4 files changed, 116 insertions, 5 deletions

diff --git a/_ont/ont-genexis-ft-g2110c.md b/_ont/ont-genexis-ft-g2110c.md
index 056be45..5d8242e 100644
--- a/_ont/ont-genexis-ft-g2110c.md
+++ b/_ont/ont-genexis-ft-g2110c.md
@@ -25,11 +25,14 @@ parent: Genexis
 # External/Internal Photo
 
 {% include image.html file="ft-g2110c-front.jpg"  alt="FiberTwist G2110C-2.5G Front" caption="FiberTwist G2110C-2.5G Front" %}
+
 {% include image.html file="ft-g2110c-back.jpg"  alt="FiberTwist G2110C-2.5G Back" caption="FiberTwist G2110C-2.5G Back" %}
 
 ## Optical Header installation backplate
 {% include image.html file="ft-g2110c-optical-header-1.jpg"  alt="FiberTwist G2110C-2.5G Optical Header installation backplate" caption="FiberTwist G2110C-2.5G Optical Header installation backplate" %}
+
 {% include image.html file="ft-g2110c-optical-header-2.jpg"  alt="FiberTwist G2110C-2.5G Optical Header installation backplate" caption="FiberTwist G2110C-2.5G Optical Header installation backplate" %}
+
 {% include image.html file="ft-g2110c-optical-header-3.jpg"  alt="FiberTwist G2110C-2.5G Optical Header installation backplate" caption="FiberTwist G2110C-2.5G Optical Header installation backplate" %}
 
 ## Internal (TTL is on CM3 header)
@@ -38,8 +41,10 @@ parent: Genexis
 ## List of software versions
 - C-5.6.1-R
 - C-5.7.0-R
+- C-5.7.1-DEV3
 
 ## List of partitions
+
 | dev   | size     | erasesize | name            |
 | ----- | -------- | --------- | --------------- |
 | mtd0  | 00040000 | 00001000  | "boot"          |
@@ -65,7 +70,113 @@ This ONT supports dual boot.
 
