Locked out of web interface on HG612 (can telnet though)

I seem to be locked out of the web interface on my (firmware modded) HG612. I have tested on a PC and a laptop. I can telnet in, ping and stats from Ronski is working fine. I just cannot get the webpage(s) up.

I used to have access just fine but lost my network settings. They should be 192.168.100, default subnet and 192.168.1.1 default gate way from memory. The fact I have ping and telenet to 192.168.1.1 means it must be correct?

Short of a reboot of the modem does anyone have any ideas how I get webpage access back?

Openreach have remotely updated the firmware and the web interface is no longer available.
You can either unlock it again - reverting back to the earlier firmware (and try and prevent Openreach from updating it again), manage without the GUI or wait to see if an unlocked version becomes available.

I think you going to need to reboot unless anyone knows a way in telnet to just restart the httpd daemon.

In reply to a post by panda:

Openreach have remotely updated the firmware and the web interface is no longer available.
You can either unlock it again - reverting back to the earlier firmware (and try and prevent Openreach from updating it again), manage without the GUI or wait to see if an unlocked version becomes available.

is news to me O_o

when this happen?

I goes those of us who disabled the remote access function skipped the firmware update.

In reply to a post by Chrysalis:

when this happen?

First seen a couple of days ago

In reply to a post by Chrysalis:

I goes those of us who disabled the remote access function skipped the firmware update.

I would guess so, although to be fair it isn't 'locked down' as such with the update, just that the web interface is no longer available. Telnet is still available, so some reporting tools still work.

I get a slightly better sync (and seemingly more stable too) with this update. I didn't really use the GUI anyway so it's no great loss for me. YMMV.

In reply to a post by Chrysalis:

I goes those of us who disabled the remote access function skipped the firmware update.

I think I disabled it, I certainly haven't been updated. I'm surprised there are not more posts about this.

Edited by kasg (Fri 11-Oct-13 17:36:27)

In reply to a post by panda:

..and seemingly more stable too.....

When did this update appear?

Did you disable with a kill command or through the GUI?

It doesn't actually deactivate it through the GUI but it does with a kill command through telnet.

There are a good majority of threads on another forum board.

Edited by deleted (Fri 11-Oct-13 18:06:00)

In reply to a post by Stevenage_Neil:

When did this update appear?

I believe the updates are being carried out in phases. My logs show a drop at 0220 on October 9 (Wednesday). Since then, the first hop latency has been ever so slightly less.

My modem isn't unlocked, so I have no way of checking the firmware version number.

In reply to a post by ryant704:

Did you disable with a kill command or through the GUI?

I thought I'd done it through the GUI, but from what you say, it seems not.

In reply to a post by ryant704:

There are a good majority of threads on another forum board.

Do you have a link, if that's allowed?

I've sent you a PM linking to the discussion.

Many thanks

Mine showed the same drop at that time then it resync'd again 4 hours later switching to fastpath.

In reply to a post by Oddball:

I seem to be locked out of the web interface on my (firmware modded) HG612. I have tested on a PC and a laptop. I can telnet in, ping and stats from Ronski is working fine. I just cannot get the webpage(s) up.

I used to have access just fine but lost my network settings. They should be 192.168.100, default subnet and 192.168.1.1 default gate way from memory. The fact I have ping and telenet to 192.168.1.1 means it must be correct?

Short of a reboot of the modem does anyone have any ideas how I get webpage access back?

I had that a few months back. If you keep trying to Telnet your modem will probably reboot anyway - mine did.

Edit: Ah, I see. So probably this new update then.

Edited by Andrue (Fri 11-Oct-13 19:42:58)

Is HTTP disabled even if I reboot (don't want to unless I have to)? Also link to other discussion please

Edited by deleted (Fri 11-Oct-13 21:22:37)

I am interested also thanks, I guess its private so please PM me.

No, you are an active member and have posted on it tonight!

These firmware upgrades have caused a couple of issues with my logging/graphing program (HG612 Modem Stats)

It seems to be 2 stage rollout:-

Stage 1
Both Huawei & ECI DSLAMS are updated, delivering an extra (U4) band, along with revising the tones available for each band.
There is no longer an overlap/sharing of the lower US & DS tones.

