301

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

In my system it registered as COM77, so I used -p77 argument.

And it's the ZTE Diagnostic Interface?

302

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

It is a different, fully working module. For some reason I can't force qtools to do anything and I don't speak russian well enough to understand the error messages neutral

which COM do you use to send commands?

303

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

I reverted 'edl' to older revision and I get pretty similar behaviour as on Windows with SB3.0. No matter which loader I pick, even the patched one from the SB3.0 archive. Modem reboots into OS instantly after uploading the loader. If I force 9008 somehow, edl still hangs at uploading with no output on both sides. So maybe my modem is toast more than yours. I guess I'll try with 286A first.

Someone got access to this firmware? https://easy-firmware.com/index.php?a=d … ;id=163051 It seems to be the generic one as used in my version. I disassembled MF286 as well, and the modem hardware is ever-so-slightly different.

Shorting D+ to GND doesn't seem to have any effect other than causing problems with USB enumeration. I have yet to make a proper adapter for that because using even the sharpest multimeter probes for that isn't reliable. I managed to force the USB enumeration to fail that way, but modem didn't enter EDL mode.

Also, I think it is a good idea to force my working unit into EDL mode and then attempt to read its whole flash including EFS, that it would not give up over ADB.

But have you tried to reboot the modem in EDL use the qcommands?

EDIT: but I don't understand. In which status is your modem? I've seen that you have ADB shell, or it was from another module?

304

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

It does at least under DSA. Or under swconfig ports 2-4 work, port 1 is "special" due to IPQ40xx quirks. You might need to manually edit /etc/config/network for it, though, because LuCI will show conflicts.

it supports also trunk uplink?

305

(890 odpowiedzi, napisanych Sprzęt / Hardware)

the SB3.0 procedure should be used only in case of disaster.. i think all other stuff should be done using ZTE framework smile

do you guys know if the MF286D switch support VLANs?

306

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

Dobra popełniłem błąd w instrukcji już go naprawiam  - banalny zamiast wrzucić plik stich86 przez restore to ja robiłem backup. Wybaczcie forumowicze. Zaraz będzie aktualizacja

Bedzie również aktualizacja do tego co napisał nanni85 odnośnie sterowników jak znajduje 4 nowe urządzenia

I suggest to add "ATI" command check after rewrite the backup and do the 8\F AT command.
So you can check if the IMEI was written correctly on the modem

307

(200 odpowiedzi, napisanych Sprzęt / Hardware)

guys a question: with openwrt is it possible to use VLAN on the switch?
I'm talking about MF286D

thx

308

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

Yes I try again wait a moment I check. Later a didn'n check imei now by picocom I check


EDIT

unfortunately it does not show imei. We can teamviewer maybe I'm doing something wrong then and the manual is wrong.

Yea let me know when ready

309

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

I checked stich86 with this command and unfortunately I have this:

root@OpenWrt:~# picocom -b 115200 /dev/ttyUSB1
picocom v3.1

port is        : /dev/ttyUSB1
flowcontrol    : none
baudrate is    : 115200
parity is      : none
databits are   : 8
stopbits are   : 1
escape is      : C-a
local echo is  : no
noinit is      : no
noreset is     : no
hangup is      : no
nolock is      : no
send_cmd is    : sz -vv
receive_cmd is : rz -vv -E
imap is        :
omap is        :
emap is        : crcrlf,delbs,
logfile is     : none
initstring     : none
exit_after is  : not set
exit is        : no

!! Settings mismatch !! Type [C-a] [C-v] to see actual port settings
Type [C-a] [C-h] to see available commands
Terminal ready
ATI
Manufacturer: ZTE CORPORATION
Model: MF286DMODULE
Revision: BD_TELIAMF286DV1.0.0B02
SVN: 01
IMEI:
+GCAP: +CGSM

OK



What to do to get imei. And how does it connect to the network without imei?

