1

(1 odpowiedzi, napisanych Sprzęt / Hardware)

Hello guys, I want to explain my problem. I own a ZTR01 router which corresponds to the ZTE MC801A1 model. I have an issue: the original firmware was Japanese, branded by KDDI. I have installed several different firmwares, but I always end up stuck with no service on all SIM cards – not even 4G works.

Let me explain better: the SIMs are recognized, the APN is detected automatically, but the SIM is always shown as no service. I also tried changing the IMEI, but that doesn’t change anything.

Does anyone know where I can download a working QCN file for this model? I’m afraid that my QCN backup file might be corrupted. Has anyone else already experienced this same symptom? If so, how did you fix it? Thanks in advance for your help.

To explain further: I’ve already tried almost all the firmwares – both the T-Mobile one (with admin login access) and the STC (Saudi) one – but every firmware I install results in no service, even though the SIM is detected.

This my router:
https://ibb.co/4nzbTkT6

2

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hi guys, I wanted to ask for some information: what are the credentials to access the Nordic B14 system via the serial port? What are the login and password to enter the Nordic system?

3

(890 odpowiedzi, napisanych Sprzęt / Hardware)

Hi guys, I wanted to ask for some information: what are the credentials to access the Nordic B14 system via the serial port? What are the login and password to enter the Nordic system?

4

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hey guys... Is it true that nordic b15 has been released?

5

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hi guys, a quick question: to debrand the ZTE MF286D router from the Three firmware to the Nordic one, do you have any firmware downloads? For example, Three to Nordic B02?

And then, how can I upgrade from Nordic B02 to OpenWRT?

Thank you for response

6

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Can you help me understand how to redo via JTAG? Any additional suggestions, like the chip or things like that?

7

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

How can I rewrite uBoot via JTAG?

8

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Cezary napisał/a:

Not included by default. Install manually.

I installed flash_erase from the nand-utils package and formatted mtd0, which gave an error: "skip bad block." I installed OpenWrt multiple times, and occasionally it would load the firmware or kernel immediately, while OpenWrt sysupgrade would block it multiple times before starting. Only some versions worked. In the end, it stopped giving me any response from uBoot. Pressing ESC no longer stops anything. If you have any additional suggestions, let me know. By the way, I’m selling the modem module with the original IMEI on eBay.

9

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

In which version of OpenWRT can I have mtd-utils with the flash_erase command? Thank you very much for the answer.

10

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hi guys, I have a serious problem. I'm connected via the serial port, and after installing OpenWRT with the Telia B12 module, I rebooted the system, but I'm getting the error you see on the screen. How can I fix it? If I press ESC, the boot is not recognized.

Please solution?

https://ibb.co/HTf34Nk

It doesn’t allow me to type any commands, and the LAN connection drops intermittently with a strange IP address.

11

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

I managed to create from the framework the Italian version of TIM to Nordic B14 admin password and also the Nordic to Nordic B12 admin PASSWORD.

TIM to Nordic B12 psw admin:
https://drive.google.com/file/d/1Zrz37L … p=drivesdk

Nordic to Nordic B12 psw admin:
https://drive.google.com/file/d/1ZzftVm … p=drivesdk

TIM to Nordic B14 psw admin:

https://drive.google.com/file/d/12ttQKF … p=drivesdk

Nordic to Nordic B14 psw admin:

https://drive.google.com/file/d/1RN9b2Z … p=drivesdk

Byeee

12

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

Everything works , but i'm pritty sure OTA tocB14 will crash ( if it will find it )...

Can any of you modify the ZTE framework using the mtd8.bin file with admin access to the root_ulmage file using the admin password, on B12? I uploaded the mtd8.bin file and just wanted to know if someone is able to do it. We know very well that this method blocks updates to B14, as it has already been tested. This way, even without a serial connection, the 4G band lock feature can be used.

13

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hi guys, I managed to create an mtd8 partition with Nordic b12 and the admin login password. Everything works wink

Link this:
https://drive.google.com/file/d/14KOC3g … p=drivesdk

Byeee

14

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

Hello guys

Dump Nordic all version + Module Modem Telia All
https://drive.google.com/file/d/1wJLRoi … p=drivesdk

Dump Nordic B11 all package pass login: admin

https://drive.google.com/file/d/1PtEsh7 … p=drivesdk

Downgrade OpenWrt to Nordic:

mtd -e web write mtd8.bin web
mtd -e rootfs write mtd9.bin rootfs

mtd write mtd8.bin /dev/mtd8
mtd -r write mtd9.bin /dev/mtd9

Flag -r (reboot system now) and Nordic return Nordic version upload

15

(3 odpowiedzi, napisanych Sprzęt / Hardware)

Hello guys, does anyone know how to switch from the branded firmware of this MF297D to the original Nordic firmware instead of the branded version?

16

(7 odpowiedzi, napisanych Sprzęt / Hardware)

frutis napisał/a:

The module can be connected to an external adapter. And then it can probably be put into that mode. More information can be found here: https://github.com/stich86/ZTE-MF289F-R … l_brick.md
Maybe @stich86 or @smereka will suggest something on this topic.

Stick has already replied to me on the Italian forum, nothing can be done.

17

(7 odpowiedzi, napisanych Sprzęt / Hardware)

Ok thank you

18

(7 odpowiedzi, napisanych Sprzęt / Hardware)

This, is photo module qualcom
https://ibb.co/3CWSzXc
https://ibb.co/3CWSzXc
https://ibb.co/5G68Ggt
https://ibb.co/G5HKhSF
https://ibb.co/CmhjgZW
https://ibb.co/ZftJjFy
https://ibb.co/TLvMxVn
https://ibb.co/2MZrcGd
https://ibb.co/MMJNB4Y
https://ibb.co/jbVR7K5

Can you enter this module in 9008?

19

(7 odpowiedzi, napisanych Sprzęt / Hardware)

Hello, guys. I wanted to know some information about the ZTE MF296D router. Do you have any updates on whether it's possible to change the IMEI, and especially how to disassemble it? Can you give me some tips? The model is the one in the photo.
https://ibb.co/4snFH8Y
https://ibb.co/6wt0KDs
https://ibb.co/9sCL5sc

Thanks for response.

20

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

"I solved it, guys, thanks to everyone. Here's the solution:
Using Nordic's serial interface, I issued the following commands to the two partitions showing skib bad block:
```
flash_erase -N /dev/mtd4 0 0
flash_erase -N /dev/mtd11 0 0
```
(I executed this command from Nordic's serial interface)
Then, to restore partitions mtd4 and 11, I used the kmod-mtd-rw package with its appropriate command.
Finally, I wrote the partitions with the following commands:
```
mtd write mtd4.bin /dev/mtd4
mtd write mtd11.bin /dev/mtd11
```
Thanks to everyone for the support."

21

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

I remember i also had some logs on Nordick , showing that in nand there is some badblocks. After 2 weeks probem gone.
So perhaps you should load Nordic , and leave it for some time , and nand tools will do magic.

In two weeks, I'll try again, but I don't think they'll fix. Do you think they'll fix it by leaving it stable? At the moment, I managed to insert a SIM that recognizes automatically, so I can do all the tests. Because the internet works with Nordic, it's the settings and IP that jump, the whole web interface crashes. I also tried using apps, ZTE Link crashes in the same way; it stops working.

22

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

I remember i also had some logs on Nordick , showing that in nand there is some badblocks. After 2 weeks probem gone.
So perhaps you should load Nordic , and leave it for some time , and nand tools will do magic.

So I'm trying it without the Nordic B12 working, but the issue is that the reset button doesn't work, and I can't test any SIM cards except for other Italian ones that start automatically. I'll do that. Let's see, I'll keep it on for two weeks. But I doubt that anything will change.

23

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

That comand suposed to be run on Nordic , and it correspondes to openwrt's mtd-rw.ko and i_want_a_brick=1 functions...
So if you have openwrt , did you tried with kmod-mtd-rw ?

Yes, I am using Kmod-mtd-rw correctly on mtd11 and mtd4, but I encounter an error: "skipping bad block." It doesn't work with Nordic. All partitions are overwritten correctly except for mtd4 and mtd11.

24

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

Are you doing this on booted Nordic B12 ?
This command should work as mtd enable... So didyou tried to erase after this command ? did you make erase on other mentioned partitions ?

Basically, I tried using OpenWrt to send the command "nand erase mtd4," but U-Boot indicates "skipping bad block," the same happens with mtd11. I really want to remove them since I have the Nordic dumps. The issue is that the partitions I would like to delete, as the reset button doesn't work even with Nordic, I would like to fix everything to make the router work correctly.

If you could be clearer with me, I kindly ask: if I have to use Nordic, my main problem is not so much those partitions. I would like to fix the reset button that only works with OpenWrt; with Nordic, it doesn't. I would like to point out that my problem is this:

When I start Nordic with any firmware, I enter the password at login, and then everything crashes, I can't do anything anymore. If I try to access the web page, there are problems: nothing opens after entering the password.

P.S. I'll warn you about another thing, and then you let me know what to do. The problem I encounter is that if I load any firmware through the framework, it reaches 99%, but from the serial console, I see it says "Root_ulmage." I insert the "Root_ulmage" file via TFTP, also present in the framework; it installs it through its IP server. But the web interface always crashes.

25

(3,878 odpowiedzi, napisanych Sprzęt / Hardware)

MiG25 napisał/a:

From console first execute this command:
cat /proc/driver/sensor_id

and then mtd erase mtd11  and other

The comand :
cat /proc/driver/sensor_id

Result:
No sunch file or directory
Terminal putty ssh

cd /proc/driver/

Result comand ls:

Folder no such file.