___________________________________________________________________________________________________________________________ Recovery, change and consolidationMACWLAN(MAC-address WLAN) andIMEI(Does not depend on the presence of SIM-card in the modem)
Option 1. - OS should be installed Fcserial
- In the web interface doReset (restore device factory settings).
- Switch modem with HiLink firmware to port mode:
- Terminal program connect to portPC UI - Interface , eg:
- OpenTerminal Click "Port", select PC UI - Interface , click on the "Closed" button; if the program connects the terminal to this port, the "Closed" button will be renamed to the "Open" button.
- Execute two AT commands (via the "Actions" Terminal menu):AT ^ CURC = 0 then ATE1
- In the Terminal, execute the following commands in sequence:
- AT & F
- After executing the AT & F command, if the modem reboots, you must re-open the ports again and continue the commands.
- AT ^ DATALOCK = "OEM code"
- AT ^ PHYNUM = MACWLAN, new-MACWLAN
- Wherenew-MACWLAN (new MAC address)written without quotes, apostrophes, spaces, and delimiters. The case of letters does not matter, however, the one that the command was entered in will appear in the "Device Information" modem.
- Input example: AT ^ PHYNUM = MACWLAN, BABECD340011
- AT ^ PHYNUM = IMEI, new-IMEI
- Wherenew-IMEI- This is a new IMEI. The command is written without quotes, apostrophes, spaces and separators. The case of letters does not matter.
- IMEI must be correct(with correct last check digit). Incorrect IMEI modem will not accept with an error message.
You can check the correctness of IMEIonline calculator
- Input example: AT ^ PHYNUM = IMEI, 872319034565667
- AT ^ INFORBU
- Complete overwriting of nvdefault (factory settings) with information from the current nvram.
- AT ^ RESET
Note :
- Teams are entered alternately - from top to bottom.
- If you need to change one thing:MACWLANorIMEI, then execute only one of the commands:AT ^ PHYNUM = MACWLAN, new-MACWLANorAT ^ PHYNUM = IMEI, new-IMEI
- CurrentMACWLANandIMEIshows the command:AT ^ PHYNUM?
Option 2. - If the modem works with fashion. firmware Telnet , It is possible to communicate with the modem without direct contact with the USB-port via Telnet by "air". Telnet can take here Under the spoiler "Useful".
- Unpack the archive; runtelnet.exe. In the "Connect" tab there are ready addresses for connecting to the modem. After successful connection, go to step 5 (entering commands).
- Important!Telnet does not support Cyrillic. The copied commands are inserted into the telnet window by right-clicking. If the AT command contains quotes or spaces, you must enclose it in apostrophes: atc' AT ^ DATALOCK = "xxxxxxxx" '
- An example of entering commands in the telnet window: atc' AT ^ DATALOCK = "13325014" ' or atc AT ^ PHYNUM? etc.
Attention! - By commandAT ^ INFORBU all information from current nvram at default-hydrochloric i.e. there is a complete rewrite nvdefault .
- Insofar asAT & F copies to nvramwith current settings all settings fromnvdefault , other changes, except MACWLAN or IMEI , will not happen. This option also has a drawback - all current settings modem correspond on default .
- Initial factory information is permanently erased., that is why,beforeof applicationAT ^ INFORBUneed to,necessarily to execute AT & F , make the necessary changes and, right away send AT ^ INFORBU .
___________________________________________________________________________________________________________________________ Installing and removing the password for access to the Linux console through Telnet
ADB-server startup in fashion. firmwareswith password setfor access to the Linux console through Telnet
Set and remove password: rust3028 @ 05/28/16, 10:06
Password setting:
mount -o remount / system
busybox passwd
...
reboot
Remove password:
mount -o remount / system
busybox passwd -d root
reboot
Password during installation or confirm the entry "blindly".Run the ADB server in mod. firmware: Huawei E5573 (Beeline E5573, Megaphone MR150-3, MTS 8210FT) - Discussion (Post by rust303028 # 50615938) rust3028 @ 03/07/18 13:31
or
rust3028 @ 03/09/18 12:43
manually start (The ADB server will work until the device is rebooted.):
root @ android: / #
adbd & or
rust3028 @ 05/28/16, 10:06
Remove password :
mount -o remount / system
busybox passwd -d root
reboot
___________________________________________________________________________________________________________________________ Getting codesOEMandNCK, Backup, Unlocking (UNLOCK). ChangeIMEI, changeOEMandSIMLOCKmodem codes
with stock firmware21.180.xx.xx.nx 21.210.xx.xx.nx, preserving the factory firmwarewithout the Needle Method
- 1. You must have drivers in the OS: HUAWEI_DataCard_Driver and Fc serial driver
- 2. Open ports
- 3. AT Terminal or DC-Unlocker set the modem to Factory mode:
at ^ sfm = 1
and
at ^ reset
Close Terminal or DC-Unlocker
- 4. Use one of the calculators:
_ OEM:Huawei_codereader_v4
_ OEM, NCK, UNLOCK:Huawei E3372h Calc
_ OEM, NCK, UNLOCK:Huawei + Calculator
- Unlock (UNLOCK):
- Directly in the calculator.