Stage 2
A few days later, the modem's firmware is updated, causing 'different/additional' data to be obtained for the harvested data.
It is possible that BT Agent can be disabled via an unlocked modem, but it may be wise to allow the modem's firmware update as it is surely meant as an improvement & will possibly allow higher speeds - probably only for users with reasonably short line lengths though.



The modem's firmware update disables access to the GUI (for now), but Telnet access & my programs are still able to access the stats data.

I am working on amending my programs' code to take account of these changes, but I haven't received the 2nd stage modem update yet, so I can't test anything properly before I release any update.

It seems that the 'snapshot' graphs can still be generated by users connected to Huawei DSLAMS (via HG612_current_stats.exe & GRAPH6.EXE) & the raw data can still be obtained by users connected to ECI DSLAMS, but not graphed at the moment.
I THINK I have already dealt with that aspect, so I now need to amend the code for the ONGOING stats.

As soon as my modem's firmware has been updated, I'll attempt to sort things out & test it with a view to an early updated release of HG612 Modem Stats.

If anyone wishes to observe progress etc. I'll be providing feedback & possibly requesting example data logs for testing purposes in the Kitz forum only for the time being.

I asked the question on kitz forums, what is the basis of the info that states dslam firmware is upgraded? people seem to be assuming its the case.

Also having analysed the banding changes, the main benefit appears to come from the non sharing of downstream on D1, but D3 is now smaller, the highest tones are cutoff. Since my shared D1 tones are very low due to adsl power cutback, I would probably lose sync speed with the D3 tones been removed.

In reply to a post by Chrysalis:

I asked the question on kitz forums, what is the basis of the info that states dslam firmware is upgraded? people seem to be assuming its the case.

It is only an assumption because in their usual style, BTOR have not publicised anything at all (as far as I am aware).

It HAS to be changes at the DSLAM as my HG612 hasn't yet updated (Firmware version A2pv6C030b.d22g), but I can already see 'some' changes to my band plans (mainly the increase from 3959 to 3971 tones in the D3 band - Huawei DSLAM).

Also having analysed the banding changes, the main benefit appears to come from the non sharing of downstream on D1, but D3 is now smaller, the highest tones are cutoff. Since my shared D1 tones are very low due to adsl power cutback, I would probably lose sync speed with the D3 tones been removed.

My connection is too long to use the D3 band anyway, but as it is still using the 'shared' DS/US lower tones for the moment, I don't know what effect the full changes will have on my long connection yet.

TBH, I think my connection uses most of the 'shared' tones for DS anyway, so I don't really expect to see that much of a change, even when the HG612's firmware is updated.

In reply to a post by Oddball:

Is HTTP disabled even if I reboot (don't want to unless I have to)? Also link to other discussion please

http://forums.thinkbroadband.com/fibre/t/4251111-hg6...

But actually reading it again it seems the web UI was working - it just couldn't display any meaningful information.

the way you worded it caused the confusion I think.

you stated firmware updates.

I consider it more dslam reconfiguration.

on ECI currently D3 goes up to 4083 so both 3959 and 3971 are not good compared to that.

Lots of interesting info in the Kitz forums. Looks like a firmware modification is already in the works but he wants to test it for a couple of weeks before releasing it. Not sure if the web GUI is still intact though as from what I have read they have removed it entirely and the firewall might have been disabled because of it too.

But this is only my meanderings so might be incorrect information.

I believe the firmware you are referring to is the old version with the BTAgent completely removed so it can't be updated remotely.

He is referring to the new firmware, one reported the Web files no longer exist at least where they did before.

In reply to a post by ryant704:

He is referring to the new firmware, one reported the Web files no longer exist at least where they did before.

Unless it's a different thread I haven't seen, these two posts say it's the original SP10 firmware, with BT Agent and PTM1.301 removed.

Reply 25 and reply 28

I haven't seen anyone that says they've extracted the new firmware, is that even possible?

