-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ability to not use nuro device at all #2
Comments
My GPON module arrived DOA so I cannot test. Having looked into the security, the SLID authentication seemed to only be the serial of the device inputted as a password, all other authentication fields were left blank (or automatically deleted by OLT configuration). Theoretically, if the point in italics is a non-issue, then spoofing the serial, mac, and using the serial as authentication password should work, but I cannot confirm 100%. Also in Japan, the act of spoofing the serial and mac address would be considered illegal so I am not going to say anything more. |
I have a ma5671a(with openwrt ware) I can change Gpon-sn loid loid-password and password or mac add,and I know old onu‘s Gpon-sn so-net-sn and mac add.how can i do?some advice? |
日本运营商 nuro 用户来了,2G 下行套餐用这个正合适,说下折腾的要点。 |
A user from the Japanese operator nuro is here, and this is just the right thing for a 2G downstream package. First of all, nuro 2G uses GPON, as can be seen from the super user settings of HG8045Q, which only requires SN authentication (maybe also needs to disguise SN MAC). After setting the WAN port to VLAN10, it can obtain addresses (blocks) through DHCP/DHCPv6-PD, and can also bridge the WAN port to borrow two or three more v4 addresses. I don't know if the ZTE F660A is the same as Huawei, and the PON SN written on the back is 16 digits, formatted as: 8 decimal digits + 8 hexadecimal digits (such as 48575443DEADBEEF). This 16 digits cannot be written into the modem settings as is, but needs to be converted according to https://www.odbook.com/1170.html to turn the first eight digits back into four letters, and keep the last eight digits unchanged, i.e. it becomes HWTCDEADBEEF. This way, O5k authentication can be passed and internet access can be obtained. Next, you need to choose a modem stick that supports GPON OLT mode and supports the HWTCDEADBEEF format for the PON SN. |
之后我使用了ma5671a只需要更改gpon,需要把原来给的16位转换为12位,这样就可以直接连上了,而且重启后直接是O5.其他任何选项都不需要更改。由于我这边没有签约流媒体和电话,所以vlan也不需要设置。直接dhcpv4v6就行。不需要LOID以及mac地址认证。我现在在测试中,还算稳定。但是我发现gpon的信息里有3个vlan,分别是10,20,110。10应该是走网络的,20和110应该分别走流媒体和电话。由于没签约,所以现在还没测试。如果有进展我会跟进的。 |
我这边是forマンション,实际测试如果只改SN的话是会停在O3,进不到O5。 VLAN这个我是直接在猫棒设置了10,没有测试别的选项,理论上这个可以不在猫棒上设置而下发给路由器在路由器上管理VLAN,具体的没测试也就不清楚了。 至少目前解决了以前二级路由后IPv6无法正常使用的问题,已经非常满足了。 |
我这边也是forマンション,最开始给了我一个zte的,后来花了5000换了一个sony的,现在基本就只认证gpon sn了。有还在网上拍了一个旧款的hw的改了用superadmin改了一下gponsn 马上连上了,可是下一秒自动升级后就悲剧了,再也开不开superadmin了,现在就是个摆设了。最近准备拆机ttl呢。你可以试试找个理由让他给你换个路由器 然后就应该只需要认证gpon sn了吧。很多人的方法都不太一样。看来nuro的水很深啊。 |
换设备没必要,官方设备默认会开启ACS,会通过TR-069协议自动获取配置文件修改本地设置,管理密码也会跟着修改,据说现在超级管理员密码是跟着时间走的所以几乎无法破解,不知道nuro是不是也是采用同样的方法。从第三方购买类似官方的设备的话最好先禁用TR-069再连上网。 至于跑不到2G应该是我路由器的问题,我用的是Ubiquiti的UDM-SE,SFP+口只支持1G或10G,中间的2.5G和5G不支持😂。目前考虑买个SFP+转RJ45的光电转换盒来跑满2G。日本这些东西都奇缺,猫棒和这些转换盒10G网卡都非常难买,必须都得从海外进口🤣 |
hw和zte是走的acs的,sony这个设备直接走的dhcp,所以这个配置很简单。forマンション加5000换的是2.5g的。 ####### ipv6 setting passthrough START exit 0 ubiquiti应该也会有类似的命令行能解决。可以尝试一下。 |
SGP200W显示也是DHCP获取,但是有TR-069,VLAN也是通过TR-069控制的,所以如果有购买电话之类的服务的话应该是通过TR-069获取VLAN ID再进行配置。 关于IPv6,我这边测试是IPv6地址可以正常获取(240d开头),但是无法正常联网使用IPv6,各ipv6测试站点显示仍然还是IPv4连接。之前用的Mikrotok路由无论是DHCPv6还是relay都试过不行,换了unifi也是一样。像是NURO的路由器里的防火墙有做限制。 |
DHCPv6和relay是肯定不行的,需要パススルーpassthrough 类似于桥接。 |
是的,那样的话IPv4也会被桥接 |
如果不能用命令行仅让v6桥接基本就只有第二种方法了。 |
是可以的嗎? 想買個有2.5G LAN 的路由 |
需要测试,切勿着急,没个线路可能都不一样。 |
https://minami.me/diary/485#step-8 |
WAN6=eth0.2 |
sony的那个2.5g的路由 的 SN,LOID和PLOAM 都分别是哪些啊?...完全不知道怎么着手了 |
sony上有个贴纸 gponsn把16位数改成12位就行了。LOID和PLOAM都空着就行。 |
Which GPON module would you recommend to use? どの GPON モジュールを使用することをお勧めしますか? 2GB |
自分はHUAWEIのMA5671A使用しています。 |
我用的也是udm,想问下 您是如何设置的才拿到了IPv6的地址的呀? |
openwrt 需要23.xx版本以上才行,直接自动获取就行,不需要设置prefix |
我UDM的设置: Networks中 |
对Ubiquiti的设备不是很熟悉,但是我觉得应该是系统问题,之前我在openwrt22上也没调通。建议直接桥接v6. |
configure 这个您做个参考,再根据您的设备端口调整一下就应该可以了。 |
我暂时不是很清楚 不知道其他大神有没有过相关经历 |
