Telnet

telnet command: telnet 192.168.1.1 Telnet account password: telnetadmin / telnetadmin

#Default password telnet password

Hardware configuration

• BCM6838 chip supports the following interfaces and functions:

1. 4 built-in Gigabit PHYs

2. Built-in GPON MAC, EPON MAC,

3. MIPS 32-bit processor, 400M dual core (64K×2 instruction cache, 32K data cache)

4. Built-in voip processor

5. 2 channels support 802.11n WLAN PCIE interface, which can be connected to PCIE AP or USB AP

6. 2 USB 2.0 interfaces, 1 can be used as HOST, and 1 can be configured as HOST or DEVICE.

7. DDR3 controller, supporting up to 4Gbit

8. NAND controller, maximum support 2Gbit

9. Security engine: supports IPSEC and SSL hardware acceleration

10. EPON MAC + requires external PHY

11. Built-in ARM926EJ-S*32-bit processor (16K instruction cache and 16K data cache)

12. The Ethernet-based interface can be used to connect external VOIPSoC??

13. Serial port: serial flash, EEPROM; parallel port: parallel flash maximum 128M

#Backend management page, you must first log in with telecomadmin account

ps. After logging in as the super user, the page http://192.168.1.1/backupsettings.html，该网址能备份出未加密的配置文件。用记事本打开修改后，可以用 http://192.168.1.1/updatesettings.html is written back to the gateway.

• After logging in as super user, enter the following URL in the browser.

http://192.168.1.1/scsrvcntr.html This page can open various services such as telnet, SSH, FTP, etc. http://192.168.1.1/dumpmdm.cmd This page can display the current configuration.

• Note: F450G must be logged in as a super user. For some devices, ordinary user login is also acceptable. Export configuration page: http://192.168.1.1/backupsettings.html Import configuration page: http://192.168.1.1/updatesettings.html Service access control: http://192.168.1.1/scsrvcntr.html Factory mode page: http://192.168.1.1/factorymode.html (MAC and other parameters can be modified in factory mode) Version information page: http://192.168.1.1/test_version.html Show current configuration: http://192.168.1.1/dumpmdm.cmd Reprinted from the post for record purposes only

• Telnet enters show mdm config to output the configuration file information

• Each function page http://192.168.1.1/scsrvcntr.html This page can open various services such as telnet, SSH, FTP, etc. http://192.168.1.1/dumpmdm.cmd This page can display the current configuration. http://192.168.1.1/resetdefault.html Clear all information and restore factory settings http://192.168.1.1/pluginManage.html Open the plug-in management page http://192.168.1.1/test_version.html Determine device firmware version and run time http://192.168.1.1/register.cmd?registered=1 Close the LOID registration interface http://192.168.1.1/upload.html Firmware upgrade http://192.168.1.1/resetdefault.html Factory reset http://192.168.1.1/factorymode.html Engineering mode http://192.168.1.1/backupsettings.html Export configuration file backupsettings.conf http://192.168.1.1/updatesettings.html Import configuration file http://192.168.1.1/skipreg.html Manually turn on\turn off Internet access permissions

Save Brick and change it to gpon

Start saving bricks. Use the ttl line, press and hold the reset button on the optical modem to power up. The light will turn on and wait until the light goes off. You should be able to enter cfe. Enter cfe, enter: s SfCfgName ct/asb-shanghai-epon-sip-sgw, enter, enter: r, enter, and restart.

• Change epon
• Change gpon
• Configuration call GPON SIP is set to ct/asb-sip-sgw. The system version automatically calls the firmware internal ASB_G140WV1.0S system segment module to start. GPON H248 settings ct/asb-h248-sgw system version automatically calls ASB_G140WV1.0M system segment module startup EPON SIP settings ct/asb-sip-sgwepon system version automatically calls ASB_E140WV1.0S system segment module startup EPON H248 settings ct/asb-h248-sgwepon system version automatically calls ASB_E140WV1.0M system segment module startup
• Brush Jiangsu 1.1s, Configuration file call Jiangsu:ASB_G140WV1.0S ct/asb-jiangsu-gpon-h248-sgw Jiangsu:ASB_G140WV1.0S ct/asb-jiangsu-gpon-sip-sgw
• ttl query super password

1. TTL line connection tx rx reverse connection
2. For the TTL cable connected to the programmer, first install the USB to TTL driver and then connect the TTL cable. The driver of the programmer is different. For example, ch341a needs to unplug the jumper. The default is the programmer mode.
3. In the device manager, set the bits/second to 115200, flow control x/on x/off and other defaults.
4. The HyperTerminal tool connection or securecrt must also be set up the same as step 3.
5. Connect the optical modem to the power supply. The software prompts the connection to start running the startup parameters. When you see RV SIP Stack verison xxxx successfully, press the enter key. Enter your account and password several times to log in. Note: The password you enter will not be visible.
6. When #s304 or xx# appears, you can enter show mdm config to list the configuration files.
7. Intercept the configuration file and save it as txt. Look for the password under the X_CT-COM_TeleComAccount field and it is the super password.

shell partial commands

• Check cpu usage linuxshell sysinfo cpm {“RPCMethod”:“UnInstall”,“Plugin_Name”:“osgid”} ttl kill virtual machine service
• mdm configuration A. Crack and open the web page to automatically jump to the LOID registration page (applicable to students who cannot configure LOID due to manual configuration) B. Crack the maximum number of users “”""` mdm set InternetGatewayDevice.Services.X_CT-COM_MWBAND Mode 0 crack unlimited C. After telnet is closed, use TTL to reopen it and set the telnet username and password. D. Check the password of the telecomadmin account E. Regardless of any command settings, you need to use the following command to save the mdm configuration!

There is a minimum memory solution for the virtual machine

In shanghai-epon mode, there is no response when using the cpm command and pressing Enter under Telnet without plugging in the optical port. The plug-in management page can close 4 plug-ins. At this time, the memory usage is 23******. The memory usage of the Yueme interface is 30%. Then change guangdong-epon and restore the factory. The four plug-ins are still closed. At this time, the memory usage is 25*****. The memory usage of the Yueme interface is 30%. Due to time constraints, the values ​​are not taken for a long time for comparison. In summary, the memory usage of chongqing-epon is 15-17****, which is a slightly smaller solution in the test. If you are worried about having your password reset by the operator, you can delete TR069 (provided you know how to set it manually and do not need to issue configuration). The deletion method is to press F12 on the relevant page, find the TR069 item, change all DISABLED in the “Delete Button” to ENABLED, and then delete it. You can add it later if necessary In the fourth step above, you can also modify the upper limit of the connection terminal: mdm set InternetGatewayDevice.Services.X_CT-COM_MWBAND TotalTerminalNumber XX (here is the upper limit of the terminal). Remember to enter mdm save at the end.

Reference article