- at ^ cardlock = "NCK code"
- at ^ nvwrex = 8268,0,12,1,0,0,0,2,0,0,0, a, 0,0,0
- Change IMEI:
- Change of OEM and SIMLOCK:
- 5. Disable Factory mode in the Terminal or DC-Unlocker:
at ^ sfm = 0
and
at ^ reset
Close Terminal or DC-Unlocker
- 6. Installation in ADB modem:
- Install ADB. Autorun ADB and Telnet. The atc program for executing AT commands from the Linux console of the modem
- Install in ADB modem.(Do not perform "3.Razreshaem console ports: AT ^ NVWREX = 50577,0,8,1,0,1,0,0,0,0,0")
- 7. Backup: download Full_nvram_mtd_backup.rar and remove backup.
___________________________________________________________________________________________________________________________ Testing
Radical recovery option:Complete erasure flushes with potting dump through fastboot
Ineffective withrealbedblokah - only a replacement chip flash memory. Location flash chip and processorApplicable in case of failure of the standard, erasure psevdobedblokov: "
Modem recovery by erasing flash partitions via fastboot "
It is also carried out - paragraph by point, with a slight revision: - 1. Connect the modem through the port interface USB 2.0 (In the system unit, connect to the USB connectors on the rear panel.)
If it is possible, then remove the full backup from your modem, (it is done simply - special knowledge and a lot of time is not required) - the firmware should be with ADB.
Based on scripts fromanvldko:
Full_nvram_mtd_backup.rar(145.48 KB)
- 2. To install drivers if this has not been done before.
- 3. If Windows - 8.1 or 10 to execute BOS_solution_2.reg (take here ).
- 4. To install ADB driver (better 1st option by running Driversetup.exe ), if this has not been done before.
- If in Windows8.1 or 10 In the Device Manager for "Android ADB interface", a yellow triangle appears with ! inside, first, try installing the driver manually on this device HUAWEI_ADB_Driver.rar for the bitness of its OS through hw_goadb.inf
- If in Windows10 no result then set latest update .
- If after updating a triangle with ! it still remains inside, then you need to switch USB to 2.0 mode, via XHCI in BIOS:
- "Advanced" (or "... Peripherals") -> пїЅ USB Configuration -> пїЅ Xhci Pre - Boot Mode ->Set "Disabled" ->Save and exit BIOS
- In different BIOS names may vary - to navigate on the selected.
- 5. Translate Modem in special mode - USB Boot :
- If the modem firmware with ADB, you can use the script:Entering the device in emergency boot mode
- Connect the modem to the computer with the emergency boot contact closed (see "needle method"). The modem should be defined as a single serial port "HUAWEI Mobile Connect - 3G PC UI Interface ".
- 6. After unpacking the necessary attached archive, run the script go.cmd (not from the Administrator!). After running balong_usbdload, the modem should be defined as an ADB device.
- 7. Upon completion of the script, the modem will be in download mode -> PrintReplyDownload.rar .
Replace identifiers, codes and passwords for your modem -->Useful commands to restore NVRAM
If in the backup mod. firmware with ADB, Telnet, unblocked AT commands ... and the connection to the modem is established via Telnet, then it is not necessary to transfer the modem to Debug Mode and enter:
- atc at ^ datalock = "OEM"
- atc AT ^ NVWREX = 33,0,4,2,0,0,0
- atc AT ^ NVWREX = 50577,0,8,1,0,1,0,0,0,0,0,0
To flash the modem with the desired firmware - the official flasher (* .hehe - not a huavei flasher or balong_flash!) and WebUI.
If needstock firmwarefrom the backup and in the public domain it is not, then you do not need to flash it - just take it out of the download mode.
On the basis of scriptsfrom
rust3028:
Pn - ForE8372h-153_.778_recovery.rar:
OEM code: 83862615
AT ^ DATALOCK = "83862615"
- ForE8372h-608_mod_recovery.rar:
IDs, codes, and passwords are set to zero.
- Recoveryfull backup from your modemwithoutraised bit eFuseit is necessary:
- Unzip backup sections from your modem
- In any of the scripts (E8372h-153_.778_recoveryorE8372h-608_mod_recovery )
replace the existing backup with your ...
Write the results to
topic Ask any questions in
QMS ___________________________________________________________________________________________________________________________ The ability to accesslinux console, onmodifiedfirmware, through the port (not ShallB)
and putting the modem into boot mode, if the commandAT ^ GODLOADnot supported
- Open ports .
If you can’t just open the ports, then transfer the modem togateway mode and flash the desired firmware in the usual way.
If the firmware gives an error and the commandAT ^ GODLOAD not supported - go to the next item ( 2 ).
- Enter the command:
at ^ sfm = 1 ( or 2 )
and
at ^ reset
- ATTerminal open port HUAWEI Mobile Connect - 3G Modem ( analog ShallB ) -->(only in 8372: in 3372 it does not work - I have not tried it on others - it is not available ...) and enter it sequentially:
Not necessary:
- Close the terminal immediatelynot rebooting modem, run the firmware file ...
___________________________________________________________________________________________________________________________ Change device IP address: - WAN IP (the address in the global network - the Internet - External IP)
- This is the address of the device on the Internet, which is issued by a special provider device (BRAS, VPN server, etc.).
You can register anything, but it will not work, of course, because the routing provider will not provide this new address.
- It is possible to change the IP WAN without turning off the power and restarting the modem:
- In the web interface, byswitching network modes (Auto<->LTE<->UMTS<->GSM ...);
- In some regions, with some operators -disconnecting and connecting to the network (in remote control, in Control Panel, in WebUi);
- You can change the IP WAN by rebooting the device in any way - the time to reboot, regardless of the method, is approximately the same ...
- Script to change and then check the IP address, regardless of the firmware.
Checked byIP address of the provider's gatewayfrom which you are accessing the Internet and which shows the servicehttps://2ip.ru/
- LAN IP (local network address - Internal IP)
........................................................................................................................................................Installing DNS servers sent by the modem via DHCP: - Installing DNS servers sent by the modem via DHCP (set_dns_e3372h)
- In the modified web interface:
- WAN: Settings - Dial-up connection - Profile management - "New profile" - Assign the necessary DNS - Apply ...
- LAN: Settings - System - DHCP - Assign the necessary DNS - Apply ...
........................................................................................................................................................ Decryptionhttp://192.168.8.1/api/device/signal : On the page that opens, right-click (touchpad) and select "Page Source", where you will
signal parameters with decoding .
The indicators are not dynamic - you need to reload the page.
Note:The link is fully functional if the firmware is modified or factory firmware is not higher.
21.313 ...
___________________________________________________________________________________________________________________________ InstallationAdb. AutostartAdbandTelnet. Programatcto execute AT-commands from the Linux console modem
- Getting access to the Linux console and installing ADB
- Starting from 2x.317 3rd firmwareBesides
AT ^ NVWREX = 33,0,4,2,0,0,0
next, you must still perform
AT ^ NVWREX = 50577,0,8,1,0,1,0,0,0,0,0,0
- Program for executing AT commands from the Linux console of the modem (ADB must be installed in the system and modem firmware)
- Can be transferredatc with help ADB plugin (without ADB in the system, but with ADB in the modem firmware) and in Telnet or linux console only set permissions to execute:
chmod 777 / system / xbin / atc
___________________________________________________________________________________________________________________________ Disable online update and redirect WebUI page
If installed mod.veb interface
WEBUI_17.100.15.02.2h _RE5_MRE5_HILINK_modThen apply
Disable online update and redirect WebUI page not required - implemented in the mod.veb interface. If a
Disconnect was used previously, you should familiarize yourself with
* Important! Without flashing: - Option 1.
Firmware must be with ADB.
On the basis of the scriptno-upfromsatgenerator :
no_update.rar(269.55 KB)
- Option 2.
Firmware must be with ADB.
With helpADB plugin
- Via Telnet or Linux console modem, enter the command
mount -o remount, rw / app
To findupdatealong the way: / app / bin / update
Next, choose one of the shutdown options:
- Copy and save originalupdatein PC OS
Deleteupdatefrom / app / bin
- Rename and, in the same place, create emptyupdate
- Optimally:
_ Copy and save originalupdatein PC OS
_ Delete contentupdateand leave an empty file to remove the extra "weight" and, so that the logs do not constantly write about the absenceupdate
Close File Manager and enter the commandmount -o remount, ro / app
- If, further, it will be necessaryupdate via web interface:
Via Telnet or Linux console modem, enter the commandmount -o remount, rw / app
- Rename back the original name
- Close File Manager and enter the command
mount -o remount, ro / app
reboot
Go to Step 2
- Recover deleted or replace emptyupdatepreserved original
- Close File Manager and enter the command
chmod 777 / app / bin / update
mount -o remount, ro / app
reboot
Go to Step 2
- Run update via web interface
- Choose one of the shutdown options (see above)
- Option 3.