In reply to a post by Bald_Eagle1:

If anyone wishes to observe progress etc. I'll be providing feedback & possibly requesting example data logs for testing purposes in the Kitz forum only for the time being.

This is the relevant Kitz forum topic:-

Kitz Forum Topic

In reply to a post by R0NSKI:

I haven't seen anyone that says they've extracted the new firmware, is that even possible?

Yes, it is possible.

(1) Connect an unlocked HG612 to a line carrying a VDSL2 service.
(2) Wait. Once per day, check the firmware version via telnet access.
(3) When the new firmware is seen to be in situ, power down and disconnect the HG612.
(4) Dismantle the HG612 and carefully remove the flash chip from the PCB.
(5) Mount the flash chip in a suitable cradle and connect to an appropriate reader.
(6) With a system running Unix (or a Linux kernel based OS), suck the data from the flash chip via the reader to a file.

A copy of the firmware image can then be 'broken down' into its component parts. Of particular interest will be the new Broadcom binary blob.

Etc.

Thanks for the answer, but I won't be volunteering to do that. Hopefully somebody with the required equipment and expertise will though.

ronski did you see the bandplan change on your ECI connections?

I have just had this happen.
One way I look at the data is with a short VBScript that summarizes the main bits I am interested in.
I just updated this for the new firmware: just needed a change to use "Bearer:" rather than "Path:".

If anyone is interested, the updated version is at http://programbits.co.uk/modem/modem.vbs
Make sure to run using cscript not wscript: wscript will splat lots of message boxes for output.

Yes, I'm pretty sure they did change.

You can view all my graphs on drop box

I do hate when provider do locked your modem as it pretty stupid really.

It should be left alone with manufacter unlocking modem.

Is it your modem though? I don't remember the owenership of this - but if it is still BTs kit then they can lock it down for support and known entity. If it is your kit then you would also be liable for paying to replace it if it breaks.

One does wonder at the motive for preventing access to the GUI for basic connection information, when nothing significant can be changed through said GUI.

Maybe they wanted to hide connection settings (I am assuming there are settings that can be changed on VDSL?) and didn't want to create a special interface that just included the bits that were 100% harmless (such as the stats). I haven't unlocked a VDSL modem so don't know how many changes can be made that might cause issue.

In reply to a post by RobertoS:

One does wonder at the motive for preventing access to the GUI for basic connection information, when nothing significant can be changed through said GUI.

Eh? Nothing significant? Have you been on my cat-mint Bob?

As a quick example of what can be changed via the GUI please take a look here.

Yes, I was forgetting that the locked version is locked, in that you can't see anything. I was thinking you could see but not alter settings.

Edited by RobertoS (Mon 14-Oct-13 15:40:49)

In reply to a post by RobertoS:

Post deleted by RobertoS

Reinstated with different content .

But! As we aren't supposed to be able to access the GUI by unlocking as in the past, what makes them think they've achieved anything significant by hiding it in their update? Or could it just be the GUI can't handle the rest of the alterations so they've ditched it rather than waste time and money revising it?

Which leaves the way open for you "in-deep" ones to produce a new GUI to go along with the revised stats program when its available .

Edited by RobertoS (Mon 14-Oct-13 15:50:01)

Most of the GUI was pure Huawei code (including all the bugs and the misuse of the English language), along with a few additions by Beattie.

For completeness, I will mention that the firmware was built out of three basic segments:

(1) The Huawei code, using GPL'd sources.
(2) The Broadcom closed source, proprietary driver.
(3) The Beattie closed source, proprietary code -- such as her busy-body (the BT Agent) and additions to the GUI.

My suspicion is that the GUI code has been removed rather than hidden. Until such time as the latest firmware is available to examine (in a file), everything is pure speculation.

Edited by burakkucat (Mon 14-Oct-13 16:53:35)

In reply to a post by R0NSKI:

Yes, I'm pretty sure they did change.

You can view all my graphs on drop box

if I understand right your US went up but you lost DS sync speed?

