9 files changed, 475 insertions, 4 deletions

diff --git a/_config.yml b/_config.yml
index 3633e02..18317ca 100644
--- a/_config.yml
+++ b/_config.yml
@@ -99,6 +99,9 @@ collections:
   ont:
     permalink: "/:path/"
     output: true
+  ont_xgs:
+    permalink: "/xgs/:path/"
+    output: true
   tools:
     permalink: "/:path/"
     output: true
@@ -112,13 +115,17 @@ collections:
 just_the_docs:
   collections:
     ont:
-      name: ONT
+      name: ONT GPON
+      nav_fold: true
+    ont_xgs:
+      name: ONT XGS-PON
+      nav_fold: true
     tools:
       name: Tools
-      nav_fold: false
+      nav_fold: true
     gpon:
       name: GPON
-      nav_fold: false
+      nav_fold: true
     sfp_cage:
       name: SFP cage
-      nav_fold: false
+      nav_fold: true
diff --git a/_ont_xgs/ont-hisense-ltf7267-bha+.md b/_ont_xgs/ont-hisense-ltf7267-bha+.md
new file mode 100644
index 0000000..deafbec
--- /dev/null
+++ b/_ont_xgs/ont-hisense-ltf7267-bha+.md
@@ -0,0 +1,395 @@
+---
+title: Hisense LTF7267-BHA+
+has_children: false
+layout: default
+parent: Hisense
+---
+
+# Hardware Specifications
+
+|             |              |
+| ----------- | ------------ |
+| Vendor      | Hisense      |
+| Model       | LTF7267-BHA+ |
+| Chipset     | Cortina      |
+| Manufacter  | Hisense      |
+| Flash       | 128MB        |
+| RAM         | 128MB        |
+| System      | Custom Linux by Cortina (Saturn SDK) based on Kernel 4.4 |
+| XSGMII      | Yes          |
+| Optics      | SC/APC       |
+| IP address  | 192.168.0.1  |
+| Web Gui     | ✅ user `admin`, password `system` |
+| Telnet      | ✅ user `root`, password `hbmtsfp` |
+| SSH         | ✅ user `root`, password `hbmtsfp` |
+| Form Factor | miniONT SFP+  |
+
+# External/Internal Photo
+
+{% include image.html file="ont-hisense-ltf7267-bha+_front.jpg" alt="Hisense LTF7267-BHA+ External" caption="Hisense LTF7267-BHA+ External" %}
+
+{% include image.html file="ont-hisense-ltf7267-bha+_inside.jpg" alt="Hisense LTF7267-BHA+ Internals" caption="Hisense LTF7267-BHA+ Internals" %}
+
+
+## UART Console (115200, 8bit)
+
+It's near the SFP header (look at the red-square on _Internals Pic_). TX, RX and ground pads need to be connected to a USB2TTL adapter supporting a logic level of 3.3V
+
+## List of software versions
+- 22.05.26.1 - 20220527052622 (from /etc/hi_version - /etc/version)
+
+
+## List of partitions
+
+| dev   | size     | erasesize | name            |
+| ----- | -------- | --------- | --------------- |
+| mtd0  | 00040000 | 00001000  | "ssb"           |
+| mtd1  | 00002000 | 00001000  | "uboot-env"     |
+| mtd2  | 00002000 | 00001000  | "dtb0"          |
+| mtd3  | 0003c000 | 00001000  | "kernel0"       |
+| mtd4  | 00300000 | 00001000  | "rootfs0"       |
+| mtd5  | 004c0000 | 00001000  | "dtb1"          |
+| mtd6  | 00300000 | 00001000  | "kernel1"       |
+| mtd7  | 004c0000 | 00001000  | "rootfs1"       |
+| mtd8  | 00001000 | 00001000  | "userdata"      |
+| mtd9  | 00001000 | 00001000  | "squashfs_ubi"  |
+| mtd10 | 00001000 | 00001000  | "userdata"      |
+
+This ONT supports dual boot. 
+
+`kernel0` and `rootfs0` respectively contain the kernel and firmware of the first image, `kernel1` and `rootfs1` the kernel and the firmware of the second one
+
+# Useful Commands
+
+To access Cortina Shell (needed to check OMCI stuff and XGSPON status) you can use the following command:
+
+```sh
+# app-cli
+```
+This console can also be reached by opening a telnet connection to `192.168.0.1:2233`
+
+
+## Check Activation Status (from app-cli and telnet\ssh session)
+
+Open two telnet sessions, one to `192.168.0.1` and one to `192.168.0.1:2233`
+
+Before running any commands on the second connection, on the first one tail the `/var/log/messages` file (needed to see the output of the next steps)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# aal
+Cortina(config-aal)# xgpon
+Cortina(config-aal-xgpon)# show activation_state 0
+```
+
+You will see the following output on the first shell:
+
+```sh
+[260426.782381] XGPON Activation Finite State Machine Information^M
+[260426.788170] ----------------------------------------------------------------^M
+[260426.795428] PON mode                 : 5(XGSPON)^M
+[260426.800157] VendorID                 : 0x534d4253(SMBS)^M
+[260426.805556] VSSN                     : 0x11223344^M
+[260426.810423] TO1                      : 80000(unit:125us)^M
+[260426.815879] TO2                      : 1000(unit:125us)^M
+[260426.821543] S/W FSM current event    : EQD_ASSIGNMENT^M
+[260426.826617] S/W FSM current state    : O5.1^M
+[260426.831002] S/W FSM previous state   : O4^M
+[260426.835131] S/W FSM running state    : O5.1^M
+[260426.839476] H/W FSM current state    : O5.1^M
+[260426.843830] H/W FSM previous state   : O4^M
+[260426.847990] Activated counter        : 1^M
+[260426.852085] ONU assigned ID          : 1 ^M
+[260426.856244] PON-ID                   : 0x30313130 ^M
+[260426.861210] Online time              : 260395200 miliseconds ( 26039520 system ticks)^M
+[260426.869187] Registration ID: 0x000000000000000000000000000000000000000000000000000000000000000000000000^M
+[260436.544953] ^M
+```
+
+## Show ONT configuration (from app-cli session)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show info
+```
+
+You will see the following output:
+
+```sh
+=======================================
+omcc       :0xa3
+ipv4Addr   :0x7f000001
+ipv4Mask   :0xffffff00
+ipv4Gw     :0xffffff00
+ponNum     :1
+geNum      :0
+xgeNum     :1
+iphostNum  :1
+potsNum    :0
+veipNum    :0
+ponSlot    :1
+geSlot     :2
+xgeSlot    :3
+iphostSlot :0
+potsSlot   :0
+veipSlot   :4
+oltType    :ZTE
+ponMacMode :5
+maxQ/Tc    :8
+ispType    :COMMON
+batteryBak :1
+remoteDbg  :0
+powerCsvMd :0
+ipv6Flag   :0
+veipIdp    :0
+loid       :00
+passwd     :
+vendorId   :SMBSSMBS
+sn         :SMBS
+version    :F5684S_v1
+eqId       :FIBER Box
+mac        :0:13:25:0:0:1
+iphostMac  :0:13:25:0:0:1
+psk        :0x0000000000000000
+=======================================
+XGe Port idx 0 map to Port 6
+```
+Please note that some of the above fields are decoded incorrectly, such as `sn` and `versionId`
+
+## Check OLT Vendor (from app-cli session)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show me olt_g
+```
+
+You will see the following output:
+
+```sh
+me oltG has [1] instance
+===========================================
+Me: oltG
+    Instance: 0x0
+        oltVendorId[0]: 0x48
+        oltVendorId[1]: 0x57
+        oltVendorId[2]: 0x54
+        oltVendorId[3]: 0x43
+        eqId[0]: 0x20
+        eqId[1]: 0x20
+        eqId[2]: 0x20
+        eqId[3]: 0x20
+        eqId[4]: 0x20
+        eqId[5]: 0x20
+        eqId[6]: 0x20
+        eqId[7]: 0x20
+        eqId[8]: 0x20
+        eqId[9]: 0x20
+        eqId[10]: 0x20
+        eqId[11]: 0x20
+        eqId[12]: 0x20
+        eqId[13]: 0x20
+        eqId[14]: 0x20
+        eqId[15]: 0x20
+        eqId[16]: 0x20
+        eqId[17]: 0x20
+        eqId[18]: 0x20
+        eqId[19]: 0x20
+        version[0]: 0x31
+        version[1]: 0x30
+        version[2]: 0x0
+        version[3]: 0x0
+        version[4]: 0x0
+        version[5]: 0x0
+        version[6]: 0x0
+        version[7]: 0x0
