Nokia G-2425G-A - Unlock/Root ~ Step by Step detailed guide

Disclaimer : I'm not responsible if you brick your router in-between the process.

1. Open 192.168.1.1 in any browser
default username password both is admin

2. Go to Maintenance->backup and restore->export config file on your desktop
it will be saved as config.cfg

3. Download & install python on your pc
also download this file(python script) on your desktop

Nokia/Alcatel-Lucent router backup configuration tool

4. Open cmd
type
python C:\Users\XXXXX\Desktop\Nokia-router-cfg-tool.py (replace xxxxx with your windows user)

(4b) now lets decrypt your cfg file first
type
python nokia-router-cfg-tool.py -d OYdLWUVDdKQTPaCIeTqniA==
(4c) now unpack you cfg file to xml
type
python nokia-router-cfg-tool.py -u config.cfg

5. A new file is created on your desktop .xml format
right click & select edit.

(5a) press control+f and type TelnetSshAccount in searchbox then hit enter

now change the values same as below

<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">
<Enable rw="RW" t="boolean" v="True"></Enable>
<UserName ml="64" rw="RW" t="string" v="admin"></UserName>
<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>

press control s to save the file & close it

6. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
it will look like this something like this :
type
python nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42

(6a) a new cfg file will be created on your desktop.

7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.

8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)

9. Download MobaXterm_Portable_v21.5 link below

MobaXterm free Xserver and tabbed SSH client for Windows

The ultimate toolbox for remote computing - includes X server, enhanced SSH client and much more!

mobaxterm.mobatek.net

10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: admin
password: admin

11. After that lets first copy this in your clipboard: '; /bin/sh; #
(11a) go back to mobaxterm
type
enable

type
shell

it will ask for password2, press shift+insert button on your keyboard and hit enter
BOOM now you've root access

(11b) to take the current backup of airtel settings
type
cfgcli dump

type
ritool dump
& save the file by going terminal->save terminal text.

(11c) now to unlock settings
type
ritool set OperatorID ALCL

12. Go back your router login on your browser 192.168.1.1 and BOOOOOOM everything is unlocked, you'll see changes right away

Important : If you plan to stick with everything unlocked using airtel fiber then let it as it is.
Important: If you plan to use this router with any other fiber connection just do a factory reset.
Doing a factory reset will erase, reset & unlock everything. The default router login address will change to 192.168.1.254 with username AdminGPON and password as ALC#FGU

I've personally myself tested this whole process & successfully unlocked 3 routers.

I wish you all good health.

 

[noinnepal]

Has your HK46 version been cracked @nionindia ? It seems like i got the same error as you. Can you share the password

Also seems like @partyship is no longer existing here, I was able to get the link before he removed his account, we can contact him there t.me/partyship :telegram:

@Slimshady contact party ship he'll. help you unlock hk46

 

[Slimshady]

@nionnepal i tried contacting partyship but he is currently unactive on telegram

 

[noinnepal]

t.me/partyboat

seems like I messed up the url or he changed it

 

[Nagaraju]

After factory reset wifi name changed to ALHN-824-5 and unable to connect to wifi . What is the password? I tried resetting bit no use. @Maxx_369

 

[noinnepal]

@Nagaraju try wps

 

[MCnCheese]

After Unlock
and setting up wan settings according to the SIP.

Internet won't work
(My ISP is Meghbela Broadband and I use static WAN IP mode)


Did you guys find a solution to this?

 

---

[basleet]

Hi all,

I have a Router with model G-0425G-B.

After hard resetting the router from the back of the router, I can login with AdminGPON/ALT#FGU credentials But the Admin features like modify WAN connection are locked.

I can export the cfg file from the web interface. I can also enabled SSH and can login to SSH/Telnet with AdminGPON/ALT#FGU.

However, I cannot decode the cfg file when trying to run:

python Nokia-router-cfg-tool.py -u config.cfg

I get:

-> little endian CPU detected
-> fw_magic = 0xffffffff
Traceback (most recent call last):
File "E:\CG MODIFY\py.py", line 138, in <module>
xml_data = zlib.decompress(compressed)
zlib.error: Error -3 while decompressing data: incorrect header check

I also cannot access Shell from the SSH/Telnet I can perform basic command but when trying to enable Shell it asks me for password2. I tried following password but none of them works

'; /bin/sh; #
admin
password
ALC#FGU
alcl

Can someone please help me decode the cfg file or gain full access to the router? I can send you the cfg file if you need it.

 

[noinnepal]

@basleet can you share me your config file?

And these details
Device Name
Serial Number
Hardware Version
Boot Version
Software Version

 

[basleet]

@noinnepal

Thank you for your reply. The details are:

Device Name G-0425G-B
Serial Number ALCLB2726943
Hardware Version 3FE49779AAAA
Boot Version Bootbase1.1-Oct-18-2021--15:10:37
Software Version 3FE49362IJJJ09(1.2202.309)

CFG File: config.cfg

 

[ajaikumarnadar]

Hi Guys,
I tried changing to OnuMode to 0002 in my Airtel modem after setting OperatorID as ALCL. But it won't allow me. Then as per suggestion from @partyboat I tried to set OperatorID as 0000.

To my surprise, I was able to change the OnuMode to 0002 and tried connecting with the EPON connection but the PON LED light didn't glow. Then I reset my modem and found that the new SSID is now the ChinaNet Open network.
Now, when I tried to login into the panel it won't allow it... Then finally figured out the username/password is nothing but blank, you need not enter anything just click login

Then the ONTUSER backdoor worked in there for telnet login and was given directly to the root shell and the OnuMode was still 0002. So I think this may work in EPON connection try with different OnuMode numbers.

Hope this helps someone

Let me know if this helped someone and was able to get the EPON connection working...