In reply to a post by RobertoS:

One does wonder at the motive for preventing access to the GUI for basic connection information, when nothing significant can be changed through said GUI.

how do we disable QoS now without GUI? It seems when BT flash unlocked modems the settings are rpeserved (which is why telnet still works) so I assume QoS also stays off if disabled before the update.

But now disabling tr069 etc. becomes harder to do with only telnet.

In reply to a post by ian72:

Is it your modem though?

Mine is

The BT one is still in the box.

Yes, I'm pretty sure without looking DS decreased , US increased.

If I was you I'd keep rather quiet.

You see, given that BT branded HG612's as setup for the FTTC service are only available from BT and they remain BT property at all times and BT are not selling them off the shelf to anyone via any source.....
You have to ask where did your extra one come from?
If it was an ex-BT unit used for FTTC and for some reason now not required and was sold by some individual to you then they are selling something which in effect has been stolen from BT and is not theirs to sell.
and you are effect in receipt of stolen goods.

You'd had better lock up the majority of the posters on the fibre forum then................

There seemed to be quite a few sellers on ebay selling lots of these modems (along with other telephone kit), I wonder who they are (were) employed by???

My unlocked MG612 has been updated and I too cannot access the web interface.

On the up side my sync speeds have gone from 85Mb/27Mb to 93Mb/33Mb so I've got some head room for extra crosstalk as more people move to FTTC.

When the connection first went live in June 2012 our speeds were something like 106Mb/36Mb. Yes, we're pretty close to our cabinet...

In reply to a post by bsdnazz:

On the up side my sync speeds have gone from 85Mb/27Mb to 93Mb/33Mb so I've got some head room for extra crosstalk as more people move to FTTC.

You mean your attainable speeds, surely.

Has anyone made a firmware from the this update or took the blob?

QoS does indeed stay off. My Samknows white box is still reporting 19 Mbps upstream speeds which it was prior to the update.

In reply to a post by kasg:

In reply to a post by bsdnazz:

On the up side my sync speeds have gone from 85Mb/27Mb to 93Mb/33Mb so I've got some head room for extra crosstalk as more people move to FTTC.

You mean your attainable speeds, surely.

They must do as Profile 17a can only sync at 100/50 maximum.

On my Digital Region connection which is fully unlocked the HG612 only syncs at 99999 with a 114096 attainable and 10.3dB SNRM.

It did sync at 100015 on the first unlocked BT firmware but the updated BLOB dropped the speed slightly while real-world speed and latency actually improved.

I'd be reluctant to change the BLOB now though as I have been in sync for 171 days!

Edited by alexatkin (Wed 16-Oct-13 05:06:51)

In reply to a post by zom22:

If I was you I'd keep rather quiet.

Hilarious.
I think you should 'inform' ebay about the black market they are unwittingly hosting.
I have also bought them at car boot sales. If only this was the worst crime committed regarding goods sold at these places.

Whilst I don't agree with you, I appreciate that you cannot have any comeback with BT/Openreach if you modify equipment on their side of the demarcation point.

You can however legitimately purchase HG612s as they are not custom made for Openreach and there are variants such as HG622s available

Edited by smouty (Wed 16-Oct-13 09:08:57)

I'm using a Fritz!Box 7390 and recently noticed a drop in attainable upstream along with an increase in downstream sync.
I don't have exact figures but downstream has improved from about 61 to around 72 while attainable up has dropped from something like 35 right down to 25 (the attainable up has never previously been in the twenties so I assume this is a band plan change from the cabinet).
For the first time in many months I'm also back on fastpath for both up and down - fingers crossed it stays like this.

In reply to a post by kasg:

In reply to a post by bsdnazz:

On the up side my sync speeds have gone from 85Mb/27Mb to 93Mb/33Mb so I've got some head room for extra crosstalk as more people move to FTTC.

You mean your attainable speeds, surely.

Correct. My terminology error...

In reply to a post by Bald_Eagle1:

In reply to a post by Bald_Eagle1:

If anyone wishes to observe progress etc. I'll be providing feedback & possibly requesting example data logs for testing purposes in the Kitz forum only for the time being.

