2.5G ONT for Unifi Ultra & Maxis Fiber (Maxis own Infra)
For Unifi Ultra customers subscribing to 1Gbps or 2Gbps plans, looking to maximize performance and resolve the 1+1 GbE issue to attain a pure 2Gbps connection through a single LAN.

Note to Foreigner
This post is specifically for Malaysia Fiber ISP (Telekom Malaysia). You can use this guide as a reference. Keep in mind that some ISPs may have a closed ecosystem, restricting users from using custom ONT. Be aware that this information may vary in other countries.

Where to buy
Contact Anime4000 via WhatsApp (click)
The PON Stick comes pre-installed with my customized firmware (Nijika/OpenWRT) tailored to the OLT vendor serving your area. This device arrives fully configured and is ready for immediate use, adhering to TM Standards.

NOTE: Not all OLT is configured equal, each area is behave differently, ISP may use many OLT Brands that respond differently,
many OLT giving O5 status but doesn't provide VLAN's. Investigation is required so I can properly configure and provide correct PON model,
don't worry, I can help you find it.

ONU Box
2.5G ONU Bridge (BTU) is available! Yes, typical BTU like Modem + Router.
Also no need VLAN support, you can use any router that don't support VLAN
Also... using same Nijika Firmware for additional improvement and bug fix
Post about 2.5G ONU Bridge here!


List of 2.5Gb Enjoyer
1Gbps subscriber can break Gigabit barrier!
1. lwk523 Breaking 1Gbps barrier!
2. izhamsatria (Recorded Maximum Unifi Biz Speed @ 2.1Gbps (12/Aug/2022))

Successful Client
3. ididhaiqal Unifi Ultra (2Gbps) SpeedTest Result
4. khjh1976 Unifi Ultra (2Gbps) SpeedTest Result
5. darkearth Unifi Ultra (2Gbps) SpeedTest Result
6. Off Lowyat User #6240 Breaking 1Gbps barrier: 1043Mbps DL, 522Mbps UP
7. Off Lowyat User #5740 #2 in Malaysia, 2118Mbps DL, 1043Mbps UP
8. powertech #7181 (Unifi, Unifi, Allo)
9. kinghz
10. jeebsion
11. dingo7
12. 5hinn
13. bigmojo
14. asellus
15. aztech
16. akifrabbani multiple 2Gbps deployment
17. sya102003
18. Silvermage93
19. Facebook User #1 in Malaysia, 2125.68Mbps DL, 1054.5Mbps UP Using Nijika Firmware Rel.: 240330
20. bigmojo Maxis own Infra, 2Gbps Plan: 2185Mbps DL, 950Mbps UP
21. petrofsky77
22. anthrax33
23. hizadzahid GPON ONU Box, FHTT OLT

2.5G ONU Box
1. OKLY
2. TM Employee (compatibility research)
3.

Supported ISP

ISP	Support	Universal	ME 171	Proprietary OMCI
TM-Unifi	✅	✅	✅	❌
TM-Maxis	✅	✅	✅	❌
TM-DiGi	❓	✅	✅	❌
TM-Celcom	❓	✅	✅	❌
Maxis NGBB	✅	Huawei	✅	Huawei Specific OMCI
TIME	✅	Huawei <1G	❌	Huawei Only
Allo	✅	Huawei & Nokia	✅	Calix Specific OMCI (Cyberjaya)*

*Has been verified with Pendakwah Teknologi, Calix has Proprietary OMCI and disallow non Calix ONT, only Cyberjaya use Calix OLT so far


Highest Speed Rank

Username	Download Speed	ISP	OLT
BigMojo	2185Mbps	Maxis own Infra	Huawei (Proprietary)
FB User	2126Mbps	Unifi	ZTE
Off LYN #5740	2118Mbps	Unifi	Alcatel-Lucent/Nokia

Username	Uplaod Speed	ISP	OLT
FB User	1054Mbps	Unifi	ZTE
Off LYN #5740	1043Mbps	Unifi	Alcatel-Lucent/Nokia
Off LYN #????	971Mbps	Unifi	Huawei

List High Performance Unifi OLT Rank

LOCATION	OLT	Max DL	Max UP	DSCP	Priority Queue
Shah Alam	ZTEG	2129Mb	1054Mb	❌	✅
Cyberjaya	ALCL	2118Mb	1043Mb	✅	✅
Kajang	HWTC	2098Mb	971Mb	❌	✅
Terengganu	FHTT	2080Mb	941Mb	❌	Broken*
Kuching, Sarawak	FHTT	609Mb	826Mb	⚠️	Broken**

NOTE:
* FHTT has broken Priority Queue cause Download and Upload speed are unstable and unbalance (example: 2047Mbps DL, 67Mbps Up)
** 1Gbps customer having broken OLT traffic queue where using PON Stick and stock ZTE ONT cause 1Gbps customer get +800Mbps upload speed!
Maximum ever recorded by my customer using my GPON

Verified 2.5G Capable Device
Here is a list of devices that have been personally verified by myself and the community to effectively handle 2Gbps without any speed issues.

Brand	Model	Type	Info
Mikrotik	CRS305-1G-4S+IN	Switch	4*SFP+, 1*GbE
Mikrotik	CRS354-48G-4S+2Q+RM	Switch	2*QSFP, 4*SFP+, 48*1GbE
Mikrotik	RB5009UG+S+IN	Router	1*SFP+, 1*2.5GbE 7*1GbE
Mikrotik	CCR2004-1G-12S+2XS	Router	2*SFP28, 12*SFP+, 1*1GbE
Mikrotik	CCR2116-12G-4S+	Router	4*SFP+, 12*1GbE
TP-Link	ER2260T	VPN Router	2*SFP+, 4*1GbE
TP-Link	ER707-M2	VPN Router	2*2.5GbE, 4*1GbE, 1*SFP+ via HiSGMII to 2.5GbE
TP-Link	Archer BE550	WiFi7 Router	1*2.5GbE, 4*2.5GbE. via HiSGMII to 2.5GbE
TP-Link	Archer BE800	WiFi7 Router	1*SFP+, 1*10GbE, 4*2.5GbE. via debug firmware
TP-Link	Archer BE900	WiFi7 Router	1*SFP+, 1*10GbE, 4*2.5GbE, 1*1GbE. via debug firmware
Asus	RT-AX89X	WiFi6 Router	1*SFP+, via beta firmware, no 2.5GbE LAN
Asus	ROG Rapture GT-AX11000 PRO	WiFi6 Router	via 2.5GbE WAN, 1*10GbE LAN
Asus	ROG Rapture GT-AXE16000	WiFi6e Router	via 2.5GbE WAN, 2*10GbE LAN
Asus	RT-BE88U	WiFi7 Router	via SFP+ (HiSGMII/2500Base-X Support)

Take Note!
Not all 2.5GbE routers can effectively handle 2Gbps via PPPoE. Some Mesh WiFi routers in Router Mode struggle to manage 2Gbps download traffic from the PPPoE interface, and certain routers experience buffer overruns due to the GPON upload limit (1244Mbps), resulting in reduced upload speeds.

List of known issue 2.5G device

Brand	Model	Type	Issue
Ubiquiti	UDM SE	Router	SFP+ incapable to support HiSGMII, PPPoE Client runs on CPU, 1.3Gbps is max download via PPPoE
Ubiquiti	UDM Pro	Router	SFP+ incapable to support HiSGMII, PPPoE Client runs on CPU, 1.3Gbps is max download via PPPoE
TP-Link	Deco BE65	WiFi7 Router	Downstream buffer overruns, limiting download speed to a maximum of 300Mbps.
TP-Link	Deco BE85	WiFi7 Router	Uptream buffer overruns, limiting upload speed to a maximum of 500Mbps via LAN, 100Mbps via WiFi

Several WiFi 7 SoCs may struggle to handle speeds over 2Gbps via PPPoE due to added overhead causing buffer issues. Running without PPPoE should resolve this.

2.5G Auto Neg
Next release will be 2.5G by default (HiSGMII/2.5G baseX) as SFP in Linux Kernel, Next revision info should look like this:


Typical Layout
The setup involves a GPON ONU Stick with an SFP+Router (AIO). If a specific router lacks an SFP slot, you'll need an SFP to 2.5GbE Converter via Ethernet cable.

Example use SFP+ Router


GPON ONU Stick Setup
In this guide, I'll show you how to setup quickly and safely for your fiber subscription. (Nijika based Firmware)

PRELIMINARY
1. Take note that GPON ONU Stick take time to boot, please wait around 1 minute.
2. Mikrotik require fiber to be connected inorder to access, it's safe to plug the fiber into my GPON ONU Stick (it wont trigger the OLT of rouge ONT)
3. All my GPON ONU Stick has been set to use D-Link DPN-FX3060V OMCI Information

Default Login
My GPON ONU Stick comes with default WebGUI and Telnet enabled. I suggest setting it up through the WebGUI rather than using command-line Telnet.

Address	192.168.1.1
Username	admin
Password	admin

NOTE: As SFP devices lack a factory reset button, it's not advisable to change the default IP address, username, and password. Forgetting these details can result in a bricked device that is challenging to configure. If security is a concern, make sure to note down the new IP address and password.

Login
Login with default credential


Device Status
You will greet with the Device Status page, take note on the Interface Speed, which mode and speed currently on.


PON Status
Usual PON Fiber status (Optical Reading) and ONT Authentication


PLOAM/ONU Password & Serial Number
Go to Advanced ➡️ GPON. Enter the Password and S/N from your D-Link. Press Apply once done.


Commit & Reboot
Once you have set the PLOAM Password and S/N, reboot the GPON ONU Stick, navigate to: System ➡️ Commit & Reboot

VLAN
When using PON Stick, use of VLAN is a must! The PON Stick ignore some OMCI, refer to VLAN page to check which VLAN is used

ISP	Internet	VoIP	IPTV	Management
Unifi	500	400	600	209
TM-Maxis	621	822	823	209, 821
TM-Celcom	623	-	-	209, 819
TM-DiGi	629	-	-	209, ?
TIME	499	140	-	121
Allo	990 (PPPoE), 992 (DHCP)	-	-	995➡️1501
Allo-Celcom	101	-	-	819

VoIP
If you plan to use VoIP, please bridge appropriate VLAN and keep in mind Tagging or Untag. Many home router like TP-Link, Asus, ... will untag the VLAN when bridge, mind this.
Second, ISP may filter DHCP request, make sure check your DHCP Option.
1. Unifi
2. Maxis
3. TIME by PRSXFENG

NOTE:
For Unifi, if VLAN400 not exist on LAN 1 (ME Point: 0x101, UNI: LAN 1), you can request VLAN400/VoIP on LAN 1, so GPON Stick/Box can use it

Troubleshoot
In the OMCI Specification, OLTs are responsible for provisioning VLANs, specifying which ones to bridge, the LAN port for bridging, and termination inside the ONT (IPoE) for TR069, VoIP, or both; the PON Terminal supports two methods of link termination, PPTP (bridging) and VEIP (bridging, IPoE).

In rare cases, the OLT may provision differently, leading the GPON ONU Stick to follow suit and bridge into non-existence. This need to override and correct the bridging...

Override the Forward Operation
Navigate to Advanced ➡️ OMCI FwdOp


Quick understanding the Entity Id

Type	FwdOp Prefix
PPTP	0x01XX
PPTP	0x1XXX
⋮	⋮
VEIP	0x0eXX
PPP	0x4XXX
POTS	0xffXX

VEIP is most common use for TR069 and VoIP, as these are stay inside ONT

Quick understanding the FwdOp (Forward Operation)

Forward operation	Received frame: Tagged	Received frame: Untagged
0x00	Bridging (a) (no investigation)	Bridging (a)
0x01	Discarding ©	Bridging (a)
0x02	Bridging (a) (no investigation)	Discarding ©
0x03	Action (h) (VID investigation)	Bridging (a)
0x04	Action (h) (VID investigation)	Discarding ©
⋮	⋮	⋮
0x10	Action (h) (VID investigation)	Discarding ©

Learn More OMCI specification Table 9.3.11-1:
 T_REC_G.988_202211_I__PDF_E.pdf ( 9mb ) Number of downloads: 504


Most common FwdOp is 0x10 and in rare case using 0x04

Example


If you see, the VLAN has multiple entry, if you like to bridge all except 209,

Syntax

EntityId	,	EntityId	,	EntityId	:	FwdOp (optional)	,	EntityId
0x1202	,	0x1203	,	0x120b	:	0x02	,	0x1204

FwdOp can be left off, it will use 0x02 as default FwdOp

So, you can enter like this:


Press Apply then System ➡️ Commit & Reboot to take effect.

FwdOp also tell what to do with VLAN, thus setting to 0x02 to bridge as always

PPTP vs VEIP
Overriding Forward Operation is useful for emulating 4-port ONT, back then TM specifically force non Unifi use on LAN 2 ONT, since GPON ONU Stick only have 1 MII interface, override it useful to prevent provision into non-existence.

To learn more quickly about LAN Provisioning that TM use, click here

By default, firmware ignore LAN Provisioning, this make non-Unifi able to use GPON ONU Stick.

Multiple PPPoE on Same Interface
Many PPPoE servers dislike having the same MAC address. To address this, consider employing VRRP tricks, which may involve integrating your router into the ISP's VRRP. This ensures that each VRRP interface has its own MAC address corresponding to the VRID.

* Remap VLAN when using same ISP, example:

Interface	VLAN IN	VLAN OUT
sfp-sfpplus 2	500	500
sfp-sfpplus 3	500	501
sfp-sfpplus 4	500	502

VRRP
Navigate to Interface ➡️ ➕ ➡️ VRRP

VRID can from 1 to 255, then move your pppoe-out1 to new vrrp1

GPON vs NBase-T
Reasons why many ISP giving 1+1Gbps plan because Ethernet is symmetrical, More Info

Advanced Stuff
Risk of D.I.Y.


Internal
D-Link DPN-FX3060V: A1 | B1

Disclaimer
I, We, and LYN members cannot take responsibility for individuals engaging in DIY activities outside of the specified design, causing network disturbances (not limited to the entire city), and risking bans or summons by ISPs and OLT vendors.

If you like to tinkering, bricking the stuff, headache, wasting time and own the OLT @ Home, you can take a look at my GitHub Repo

Previous Post
Web Archive Checkpoint #2
Web Archive Checkpoint #1

This post has been edited by Anime4000: Dec 8 2024, 02:56 AM

This is kinda super late, but i did ask this kinda question before.

Here a answer from soonwai
https://forum.lowyat.net/index.php?showtopi...post&p=89527265

iirc tm doesnt do auth based on gpon sn anymore. as long as the password is correct it should work

This post has been edited by miloaisdino: Jun 25 2020, 03:45 PM

I just got direct Fiber, wanted to use EdgeRouter 12 with GPON SFP
not sure how to auth with password

What I observe, I tried change ONT and put my ONT Password, it works.
Maybe TM OLT looking for SN: 48575443 (HWTC) ?

The SN differs by area. Different area has different ONT password. You can even backup your ONT config save it somewhere safe than upload back to your new ONT which now can easily be bought online.

They place the guide video now all over Youtube teaching users how to replace the ONT by yourself.

I have 2 ONT, stock TM give me and TIME ONT,
I simply put Password and it works,
Both ONT have SN: 48575443 (HWTC)

The config file I got was not encrypted, and didn't store any SN or ONT Password:
https://github.com/Anime4000/Hacking_Huawei...ee_modified.xml

What I do, enable Telnet and SSH with it

as long as Mikrotik GPON SFP/Huawei support OMCI required by TM than it may work,

I haven't try it though for mikrotik.

https://blog.csdn.net/zhidc/article/details...Pai2-4.nonecase
Some gpon sticks are actually full fledged onts, even come with web interface. omci might work then

This stick is ONU, might can work?
https://s.lazada.com.my/s.bI2ov

it might.. but some gpon sticks come without user interface with "locked loid and password" so you cant really use it unless someone has access to the olt side for whitelisting.. bummer

ah, need ask seller for WebUI

You can't use this unless you have SFP programmer... My ONU stick w/ web interface is otw... Will update once it's proven working....

If you can find MA5671A with programmer, this is the best in terms of compatibility...

Just noticed you've gotten EdgeRouter 12, I've just gotten this as well! Definitely will update if it's compatible with the ONU Stick I ordered... Most likely compatible since it supports bridge and changeable LOID/GPON PN.

