Just gotten this ONU for testing purpose as I was wondering, are we able to use our own router by setting up a bridge mode on this ONU.

Just an idea about the ONU

HG8240 suppose to replace the HG850a which supposely at the EOP (End of Production) @ 30th June 2011


The unit is actually almost identical as HG850a



BBU port for the battery pack incase of power outage & reset button (Important!)



A fresh login page


Sample of WAN configuration



Okay, now you may ask "why do I need this ONU instead of the one provided by TM"?
- As you know Unifi equipments cover with only 1 year warranty. So, chances are, they gonna charge you for a sky high fee for ONU replacement. Actually you can get the Huawei HG850a/HG8240 ONU at a resonable price from online source.
- You can use any router which does not require any VLAN Tagging

Prerequisite
--------------
1) You must be the owner of TM branded HG850a. As far as I understand, ONU is dependent at OLT. if your area covers with Huawei OLT then it should be safe. I cannot guarantee it will work for those early Unifi adopters who are using FiberHome ONU.
2) It is a MUST to obtain the PON password from existing HG850a. Although TM blocks the access to ONU interaces but it is still possible to grab the configuration XML. You won't able to establish the FTTH link if you do not have PON Password. Certain OLT does not require PON password to establish the link... again, it's area dependent.
3) SIP VOIP account information.


Features that confirmed working
-------------------------------------
1) To able to use own router without VLAN capability.
2) VOIP is working as expect. Unfortunately the HG8240 version I have does not support SIP! It uses H.248 as VOIP.

Feature that has not been done
-------------------------------------
1) IPTV. After spending hours on looking at it without a solution at 3++AM.. I really have to stop... IPTV requires IGMPv3 enable in order to view the content however, whenever I tries to enable IGMP on VLAN600, it always prompt me with "Conflict with the WAN global IGMP"...


This should be a good solution for SME as IPTV is not needed and enterprise firewall can directly connect to the ONU without needing an extra device.


I am willingly to loan to any of you who are interested in 'investigate' more on IPTV side to make it working. If IPTV is working then perhaps, this will be one of the best solution around for everyone...

*Note: I'm not selling any of the product here... its just purely based on my personal interest to find out more solution...

This post has been edited by thankyou: Dec 15 2011, 05:17 AM

nice work bro

if tm is using huawi at exchange then best to use hawi right... same chipset and everything

heh i remember when i saw all the ports on the tall white vdsl box WHY tm dont make that box do all? why need two? it must be just software limit...

then wonder maybe becoz some r vdsl and some fiber.... so they just make standard router for all and then the modem (vdsl or fiber) just connect as modem and provide the phone.....

this one u got how much?

Errrm... I'm not too sure about the decision made by TM to have everything connect over router... Perhaps there might be some limitation on the Huawei ONU?

the unit is actually RM180++ only... but the shipping from China is quite expensive... so the more unit... the cheaper it is... Total damage is about RM280...

Bro but AFAIK the GPON are Unifi's property and IINM its warranty are "lifetime".

Because if you read the "termination" clause, it says the GPON must be returned to Unifi, and the rest of the hardwares aka router, dect phone, and the IPTV need not return because it belongs to customers

Anyhow, this thing only available at China?
Which shop/location sells it?

I might able to get some when my dad's China friend comes to KL..
Btw its not taxable is it? Computer hardwares are tax exempted no?

I don't know bro... I did not get tax because the total cost was not more than RM300...

I bought it from this website:
http://www.aliexpress.com/product-fm/48499...holesalers.html

Not too sure if we can find it at retail store or not... The unit seems to ship from Beijing... but you have to make sure to look for SIP Version... H248 version will not work for Unifi VOIP...

If i'm not mistaken, networking products are taxable...

This post has been edited by thankyou: Dec 15 2011, 11:36 AM

If what you say is true and TM insists on retaining ownership of the ONU, it means there's a serious security backdoor with their GPON network.

Anyways, you can view the many models that China dealers are flooding the market with. Some sell them expensive and some sell them cheap.Most quote in USD currency.

http://www.aliexpress.com/fm-store/208276/...6/GPON-ONU.html

The Fibrehome unit is one of the cheapest models we have in the market.

Note that Telkom Indonesia is already using the ZTE ZXA10 for their Groovia FTTH service:

---

Added on December 15, 2011, 11:43 amLooks like you beat me to it when showing the link.

