summaryrefslogtreecommitdiffstats
path: root/_ont_xgs
diff options
context:
space:
mode:
authorSimone <26844016+simonebortolin@users.noreply.github.com>2023-01-02 19:15:42 +0100
committerGitHub <noreply@github.com>2023-01-02 19:15:42 +0100
commita709a25195c2aaa2ace2ca9628d0d36bdc9a8c91 (patch)
treedecf86bc00d829b1248d480ddc550b3d105aa2d2 /_ont_xgs
parentUpdate ont-genexis-ft-g2110c.md (#82) (diff)
downloadhack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar.gz
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar.bz2
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar.lz
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar.xz
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.tar.zst
hack-gpon.github.io-a709a25195c2aaa2ace2ca9628d0d36bdc9a8c91.zip
Diffstat (limited to '_ont_xgs')
-rw-r--r--_ont_xgs/ont-hisense-ltf7267-bha+.md395
-rw-r--r--_ont_xgs/ont-hisense.md5
-rw-r--r--_ont_xgs/ont-huawei-hn8010ts.md29
-rw-r--r--_ont_xgs/ont-huawei.md5
-rw-r--r--_ont_xgs/ont-nokia-xs-010x-q.md25
-rw-r--r--_ont_xgs/ont-nokia.md5
6 files changed, 464 insertions, 0 deletions
diff --git a/_ont_xgs/ont-hisense-ltf7267-bha+.md b/_ont_xgs/ont-hisense-ltf7267-bha+.md
new file mode 100644
index 0000000..deafbec
--- /dev/null
+++ b/_ont_xgs/ont-hisense-ltf7267-bha+.md
@@ -0,0 +1,395 @@
+---
+title: Hisense LTF7267-BHA+
+has_children: false
+layout: default
+parent: Hisense
+---
+
+# Hardware Specifications
+
+| | |
+| ----------- | ------------ |
+| Vendor | Hisense |
+| Model | LTF7267-BHA+ |
+| Chipset | Cortina |
+| Manufacter | Hisense |
+| Flash | 128MB |
+| RAM | 128MB |
+| System | Custom Linux by Cortina (Saturn SDK) based on Kernel 4.4 |
+| XSGMII | Yes |
+| Optics | SC/APC |
+| IP address | 192.168.0.1 |
+| Web Gui | ✅ user `admin`, password `system` |
+| Telnet | ✅ user `root`, password `hbmtsfp` |
+| SSH | ✅ user `root`, password `hbmtsfp` |
+| Form Factor | miniONT SFP+ |
+
+# External/Internal Photo
+
+{% include image.html file="ont-hisense-ltf7267-bha+_front.jpg" alt="Hisense LTF7267-BHA+ External" caption="Hisense LTF7267-BHA+ External" %}
+
+{% include image.html file="ont-hisense-ltf7267-bha+_inside.jpg" alt="Hisense LTF7267-BHA+ Internals" caption="Hisense LTF7267-BHA+ Internals" %}
+
+
+## UART Console (115200, 8bit)
+
+It's near the SFP header (look at the red-square on _Internals Pic_). TX, RX and ground pads need to be connected to a USB2TTL adapter supporting a logic level of 3.3V
+
+## List of software versions
+- 22.05.26.1 - 20220527052622 (from /etc/hi_version - /etc/version)
+
+
+## List of partitions
+
+| dev | size | erasesize | name |
+| ----- | -------- | --------- | --------------- |
+| mtd0 | 00040000 | 00001000 | "ssb" |
+| mtd1 | 00002000 | 00001000 | "uboot-env" |
+| mtd2 | 00002000 | 00001000 | "dtb0" |
+| mtd3 | 0003c000 | 00001000 | "kernel0" |
+| mtd4 | 00300000 | 00001000 | "rootfs0" |
+| mtd5 | 004c0000 | 00001000 | "dtb1" |
+| mtd6 | 00300000 | 00001000 | "kernel1" |
+| mtd7 | 004c0000 | 00001000 | "rootfs1" |
+| mtd8 | 00001000 | 00001000 | "userdata" |
+| mtd9 | 00001000 | 00001000 | "squashfs_ubi" |
+| mtd10 | 00001000 | 00001000 | "userdata" |
+
+This ONT supports dual boot.
+
+`kernel0` and `rootfs0` respectively contain the kernel and firmware of the first image, `kernel1` and `rootfs1` the kernel and the firmware of the second one
+
+# Useful Commands
+
+To access Cortina Shell (needed to check OMCI stuff and XGSPON status) you can use the following command:
+
+```sh
+# app-cli
+```
+This console can also be reached by opening a telnet connection to `192.168.0.1:2233`
+
+
+## Check Activation Status (from app-cli and telnet\ssh session)
+
+Open two telnet sessions, one to `192.168.0.1` and one to `192.168.0.1:2233`
+
+Before running any commands on the second connection, on the first one tail the `/var/log/messages` file (needed to see the output of the next steps)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# aal
+Cortina(config-aal)# xgpon
+Cortina(config-aal-xgpon)# show activation_state 0
+```
+
+You will see the following output on the first shell:
+
+```sh
+[260426.782381] XGPON Activation Finite State Machine Information^M
+[260426.788170] ----------------------------------------------------------------^M
+[260426.795428] PON mode : 5(XGSPON)^M
+[260426.800157] VendorID : 0x534d4253(SMBS)^M
+[260426.805556] VSSN : 0x11223344^M
+[260426.810423] TO1 : 80000(unit:125us)^M
+[260426.815879] TO2 : 1000(unit:125us)^M
+[260426.821543] S/W FSM current event : EQD_ASSIGNMENT^M
+[260426.826617] S/W FSM current state : O5.1^M
+[260426.831002] S/W FSM previous state : O4^M
+[260426.835131] S/W FSM running state : O5.1^M
+[260426.839476] H/W FSM current state : O5.1^M
+[260426.843830] H/W FSM previous state : O4^M
+[260426.847990] Activated counter : 1^M
+[260426.852085] ONU assigned ID : 1 ^M
+[260426.856244] PON-ID : 0x30313130 ^M
+[260426.861210] Online time : 260395200 miliseconds ( 26039520 system ticks)^M
+[260426.869187] Registration ID: 0x000000000000000000000000000000000000000000000000000000000000000000000000^M
+[260436.544953] ^M
+```
+
+## Show ONT configuration (from app-cli session)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show info
+```
+
+You will see the following output:
+
+```sh
+=======================================
+omcc :0xa3
+ipv4Addr :0x7f000001
+ipv4Mask :0xffffff00
+ipv4Gw :0xffffff00
+ponNum :1
+geNum :0
+xgeNum :1
+iphostNum :1
+potsNum :0
+veipNum :0
+ponSlot :1
+geSlot :2
+xgeSlot :3
+iphostSlot :0
+potsSlot :0
+veipSlot :4
+oltType :ZTE
+ponMacMode :5
+maxQ/Tc :8
+ispType :COMMON
+batteryBak :1
+remoteDbg :0
+powerCsvMd :0
+ipv6Flag :0
+veipIdp :0
+loid :00
+passwd :
+vendorId :SMBSSMBS
+sn :SMBS
+version :F5684S_v1
+eqId :FIBER Box
+mac :0:13:25:0:0:1
+iphostMac :0:13:25:0:0:1
+psk :0x0000000000000000
+=======================================
+XGe Port idx 0 map to Port 6
+```
+Please note that some of the above fields are decoded incorrectly, such as `sn` and `versionId`
+
+## Check OLT Vendor (from app-cli session)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show me olt_g
+```
+
+You will see the following output:
+
+```sh
+me oltG has [1] instance
+===========================================
+Me: oltG
+ Instance: 0x0
+ oltVendorId[0]: 0x48
+ oltVendorId[1]: 0x57
+ oltVendorId[2]: 0x54
+ oltVendorId[3]: 0x43
+ eqId[0]: 0x20
+ eqId[1]: 0x20
+ eqId[2]: 0x20
+ eqId[3]: 0x20
+ eqId[4]: 0x20
+ eqId[5]: 0x20
+ eqId[6]: 0x20
+ eqId[7]: 0x20
+ eqId[8]: 0x20
+ eqId[9]: 0x20
+ eqId[10]: 0x20
+ eqId[11]: 0x20
+ eqId[12]: 0x20
+ eqId[13]: 0x20
+ eqId[14]: 0x20
+ eqId[15]: 0x20
+ eqId[16]: 0x20
+ eqId[17]: 0x20
+ eqId[18]: 0x20
+ eqId[19]: 0x20