+        version[8]: 0x0
+        version[9]: 0x0
+        version[10]: 0x0
+        version[11]: 0x0
+        version[12]: 0x0
+        version[13]: 0x0
+        timeOfDay[0]: 0x0
+        timeOfDay[1]: 0x0
+        timeOfDay[2]: 0x0
+        timeOfDay[3]: 0x0
+        timeOfDay[4]: 0x0
+        timeOfDay[5]: 0x0
+        timeOfDay[6]: 0x0
+        timeOfDay[7]: 0x0
+        timeOfDay[8]: 0x0
+        timeOfDay[9]: 0x0
+        timeOfDay[10]: 0x0
+        timeOfDay[11]: 0x0
+        timeOfDay[12]: 0x0
+        timeOfDay[13]: 0x0
+    No linked ME
+```
+
+## Check current connection type and configuration (GEM Port+Mac Brige)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show connection
+```
+
+You will see the following output:
+
+```sh
+GEM:65534  | (DS, TCONT:NULL)
+           --mutilcast no care
+             |--Eth   :0x0301
+GEM: 1024  | (BI, TCONT:0x100, allocId:1025)
+           --Bridge + 802.1p:0x1
+           --Map Pri 0xe8
+           --Ani Map Vlan Total Num 1 Vid 100
+             |--Eth   :0x0301
+GEM: 1025  | (BI, TCONT:0x101, allocId:1281)
+           --Bridge + 802.1p:0x1
+           --Map Pri 0x17
+           --Ani Map Vlan Total Num 1 Vid 100
+             |--Eth   :0x0301
+```
+
+## Check VLAN filter 
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show stream
+```
+
+You will see the following output:
+
+```sh
+Link to PPTP eth: ------->instance 0x301
+    input TPID 0x8100 output TPID 0x8100
+    dsMode:Inverse us rules
+    -------------------------------------------------------------------
+    |               Filter              |          Treatment          |
+    |-----------------------------------|-----------------------------|
+    |    Outer   |         Inner        | R |   Outer    |    Inner   |
+    |------------|----------------------| E |------------|------------|
+    | PRI | VID  | PRI | VID  | Filter  | M | PRI | VID  | PRI | VID  |
+    |-----|------|-----|------|---------|---|-----|------|-----|------|
+    |  15 | 4096 |  14 | 4096 |No filter| 3 |  15 |    0 |  15 |    0 |
+    |  14 | 4096 |  14 | 4096 |No filter| 3 |  15 |    0 |  15 |    0 |
+    |  15 | 4096 |  15 | 4096 |No filter| 0 |  15 | 4096 |   0 |    1 |
+    |  15 | 4096 |   8 |  835 |No filter| 1 |  15 |    0 |   8 |  100 |
+    |-----|------|-----|------|---------|---|-----|------|-----|------|
+```
+
+## Changing the Hardware Version
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append line below to the file and save it to change HWVER
+
+```
+CHAR-ARRAY      CFG_ID_GPON_VERSION = {0x46,0x35,0x36,0x38, 0x34,0x53,0x5f,0x76, 0x31,0x00,0x00,0x00, 0x00,0x00}; ##GPON version string, default value is V1.0
+```
+
+Reboot ONT to apply the change
+
+## Changing the Equipment ID
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append the line below to the file and save it to change EQID
+
+```
+CHAR-ARRAY      CFG_ID_GPON_EQID = {0x46,0x49,0x42,0x45, 0x52,0x20,0x42,0x6f, 0x78,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00}; ##GPON ME ONU2G equiment id value, default is saturn
+```
+
+Reboot ONT to apply the change
+
+## Changing Serial Number
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change Serial Number
+
+```
+STRING CFG_ID_PON_VENDOR_ID = SMBS;
+INT CFG_ID_PON_VSSN = 0xAABBCCDD;
+```
+
+Reboot ONT to apply the change
+
+## Changing OLT Emulation Type
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change Serial Number
+
+```
+STRING          CFG_ID_PON_OLT_TYPE                             = ALCL; ##GPON OLT Vendor name, support ZTE,ADTRAN,ALCL,CALIX,SUMITOMO,CORTINA,HUAWEI
+```
+
+Reboot ONT to apply the change
+
+## Changing OMCC Version
+
+{% include alert.html content="In Italy, if you are under some Huawei OLT it's mandatory to use 0xA3, while on Alcatel 0xB4, otherwise you will get O5 status but no MIBs - Note that this can be quirk of TIM Italy" alert="Warning" icon="svg-warning" color="red" %}
+
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append the line below to the file and save it to change Serial Number
+
+```
+CHAR            CFG_ID_OMCC_VERSION                             = 0xB2;
