Unlocking Huawei HG612 Process Changed?

Hi All,
When I first got BT Infinity I unlocked my Huawei HG612 to see the line stats.

A year later my Huawei HG612 overheated and died, common fault I think back then. So it was replaced.

A few years on... my internet has been choppy lately, lots of digging up in the road and openreach vans about, so I thought I would see what my stats are currently.

However.... I cant unlock this modem or update the firmware?

My modem is a Huawei HG612 2B Firmware on the box: V100R001c01B028SP10

Have things changed?

When i try the original process for unlocking this modem LAN2 never illuminates and my MAC does not notice a LAN connection of any sort let alone grab a IP.

At first I thought it was the ethernet cable so tried 2 others to no avail.

Any ideas people?

Thanks

Are you manually setting an IP address on the MAC? It won't "grab an IP address" you have to give it one, the instructions say 192.168.1.100, although the 100 bit can be anything between 2 and 254 I think. You will also need to specify a gateway of 192.168.1.1 and a subnet mask of 255.255.255.0.

Edited by kasg (Sat 06-Jun-15 21:30:00)

Yes I have set my MAC to obtain a static IP: 192.168.1.100

I have done the process before successfully on the 1st modem I had that broke, but never on this modem. I have followed the process about 5 times eachtime my MAC does not even recognise a ethernet connection and the modem LED does not flash once with LAN2 when plugging/unplugging or powering up :/

Post deleted by RobertoS

Have you tried a factory reset on the modem?

What do you mean by "to obtain"? It's an internal setting you give it. It sounds almost as though you've told your router to allocate it.

Edited by RobertoS (Sat 06-Jun-15 23:10:04)

I have configured my NIC to use DCHP with Manual Address: 192.168.1.100.

Also tried without DCHP and entered the settings manually using: 192.168.1.100 and subnet mask: 255.255.255.0 and router: 192.168.1.1

Again I have done this process before successfully. My Asus Router is not even in the equation.

I haven't tried a factory reset on the modem as I assumed holding the reset button down when powering up and connected to LAN2 does this?

Edited by Scoot (Sat 06-Jun-15 23:25:01)

I don't think it does.

Or rather, it might (probably does) - but after the upload not before. There's no harm in trying a reset first, because if LAN2 has somehow been disabled then that would explain why the Ethernet connection is failing.

I'll look up the proper process for a factory reset tomorrow then bit late for messing around now.

I just assumed the reset process when unlocking the modem was a factory reset of sorts.

Thanks

Similar to flashing. But you start with the modem up and running. Then just press and hold the reset button until some lights start flashing and release the button. More lights start flashing after a while, and then it boots up normally.

In reply to a post by Scoot:

I just assumed the reset process when unlocking the modem was a factory reset of sorts.

It is. But flashing replaces the stored factory firmware as well as resetting the configuration. It doesn't start with a reset, so if something has got screwed up and is blocking LAN2 you can't do the upload and flash.

There's always the possibility of course that the LAN2 is duff. Or got some fluff in the socket!

Edited by RobertoS (Sat 06-Jun-15 23:45:09)

Do you have your mac and hg612 connected directly, or via a router. If the latter, are you certain nothing else on the network (including your router) is on IP 192.168.1.1 - which the HG612 will use.

What address is your router on - many are at 1.

Are you also certain nothing else is using the IP you are manually giving your mac? Have you used an address outside the DHCP range of the DHCP server on the router?

Edited by tonycollinet (Sun 07-Jun-15 09:19:28)

I can say I have recently bought an HG612 and flashed it following the instructions provided in the .pdf which comes with the firmware binary files.

I have a HG612 & it's is IP 192.168.1.1, & I cannot access it since flashing it, have changed my Asus RT N66U router IP to 192.168.1.2 so there isn't a clash.

Before the latest update, there was no problems, checking dslstats, I can now see G.INP is enabled, so I know it flashed ok.

In reply to a post by Nightglow:

I have a HG612 & it's is IP 192.168.1.1, & I cannot access it since flashing it, have changed my Asus RT N66U router IP to 192.168.1.2 so there isn't a clash.

Before the latest update, there was no problems, checking dslstats, I can now see G.INP is enabled, so I know it flashed ok.

If DSLStats is seeing it then it's you doing something wrong that is preventing you doing so.

Can you see the GUI?

So I finally got my HG612 to flash again with hacked firmware.

Just wondering, if by these anyone can tell my line length and if my line has G.INP enabled on it?