+ version[0]: 0x31
+ version[1]: 0x30
+ version[2]: 0x0
+ version[3]: 0x0
+ version[4]: 0x0
+ version[5]: 0x0
+ version[6]: 0x0
+ version[7]: 0x0
+ version[8]: 0x0
+ version[9]: 0x0
+ version[10]: 0x0
+ version[11]: 0x0
+ version[12]: 0x0
+ version[13]: 0x0
+ timeOfDay[0]: 0x0
+ timeOfDay[1]: 0x0
+ timeOfDay[2]: 0x0
+ timeOfDay[3]: 0x0
+ timeOfDay[4]: 0x0
+ timeOfDay[5]: 0x0
+ timeOfDay[6]: 0x0
+ timeOfDay[7]: 0x0
+ timeOfDay[8]: 0x0
+ timeOfDay[9]: 0x0
+ timeOfDay[10]: 0x0
+ timeOfDay[11]: 0x0
+ timeOfDay[12]: 0x0
+ timeOfDay[13]: 0x0
+ No linked ME
+```
+
+## Check current connection type and configuration (GEM Port+Mac Brige)
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show connection
+```
+
+You will see the following output:
+
+```sh
+GEM:65534 | (DS, TCONT:NULL)
+ --mutilcast no care
+ |--Eth :0x0301
+GEM: 1024 | (BI, TCONT:0x100, allocId:1025)
+ --Bridge + 802.1p:0x1
+ --Map Pri 0xe8
+ --Ani Map Vlan Total Num 1 Vid 100
+ |--Eth :0x0301
+GEM: 1025 | (BI, TCONT:0x101, allocId:1281)
+ --Bridge + 802.1p:0x1
+ --Map Pri 0x17
+ --Ani Map Vlan Total Num 1 Vid 100
+ |--Eth :0x0301
+```
+
+## Check VLAN filter
+
+```sh
+Cortina> enable
+Cortina# config
+Cortina(config)# omci
+Cortina(config-omci)# show stream
+```
+
+You will see the following output:
+
+```sh
+Link to PPTP eth: ------->instance 0x301
+ input TPID 0x8100 output TPID 0x8100
+ dsMode:Inverse us rules
+ -------------------------------------------------------------------
+ | Filter | Treatment |
+ |-----------------------------------|-----------------------------|
+ | Outer | Inner | R | Outer | Inner |
+ |------------|----------------------| E |------------|------------|
+ | PRI | VID | PRI | VID | Filter | M | PRI | VID | PRI | VID |
+ |-----|------|-----|------|---------|---|-----|------|-----|------|
+ | 15 | 4096 | 14 | 4096 |No filter| 3 | 15 | 0 | 15 | 0 |
+ | 14 | 4096 | 14 | 4096 |No filter| 3 | 15 | 0 | 15 | 0 |
+ | 15 | 4096 | 15 | 4096 |No filter| 0 | 15 | 4096 | 0 | 1 |
+ | 15 | 4096 | 8 | 835 |No filter| 1 | 15 | 0 | 8 | 100 |
+ |-----|------|-----|------|---------|---|-----|------|-----|------|
+```
+
+## Changing the Hardware Version
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append line below to the file and save it to change HWVER
+
+```
+CHAR-ARRAY CFG_ID_GPON_VERSION = {0x46,0x35,0x36,0x38, 0x34,0x53,0x5f,0x76, 0x31,0x00,0x00,0x00, 0x00,0x00}; ##GPON version string, default value is V1.0
+```
+
+Reboot ONT to apply the change
+
+## Changing the Equipment ID
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append the line below to the file and save it to change EQID
+
+```
+CHAR-ARRAY CFG_ID_GPON_EQID = {0x46,0x49,0x42,0x45, 0x52,0x20,0x42,0x6f, 0x78,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00}; ##GPON ME ONU2G equiment id value, default is saturn
+```
+
+Reboot ONT to apply the change
+
+## Changing Serial Number
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change Serial Number
+
+```
+STRING CFG_ID_PON_VENDOR_ID = SMBS;
+INT CFG_ID_PON_VSSN = 0xAABBCCDD;
+```
+
+Reboot ONT to apply the change
+
+## Changing OLT Emulation Type
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change Serial Number
+
+```
+STRING CFG_ID_PON_OLT_TYPE = ALCL; ##GPON OLT Vendor name, support ZTE,ADTRAN,ALCL,CALIX,SUMITOMO,CORTINA,HUAWEI
+```
+
+Reboot ONT to apply the change
+
+## Changing OMCC Version
+
+{% include alert.html content="In Italy, if you are under some Huawei OLT it's mandatory to use 0xA3, while on Alcatel 0xB4, otherwise you will get O5 status but no MIBs - Note that this can be quirk of TIM Italy" alert="Warning" icon="svg-warning" color="red" %}
+
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append the line below to the file and save it to change Serial Number
+
+```
+CHAR CFG_ID_OMCC_VERSION = 0xB2;
+```
+
+Reboot ONT to apply the change
+
+## Changing LOID Username/Password
+
+{% include alert.html content="The value 0x0 is null, take note of your LoID and password from the original ONT" color="red" %}
+
+
+```sh
+# vi /config/scfg.txt
+```
+
+Append lines below to the file and save it to change LoID and LoID password
+
+```
+CHAR-ARRAY CFG_ID_LOID = {0x30,0x30,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
+CHAR-ARRAY CFG_ID_PASSWD = {0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0};
+```
+
+Reboot ONT to apply the change
+
+## Spoofing firmware version
+
+```sh
+# fw_setenv img_version0 20220527052622
+# fw_setenv img_version0 20220527052622
+```
+
+Reboot ONT to apply the change
+
+# Known Bugs
+- `ALCL` OLT mode uses some static configurations on MIBs, so if your OLT has strict configuration checks it might not work properly
+- During initial tests the only currently working mode of the stick is `PPTP EthUni`
+- Stick can be configured also emulate `VEIP` mode(adding it to the scfg.txt file), but current firmware doesn't link correctly the XGBE interface, so no traffic is passing between LAN and PON interfaces
+
+# Miscellaneous Links
diff --git a/_ont_xgs/ont-hisense.md b/_ont_xgs/ont-hisense.md
new file mode 100644
index 0000000..db94980
--- /dev/null
+++ b/_ont_xgs/ont-hisense.md
@@ -0,0 +1,5 @@
+---
+title: Hisense
+has_children: true
+layout: default
+--- \ No newline at end of file
diff --git a/_ont_xgs/ont-huawei-hn8010ts.md b/_ont_xgs/ont-huawei-hn8010ts.md
new file mode 100644
index 0000000..28b9b92
--- /dev/null
+++ b/_ont_xgs/ont-huawei-hn8010ts.md
@@ -0,0 +1,29 @@
+---
+title: Huawei HN8010Ts
+has_children: false
+layout: default
+parent: Huawei
+---
+
+# Hardware Specifications
+
+| | |
+| ----------- | -------- |
+| Vendor | Huawei |
+| Model | HN8010Ts |
+| Chipset | |
+| Manufacter | |
+| Flash | |
+| RAM | |
+| System | |
+| 10GBaseT | Yes |
+| Optics | |
+| IP address | |
+| Web Gui | |
+| Telnet | |
+| SSH | |
+| Form Factor | ONT |
+
+## Software Version
+
+- V5R02C0C10S165 \ No newline at end of file
diff --git a/_ont_xgs/ont-huawei.md b/_ont_xgs/ont-huawei.md
new file mode 100644
index 0000000..5aa19ab
--- /dev/null
+++ b/_ont_xgs/ont-huawei.md
@@ -0,0 +1,5 @@
+---
+title: Huawei
+has_children: true
+layout: default
+--- \ No newline at end of file
diff --git a/_ont_xgs/ont-nokia-xs-010x-q.md b/_ont_xgs/ont-nokia-xs-010x-q.md
new file mode 100644
index 0000000..80b4e29
--- /dev/null
+++ b/_ont_xgs/ont-nokia-xs-010x-q.md
@@ -0,0 +1,25 @@
+---
+title: Nokia XS-010X-Q
+has_children: false
+layout: default
+parent: Nokia
+---
+
+# Hardware Specifications
+
+| | |
+| ----------- | --------- |
+| Vendor | Nokia |
+| Model | XS-010X-Q |
+| Chipset | |
+| Manufacter | |
+| Flash | |
+| RAM | |
+| System | |
+| 10GBaseT | Yes |
+| Optics | |
+| IP address | |
+| Web Gui | |
+| Telnet | |
+| SSH | |
+| Form Factor | ONT | \ No newline at end of file
diff --git a/_ont_xgs/ont-nokia.md b/_ont_xgs/ont-nokia.md
new file mode 100644
index 0000000..8f07911
--- /dev/null
+++ b/_ont_xgs/ont-nokia.md
@@ -0,0 +1,5 @@
+---
+title: Nokia
+has_children: true
+layout: default
+--- \ No newline at end of file