Lowyat.NET: Latest topics by Anime4000

D-Link DPN-FX3060V GPON WiFi Router

Anime4000 — Wed, 22 May 2024 12:41:46 +0800

D-Link DPN-FX3060V GPON Router
A GPON WiFi Router (All in One) based on Realtek SoC Processor that given by TM for Unifi Ultra Subscriber,
it share same Realtek LUNA SDK as my PON Stick Project. So I quite familiar with the layout.

Official Warranty
1. 1-Year Limited Warranty: Provided by TM, ensuring coverage for manufacturing defects.
2. Free Replacement: Available for customers who are currently under contract with TM.
3. Contractual Implications: For customers not under contract, a replacement will automatically initiate a new 2-year contract with TM.

Avoiding Contract
If you want to avoid committing to a 2-year contract, you can opt for a custom-built GPON Stick or a managed GPON device compatible with TM's OMCI, available for purchase.

Specification
SoC: RTL9607DQ (Cortex A55), 4 Core @ 1GHz, AArch64, ARMv8
RAM: 512MB DDR3L @ 1866MT/s
MEM: 256MB SPI Flash Winbond
OS: Realtek ASDK64, Linux Kernel 5.10.70 (glibc v2.30)
MB: Realtek Taurus ENG Board

A1 (White)
WiFi6: RTL8852CE (2.4GHz & 5GHz)

B1 (Black)
WiFi6: RTL8192XBR (2.4GHz) + RTL8832CR (5GHz)
LAN1: RTL8221B Switch Chip (HiSGMII to 2500Base-T)

Internal
Image of A1 Hardware a gift by [@chong601]
Image of B1 Hardware

Block Diagram
A1 (White)

B1 (Black)

Discovery 10G
I found stock firmware has 10G PON (XGPON, XGSPON). Maybe TM have planning to migrating

Known Issue
1. Prior to B1 Hardware @ V2.0.2 have issue to set bridge mode on certain OLT, temporary fix is by accessing UART at change FwdOp to 0x02
2. Prior to B1 Hardware @ V2.0.2 when in bridge mode, LAN side management such as WebGUI, SSH, Telnet being killed by deep ME 171 (ex: Alcatel-Lucent/Nokia OLT)
3. Both Hardware has so called "Cloud IoT" for D-Link Air, it always running and always watching, other considered this as Backdoor

Vulnerability ⚠️
Two user has been verified there several CVE or more.
If you are concern about security and want to minimise risk of attack, DON'T USE THIS DEVICE

Use of Dumb ONT Bridge to avoid backdoor, can re-use this D-Link as ATA Device, I recommend get own ATA or Desktop SIP Phone

It appear that Firmware V2.0.3 as same vulnerability as previous version

VoIP User Agent

CODE

DPN-FX3060V_V2.0.2 (SIP-std-R11448)

Management Entities Issue
OMCI ME can be very complex and total control of your ONT even without TR069! This mean TM can disallow Bridging and Force creation of PPPoE inside the Router!

Example of Simple OMCI Stack

* based on Alcatel-Lucent/Nokia OLT

ME Point
The RLT9607DQ has HiSGMII which can be paired with RLT8221B for 2.5GbE Access, but it use wrong ME Point, this can be fix by adjusting the OLT or Hack

Nijika Firmware A port form PON Stick Project

I have ported my PON Stick Project to both hardware, In my spare time, I manage to add OLT Info page and bug fix!

OLT Info
ZTEG/5a544547 (ZTE)

ALCL/414c434c (Alcatel-Lucent/Nokia)

ALCL/414c434c (Alcatel-Lucent/Nokia) by [@jonathanwhm]

As you can see, even on same OLT, the way VLAN is being push, set and manage is different, for example my fiber VLAN400 (VoIP) doesn't exist on LAN1 UNI but only exist on VEIP UNI
This discrepancy among OLT's make many user unable to bridge!

