Nokia G-2425G-A - Unlock/Root ~ Step by Step detailed guide

Disclaimer : I'm not responsible if you brick your router in-between the process.

1. Open 192.168.1.1 in any browser
default username password both is admin

2. Go to Maintenance->backup and restore->export config file on your desktop
it will be saved as config.cfg

3. Download & install python on your pc
also download this file(python script) on your desktop

Nokia/Alcatel-Lucent router backup configuration tool

4. Open cmd
type
python C:\Users\XXXXX\Desktop\Nokia-router-cfg-tool.py (replace xxxxx with your windows user)

(4b) now lets decrypt your cfg file first
type
python nokia-router-cfg-tool.py -d OYdLWUVDdKQTPaCIeTqniA==
(4c) now unpack you cfg file to xml
type
python nokia-router-cfg-tool.py -u config.cfg

5. A new file is created on your desktop .xml format
right click & select edit.

(5a) press control+f and type TelnetSshAccount in searchbox then hit enter

now change the values same as below

<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">
<Enable rw="RW" t="boolean" v="True"></Enable>
<UserName ml="64" rw="RW" t="string" v="admin"></UserName>
<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>

press control s to save the file & close it

6. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
it will look like this something like this :
type
python nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42

(6a) a new cfg file will be created on your desktop.

7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.

8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)

9. Download MobaXterm_Portable_v21.5 link below

MobaXterm free Xserver and tabbed SSH client for Windows

The ultimate toolbox for remote computing - includes X server, enhanced SSH client and much more!

mobaxterm.mobatek.net

10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: admin
password: admin

11. After that lets first copy this in your clipboard: '; /bin/sh; #
(11a) go back to mobaxterm
type
enable

type
shell

it will ask for password2, press shift+insert button on your keyboard and hit enter
BOOM now you've root access

(11b) to take the current backup of airtel settings
type
cfgcli dump

type
ritool dump
& save the file by going terminal->save terminal text.

(11c) now to unlock settings
type
ritool set OperatorID ALCL

12. Go back your router login on your browser 192.168.1.1 and BOOOOOOM everything is unlocked, you'll see changes right away

Important : If you plan to stick with everything unlocked using airtel fiber then let it as it is.
Important: If you plan to use this router with any other fiber connection just do a factory reset.
Doing a factory reset will erase, reset & unlock everything. The default router login address will change to 192.168.1.254 with username AdminGPON and password as ALC#FGU

I've personally myself tested this whole process & successfully unlocked 3 routers.

I wish you all good health.

 

[kernelpanic]

I am still not able to get shell access. Still get the following error:-
/bin/sh: syntax error: unterminated quoted string
passwd invalid!
/bin/sh: customer_logset: not found
/bin/sh: customer_logset: not found

Could anyone please help.
Btw thank you @Maxx_369 for all your efforts.

 

[alexb]

configs/home/AdminGPON # ritool set OnuMode 002
not allow to modify it.

I am in a trippy situation myself. I thought Nokia devices were XPON to begin with but that might not be the case per se, but these devices are marketed as GPON and mostly shipped as such. Huawei devices can be switched to GPON/EPON. Can't say about these, even though they have a PonType in the config file but changing that has no effect. So maybe it has Epon too but can't say for sure. I'm trying to extract the firmware from board itself using a programmer but my test clip is a bit of a bust. Might take some days before I am able to have some progress. (gotta find a good working cable)

I am still not able to get shell access. Still get the following error:-

At what point are you trying to enter the password? You first need to telnet and then login, then type enable, press enter and then type shell and enter. That makes you ask for a new password, which is mentioned in the OP.
If that second password is where you're having issues, well my second Nokia device that I got also didn't take that for some reason too. In that case your only option is to use the ONTUSER user which gives access to shell directly. Also, if that doesn't work if you're on newer firmware, then you have to give access to ONTUSER by unpacking the config and then repacking it.

 

[kernelpanic]

@alexb thank you for your reply. The default password for ONTUSER doesn't work. Anyways, I was able to get the telnet access using my webaccount credentials, but the shell access I get is not privileged (root). Hence, was unable to run the commands given in the OP. And while running ./scfgtool command to change the Operator ID it fails to with 'open /dev/scfg failed'.

 

[alexb]

@kernelpanic Can you post screenshots of your shell?
And did you try the ritool command instead? Which model do you have? When you accessed shell did it ask for a password where you entered '; /bin/sh; #
IF after entering the password your shell doesn't have any root access then please share your firmware version here and device model.
And then export the config out from the router, unpack it using the guide here and then search for ONTUSER within it.

<LimitAccount_ONTUSER rw="RW" t="boolean" v="false"></LimitAccount_ONTUSER>
There will only be that one line of code. It would be set to true, in case it is then set it to false. Then repack the config and import it back in the router. Wait for router to start again. Telnet to it and use ONTUSER:SUGAR2A041 as the credentials. That'll put you in shell with root privileges.

 

[kernelpanic]

@alexb I have already tried it man, still no luck.

 

[alexb]

@alexb I have already tried it man, still no luck.

Please mention and elaborate upon what you have tried for better response. ONTUSER will work once you give it the privileges. If it's not working then that's a pretty rare case. I can't be of help there.
I also asked you to share the firmware ver and device model which you failed to do so. Is it still Airtel locked? Please reply with all what I asked otherwise I won't be able to help you.

 

[kernelpanic]

Please mention and elaborate upon what you have tried for better response. ONTUSER will work once you give it the privileges. If it's not working then that's a pretty rare case. I can't be of help there.
I also asked you to share the firmware ver and device model which you failed to do so. Is it still Airtel locked? Please reply with all what I asked otherwise I won't be able to help you.

Got the root access btw. I changed the username in TelnetSshAccount from admin to ONTUSER and used admin hash as password and got the root access via SSH.


Btw even after changing OperatorID to ALC, I can edit values on WAN page but still can't apply them.
It says- 'error set XPON_STRUCT'.

 

[alexb]

Btw even after changing OperatorID to ALC, I can edit values on WAN page but still can't apply them.

Reset the router. Hard reset is preferable from the backside.

 

[kernelpanic]

@alexb Thanks a lot man!! Got everything done and working. Getting public IPv6 now.

 

[igloo]

@kernelpanic you got voice calls working after that?