Nokia G-2425G-A - Unlock/Root ~ Step by Step detailed guide

Disclaimer : I'm not responsible if you brick your router in-between the process.

1. Open 192.168.1.1 in any browser
default username password both is admin

2. Go to Maintenance->backup and restore->export config file on your desktop
it will be saved as config.cfg

3. Download & install python on your pc
also download this file(python script) on your desktop

Nokia/Alcatel-Lucent router backup configuration tool

4. Open cmd
type
python C:\Users\XXXXX\Desktop\Nokia-router-cfg-tool.py (replace xxxxx with your windows user)

(4b) now lets decrypt your cfg file first
type
python nokia-router-cfg-tool.py -d OYdLWUVDdKQTPaCIeTqniA==
(4c) now unpack you cfg file to xml
type
python nokia-router-cfg-tool.py -u config.cfg

5. A new file is created on your desktop .xml format
right click & select edit.

(5a) press control+f and type TelnetSshAccount in searchbox then hit enter

now change the values same as below

<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">
<Enable rw="RW" t="boolean" v="True"></Enable>
<UserName ml="64" rw="RW" t="string" v="admin"></UserName>
<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>

press control s to save the file & close it

6. Go back to cmd & check for repack command to encrypt the edited xml file back to cfg
it will look like this something like this :
type
python nokia-router-cfg-tool.py -ple config-XXXXXXX-XXXXXX.xml 0x4924ea42

(6a) a new cfg file will be created on your desktop.

7. Now go back to router login page 192.168.1.1
(7a) go to Maintenance->backup and restore & click "select" then browse newly created cfg file from your desktop then click import
wait for the router to reboot itself.

8. Now login again 192.168.1.1
Go to Security->Access control and allow both telent & ssh(Wan & Lan)

9. Download MobaXterm_Portable_v21.5 link below
10. Open Mobaxterm & click on Start local terminal
type
telnet 192.168.1.1
user: admin
password: admin

11. After that lets first copy this in your clipboard: '; /bin/sh; #
(11a) go back to mobaxterm
type
enable

type
shell

it will ask for password2, press shift+insert button on your keyboard and hit enter
BOOM now you've root access

(11b) to take the current backup of airtel settings
type
cfgcli dump

type
ritool dump
& save the file by going terminal->save terminal text.

(11c) now to unlock settings
type
ritool set OperatorID ALCL

12. Go back your router login on your browser 192.168.1.1 and BOOOOOOM everything is unlocked, you'll see changes right away

Important : If you plan to stick with everything unlocked using airtel fiber then let it as it is.
Important: If you plan to use this router with any other fiber connection just do a factory reset.
Doing a factory reset will erase, reset & unlock everything. The default router login address will change to 192.168.1.254 with username AdminGPON and password as ALC#FGU

I've personally myself tested this whole process & successfully unlocked 3 routers.

I wish you all good health.
 
Last edited by a moderator:
I have a router which was come along with my previous Airtel Xstream broadband connection. Now I have changed my connection. So I would like to use the same Nokia G 2425G A router in my non-Airtel broadband connection. But the settings are disabled. I tried to unlock the router using YouTube videos and IBF forum threads. But I am facing the issue with the shell password. All the references showing that the shell password is '; /bin/sh; # and it is not working for me. While using this as shell password, it is showing that the shell password is invalid. Please help to resolve this issue guys. Thanks in advance.

Router details are given below.
Device Name : G-2425G-A
Vendor : Nokia
Software Version : 3FE49362IJHK46

Please help!
 
an update has been pushed by airtel that fixes that vulnerability. The firmware version 3FE49362IJHK46 is patched
 
I was able to configure the Airtel Nokia modem in a BSNL connection but I am getting an authentication failure error.. i changed the serial number, make, and mac address of the Nokia modem.. but still no change... from the Nokia modem configuration page I am unable to configure the connection with MTU and service name.. Don't know if that is the reason for the authentication failure..
 
I had the 30 version. I don't know if I still have it. I'll dig it up
Please do post if you find it, it'll be a great help
Meanwhile, anyone here managed to find out how to unlock airtel routers with the shell password invalid?
Mine is on 3FE49362JJIJ50
I get the 'Error -3 while decompressing data: incorrect header check' as well, while using the script in the OP
 
Please do post if you find it, it'll be a great help
Meanwhile, anyone here managed to find out how to unlock airtel routers with the shell password invalid?
Mine is on 3FE49362JJIJ50
I get the 'Error -3 while decompressing data: incorrect header check' as well, while using the script in the OP
use this website ONT Lab | tripleoxygen.net use any of the firmwares from the drop down.
 
Back