OLT Vendor Id
| ASCII | HEX |
| ALCL | 414c434c |
| FHTT | 46485454 |
| FHTT | 0x00* |
| HWTC | 48575443 |
| UBNT | 55424e54 |
| ZTEG | 5a544547 |
| - | 0x00** |
* FHTT send 0x00 to ONT as allowing other ONT work on FHTT OLT
** Sometime TM use off-brand OLT on Kampung/under-develop area

OLT Issue
On my experience during PON Stick deployment, there are many ME 171 to map. Rank from top (most troublesome)

1. Fiberhome (FHTT) (most troublesome)

QUOTE

A. FHTT doesn't show it's OLT Vendor Id when in Universal Mode, it cause to display as 0x00.
B. Also FHTT push ME 171 varies from customer to customer, mostly are able to bridge until ME 171 become Router Mode which is need a special IGD hack to fool OLT and quietly bridge VLAN 500 to SFP Interface
C. Speed issue are very common on FHTT, It's has lack proper QoS and doesn't have DSCP, wrong ME 277 (Priority Queue) cause speed drop or even worst: 2000Mbps Download, 67Mbps Upload

2. Alcatel-Lucent/Nokia (ALCL)

QUOTE

A. ALCL has very deep ME 171, even it can kill WebGUI, disable LAN Ports even crash the ONT by sending same VLAN on PPTP and VEIP!
B. Bridging VoIP from VEIP to LAN/SFP side can very tricky, but possible to override!
C. First time activation, only one ME 171 profile for you for all ONT you have!
D. ALCL has proper QoS and DSCP, this give user more speed especially upload speed can be max as 1100Mbps!

3. Huawei (HWTC)

QUOTE

A. HWTC have different Forwarding Operation (FwdOp) depend on legal TM ONT, mostly HWTC would use 0x04 or 0x10 for other ONT
B. Bridging VoIP from VEIP to LAN/SFP side can very tricky, but possible to override!
C. Plugging different ONT cause HWTC set different ME 171 profile to match that ONT, as simple fix!

4. ZTE (ZTEG) (least troublesome)

QUOTE

A. ZTEG in Universal is very easy to handle, ME 171 also simple
B. ZTEG has very highest speed performance! Download speed can be max as 2129Mbps! overtake ALCL for Download performance!
C. ZTEG also has proper QoS despite lack DSCP feature!

If you ask me, FHTT is crap to work with! I hate FHTT Priority Queue so much!

Share OLT Status Page
Please update the firmware to correct Hardware A1 or B1, and share your OLT Info just like screenshot above,
This way we here can know which OLT are you on, either troublesome FHTT or awesome ZTEG

Firmware download can be found on next post

Turn D-LINK DPN-FX3060V as ATA/VoIP

Anime4000 — Mon, 23 Oct 2023 01:33:52 +0800

Want to use GPON ONU SFP but want to keep VoIP? No problem, I have done re-search on D-LINK DPN-FX3060V

Now you can enjoy pure 2Gbps+ and working VoIP!

This part of my project user replaceable device
1. Ditch ONU/ONR, use GPON SFP on Business Grade Router and get pure 2Gbps!
2. Ditch Router, use Maxis 4G LTE Backup on other device
3. Ditch Router, use Maxis VoIP on other device
4. Turn D-LINK DPN-FX3060V as ATA This Thread

Step 0
If you haven't setup D-LINK DPN-FX3060V yet, please plug UPC fiber and run setup: use Setup Wizard/Quick Setup and with Default GPON Router first!* Important!

Your PPPoE

Wireless
Do what ever you want, later can bridge WLAN1 & 5 (no NAT)

And put your VoIP Credential

After done setup D-LINK DPN-FX3060V as usual, check VoIP Status, make sure it's show Registered

Step 1
1. After your D-LINK DPN-FX3060V has working internet and VoIP, you can disconnect the UPC fiber and plug back into your GPON ONU SFP
2. Now create VLAN Bridge on your favorite router (Asus ROG Rapture AXE16000 or Mikrotik RB5009)

For Mikrotik user, you can move all VLAN to bridge as parent interface, then sfp-sfpplus1 as bridge member

* this will expose Unifi VLAN into your network, you can use any LAN port easily!
* Plus, you can re-use D-LINK DPN-FX3060V as 2nd NAT Router (via DHCP) or Bridge to LAN Port or WiFi !!!

For non-Mikrotik user (Asus, TP-Link, ...) create a VLAN to specific LAN Port, probably those router do PVID (Tagged to Untagged), thus additional D-LINK DPN-FX3060V configuration is needed by disable VLAN of VoIP at D-LINK DPN-FX3060V

Step 2
1. Login into D-LINK DPN-FX3060V, Disable your PPPoE at Setup -> WAN Mode

2. Then and go to Setup -> WAN Mode -> Select RG Mode

2. Click OK to reboot, because turn this D-Link as normal Router, thus GPON module is disabled
3. LAN 1 of D-LINK DPN-FX3060V as WAN now, plug your LAN cable to WAN

Step 3
1. Once D-LINK DPN-FX3060V is done rebooting, login and verify that VoIP Interface has an IP Address:

2. Verify VoIP is Registered

Now, you have done make D-LINK DPN-FX3060V as ATA Device!

Take note that you may not getting VoIP IP Address as OLT not provisioned to bridge and GPON ONU SFP simply respecting OLT.
Currently I doing testing to override some OMCI just to bridge VoIP as is, more test is needed.

Huhu

Ditch Router, use Maxis VoIP on other device!

Anime4000 — Thu, 17 Feb 2022 22:38:44 +0800

Hi, Finally I can confirm that Maxis VoIP can work on Yealink IP Phone

This part of my project user replaceable device
1. Ditch ONU, use GPON SFP on Business Grade Router
2. Ditch Router, use Maxis 4G LTE Backup on other device
3. Ditch Router, use Maxis VoIP on other device This Thread

This should work on any Maxis on any fiber, however, I tested on TM-Maxis.

TLDR:
Phone ID / Username:
Your Phone ID and Username, it should be same

CODE

0123456789

Password:
Your password, you can find just do Account Number + Last 4 Digit phone number

CODE

00000000006789

SIP Server:
Note: This FQDN routable via Proxy, it will resolved IP Address to 14.192.234.109

CODE

homesip.maxis.com.my

Proxy Server:
Note: This FQDN routable only on Maxis Network (PPPoE, 4G, VLAN), it will resolved IP Address to 202.75.146.26

CODE

homegw01.maxis.com.my

Codec:
Note: using unsupported codec result no incoming or outgoing call

CODE

1. G.711 ALaw (PCMA)
2. G.711 uLaw (PCMU)

Register Expires (sec):

CODE

900

Register Retry Interval (sec):

CODE

DTMF:

CODE

In-Band

User-Agent:
Note: Maxis VoIP only accept valid User-Agent sub-string, without this, you will get Error 405: Method Not Allowed

TP-Link Archer C5v

CODE

TPLINK ARCHER C5V BUILD v1.0_191212-3202049003674

KaonMedia AR2140 (Provided by [@darthobiguan])

CODE

Brcm-Cctk/v2.2.0 M5T SIP Stack/4.1.10.16 1.2.50_r11 <SN>

Aminia MA131 (Provided by [@ruifung])

CODE

MA131 SIP-stdR11448 2.1.13m_20200214 <SN>

As you can see, I highlighting User-Agent in RED! This is the reason your VoIP not work on other place, SIP Server looking specific sub-string before get Authenticated.