In the process of messing around getting the hacked firmware on here, I've rebooted a few times, has this had a negative effect on my line? thanks

# xdslcmd info --stats
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Last initialization procedure status: 0
Max: Upstream rate = 30300 Kbps, Downstream rate = 91924 Kbps
Bearer: 0, Upstream rate = 19999 Kbps, Downstream rate = 79999 Kbps
Bearer: 1, Upstream rate = 0 Kbps, Downstream rate = 0 Kbps
Link Power State: L0
Mode: VDSL2 Annex B
VDSL2 Profile: Profile 17a
TPS-TC: PTM Mode(0x0)
Trellis: U:ON /D:ON
Line Status: No Defect
Training Status: Showtime
Down Up
SNR (dB): 9.3 15.3
Attn(dB): 9.9 0.0
Pwr(dBm): 14.0 -6.0
VDSL2 framing
Bearer 0
MSGc: -6 26
B: 130 237
M: 1 1
T: 0 42
R: 8 16
S: 0.0518 0.3781
L: 21468 5374
D: 16 1
I: 139 127
N: 139 254
Q: 16 0
V: 14 0
RxQueue: 60 0
TxQueue: 20 0
G.INP Framing: 18 0
G.INP lookback: 20 0
RRC bits: 0 24
Bearer 1
MSGc: 186 -6
B: 0 0
M: 2 0
T: 2 0
R: 16 0
S: 5.3333 0.0000
L: 48 0
D: 3 0
I: 32 0
N: 32 0
Q: 0 0
V: 0 0
RxQueue: 0 0
TxQueue: 0 0
G.INP Framing: 0 0
G.INP lookback: 0 0
RRC bits: 0 0
Counters
Bearer 0
OHF: 0 199334
OHFErr: 0 0
RS: 60845728 4073394
RSCorr: 2 1
RSUnCorr: 0 0
Bearer 1
OHF: 49307 0
OHFErr: 0 0
RS: 590942 0
RSCorr: 0 0
RSUnCorr: 0 0

Retransmit Counters
rtx_tx: 15863 0
rtx_c: 2 0
rtx_uc: 0 0

G.INP Counters
LEFTRS: 0 0
minEFTR: 79999 0
errFreeBits: 966425 0

Bearer 0
HEC: 0 0
OCD: 0 0
LCD: 0 0
Total Cells: 121791997 0
Data Cells: 2653847 0
Drop Cells: 0
Bit Errors: 0 0

Bearer 1
HEC: 0 0
OCD: 0 0
LCD: 0 0
Total Cells: 0 0
Data Cells: 0 0
Drop Cells: 0
Bit Errors: 0 0

ES: 0 0
SES: 0 0
UAS: 35 35
AS: 792

Bearer 0
INP: 48.00 0.00
INPRein: 0.00 0.00
delay: 0 0
PER: 0.00 3.98
OR: 0.01 64.22
AgR: 80614.82 20063.54

Bearer 1
INP: 4.00 0.00
INPRein: 4.00 0.00
delay: 3 0
PER: 16.06 0.01
OR: 95.62 0.01
AgR: 95.62 0.01

Bitswap: 18/18 0/0

Total time = 13 min 47 sec
FEC: 2 1
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 35 35
LOS: 0 0
LOF: 0 0
LOM: 0 0
Latest 15 minutes time = 13 min 47 sec
FEC: 2 1
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 35 35
LOS: 0 0
LOF: 0 0
LOM: 0 0
Previous 15 minutes time = 0 sec
FEC: 0 0
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 0 0
LOS: 0 0
LOF: 0 0
LOM: 0 0
Latest 1 day time = 13 min 47 sec
FEC: 2 1
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 35 35
LOS: 0 0
LOF: 0 0
LOM: 0 0
Previous 1 day time = 0 sec
FEC: 0 0
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 0 0
LOS: 0 0
LOF: 0 0
LOM: 0 0
Since Link time = 13 min 11 sec
FEC: 2 1
CRC: 0 0
ES: 0 0
SES: 0 0
UAS: 0 0
LOS: 0 0
LOF: 0 0
LOM: 0 0

Edited by Scoot (Sun 20-Mar-16 00:19:49)

Ok, so yes you have G.INP running and your line length is about 100 metres so you should be able to easily spot your cabinet on the street. You're running at max sync speed and you have a small amount of interleaving applied - D 16 - which also indicates you're on a Huawei cab.

In reply to a post by BatBoy:

Ok, so yes you have G.INP running and your line length is about 100 metres so you should be able to easily spot your cabinet on the street. You're running at max sync speed and you have a small amount of interleaving applied - D 16 - which also indicates you're on a Huawei cab.

