User Tools

Site Tools


doc:appunti:hardware:alicegate_agpwi_wifi_n

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
doc:appunti:hardware:alicegate_agpwi_wifi_n [2017/12/18 16:26] – [Upload the Firmware] niccolodoc:appunti:hardware:alicegate_agpwi_wifi_n [2018/11/18 22:17] (current) – [Alternative Firmware Comtrend A731-406CTL-T01_R08] niccolo
Line 3: Line 3:
 {{.:alicegate:alicegate_agpwi_adsl2_wifi_n.jpg?direct&200|}} {{.:alicegate:alicegate_agpwi_adsl2_wifi_n.jpg?direct&200|}}
  
-This is an ADSL2+ router installed by **Telecom Italia** to their customer. It ships with **crippled software** so you cannot customize even the PPPoE login or password! Here you find a recipe to substitute the firmware with something more open.+This is an ADSL2+ router installed by **Telecom Italia** to their customer. It ships with **crippled software** so you cannot customize even the PPPoE login and password! Here you find a recipe to substitute the firmware with something more open. Our device is labeled **ADSL2+ WiFi N**, manufactured by **ADB Broadband S.p.A.**, model name **P.DG A4001N A-000-1A1-AX**, original firmware was **AGPWI 1.1.3**.
  
-===== The Alternative Firmware =====+It has two external WiFi antennas, we succeeded in flashing a new firmware on it. Beware that someone reported that models with **internal antennas** accept only **firmwares signed** by the manufacturer. 
 + 
 +===== Alternative Firmware TEO 4.2.6.0011 ===== 
 + 
 +FIXME\\ **WARNING**: This firmware seems rather **buggy**, I verified that is impossible to make a static DHCP lease, so I give up. 
 + 
 +{{.:alicegate:alicegate-custom-1.png?direct&320|Firmware TEO 4.2.6.0011 - Home Page}} 
 +{{.:alicegate:alicegate-custom-2.png?direct&320|Firmware TEO 4.2.6.0011 - Advanced Page}}
  
 We will use a firmware released by **[[wp>Teo_LT|TEO]]**, the largest Lithuanian broadband Internet access operator. The file was found on the internet, you have to trust it, but **there is not any official release**, nor an official checksum. Beside that, the firmware has several custom config embedded in it, a **wrong serial** number and **wrong MAC address**. For this reasons **you have to load a special config**, to remove all the Lithuanian customizations. We will use a firmware released by **[[wp>Teo_LT|TEO]]**, the largest Lithuanian broadband Internet access operator. The file was found on the internet, you have to trust it, but **there is not any official release**, nor an official checksum. Beside that, the firmware has several custom config embedded in it, a **wrong serial** number and **wrong MAC address**. For this reasons **you have to load a special config**, to remove all the Lithuanian customizations.
Line 17: Line 24:
   * The **LEDs are wrong**: ADSL LED is WiFi instead, Internet LED is ADSL line.   * The **LEDs are wrong**: ADSL LED is WiFi instead, Internet LED is ADSL line.
   * **WDS repeater** is not working.   * **WDS repeater** is not working.
 +  * **Static DHCP** lease does not work: settings are not retained.
 +
 +==== Flashing the TEO Firmware ====
  
 The files you have to download are: The files you have to download are:
Line 22: Line 32:
   * **{{.:alicegate:cfe_filesystem.bin.gz|cfe_filesystem.bin}}** (gunzipped md5: 6e88ac1c819f5b4f8022ac3c9c17393c)   * **{{.:alicegate:cfe_filesystem.bin.gz|cfe_filesystem.bin}}** (gunzipped md5: 6e88ac1c819f5b4f8022ac3c9c17393c)
   * **{{.:alicegate:prg_a4001n.conf.gz|PRG_A4001N.conf}}** (gunzipped md5: d5b1495d921cf736222685c1d362416e)   * **{{.:alicegate:prg_a4001n.conf.gz|PRG_A4001N.conf}}** (gunzipped md5: d5b1495d921cf736222685c1d362416e)
- 
-===== Flashing the Alternative Firmware ===== 
  
 ==== Short-Circuit Serial TX/RX to Enable the Special Upgrade Page ==== ==== Short-Circuit Serial TX/RX to Enable the Special Upgrade Page ====
  
-During normal bootstrap, if the router detects **some serial activity**, it jumps to a special mode for **firmare upload**. Our model was based on **firmware AGPWI 1.1.3** , and it accepted the new firmware even if it was **not signed**.+{{.:alicegate:alicegate-serial-jumper.jpg?direct&280 |Serial Port TX/RX Lines}} 
 +During normal bootstrap, if the router detects **some serial activity**, it jumps to a special mode for **Update Software**. Our model was based on **firmware AGPWI 1.1.3** , and it accepted the new firmware even if it is **not signed**.
  
-It is likely that on bootstrap there is a console on the serial line, which says something like //press a key to enter special mode//, by shorting TX and RX lines on the serial line, we simulate the key press.+It is likely that on bootstrap there is a console on the serial line, which says something like //press a key to enter special mode//, by shorting TX and RX lines on the serial port, we simulate the key press.
  
 So we have to open the router case and **short-circuit TX and RX serial line**, e.g. with a little wire or paper-clip. So we have to open the router case and **short-circuit TX and RX serial line**, e.g. with a little wire or paper-clip.
Line 35: Line 44:
   * Power-off the router, **open** it removing the **two screws** at the back and forcing the shell halves.   * Power-off the router, **open** it removing the **two screws** at the back and forcing the shell halves.
   * **Short-circuit TX and RX and power-on** the router. After about 3 seconds the power LED turn from green to red. You can remove the short-circuit.   * **Short-circuit TX and RX and power-on** the router. After about 3 seconds the power LED turn from green to red. You can remove the short-circuit.
 +
 +The router is now in **Update Software** mode, you can upload the firmware via http (see picture).
 +
 +{{.:alicegate:update_software.png?direct&480|Update Software Mode}}
  
 ==== Upload the Firmware ==== ==== Upload the Firmware ====
Line 49: Line 62:
  
 ==== MAC Address and Serial Number ==== ==== MAC Address and Serial Number ====
 +
 +It is time to configure the proper MAC address and Serial Number, you can find them on the bottom label of the router. Beware that now the router has **only Eth2 and Eth4 working** (someone reported the inverse).
 +
 +The configuration is performed **via telnet** using login / password **lt_pdpd** / **un7146**:
  
 <code> <code>
 +$ telnet 192.168.1.254
 +Connected to 192.168.1.254.
 +Escape character is '^]'.
 +Log level 3
 +Username: lt_pdpd
 +Password: ******
 +PRG A4001N>
 +</code>
  
 +<code>
 +PRG A4001N> conf factory
 +factory> unhide
 +factory> open
 +factory> unhide
 +factory> set network/rg_mac 74:88:8b:34:45:56
 +factory> set manufacturer/hardware/serial_num 26702I0712345
 +factory> close
 +factory>  exit
 +conf> exit
 +PRG A4001N> system restore_default
 </code> </code>
  
Line 58: Line 94:
 Finaly you have to upload a clean configuration. The file **PRG_A4001N.conf** was provided by user **Mendocino89**. Finaly you have to upload a clean configuration. The file **PRG_A4001N.conf** was provided by user **Mendocino89**.
  
-  * Point your browser to **//http://192.168.1.254/%%** +  * Point your browser to **%%//http://192.168.1.254/%%** 
-===== Firmware TEO 4.2.6.0011 =====+  * Login with **admin** / **admin** 
 +  * //Advanced// => //Configuration File// => //Load Configuration File// => **PRG A4001N.conf** 
 +  * In two minutes **the router reboots** and it is ready.
  