 # Useful Commands
 
+{% include alert.html content="Some variables are write-protected, you need to unlock them before proceed" alert="Info" icon="svg-info" color="blue" %}
+
+Use the following command to unlock write-protected variables:
+
+```sh
+# nv setenv ProtectEnv 0
+```
+
+## Getting/Setting the ONT's S/N
+
+{% include alert.html content="If your serial number has letters after the Vendor ID (e.g. ZTEGAAA01234), put them in lower case (e.g. ZTEGaaa01234)" alert="Info" icon="svg-info" color="blue" %}
+
+```sh
+# nv setenv GponSn ZTEGaaa01234
+```
+Reboot the ONT to apply any changes
+
+You can check if the serial number was correclty changed using the following command:
+
+```sh
+# diag gpon get serialnumber
+ZTEGaaa01234
+```
+
+## Changing the Hardware Version
+
+```sh
+# nv setenv HV G2110CE2V1D0
+```
+Reboot ONT to apply the change
+
+## Changing the Equipment ID
+
+```sh
+# nv setenv ProdName FT-G2110C-2.5G
+```
+Reboot ONT to apply the change
+
+## Changing the IP address
+```sh
+# /etc/scripts/flash get LAN_IP_ADDR
+LAN_IP_ADDR=192.168.1.1
+# /etc/scripts/flash set LAN_IP_ADDR 192.168.1.1
+ ```
+
+## Getting/Setting the ONT's PLOAM password
+
+{% include alert.html content="The PLOAM password is stored in ASCII format" alert="Info" icon="svg-info" color="blue" %}
+
+```sh
+# /etc/scripts/flash get GPON_PLOAM_PASSWD
+GPON_PLOAM_PASSWD=AAAAAAAAAA
+# /etc/scripts/flash set GPON_PLOAM_PASSWD AAAAAAAAAA
+```
+Looks like Genexis has also included an U-Boot variable to store the PLOAM. On currently known firmwares (5.6.1 and 5.7.0) it is not read by the `omci_app` daemon.
+If you want to be future proof, put your PLOAM also on U-Boot env using the following command in the OS shell:
+
+```sh
+# nv setenv ploampwd 1234567890
+ploampwd=1234567890
+```
+
+## Spoofing firmware version
+
+{% include alert.html content="To change this data you need to upload a modified firmware. Do it at your own risk!" alert="Warning" icon="svg-warning" color="red" %}
+
+- Download the modified firmware from [here](https://mega.nz/file/yspFRTJT#JjeDS7NwLZxCzFklQGMJVIuPawo8utQRGbMGEXQv84M) md5:  `91946ad8aada2e469b7fff1d38ee7474`
+- Logon on the OS shell of the ONT and run this command: `iptables -F`
+- Open a web browser and go to `http://192.168.1.1/upgrade.asp` or `http://192.168.100.1/upgrade.asp`, enter the same credentials used for telnet session, select the modified firmware and click on `Upgrade`
+- Once the upgrade is done and you are able to reach the ONT via telnet, log back in and run these commands to change the firmware version on both banks:
+
+```sh
+# /etc/scripts/flash set OMCI_OLT_MODE 3
+OMCI_OLT_MODE=3
+# nv setenv sw_custom_version0=V6.0.10N14
+# nv setenv sw_custom_version1=V6.0.10N14
+```
+
+Reboot the ONT and check if the version was correctly applied with this command (take a look at the `Version` field):
+
+```sh
+# omcicli mib get 7
+XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+SWImage
+XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+=================================
+EntityID: 0x00
+Active: 0
+Committed: 0
+Valid: 1
+*Version: V6.0.10N14*
+ProductCode:
+ImageHash: 0x00000000000000000000000000000000
+=================================
+=================================
+EntityID: 0x01
+Active: 1
+Committed: 1
+Valid: 1
+*Version: V6.0.10N14*
+ProductCode:
+ImageHash: 0x00000000000000000000000000000000
+=================================
+```
 
 # Known Bugs
+- Modified image (based on C-5.7.1-DEV3) has the Web UI enabled, but without an attached fiber the daemon will crash
+
 # Miscellaneous Links
 - [FiberTwist G2110C-2.5G](https://genexis.eu/content/uploads/2020/07/FiberTwist-G2110C-2.5G-Installation-Guide-v1.0-EN.pdf)
diff --git a/_ont/ont-huawei-ma5671a-rooted.md b/_ont/ont-huawei-ma5671a-rooted.md
index 76fb93e..93bace5 100644
--- a/_ont/ont-huawei-ma5671a-rooted.md
+++ b/_ont/ont-huawei-ma5671a-rooted.md
@@ -22,7 +22,7 @@ layout: default
     </div>
     <div class="form-floating mb-3">
         <input type="text" class="form-control" placeholder="GPON S/N" name="gpon-sn" id="gpon-sn" value="">
-        <label for="gpon-sn">GPON S/N in format  GPON00001234or 47504F4E12345678, empty for not modify it</label>
+        <label for="gpon-sn">GPON S/N in format GPON12345678 or 47504F4E12345678, empty for not modify it</label>
     </div>
     <div class="form-floating mb-3">
         <input type="text" class="form-control" placeholder="GPON Ploam Password" name="gpon-password" id="gpon-password" value="">
diff --git a/_ont/ont-nokia-g-010g-p.md b/_ont/ont-nokia-g-010g-p.md
index 49342fa..9d87c97 100644
--- a/_ont/ont-nokia-g-010g-p.md
+++ b/_ont/ont-nokia-g-010g-p.md
@@ -43,10 +43,10 @@ To access a complete linux shell just type:
 ```sh
 #ONT>system
 #ONT/system>misc
-#ONT/system/misc>eqsn set ""
+#ONT/system/misc>eqsn set "ALCL00000001"
 ---ATECMDRESULT--- OK
 #ONT/system/misc>eqsn get
-eqsn: 
+eqsn: ALCL00000001
 ---ATECMDRESULT--- OK
 ```
 
diff --git a/_ont/ont-nokia-g-010g-t.md b/_ont/ont-nokia-g-010g-t.md
index 538ebd7..ea08b52 100644
--- a/_ont/ont-nokia-g-010g-t.md
+++ b/_ont/ont-nokia-g-010g-t.md
@@ -79,10 +79,10 @@ To access a complete linux shell just type:
 ```sh
 #ONT>system
 #ONT/system>misc
-#ONT/system/misc>eqsn set ""
+#ONT/system/misc>eqsn set "ALCL00000001"
 ---ATECMDRESULT--- OK
 #ONT/system/misc>eqsn get
-eqsn: 
+eqsn: ALCL00000001
 ---ATECMDRESULT--- OK
 ```