General Discussion
  >> Fibre Broadband

Register (or login) on our website and you will not see this ad.

  Print Thread
Standard User ChriX
(newbie) Mon 05-Dec-11 19:08:08
Print Post

New modem?

[link to this post]
Just had my FTTC 40/10 service installed today, and was all ready to flash the modem when I got home this evening but then found it's not a Huawei. I know OR are supposed to be replacing all the modems, so maybe I have one of the replacements.

Any idea if its possible to get line stats out of one of these? It's a ECI Telecom one, says NGA ECI-CPE-MODEMS TYPE 1B.
B-FOCuS V-2FUb/I Rev.B
Standard User Ribble
(member) Mon 05-Dec-11 20:57:11
Print Post

Re: New modem?

[re: ChriX] [link to this post]
Openreach are using ECI kit (Street DSLAM's and end user modems) in some areas.You have not been provided with a replacement or upgraded modem, just that Openreach are using ECI in your exchange area.
Cant help with the flashing/unlocking etc.
Standard User ChriX
(newbie) Mon 05-Dec-11 21:28:32
Print Post

Re: New modem?

[re: Ribble] [link to this post]
Ah that makes sense. Thanks for the info.

Register (or login) on our website and you will not see this ad.

Standard User asbokid
(regular) Tue 06-Dec-11 01:52:36
Print Post

Re: New modem?

[re: ChriX] [link to this post]
That's interesting. Thanks for posting it, Chris!

I wonder what chipset is in this device?

Earlier ECI models in the B-Focus range have been based on the Texas Instruments AR7 SoC which has a MIP32 core.[1] That CPU family was sold by TI to Infineon who then spun-off it off as a separate company, Lantiq.

The CPU in the BT HomeHub3 is a Lantiq XWAY ARX-168, which is also from the AR7 family. But the ARX-168 is only an ADSL2+ solution.

If the ECI is running on a Lantiq CPU, then it would be from the ARX-200 family of VDSL2 single chip solutions.

Are there any signs on the PCB for JTAG or UART? If not, the NAND flash IC could be lifted from the PCB with a hot air rework gun.

If the B-Focus does have a MIPS core, then it is almost certainly running MIPS Linux for which British Telecom and ECI are obliged to supply source code in accordance with the conditions granted under the GNU General Public License. [3]


There is sub-standard security in the ECI ONT for FTTP. [4]. Hopefully the ECI unit shipped for FTTC by BT Openreach doesn't have the same flaw: discovered that a secure shell service is exposed on the WAN-side of the B-FOCuS O-4F2P device with a default username and password configured for every unit.

From those screenshots at [4], we can also see that the device is running MIPS Linux (kernel version Making it even more likely that the ECI unit shipped by British Telecom is running MIPS Linux, too.

cheers, a

P.S. If you find a spare ECI B-Focus to hack, please give me a shout!


Edited by asbokid (Tue 06-Dec-11 02:36:56)

  Print Thread

Jump to