-{{.:alicegate:alicegate-custom-1.png?direct&320|Firmware TEO 4.2.6.0011 Home Page}} +===== Alternative Firmware Comtrend A731-406CTL-T01_R08 =====
-{{.:alicegate:alicegate-custom-2.png?direct&320|Firmware TEO 4.2.6.0011 Advanced Page}}+
  
 +FIXME This firmware is **buggy too**. It does not keep the wlan config status across reboot: I set it to disables and I find it enabled again. Verified via web interface and with **%%wlan info --config%%** on command line.
 +
 +{{.:alicegate:alicegate-comtrend-firmware.png?direct&320|Firmware Comtrend A731-406CTL-T01_R08}}
 +
 +There is another alternative firmware to upload on this hardware. See this page: **[[http://specialsound.altervista.org/specialsoundWP/sloccare-alice-gate-2-adb-agpwi/|Sloccare Alice Gate 2+ ADB (AGPWI)]]**. The archive you have to download is **{{.:alicegate:ar-5382u-a731_firmware.tgz}}**, which contains two files:
 +
 +  * **AR-5382u-CFE-A731-406TDE-C01_R01_0623.bin** (md5: 6ac7235c50c58a68f74e5ad52ecaa4ce)
 +  * **AR-5382u-A731-406CTL-T01_R08.bin** (md5: 793593abd73060d13e193b9f1d5fceb7)
 +
 +==== Flashing the Comtrend Firmware ====
 +
 +The procedure is similar to the above one, requiring **the short-circuit trick**:
 +
 +  - Power-off the router, **open it removing the two screws** at the back and forcing the shell halves.
 +  - **Short-circuit TX and RX** on the serial line and **power-on the router**. After about 3 seconds the power LED turn from green to **red**. You can remove the short-circuit.
 +  - Connect the **Ethernet cable** and point your browser to **%%http://192.168.1.1/%%** (configure your network as required).
 +  - Upload the **AR-5382u-CFE-A731-406TDE-C01_R01_0623.bin** file (it is the **[[wp>Common_Firmware_Environment|CFE]]** Broadcom bootloader).
 +  - Wait about two minutes, untill the power LED becomes **green**, then **red** again (router rebooted).
 +  - Point your browser again to **%%http://192.168.1.1/%%**.
 +  - Upload the **AR-5382u-A731-406CTL-T01_R08.bin** file.
 +  - Wait about two minutes, untill the power LED becomes **green** steady again (router rebooted).
 +  - Point your browser again to **%%http://192.168.1.1/%%**, login as **root** with password **12345**.
 +
 +==== Comtrend CLI Commands ====
 +
 +The router has a telnet command line interface, here some useful commands:
 +
 +<code>
 +?
 +sys reboot
 +</code>
 +
 +<code>
 + > adsl info
 +adsl: ADSL driver and PHY status
 +Status: Showtime
 +Retrain Reason: 8000
 +Last initialization procedure status:   0
 +Max:    Upstream rate = 319 Kbps, Downstream rate = 3264 Kbps
 +Bearer: 0, Upstream rate = 323 Kbps, Downstream rate = 2986 Kbps
 +</code>
 +
 +<code>
 + > lan show
 +br0             Link encap:Ethernet  HWaddr 00:10:18:00:00:00  
 +                inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
 +          inet6 addr: fe80::210:18ff:fe00:0/64 Scope:Link
 +                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
 +                RX packets:268879 errors:0 dropped:0 overruns:0 frame:0
 +                TX packets:348978 errors:0 dropped:0 overruns:0 carrier:0
 +                collisions:0 txqueuelen:
 +                RX bytes:37519828 (35.7 MiB)  TX bytes:369199367 (352.0 MiB)
 +</code>
 ===== Web Resources ===== ===== Web Resources =====
  
   * [[http://xdsl.eu.org/sblocco-completo-adsl2-wifi-n/|Sblocco completo ADSL2+ Wi-Fi N (AGPWI) con antenne]]   * [[http://xdsl.eu.org/sblocco-completo-adsl2-wifi-n/|Sblocco completo ADSL2+ Wi-Fi N (AGPWI) con antenne]]
   * [[http://xdsl.eu.org/agpf-e-apgwi-guida-cambio-firmware/|AGPF e APGWI: Come cambiare il firmware]]   * [[http://xdsl.eu.org/agpf-e-apgwi-guida-cambio-firmware/|AGPF e APGWI: Come cambiare il firmware]]
 +  * [[http://repo.xdsl.eu.org/?i=1#Home%2FOfficial%20TIM%20FW|Official Telecom Firmware]]
doc/appunti/hardware/alicegate_agpwi_wifi_n.1513610769.txt.gz · Last modified: 2017/12/18 16:26 by niccolo