Skip to main content Link Search Menu Expand Document Warning Info Success Info (external link) Copy Copied Following system colour scheme Selected dark colour scheme Selected light colour scheme Telegram GitHub Edit
Hack GPON 🏳️‍🌈

Hardware Specifications

   
Vendor/Brand T&W
Model TWC GPON657
ODM ✅
Chipset Realtek RTL9601CI
Flash 16 MB
RAM 64 MB
System Linux (Luna SDK)
HSGMII Yes
Optics SC/APC
IP address  
Web Gui ✅ user admin, password system
SSH ✅ user admin, password system
Telnet  
Serial  
Form Factor miniONT SFP

Firmware is interchangeable with:

List of firmwares and files

The recommended version is C00R657V2801F_V1.9.0-220404.tar, because it is the V2801F firmware for T&W TWC GPON657.

Useful files and binaries

Useful files

  • /var/config/lastgood.xml - Contains the user portion of the configuration

  • /tmp/omcilog - OMCI messages logs (must be enabeled, see below)

Useful binaries

  • flash - Used to manipulate the config files in a somewhat safe manner
  • xmlconfig - Used for low-level manipulation of the XML config files. Called by flash
  • nv - Used to manipulate nvram storage, including persistent config entries via nv setenv/nv getenv
  • omcicli - Used to interact with the running OMCI daemon
  • omci_app - The OMCI daemon
  • diag - Used to run low-level diagnostics commands on the stick

GPON ONU status

Getting the operational status of the ONU 

diag gpon get onu-state

Querying a particular OMCI ME 

# omcicli mib get MIB_IDX

Getting/Setting Speed LAN Mode

To change the link mode use this command:

# flash get LAN_SDS_MODE
LAN_SDS_MODE=0
# flash set LAN_SDS_MODE 1
Value cat /proc/kmsg Mode Behavior
1 <4>change mode to 1(Fiber 1G) FIBER 1GbaseX with auto-neg on
2 <4>change mode to 2(SGMII PHY) TP MII 1Gb PHY
3 <4>change mode to 3(SGMII MAC) MII 1Gb MAC
4 <4>change mode to 4(HiSGMII PHY) TP MII 2.5Gb PHY
5 <4>change mode to 5(HiSGMII MAC) MII 2.5Gb MAC
6 <4>change mode to 6(2500BaseX) FIBER 2500baseX with auto-neg on

GPON/OMCI settings

Getting/Setting ONU GPON Serial Number 

# flash get GPON_SN
GPON_SN=TMBB00000000
# flash set GPON_SN TMBB0A1B2C3D

Getting/Setting ONU GPON PLOAM password 

# flash get GPON_PLOAM_PASSWD
GPON_PLOAM_PASSWD=AAAAAAAAAA
# flash set GPON_PLOAM_PASSWD AAAAAAAAAA

Getting/Setting OMCI software version (ME 7) 

# nv setenv sw_custom_version0 YOURFIRSTSWVER
# nv setenv sw_custom_version1 YOURSECONDSWVER

Getting/Setting OMCI hardware version (ME 256) 

# flash get HW_HWVER
HW_HWVER=V2.0
# flash set HW_HWVER MYHWVERSION

Getting/Setting OMCI vendor ID (ME 256) 

# flash get PON_VENDOR_ID  
PON_VENDOR_ID=ZTEG
# flash set PON_VENDOR_ID HWTC

Getting/Setting OMCI equipment ID (ME 257) 

# flash get GPON_ONU_MODEL
GPON_ONU_MODEL=DFP-34X-2C2
# flash set GPON_ONU_MODEL DFP-34X-XXX

Getting/Setting OMCI OLT Mode and Fake OMCI

Configure how ONT Stick handle OMCI from OLT:

# flash get OMCI_OLT_MODE
OMCI_OLT_MODE=1
# flash set OMCI_OLT_MODE 2
Value Note OMCI Information
0 Default Mode Stock setting, some values cannot be changed
1 Huawei OLT Mode Huawei MA5671a
2 ZTE OLT Mode ZTE
3 Customized Mode Custom Software/Hardware Version, OMCC, etc…

Some vendors/wholesale providers/ISPs have explicit LAN Port Number provisioning or proprietary OMCI that the stick cannot understand, this will make the stick reply OK to whatever the OLT sends it via OMCI.

0 = Disable, 1 = Enable, Default is 0

# flash get OMCI_FAKE_OK
OMCI_FAKE_OK=0
# flash set OMCI_FAKE_OK 1

Advanced settings

Setting management IP 

# flash get LAN_IP_ADDR
LAN_IP_ADDR=192.168.2.1
# flash set LAN_IP_ADDR 192.168.1.1

Getting/Setting the L2 Bridge MTU

Getting/Setting the MTU of the L2 bridge

# diag switch get max-pkt-len port all 
Port Speed 
---------- 
0 1538 
2 2031 
# diag switch set max-pkt-len port all length 2000

Checking the currently active image 

# nv getenv sw_active
sw_active=1
# nv getenv sw_version0
sw_version0=V1_7_8_210412
# nv getenv sw_version1
sw_version1=V1_7_8_210412

Booting to a different image 

# nv setenv sw_commit 0|1
# reboot

Known Bugs

VLAN swap issue (MEID 171), auto-sensing mode to switch between SGMII/HiSGMII

You should use the VID/VLAN shown by executing the command omcicli mib get 84 via telnet to bring up PPPoE

Miscellaneous Links