Tested Device:
Yealink T21 E2
Configure like this, simple is better
[attachmentid=11095319]

You need change Yealink User-Agent via CFG file, Export, Edit, Import!
[attachmentid=11095291]
[attachmentid=11095301]

NOTE: Yealink custom User-Agent will append like this, not total replace, it may not work in the future.
[attachmentid=11095314]

Tested SoftPhone:
MicroSIP (Windows)
Open MicroSIP and add 1 account like this, then close MicroSIP
[attachmentid=11095315]

Then edit microsip.ini find userAgent= and paste it, like this:
[attachmentid=11095316]

Then open MicroSIP, try call:
[attachmentid=11095320]

3CX PABX
Refer to this shahrul8404 post

FreePBX
Refer to this ruifung post

Android / iOS
So far I didn't find suitable SoftPhone that allow custom User-Agent, if you find one, let me know~

ONU POTS
I tried on HG8240H and HG8240H5, not working even with custom User-Agent, apparently TM OMCI override VLAN 822 IPoE, you can try if TM OMCI not strict as mine here...

Accepted Network
1. VoIP VLAN
2. Maxis PPPoE Internet
3. Maxis 4G/LTE

I have tired on non-Maxis (TIME, Unifi, ) it seem FQDN sgb-cvx1.146.26 are not reachable

SIP ALG
You can use VoIP without VLAN, however, your router must support SIP ALG.
Ubiquiti EdgeRouter having trouble with SIP ALG, you must use VoIP VLAN

What is the reason Unifi provide very slow upload

Anime4000 — Sun, 26 Dec 2021 22:04:05 +0800

What is the reason Unifi provide very slow upload speed?

Story
My friend NAS is dead due to flood, he start off-site backup to my TrueNAS, while saving themselves.
I been monitoring the progress, the transfer are half-way.
The NAS is ruined, send to Data Recovery pros and the disk is beyond recover!

Even with 200Mbps upload takes 4.4 days to complete whole, not to mention that 200Mbps is not 100% all time (TM cheat speedtest to satisfy customer)

---
I write this just to told this story, having a NAS not mean immune to data loss, even with off-site backup in place, still limited to ridiculous Unifi upload speed.

Even with public cloud, still limited to internet speed.

However, I still have my friend backup 6 month ago... you know why...

Unifi cannot reach 192.203.230.10

Anime4000 — Thu, 15 Jul 2021 02:41:35 +0800

I trying to setup my friend home server, some IP Address under Unifi are unreachable.
Especially IP Address begin with 192.*.*.* unreachable.

Address that cannot reached by Unifi:

CODE

198.41.0.4
199.9.14.201
192.33.4.12
199.7.91.13
192.203.230.10
192.5.5.241
192.112.36.4
198.97.190.53
192.36.148.17
192.58.128.30
193.0.14.129
199.7.83.42
202.12.27.33

Also IPv6

CODE

2001:503:ba3e::2:30
2001:500:200::b
2001:500:2::c
2001:500:2d::d
2001:500:a8::e
2001:500:2f::f
2001:500:12::d0d
2001:500:1::53
2001:7fe::53
2001:503:c27::2:30
2001:7fd::1
2001:500:9f::42
2001:dc3::35

There is something wrong with Unifi? or TM disallow that IP Address for some reasons?

PPPoE @ MTU 1500

Anime4000 — Sat, 10 Apr 2021 04:11:24 +0800

I been reading xPON technology especially GPON standards as
Malaysia ISP using it as part of my project GPON Stick ONU SFP

I notice that GPON standards has fixed L2 MTU which is 2000 bytes

I login into my Mikrotik and set MTU to 1508 bytes (Baby Jumbo Frames) on sfp1 and vlan1.621, also set PPPoE MTU to 1500 bytes:
[attachmentid=10837448]

Initiate PPPoE Connection... It works without MRRU (Active Links: 1)!
[attachmentid=10837449]

I just to make sure run a ping MTU test:
[attachmentid=10837450]

Ping MTU test via Windows (1500 - 28):
[attachmentid=10837451]

For me, Maxis Fibre support RFC4638 via imse01.mc_rsh-re0 [F0:1C:2D:22:87:C3]

How about other Fibre ISP?
Can anyone try PPPoE MTU 1500? See which ISP support RFC4638 (you may need router that support)

It is good use Link Local IPv6 for Printer/IoT

Anime4000 — Thu, 25 Mar 2021 23:25:45 +0800

I deploying large quantity HP LaserJet Printer in City Hall.