This is the relevant Kitz forum topic:-

Kitz Forum Topic

Good progress has been made & it appears the programs are now working reliably with the new firmware.

Testing is still ongoing, but I do hope to release an update package in the quite near future.

mine hasn't update it self yet, had anyone made a standalone version of it yet?

I believe a standalone version of the unlocking firmware (incorporating the updated firmware changes) is currently being worked on, but isn't ready for general release yet.

In reply to a post by Bald_Eagle1:

Good progress has been made & it appears the programs are now working reliably with the new firmware. Testing is still ongoing, but I do hope to release an update package in the quite near future.

Great news!

Do you (or anyone else) know how we might set or change the IP on the LAN2 port without the web GUI ? I guess this will come with an updated "unlocking" firmware hopefully - for any new FTTC subscribers.

In reply to a post by jchamier:

Do you (or anyone else) know how we might set or change the IP on the LAN2 port without the web GUI ? I guess this will come with an updated "unlocking" firmware hopefully - for any new FTTC subscribers.

I'm not sure, but it may be possible using the ifconfig command at the Busybox prompt.

I have no experience of using this command though.

Mine got hit yesterday or the day before .

In reply to a post by Bald_Eagle1:

I'm not sure, but it may be possible using the ifconfig command at the Busybox prompt.

A quick google suggests that this command might do the trick:-

ifconfig br0 192.168.1.55 (or any relevant IP address).

Just running ifconfig with no arguments will list the settings for each type of interface.

br0 (that's a zero) is the one to use for bridged mode as per most unlocked HG612s used as a modem only.

If it works, it may have to be permanently saved somewhere in one of the modem's directories/folders or reset each time the modem is rebooted.

Also, if it works, I could create a small program to do it without having to manually log in to the modem, or if we asked him nicely, RONSKI might add the facility to his Settings Editor that forms part of the HG612 Modem Stats package.

Good find, thanks.

My parents FTTC cabinet arrived towards end Sept, so I'm hoping they will be able to order soon; and I will want to see their raw connection stats

In reply to a post by Bald_Eagle1:

Also, if it works, I could create a small program to do it without having to manually log in to the modem, or if we asked him nicely, RONSKI might add the facility to his Settings Editor that forms part of the HG612 Modem Stats package.

My modem has been disconnected a few times since the firmware update and has kept it's non standard IP address.

If you write a little program to do the magic I'm sure I can add a button to pass the IP addresses to your program.

You'll need two IP addresses, existing one and new one, and something to confirm the modem responds on the new IP.

WHat version is the updated firmware & how might I block BT updates

I'm currently using the hacked SP10 firmware - with the updated binary blob from earlier in the year A2pv6C035m.d22g -- this definately providers a boost over earlier firmware

What broadcom driver does the latest firmware have?

I did try clicking "disable agent" on the HG612 gui, but no feedback is given so can't really say if it works.

I think it's more to do with unticking Enable on Advanced ¦ CWMP

thanks... i subsequently found the latest hacked firmware on kitz.. with the 038 vdsl driver, and the bt agent already disabled.

From my point of view, the latest firmware that BT pushed seems to be a bit of an improvement, stability-wise, over the SP10 with updated binary.

Two days after the update my connection switched back to fastpath for the first time in months and has been that way ever since.

I have found the same as Simon194; though in my case it took around a week or more to change to fastpath.

In reply to a post by simon194:

Two days after the update my connection switched back to fastpath for the first time in months and has been that way ever since.

I've seen fastpath for the first time since installation, over 12 months ago, with the new software.

My fastpath returned also, it was more like a week after applying the new patched firmware but it's back

Post deleted by swervinc

my input.

I have been trying this firmware for a few days and the error rate is approxmately 3x of the newest asbokid firmware. Likely to flash back for this reason.

I had the old unlocked firmware. When the new firmware came along this was remotely replaced with the new firmware.
The new firmware gave me the higher speed and removed interleaving (after DLM allowed it through a week or so after install).
As a result of the upgrade/change I lost HTTP access, but retained telnet access to the modem (just like the thread title says).
I'm not sure whether the telnet access is still there because of leftover status from the earlier unlock, or because the new firmware allows it anyway; leftover from unlock I think.
The telnet access required update to the stats collection software to use that.

