Hacking V2801F, TWCGPON657 & DFP-34X-2C2 to suite your ISP Fiber
Go to file
2021-09-06 23:56:16 +02:00
Docs Added Realtek diag utility manual 2021-09-06 23:56:16 +02:00
TWCGPON657 Add files via upload 2021-02-23 02:42:19 +07:00
UF-Instant/Firmware Added flash dump of UF-Instant 2021-05-27 01:29:27 +02:00
V2801F Merge branch 'main' of https://github.com/Anime4000/Hacking_RTL9601C1 into main 2021-02-28 14:12:53 +08:00
.gitattributes Initial commit 2021-02-17 16:31:52 +08:00
.gitignore Initial commit 2021-02-17 16:31:52 +08:00
LICENSE Initial commit 2021-02-17 16:31:52 +08:00
qemu-test.sh first revision 2021-02-17 17:04:04 +08:00
quick_telnet-login.au3 Update quick_telnet-login.au3 2021-02-28 14:37:06 +08:00
README.md Added Realtek diag utility manual 2021-09-06 23:56:16 +02:00

Hacking RTL9601C1

Hacking V2801F & TWCGPON657 to suite your ISP Fiber

Issue

GPON market is a mess, plus explicit OMCI cause ONU Stick did not work

With my issue:

  • V2801F build quality is bad, died from overheating, firmware is good, manage to have an internet!
  • TWCGPON657 build quality is good, firmware is bad, CPU usage become 100% when PLOAM Password is set!

My goal is, Good Firmware (V2801F) + Good Hardware (TWCGPON657) = Ultimate XPON ONU STICK!

Flash

I have been using TWCGPON657 (without fan) for a month and never had an issue, so in this sections, flash V2801F firmware into TWCGPON657 stick and fix auto-reboot issue.

Steps:

  • Downgrade your TWCGPON657 to version B13 or below.
  • Flash with V2801F_V1.9.0-201104.tar and wait.
  • Quickly login and execute echo 3 > /proc/fiber_mode to avoid auto-reboot (invalid VS_AUTH_KEY)
  • Disconnect fiber from module to restore telnet
  • Update VS_AUTH_KEY acording to ELAN_MAC_ADDR and HW_HWVER
  • Reboot (in telnet)
  • Reflash again with V2801F_V1.9.0-201104.tar (must do after fix VS_AUTH_KEY)
  • Enjoy!

Auto Reboot Fix

V2801F

Issue

  • Invalid VS_AUTH_KEY
  • Changing MAC Address ELAN_MAC_ADDR can cause wrong VS_AUTH_KEY value

Fix

  • You need to generate new VS_AUTH_KEY when change ELAN_MAC_ADDR and HW_HWVER
  • Apperently, you have few seconds to access Telnet before rebooting
  • To prevent auto reboot by entering echo 3 > /proc/fiber_mode (XPON Ethernet Mode)

If you can't type fast enough, use this autoit script quick_telnet-login.au3.

Take a look some generated VS_AUTH_KEY here

Note

When echo 3 > /proc/fiber_mode is set, you lose telnet acccess, you need to unplug fiber to get back

TWCGPON657

  • No such problem, VS_AUTH_KEY does not exist.

Usage

Modify

You need a Linux PC/VM, Ubuntu as Operating System

Prerequisite

You need these program installed:

  • tar (extract tar package)
  • squashfs-tools (extract/repack rootfs)
  • qemu-user-static (run MIPS VM)

Extract firmware

  • Extract Firmware package in tar format, we need rootfs file
  • Extract rootfs partition
unsquashfs rootfs

Repack firmware

  • Repack rootfs
mksquashfs squashfs-root rootfs.new -b 131072 -comp lzma
  • Rename rootfs
mv rootfs rootfs.old
mv rootfs.new rootfs
  • Update md5sum
md5sum fwu.sh rootfs uImage fwu_ver > md5.txt
  • tar current folder
tar -cvf ../firmware.tar *