How to change the IP address of the China Telecom optical modem LAN port? 192.168.2.1 Crashed into the company VPN subnet, and every consecutive VPN would disconnect. I moved the entire subsidiary process

started working from home last month, but encountered a strange incident: as soon as the company VPN was activated, the home network crashed—the surveillance app went completely gray, the NAS web page wouldn't open, and even mobile notifications were inactive. Disconnect the VPN, and within a dozen seconds, everything is fine. At first, I suspected the router was leaking air, so I restarted three times, but it didn't help. I struggled until 11 p.m. before I finally understood: it wasn't that someone was broken, it was the company's network segment and my fiber modem's segment, the same one.
to clarify: upgrading the router was wasted. This time, the network segment is for the optical modem
so I need to explain the topology at my home first. This directly determines who you want to modify. The weak current box only has one network cable embedded in the living room, so the telecom optical modem dials (router mode) inside the weak current box. The Xiaomi AX3000T in the living room is plugged in and DHCP is turned off, used purely as an app. With this connection, all the gateways for all family devices use the optical modem (ONT) 192.168.2.1, while the router is just a "non-issuing distribution box." The
problem is that when the company VPN (we use Sangfor's EasyConnect) is connected, it pushes a new route into the computer: 192.168.2.0/24, passing through the VPN tunnel. But my home network segment happens to be 192.168.2.0/24. Typing in the command line route print is clear—the same segment has two routers, one pointing to the VPN virtual network card and one to the home gateway, and the routing list starts fighting on its own. I want to access the company's 192.168.2.x server, and the packet might be sent to the home optical modem; I want to access the backend of the home optical modem, but the packet is stuffed into the VPN tunnel again. Intermittent and intermittent is how it came about.
days, I changed the router's LAN port IP out of habit, but after doing so, I found it didn't solve the problem at all—in AP mode, the router doesn't assign addresses at all; the network segment is controlled by the optical modem. decide who your home needs to change, just note one thing: who's dialing up, whose LAN is connected to your device, and the network segment belongs to that person. can't tell whose backend is at either end, first read the article about the modem and router fighting over the same IP, where I wrote down the detailed identification method. After judging, you find you need to use the light mode, so keep reading.
before making changes, prepare three things: the super admin password, screenshots, and picking a new network segment
and the first is the super admin password. The useradmin on the optical modem sticker is a regular account, but the menu has been clipped. The LAN settings section either doesn't exist or can't be changed. I already complained about this once the port mapping article. You need to use a telecomadmin super admin account. How to obtain it compliantly, what to say with 10,000 accounts, see about obtaining super passwords—no need to repeat yourself.
the second item, take a screenshot and save it. In the super admin backend, first take a screenshot of the entire "WAN Connection" page, especially the VLAN number and bound port for the IPTV connection. Before setting up your network, leave a backup, and if something goes wrong, copy it back. This is the rule I earned by spending a night off the internet.
third, select new segments before proceeding. Don't be lazy and pick familiar faces: 192.168.0.x is Mercury Tenda's territory, 192.168.1.x is the easiest to collide with other devices, 192.168.2.x is the main device to avoid, and 192.168.31.x is the Xiaomi backend. I picked 192.168.5.1, with a pool of 192.168.5.100 to 200, so the chance of collision is low. Another tip for bridge enthusiasts: after switching to bridge, the optical modem also has a management IP. If it's on the same LAN as your router, the management IP won't be accessible. You can also follow this article to move the management IP away—the principle is the same.
Five-step operation: I've gone through the menus of both the HS8145V5 and F7015T
Step one: open 192.168.2.1, log in with telecomadmin, and useradmin can't access it at this point.
Step two, find LAN settings. Huawei HS8145V5 this unit, the menu is under "Network → LAN Settings," which I categorized under the Home Network Group in my firmware version; The ZTE F7015T is the LAN-side management system within the "network." Telecom firmware versions vary by location; menu names will be moved. If you can't find them, just dig for tabs labeled "LAN" or "LAN" in the backend. Don't go to WAN connection, which is for dial-up. If you make a mistake, your whole family will be disconnected.
