What kind of authentication does Excitel use for ONTs?

  • Thread starter JB701
  • Start date
  • Replies 9
  • Views 1,178
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..
I've been trying to get Huawei HG8145V5 working on Excitel (currently on no WiFi dumb ONU). Serial Number change didn't work it wouldn't register with OLT. Goes between O2,O4,O5 states over and over. I don't believe its MAC Authentication as GPON doesn't have that from what I read here:


Looks like its either S/N or S/N+Password Authentication.

Another thing I noticed is that the SN listed on Excitel portal is different from the one on ONU interface. On the portal its listed as (for example) "ONPL01151F88" whereas on ONU it shows "XPON01151F88". Neither SN worked on Huawei ofc.


Why use different ONU when Excitel offers their own dumb one? Because I think customers should be able to (also I've been obsessing over this for the past few days).
 
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..
Ok so I've ordered an CH341A Flash Programmer and SPI Flash Clip (bricked my excitel ONU while messing around in telnet shell lol) to dump whatever files are inside the storage of the ONU (and possibly transfer it to another identical ONU).
 
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..
neu7ro.jpg
5017050.jpg


So i got my USB to TTL Cable for accessing ONUs directly if Telnet or SSH isnt working. As I fried my Excitel ONU, i decided to test it on a same OEM Model DBC ONU.

The difficult part was the fact that the ONU doesn't have male pins sticking out, just four holes where the pins are supposed to be. So I had to connect male to male extension cable to the TTL Cable and connect the other end in the ONU. Would've been better to solder some pins onto it but I couldn't find my soldering iron (and I'm not good at it anyway).

Initially I tried it on the 4 holes circled in red but that didn't give any output, after trying and failing with different combinations, i connected the pins to the holes on the top . Turns out this is the actual TTL Serial out. I was able to connect to the ONU using Putty.

This person tried it on the Jio router. It's been linked on this forum before


I'm going to the next step of this with the flash programmer and directly accessing the NOR Flash chip on the board of the fried ONU which won't turn on (marked in red near top of the image) like taking out the hard drive from a computer.

Hopefully it works out (waiting for it to arrive). If it does I'll also try to find a Jio router access the Flash on that and remove the password on that using the same.

This person made a short guide on how to do it:

 
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..
Ok so i got the clip and programmer and the clip is real finicky. I think I'm gonna desolder the IC, oughta be interesting.
 
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..


So I managed to desolder the chip without breaking its legs. Tips if you are going to this:

1. Use a ton of flux, it'll make it way easier I tried it yesterday without it on another chip and the solder wouldn't clump or melt properly.

2. You'll need solder wick for soaking up the solder, it'll make it way easier to remove.

3. Get some tweezers to lift the chip off the board while melting one side. Mine hasn't arrived yet so I used the soldering iron itself to lift it.

Took me an hour to do it, I've never soldered SMD stuff so it was certainly stressful.

Next, I'll try soldering the chip onto the spi reader board. I'm waiting for the helping hands and magnifying glass to do it. The chip is REALLY tiny much more so than it looks on the board itself. It's very very difficult to hold the board steady as well as the chip for soldering without helping hands.

Hopefully I didn't damage the chip. if I did, oops mission failed, will prolly try again on a different one.
 


P

prunub

Messages
5
Location
NA
ISP
bsnl
excitel
JB do you mind clicking Hi-Res pic of pcb near laser diode and chip next to it ?
 
JB701

JB701

πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰ πŸŽ‰
Messages
2,187
Location
Delhi
ISP
..
Nope can't find anything about the laser

I meesed up the stupid memory chip and broke its legs while trying to desolder the bridge.

6suzmy.jpg
I guess that's it for this project then.there is a bit of the leg still outside though so I might the able to get a wire soldered to it. Unlikely though.

I should've gotten 67 37 leaded solder as it is the most suited for Small chips like these (didn't know then). The lead free solder I was using was solidifying so quick that it was real difficult to wick up the excess solder.