But for the price a little expensive. Try Taobao. There are also some China runners based in Singapore where you can get from them with similar price and save on freight cost. some throwing prices as low as USD30-40 only..

Those order in large bulks such as TM get them for even lower prices in sub USD20 per unit..
Imagine the profit them make.

Chinamen will undercut your prices to near unprofitable margins just to get the deal through.


This post has been edited by iipohbee: Dec 15 2011, 11:43 AM

WaCKy-Angel: I had asked for the warehouse address in Bejing if you are interested to get it directly:

北京市，海淀区，中关村北二街，水清木华园，6号楼，B102。
Phone: +86 13146361816


iipohbee: Yes, I saw that ZTE model as well... but I'm not too sure if it is compatible with Huawei OLT?

http://ann.dj/HG8240/P1090681-Masked.jpg
I have attached a sample of the configuration from TM Unifi... as you can see, they actually match the OLT with ONU unit... let me bring this Huawei ONU to a friend house who are still using FiberHome...

Yes... no doubt it is a lil expensive... All the 'damage' I have to absorb are purely based on interest... heading on to Taobao to check it out!

Cheers~

http://www.unifi.my/unifi/index.php?option...d=53&Itemid=210

YES im very sure the GPON aka BTU are Unifi's property and its lifetime warranty (as shown in the link above)..
Only the CPE (Customer Premise Equipment ) aka the RG, Dect phone, STB are 1 year warranty.

So i dont see any substantial reason to purchase the GPON if the quality are the same with the one provided free.
Unless this one has wifi funtion that i can discard the RG.

This post has been edited by WaCKy-Angel: Dec 15 2011, 12:29 PM

Ahh... Lifetime Warranty!

http://item.taobao.com/item.htm?id=13024790629

Interesting... its much cheaper over there!

how about other brnad?? any erricson or alcatel or other fancy brand can use with unifi?

If TM wants to reserve their ownership rights upto the ONU itslef then why must subscribers fork out extra if they exceed 15m of fibre length? Everything before it reaches the ONU MUST remain to be TM's property so subscribers should be given FREE fibre right up to the ONU.

If you're using Singtel's exStream FTTH service in Singapore, then you might want to consider using Ericsson ONT. Singtel is the ONLY Singapore ISP now using Ericsson GPON solutions there which is a very good decision based on their worldwide reputation.
The rest of the isps Starhub, M1, LGA, SuperInternet, all are using Huawei.

Singtel Mio also uses 2Wire HGW and Cisco's IPTV STB

HKBN is using AlcaLu.

But I suggest you stick with the same brand as your area's OLT to avoid complications.

Of all the GPON equipment vendors I guess Ericsson is the most trusted one.They help built many European networks.
For AE, PacketFront, Calix and Cisco.

U have a point but u cant do nothing about it. Take it or leave it lol.

When you get cheap equipment suppliers this is what you get. They will have lots of backdoor dealers who flood the free market with the same product at dirt cheap prices.

This wouldn't have happened if they opted for more reputable brands and higher end models like Ericsson, Alcatel-Lucent or the Huawei model HG863 4GE ports that is used by NucleusConnect, Singapore and Netvigator HK.

Is there any substantial reason to purchase a stray GPON ONT you asked? Yes of course, a serious security flaw if you ask.

We are using even cheaper models that what China Telecom supplies and what is rejected by Singapore and HK telcos.

Take a look at this link:
http://www.aliexpress.com/fm-store/208276/...6/GPON-ONU.html

The unit which cost >USD$90 has China Telecom logo on it.

dear iipohbee,

we don't want to hear your stupid bullshit 'other vendors must be better than TM' stories lah.

can you please keep quiet for a while and let other people enjoy the thread.

thankyou,
you might be on to something interesting here. when you mention PON password, is it the admin page password or the serial number of the PON?

Ok. I'll refrain from posting from now on.

Don't get too worked up ya, Datuk. Please treat all the conversations we had earlier lightly as jokes.

What is the "security flaw" you mean? The remote management that is ON by default, and the admin password?
Well if the user are really keen to learn, im sure they will be able to find out and turn it off.

And then again, other supplier are also the same they have to configure the the default admin password too.
The difference is that users has to configure it and they have the option to change the password, and regular normal users rarely even touch all the hardwares for they hope not to touch anything that might make it problematic.

Apparently until TR-247 ( http://www.broadband-forum.org/technical/trlist.php ) being finalized and followed by vendor, we can't see interoperability between two different vendor yet for GPON afaik.

Btway thankyou, do you have source to get all-in-one VDSL2 modem over China, as VDSL2 is capable to be serve no matter what equipment TM being used anyway

---

Added on December 16, 2011, 6:31 pmhttp://item.taobao.com/item.htm?id=12348258680&ad_id=&am_id=&cm_id=&pm_id=

SIP and WLAN available...

This post has been edited by amirsubhi: Dec 16 2011, 06:31 PM

Chill everyone... every information/feedback are welcome, but I have to admit that why TM choose to go for HG850a especially they understood that it is at its End-Of-Life term... I agree with iipohbee that we deserved a better equipment since our FTTH subscription didn't come cheap!

ihsan, the PON password is the one you mentioned on the admin page. If you logged in with 'telecomadmin' user, you should able to see it at the bottom of the menu bar. Alternatively, the backup XML should have this information as well.

Just FYI everyone, TM did turned off every single access through WAN/LAN port by default... TR-064/TR-069 CPE management is the way they control our ONU/BTU & Router.

amirsubhi, I'm not too sure... Actually I'm just another person like you who browse through aliexpress/taobao to look for alternative source... The HG8245 is nice if you just want something 'all-in-one' without any complicated configuration...

Note that all the newer Huawei Home Gateway comes with Gigabit port by default!

Ahh, now 850a afaik is been firewalled and I was wondering if I buy a huawei logo one, can I access it and set up my maxis fibre? Also, i dont know much at how maxis setup their voip which is on the router. Why cant this be on the GPON itself? Or a cheaper way is to flash 850a it to oem version?

nice, I'm using the b970b router from huawei, it works great.

2) It is a MUST to obtain the PON password from existing HG850a. Although TM blocks the access to ONU interaces but it is still possible to grab the configuration XML.

How do we get the XML configuration from HG850a?

I wanna know how too. I have created a small script to repeatedly poll the HG850a while it's being booted up and there's a ~5 second delay before the firewall kicks in.

Apparently the password is no longer admintelecom... Is there a way to obtain the configuration XML?

There is a router password cracker out there that even does brute force on encrypted pages as well.
With a good dictionary and some patience you know the rest.

I actually figured out complete access to the HG850a, thanks to a little help from thankyou. To stay on the safe side, I won't release details here; steps are also relatively complex. But if anyone is interested, can PM me.

hi bro
can pm me the detail for HG850a??
thanks

PM me too..

anyone has any idea how to access the new 8240w? it's a silver TM box... i've just install maxis fiber yesterday... got the custom router to work but am looking how to access the device to make changes so i can ditch the thompson altogether...

or at least make other lan ports available so i can use the thompson for the voip...

This post has been edited by osxchd: May 15 2013, 06:34 PM

Does anyone instested on hg8245 for setup on Maxis/fibre , then we might have a discussion in penang ? PM me

Hi,

I am trying to access the HG850a for use with a custom router (Asus AC-68U) but I can't get the LAN3 to open. So no VOIP for now.

Please PM me the details.

Thanks.

Hi TS, I got a order job sheet with all the passwords provided my the TM Technician. However, I never access into my BTU. My BTU is Acatel Lucent I240G-T. I am deciding to buy a custom GPON from taobao. First reason is because I can't access to the TM stock BTU. Second reason is, my Unifi advance 30mbps only get 28mbps. I am suspected that my BTU was capped the download speed by the QoS setting.

I am deciding to buy a Huawei HG8240F, this is a GPON ONT, support both SIP and H248. I am now placing order with this product and wait for Taobao forwarder agents to confirm my order at tomorrow. Will this ONT support Unifi? What are the important things I need to do on the settings if I don't have backup from any same model xml?

I need to do more research and set it myself. At least I got a copy of order job sheet with a full list of my Unifi ID password, Hypptv and residential password. I also read through many posts from above to understand that Unifi is support SIP. I was also know that Unifi is a GPON type broadband.

This post has been edited by junclj: Apr 5 2016, 11:31 PM

Doesnt work as your current BTU is ALU

I never decide to backup my current BTU xml to restore into that Huawei ONT, I just want to buy a new ONT to try my luck to do my brand new settings. Just price RM150 only not expensive also. If failed to connect then just throw it, nothing lost. I still got my TM BTU there. However, I will try my best to Google everyday until I find a great tutorial to do that Unifi custom setting at one day later.

At least I know that TM BTU was bridged and DHCP disabled. Just like last time I was set my streamyx modem as bridge mode, then I set my D-Link router with streamyx ID/password. I plug my LAN cable to WAN socket at the back of my router. I disable the DHCP of the router to let all my devices connect directly to my modem. My router IP access was blocked, I have to press the reset pin to reset my router to reconnect my router through my PC.

This post has been edited by junclj: Apr 6 2016, 11:05 AM

The things is, there are no real universal ONU, so far GPON are locked with their respective vendor,

If you really want to buy and try your luck, search for ALU brand

double posted,

This post has been edited by amirsubhi: Apr 6 2016, 11:13 AM

Thanks for advice, I was replaced to Alcatel Lucent I240E-P. Not sure whether it's same like the TM I240G-T.

Found this ALU I240E. The back side looks quite similar to the TM BTU but not sure what does SFU mean.

This post has been edited by junclj: Apr 6 2016, 01:05 PM

So how is the result? Did u manage to make it work? That qos settings sound interesting. If its working, i might wanna change mine for the unifi advance 50mbps at home. Its not so 50mbps, more like 46mbps. Not complaining, just wondering if i can hit the 50mbps mark with just changing to a different ont.

Hi Hope your still reading this thread, im in trouble my Huawei 850a just die on me and its Raya holiday. I just bought a Huawei HG8240w and need help to set it up cause it was factory default, anyway can share the setting info?
TM on leave and God knows when they will respond.

Hi,

There's nothing you can do if HG850a dead and you do not have a backup of the configuration file. You will need PON password in order to configure HG8240w.

PM me please... Tq

ignore this post pls

This post has been edited by miloaisdino: Apr 15 2018, 01:57 PM

Pm me pls

removed

This post has been edited by junclj: Nov 8 2018, 11:33 AM

ok, a technician who is expert in networking was told me that it's doesn't matter no matter I replace to which brand or model of BTU (GPON ONU) as long as I have the ONU password. So I was asked the technician about which is the ONU password and he was told me that which is a 6-digit residence voice password. Which is the password of our Unifi +60xxxxxxxx voice call.

I am currently using Alcatel Lucent I-240G-T. Due to a guy in previous post was misled me and told me to buy only the same brand and model. In the end, I was ended up fail to configure the Alcatel Lucent GPON which I was bought from China before because the modem is not user friendly and I don't have knowledge to access this crap China Alcatel Lucent modem.

So now I am now ordered a Huawei HG8240 from China, the GPON modem is still on the way of delivery. So if I no reply in this post or make feedback in a new post after two weeks that's mean my plan was failed. So I won't make any noise in here again. I will create a new post in lowyat to share out my experience if my configuration on this HG8240 is successfully to connect to Unifi FTTH.

The Huawei HG8240 that I was bought is a GPON modem router, meaning that, if I don't want to use this modem as router, I need to bridge it to LAN1 in order to connect it to my Asus router.



There got 3 ways to access this modem router, first method is through NMS, second method is through OLT CLI, third method is the simplest one, through web page. So the settings in here looks promising to bridge for this HG8240.
Bridge mode settings:
VLAN ID: 500 (Should be normal internet access)
Multicast VLAN ID: 600 (what is multicast VLAN ID, I just search in google which mean multicast stream, so I guess is IPTV)



Besides that, I was read back from the old posts back to year 2010. Many of the forumers who were discussed about the configuration of VOIP.

The settings are usually doing like the following:
number: +60xxxxxxxx (unifi phone number)
login ID: +60xxxxxxxx@ims.tm.com.my
password: 6xxxxx (6-digit pw of Unifi residence voice)
primary proxy address: 10.225.0.1
primary proxy port: 5060
proxy address: ims.tm.com.my
proxy port: 5060
domain: ims.tm.com.my
VLAN ID VOIP: 400

here are the compulsory settings so far I get from previous old posts.

So it should looks promising to configure this HG8240




In the end, the ONT authentication part. This part should more struggle to me but the technician which I was asked for was told me that as long as I just need to insert the ONU password.

I not so sure about this part, if I really can just to insert ONU password in here or just to leave it blank? So after two weeks later I will not post feedback if my configuration was failed.


This post has been edited by junclj: Nov 8 2018, 11:57 AM

auth mode should be password i think

http://support.huawei.com/enterprise/zh/do...92?section=j00n

This post has been edited by miloaisdino: Nov 8 2018, 01:50 PM

been watched in here but not the 6 digit residence voice password. He was type more than 6 digits. So confusing about this part. Not sure what should I type already, refers back to my Unifi order job sheet but don't have password with 10 digits in there.


This post has been edited by junclj: Nov 8 2018, 02:14 PM

u have to login into your existing btu web interface /telnet to retrieve the onu password. Thankfully there is no sn auth. Same should go for voip, remember to provision a separate vlan 400 interface for that, password should be different and found using inspect element

Hi, it's story time.

1. I SSH into the BTU to try all the possible commands and retrieved whatever information that is possible, and also wish to reset the BTU so I can configure my own without getting the ONU password in the first place.

2. I use restore manufacture and reset command to reset the BTU

3. The BTU is now empty and I used the default username and password to login to BTU. Just realized oh shit, I don't have the ONU password and I can't do anything without that. I called 100 explained until my saliva dry, they don't know what 7 is ONU password / authentication or even xml configurations.

4. I saw the ticket is assigned to a technician with his name, but until evening he didn't call me yet. I dig him out on Facebook and asked him. He provided me the ONU password and confirm with me if it's working. Yes, it's working, he was relieved as he do not have to come over.

5. I entered the ONU password, Internet was restored. Not satisfied as I was locked out.

6. SSH in once again and change some settings, When I entered the ONU password I was locked out again but couldn't connect to Internet Tried to do a port scan using Nmap. Oh great port 22/23,80,443,21 are all filtered, only port 53 is opened.

7. Now I have learned that the ONU will apply configurations to BTU automatically when a correct ONU password is inserted, all the changes are exactly the reversed

HTTP Enabled > disabled
SSH Enabled > disabled
FTTP Enabled > disabled
Telnet enabled > disabled

Try to turn off TR-064/TR-069 CPE management before you insert ONU password.

So sad for Alcatel Lucent I-240G-T, tried to telnet 192.168.1.251 but not able to login. TM was completely hide this BTU IP address. I was read and watched the tutorial from some of the technician, probably they are working in TM before. They just ask us to reset this BTU is the only way to get login to this BTU via telnet.

There have an option to "retrieve SLID" inside the telnet and the login ID for this BTU is CRAFTSPERSON & password ALC#FGU but I still can't telnet to the given IP of this BTU unless I have no choice to reset this BTU completely.

This post has been edited by junclj: Nov 9 2018, 12:45 AM

may i know how is the onu password looks like? it is alphabet & digits combination or just digits? How many characters? 10 digits in total?

This is my PON password taken from HG850a configuration.

<PassWord PassWord="0000261296"/>

I got a GPON ONT modem I-240E-Q, I was tried 0000xxxxxx or just key in the 6 digits without 0000 in front in the SLID but both not working.

This GPON has not much settings and is not a TM BTU, I only can edit LOID or SLID inside it. Actually I got a residence voice password but not sure whether this 6 digits password is the ONU password?

I’m not dare to reset my current modem to test it, shopee got selling the same model I-240G-T but the seller rise the price from RM70 to RM210, so expensive.

This post has been edited by junclj: Nov 9 2018, 07:40 AM

u shd hv tried telnet in with gpon cable disconnected.. might work since omci connection fails

Try to open up the the case and check if you can identify the serial console terminal. I think that's the last chance...

Just open up a report. when technician called u just ask I just want the ONU password only

BUMP. Just for sharing.

End up I bought a used Huawei HG8240a from taobao, cost me around rm80 including shipping.

Gotten the ONT password from TM technician as well.
End up the password is unique for every zone i believe, but still starting with 0000.

Now is working fine lol.. enjoying 300mbps speed after turbo upgrade.
previously the bottleneck is the ONT FA port.

Why do you want to buy your own since TM provide free upgrade for Huawei HG?

But the advantage of having own HG is that you can strip VLAN 500 and add persistent VLAN 600 to one of the port.

There's no need for "Unifi supported" router after this...

Because I'm lazy to make report and wait for tm arrangement.
Plus I can have full control of the device in future.

But I noticed they blocked the ONT other LAN ports once its power up and online. Now I lost the lan connection to the box lol.

Try to reset the box and setup again. Make sure you turn of the management TR-069.

Do you need to put login for VOIP port on the Huawei router?

Yea. Will do it next time.
Now I don't think I need the access to the box again in short terms.