+```
+
+Reboot ONT to apply the change
+
+## Changing LOID Username/Password
+
+{% include alert.html content="The value 0x0 is null, take note of your LoID and password from the original ONT" color="red" %}
+
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change LoID and LoID password
+
+```
+CHAR-ARRAY      CFG_ID_LOID                                                         = {0x30,0x30,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
+CHAR-ARRAY      CFG_ID_PASSWD                                                       = {0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
+```
+
+Reboot ONT to apply the change
+
+## Spoofing firmware version
+
+```sh
+# fw_setenv img_version0 20220527052622
+# fw_setenv img_version0 20220527052622
+```
+
+Reboot ONT to apply the change
+
+# Known Bugs
+- `ALCL` OLT mode uses some static configurations on MIBs, so if your OLT has strict configuration checks it might not work properly
+- During initial tests the only currently working mode of the stick is `PPTP EthUni`
+- Stick can be configured also emulate `VEIP` mode(adding it to the scfg.txt file), but current firmware doesn't link correctly the XGBE interface, so no traffic is passing between LAN and PON interfaces
+
+# Miscellaneous Links
diff --git a/_ont_xgs/ont-hisense.md b/_ont_xgs/ont-hisense.md
new file mode 100644
index 0000000..db94980
--- /dev/null
+++ b/_ont_xgs/ont-hisense.md
@@ -0,0 +1,5 @@
+---
+title: Hisense
+has_children: true
+layout: default
+---
\ No newline at end of file
diff --git a/_ont_xgs/ont-huawei-hn8010ts.md b/_ont_xgs/ont-huawei-hn8010ts.md
new file mode 100644
index 0000000..28b9b92
--- /dev/null
+++ b/_ont_xgs/ont-huawei-hn8010ts.md
@@ -0,0 +1,29 @@
+---
+title: Huawei HN8010Ts
+has_children: false
+layout: default
+parent: Huawei
+---
+
+# Hardware Specifications
+
+|             |          |
+| ----------- | -------- |
+| Vendor      | Huawei   |
+| Model       | HN8010Ts |
+| Chipset     |          |
+| Manufacter  |          |
+| Flash       |          |
+| RAM         |          |
+| System      |          |
+| 10GBaseT    | Yes      |
+| Optics      |          |
+| IP address  |          |
+| Web Gui     |          |
+| Telnet      |          |
+| SSH         |          |
+| Form Factor | ONT      |
+
+## Software Version
+
+- V5R02C0C10S165
\ No newline at end of file
diff --git a/_ont_xgs/ont-huawei.md b/_ont_xgs/ont-huawei.md
new file mode 100644
index 0000000..5aa19ab
--- /dev/null
+++ b/_ont_xgs/ont-huawei.md
@@ -0,0 +1,5 @@
+---
+title: Huawei
+has_children: true
+layout: default
+---
\ No newline at end of file
diff --git a/_ont_xgs/ont-nokia-xs-010x-q.md b/_ont_xgs/ont-nokia-xs-010x-q.md
new file mode 100644
index 0000000..80b4e29
--- /dev/null
+++ b/_ont_xgs/ont-nokia-xs-010x-q.md
@@ -0,0 +1,25 @@
+---
+title: Nokia XS-010X-Q
+has_children: false
+layout: default
+parent: Nokia
+---
+
+# Hardware Specifications
+
+|             |           |
+| ----------- | --------- |
+| Vendor      | Nokia     |
+| Model       | XS-010X-Q |
+| Chipset     |           |
+| Manufacter  |           |
+| Flash       |           |
+| RAM         |           |
+| System      |           |
+| 10GBaseT    | Yes       |
+| Optics      |           |
+| IP address  |           |
+| Web Gui     |           |
+| Telnet      |           |
+| SSH         |           |
+| Form Factor | ONT       |
\ No newline at end of file
diff --git a/_ont_xgs/ont-nokia.md b/_ont_xgs/ont-nokia.md
new file mode 100644
index 0000000..8f07911
--- /dev/null
+++ b/_ont_xgs/ont-nokia.md
@@ -0,0 +1,5 @@
+---
+title: Nokia
+has_children: true
+layout: default
+---
\ No newline at end of file
diff --git a/assets/img/ont-hisense-ltf7267-bha+_front.jpg b/assets/img/ont-hisense-ltf7267-bha+_front.jpg
new file mode 100644
index 0000000..650c2f4
--- /dev/null
+++ b/assets/img/ont-hisense-ltf7267-bha+_front.jpg
diff --git a/assets/img/ont-hisense-ltf7267-bha+_inside.jpg b/assets/img/ont-hisense-ltf7267-bha+_inside.jpg
new file mode 100644
index 0000000..bfab2e2
--- /dev/null
+++ b/assets/img/ont-hisense-ltf7267-bha+_inside.jpg