876 Odpowiedź przez stich86 (edytowany przez stich86 2024-01-15 19:32:32)

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

MiG25 napisał/a:

So dump acc to this https://eko.one.pl/forum/viewtopic.php? … 51#p293851
or fastboot can do it ?

EDL dump is feasible when attached to USB and make whole nand dump by partition (rl switch)

If you have module on the router (so it’s working) and have fastboot binary, you can write the firmware (just usual 4 partitions) erasing boot and write back needed one

Then all EFS stuff can be done using ser2net..

Anyway it’s possible to dump partition also with adb on a working module, refer to this comment:

https://github.com/stich86/ZTE-MF289F-R … 1443676251

877 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 10:20:12)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Czy ja coś źle robię czy instrukcja jest niekomplenta/nieprzetestowana?

root@OpenWrt:~# adb shell
/sys/kernel/config/usb_gadget/g1 # cat /dev/mtd13 > /tmp/uefi
/sys/kernel/config/usb_gadget/g1 # adb pull /tmp/uefi uefi.elf
/bin/sh: adb: not found


Dobra działa. Myślałem, że to: adb pull /tmp/uefi uefi.elf podwoduje wyjście i od razu kopiowanie

czyli prawidłowo po mojemu takie powinny być polecenia:

root@OpenWrt:~# adb shell
/sys/kernel/config/usb_gadget/g1 # cat /dev/mtd13 > /tmp/uefi
/sys/kernel/config/usb_gadget/g1 # adb pull /tmp/uefi uefi.elf
/sys/kernel/config/usb_gadget/g1 # exit
root@OpenWrt:~# adb pull /tmp/uefi uefi.elf
4583 KB/s (2621440 bytes in 0.558s)

878 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 10:34:16)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

I kolejna modyfikacja. Polecenia kopiujące zrobione backupy na nasz router domyślnie lecą do folderu oznaczonego jako "root". I o ile pierwsze 2 partycje przelecą bo jest miejsce o tyle partycja modem.img już tam nie wleci nawet po usunięciu 2 pozostałych. Zadziała za to skopiowanie ich do folderu /tmp czyli polecenie powinno wyglądać tak:

adb pull /tmp/modem /tmp/modem.img

Natomiast jeszcze większym problemem jest partycja oznaczona jako system. Ta nie wejdzie na router:

root@OpenWrt:~# adb pull /tmp/system /tmp/system.img
cannot write '/tmp/system': No space left on device

Jakby mozna było podmontowac pendrive byłoby git ale nie ma usb. Macie pomysł? Da się wydac jakieś polecenie żeby router skopiował to np na mój komputer? Albo czy da się dostać do pamięci modemu do /tmp np poprzez winscp?

879 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

P.S. mam kartę orange z usługa volte i działa to na pewno ma mf286d sprawdzałem było lte i normalne dzwonienie. Przełożyłem do mf289f z firmware BD_VDFDEMF289FMODV1.0.0B07 i niestety zrzuca do 3G.

880 Odpowiedź przez checkin665

  • Zarejestrowany: 2023-07-27
  • Posty: 10

Odp: ZTE MF289F - Porting OpenWRT

Did you switch qcn?

881 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

it's strange /tmp partition usually it's in ram

can you post a "df -h" from the router?

Try to copy&pull a partition per time. You can use WinSCP using "SCP" protocol to get files from router

882 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 10:50:17)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Yes I do partition per time and I deleted it every time

root@OpenWrt:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                 6.3M      6.3M         0 100% /rom
tmpfs                   121.2M    121.2M         0 100% /tmp
/dev/ubi0_2              13.0M    880.0K     11.4M   7% /overlay
overlayfs:/overlay       13.0M    880.0K     11.4M   7% /
tmpfs                   512.0K         0    512.0K   0% /dev
root@OpenWrt:~#

Yes, I know that winscp is used for this and I have been doing this for 10 years. But my question was, is there any way to copy these partitions directly from the modem via winscp?

883 Odpowiedź przez stich86 (edytowany przez stich86 2024-01-16 10:51:52)

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

smereka napisał/a:

Yes I do partition per time and I deleted it every time

root@OpenWrt:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                 6.3M      6.3M         0 100% /rom
tmpfs                   121.2M    121.2M         0 100% /tmp
/dev/ubi0_2              13.0M    880.0K     11.4M   7% /overlay
overlayfs:/overlay       13.0M    880.0K     11.4M   7% /
tmpfs                   512.0K         0    512.0K   0% /dev
root@OpenWrt:~#

raw system is 170mb, so /tmp is not enough
do you have a NAS or PC in the same network where you can mount an CIFS\SAMBA share and copy file in that mount point?

Directly no.. but we can try to "pipe" chaining netcat

884 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 10:55:13)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

I have a computer with Windows 10 and I can share a disk for this. But what commands should I use to copy it then?


I have another idea. I will put this modem into the mf286d board and insert a pendrive there and copy it there. It will be faster and easier smile

885 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

check this guide to install cifs-client on OpenWRT: https://openwrt.org/docs/guide-user/ser … ifs.client

create a folder like /tmp/cifs, then mount the share on that path

After done, move on that path and copy files with ADB

886 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Ok, I have a partition backup:

uefi
boot
modem
system

1. Is anything else needed?
2. Do any of these partitions contain sensitive IMEI data?

887 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

no IMEI is in efs2 partition. I need also "config" file that is into EFS root, using EFS Explorer on Windows to get it thru diag port

888 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

It is impossible to copy this config file via adb?