AFAIK, unless you can confirm that those routers can be manually configured for parameters like I once consulted with a QNAP engineer regarding their Qhora-301W router's official firmware, as I saw in the product description that it claimed to support map-e. However, their engineer informed me that it does not support custom configurations for these parameters, leading me to conclude that it cannot support NURO's implementation of map-e. Personally, I speculate that their claim of map-e support may specifically refer to the configurations from JPIX, which are hardcoded into the device. |
When I receive this letter I shall start looking at other providers. I won't be reconnecting my Sony ONU ever. |
我也收到了NURO的警告信😭 I also got the warning letter from NURO 😭 |
你收到警告的时候是 map-e 模式吗?还是说在用 DHCP 双栈? When you receive the warning, do you using MAP-E mode or still using DHCP Dual stack? |
我用的是MA5671A,一直是双栈,有做MAC/LOID等伪装,但是TR069是伪装不了的(毕竟TR069本身就是用来远程下发配置的功能) |
@bi119aTe5hXk |
看了一下目前支持dual stack的只有au了,au也要求必须用官方设备。 |
Mine already in MAP-E before using SFP, didn't got any warning for over 1 month used. It look like they sent letter to the dualstack user only. |
Hello Guys, SGP200W user here. When I check the Status page the LOID seems to be empty, even if I filled it. What could be the issue? |
@Venix42 |
@bi119aTe5hXk Thank you for your time. I already tried that, but somehow, when I set that, It keeps jumping between O2 and O3 Also, the password is truncated, so I don't know if it takes it into account properly or not. |
O2 or O3 is authentication failed. |
I have been using map-e since installation, but I also received a warning letter. |
#2 (comment) |
How do we know that these devices were detected because of failed TR-069 update? Would connecting the NURO device to the network and forwarding port 7547 to it work to avoid this detection in the future? |
IIRC NURO's device only accepts fiber as input. |
True. I'm not an expert but could a media converter to go from RJ45 to fiber optic be used? |
Openwrt can be compiled into TR-069 (https://openwrt.org/docs/guide-user/network/wan/tr-069). And through the decompiled content in this topic, we can know the address, username and address of linking TR-069. But we don’t know how NURO authenticates the device. Cracking this may involve some legal issues, so it should be difficult to disguise NURO devices. In addition, NURO upgrades the device through TR-069. Even if we disguise the NURO device, there will be some problems when sending the firmware. NURO still knows that our device is not online. |
use MA5671A to do it. |
NURO has dropped tr069 and acs, now they manage ONUs directly via omci. third-party ONUs can’t fully emulate all omci messages, so avoiding detection is impossible. |
I tried using an optical splitter to connect the NURO device and the ma5671a to one optical fiber, but I was unable to authenticate both devices at the same time. Only the device that was plugged in first could be authenticated and become O5, while the other device on the back street could only be O3. |
有人收到警告信后被强制断网吗? |
According to the letter, if I do not use the ONU provided by Sony by the end of October, it will be considered a breach of contract. However, I have been using it without any internet interruption until now. Nevertheless, I have already applied for another provider and I plan to terminate my contract with Nuro this month regardless. |
2024.11: |
我被强制断网了,设备一直显示O3应该是把我设备号封锁了。 |
我在deadline前夕换回已经改了桥接的hg8045q目前还能正常使用 |
我今天打电话了,说大概10天左右给我把号复活,但是要求我必须使用他家的设备。 |
我已经提前解约了, 蹭着涨价犹豫期解约的。结果只是免了3000的解约手续费 还是要付光纤安置费的尾款... |
我现在用的是SGP200W装回去以后很意外的发现这款设备支持ipv6的vlan能再分出IPv6-PD,暂时先坚持用着吧。遗憾是ipv4的mape的1000个端口没法使用。速度也从2g降到1g了。暂时先将就着用吧。没啥别的好办法。不知道什么时候能开放mape的端口。 |
Hi, I have unifi nano g GPON device lying around. If I used serial hack to change serial/mac would nuro work with it?
Do you know what kind of protections does Nuro have to identify if it's correct device.
If it's just serial and mac then I should be ok?
I dont want to get nuro and then find out that I can not use my own router, but NTT vdsl speeds are getting worse, so I am on fence to go nuro again...
Thank you again for your work on this, it's really sour experience when talking with nuro support, they take you for a fool.
The text was updated successfully, but these errors were encountered: