Nokia G-2425G-A - Unlock/Root ~ Step by Step detailed guide

Disclaimer : I'm not responsible if you brick your router in-between the process.

1. Open 192.168.1.1 in any browser
default username password both is admin

2. Go to Maintenance->backup and restore->export config file on your desktop
it will be saved as config.cfg

3. Download & install python on your pc
also download this file(python script) on your desktop

Nokia/Alcatel-Lucent router backup configuration tool

4. Open cmd
type
python C:\Users\XXXXX\Desktop\Nokia-router-cfg-tool.py (replace xxxxx with your windows user)

(4b) now lets decrypt your cfg file first
type
python nokia-router-cfg-tool.py -d OYdLWUVDdKQTPaCIeTqniA==
(4c) now unpack you cfg file to xml
type
python nokia-router-cfg-tool.py -u config.cfg

5. A new file is created on your desktop .xml format
right click & select edit.

(5a) press control+f and type TelnetSshAccount in searchbox then hit enter

now change the values same as below

<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">
<Enable rw="RW" t="boolean" v="True"></Enable>
<UserName ml="64" rw="RW" t="string" v="admin"></UserName>
<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>

press control s to save the file & close it

6. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
it will look like this something like this :
type
python nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42

(6a) a new cfg file will be created on your desktop.

7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.

8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)

9. Download MobaXterm_Portable_v21.5 link below
10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: admin
password: admin

11. After that lets first copy this in your clipboard: '; /bin/sh; #
(11a) go back to mobaxterm
type
enable

type
shell

it will ask for password2, press shift+insert button on your keyboard and hit enter
BOOM now you've root access

(11b) to take the current backup of airtel settings
type
cfgcli dump

type
ritool dump
& save the file by going terminal->save terminal text.

(11c) now to unlock settings
type
ritool set OperatorID ALCL

12. Go back your router login on your browser 192.168.1.1 and BOOOOOOM everything is unlocked, you'll see changes right away

Important : If you plan to stick with everything unlocked using airtel fiber then let it as it is.
Important: If you plan to use this router with any other fiber connection just do a factory reset.
Doing a factory reset will erase, reset & unlock everything. The default router login address will change to 192.168.1.254 with username AdminGPON and password as ALC#FGU

I've personally myself tested this whole process & successfully unlocked 3 routers.

I wish you all good health.
 
Last edited by a moderator:
can anyone tell me how to cofigure with other isp if the isp provider is also optical fiber provider
my ISP is one broadband how can i configure Nokia 2425 with other isp i tried but still fail
 
@noinnepal
Yes I've used their auto firmware update link.
Check your router's log when ISP pushes a firmware update, you can find the auto update binary there.
Example when I was checking my router's I found router is downloading updates from this link;
Code:
<http://125.19.17.105:9091/webdav/3FE49362JJIJ50.bin>
This is also useful in downloading any old firmwares as URL is same for all of these.
 
Hi Guys,
I tried changing to OnuMode to 0002 in my Airtel modem after setting OperatorID as ALCL. But it won't allow me. Then as per suggestion from @partyboat I tried to set OperatorID as 0000.

To my surprise, I was able to change the OnuMode to 0002 and tried connecting with the EPON connection but the PON LED light didn't glow. Then I reset my modem and found that the new SSID is now the ChinaNet Open network. o_Oo_Oo_O:unsure:
Now, when I tried to login into the panel it won't allow it... Then finally figured out the username/password is nothing but blank, you need not enter anything just click login :rolleyes:

Then the ONTUSER backdoor worked in there for telnet login and was given directly to the root shell and the OnuMode was still 0002. So I think this may work in EPON connection try with different OnuMode numbers.

Hope this helps someone (y)

Let me know if this helped someone and was able to get the EPON connection working...
telnet user password not working after changing OperatorID to 0000
 
please tell how can i resolve below error.
(Nokia) C:\Users\anil\Desktop\nokia>python nokia.py -u config.cfg

-> little endian CPU detected
-> fw_magic = 0xffffffff
Traceback (most recent call last):
File "C:\Users\ashis\Desktop\nokia\nokia.py", line 137, in <module>
xml_data = zlib.decompress(compressed)
zlib.error: Error -3 while decompressing data: incorrect header check

(nokia) C:\Users\anil\Desktop\nokia>
 
sir
unable to open link <http://125.19.17.105:9091/webdav/3FE49362JJIJ50.bin>
need old firmware 42/33 versions 46/50 available in your drive
Seems like they've added credentials through this link on public networks, before that I was able to download these firmware directly without any credentials.
Maybe some airtel tech watches this blog and push an update everytime someone post a loophole here. 😅
 
Hello sir I have successfully unlock my router
But the problem is after factory reset the wifi name automatic change and I don't know the password I tried old default password but it didn't work
Any idea what is the password of wifi
Its name changed into ALHN-6407
Hi Abhiraj.. Can you help me to unlock my Airtel Xtreme Fiber Router G-2425G-A with the help of TeamViewer or anydesk.. because i am trying to unlock but unable to do it from myself. I think i am not understanding to this.. please help me. If you are ready please reply here..
 
Back