Anime4000 / RTL960x

Hacking V2801F, TWCGPON657 & DFP-34X-2C2 GPON ONU SFP Stick to suite your ISP Fiber

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

O5 but no ONU ID and no connection

erdemefe90 opened this issue · comments

Hello Everyone,
I'm from Turkey and I use turktelekom as ISS. they provide me GPON ONT which is ZTE ZXHN F601 and does not supply any information about changing their ONT. I have a Mikrotik RB4011 router and eth1 tagged the vlan35 and my pppoe client uses vlan35 as interface. My connection speed is 1000/100mbps
i am tring to use DFP-34X-2C2 as GPON ONT like everbody is here. But my SFP ONT brand is not ODI it is Xicom I bought it from aliexpress so I'm afraid of changing its firmware because all firmwares tested on ODI. My version is "V1.0-220923"

i have connection to ZTE ONT via http and telnet and I can quering to ME codes and it have "setmac" command for some configs. I collected all information from ZTE. they are below.

I have always got O5 state but no ONU ID and LOID status is Initial Status. I have no connection to internet. What is missing or how can I debug the auth state?

As I understand setmac commands defination below. But Im not sure
setmac 2 512 gives device serial number
setmac 2 768 gives OUI
setmac 2 2176 PON vendor ID (first 4 char of gpon serial)
setmac 2 2177 GPON serial number (last 8 char of gpon serial)
setmac 2 2178 PLOAM password.

Loid and loid password obviosly seems in ME 256 query

ZTE setmac commands

setmac 2 512			
ZTELQDLP3H05829
setmac 2 768 			
3CA7AE
setmac 2 256			
3c a7 ae 05 8e e4
setmac 2 2176 			
ZTEG
setmac 2 2177			
4D6F211C
setmac 2 2178			
G4D6F211C

ZTE OMCI ME queries

##################################
MIB INFO:
         ME CLASS: 7
         DB NAME: soft_image, DBHandle: 14
##################################
<-----MeID[ 0x0000,0 ], Addr[ 0x19cf31]----->
          Version:V7.0.10P1N37
     Is committed:00 
        Is active:00 
         Is valid:01 
<-----MeID[ 0x0001,1 ], Addr[ 0x19cf51]----->
          Version:V7.0.10P1N37
     Is committed:01 
        Is active:01 
         Is valid:01 
---------------------------------------------------------------------
Total Record(s) num: 2

##################################
MIB INFO:
         ME CLASS: 131
         DB NAME: olt_g, DBHandle: 32
##################################
<-----MeID[ 0x0000,0 ], Addr[ 0x19d1d9]----->
         Vendorid:48 57 54 43 
      EquipmentID:00 00 00 00 00 00 00 00 00 00 
                    00 00 00 00 00 00 00 00 00 00 
          Version:31 30 00 00 00 00 00 00 00 00 
                    00 00 00 00 
        TimeofDay:00 00 00 00 00 00 00 00 00 00 
                    00 00 00 00 
---------------------------------------------------------------------
Total Record(s) num: 1

##################################
MIB INFO:
         ME CLASS: 84
         DB NAME: vlan_filter, DBHandle: 69
##################################
<-----MeID[ 0x01ff,511 ], Addr[ 0x1e96c1]----->
 vlan_filter_list:00 00 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 
      forward_opr:04 
           number:00 
<-----MeID[ 0x0003,3 ], Addr[ 0x289a21]----->
 vlan_filter_list:00 4b 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 
      forward_opr:10 
           number:01 
<-----MeID[ 0x0004,4 ], Addr[ 0x289909]----->
 vlan_filter_list:06 40 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 00 00 00 00 00 00 00 00 
                          00 00 
      forward_opr:10 
           number:01 
---------------------------------------------------------------------
Total Record(s) num: 3

##################################
MIB INFO:
         ME CLASS: 256
         DB NAME: ont_g, DBHandle: 22
##################################
<-----MeID[ 0x0000,0 ], Addr[ 0x19ce51]----->
         Vendorid:5a 54 45 47 
          Version:56 37 2e 30 00 00 00 00 00 00 
                    00 00 00 00 
     Serialnumber:5a 54 45 47 4d 6f 21 1c
        TrafficMO:02 
            VP/VC:00 
    Batterybackup:01 
          adstate:00 
          opstate:00 
      survialtime:00 
     logicalONUID:31 32 33 34 35 36 37 38 39 00 
                    00 00 00 00 00 00 00 00 00 00 
                    00 00 00 00 
  logicalPassword:31 32 33 34 35 36 00 00 00 00 
                    00 00 
credentialsStatus:00 
---------------------------------------------------------------------
Total Record(s) num: 1

##################################
MIB INFO:
         ME CLASS: 257
         DB NAME: ont2_g, DBHandle: 23
##################################
<-----MeID[ 0x0000,0 ], Addr[ 0x19cea9]----->
      EquipmentID:46 36 30 31 56 37 2e 30 00 00 
                    00 00 00 00 00 00 00 00 00 00 
      OmccVersion:b2 
VendoPproductCode:00 00 
SecurityCapability:01 
     SecurityMode:01 
TotalPriorityQueueNumber:00 38 
TotalTrafficSchedulerNumber:07 
       Deprecated:01 
       GemPortNum:01 00 
        SysUpTime:00 00 00 00 
    Concapability:00 7f 
        CurConMod:00 
        Qosconfig:00 3e 
          PQscale:00 01 
---------------------------------------------------------------------
Total Record(s) num: 1

i applied all information to DFP-34X-2C2 but there is no connection. They are below.

DFP-34X-2C2 config

# flash get GPON_SN
GPON_SN=ZTEG4D6F211C
# flash get GPON_PLOAM_PASSWD
GPON_PLOAM_PASSWD=47344436463231314300
# flash get LOID
LOID=123456789
# flash get LOID_PASSWD
LOID_PASSWD=123456
# flash get HW_SERIAL_NO
HW_SERIAL_NO=ZTELQDLP3H05829
# flash get OMCI_SW_VER1
OMCI_SW_VER1=V7.0.10P1N37
# flash get OMCI_SW_VER1
OMCI_SW_VER1=V7.0.10P1N37
# flash get OMCC_VER
OMCC_VER=178
# flash get OMCI_OLT_MODE
OMCI_OLT_MODE=21
# flash get OMCI_VENDOR_PRODUCT_CODE
OMCI_VENDOR_PRODUCT_CODE=15
# flash get OMCI_CUSTOM_ME
OMCI_CUSTOM_ME=65536
# flash get GPON_ONU_MODEL
GPON_ONU_MODEL=F601V7.0
# flash get OMCI_TM_OPT
OMCI_TM_OPT=2
# flash get OMCI_FAKE_OK
OMCI_FAKE_OK=1
# flash get PON_VENDOR_ID
PON_VENDOR_ID=ZTEG
# flash get VLAN_CFG_TYPE
VLAN_CFG_TYPE=0
# flash get VLAN_MANU_MODE
VLAN_MANU_MODE=1
# flash get PON_MODE
PON_MODE=1
# flash get OMCI_VEIP_SLOT_ID
OMCI_VEIP_SLOT_ID=255
# flash get ELAN_MAC_ADDR
ELAN_MAC_ADDR=3ca7ae058ee4
# flash get OUI
OUI=3c,a7,ae
# flash get MAC_KEY
MAC_KEY=ac98087a48724b9ba093396ab408a3fd

@Anime4000 Don't you have any comment? I can not debug omci too /tmp/omcidebug.par is empty.