newspaint

Documenting Problems That Were Difficult To Find The Answer To

Unlocking a HG612 Revision 3B

I bought, second-hand, a HG612 revision 3B openreach VDSL modem on eBay.

Referring to this blog post entitled “Huawei HG612 Hacking” and the linked PDF document the following was done (but no credit for this should be taken on this blog, it is partly reproduced purely in case the originals should disappear for some reason, there are many more details, acknowledgements, and useful diagnosis information in that document):

  1. obtain a copy of the unlocked firmware from the above link (listed on the right hand side of the blog page)
  2. power off the modem
  3. connect a PC via Ethernet to the LAN2 socket on the modem
  4. pre-configure the PC’s Ethernet interface to a static IP address of 192.168.1.100/24
  5. press and hold the RESET button on the modem while powering up the modem
    • release the RESET button after 5 seconds after powering up
  6. use a web browser on the PC to visit modem’s web server http://192.168.1.1/ (note that 192.168.1.1 is not pingable and the Ethernet port lights do not light up on the modem in this state)
  7. on the “Update Software” page displayed supply the name of the unlocked firmware on your PC by clicking the Browse… button on the webpage
    • click on the “Update Software” button on the webpage
    • note that the modem lights do not flicker, nor do the LAN port lights activate
  8. wait for the firmware to be completely loaded (do not power off)
    • modem will reboot automatically after programming
    • the modem LAN2 port lights should be activated
  9. visit page http://192.168.1.1/ on the modem again
  10. you should see a login page branded “Huawei EchoLife Home Gateway”
  11. login with username admin, password admin
  12. you can also telnet to 192.168.1.1:25 with the same username and password as above, or ssh admin@192.168.1.1
    • full line statistics can be obtained from the xdslcmd tool (type sh first, then xdslcmd info --stats)

A “long reset” can restore a default configuration:

  1. reboot the modem, give it some time to settle
  2. check the modem has a working xDSL line connection
  3. hold the reset button on the hg612 for 10+ seconds then release (“long reset”)
  4. give the modem time to reboot again

Output of Stats

I got the following stats output:

Welcome Visiting Huawei  Home Gateway
Copyright by Huawei Technologies Co., Ltd.
Login:admin
Password:admin

ATP>sh

BusyBox v1.9.1 (2010-10-15 17:59:06 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# xdslcmd info --stats
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max:    Upstream rate = 30992 Kbps, Downstream rate = 90516 Kbps
Path:   0, Upstream rate = 20000 Kbps, Downstream rate = 79999 Kbps

Link Power State:       L0
Mode:                   VDSL2 Annex B
VDSL2 Profile:          Profile 17a
TPS-TC:                 PTM Mode
Trellis:                U:ON /D:ON
Line Status:            No Defect
Training Status:        Showtime
                Down            Up
SNR (dB):        8.9             15.3
Attn(dB):        0.0             0.0
Pwr(dBm):        13.0           -3.0
                        VDSL2 framing
                        Path 0
B:              239             237
M:              1               1
T:              23              45
R:              0               16
S:              0.0955          0.3782
L:              20107           5373
D:              1               1
I:              240             127
N:              240             254
                        Counters
                        Path 0
OHF:            3268582         1270641
OHFErr:         2               3
RS:             0               1330714
RSCorr:         0               7
RSUnCorr:       0               0

                        Path 0
HEC:            1               0
OCD:            0               0
LCD:            0               0
Total Cells:    831152799               0
Data Cells:     222704          0
Drop Cells:     0
Bit Errors:     0               0

ES:             2               3
SES:            0               0
UAS:            18              18
AS:             5407

                        Path 0
INP:            0.00            0.00
PER:            1.64            4.25
delay:          0.00            0.00
OR:             116.56          60.17

Bitswap:        15              8

Total time = 1 hours 30 min 25 sec
FEC:            0               0
CRC:            2               0
ES:             2               3
SES:            0               0
UAS:            18              18
LOS:            0               0
LOF:            0               0
Latest 15 minutes time = 25 sec
FEC:            0               0
CRC:            0               0
ES:             0               0
SES:            0               0
UAS:            0               0
LOS:            0               0
LOF:            0               0
Previous 15 minutes time = 15 min 0 sec
FEC:            0               0
CRC:            0               0
ES:             0               0
SES:            0               0
UAS:            0               0
LOS:            0               0
LOF:            0               0
Latest 1 day time = 1 hours 30 min 25 sec
FEC:            0               0
CRC:            2               0
ES:             2               3
SES:            0               0
UAS:            18              18
LOS:            0               0
LOF:            0               0
Previous 1 day time = 0 sec
FEC:            0               0
CRC:            0               0
ES:             0               0
SES:            0               0
UAS:            0               0
LOS:            0               0
LOF:            0               0
Since Link time = 1 hours 30 min 5 sec
FEC:            0               7
CRC:            2               3
ES:             2               3
SES:            0               0
UAS:            0               0
LOS:            0               0
LOF:            0               0

# exit
ATP>exit
exit from configuration console.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: