Kitz Forum
Broadband Related => Broadband Hardware => Topic started by: highpriest on July 09, 2016, 06:26:28 PM
-
Any users of the TG589vac here? Looks like a good bit of kit, and I managed to nab one for cheap off eBay (was a unit supplied by SSE to one of its customers).
Problem is - I can't find unlocked/generic firmware for it anywhere. The firmware on it currently is SSE specific but the only customisation appears to be that the username is pre-populated. There's probably some TR-069 config buried in there somewhere but I'm not able to unearth it.
Does anyone know how to install generic firmware on this device? Indeed, does such a thing even exist? Is there a way to enable telnet access?
-
No one?
-
No one?
Looks that way. :(
-
I don't have one but the manual/other info appears available at http://www.nickdj.co.uk/internet/router-guides/technicolor-tg589vac.html?ckattempt=2 and at https://www.dropbox.com/s/nnr5ju2xllxmrhr/Setup%20%26%20User%20Guide%20TG589vac%20-%20Homeware%20R15.4%20%28en%29%20%5B2690136%5D.pdf?dl=0
Support looks to be provided directly from Thomson on 020 7309 0226
-
Thank you. I tried phoning them but even the support staff tell me that they don't have access to the firmware!
Apparently it is never supplied to consumers directly; only to ISPs who have an active agreement, and only firmware that is specially customised for them. Oh well, time to sell it on I think :(
-
Broadband Buyer are definitely selling it direct to the public at http://www.broadbandbuyer.co.uk/products/23623-thomson-tg589vac/
I imagine they won't be the only ones (not that I have looked!)
-
Broadband Buyer are definitely selling it direct to the public at http://www.broadbandbuyer.co.uk/products/23623-thomson-tg589vac/
Sorry, I meant the firmware, not the device itself which, as you mentioned, is sold by a number of online vendors. I emailed Broadband Buyer support and apparently even they do not have access to the firmware files! Also spoke to my ISP (Plusnet) and they can't support this either.
My only hope is if the likes of OpenWrt produce a firmware that's compatible with this hardware.
-
It's extremely unlikely that OpenWRT would produce a firmware for it, or if they did, then the DSL wouldn't function because Broadcom DSL drivers aren't open source, and then it would be very difficult to install any custom firmware.
-
If it helps, the usual way to disable TR-069 on a Technicolor routers is to disable CWMP via telnet.
http://npr.me.uk/telnet.html#cwmp
Are you sure it's locked to a ISP?
If it is, I would guess it's also locked to that ISP's firmware.
-
It's extremely unlikely that OpenWRT would produce a firmware for it, or if they did, then the DSL wouldn't function because Broadcom DSL drivers aren't open source, and then it would be very difficult to install any custom firmware.
Thanks, didn't know that.
-
If it helps, the usual way to disable TR-069 on a Technicolor routers is to disable CWMP via telnet.
http://npr.me.uk/telnet.html#cwmp
Are you sure it's locked to a ISP?
If it is, I would guess it's also locked to that ISP's firmware.
I don't believe it is, I'm sure it will work with Plusnet as the username/password fields are all freely accessible (just pre-populated with SSE details but they can be removed).
Also, with this firmware, I don't have telnet access to the device. Plus without continuous access to new firmware releases, I'm missing out on technical, security and stability improvements.
-
I'm surprised telnet is not working, that's usually one of the strengths of Technicolor routers.
It can sometimes take two or three goes to get in, the username is often "admin" and the password is usually the 11 character serial number.
May be worth doing a factory reset, just in case someone has changed the password, and giving it another go.
-
I have one of these (makes for a good spare) and telnet is definately disabled, unfortunately.
btw : on the sse firmware, the default user/pass is "admin/admin" (it's not the usual serial number == password)
And regarding PPP lock - it did work with BT PPP credentials on Infinity before I migrated (can't speak for any other ISPs obviously)
-
I don't own one of these units, but their seems to be quite a lot of information it @ http://www.nickdj.co.uk/internet/router-guides/technicolor-tg589vac.html?ckattempt=1
-
I don't own one of these units, but their seems to be quite a lot of information it @ http://www.nickdj.co.uk/internet/router-guides/technicolor-tg589vac.html?ckattempt=1
As mentioned by gt94sss2 in Reply #3, above.
-
I'm surprised telnet is not working, that's usually one of the strengths of Technicolor routers.
It can sometimes take two or three goes to get in, the username is often "admin" and the password is usually the 11 character serial number.
May be worth doing a factory reset, just in case someone has changed the password, and giving it another go.
As roswellgrey mentioned, telnet is definitely disabled. I have done a factory reset; had to do one anyway as the previous owner didn't reset the device and I couldn't login to it.
On earlier models, there was a trick where you could export a config backup file (which was in plain text), alter it, and re-upload to the device. That doesn't work on this device as the export is in binary format.
-
would be handy to get your hands on a retail model. If it's being sold retail there must surely be an unbranded firmware somewhere. I would be very surprised if they were selling it retail with ISP branding on the firmware.
-
Some older Technicolor routers allowed different login usernames which gave higher privileges such as telnet.
Some usernames to try:
Superuser, SuperUser, superuser, root, Administrator
All with serial number as password.
Shame the the config file is encrypted, that may have helped if in plain text.
-
Some older Technicolor routers allowed different login usernames which gave higher privileges such as telnet.
Some usernames to try:
Superuser, SuperUser, superuser, root, Administrator
All with serial number as password.
Shame the the config file is encrypted, that may have helped if in plain text.
I'll give that a try, thanks. Although, when I login as admin, the only user account I can see on the system is 'admin'.
-
I have the exact same router, bought from Carphone Warhouse when I was a customer there.
No longer with them, I am now Sky Broadband customer using this router.
Had no troubles getting the router to work with Sky but what does annoy me is all the Carphone Warhouse branding in the routers portal.
Did you ever manage to figure out how to remove all the branding? Ive been googling for it on and off for over a year....
Would really appreciate it removing it as I had a bad experience with Carphone Warhouse so I want nothing to do with them but seeing their branding annoys me
-
My version never had SSE branding. It is stock, as far as I can tell. The only thing they added was the SSE login details (username). I currently use a ZyXel VMG8324 so haven't used the Technicolor for a while now.
I did manage to gain access to the device using SSH using the account 'tech'. The password is printed on the bottom of the device, in the 'Access Key' section. See if SSH is enabled on your device. But no matter what I did, I couldn't get telnet working. Having said that, my OpenWrt knowledge is pretty rudimentary. All configuration is done using the UCI System (https://wiki.openwrt.org/doc/uci), which is easy(ish) to learn.
Not all commands are allowed for user 'tech', even the ones they claim are allowed. It is a restrictive interface and I couldn't figure out how to drop into a full shell.
The branding could be more tricky to remove without having access to vanilla firmware.
-
Oh, I also removed the TR-069 ACS URL from the config.
cwmpd.cwmpd_config.acs_url='http://nld-acs.com'
-
I have used some 'Free' ones off ' freecycle and used them for WiFi access points in dead zones. ;D these were 'locked' but that did not matter.
-
Oh, I also removed the TR-069 ACS URL from the config.
cwmpd.cwmpd_config.acs_url='http://nld-acs.com'
You can also disable CWMP/TR069 by accessing the gateway on 192.168.1.1/?debug=1 and there is then an option there to disable it.
What I'm struggling with is finding out how to take the preconfigured ISP settings out so that when you do a factory reset there not there again. Does anybody yet have a firmware that will take this router back to stock/vanilla? Or can this also be done somehow from ssh?
-
Using the ssh method used by highpriest ( :graduate: Thanks!), enter the following:
uci set system.config.export_unsigned='1'
uci set system.config.export_plaintext='1'
uci system.config.import_plaintext='1'
uci system.config.import_unsigned='1'
uci commit
..import_plaintext is set to 1 by default on my router.
Now when you export the config in the web GUI, it will be viewable/editable. I managed to remove sse specific info, for example.
Good luck. :fingers: