If possible update the latest versions of ONR supplied by TM for their customers as per current time.
Official TM UniFi High Speed Broadband Thread V43, READ 1ST PAGE FOR RELEVANT WIFI INFO!
Official TM UniFi High Speed Broadband Thread V43, READ 1ST PAGE FOR RELEVANT WIFI INFO!
|
|
Apr 22 2025, 07:47 PM
Return to original view | Post
#1
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
If possible update the latest versions of ONR supplied by TM for their customers as per current time.
|
|
|
|
|
|
Apr 22 2025, 11:16 PM
Return to original view | Post
#2
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(hsbb @ Apr 22 2025, 11:08 PM) This is not a question. I was asking to update the list of ONRs currently supplied by TM now to their customers. Also, if possible, compile the information (guide) on how to use own router via ONR. This will be helpful for new visitors, and existing visitors to properly utilize their network gear. Additionally, it will be a good insight if users reporting in their ONR performance, and from there, we can see which is the best ONR supplied by TM, currently thou stock as AIO is not always the best option. |
|
|
Apr 29 2025, 09:45 AM
Return to original view | Post
#3
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(pierrechoong @ Apr 29 2025, 09:33 AM) Hi guys, Want to learn networking in depthNeed some help here- any recommendation on router that is: 1) goes well with Skyworth GN630V 2) provides reliable & stable internet connection without heating up or need to restart periodically 3) good range 4) future proof with min 800mbps Thank you so much for your help! - Go for mikrotik - Or reuse old computer into OpenSense Want fancy setups & Flex - Go for Ubiquiti Long-term support, best in consumer class - Go with ASUS. - Go for specific models supported by Asuswrt-Merlin (Google why Asuswrt-Merlin is more superior than Asuswrt stock firmware) Good hardware, bad long-term support - Go for TP-Link - Has many revisions, priority given to newer revision thou your model is new. E.g., TP-Link Archer BE3600 V1, TP-Link Archer BE3600 V2. In some cases, V1 will receive firmware updates, but again, it depends on the manufacture. Bolehlah case - Go for D-Link, Totolink, Xiaomi, Huawei, or Tenda. - For D-Link, Totolink, go for models supported by Openwrt community. - D-Link is known for various vulnerability and unpatched firmware. This post has been edited by Jjuggler: Apr 29 2025, 09:45 AM |
|
|
Apr 29 2025, 09:50 AM
Return to original view | Post
#4
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ Apr 28 2025, 04:23 PM) I don't think D-Link and Skyworth are entertain such vulnerability as ISP buy cheap cheap. It is indeed a serious vulnerability. However, as you mention, ISP tend to cheap out with their equipments, and never bother to issue patch to their equipments. I firmly believe that ONR being supplied to end-users to further cut cost with supplying standalone units to end-users. Hence combo unit proven cheapest for them to save cost further. Not to mention poorly developed firmware. I think just let it be vulnerable, typical ISP Router are like that tho I toyed with the Black D-Link DPN-3060, Skyworth (white), not impressed with the firmware. Not yet toy with Fiberhome and ZTE ONR. Anime4000 liked this post
|
|
|
Apr 29 2025, 10:02 AM
Return to original view | Post
#5
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(pierrechoong @ Apr 29 2025, 09:53 AM) I would recommend you to go with any of the models listed as in the supported list of Asuswrt-Merlin firmware - Asuswrt-Merlin ModelsYou can follow up the discussing at their official site here. Additionally, if you like to play with scripts, you can use the following scripts on Asuswrt-Merlin firmwares: AMTM (Asuswrt-Merlin Terminal Menu) (You will be needing a dedicated 4GB/8GB/16GB/32GB thumbdrive for this purpose). ![]() WaNaWe900 liked this post
|
|
|
Apr 29 2025, 10:05 AM
Return to original view | Post
#6
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
|
|
|
|
|
|
Apr 29 2025, 03:14 PM
Return to original view | Post
#7
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ Apr 29 2025, 12:17 PM) I agreed.. An absolute time bomb if end user compromised, not to mention businesses that using stock ONR as their gateway to the internet.Also, it appear TM use "CTC " PON Standard, as their OLT never updated to provision Type 50 (2.5GbE), even ONU has 2.5GbE, it still report as 1GbE cause QoS, Traffic shaping in disarray ![]() so, I think TM stay with GPON for little longer, and use those CTC Standard ONU just to hack 2Gbps compatibility with Type 47 so, Firmware become mess thing is, if send to AI to find vulnerability, it guess it will a lot, this is how hacker make money with ONR nowdays |