Costly experiment


This post has been edited by thankyou: Jun 26 2020, 07:16 PM

May I know which model ONU stick you bought? I wait you for testing, I in tight budget, just can't simply buy and fail

#Aliexpress MYR 208.80 25%OFF | GPON SFP ONU Stick With MAC SC Connector DDM pon module
https://a.aliexpress.com/_dTNv9ks

This is the stick... It's proven working with Mikrotik routers... That's the reason I get Hex S to test it out as well.

Ordered 2 weeks ago and still waiting...

This post has been edited by thankyou: Jun 26 2020, 08:08 PM

I don't think they ever authenticate with GPON SN or MAC as long as the password is correct. I've replace the ONU since 2012 and it was working all the while...

It's like some gpon sticks have their passwords locked to 123456780 so the only way is loid/sn auth but we know thats not what tm does.

See feedback that, they show have WebUI to configure ONT Authentication
Since you have ER-12, test if that works.
Also, if possible, try override OLT OMCI command or manual OMCI, try remove/adjust Hardware Speed Capping, I like to remove speed cap VLAN 621 to achieve A+ Anti Bufferbloat. let PPPoE based speed limit.

SSH Log OLT of HG8240H5, OLT Provisioning:


I also have change TM to TIME ONT, what I do simply put my ONT Authentication Password.
Maybe TM OLT have list or SN check, between new HG8240 and HG8240H5, both have same "48575443" (HWTC) SN at first 8 HEX digit,

nice. looking at the ui screenshots from the reviews, it is an unlocked rebranded zte onu stick!
edit: it seems to be quite beefy, with 600mhz cpu and 256mb of ram. heck i wonder if it can hardware nat too!

also i used RED qos algorithm to improve bufferbloat on my mikrotik. needs quite a bit of tuning tho

This post has been edited by miloaisdino: Jun 27 2020, 01:27 AM

Oh! I didn't know that was unlocked rebranded ZTE ONU stick.
I plan to have ER-X-SFP or ER-12, if that stick works, currently I using ER-X.

ER-X have "offload hwnat" to offload NAT to Hardware Level.


However, enable Smart QoS will make "hwnat" render useless,
plus very taxing CPU cycle and strain 12V 1A adapter.
I simply enable Smart QoS at Upload:


I saw some Maxis Fibre user able to get more speed than advertised, removing/increasing ONT Speed Limit help eliminate Bufferbloat, and no need QoS to be enable, and reduce router CPU usage!

sounds good that omci can be bypassed just by using a 3rd party onu. hopefully the huawei olt wont know how to provision the hard cap on the zte onu stick (actually the maxis issued btu should be tm property, maybe the hard cap is tm's way of unfairly limiting maxis bw?)

any idea what brand of onu that maxis user used?

This post has been edited by miloaisdino: Jun 27 2020, 01:23 PM

This what I hope for, just wanted a fair speed and better latency

Yes, my 300Mbps become 280Mbps in real world, same with upload become 42Mbps, and worst like streamyx, high jitter and lags,
I choose maxis because of routing to SG and no port get block, like TCP 6667, game will run perfectly with better NAT status.

I got HG8240H5 as TM gave me.
I remember when I press "reset" button, and internet speed become 4mbps, this show speed is capped on ONT, not OLT. even tho I put correct password.

---

I kind give up on Hacking Huawei HG8240H5, didn't find any exploit.
if thankyou manage to get ONU SFP stick to work on EdgeRouter 12, I will follow the same, and money well spend

Is this for Huawei ONU? or now got universal ONU which can use all the places? My house use alcatel. love to use SFP if possible..

ah that makes sense. at first when you connect without pppoe login your line will be capped to 4mbps (probably for hypptv stb), then upon pppoe login the olt will retroactively increase the speed cap of the ont by omci.

i wonder having 2 pppoe dialers behind the ont to different accounts can confuse the olt

edit: maybe thats the key, omci configures a speed limit for port 2 on the huawei onu for maxis, but if the onu can be hacked for maxis to be on eg port 3 instead maybe omci will fail to speed cap?

This post has been edited by miloaisdino: Jun 28 2020, 07:32 PM

SFP stick is more to universal version

No, it was under my PPPoE and get 4mbps ONT default settings

I have tried, not working, the ONT speed is shared.

If can hack and override, we have custom OMCI settings.

I thinking, upgrade to 500Mbps for a week and downgrade back 300Mbps, will ONT speed remain cap at 500?
Need call 123 for this.

i meant there will be a time lag between pppoe login and increase of speed cap.. all the onts in the same area share the same pw so i guess the speed cap is by detecting your account on pppoe?

taken from tm alcatel ont provisioning guide online:
Service Provisioning – Sample Service Configuration
7.1 Create ONT Infrastructure
Create ONTs using SLID Password.
configure equipment ont interface 1/1/5/1/10 sw-ver-pland AUTO
sernum ALCL:00000000 subslocid 0000000001 voip-allowed enable enable-aes enable

so any match for alcl sn or huawei sn ont will be allowed as long the pw (replaced by 0000000001) is correct for any speed

It's going to be a long wait for my GPON Stick...

It has been the same status since 21st June...




It seems forever now...

Seems like the guy complain after few days of usage:



This post has been edited by thankyou: Jun 29 2020, 01:16 AM

oh wow, being stuck in shipping delivery.

if you got extra money, what about Ubiquiti UFiber Nano G:
https://community.ui.com/questions/UFiber-N...dc-cdbcf6939617

that ONT looks awesome to, can be powered by Passive PoE.

It should work but I'm more interested in All-In-One device... I'm currently upgrading switches to CRS309-1G-8S+IN so that's additional RM3k +- to spend including all the SPF modules.

Skipping Nano G

This post has been edited by thankyou: Jun 29 2020, 04:24 PM

Finally it has arrived... I won't be replacing the router until midnight as there's other family members who are WFH.

Wow nice, we wait for the results!

It's working fine... ODI GPON Stick is compatible with EdgeRouter. I'm able to connect to Unifi with following configuration:

The configuration was tested on ER-12, will work with ER-4/ER-6P/ER-X-SFP

eth0-7 = switch0 (192.168.88.0/24)
eth8 = LAN2 (192.168.89.0/24)
eth11 = ODI GPON SFP

1) Plug-in ODI GPON Stick to eth11

2) create br0


3) Back to Dashboard, bridge eth8 & eth11

4) Connect to eth8, change LAN IP -> 192.168.1.2/24

5) Open browser, connect to ODI GPON web interface


6) ODI GPON main page


7) Update SN/Password


8) Just to be safe, nothing overwrites the ODI GPON Stick, I've changed TR-069 password as well.


9) You should get the following status once GPON Stick is restarted.


10) Make sure LAN1 (SFP -> ER) is tagged. Unifi 500/600


Back to ER-12

11) Remove eth8/eth11 from br0 then disable br0 (Optional)

12) Create VLAN 500 on eth11 (SFP)

13) Create PPPoE, that's it!


This post has been edited by thankyou: Jul 18 2020, 04:16 AM

if we replace the ONT with GPON SFP, this means we cannot use the VOIP / unifi phone anymore?

You can with following:

1) if you know the SIP credential
2) SIP phone/adapter that uses RJ45

Neat! Finally I can start saving some cash for this kind of setup!
Have you find that able to override OLT Speed Cap? Curious 3rd Party ONT able to override OLT settings


This make some serious Networking!

This post has been edited by Anime4000: Jul 18 2020, 07:50 PM

Some Business have Unifi and 3 telephone line, since ONT have 2, TM forward VLAN400 to LAN3 and use this device (D-LINK DVG-5004S) to add another telephone line.

You can make VLAN Bridge, it works with my ER-X Maxis Setup:

Can I know your original model of BTU? Or confirm compatible will all brand?

It's Huawei HG8240H, replace Huawei BTU is fine... No promise for any other models...

cool. was thinking of possibly going for this to ditch ONU

https://www.turris.com/en/omnia/specifications/

That thing have SIM Card slot!
My ZTE 4G Backup Dongle not reliable, overheat and no internet.
This make ultimate ALL on One!

Any sample command or anything I can refer to regarding to the OMCI commands?

Can you try measuring the temperature of SFP module when it is in use? Like with the temperature gun you can see nowadays in front of the shops and restaurants. Is the module too hot to be touched or not?

