blob: 9dc88a5839ecd023c54be9708b5a00bb807cc4ec (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
---
title: Zyxel PMG3000-D20B
has_children: false
parent: ONT
---
# Hardware Specifications
| | |
| ----------- | ------------------------------------ |
| Vendor | Zyxel |
| Model | PMG3000-D20B |
| Alias | |
| Chipset | Lantiq PEB98035 |
| Flash | 8 MB |
| RAM | 64 MB |
| System | OpenWRT |
| HSGMII | Yes |
| Optics | SC/APC |
| IP address | 10.10.1.1 |
| Web Gui | ✅ username `admin`, password `1234` |
| SSH | ✅ username `admin`, password `1234` |
| Form Factor | miniONT SFP |
Once you access the stick via ssh you will be challenged with a second tier login. The credentials to access the zyxel shell are: username: `twmanu` , password: `twmanu`.
From the zyxel shell you can escape to a standard linux shell via the `linuxshell` command
## Interchangeable firmware with
- [Zyxel PMG3000-D20B](ont-Zyxel-PMG3000-D20B)
- [Halny HL-GSFP](ont-Halny-HL-GSFP)
- [D-LINK DPN-100-Rev-A](ont-D-LINK-DPN-100-Rev-A)
- Zisa
- T&W
# List of software version
# List of partitions
| dev | size | erasesize | name |
| ---- | -------- | --------- | -------------- |
| mtd0 | 00060000 | 00010000 | "Boot" |
| mtd1 | 00010000 | 00010000 | "Env" |
| mtd2 | 00390000 | 00010000 | "ImageA" |
| mtd3 | 00390000 | 00010000 | "ImageB" |
| mtd4 | 00060000 | 00010000 | "Config" |
| mtd5 | 00010000 | 00010000 | "SECTION_EGIS" |
| mtd6 | 00250000 | 00010000 | "rootfs" |
| mtd7 | 00020000 | 00010000 | "rootfs_data" |
This stick supports dual boot from `ImageA` and `ImageB` witch contains the rootfs.
# List of firmware and files
## Useful files
- `/var/config/ont.sys` used to customize various settings on the stick
# Useful commands
# Useful commands
*Note: all commands start from the twmanu shell*
## Change the ONT S/N
*Note the S/N is in ACII format*
```sh
manufactory
set sn ALCLf0f0f0f0
exit
hal
set sn ALCLf0f0f0f0
```
## Change the ONT PLOAM password
*Note: the PLOAM is in ACII format*
This can be done easily via web ui. If you prefer to do it via the shell use:
```sh
manufactory
set password PLOAMPASS
```
## Change the ONT equipment ID
*Note: model number must be 20 no more than chars total*
```sh
manufactory
set equipment id MYEQUIPMENTID
exit
omci
equipment id MYEQUIPMENTID
```
## Change the ONT hardware version
```sh
manufactory
set hardware version 3FE49165BFAA01
```
## Change the software version
Edit the /var/config/ont.sys via vi directly on the stick itself. The file is CRLF terminated, one entry per line.
The entries for the software version are:
```
SW_VER0:0xabcdef
SW_VER1:0xabcedf
```
*Note: it's better to enter the software version in hex format, all lowercase precedeed by 0x.*
## Query a particular OMCI ME
Query via OMCI ME Class Name
```sh
omci
show me classname OmciClassName (e.g Ont2g)
```
Query via OMCI ME ID
```sh
omci
show me id OmciClassId (e.g 7)
```
# Low level modding
## Create a new rootfs
The stick has a tricky image packing method, fortuntaly it has been reverse engineered. A script to help you create a custom rootfs can be found here: [https://github.com/nanomad/zyxel-pmg-3000-mod-kit](https://github.com/nanomad/zyxel-pmg-3000-mod-kit)
## Flash a new rootfs
*Note: all commands start from the twmanu shell*
- Transfer the new mtd on the stick via tftp
```
linuxshell
tftp -gr mtd2.mod.bin TFTP_SERVER_IP
```
- Flash it on the standby partition.
You can use `system` and then `show actimage` to get the current active image. Check `/proc/mtd` for the right mtds. Usually:
- if the currect active image is A the mtd in use is mtd2
- If the current active image is B the mtd in use is mtd3
```
linuxshell
mtd -e /dev/mtd2 write /tmp/mtd2.mod.bin /dev/mtd2
```
- Switch to the new image
```
system
set actimage a
```
- Reboot the ONT
```
system
reboot
```
# Miscellaneous Links
- [zyxel gpon- sfp](https://github.com/xvzf/zyxel-gpon-sfp)
- [zyxel pmg-3000 mod kit](https://github.com/nanomad/zyxel-pmg-3000-mod-kit)
|
