This device is branded by some ISPs. The unbranding method here is generic, it will replace the ISP locked firmware with the latest ZyXel firmware. You need serial access to the device, it takes time to transfer 23Mb via serial. If you mess up, you will brick your device and that is your responsibility.
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2014.05.10 11:35:41 =~=~=~=~=~=~=~=~=~=~=~=
CFE>
CFE> ATSH
<---- Dump Manufacturer Info FW Version : 1.32(VQG.4)b2
External Version : 1.00(AAHA.4)b2
Bootbase Version : V1.59 | 02/01/2013 17:48:02
Vendor Name : MitraStar Technology Corp.
Product Model : DSL-2492GNU-B1B
Serial Number : S130Y11094800
WPA-PSK : 47ee8e55e21e
First MAC Address : 000000000000
Last MAC Address : 00000000000B
MAC Address Quantity : 12
Default Country Code : EB
Boot Module Debug Flag : 00
RootFS Checksum : ae3bc848
ImageDefaultChecksum : a2095f79
Main Feature Bits : 00
Other Feature Bits :
4d 53 60 09 00 00 00 00-00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00-00 00 00 00 00 00
*** command status = 0
CFE>
CFE> ATSE DSL-2492GNU-B1B
<---- Generate Random Seed Number for Product Model00023E000000
OK
*** command status = 0
Enter seed number (00023E000000) in ZynPass or here: http://www.tonycool.es/zyxel/zynpass_en.htm
to generate password
CFE>
CFE> ATEN 1, 10F0A59F
<---- Unlock the Device with passwordOK
*** command status = 0
CFE>
CFE> ATWZ EC43F6470F58, 01, 01, 00, 0C
<---- Set MAC addr, Country, EngDbgFlag, FeatureBit, # of MACsMAC address : 0C:43:F6:47:0F:58
<---- This is not an error, 1st byte changesCountry Code : 01
EngDebugFlag : 01
FeatureBit : 00
MAC Number : 0C
*** command status = 0
CFE>
CFE> ATHE
<---- List the, now extended, Command SetAvailable commands:
ATMC Bootup device with SMT rom file
ATSW Show WPAPSK or change WPAPSK
ATMT reduce manufacture bootup time for wireless calibration
ATHV write Hardware Version to flash ROM
ATSN write Series Number to flash ROM
ATPA set wireless power index
ATWZ write MAC addr, Country code, EngDbgFlag, FeatureBit, MAC Number to flash ROM
ATSE show the seed of password generator
ATEN set BootExtension Debug Flag
ATCR Clear console screen
ATBT block0 write enable
ATTE Restore to TE configuration
ATRD xmodem upload ROM-D
ATLC xmodem upload defaultcfg
ATSH dump manufacturer related data in ROM
ATUB xmodem upload bootloader
ATUR xmodem upload router firmware to flash ROM
ATUW xmodem upload flash image to flash ROM
ATIR Set ImageDefault to ROM-D partition
ATER Erase ROM-D partition
ATBL Print boot line and board parameter info
ATAF Change board AFE ID
ATBP Change board parameters
ATIP Change booline parameters
ATDU Dump memory or registers.
ATWW Set memory or registers.
ATBR Reset to default Romfile
ATGO boot router
ATSR system reboot
ATTB Write the cfe image into flash
ATTR upload router firmware to flash ROM from TFTP Client
ATTW Write the whole image start from beginning of the flash
ATNR Reinitialize NAND flash
ATRM Dump flash data
ledhon Turn on the specific LED with high
ledhof Turn off the specific LED with high
ledlon Turn on the specific LED with low
ledlof Turn off the specific LED with low
ledh Blink all LEDs with pulling high
ledl Blink all LEDs with pulling low
ATMB Use for multiboot.
ATRT Test memory.
ATHE print help
For more information about a command, enter 'help command-name'
*** command status = 0
CFE>
CFE> ATBT 1
<---- Enable writeOK
*** command status = 0
CFE>
CFE> ATUR
<---- Starts xModem update, you need to send the firmware file to the device n go for a coffee