It's hot when I touch it... GPON web interface show it's 45-50c



Anime4000 aneip

Try not to order the GPON SFP yet. It's not that stable with my ER-12. somehow during the startup, the PPPoE did not managed to dial until I have to manually access to 192.168.1.1 web interface (just access will do), then ER-12 automatically connects to Internet somehow.

Not sure what happened as I'm not familiar with EdgeRouter. Will have to capture the logs to see what actually happened that time.

Revert back to TM router then everything resolve immediately. Tried rebooting both TM + ER-12 and PPPoE always managed to dial automatically without manual intervention. Unfortunately this is not happening to SFP GPON



Will report again when I try with Mikrotik router.

This post has been edited by thankyou: Jul 19 2020, 06:41 PM

I think 2 possible scenario regrading GPON SFP:
1. GPON SFP getting late power on, thus slow to being ready.
2. GPON SFP is slow to startup, ER-12 find that eth11 is not attached to any, thus PPPoE not execute.

since ER can access SSH, try put "some" script that keep reconnect pppd even eth11 not present/ready, I managed create one for VyOS to record every pppd request (Streamyx) for MCMC PDF Report Documentation

That's what I thought so too but I waited long enough actually, like few minutes but it PPPoE still "disconnect" status. the GPON SFP itself takes less than 1 minutes to reboot if you press the restart button on its webui.

As for SFP itself, ER-12 managed to detect the brand, status of the SFP upon ER-12 start up.

@thankyou

Any updates on your project? Correct me if I am wrong, your testing with TM and Maxis fiber?

I am considering the ER-12 - EdgeRouter 12 too, with GPON SPF for Time.
Anyone has any experience with non-Time issued GPON SPF modem/adapter/card/router with Time?
Any information on Time ANU ANT Authentication/SIP/VoIP/VLAN Tagging would be great.

I didn't have time to re-test the GPON SFP. My family members make noise when I brought down the Internet for 4 hours on Sunday...

Yes, I'm testing on TM (Maxis) network specifically on Huawei ONU. Can't comment much on other networks due to lack of knowledge & environment to test.

Tested ODI GPON SFP on Mikrotik hEX S and it worked perfectly fine. Unifi connected immediately during 1st configuration + boot up.

Tested cold boot for 5 times and no issue at all.

Last 3 tests with benchmark:
- Cold boot (power on)
- Time with stop watch

Ping Router (m:s.ms) Ping Google DNS (m:s.ms)
Test 1 0:42.2 0:50.0
Test 2 0:41.3 1:16.0
Test 3 0:43.3 0:54.3

So as you can see, the problem is really ER-12 but not the GPON SFP itself. Will have to find sometime to troubleshoot the issue on ER-12

This post has been edited by thankyou: Jul 21 2020, 02:06 PM

I have a friend who are staying at SS1 (Sea Park) and during March, his Alcatel ONU was struck by lightning through power adapter...

TM replaced a Huawei HG ONU for him. I think you should request for Huawei replacement as well!

Good luck!

Thanks for the info.. Will find some idea to try to replace the ONU.

@thankyou
Any other GPON SFP ONU Stick would you suggest from that you picked up ? (https://a.aliexpress.com/_dTNv9ks) Wanna try to get from within peninsular.
What other combination of router and stick would you suggest? I only have used a Mikrotik RB2011UiAS-IN.


@thread
Does anyone else know someone has tried for all in one router/onu with Time ISP?

Apologies, I have very limited knowledge on TIME FTTH. Can you share the ONU provided to you? or it's just a media converter?

I think RB2011UiAS-IN is good enough for All-In-On solution! Mikrotik just work fine with this GPON Stick.

@thankyou do you able to get SIP info from the Huawei BTU? I got my BTU replaced, try to collect as much info as possible. Seems the password encrypted in backup file.. Current objective

1- use SFP
2- use unifi sip as trunk in 3cx server

I got the SIP credential on old HG850a configuration.



You can use the above settings as reference. As for SIP password, it's 6 digits... If you really can't get it, I suggest you can try brute force method. It should work...

Will try to extract the detail on newer BTU...

I got from alcatel btu, hopefully, the same one for Huawei. Yesterday, the Internet come up directly after tech configure the password. But for sip he need to call the center to reconfigure at back end. After 5 min then voip can use.

