Beijing Mobile replaces 2.5G optical cat XG-040G-MD by itself

Beijing Mobile 18 low-consumption broadband, add 18 yuan to speed up to 1000M, and the little brother said that this situation could not replace the 2.5G cat, so he had to do it himself.
Xiao Yellow Croaker Tao XG-040G-MD Mobile Version, the default password CMCCAdmin/aDm8H%MdA cannot be logged in, and it cannot be reset.
had no choice but to take out the TTL method and do it according to the posts of the gods.
rarely go to the forum, so I made a note and posted a post for my Beijing mobile friends in need.

1. Connect TTL
left to TTL programmer GND | The second from the left is TTL TX | Left third receives TTL RX

2. After the successful startup of the overrun password

enter password in user> enable
enter shell
screen prompt password:
enter the password LA (ImvZx%8
which is already root privileges
enter the following:
cfgcli -s InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccount.UserName CMCCAdmin
cfgcli -s InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccount.Password aDm8H%MdA

3. Modify the province
http://192.168.1.1/opid_setting.cgi Set "Beijing"
and it will restart

4. Modify MAC, device SN, model, etc
ritool set YPSerialNum SKYW12345678
ritool set MACAddress 1a:1a:1a:1a:1a (MAC English should be lowercase, there is a MAC address on the back of the cat, just copy it)
ritool set G984Serial 12345678 (this position is the last 8 digits of the device identification number)
ritool set MfrID SKYW (change the manufacturer's logo NBEL to SKYW)
ritool set Mnemonic SK-D746 (device model SK-D746)
the first 4 digits of Beijing Mobile's SN are the manufacturer name, and the last 8 digits are the serial number. The Internet says that only SN and Password are needed, I simply changed them thoroughly
after the change, verify it with the command:
ritool dump

5. Open telnet and change the root password (not required)
log in with overrun privileges to access:
http://192.168.1.1/system.cgi?telnet Enable telnet function
cfgcli -s InternetGatewayDevice.DeviceInfo.X_CT-COM_ ServiceManage.SuPassword xxxxxx
then remote telnet 192.168.1.1 to log in

6. Use route dialing or bridging according to your needs
For example, I use the bridge mode:
after modifying the province, this part will be configured as the routing mode by default, and I will change it to the bridge.
network - broadband settings - keep "2_INTERNET_B_VID_10", TR069 remote management and IPTV (starting with OTHER) are best deleted
connection method: bridge __ HTML49__ enable vlan: 10
802.1p: 4
LAN port binding: LAN1 (2.5G port), and do not need to check the others.

How can one repay...Reply

#28

Solving it yourself is indeed fulfilling, but the process is challenging. Resetting the password is ineffective, TTL operation is complicated but effective, it is recommended to try carefully to avoid equipment failure caused by misoperation.

2 个月前

The clouds are li...Reply

#27

It is quite a sense of accomplishment to change the cat by yourself, but the process is really tossing. Resetting the password is useless, you can only use the TTL programmer. The steps are detailed and suitable for users with skills, but ordinary users may find the threshold too high.

The stars and moo...Reply

#26

It is really troublesome to change the cat yourself, but it is worth it to speed up. Resetting the password is invalid and can only be cracked with TTL tools, the process is complicated, but the experience is significantly improved after success.

3 个月前

The sword points ...Reply

#25

Although it is troublesome to change the cat yourself, it can solve the problem of operator restrictions, and the process needs to be carefully operated, otherwise mistakes may occur. Sharing experience hopes to help friends who are also experiencing problems.

#24

It is really troublesome to replace the light cat yourself, but it is worth it to speed it up. The process requires certain skills, and the steps of resetting the password and modifying parameters are prone to errors, so it is recommended to consult the information before operation to ensure accuracy.

Old dreams are ha...Reply

#23

Do-it-yourself to get the light cat, although the process is complicated, but it is finally successful. It is hoped that Mobile can support replacement as soon as possible to reduce user tossing.

The rain fell on ...Reply

#22

Do-it-yourself replacing cats is troublesome, but it can solve the problem. If resetting the password is invalid, you need to use the TTL tool, and the process needs to be careful, otherwise errors may occur. Hope the tutorial can help other users.

It's better to go...Reply

#21

It is indeed difficult to replace the light cat yourself, but the process is quite smooth. After failing to reset the password, it was solved with TTL, although it was a bit of a toss, but the result was worth it. I hope that the installation of maintenance can improve the process and reduce the trouble of users.

Wait for the flow...Reply

#20

It is really troublesome to change the cat yourself, but it is also worth a try to speed up. Resetting passwords and TTL operations requires certain skills, and it is recommended to back up data to avoid errors.

A sword every ten...Reply

#19

Although it is troublesome to replace the light cat by yourself, the experience is significantly improved after success. It is hoped that Mobile can solve the problem of changing cats as soon as possible and reduce user tossing.

The wind stopped ...Reply

#18

Do-it-yourself is indeed time-consuming and labor-intensive, but the success is worth it in the end. The process is complex and requires careful operation, which is suitable for friends with a certain technical foundation to refer to and try.

The stars are the...Reply

#17

It is indeed troublesome to change the cat yourself, but you have to try it in order to speed it up. Resetting the password is invalid, you have to use TTL tools to toss, the process is complicated but ultimately successful, it is worth sharing the experience with friends who have the same needs.

In the lonely cit...Reply

#16

Do-it-yourself cat replacement is quite fulfilling, but the process is complex and requires attention to detail. Resetting the password and changing parameters is quite troublesome, fortunately there is a tutorial reference, otherwise I really don't know how to solve it.

Fireworks in the ...Reply

#15

Replacing the light cat by yourself is indeed time-consuming and laborious, but you have to try it in order to speed it up. The process is complex, and password settings and parameter modifications require careful operation, otherwise it is easy to make mistakes. I hope there will be a simpler solution in the future.

Dead leaf butterflyReply

#14

Do-it-yourself replacing cats is troublesome, but it can solve the problem. Resetting passwords and modifying region settings is a real headache, but fortunately, there are tutorials to refer to. It is hoped that mobile can improve services and reduce user toss.

Beijing Mobile replaces 2.5G optical cat XG-040G-MD by itself

Comment List

Contact Us

Beijing Mobile replaces 2.5G optical cat XG-040G-MD by itself

Related Recommendations

Comment List

Contact Us