Skip to content

Instantly share code, notes, and snippets.

@rtauler
Created December 1, 2025 22:12
Show Gist options
  • Select an option

  • Save rtauler/619f2ee6593b78bea7904bad0f782c24 to your computer and use it in GitHub Desktop.

Select an option

Save rtauler/619f2ee6593b78bea7904bad0f782c24 to your computer and use it in GitHub Desktop.
# Tutorial: Extracting PLOAM Password from Vodafone Sercomm FG824CD and Configuring Nokia G-010G-P ONT
## Prerequisites
- Vodafone Sercomm FG824CD router (common in Spain).
- Compatible third-party ONT (e.g., Nokia G-010G-P).
- Extracted GPON parameters (PLOAM, serial, vendor ID, etc.)—use debug logs or Wireshark.
- Separate router for PPPoE (e.g., OpenWRT device).
- Ethernet cables and fiber connector (SC/APC).
- Perform on your own equipment; risk of temporary outage.
## Step 1: Extract PLOAM and GPON Parameters from Sercomm FG824CD
1. Connect PC to router via Ethernet.
2. Access http://192.168.0.1; log in with credentials (e.g., "vodafone"/"PA22W012D, check out the sticker below router).
3. Elevate to admin: Browser dev tools (F12 > Sources > mainFunctions.js). Breakpoint at `usermode` line, refresh, modify to `data[7] = { usermode: "admin" };`, resume.
4. Go to **Diagnostic Unit > GPON Debug**. Enable "Log to File".
5. Click "Down Ddb", disconnect fiber 10-20s, reconnect, wait for PON sync, click "Down Ddb" again.
6. Download log (e.g., ddb.bin or .log).
7. Open in text/hex editor (e.g., Notepad++ or HxD). Search for "ONU info" or "PASSWD".
8. Extract:
- PLOAM Password: 10-char alphanumeric (e.g., "XXXXXXXXXX") or hex.
- Serial Number (EQSN): e.g., "SCOMXXXXXXXX".
- Vendor ID: "SCOM".
- Hardware Version (EQVID): e.g., "SCOMFG824CDv2".
- Equipment ID (EQID): "FG824CD".
- Software Version (SWVER): e.g., "FG824CD3113".
## Step 2: Configure the Nokia G-010G-P ONT
Factory reset ONT (hold reset 10+ seconds). Default IP: 10.89.42.157 (or 192.168.100.1). Connect via Ethernet.
1. Telnet: `telnet 192.168.100.1` (user: `root`, password: `huigu309`). (it takes a while to open the connection, but it will connect)
to go backwards type "exit"
2. Enter system mode:
```
#ONT>system
```
3. Enter shell mode:
```
#ONT/system>shell
```
4. Enter misc mode:
```
#ONT>system
#ONT/system>misc
```
5. Set Serial Number (EQSN):
```
#ONT/system/misc>eqsn set "SCOMXXXXXXXX"
#ONT/system/misc>eqsn get # Verify
```
6. Set PLOAM Password:
```
#ONT/system/misc>pon_passwd set "XXXXXXXXXX"
#ONT/system/misc>pon_passwd get # Verify
```
7. Set Vendor ID:
```
#ONT/system/misc>vendor set "SCOM"
#ONT/system/misc>vendor get # Verify
```
8. Set Hardware Version (EQVID):
```
#ONT/system/misc>eqvid set "SCOMFG824CDv2"
#ONT/system/misc>eqvid get # Verify
```
9. Set Equipment ID (EQID):
```
#ONT/system/misc>eqid set "FG824CD"
#ONT/system/misc>eqid get # Verify
```
10. Set OMCI Software Version:
```
echo SWVER=FG824CD3113 > /mnt/rwdir/sys.cfg
```
11. Commit changes:
```
#ONT>system
#ONT/system>mib
#ONT/system/mib>reset
```
12. Reboot:
```
#ONT/system>reboot
```
Verify post-reboot: Telnet, `#ONT/system/pon>show link` (PON synced).
## Step 3: Connect the Hardware
1. Disconnect fiber from Sercomm FG824CD.
2. Connect fiber to Nokia PON port.
3. Wait 1-5 min for sync (PON LED green). If fails, swap back, wait 30-60 min (OLT lockout).
4. Connect Ethernet from Nokia LAN to your router's WAN.
## Step 4: Configure Your Router for PPPoE (Optional for Full Setup)
Vodafone uses PPPoE with VLAN 24 (priority 0) for NEBA.
1. Access router GUI (e.g., 192.168.1.1).
2. WAN: PPPoE mode.
3. Username: e.g., "ONH000XXXXXXX@vodafone".
4. Password: Extracted 20-char alphanumeric.
5. VLAN: ID 24, priority 0.
6. Save, reconnect.
## Troubleshooting
- No sync: Retry parameters or test without spoofing.
- Lockout: Wait or contact support.
- PPPoE fail: Recheck creds via Wireshark.
- Sources: Based on hack-gpon.org, cdalvaro.io, bandaancha.eu.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment