626

Odp: Modem od routera MF286D

Hello, I have a modem problem. I want to be on Nordic B12 router and modem. I flashed from Three UK to openwrt, upgraded modem by Delta to b12, then tried flashing router to Nordic B12. This was all using framework without opening box.

I then flashed file to change password on Nordic to admin and things went wrong as I was on modem b12 and Nordic router b11. I opened the router and tried flashing the mtd8 and 9 files to get router to b12 but the instructions I found soft bricked the router.

I then performed a nand erase and set up b11 init_uimage on tftp and got it back up to Nordic b11 so I then tried putting on openwrt to downgrade the modem to b11 so that would then synchronise versions and I could then fota to b12.

I was on b12 but I flashed the Delta for b11 and it now reports as b02 but, and this is the big problem, svn12 rather than svn01. That means I can't flash any other Delta and I am stuck.

Can anyone help how I can move my modem to b11 please?

627

Odp: Modem od routera MF286D

dimka890612 napisał/a:

zostaw swój telegram lub dane watsapp


Nie używam ani tego ani tego. Napisz mi na priv wiadomość to Ci wyślę nazwę ze skype

628

Odp: Modem od routera MF286D

stuart75 napisał/a:

Hello, I have a modem problem. I want to be on Nordic B12 router and modem. I flashed from Three UK to openwrt, upgraded modem by Delta to b12, then tried flashing router to Nordic B12. This was all using framework without opening box.

I then flashed file to change password on Nordic to admin and things went wrong as I was on modem b12 and Nordic router b11. I opened the router and tried flashing the mtd8 and 9 files to get router to b12 but the instructions I found soft bricked the router.

I then performed a nand erase and set up b11 init_uimage on tftp and got it back up to Nordic b11 so I then tried putting on openwrt to downgrade the modem to b11 so that would then synchronise versions and I could then fota to b12.

I was on b12 but I flashed the Delta for b11 and it now reports as b02 but, and this is the big problem, svn12 rather than svn01. That means I can't flash any other Delta and I am stuck.

Can anyone help how I can move my modem to b11 please?

What version does the _modem_ actually report? I.e. what is the output of 'AT+CGMR' command over the modem terminal?

629

Odp: Modem od routera MF286D

Dzięki kolego za działający link, przywróciłem router, ale popsułem 3 małe kondensatory przy punkcie DL.Co to może mieć wpływ?

630

Odp: Modem od routera MF286D

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne

631

Odp: Modem od routera MF286D

It reported b02, I tried installing b02 to b05 delta the night when things went wrong and it didn't like it as I was on SVN 12 which there isn't that sub version on B02, things had gone wrong and I don't know where.

Anyway because it had a long power off, rather than short resets, that seemed enough for me to then flash b02 to b05. Long story short I then got to b11 modem, nand erase and restore root_uImage via tftp to Nordic, then framework to run Nordic to Nordic which reset everything to b02, then because it's all now sync'd I was able to extract the password and get back to b12 on router and modem via fota.

I am grateful for everyone's help, the help here is amazing thanks!

632

Odp: Modem od routera MF286D

dimka890612 napisał/a:

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne


I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?

633 (edytowany przez hiloa 2023-04-05 03:16:14)

Odp: Modem od routera MF286D

smereka napisał/a:
dimka890612 napisał/a:

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne


I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?

hello, can you help me, I have an mf286d modem that has an error not detected on the router, well, I have followed your tutorial to fix it but I have a problem, before that I don't know what firmware version is in my model, I have followed the steps until ran SB 3.0 and it worked, but after rebooting the modem became undetectable in device manager as in the photo, I've unplugged and plugged it back into my computer's usb port but it still can't detect anything, but when I short the pin 5 seconds it still can enter mode EDL, I did this with m-pcie to usb, can I still salvage my modem?

PunBB bbcode test
PunBB bbcode test

634

Odp: Modem od routera MF286D

smereka napisał/a:
dimka890612 napisał/a:

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne


I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?

