From b18c1e4472ef51129ddb0f54789ed89d36210ad2 Mon Sep 17 00:00:00 2001 From: Simone Bortolin Date: Mon, 19 Dec 2022 23:07:42 +0100 Subject: fix images, migrated to collection --- _ont/ont-zyxel-pmg3000-d20b.md | 160 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 160 insertions(+) create mode 100644 _ont/ont-zyxel-pmg3000-d20b.md (limited to '_ont/ont-zyxel-pmg3000-d20b.md') diff --git a/_ont/ont-zyxel-pmg3000-d20b.md b/_ont/ont-zyxel-pmg3000-d20b.md new file mode 100644 index 0000000..ed41642 --- /dev/null +++ b/_ont/ont-zyxel-pmg3000-d20b.md @@ -0,0 +1,160 @@ +--- +title: Zyxel PMG3000-D20B +has_children: false +alias: Ziza OP151S, T&W TW2362H-CDEL +layout: default +--- + +# Hardware Specifications + +| | | +| ----------- | ----------------------------------------------- | +| Vendor | Zyxel | +| Model | PMG3000-D20B | +| Chipset | Lantiq PEB98035 | +| Flash | 8 MB | +| RAM | 64 MB | +| System | OpenWRT | +| HSGMII | Yes | +| Optics | SC/APC | +| IP address | 10.10.1.1 | +| Web Gui | ✅ username `admin`, password `admin` or `1234` | +| SSH | ✅ username `admin`, password `admin` or `1234` | +| Form Factor | miniONT SFP | + +{% include image.html file="pmg3000-d20b.png" alt="PMG3000-D20B" caption="PMG3000-D20B" %} +{% include image.html file="op151s.png" alt="Ziza OP151S" caption="Ziza OP151S" %} + +Once you access the stick via ssh you will be presented with a second tier login. The credentials to access the zyxel shell are: username: `twmanu` , password: `twmanu`. +From the zyxel shell you can move to a standard linux shell via the `linuxshell` command + +## Firmware is interchangeable with: + +- [Zyxel PMG3000-D20B](ont-Zyxel-PMG3000-D20B) +- [Halny HL-GSFP](ont-Halny-HL-GSFP) +- [D-LINK DPN-100-Rev-A2](ont-D-LINK-DPN-100-Rev-A2) +- [Ziza OP151s](ont-ziza-op151s) +- [T&W TW2362H-CDEL](ont-T-W-TW2362H-CDEL) + +# List of software versions + +# List of partitions + +| dev | size | erasesize | name | +| ---- | -------- | --------- | -------------- | +| mtd0 | 00060000 | 00010000 | "Boot" | +| mtd1 | 00010000 | 00010000 | "Env" | +| mtd2 | 00390000 | 00010000 | "ImageA" | +| mtd3 | 00390000 | 00010000 | "ImageB" | +| mtd4 | 00060000 | 00010000 | "Config" | +| mtd5 | 00010000 | 00010000 | "SECTION_EGIS" | +| mtd6 | 00250000 | 00010000 | "rootfs" | +| mtd7 | 00020000 | 00010000 | "rootfs_data" | + + +This stick supports dual boot, as visible from the presence of `ImageA` and `ImageB`, which contain the rootfs. + + +# List of firmwares and files +## Useful files +- `/var/config/ont.sys` used to customize various settings on the stick. If you don't have it you can copy the stock one from /ont.sys + +# Useful Commands +*Note: all commands start from the twmanu shell* + +## Changing the ONT's S/N +*Note the S/N is stored in the ASCII format* +```sh +manufactory +set sn ALCLf0f0f0f0 +exit +hal +set sn ALCLf0f0f0f0 +``` + +## Changing the ONT's PLOAM password +*Note: the PLOAM is stored in the ASCII format* +This can be done easily via web ui. If you prefer to do it via the shell use: +```sh +manufactory +set password PLOAMPASS +``` + +## Changing the ONT's equipment ID +*Note: model number must be 20 no more than chars total* +```sh +manufactory +set equipment id MYEQUIPMENTID +exit +omci +equipment id MYEQUIPMENTID +``` + +## Changing the ONT's hardware version +```sh +manufactory +set hardware version 3FE49165BFAA01 +``` + +## Changing the software version +Edit the /var/config/ont.sys via vi directly on the stick itself. The file is CRLF terminated, one entry per line. +The entries for the software version are: +``` +SW_VER0:0xabcdef +SW_VER1:0xabcedf +``` +*Note: it's better to enter the software version in hex format, all lowercase precedeed by 0x.* + +## Querying a particular OMCI ME +Query via OMCI ME Class Name +```sh +omci +show me classname OmciClassName (e.g Ont2g) +``` + +Query via OMCI ME ID +```sh +omci +show me classid OmciClassId (e.g 7) +``` + + +# Low Level Modding + +## Creating a new rootfs +The stick has a tricky image packing method, fortunately it has been reverse engineered. A script to help you create a custom rootfs can be found here: [https://github.com/nanomad/zyxel-pmg-3000-mod-kit](https://github.com/nanomad/zyxel-pmg-3000-mod-kit) + +## Flashing a new rootfs +*Note: all commands start from the twmanu shell* + +- Transfer the new mtd on the stick via tftp +``` +linuxshell +tftp -gr mtd2.mod.bin TFTP_SERVER_IP +``` +- Flash it on the standby partition. +You can use `system` and then `show actimage` to get the current active image. Check `/proc/mtd` for the right mtds. Usually: +- if the currect active image is A the mtd in use is mtd2 +- If the current active image is B the mtd in use is mtd3 +``` +linuxshell +mtd -e /dev/mtd2 write /tmp/mtd2.mod.bin /dev/mtd2 +``` +- Switch to the new image +``` +system +set actimage a +``` +- Reboot the ONT +``` +system +reboot +``` + +# Known Bugs +- [Not working with Broadcom BCM57810S](https://github.com/xvzf/zyxel-gpon-sfp/issues/10) + +# Miscellaneous Links + +- [zyxel gpon- sfp](https://github.com/xvzf/zyxel-gpon-sfp) +- [zyxel pmg-3000 mod kit](https://github.com/nanomad/zyxel-pmg-3000-mod-kit) -- cgit v1.2.3