Unlock G-2425G-A router running on latest firmware

Note: Tested for Nokia router G-2425G-A running on firmware 3FE49362JJIJ50.

Use this script to decrypt your configuration file. This script has been updated for latest firmware (3FE49362JJIJ50).


Source

All the steps to decrypt the config files has been already discussed in other posts as well, kindly follow them.

1) After decrypting the config file, open the generated xml file in a text editor.
2) Search for TelnetSshAccount section and write username as ONTUSER and password as "anyrandompassword" (remember this password for future).
3) Enable ONTUSER to drop into busybox instead of vtysh by setting LimitAccount_ONTUSER to false. Go to LimitAccount_ONTUSER section and change that option to FALSE.
4) Encrypt the config file again using the same script and import in your router (remember to enable telnet in Security --> Access Control --> LAN).
5) Now use any tool to access telnet, I have used windows powershell (you can enable telnet in windows additional features).
6) In Windows PowerShell write; telnet --> o --> 192.168.1.1

Username: ONTUSER
Password: your password from STEP 2

7) Now in shell write ---> ritool set OperatorID ALCL

After this step you have enabled root access. Login to your router to check everything has been unlocked.

Now hard reset from back of the router is recommended to enable editing any WAN settings but before that remember to take a backup of your configuration and wan settings.

8) After hardreset the router's gateway will default to 192.168.1.254 and username and password will change to AdminGPON and ALC#FGU respectively.

 

[Skeeter]

Airtel guys gave you OLT access?

 

[jakir]

@Skeeter, nope, ONT equipments can be upgraded from any vendors olt. except some specific models. i was able upload fw to a zte f670l ont from olt and got full access. so similarly i want to give it a try upgrading from olt.

 

[jakir]

As i found out the hard way, little heads up to everyone

Never set your ONUmode to 0000, even if you set it, don't hard reset

this is the shell ritool dump after changing to 0000 and before hard reset


the Format:01
the MfrID:ALCL
the Factorycode:02
the HardwareVersion:3FE48299DEAB
the ICS:01
the YPSerialNum: B404F06C
the CleiCode:0000000000
the Mnemonic:G-2425G-A
the ProgDate:221207
the MACAddress:4c:06:17:15:62:4c
the DeviceIDPref:0000
the SWImage:005e
the OnuMode:0002
the Mnemonic2:A
the Password:00000000000123456789
the G984Serial:b404f06c
the HWConfiguration:0000000000000000
the PartNumber:3FE48300BCAA
the Variant:AA
the Spare4:000000000000000000000000
the Checksum:5ceb
the InserviceReg:0000
the UserName: userAdmin
the UserPassword:usradmin
the MgntUserName: adminadmin
the MgntUserPassword: ALC#FGU
the SSID-1Name:0000000000000000
the SSID-1Password:00000000
the SSID-2Name:0000000000000000
the SSID-2Password:00000000
the OperatorID:0000
the SLID:00000000000000000000000000000000
the CountryID:i1
the GroupID:00000000
the Checksum1:f4e6
the Spare6:0000
the RollbackFlag:0000

To change Back BRTI

if anyone can make sense or anyway to rollback, give suggestions.

 

[user848654]

@jakir you will have to connect it using UART cause you have locked yourself out.

 

[ravi172003]

Hi Brother @Rehan ahmad i below device and i have tried with the ONTUSER method like username as ONTUSER and password as "anyrandompassword" which is not working Password Invalid error and i have tried with another with encrypted password like below ....
<TelnetSshAccount. n="TelnetSshAccount" t="staticObject">

<Enable rw="RW" t="boolean" v="True"></Enable>

<UserName ml="64" rw="RW" t="string" v="admin"></UserName>

<Password ml="64" rw="RW" t="string" v="OYdLWUVDdKQTPaCIeTqniA==" ealgo="ab"></Password>..

But i am facing error in login with shell password2 : '; /bin/sh; # getting Invalid error. Please help me to unlock my router

 

[akuccna]

i am trying to login after edit xml file but not putty login why plz help me

 

---

[rachitnoob]

@ravi172003 Have you got the shell yet ? I am also facing the same issue ! If you have solved it plz lemme know too...

 

[ravi172003]

@rachitnoob no........

 

[noor786]

C:\Users\Amir\Nokia>python nokia.py -u config.cfg

-> little endian CPU detected
-> fw_magic = 0xffffffff
Traceback (most recent call last):
File "C:\Users\Amir\Nokia\nokia.py", line 137, in <module>
xml_data = zlib.decompress(compressed)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
zlib.error: Error -3 while decompressing data: incorrect header check

 

[shibam.sar]

I want to relock my router, don't find any guide or stock firmware file all over the web.