Modify Huawei Interface#
Set computer IP: 192.168.1.2, connect to the optical modem, reset the optical modem after it is powered on (poke the anus), the login address for the backend is 192.168.1.1, and the account and password for management are as follows:
Account: CMCCAdmin
Password: aDm8H%MdA
Go to Security-ONT Access Control Configuration, select all options under LAN Services
After applying, telnet 192.168.1.1
Account: root
Password: Hw8@CMCC Other versions may be adminHW
First, complete the shell
There are multicast tools and shell completion patches available for HN8145XR below
After completion
telnet 192.168.1.1
Login: root
Telecom version Password: adminHW
Mobile version Password: Hw8@cMcc
Unicom version Password: adminHW
(Note the case, the input is not displayed, just press Enter)
su
shell
cd /mnt/jffs2
Next, back up your own jffs2 folder, which is necessary for restoring the interface in the future
tar -czf jffs2bak.tar.gz * (Compress the jffs2 folder as jffs2bak.tar.gz)
mv /mnt/jffs2/jffs2bak.tar.gz /tmp (Move the jffs2bak.tar.gz file to the /tmp folder)
cd /tmp (Enter the tmp temporary folder)
tftp -p -l jffs2bak.tar.gz -r jffs2bak.tar.gz 192.168.1.3 (Use Tftpd32 to transfer the backup file back to the computer) Change 192.168.1.3 to your computer's IP address
Next is the key to changing the interface
Modify the hw_boardinfo file
You can drag it out from the backup compressed file or download it directly to your local computer using Tftpd32
tftp -p -l hw_boardinfo -r hw_boardinfo 192.168.1.3
tftp -p -l hw_boardinfo.bak -r hw_boardinfo.bak 192.168.1.3
After downloading, use HW Dollar2.exe to modify it
Be careful to check each character that is modified here. Using the wrong character can brick the device or result in an incomplete interface
Change Telecom to Huawei interface #
obj.id ="0x0000001a" ; obj.value = "COMMON";
obj.id ="0x0000001b" ; obj.value = "COMMON";
obj.id ="0x00000031" ; obj.value = "NOCHOOSE ";
Change 10G EPON to XGPON, modify parameters
obj.id = "0x00000001" ; obj.value = "5";
obj.id = "0x0000001d" ; obj.value = "5";
obj.id = "0x00000059" ; obj.value = "5";
Restore 10G EPON, modify parameters
obj.id = "0x00000001" ; obj.value = "6";
obj.id = "0x0000001d" ; obj.value = "3";
obj.id = "0x00000059" ; obj.value = "6";
After modifying with HW Dollar2.exe, click Calculate to save. Then transfer it back to the optical modem using Tftpd32
tftp -g -l hw_boardinfo -r hw_boardinfo 192.168.1.3
tftp -g -l hw_boardinfo.bak -r hw_boardinfo.bak 192.168.1.3
If the management page URL is still the same as before changing to the Huawei interface, it means that the complete factory reset after changing to the Huawei interface has not been performed (the reset button on the device is invalid). If you want to perform a complete factory reset after changing to the Huawei interface, the management IP will become 192.168.100.1. So, try the super password before changing to the Huawei interface.
After completely changing to the Huawei interface, execute the following commands after logging in via Telnet:
su
shell
restorehwmode.sh
reboot
Note: This command will clear the operator information and permanently change it to the Huawei interface. If you want to restore the operator interface, you need to add the operator information. Please consider it carefully!
After completely restoring the factory settings after changing to the Huawei interface, the management page IP is: 192.168.100.1, and the super username/password is: telecomadmin/admintelecom
There is another method, enter the shell
cp etc/wap/hw_default_ctree.xml /mnt/jffs2/hw_ctree.xml
The password will be changed to admintelecom
Add Super User#
Download hw_ctree.xml and hw_ctree_bak.xml
su
shell
cd /mnt/jffs2
tftp -p -l hw_ctree.xml -r hw_ctree.xml 192.168.1.2
tftp -p -l hw_ctree_bak.xml -r hw_ctree_bak.xml 192.168.1.2
Decrypt hw_ctree.xml and hw_ctree_bak.xml
Modify hw_ctree.xml and hw_ctree_bak.xml
Open the XML file with a text editor
Find the X_HW_WebUserInfo section, similar to
<X_HW_WebUserInfo NumberOfInstances="1">
<X_HW_WebUserInfoInstance InstanceID="1" UserName="user" Password="admin" UserLevel="1" Enable="1" ModifyPasswordFlag="0"/>
</X_HW_WebUserInfo>
Modify it to the following content
Change X_HW_WebUserInfo NumberOfInstances="1" to "2"
Be sure to add content before </X_HW_WebUserInfo>, because X_HW_WebUserInfoInstance InstanceID="1" may have child content
After modification, it should look like this
<X_HW_WebUserInfo NumberOfInstances="2">
<X_HW_WebUserInfoInstance InstanceID="1" UserName="user" Password="admin" UserLevel="1" Enable="1" ModifyPasswordFlag="0"/>
<X_HW_WebUserInfoInstance InstanceID="2" UserName="CUAdmin" Password="CUAdmin" UserLevel="0" Enable="1" ModifyPasswordFlag="0" />
</X_HW_WebUserInfo>
Or like this
<X_HW_WebUserInfo NumberOfInstances="2">
<X_HW_WebUserInfoInstance InstanceID="1" UserName="user" Password="$27m*[***********HeRGy($" UserLevel="1" Enable="1" ModifyPasswordFlag="1" Alias="cpe-1" PassMode="3" Salt="53782c9">
<X_HW_History NumberOfInstances="2">
<X_HW_HistoryInstance InstanceID="1" X_HW_Password="" X_HW_Time="20220*0712" X_HW_SaltVal=""/>
<X_HW_HistoryInstance InstanceID="2" X_HW_Password="**" X_HW_Time="20220*1040" X_HW_SaltVal=""/>
</X_HW_History>
</X_HW_WebUserInfoInstance>
<X_HW_WebUserInfoInstance InstanceID="2" UserName="CUAdmin" Password="CUAdmin" UserLevel="0" Enable="1" ModifyPasswordFlag="0" />
</X_HW_WebUserInfo>
Configure to transfer back to the optical modem
tftp -g -l hw_ctree.xml -r hw_ctree.xml 192.168.1.2
tftp -g -l hw_ctree_bak.xml -r hw_ctree_bak.xml 192.168.1.2