But still cannot test unless I can find a way for Huawei btu to exposed the vlan 400 to one of the lan port.

SFP still no budget to buy.. Got car insurance renewal this month..

Also, from the Huawei config backup got the password. But it's encrypted.

Yes you're right... Tried to telnet to grab the password but H8240H is pretty much locked down.

One way is to use older BTU to obtain pass...

I was trying to Cracking HG8240H5 via UART header, have missing 2 resistor, add 100Ohm and display but no input accept.

The hash is look like Base64 with B85 extension, example:


Look into hash:


that have HTML Entity &gt &apos &quot &amp, decode HTML entity, get this Base64.B85:


Beginning 2 character $2 is every hashed password= field.

To Generate Base64.B85 from a text pretty simple in python:


When run, get this:


Not sure how reverse.

Since we know CLI login root password is adminHW

Maybe can reverse encryption from known password?

It's a salted hash so I'm not sure if it's worth to work on it

Can confirm the SIP password is the same with old ALC BTU. I disable phone port 1.. Fields in the info on port 2 with the password from ALC. SIP reg successfully..

Now if can find the way to expose vlan 400 to port 1 as trunk together with 500 & 600 than can use external ATA.. Or maybe bind to any other port (2-4) on BTU.

@thankyou




TIME FTTH - Huawei EchoLife HG8240H GPON Terminal

Looks like its the general one that everyone seems to have.

There's no problem replacing this ONU with the GPON Stick but you definitely need to know all the network detail.

Looking at Time Fibre Broadband thread, someone mentioned as below:



It would be great if you can find a way to access to ONU to get all the detail.

This post has been edited by thankyou: Jul 28 2020, 12:24 AM

Base on your GPON Stick, it is possible to Bridge PON VLAN500 to Untagged LAN 1 GPON Stick? rather than VLAN500 to VLAN500?

Based on the screenshot I don't think we can do that as the minimum value is '1'.

I'll try it again this weekend

This is the same one right?

https://www.lazada.com.my//products/i106259...tf&urlFlag=true

Yea, looks same by picture

Default vlan is vlan1 for RG btway

This post has been edited by amirsubhi: Aug 21 2020, 04:53 PM

thankyou aneip

Soon I will have SFP ONT Stick, my friend from Japan give me this, pair with his Ryzen Server in my home.

Item I ask him to buy:
1. Mikrotik RB3011UIAS-RM
2. Universal PON GPON/EPON ONU/ONT SFP Stick

he didn't buy from AliExpress, somewhat asking personal information and birth certificate, so he bought from Amazon US.



This post has been edited by Anime4000: Sep 6 2020, 07:48 PM

As a curiosity, I have bought an ONT SFP module like this one for experimenting. After putting in the 10-digit OLT password, the ONT stick authenticated successfully with the OLT, but the PPPoE client in my Mikrotik RB4011IGS+RM refused to connect to the Unifi service. But when I shoved the ONT stick into my older Mikrotik Routerboard RB2011UiAS-2HnD-IN router, the PPPoE client works successfully. After some consideration, the Huawei GPON ONT box stays with the RB4011, while I chucked away the GPON stick and the RB2011 returned to its function as a wireless access point.

are VLAN properly bridged and forwarded?

Both RB4011 and RB2011 has been configured exactly the same, but it only works with the latter. Probably has to do with the limitations of the RB4011 SFP cage.

Possible... RB4011 is known to be selective on SFP module. I have RB760iGS with GPON SFP and it works just fine.

Mcm lagi mahal ni.. Need cheaper option.. hehe

Does yours come with TR-069 in web gui?



I also bought 1 from the Lazada... But a bit busy now to troubleshoot.. Last time try, I can auth on OLT.. But same as you cannot connect PPPOE..

Try on mikrotik RB960PGS and some aruba switch.. Both cannot cannot..

My web gui has that setting, but unlike TS I doesn't touch any settings there.

I didn't bought it, my friend from Japan wanted me have better equipment, since his server at my home, 2.5" 1TB x 3 Samsung QVO + M.2 NVMe 500GB WD Black
Japan Internet are being monitored, so, Malaysia Internet is Neutral Ground

What they do need server in malaysia?