For me that seems a good compromise. I'd rather have better speed and stability than http access.

In reply to a post by StephenTodd:

For me that seems a good compromise. I'd rather have better speed and stability than http access.

Exactly the same here. I've lost the ability to configure the LAN2 port IP, but I still have telnet. I've seen faster speeds, and I did have fast path for a while on this new firmware. I think the colder weather put paid to that.

I have still got http access as I am using greywolf's firmware but the new firmware isnt a stable for my line.

It uses less tones as boundaries have been added in the bandplan's. But I would have thought that would reduce error's not increase, so I am not sure why it is not so good for my line.

The extra error rate isnt actually noticeable tho wth my usage and hasnt affected DLM.

Greywolf's firmwares are on kitz forum.

He did the stock BT firmware flashable.
stock with gui readded
stock with gui readded and btagent removed.
not sure if he did others cant remember.
I think he also did a variant of asbokid's firmware with btagent removed as well.

Also the new firmware by default doesnt have the QoS upload issue, BT fixed that.

Edited by Chrysalis (Sat 07-Dec-13 23:48:38)

I have a HG612 B (10) which I successfully unlocked last year and used on a friends new VDSL connection for an hour and gathered stats which helped solve a throughput problem, It's possible that in that hour BT did a firmware upgrade but if so it did not throw me out..
I now have my own VDSL with a EDI/r unlockable, so I got out my HG but could not log in to the GUI.
Knowing there was a later version of the hack, I downloaded a newer version and uploaded it but I am still unable to login to the GUI and I can't telnet either.
I have downloaded various unlocks with the same outcome.
Having got to the GUI inviting an upload at option 4 and before doing so, I can ping with 100% returns but no telnet on port 23, but after the upload I cannot ping it, it's as though the upload sets the ip address to something completely different !..
As yet I have not connected it to my line.....................
Anybody else seen this please ???

Does the original unlocked firmware and method work?

Can you post a link to where you got the new firmware from?

BB

There are various versions available and the original is here.

http://huaweihg612hacking.wordpress.com/

and the latiest is here

https://drive.google.com/folderview?id=0B6wW18mYskvB...

ALL of those I have tried ( around 6 ) all appear to load correctly, modem reboots at end etc.

All done using these instructions.

http://huaweihg612hacking.files.wordpress.com/2011/1...

On the other forum, you mentioned that you may have previously changed the modem's IP Address.

The firmware update may well still work using 192.168.1.1, but the changed IP Address may have been retained when it comes to Telnet & GUI access.

Once the modem has rebooted after the firmware has been updated, what happens if still powered up, you press & hold the reset button for 10 to 15 seconds?

As far as I am aware, that should factory reset the modem to default (but unlocked) settings, including setting the IP Address back to 192.168.1.1

I'm planning on buying the Home Hub 5 from BT, Bald Eagle1 (or anyone else), will your scripts automatically work with it?

Apologise if this has been asked before.

They will only work with the HH 5 if it is used as a router only, connected to the Huawei HG612 which is being used as the modem.

RouterStatsHub works with the HH5 http://vwlowen.co.uk/RouterStatsHub/routerstatshub.htm

In reply to a post by BatBoy:

RouterStatsHub works with the HH5 http://vwlowen.co.uk/RouterStatsHub/routerstatshub.htm

But the HH5 only provides some of the stats sadly, the separate modem is still better for those who really want the info.

Thanks for the info everyone. It's a shame that you can't get the same level of detail with the Home Hub 5.

Edited by deleted (Mon 03-Mar-14 18:22:10)

Same here. Did you manage to fix it?

Yes I did as per the instruction from BE1 above and it worked for me.
--------------.

Once the modem has rebooted after the firmware has been updated, what happens if still powered up, you press & hold the reset button for 10 to 15 seconds?

As far as I am aware, that should factory reset the modem to default (but unlocked) settings, including setting the IP Address back to 192.168.1.1