Have you restored QCNX file? IMEI is inside it

310

(890 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

Wg kolegi @stich86 fw do modemu jest jedno z 2019 roku , i aktualizacji prawdziwej nie ma , zmienia się tylko kolejna wersja wyświetlana , a w środku we wszystkich jest to samo....
Stąd aktualizacji modemowi nie ma sensu na siłę robić. Choć sam chętnie bym spróbował , bo mój modem był z playa , miał wgraną Elisa B02 , a teraz Telia B02...

Ale żeby ją zrobić ,trzeba modem wprowadzi w stan QLoader 9008. Pewnie za pomocą pinu się uda...

Looks like they have put a sort of check between modem and router version.
You can also use different one, but in my case the router refues to bring up 4G connection. You can see signal, send or receive SMS, but the data connection doesn't go up. Only way is to have all aligned, I think you can also spoof the version on router side using nvram set commands to avoid a modem flashing, but I prefer to have both aligned using the ZTE framework smile

311

(890 odpowiedzi, napisanych Sprzęt / Hardware)

nanni85 napisał/a:

All light are off, router work in Wi-Fi or Ethernet …

usally the LEDs work only if the modem is good.
You have to restore using TFTP all stuff on the router, it's the only way to have everything aligned

312

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

No u mnie zawsze wchodzi wchodzi pinem w sensie trzeba uparcie, konsekwentnie i cierpliwie do tego dążyć. Jak wchodzi w tryb 9008 to wówczas nie ma żadnych logów na uarcie - całkowita czystka

yes on 9008 USB mode UART is silent

313

(890 odpowiedzi, napisanych Sprzęt / Hardware)

nanni85 napisał/a:

before removing the modem after doing the restore I tried to give the ATI command and it gave me the correct IMEI ... maybe I have to restore the nordic firmware on the router to make it recognize?

Yea I think you have broken config on the router side. There are two files called 2860a/b into /etc/zte_rw (if I remember correctly). Rename them to .old and reboot the router

Should be recreated reading the IMEI from the module

314

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

Ja swojego nie wsadzałem do oryginalnej płyty mf286d więc nie wiem co on tam pokazuje jaki imei. Być może jutro późnym wieczorem uda mi się do niego dostać i sprawdzę to. Jak będzie jak u Ciebie to będziemy ze sitchem86 dumać co z tym począć żeby był prawidłowy imei z naklejki. Pawpol zgłaszał że chyba też ma mf286d umarlaka albo ktoś inny niech to przetestuje kto ma umarlaka. Mój modem na pewno działa na openwrt. Jutro mogę spróbować wydać mu komendę żeby odczytać imei.

stich 86 you can recall the command what reads imei?

“ATI”

315

(890 odpowiedzi, napisanych Sprzęt / Hardware)

nanni85 napisał/a:
stich86 napisał/a:
nanni85 napisał/a:

kiedy otwieram SDI mam ten ekran:

https://i.imgur.com/NFGztUd.png

but your modem is not broken, you have also ADB interface... what you are trying to do?
May be you want to change IMEI ah? smile


no.. i have IMEI 000000000000 in NORDIC.... i have completed procedure and do AT command, removed modem from USB and put back to MF286 but imei remain 0000000000000
any help?

ATI commands on the modem what’s say?

316

(890 odpowiedzi, napisanych Sprzęt / Hardware)

nanni85 napisał/a:

kiedy otwieram SDI mam ten ekran:

https://i.imgur.com/NFGztUd.png

but your modem is not broken, you have also ADB interface... what you are trying to do?
May be you want to change IMEI ah? smile

317

(890 odpowiedzi, napisanych Sprzęt / Hardware)

you should run SDI software from file "SDI_driver_ZTE_MF286D.7z"

318

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

Dobra zmordowałem tą instrukcję można testować. Pierwszy post tego wątku zaktualizowałem

nice work smile

319

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

I can force it into 9008 mode. But then it either reboots (if running SB3.0) or just stays there if trying to use 'edl' on it, regardless of selected lodaer - as I mentioned, probably an edl bug. Haven't really tried qtools to force the modem into 9008 EDL, because I could do that with the wire.  qtools would spew out something in russian, which came out garbled due to lacking cyrylic font in console - and fail. Maybe I can cross-compile the latest version on Windows.

I think you have to force in 9008 like I did using qtools

320

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

Ok then, that explains a lot.
I need to make myself some kind of USB adapter board to connect between the laptop and the modem breakout board, allowing for external backup power and for grounding the D+ line to enter EDL mode. I guess I know what I'll do tonight at hackerspace ;-]

but what's the current status of your modem?

321

(890 odpowiedzi, napisanych Sprzęt / Hardware)

wait a second guys..

SB3.0 (usally Software Download app), can put the modem in 9008. The problem is that our modem doesn't accept the loaded bootloader and reboot itself.

So only way is to put on 9008 using patched bootloader and qcommands provided

322

(890 odpowiedzi, napisanych Sprzęt / Hardware)

smereka napisał/a:

Listen stich86 I trying to put together this instruction and go through all the steps from the beginning. Unfortunately, now always after using sb3.0 it happens very quickly, not as it was damaged and after resetting it starts not as nmea, propiaty only as adb and all devices when it is operational. How to make sb3.0 run as nmea, pripiaty, etc.

I don't understand... what are you trying to do?

323

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

Something has changed recently since I tried EDL under Linux last time - which is my main OS - probably when I pulled last EDL updates. Now it seems to stick on the Sahara hello packet for some reason. I'll revert it and see what happens - I was using the patched loader with that previously, and behaviour was quite similar in both modes.

Regarding SB 3.0, I was able to enter 9008 mode without qtools, having feedback on the modem's console, and this one was recognized properly. However, just after starting the process, the modem rebooted to show 19d2:0076 ID, was detected by QPST in Sahara Memory Dump mode, and then promplty rebooted back into OS - and this is the puzzling part.

Because SB3.0 send a wrong loader and you will get this bootloop
use my qtools and commands to put it on 9008 wink

324

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Leo-PL napisał/a:

Ok, took the plunge and attempted to flash once again. Reinstalled QPST and drivers, and whenever the device identifies as 19d2:0076 (QUSB__BULK), something interacts with it and causes a reboot into normal sequence. I had a Sierra modem installed in the laptop I'm using, so I removed its drivers just to be safe. The question is - which drivers are correct for this ID? Previously I found "ZTE Diagnostic drivers" package, but it's from pretty random source on the Internet, and I wonder if it doesn't conflict with drivers bundled with QPST.

Also, after entering 9008 QDL mode, and starting SB3.0 download, the modem just reboots after executing the loader.

I had pretty much the same behaviour, when trying to dump the flash contents using 'edl', device reboots just after uploading (E)NPRG9x55p.bin - so I wonder if my modem's RAM isn't actually toast :-(

Also, a request to @smereka or @stich86 - what happens if you try to dump the NAND contents from the modem using EDL tool, if you force it to 9008 mode and use ENPRG9x55p loader?

Edit: currently the most I can get out of it is that:

Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022.
main - Using loader zte mf286d Nordic to Nordic_B11 192.168.32.1 pw admin/UPDATE/NPRG9x55.mbn ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2.1
main - Mode detected: sahara
Device is in streaming mode, uploading loader
sahara - Device serial : 0xc1203dba
sahara - Protocol version: 2.1

You have to use loader into qtools folder, not the one into ZTE framework (that I think are not patched)

Use the qtools found on my MEGA folder, when you are in that mode 19d2:0076, use SDI programm on driver folder to install driver called "ZTE Diagnostic Port", the use these command to put it on 9008 HS Loader mode:

X = your port COM number

qdload.exe -k12 -q  -pX
qcommand.exe -pX -c "m 193d100 1"
qcommand.exe -pX -c "d 7980000 4" <-- stop this one when the modem switch to 9008 device, usally just two printed outputs

After last command, modem should boot in 9008 mode, please be sure to install 9008 Qualcomm drivers, otherwise you will have Uknown device. When you are on this mode, you can load firmware with SB3.0

If you want we can do a TeamViewer session smile

325

(890 odpowiedzi, napisanych Sprzęt / Hardware)

oh nice.. with changed IMEI, our MF286D finally can connect to TIM network smile

https://www.speedtest.net/result/13310349163.png