Yettel Hipernet ZTE ZXHN H298Q detalji, i tutorial za izvlacenje podataka iz config fajla

gistfile1.txt

ZTE Yettel ruter uspostavlja sledece veze preko svog WAN kabla:
 
Connection: Management
DHCP IPoE VLAN 715 Priority 0
Vendor class dslforum.org
IP address 10.48.x.x/255.254.0.0
Ovu mrezu koristi da komunicira sa TR069 ACS-om na adresi https://acs.cetin.rs:10302/acs/serbia
 
Connection: Voice
DHCP IPoE VLAN 711 Priority 5
Vendor class dslforum.org
IP address 10.54.x.x/255.254.0.0
Ovu mrezu verovatno koristi za SIP, ali posto ovde nema tel. usluge ne salje nikakve pakete posle DHCP-a i upita DNS za asbcp.ims.telenor.rs
 
Connection: IPTV
DHCP IPoE VLAN 712 Priority 5
Vendor class dslforum.org
Na ovoj mrezi ne dobija ni IP, DHCP server ne odgovara, ali ruter salje neke IGMP pakete na pocetku
 
Connection: Internet
PPPoE VLAN 710 Priority 0
Username: [email protected] ili [email protected], brojevi su razliciti za svakog
Password: 12 karaktera, samo velika i mala slova
IP: 10.0.x.x

Posle factory reseta, parametri koji se vracaju iz firmvera ZTE ZXHN 298Q su:
- nema ppp user/pass
- normal user yettel (telenor u starijem firmveru)
- normal pass yettel (telenor u starijem firmveru)
- admin user admin
- admin pass s0kz1mDpcI. (zavrsava se sa tackom)
- acs url https://acs.cetin.rs:10302/acs/serbia
- acs user MMMMMM-ZTEXXXXXXXXXXXX (ceo serijski broj, vidi se na webgui kao "Device Serial No.")
- acs pass xXxxXXxX (isti kao wifi pass na nalepnici)
- crq port 30001
- crq user ACS
- crq pass c6r3p!.asv3s9.m

Cim se poveze na opticku mrezu i kontaktira ACS posle factory reseta, taj server postavlja sledece vrednosti:
- ppp user [email protected] ([email protected] za starije korisnike, broj je razlicit za svakog ali isti broj cifara)
- ppp pass xXxXxXxXxXxX (12 nasumicnih velikih/malih slova, nema brojeva)
- admin pass A@hhhhhhhhhh (h su 10 nasumicne hex cifre mala slova)
- acs user ZTEXXXXXXXXXXXX (serijski broj, samo deo posle -)
- acs pass hhhhhhhhh (h su 10 nasumicne hex cifre mala slova, nije isti kao admin pass)
- crq port 30001
- crq user ZTEXXXXXXXXXXXX (serijski broj, samo deo posle -)
- crq pass hhhhhhhh (h su 8 nasumicne hex cifre mala slova, nije isti kao acs pass)

sve generisane sifre oznacene sa h SE MENJAJU SVAKI PUT KADA SE RADI FACTORY RESET RUTERA. ppp user/pass je vezan za nalog i on se ne menja (osim valjda ako ne kupite staticki ip)
tako da ne postoji staticna/globalna admin sifra koja je vama korisna ako zelite da ruter bude na mrezi...

Izvlacenje trenutnih vrednosti iz config fajla:
- Skinuti i instalirati Python verziju > 3.5 na neku putanju koju cete moci lako da ukucate u komandnoj liniji (npr. C:\Python38)
- Ici na https://github.com/rajkosto/zte-config-utility (moja verzija zte-config-utility koja podrzava ovaj ruter) i kliknuti na dugme Code->Download ZIP
- Ekstraktovati taj ZIP u neki folder, u taj isti folder udjite sa komandnom linijom
- Ici na 192.168.1.1, logovati se kao bilo koji user, na stranici Management & Diagnosis -> System Management -> User Configuration Management kliknuti Backup Configuration dugme
- Taj fajl snimiti u isti folder u koji je ekstraktovan ZIP
- U komandnoj liniji u tom folderu pokretati sledece komande da bi se pripremilo za rad sa config fajlom:
    "C:\Python38\Scripts\pip.exe" install pycryptodomex
    "C:\Python38\Scripts\pip.exe" install .
- Treba da pise "Successfully installed zcu-0.3.0"
- Za dekriptovanje konfig fajla koji je dobijen preko "Backup configuration" pokrenuti:
    "C:\Python38\python.exe" examples/decode.py config.bin config.xml
- Za enkriptovanje konfig fajla nazad kako bi se mogao "Restore configuration" izabirom config2.bin posle edita config.xml pokrenuti:
    "C:\Python38\python.exe" examples/encode.py --signature "ZXHN H298Q V7.0" --use-signature-encryption config.xml config2.bin
- Otvoriti config.xml i pronaci vrednosti koje vas interesuju :) (ppp user/pass se nalazi u sekciji <Tbl name="PPPIF" RowCount="1"> , admin user/pass se nalazi u sekciji <Tbl name="DevAuthInfo" RowCount="7"> )

Svi na Yettel Hipernetu koji NE PLACAJU dodatak staticne IP adrese 400din/mesecno su iza CG-NATa, i zbog toga im nece raditi port forwarding gde god da ga odrade (ova cinjenica se vidi i u ovom gist-u, Internet IP je 10.0.x.x, nije cak ni u pravilnom 100.x CGNAT opsegu)

Ako hoces da radi port forwarding, moras biti na statickoj IP adresi kod Yetel Hiperneta, nema nista od DynDNS-a

Jasno, samo sam gledao da li ce biti neki nacin da ne moram dici racun za 30%. Ali razumem da postoji nedostatak IP adresa. Mislim na kraju dana ovo sto sam planirao raditi mi se ne isplati u tom slucaju, hvala na informacijama.