If the firmware without the ADB, that the presence of OEM-code, it is possible to renameupdate via Linux modem console.Access to Linux console and commands in it
- Install:HiLink modem port driver
- Switch modem to port mode:
- Switch device in Project / Debug mode
- Or inDC-Unlocker(Run as administrator) define the modem (select "Auto-detect" and click the magnifying glass if the ports in the Device Manager [Remote Control] do not appear ->press magnifier again or restart DC-Unlocker ->if the ports do not appear again in the remote control - reconnect the modem ->and determine DC-Unlocker again. ) ->close DC-Unlocker.
- ConnectTerminalto portFC - PC UI Interface and enter the command:
- Unlock commands for writing to NVRAM
AT ^ DATALOCK = "OEM code"
- Enable console ports
AT ^ NVWREX = 33,0,4,2,0,0,0
- Allow console ports (Starting from 2x.317 3rd firmware )
AT ^ NVWREX = 50577,0,8,1,0,1,0,0,0,0,0,0
- Reload
- Translate modem toDebug mode.
- ConnectTerminalto portFC - ShallB
- Press the "Enter" key - you should be prompted to enter a password:
Password length is 0, ERR!
Login failed
Password:
- As a password, enter the OEM code. If the password is correct, the prompt "EUAP>":
- Enter sequentially commands:
mount -o remount, rw / app
mv / app / bin / update / app / bin / update0
mount -o remount, ro / app
If necessary, returnupdate :
in the previous block commands insteadmv / app / bin / update / app / bin / update0
enter commandmv / app / bin / update0 / app / bin / update
- In the terminal to close the portFC - ShallB in the same place, click "Port", select FC - PC UI Interface and open it:
- Close port terminals and the terminal itself.
Used posts:
rust3028
ilya-fedin
___________________________________________________________________________________________________________________________ Change and consolidationIMEIin modems with firmware.1456/.1460
Option 1. Option 2. - Change IMEI in any way:Various ways to change IMEI
If the firmware with ADB, then fix this:Fixing IMEI in devices on the platform V7R11 and V7R2- notAT ^ INFORBU
!!! After the change and consolidation of IMEI do not restart the modem before executing the command "rm /online/00000.nvm" in telnet or script application "after at ^ inforbu apply this" :
- Run commands in Telnet:
- rm /online/00000.nvm
and
reboot
- Or, instead of commands, use the script:
___________________________________________________________________________________________________________________________ Check the current setting and fixationTTL
Note:
- Firmware should be with ADB
- Check to make when running the browser
- fixing confirmation - the same reading of a fixed TTL value
___________________________________________________________________________________________________________________________ Firmware modems and routerswith a raised bit comprising secuboot in eFuse,and blocked the teamAT ^ GODLOAD
Instructions for the firmware to Zong modems, Bolt or Telenor, with firmware 21.327.62.00.1460 or 21.327.62.00.14561.Run
1 and
2 Instructions points.
2.Choose:
- Or continue to the end of the paragraph the same instructions ...
- Or without performing items3-7 and in 8 Only th " How to change and make IMEi Fix TTL, seethen with 3 points "Download Huawei_UPGRADE.7z Carefully examine Be sure to prochteniiyu.txt and act as described therein.
OEM code is not required.
100% operation Huawei_UPGRADE the first time and without fail, even on devices with firmware which is considered a virus.
Huawei_UPGRADE.7z(9.98 MB)
Activation of locking and setting the desired value TTL
AT
Telnet:
mount -o remount, rw / system
echon >/ system / etc / fix_ttl
mount -o remount, ro / system
reboot n - the required number of
1 = 64
0 - fixing the disabled
Removing mandatory password for access to the Linux console through Telnet in mod.proshivkah 21.327.62.00.1456 (1460)
1. / system / etc / - Deletepasswd and passwd-
- Renamepasswd_def at passwd
- Editpasswd.sh - completely replace the contents of the file to this:
#! / system / bin / busybox sh
grep -q "root ::" / system / etc / passwd
if [$? -eq 1]; then
if [! -d / data / root-home]; then
mkdir / data / root-home
fi
if [! -f /data/root-home/.profile]; then
echo "cd /">/data/root-home/.profile
fi
echo -e "#! / bin / sh \ n \ nbusybox login -p">/sbin/login.sh
chmod 777 /sbin/login.sh
busybox telnetd -l /sbin/login.sh
else
busybox telnetd -l / bin / sh
adbd &
fi
uid = `busybox cut -d: -f3 / system / etc / passwd`
if [$? -eq 0]; then
if [! $ uid = "0"]; then
mount -o remount, rw / system
busybox sed -i "s / $ uid / 0 /" / system / etc / passwd
mount -o remount, ro / system
fi
fi
2. / var / 3. Now you can install and remove the standard password:
- Password setting(For example: the sameIMSI ):
mount -o remount / system
busybox passwd
...