Firstly, their network has no DHCP, finding unused IP appear to be difficult, scanning for address not guarantee host is online or offline or unused.

After all struggle, I found that Link Local IPv6 become very handy, even survive when factory reset, since it follow EUI64 (IP MAC Address) as far I see.

After that, I connect all AIO Printer using Link Local Address, when accessing WebGUI printer using IPv6 (http://[fe80::dead]) it bypass corporate network to access local device.

Even survive change of Router/Switch/Hub/etc... Even survive change of place in new environment, as long bring same PC's and Printer under same Switch!

It seem using IPv6 make deployment faster, just hard to remember and type hex address.

Question to expert network administrator, it is good practice to use Link Local IPv6 to connect Printer/Scanner/IoT?

High power TX laser can cause burned OLT?

Anime4000 — Sun, 14 Mar 2021 23:38:38 +0800

I tried high power xPON that rated 100KM, Class C+, Rated TX 50dBm on Unifi line.
It's possible that high power xPON laser can cause burn due to wrong rated distance?

Who own this 121.123.204.200 address

Anime4000 — Sat, 06 Mar 2021 00:36:23 +0800

I believe this address (121.123.204.200) own by Maxis
but SSL Certificate being wrong... are ISP can crack Encryption?
[attachmentid=10804421]

Certificate used on that server:

» Click to show Spoiler - click again to hide... «

CODE

GITN Problem Access Microsoft/HP/Dell Update

Anime4000 — Tue, 05 Jan 2021 22:50:17 +0800

as per title, my job to check system health, disk health or any issue,
most importantly Update Windows to latest security patch, also Intel ME/Chipset driver, and End Point Antivirus.

I have trouble to run these update, I have local windows admin account, so I can use VPN and update from Admin sessions, but VPN are not working,

OpenVPN 443 also not working, many foreign server get black-holed

so I use my home VPN (Maxis Home Fiber) under 121.122.0.0/17 and 121.123.0.0/17: not working

is there any technician has been done this job before? how to mitigate this?

Mikrotik RB3011UiAS-RM USB 3.0 SFP 10x Port

Anime4000 — Tue, 22 Dec 2020 12:43:14 +0800

Item(s): Mikrotik RB3011UiAS-RM (Bought from Amazon US)

Package includes: RB3011UiAS-RM, AC Adapter

Price: RM650

Warranty: 1 Year

Dealing method: CoD or Postage J&T

Location: Seremban (Terminal One) or Bangi (Bangi Gateway)

Contact method/details: WhatsApp

---

Item(s) conditions: 9.9/10

Picture:
[attachmentid=10733335]
[attachmentid=10733336]
[attachmentid=10733337]
[attachmentid=10733338]

Reason for sale: Upgrade to more advanced router for self-learning

Mikrotik LAN unable to display Steam LAN Server

Anime4000 — Mon, 14 Dec 2020 19:23:24 +0800

I have several game server running in home, using RB3011UiAS

game server connected at LAN Port 4 while My PC connected at LAN Port 6,

Steam Server Browser unable to show running server unless I use TP-Link Switch, it able to show server list within LAN

Server is running and have player in it, but can see server list/status:
[attachmentid=10723847]

There are any setting need to configure? apparently game use 255.255.255.255 to broadcast, Mikrotik seem unable to accept

Unifi IPv6 is really slow?

Anime4000 — Tue, 01 Dec 2020 23:15:31 +0800

Currently I remote client computer and send large file via HTTP under IPv6, this particular client has 500/200 speed (Unifi free upgrade).
Transferring data within same state, just different ISP.

As my per experience using Streamyx, IPv6 is slow, I thought Unifi will be faster, but, this client downloading under IPv6 and very slow, not even use all my max upload speed.
[attachmentid=10709504]

Can VLAN increase speed? 1Gbps > 2Gbps

Anime4000 — Sun, 06 Sep 2020 13:15:00 +0800

I wondering, will VLAN increase speed on single Gbit Port?
Like, bonding multiple VLAN

» Click to show Spoiler - click again to hide... «

point.putrajaya.my is really that slow?

Anime4000 — Mon, 24 Aug 2020 15:46:35 +0800

How to tell Ubuntu not to choose point.putrajaya.my as default? Really shame to show a slow speed
[attachmentid=10562010]

LG Ultrawide Monitor 34UC79G 34" 2560x1080 144Hz

Anime4000 — Thu, 30 Jul 2020 20:04:50 +0800

Item(s): LG Ultrawide Monitor 34UC79G 34" 2560x1080 144Hz FreeSync

Package includes: Monitor, Stand, Power Adapter, DP, HDMI, USB 3.0 Upstream

Price: RM1700, can slightly nego

Warranty: Registered, ‘till October 2021

Dealing method: COD

Location: Seremban Gateway, Bangi Gateway, nearby places

Contact method/details: WhatsApps to 012-9769422
---

Item(s) conditions: 9/10, this monitor just return from Warranty, LCD Panel is new 10/10. (Only use for test run after warranty)
Reason for Sale: Extra, bought new monitor while waiting from the warranty.

Picture:
[attachmentid=10546239]
[attachmentid=10546240]
[attachmentid=10546242]
[attachmentid=10546244]
[attachmentid=10546246]
[attachmentid=10546248]
[attachmentid=10546250]
[attachmentid=10546253]

Windows 10 Home is Illegal use in Business

Anime4000 — Tue, 21 Jul 2020 18:21:02 +0800

Today Microsoft ambush to my office to inspect pirated Windows 10 activation.

All of my computer is Windows 10 Home that I bought.

They said Windows 10 Home is not allowed in Business Environment, also they offer discount summons if I bought Windows 10 Pro from them.

Which part of EULA mention Windows Home edition is illegal use in Business?

Very loud Cisco 2900 Series & Networking Stuff

Anime4000 — Thu, 16 Jul 2020 23:10:24 +0800

1. Is anyone manage to reduce noise from Cisco 2900 Series Router?

2. Since GPON can split from 1:2, 1:4, 1:8, 1:16, 1:32, ... will GPON speed reduce each split? or maintain same speed with increased latency? (D2488/U1244 Mbps)

2.5Gb Network Switch

Anime4000 — Sun, 05 Jul 2020 21:50:17 +0800

Where I can buy 2.5Gb Network Switch, My PC have 2.5Gb LAN, trying to take advantage 2.5Gb speed from My PC to SSD Server
[attachmentid=10529627]

10Gbps Internet NAT Performance, No IPv6

Anime4000 — Wed, 24 Jun 2020 04:03:59 +0800

As per title and description say...

Currently I was configuring a Business networking, the company subscribe 10Gbps Internet.

Previous network technician was quit, I not sure what happen, I tried to contact and no respond.

The fiber is connected to XG-PON SFP+ Transceiver module via SFP PCIe Card 4X Lane
Router is Ryzen 5 3600 with 64GB RAM, a custom build left by previous tech.
The internet is fine can browse and all, but can't quite able to achieve 10Gbps, as company policy, only IPv4! no IPv6 is allowed (concern about IPv6 able to P2P networking)

Boss request me to get maximum speed, at-least 9Gbps with TCP/IP Overhead.
I wanted to ditch this x86 Router to Real Router that capable 10Gbps NAT.

Here screenshot, I was in RDP sessions:
[attachmentid=10522175]

NOTE:
Without NAT, I can achieve 9Gbps from PC to Router (no outgoing) via iperf3.
Internet connection was under PPPoE. I think PPPoE is the bottleneck?