|
|
Apr 30 2025, 11:01 PM
Return to original view | Post
#8
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(RiriRuruRara @ Apr 30 2025, 09:02 PM) Nope from my end. RiriRuruRara liked this post
|
|
|
May 5 2025, 11:12 AM
Return to original view | Post
#9
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
|
|
|
May 19 2025, 03:05 PM
Return to original view | Post
#10
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(tng55 @ May 19 2025, 02:35 PM) Asus never meant to be a prosumer router. Certain flagships model yes can be considered prosumer models due to their beastly hardware spec. For generic Asus router models, the target is generally consumers, with certain slapped marketing gimmick. Nevertheless feature wise, for a consumer grade, especially those with Asus-Merlin (+ability to run third-party scripts) and OpenWRT support, the router worth for the money. Else, Mikrotik always welcomes you since you can toy with the RouterOS. Some people even flash to OpenWRT from RouterOS. |
|
|
May 19 2025, 03:06 PM
Return to original view | Post
#11
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
|
|
|
May 19 2025, 06:47 PM
Return to original view | Post
#12
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(syahpian @ May 19 2025, 03:15 PM) personally, overall perfomance is good, I prefer to take real reviews from users bro. More organic and we can know the pros and cons, unfiltered.wifi perfomance also improve after several firmware update if you want in-deep review, better check on youtube, many have already review it there syahpian liked this post
|
|
|
May 20 2025, 01:09 AM
Return to original view | Post
#13
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ May 20 2025, 12:21 AM) To be honest, both are Vulnerable, since firmware being publish here, guy/team from my discord PON Hacking look and found attack vector, even can pivot from PPPoE to VLAN209 and VLAN400 So let me guess, TM going to ignore this issue? Is there any official or insider confirmation that they were aware of this vulnerability and working on patches? Does this only affects the Ultra Combo ONRs or the regular ONR as well (+ Fiberhome and ZTE)? Did they replicate the vulnerability at their R&D side?They planning make 2G user as VPN Server for them For serious business, they don't use AIO, for 2G plan they use my NIJIKA, for 1G, stay with old ONU which is much safer and dumb SDK Source Code, Taurus Board that D-Link DPN-FX3060V (A1/B1) ![]() ![]() What I know D-Link and Skyworth runs on ancient server ![]() Another Taurus Board, Zyxel AOT5221ZY that runs on OpenWRT ![]() ![]() CODE NOTICE: Â Booting Trusted Firmware - Realtek Semiconductor Corp. NOTICE: Â BL1: v1.5(release):TAURUS_TAPEOUT_2_0 NOTICE: Â BL1: Built : 17:13:20, Oct 27 2021 NOTICE: Â BL1: CPU Speed 1000 MHz NOTICE: Â GLOBAL_STRAP 0xc0a NOTICE: Â boot from serial NAND flash NOTICE: Â SPI_NAND: W25N04KV 0xefaa23 NOTICE: Â SPI_NAND: Page 0x800, Block 0x20000, Chip 512MB NOTICE: Â Platform initialized NOTICE: Â BL1: Booting BL2 NOTICE: Â BL2: RTL9607DQ NOTICE: Â boot from serial NAND flash NOTICE: Â BL2: SPI_NAND: W25N04KVZEIE 0xefaa23 NOTICE: Â BL2: SPI_NAND: Page 0x800, Block 0x20000, Chip 512MB ##### DRAM driver version(TAURUS): V0.7.2 ##### ... Since both D-Link and Zyxel use same SoC, making D-Link use OpenWRT is my next project, by dissecting Zyxel indeed As I have the SDK, I can convert TM Blob to TIME compatible ONU, or even Maxis own Infra |
|
|
|
|
|
May 20 2025, 03:24 AM
Return to original view | Post
#14
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ May 20 2025, 03:12 AM) Yes, pretty much any ISP provided equipment, security patches not their priority as these equipment are cheap enough. Thanks for the detailed explanation. I did went through the blog of the owner. He perfectly replicate and explain the vulnerability of using unpatched ISP equipment's. Hence Maxis is the next best option if new users wants to subscribe internet access due to maxis is still giving the standalone units. I guess they are using Skyworth if not my mistaken.I have told them, but my friend said just leave it, want cheap internet, no security. security cost money 😔 like D-Link 2.0.3 to 2.0.6, just improving on GPON performance, not security, vulnerability still exists according to them. They didn't tell me how to do it, and I never wanted to know, knowing it I can be prosecuted 😠old screenshot hack on action ![]() ![]() This good learn, ISP CPE cloud is bad: researcher accidentally finds O-day affecting his entire internet service provider since I own both D-Link A1 and B1 I plan to make D-Link ONR using OpenWRT by using Zyxel as base since both use same Processor also using ONR is never been good, ISP still have total control of that device, Let say, DNS filtering happening again, they don't like use custom DNS, ISP can override even without TR069, just from OMCI can do that, Anime4000 liked this post
|
|
|
May 20 2025, 10:36 AM
Return to original view | Post
#15
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ May 20 2025, 09:42 AM) Maxis on TM fiber still ONU + Router layout I get your logic there. Do you think they will use the older configurations back on, since ONR is not a permanent solution, especially for businesses. I mean, we are talking about an unpatched vulnerabilities. There are a few engines that can provide details about the ports, and some still using default login credentials. I've seen my clients using ONR for their businesses, only to be secured by a dedicated firewall. the ONU is 2.5G single port now, TM need push OMCI on Both LAN 1 and 2 now 🤣🤣🤣 because that ONU only has one 2.5G for this reason, TM cannot support Unifi + Maxis on same ONU Assuming maxis user who sub to Maxis's 2Gbps plan, and after 2 years, the user wants to shift to Unifi. This means, without the OMCI push for LAN 1 and 2 for the ONU, the ONU will be forcefully replaced by ONR, right? This post has been edited by Jjuggler: May 20 2025, 10:37 AM |
|
|
May 20 2025, 11:09 AM
Return to original view | Post
#16
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ May 20 2025, 10:54 AM) replay still a thing, even in bridge mode Gotcha. Guess maxis will be my next option. I am not convinced of how TM and their engineers don't follow up the reported CVEs and issue a proper patch remotely or downloadable firmware from user account dashboard.better remove ONR for safe measures Let say your 2G Maxis is up, you still can use old ONU that TM give for maxis customer for Unifi, just pay the technician to configure the maxis ONU and they will contact NOC and update proper OMCI because that ONU do not have telephone port, if you need Telephone, need pass VLAN400 to 0x101 (LAN1) instead of 0xe01 (VEIP) |
|
|
May 20 2025, 12:17 PM
Return to original view | Post
#17
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(Anime4000 @ May 20 2025, 12:06 PM) Something that is impossible since most ISP's main target is to cut cost their CPEs at extreme level. If the ONR from reputable brands, then they can push updates perhaps twice or thrice a year. Else, push major fixes once every quarter. We are talking about TM here. And D-Link..... yeah.. That summarizes everything. |
|
|
May 20 2025, 01:58 PM
Return to original view | Post
#18
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(syahpian @ May 20 2025, 01:04 PM) also, if router security is your main concern, better just pick mikrotik I am well versed with Mikrotik already. Used the famous RB750Gr3. Now they have a newer version called the hEX Refresh with better spec compared to the 750Gr3. Need to purchase a unit for testing soon. cause they long term firmware update for example my rb2011 ![]() it from firmware version 3.10 which is 2008, still getting firmware update until now, most router only get 3 year official update and if you lucky and router flash custom firmware, can use openwrt to extend its lifetime ![]() Also special thanks to soonwai for introducing me to Mikrotik. I've met him personally, he was one of the dude who purchased my RB750Gr3. syahpian liked this post
|
|
|
May 20 2025, 02:15 PM
Return to original view | Post
#19
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(syahpian @ May 20 2025, 02:09 PM) yup2 hEX Refresh is great, with arm cpu now can use docker directly on the router. I am a person who likes to use to the bits-level of my investment when it comes to purchasing any form of computing / networking devices. I was planning to purchase the RB5009, but have to drop the plan due to other commitment. Perhaps I will soon to play with Mikrotik, again.with that you can install adblocker like pi hole and adguard home directly into it syahpian liked this post
|
|
|
May 20 2025, 07:07 PM
Return to original view | Post
#20
|
![]() ![]() ![]() ![]() ![]() ![]()
Senior Member
1,334 posts Joined: Dec 2016 |
QUOTE(kwss @ May 20 2025, 02:47 PM) Just PSA. HEX Refresh uses an arm32v5 CPU. If your intention is to use public container image, it is extremely limited, almost useless. You are right. Its better to go with arm, arm64 and x86 archi-type. If running container on Mikrotik is the goal, get arm64. Reference: RouterOS / Extended Features / Containers ![]() |
| Change to: | 0.0210sec
0.67
7 queries
GZIP Disabled
Time is now: 25th November 2025 - 02:36 PM |