder

tar -cvf ../firmware.tar *