Thanks for the quick reply, how did you work out my line length? looking at the stats nothing makes sense to me other than sync speed. I know where my cab is, its in another street but as the crow flies it could be as little as 80m but I was expecting you to say longer to be honest.

The old Firmware i had on the HG612 didn't support G.INP i believe so this new firmware has enabled it then?

Thanks
Scott

I approximated your line length because your attenuation is similar to mine and I know my line length.

The presence of Bearer 1 and several G.INP values in your stats means G.INP is on.

B030SP08 does have G.INP enabled, yes. As we can see from the stats.

In reply to a post by Scoot:

So I finally got my HG612 to flash again with hacked firmware.

Don't suppose you could tell me where you got the firmware and how to apply it? I've a spare 610 I'd like to update and try. By PM if needed.

Or is the 610 not the same as the 612?

I dont know what firmware you can use with a HG610, quick google found this thread:

http://forum.kitz.co.uk/index.php?topic=13545.0

kitz.co.uk is the site I originally found a tutorial to hacking my HG612, the forums might be able to guide you better than I. With most hardware firmware MUST be the right firmware for your product so don't go flashing your device with any old firmware you pick up, check and double check as you could brick your device.

Thanks for the replies to my posts guys

There is some info and links in this thread - http://forum.kitz.co.uk/index.php/topic,14262.0.html

Hi

I am trying to update my unlocked HG612 from B030SP06 to B030SP08 however it wont do it, I have tried the web gui that wont work and also tried the method that i used when i first unlocked it and that dosent work, i have got all the correct settings in the LAN adapter properties however it wont pick up the software upgrade page just goes back to the login page after about 15 seconds after powering on. How do you update your already unlocked HG612 to the latest firmware as it is not doing it?

Thanks

I think I may have read about certain browsers not working well. I updated one recently using Win10 and Chrome browser.
You are using LAN2 and holding the reset button when powering on?

I am using Win7 and Chrome i've tried IE too but still dosen't work

yes i am and pushing the reset button hard so definitely recognizes i pressing it as there is no feedback (eg click) when i press the button to know if it pressed however ive tried to reset it earlier while it was on to see if the button worked which it did. however still on the old firmware.

After a few slowdowns recently I wanted to check my connection using the modem stats however Ive tried to connect to my HG612 its been connected for months now so I think it may have had a upgrade done remotely.

It was unlocked and I changed the IP address, if I try to connect to that IP I get a "connection refused" message in Chrome, and a telnet connection also fails with the same error.

I can connect to 192.168.1.1 using the 5 second reset on power up, and the download seems to complete and reboot.

However once i try to connect again nothing works, I tried to do a factory reset, but this does not work at all.

Anyone else seen this?

When you first unlocked it, did you remove the second PTM and the BT agent?
If these were removed a remote update should not have been possible.
You should still be able to load the updated unlocked firmware though using the original method.

In reply to a post by smouty:

When you first unlocked it, did you remove the second PTM and the BT agent?
If these were removed a remote update should not have been possible.
You should still be able to load the updated unlocked firmware though using the original method.

Probably not, but i am updating it, and it seems to work.

Its just after that I cant access the GUI. The factory reset wont work either.

Does telnet work? There are two versions of the (latest) unlocked firmware.

In reply to a post by RobertoS:

Does telnet work? There are two versions of the (latest) unlocked firmware.

No, Telnet access is also refused.

I'm using the 08 version, whats the other one?

There are 2 versions in the Mega folder B030SP08

bcm96368MVWG_fs_kernel_HG612V100R001C01B030SP08_unlocked

bcm96368MVWG_fs_kernel_HG612V100R001C01B030SP08_webgui

The _unlocked one has Telnet access but no web Gui
The _webgui one has both Telnet access and a web Gui

Which one are you using?

I've actually tried them both, with the same result.

What concerns me is that I cant factory reset.

I've read that this will only work if there is a active DSL connection, is this the case?

No, it will work even if the modem is not connected.

The main problem I have seen is if anti-virus is running on your PC. I have to turn it off to make the flashing work.

Also, remember you have to flash using the "reset" method, not using the web GUI button.

Another thing to remember is to connect LAN2 on the modem to your PC ethernet port.

Yes, AV is off (wont download the firmware otherwise).

Using the reset method, otherwise I cant communicate with the modem on either lan port.

I am using lan2, I get all the messages as per instructions, just once its completed I cant get to connect to the modem GUI or telnet.

I need to reset, but that dosent seem to work either!

Please confirm the correct procedure to reset? Does the modem need to be on or off before holding the reset down for 15 secs?

