Nokia G-2425G-A - Unlock/Root ~ Step by Step detailed guide

Disclaimer : I'm not responsible if you brick your router in-between the process.

1. Open 192.168.1.1 in any browser
default username password both is admin

2. Go to Maintenance->backup and restore->export config file on your desktop
it will be saved as config.cfg

3. Download & install python on your pc
also download this file(python script) on your desktop

Nokia/Alcatel-Lucent router backup configuration tool

4. Open cmd
type
python C:\Users\XXXXX\Desktop\Nokia-router-cfg-tool.py (replace xxxxx with your windows user)

(4b) now lets decrypt your cfg file first
type
python nokia-router-cfg-tool.py -d OYdLWUVDdKQTPaCIeTqniA==
(4c) now unpack you cfg file to xml
type
python nokia-router-cfg-tool.py -u config.cfg

5. A new file is created on your desktop .xml format
right click & select edit.

(5a) press control+f and type TelnetSshAccount in searchbox then hit enter

now change the values same as below

<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">
<Enable rw="RW" t="boolean" v="True"></Enable>
<UserName ml="64" rw="RW" t="string" v="admin"></UserName>
<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>

press control s to save the file & close it

6. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
it will look like this something like this :
type
python nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42

(6a) a new cfg file will be created on your desktop.

7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.

8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)

9. Download MobaXterm_Portable_v21.5 link below

MobaXterm free Xserver and tabbed SSH client for Windows

The ultimate toolbox for remote computing - includes X server, enhanced SSH client and much more!

mobaxterm.mobatek.net

10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: admin
password: admin

11. After that lets first copy this in your clipboard: '; /bin/sh; #
(11a) go back to mobaxterm
type
enable

type
shell

it will ask for password2, press shift+insert button on your keyboard and hit enter
BOOM now you've root access

(11b) to take the current backup of airtel settings
type
cfgcli dump

type
ritool dump
& save the file by going terminal->save terminal text.

(11c) now to unlock settings
type
ritool set OperatorID ALCL

12. Go back your router login on your browser 192.168.1.1 and BOOOOOOM everything is unlocked, you'll see changes right away

Important : If you plan to stick with everything unlocked using airtel fiber then let it as it is.
Important: If you plan to use this router with any other fiber connection just do a factory reset.
Doing a factory reset will erase, reset & unlock everything. The default router login address will change to 192.168.1.254 with username AdminGPON and password as ALC#FGU

I've personally myself tested this whole process & successfully unlocked 3 routers.

I wish you all good health.

 

[AnkitWangru]

Hi, @anmolkakkar91. My issue was same, i tried desi jugar-- connect yellow/blue or any LAN cable to router & laptop, if laptop not show ur LAN. Restart the laptop, then change LAN PORT1/2/3/4 or side of the LAN.... LITTLE illogical steps hai. But its worked for me. And if successfully connected, congratulations.

Now ip changed to - 192.168.1.254, with GPON username= AdminGPON & password = ALC#FGU. Good luck. Steps may work to u. Wait for 5 min or 10min, restart the laptop.

It will work.
Maxx had done phenomenal work. Hats off to u bro@Max_369. Tofa kubul kro

 

[remorve]

@Rehan ahmad help me
on using command Nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42 i am able to encrypt the cfg and import it but on accessing telnet wrong password error and then on opening the cfg file after decrypt I saw that the password section was made blank and the password that i put in xml file was erased
please tell me how to access the telnet

 

[bryan_rake]

have been reading all the messages in the thread, i did tried taking uart of the by opening the router and connecting it to the usb to ttl converter, still after typing command 'shell' it asks for the 'password2', have search almost the whole internet for the same but wasn't able to find out this, i think i'll have to move to the dark web now..

 

[Manish4586]

Here the config isn't being loaded i have waited 15mins it doesn't loads the config (doesn't restart) then i tried manually nope it didn't worked. We need a new guide for unlocking it in latest fw

 

[tumi4564]

C:\Users\Administrator\Desktop\Nokia>python nokia.py -u config.cfg

-> little endian CPU detected
-> fw_magic = 0xffffffff
Traceback (most recent call last):
File "C:\Users\Administrator\Desktop\Nokia\nokia.py", line 137, in <module>
xml_data = zlib.decompress(compressed)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
zlib.error: Error -3 while decompressing data: incorrect header check

 

[cap_levi]

zlib.error

 

[tr1k0N4]

@cap_levi what's your software version?

 

[Navjot Singh]

For anyone receiving zlib error, use the fork of the python tool.

 

[PKSAMY]

need password 2 for shell

 

[dushy4]

I have managed to unlock HK46 firmware by using this guide but follwing steps mentioned by Rehan in another thread:

So i followed steps till creation of XML. Than i followed these steps:

1) Open the generated xml file in a text editor.
2) Search for TelnetSshAccount section and write username as ONTUSER and password as "OYdLWUVDdKQTPaCIeTqniA=="
3) Set LimitAccount_ONTUSER to false. Search LimitAccount_ONTUSER in ctrl+f and change that option to FALSE.
4) Save the xml file
5. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
type
python Nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42
6. a new cfg file will be created on your desktop.
7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.
8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)
9. Download MobaXterm_Portable_v21.5 link from 1st post.
10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: ONTUSER
password: admin

11. write ---> ritool set OperatorID ALCL (you dont have to enter enable and shell as mentioned in 1st post, just enter the command)

After this step you have enabled root access. Login to your router to check everything has been unlocked.

Now hard reset from back of the router is recommended to enable editing any WAN settings but before that remember to take a backup of your configuration and wan settings.

8) After hardreset the router's gateway will default to 192.168.1.254 and username and password will change to AdminGPON and ALC#FGU respectively.

This way, there was no need to enter password2 in shell which was a problem.