Created
December 1, 2025 22:12
-
-
Save rtauler/619f2ee6593b78bea7904bad0f782c24 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Tutorial: Extracting PLOAM Password from Vodafone Sercomm FG824CD and Configuring Nokia G-010G-P ONT | |
| ## Prerequisites | |
| - Vodafone Sercomm FG824CD router (common in Spain). | |
| - Compatible third-party ONT (e.g., Nokia G-010G-P). | |
| - Extracted GPON parameters (PLOAM, serial, vendor ID, etc.)—use debug logs or Wireshark. | |
| - Separate router for PPPoE (e.g., OpenWRT device). | |
| - Ethernet cables and fiber connector (SC/APC). | |
| - Perform on your own equipment; risk of temporary outage. | |
| ## Step 1: Extract PLOAM and GPON Parameters from Sercomm FG824CD | |
| 1. Connect PC to router via Ethernet. | |
| 2. Access http://192.168.0.1; log in with credentials (e.g., "vodafone"/"PA22W012D, check out the sticker below router). | |
| 3. Elevate to admin: Browser dev tools (F12 > Sources > mainFunctions.js). Breakpoint at `usermode` line, refresh, modify to `data[7] = { usermode: "admin" };`, resume. | |
| 4. Go to **Diagnostic Unit > GPON Debug**. Enable "Log to File". | |
| 5. Click "Down Ddb", disconnect fiber 10-20s, reconnect, wait for PON sync, click "Down Ddb" again. | |
| 6. Download log (e.g., ddb.bin or .log). | |
| 7. Open in text/hex editor (e.g., Notepad++ or HxD). Search for "ONU info" or "PASSWD". | |
| 8. Extract: | |
| - PLOAM Password: 10-char alphanumeric (e.g., "XXXXXXXXXX") or hex. | |
| - Serial Number (EQSN): e.g., "SCOMXXXXXXXX". | |
| - Vendor ID: "SCOM". | |
| - Hardware Version (EQVID): e.g., "SCOMFG824CDv2". | |
| - Equipment ID (EQID): "FG824CD". | |
| - Software Version (SWVER): e.g., "FG824CD3113". | |
| ## Step 2: Configure the Nokia G-010G-P ONT | |
| Factory reset ONT (hold reset 10+ seconds). Default IP: 10.89.42.157 (or 192.168.100.1). Connect via Ethernet. | |
| 1. Telnet: `telnet 192.168.100.1` (user: `root`, password: `huigu309`). (it takes a while to open the connection, but it will connect) | |
| to go backwards type "exit" | |
| 2. Enter system mode: | |
| ``` | |
| #ONT>system | |
| ``` | |
| 3. Enter shell mode: | |
| ``` | |
| #ONT/system>shell | |
| ``` | |
| 4. Enter misc mode: | |
| ``` | |
| #ONT>system | |
| #ONT/system>misc | |
| ``` | |
| 5. Set Serial Number (EQSN): | |
| ``` | |
| #ONT/system/misc>eqsn set "SCOMXXXXXXXX" | |
| #ONT/system/misc>eqsn get # Verify | |
| ``` | |
| 6. Set PLOAM Password: | |
| ``` | |
| #ONT/system/misc>pon_passwd set "XXXXXXXXXX" | |
| #ONT/system/misc>pon_passwd get # Verify | |
| ``` | |
| 7. Set Vendor ID: | |
| ``` | |
| #ONT/system/misc>vendor set "SCOM" | |
| #ONT/system/misc>vendor get # Verify | |
| ``` | |
| 8. Set Hardware Version (EQVID): | |
| ``` | |
| #ONT/system/misc>eqvid set "SCOMFG824CDv2" | |
| #ONT/system/misc>eqvid get # Verify | |
| ``` | |
| 9. Set Equipment ID (EQID): | |
| ``` | |
| #ONT/system/misc>eqid set "FG824CD" | |
| #ONT/system/misc>eqid get # Verify | |
| ``` | |
| 10. Set OMCI Software Version: | |
| ``` | |
| echo SWVER=FG824CD3113 > /mnt/rwdir/sys.cfg | |
| ``` | |
| 11. Commit changes: | |
| ``` | |
| #ONT>system | |
| #ONT/system>mib | |
| #ONT/system/mib>reset | |
| ``` | |
| 12. Reboot: | |
| ``` | |
| #ONT/system>reboot | |
| ``` | |
| Verify post-reboot: Telnet, `#ONT/system/pon>show link` (PON synced). | |
| ## Step 3: Connect the Hardware | |
| 1. Disconnect fiber from Sercomm FG824CD. | |
| 2. Connect fiber to Nokia PON port. | |
| 3. Wait 1-5 min for sync (PON LED green). If fails, swap back, wait 30-60 min (OLT lockout). | |
| 4. Connect Ethernet from Nokia LAN to your router's WAN. | |
| ## Step 4: Configure Your Router for PPPoE (Optional for Full Setup) | |
| Vodafone uses PPPoE with VLAN 24 (priority 0) for NEBA. | |
| 1. Access router GUI (e.g., 192.168.1.1). | |
| 2. WAN: PPPoE mode. | |
| 3. Username: e.g., "ONH000XXXXXXX@vodafone". | |
| 4. Password: Extracted 20-char alphanumeric. | |
| 5. VLAN: ID 24, priority 0. | |
| 6. Save, reconnect. | |
| ## Troubleshooting | |
| - No sync: Retry parameters or test without spoofing. | |
| - Lockout: Wait or contact support. | |
| - PPPoE fail: Recheck creds via Wireshark. | |
| - Sources: Based on hack-gpon.org, cdalvaro.io, bandaancha.eu. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment