Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[kitz]

DSL Chip: Broadcom BCM 63168

Well it uses the same chipset so thats a good start at least.   Im afraid I dont know much about hacking routers as its not something that I normally do (not clever enough).   I was hoping someone else may have perhaps picked up on this and been able to give some advice. 
Sorry that I personally cant help any further.

[dmcdonnell]

Greetings to all , I have a Zyxel P8701T and would like to introduce another firmware on it. Despite not speaking English , I understood that through the procedure will be possible for me to do this . My doubts : The USB cable for TTS will work with Win8 ? I do not speak a word of English , I used Google translator. Can I count on your help ? I thank you .

Hello Hector,

From what I read at ZyXel, your P8701T is a VMG1312-B10A. You can get a recent firmware here: ftp://certified@ftp.zyxel.it/firmware/VMG1312/

The unlock method in my guide might well work for you. If you connect to CFE via USB-TTL serial cable, try

ATSE VMG1312-B10A

or

ATSE P8701T

to see it it will generate a SEED that will get you a password here: http://www.tonycool.es/zyxel/zynpass_en.htm

I do not have a P8701T so it is difficult to assist you.

[ChrisWH]

Hi,

I wanted to thank dmcdonnell for the instructions on how to unbrand this eircom router. Have flashed Boot Loader and Firmware. Works great now!

Cheers,
Chris.

[dmcdonnell]

Hi,

I wanted to thank dmcdonnell for the instructions on how to unbrand this eircom router. Have flashed Boot Loader and Firmware. Works great now!

Cheers,
Chris.

Chris,

Thank you and well done! I'm delighted to hear of your success.

Dermot.

[randevu]

For P-2812HNU-F1 vT (Telenor), I cannot get through ATSE invalid argument part.
I tried various versions of argument for ATSE, and no one was working.
ATSE P-2812HNUL-F1

ZLD Version: V3.10(TUL.4)
Bootbase Version: V3.03|11/19/2012(TUL)

[tarmin]

Hello everybody, outstanding work going on in here!
I am from Argentina, received a Zyxel VMG1312-B10B modem router and trying to get rid of Telecomīs firmware.
Achieved some success: by following Dermotīs tutorial, could unlock bootbase and upload AAJZ7C0 firmware from Zyxel. Very usable now, but I wanted to update bootbase (previously read from memory block 0 and edited to avoid "Illegal Model ID" when uploading new firmware from webGUI) but received ERROR in CFE shell after transferring 131072 bytes correctly.
Any help, ideas, suggestions?

Thanks in advance.

Martin

[tarmin]

More info about situation:

VMG1312-B10B is almost the same as VMG1312-B10A (except for externals and for having only one USB port), Zyxel firmware releases are for both of them.

This is ATSH output:

Code: [Select]

CFE> atsh

FW       Version       : V1.00(AAJZ.7)C0
Bootbase Version       : V1.59 | 05/20/2013 14:07:14
Vendor Name            : ZyXEL Communications Corp.
Product Model          : VMG1312-B10B
Serial Number          : S143118005838
First MAC Address      : 5CF4ABB7BEF2
Last MAC Address       : 5CF4ABB7BEFB
MAC Address Quantity   : 10
Default Country Code   : C6
Boot Module Debug Flag : 01
RootFS      Checksum   : d2d4f141
ImageDefaultChecksum   : 68d54d73
Main Feature Bits      : 00
Other Feature Bits     :
                4d 53 40 20 00 00 00 00-00 00 00 00 00 00 00 00
                00 00 00 00 00 00 00 00-00 00 00 00 00 00

*** command status = 0

This is the routerīs behaviour when trying to upload bootbase modified with "13" instead of "20" in Other Feature Bits:

Code: [Select]

CFE> atub x.bin

Starting XMODEM upload (CRC mode)....
CCCCCC
Receive completed, start to write flash...

OK

Total 131072 (0x20000)bytes received

ERROR
*** command status = -1
CFE>

Router still working the same, no problems appeared.

Bootbase made dumping flash data with ATRM 0, then hex-editing.

Thanks in advance for your reading and helping.

[Lantizia]

[...]
screen /dev/ttyUSB0 115200
[...]

Hey dmcdonnell I just wanted to say thanks for this post (and introducing me to the lrzsz utility).  I work for an ISP with a boat load of VMG8924-B10A's (and one VMG8324-B10A, but we decided to go with the other version) around our office and knowing there is a way we can reflash them is handy... although it seems unlocking ours isn't required, still testing various options.

That other web site mentioned using screen in this way (instead of yours), is there any difference do you know?  (maybe XMODEM goes quicker?)

Code: [Select]

screen -L /dev/ttyUSB0 115200,cs8,istrip
Steven

[highpriest]

dmcdonnell - many thanks for the guide. Was able to follow it and un-brand an F1000 without any problems

[Chrysalis]

the http://www.tonycool.es/zyxel/zynpass_en.htmis dead, I guess it got pulled?

[Bestgear]

the http://www.tonycool.es/zyxel/zynpass_en.htmis dead, I guess it got pulled?

Looks like it.... just when there are a load of these routers on the bay for cheap prices....

[Bestgear]

Is buying a branded router and flashing still a realistic proposition?

Just asking before I buy yet another router...!

TIA

David

[Moderator edited. A small typo fix.]

[Luigi.Trabacchin]

the http://www.tonycool.es/zyxel/zynpass_en.htmis dead, I guess it got pulled?

https://web.archive.org/web/20160305162208/http://www.tonycool.es/zyxel/zynpass_en.htm
Enjoy

[Luigi.Trabacchin]

Hi guys i'm trying to do the same with mine VMG8823-B50B it's rebranded by an italian company who doesn't like to upddate the routers firmware
i got to the UART port for now [youtube]https://youtu.be/m902i0FXZrU[/youtube]

[dmcdonnell]

Hi guys i'm trying to do the same with mine VMG8823-B50B it's rebranded by an italian company who doesn't like to upddate the routers firmware

May I suggest you read this brief and excellent thread http://forum.kitz.co.uk/index.php/topic,17361.0.html. Kitz user Iam_TJ has written software to edit the header of ZyXel firmware. It is easy to take the latest ZyXel firmware for the vmg8324-b10 and turn it into an Eircom F1000 compatible firmware that can be flashed without unbranding the F1000.

His approach may work for you. Good luck.