Differences

This shows you the differences between two versions of the page.

--- doc:appunti:hardware:alicegate_agpwi_wifi_n [2017/12/18 16:56] – [The Alternative Firmware] niccolo
+++ doc:appunti:hardware:alicegate_agpwi_wifi_n [2018/11/18 22:17] (current) – [Alternative Firmware Comtrend A731-406CTL-T01_R08] niccolo
@@ Line 3: / Line 3: @@
 {{.:alicegate:alicegate_agpwi_adsl2_wifi_n.jpg?direct&200|}}
-This is an ADSL2+ router installed by **Telecom Italia** to their customer. It ships with **crippled software** so you cannot customize even the PPPoE login or password! Here you find a recipe to substitute the firmware with something more open.
+This is an ADSL2+ router installed by **Telecom Italia** to their customer. It ships with **crippled software** so you cannot customize even the PPPoE login and password! Here you find a recipe to substitute the firmware with something more open. Our device is labeled **ADSL2+ WiFi N**, manufactured by **ADB Broadband S.p.A.**, model name **P.DG A4001N A-000-1A1-AX**, original firmware was **AGPWI 1.1.3**.
-We succeeded in flashing a new firmware with a router **ADSL2+ WiFi N** manufactured by **ADB Broadband S.p.A.**, it was the model with two external antennas, with original firmware **AGPWI 1.1.3**. It is reported that models with **internal antennas** accept only **firmwares signed** by the manufacturer.
+It has two external WiFi antennas, we succeeded in flashing a new firmware on it. Beware that someone reported that models with **internal antennas** accept only **firmwares signed** by the manufacturer.
-===== The Alternative Firmware =====
+===== Alternative Firmware TEO 4.2.6.0011 =====
+FIXME\\ **WARNING**: This firmware seems rather **buggy**, I verified that is impossible to make a static DHCP lease, so I give up.
+{{.:alicegate:alicegate-custom-1.png?direct&320|Firmware TEO 4.2.6.0011 - Home Page}}
+{{.:alicegate:alicegate-custom-2.png?direct&320|Firmware TEO 4.2.6.0011 - Advanced Page}}
 We will use a firmware released by **[[wp>Teo_LT|TEO]]**, the largest Lithuanian broadband Internet access operator. The file was found on the internet, you have to trust it, but **there is not any official release**, nor an official checksum. Beside that, the firmware has several custom config embedded in it, a **wrong serial** number and **wrong MAC address**. For this reasons **you have to load a special config**, to remove all the Lithuanian customizations.
@@ Line 18: / Line 24: @@
   * The **LEDs are wrong**: ADSL LED is WiFi instead, Internet LED is ADSL line.
   * **WDS repeater** is not working.
+  * **Static DHCP** lease does not work: settings are not retained.
+==== Flashing the TEO Firmware ====
 The files you have to download are:
@@ Line 23: / Line 32: @@
   * **{{.:alicegate:cfe_filesystem.bin.gz|cfe_filesystem.bin}}** (gunzipped md5: 6e88ac1c819f5b4f8022ac3c9c17393c)
   * **{{.:alicegate:prg_a4001n.conf.gz|PRG_A4001N.conf}}** (gunzipped md5: d5b1495d921cf736222685c1d362416e)
-There are other alternative firmwares to upload on this hardware. See for example this page: **[[http://specialsound.altervista.org/specialsoundWP/sloccare-alice-gate-2-adb-agpwi/|Sloccare Alice Gate 2+ ADB (AGPWI)]]**.
-===== Flashing the Alternative Firmware =====
 ==== Short-Circuit Serial TX/RX to Enable the Special Upgrade Page ====
-During normal bootstrap, if the router detects **some serial activity**, it jumps to a special mode for **Update Software**. Our model was based on **firmware AGPWI 1.1.3** , and it accepted the new firmware even if it was **not signed**.
+{{.:alicegate:alicegate-serial-jumper.jpg?direct&280 |Serial Port TX/RX Lines}}
+During normal bootstrap, if the router detects **some serial activity**, it jumps to a special mode for **Update Software**. Our model was based on **firmware AGPWI 1.1.3** , and it accepted the new firmware even if it is **not signed**.
-It is likely that on bootstrap there is a console on the serial line, which says something like //press a key to enter special mode//, by shorting TX and RX lines on the serial line, we simulate the key press.
+It is likely that on bootstrap there is a console on the serial line, which says something like //press a key to enter special mode//, by shorting TX and RX lines on the serial port, we simulate the key press.
 So we have to open the router case and **short-circuit TX and RX serial line**, e.g. with a little wire or paper-clip.
@@ Line 92: / Line 99: @@
   * In two minutes **the router reboots** and it is ready.
-===== Firmware TEO 4.2.6.0011 =====
+===== Alternative Firmware Comtrend A731-406CTL-T01_R08 =====
-{{.:alicegate:alicegate-custom-1.png?direct&320|Firmware TEO 4.2.6.0011 - Home Page}}
+FIXME This firmware is **buggy too**. It does not keep the wlan config status across reboot: I set it to disables and I find it enabled again. Verified via web interface and with **%%wlan info --config%%** on command line.
-{{.:alicegate:alicegate-custom-2.png?direct&320|Firmware TEO 4.2.6.0011 - Advanced Page}}
+{{.:alicegate:alicegate-comtrend-firmware.png?direct&320|Firmware Comtrend A731-406CTL-T01_R08}}
+There is another alternative firmware to upload on this hardware. See this page: **[[http://specialsound.altervista.org/specialsoundWP/sloccare-alice-gate-2-adb-agpwi/|Sloccare Alice Gate 2+ ADB (AGPWI)]]**. The archive you have to download is **{{.:alicegate:ar-5382u-a731_firmware.tgz}}**, which contains two files:
+  * **AR-5382u-CFE-A731-406TDE-C01_R01_0623.bin** (md5: 6ac7235c50c58a68f74e5ad52ecaa4ce)
+  * **AR-5382u-A731-406CTL-T01_R08.bin** (md5: 793593abd73060d13e193b9f1d5fceb7)
+==== Flashing the Comtrend Firmware ====
+The procedure is similar to the above one, requiring **the short-circuit trick**:
+  - Power-off the router, **open it removing the two screws** at the back and forcing the shell halves.
+  - **Short-circuit TX and RX** on the serial line and **power-on the router**. After about 3 seconds the power LED turn from green to **red**. You can remove the short-circuit.
+  - Connect the **Ethernet cable** and point your browser to **%%http://192.168.1.1/%%** (configure your network as required).
+  - Upload the **AR-5382u-CFE-A731-406TDE-C01_R01_0623.bin** file (it is the **[[wp>Common_Firmware_Environment|CFE]]** Broadcom bootloader).
+  - Wait about two minutes, untill the power LED becomes **green**, then **red** again (router rebooted).
+  - Point your browser again to **%%http://192.168.1.1/%%**.
+  - Upload the **AR-5382u-A731-406CTL-T01_R08.bin** file.
+  - Wait about two minutes, untill the power LED becomes **green** steady again (router rebooted).
+  - Point your browser again to **%%http://192.168.1.1/%%**, login as **root** with password **12345**.
+==== Comtrend CLI Commands ====
+The router has a telnet command line interface, here some useful commands:
+<code>
+?
+sys reboot
+</code>
+<code>
+ > adsl info
+adsl: ADSL driver and PHY status
+Status: Showtime
+Retrain Reason: 8000
+Last initialization procedure status:   0
+Max:    Upstream rate = 319 Kbps, Downstream rate = 3264 Kbps
+Bearer: 0, Upstream rate = 323 Kbps, Downstream rate = 2986 Kbps
+</code>
+<code>
+ > lan show
+br0             Link encap:Ethernet  HWaddr 00:10:18:00:00:00
+                inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
+          inet6 addr: fe80::210:18ff:fe00:0/64 Scope:Link
+                UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+                RX packets:268879 errors:0 dropped:0 overruns:0 frame:0
+                TX packets:348978 errors:0 dropped:0 overruns:0 carrier:0
+                collisions:0 txqueuelen:0
+                RX bytes:37519828 (35.7 MiB)  TX bytes:369199367 (352.0 MiB)
+</code>
 ===== Web Resources =====