reboot
- Delete password:
mount -o remount / system
busybox passwd -d root
reboot
- When a password is set ADB-server startup is performed either by removing the password, either manually:
- The password is "blind."
Working light on the modem SMS E8372-153modified firmware 21.327.62.00.1456
1. The easiest way: the jumper between the cathode pads
2. Optimal: set RGB LED with common anode.
___________________________________________________________________________________________________________________________ Flash and Unlock BOLT Zong E8372h_21.328.62.00.1456and21.329.63.00.1456
1. firmware build date must be
2017 or
2018 year, but not
2019 !!! - otherwise okirpichivanie modem. You can check in
Terminalor
DC-Unlocker-ethrough the command:
AT ^ VERSION? ^ VERSION: BDT: Jul 28,
2017 (or
2018 ), 18:07:12
2. Install the driver package
HUAWEI_WinDriver_v2.78.12.00_setup.exe And upon completion of the firmware to remove it and restore previously deleted drivers.
3. Flash
E8372_21.327.62.00.1456_WEBUI_20.100.05.10.1456_RE5 :
- DATALOCK sewn without request, i.e. OEM code is not needed;
- You can simply run.exe You can pre-enter AT ^ GODLOAD ;
4. Unlock in mod.veb interface ...
___________________________________________________________________________________________________________________________ Restoring modemswith a raised bit comprising secuboot in eFuse,without psevdobedblokov
- 1. It is necessary to know exactly the end of the firmware and the name of the company (which eFuse).
- 2. to flash through gateway on modproshivku same eFuse.
___________________________________________________________________________________________________________________________ Correcting information about discrepancies in the WebUI version of DC-Unlocker
At discrepancy information WebUI version in DC - Unlocker:
Version of the Dashboard: and
Web UI version: - use a scripterase_oeminfo-mtd6 - firmware should be with ADB
- to flash in sequence:
- selected mod.proshivka
- Selected WebUI.
Based on a script by
rust3028:
___________________________________________________________________________________________________________________________ List of cellular base stations (BS) and a fixation channel carrier frequency
In 2G3G mode: 1.
Search for cellular base stations Russian MNC codes
MNC (Mobile Network Code):
01 - MTS
02 - Megaphone
03 - NSS
05 - ETC
07 - SMARTS
11 - Yota
12 - BaikalWestCom
16 - New Telephone Company
17 - Utel (former Ermak RMS)
20 - Tele2
35 - MOTIV
37 - SkyLink
39 - Rostelecom
99 - Beeline
2.
Implementation research of cellular base stations3.
Implementation of fixing the base station lock the desired channel(Takes effect after restarting the modem):
- AT ^ FREQLOCK = 1, N
AT ^ FREQLOCK = 0 - 0- unlock
- 1- lock
- N- the numerical value of the desired channel
- AT ^ FREQLOCK?- status check
In the LTE mode: 1.
Huawei E3372 (MTS 827F / 829F, megaphone M150-2, Biline E3372 / E3370, TELE2 E3372h-153) - Discussion (Fasting rust3028 # 61784769) - It is possible to lock on a channel view changing whether Cell ID (BS) and select Cell ID (BS) according to parameters optimal ratio signal and loading / unloading speed ...
- For example: Megaphone can use these frequency channels ->2825 - 2850 - 2975 - 3048 - 3100 in range B7 (FDD 2600)
- But may be as follows: in the range of only a single carrier channel frequency.
- LTE frequency:freq_EARFCN.pdf
2.
Fixing the channel carrier in the LTE ___________________________________________________________________________________________________________________________ Rostelecom and TELE2 profile for LTE
If there is no LTE connection on standard profiles,
register profile:
APN (Access Point):internet.rtk.ru
Login (Username):- empty
Password:- empty
___________________________________________________________________________________________________________________________ Post has been edited5358 - 12.07.20, 10:46