I tried unplugging and plugging in again and it turns out that the device manager detects the ZTE Diagnostic Interfaces like in the photo, but after a few seconds it's either gone or not detected anymore and after a while, the device manager detects the ZTE Diagnostic Interfaces again, and it's gone again, it keeps going like that,


PunBB bbcode test

635

Odp: Modem od routera MF286D

stich86 napisał/a:

ok i've uploaded some stuff on my MEGA share:

https://mega.nz/folder/K8pVmSzR#TOjtD75bk654lmhjajHwzA

- 9008 Drivers: Qualcomm Drivers when modem is in "Download Mode" with E-Bootloader loaded
- SB3.0 recover folder: contains the files that i've uploaded on my modem and "common.xml" file modified, please open readme.txt file for more information
- Win Drivers (Normal Mode): this pack was taken from ZTE MF283 recovery utility, it will install all drivers when the modem is booting in is mini Android. There is a small program that will install drivers if the device is correctly detected
- Tools: i've uploaded program used at this time: QPST (v.2.7.496 for SB3.0 reprog), EFS_Professional (where you can change IMEI\MEID\ESN and other parameters using Qualcomm NV Tools and "ZTE Diagnostic Port", MF286D_qtools-2022-03-1-win.7z that cointains also the modded MF286D loader. This was used to going out from EDL and put in Download mode to flash with "Software Download", Revskills that i'm using to send modem in DOWNLOAD MODE

Note that when you write with "SB3.0", the modem should boot directly into fastboot mode, so you have to rewrite all stuff with it.


hello, can you help me, my mf286d modem has an issue not detected in the router, I have done step SB 3.0 and placed the contents.xml file according to the tutorial, and it runs smoothly but after I unplugged and plugged the modem into the pc in device manager only showing ZTE diagnosis interface repeatedly., maybe you can share some tips on fixing this modem, or maybe you have a video tutorial so I can follow it,

636

Odp: Modem od routera MF286D

hiloa napisał/a:
smereka napisał/a:
dimka890612 napisał/a:

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne


I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?

I tried unplugging and plugging in again and it turns out that the device manager detects the ZTE Diagnostic Interfaces like in the photo, but after a few seconds it's either gone or not detected anymore and after a while, the device manager detects the ZTE Diagnostic Interfaces again, and it's gone again, it keeps going like that,


PunBB bbcode test


Today at 9 pm Polish time we can try to connect on teamwiver. I can see what's going on there. If you have nothing to lose anyway, it's worth a try. Write me a private message and I will send you my skype login

637 (edytowany przez hiloa 2023-04-05 10:23:39)

Odp: Modem od routera MF286D

smereka napisał/a:
hiloa napisał/a:
smereka napisał/a:

I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?

I tried unplugging and plugging in again and it turns out that the device manager detects the ZTE Diagnostic Interfaces like in the photo, but after a few seconds it's either gone or not detected anymore and after a while, the device manager detects the ZTE Diagnostic Interfaces again, and it's gone again, it keeps going like that,


PunBB bbcode test



Today at 9 pm Polish time we can try to connect on teamwiver. I can see what's going on there. If you have nothing to lose anyway, it's worth a try. Write me a private message and I will send you my skype login


thanks for replying, maybe to talk via video I can't, I live in a village that has a poor GSM signal, I
just using the internet with speed under 100KBps , but all day i have read all the conversations in this forum and this is what i have done, first for my modem, i bought used, i don't know what happened but the seller made this modem not working, I have asked the seller for the firmware and he said the modem firmware uses nordic b10, I have followed the steps according to the post but I noticed that the SB3.0 recovery folder (modem version Nordic B02) now while my modem is Nordic B10, I don't know what it is making the method in the post doesn't work or there is something else, but after I followed the steps it turned out it didn't work according to the tutorial, so next I tried editing the content.xml file like the one in the post https://eko.one.pl/forum /viewtopic.php?id=21790&p=12
it's still the same, after rebooting the modem only appears the ZTE Diagnosis interface, maybe you can give me directions on what to do to fix this modem, I can only write because of the limited internet service in my village, I'll try to follow your directions   

PunBB bbcode test

638

Odp: Modem od routera MF286D

smereka napisał/a:
dimka890612 napisał/a:

Dziękuję bardzo Smereka, to było dla mnie bardzo przydatne


I replied to your e-mail that the call today at 21 is suitable for me. You did not reply anything. did you solve the problem?



hello, i have got new progress, after many try i got result, i can enter fastboot and flash my modem, but i have new problem, my imei changed to 000000000000 , maybe i should edit QCN file with NV tools, but i can't find ZTE CDMA headset diagnosis interface, I read the post https://eko.one.pl/forum/viewtopic.php? … 0&p=14
I have to do a SB 3.0 recovery with the partition_nand.xml file, now when I select the partition_nand.xml file an error appears in my qpst, as shown in the photo, is there a solution to fix it?


PunBB bbcode test

639

Odp: Modem od routera MF286D

I don't understand what's wrong with this mod. You wrote that the first flash was successful. After this procedure, you should have 3 devices in your windows for which you need to install drivers. Then you go to EFS Professional and there create a file with your IMEI and enter it in qpst in the restore tab. Read the manual carefully. I did it a dozen times and it just worked.

640 (edytowany przez hiloa 2023-04-07 02:06:38)

Odp: Modem od routera MF286D

smereka napisał/a:

I don't understand what's wrong with this mod. You wrote that the first flash was successful. After this procedure, you should have 3 devices in your windows for which you need to install drivers. Then you go to EFS Professional and there create a file with your IMEI and enter it in qpst in the restore tab. Read the manual carefully. I did it a dozen times and it just worked.


yes i have restored the modem but not via qpst , i restored the modem via fastboot

fastboot flash boot mdm9650-boot.img
fastboot flash system mdm9650-sysfs.ubi
fastboot flash modem NON-HLOS.ubi
fastboot flash recovery mdm9650-boot-recovery.img
fastboot flash zterw mdm9650-zterwfs.ubi
fastboot flash recoveryfs mdm-recovery-image-mdm9650.ubi

my modem is back to normal but after I check with the ATI command the modem only displays

Welcome to minicom 2.8

OPTIONS: I18n
Port /dev/ttyUSB2, 20:45:28

Press CTRL-A Z for help on special keys


Manufacturer: ZTE CORPORATION
Model: MF286DMODULE
Revision: BD_TELIAMF286DV1.0.0B02
SVN: 10
IMEI: 000000000000000
+GCAP: +CGSM

I have repeated the procedure according to the instructions,
1. I entered into EDL mode with the command adb reboot edl, I managed to enter into EDL 9008
2. I open qpst go to SB 3.0 tab and choose c:\common\contents.xml and I run start

3. I unplugged and plugged in the modem again but 3 new devices didn't appear, but only RmNet, RMDIS, and 3 ZTE Technology MSM devices appeared,

now how do I bring up the 3 ports, because I've followed that step over and over again,

641

Odp: Modem od routera MF286D

Well, if you have 3 devices visible and additionally with commands you see that you have the wrong imei, you must now upload the correct IMEI using the EFS_Professional_2.1.80_BETA program. Instructions in the first post

642

Odp: Modem od routera MF286D

smereka napisał/a:

Well, if you have 3 devices visible and additionally with commands you see that you have the wrong imei, you must now upload the correct IMEI using the EFS_Professional_2.1.80_BETA program. Instructions in the first post

i have made a video of my screen recording, i hope you will take a look, maybe there is a procedure i skipped,
https://youtu.be/M2U84aR0B8E

643

Odp: Modem od routera MF286D

Well, you found your devices nicely, but widows does not have drivers for them. So to install the drivers for them, go to the SDI_drivers_ZTE_MF286D folder and select the application compatible with our system in my case - 64 bit will be SDI_x64_R1800. We change the interesting display language, in my case it was Polish and mark 3 new detected devices with ticks. Then click on the window in the upper right corner that says install. ATTENTION in order to download drivers through this program, you may need the Internet, I did not check how it is without being connected to the Internet.

644

Odp: Modem od routera MF286D

stich86 napisał/a:
Leo-PL napisał/a:

I was able to switch profile 2 to IMS on MF286 using AT$QCPDPIMSCFGE=2,1, but this changed nothing - probably due to polish carriers not giving a single shit about prepaid SIMs . Tried with nju (Orange) and Play so far, I need to test with T-mobile and Plus.

Ok… but we need to understand what’s inside these profile. On the EFS there are some configurazione but are usually empty.

Also on ELISA1_B06, ZIMSREGSTATUS is bugged. With IMS registered and VoLTE working, it reports always 0 instead of 2

Just tried playing around with my second MF286D to get volte working on it... and no joy, probably because I played with APNs too much and have deleted and recreated IMS APN in the process. Do you know a way to perform fuller factory reset on the modem without going through framework? Reflashing factory router FW and resetting it from there didn't help, the APNs were left untouched.

645 (edytowany przez adron 2023-06-15 11:38:31)

Odp: Modem od routera MF286D

Hello friends. I read this whole thread. Very informative. Special thanks to smereka and Leo-PL users. You have done a great job and shared your knowledge with us. It helped me a lot! Over the past week, I have studied the ZTE MF286D modem very well. It was possible to overcome the problem (ECC errors) of reading and writing dumps for qtools. Here is the corrected version: https://github.com/adron-s/qtools.git
If someone needs help with flashing / restoring a ZTE MF286D modems - please contact me (english || russian), I will be happy to help.

646 (edytowany przez Leo-PL 2023-06-18 01:17:34)

Odp: Modem od routera MF286D

Wow. I took a look at the latest commit there, and it explains _a_lot_, about why I couldn't get the modem to talk with bkerler's edl tool. I need to take another attempt at one MF286D modem I have lying around, which wouldn't work after going through QFIL.

Edit: I finally tried to reflash the modem (and router) via framework, going with "Nordic to Nordic B11", which had B02 modem, but... the modem retained all the APN settings during the process! And even through all the manual delta updates back to B12! So everything went down the drain, I still don't get VoLTE on that unit. I'm officially out of ideas.

647 (edytowany przez adron 2023-06-18 09:28:34)

Odp: Modem od routera MF286D

I tried to use the modem from MF286D without the router itself. The modem works, but the signal-to-noise ratio (SINR) is low and the connection quality is very poor. I wonder what it is connected with? Are part of the matching-terminating elements / filters located on the motherboard and not in the modem itself?

ZTE modem

648

Odp: Modem od routera MF286D

If you havn't connect all antennas , don't be surprised...

649

Odp: Modem od routera MF286D

The antennas go straight through to the PCB and should all match 50 ohms - you can use external antennas, but need to connect all five.

650

Odp: Modem od routera MF286D

stich86 napisał/a:
Leo-PL napisał/a:

Ok, I managed to dump the first partitions (up to fota) using qtools. It's slow as molasses, but it works. 13 to 16 are ongoing. Since I have the modem in the right mode, what do you suggest to do? I think of erasing "boot" and "recovery", so I can update all the rest via fastboot, or get dump from my working B11 modem and try flashing that from qtools directly.

This is my partition table:

============================================================
00       0  00000a   ff 01 00 00   LNX   0:SBL
01       a  00000a   ff 01 ff 00   LNX   0:MIBIB
02      14  00002c   ff 01 00 00   LNX   0:EFS2
03      40  00000e   ff 01 00 00   LNX   0:TZ
04      4e  00000d   ff 01 00 00   LNX   0:RPM
05      5b  00002c   ff 01 00 00   LNX   0:EFSBAK
06      87  000004   ff 01 00 00   LNX   0:aboot
07      8b  00003c   ff 01 00 00   LNX   0:boot
08      c7  000002   ff 01 00 00   LNX   0:SCRUB
09      c9  00011c   ff 01 00 00   LNX   0:modem
10     1e5  000006   ff 01 00 00   LNX   0:misc
11     1eb  00003c   ff 01 00 00   LNX   0:recovery
12     227  0006ff   00 ff 01 00   STD   0:fota
13   22d00  00a000   00 ff 01 00   STD
14   2cd00  005700   00 ff 01 00   STD
15   32400  024400   00 ff 01 00   STD
16   56800  029800   00 ff 01 00   STD
============================================================

What I see in the output of qrflash looks like ton of ECC errors, at least one per erase block. Too bad that cyrylic output in my console is mangled up on Windows.
When I tried writing partitions only up to U-boot, nothing has changed, likely because in that case SB3.0 process doesn't erase unselected partitions.

Yea erase boot and recovery, leave aboot so it will switch to fastboot mode and you can write all other partitions in this way:

fastboot flash boot mdm9650-boot.img
fastboot flash system mdm9650-sysfs.ubi
fastboot flash modem NON-HLOS.ubi
fastboot flash recovery mdm9650-boot-recovery.img
fastboot flash zterw mdm9650-zterwfs.ubi
fastboot flash recoveryfs mdm-recovery-image-mdm9650.ubi

Thanks to @adron I finally managed to erase boot and recovery, getting into fastboot mode again. So flash is writable, but after rewriting all those files through fastboot, the system still hangs at the same message, not showing up at USB. Was the console accessible in the recovery kernel or after setting some flag?
When I tried booting them through fastboot, none would show up on USB hmm
After my previous attempts with QFIL the EFS contents are the same as in factory package, so it seems, that it did actually write during QFIL.
I currently left both kernels erased, so I can boot them using "fastboot boot". I actually start to think, that something else is dead in this modem.