Once it's completed, you don't need to reset - but it does take a while to boot

The procedure is here

In reference to www.kitz.co.uk/routers/hg612hacking.htm:

1. Power off the modem.
2. Connect your PC directly to the LAN2 socket
3. Configure the ethernet NIC of your PC with IP address 192.168.1.100.
4. Press the RESET button on the modem and keep it pressed.
5. Do not release the button yet.
6. Power on the modem.
7. Keep the RESET button pressed for a further five seconds.
8. Use your browser to visit the modem's web address http://192.168.1.1/
9. You should see Update Software web page
10. Click the Browse button.
11. Select unlocked firmware from your hard drive and click Update Software.
12. You will now see the Software Upgrade web page
13. Do not turn off the modem until the new firmware is loaded and the modem
14. Once the modem has rebooted, visit the address http://192.168.1.1/ again.
15. You should see the HG612 Login page

Please say which number you get stuck at

In reply to a post by Philce:

Please confirm the correct procedure to reset? Does the modem need to be on or off before holding the reset down for 15 secs?

That "long reset" will reload the locked firmware

Is telnet client enabled in your Windows internet options?

In reply to a post by BatBoy:

Once it's completed, you don't need to reset - but it does take a while to boot

The procedure is here

In reference to www.kitz.co.uk/routers/hg612hacking.htm:

1. Power off the modem.
2. Connect your PC directly to the LAN2 socket
3. Configure the ethernet NIC of your PC with IP address 192.168.1.100.
4. Press the RESET button on the modem and keep it pressed.
5. Do not release the button yet.
6. Power on the modem.
7. Keep the RESET button pressed for a further five seconds.
8. Use your browser to visit the modem's web address http://192.168.1.1/
9. You should see Update Software web page
10. Click the Browse button.
11. Select unlocked firmware from your hard drive and click Update Software.
12. You will now see the Software Upgrade web page
13. Do not turn off the modem until the new firmware is loaded and the modem
14. Once the modem has rebooted, visit the address http://192.168.1.1/ again.
15. You should see the HG612 Login page

Please say which number you get stuck at

I get to step 14, but I get nothing on 192.168.1.1, I did change the IP to 192.168.0.200, and this is where I get the connection refused message.

The factory reset does nothing.

In reply to a post by RobertoS:

Is telnet client enabled in your Windows internet options?

Yes, I use it for work. (win 10 so I am using a chrome plugin)

In reply to a post by Philce:

I get to step 14, but I get nothing on 192.168.1.1, I did change the IP to 192.168.0.200, and this is where I get the connection refused message.

So did you use 192.168.1.1 all the way through the process and then try 192.168.0.200 right at the end (14)?

In reply to a post by BatBoy:

In reply to a post by Philce:

I get to step 14, but I get nothing on 192.168.1.1, I did change the IP to 192.168.0.200, and this is where I get the connection refused message.

So did you use 192.168.1.1 all the way through the process and then try 192.168.0.200 right at the end (14)?

yes 1.1 until the download completes, then the only 0.200 will respond, but that is refused.

I hope you didn't do a "long reset" just before trying 0.200

nope, its responding to 0.200, but giving the connection refused message. This is what I don't understand.

I've tried the long reset several times, but this doesn't seem to work.

So you must have logged in after the firmware has updated to change the IP?
Was telnet working on 192.168.1.1 at that point?

In reply to a post by smouty:

So you must have logged in after the firmware has updated to change the IP?
Was telnet working on 192.168.1.1 at that point?

Yes I did, so I could access on my LAN.

Problem is I now cant get in, and I cant reset either!

In reply to a post by Philce:

Yes I did, so I could access on my LAN.

Problem is I now cant get in, and I cant reset either!

So, you've unlocked the modem and that's ok?

You then changed the IP address to suit your LAN?

And now you can't access the modem?

Are you trying to access it using LAN2?

In reply to a post by BatBoy:

In reply to a post by Philce:

Yes I did, so I could access on my LAN.

Problem is I now cant get in, and I cant reset either!

So, you've unlocked the modem and that's ok?

You then changed the IP address to suit your LAN?

And now you can't access the modem?

Unlocked OK, some time ago.

Yes changed IP.

I have tried both LAN ports.

Are you trying to access it using LAN2?

And you've also changed the IP of your PC back to one on your LAN?
There are no IP conflicts?

You can manually set a local IP for a device as you have the MAC for the HG612 printed on the bottom.

Look up ARP -s e.g. arp -s 192.168.0.99 00-50-04-62-F7-23

In reply to a post by smouty:

And you've also changed the IP of your PC back to one on your LAN?
There are no IP conflicts?

You can manually set a local IP for a device as you have the MAC for the HG612 printed on the bottom.

Look up ARP -s e.g. arp -s 192.168.0.99 00-50-04-62-F7-23

the ip is correct, i get an "connection refused" message once its rebooted.

I cant seem to factory reset the modem!

It does sound like you have another device with the same IP address so you're not actually talking to the modem.

Have you just got the modem LAN2 directly connected to the ethernet port on the PC and not through a switch?

In reply to a post by BatBoy:

It does sound like you have another device with the same IP address so you're not actually talking to the modem.

Have you just got the modem LAN2 directly connected to the ethernet port on the PC and not through a switch?

I was using a cable between my laptop and the modem, no other network connected (including wifi).

And you assigned a correct IP address to the PC, in the same range as the modem?

In reply to a post by BatBoy:

And you assigned a correct IP address to the PC, in the same range as the modem?

yes, 192.168.0.100 laptop, 192.168.0.200 modem.

used 192.168.1.100 when flashing the modem initially.

It might be worth running on the command line or dos window: ipconfig /all to confirm that you are actually talking to the huawei and what its ip address actually is now.

In reply to a post by jaba:

It might be worth running on the command line or dos window: ipconfig /all to confirm that you are actually talking to the huawei and what its ip address actually is now.

Definitely talking to the modem, if I turn it off I get no reply.

Frustrating as hell.

Do a factory reset on the modem.

In reply to a post by RobertoS:

Do a factory reset on the modem.

That's the problem, however long I hold the reset button down it does nothing.

Are you sure you are actually hitting the button? I find them easy to miss.

Hi,

I have 1B version.
Trying to connect to modem and nothing
Step by step from here http://www.kitz.co.uk/routers/hg612hacking.htm and nothing.
What I'm doing wrong?

Impossible to tell from here, as the instructions there are correct. Though I've only ever had 3B version of the HG612.

It's possible the unlocked firmware isn't suitable for a 1B, but I get the impression you don't get as far as trying to upload it so that's perhaps irrelevant.

Hello everyone,

Please help

I am trying to upgrade the firmware based on the instructions here and also as per http://www.kitz.co.uk/routers/hg612unlock.htm using the B030SP08 firmware. My HG612 is 3B version and firmware ends with SP10.

after the firmware upgrade via the firefox and chrome it reboots but unable to login at 192.168.1.1. I also notice after powering up, the LAN 2 led is connected flickers but after few seconds the modem reebots and keeps doing this. I wonder if the firmware is not compatible or there is another process or firmware to be used for 3B version with firmware 8SP10. Thank you

Have you tried powering off the modem for a couple of minutes? Edit - then just turning it on normally.

Edited by RobertoS (Sat 06-Aug-16 15:11:58)

No nothing has changed. You must follow the instructions precisely and ensure you have anti-virus disabled. Connect the modem directly to the PC ethernet port, not via a network

Thank you for promptly responding. I did follow precisely instructions and tried after un installing the antivirus (esset) and also on the linux mint. upgarding it via lan2 port connected to PC. The firmware seems to be getting flashed as I get the webpage as in the instructions and able to select and upload it . However, once the modem reebots after 1-2 mins it appears to be going onto a boot loop , booting and reeboting. Stays on for about 4 secs. I can ping 192.168.1.1 and during this time it says on telnet it says connection refused but after 4 seconds the modem reebots and ping drops until it comes back for 4 secs.

Also have tried all three firmwares available for several times in B030SP08 folder inclduding the webgui

Did it work on receipt? Where did you get it?

Have you tried doing a factory reset on it after doing the flashing. (That should simply reset it with the flashed version).

As a side issue I suggest using the Web GUI version as it can be useful for a few functions. Just its presentation of the stats is messed up.

Edited by RobertoS (Sat 06-Aug-16 18:59:57)

In reply to a post by Philce:

In reply to a post by BatBoy:

And you assigned a correct IP address to the PC, in the same range as the modem?

yes, 192.168.0.100 laptop, 192.168.0.200 modem.

used 192.168.1.100 when flashing the modem initially.

I do not have any of these problems using a Cross over Ethernet cable to my Linux test computer and a HG612 (any model) !.

When setting up the computer Ethernet adapter you must use Manual settings Not DHCP !

re..'192.168.0.100 laptop, 192.168.0.200 modem.'

The modem should be 192.168.0.2 Laptop ok at a higher IP

On your laptop web browser http://192.168.0.2

Edited by APTMAN (Mon 08-Aug-16 00:19:25)

Thanks everyone, it finally worked with a change of AC adaptor, I measured and the outcome was less so changing the AC Adaptor was helpful. With less power being received it wasn't fully flashing. Rest of the process was smooth as described.