Well, it's definitely not a nice move from Yettel, but for their speed and price (which is at least currently is less than for MTS or SBB) I am okay to pay an extra.

Well, it's definitely not a nice move from Yettel, but for their speed and price (which is at least currently is less than for MTS or SBB) I am okay to pay an extra.

That's completely fair. I am not judging them, you and they gotta pay for those IP addresses somehow.

What would be nice is if they start to assign at least /64 IPv6 subnet. But it's another story...

What would be nice is if they start to assign at least /64 IPv6 subnet. But it's another story...

From experience I feel no ISP dared to implement IPv6 in either Serbia or Bosnia ATM. I wasn't able to find any connection with a public IPv6. Yeah, it's lame.

in Serbia, the only ipv6 capable operator is Supernova, now a division of MTS but its networking is still entirely independent and works completely differently, gives out public IPV6 to all it's users because their IPV4 is all CG-NAT.

Svaka čast za ovo! Radi kao sat ;)

Thank you!

@rajkosto Do you happen to know what type of PPPoE encapsulation is used? ptm, vcmux, llc, llcsnap?

Pozdrav,

Da li mozda imas slicno resenje za H3600P V9.0 V9.0.0?

Imambin fajl sa tog rutera, potreban mi je admin/pass.

ako ti je potreban pppoe user/pass najlakse je traziti sa [email protected] jer H3600P jos nije podrzan od strane ZTE Router Configuration tool

Pozdrav,

Da li mozda imas slicno resenje za H3600P V9.0 V9.0.0?

Imambin fajl sa tog rutera, potreban mi je admin/pass.

Pozdrav ,
da li si možda uspeo da dobiješ ppoe user/pass od Yettela? Od nedavno imam isti taj ruter (ZTE H3600P V9.0) i rado bih ga zamenuo Mikrotikom. Ima li nade za nas vlasnike ZTE H3600P V9.0 ?

daju preko tog emaila
ili mozes da me kontaktiras na benchmark i nabavicu ti ja

Hvala na brzom odgovoru . Kontaktiraću Yettel. Novi sam u svemu ovome , a ovaj tvoj tutorial mi je ulio neku nadu da ću možda uspeti da zamenim Yettelov router Mikrotikom.
Koji bi bili sledeći koraci nakon dobijanja podataka od Yettela?

P.S. benchmar je forum ili...?

I am using Mikrotik. You just need to create VLAN with proper ID (I got ID from ZTE settings) and then PPPoE connection over that VLAN with credentials they will provide you.

Hvala na brzom odgovoru . Kontaktiraću Yettel. Novi sam u svemu ovome , a ovaj tvoj tutorial mi je ulio neku nadu da ću možda uspeti da zamenim Yettelov router Mikrotikom. Koji bi bili sledeći koraci nakon dobijanja podataka od Yettela?

P.S. benchmar je forum ili...?

kada dobijes pppoe user/pass prati ovo https://www.youtube.com/watch?v=kAa41C4RcYc

Hvala veliko @rajkosto i @savely-krasovsky
Pratiću vaša uputstva . Ukoliko "zaškripi" negde - biću slobodan da vam se obratim.

I am using Mikrotik. You just need to create VLAN with proper ID (I got ID from ZTE settings) and then PPPoE connection over that VLAN with credentials they will provide you.

Hello again , I got PPPoE credentials from Yettel , but I stuck with Mikrotik settings ( ethernet router hEX E50UG) .Don't how to create VLAN and where to put VLAN ID (710) and after that create PPPoE connection . Could you help me , please?
And one more question : Yettel(ISP) router IP was 192.168.1.1 but Mikrotik IP is 192.168.88.1 Is it a problem?

192.168.88.1 is definitely not a problem.

This is VLAN 710 settings:

This is PPPoE settings:

At the end it will look like this:

Where ether1 is your WAN port obviously.

kada dobijes pppoe user/pass prati ovo https://www.youtube.com/watch?v=kAa41C4RcYc

Hvala još jednom.Dobio sam podatke za PPPoE od Yettela ali je Mikrotik malo komplikovaniji za podesiti.

192.168.88.0/24 is your local network. You can choose whatever you want including Mikrotik one. It cannot affect setup. The main point is that PPPoE connection works only inside VLAN (710 in our case), otherwise it won't be reachable.

Where ether1 is your WAN port obviously.

Thanks a lot.That was really fast . I really appreciate your help. Will try latter.

I set everything as you wrote and on the pc it says that the internet connection is established but I can't access any site. The internet connection diagnosis says that there is a problem with DSN cash. I deleted DSN cash (cmd, ipconfig/flushdns) but I still have the same problem. I will continue tomorrow.

@Luketoni could you try to ping something? For example ping 8.8.8.8. If it pings successfully then it's something with your DNS setup on Mikrotik.

PC ping

Mikrotik ping

@Luketoni there are two things wrong:

1. In Windows you ping your router. Obviously it will ping, since you are connected to your router using cable or WiFi.
2. In Mikrotik you are pinging using vlan710 interface. It won't ping since vlan710 doesn't give internet access, you have to ping using PPPoE interface.

Just write me in Telegram, it will be faster and we won't flood in useful thread.

@rajkosto prvo da ti se izvinim za "off topic" , a onda i da ti se zahvalim na tutorijalu koji mi je pomogao da Yettel-ov router zamenim Mikrotikom.

Velika zahvalnost takođe i za @savely-krasovsky Without your help I would be still wandering trough Mikrotik Winbox64 OS.Thanks a lot.