Step 3: Change the IP address from 192.168.2.1 to 192.168.5.1, but the subnet mask remains unchanged and remains 255.255.255.0.
Step four: check the DHCP pool. Most firmware changes the LAN IP, and the pool automatically follows to 192.168.5.100-200, so you can confirm at a glance; some firmware doesn't follow and you have to manually change both the start and end addresses of the pool. If you slack off here, after saving and restarting, the device will still use the old segment address, but your home will still be messed up, basically making a wasted change.
Step 5: Click Apply or Save. The optical modem restarts on its own, usually after 2 to 5 minutes, with a few flashes of LOS on the front panel and a persistent PON at the end, which is considered the device to be revived. During this time, don't disconnect the fiber or cut the power—wait until it finishes fiddling on its own.
it's not done after the changes: four clean-up items don't miss
After the modem starts, the address bar must be entered into 192 the backend, and entering the old address will only spin in circles. This isn't broken, it's the house number changed.
then packed up the equipment one by one. For DHCP devices, retake the address: use ipconfig /release on the computer, then ipconfig /renew; The phone simply "forgot the network" and reconnected the device. The real pitfalls are devices that have been manually set with static IPs—printers, NAS, cameras, and so on. My network port printer was over-modified. The next day, the whole family was fine except it lost contact. After searching for over half an hour, I remembered its manually entered IP address was 192.168.2.x, and the gateway was pointing to the old address. When changing static IP devices, both the gateway and IP should be moved to 5 segments, but the DNS should not be changed.
two things you don't need to worry about: Xiaoyi Manager App binds the optical modem device itself, not the IP, so it usually doesn't need to be re-bound. If it shows offline, delete and re-add it; IPTV uses independent VLANs, so if you don't operate in this segment, you can watch the TV box as you wish. If the screen really goes black, check the article on IPTV rescue after bridging .
What ifpushed back the next day: ITMS should be mentally prepared
The most annoying part of changing the optical modem configuration isn't the operation, but the possibility that it won't recognize it. Telecom has a remote network management system called ITMS, which pushes the optical modem configuration back to the standard template in the middle of the night. Bridging and changing WAN are high-risk items. I've written a separate article about this pitfallITMS pushing it back to the topic . Fortunately, most provinces with LAN networks are not included in the forced promotion zone—I haven't been pushed back for over a month since I changed it, but I've seen a few provinces pushed back in the group, so don't take it lightly.
verification method is simple: after the modification, check the system logs the next day. If the issuance record shows TR-069 or ACS and the network segment reverts to 192.168.2.1, then it was pushed. The countermeasures are still the same three: call number 10000 to report "You bought your own router, please send it according to the user's own router template," or resign yourself to changing it again. Modify the screenshot of the previous WAN connection table; now this is your copying draft.
WhoAvoid Messing With: Take It Personally
| your situation | should you use optical modem |
| but if you connect to the company VPN, the connection will drop. The IT refuses to change the VPN range | so you have to change it. There's no other solution |
| the optical modem is bridged, but the management IP and router LAN can't be accessed | so prioritize switching to the router side, which is more hassle-free than using the optical modem. |
| The optical modem is dialing, and the router is used as an AP. If you want to change the network segment at home | you have to switch to the optical modem. This article covers this path |
| simply dislike 192.168.2.1, want to find a more pleasing | don't bother with it, no profit at all |
| modem WiFi is slow, hoping IP changes will speed up | changing IP doesn't fix slowness, first split up the dual-band and mark the bands |
the second line of the table mentions 'the router modification side,' the article on changing the LAN port IP for routers like Mercury Tenda, and the Xiaomi LAN IP Xiaomi's all have lower thresholds than the backend threshold for the optical modem super modem; The last line of WiFi is slow. First, check the article on splitting the optical modem dual-band before considering anything else.
wrap it up one last time. If you really want to get started, copy the order by example: get the super admin password → screenshot the WAN table → pick a 5-segment network segment → change IP to check the DHCP pool → save and restart → move static IP devices one by one → check the logs the next day to prevent pushbacks. The most time-consuming part isn't the changes, but cleaning up those old devices with hand-filled IPs. Making a list of them before you start can save you a lot of trouble.