889 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 11:26:14)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Coming back to running volte, is it possible to do what you write here:

Once you have successfully uploaded the EFS configuration, attach the module to Windows and open EFS Explorer. Copy the contents of the data_efs_per_VoLTE folder folder into the /data folder of EFS

Upload to the /data folder using the adb commands on openwrt, having previously uploaded these files to the router via winscp?

890 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

smereka napisał/a:

It is impossible to copy this config file via adb?

no, all this stuff should be done using EFS Explorer on Windows.
You can use ser2net to expose /dev/ttyUSB0 over network and then attach it using QPST TCP/IP port

891 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 11:49:02)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Ok, I can upload these files via EFS explorer, but then you write:

Open TeraTerm and connect to NMEA port, then run these commands:

AT+CGDCONT=2,"IPV4V6","ims"
AT+CGDCONT=3,"IPV4V6","sos"
AT$QCPDPIMSCFGE=2.1
AT$QCPDPIMSCFGE=3.1


I don't have it on Windows after connecting the modem to the NMEA port adapter? Do I need any special drivers or what?

892 Odpowiedź przez stich86 (edytowany przez stich86 2024-01-16 11:56:19)

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

smereka napisał/a:

Ok, I can upload these files via EFS explorer, but then you write:

Open TeraTerm and connect to NMEA port, then run these commands:

AT+CGDCONT=2,"IPV4V6","ims"
AT+CGDCONT=3,"IPV4V6","sos"
AT$QCPDPIMSCFGE=2.1
AT$QCPDPIMSCFGE=3.1


I don't have it on Windows after connecting the modem to the NMEA port adapter? Do you need any special drivers or what?

NMEA port is the other one that you need to "force install" checking the Hardware instance (my screen refers to VFDE B05, but I can suppose that B07 has same HW ID) or if the module is in the router you can use picocom\minicom and point to /dev/ttyUSB1 or USB2 (if you are using IceG stuff) and input that commands there smile

893 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

are you able to test cell_lock on this build? just to see if they've fixed it from B05, because all other versions still don't support it

894 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 12:17:22)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Is it good?


OK
AT+CGDCONT=2,"IPV4V6","ims"
OK
AT+CGDCONT=3,"IPV4V6","sos"
OK
AT$QCPDPIMSCFGE=2,1
OK
AT$QCPDPIMSCFGE=3,1
OK
AT+CGDCONT?
+CGDCONT: 1,"IP","internet","0.0.0.0",0,0,0,0
+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
+CGDCONT: 6,"IPV4V6","","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0

OK
AT$QCPDPIMSCFGE?
$QCPDPIMSCFGE: 1 , 0 , 0 , 0
$QCPDPIMSCFGE: 2 , 1 , 0 , 1
$QCPDPIMSCFGE: 3 , 1 , 0 , 0
$QCPDPIMSCFGE: 6 , 0 , 0 , 0



We can test cell lock, no problem, but let's put this volte to work.


AT+CGCONTRDP
+CGCONTRDP: 1,5,internet,XXXXXXXXX,,XXXXXXXXXXXXXXXXX,XXXXXXXXXXX

OK

895 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

stitch, is the above correct, because volte doesn't work sad

896 Odpowiedź przez stich86

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

i think it's better to use my dummy QCN and then set variables, you are using "stock" B07 qcn, i never tested it
So make a QCN backup of your module an follow the procedure to restore the EFS on my git

of send me all this stuff (including QCN with IMEI removed) and i'll try to test on my module

897 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

Ok I will try

898 Odpowiedź przez smereka (edytowany przez smereka 2024-01-16 13:40:57)

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

with your qcn, it still drops to 3G, and when I call this card, once I stop calling, the modem doesn't want to go back to LTE, it's terrible, I have an interesting case wink

Okay, he finally came back, but after about a minute. Where on the original qcn it took a few seconds

And one more thing. With your qcn, it only aggregated 3 bands. On the original one, it aggregates 4. I have already returned to the original because it works better. All right. I'm sending you the files you asked for. Enter your email address.

899 Odpowiedź przez stich86 (edytowany przez stich86 2024-01-16 13:55:17)

  • Zarejestrowany: 2022-05-24
  • Posty: 392

Odp: ZTE MF289F - Porting OpenWRT

smereka napisał/a:

with your qcn, it still drops to 3G, and when I call this card, once I stop calling, the modem doesn't want to go back to LTE, it's terrible, I have an interesting case wink

Okay, he finally came back, but after about a minute. Where on the original qcn it took a few seconds

And one more thing. With your qcn, it only aggregated 3 bands. On the original one, it aggregates 4. I have already returned to the original because it works better. All right. I'm sending you the files you asked for. Enter your email address.

regarding the band on that QCN, if you set back all bands avaliable it should aggregate 4CA, don't remeber if the test i've done was just with 7+3+1, so the backup can have lte_band_pref configured in that way

send them to stich86@hack-gpon.org

900 Odpowiedź przez smereka

  • Zarejestrowany: 2014-07-09
  • Posty: 2,443

Odp: ZTE MF289F - Porting OpenWRT

For large attachments, you need an email containing 100MB. Do you have one?